@frontmcp/sdk 1.8.0 → 1.8.1

package/common/types/options/outbound-fetch/interfaces.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Controls what `this.fetch()` adds to requests a tool, resource or prompt sends upstream.
+ *
+ * The MCP authorization spec forbids passing the token a client sent to this server on to
+ * other services, so the caller's token and its `x-frontmcp-*` headers are only sent to
+ * the origins listed here.
+ */
+export interface OutboundFetchOptionsInterface {
+    /**
+     * Origins (for example `https://api.internal.example`) that may receive the caller's
+     * MCP access token as `Authorization: Bearer …`. List only services that accept this
+     * server's own tokens. Use `credentials: { provider }` for any other upstream.
+     * @default []
+     */
+    forwardCallerTokenTo?: string[];
+    /**
+     * Origins that may receive the incoming request's `x-frontmcp-*` headers.
+     * @default []
+     */
+    forwardCustomHeadersTo?: string[];
+    /**
+     * Add `traceparent` and `x-request-id` to outgoing requests.
+     * @default true
+     */
+    autoInjectTracingHeaders?: boolean;
+    /**
+     * Timeout in milliseconds for requests that do not pass their own `signal`.
+     * @default 30000
+     */
+    requestTimeout?: number;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/common/types/options/outbound-fetch/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/outbound-fetch/interfaces.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAElC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/common/types/options/outbound-fetch/schema.d.ts

@@ -0,0 +1,19 @@
+import { z } from '@frontmcp/lazy-zod';
+/**
+ * Zod schema for OutboundFetchOptions.
+ */
+export declare const outboundFetchOptionsSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    forwardCallerTokenTo: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("zod").ZodPipe<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodTransform<string, string>>>>>;
+    forwardCustomHeadersTo: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("zod").ZodPipe<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodTransform<string, string>>>>>;
+    autoInjectTracingHeaders: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
+    requestTimeout: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+}, import("zod/v4/core").$strip>;
+/**
+ * Outbound fetch options type (with defaults applied).
+ */
+export type OutboundFetchOptions = z.infer<typeof outboundFetchOptionsSchema>;
+/**
+ * Outbound fetch options input type (for user configuration).
+ */
+export type OutboundFetchOptionsInput = z.input<typeof outboundFetchOptionsSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/common/types/options/outbound-fetch/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/outbound-fetch/schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAWvC;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;gCAKgB,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/common/types/options/skills-http/interfaces.d.ts

@@ -269,10 +269,11 @@ export interface SkillsConfigOptions {
     mcpResources?: boolean;
     /**
      * SEP-2640 §Discovery — opt-in inclusion of skill URIs in the server's
-     * `instructions` field. When `true`, the transport adapter prepends a
+     * `instructions` field. When `true`, the transport adapter adds a
      * short "Available skills:" block listing each MCP-visible skill's
      * `skill://` URI so models that only see server instructions can still
-     * find them.
+     * find them. Ignored when `mcpResources` is false, since those URIs would
+     * not resolve.
      *
      * @default false (opt-in to keep the instructions field lean by default)
      */

package/common/types/options/skills-http/interfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/skills-http/interfaces.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAE5B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB;;;;;;;;;;;;;;;;;OAiBG;IACH,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAE7B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAE9C;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAElD;;;;;;;;;;;;;;;OAeG;IACH,GAAG,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAE3C;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAE9D;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QACN,0BAA0B;QAC1B,QAAQ,EAAE,OAAO,GAAG,WAAW,GAAG,YAAY,CAAC;QAC/C,iBAAiB;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,iBAAiB;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,qBAAqB;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,4BAA4B;QAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IAEF;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/skills-http/interfaces.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAE5B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB;;;;;;;;;;;;;;;;;OAiBG;IACH,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAE7B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAE9C;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAElD;;;;;;;;;;;;;;;OAeG;IACH,GAAG,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAE3C;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;;;;;;OASG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAE9D;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QACN,0BAA0B;QAC1B,QAAQ,EAAE,OAAO,GAAG,WAAW,GAAG,YAAY,CAAC;QAC/C,iBAAiB;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,iBAAiB;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,qBAAqB;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,4BAA4B;QAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IAEF;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/common/types/options/skills-http/schema.d.ts

