@frontmcp/sdk 1.8.0 → 1.8.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/sdk",
-  "version": "1.8.0",
+  "version": "1.8.2",
   "description": "FrontMCP SDK",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -90,8 +90,8 @@
   "peerDependencies": {
     "@anthropic-ai/sdk": "^0.30.0 || ^0.78.0",
     "@enclave-vm/core": "^2.15.2",
-    "@frontmcp/observability": "1.8.0",
-    "@frontmcp/storage-sqlite": "1.8.0",
+    "@frontmcp/observability": "1.8.2",
+    "@frontmcp/storage-sqlite": "1.8.2",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/sdk-trace-base": "^2.8.0",
     "@vercel/kv": "^3.0.0",
@@ -132,13 +132,13 @@
     }
   },
   "dependencies": {
-    "@frontmcp/auth": "1.8.0",
-    "@frontmcp/di": "1.8.0",
-    "@frontmcp/guard": "1.8.0",
-    "@frontmcp/lazy-zod": "1.8.0",
-    "@frontmcp/protocol": "1.8.0",
-    "@frontmcp/uipack": "1.8.0",
-    "@frontmcp/utils": "1.8.0",
+    "@frontmcp/auth": "1.8.2",
+    "@frontmcp/di": "1.8.2",
+    "@frontmcp/guard": "1.8.2",
+    "@frontmcp/lazy-zod": "1.8.2",
+    "@frontmcp/protocol": "1.8.2",
+    "@frontmcp/uipack": "1.8.2",
+    "@frontmcp/utils": "1.8.2",
     "@types/cors": "^2.8.17",
     "ioredis": "^5.8.0",
     "jose": "^6.1.3",

package/plugin/plugin.registry.d.ts

@@ -58,5 +58,7 @@ export default class PluginRegistry extends RegistryAbstract<PluginEntry, Plugin
     protected buildMap(list: PluginType[]): RegistryBuildMapResult<PluginRecord>;
     protected buildGraph(): void;
     protected initialize(): Promise<void>;
+    /** Builds the plugin instance and the providers it contributes; a factory's options exist only once it has run. */
+    private instantiatePlugin;
 }
 //# sourceMappingURL=plugin.registry.d.ts.map

package/plugin/plugin.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.registry.d.ts","sourceRoot":"","sources":["../../src/plugin/plugin.registry.ts"],"names":[],"mappings":"AACA,OAAO,kBAAkB,CAAC;AAK1B,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,UAAU,EAEf,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAKnB,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAG5E,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAGjD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,QAAQ,EAAE,UAAU,CAAC;IACrB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,uDAAuD;IACvD,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,CAAC,OAAO,OAAO,cACnB,SAAQ,gBAAgB,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,CAChE,YAAW,uBAAuB;IAElC,yBAAyB;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2C;IACtE,yBAAyB;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,wBAAwB;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,qBAAqB;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,yBAAyB;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2C;IACtE,uBAAuB;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,sBAAsB;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;gBAGvC,SAAS,EAAE,gBAAgB,EAC3B,IAAI,EAAE,UAAU,EAAE,EAClB,KAAK,CAAC,EAAE,aAAa;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,eAAe;IAa7B,UAAU,IAAI,WAAW,EAAE;IAI3B;;;;OAIG;IACH,cAAc,IAAI,MAAM,EAAE;IAI1B;;;OAGG;IACH,iBAAiB,IAAI,YAAY,EAAE;cAIhB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAAC,YAAY,CAAC;IAgBrF,SAAS,CAAC,UAAU;cAgBJ,UAAU;CAoL3B"}
+{"version":3,"file":"plugin.registry.d.ts","sourceRoot":"","sources":["../../src/plugin/plugin.registry.ts"],"names":[],"mappings":"AACA,OAAO,kBAAkB,CAAC;AAK1B,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,UAAU,EAGf,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAMnB,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAG5E,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAGjD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,QAAQ,EAAE,UAAU,CAAC;IACrB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,uDAAuD;IACvD,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,CAAC,OAAO,OAAO,cACnB,SAAQ,gBAAgB,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,CAChE,YAAW,uBAAuB;IAElC,yBAAyB;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2C;IACtE,yBAAyB;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,wBAAwB;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,qBAAqB;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,yBAAyB;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2C;IACtE,uBAAuB;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,sBAAsB;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;gBAGvC,SAAS,EAAE,gBAAgB,EAC3B,IAAI,EAAE,UAAU,EAAE,EAClB,KAAK,CAAC,EAAE,aAAa;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,eAAe;IAa7B,UAAU,IAAI,WAAW,EAAE;IAI3B;;;;OAIG;IACH,cAAc,IAAI,MAAM,EAAE;IAI1B;;;OAGG;IACH,iBAAiB,IAAI,YAAY,EAAE;cAIhB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAAC,YAAY,CAAC;IAgBrF,SAAS,CAAC,UAAU;cAgBJ,UAAU;IAqK1B,mHAAmH;YACrG,iBAAiB;CAwChC"}

package/plugin/plugin.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.utils.d.ts","sourceRoot":"","sources":["../../src/plugin/plugin.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,KAAK,EAAE,MAAM,cAAc,CAAC;AAExF,OAAO,EAAoC,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAStH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,GAAG,cAAc,CAMrE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAuE9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,KAAK,EAAE,CAa9D"}
+{"version":3,"file":"plugin.utils.d.ts","sourceRoot":"","sources":["../../src/plugin/plugin.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,KAAK,EAAE,MAAM,cAAc,CAAC;AAExF,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AASnB,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,GAAG,cAAc,CAMrE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAmF9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,KAAK,EAAE,CAa9D"}

package/prompt/flows/get-prompt.flow.d.ts

@@ -1,6 +1,6 @@
 import { z } from '@frontmcp/lazy-zod';
 import { type AuthInfo } from '@frontmcp/protocol';
-import { FlowBase, type FlowRunOptions, type PromptContext, type PromptEntry } from '../../common';
+import { FlowBase, type FlowRunOptions, type PromptContext, type PromptEntry, type ScopeEntry } from '../../common';
 declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
     request: import("@frontmcp/lazy-zod").ZodObject<{
         method: import("@frontmcp/lazy-zod").ZodLiteral<"prompts/get">;
@@ -245,6 +245,7 @@ declare global {
 }
 declare const name: "prompts:get-prompt";
 export default class GetPromptFlow extends FlowBase<typeof name> {
+    static resolveHookOwnerId(rawInput: unknown, scope: ScopeEntry): Promise<string | undefined>;
     logger: import("../../common").FrontMcpLogger;
     parseInput(): Promise<void>;
     /**

package/prompt/flows/get-prompt.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-prompt.flow.d.ts","sourceRoot":"","sources":["../../../src/prompt/flows/get-prompt.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAiD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAElG,OAAO,EAEL,QAAQ,EAGR,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAUtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAwB,CAAC;AAE3C,QAAA,MAAM,WAAW;;;;;;cAQiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAEhC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;;mBAIf,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAIlD,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,oBAAoB,EAAE,cAAc,CAClC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,oBAA6B,CAAC;AAU3C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAG3C,UAAU;IA8BhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,UAAU;IAuBhB;;;OAGG;IAEG,qBAAqB;IA6CrB,mBAAmB;IA+CnB,OAAO;IAsBP,cAAc;IAgBd,QAAQ;CA8Bf"}
+{"version":3,"file":"get-prompt.flow.d.ts","sourceRoot":"","sources":["../../../src/prompt/flows/get-prompt.flow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAiD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAGlG,OAAO,EAEL,QAAQ,EAIR,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,cAAc,CAAC;AActB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAwB,CAAC;AAE3C,QAAA,MAAM,WAAW;;;;;;cAQiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAEhC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;;mBAIf,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAIlD,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,oBAAoB,EAAE,cAAc,CAClC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,oBAA6B,CAAC;AAa3C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;WACxC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAa3G,MAAM,wCAA2C;IAG3C,UAAU;IA8BhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,UAAU;IAuBhB;;;OAGG;IAEG,qBAAqB;IA2CrB,mBAAmB;IA6BnB,OAAO;IAsBP,cAAc;IAgBd,QAAQ;CA8Bf"}

