frontmcp 1.0.4 → 1.1.0

package/src/config/frontmcp-config.schema.js

@@ -0,0 +1,313 @@
+"use strict";
+/**
+ * FrontMCP Config — Zod Validation Schema
+ *
+ * Validates and normalizes `frontmcp.config` files.
+ * The schema is also the source of truth for JSON Schema generation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.frontmcpConfigSchema = exports.deploymentTargetSchema = exports.mcpbDeploymentSchema = exports.mcpbRepositorySchema = exports.mcpbCompatibilitySchema = exports.mcpbUserConfigEntrySchema = exports.mcpbAuthorSchema = exports.sdkDeploymentSchema = exports.browserDeploymentSchema = exports.cloudflareDeploymentSchema = exports.lambdaDeploymentSchema = exports.vercelDeploymentSchema = exports.cliDeploymentSchema = exports.distributedDeploymentSchema = exports.nodeDeploymentSchema = exports.wranglerConfigSchema = exports.cliTargetConfigSchema = exports.haConfigSchema = exports.buildOptionsSchema = exports.esbuildOptionsSchema = exports.serverDefaultsSchema = exports.httpConfigSchema = exports.securityHeadersSchema = exports.cookiesConfigSchema = exports.cspConfigSchema = exports.corsConfigSchema = void 0;
+// Lazy-by-default `z`. Same API as `zod`'s `z`, but compound schemas
+// (`z.object`, `z.union`, `z.discriminatedUnion`, `z.intersection`,
+// `z.record`, `z.tuple`) defer construction until first `.parse()`.
+// This schema is parsed at CLI startup — using lazy-z keeps module load
+// from materializing every nested config-shape eagerly.
+//
+// Imported directly from `@frontmcp/lazy-zod` (not the `@frontmcp/sdk`
+// barrel) to keep this leaf module lightweight — pulling the full SDK
+// barrel into Jest's transform chain trips on `jose`'s ESM-only build.
+const lazy_zod_1 = require("@frontmcp/lazy-zod");
+// ============================================
+// Server Defaults
+// ============================================
+exports.corsConfigSchema = lazy_zod_1.z
+    .object({
+    origins: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+    credentials: lazy_zod_1.z.boolean().optional(),
+    maxAge: lazy_zod_1.z.number().int().positive().optional(),
+})
+    .strict();
+exports.cspConfigSchema = lazy_zod_1.z
+    .object({
+    enabled: lazy_zod_1.z.boolean().optional(),
+    directives: lazy_zod_1.z.record(lazy_zod_1.z.string(), lazy_zod_1.z.union([lazy_zod_1.z.string(), lazy_zod_1.z.array(lazy_zod_1.z.string())])).optional(),
+    reportUri: lazy_zod_1.z.string().optional(),
+    reportOnly: lazy_zod_1.z.boolean().optional(),
+})
+    .strict();
+exports.cookiesConfigSchema = lazy_zod_1.z
+    .object({
+    affinity: lazy_zod_1.z.string().optional(),
+    domain: lazy_zod_1.z.string().optional(),
+    sameSite: lazy_zod_1.z.enum(['Strict', 'Lax', 'None']).optional(),
+})
+    .strict();
+exports.securityHeadersSchema = lazy_zod_1.z
+    .object({
+    hsts: lazy_zod_1.z.union([lazy_zod_1.z.string(), lazy_zod_1.z.literal(false)]).optional(),
+    contentTypeOptions: lazy_zod_1.z.union([lazy_zod_1.z.string(), lazy_zod_1.z.literal(false)]).optional(),
+    frameOptions: lazy_zod_1.z.union([lazy_zod_1.z.string(), lazy_zod_1.z.literal(false)]).optional(),
+    custom: lazy_zod_1.z.record(lazy_zod_1.z.string(), lazy_zod_1.z.string()).optional(),
+})
+    .strict();
+exports.httpConfigSchema = lazy_zod_1.z
+    .object({
+    port: lazy_zod_1.z.number().int().min(0).max(65535).optional(),
+    socketPath: lazy_zod_1.z.string().optional(),
+    entryPath: lazy_zod_1.z.string().optional(),
+    cors: exports.corsConfigSchema.optional(),
+})
+    .strict();
+exports.serverDefaultsSchema = lazy_zod_1.z
+    .object({
+    http: exports.httpConfigSchema.optional(),
+    csp: exports.cspConfigSchema.optional(),
+    cookies: exports.cookiesConfigSchema.optional(),
+    headers: exports.securityHeadersSchema.optional(),
+})
+    .strict();
+// ============================================
+// Build Options
+// ============================================
+exports.esbuildOptionsSchema = lazy_zod_1.z
+    .object({
+    external: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+    define: lazy_zod_1.z.record(lazy_zod_1.z.string(), lazy_zod_1.z.string()).optional(),
+    target: lazy_zod_1.z.string().optional(),
+    minify: lazy_zod_1.z.boolean().optional(),
+})
+    .strict();
+exports.buildOptionsSchema = lazy_zod_1.z
+    .object({
+    esbuild: exports.esbuildOptionsSchema.optional(),
+    dependencies: lazy_zod_1.z
+        .object({
+        system: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+        nativeAddons: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+    })
+        .strict()
+        .optional(),
+    storage: lazy_zod_1.z
+        .object({
+        type: lazy_zod_1.z.enum(['sqlite', 'redis', 'none']),
+        required: lazy_zod_1.z.boolean().optional(),
+    })
+        .strict()
+        .optional(),
+    network: lazy_zod_1.z
+        .object({
+        defaultPort: lazy_zod_1.z.number().int().optional(),
+        supportsSocket: lazy_zod_1.z.boolean().optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+// ============================================
+// Deployment Targets
+// ============================================
+exports.haConfigSchema = lazy_zod_1.z
+    .object({
+    heartbeatIntervalMs: lazy_zod_1.z.number().int().positive().optional(),
