@daniel.stefan/metalink 1.3.1

package/packages/core/dist/config/schema.d.ts

@@ -0,0 +1,4352 @@
+import { z } from 'zod';
+/**
+ * Health check configuration schema - common to both stdio and HTTP servers
+ */
+export declare const HealthCheckSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    interval: number;
+    timeout: number;
+}, {
+    enabled?: boolean | undefined;
+    interval?: number | undefined;
+    timeout?: number | undefined;
+}>;
+/**
+ * Authentication schema for HTTP servers
+ */
+export declare const HttpAuthSchema: z.ZodOptional<z.ZodObject<{
+    type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+    token: z.ZodOptional<z.ZodString>;
+    headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    clientId: z.ZodOptional<z.ZodString>;
+    clientSecret: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "bearer" | "oauth2" | "api-key";
+    headerName: string;
+    token?: string | undefined;
+    clientId?: string | undefined;
+    clientSecret?: string | undefined;
+}, {
+    type?: "bearer" | "oauth2" | "api-key" | undefined;
+    token?: string | undefined;
+    headerName?: string | undefined;
+    clientId?: string | undefined;
+    clientSecret?: string | undefined;
+}>>;
+/**
+ * Session management schema for HTTP servers
+ */
+export declare const HttpSessionSchema: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    headerName: string;
+    allowClientTermination: boolean;
+}, {
+    enabled?: boolean | undefined;
+    headerName?: string | undefined;
+    allowClientTermination?: boolean | undefined;
+}>>;
+/**
+ * CORS schema for HTTP servers
+ */
+export declare const HttpCorsSchema: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    allowOrigin: string;
+}, {
+    enabled?: boolean | undefined;
+    allowOrigin?: string | undefined;
+}>>;
+/**
+ * Server-level safety configuration
+ * Allows defining trusted servers where all tools are considered safe
+ */
+export type ServerSafety = 'safe' | 'risky' | 'default';
+export declare const ServerSafetySchema: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+/**
+ * Stdio (command-based) server configuration
+ */
+export declare const StdioServerConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    }, {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    }>>>;
+    safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    transport: "stdio";
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    healthCheck: {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    };
+    cwd?: string | undefined;
+    safety?: "safe" | "risky" | "default" | undefined;
+}, {
+    name: string;
+    command: string;
+    transport?: "stdio" | undefined;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    cwd?: string | undefined;
+    healthCheck?: {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    } | undefined;
+    safety?: "safe" | "risky" | "default" | undefined;
+}>;
+export type StdioServerConfig = z.infer<typeof StdioServerConfigSchema>;
+/**
+ * HTTP (remote) server configuration
+ */
+export declare const HttpServerConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+    url: z.ZodString;
+    auth: z.ZodOptional<z.ZodObject<{
+        type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+        token: z.ZodOptional<z.ZodString>;
+        headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "bearer" | "oauth2" | "api-key";
+        headerName: string;
+        token?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    }, {
+        type?: "bearer" | "oauth2" | "api-key" | undefined;
+        token?: string | undefined;
+        headerName?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    }>>;
+    session: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        headerName: string;
+        allowClientTermination: boolean;
+    }, {
+        enabled?: boolean | undefined;
+        headerName?: string | undefined;
+        allowClientTermination?: boolean | undefined;
+    }>>;
+    cors: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        allowOrigin: string;
+    }, {
+        enabled?: boolean | undefined;
+        allowOrigin?: string | undefined;
+    }>>;
+    env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    }, {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    }>>>;
+    safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+    requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    transport: "http" | "sse" | "sse-first" | "http-stream";
+    env: Record<string, string>;
+    healthCheck: {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    };
+    url: string;
+    requestTimeoutMs: number;
+    streamTimeoutMs: number;
+    connectTimeoutMs: number;
+    safety?: "safe" | "risky" | "default" | undefined;
+    auth?: {
+        type: "bearer" | "oauth2" | "api-key";
+        headerName: string;
+        token?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    } | undefined;
+    session?: {
+        enabled: boolean;
+        headerName: string;
+        allowClientTermination: boolean;
+    } | undefined;
+    cors?: {
+        enabled: boolean;
+        allowOrigin: string;
+    } | undefined;
+}, {
+    name: string;
+    transport: "http" | "sse" | "sse-first" | "http-stream";
+    url: string;
+    env?: Record<string, string> | undefined;
+    healthCheck?: {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    } | undefined;
+    safety?: "safe" | "risky" | "default" | undefined;
+    auth?: {
+        type?: "bearer" | "oauth2" | "api-key" | undefined;
+        token?: string | undefined;
+        headerName?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    } | undefined;
+    session?: {
+        enabled?: boolean | undefined;
+        headerName?: string | undefined;
+        allowClientTermination?: boolean | undefined;
+    } | undefined;
+    cors?: {
+        enabled?: boolean | undefined;
+        allowOrigin?: string | undefined;
+    } | undefined;
+    requestTimeoutMs?: number | undefined;
+    streamTimeoutMs?: number | undefined;
+    connectTimeoutMs?: number | undefined;
+}>;
+export type HttpServerConfig = z.infer<typeof HttpServerConfigSchema>;
+/**
+ * Server configuration schema - supports both stdio and HTTP transports
+ * Uses discriminated union to enforce correct fields per transport type
+ */
+export declare const ServerConfigSchema: z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+    name: z.ZodString;
+    transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    }, {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    }>>>;
+    safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    transport: "stdio";
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    healthCheck: {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    };
+    cwd?: string | undefined;
+    safety?: "safe" | "risky" | "default" | undefined;
+}, {
+    name: string;
+    command: string;
+    transport?: "stdio" | undefined;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    cwd?: string | undefined;
+    healthCheck?: {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    } | undefined;
+    safety?: "safe" | "risky" | "default" | undefined;
+}>, z.ZodObject<{
+    name: z.ZodString;
+    transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+    url: z.ZodString;
+    auth: z.ZodOptional<z.ZodObject<{
+        type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+        token: z.ZodOptional<z.ZodString>;
+        headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "bearer" | "oauth2" | "api-key";
+        headerName: string;
+        token?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    }, {
+        type?: "bearer" | "oauth2" | "api-key" | undefined;
+        token?: string | undefined;
+        headerName?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    }>>;
+    session: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        headerName: string;
+        allowClientTermination: boolean;
+    }, {
+        enabled?: boolean | undefined;
+        headerName?: string | undefined;
+        allowClientTermination?: boolean | undefined;
+    }>>;
+    cors: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        allowOrigin: string;
+    }, {
+        enabled?: boolean | undefined;
+        allowOrigin?: string | undefined;
+    }>>;
+    env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    }, {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    }>>>;
+    safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+    requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    transport: "http" | "sse" | "sse-first" | "http-stream";
+    env: Record<string, string>;
+    healthCheck: {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    };
+    url: string;
+    requestTimeoutMs: number;
+    streamTimeoutMs: number;
+    connectTimeoutMs: number;
+    safety?: "safe" | "risky" | "default" | undefined;
+    auth?: {
+        type: "bearer" | "oauth2" | "api-key";
+        headerName: string;
+        token?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    } | undefined;
+    session?: {
+        enabled: boolean;
+        headerName: string;
+        allowClientTermination: boolean;
+    } | undefined;
+    cors?: {
+        enabled: boolean;
+        allowOrigin: string;
+    } | undefined;
+}, {
+    name: string;
+    transport: "http" | "sse" | "sse-first" | "http-stream";
+    url: string;
+    env?: Record<string, string> | undefined;
+    healthCheck?: {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    } | undefined;
+    safety?: "safe" | "risky" | "default" | undefined;
+    auth?: {
+        type?: "bearer" | "oauth2" | "api-key" | undefined;
+        token?: string | undefined;
+        headerName?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    } | undefined;
+    session?: {
+        enabled?: boolean | undefined;
+        headerName?: string | undefined;
+        allowClientTermination?: boolean | undefined;
+    } | undefined;
+    cors?: {
+        enabled?: boolean | undefined;
+        allowOrigin?: string | undefined;
+    } | undefined;
+    requestTimeoutMs?: number | undefined;
+    streamTimeoutMs?: number | undefined;
+    connectTimeoutMs?: number | undefined;
+}>]>;
+export type ServerConfig = z.infer<typeof ServerConfigSchema>;
+/**
+ * Daemon configuration schema
+ * Defines HTTP server, authentication, rate limiting settings
+ */
+export declare const DaemonConfigSchema: z.ZodObject<{