@@ -4,10 +4,10 @@ import type { SkillsConfigAuthMode, SkillsConfigOptions as SkillsConfigOptionsIn
  * Authentication mode schema for skills HTTP endpoints.
  */
 export declare const skillsConfigAuthModeSchema: import("@frontmcp/lazy-zod").ZodEnum<{
-    inherit: "inherit";
     public: "public";
-    "api-key": "api-key";
     bearer: "bearer";
+    inherit: "inherit";
+    "api-key": "api-key";
 }>;
 /**
  * Endpoint configuration schema (simplified - no auth, just enabled and path).
@@ -59,9 +59,9 @@ export declare const skillsConfigAuditOptionsSchema: import("@frontmcp/lazy-zod"
     signer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
     store: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
     subjectMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
-        plain: "plain";
-        hash: "hash";
         omit: "omit";
+        hash: "hash";
+        plain: "plain";
     }>>;
     headAnchorIntervalMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
 }, import("zod/v4/core").$strip>;
@@ -73,10 +73,10 @@ export declare const skillsConfigOptionsSchema: import("@frontmcp/lazy-zod").Zod
     enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
     prefix: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     auth: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
-        inherit: "inherit";
         public: "public";
-        "api-key": "api-key";
         bearer: "bearer";
+        inherit: "inherit";
+        "api-key": "api-key";
     }>>>;
     apiKeys: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
     jwt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
@@ -119,9 +119,9 @@ export declare const skillsConfigOptionsSchema: import("@frontmcp/lazy-zod").Zod
         signer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
         store: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
         subjectMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
-            plain: "plain";
-            hash: "hash";
             omit: "omit";
+            hash: "hash";
+            plain: "plain";
         }>>;
         headAnchorIntervalMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
     }, import("zod/v4/core").$strip>>;

package/common/types/options/transport/index.d.ts

@@ -1,4 +1,4 @@
 export type { TransportOptionsInterface, TransportOptionsInput, ProtocolConfig, ProtocolPreset, PersistenceConfig, EventStoreConfig, SessionMode, SessionModeOption, PlatformMappingEntry, PlatformDetectionConfig, DistributedEnabled, } from './interfaces';
-export { transportOptionsSchema, persistenceConfigSchema, eventStoreConfigSchema, PROTOCOL_PRESETS, expandProtocolConfig, toLegacyProtocolFlags, isDistributedMode, shouldCacheProviders, expandTransportConfig, } from './schema';
-export type { TransportOptions, TransportPersistenceConfig, TransportPersistenceConfigInput, PlatformDetectionConfigType, DistributedConfigInput, LegacyProtocolFlags, ExpandedTransportConfig, } from './schema';
+export { transportOptionsSchema, persistenceConfigSchema, eventStoreConfigSchema, PROTOCOL_PRESETS, expandProtocolConfig, isDistributedMode, shouldCacheProviders, } from './schema';
+export type { TransportOptions, TransportPersistenceConfig, TransportPersistenceConfigInput, PlatformDetectionConfigType, DistributedConfigInput, } from './schema';
 //# sourceMappingURL=index.d.ts.map

package/common/types/options/transport/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/transport/index.ts"],"names":[],"mappings":"AAMA,YAAY,EAEV,yBAAyB,EACzB,qBAAqB,EAErB,cAAc,EACd,cAAc,EAEd,iBAAiB,EAEjB,gBAAgB,EAEhB,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EAEvB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAKtB,OAAO,EAEL,sBAAsB,EAEtB,uBAAuB,EACvB,sBAAsB,EAEtB,gBAAgB,EAEhB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAElB,YAAY,EAEV,gBAAgB,EAChB,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,EAEtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/transport/index.ts"],"names":[],"mappings":"AAMA,YAAY,EAEV,yBAAyB,EACzB,qBAAqB,EAErB,cAAc,EACd,cAAc,EAEd,iBAAiB,EAEjB,gBAAgB,EAEhB,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EAEvB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAKtB,OAAO,EAEL,sBAAsB,EAEtB,uBAAuB,EACvB,sBAAsB,EAEtB,gBAAgB,EAEhB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,YAAY,EAEV,gBAAgB,EAChB,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,UAAU,CAAC"}

