@frontmcp/auth 1.0.4 → 1.1.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (85) hide show
  1. package/authorities/authorities.context.d.ts +63 -0
  2. package/authorities/authorities.context.d.ts.map +1 -0
  3. package/authorities/authorities.engine.d.ts +65 -0
  4. package/authorities/authorities.engine.d.ts.map +1 -0
  5. package/authorities/authorities.errors.d.ts +59 -0
  6. package/authorities/authorities.errors.d.ts.map +1 -0
  7. package/authorities/authorities.evaluator.d.ts +28 -0
  8. package/authorities/authorities.evaluator.d.ts.map +1 -0
  9. package/authorities/authorities.metadata-augment.d.ts +31 -0
  10. package/authorities/authorities.metadata-augment.d.ts.map +1 -0
  11. package/authorities/authorities.profiles.d.ts +75 -0
  12. package/authorities/authorities.profiles.d.ts.map +1 -0
  13. package/authorities/authorities.registry.d.ts +86 -0
  14. package/authorities/authorities.registry.d.ts.map +1 -0
  15. package/authorities/authorities.schema.d.ts +24 -0
  16. package/authorities/authorities.schema.d.ts.map +1 -0
  17. package/authorities/authorities.scope-mapping.d.ts +16 -0
  18. package/authorities/authorities.scope-mapping.d.ts.map +1 -0
  19. package/authorities/authorities.types.d.ts +290 -0
  20. package/authorities/authorities.types.d.ts.map +1 -0
  21. package/authorities/index.d.ts +17 -0
  22. package/authorities/index.d.ts.map +1 -0
  23. package/authorization/authorization.class.d.ts +2 -3
  24. package/authorization/authorization.class.d.ts.map +1 -1
  25. package/authorization/authorization.types.d.ts +53 -54
  26. package/authorization/authorization.types.d.ts.map +1 -1
  27. package/authorization/index.d.ts +1 -1
  28. package/authorization/index.d.ts.map +1 -1
  29. package/cimd/cimd.types.d.ts +90 -90
  30. package/cimd/cimd.types.d.ts.map +1 -1
  31. package/common/jwt.types.d.ts +16 -16
  32. package/common/jwt.types.d.ts.map +1 -1
  33. package/common/session.types.d.ts +75 -76
  34. package/common/session.types.d.ts.map +1 -1
  35. package/common/zod-utils.d.ts +1 -1
  36. package/common/zod-utils.d.ts.map +1 -1
  37. package/consent/consent.types.d.ts +69 -69
  38. package/consent/consent.types.d.ts.map +1 -1
  39. package/context/frontmcp-auth-context.d.ts +113 -0
  40. package/context/frontmcp-auth-context.d.ts.map +1 -0
  41. package/context/frontmcp-auth-context.factory.d.ts +39 -0
  42. package/context/frontmcp-auth-context.factory.d.ts.map +1 -0
  43. package/context/frontmcp-auth-context.impl.d.ts +72 -0
  44. package/context/frontmcp-auth-context.impl.d.ts.map +1 -0
  45. package/context/index.d.ts +16 -0
  46. package/context/index.d.ts.map +1 -0
  47. package/detection/auth-provider-detection.d.ts +25 -25
  48. package/detection/auth-provider-detection.d.ts.map +1 -1
  49. package/esm/index.mjs +1036 -120
  50. package/esm/package.json +5 -5
  51. package/fetch/fetch-credential-middleware.d.ts +99 -0
  52. package/fetch/fetch-credential-middleware.d.ts.map +1 -0
  53. package/fetch/index.d.ts +10 -0
  54. package/fetch/index.d.ts.map +1 -0
  55. package/index.d.ts +6 -2
  56. package/index.d.ts.map +1 -1
  57. package/index.js +1619 -680
  58. package/machine-id/index.d.ts +1 -1
  59. package/machine-id/index.d.ts.map +1 -1
  60. package/options/app-auth.schema.d.ts +235 -235
  61. package/options/app-auth.schema.d.ts.map +1 -1
  62. package/options/orchestrated.schema.d.ts +371 -371
  63. package/options/orchestrated.schema.d.ts.map +1 -1
  64. package/options/public.schema.d.ts +16 -16
  65. package/options/public.schema.d.ts.map +1 -1
  66. package/options/schema.d.ts +227 -227
  67. package/options/schema.d.ts.map +1 -1
  68. package/options/shared.schemas.d.ts +97 -97
  69. package/options/shared.schemas.d.ts.map +1 -1
  70. package/options/transparent.schema.d.ts +30 -30
  71. package/options/transparent.schema.d.ts.map +1 -1
  72. package/options/typecheck.d.ts.map +1 -1
  73. package/package.json +5 -5
  74. package/session/authorization-vault.d.ts +380 -380
  75. package/session/authorization-vault.d.ts.map +1 -1
  76. package/session/authorization.store.d.ts +28 -29
  77. package/session/authorization.store.d.ts.map +1 -1
  78. package/session/encrypted-authorization-vault.d.ts +21 -21
  79. package/session/encrypted-authorization-vault.d.ts.map +1 -1
  80. package/session/transport-session.types.d.ts +166 -167
  81. package/session/transport-session.types.d.ts.map +1 -1
  82. package/session/vault-encryption.d.ts +27 -27
  83. package/session/vault-encryption.d.ts.map +1 -1
  84. package/vault/auth-providers.types.d.ts +45 -46
  85. package/vault/auth-providers.types.d.ts.map +1 -1
@@ -1 +1 @@
1
- {"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../src/options/orchestrated.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAyB1F,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGuB,CAAC;AAMpD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIuB,CAAC;AAMrD,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC/D,MAAM,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACjE,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAGhE,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAC5E,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAO3F,sCAAsC;AACtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAkB,CAAC;AACvD,uCAAuC;AACvC,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAmB,CAAC;AAEzD,uCAAuC;AACvC,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,4CAA4C;AAC5C,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AAElE,wCAAwC;AACxC,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAC1D,6CAA6C;AAC7C,MAAM,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAC/D,oDAAoD;AACpD,MAAM,MAAM,4BAA4B,GAAG,6BAA6B,CAAC"}
