@frontmcp/sdk 1.7.2 → 1.8.1

package/agent/agent.instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.instance.d.ts","sourceRoot":"","sources":["../../src/agent/agent.instance.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAyC,KAAK,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG5G,OAAO,EACL,YAAY,EACZ,UAAU,EAEV,KAAK,aAAa,EAClB,KAAK,cAAc,EAGnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,WAAW,EAEhB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAEf,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AASnB,OAAO,KAAK,YAAY,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAkBrD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,aAAa,CACxB,QAAQ,SAAS,aAAa,GAAG,aAAa,EAC9C,SAAS,SAAS,cAAc,GAAG,cAAc,EACjD,EAAE,GAAG,YAAY,CAAC;IAAE,WAAW,EAAE,QAAQ,CAAA;CAAE,CAAC,EAC5C,GAAG,GAAG,aAAa,CAAC;IAAE,YAAY,EAAE,SAAS,CAAA;CAAE,CAAC,CAChD,SAAQ,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B,qCAAqC;IACrC,OAAO,CAAC,UAAU,CAAgC;IAElD,yDAAyD;IACzD,OAAO,CAAC,UAAU,CAAmB;IAErC,yEAAyE;IACzE,OAAO,CAAC,UAAU,CAA2B;IAE7C;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAA6B;gBAE1C,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa;cA0BlE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAc3C;;;;;;;;;;;;OAYG;YACW,oBAAoB;IAgClC;;OAEG;YACW,oBAAoB;IAgDlC;;;OAGG;IAEH,OAAO,CAAC,oBAAoB;IA+B5B;;;;;OAKG;YACW,aAAa;IA2B3B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAYpB;;;;;;;;;;;;OAYG;YACW,iBAAiB;IA+B/B;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAyC9B;;;;;OAKG;IACH,OAAO,CAAC,6BAA6B;IAsBrC;;;;;;;OAOG;IACH,eAAe,IAAI,YAAY,GAAG,IAAI;IAQtC,WAAW;;;IAIF,eAAe;IAIxB;;OAEG;IACH,aAAa,IAAI,eAAe,GAAG,IAAI;IAQvC;;;;;;;OAOG;IACM,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC;IAqCtG;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAoB1B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IAmChB,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,aAAa;IAK3D,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,iBAAiB;IAKjE,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,mBAAmB,CAAC,iBAAiB,CAAC;IAQnG;;;;;OAKG;IACM,iBAAiB,IAAI,IAAI;IAyBlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAanB,gBAAgB,IAAI,OAAO;IAI3B,WAAW,IAAI,OAAO;IAItB,kBAAkB,IAAI,MAAM,EAAE;CAGxC"}
+{"version":3,"file":"agent.instance.d.ts","sourceRoot":"","sources":["../../src/agent/agent.instance.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAyC,KAAK,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG5G,OAAO,EACL,YAAY,EACZ,UAAU,EAEV,KAAK,aAAa,EAClB,KAAK,cAAc,EAGnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,WAAW,EAEhB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAEf,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AASnB,OAAO,KAAK,YAAY,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAkBrD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,aAAa,CACxB,QAAQ,SAAS,aAAa,GAAG,aAAa,EAC9C,SAAS,SAAS,cAAc,GAAG,cAAc,EACjD,EAAE,GAAG,YAAY,CAAC;IAAE,WAAW,EAAE,QAAQ,CAAA;CAAE,CAAC,EAC5C,GAAG,GAAG,aAAa,CAAC;IAAE,YAAY,EAAE,SAAS,CAAA;CAAE,CAAC,CAChD,SAAQ,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B,qCAAqC;IACrC,OAAO,CAAC,UAAU,CAAgC;IAElD,yDAAyD;IACzD,OAAO,CAAC,UAAU,CAAmB;IAErC,yEAAyE;IACzE,OAAO,CAAC,UAAU,CAA2B;IAE7C;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAA6B;gBAE1C,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa;cA0BlE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAc3C;;;;;;;;;;;;OAYG;YACW,oBAAoB;IAgClC;;OAEG;YACW,oBAAoB;IAgDlC;;;OAGG;IAEH,OAAO,CAAC,oBAAoB;IA+B5B;;;;;OAKG;YACW,aAAa;IA2B3B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAYpB;;;;;;;;;;;;OAYG;YACW,iBAAiB;IA+B/B;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAyC9B;;;;;OAKG;IACH,OAAO,CAAC,6BAA6B;IAsBrC;;;;;;;OAOG;IACH,eAAe,IAAI,YAAY,GAAG,IAAI;IAQtC,WAAW;;;IAIF,eAAe;IAIxB;;OAEG;IACH,aAAa,IAAI,eAAe,GAAG,IAAI;IAQvC;;;;;;;OAOG;IACM,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC;IAqCtG;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAoB1B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IAmChB,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,aAAa;IAK3D,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,iBAAiB;IAKjE,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,mBAAmB,CAAC,iBAAiB,CAAC;IAQnG;;;;;OAKG;IACM,iBAAiB,IAAI,IAAI;IA+BlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAanB,gBAAgB,IAAI,OAAO;IAI3B,WAAW,IAAI,OAAO;IAItB,kBAAkB,IAAI,MAAM,EAAE;CAGxC"}