package/prompt/prompt.registry.d.ts

@@ -1,5 +1,5 @@
 import { type ServerCapabilities } from '@frontmcp/protocol';
-import { type EntryOwnerRef, type PromptEntry, type PromptRecord, type PromptType } from '../common';
+import { type EntryLineage, type EntryOwnerRef, type PromptEntry, type PromptRecord, type PromptType } from '../common';
 import type ProviderRegistry from '../provider/provider.registry';
 import { RegistryAbstract, type RegistryBuildMapResult } from '../regsitry';
 import { type PromptChangeEvent } from './prompt.events';
@@ -19,6 +19,7 @@ PromptRecord, PromptType[]> {
     private byName;
     private byOwnerAndName;
     private byOwner;
+    private readonly lineages;
     private version;
     private emitter;
     constructor(providers: ProviderRegistry, list: PromptType[], owner: EntryOwnerRef);
@@ -61,6 +62,8 @@ PromptRecord, PromptType[]> {
     listAllIndexed(): IndexedPrompt[];
     /** List all instances (locals + adopted). */
     listAllInstances(): readonly PromptEntry[];
+    /** Owner lineage (root → leaf) of a prompt this registry holds, or undefined when it holds none. */
+    lineageOf(entry: PromptEntry): EntryLineage | undefined;
     /** List instances by owner path (e.g. "app:Portal/plugin:Okta") */
     listByOwner(ownerPath: string): readonly PromptEntry[];
     private reindex;

package/prompt/prompt.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.registry.d.ts","sourceRoot":"","sources":["../../src/prompt/prompt.registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAQnB,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAK5E,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAA8B,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAM1G,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,gBAAgB,CAC1D,cAAc,EAAE,qCAAqC;AACrD,YAAY,EACZ,UAAU,EAAE,CACb;IACC,oDAAoD;IACpD,KAAK,EAAE,aAAa,CAAC;IAErB,8EAA8E;IAC9E,OAAO,CAAC,SAAS,CAAuB;IAExC,sFAAsF;IACtF,OAAO,CAAC,OAAO,CAA8C;IAE7D,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAA6B;IAG7C,OAAO,CAAC,aAAa,CAAoC;IACzD,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,OAAO,CAAsC;IAGrD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,OAAO,CAAuB;gBAE1B,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,aAAa;cAY9D,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAAC,YAAY,CAAC;IAgBrF,SAAS,CAAC,UAAU;cAkBK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqDpD;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,GAAG,IAAI;IAuBvE;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IA6CjC;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAWhC;;OAEG;IACH,UAAU,CAAC,aAAa,UAAQ,GAAG,WAAW,EAAE;IAchD;;OAEG;IACH,gBAAgB,IAAI,WAAW,EAAE;IAIjC;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAKjD;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE;IAK1C,sEAAsE;IACtE,cAAc,IAAI,aAAa,EAAE;IAIjC,6CAA6C;IAC7C,gBAAgB,IAAI,SAAS,WAAW,EAAE;IAI1C,mEAAmE;IACnE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE;IAMtD,OAAO,CAAC,OAAO;IA0Bf;;OAEG;IACH,mBAAmB,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,CAAC;IA8E/F,8CAA8C;IAC9C,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,WAAW,GAAG,SAAS;IAO9E,SAAS,CACP,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAA;KAAE,EACnE,EAAE,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GACnC,MAAM,IAAI;IAab,OAAO,CAAC,IAAI;IAOZ,iCAAiC;IACjC,OAAO,CAAC,OAAO;IAiBf,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAmBjB,kDAAkD;IAClD,OAAO,CAAC,YAAY;IAsBpB,mEAAmE;IACnE,MAAM,IAAI,OAAO;IAIjB;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IA2C1D;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAmCjD;;;;;;;;OAQG;IACH,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAO/C"}
+{"version":3,"file":"prompt.registry.d.ts","sourceRoot":"","sources":["../../src/prompt/prompt.registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAQnB,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAK5E,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAA8B,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAM1G,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,gBAAgB,CAC1D,cAAc,EAAE,qCAAqC;AACrD,YAAY,EACZ,UAAU,EAAE,CACb;IACC,oDAAoD;IACpD,KAAK,EAAE,aAAa,CAAC;IAErB,8EAA8E;IAC9E,OAAO,CAAC,SAAS,CAAuB;IAExC,sFAAsF;IACtF,OAAO,CAAC,OAAO,CAA8C;IAE7D,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAA6B;IAG7C,OAAO,CAAC,aAAa,CAAoC;IACzD,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IAGjE,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,OAAO,CAAuB;gBAE1B,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,aAAa;cAY9D,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAAC,YAAY,CAAC;IAgBrF,SAAS,CAAC,UAAU;cAkBK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqDpD;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,GAAG,IAAI;IAuBvE;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IA6CjC;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAWhC;;OAEG;IACH,UAAU,CAAC,aAAa,UAAQ,GAAG,WAAW,EAAE;IAchD;;OAEG;IACH,gBAAgB,IAAI,WAAW,EAAE;IAIjC;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAKjD;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE;IAK1C,sEAAsE;IACtE,cAAc,IAAI,aAAa,EAAE;IAIjC,6CAA6C;IAC7C,gBAAgB,IAAI,SAAS,WAAW,EAAE;IAI1C,oGAAoG;IACpG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,GAAG,SAAS;IAIvD,mEAAmE;IACnE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE;IAMtD,OAAO,CAAC,OAAO;IA2Bf;;OAEG;IACH,mBAAmB,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,CAAC;IA8E/F,8CAA8C;IAC9C,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,WAAW,GAAG,SAAS;IAO9E,SAAS,CACP,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAA;KAAE,EACnE,EAAE,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GACnC,MAAM,IAAI;IAab,OAAO,CAAC,IAAI;IAOZ,iCAAiC;IACjC,OAAO,CAAC,OAAO;IAiBf,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAmBjB,kDAAkD;IAClD,OAAO,CAAC,YAAY;IAsBpB,mEAAmE;IACnE,MAAM,IAAI,OAAO;IAIjB;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IA2C1D;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAmCjD;;;;;;;;OAQG;IACH,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAO/C"}

package/provider/provider.registry.d.ts

@@ -175,9 +175,15 @@ export default class ProviderRegistry extends RegistryAbstract<ProviderEntry, Pr
      *
      * @param sessionKey - Unique context/session identifier for CONTEXT-scoped providers
      * @param contextProviders - Optional pre-built CONTEXT-scoped providers (e.g., FrontMcpContext)
+     * @param contextSource - The ancestor registry whose views built `contextProviders`. Tokens this registry's
+     *   hierarchy defines below it are resolved from their own nearest definition instead of the pre-built instance,
+     *   so an app's plugin providers are not shadowed by the definition another app merged into the scope.
      * @returns ProviderViews with global and context provider maps (session/request as aliases)
      */
-    buildViews(sessionKey: string, contextProviders?: Map<Token, unknown>): Promise<ProviderViews>;
+    buildViews(sessionKey: string, contextProviders?: Map<Token, unknown>, contextSource?: ProviderRegistryInterface): Promise<ProviderViews>;
+    /** Nearest definition of each token declared between this registry and `ancestor`; undefined when `ancestor` is not above it. */
+    private defsBelow;
+    private dependsOnAny;
     /**
      * Build a provider into a store, with access to context and global views for dependencies.
      */