1
+ {"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../src/options/orchestrated.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAoC1F,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAGuB,CAAC;AAMpD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAIuB,CAAC;AAMrD,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC/D,MAAM,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACjE,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAGhE,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAC5E,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAO3F,sCAAsC;AACtC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAkB,CAAC;AACvD,uCAAuC;AACvC,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAmB,CAAC;AAEzD,uCAAuC;AACvC,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,4CAA4C;AAC5C,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AAElE,wCAAwC;AACxC,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAC1D,6CAA6C;AAC7C,MAAM,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAC/D,oDAAoD;AACpD,MAAM,MAAM,4BAA4B,GAAG,6BAA6B,CAAC"}
@@ -1,20 +1,20 @@
1
- import { z } from 'zod';
1
+ import { z } from '@frontmcp/lazy-zod';
2
2
  import type { PublicAuthOptionsInterface } from './interfaces';
3
- export declare const publicAuthOptionsSchema: z.ZodObject<{
4
- mode: z.ZodLiteral<"public">;
5
- issuer: z.ZodOptional<z.ZodString>;
6
- sessionTtl: z.ZodDefault<z.ZodNumber>;
7
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
8
- publicAccess: z.ZodOptional<z.ZodObject<{
9
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
10
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
11
- rateLimit: z.ZodDefault<z.ZodNumber>;
12
- }, z.core.$strip>>;
13
- jwks: z.ZodOptional<z.ZodObject<{
14
- keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
15
- }, z.core.$strip>>;
16
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
17
- }, z.core.$strip>;
3
+ export declare const publicAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodObject<{
4
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"public">;
5
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
6
+ sessionTtl: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
7
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
8
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
9
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
10
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
11
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
12
+ }, import("zod/v4/core").$strip>>;
13
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
14
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown>>;
15
+ }, import("zod/v4/core").$strip>>;
16
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
17
+ }, import("zod/v4/core").$strip>;
18
18
  export type PublicAuthOptions = z.infer<typeof publicAuthOptionsSchema>;
19
19
  export type PublicAuthOptionsInput = PublicAuthOptionsInterface;
20
20
  //# sourceMappingURL=public.schema.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../src/options/public.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAO/D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqCgB,CAAC;AAMrD,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAC"}
1
+ {"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../src/options/public.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAIvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAQ/D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;gCAqCgB,CAAC;AAMrD,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAC"}
@@ -1,257 +1,257 @@
1
- import { z } from 'zod';
1
+ import { z } from '@frontmcp/lazy-zod';
2
2
  import type { AuthOptionsInterface } from './interfaces';
3
- export declare const authOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
4
- mode: z.ZodLiteral<"public">;
5
- issuer: z.ZodOptional<z.ZodString>;
6
- sessionTtl: z.ZodDefault<z.ZodNumber>;
7
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
8
- publicAccess: z.ZodOptional<z.ZodObject<{
9
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
10
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
11
- rateLimit: z.ZodDefault<z.ZodNumber>;
12
- }, z.core.$strip>>;
13
- jwks: z.ZodOptional<z.ZodObject<{
14
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
15
- }, z.core.$strip>>;
16
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
17
- }, z.core.$strip>, z.ZodObject<{
18
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
19
- requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
20
- allowAnonymous: z.ZodDefault<z.ZodBoolean>;
21
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
22
- publicAccess: z.ZodOptional<z.ZodObject<{
23
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
24
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
25
- rateLimit: z.ZodDefault<z.ZodNumber>;
26
- }, z.core.$strip>>;
27
- provider: z.ZodString;
28
- clientId: z.ZodOptional<z.ZodString>;
29
- clientSecret: z.ZodOptional<z.ZodString>;
30
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
31
- providerConfig: z.ZodOptional<z.ZodObject<{
32
- name: z.ZodOptional<z.ZodString>;
33
- id: z.ZodOptional<z.ZodString>;
34
- jwks: z.ZodOptional<z.ZodObject<{
35
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
36
- }, z.core.$strip>>;
37
- jwksUri: z.ZodOptional<z.ZodString>;
38
- dcrEnabled: z.ZodDefault<z.ZodBoolean>;
39
- authEndpoint: z.ZodOptional<z.ZodString>;
40
- tokenEndpoint: z.ZodOptional<z.ZodString>;
41