+    heartbeatTtlMs: lazy_zod_1.z.number().int().positive().optional(),
+    takeoverGracePeriodMs: lazy_zod_1.z.number().int().positive().optional(),
+    redisKeyPrefix: lazy_zod_1.z.string().optional(),
+})
+    .strict();
+exports.cliTargetConfigSchema = lazy_zod_1.z
+    .object({
+    description: lazy_zod_1.z.string().optional(),
+    outputDefault: lazy_zod_1.z.enum(['text', 'json']).optional(),
+    authRequired: lazy_zod_1.z.boolean().optional(),
+    excludeTools: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+    oauth: lazy_zod_1.z
+        .object({
+        serverUrl: lazy_zod_1.z.string().optional(),
+        clientId: lazy_zod_1.z.string().optional(),
+        defaultScope: lazy_zod_1.z.string().optional(),
+        portRange: lazy_zod_1.z.tuple([lazy_zod_1.z.number(), lazy_zod_1.z.number()]).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+exports.wranglerConfigSchema = lazy_zod_1.z
+    .object({
+    name: lazy_zod_1.z.string().optional(),
+    compatibilityDate: lazy_zod_1.z.string().optional(),
+})
+    .strict();
+const deploymentBaseSchema = lazy_zod_1.z.object({
+    outDir: lazy_zod_1.z.string().optional(),
+    env: lazy_zod_1.z.record(lazy_zod_1.z.string(), lazy_zod_1.z.string()).optional(),
+});
+exports.nodeDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('node'),
+    server: exports.serverDefaultsSchema.optional(),
+})
+    .strict();
+exports.distributedDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('distributed'),
+    server: exports.serverDefaultsSchema.optional(),
+    ha: exports.haConfigSchema.optional(),
+})
+    .strict();
+exports.cliDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('cli'),
+    js: lazy_zod_1.z.boolean().optional(),
+    cli: exports.cliTargetConfigSchema.optional(),
+    sea: lazy_zod_1.z.object({ enabled: lazy_zod_1.z.boolean().optional() }).strict().optional(),
+})
+    .strict();
+exports.vercelDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('vercel'),
+    server: exports.serverDefaultsSchema.optional(),
+})
+    .strict();
+exports.lambdaDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('lambda'),
+    server: exports.serverDefaultsSchema.optional(),
+})
+    .strict();
+exports.cloudflareDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('cloudflare'),
+    server: exports.serverDefaultsSchema.optional(),
+    wrangler: exports.wranglerConfigSchema.optional(),
+})
+    .strict();
+exports.browserDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('browser'),
+})
+    .strict();
+exports.sdkDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('sdk'),
+})
+    .strict();
+// ============================================
+// MCPB (MCP Bundles) target — produces a .mcpb ZIP archive
+// per https://github.com/modelcontextprotocol/mcpb (manifest_version 0.3)
+// ============================================
+exports.mcpbAuthorSchema = lazy_zod_1.z
+    .object({
+    name: lazy_zod_1.z.string(),
+    email: lazy_zod_1.z.string().email().optional(),
+    url: lazy_zod_1.z.string().url().optional(),
+})
+    .strict();
+exports.mcpbUserConfigEntrySchema = lazy_zod_1.z
+    .object({
+    type: lazy_zod_1.z.enum(['string', 'number', 'boolean', 'directory', 'file']),
+    title: lazy_zod_1.z.string(),
+    description: lazy_zod_1.z.string().optional(),
+    required: lazy_zod_1.z.boolean().optional(),
+    default: lazy_zod_1.z.union([lazy_zod_1.z.string(), lazy_zod_1.z.number(), lazy_zod_1.z.boolean()]).optional(),
+    multiple: lazy_zod_1.z.boolean().optional(),
+    sensitive: lazy_zod_1.z.boolean().optional(),
+    min: lazy_zod_1.z.number().optional(),
+    max: lazy_zod_1.z.number().optional(),
+})
+    .strict();
+exports.mcpbCompatibilitySchema = lazy_zod_1.z
+    .object({
+    claude_desktop: lazy_zod_1.z.string().optional(),
+    platforms: lazy_zod_1.z.array(lazy_zod_1.z.enum(['darwin', 'win32', 'linux'])).optional(),
+    runtimes: lazy_zod_1.z
+        .object({
+        node: lazy_zod_1.z.string().optional(),
+        python: lazy_zod_1.z.string().optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+exports.mcpbRepositorySchema = lazy_zod_1.z.union([
+    lazy_zod_1.z.string(),
+    lazy_zod_1.z
+        .object({
+        type: lazy_zod_1.z.string(),
+        url: lazy_zod_1.z.string(),
+    })
+        .strict(),
+]);
+exports.mcpbDeploymentSchema = deploymentBaseSchema
+    .extend({
+    target: lazy_zod_1.z.literal('mcpb'),
+    /** Human-friendly display name shown in installer dialog. */
+    displayName: lazy_zod_1.z.string().optional(),
+    /** Long markdown description shown in extension details. */
+    longDescription: lazy_zod_1.z.string().optional(),
+    /** Author object (name/email/url). Overrides parsed package.json.author. */
+    author: exports.mcpbAuthorSchema.optional(),
+    /** SPDX license identifier. Overrides package.json.license. */
+    license: lazy_zod_1.z.string().optional(),
+    /** Project homepage URL. */
+    homepage: lazy_zod_1.z.string().url().optional(),
+    /** Source repository (string URL or {type, url}). */
+    repository: exports.mcpbRepositorySchema.optional(),
+    /** Documentation URL. */
+    documentation: lazy_zod_1.z.string().url().optional(),
+    /** Support URL (issues/contact). */
+    support: lazy_zod_1.z.string().optional(),