package/provider/provider.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.registry.d.ts","sourceRoot":"","sources":["../../src/provider/provider.registry.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAML,aAAa,EAGb,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,KAAK,EACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAclG,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,CAAC,OAAO,OAAO,gBACnB,SAAQ,gBAAgB,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,gBAAgB,GAAG,SAAS,CACpG,YAAW,yBAAyB;IAmClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IAjCnC,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,8BAA8B;IAC9B,OAAO,CAAC,KAAK,CAAyB;IAKtC,OAAO,CAAC,UAAU,CAAmD;IAErE,2DAA2D;IAC3D,OAAO,CAAC,aAAa,CAAkF;IAEvG,6EAA6E;IAC7E,OAAO,CAAC,iBAAiB,CAA2E;IAEpG,yDAAyD;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAS;IAEvD,iDAAiD;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAW;IAEvD,kDAAkD;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAS;IAE5D,8CAA8C;IAC9C,OAAO,CAAC,sBAAsB,CAA+C;IAE7E,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;gBAG5C,IAAI,EAAE,YAAY,EAAE,EACH,eAAe,CAAC,EAAE,gBAAgB,YAAA,EACnD,OAAO,CAAC,EAAE,uBAAuB;IAanC,YAAY,IAAI,aAAa,EAAE;IAM/B,4DAA4D;IAC5D,OAAO,CAAC,oBAAoB;IAK5B,+FAA+F;IAC/F,OAAO,CAAC,2BAA2B;cAkBhB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,cAAc,CAAC;IAgBzF,SAAS,CAAC,UAAU;IAgCpB,SAAS,CAAC,QAAQ;IA6BlB;;;OAGG;cACa,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;KAAE;IAoCnF,qEAAqE;IACrE,gBAAgB,IAAI,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;IAG/C,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,KAAK,EAAE;IAI3C,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,GAAG,KAAK,EAAE;IAI7D;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAUtB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,aAAa;IAKpD,QAAQ,IAAI,UAAU;YAMR,WAAW;YAaX,iBAAiB;IAqD/B,mFAAmF;YACrE,WAAW;YA+DX,cAAc;YAkFd,sBAAsB;IAmCpC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAgB1B,WAAW,CAAC,CAAC,SAAS,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IASnE,aAAa,CAAC,CAAC,SAAS,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE;IAIjE,gBAAgB;IAKhB,gBAAgB;IAIhB,2FAA2F;IACrF,mBAAmB,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC;IAkBjD;;;;;OAKG;IACH,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAqCvB,iBAAiB,CACf,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE;QACR,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,GAAG,EAAE,cAAc,CAAC;QACpB,iFAAiF;QACjF,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;KACrC,EAAE;IAcL;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;;;;;IAgBrC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAWvD,mBAAmB,CAAC,gBAAgB,EAAE,YAAY,EAAE;IA2B1D,OAAO,CAAC,cAAc;IAWtB,cAAc,IAAI,UAAU;IAI5B,eAAe,IAAI,cAAc;IAMjC;;;;;OAKG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAUxC;;;;;OAKG;IACH,sBAAsB,IAAI,MAAM;IAqBhC;;;OAGG;IACH,mBAAmB,IAAI,IAAI;IAoB3B;;;OAGG;IACH,kBAAkB,IAAI,IAAI;IAO1B;;;;;;;;;;;OAWG;IACH,OAAO,IAAI,IAAI;IAWf;;OAEG;IACH,oBAAoB,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAS1F;;;OAGG;IACH,qBAAqB,IAAI,OAAO;IAMhC;;;;;;;;;;;;;;OAcG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAuEpG;;OAEG;YACW,uBAAuB;IA8DrC;;OAEG;YACW,gBAAgB;IAsC9B;;;;;;;OAOG;IACH,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,GAAG,CAAC;CAUvD"}
+{"version":3,"file":"provider.registry.d.ts","sourceRoot":"","sources":["../../src/provider/provider.registry.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAML,aAAa,EAGb,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,KAAK,EACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAelG,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAeD,MAAM,CAAC,OAAO,OAAO,gBACnB,SAAQ,gBAAgB,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,gBAAgB,GAAG,SAAS,CACpG,YAAW,yBAAyB;IAmClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IAjCnC,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,8BAA8B;IAC9B,OAAO,CAAC,KAAK,CAAyB;IAKtC,OAAO,CAAC,UAAU,CAAmD;IAErE,2DAA2D;IAC3D,OAAO,CAAC,aAAa,CAAgD;IAErE,6EAA6E;IAC7E,OAAO,CAAC,iBAAiB,CAA2E;IAEpG,yDAAyD;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAS;IAEvD,iDAAiD;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAW;IAEvD,kDAAkD;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAS;IAE5D,8CAA8C;IAC9C,OAAO,CAAC,sBAAsB,CAA+C;IAE7E,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;gBAG5C,IAAI,EAAE,YAAY,EAAE,EACH,eAAe,CAAC,EAAE,gBAAgB,YAAA,EACnD,OAAO,CAAC,EAAE,uBAAuB;IAanC,YAAY,IAAI,aAAa,EAAE;IAM/B,4DAA4D;IAC5D,OAAO,CAAC,oBAAoB;IAK5B,+FAA+F;IAC/F,OAAO,CAAC,2BAA2B;cAkBhB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,cAAc,CAAC;IAgBzF,SAAS,CAAC,UAAU;IAgCpB,SAAS,CAAC,QAAQ;IA6BlB;;;OAGG;cACa,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;KAAE;IAoCnF,qEAAqE;IACrE,gBAAgB,IAAI,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;IAG/C,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,KAAK,EAAE;IAI3C,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,GAAG,KAAK,EAAE;IAI7D;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAUtB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,aAAa;IAKpD,QAAQ,IAAI,UAAU;YAMR,WAAW;YAaX,iBAAiB;IAqD/B,mFAAmF;YACrE,WAAW;YA+DX,cAAc;YAkFd,sBAAsB;IAmCpC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAgB1B,WAAW,CAAC,CAAC,SAAS,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IASnE,aAAa,CAAC,CAAC,SAAS,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE;IAIjE,gBAAgB;IAKhB,gBAAgB;IAIhB,2FAA2F;IACrF,mBAAmB,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC;IAkBjD;;;;;OAKG;IACH,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAqCvB,iBAAiB,CACf,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE;QACR,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,GAAG,EAAE,cAAc,CAAC;QACpB,iFAAiF;QACjF,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;KACrC,EAAE;IAcL;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;;;;;IAgBrC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAWvD,mBAAmB,CAAC,gBAAgB,EAAE,YAAY,EAAE;IA2B1D,OAAO,CAAC,cAAc;IAWtB,cAAc,IAAI,UAAU;IAI5B,eAAe,IAAI,cAAc;IAMjC;;;;;OAKG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAUxC;;;;;OAKG;IACH,sBAAsB,IAAI,MAAM;IAqBhC;;;OAGG;IACH,mBAAmB,IAAI,IAAI;IAoB3B;;;OAGG;IACH,kBAAkB,IAAI,IAAI;IAO1B;;;;;;;;;;;OAWG;IACH,OAAO,IAAI,IAAI;IAWf;;OAEG;IACH,oBAAoB,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAS1F;;;OAGG;IACH,qBAAqB,IAAI,OAAO;IAMhC;;;;;;;;;;;;;;;;;OAiBG;IACG,UAAU,CACd,UAAU,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,EACtC,aAAa,CAAC,EAAE,yBAAyB,GACxC,OAAO,CAAC,aAAa,CAAC;IAmGzB,iIAAiI;IACjI,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,YAAY;IASpB;;OAEG;YACW,uBAAuB;IA8DrC;;OAEG;YACW,gBAAgB;IA+C9B;;;;;;;OAOG;IACH,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,GAAG,CAAC;CAUvD"}

package/resource/flows/read-resource.flow.d.ts

@@ -1,6 +1,6 @@
 import { z } from '@frontmcp/lazy-zod';
 import { type AuthInfo } from '@frontmcp/protocol';
-import { FlowBase, type FlowRunOptions, type ResourceContext, type ResourceEntry } from '../../common';
+import { FlowBase, type FlowRunOptions, type ResourceContext, type ResourceEntry, type ScopeEntry } from '../../common';
 declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
     request: import("@frontmcp/lazy-zod").ZodObject<{
         method: import("@frontmcp/lazy-zod").ZodLiteral<"resources/read">;
@@ -98,6 +98,7 @@ declare global {
 }
 declare const name: "resources:read-resource";
 export default class ReadResourceFlow extends FlowBase<typeof name> {
+    static resolveHookOwnerId(rawInput: unknown, scope: ScopeEntry): Promise<string | undefined>;
     logger: import("../../common").FrontMcpLogger;
     parseInput(): Promise<void>;
     /**

package/resource/flows/read-resource.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-resource.flow.d.ts","sourceRoot":"","sources":["../../../src/resource/flows/read-resource.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAuD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAGxG,OAAO,EAEL,QAAQ,EAGR,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAWtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;gCAA2B,CAAC;AAE9C,QAAA,MAAM,WAAW;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;cAG9B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;qBAEjB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAYtD,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,yBAAyB,EAAE,cAAc,CACvC,gBAAgB,EAChB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,yBAAkC,CAAC;AAUhD,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IACjE,MAAM,wCAA8C;IAG9C,UAAU;IA+BhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,YAAY;IA8DlB;;;OAGG;IAEG,qBAAqB;IA6CrB,qBAAqB;IAkDrB,OAAO;IA4BP,cAAc;IAuBd,QAAQ;CA6Cf"}
+{"version":3,"file":"read-resource.flow.d.ts","sourceRoot":"","sources":["../../../src/resource/flows/read-resource.flow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAuD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAIxG,OAAO,EAEL,QAAQ,EAIR,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,cAAc,CAAC;AAetB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;gCAA2B,CAAC;AAE9C,QAAA,MAAM,WAAW;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;cAG9B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;qBAEjB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAYtD,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,yBAAyB,EAAE,cAAc,CACvC,gBAAgB,EAChB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,yBAAkC,CAAC;AAahD,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;WAC3C,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAa3G,MAAM,wCAA8C;IAG9C,UAAU;IA+BhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,YAAY;IA+DlB;;;OAGG;IAEG,qBAAqB;IA2CrB,qBAAqB;IAiCrB,OAAO;IA4BP,cAAc;IAuBd,QAAQ;CA6Cf"}

package/resource/resource.instance.d.ts

@@ -51,11 +51,13 @@ export declare class ResourceInstance<Params extends Record<string, string> = Re
     create(uri: string, params: Params, ctx: ResourceReadExtra): ResourceContext<Params, Out>;
     /**
      * Convert the raw resource return value into an MCP ReadResourceResult.
+     *
+     * @param readUri - The URI that was read; content URIs of a template's result are based on it
      */
-    parseOutput(raw: Out): ParsedResourceResult;
+    parseOutput(raw: Out, readUri?: string): ParsedResourceResult;
     /**
      * Safe version of parseOutput that returns success/error instead of throwing.
      */
-    safeParseOutput(raw: Out): ResourceSafeTransformResult<ParsedResourceResult>;
+    safeParseOutput(raw: Out, readUri?: string): ResourceSafeTransformResult<ParsedResourceResult>;
 }
 //# sourceMappingURL=resource.instance.d.ts.map