- registrationEndpoint: z.ZodOptional<z.ZodString>;
42
- userInfoEndpoint: z.ZodOptional<z.ZodString>;
43
- }, z.core.$strip>>;
44
- mode: z.ZodLiteral<"transparent">;
45
- }, z.core.$strip>, z.ZodObject<{
46
- local: z.ZodOptional<z.ZodObject<{
47
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
48
- jwks: z.ZodOptional<z.ZodObject<{
49
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
50
- }, z.core.$strip>>;
51
- issuer: z.ZodOptional<z.ZodString>;
52
- }, z.core.$strip>>;
53
- tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
54
- redis: z.ZodObject<{
55
- host: z.ZodString;
56
- port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
57
- password: z.ZodOptional<z.ZodString>;
58
- db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
59
- tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
60
- keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
61
- defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
62
- }, z.core.$strip>;
63
- }, z.core.$strip>]>>;
64
- allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
65
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
66
- publicAccess: z.ZodOptional<z.ZodObject<{
67
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
68
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
69
- rateLimit: z.ZodDefault<z.ZodNumber>;
70
- }, z.core.$strip>>;
71
- consent: z.ZodOptional<z.ZodObject<{
72
- enabled: z.ZodDefault<z.ZodBoolean>;
73
- groupByApp: z.ZodDefault<z.ZodBoolean>;
74
- showDescriptions: z.ZodDefault<z.ZodBoolean>;
75
- allowSelectAll: z.ZodDefault<z.ZodBoolean>;
76
- requireSelection: z.ZodDefault<z.ZodBoolean>;
77
- customMessage: z.ZodOptional<z.ZodString>;
78
- rememberConsent: z.ZodDefault<z.ZodBoolean>;
79
- excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
80
- defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
81
- }, z.core.$strip>>;
82
- federatedAuth: z.ZodOptional<z.ZodObject<{
83
- stateValidation: z.ZodDefault<z.ZodEnum<{
3
+ export declare const authOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
4
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"public">;
5
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
6
+ sessionTtl: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
7
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
8
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
9
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
10
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
11
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
12
+ }, import("zod/v4/core").$strip>>;
13
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
14
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
15
+ }, import("zod/v4/core").$strip>>;
16
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
17
+ }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
18
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
19
+ requiredScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
20
+ allowAnonymous: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
21
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
22
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
23
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
24
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
25
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
26
+ }, import("zod/v4/core").$strip>>;
27
+ provider: import("@frontmcp/lazy-zod").ZodString;
28
+ clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
29
+ clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
30
+ scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
31
+ providerConfig: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
32
+ name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
33
+ id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
34
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
35
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
36
+ }, import("zod/v4/core").$strip>>;
37
+ jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
38
+ dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
39
+ authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
40
+ tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
41
+ registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
42
+ userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
43
+ }, import("zod/v4/core").$strip>>;
44
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"transparent">;
45
+ }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
46
+ local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
47
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
48
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
49
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
50
+ }, import("zod/v4/core").$strip>>;
51
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
52
+ }, import("zod/v4/core").$strip>>;
53
+ tokenStorage: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
54
+ redis: import("@frontmcp/lazy-zod").ZodObject<{
55
+ host: import("@frontmcp/lazy-zod").ZodString;
56
+ port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
57
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
58
+ db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
59
+ tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
60
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
61
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
62
+ }, import("zod/v4/core").$strip>;
63
+ }, import("zod/v4/core").$strip>]>>;
64
+ allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
65
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