package/common/types/options/transport/schema.d.ts

@@ -27,6 +27,17 @@ export declare const PROTOCOL_PRESETS: Record<ProtocolPreset, Required<ProtocolC
  * ```
  */
 export declare function expandProtocolConfig(protocol: ProtocolPreset | ProtocolConfig | undefined): Required<ProtocolConfig>;
+/**
+ * Protocol flags in the format decide-request-intent.utils.ts reads.
+ */
+export interface LegacyProtocolFlags {
+    enableLegacySSE: boolean;
+    enableSseListener: boolean;
+    enableStreamableHttp: boolean;
+    enableStatelessHttp: boolean;
+    enableStatefulHttp: boolean;
+    requireSessionForStreamable: boolean;
+}
 /**
  * Simplified persistence config — no explicit 'enabled' flag (issue #401).
  * - `false`: Explicitly disable persistence (wins over auto-enable).

package/common/types/options/transport/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/transport/schema.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAMvC,OAAO,EAAE,6BAA6B,EAAkD,MAAM,YAAY,CAAC;AAK3G,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EAC1B,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,yBAAyB,EACzB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,CAAC;AAMF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,CAoD7E,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC,cAAc,CAAC,CAoBpH;AAgED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAShC,CAAC;AAML;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCASjC,CAAC;AAMH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA0DgB,CAAC;AAMpD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEjF;;GAEG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEtF;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMxF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAU/E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,CAAC,EAAE,kBAAkB,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAQ7G"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/transport/schema.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAMvC,OAAO,EAAE,6BAA6B,EAAkD,MAAM,YAAY,CAAC;AAK3G,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EAC1B,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,yBAAyB,EACzB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,CAAC;AAMF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,CAoD7E,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC,cAAc,CAAC,CAoBpH;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,2BAA2B,EAAE,OAAO,CAAC;CACtC;AA+CD;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAShC,CAAC;AAML;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCASjC,CAAC;AAMH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA0DgB,CAAC;AAMpD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEjF;;GAEG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEtF;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMxF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAU/E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,CAAC,EAAE,kBAAkB,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAQ7G"}

package/common/utils/auth-info.utils.d.ts

@@ -0,0 +1,26 @@
+import type { Authorization } from '../types/auth/session.types';
+/**
+ * The MCP `AuthInfo` shape every entry point hands to handlers and tools for a
+ * verified authorization: claims under top-level `user` (read by `this.auth` and
+ * authorities) and under `extra.user`, and the token's granted `scopes`.
+ */
+export interface AuthorizationAuthInfo {
+    token: string;
+    clientId: string | undefined;
+    scopes: string[];
+    expiresAt: number | undefined;
+    user: Authorization['user'];
+    extra: {
+        user: Authorization['user'];
+        sessionId: string | undefined;
+        sessionPayload: NonNullable<Authorization['session']>['payload'];
+    };
+}
+/**
+ * Project a verified authorization to its `AuthInfo`.
+ *
+ * @param authorization - The authorization the auth stage verified
+ * @returns The request's auth info
+ */
+export declare function authInfoFromAuthorization(authorization: Authorization): AuthorizationAuthInfo;
+//# sourceMappingURL=auth-info.utils.d.ts.map

package/common/utils/auth-info.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-info.utils.d.ts","sourceRoot":"","sources":["../../../src/common/utils/auth-info.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,EAAE;QACL,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KAClE,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,aAAa,GAAG,qBAAqB,CAe7F"}

package/common/utils/decide-request-intent.utils.d.ts

@@ -1,5 +1,5 @@
 import { type ServerRequest } from '../interfaces';
-import { type LegacyProtocolFlags } from '../types';
+import { type LegacyProtocolFlags } from '../types/options/transport/schema';
 export declare const intentSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"legacy-sse">, import("@frontmcp/lazy-zod").ZodLiteral<"sse">, import("@frontmcp/lazy-zod").ZodLiteral<"streamable-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateful-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless-http">, import("@frontmcp/lazy-zod").ZodLiteral<"delete-session">, import("@frontmcp/lazy-zod").ZodLiteral<"mcp-20260728">, import("@frontmcp/lazy-zod").ZodLiteral<"unknown">]>;
 export declare const decisionSchema: import("@frontmcp/lazy-zod").ZodObject<{
     intent: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"legacy-sse">, import("@frontmcp/lazy-zod").ZodLiteral<"sse">, import("@frontmcp/lazy-zod").ZodLiteral<"streamable-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateful-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless-http">, import("@frontmcp/lazy-zod").ZodLiteral<"delete-session">, import("@frontmcp/lazy-zod").ZodLiteral<"mcp-20260728">, import("@frontmcp/lazy-zod").ZodLiteral<"unknown">]>;