+    /** Path to icon (PNG) relative to project root. */
+    icon: lazy_zod_1.z.string().optional(),
+    /** Keywords for search. */
+    keywords: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+    /** Privacy policy URLs for external services this bundle talks to. */
+    privacyPolicies: lazy_zod_1.z.array(lazy_zod_1.z.string()).optional(),
+    /** Runtime/platform/client compatibility constraints. */
+    compatibility: exports.mcpbCompatibilitySchema.optional(),
+    /** User-configurable inputs (injected as env vars at runtime). */
+    userConfig: lazy_zod_1.z.record(lazy_zod_1.z.string(), exports.mcpbUserConfigEntrySchema).optional(),
+    /** Single-executable-application binary integration. */
+    sea: lazy_zod_1.z
+        .object({
+        /** Build SEA binary for host platform and include via platform_overrides. */
+        enabled: lazy_zod_1.z.boolean().optional(),
+        /** Directory of pre-built SEA binaries to merge (e.g., CI artifacts). */
+        mergeFrom: lazy_zod_1.z.string().optional(),
+    })
+        .strict()
+        .optional(),
+    /** Include node_modules/ in archive (opt-in, defaults off). */
+    includeNodeModules: lazy_zod_1.z.boolean().optional(),
+    /** Produce byte-identical archives across builds. @default true */
+    deterministic: lazy_zod_1.z.boolean().optional(),
+})
+    .strict();
+exports.deploymentTargetSchema = lazy_zod_1.z.discriminatedUnion('target', [
+    exports.nodeDeploymentSchema,
+    exports.distributedDeploymentSchema,
+    exports.cliDeploymentSchema,
+    exports.vercelDeploymentSchema,
+    exports.lambdaDeploymentSchema,
+    exports.cloudflareDeploymentSchema,
+    exports.browserDeploymentSchema,
+    exports.sdkDeploymentSchema,
+    exports.mcpbDeploymentSchema,
+]);
+// ============================================
+// Top-Level Config
+// ============================================
+exports.frontmcpConfigSchema = lazy_zod_1.z
+    .object({
+    $schema: lazy_zod_1.z.string().optional(),
+    name: lazy_zod_1.z
+        .string()
+        .min(1)
+        .regex(/^[a-zA-Z0-9._-]+$/, 'Must be alphanumeric with .-_ only'),
+    version: lazy_zod_1.z.string().optional(),
+    entry: lazy_zod_1.z.string().optional(),
+    nodeVersion: lazy_zod_1.z.string().optional(),
+    deployments: lazy_zod_1.z.array(exports.deploymentTargetSchema).min(1, 'At least one deployment target required'),
+    build: exports.buildOptionsSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=frontmcp-config.schema.js.map

package/src/config/frontmcp-config.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmcp-config.schema.js","sourceRoot":"","sources":["../../../src/config/frontmcp-config.schema.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,wDAAwD;AACxD,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,iDAAuC;AAEvC,+CAA+C;AAC/C,kBAAkB;AAClB,+CAA+C;AAElC,QAAA,gBAAgB,GAAG,YAAC;KAC9B,MAAM,CAAC;IACN,OAAO,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,eAAe,GAAG,YAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,YAAC,CAAC,MAAM,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,KAAK,CAAC,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvF,SAAS,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,mBAAmB,GAAG,YAAC;KACjC,MAAM,CAAC;IACN,QAAQ,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,YAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,qBAAqB,GAAG,YAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,YAAC,CAAC,KAAK,CAAC,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,kBAAkB,EAAE,YAAC,CAAC,KAAK,CAAC,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtE,YAAY,EAAE,YAAC,CAAC,KAAK,CAAC,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,MAAM,EAAE,YAAC,CAAC,MAAM,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,gBAAgB,GAAG,YAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACnD,UAAU,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,wBAAgB,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,oBAAoB,GAAG,YAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,wBAAgB,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,uBAAe,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,2BAAmB,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,6BAAqB,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+CAA+C;AAC/C,gBAAgB;AAChB,+CAA+C;AAElC,QAAA,oBAAoB,GAAG,YAAC;KAClC,MAAM,CAAC;IACN,QAAQ,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,YAAC,CAAC,MAAM,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,kBAAkB,GAAG,YAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,YAAC;SACZ,MAAM,CAAC;QACN,MAAM,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,YAAY,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,OAAO,EAAE,YAAC;SACP,MAAM,CAAC;QACN,IAAI,EAAE,YAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,QAAQ,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,OAAO,EAAE,YAAC;SACP,MAAM,CAAC;QACN,WAAW,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACxC,cAAc,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+CAA+C;AAC/C,qBAAqB;AACrB,+CAA+C;AAElC,QAAA,cAAc,GAAG,YAAC;KAC5B,MAAM,CAAC;IACN,mBAAmB,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,cAAc,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,qBAAqB,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,cAAc,