package/resource/resource.instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource.instance.d.ts","sourceRoot":"","sources":["../../src/resource/resource.instance.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,eAAe,EACf,aAAa,EAGb,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAGzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,YAAY,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAGlE,qBAAa,gBAAgB,CAC3B,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9D,GAAG,GAAG,OAAO,CACb,SAAQ,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B;;;OAGG;IACH,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,sDAAsD;IACtD,OAAO,CAAC,YAAY,CAAC,CAA4C;gBAErD,MAAM,EAAE,cAAc,GAAG,sBAAsB,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa;cAyB9F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B3C,WAAW,IAAI,gBAAgB,GAAG,wBAAwB;IAI1D;;;;;;;;;;;OAWG;IACM,oBAAoB,CAC3B,OAAO,EAAE,MAAM,GAEb,CAAC,CACC,OAAO,EAAE,MAAM,KAEb,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,GAChE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,GAC5D,IAAI;IAyDR;;;;OAIG;IACM,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgBpE;;OAEG;IACM,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC;IAkClG;;OAEG;IACM,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,oBAAoB;IA8BpD;;OAEG;IACM,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,2BAA2B,CAAC,oBAAoB,CAAC;CAOtF"}
+{"version":3,"file":"resource.instance.d.ts","sourceRoot":"","sources":["../../src/resource/resource.instance.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,eAAe,EACf,aAAa,EAGb,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAGzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,YAAY,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAGlE,qBAAa,gBAAgB,CAC3B,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9D,GAAG,GAAG,OAAO,CACb,SAAQ,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B;;;OAGG;IACH,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,sDAAsD;IACtD,OAAO,CAAC,YAAY,CAAC,CAA4C;gBAErD,MAAM,EAAE,cAAc,GAAG,sBAAsB,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa;cAyB9F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B3C,WAAW,IAAI,gBAAgB,GAAG,wBAAwB;IAI1D;;;;;;;;;;;OAWG;IACM,oBAAoB,CAC3B,OAAO,EAAE,MAAM,GAEb,CAAC,CACC,OAAO,EAAE,MAAM,KAEb,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,GAChE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,GAC5D,IAAI;IAyDR;;;;OAIG;IACM,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgBpE;;OAEG;IACM,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC;IAkClG;;;;OAIG;IACM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,oBAAoB;IA8BtE;;OAEG;IACM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,2BAA2B,CAAC,oBAAoB,CAAC;CAOxG"}

package/resource/resource.registry.d.ts

@@ -1,5 +1,5 @@
 import type { ServerCapabilities } from '@frontmcp/protocol';
-import { type EntryOwnerRef, type ResourceEntry, type ResourceRecord, type ResourceTemplateRecord, type ResourceType } from '../common';
+import { type EntryLineage, type EntryOwnerRef, type ResourceEntry, type ResourceRecord, type ResourceTemplateRecord, type ResourceType } from '../common';
 import type ProviderRegistry from '../provider/provider.registry';
 import { RegistryAbstract, type RegistryBuildMapResult } from '../regsitry';
 import { type ResourceChangeEvent } from './resource.events';
@@ -22,6 +22,7 @@ ResourceRecord | ResourceTemplateRecord, ResourceType[]> {
     private byUriTemplate;
     private byOwnerAndName;
     private byOwner;
+    private readonly lineages;
     private version;
     private emitter;
     constructor(providers: ProviderRegistry, list: ResourceType[], owner: EntryOwnerRef);
@@ -78,6 +79,8 @@ ResourceRecord | ResourceTemplateRecord, ResourceType[]> {
     listAllIndexed(): IndexedResource[];
     /** List all instances (locals + adopted). */
     listAllInstances(): readonly ResourceEntry[];
+    /** Owner lineage (root → leaf) of a resource this registry holds, or undefined when it holds none. */
+    lineageOf(entry: ResourceEntry): EntryLineage | undefined;
     /** List instances by owner path (e.g. "app:Portal/plugin:Okta") */
     listByOwner(ownerPath: string): readonly ResourceEntry[];
     private reindex;

package/resource/resource.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource.registry.d.ts","sourceRoot":"","sources":["../../src/resource/resource.registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAElB,MAAM,WAAW,CAAC;AAInB,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAQ5E,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAgC,KAAK,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAQlH,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,gBAAgB,CAC5D,gBAAgB,EAAE,uCAAuC;AACzD,AADkB,uCAAuC;AACzD,cAAc,GAAG,sBAAsB,EACvC,YAAY,EAAE,CACf;IACC,oDAAoD;IACpD,KAAK,EAAE,aAAa,CAAC;IAErB,gFAAgF;IAChF,OAAO,CAAC,SAAS,CAAyB;IAE1C,wFAAwF;IACxF,OAAO,CAAC,OAAO,CAAkD;IAEjE,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAA+B;IAG/C,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,OAAO,CAAwC;IAGvD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,OAAO,CAAyB;gBAE5B,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,aAAa;cAYhE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,cAAc,GAAG,sBAAsB,CAAC;IAkBlH,SAAS,CAAC,UAAU;cAeK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA0DpD;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,GAAG,IAAI;IAuBzE;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IA+CnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;OAEG;IACH,YAAY,CAAC,aAAa,UAAQ,GAAG,aAAa,EAAE;IAcpD;;OAEG;IACH,oBAAoB,IAAI,aAAa,EAAE;IASvC;;OAEG;IACH,kBAAkB,IAAI,aAAa,EAAE;IAIrC;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAKjD;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS;IAaxG;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS;IAWxG,sEAAsE;IACtE,cAAc,IAAI,eAAe,EAAE;IAInC,6CAA6C;IAC7C,gBAAgB,IAAI,SAAS,aAAa,EAAE;IAI5C,mEAAmE;IACnE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,aAAa,EAAE;IAMxD,OAAO,CAAC,OAAO;IAmCf;;OAEG;IACH,mBAAmB,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,aAAa,CAAA;KAAE,CAAC;IA2EnG,8CAA8C;IAC9C,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,aAAa,GAAG,SAAS;IAOlF,SAAS,CACP,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,OAAO,CAAA;KAAE,EACrE,EAAE,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,IAAI,GACrC,MAAM,IAAI;IAab;;;;;OAKG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAUvC,OAAO,CAAC,IAAI;IAOZ,mCAAmC;IACnC,OAAO,CAAC,OAAO;IAyBf,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAsBjB,kDAAkD;IAClD,OAAO,CAAC,YAAY;IAsBpB,qEAAqE;IACrE,MAAM,IAAI,OAAO;IAIjB;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IA0C5D;;;;;;;;OAQG;IACH,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAW9C;;;;;;;;;;;OAWG;IACH,wBAAwB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAmCvD;;;;;;;OAOG;IACH,uBAAuB,CAAC,WAAW,EAAE,YAAY,GAAG,cAAc,GAAG,sBAAsB,GAAG,IAAI;CA0DnG"}
+{"version":3,"file":"resource.registry.d.ts","sourceRoot":"","sources":["../../src/resource/resource.registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAElB,MAAM,WAAW,CAAC;AAInB,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAQ5E,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAgC,KAAK,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAQlH,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,gBAAgB,CAC5D,gBAAgB,EAAE,uCAAuC;AACzD,AADkB,uCAAuC;AACzD,cAAc,GAAG,sBAAsB,EACvC,YAAY,EAAE,CACf;IACC,oDAAoD;IACpD,KAAK,EAAE,aAAa,CAAC;IAErB,gFAAgF;IAChF,OAAO,CAAC,SAAS,CAAyB;IAE1C,wFAAwF;IACxF,OAAO,CAAC,OAAO,CAAkD;IAEjE,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAA+B;IAG/C,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,cAAc,CAAsC;IAC5D,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IAGnE,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,OAAO,CAAyB;gBAE5B,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,aAAa;cAYhE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,cAAc,GAAG,sBAAsB,CAAC;IAkBlH,SAAS,CAAC,UAAU;cAeK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA0DpD;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,GAAG,IAAI;IAuBzE;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IA+CnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;OAEG;IACH,YAAY,CAAC,aAAa,UAAQ,GAAG,aAAa,EAAE;IAcpD;;OAEG;IACH,oBAAoB,IAAI,aAAa,EAAE;IASvC;;OAEG;IACH,kBAAkB,IAAI,aAAa,EAAE;IAIrC;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAKjD;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS;IAaxG;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS;IAWxG,sEAAsE;IACtE,cAAc,IAAI,eAAe,EAAE;IAInC,6CAA6C;IAC7C,gBAAgB,IAAI,SAAS,aAAa,EAAE;IAI5C,sGAAsG;IACtG,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,YAAY,GAAG,SAAS;IAIzD,mEAAmE;IACnE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,aAAa,EAAE;IAMxD,OAAO,CAAC,OAAO;IAoCf;;OAEG;IACH,mBAAmB,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,aAAa,CAAA;KAAE,CAAC;IA2EnG,8CAA8C;IAC9C,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,aAAa,GAAG,SAAS;IAOlF,SAAS,CACP,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,OAAO,CAAA;KAAE,EACrE,EAAE,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,IAAI,GACrC,MAAM,IAAI;IAab;;;;;OAKG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAUvC,OAAO,CAAC,IAAI;IAOZ,mCAAmC;IACnC,OAAO,CAAC,OAAO;IAyBf,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAsBjB,kDAAkD;IAClD,OAAO,CAAC,YAAY;IAsBpB,qEAAqE;IACrE,MAAM,IAAI,OAAO;IAIjB;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IA0C5D;;;;;;;;OAQG;IACH,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAW9C;;;;;;;;;;;OAWG;IACH,wBAAwB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAmCvD;;;;;;;OAOG;IACH,uBAAuB,CAAC,WAAW,EAAE,YAAY,GAAG,cAAc,GAAG,sBAAsB,GAAG,IAAI;CA0DnG"}