package/agent/agent.scope.d.ts

@@ -1,7 +1,7 @@
 import 'reflect-metadata';
 import { type Token, type Type } from '@frontmcp/di';
 import AdapterRegistry from '../adapter/adapter.registry';
-import { FrontMcpLogger, ScopeEntry, type AgentMetadata, type FlowInputOf, type FlowName, type FlowOutputOf, type FlowType } from '../common';
+import { FrontMcpLogger, ScopeEntry, type AgentMetadata, type FlowInputOf, type FlowName, type FlowOutputOf, type FlowType, type FrontMcpAuth } from '../common';
 import HookRegistry from '../hooks/hook.registry';
 import PluginRegistry from '../plugin/plugin.registry';
 import PromptRegistry from '../prompt/prompt.registry';
@@ -69,404 +69,7 @@ export declare class AgentScope {
     get resources(): ResourceRegistry;
     get prompts(): PromptRegistry;
     get agents(): AgentRegistry;
-    get auth(): import("../common").FrontMcpAuth<{
-        mode: "public";
-        sessionTtl: number;
-        anonymousScopes: string[];
-        issuer?: string | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        jwks?: {
-            keys: import("libs/auth/dist/common/jwt.types").JWK[];
-        } | undefined;
-        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-    } | {
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        provider: string;
-        mode: "transparent";
-        expectedAudience?: string | string[] | undefined;
-        requireAudience?: boolean | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | {
-        requireEmail: boolean;
-        anonymousSubject: string;
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        mode: "local";
-        login?: {
-            title?: string | undefined;
-            subtitle?: string | undefined;
-            logoUri?: string | undefined;
-            fields?: Record<string, {
-                type: "text" | "email" | "password" | "select" | "hidden";
-                label?: string | undefined;
-                required?: boolean | undefined;
-                placeholder?: string | undefined;
-                options?: {
-                    value: string;
-                    label: string;
-                }[] | undefined;
-            }> | undefined;
-            render?: ((ctx: import("libs/auth/dist/options/interfaces").LoginRenderContext) => string) | undefined;
-            subject?: {
-                fromField?: string | undefined;
-                strategy?: "per-session" | "per-account" | undefined;
-            } | undefined;
-        } | undefined;
-        authenticate?: import("libs/auth/dist/options/interfaces").AuthenticateFn | undefined;
-        providers?: {
-            id: string;
-            clientId: string;
-            name?: string | undefined;
-            authorizationEndpoint?: string | undefined;
-            authorizeUrl?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            tokenUrl?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            userInfoEndpoint?: string | undefined;
-            jwksUri?: string | undefined;
-        }[] | undefined;
-        dcr?: {
-            enabled?: boolean | undefined;
-            allowedRedirectUris?: string[] | undefined;
-            allowedClientIds?: string[] | undefined;
-            initialAccessToken?: string | undefined;
-            clients?: {
-                clientId: string;
-                redirectUris: string[];
-                tokenEndpointAuthMethod: "none" | "client_secret_basic" | "client_secret_post";
-                grantTypes: ("authorization_code" | "refresh_token")[];
-                responseTypes: "code"[];
-                clientSecret?: string | undefined;
-                clientName?: string | undefined;
-                scope?: string | undefined;
-            }[] | undefined;
-            maxDynamicClients?: number | undefined;
-        } | undefined;
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-    } | {
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        provider: string;
-        mode: "remote";
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    }>;
+    get auth(): FrontMcpAuth;
     get authProviders(): import("../auth/auth.registry").AuthRegistry;
     get apps(): import("../app/app.registry").default;
     get notifications(): import("../notification").NotificationService;