+    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+    auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+        secret: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        type: "bearer" | "api-key";
+        secret?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        type?: "bearer" | "api-key" | undefined;
+        secret?: string | undefined;
+    }>>>;
+    rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        windowMs: number;
+        max: number;
+        keyGenerator: "ip" | "user";
+    }, {
+        enabled?: boolean | undefined;
+        windowMs?: number | undefined;
+        max?: number | undefined;
+        keyGenerator?: "ip" | "user" | undefined;
+    }>>>;
+}, "strip", z.ZodTypeAny, {
+    auth: {
+        enabled: boolean;
+        type: "bearer" | "api-key";
+        secret?: string | undefined;
+    };
+    port: number;
+    host: string;
+    logLevel: "debug" | "info" | "warn" | "error";
+    rateLimit: {
+        enabled: boolean;
+        windowMs: number;
+        max: number;
+        keyGenerator: "ip" | "user";
+    };
+}, {
+    auth?: {
+        enabled?: boolean | undefined;
+        type?: "bearer" | "api-key" | undefined;
+        secret?: string | undefined;
+    } | undefined;
+    port?: number | undefined;
+    host?: string | undefined;
+    logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+    rateLimit?: {
+        enabled?: boolean | undefined;
+        windowMs?: number | undefined;
+        max?: number | undefined;
+        keyGenerator?: "ip" | "user" | undefined;
+    } | undefined;
+}>;
+export type DaemonConfig = z.infer<typeof DaemonConfigSchema>;
+/**
+ * Plugin configuration schema
+ * Allows extending functionality via before/after hooks
+ */
+export declare const PluginConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    path: z.ZodOptional<z.ZodString>;
+    config: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    name: string;
+    config: Record<string, unknown>;
+    path?: string | undefined;
+}, {
+    name: string;
+    enabled?: boolean | undefined;
+    path?: string | undefined;
+    config?: Record<string, unknown> | undefined;
+}>;
+export type PluginConfig = z.infer<typeof PluginConfigSchema>;
+/**
+ * Profile configuration schema
+ * Supports multi-environment configurations (dev, prod, staging)
+ */
+export declare const ProfileConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    daemon: z.ZodOptional<z.ZodObject<{
+        port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+        auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+            secret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        }>>>;
+        rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        }, {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        auth: {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        };
+        port: number;
+        host: string;
+        logLevel: "debug" | "info" | "warn" | "error";
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        };
+    }, {
+        auth?: {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        } | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        } | undefined;
+    }>>;
+    servers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }, {
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }>, z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+        url: z.ZodString;
+        auth: z.ZodOptional<z.ZodObject<{
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+            token: z.ZodOptional<z.ZodString>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }, {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }>>;
+        session: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        }, {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        }>>;
+        cors: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            allowOrigin: string;
+        }, {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        }>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    }, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    }>]>, "many">>>;
+    environment: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    servers: ({
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    } | {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    })[];
+    environment: Record<string, string>;
+    description?: string | undefined;
+    daemon?: {
+        auth: {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        };
+        port: number;
+        host: string;
+        logLevel: "debug" | "info" | "warn" | "error";
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        };
+    } | undefined;
+}, {
+    name: string;
+    description?: string | undefined;
+    daemon?: {
+        auth?: {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        } | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        } | undefined;
+    } | undefined;
+    servers?: ({
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    } | {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    })[] | undefined;
+    environment?: Record<string, string> | undefined;
+}>;
+export type ProfileConfig = z.infer<typeof ProfileConfigSchema>;
+/**
+ * Root configuration schema
+ * Complete metalink.config.yaml/json structure
+ */
+export declare const MetalinkConfigSchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    description: z.ZodOptional<z.ZodString>;
+    daemon: z.ZodOptional<z.ZodObject<{
+        port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+        auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+            secret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        }>>>;
+        rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        }, {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        auth: {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        };
+        port: number;
+        host: string;
+        logLevel: "debug" | "info" | "warn" | "error";
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        };
+    }, {
+        auth?: {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        } | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        } | undefined;
+    }>>;
+    servers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }, {
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }>, z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+        url: z.ZodString;
+        auth: z.ZodOptional<z.ZodObject<{
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+            token: z.ZodOptional<z.ZodString>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }, {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }>>;
+        session: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        }, {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        }>>;
+        cors: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            allowOrigin: string;
+        }, {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        }>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    }, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    }>]>, "many">>>;
+    plugins: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        path: z.ZodOptional<z.ZodString>;
+        config: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        name: string;
+        config: Record<string, unknown>;
+        path?: string | undefined;
+    }, {
+        name: string;
+        enabled?: boolean | undefined;
+        path?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }>, "many">>>;
+    profiles: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+            auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+                secret: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            }, {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            }>>>;
+            rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            }, {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            }>>>;
+        }, "strip", z.ZodTypeAny, {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        }, {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        }>>;
+        servers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+            name: z.ZodString;
+            transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+            command: z.ZodString;
+            args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+            env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            }, {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            }>>>;
+            safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        }, {
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        }>, z.ZodObject<{
+            name: z.ZodString;
+            transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+            url: z.ZodString;
+            auth: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+                token: z.ZodOptional<z.ZodString>;
+                headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            }, {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            }>>;
+            session: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            }, {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            }>>;
+            cors: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                allowOrigin: string;
+            }, {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            }>>;
+            env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            }, {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            }>>>;
+            safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+            requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        }, {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        }>]>, "many">>>;
+        environment: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        servers: ({
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        })[];
+        environment: Record<string, string>;
+        description?: string | undefined;
+        daemon?: {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        } | undefined;
+    }, {
+        name: string;
+        description?: string | undefined;
+        daemon?: {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        } | undefined;
+        servers?: ({
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        })[] | undefined;
