@frontmcp/auth 0.9.0 → 0.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (127) hide show
  1. package/__test-utils__/assertion.helpers.d.ts +2 -0
  2. package/__test-utils__/assertion.helpers.d.ts.map +1 -0
  3. package/authorization/authorization.class.d.ts +122 -0
  4. package/authorization/authorization.class.d.ts.map +1 -0
  5. package/authorization/authorization.types.d.ts +65 -1
  6. package/authorization/authorization.types.d.ts.map +1 -1
  7. package/authorization/index.d.ts +11 -2
  8. package/authorization/index.d.ts.map +1 -1
  9. package/authorization/orchestrated.accessor.d.ts +161 -0
  10. package/authorization/orchestrated.accessor.d.ts.map +1 -0
  11. package/authorization/orchestrated.authorization.d.ts +257 -0
  12. package/authorization/orchestrated.authorization.d.ts.map +1 -0
  13. package/authorization/public.authorization.d.ts +92 -0
  14. package/authorization/public.authorization.d.ts.map +1 -0
  15. package/authorization/transparent.authorization.d.ts +130 -0
  16. package/authorization/transparent.authorization.d.ts.map +1 -0
  17. package/common/auth-logger.interface.d.ts +15 -0
  18. package/common/auth-logger.interface.d.ts.map +1 -0
  19. package/common/index.d.ts +6 -0
  20. package/common/index.d.ts.map +1 -0
  21. package/common/jwt.types.d.ts +87 -0
  22. package/common/jwt.types.d.ts.map +1 -0
  23. package/common/session-user.types.d.ts +17 -0
  24. package/common/session-user.types.d.ts.map +1 -0
  25. package/common/session.types.d.ts +190 -0
  26. package/common/session.types.d.ts.map +1 -0
  27. package/common/zod-utils.d.ts +5 -0
  28. package/common/zod-utils.d.ts.map +1 -0
  29. package/consent/consent.types.d.ts +112 -0
  30. package/consent/consent.types.d.ts.map +1 -0
  31. package/consent/index.d.ts +2 -0
  32. package/consent/index.d.ts.map +1 -0
  33. package/detection/auth-provider-detection.d.ts +53 -0
  34. package/detection/auth-provider-detection.d.ts.map +1 -0
  35. package/detection/index.d.ts +3 -0
  36. package/detection/index.d.ts.map +1 -0
  37. package/errors/auth-internal.error.d.ts +33 -0
  38. package/errors/auth-internal.error.d.ts.map +1 -0
  39. package/errors/auth-internal.errors.d.ts +123 -0
  40. package/errors/auth-internal.errors.d.ts.map +1 -0
  41. package/errors/index.d.ts +3 -0
  42. package/errors/index.d.ts.map +1 -0
  43. package/esm/index.mjs +5473 -1204
  44. package/esm/package.json +18 -3
  45. package/index.d.ts +18 -5
  46. package/index.d.ts.map +1 -1
  47. package/index.js +5351 -961
  48. package/jwks/jwks.service.d.ts +1 -0
  49. package/jwks/jwks.service.d.ts.map +1 -1
  50. package/jwks/jwks.types.d.ts +3 -0
  51. package/jwks/jwks.types.d.ts.map +1 -1
  52. package/machine-id/index.d.ts +2 -0
  53. package/machine-id/index.d.ts.map +1 -0
  54. package/machine-id/machine-id.d.ts +28 -0
  55. package/machine-id/machine-id.d.ts.map +1 -0
  56. package/options/app-auth.schema.d.ts +272 -0
  57. package/options/app-auth.schema.d.ts.map +1 -0
  58. package/options/index.d.ts +15 -0
  59. package/options/index.d.ts.map +1 -0
  60. package/options/interfaces.d.ts +250 -0
  61. package/options/interfaces.d.ts.map +1 -0
  62. package/options/orchestrated.schema.d.ts +446 -0
  63. package/options/orchestrated.schema.d.ts.map +1 -0
  64. package/options/public.schema.d.ts +19 -0
  65. package/options/public.schema.d.ts.map +1 -0
  66. package/options/schema.d.ts +265 -0
  67. package/options/schema.d.ts.map +1 -0