66
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
67
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
68
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
69
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
70
+ }, import("zod/v4/core").$strip>>;
71
+ consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
72
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
73
+ groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
74
+ showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
75
+ allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
76
+ requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
77
+ customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
78
+ rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
79
+ excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
80
+ defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
81
+ }, import("zod/v4/core").$strip>>;
82
+ federatedAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
83
+ stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
84
84
  format: "format";
85
85
  strict: "strict";
86
86
  }>>;
87
- }, z.core.$strip>>;
88
- refresh: z.ZodOptional<z.ZodObject<{
89
- enabled: z.ZodDefault<z.ZodBoolean>;
90
- skewSeconds: z.ZodDefault<z.ZodNumber>;
91
- }, z.core.$strip>>;
92
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
93
- incrementalAuth: z.ZodOptional<z.ZodObject<{
94
- enabled: z.ZodDefault<z.ZodBoolean>;
95
- skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
87
+ }, import("zod/v4/core").$strip>>;
88
+ refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
89
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
90
+ skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
91
+ }, import("zod/v4/core").$strip>>;
92
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
93
+ incrementalAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
94
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
95
+ skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
96
96
  anonymous: "anonymous";
97
97
  "require-auth": "require-auth";
98
98
  }>>;
99
- allowSkip: z.ZodDefault<z.ZodBoolean>;
100
- showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
101
- }, z.core.$strip>>;
102
- cimd: z.ZodOptional<z.ZodObject<{
103
- enabled: z.ZodDefault<z.ZodBoolean>;
104
- cache: z.ZodOptional<z.ZodObject<{
105
- type: z.ZodDefault<z.ZodEnum<{
99
+ allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
100
+ showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
101
+ }, import("zod/v4/core").$strip>>;
102
+ cimd: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
103
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
104
+ cache: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
105
+ type: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
106
106
  memory: "memory";
107
107
  redis: "redis";
108
108
  }>>;
109
- defaultTtlMs: z.ZodDefault<z.ZodNumber>;
110
- maxTtlMs: z.ZodDefault<z.ZodNumber>;
111
- minTtlMs: z.ZodDefault<z.ZodNumber>;
112
- redis: z.ZodOptional<z.ZodObject<{
113
- url: z.ZodOptional<z.ZodString>;
114
- host: z.ZodOptional<z.ZodString>;
115
- port: z.ZodOptional<z.ZodNumber>;
116
- password: z.ZodOptional<z.ZodString>;
117
- db: z.ZodOptional<z.ZodNumber>;
118
- tls: z.ZodOptional<z.ZodBoolean>;
119
- keyPrefix: z.ZodDefault<z.ZodString>;
120
- }, z.core.$strip>>;
121
- }, z.core.$strip>>;
122
- security: z.ZodOptional<z.ZodObject<{
123
- blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
124
- allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
125
- blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
126
- warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
127
- allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
128
- }, z.core.$strip>>;
129
- network: z.ZodOptional<z.ZodObject<{
130
- timeoutMs: z.ZodDefault<z.ZodNumber>;
131
- maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
132
- redirectPolicy: z.ZodDefault<z.ZodEnum<{
109
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
110
+ maxTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
111
+ minTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
112
+ redis: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
113
+ url: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
114
+ host: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
115
+ port: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
116
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
117
+ db: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
118
+ tls: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
119
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
120
+ }, import("zod/v4/core").$strip>>;
121
+ }, import("zod/v4/core").$strip>>;
122
+ security: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
123
+ blockPrivateIPs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
124
+ allowedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
125
+ blockedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
126
+ warnOnLocalhostRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
127
+ allowInsecureForTesting: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
128
+ }, import("zod/v4/core").$strip>>;
129
+ network: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
130
+ timeoutMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
131
+ maxResponseSizeBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
132
+ redirectPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
133
133
  deny: "deny";
134
134
  "same-origin": "same-origin";
135
135
  allow: "allow";