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,qBAAqB,GAAG,YAAC;KACnC,MAAM,CAAC;IACN,WAAW,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,aAAa,EAAE,YAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,YAAY,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,YAAC;SACL,MAAM,CAAC;QACN,SAAS,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,QAAQ,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,YAAY,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,SAAS,EAAE,YAAC,CAAC,KAAK,CAAC,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,oBAAoB,GAAG,YAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,iBAAiB,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,YAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,GAAG,EAAE,YAAC,CAAC,MAAM,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,oBAAoB;KACrD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,EAAE,4BAAoB,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,2BAA2B,GAAG,oBAAoB;KAC5D,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAChC,MAAM,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,sBAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,mBAAmB,GAAG,oBAAoB;KACpD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACxB,EAAE,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,6BAAqB,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,YAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,sBAAsB,GAAG,oBAAoB;KACvD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,MAAM,EAAE,4BAAoB,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,sBAAsB,GAAG,oBAAoB;KACvD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,MAAM,EAAE,4BAAoB,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,0BAA0B,GAAG,oBAAoB;KAC3D,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC/B,MAAM,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,4BAAoB,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,uBAAuB,GAAG,oBAAoB;KACxD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,mBAAmB,GAAG,oBAAoB;KACpD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+CAA+C;AAC/C,2DAA2D;AAC3D,0EAA0E;AAC1E,+CAA+C;AAElC,QAAA,gBAAgB,GAAG,YAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,YAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,yBAAyB,GAAG,YAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,YAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAClE,KAAK,EAAE,YAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,YAAC,CAAC,KAAK,CAAC,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,MAAM,EAAE,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,uBAAuB,GAAG,YAAC;KACrC,MAAM,CAAC;IACN,cAAc,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnE,QAAQ,EAAE,YAAC;SACR,MAAM,CAAC;QACN,IAAI,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,oBAAoB,GAAG,YAAC,CAAC,KAAK,CAAC;IAC1C,YAAC,CAAC,MAAM,EAAE;IACV,YAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,YAAC,CAAC,MAAM,EAAE;QAChB,GAAG,EAAE,YAAC,CAAC,MAAM,EAAE;KAChB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,oBAAoB;KACrD,MAAM,CAAC;IACN,MAAM,EAAE,YAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzB,6DAA6D;IAC7D,WAAW,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,4DAA4D;IAC5D,eAAe,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,4EAA4E;IAC5E,MAAM,EAAE,wBAAgB,CAAC,QAAQ,EAAE;IACnC,+DAA+D;IAC/D,OAAO,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,4BAA4B;IAC5B,QAAQ,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,qDAAqD;IACrD,UAAU,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IAC3C,yBAAyB;IACzB,aAAa,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,oCAAoC;IACpC,OAAO,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,mDAAmD;IACnD,IAAI,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,2BAA2B;IAC3B,QAAQ,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,sEAAsE;IACtE,eAAe,EAAE,YAAC,CAAC,KAAK,CAAC,YAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,yDAAyD;IACzD,aAAa,EAAE,+BAAuB,CAAC,QAAQ,EAAE;IACjD,kEAAkE;IAClE,UAAU,EAAE,YAAC,CAAC,MAAM,CAAC,YAAC,CAAC,MAAM,EAAE,EAAE,iCAAyB,CAAC,CAAC,QAAQ,EAAE;IACtE,wDAAwD;IACxD,GAAG,EAAE,YAAC;SACH,MAAM,CAAC;QACN,6EAA6E;QAC7E,OAAO,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,yEAAyE;QACzE,SAAS,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,+DAA+D;IAC/D,kBAAkB,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,mEAAmE;IACnE,aAAa,EAAE,YAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,sBAAsB,GAAG,YAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACnE,4BAAoB;IACpB,mCAA2B;IAC3B,2BAAmB;IACnB,8BAAsB;IACtB,8BAAsB;IACtB,kCAA0B;IAC1B,+BAAuB;IACvB,2BAAmB;IACnB,4BAAoB;CACrB,CAAC,CAAC;AAEH,+CAA+C;AAC/C,mBAAmB;AACnB,+CAA+C;AAElC,QAAA,oBAAoB,GAAG,YAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,YAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;IACnE,OAAO,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,YAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,YAAC,CAAC,KAAK,CAAC,8BAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,yCAAyC,CAAC;IAC9F,KAAK,EAAE,0BAAkB,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC","sourcesContent":["/**\n * FrontMCP Config — Zod Validation Schema\n *\n * Validates and normalizes `frontmcp.config` files.\n * The schema is also the source of truth for JSON Schema generation.