  68. package/options/shared.schemas.d.ts +128 -0
  69. package/options/shared.schemas.d.ts.map +1 -0
  70. package/options/transparent.schema.d.ts +33 -0
  71. package/options/transparent.schema.d.ts.map +1 -0
  72. package/options/typecheck.d.ts +2 -0
  73. package/options/typecheck.d.ts.map +1 -0
  74. package/options/utils.d.ts +33 -0
  75. package/options/utils.d.ts.map +1 -0
  76. package/package.json +18 -3
  77. package/session/encrypted-authorization-vault.d.ts +182 -0
  78. package/session/encrypted-authorization-vault.d.ts.map +1 -0
  79. package/session/federated-auth.session.d.ts +252 -0
  80. package/session/federated-auth.session.d.ts.map +1 -0
  81. package/session/index.d.ts +21 -1
  82. package/session/index.d.ts.map +1 -1
  83. package/session/orchestrated-token.store.d.ts +155 -0
  84. package/session/orchestrated-token.store.d.ts.map +1 -0
  85. package/session/redis-session.store.d.ts +93 -0
  86. package/session/redis-session.store.d.ts.map +1 -0
  87. package/session/session-crypto.d.ts +84 -0
  88. package/session/session-crypto.d.ts.map +1 -0
  89. package/session/session-rate-limiter.d.ts +114 -0
  90. package/session/session-rate-limiter.d.ts.map +1 -0
  91. package/session/session.transport.d.ts +11 -0
  92. package/session/session.transport.d.ts.map +1 -0
  93. package/session/session.types.d.ts +66 -0
  94. package/session/session.types.d.ts.map +1 -0
  95. package/session/token.refresh.d.ts +61 -0
  96. package/session/token.refresh.d.ts.map +1 -0
  97. package/session/transport-session.types.d.ts +479 -0
  98. package/session/transport-session.types.d.ts.map +1 -0
  99. package/session/utils/auth-token.utils.d.ts +12 -0
  100. package/session/utils/auth-token.utils.d.ts.map +1 -0
  101. package/session/utils/index.d.ts +2 -0
  102. package/session/utils/index.d.ts.map +1 -1
  103. package/session/utils/session-crypto.utils.d.ts +30 -0
  104. package/session/utils/session-crypto.utils.d.ts.map +1 -0
  105. package/session/vercel-kv-session.store.d.ts +123 -0
  106. package/session/vercel-kv-session.store.d.ts.map +1 -0
  107. package/utils/authorization-id.utils.d.ts +12 -0
  108. package/utils/authorization-id.utils.d.ts.map +1 -0
  109. package/utils/index.d.ts +1 -0
  110. package/utils/index.d.ts.map +1 -1
  111. package/vault/auth-providers.accessor.d.ts +154 -0
  112. package/vault/auth-providers.accessor.d.ts.map +1 -0
  113. package/vault/auth-providers.accessor.impl.d.ts +54 -0
  114. package/vault/auth-providers.accessor.impl.d.ts.map +1 -0
  115. package/vault/auth-providers.registry.d.ts +111 -0
  116. package/vault/auth-providers.registry.d.ts.map +1 -0
  117. package/vault/auth-providers.types.d.ts +3 -3
  118. package/vault/auth-providers.vault.d.ts +94 -0
  119. package/vault/auth-providers.vault.d.ts.map +1 -0
  120. package/vault/credential-loaders/eager-loader.d.ts +47 -0
  121. package/vault/credential-loaders/eager-loader.d.ts.map +1 -0
  122. package/vault/credential-loaders/index.d.ts +7 -0
  123. package/vault/credential-loaders/index.d.ts.map +1 -0
  124. package/vault/credential-loaders/lazy-loader.d.ts +54 -0
  125. package/vault/credential-loaders/lazy-loader.d.ts.map +1 -0
  126. package/vault/index.d.ts +9 -0
  127. package/vault/index.d.ts.map +1 -1
@@ -0,0 +1,446 @@
1
+ import { z } from 'zod';
2
+ export declare const orchestratedLocalSchema: z.ZodObject<{
3
+ local: z.ZodOptional<z.ZodObject<{
4
+ signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
5
+ jwks: z.ZodOptional<z.ZodObject<{
6
+ keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
7
+ }, z.core.$strip>>;
8
+ issuer: z.ZodOptional<z.ZodString>;
9
+ }, z.core.$strip>>;
10
+ tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
11
+ type: z.ZodLiteral<"memory">;
12
+ }, z.core.$strip>, z.ZodObject<{
13
+ type: z.ZodLiteral<"redis">;
14
+ config: z.ZodObject<{
15
+ host: z.ZodString;
16
+ port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
17
+ password: z.ZodOptional<z.ZodString>;
18
+ db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
19
+ tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
20
+ keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
21
+ defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
22
+ }, z.core.$strip>;
23
+ }, z.core.$strip>], "type">>;
24
+ allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
25
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
26
+ publicAccess: z.ZodOptional<z.ZodObject<{
27
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
28
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
29
+ rateLimit: z.ZodDefault<z.ZodNumber>;
30
+ }, z.core.$strip>>;
31
+ consent: z.ZodOptional<z.ZodObject<{
32
+ enabled: z.ZodDefault<z.ZodBoolean>;
33
+ groupByApp: z.ZodDefault<z.ZodBoolean>;
34
+ showDescriptions: z.ZodDefault<z.ZodBoolean>;
35
+ allowSelectAll: z.ZodDefault<z.ZodBoolean>;
36
+ requireSelection: z.ZodDefault<z.ZodBoolean>;
37
+ customMessage: z.ZodOptional<z.ZodString>;
38
+ rememberConsent: z.ZodDefault<z.ZodBoolean>;
39
+ excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
40
+ defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
41
+ }, z.core.$strip>>;
42
+ federatedAuth: z.ZodOptional<z.ZodObject<{
43
+ stateValidation: z.ZodDefault<z.ZodEnum<{
44
+ format: "format";
45
+ strict: "strict";
46
+ }>>;
47
+ }, z.core.$strip>>;
48
+ refresh: z.ZodOptional<z.ZodObject<{
49
+ enabled: z.ZodDefault<z.ZodBoolean>;
50
+ skewSeconds: z.ZodDefault<z.ZodNumber>;
51
+ }, z.core.$strip>>;
52
+ expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
53
+ incrementalAuth: z.ZodOptional<z.ZodObject<{
54
+ enabled: z.ZodDefault<z.ZodBoolean>;
55
+ skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
56
+ anonymous: "anonymous";
57
+ "require-auth": "require-auth";
58
+ }>>;
59
+ allowSkip: z.ZodDefault<z.ZodBoolean>;
60
+ showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
61
+ }, z.core.$strip>>;
62
+ cimd: z.ZodOptional<z.ZodObject<{
63
+ enabled: z.ZodDefault<z.ZodBoolean>;
64
+ cache: z.ZodOptional<z.ZodObject<{
65
+ type: z.ZodDefault<z.ZodEnum<{
66
+ memory: "memory";
67
+ redis: "redis";
68
+ }>>;
69
+ defaultTtlMs: z.ZodDefault<z.ZodNumber>;
70
+ maxTtlMs: z.ZodDefault<z.ZodNumber>;
71
+ minTtlMs: z.ZodDefault<z.ZodNumber>;
72
+ redis: z.ZodOptional<z.ZodObject<{
73
+ url: z.ZodOptional<z.ZodString>;
74
+ host: z.ZodOptional<z.ZodString>;
75
+ port: z.ZodOptional<z.ZodNumber>;
76
+ password: z.ZodOptional<z.ZodString>;
77
+ db: z.ZodOptional<z.ZodNumber>;
78
+ tls: z.ZodOptional<z.ZodBoolean>;
79
+ keyPrefix: z.ZodDefault<z.ZodString>;
80
+ }, z.core.$strip>>;
81
+ }, z.core.$strip>>;
82
+ security: z.ZodOptional<z.ZodObject<{
83
+ blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
84
+ allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
85
+ blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
86
+ warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
87
+ allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
88
+ }, z.core.$strip>>;
89
+ network: z.ZodOptional<z.ZodObject<{
90
+ timeoutMs: z.ZodDefault<z.ZodNumber>;
91
+ maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
92
+ redirectPolicy: z.ZodDefault<z.ZodEnum<{
93
+ deny: "deny";
94
+ "same-origin": "same-origin";
95
+ allow: "allow";
96
+ }>>;
97
+ maxRedirects: z.ZodDefault<z.ZodNumber>;
98
+ }, z.core.$strip>>;
99
+ }, z.core.$strip>>;
100
+ mode: z.ZodLiteral<"orchestrated">;
101
+ type: z.ZodLiteral<"local">;
102
+ }, z.core.$strip>;
103
+ export declare const orchestratedRemoteSchema: z.ZodObject<{
104
+ local: z.ZodOptional<z.ZodObject<{
105
+ signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
106
+ jwks: z.ZodOptional<z.ZodObject<{
107
+ keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
108
+ }, z.core.$strip>>;
109
+ issuer: z.ZodOptional<z.ZodString>;
110
+ }, z.core.$strip>>;
111
+ tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
112
+ type: z.ZodLiteral<"memory">;
113
+ }, z.core.$strip>, z.ZodObject<{
114
+ type: z.ZodLiteral<"redis">;
115
+ config: z.ZodObject<{
116
+ host: z.ZodString;
117
+ port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
118
+ password: z.ZodOptional<z.ZodString>;
119
+ db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
120
+ tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
121
+ keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
122
+ defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
123
+ }, z.core.$strip>;
124
+ }, z.core.$strip>], "type">>;
125
+ allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
126
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
127
+ publicAccess: z.ZodOptional<z.ZodObject<{
128
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
129
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
130
+ rateLimit: z.ZodDefault<z.ZodNumber>;
131
+ }, z.core.$strip>>;
132
+ consent: z.ZodOptional<z.ZodObject<{
133
+ enabled: z.ZodDefault<z.ZodBoolean>;
134
+ groupByApp: z.ZodDefault<z.ZodBoolean>;
135
+ showDescriptions: z.ZodDefault<z.ZodBoolean>;
136
+ allowSelectAll: z.ZodDefault<z.ZodBoolean>;
137
+ requireSelection: z.ZodDefault<z.ZodBoolean>;
138
+ customMessage: z.ZodOptional<z.ZodString>;
139
+ rememberConsent: z.ZodDefault<z.ZodBoolean>;
140
+ excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
141
+ defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
142
+ }, z.core.$strip>>;
143
+ federatedAuth: z.ZodOptional<z.ZodObject<{
144
+ stateValidation: z.ZodDefault<z.ZodEnum<{
145
+ format: "format";
146
+ strict: "strict";
147
+ }>>;
148
+ }, z.core.$strip>>;
149
+ refresh: z.ZodOptional<z.ZodObject<{
150
+ enabled: z.ZodDefault<z.ZodBoolean>;
151
+ skewSeconds: z.ZodDefault<z.ZodNumber>;
152
+ }, z.core.$strip>>;
153
+ expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
154
+ incrementalAuth: z.ZodOptional<z.ZodObject<{
155
+ enabled: z.ZodDefault<z.ZodBoolean>;
156
+ skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
157
+ anonymous: "anonymous";
158
+ "require-auth": "require-auth";
159
+ }>>;
160
+ allowSkip: z.ZodDefault<z.ZodBoolean>;
161
+ showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
162
+ }, z.core.$strip>>;
163
+ cimd: z.ZodOptional<z.ZodObject<{
164
+ enabled: z.ZodDefault<z.ZodBoolean>;
165
+ cache: z.ZodOptional<z.ZodObject<{
166
+ type: z.ZodDefault<z.ZodEnum<{
167