package/agent/agent.scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.scope.d.ts","sourceRoot":"","sources":["../../src/agent/agent.scope.ts"],"names":[],"mappings":"AAEA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAiB,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,eAAe,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EACL,cAAc,EACd,UAAU,EACV,KAAK,aAAa,EAElB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,QAAQ,EACd,MAAM,WAAW,CAAC;AAGnB,OAAO,YAAY,MAAM,wBAAwB,CAAC;AAClD,OAAO,cAAc,MAAM,2BAA2B,CAAC;AACvD,OAAO,cAAc,MAAM,2BAA2B,CAAC;AACvD,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAI7D,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAEjD,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,UAAU;IAyBnB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAxB3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAG3C,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,aAAa,CAAmB;IACxC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,WAAW,CAAiB;IACpC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,UAAU,CAAgB;gBAGhC,WAAW,EAAE,UAAU,EACvB,OAAO,EAAE,MAAM,EACE,QAAQ,EAAE,aAAa,EACxC,UAAU,EAAE,KAAK;YAkBL,UAAU;IAsGxB,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,QAAQ,IAAI,eAAe,CAE9B;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAMD,IAAI,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAEP;IAED,IAAI,aAAa,iDAEhB;IAED,IAAI,IAAI,0CAEP;IAED,IAAI,aAAa,kDAEhB;IAED,IAAI,MAAM,oDAET;IAED,IAAI,MAAM,mDAET;IAED,IAAI,aAAa,sCAEhB;IAMK,aAAa,CAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,OAAO,CAAC,IAAI,SAAS,QAAQ,EAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAIpC,gBAAgB,CAAC,IAAI,SAAS,QAAQ,EAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;CAO/B"}
+{"version":3,"file":"agent.scope.d.ts","sourceRoot":"","sources":["../../src/agent/agent.scope.ts"],"names":[],"mappings":"AAEA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAiB,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,eAAe,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EACL,cAAc,EACd,UAAU,EACV,KAAK,aAAa,EAElB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAGnB,OAAO,YAAY,MAAM,wBAAwB,CAAC;AAClD,OAAO,cAAc,MAAM,2BAA2B,CAAC;AACvD,OAAO,cAAc,MAAM,2BAA2B,CAAC;AACvD,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAI7D,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAEjD,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,UAAU;IAyBnB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAxB3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAG3C,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,aAAa,CAAmB;IACxC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,WAAW,CAAiB;IACpC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,UAAU,CAAgB;gBAGhC,WAAW,EAAE,UAAU,EACvB,OAAO,EAAE,MAAM,EACE,QAAQ,EAAE,aAAa,EACxC,UAAU,EAAE,KAAK;YAkBL,UAAU;IAsGxB,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,QAAQ,IAAI,eAAe,CAE9B;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAMD,IAAI,IAAI,IAAI,YAAY,CAEvB;IAED,IAAI,aAAa,iDAEhB;IAED,IAAI,IAAI,0CAEP;IAED,IAAI,aAAa,kDAEhB;IAED,IAAI,MAAM,oDAET;IAED,IAAI,MAAM,mDAET;IAED,IAAI,aAAa,sCAEhB;IAMK,aAAa,CAAC,GAAG,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,OAAO,CAAC,IAAI,SAAS,QAAQ,EAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAIpC,gBAAgB,CAAC,IAAI,SAAS,QAAQ,EAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;CAO/B"}

package/agent/flows/call-agent.flow.d.ts

@@ -240,6 +240,7 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>>;
     semaphoreTicket: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodAny>;
+    abandonedExecution: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodInstanceOf<Promise<unknown>>>;
 }, import("zod/v4/core").$strip>;
 declare const plan: {
     readonly pre: ["parseInput", "findAgent", "checkEntryAuthorities", "checkAgentAuthorization", "createAgentContext", "acquireQuota", "acquireSemaphore"];