package/common/utils/decide-request-intent.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decide-request-intent.utils.d.ts","sourceRoot":"","sources":["../../../src/common/utils/decide-request-intent.utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAIpD,eAAO,MAAM,YAAY,kfAYvB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;gCAiBzB,CAAC;AAEH,MAAM,MAAM,iBAAiB,GACzB,YAAY,GACZ,KAAK,GACL,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEnD,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAEzD,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,MAAO,SAAQ,mBAAmB;IACjD,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAuWD,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAsDtE;AAID;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,wBAAgB,2BAA2B,CACzC,YAAY,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,GAAG,SAAS,EAC1F,kBAAkB,EAAE,MAAM,GAAG,SAAS,GACrC,0BAA0B,CAS5B"}
+{"version":3,"file":"decide-request-intent.utils.d.ts","sourceRoot":"","sources":["../../../src/common/utils/decide-request-intent.utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAI7E,eAAO,MAAM,YAAY,kfAYvB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;gCAiBzB,CAAC;AAEH,MAAM,MAAM,iBAAiB,GACzB,YAAY,GACZ,KAAK,GACL,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEnD,MAAM,MAAM,QAAQ,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAEzD,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,MAAO,SAAQ,mBAAmB;IACjD,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAuWD,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAsDtE;AAID;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,wBAAgB,2BAA2B,CACzC,YAAY,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,GAAG,SAAS,EAC1F,kBAAkB,EAAE,MAAM,GAAG,SAAS,GACrC,0BAA0B,CAS5B"}

package/common/utils/guard.utils.d.ts

@@ -0,0 +1,57 @@
+import { type ConcurrencyConfig, type GuardManager, type PartitionKey, type PartitionKeyContext, type SemaphoreTicket } from '@frontmcp/guard';
+import type { ScopeEntry } from '../entries/scope.entry';
+import { type HttpOutput } from '../schemas/http-output.schema';
+/** The body a non-JSON-RPC route answers when `throttle.ipFilter` rejects the caller. */
+export declare const IP_FILTER_REJECTION_BODY: {
+    readonly error: "forbidden";
+    readonly message: "Client IP rejected by ipFilter";
+};
+/** Answer 403 from the `checkIpFilter` stage every HTTP-facing flow starts with (GHSA-hwfp-xv2f-fr8g). */
+export declare function enforceIpFilter(scope: Pick<ScopeEntry, 'rateLimitManager' | 'logger'>, clientIp: string | undefined, buildRejection?: () => HttpOutput): void;
+/**
+ * Context-store key the `http:request` flow sets once it has checked `throttle.global`
+ * for a request, so the tool and agent flows don't count the same request again.
+ */
+export declare const GLOBAL_RATE_LIMIT_CHECKED: unique symbol;
+/**
+ * The request identity a guard partition is resolved from.
+ */
+export interface PartitionSource {
+    sessionId: string;
+    metadata?: {
+        clientIp?: string;
+    };
+    authInfo?: {
+        clientId?: unknown;
+        sessionId?: unknown;
+        extra?: {
+            sessionId?: unknown;
+        };
+    };
+}
+/**
+ * The guard partition context for a request.
+ *
+ * Only a session the server verified is a partition: the client picks the `mcp-session-id`
+ * it sends, and a request without one gets a per-request placeholder (`anon:…`), so keying on
+ * either would give each request a fresh budget. Other requests fall back to the signed-in
+ * user, or to one shared `anonymous` partition. An anonymous subject is never a user id.
+ */
+export declare function buildPartitionContext(source: PartitionSource | undefined): PartitionKeyContext | undefined;
+/**
+ * Whether a partition is keyed on the caller's identity, which is known only once the
+ * request is authorized.
+ */
+export declare function partitionsByIdentity(partitionBy: PartitionKey | undefined): boolean;
+/**
+ * Take a slot from `throttle.globalConcurrency` and from the entity's own limit (its
+ * `concurrency`, else `throttle.defaultConcurrency`). A nested call (`skipGlobal`) runs inside
+ * its caller's global slot, so it takes only its own.
+ *
+ * @returns One ticket that releases every slot taken, or undefined when no limit applies
+ * @throws ConcurrencyLimitError when a limit is full, QueueTimeoutError when queueing timed out
+ */
+export declare function acquireConcurrencySlots(manager: GuardManager, entityName: string, entityConfig: ConcurrencyConfig | undefined, partitionContext: PartitionKeyContext | undefined, options?: {
+    skipGlobal?: boolean;
+}): Promise<SemaphoreTicket | undefined>;
+//# sourceMappingURL=guard.utils.d.ts.map

package/common/utils/guard.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.utils.d.ts","sourceRoot":"","sources":["../../../src/common/utils/guard.utils.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAE7E,yFAAyF;AACzF,eAAO,MAAM,wBAAwB;;;CAA6E,CAAC;AAEnH,0GAA0G;AAC1G,wBAAgB,eAAe,CAC7B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,GAAG,QAAQ,CAAC,EACtD,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,cAAc,GAAE,MAAM,UAAmF,GACxG,IAAI,CAMN;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,eAAyD,CAAC;AAEhG;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;CACzF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAW1G;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAEnF;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,iBAAiB,GAAG,SAAS,EAC3C,gBAAgB,EAAE,mBAAmB,GAAG,SAAS,EACjD,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAkCtC"}

package/common/utils/index.d.ts

@@ -1,5 +1,7 @@
+export * from './auth-info.utils';
 export * from './caller-dir.utils';
 export * from './decide-request-intent.utils';
+export * from './guard.utils';
 export * from './path.utils';
 export * from './principal.utils';