+ memory: "memory";
168
+ redis: "redis";
169
+ }>>;
170
+ defaultTtlMs: z.ZodDefault<z.ZodNumber>;
171
+ maxTtlMs: z.ZodDefault<z.ZodNumber>;
172
+ minTtlMs: z.ZodDefault<z.ZodNumber>;
173
+ redis: z.ZodOptional<z.ZodObject<{
174
+ url: z.ZodOptional<z.ZodString>;
175
+ host: z.ZodOptional<z.ZodString>;
176
+ port: z.ZodOptional<z.ZodNumber>;
177
+ password: z.ZodOptional<z.ZodString>;
178
+ db: z.ZodOptional<z.ZodNumber>;
179
+ tls: z.ZodOptional<z.ZodBoolean>;
180
+ keyPrefix: z.ZodDefault<z.ZodString>;
181
+ }, z.core.$strip>>;
182
+ }, z.core.$strip>>;
183
+ security: z.ZodOptional<z.ZodObject<{
184
+ blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
185
+ allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
186
+ blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
187
+ warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
188
+ allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
189
+ }, z.core.$strip>>;
190
+ network: z.ZodOptional<z.ZodObject<{
191
+ timeoutMs: z.ZodDefault<z.ZodNumber>;
192
+ maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
193
+ redirectPolicy: z.ZodDefault<z.ZodEnum<{
194
+ deny: "deny";
195
+ "same-origin": "same-origin";
196
+ allow: "allow";
197
+ }>>;
198
+ maxRedirects: z.ZodDefault<z.ZodNumber>;
199
+ }, z.core.$strip>>;
200
+ }, z.core.$strip>>;
201
+ mode: z.ZodLiteral<"orchestrated">;
202
+ type: z.ZodLiteral<"remote">;
203
+ remote: z.ZodObject<{
204
+ provider: z.ZodString;
205
+ name: z.ZodOptional<z.ZodString>;
206
+ id: z.ZodOptional<z.ZodString>;
207
+ jwks: z.ZodOptional<z.ZodObject<{
208
+ keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
209
+ }, z.core.$strip>>;
210
+ jwksUri: z.ZodOptional<z.ZodString>;
211
+ clientId: z.ZodOptional<z.ZodString>;
212
+ clientSecret: z.ZodOptional<z.ZodString>;
213
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
214
+ dcrEnabled: z.ZodDefault<z.ZodBoolean>;
215
+ authEndpoint: z.ZodOptional<z.ZodString>;
216
+ tokenEndpoint: z.ZodOptional<z.ZodString>;
217
+ registrationEndpoint: z.ZodOptional<z.ZodString>;
218
+ userInfoEndpoint: z.ZodOptional<z.ZodString>;
219
+ }, z.core.$strip>;
220
+ }, z.core.$strip>;
221
+ export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
222
+ local: z.ZodOptional<z.ZodObject<{
223
+ signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
224
+ jwks: z.ZodOptional<z.ZodObject<{
225
+ keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
226
+ }, z.core.$strip>>;
227
+ issuer: z.ZodOptional<z.ZodString>;
228
+ }, z.core.$strip>>;
229
+ tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
230
+ type: z.ZodLiteral<"memory">;
231
+ }, z.core.$strip>, z.ZodObject<{
232
+ type: z.ZodLiteral<"redis">;
233
+ config: z.ZodObject<{
234
+ host: z.ZodString;
235
+ port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
236
+ password: z.ZodOptional<z.ZodString>;
237
+ db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
238
+ tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
239
+ keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
240
+ defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
241
+ }, z.core.$strip>;
242
+ }, z.core.$strip>], "type">>;
243
+ allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
244
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
245
+ publicAccess: z.ZodOptional<z.ZodObject<{
246
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
247
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