package/agent/flows/call-agent.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent.flow.d.ts","sourceRoot":"","sources":["../../../src/agent/flows/call-agent.flow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAA+C,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEhG,OAAO,EACL,YAAY,EACZ,UAAU,EAEV,QAAQ,EAGR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAetB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAuB,CAAC;AAE1C,QAAA,MAAM,WAAW;;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4BnD,CAAC;AAMH,QAAA,MAAM,IAAI;;;;CAY2B,CAAC;AAMtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,mBAAmB,EAAE,cAAc,CACjC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,mBAA4B,CAAC;AAc1C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAEjD;;OAEG;IAEG,UAAU;IAmDhB;;OAEG;IAEG,SAAS;IA0Cf;;;;OAIG;IAEG,qBAAqB;IAsD3B;;OAEG;IAEG,uBAAuB;IAuC7B;;OAEG;IAEG,kBAAkB;IAqDxB;;OAEG;IAEG,YAAY;IAoClB;;OAEG;IAEG,gBAAgB;IAqCtB;;OAEG;IAEG,aAAa;IAsBnB;;OAEG;IAEG,OAAO;IA6Cb;;OAEG;IAEG,cAAc;IAcpB;;OAEG;IAEG,gBAAgB;IAetB;;OAEG;IAEG,YAAY;IAOlB;;;;;;;;;OASG;IAEG,QAAQ;CAsEf"}
+{"version":3,"file":"call-agent.flow.d.ts","sourceRoot":"","sources":["../../../src/agent/flows/call-agent.flow.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAA+C,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEhG,OAAO,EAEL,YAAY,EACZ,UAAU,EAGV,QAAQ,EAIR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAgBtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAuB,CAAC;AAE1C,QAAA,MAAM,WAAW;;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA8BnD,CAAC;AAMH,QAAA,MAAM,IAAI;;;;CAY2B,CAAC;AAMtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,mBAAmB,EAAE,cAAc,CACjC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,mBAA4B,CAAC;AAc1C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAEjD;;OAEG;IAEG,UAAU;IAmDhB;;OAEG;IAEG,SAAS;IA0Cf;;;;OAIG;IAEG,qBAAqB;IAoD3B;;OAEG;IAEG,uBAAuB;IAuC7B;;OAEG;IAEG,kBAAkB;IAoCxB;;OAEG;IAEG,YAAY;IAgClB;;OAEG;IAEG,gBAAgB;IAwBtB;;OAEG;IAEG,aAAa;IAsBnB;;OAEG;IAEG,OAAO;IAyCb;;OAEG;IAEG,cAAc;IAcpB;;OAEG;IAEG,gBAAgB;IAqBtB;;OAEG;IAEG,YAAY;IAOlB;;;;;;;;;OASG;IAEG,QAAQ;CAsEf"}

package/app/instances/app.local.instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.local.instance.d.ts","sourceRoot":"","sources":["../../../src/app/instances/app.local.instance.ts"],"names":[],"mappings":"AAEA,OAAO,eAAe,MAAM,gCAAgC,CAAC;AAC7D,OAAO,aAAa,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAkB,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,cAAwC,MAAM,8BAA8B,CAAC;AACpF,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,gBAAgB,MAAM,kCAAkC,CAAC;AAChE,OAAO,gBAAgB,MAAM,kCAAkC,CAAC;AAChE,OAAO,aAAa,MAAM,4BAA4B,CAAC;AACvD,OAAO,YAAY,MAAM,0BAA0B,CAAC;AAEpD,qBAAa,gBAAiB,SAAQ,QAAQ,CAAC,gBAAgB,CAAC;IAC9D,SAAkB,EAAE,EAAE,MAAM,CAAC;IAE7B,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,UAAU,CAAiB;IACnC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,UAAU,CAAiB;IACnC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAiB;gBAEpB,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB;cAY/C,UAAU;IAoE1B,IAAI,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAE1C;IAED,IAAI,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,CAExC;IAED,IAAI,OAAO,IAAI,QAAQ,CAAC,cAAc,CAAC,CAEtC;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,CAEpC;IAED,IAAI,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,CAEpC;CACF"}
+{"version":3,"file":"app.local.instance.d.ts","sourceRoot":"","sources":["../../../src/app/instances/app.local.instance.ts"],"names":[],"mappings":"AAEA,OAAO,eAAe,MAAM,gCAAgC,CAAC;AAC7D,OAAO,aAAa,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAkB,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE/F,OAAO,cAAwC,MAAM,8BAA8B,CAAC;AACpF,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,gBAAgB,MAAM,kCAAkC,CAAC;AAChE,OAAO,gBAAgB,MAAM,kCAAkC,CAAC;AAChE,OAAO,aAAa,MAAM,4BAA4B,CAAC;AACvD,OAAO,YAAY,MAAM,0BAA0B,CAAC;AAEpD,qBAAa,gBAAiB,SAAQ,QAAQ,CAAC,gBAAgB,CAAC;IAC9D,SAAkB,EAAE,EAAE,MAAM,CAAC;IAE7B,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,UAAU,CAAiB;IACnC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,UAAU,CAAiB;IACnC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAiB;gBAEpB,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB;cAY/C,UAAU;IA6E1B,IAAI,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAE1C;IAED,IAAI,QAAQ,IAAI,QAAQ,CAAC,eAAe,CAAC,CAExC;IAED,IAAI,OAAO,IAAI,QAAQ,CAAC,cAAc,CAAC,CAEtC;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,CAEpC;IAED,IAAI,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,CAEpC;CACF"}