package/scope/flows/http.ip-filter.flow.d.ts

@@ -0,0 +1,17 @@
+import { type z } from '@frontmcp/lazy-zod';
+import { FlowBase, httpInputSchema, httpOutputSchema, type FlowRunOptions } from '../../common';
+declare const plan: {
+    readonly pre: ["checkIpFilter"];
+};
+declare global {
+    interface ExtendFlows {
+        'http:ip-filter': FlowRunOptions<HttpIpFilterFlow, typeof plan, typeof httpInputSchema, typeof httpOutputSchema, z.ZodObject<Record<string, never>>>;
+    }
+}
+declare const name: "http:ip-filter";
+/** `throttle.ipFilter` for HTTP routes that are not flows themselves, such as `http.routes`; no output means allowed. */
+export default class HttpIpFilterFlow extends FlowBase<typeof name> {
+    checkIpFilter(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=http.ip-filter.flow.d.ts.map

package/scope/flows/http.ip-filter.flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.ip-filter.flow.d.ts","sourceRoot":"","sources":["../../../src/scope/flows/http.ip-filter.flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAGL,QAAQ,EAER,eAAe,EACf,gBAAgB,EAEhB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,QAAA,MAAM,IAAI;;CAE2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,gBAAgB,EAChB,OAAO,IAAI,EACX,OAAO,eAAe,EACtB,OAAO,gBAAgB,EACvB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CACnC,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAGvC,yHAAyH;AAQzH,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAE3D,aAAa;CAGpB"}

package/scope/flows/http.request.flow.d.ts

@@ -1,6 +1,6 @@
 import { FlowBase, httpInputSchema, httpOutputSchema, type FlowRunOptions, type ScopeEntry, type ServerRequest } from '../../common';
 declare const plan: {
-    readonly pre: ["traceRequest", "acquireQuota", "acquireSemaphore", "checkAuthorization", "router"];
+    readonly pre: ["traceRequest", "checkIpFilter", "acquireQuota", "acquireSemaphore", "checkAuthorization", "acquireIdentityQuota", "router"];
     readonly execute: ["handleMcp2026", "handleWebFetch", "handleLegacySse", "handleSse", "handleStreamableHttp", "handleStatefulHttp", "handleStatelessHttp", "handleDeleteSession"];
     readonly finalize: ["audit", "metrics", "releaseSemaphore", "releaseQuota", "finalize"];
     readonly error: [];
@@ -90,7 +90,11 @@ export default class HttpRequestFlow extends FlowBase<typeof name> {
     private requestId;
     static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
     traceRequest(): Promise<void>;
+    checkIpFilter(): Promise<void>;
     acquireQuota(): Promise<void>;
+    acquireIdentityQuota(): Promise<void>;
+    private enforceGlobalRateLimit;
+    private jsonRpcRequestId;
     checkAuthorization(): Promise<void>;
     /**
      * Build a live {@link OrchestratedAuthAccessorAdapter} for the verified request

package/scope/flows/http.request.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.request.flow.d.ts","sourceRoot":"","sources":["../../../src/scope/flows/http.request.flow.ts"],"names":[],"mappings":"AAYA,OAAO,EAKL,QAAQ,EAGR,eAAe,EACf,gBAAgB,EAShB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAKtB,QAAA,MAAM,IAAI;;;;;CAwC2B,CAAC;AAEtC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAIjC,CAAC;AAEH,QAAA,MAAM,IAAI,EAAG,cAAuB,CAAC;AAcrC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,cAAc,EAAE,cAAc,CAC5B,eAAe,EACf,OAAO,IAAI,EACX,OAAO,eAAe,EACtB,OAAO,gBAAgB,EACvB,OAAO,sBAAsB,CAC9B,CAAC;KACH;CACF;AAYD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAChE,MAAM,wCAA8C;IACpD,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,SAAS,CAAM;IAEvB,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU;IActD,YAAY;IAkDZ,YAAY;IAsDZ,kBAAkB;IAsDxB;;;;;;;;;;;;;;;OAeG;YACW,yBAAyB;IAwCjC,MAAM;IAwSZ;;;;;;;;;;;;;;OAcG;IAEG,cAAc;IAgEpB;;;;OAIG;IAQG,aAAa;IAuBb,eAAe;IAuBf,SAAS;IAuBT,oBAAoB;IAuBpB,kBAAkB;IAuBlB,mBAAmB;IAuBnB,mBAAmB;IAgDnB,QAAQ;IAcd;;;OAGG;IACH,OAAO,CAAC,QAAQ;CA8CjB"}
+{"version":3,"file":"http.request.flow.d.ts","sourceRoot":"","sources":["../../../src/scope/flows/http.request.flow.ts"],"names":[],"mappings":"AAaA,OAAO,EAQL,QAAQ,EAIR,eAAe,EACf,gBAAgB,EAShB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAMtB,QAAA,MAAM,IAAI;;;;;CA4C2B,CAAC;AAEtC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAIjC,CAAC;AAEH,QAAA,MAAM,IAAI,EAAG,cAAuB,CAAC;AAGrC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,cAAc,EAAE,cAAc,CAC5B,eAAe,EACf,OAAO,IAAI,EACX,OAAO,eAAe,EACtB,OAAO,gBAAgB,EACvB,OAAO,sBAAsB,CAC9B,CAAC;KACH;CACF;AAYD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAChE,MAAM,wCAA8C;IACpD,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,SAAS,CAAM;IAEvB,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU;IActD,YAAY;IAkDZ,aAAa;IAcb,YAAY;IAQZ,oBAAoB;YAOZ,sBAAsB;IAmBpC,OAAO,CAAC,gBAAgB;IAMlB,kBAAkB;IAqCxB;;;;;;;;;;;;;;;OAeG;YACW,yBAAyB;IAwCjC,MAAM;IAwSZ;;;;;;;;;;;;;;OAcG;IAEG,cAAc;IAkDpB;;;;OAIG;IAQG,aAAa;IAuBb,eAAe;IAuBf,SAAS;IAuBT,oBAAoB;IAuBpB,kBAAkB;IAuBlB,mBAAmB;IAuBnB,mBAAmB;IAgDnB,QAAQ;IAcd;;;OAGG;IACH,OAAO,CAAC,QAAQ;CA8CjB"}

package/scope/scope.instance.d.ts

@@ -189,7 +189,8 @@ export declare class Scope extends ScopeEntry {
     get eventStore(): EventStore | undefined;
     /**
      * Guard manager for rate limiting, concurrency control, IP filtering, and timeout.
-     * Returns undefined if throttle is not configured or disabled.
+     * Returns undefined when `throttle.enabled` is not set and no tool or agent declares
+     * its own `rateLimit` or `concurrency`, or when `throttle.enabled` is `false`.
      */
     get rateLimitManager(): GuardManager | undefined;
     /**
@@ -219,6 +220,11 @@ export declare class Scope extends ScopeEntry {
      * Used by PRM endpoint to populate `scopes_supported` (RFC 9728).
      */
     getAllSupportedScopes(): string[];
+    /**
+     * Tools and agents that declare their own `rateLimit` or `concurrency` are guarded even
+     * without `throttle.enabled`, unless `throttle.enabled` is explicitly `false`.
+     */
+    private initGuardForDeclaredLimits;
     /**
      * Register the sendElicitationResult system tool.
      * This tool is hidden by default and only shown to clients that don't support elicitation.