248
+ rateLimit: z.ZodDefault<z.ZodNumber>;
249
+ }, z.core.$strip>>;
250
+ consent: z.ZodOptional<z.ZodObject<{
251
+ enabled: z.ZodDefault<z.ZodBoolean>;
252
+ groupByApp: z.ZodDefault<z.ZodBoolean>;
253
+ showDescriptions: z.ZodDefault<z.ZodBoolean>;
254
+ allowSelectAll: z.ZodDefault<z.ZodBoolean>;
255
+ requireSelection: z.ZodDefault<z.ZodBoolean>;
256
+ customMessage: z.ZodOptional<z.ZodString>;
257
+ rememberConsent: z.ZodDefault<z.ZodBoolean>;
258
+ excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
259
+ defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
260
+ }, z.core.$strip>>;
261
+ federatedAuth: z.ZodOptional<z.ZodObject<{
262
+ stateValidation: z.ZodDefault<z.ZodEnum<{
263
+ format: "format";
264
+ strict: "strict";
265
+ }>>;
266
+ }, z.core.$strip>>;
267
+ refresh: z.ZodOptional<z.ZodObject<{
268
+ enabled: z.ZodDefault<z.ZodBoolean>;
269
+ skewSeconds: z.ZodDefault<z.ZodNumber>;
270
+ }, z.core.$strip>>;
271
+ expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
272
+ incrementalAuth: z.ZodOptional<z.ZodObject<{
273
+ enabled: z.ZodDefault<z.ZodBoolean>;
274
+ skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
275
+ anonymous: "anonymous";
276
+ "require-auth": "require-auth";
277
+ }>>;
278
+ allowSkip: z.ZodDefault<z.ZodBoolean>;
279
+ showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
280
+ }, z.core.$strip>>;
281
+ cimd: z.ZodOptional<z.ZodObject<{
282
+ enabled: z.ZodDefault<z.ZodBoolean>;
283
+ cache: z.ZodOptional<z.ZodObject<{
284
+ type: z.ZodDefault<z.ZodEnum<{
285
+ memory: "memory";
286
+ redis: "redis";
287
+ }>>;
288
+ defaultTtlMs: z.ZodDefault<z.ZodNumber>;
289
+ maxTtlMs: z.ZodDefault<z.ZodNumber>;
290
+ minTtlMs: z.ZodDefault<z.ZodNumber>;
291
+ redis: z.ZodOptional<z.ZodObject<{
292
+ url: z.ZodOptional<z.ZodString>;
293
+ host: z.ZodOptional<z.ZodString>;
294
+ port: z.ZodOptional<z.ZodNumber>;
295
+ password: z.ZodOptional<z.ZodString>;
296
+ db: z.ZodOptional<z.ZodNumber>;
297
+ tls: z.ZodOptional<z.ZodBoolean>;
298
+ keyPrefix: z.ZodDefault<z.ZodString>;
299
+ }, z.core.$strip>>;
300
+ }, z.core.$strip>>;
301
+ security: z.ZodOptional<z.ZodObject<{
302
+ blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
303
+ allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
304
+ blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
305
+ warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
306
+ allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
307
+ }, z.core.$strip>>;
308
+ network: z.ZodOptional<z.ZodObject<{
309
+ timeoutMs: z.ZodDefault<z.ZodNumber>;
310
+ maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
311
+ redirectPolicy: z.ZodDefault<z.ZodEnum<{
312
+ deny: "deny";
313
+ "same-origin": "same-origin";
314
+ allow: "allow";
315
+ }>>;
316
+ maxRedirects: z.ZodDefault<z.ZodNumber>;
317
+ }, z.core.$strip>>;
318
+ }, z.core.$strip>>;
319
+ mode: z.ZodLiteral<"orchestrated">;
320
+ type: z.ZodLiteral<"local">;
321
+ }, z.core.$strip>, z.ZodObject<{
322
+ local: z.ZodOptional<z.ZodObject<{
323
+ signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
324
+ jwks: z.ZodOptional<z.ZodObject<{
325
+ keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
326
+ }, z.core.$strip>>;
327
+ issuer: z.ZodOptional<z.ZodString>;
328
+ }, z.core.$strip>>;
329
+ tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
330
+ type: z.ZodLiteral<"memory">;
331
+ }, z.core.$strip>, z.ZodObject<{
332