package/app/remote-capabilities.utils.d.ts

@@ -0,0 +1,4 @@
+import { type ScopeEntry } from '../common';
+/** Loads the capabilities of every remote app, including apps of parent scopes, and returns how many there are. */
+export declare function loadRemoteAppCapabilities(scope: ScopeEntry, onError?: (appId: string, error: Error) => void): Promise<number>;
+//# sourceMappingURL=remote-capabilities.utils.d.ts.map

package/app/remote-capabilities.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-capabilities.utils.d.ts","sourceRoot":"","sources":["../../src/app/remote-capabilities.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,mHAAmH;AACnH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAsB,GAC/D,OAAO,CAAC,MAAM,CAAC,CAgBjB"}

package/auth/auth.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.registry.d.ts","sourceRoot":"","sources":["../../src/auth/auth.registry.ts"],"names":[],"mappings":"AACA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAyC,KAAK,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAGzG,OAAO,EAEL,YAAY,EASZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAGlB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAa5E,qBAAa,YAAa,SAAQ,gBAAgB,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IAC3G,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IAEtC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAEhD;;OAEG;IACH,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;gBAGtC,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,gBAAgB,EAC3B,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,KAAK,EAAE,aAAa,EACpB,YAAY,CAAC,EAAE,gBAAgB;IA6CjC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,OAAO,CAAC,cAAc;IA0BtB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;cA4BN,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;IAgBjG,SAAS,CAAC,UAAU;cAqBJ,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3C,UAAU,IAAI,YAAY;IAO1B,gBAAgB,IAAI,iBAAiB,EAAE;CAGxC"}
+{"version":3,"file":"auth.registry.d.ts","sourceRoot":"","sources":["../../src/auth/auth.registry.ts"],"names":[],"mappings":"AACA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAyC,KAAK,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAGzG,OAAO,EAEL,YAAY,EAUZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAGlB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAa5E,qBAAa,YAAa,SAAQ,gBAAgB,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IAC3G,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IAEtC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAEhD;;OAEG;IACH,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;gBAGtC,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,gBAAgB,EAC3B,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,KAAK,EAAE,aAAa,EACpB,YAAY,CAAC,EAAE,gBAAgB;IA6CjC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,OAAO,CAAC,cAAc;IA0BtB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;cAqCN,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;IAgBjG,SAAS,CAAC,UAAU;cAqBJ,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3C,UAAU,IAAI,YAAY;IAO1B,gBAAgB,IAAI,iBAAiB,EAAE;CAGxC"}

package/auth/flows/oauth.auth-ui.flow.d.ts

@@ -25,15 +25,15 @@ declare const extraOutputSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
     }, import("zod/v4/core").$strip>>>>;
 }, import("zod/v4/core").$strip>;
 declare const extraPlan: {
-    readonly pre: ["parseInput"];
+    readonly pre: ["checkIpFilter", "parseInput"];
     readonly execute: ["handleExtra"];
 };
 declare global {
@@ -44,6 +44,7 @@ declare global {
 declare const extraName: "oauth:auth-ui-extra";
 export default class OauthAuthUiExtraFlow extends FlowBase<typeof extraName> {
     private logger;
+    checkIpFilter(): Promise<void>;
     parseInput(): Promise<void>;
     handleExtra(): Promise<void>;
     /** Verify the extra's CSRF token against the pending record + registry. */