package/scope/scope.instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope.instance.d.ts","sourceRoot":"","sources":["../../src/scope/scope.instance.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,aAAa,MAAM,yBAAyB,CAAC;AAEpD,OAAO,WAAW,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,KAAK,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAE1F,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAI3E,OAAO,EACL,cAAc,EACd,cAAc,EAEd,UAAU,EAEV,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,KAAK,EACV,KAAK,IAAI,EACV,MAAM,WAAW,CAAC;AASnB,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAK/E,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,YAAY,MAAM,wBAAwB,CAAC;AAIlD,OAAO,KAAK,WAAW,MAAM,qBAAqB,CAAC;AAInD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,cAAwC,MAAM,2BAA2B,CAAC;AACjF,OAAO,cAAc,MAAM,2BAA2B,CAAC;AACvD,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAI7D,OAAO,EAA2B,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,aAAa,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAKL,YAAY,EAKZ,KAAK,SAAS,EACf,MAAM,SAAS,CAAC;AAEjB,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAA6C,cAAc,EAAE,MAAM,YAAY,CAAC;AAGvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAUlE,qBAAa,KAAM,SAAQ,UAAU;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;IACnD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAmB;IAClD,OAAO,CAAC,SAAS,CAAe;IAChC,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,YAAY,CAAC,CAAiB;IAEtC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,mBAAmB,EAAE,mBAAmB,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC9B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAS;IAEvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,6EAA6E;IAC7E,OAAO,CAAC,iBAAiB,CAAC,CAAmB;IAC7C,qFAAqF;IACrF,OAAO,CAAC,sBAAsB,CAAC,CAAqD;IAEpF,iEAAiE;IACjE,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,8EAA8E;IAC9E,OAAO,CAAC,eAAe,CAAC,CAAqD;IAE7E,4EAA4E;IAC5E,OAAO,CAAC,aAAa,CAAC,CAAe;IAErC,wEAAwE;IACxE,OAAO,CAAC,aAAa,CAAC,CAAsB;IAE5C,yDAAyD;IACzD,OAAO,CAAC,WAAW,CAAC,CAAa;IAEjC,uDAAuD;IACvD,OAAO,CAAC,UAAU,CAAC,CAAc;IACjC,OAAO,CAAC,eAAe,CAAC,CAAmB;IAC3C,OAAO,CAAC,oBAAoB,CAAC,CAAsB;IACnD,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,mBAAmB,CAAC,CAAqB;IAEjD,4EAA4E;IAC5E,OAAO,CAAC,iBAAiB,CAAC,CAAe;IAEzC,oEAAoE;IACpE,OAAO,CAAC,kBAAkB,CAAC,CAA6C;IACxE,OAAO,CAAC,0BAA0B,CAAC,CAAqD;IACxF,OAAO,CAAC,wBAAwB,CAAC,CAAmD;IAEpF,gCAAgC;IAChC,OAAO,CAAC,cAAc,CAAC,CAAkB;IACzC,OAAO,CAAC,2BAA2B,CAAC,CAA6B;IACjE,OAAO,CAAC,gBAAgB,CAAC,CAAkB;IAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAsB;IAE/C,kEAAkE;IAClE,OAAO,CAAC,cAAc,CAAC,CAAgB;IAEvC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;gBAEtB,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB;cAsC/C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAkxB3C;;;;;;;OAOG;YACW,qBAAqB;IAwBnC;;;OAGG;YACW,gBAAgB;IAsH9B;;;;;;;;;;;;OAYG;YACW,mBAAmB;IAkDjC,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,KAAK,qBAAqB,GA+BhC;IAED,IAAI,IAAI,IAAI,YAAY,CAEvB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,aAAa,IAAI,YAAY,CAEhC;IAED,IAAI,SAAS,qBAEZ;IAED,IAAI,IAAI,IAAI,WAAW,CAEtB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,MAAM,IAAI,cAAc,CAE3B;IAED,IAAI,MAAM,IAAI,cAAc,GAAG,SAAS,CAEvC;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,IAAI,IAAI,WAAW,GAAG,SAAS,CAElC;IAED,IAAI,SAAS,IAAI,gBAAgB,GAAG,SAAS,CAE5C;IAED,IAAI,QAAQ,IAAI,eAAe,GAAG,SAAS,CAE1C;IAED,IAAI,oBAAoB,IAAI,0BAA0B,GAAG,SAAS,CAEjE;IAED,IAAI,eAAe,IAAI,eAAe,GAAG,SAAS,CAEjD;IAED;;;;;;;;;;OAUG;IACH,IAAI,YAAY,IAAI,mBAAmB,GAAG,SAAS,CAElD;IAED,IAAI,OAAO,IAAI,cAAc,GAAG,SAAS,CAExC;IAED,IAAI,aAAa,IAAI,mBAAmB,CAEvC;IAED;;;;;;;;;OASG;IACH,IAAI,gBAAgB,IAAI,gBAAgB,GAAG,SAAS,CAEnD;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,SAAS,GAAG,SAAS,CAErC;IAED;;;OAGG;IACH,IAAI,KAAK,IAAI,YAAY,GAAG,SAAS,CAEpC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,UAAU,IAAI,UAAU,GAAG,SAAS,CAEvC;IAED;;;OAGG;IACH,IAAI,gBAAgB,IAAI,YAAY,GAAG,SAAS,CAE/C;IAED;;;OAGG;IACH,IAAI,aAAa,IAAI,aAAa,GAAG,SAAS,CAE7C;IAED;;;;OAIG;IACH,IAAI,iBAAiB,IAAI,OAAO,gBAAgB,EAAE,iBAAiB,GAAG,SAAS,CAE9E;IAED;;;OAGG;IACH,IAAI,yBAAyB,IAAI,OAAO,gBAAgB,EAAE,yBAAyB,GAAG,SAAS,CAE9F;IAED;;;OAGG;IACH,IAAI,uBAAuB,IAAI,OAAO,gBAAgB,EAAE,uBAAuB,GAAG,SAAS,CAE1F;IAED;;;;OAIG;IACH,qBAAqB,IAAI,MAAM,EAAE;IA6JjC;;;OAGG;IACH,OAAO,CAAC,iCAAiC;IAkBzC;;;OAGG;IACH,IAAI,UAAU;;;;;;kBAEb;IAED,aAAa,CAAC,GAAG,KAAK,EAAE,QAAQ,EAAE;IAIlC,OAAO,CAAC,IAAI,SAAS,QAAQ,EAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAI1C;;;;;;OAMG;IACG,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAIvE,gBAAgB,CAAC,IAAI,SAAS,QAAQ,EAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAQ9B;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB/B;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAM/B"}
+{"version":3,"file":"scope.instance.d.ts","sourceRoot":"","sources":["../../src/scope/scope.instance.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,aAAa,MAAM,yBAAyB,CAAC;AAEpD,OAAO,WAAW,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,KAAK,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAE1F,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAI3E,OAAO,EACL,cAAc,EACd,cAAc,EAEd,UAAU,EAEV,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,KAAK,EACV,KAAK,IAAI,EACV,MAAM,WAAW,CAAC;AASnB,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAK/E,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,YAAY,MAAM,wBAAwB,CAAC;AAIlD,OAAO,KAAK,WAAW,MAAM,qBAAqB,CAAC;AAInD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,cAAwC,MAAM,2BAA2B,CAAC;AACjF,OAAO,cAAc,MAAM,2BAA2B,CAAC;AACvD,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAI7D,OAAO,EAA2B,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,aAAa,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAKL,YAAY,EAKZ,KAAK,SAAS,EACf,MAAM,SAAS,CAAC;AAEjB,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAA6C,cAAc,EAAE,MAAM,YAAY,CAAC;AAGvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,gBAAgB,MAAM,+BAA+B,CAAC;AAWlE,qBAAa,KAAM,SAAQ,UAAU;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;IACnD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAmB;IAClD,OAAO,CAAC,SAAS,CAAe;IAChC,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,YAAY,CAAC,CAAiB;IAEtC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,mBAAmB,EAAE,mBAAmB,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC9B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAS;IAEvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,6EAA6E;IAC7E,OAAO,CAAC,iBAAiB,CAAC,CAAmB;IAC7C,qFAAqF;IACrF,OAAO,CAAC,sBAAsB,CAAC,CAAqD;IAEpF,iEAAiE;IACjE,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,8EAA8E;IAC9E,OAAO,CAAC,eAAe,CAAC,CAAqD;IAE7E,4EAA4E;IAC5E,OAAO,CAAC,aAAa,CAAC,CAAe;IAErC,wEAAwE;IACxE,OAAO,CAAC,aAAa,CAAC,CAAsB;IAE5C,yDAAyD;IACzD,OAAO,CAAC,WAAW,CAAC,CAAa;IAEjC,uDAAuD;IACvD,OAAO,CAAC,UAAU,CAAC,CAAc;IACjC,OAAO,CAAC,eAAe,CAAC,CAAmB;IAC3C,OAAO,CAAC,oBAAoB,CAAC,CAAsB;IACnD,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,mBAAmB,CAAC,CAAqB;IAEjD,4EAA4E;IAC5E,OAAO,CAAC,iBAAiB,CAAC,CAAe;IAEzC,oEAAoE;IACpE,OAAO,CAAC,kBAAkB,CAAC,CAA6C;IACxE,OAAO,CAAC,0BAA0B,CAAC,CAAqD;IACxF,OAAO,CAAC,wBAAwB,CAAC,CAAmD;IAEpF,gCAAgC;IAChC,OAAO,CAAC,cAAc,CAAC,CAAkB;IACzC,OAAO,CAAC,2BAA2B,CAAC,CAA6B;IACjE,OAAO,CAAC,gBAAgB,CAAC,CAAkB;IAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAsB;IAE/C,kEAAkE;IAClE,OAAO,CAAC,cAAc,CAAC,CAAgB;IAEvC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;gBAEtB,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB;cAsC/C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA4xB3C;;;;;;;OAOG;YACW,qBAAqB;IAwBnC;;;OAGG;YACW,gBAAgB;IAsH9B;;;;;;;;;;;;OAYG;YACW,mBAAmB;IAkDjC,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,KAAK,qBAAqB,GA+BhC;IAED,IAAI,IAAI,IAAI,YAAY,CAEvB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,aAAa,IAAI,YAAY,CAEhC;IAED,IAAI,SAAS,qBAEZ;IAED,IAAI,IAAI,IAAI,WAAW,CAEtB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAED,IAAI,MAAM,IAAI,cAAc,CAE3B;IAED,IAAI,MAAM,IAAI,cAAc,GAAG,SAAS,CAEvC;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAED,IAAI,OAAO,IAAI,cAAc,CAE5B;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,IAAI,IAAI,WAAW,GAAG,SAAS,CAElC;IAED,IAAI,SAAS,IAAI,gBAAgB,GAAG,SAAS,CAE5C;IAED,IAAI,QAAQ,IAAI,eAAe,GAAG,SAAS,CAE1C;IAED,IAAI,oBAAoB,IAAI,0BAA0B,GAAG,SAAS,CAEjE;IAED,IAAI,eAAe,IAAI,eAAe,GAAG,SAAS,CAEjD;IAED;;;;;;;;;;OAUG;IACH,IAAI,YAAY,IAAI,mBAAmB,GAAG,SAAS,CAElD;IAED,IAAI,OAAO,IAAI,cAAc,GAAG,SAAS,CAExC;IAED,IAAI,aAAa,IAAI,mBAAmB,CAEvC;IAED;;;;;;;;;OASG;IACH,IAAI,gBAAgB,IAAI,gBAAgB,GAAG,SAAS,CAEnD;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,SAAS,GAAG,SAAS,CAErC;IAED;;;OAGG;IACH,IAAI,KAAK,IAAI,YAAY,GAAG,SAAS,CAEpC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,UAAU,IAAI,UAAU,GAAG,SAAS,CAEvC;IAED;;;;OAIG;IACH,IAAI,gBAAgB,IAAI,YAAY,GAAG,SAAS,CAE/C;IAED;;;OAGG;IACH,IAAI,aAAa,IAAI,aAAa,GAAG,SAAS,CAE7C;IAED;;;;OAIG;IACH,IAAI,iBAAiB,IAAI,OAAO,gBAAgB,EAAE,iBAAiB,GAAG,SAAS,CAE9E;IAED;;;OAGG;IACH,IAAI,yBAAyB,IAAI,OAAO,gBAAgB,EAAE,yBAAyB,GAAG,SAAS,CAE9F;IAED;;;OAGG;IACH,IAAI,uBAAuB,IAAI,OAAO,gBAAgB,EAAE,uBAAuB,GAAG,SAAS,CAE1F;IAED;;;;OAIG;IACH,qBAAqB,IAAI,MAAM,EAAE;IA4FjC;;;OAGG;YACW,0BAA0B;IA+ExC;;;OAGG;IACH,OAAO,CAAC,iCAAiC;IAkBzC;;;OAGG;IACH,IAAI,UAAU;;;;;;kBAEb;IAED,aAAa,CAAC,GAAG,KAAK,EAAE,QAAQ,EAAE;IAIlC,OAAO,CAAC,IAAI,SAAS,QAAQ,EAC3B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAI1C;;;;;;OAMG;IACG,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAIvE,gBAAgB,CAAC,IAAI,SAAS,QAAQ,EAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GACtB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAQ9B;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB/B;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAM/B"}