+ type: z.ZodLiteral<"redis">;
333
+ config: z.ZodObject<{
334
+ host: z.ZodString;
335
+ port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
336
+ password: z.ZodOptional<z.ZodString>;
337
+ db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
338
+ tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
339
+ keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
340
+ defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
341
+ }, z.core.$strip>;
342
+ }, z.core.$strip>], "type">>;
343
+ allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
344
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
345
+ publicAccess: z.ZodOptional<z.ZodObject<{
346
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
347
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
348
+ rateLimit: z.ZodDefault<z.ZodNumber>;
349
+ }, z.core.$strip>>;
350
+ consent: z.ZodOptional<z.ZodObject<{
351
+ enabled: z.ZodDefault<z.ZodBoolean>;
352
+ groupByApp: z.ZodDefault<z.ZodBoolean>;
353
+ showDescriptions: z.ZodDefault<z.ZodBoolean>;
354
+ allowSelectAll: z.ZodDefault<z.ZodBoolean>;
355
+ requireSelection: z.ZodDefault<z.ZodBoolean>;
356
+ customMessage: z.ZodOptional<z.ZodString>;
357
+ rememberConsent: z.ZodDefault<z.ZodBoolean>;
358
+ excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
359
+ defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
360
+ }, z.core.$strip>>;
361
+ federatedAuth: z.ZodOptional<z.ZodObject<{
362
+ stateValidation: z.ZodDefault<z.ZodEnum<{
363
+ format: "format";
364
+ strict: "strict";
365
+ }>>;
366
+ }, z.core.$strip>>;
367
+ refresh: z.ZodOptional<z.ZodObject<{
368
+ enabled: z.ZodDefault<z.ZodBoolean>;
369
+ skewSeconds: z.ZodDefault<z.ZodNumber>;
370
+ }, z.core.$strip>>;
371
+ expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
372
+ incrementalAuth: z.ZodOptional<z.ZodObject<{
373
+ enabled: z.ZodDefault<z.ZodBoolean>;
374
+ skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
375
+ anonymous: "anonymous";
376
+ "require-auth": "require-auth";
377
+ }>>;
378
+ allowSkip: z.ZodDefault<z.ZodBoolean>;
379
+ showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
380
+ }, z.core.$strip>>;
381
+ cimd: z.ZodOptional<z.ZodObject<{
382
+ enabled: z.ZodDefault<z.ZodBoolean>;
383
+ cache: z.ZodOptional<z.ZodObject<{
384
+ type: z.ZodDefault<z.ZodEnum<{
385
+ memory: "memory";
386
+ redis: "redis";
387
+ }>>;
388
+ defaultTtlMs: z.ZodDefault<z.ZodNumber>;
389
+ maxTtlMs: z.ZodDefault<z.ZodNumber>;
390
+ minTtlMs: z.ZodDefault<z.ZodNumber>;
391
+ redis: z.ZodOptional<z.ZodObject<{
392
+ url: z.ZodOptional<z.ZodString>;
393
+ host: z.ZodOptional<z.ZodString>;
394
+ port: z.ZodOptional<z.ZodNumber>;
395
+ password: z.ZodOptional<z.ZodString>;
396
+ db: z.ZodOptional<z.ZodNumber>;
397
+ tls: z.ZodOptional<z.ZodBoolean>;
398
+ keyPrefix: z.ZodDefault<z.ZodString>;
399
+ }, z.core.$strip>>;
400
+ }, z.core.$strip>>;
401
+ security: z.ZodOptional<z.ZodObject<{
402
+ blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
403
+ allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
404
+ blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
405
+ warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
406
+ allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
407
+ }, z.core.$strip>>;
408
+ network: z.ZodOptional<z.ZodObject<{
409
+ timeoutMs: z.ZodDefault<z.ZodNumber>;
410
+ maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
411
+ redirectPolicy: z.ZodDefault<z.ZodEnum<{