\n */\n\n// Lazy-by-default `z`. Same API as `zod`'s `z`, but compound schemas\n// (`z.object`, `z.union`, `z.discriminatedUnion`, `z.intersection`,\n// `z.record`, `z.tuple`) defer construction until first `.parse()`.\n// This schema is parsed at CLI startup — using lazy-z keeps module load\n// from materializing every nested config-shape eagerly.\n//\n// Imported directly from `@frontmcp/lazy-zod` (not the `@frontmcp/sdk`\n// barrel) to keep this leaf module lightweight — pulling the full SDK\n// barrel into Jest's transform chain trips on `jose`'s ESM-only build.\nimport { z } from '@frontmcp/lazy-zod';\n\n// ============================================\n// Server Defaults\n// ============================================\n\nexport const corsConfigSchema = z\n  .object({\n    origins: z.array(z.string()).optional(),\n    credentials: z.boolean().optional(),\n    maxAge: z.number().int().positive().optional(),\n  })\n  .strict();\n\nexport const cspConfigSchema = z\n  .object({\n    enabled: z.boolean().optional(),\n    directives: z.record(z.string(), z.union([z.string(), z.array(z.string())])).optional(),\n    reportUri: z.string().optional(),\n    reportOnly: z.boolean().optional(),\n  })\n  .strict();\n\nexport const cookiesConfigSchema = z\n  .object({\n    affinity: z.string().optional(),\n    domain: z.string().optional(),\n    sameSite: z.enum(['Strict', 'Lax', 'None']).optional(),\n  })\n  .strict();\n\nexport const securityHeadersSchema = z\n  .object({\n    hsts: z.union([z.string(), z.literal(false)]).optional(),\n    contentTypeOptions: z.union([z.string(), z.literal(false)]).optional(),\n    frameOptions: z.union([z.string(), z.literal(false)]).optional(),\n    custom: z.record(z.string(), z.string()).optional(),\n  })\n  .strict();\n\nexport const httpConfigSchema = z\n  .object({\n    port: z.number().int().min(0).max(65535).optional(),\n    socketPath: z.string().optional(),\n    entryPath: z.string().optional(),\n    cors: corsConfigSchema.optional(),\n  })\n  .strict();\n\nexport const serverDefaultsSchema = z\n  .object({\n    http: httpConfigSchema.optional(),\n    csp: cspConfigSchema.optional(),\n    cookies: cookiesConfigSchema.optional(),\n    headers: securityHeadersSchema.optional(),\n  })\n  .strict();\n\n// ============================================\n// Build Options\n// ============================================\n\nexport const esbuildOptionsSchema = z\n  .object({\n    external: z.array(z.string()).optional(),\n    define: z.record(z.string(), z.string()).optional(),\n    target: z.string().optional(),\n    minify: z.boolean().optional(),\n  })\n  .strict();\n\nexport const buildOptionsSchema = z\n  .object({\n    esbuild: esbuildOptionsSchema.optional(),\n    dependencies: z\n      .object({\n        system: z.array(z.string()).optional(),\n        nativeAddons: z.array(z.string()).optional(),\n      })\n      .strict()\n      .optional(),\n    storage: z\n      .object({\n        type: z.enum(['sqlite', 'redis', 'none']),\n        required: z.boolean().optional(),\n      })\n      .strict()\n      .optional(),\n    network: z\n      .object({\n        defaultPort: z.number().int().optional(),\n        supportsSocket: z.boolean().optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict();\n\n// ============================================\n// Deployment Targets\n// ============================================\n\nexport const haConfigSchema = z\n  .object({\n    heartbeatIntervalMs: z.number().int().positive().optional(),\n    heartbeatTtlMs: z.number().int().positive().optional(),\n    takeoverGracePeriodMs: z.number().int().positive().optional(),\n    redisKeyPrefix: z.string().optional(),\n  })\n  .strict();\n\nexport const cliTargetConfigSchema = z\n  .object({\n    description: z.string().optional(),\n    outputDefault: z.enum(['text', 'json']).optional(),\n    authRequired: z.boolean().optional(),\n    excludeTools: z.array(z.string()).optional(),\n    oauth: z\n      .object({\n        serverUrl: z.string().optional(),\n        clientId: z.string().optional(),\n        defaultScope: z.string().optional(),\n        portRange: z.tuple([z.number(), z.number()]).optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict();\n\nexport const wranglerConfigSchema = z\n  .object({\n    name: z.string().optional(),\n    compatibilityDate: z.string().optional(),\n  })\n  .strict();\n\nconst deploymentBaseSchema = z.object({\n  outDir: z.string().optional(),\n  env: z.record(z.string(), z.string()).optional(),\n});\n\nexport const nodeDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('node'),\n    server: serverDefaultsSchema.optional(),\n  })\n  .strict();\n\nexport const distributedDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('distributed'),\n    server: serverDefaultsSchema.optional(),\n    ha: haConfigSchema.optional(),\n  })\n  .strict();\n\nexport const cliDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('cli'),\n    js: z.boolean().optional(),\n    cli: cliTargetConfigSchema.optional(),\n    sea: z.object({ enabled: z.boolean().optional() }).strict().optional(),\n  })\n  .strict();\n\nexport const vercelDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('vercel'),\n    server: serverDefaultsSchema.optional(),\n  })\n  .strict();\n\nexport const lambdaDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('lambda'),\n    