+        environment?: Record<string, string> | undefined;
+    }>, "many">>>;
+    environment: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    secrets: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodOptional<z.ZodEnum<["env", "keyring", "vault"]>>>;
+        keyringService: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        provider: "env" | "keyring" | "vault";
+        keyringService: string;
+    }, {
+        provider?: "env" | "keyring" | "vault" | undefined;
+        keyringService?: string | undefined;
+    }>>>;
+    schemasCacheTTL: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    schemasCachePath: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    maxSchemaCacheEntries: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    schemasBackgroundRefresh: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    backgroundSchemaPopulation: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    base_servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    base_servers_auto_start: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    base_servers_auto_expose_tools: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    toolSafetyRules: z.ZodOptional<z.ZodObject<{
+        safePatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        riskyPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        safeToolOverrides: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        riskyToolOverrides: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        argumentInspectionRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            tool: z.ZodString;
+            argumentField: z.ZodString;
+            safeCommandPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            riskyCommandPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            whitelistMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            optionalField: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            tool: string;
+            argumentField: string;
+            whitelistMode: boolean;
+            optionalField: boolean;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+        }, {
+            tool: string;
+            argumentField: string;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+            whitelistMode?: boolean | undefined;
+            optionalField?: boolean | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        safePatterns?: string[] | undefined;
+        riskyPatterns?: string[] | undefined;
+        safeToolOverrides?: string[] | undefined;
+        riskyToolOverrides?: string[] | undefined;
+        argumentInspectionRules?: {
+            tool: string;
+            argumentField: string;
+            whitelistMode: boolean;
+            optionalField: boolean;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+        }[] | undefined;
+    }, {
+        safePatterns?: string[] | undefined;
+        riskyPatterns?: string[] | undefined;
+        safeToolOverrides?: string[] | undefined;
+        riskyToolOverrides?: string[] | undefined;
+        argumentInspectionRules?: {
+            tool: string;
+            argumentField: string;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+            whitelistMode?: boolean | undefined;
+            optionalField?: boolean | undefined;
+        }[] | undefined;
+    }>>;
+    discoveryTTL: z.ZodOptional<z.ZodNumber>;
+    dynamicToolExposure: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    timeouts: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        serverInit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        toolFetch: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        toolExecution: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        gracefulShutdown: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        serverInit: number;
+        toolFetch: number;
+        toolExecution: number;
+        gracefulShutdown: number;
+    }, {
+        serverInit?: number | undefined;
+        toolFetch?: number | undefined;
+        toolExecution?: number | undefined;
+        gracefulShutdown?: number | undefined;
+    }>>>;
+    circuitBreaker: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        failureThreshold: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        resetTimeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        halfOpenSuccessThreshold: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        failureThreshold: number;
+        resetTimeout: number;
+        halfOpenSuccessThreshold: number;
+    }, {
+        failureThreshold?: number | undefined;
+        resetTimeout?: number | undefined;
+        halfOpenSuccessThreshold?: number | undefined;
+    }>>>;
+    autoRestart: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        maxRetries: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        baseDelay: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        maxDelay: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        backoffMultiplier: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        maxRetries: number;
+        baseDelay: number;
+        maxDelay: number;
+        backoffMultiplier: number;
+    }, {
+        enabled?: boolean | undefined;
+        maxRetries?: number | undefined;
+        baseDelay?: number | undefined;
+        maxDelay?: number | undefined;
+        backoffMultiplier?: number | undefined;
+    }>>>;
+}, "strip", z.ZodTypeAny, {
+    servers: ({
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    } | {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    })[];
+    environment: Record<string, string>;
+    version: string;
+    plugins: {
+        enabled: boolean;
+        name: string;
+        config: Record<string, unknown>;
+        path?: string | undefined;
+    }[];
+    profiles: {
+        name: string;
+        servers: ({
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        })[];
+        environment: Record<string, string>;
+        description?: string | undefined;
+        daemon?: {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        } | undefined;
+    }[];
+    secrets: {
+        provider: "env" | "keyring" | "vault";
+        keyringService: string;
+    };
+    schemasCacheTTL: number;
+    schemasCachePath: string;
+    maxSchemaCacheEntries: number;
+    schemasBackgroundRefresh: boolean;
+    backgroundSchemaPopulation: boolean;
+    base_servers_auto_start: boolean;
+    base_servers_auto_expose_tools: boolean;
+    dynamicToolExposure: boolean;
+    timeouts: {
+        serverInit: number;
+        toolFetch: number;
+        toolExecution: number;
+        gracefulShutdown: number;
+    };
+    circuitBreaker: {
+        failureThreshold: number;
+        resetTimeout: number;
+        halfOpenSuccessThreshold: number;
+    };
+    autoRestart: {
+        enabled: boolean;
+        maxRetries: number;
+        baseDelay: number;
+        maxDelay: number;
+        backoffMultiplier: number;
+    };
+    description?: string | undefined;
+    daemon?: {
+        auth: {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        };
+        port: number;
+        host: string;
+        logLevel: "debug" | "info" | "warn" | "error";
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        };
+    } | undefined;
+    base_servers?: string[] | undefined;
+    toolSafetyRules?: {
+        safePatterns?: string[] | undefined;
+        riskyPatterns?: string[] | undefined;
+        safeToolOverrides?: string[] | undefined;
+        riskyToolOverrides?: string[] | undefined;
+        argumentInspectionRules?: {
+            tool: string;
+            argumentField: string;
+            whitelistMode: boolean;
+            optionalField: boolean;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+        }[] | undefined;
+    } | undefined;
+    discoveryTTL?: number | undefined;
+}, {
+    description?: string | undefined;
+    daemon?: {
+        auth?: {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        } | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        } | undefined;
+    } | undefined;
+    servers?: ({
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    } | {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    })[] | undefined;
+    environment?: Record<string, string> | undefined;
+    version?: string | undefined;
+    plugins?: {
+        name: string;
+        enabled?: boolean | undefined;
+        path?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    profiles?: {
+        name: string;
+        description?: string | undefined;
+        daemon?: {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        } | undefined;
+        servers?: ({
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        })[] | undefined;
+        environment?: Record<string, string> | undefined;
+    }[] | undefined;
+    secrets?: {
+        provider?: "env" | "keyring" | "vault" | undefined;
+        keyringService?: string | undefined;
+    } | undefined;
+    schemasCacheTTL?: number | undefined;
+    schemasCachePath?: string | undefined;
+    maxSchemaCacheEntries?: number | undefined;
+    schemasBackgroundRefresh?: boolean | undefined;
+    backgroundSchemaPopulation?: boolean | undefined;
+    base_servers?: string[] | undefined;
+    base_servers_auto_start?: boolean | undefined;
+    base_servers_auto_expose_tools?: boolean | undefined;
+    toolSafetyRules?: {
+        safePatterns?: string[] | undefined;
+        riskyPatterns?: string[] | undefined;
+        safeToolOverrides?: string[] | undefined;
+        riskyToolOverrides?: string[] | undefined;
+        argumentInspectionRules?: {
+            tool: string;
+            argumentField: string;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+            whitelistMode?: boolean | undefined;
+            optionalField?: boolean | undefined;
+        }[] | undefined;
+    } | undefined;
+    discoveryTTL?: number | undefined;
+    dynamicToolExposure?: boolean | undefined;
+    timeouts?: {
+        serverInit?: number | undefined;
+        toolFetch?: number | undefined;
+        toolExecution?: number | undefined;
+        gracefulShutdown?: number | undefined;
+    } | undefined;
+    circuitBreaker?: {
+        failureThreshold?: number | undefined;
+        resetTimeout?: number | undefined;
+        halfOpenSuccessThreshold?: number | undefined;
+    } | undefined;
+    autoRestart?: {
+        enabled?: boolean | undefined;
+        maxRetries?: number | undefined;
+        baseDelay?: number | undefined;