 export * from './global-config.utils';

package/common/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/common/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/common/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC"}

package/completion/flows/complete.flow.d.ts

@@ -1,4 +1,5 @@
-import { FlowBase, type FlowRunOptions } from '../../common';
+import { z } from '@frontmcp/lazy-zod';
+import { FlowBase, type FlowRunOptions, type PromptEntry, type ResourceEntry, type ScopeEntry } from '../../common';
 declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
     request: import("@frontmcp/lazy-zod").ZodObject<{
         method: import("@frontmcp/lazy-zod").ZodLiteral<"completion/complete">;
@@ -52,6 +53,8 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
         name: import("@frontmcp/lazy-zod").ZodString;
         value: import("@frontmcp/lazy-zod").ZodString;
     }, import("zod/v4/core").$strip>;
+    prompt: z.ZodType<PromptEntry | undefined>;
+    resource: z.ZodType<ResourceEntry | undefined>;
     output: import("@frontmcp/lazy-zod").ZodObject<{
         _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
@@ -67,7 +70,7 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
     }, import("zod/v4/core").$loose>;
 }, import("zod/v4/core").$strip>;
 declare const plan: {
-    readonly pre: ["parseInput"];
+    readonly pre: ["parseInput", "findReference"];
     readonly execute: ["complete"];
     readonly finalize: ["finalize"];
 };
@@ -78,8 +81,14 @@ declare global {
 }
 declare const name: "completion:complete";
 export default class CompleteFlow extends FlowBase<typeof name> {
+    static resolveHookOwnerId(rawInput: unknown, scope: ScopeEntry): Promise<string | undefined>;
     logger: import("../../common").FrontMcpLogger;
     parseInput(): Promise<void>;
+    /**
+     * Resolve the prompt or resource the completion refers to, before any completer runs.
+     * Hookable: gate the referenced entry with Will/Did/Around on 'findReference' or 'complete'.
+     */
+    findReference(): Promise<void>;
     complete(): Promise<void>;
     finalize(): Promise<void>;
 }

package/completion/flows/complete.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"complete.flow.d.ts","sourceRoot":"","sources":["../../../src/completion/flows/complete.flow.ts"],"names":[],"mappings":"AAKA,OAAO,EAAQ,QAAQ,EAA8B,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAI/F,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;gCAAuB,CAAC;AAe1C,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;gCAOf,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,YAAY,EACZ,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,qBAA8B,CAAC;AAU5C,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC7D,MAAM,wCAA0C;IAG1C,UAAU;IA0CV,QAAQ;IAkGR,QAAQ;CAMf"}
+{"version":3,"file":"complete.flow.d.ts","sourceRoot":"","sources":["../../../src/completion/flows/complete.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAIvC,OAAO,EAEL,QAAQ,EAGR,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,cAAc,CAAC;AAKtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;gCAAuB,CAAC;AAe1C,QAAA,MAAM,WAAW;;;;;;;;;;;;YAOe,CAAC,CAAC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;cAChC,CAAC,CAAC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;;;;;;;;;;;;;;gCAEpE,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,YAAY,EACZ,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,qBAA8B,CAAC;AAqB5C,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;WACvC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAa3G,MAAM,wCAA0C;IAG1C,UAAU;IAyChB;;;OAGG;IAEG,aAAa;IAQb,QAAQ;IA2FR,QAAQ;CAMf"}

package/context/frontmcp-context-storage.d.ts

@@ -18,7 +18,7 @@
  * ```
  */
 import { type AuthInfo } from '@frontmcp/protocol';
-import { FrontMcpContext, type FrontMcpContextArgs } from './frontmcp-context';
+import { FrontMcpContext, type FrontMcpContextArgs, type FrontMcpContextConfig } from './frontmcp-context';
 /**
  * FrontMcpContextStorage provides unified context via AsyncLocalStorage.
  *
@@ -27,6 +27,14 @@ import { FrontMcpContext, type FrontMcpContextArgs } from './frontmcp-context';
  * the FRONTMCP_CONTEXT token which is CONTEXT-scoped.
  */
 export declare class FrontMcpContextStorage {
+    private contextConfig;
+    /**
+     * Apply server-wide defaults (from `@FrontMcp({ fetch })`) to every context this storage creates.
+     *
+     * @param contextConfig - Defaults; a context's own config still overrides them
+     * @returns This storage
+     */
+    configure(contextConfig?: FrontMcpContextConfig): this;
     /**
      * Run a callback with a new FrontMcpContext.
      *
@@ -49,6 +57,24 @@ export declare class FrontMcpContextStorage {
     runFromHeaders<T>(headers: Record<string, unknown>, args: Omit<FrontMcpContextArgs, 'traceContext' | 'metadata'> & {
         peerAddress?: string;
     }, fn: () => T | Promise<T>): T | Promise<T>;
+    /**
+     * Run with the context of an incoming HTTP request: its `mcp-session-id` (a fresh anonymous
+     * id when it sends none), its trace context and metadata, and the socket peer when the
+     * runtime exposes one. Every adapter enters its flows through this, so they all see the
+     * same context for the same request.
+     *
+     * @param request - The request's headers, and its socket where the runtime has one
+     * @param scopeId - Scope handling the request
+     * @param fn - Async function to run
+     * @returns Result of the callback
+     */
+    runForHttpRequest<T>(request: {
+        headers?: Record<string, unknown>;
+        socket?: {
+            remoteAddress?: string;
+        };
+    }, scopeId: string, fn: () => T | Promise<T>): T | Promise<T>;
+    private withServerConfig;
     /**
      * Run with an existing FrontMcpContext.
      *