server: serverDefaultsSchema.optional(),\n  })\n  .strict();\n\nexport const cloudflareDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('cloudflare'),\n    server: serverDefaultsSchema.optional(),\n    wrangler: wranglerConfigSchema.optional(),\n  })\n  .strict();\n\nexport const browserDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('browser'),\n  })\n  .strict();\n\nexport const sdkDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('sdk'),\n  })\n  .strict();\n\n// ============================================\n// MCPB (MCP Bundles) target — produces a .mcpb ZIP archive\n// per https://github.com/modelcontextprotocol/mcpb (manifest_version 0.3)\n// ============================================\n\nexport const mcpbAuthorSchema = z\n  .object({\n    name: z.string(),\n    email: z.string().email().optional(),\n    url: z.string().url().optional(),\n  })\n  .strict();\n\nexport const mcpbUserConfigEntrySchema = z\n  .object({\n    type: z.enum(['string', 'number', 'boolean', 'directory', 'file']),\n    title: z.string(),\n    description: z.string().optional(),\n    required: z.boolean().optional(),\n    default: z.union([z.string(), z.number(), z.boolean()]).optional(),\n    multiple: z.boolean().optional(),\n    sensitive: z.boolean().optional(),\n    min: z.number().optional(),\n    max: z.number().optional(),\n  })\n  .strict();\n\nexport const mcpbCompatibilitySchema = z\n  .object({\n    claude_desktop: z.string().optional(),\n    platforms: z.array(z.enum(['darwin', 'win32', 'linux'])).optional(),\n    runtimes: z\n      .object({\n        node: z.string().optional(),\n        python: z.string().optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict();\n\nexport const mcpbRepositorySchema = z.union([\n  z.string(),\n  z\n    .object({\n      type: z.string(),\n      url: z.string(),\n    })\n    .strict(),\n]);\n\nexport const mcpbDeploymentSchema = deploymentBaseSchema\n  .extend({\n    target: z.literal('mcpb'),\n    /** Human-friendly display name shown in installer dialog. */\n    displayName: z.string().optional(),\n    /** Long markdown description shown in extension details. */\n    longDescription: z.string().optional(),\n    /** Author object (name/email/url). Overrides parsed package.json.author. */\n    author: mcpbAuthorSchema.optional(),\n    /** SPDX license identifier. Overrides package.json.license. */\n    license: z.string().optional(),\n    /** Project homepage URL. */\n    homepage: z.string().url().optional(),\n    /** Source repository (string URL or {type, url}). */\n    repository: mcpbRepositorySchema.optional(),\n    /** Documentation URL. */\n    documentation: z.string().url().optional(),\n    /** Support URL (issues/contact). */\n    support: z.string().optional(),\n    /** Path to icon (PNG) relative to project root. */\n    icon: z.string().optional(),\n    /** Keywords for search. */\n    keywords: z.array(z.string()).optional(),\n    /** Privacy policy URLs for external services this bundle talks to. */\n    privacyPolicies: z.array(z.string()).optional(),\n    /** Runtime/platform/client compatibility constraints. */\n    compatibility: mcpbCompatibilitySchema.optional(),\n    /** User-configurable inputs (injected as env vars at runtime). */\n    userConfig: z.record(z.string(), mcpbUserConfigEntrySchema).optional(),\n    /** Single-executable-application binary integration. */\n    sea: z\n      .object({\n        /** Build SEA binary for host platform and include via platform_overrides. */\n        enabled: z.boolean().optional(),\n        /** Directory of pre-built SEA binaries to merge (e.g., CI artifacts). */\n        mergeFrom: z.string().optional(),\n      })\n      .strict()\n      .optional(),\n    /** Include node_modules/ in archive (opt-in, defaults off). */\n    includeNodeModules: z.boolean().optional(),\n    /** Produce byte-identical archives across builds. @default true */\n    deterministic: z.boolean().optional(),\n  })\n  .strict();\n\nexport const deploymentTargetSchema = z.discriminatedUnion('target', [\n  nodeDeploymentSchema,\n  distributedDeploymentSchema,\n  cliDeploymentSchema,\n  vercelDeploymentSchema,\n  lambdaDeploymentSchema,\n  cloudflareDeploymentSchema,\n  browserDeploymentSchema,\n  sdkDeploymentSchema,\n  mcpbDeploymentSchema,\n]);\n\n// ============================================\n// Top-Level Config\n// ============================================\n\nexport const frontmcpConfigSchema = z\n  .object({\n    $schema: z.string().optional(),\n    name: z\n      .string()\n      .min(1)\n      .regex(/^[a-zA-Z0-9._-]+$/, 'Must be alphanumeric with .-_ only'),\n    version: z.string().optional(),\n    entry: z.string().optional(),\n    nodeVersion: z.string().optional(),\n    deployments: z.array(deploymentTargetSchema).min(1, 'At least one deployment target required'),\n    build: buildOptionsSchema.optional(),\n  })\n  .strict();\n\nexport type FrontMcpConfigInput = z.input<typeof frontmcpConfigSchema>;\nexport type FrontMcpConfigParsed = z.output<typeof frontmcpConfigSchema>;\n"]}

package/src/config/frontmcp-config.types.d.ts

@@ -0,0 +1,287 @@
+/**
+ * FrontMCP Configuration Types
+ *
+ * Defines the unified deployment configuration schema.
+ * Used by `frontmcp.config.(json|yml|js|ts)` files.