+        maxDelay?: number | undefined;
+        backoffMultiplier?: number | undefined;
+    } | undefined;
+}>;
+export type MetalinkConfig = z.infer<typeof MetalinkConfigSchema>;
+/**
+ * Configuration with defaults applied
+ */
+export type ResolvedConfig = Required<MetalinkConfig>;
+/**
+ * Export all schemas for use in loader
+ */
+export declare const ConfigSchemas: {
+    ServerConfig: z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }, {
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }>, z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+        url: z.ZodString;
+        auth: z.ZodOptional<z.ZodObject<{
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+            token: z.ZodOptional<z.ZodString>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }, {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }>>;
+        session: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        }, {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        }>>;
+        cors: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            allowOrigin: string;
+        }, {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        }>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    }, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    }>]>;
+    StdioServerConfig: z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }, {
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    }>;
+    HttpServerConfig: z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+        url: z.ZodString;
+        auth: z.ZodOptional<z.ZodObject<{
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+            token: z.ZodOptional<z.ZodString>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }, {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        }>>;
+        session: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        }, {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        }>>;
+        cors: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            allowOrigin: string;
+        }, {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        }>>;
+        env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        }, {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        }>>>;
+        safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    }, {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    }>;
+    HealthCheck: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        interval: number;
+        timeout: number;
+    }, {
+        enabled?: boolean | undefined;
+        interval?: number | undefined;
+        timeout?: number | undefined;
+    }>;
+    HttpAuth: z.ZodOptional<z.ZodObject<{
+        type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+        token: z.ZodOptional<z.ZodString>;
+        headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "bearer" | "oauth2" | "api-key";
+        headerName: string;
+        token?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    }, {
+        type?: "bearer" | "oauth2" | "api-key" | undefined;
+        token?: string | undefined;
+        headerName?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+    }>>;
+    HttpSession: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        headerName: string;
+        allowClientTermination: boolean;
+    }, {
+        enabled?: boolean | undefined;
+        headerName?: string | undefined;
+        allowClientTermination?: boolean | undefined;
+    }>>;
+    HttpCors: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        allowOrigin: string;
+    }, {
+        enabled?: boolean | undefined;
+        allowOrigin?: string | undefined;
+    }>>;
+    DaemonConfig: z.ZodObject<{
+        port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+        auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+            secret: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        }>>>;
+        rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        }, {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        auth: {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        };
+        port: number;
+        host: string;
+        logLevel: "debug" | "info" | "warn" | "error";
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        };
+    }, {
+        auth?: {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        } | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        } | undefined;
+    }>;
+    PluginConfig: z.ZodObject<{
+        name: z.ZodString;
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        path: z.ZodOptional<z.ZodString>;
+        config: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        name: string;
+        config: Record<string, unknown>;
+        path?: string | undefined;
+    }, {
+        name: string;
+        enabled?: boolean | undefined;
+        path?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }>;
+    ProfileConfig: z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+            auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+                secret: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            }, {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            }>>>;
+            rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            }, {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            }>>>;
+        }, "strip", z.ZodTypeAny, {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        }, {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        }>>;
+        servers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+            name: z.ZodString;
+            transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+            command: z.ZodString;
+            args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+            env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            }, {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            }>>>;
+            safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        }, {
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        }>, z.ZodObject<{
+            name: z.ZodString;
+            transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+            url: z.ZodString;
+            auth: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+                token: z.ZodOptional<z.ZodString>;
+                headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            }, {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            }>>;
+            session: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            }, {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            }>>;
+            cors: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                allowOrigin: string;
+            }, {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            }>>;
+            env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            }, {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            }>>>;
+            safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+            requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        }, {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        }>]>, "many">>>;
+        environment: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        servers: ({
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        })[];
+        environment: Record<string, string>;
+        description?: string | undefined;
+        daemon?: {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        } | undefined;
+    }, {
+        name: string;
+        description?: string | undefined;
+        daemon?: {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        } | undefined;
+        servers?: ({
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        })[] | undefined;
+        environment?: Record<string, string> | undefined;
+    }>;
+    MetalinkConfig: z.ZodObject<{
+        version: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        description: z.ZodOptional<z.ZodString>;
+        daemon: z.ZodOptional<z.ZodObject<{
+            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+            auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+                secret: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            }, {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            }>>>;
+            rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            }, {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            }>>>;
+        }, "strip", z.ZodTypeAny, {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        }, {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        }>>;
+        servers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+            name: z.ZodString;
+            transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+            command: z.ZodString;
+            args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+            env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            }, {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            }>>>;
+            safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        }, {
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        }>, z.ZodObject<{
+            name: z.ZodString;
+            transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+            url: z.ZodString;
+            auth: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+                token: z.ZodOptional<z.ZodString>;
+                headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            }, {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            }>>;
+            session: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            }, {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            }>>;
+            cors: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                allowOrigin: string;
+            }, {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            }>>;
+            env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            }, {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            }>>>;
+            safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+            requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        }, {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        }>]>, "many">>>;