package/context/frontmcp-context-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontmcp-context-storage.d.ts","sourceRoot":"","sources":["../../src/context/frontmcp-context-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAMnD,OAAO,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAY/E;;;;;;GAMG;AACH,qBAKa,sBAAsB;IACjC;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAK3E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,CAAC,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,cAAc,GAAG,UAAU,CAAC,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EACvF,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACvB,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAcjB;;;;;;;;OAQG;IACH,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIrF;;;;OAIG;IACH,QAAQ,IAAI,eAAe,GAAG,SAAS;IAIvC;;;;OAIG;IACH,eAAe,IAAI,eAAe;IAUlC;;;;OAIG;IACH,UAAU,IAAI,OAAO;IAIrB;;;;;;;;;OASG;IACH,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAKzF"}
+{"version":3,"file":"frontmcp-context-storage.d.ts","sourceRoot":"","sources":["../../src/context/frontmcp-context-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAMnD,OAAO,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAY3G;;;;;;GAMG;AACH,qBAKa,sBAAsB;IACjC,OAAO,CAAC,aAAa,CAA6B;IAElD;;;;;OAKG;IACH,SAAS,CAAC,aAAa,GAAE,qBAA0B,GAAG,IAAI;IAK1D;;;;;;OAMG;IACH,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAK3E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,CAAC,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,cAAc,GAAG,UAAU,CAAC,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EACvF,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACvB,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAgBjB;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,CAAC,EACjB,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EACnF,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACvB,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAOjB,OAAO,CAAC,gBAAgB;IAIxB;;;;;;;;OAQG;IACH,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIrF;;;;OAIG;IACH,QAAQ,IAAI,eAAe,GAAG,SAAS;IAIvC;;;;OAIG;IACH,eAAe,IAAI,eAAe;IAUlC;;;;OAIG;IACH,UAAU,IAAI,OAAO;IAIrB;;;;;;;;;OASG;IACH,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAKzF"}