412
+ deny: "deny";
413
+ "same-origin": "same-origin";
414
+ allow: "allow";
415
+ }>>;
416
+ maxRedirects: z.ZodDefault<z.ZodNumber>;
417
+ }, z.core.$strip>>;
418
+ }, z.core.$strip>>;
419
+ mode: z.ZodLiteral<"orchestrated">;
420
+ type: z.ZodLiteral<"remote">;
421
+ remote: z.ZodObject<{
422
+ provider: z.ZodString;
423
+ name: z.ZodOptional<z.ZodString>;
424
+ id: z.ZodOptional<z.ZodString>;
425
+ jwks: z.ZodOptional<z.ZodObject<{
426
+ keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
427
+ }, z.core.$strip>>;
428
+ jwksUri: z.ZodOptional<z.ZodString>;
429
+ clientId: z.ZodOptional<z.ZodString>;
430
+ clientSecret: z.ZodOptional<z.ZodString>;
431
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
432
+ dcrEnabled: z.ZodDefault<z.ZodBoolean>;
433
+ authEndpoint: z.ZodOptional<z.ZodString>;
434
+ tokenEndpoint: z.ZodOptional<z.ZodString>;
435
+ registrationEndpoint: z.ZodOptional<z.ZodString>;
436
+ userInfoEndpoint: z.ZodOptional<z.ZodString>;
437
+ }, z.core.$strip>;
438
+ }, z.core.$strip>], "type">;
439
+ export type OrchestratedLocalOptions = z.infer<typeof orchestratedLocalSchema>;
440
+ export type OrchestratedLocalOptionsInput = z.input<typeof orchestratedLocalSchema>;
441
+ export type OrchestratedRemoteOptions = z.infer<typeof orchestratedRemoteSchema>;
442
+ export type OrchestratedRemoteOptionsInput = z.input<typeof orchestratedRemoteSchema>;
443
+ export type OrchestratedAuthOptions = z.infer<typeof orchestratedAuthOptionsSchema>;
444
+ export type OrchestratedAuthOptionsInput = z.input<typeof orchestratedAuthOptionsSchema>;
445
+ export type OrchestratedType = 'local' | 'remote';
446
+ //# sourceMappingURL=orchestrated.schema.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../src/options/orchestrated.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIlC,CAAC;AAMH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKnC,CAAC;AAMH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAGxC,CAAC;AAMH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC/E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEpF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACjF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEtF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEzF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC"}
@@ -0,0 +1,19 @@
1
+ import { z } from 'zod';
2
+ export declare const publicAuthOptionsSchema: z.ZodObject<{
3
+ mode: z.ZodLiteral<"public">;
4
+ issuer: z.ZodOptional<z.ZodString>;
5
+ sessionTtl: z.ZodDefault<z.ZodNumber>;
6
+ anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
7
+ publicAccess: z.ZodOptional<z.ZodObject<{
8
+ tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
9
+ prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
10
+ rateLimit: z.ZodDefault<z.ZodNumber>;
11
+ }, z.core.$strip>>;
12
+ jwks: z.ZodOptional<z.ZodObject<{
13
+ keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
14
+ }, z.core.$strip>>;
15
+ signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
16
+ }, z.core.$strip>;
17
+ export type PublicAuthOptions = z.infer<typeof publicAuthOptionsSchema>;
18
+ export type PublicAuthOptionsInput = z.input<typeof publicAuthOptionsSchema>;
19
+ //# sourceMappingURL=public.schema.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../src/options/public.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqClC,CAAC;AAMH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}