+ *
+ * Separation of concerns:
+ * - frontmcp.config = deployment (targets, server defaults, cookies, CSP)
+ * - @FrontMcp() = runtime (auth, tools, resources, transport)
+ * - Environment variables = secrets/overrides (Redis password, API keys)
+ */
+export interface CorsConfig {
+    /** Allowed origins. Empty array = permissive. */
+    origins?: string[];
+    /** Allow credentials (cookies, authorization headers). @default false */
+    credentials?: boolean;
+    /** Preflight cache max age in seconds. */
+    maxAge?: number;
+}
+export interface CspConfig {
+    /** Enable CSP headers. @default false */
+    enabled?: boolean;
+    /** CSP directives (e.g., 'default-src': "'self'"). */
+    directives?: Record<string, string | string[]>;
+    /** Report URI for CSP violations. */
+    reportUri?: string;
+    /** Use Content-Security-Policy-Report-Only instead. @default false */
+    reportOnly?: boolean;
+}
+export interface CookiesConfig {
+    /** LB affinity cookie name. @default '__frontmcp_node' */
+    affinity?: string;
+    /** Cookie domain. */
+    domain?: string;
+    /** SameSite policy. @default 'Strict' */
+    sameSite?: 'Strict' | 'Lax' | 'None';
+}
+export interface SecurityHeadersConfig {
+    /** Strict-Transport-Security. Set to false to disable. */
+    hsts?: string | false;
+    /** X-Content-Type-Options. Set to false to disable. @default 'nosniff' */
+    contentTypeOptions?: string | false;
+    /** X-Frame-Options. Set to false to disable. @default 'DENY' */
+    frameOptions?: string | false;
+    /** Custom response headers. */
+    custom?: Record<string, string>;
+}
+/**
+ * HTTP options — aligns with `@FrontMcp({ http })`.
+ *
+ * Available on targets that serve HTTP:
+ * - node, distributed: full (port + cors)
+ * - vercel, lambda, cloudflare: no port (platform-managed), but cors applies
+ * - browser, sdk, cli: not available
+ */
+export interface HttpConfig {
+    /** HTTP port. Only for node/distributed. @default 3000 */
+    port?: number;
+    /** Unix socket path (alternative to port). Only for node/distributed. */
+    socketPath?: string;
+    /** MCP entry path ('' or '/mcp'). @default '' */
+    entryPath?: string;
+    /** CORS configuration. */
+    cors?: CorsConfig;
+}
+/**
+ * Server-level options for targets that handle HTTP responses.
+ * Separated from HttpConfig because these apply even to serverless
+ * targets that don't control the port (Cloudflare, Vercel, Lambda).
+ */
+export interface ServerDefaults {
+    /** HTTP configuration (port, cors). */
+    http?: HttpConfig;
+    /** Content Security Policy. */
+    csp?: CspConfig;
+    /** Cookie configuration. */
+    cookies?: CookiesConfig;
+    /** Security headers. */
+    headers?: SecurityHeadersConfig;
+}
+export interface EsbuildOptions {
+    /** Dependencies to exclude from bundle. */
+    external?: string[];
+    /** Global defines. */
+    define?: Record<string, string>;
+    /** Build target (e.g., 'node22'). */
+    target?: string;
+    /** Minify output. */
+    minify?: boolean;
+}
+export interface BuildOptions {
+    /** esbuild/bundler options. */
+    esbuild?: EsbuildOptions;
+    /** System/native dependencies for CLI packaging. */
+    dependencies?: {
+        system?: string[];
+        nativeAddons?: string[];
+    };
+    /** Storage type for CLI setup. */
+    storage?: {
+        type: 'sqlite' | 'redis' | 'none';
+        required?: boolean;
+    };
+    /** Network defaults. */
+    network?: {
+        defaultPort?: number;
+        supportsSocket?: boolean;
+    };
+}
+export interface HaDeploymentConfig {
+    /** Heartbeat interval in ms. @default 10000 */
+    heartbeatIntervalMs?: number;
+    /** Heartbeat TTL in ms (should be 2-3x interval). @default 30000 */
+    heartbeatTtlMs?: number;
+    /** Grace period before claiming orphaned sessions. @default 5000 */
+    takeoverGracePeriodMs?: number;
+    /** Redis key prefix for HA keys. @default 'mcp:ha:' */
+    redisKeyPrefix?: string;
+}
+export interface CliTargetConfig {
+    /** CLI description. */
+    description?: string;
+    /** Default output format. @default 'text' */
+    outputDefault?: 'text' | 'json';
+    /** Require authentication for CLI. */
+    authRequired?: boolean;
+    /** Tools to exclude from CLI. */
+    excludeTools?: string[];
+    /** OAuth configuration for CLI authentication. */
+    oauth?: {
+        serverUrl?: string;
+        clientId?: string;
+        defaultScope?: string;
+        portRange?: [number, number];
+    };
+}
+export interface WranglerConfig {
+    /** Worker name. */
+    name?: string;
+    /** Compatibility date. */
+    compatibilityDate?: string;
+}
+export type DeploymentTargetType = 'node' | 'distributed' | 'cli' | 'vercel' | 'lambda' | 'cloudflare' | 'browser' | 'sdk' | 'mcpb';
+interface DeploymentBase {
+    /** Deployment target type. */
+    target: DeploymentTargetType;
+    /** Output directory override. @default 'dist/{target}' */
+    outDir?: string;
+    /** Environment variables injected at build time. */
+    env?: Record<string, string>;
+}
+export interface NodeDeployment extends DeploymentBase {
+    target: 'node';
+    /** Server config (http with port, csp, cookies, headers). */