+        plugins: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            path: z.ZodOptional<z.ZodString>;
+            config: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            name: string;
+            config: Record<string, unknown>;
+            path?: string | undefined;
+        }, {
+            name: string;
+            enabled?: boolean | undefined;
+            path?: string | undefined;
+            config?: Record<string, unknown> | undefined;
+        }>, "many">>>;
+        profiles: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            daemon: z.ZodOptional<z.ZodObject<{
+                port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                host: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                logLevel: z.ZodDefault<z.ZodOptional<z.ZodEnum<["debug", "info", "warn", "error"]>>>;
+                auth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "api-key"]>>>;
+                    secret: z.ZodOptional<z.ZodString>;
+                }, "strip", z.ZodTypeAny, {
+                    enabled: boolean;
+                    type: "bearer" | "api-key";
+                    secret?: string | undefined;
+                }, {
+                    enabled?: boolean | undefined;
+                    type?: "bearer" | "api-key" | undefined;
+                    secret?: string | undefined;
+                }>>>;
+                rateLimit: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    windowMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    max: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    keyGenerator: z.ZodDefault<z.ZodOptional<z.ZodEnum<["ip", "user"]>>>;
+                }, "strip", z.ZodTypeAny, {
+                    enabled: boolean;
+                    windowMs: number;
+                    max: number;
+                    keyGenerator: "ip" | "user";
+                }, {
+                    enabled?: boolean | undefined;
+                    windowMs?: number | undefined;
+                    max?: number | undefined;
+                    keyGenerator?: "ip" | "user" | undefined;
+                }>>>;
+            }, "strip", z.ZodTypeAny, {
+                auth: {
+                    enabled: boolean;
+                    type: "bearer" | "api-key";
+                    secret?: string | undefined;
+                };
+                port: number;
+                host: string;
+                logLevel: "debug" | "info" | "warn" | "error";
+                rateLimit: {
+                    enabled: boolean;
+                    windowMs: number;
+                    max: number;
+                    keyGenerator: "ip" | "user";
+                };
+            }, {
+                auth?: {
+                    enabled?: boolean | undefined;
+                    type?: "bearer" | "api-key" | undefined;
+                    secret?: string | undefined;
+                } | undefined;
+                port?: number | undefined;
+                host?: string | undefined;
+                logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+                rateLimit?: {
+                    enabled?: boolean | undefined;
+                    windowMs?: number | undefined;
+                    max?: number | undefined;
+                    keyGenerator?: "ip" | "user" | undefined;
+                } | undefined;
+            }>>;
+            servers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
+                name: z.ZodString;
+                transport: z.ZodDefault<z.ZodOptional<z.ZodLiteral<"stdio">>>;
+                command: z.ZodString;
+                args: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+                env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+                cwd: z.ZodOptional<z.ZodString>;
+                healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                }, "strip", z.ZodTypeAny, {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                }, {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                }>>>;
+                safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                transport: "stdio";
+                command: string;
+                args: string[];
+                env: Record<string, string>;
+                healthCheck: {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                };
+                cwd?: string | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+            }, {
+                name: string;
+                command: string;
+                transport?: "stdio" | undefined;
+                args?: string[] | undefined;
+                env?: Record<string, string> | undefined;
+                cwd?: string | undefined;
+                healthCheck?: {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                } | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+            }>, z.ZodObject<{
+                name: z.ZodString;
+                transport: z.ZodEnum<["http", "sse", "sse-first", "http-stream"]>;
+                url: z.ZodString;
+                auth: z.ZodOptional<z.ZodObject<{
+                    type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["bearer", "oauth2", "api-key"]>>>;
+                    token: z.ZodOptional<z.ZodString>;
+                    headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                    clientId: z.ZodOptional<z.ZodString>;
+                    clientSecret: z.ZodOptional<z.ZodString>;
+                }, "strip", z.ZodTypeAny, {
+                    type: "bearer" | "oauth2" | "api-key";
+                    headerName: string;
+                    token?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                }, {
+                    type?: "bearer" | "oauth2" | "api-key" | undefined;
+                    token?: string | undefined;
+                    headerName?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                }>>;
+                session: z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    headerName: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                    allowClientTermination: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                }, "strip", z.ZodTypeAny, {
+                    enabled: boolean;
+                    headerName: string;
+                    allowClientTermination: boolean;
+                }, {
+                    enabled?: boolean | undefined;
+                    headerName?: string | undefined;
+                    allowClientTermination?: boolean | undefined;
+                }>>;
+                cors: z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    allowOrigin: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                }, "strip", z.ZodTypeAny, {
+                    enabled: boolean;
+                    allowOrigin: string;
+                }, {
+                    enabled?: boolean | undefined;
+                    allowOrigin?: string | undefined;
+                }>>;
+                env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+                healthCheck: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    interval: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                }, "strip", z.ZodTypeAny, {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                }, {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                }>>>;
+                safety: z.ZodOptional<z.ZodEnum<["safe", "risky", "default"]>>;
+                requestTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                streamTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                connectTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                transport: "http" | "sse" | "sse-first" | "http-stream";
+                env: Record<string, string>;
+                healthCheck: {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                };
+                url: string;
+                requestTimeoutMs: number;
+                streamTimeoutMs: number;
+                connectTimeoutMs: number;
+                safety?: "safe" | "risky" | "default" | undefined;
+                auth?: {
+                    type: "bearer" | "oauth2" | "api-key";
+                    headerName: string;
+                    token?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                } | undefined;
+                session?: {
+                    enabled: boolean;
+                    headerName: string;
+                    allowClientTermination: boolean;
+                } | undefined;
+                cors?: {
+                    enabled: boolean;
+                    allowOrigin: string;
+                } | undefined;
+            }, {
+                name: string;
+                transport: "http" | "sse" | "sse-first" | "http-stream";
+                url: string;
+                env?: Record<string, string> | undefined;
+                healthCheck?: {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                } | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+                auth?: {
+                    type?: "bearer" | "oauth2" | "api-key" | undefined;
+                    token?: string | undefined;
+                    headerName?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                } | undefined;
+                session?: {
+                    enabled?: boolean | undefined;
+                    headerName?: string | undefined;
+                    allowClientTermination?: boolean | undefined;
+                } | undefined;
+                cors?: {
+                    enabled?: boolean | undefined;
+                    allowOrigin?: string | undefined;
+                } | undefined;
+                requestTimeoutMs?: number | undefined;
+                streamTimeoutMs?: number | undefined;
+                connectTimeoutMs?: number | undefined;
+            }>]>, "many">>>;
+            environment: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            servers: ({
+                name: string;
+                transport: "stdio";
+                command: string;
+                args: string[];
+                env: Record<string, string>;
+                healthCheck: {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                };
+                cwd?: string | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+            } | {
+                name: string;