package/context/frontmcp-context.d.ts

@@ -16,6 +16,7 @@ import { type AuthInfo, type LoggingLevel } from '@frontmcp/protocol';
 import { type FrontMcpLogger } from '../common/interfaces/logger.interface';
 import { type SessionIdPayload } from '../common/types';
 import { type ElicitOptions, type ElicitResult } from '../elicitation';
+import type { AIPlatformType, ClientInfo } from '../notification';
 import { type TraceContext } from './trace-context';
 /**
  * Structural view of the request-scoped notification sink.
@@ -81,8 +82,10 @@ export interface RequestMetadata {
  * Configuration for the context.
  */
 export interface FrontMcpContextConfig {
-    /** Auto-inject auth headers in fetch requests (default: true) */
-    autoInjectAuthHeaders?: boolean;
+    /** Origins that fetch() may send the caller's access token to (default: none) */
+    forwardCallerTokenTo?: string[];
+    /** Origins that fetch() may send the request's x-frontmcp-* headers to (default: none) */
+    forwardCustomHeadersTo?: string[];
     /** Auto-inject tracing headers in fetch requests (default: true) */
     autoInjectTracingHeaders?: boolean;
     /** Default fetch request timeout in milliseconds (default: 30000) */
@@ -184,10 +187,12 @@ export declare class FrontMcpContext {
     /** Request start timestamp */
     readonly timestamp: number;
     /** Context configuration */
-    readonly config: FrontMcpContextConfig;
+    readonly config: Required<FrontMcpContextConfig>;
     /** Request metadata (headers, user-agent, etc.) */
     readonly metadata: RequestMetadata;
     private _authInfo;
+    private _clientInfo?;
+    private _platformType?;
     private _sessionMetadata?;
     private _credentialMiddleware?;
     private _transport?;
@@ -206,6 +211,13 @@ export declare class FrontMcpContext {
      * Returns Partial<AuthInfo> because auth info is progressively populated.
      */
     get authInfo(): Partial<AuthInfo>;
+    /**
+     * The client's self-reported identity, sent with this request (MCP 2026-07-28 `_meta`).
+     * Session-based clients report it once at initialize instead; see the notification service.
+     */
+    get clientInfo(): ClientInfo | undefined;
+    /** The AI platform detected from this request's client info; undefined when none was recognized. */
+    get platformType(): AIPlatformType | undefined;
     /**
      * Get session metadata (protocol, platform type, node info).
      * Only available after session verification.
@@ -295,16 +307,17 @@ export declare class FrontMcpContext {
      * Perform a fetch request with automatic header injection.
      *
      * Injects:
-     * - Authorization header (if authInfo.token is available and autoInjectAuthHeaders is true)
+     * - Authorization header with the caller's token, only for origins in forwardCallerTokenTo
      * - W3C traceparent header (if autoInjectTracingHeaders is true)
      * - x-request-id header
-     * - Custom headers from request metadata
+     * - The request's x-frontmcp-* headers, only for origins in forwardCustomHeadersTo
      *
      * @param input - Request URL or Request object
      * @param init - Request options
+     * @param executionSignal - Aborts the request as well, on top of the caller's signal or the request timeout
      * @returns Fetch response
      */
-    fetch(input: RequestInfo | URL, init?: FrontMcpFetchInit | RequestInit): Promise<Response>;
+    fetch(input: RequestInfo | URL, init?: FrontMcpFetchInit | RequestInit, executionSignal?: AbortSignal): Promise<Response>;
 }
 /**
  * Alias for FrontMcpContext.

package/context/frontmcp-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frontmcp-context.d.ts","sourceRoot":"","sources":["../../src/context/frontmcp-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAyD,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC/G,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGtE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAW1E;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACvE;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAE1B,eAAe,CAAC,OAAO,EAAE;QACvB,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;QACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE5E,YAAY,IAAI;QAAE,KAAK,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,oEAAoE;IACpE,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,6BAA6B;IAC7B,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IAEjC;;;;;;;;;OASG;IACH,MAAM,CAAC,CAAC,SAAS,OAAO,EACtB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,CAAC,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CACpE;AAGD,KAAK,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7C,KAAK,QAAQ,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAazE;;GAEG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAAwB,CAAC;AAE9D;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAYrD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IAK1B,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,uBAAuB;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAMzB,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAM3B,4BAA4B;IAC5B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAMvC,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAMnC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,gBAAgB,CAAC,CAAmB;IAC5C,OAAO,CAAC,qBAAqB,CAAC,CAA4B;IAM1D,OAAO,CAAC,UAAU,CAAC,CAAe;IAClC,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAC,CAAW;IAM1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;IAMlE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;gBAEvD,IAAI,EAAE,mBAAmB;IAiCrC;;;OAGG;IACH,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAEhC;IAaD;;;OAGG;IACH,IAAI,eAAe,IAAI,gBAAgB,GAAG,SAAS,CAElD;IAwBD;;;OAGG;IACH,IAAI,SAAS,IAAI,iBAAiB,GAAG,SAAS,CAsB7C;IAUD;;OAEG;IACH,IAAI,IAAI,IAAI,WAAW,GAAG,SAAS,CAElC;IAUD;;OAEG;IACH,IAAI,KAAK,IAAI,QAAQ,GAAG,SAAS,CAEhC;IAcD;;;;;OAKG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAI5C;;;;;OAKG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS;IAI3C;;;;;OAKG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IAIlC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IA6HrC;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAIxB;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAM3C;;;;OAIG;IACH,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAQvC;;;;;;;;OAQG;IACH,SAAS,CAAC,YAAY,EAAE,cAAc,GAAG,cAAc;IAKvD;;;;;;;OAOG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAiBvC;;;;;;;;;;;;OAYG;IACG,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CA4FjG;AAED;;;GAGG;AACH,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,CAAC"}
+{"version":3,"file":"frontmcp-context.d.ts","sourceRoot":"","sources":["../../src/context/frontmcp-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAyD,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC/G,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGtE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAW1E;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACvE;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAE1B,eAAe,CAAC,OAAO,EAAE;QACvB,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;QACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE5E,YAAY,IAAI;QAAE,KAAK,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,0FAA0F;IAC1F,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,oEAAoE;IACpE,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,6BAA6B;IAC7B,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IAEjC;;;;;;;;;OASG;IACH,MAAM,CAAC,CAAC,SAAS,OAAO,EACtB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,CAAC,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CACpE;AAGD,KAAK,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7C,KAAK,QAAQ,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAazE;;GAEG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAAwB,CAAC;AAE9D;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAYrD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IAK1B,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,uBAAuB;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAMzB,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAEpC,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAM3B,4BAA4B;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAMjD,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAMnC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,aAAa,CAAC,CAAiB;IACvC,OAAO,CAAC,gBAAgB,CAAC,CAAmB;IAC5C,OAAO,CAAC,qBAAqB,CAAC,CAA4B;IAM1D,OAAO,CAAC,UAAU,CAAC,CAAe;IAClC,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAC,CAAW;IAM1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;IAMlE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;gBAEvD,IAAI,EAAE,mBAAmB;IAkCrC;;;OAGG;IACH,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAEhC;IAaD;;;OAGG;IACH,IAAI,UAAU,IAAI,UAAU,GAAG,SAAS,CAEvC;IAED,oGAAoG;IACpG,IAAI,YAAY,IAAI,cAAc,GAAG,SAAS,CAE7C;IAaD;;;OAGG;IACH,IAAI,eAAe,IAAI,gBAAgB,GAAG,SAAS,CAElD;IAwBD;;;OAGG;IACH,IAAI,SAAS,IAAI,iBAAiB,GAAG,SAAS,CAsB7C;IAUD;;OAEG;IACH,IAAI,IAAI,IAAI,WAAW,GAAG,SAAS,CAElC;IAUD;;OAEG;IACH,IAAI,KAAK,IAAI,QAAQ,GAAG,SAAS,CAEhC;IAcD;;;;;OAKG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAI5C;;;;;OAKG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS;IAI3C;;;;;OAKG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IAIlC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IA6HrC;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAIxB;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAM3C;;;;OAIG;IACH,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAQvC;;;;;;;;OAQG;IACH,SAAS,CAAC,YAAY,EAAE,cAAc,GAAG,cAAc;IAKvD;;;;;;;OAOG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAiBvC;;;;;;;;;;;;;OAaG;IACG,KAAK,CACT,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,iBAAiB,GAAG,WAAW,EACtC,eAAe,CAAC,EAAE,WAAW,GAC5B,OAAO,CAAC,QAAQ,CAAC;CAsGrB;AAqBD;;;GAGG;AACH,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/context/frontmcp-context.provider.d.ts

