feat: enhance tool introspection to return undefined for tools outside the allowedTools whitelist and improve plain JSON schema handling

Author: frontegg-david

apps/e2e/demo-e2e-codecall/e2e/codecall.e2e.spec.ts

@@ -446,9 +446,10 @@ test.describe('CodeCall Plugin E2E', () => {
 
       expect(execResult.result.name).toBe('users-list');
       expect(execResult.result.inputType).toBe('object');
-      // Schema instance internals and methods must not be reachable from the script.
-      expect(execResult.result.internal).not.toBe('object');
-      expect(execResult.result.parse).not.toBe('function');
+      // Plain JSON Schema carries no schema-instance internals or methods, so both reads
+      // resolve to undefined rather than an object, a function, or a denied access.
+      expect(execResult.result.internal).toBe('undefined');
+      expect(execResult.result.parse).toBe('undefined');
     });
 
     test('should not reach a host constructor through a tool schema', async ({ mcp }) => {

docs/frontmcp/plugins/codecall/agentscript.mdx

@@ -67,14 +67,25 @@ if (result.success) {
 
 ### getTool(name)
 
-Get metadata about a tool (name, description, schemas) without calling it.
+Get metadata about a tool (name, description, schemas) without calling it. Schemas come back
+as plain JSON Schema documents, and are `null` when the tool declares none.
 
 ```ts
 const meta = getTool('users:list');
 console.log(meta.description);    // "List users with optional filtering"
 console.log(meta.inputSchema);    // { type: "object", properties: { ... } }
 ```
 
+Returns `undefined` when the tool cannot be described — an unknown name, a CodeCall meta-tool
+(same rule as [`callTool`](/frontmcp/plugins/codecall/security#self-reference-guard)), or a
+tool outside the `allowedTools` whitelist the script was invoked with. Guard the result before
+reading from it:
+
+```ts
+const meta = getTool('billing:charge');
+if (!meta) return { skipped: 'billing:charge is not available to this script' };
+```
+
 ---
 
 ### codecallContext

libs/adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -67,15 +67,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.4.0",
-    "@frontmcp/di": "1.4.0",
-    "@frontmcp/sdk": "1.4.0",
-    "@frontmcp/utils": "1.4.0",
+    "@frontmcp/auth": "1.5.2",
+    "@frontmcp/di": "1.5.2",
+    "@frontmcp/sdk": "1.5.2",
+    "@frontmcp/utils": "1.5.2",
     "js-yaml": "^4.1.0",
     "mcp-from-openapi": "2.5.1",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.4.0"
+    "@frontmcp/lazy-zod": "1.5.2"
   }
 }

libs/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/auth",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "FrontMCP Auth - Authentication, session management, and credential vault",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -48,8 +48,8 @@
     "node": ">=24.0.0"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.4.0",
-    "@frontmcp/storage-sqlite": "1.4.0",
+    "@frontmcp/lazy-zod": "1.5.2",
+    "@frontmcp/storage-sqlite": "1.5.2",
     "@vercel/kv": "^3.0.0",
     "ioredis": "^5.0.0"
   },
@@ -65,8 +65,8 @@
     }
   },
   "dependencies": {
-    "@frontmcp/di": "1.4.0",
-    "@frontmcp/utils": "1.4.0",
+    "@frontmcp/di": "1.5.2",
+    "@frontmcp/utils": "1.5.2",
     "jose": "^6.0.0"
   },
   "devDependencies": {

libs/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontmcp",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "FrontMCP command line interface",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -35,9 +35,9 @@
   },
   "dependencies": {
     "@clack/prompts": "^0.10.0",
-    "@frontmcp/lazy-zod": "1.4.0",
-    "@frontmcp/skills": "1.4.0",
-    "@frontmcp/utils": "1.4.0",
+    "@frontmcp/lazy-zod": "1.5.2",
+    "@frontmcp/skills": "1.5.2",
+    "@frontmcp/utils": "1.5.2",
     "@rspack/core": "^1.7.6",
     "commander": "^13.0.0",
     "esbuild": "^0.27.3",

libs/cli/src/commands/package/__tests__/install.spec.ts

@@ -72,6 +72,9 @@ beforeEach(() => {
   fs.mkdirSync(packageDir, { recursive: true });
   jest.spyOn(console, 'log').mockImplementation(() => undefined);
   jest.clearAllMocks();
+  // Drop any per-test implementation (the build-from-config case installs one); the other
+  // mocks keep the implementations their module factories provide.
+  (runCmd as jest.Mock).mockReset();
 });
 
 afterEach(() => {

libs/di/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/di",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "Generic dependency injection container and registry utilities for TypeScript applications",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -48,7 +48,7 @@
     "node": ">=24.0.0"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.4.0",
+    "@frontmcp/lazy-zod": "1.5.2",
     "reflect-metadata": "^0.2.0"
   },
   "devDependencies": {

libs/edge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/edge",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "Run a FrontMCP MCP server on Cloudflare Workers / V8 isolates from a plain config — no decorators, no build step",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,8 +49,8 @@
     "node": ">=24.0.0"
   },
   "peerDependencies": {
-    "@frontmcp/plugin-skilled-openapi": "1.4.0",
-    "@frontmcp/sdk": "1.4.0"
+    "@frontmcp/plugin-skilled-openapi": "1.5.2",
+    "@frontmcp/sdk": "1.5.2"
   },
   "peerDependenciesMeta": {
     "@frontmcp/plugin-skilled-openapi": {

libs/guard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/guard",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "Rate limiting, concurrency control, timeout, IP filtering, and traffic guard utilities for FrontMCP",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,10 +49,10 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/utils": "1.4.0"
+    "@frontmcp/utils": "1.5.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.4.0"
+    "@frontmcp/lazy-zod": "1.5.2"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",

libs/lazy-zod/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/lazy-zod",
-  "version": "1.4.0",
+  "version": "1.5.2",
   "description": "Drop-in zod replacement that lazily constructs compound schemas for dramatic cold-start speedups. Exports `z` (lazy, drop-in), `eagerZ` (real zod, zero overhead), and `lazyZ` (explicit factory wrapper).",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",