package/server/custom-routes.helper.d.ts

@@ -1,4 +1,4 @@
-import { type FrontMcpLogger, type FrontMcpServer, type HttpRouteConfig, type ServerRequest, type ServerRequestHandler } from '../common';
+import { type FrontMcpLogger, type FrontMcpServer, type HttpOutput, type HttpRouteConfig, type ServerRequest, type ServerRequestHandler, type ServerResponse } from '../common';
 /** Shape of the `session:verify` flow output we care about here. */
 export type VerifyResult = {
     kind: 'authorized';
@@ -16,6 +16,8 @@ export type VerifyResult = {
  * scope's flow-name typing.
  */
 export type VerifySessionFn = (request: ServerRequest) => Promise<VerifyResult | undefined>;
+/** Dispatch the `http:ip-filter` flow; it answers with the rejection, or nothing when the caller may proceed. */
+export type CheckClientIpFn = (request: ServerRequest, response: ServerResponse) => Promise<HttpOutput | undefined>;
 export interface RegisterCustomHttpRoutesArgs {
     /** Custom routes from `http.routes`. */
     routes: HttpRouteConfig[] | undefined;
@@ -23,6 +25,8 @@ export interface RegisterCustomHttpRoutesArgs {
     server: FrontMcpServer;
     /** Runs `session:verify` for `auth: true` routes. */
     verifySession: VerifySessionFn;
+    /** Runs `http:ip-filter` before every route (GHSA-hwfp-xv2f-fr8g). */
+    checkClientIp: CheckClientIpFn;
     /** Resolved gateway entry path (e.g. `''` or `'/mcp'`). */
     entryPath: string;
     /** Per-app / per-scope route base (e.g. `''` or `'/billing'`). */
@@ -70,6 +74,8 @@ export declare function assertNotReserved(method: string, path: string, reserved
  * auth token) before the user handler runs.
  */
 export declare function wrapWithAuth(handler: ServerRequestHandler, verifySession: VerifySessionFn, logger: FrontMcpLogger): ServerRequestHandler;
+/** Answer a route with the `throttle.ipFilter` rejection before its handler, or its auth, runs. */
+export declare function wrapWithIpFilter(handler: ServerRequestHandler, checkClientIp: CheckClientIpFn): ServerRequestHandler;
 /**
  * Register all configured custom HTTP routes on the active server.
  *

package/server/custom-routes.helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-routes.helper.d.ts","sourceRoot":"","sources":["../../src/server/custom-routes.helper.ts"],"names":[],"mappings":"AAgBA,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAE1B,MAAM,WAAW,CAAC;AAGnB,oEAAoE;AACpE,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AAE5F,MAAM,WAAW,4BAA4B;IAC3C,wCAAwC;IACxC,MAAM,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IACtC,gDAAgD;IAChD,MAAM,EAAE,cAAc,CAAC;IACvB,qDAAqD;IACrD,aAAa,EAAE,eAAe,CAAC;IAC/B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;aACZ,QAAQ,EAAE,MAAM;gBAFhB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM;CASnC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAcrH;AAQD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;IAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD,IAAI,CAYN;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,oBAAoB,EAC7B,aAAa,EAAE,eAAe,EAC9B,MAAM,EAAE,cAAc,GACrB,oBAAoB,CAwCtB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,IAAI,CAajF"}
+{"version":3,"file":"custom-routes.helper.d.ts","sourceRoot":"","sources":["../../src/server/custom-routes.helper.ts"],"names":[],"mappings":"AAgBA,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAGnB,oEAAoE;AACpE,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AAE5F,iHAAiH;AACjH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;AAEpH,MAAM,WAAW,4BAA4B;IAC3C,wCAAwC;IACxC,MAAM,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IACtC,gDAAgD;IAChD,MAAM,EAAE,cAAc,CAAC;IACvB,qDAAqD;IACrD,aAAa,EAAE,eAAe,CAAC;IAC/B,sEAAsE;IACtE,aAAa,EAAE,eAAe,CAAC;IAC/B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;aACZ,QAAQ,EAAE,MAAM;gBAFhB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM;CASnC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAcrH;AAQD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;IAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD,IAAI,CAYN;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,oBAAoB,EAC7B,aAAa,EAAE,eAAe,EAC9B,MAAM,EAAE,cAAc,GACrB,oBAAoB,CAwCtB;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,eAAe,GAAG,oBAAoB,CAMpH;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,IAAI,CAajF"}