+                transport: "http" | "sse" | "sse-first" | "http-stream";
+                env: Record<string, string>;
+                healthCheck: {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                };
+                url: string;
+                requestTimeoutMs: number;
+                streamTimeoutMs: number;
+                connectTimeoutMs: number;
+                safety?: "safe" | "risky" | "default" | undefined;
+                auth?: {
+                    type: "bearer" | "oauth2" | "api-key";
+                    headerName: string;
+                    token?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                } | undefined;
+                session?: {
+                    enabled: boolean;
+                    headerName: string;
+                    allowClientTermination: boolean;
+                } | undefined;
+                cors?: {
+                    enabled: boolean;
+                    allowOrigin: string;
+                } | undefined;
+            })[];
+            environment: Record<string, string>;
+            description?: string | undefined;
+            daemon?: {
+                auth: {
+                    enabled: boolean;
+                    type: "bearer" | "api-key";
+                    secret?: string | undefined;
+                };
+                port: number;
+                host: string;
+                logLevel: "debug" | "info" | "warn" | "error";
+                rateLimit: {
+                    enabled: boolean;
+                    windowMs: number;
+                    max: number;
+                    keyGenerator: "ip" | "user";
+                };
+            } | undefined;
+        }, {
+            name: string;
+            description?: string | undefined;
+            daemon?: {
+                auth?: {
+                    enabled?: boolean | undefined;
+                    type?: "bearer" | "api-key" | undefined;
+                    secret?: string | undefined;
+                } | undefined;
+                port?: number | undefined;
+                host?: string | undefined;
+                logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+                rateLimit?: {
+                    enabled?: boolean | undefined;
+                    windowMs?: number | undefined;
+                    max?: number | undefined;
+                    keyGenerator?: "ip" | "user" | undefined;
+                } | undefined;
+            } | undefined;
+            servers?: ({
+                name: string;
+                command: string;
+                transport?: "stdio" | undefined;
+                args?: string[] | undefined;
+                env?: Record<string, string> | undefined;
+                cwd?: string | undefined;
+                healthCheck?: {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                } | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+            } | {
+                name: string;
+                transport: "http" | "sse" | "sse-first" | "http-stream";
+                url: string;
+                env?: Record<string, string> | undefined;
+                healthCheck?: {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                } | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+                auth?: {
+                    type?: "bearer" | "oauth2" | "api-key" | undefined;
+                    token?: string | undefined;
+                    headerName?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                } | undefined;
+                session?: {
+                    enabled?: boolean | undefined;
+                    headerName?: string | undefined;
+                    allowClientTermination?: boolean | undefined;
+                } | undefined;
+                cors?: {
+                    enabled?: boolean | undefined;
+                    allowOrigin?: string | undefined;
+                } | undefined;
+                requestTimeoutMs?: number | undefined;
+                streamTimeoutMs?: number | undefined;
+                connectTimeoutMs?: number | undefined;
+            })[] | undefined;
+            environment?: Record<string, string> | undefined;
+        }>, "many">>>;
+        environment: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        secrets: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            provider: z.ZodDefault<z.ZodOptional<z.ZodEnum<["env", "keyring", "vault"]>>>;
+            keyringService: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            provider: "env" | "keyring" | "vault";
+            keyringService: string;
+        }, {
+            provider?: "env" | "keyring" | "vault" | undefined;
+            keyringService?: string | undefined;
+        }>>>;
+        schemasCacheTTL: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        schemasCachePath: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        maxSchemaCacheEntries: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        schemasBackgroundRefresh: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        backgroundSchemaPopulation: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        base_servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        base_servers_auto_start: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        base_servers_auto_expose_tools: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        toolSafetyRules: z.ZodOptional<z.ZodObject<{
+            safePatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            riskyPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            safeToolOverrides: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            riskyToolOverrides: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            argumentInspectionRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                tool: z.ZodString;
+                argumentField: z.ZodString;
+                safeCommandPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                riskyCommandPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                whitelistMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                optionalField: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            }, "strip", z.ZodTypeAny, {
+                tool: string;
+                argumentField: string;
+                whitelistMode: boolean;
+                optionalField: boolean;
+                safeCommandPatterns?: string[] | undefined;
+                riskyCommandPatterns?: string[] | undefined;
+            }, {
+                tool: string;
+                argumentField: string;
+                safeCommandPatterns?: string[] | undefined;
+                riskyCommandPatterns?: string[] | undefined;
+                whitelistMode?: boolean | undefined;
+                optionalField?: boolean | undefined;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            safePatterns?: string[] | undefined;
+            riskyPatterns?: string[] | undefined;
+            safeToolOverrides?: string[] | undefined;
+            riskyToolOverrides?: string[] | undefined;
+            argumentInspectionRules?: {
+                tool: string;
+                argumentField: string;
+                whitelistMode: boolean;
+                optionalField: boolean;
+                safeCommandPatterns?: string[] | undefined;
+                riskyCommandPatterns?: string[] | undefined;
+            }[] | undefined;
+        }, {
+            safePatterns?: string[] | undefined;
+            riskyPatterns?: string[] | undefined;
+            safeToolOverrides?: string[] | undefined;
+            riskyToolOverrides?: string[] | undefined;
+            argumentInspectionRules?: {
+                tool: string;
+                argumentField: string;
+                safeCommandPatterns?: string[] | undefined;
+                riskyCommandPatterns?: string[] | undefined;
+                whitelistMode?: boolean | undefined;
+                optionalField?: boolean | undefined;
+            }[] | undefined;
+        }>>;
+        discoveryTTL: z.ZodOptional<z.ZodNumber>;
+        dynamicToolExposure: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        timeouts: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            serverInit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            toolFetch: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            toolExecution: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            gracefulShutdown: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            serverInit: number;
+            toolFetch: number;
+            toolExecution: number;
+            gracefulShutdown: number;
+        }, {
+            serverInit?: number | undefined;
+            toolFetch?: number | undefined;
+            toolExecution?: number | undefined;
+            gracefulShutdown?: number | undefined;
+        }>>>;
+        circuitBreaker: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            failureThreshold: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            resetTimeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            halfOpenSuccessThreshold: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            failureThreshold: number;
+            resetTimeout: number;
+            halfOpenSuccessThreshold: number;
+        }, {
+            failureThreshold?: number | undefined;
+            resetTimeout?: number | undefined;
+            halfOpenSuccessThreshold?: number | undefined;
+        }>>>;
+        autoRestart: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            maxRetries: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            baseDelay: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            maxDelay: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            backoffMultiplier: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            maxRetries: number;
+            baseDelay: number;
+            maxDelay: number;
+            backoffMultiplier: number;
+        }, {
+            enabled?: boolean | undefined;
+            maxRetries?: number | undefined;
+            baseDelay?: number | undefined;
+            maxDelay?: number | undefined;
+            backoffMultiplier?: number | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        servers: ({
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        })[];
+        environment: Record<string, string>;