package/auth/flows/oauth.auth-ui.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.auth-ui.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.auth-ui.flow.ts"],"names":[],"mappings":"AAyBA,OAAO,EAEL,QAAQ,EAMR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAQtB,QAAA,MAAM,gBAAgB;;;;gCAAkB,CAAC;AACzC,QAAA,MAAM,gBAAgB;;;;;gCAKpB,CAAC;AACH,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEzC,QAAA,MAAM,SAAS;;;CAGsB,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,oBAAoB,EACpB,OAAO,SAAS,EAChB,OAAO,gBAAgB,EACvB,OAAO,iBAAiB,EACxB,OAAO,gBAAgB,CACxB,CAAC;KACH;CACF;AAED,QAAA,MAAM,SAAS,EAAG,qBAA8B,CAAC;AAcjD,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,QAAQ,CAAC,OAAO,SAAS,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAmD;IAG3D,UAAU;IA6BV,WAAW;IA2BjB,2EAA2E;YAC7D,eAAe;CAkB9B"}
+{"version":3,"file":"oauth.auth-ui.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.auth-ui.flow.ts"],"names":[],"mappings":"AAyBA,OAAO,EAGL,QAAQ,EAMR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAQtB,QAAA,MAAM,gBAAgB;;;;gCAAkB,CAAC;AACzC,QAAA,MAAM,gBAAgB;;;;;gCAKpB,CAAC;AACH,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEzC,QAAA,MAAM,SAAS;;;CAGsB,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,oBAAoB,EACpB,OAAO,SAAS,EAChB,OAAO,gBAAgB,EACvB,OAAO,iBAAiB,EACxB,OAAO,gBAAgB,CACxB,CAAC;KACH;CACF;AAED,QAAA,MAAM,SAAS,EAAG,qBAA8B,CAAC;AAcjD,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,QAAQ,CAAC,OAAO,SAAS,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAmD;IAG3D,aAAa;IAKb,UAAU;IA6BV,WAAW;IA2BjB,2EAA2E;YAC7D,eAAe;CAkB9B"}

package/auth/flows/oauth.authorize.flow.d.ts

@@ -114,8 +114,8 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -135,8 +135,8 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -154,8 +154,8 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -164,7 +164,7 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
     contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodLiteral<"text/html; charset=utf-8">>;
 }, import("zod/v4/core").$strip>]>;
 declare const plan: {
-    readonly pre: ["parseInput", "validateInput", "checkIfAuthorized"];
+    readonly pre: ["checkIpFilter", "parseInput", "validateInput", "checkIfAuthorized"];
     readonly execute: ["prepareAuthorizationRequest", "buildAuthorizeOutput"];
     readonly post: ["validateOutput"];
 };
@@ -184,6 +184,7 @@ export default class OauthAuthorizeFlow extends FlowBase<typeof name> {
      */
     private resolveIssuer;
     private logger;
+    checkIpFilter(): Promise<void>;
     parseInput(): Promise<void>;
     validateInput(): Promise<void>;
     /**

package/auth/flows/oauth.authorize.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.authorize.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.authorize.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH;;;;;;GAMG;AACH,OAAO,EAaL,KAAK,4BAA4B,EAIlC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,CAAC,EAAiB,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAGL,QAAQ,EAWR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAwEtB;;GAEG;AACH,QAAA,MAAM,2BAA2B;;;;;;;;;gCAS/B,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,+BAA+B;;;gCAGnC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAMxF,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAuCf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAIhB,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAQ2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,iBAAiB,EAAE,cAAc,CAC/B,kBAAkB,EAClB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,iBAA0B,CAAC;AAkCxC,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IACnE;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,MAAM,CAAiD;IAGzD,UAAU;IAwGV,aAAa;IA2KnB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IAiBzB,iBAAiB;IASjB,2BAA2B;IA0I3B,oBAAoB;IAiL1B;;;;;;;;;OASG;YACW,mBAAmB;IA4CjC;;;;;;;;;;;;;;;OAeG;YACW,qBAAqB;IAsE7B,cAAc;IAIpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IAkBzB;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAuBxB;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IA+BvB;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyBjC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA2BhC;;OAEG;IACH,OAAO,CAAC,eAAe;CAyCxB"}
+{"version":3,"file":"oauth.authorize.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.authorize.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH;;;;;;GAMG;AACH,OAAO,EAaL,KAAK,4BAA4B,EAIlC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,CAAC,EAAiB,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAIL,QAAQ,EAWR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAwEtB;;GAEG;AACH,QAAA,MAAM,2BAA2B;;;;;;;;;gCAS/B,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,+BAA+B;;;gCAGnC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAMxF,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAuCf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAIhB,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAS2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,iBAAiB,EAAE,cAAc,CAC/B,kBAAkB,EAClB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,iBAA0B,CAAC;AAkCxC,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IACnE;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,MAAM,CAAiD;IAGzD,aAAa;IAKb,UAAU;IAwGV,aAAa;IA2KnB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IAiBzB,iBAAiB;IASjB,2BAA2B;IAsJ3B,oBAAoB;IAiL1B;;;;;;;;;OASG;YACW,mBAAmB;IA4CjC;;;;;;;;;;;;;;;OAeG;YACW,qBAAqB;IAsE7B,cAAc;IAIpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IAkBzB;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAuBxB;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IA+BvB;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyBjC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA2BhC;;OAEG;IACH,OAAO,CAAC,eAAe;CAyCxB"}