package/skill/flows/filter-skills.flow.d.ts

@@ -0,0 +1,39 @@
+import { z } from '@frontmcp/lazy-zod';
+import { FlowBase, type FlowRunOptions, type SkillEntry } from '../../common';
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    skills: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<SkillEntry, unknown>>;
+    ctx: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    skills: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<SkillEntry, unknown>>;
+}, import("zod/v4/core").$strip>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    skills: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<SkillEntry, unknown>>;
+}, import("zod/v4/core").$strip>;
+declare const plan: {
+    readonly pre: ["parseInput"];
+    readonly execute: ["filterSkills"];
+    readonly finalize: ["finalize"];
+};
+declare global {
+    interface ExtendFlows {
+        'skills:filter': FlowRunOptions<FilterSkillsFlow, typeof plan, typeof inputSchema, typeof outputSchema, typeof stateSchema>;
+    }
+}
+declare const name: "skills:filter";
+/**
+ * Decides which of the given skills the current caller may discover or load.
+ *
+ * Every skill surface runs it before serving skills: MCP `skills/search`, `skills/list` and
+ * `skills/load`, the SEP-2640 `skill://` resources and the HTTP `/skills` API. A skill the flow
+ * drops is treated as absent there: left out of listings and not found when named.
+ *
+ * `filterSkills` is the extension point: hook it with `Will`/`Did`/`Around` and replace
+ * `state.skills` with the skills the caller may see.
+ */
+export default class FilterSkillsFlow extends FlowBase<typeof name> {
+    parseInput(): Promise<void>;
+    finalize(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=filter-skills.flow.d.ts.map

package/skill/flows/filter-skills.flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-skills.flow.d.ts","sourceRoot":"","sources":["../../../src/skill/flows/filter-skills.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,EAAQ,QAAQ,EAA8B,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAMhH,QAAA,MAAM,WAAW;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;gCAEhB,CAAC;AAEH,QAAA,MAAM,WAAW;;gCAEf,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,eAAe,EAAE,cAAc,CAC7B,gBAAgB,EAChB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,eAAwB,CAAC;AAGtC;;;;;;;;;GASG;AAQH,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAE3D,UAAU;IASV,QAAQ;CAGf"}

package/skill/flows/http/llm-full-txt.flow.d.ts

@@ -22,15 +22,15 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
     }, import("zod/v4/core").$strip>>>>;
 }, import("zod/v4/core").$strip>;
 declare const plan: {
-    readonly pre: ["checkEnabled"];
+    readonly pre: ["checkIpFilter", "checkEnabled"];
     readonly execute: ["generateContent"];
 };
 declare global {
@@ -58,6 +58,7 @@ export default class LlmFullTxtFlow extends FlowBase<typeof name> {
      * Matches GET requests to /llm_full.txt or configured path.
      */
     static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    checkIpFilter(): Promise<void>;
     checkEnabled(): Promise<void>;
     generateContent(): Promise<void>;
 }

package/skill/flows/http/llm-full-txt.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llm-full-txt.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/llm-full-txt.flow.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,QAAQ,EAQR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAMzB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;gCAEf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,0BAA0B,EAAE,cAAc,CACxC,cAAc,EACd,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,0BAAmC,CAAC;AAGjD;;;;;;;;;;;GAWG;AAWH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC/D,MAAM,2CAA4C;IAElD;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAqBhE,YAAY;IAoCZ,eAAe;CAsDtB"}
+{"version":3,"file":"llm-full-txt.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/llm-full-txt.flow.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,QAAQ,EAQR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAOzB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;gCAEf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,0BAA0B,EAAE,cAAc,CACxC,cAAc,EACd,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,0BAAmC,CAAC;AAGjD;;;;;;;;;;;GAWG;AAWH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC/D,MAAM,2CAA4C;IAElD;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAqBhE,aAAa;IAKb,YAAY;IAoCZ,eAAe;CAyDtB"}

package/skill/flows/http/llm-txt.flow.d.ts

@@ -22,15 +22,15 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
     }, import("zod/v4/core").$strip>>>>;
 }, import("zod/v4/core").$strip>;
 declare const plan: {
-    readonly pre: ["checkEnabled"];
+    readonly pre: ["checkIpFilter", "checkEnabled"];
     readonly execute: ["generateContent"];
 };
 declare global {
@@ -65,6 +65,7 @@ export default class LlmTxtFlow extends FlowBase<typeof name> {
      * Matches GET requests to /llm.txt or configured path.
      */
     static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    checkIpFilter(): Promise<void>;
     checkEnabled(): Promise<void>;
     generateContent(): Promise<void>;
 }

package/skill/flows/http/llm-txt.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llm-txt.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/llm-txt.flow.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,QAAQ,EAQR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAMzB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;gCAEf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,UAAU,EACV,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,qBAA8B,CAAC;AAG5C;;;;;;;;;;;;;;;;;;GAkBG;AAWH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC3D,MAAM,2CAAwC;IAE9C;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAqBhE,YAAY;IAoCZ,eAAe;CAuDtB"}
+{"version":3,"file":"llm-txt.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/llm-txt.flow.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,QAAQ,EAQR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAOzB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;gCAEf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,UAAU,EACV,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,qBAA8B,CAAC;AAG5C;;;;;;;;;;;;;;;;;;GAkBG;AAWH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC3D,MAAM,2CAAwC;IAE9C;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAqBhE,aAAa;IAKb,YAAY;IAoCZ,eAAe;CAuDtB"}

package/skill/flows/http/skills-api.flow.d.ts

@@ -35,15 +35,15 @@ declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            none: "none";
             lax: "lax";
+            none: "none";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
     }, import("zod/v4/core").$strip>>>>;
 }, import("zod/v4/core").$strip>;
 declare const plan: {
-    readonly pre: ["checkEnabled", "parseRequest"];
+    readonly pre: ["checkIpFilter", "checkEnabled", "parseRequest"];
     readonly execute: ["handleRequest"];
 };
 declare global {
@@ -68,6 +68,7 @@ export default class SkillsApiFlow extends FlowBase<typeof name> {
      * Matches GET requests to /skills or /skills/{id}.
      */
     static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    checkIpFilter(): Promise<void>;
     checkEnabled(): Promise<void>;
     parseRequest(): Promise<void>;
     handleRequest(): Promise<void>;
@@ -90,12 +91,6 @@ export default class SkillsApiFlow extends FlowBase<typeof name> {
      * empty AuthInfo is returned, which denies any role/permission-gated skill.
      */
     private httpAuthInfo;
-    /**
-     * Filter search results (whose projected metadata lacks `authorities`) down
-     * to skills the caller can discover, by resolving the live skill entry to
-     * read its declared authorities. No-op when no engine is configured.
-     */
-    private filterHttpResultsByAuthorities;
     private handleListSkills;
 }
 export {};

package/skill/flows/http/skills-api.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills-api.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/skills-api.flow.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,QAAQ,EAQR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAezB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;gCAWf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,iBAAiB,EAAE,cAAc,CAC/B,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,iBAA0B,CAAC;AAGxC;;;;;;;;GAQG;AAWH,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,2CAA2C;IAEjD;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAsBhE,YAAY;IAsCZ,YAAY;IA+FZ,aAAa;YA2CL,cAAc;YAuEd,kBAAkB;IA0HhC;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAoC9B;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;IAMpB;;;;OAIG;YACW,8BAA8B;YAO9B,gBAAgB;CA2D/B"}
+{"version":3,"file":"skills-api.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/skills-api.flow.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,QAAQ,EAQR,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AAYzB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;gCAWf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,iBAAiB,EAAE,cAAc,CAC/B,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,iBAA0B,CAAC;AAGxC;;;;;;;;GAQG;AAWH,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,2CAA2C;IAEjD;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAsBhE,aAAa;IAKb,YAAY;IAsCZ,YAAY;IA+FZ,aAAa;YA2CL,cAAc;YA6Ed,kBAAkB;IA4HhC;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAoC9B;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;YAMN,gBAAgB;CA8D/B"}

package/skill/flows/index.d.ts

@@ -9,5 +9,6 @@
  */
 export { default as SearchSkillsFlow } from './search-skills.flow';
 export { default as LoadSkillFlow } from './load-skill.flow';
+export { default as FilterSkillsFlow } from './filter-skills.flow';
 export { LlmTxtFlow, LlmFullTxtFlow, SkillsApiFlow } from './http';
 //# sourceMappingURL=index.d.ts.map

package/skill/flows/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/skill/flows/index.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/skill/flows/index.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGnE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC"}