+        version: string;
+        plugins: {
+            enabled: boolean;
+            name: string;
+            config: Record<string, unknown>;
+            path?: string | undefined;
+        }[];
+        profiles: {
+            name: string;
+            servers: ({
+                name: string;
+                transport: "stdio";
+                command: string;
+                args: string[];
+                env: Record<string, string>;
+                healthCheck: {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                };
+                cwd?: string | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+            } | {
+                name: string;
+                transport: "http" | "sse" | "sse-first" | "http-stream";
+                env: Record<string, string>;
+                healthCheck: {
+                    enabled: boolean;
+                    interval: number;
+                    timeout: number;
+                };
+                url: string;
+                requestTimeoutMs: number;
+                streamTimeoutMs: number;
+                connectTimeoutMs: number;
+                safety?: "safe" | "risky" | "default" | undefined;
+                auth?: {
+                    type: "bearer" | "oauth2" | "api-key";
+                    headerName: string;
+                    token?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                } | undefined;
+                session?: {
+                    enabled: boolean;
+                    headerName: string;
+                    allowClientTermination: boolean;
+                } | undefined;
+                cors?: {
+                    enabled: boolean;
+                    allowOrigin: string;
+                } | undefined;
+            })[];
+            environment: Record<string, string>;
+            description?: string | undefined;
+            daemon?: {
+                auth: {
+                    enabled: boolean;
+                    type: "bearer" | "api-key";
+                    secret?: string | undefined;
+                };
+                port: number;
+                host: string;
+                logLevel: "debug" | "info" | "warn" | "error";
+                rateLimit: {
+                    enabled: boolean;
+                    windowMs: number;
+                    max: number;
+                    keyGenerator: "ip" | "user";
+                };
+            } | undefined;
+        }[];
+        secrets: {
+            provider: "env" | "keyring" | "vault";
+            keyringService: string;
+        };
+        schemasCacheTTL: number;
+        schemasCachePath: string;
+        maxSchemaCacheEntries: number;
+        schemasBackgroundRefresh: boolean;
+        backgroundSchemaPopulation: boolean;
+        base_servers_auto_start: boolean;
+        base_servers_auto_expose_tools: boolean;
+        dynamicToolExposure: boolean;
+        timeouts: {
+            serverInit: number;
+            toolFetch: number;
+            toolExecution: number;
+            gracefulShutdown: number;
+        };
+        circuitBreaker: {
+            failureThreshold: number;
+            resetTimeout: number;
+            halfOpenSuccessThreshold: number;
+        };
+        autoRestart: {
+            enabled: boolean;
+            maxRetries: number;
+            baseDelay: number;
+            maxDelay: number;
+            backoffMultiplier: number;
+        };
+        description?: string | undefined;
+        daemon?: {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        } | undefined;
+        base_servers?: string[] | undefined;
+        toolSafetyRules?: {
+            safePatterns?: string[] | undefined;
+            riskyPatterns?: string[] | undefined;
+            safeToolOverrides?: string[] | undefined;
+            riskyToolOverrides?: string[] | undefined;
+            argumentInspectionRules?: {
+                tool: string;
+                argumentField: string;
+                whitelistMode: boolean;
+                optionalField: boolean;
+                safeCommandPatterns?: string[] | undefined;
+                riskyCommandPatterns?: string[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        discoveryTTL?: number | undefined;
+    }, {
+        description?: string | undefined;
+        daemon?: {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        } | undefined;
+        servers?: ({
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        })[] | undefined;
+        environment?: Record<string, string> | undefined;
+        version?: string | undefined;
+        plugins?: {
+            name: string;
+            enabled?: boolean | undefined;
+            path?: string | undefined;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        profiles?: {
+            name: string;
+            description?: string | undefined;
+            daemon?: {
+                auth?: {
+                    enabled?: boolean | undefined;
+                    type?: "bearer" | "api-key" | undefined;
+                    secret?: string | undefined;
+                } | undefined;
+                port?: number | undefined;
+                host?: string | undefined;
+                logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+                rateLimit?: {
+                    enabled?: boolean | undefined;
+                    windowMs?: number | undefined;
+                    max?: number | undefined;
+                    keyGenerator?: "ip" | "user" | undefined;
+                } | undefined;
+            } | undefined;
+            servers?: ({
+                name: string;
+                command: string;
+                transport?: "stdio" | undefined;
+                args?: string[] | undefined;
+                env?: Record<string, string> | undefined;
+                cwd?: string | undefined;
+                healthCheck?: {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                } | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+            } | {
+                name: string;
+                transport: "http" | "sse" | "sse-first" | "http-stream";
+                url: string;
+                env?: Record<string, string> | undefined;
+                healthCheck?: {
+                    enabled?: boolean | undefined;
+                    interval?: number | undefined;
+                    timeout?: number | undefined;
+                } | undefined;
+                safety?: "safe" | "risky" | "default" | undefined;
+                auth?: {
+                    type?: "bearer" | "oauth2" | "api-key" | undefined;
+                    token?: string | undefined;
+                    headerName?: string | undefined;
+                    clientId?: string | undefined;
+                    clientSecret?: string | undefined;
+                } | undefined;
+                session?: {
+                    enabled?: boolean | undefined;
+                    headerName?: string | undefined;
+                    allowClientTermination?: boolean | undefined;
+                } | undefined;
+                cors?: {
+                    enabled?: boolean | undefined;
+                    allowOrigin?: string | undefined;
+                } | undefined;
+                requestTimeoutMs?: number | undefined;
+                streamTimeoutMs?: number | undefined;
+                connectTimeoutMs?: number | undefined;
+            })[] | undefined;
+            environment?: Record<string, string> | undefined;
+        }[] | undefined;
+        secrets?: {
+            provider?: "env" | "keyring" | "vault" | undefined;
+            keyringService?: string | undefined;
+        } | undefined;
+        schemasCacheTTL?: number | undefined;
+        schemasCachePath?: string | undefined;
+        maxSchemaCacheEntries?: number | undefined;
+        schemasBackgroundRefresh?: boolean | undefined;
+        backgroundSchemaPopulation?: boolean | undefined;
+        base_servers?: string[] | undefined;
+        base_servers_auto_start?: boolean | undefined;
+        base_servers_auto_expose_tools?: boolean | undefined;
+        toolSafetyRules?: {
+            safePatterns?: string[] | undefined;
+            riskyPatterns?: string[] | undefined;
+            safeToolOverrides?: string[] | undefined;
+            riskyToolOverrides?: string[] | undefined;
+            argumentInspectionRules?: {
+                tool: string;
+                argumentField: string;
+                safeCommandPatterns?: string[] | undefined;
+                riskyCommandPatterns?: string[] | undefined;
+                whitelistMode?: boolean | undefined;
+                optionalField?: boolean | undefined;
+            }[] | undefined;
+        } | undefined;
+        discoveryTTL?: number | undefined;
+        dynamicToolExposure?: boolean | undefined;
+        timeouts?: {
+            serverInit?: number | undefined;
+            toolFetch?: number | undefined;
+            toolExecution?: number | undefined;
+            gracefulShutdown?: number | undefined;
+        } | undefined;
+        circuitBreaker?: {
+            failureThreshold?: number | undefined;
+            resetTimeout?: number | undefined;
+            halfOpenSuccessThreshold?: number | undefined;
+        } | undefined;
+        autoRestart?: {
+            enabled?: boolean | undefined;
+            maxRetries?: number | undefined;
+            baseDelay?: number | undefined;
+            maxDelay?: number | undefined;
+            backoffMultiplier?: number | undefined;
+        } | undefined;
+    }>;
+};
+/**
+ * Validates configuration against schema
+ * Returns parsed config or throws ZodError
+ */
+export declare function validateConfig(config: unknown): MetalinkConfig;
+/**
+ * Safely validates configuration without throwing
+ * Returns { success: true, data } or { success: false, errors }
+ */
+export declare function validateConfigSafe(config: unknown): z.SafeParseReturnType<{
+    description?: string | undefined;
+    daemon?: {
+        auth?: {
+            enabled?: boolean | undefined;
+            type?: "bearer" | "api-key" | undefined;
+            secret?: string | undefined;
+        } | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+        rateLimit?: {
+            enabled?: boolean | undefined;
+            windowMs?: number | undefined;
+            max?: number | undefined;
+            keyGenerator?: "ip" | "user" | undefined;
+        } | undefined;
+    } | undefined;
+    servers?: ({