+    server?: ServerDefaults;
+}
+export interface DistributedDeployment extends DeploymentBase {
+    target: 'distributed';
+    /** Server config (http with port, csp, cookies, headers). */
+    server?: ServerDefaults;
+    /** HA configuration. */
+    ha?: HaDeploymentConfig;
+}
+export interface CliDeployment extends DeploymentBase {
+    target: 'cli';
+    /** Output JS bundle instead of native binary. */
+    js?: boolean;
+    /** CLI-specific configuration. */
+    cli?: CliTargetConfig;
+    /** Single Executable Application settings. */
+    sea?: {
+        enabled?: boolean;
+    };
+}
+export interface VercelDeployment extends DeploymentBase {
+    target: 'vercel';
+    /** Server config (no port — platform-managed, but cors/csp/cookies apply). */
+    server?: ServerDefaults;
+}
+export interface LambdaDeployment extends DeploymentBase {
+    target: 'lambda';
+    /** Server config (no port — platform-managed, but cors/csp/cookies apply). */
+    server?: ServerDefaults;
+}
+export interface CloudflareDeployment extends DeploymentBase {
+    target: 'cloudflare';
+    /** Server config (no port — platform-managed, but cors/csp/cookies apply). */
+    server?: ServerDefaults;
+    /** Wrangler configuration. */
+    wrangler?: WranglerConfig;
+}
+export interface BrowserDeployment extends DeploymentBase {
+    target: 'browser';
+}
+export interface SdkDeployment extends DeploymentBase {
+    target: 'sdk';
+}
+export interface McpbAuthor {
+    name: string;
+    email?: string;
+    url?: string;
+}
+export type McpbUserConfigType = 'string' | 'number' | 'boolean' | 'directory' | 'file';
+export interface McpbUserConfigEntry {
+    type: McpbUserConfigType;
+    title: string;
+    description?: string;
+    required?: boolean;
+    default?: string | number | boolean;
+    multiple?: boolean;
+    sensitive?: boolean;
+    min?: number;
+    max?: number;
+}
+export interface McpbCompatibility {
+    /** Semver range for Claude Desktop (e.g., ">=1.0.0"). */
+    claude_desktop?: string;
+    /** Supported platforms. */
+    platforms?: Array<'darwin' | 'win32' | 'linux'>;
+    /** Runtime version constraints. */
+    runtimes?: {
+        node?: string;
+        python?: string;
+    };
+}
+export type McpbRepository = string | {
+    type: string;
+    url: string;
+};
+export interface McpbDeployment extends DeploymentBase {
+    target: 'mcpb';
+    /** Human-friendly display name. */
+    displayName?: string;
+    /** Long markdown description. */
+    longDescription?: string;
+    /** Author object — overrides parsed package.json.author. */
+    author?: McpbAuthor;
+    /** SPDX license identifier — overrides package.json.license. */
+    license?: string;
+    /** Project homepage URL. */
+    homepage?: string;
+    /** Source repository. */
+    repository?: McpbRepository;
+    /** Documentation URL. */
+    documentation?: string;
+    /** Support URL (issues/contact). */
+    support?: string;
+    /** Path to icon (PNG) relative to project root. */
+    icon?: string;
+    /** Keywords for search. */
+    keywords?: string[];
+    /** Privacy policy URLs. */
+    privacyPolicies?: string[];
+    /** Runtime/platform compatibility constraints. */
+    compatibility?: McpbCompatibility;
+    /** User-configurable inputs (injected as env vars). */
+    userConfig?: Record<string, McpbUserConfigEntry>;
+    /** Single-executable binary integration. */
+    sea?: {
+        /** Build SEA binary for host platform. */
+        enabled?: boolean;
+        /** Directory of pre-built cross-platform SEA binaries to merge. */
+        mergeFrom?: string;
+    };
+    /** Include node_modules/ in archive (opt-in). */
+    includeNodeModules?: boolean;
+    /** Deterministic archive output. @default true */
+    deterministic?: boolean;
+}
+export type DeploymentTarget = NodeDeployment | DistributedDeployment | CliDeployment | VercelDeployment | LambdaDeployment | CloudflareDeployment | BrowserDeployment | SdkDeployment | McpbDeployment;
+export interface FrontMcpConfig {
+    /** JSON Schema pointer for IDE autocomplete. */
+    $schema?: string;
+    /** Server name (alphanumeric, .-_ allowed). */
+    name: string;
+    /** Server version (semver). @default '1.0.0' */
+    version?: string;
+    /** Entry point file path. */
+    entry?: string;
+    /** Node.js version requirement. @default '>=22.0.0' */
+    nodeVersion?: string;
+    /** Build targets — server config lives inside each target that needs it. */
+    deployments: DeploymentTarget[];
+    /** Build/bundler options. */
+    build?: BuildOptions;
+}
+export {};

package/src/config/frontmcp-config.types.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * FrontMCP Configuration Types
+ *
+ * Defines the unified deployment configuration schema.
+ * Used by `frontmcp.config.(json|yml|js|ts)` files.
+ *
+ * Separation of concerns:
+ * - frontmcp.config = deployment (targets, server defaults, cookies, CSP)
+ * - @FrontMcp() = runtime (auth, tools, resources, transport)
+ * - Environment variables = secrets/overrides (Redis password, API keys)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=frontmcp-config.types.js.map