@@ -34,5 +34,5 @@ export declare const FRONTMCP_CONTEXT: Token<FrontMcpContext>;
  * Note: This provider will throw if called outside of a context scope
  * (i.e., without first calling FrontMcpContextStorage.run or runFromHeaders).
  */
-export declare const FrontMcpContextProvider: import("../common/interfaces/provider.interface").ProviderFactoryType<unknown, readonly (import("@frontmcp/di").Reference<any> | import("@frontmcp/di").ClassToken)[]>;
+export declare const FrontMcpContextProvider: import("../common/interfaces/provider.interface").ProviderFactoryType<unknown, readonly (import("@frontmcp/di").ClassToken | import("@frontmcp/di").Reference<any>)[]>;
 //# sourceMappingURL=frontmcp-context.provider.d.ts.map

package/context/index.d.ts

@@ -17,5 +17,4 @@ export { FRONTMCP_CONTEXT, FrontMcpContextProvider } from './frontmcp-context.pr
 export { parseTraceContext, generateTraceContext, createChildSpanContext } from './trace-context';
 export type { TraceContext } from './trace-context';
 export { extractMetadata, extractClientIp } from './metadata.utils';
-export { installContextExtensions, isContextExtensionInstalled, getInstalledContextExtensions, } from './context-extension';
 //# sourceMappingURL=index.d.ts.map

package/context/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EACL,eAAe,EACf,OAAO,EACP,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAKpE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAKxF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAClG,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAKpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAKpE,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EACL,eAAe,EACf,OAAO,EACP,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAKpE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAKxF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAClG,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAKpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/context/metadata.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metadata.utils.d.ts","sourceRoot":"","sources":["../../src/context/metadata.utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AA4GD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,eAAe,CAgB5G;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAiC/G"}
+{"version":3,"file":"metadata.utils.d.ts","sourceRoot":"","sources":["../../src/context/metadata.utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAiHD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,eAAe,CAgB5G;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAiC/G"}

package/direct/client.types.d.ts

@@ -662,6 +662,8 @@ export interface SkillAssetEntry {
     baseDir?: string;
     /** Absolute path to instructions file (if file-based) */
     instructionFile?: string;
+    /** Instruction text for inline and URL-sourced skills, which have no file to copy */
+    instructionContent?: string;
     /** Absolute paths to resource directories */
     resources?: {
         references?: string;