package/auth/flows/oauth.callback.flow.d.ts

@@ -65,8 +65,8 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -84,8 +84,8 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -94,7 +94,7 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [impo
     contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodLiteral<"text/html; charset=utf-8">>;
 }, import("zod/v4/core").$strip>]>;
 declare const plan: {
-    readonly pre: ["parseInput", "validatePendingAuth"];
+    readonly pre: ["checkIpFilter", "parseInput", "validatePendingAuth"];
     readonly execute: ["handleIncrementalAuth", "handleFederatedAuth", "createAuthorizationCode", "redirectToClient"];
 };
 declare global {
@@ -113,6 +113,7 @@ export default class OauthCallbackFlow extends FlowBase<typeof name> {
      * `iss` treats absence as "not supported" and proceeds.
      */
     private resolveIssuer;
+    checkIpFilter(): Promise<void>;
     parseInput(): Promise<void>;
     validatePendingAuth(): Promise<void>;
     /**

package/auth/flows/oauth.callback.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.callback.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.callback.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAgBH,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,EAEL,QAAQ,EAQR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAKtB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA2Df,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAAgD,CAAC;AAEnE,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,iBAAiB,EACjB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAcvC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,MAAM,CAAgD;IAE9D;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAMf,UAAU;IA4EV,mBAAmB;IAsZzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IAEG,qBAAqB;IA2D3B;;;;;;OAMG;IAEG,mBAAmB;IAiInB,uBAAuB;IA2GvB,gBAAgB;IA8CtB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAqB1C;IAEH;;;;;OAKG;IACH;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAYrB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IA4B/B,OAAO,CAAC,kBAAkB;IAsB1B;;;;OAIG;YACW,eAAe;IAgC7B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAQpB;;;;OAIG;YACW,iBAAiB;IAoB/B;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;;;;;;;OAQG;YACW,sBAAsB;IA0EpC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IA8D3B;;;OAGG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAqDxB"}
+{"version":3,"file":"oauth.callback.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.callback.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAgBH,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,EAGL,QAAQ,EAQR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAKtB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA2Df,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAAgD,CAAC;AAEnE,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,iBAAiB,EACjB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAcvC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,MAAM,CAAgD;IAE9D;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAMf,aAAa;IAKb,UAAU;IA4EV,mBAAmB;IAsZzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IAEG,qBAAqB;IA2D3B;;;;;;OAMG;IAEG,mBAAmB;IAiInB,uBAAuB;IA2GvB,gBAAgB;IA8CtB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAqB1C;IAEH;;;;;OAKG;IACH;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAYrB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IA4B/B,OAAO,CAAC,kBAAkB;IAsB1B;;;;OAIG;YACW,eAAe;IAgC7B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAQpB;;;;OAIG;YACW,iBAAiB;IAoB/B;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;;;;;;;OAQG;YACW,sBAAsB;IA0EpC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IA8D3B;;;OAGG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAqDxB"}

package/auth/flows/oauth.connect.flow.d.ts

@@ -40,8 +40,8 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -50,7 +50,7 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
     contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodLiteral<"text/html; charset=utf-8">>;
 }, import("zod/v4/core").$strip>;
 declare const plan: {
-    readonly pre: ["parseInput"];
+    readonly pre: ["checkIpFilter", "parseInput"];
     readonly execute: ["handleConnect"];
 };
 declare global {
@@ -61,6 +61,7 @@ declare global {
 declare const name: "oauth:connect";
 export default class OauthConnectFlow extends FlowBase<typeof name> {
     private logger;
+    checkIpFilter(): Promise<void>;
     parseInput(): Promise<void>;
     handleConnect(): Promise<void>;
     /** Verify the signed resume token against the server secret (constant-time + expiry). */