+        name: string;
+        command: string;
+        transport?: "stdio" | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    } | {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        url: string;
+        env?: Record<string, string> | undefined;
+        healthCheck?: {
+            enabled?: boolean | undefined;
+            interval?: number | undefined;
+            timeout?: number | undefined;
+        } | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type?: "bearer" | "oauth2" | "api-key" | undefined;
+            token?: string | undefined;
+            headerName?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled?: boolean | undefined;
+            headerName?: string | undefined;
+            allowClientTermination?: boolean | undefined;
+        } | undefined;
+        cors?: {
+            enabled?: boolean | undefined;
+            allowOrigin?: string | undefined;
+        } | undefined;
+        requestTimeoutMs?: number | undefined;
+        streamTimeoutMs?: number | undefined;
+        connectTimeoutMs?: number | undefined;
+    })[] | undefined;
+    environment?: Record<string, string> | undefined;
+    version?: string | undefined;
+    plugins?: {
+        name: string;
+        enabled?: boolean | undefined;
+        path?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    profiles?: {
+        name: string;
+        description?: string | undefined;
+        daemon?: {
+            auth?: {
+                enabled?: boolean | undefined;
+                type?: "bearer" | "api-key" | undefined;
+                secret?: string | undefined;
+            } | undefined;
+            port?: number | undefined;
+            host?: string | undefined;
+            logLevel?: "debug" | "info" | "warn" | "error" | undefined;
+            rateLimit?: {
+                enabled?: boolean | undefined;
+                windowMs?: number | undefined;
+                max?: number | undefined;
+                keyGenerator?: "ip" | "user" | undefined;
+            } | undefined;
+        } | undefined;
+        servers?: ({
+            name: string;
+            command: string;
+            transport?: "stdio" | undefined;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            cwd?: string | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            url: string;
+            env?: Record<string, string> | undefined;
+            healthCheck?: {
+                enabled?: boolean | undefined;
+                interval?: number | undefined;
+                timeout?: number | undefined;
+            } | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type?: "bearer" | "oauth2" | "api-key" | undefined;
+                token?: string | undefined;
+                headerName?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled?: boolean | undefined;
+                headerName?: string | undefined;
+                allowClientTermination?: boolean | undefined;
+            } | undefined;
+            cors?: {
+                enabled?: boolean | undefined;
+                allowOrigin?: string | undefined;
+            } | undefined;
+            requestTimeoutMs?: number | undefined;
+            streamTimeoutMs?: number | undefined;
+            connectTimeoutMs?: number | undefined;
+        })[] | undefined;
+        environment?: Record<string, string> | undefined;
+    }[] | undefined;
+    secrets?: {
+        provider?: "env" | "keyring" | "vault" | undefined;
+        keyringService?: string | undefined;
+    } | undefined;
+    schemasCacheTTL?: number | undefined;
+    schemasCachePath?: string | undefined;
+    maxSchemaCacheEntries?: number | undefined;
+    schemasBackgroundRefresh?: boolean | undefined;
+    backgroundSchemaPopulation?: boolean | undefined;
+    base_servers?: string[] | undefined;
+    base_servers_auto_start?: boolean | undefined;
+    base_servers_auto_expose_tools?: boolean | undefined;
+    toolSafetyRules?: {
+        safePatterns?: string[] | undefined;
+        riskyPatterns?: string[] | undefined;
+        safeToolOverrides?: string[] | undefined;
+        riskyToolOverrides?: string[] | undefined;
+        argumentInspectionRules?: {
+            tool: string;
+            argumentField: string;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+            whitelistMode?: boolean | undefined;
+            optionalField?: boolean | undefined;
+        }[] | undefined;
+    } | undefined;
+    discoveryTTL?: number | undefined;
+    dynamicToolExposure?: boolean | undefined;
+    timeouts?: {
+        serverInit?: number | undefined;
+        toolFetch?: number | undefined;
+        toolExecution?: number | undefined;
+        gracefulShutdown?: number | undefined;
+    } | undefined;
+    circuitBreaker?: {
+        failureThreshold?: number | undefined;
+        resetTimeout?: number | undefined;
+        halfOpenSuccessThreshold?: number | undefined;
+    } | undefined;
+    autoRestart?: {
+        enabled?: boolean | undefined;
+        maxRetries?: number | undefined;
+        baseDelay?: number | undefined;
+        maxDelay?: number | undefined;
+        backoffMultiplier?: number | undefined;
+    } | undefined;
+}, {
+    servers: ({
+        name: string;
+        transport: "stdio";
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        cwd?: string | undefined;
+        safety?: "safe" | "risky" | "default" | undefined;
+    } | {
+        name: string;
+        transport: "http" | "sse" | "sse-first" | "http-stream";
+        env: Record<string, string>;
+        healthCheck: {
+            enabled: boolean;
+            interval: number;
+            timeout: number;
+        };
+        url: string;
+        requestTimeoutMs: number;
+        streamTimeoutMs: number;
+        connectTimeoutMs: number;
+        safety?: "safe" | "risky" | "default" | undefined;
+        auth?: {
+            type: "bearer" | "oauth2" | "api-key";
+            headerName: string;
+            token?: string | undefined;
+            clientId?: string | undefined;
+            clientSecret?: string | undefined;
+        } | undefined;
+        session?: {
+            enabled: boolean;
+            headerName: string;
+            allowClientTermination: boolean;
+        } | undefined;
+        cors?: {
+            enabled: boolean;
+            allowOrigin: string;
+        } | undefined;
+    })[];
+    environment: Record<string, string>;
+    version: string;
+    plugins: {
+        enabled: boolean;
+        name: string;
+        config: Record<string, unknown>;
+        path?: string | undefined;
+    }[];
+    profiles: {
+        name: string;
+        servers: ({
+            name: string;
+            transport: "stdio";
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            cwd?: string | undefined;
+            safety?: "safe" | "risky" | "default" | undefined;
+        } | {
+            name: string;
+            transport: "http" | "sse" | "sse-first" | "http-stream";
+            env: Record<string, string>;
+            healthCheck: {
+                enabled: boolean;
+                interval: number;
+                timeout: number;
+            };
+            url: string;
+            requestTimeoutMs: number;
+            streamTimeoutMs: number;
+            connectTimeoutMs: number;
+            safety?: "safe" | "risky" | "default" | undefined;
+            auth?: {
+                type: "bearer" | "oauth2" | "api-key";
+                headerName: string;
+                token?: string | undefined;
+                clientId?: string | undefined;
+                clientSecret?: string | undefined;
+            } | undefined;
+            session?: {
+                enabled: boolean;
+                headerName: string;
+                allowClientTermination: boolean;
+            } | undefined;
+            cors?: {
+                enabled: boolean;
+                allowOrigin: string;
+            } | undefined;
+        })[];
+        environment: Record<string, string>;
+        description?: string | undefined;
+        daemon?: {
+            auth: {
+                enabled: boolean;
+                type: "bearer" | "api-key";
+                secret?: string | undefined;
+            };
+            port: number;
+            host: string;
+            logLevel: "debug" | "info" | "warn" | "error";
+            rateLimit: {
+                enabled: boolean;
+                windowMs: number;
+                max: number;
+                keyGenerator: "ip" | "user";
+            };
+        } | undefined;
+    }[];
+    secrets: {
+        provider: "env" | "keyring" | "vault";
+        keyringService: string;
+    };
+    schemasCacheTTL: number;
+    schemasCachePath: string;
+    maxSchemaCacheEntries: number;
+    schemasBackgroundRefresh: boolean;
+    backgroundSchemaPopulation: boolean;
+    base_servers_auto_start: boolean;
+    base_servers_auto_expose_tools: boolean;
+    dynamicToolExposure: boolean;
+    timeouts: {
+        serverInit: number;
+        toolFetch: number;
+        toolExecution: number;
+        gracefulShutdown: number;
+    };
+    circuitBreaker: {
+        failureThreshold: number;
+        resetTimeout: number;
+        halfOpenSuccessThreshold: number;
+    };
+    autoRestart: {
+        enabled: boolean;
+        maxRetries: number;
+        baseDelay: number;
+        maxDelay: number;
+        backoffMultiplier: number;
+    };
+    description?: string | undefined;
+    daemon?: {
+        auth: {
+            enabled: boolean;
+            type: "bearer" | "api-key";
+            secret?: string | undefined;
+        };
+        port: number;
+        host: string;
+        logLevel: "debug" | "info" | "warn" | "error";
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+            keyGenerator: "ip" | "user";
+        };
+    } | undefined;
+    base_servers?: string[] | undefined;
+    toolSafetyRules?: {
+        safePatterns?: string[] | undefined;
+        riskyPatterns?: string[] | undefined;
+        safeToolOverrides?: string[] | undefined;
+        riskyToolOverrides?: string[] | undefined;
+        argumentInspectionRules?: {
+            tool: string;
+            argumentField: string;
+            whitelistMode: boolean;
+            optionalField: boolean;
+            safeCommandPatterns?: string[] | undefined;
+            riskyCommandPatterns?: string[] | undefined;
+        }[] | undefined;
+    } | undefined;
+    discoveryTTL?: number | undefined;
+}>;
+//# sourceMappingURL=schema.d.ts.map