136
136
  }>>;
137
- maxRedirects: z.ZodDefault<z.ZodNumber>;
138
- }, z.core.$strip>>;
139
- }, z.core.$strip>>;
140
- mode: z.ZodLiteral<"local">;
141
- }, z.core.$strip>, z.ZodObject<{
142
- local: z.ZodOptional<z.ZodObject<{
143
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
144
- jwks: z.ZodOptional<z.ZodObject<{
145
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
146
- }, z.core.$strip>>;
147
- issuer: z.ZodOptional<z.ZodString>;
148
- }, z.core.$strip>>;
149
- tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
150
- redis: z.ZodObject<{
151
- host: z.ZodString;
152
- port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
153
- password: z.ZodOptional<z.ZodString>;
154
- db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
155
- tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
156
- keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
157
- defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
158
- }, z.core.$strip>;
159
- }, z.core.$strip>]>>;
160
- allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
161
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
162
- publicAccess: z.ZodOptional<z.ZodObject<{
163
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
164
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
165
- rateLimit: z.ZodDefault<z.ZodNumber>;
166
- }, z.core.$strip>>;
167
- consent: z.ZodOptional<z.ZodObject<{
168
- enabled: z.ZodDefault<z.ZodBoolean>;
169
- groupByApp: z.ZodDefault<z.ZodBoolean>;
170
- showDescriptions: z.ZodDefault<z.ZodBoolean>;
171
- allowSelectAll: z.ZodDefault<z.ZodBoolean>;
172
- requireSelection: z.ZodDefault<z.ZodBoolean>;
173
- customMessage: z.ZodOptional<z.ZodString>;
174
- rememberConsent: z.ZodDefault<z.ZodBoolean>;
175
- excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
176
- defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
177
- }, z.core.$strip>>;
178
- federatedAuth: z.ZodOptional<z.ZodObject<{
179
- stateValidation: z.ZodDefault<z.ZodEnum<{
137
+ maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
138
+ }, import("zod/v4/core").$strip>>;
139
+ }, import("zod/v4/core").$strip>>;
140
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
141
+ }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
142
+ local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
143
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
144
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
145
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
146
+ }, import("zod/v4/core").$strip>>;
147
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
148
+ }, import("zod/v4/core").$strip>>;
149
+ tokenStorage: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
150
+ redis: import("@frontmcp/lazy-zod").ZodObject<{
151
+ host: import("@frontmcp/lazy-zod").ZodString;
152
+ port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
153
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
154
+ db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
155
+ tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
156
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
157
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
158
+ }, import("zod/v4/core").$strip>;
159
+ }, import("zod/v4/core").$strip>]>>;
160
+ allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
161
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
162
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
163
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
164
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
165
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
166
+ }, import("zod/v4/core").$strip>>;
167
+ consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
168
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
169
+ groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
170
+ showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
171
+ allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
172
+ requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
173
+ customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
174
+ rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
175
+ excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
176
+ defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
177
+ }, import("zod/v4/core").$strip>>;
178
+ federatedAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
179
+ stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
180
180
  format: "format";
181
181
  strict: "strict";
182
182
  }>>;
183
- }, z.core.$strip>>;
184
- refresh: z.ZodOptional<z.ZodObject<{
185
- enabled: z.ZodDefault<z.ZodBoolean>;
186
- skewSeconds: z.ZodDefault<z.ZodNumber>;
187
- }, z.core.$strip>>;
188
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
189
- incrementalAuth: z.ZodOptional<z.ZodObject<{
190
- enabled: z.ZodDefault<z.ZodBoolean>;
191
- skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
183
+ }, import("zod/v4/core").$strip>>;
184
+ refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
185
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
186
+ skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
187
+ }, import("zod/v4/core").$strip>>;
188
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
189
+ incrementalAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
190
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
191
+ skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
192
192
  anonymous: "anonymous";
193
193
  "require-auth": "require-auth";
194
194
  }>>;
195
- allowSkip: z.ZodDefault<z.ZodBoolean>;
196
- showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
197
- }, z.core.$strip>>;
198
- cimd: z.ZodOptional<z.ZodObject<{
199
- enabled: z.ZodDefault<z.ZodBoolean>;
200
- cache: z.ZodOptional<z.ZodObject<{
201
- type: z.ZodDefault<z.ZodEnum<{
195
+ allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
196
+ showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
197
+ }, import("zod/v4/core").$strip>>;
198
+ cimd: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
199
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
200
+ cache: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
201
+ type: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
202
202
  memory: "memory";
203
203
  redis: "redis";
204
204
  }>>;
205
- defaultTtlMs: z.ZodDefault<z.ZodNumber>;
206
- maxTtlMs: z.ZodDefault<z.ZodNumber>;
207
- minTtlMs: z.ZodDefault<z.ZodNumber>;
208
- redis: z.ZodOptional<z.ZodObject<{
209
- url: z.ZodOptional<z.ZodString>;
210
- host: z.ZodOptional<z.ZodString>;
211
- port: z.ZodOptional<z.ZodNumber>;
212
- password: z.ZodOptional<z.ZodString>;
213
- db: z.ZodOptional<z.ZodNumber>;
214
- tls: z.ZodOptional<z.ZodBoolean>;
215
- keyPrefix: z.ZodDefault<z.ZodString>;
216
- }, z.core.$strip>>;
217
- }, z.core.$strip>>;
218
- security: z.ZodOptional<z.ZodObject<{
219
- blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
220
- allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
221
- blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
222
- warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
223
- allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
224
- }, z.core.$strip>>;
225
- network: z.ZodOptional<z.ZodObject<{
226
- timeoutMs: z.ZodDefault<z.ZodNumber>;
227
- maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
228
- redirectPolicy: z.ZodDefault<z.ZodEnum<{
205
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
206
+ maxTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
207
+ minTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
208
+ redis: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
209
+ url: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
210
+ host: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
211
+ port: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
212
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
213
+ db: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
214
+ tls: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
215
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
216
+ }, import("zod/v4/core").$strip>>;
217
+ }, import("zod/v4/core").$strip>>;
218
+ security: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
219
+ blockPrivateIPs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
220
+ allowedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
221
+ blockedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
222
+ warnOnLocalhostRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
223
+ allowInsecureForTesting: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
224
+ }, import("zod/v4/core").$strip>>;
225
+ network: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
226
+ timeoutMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
227
+ maxResponseSizeBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
228
+ redirectPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
229
229
  deny: "deny";
230
230
  "same-origin": "same-origin";
231
231
  allow: "allow";
232
232
  }>>;
233
- maxRedirects: z.ZodDefault<z.ZodNumber>;
234
- }, z.core.$strip>>;
235
- }, z.core.$strip>>;
236
- provider: z.ZodString;
237
- clientId: z.ZodOptional<z.ZodString>;
238
- clientSecret: z.ZodOptional<z.ZodString>;
239
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
240
- providerConfig: z.ZodOptional<z.ZodObject<{
241
- name: z.ZodOptional<z.ZodString>;
242
- id: z.ZodOptional<z.ZodString>;
243
- jwks: z.ZodOptional<z.ZodObject<{
244
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
245
- }, z.core.$strip>>;
246
- jwksUri: z.ZodOptional<z.ZodString>;
247
- dcrEnabled: z.ZodDefault<z.ZodBoolean>;
248
- authEndpoint: z.ZodOptional<z.ZodString>;
249
- tokenEndpoint: z.ZodOptional<z.ZodString>;
250
- registrationEndpoint: z.ZodOptional<z.ZodString>;
251
- userInfoEndpoint: z.ZodOptional<z.ZodString>;
252
- }, z.core.$strip>>;
253
- mode: z.ZodLiteral<"remote">;
254
- }, z.core.$strip>]>;
233
+ maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
234
+ }, import("zod/v4/core").$strip>>;
235
+ }, import("zod/v4/core").$strip>>;
236
+ provider: import("@frontmcp/lazy-zod").ZodString;
237
+ clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
238
+ clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
239
+ scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
240
+ providerConfig: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
241
+ name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
242
+ id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
243
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
244
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
245
+ }, import("zod/v4/core").$strip>>;
246
+ jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
247
+ dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
248
+ authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
249
+ tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
250
+ registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
251
+ userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
252
+ }, import("zod/v4/core").$strip>>;
253
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"remote">;
254
+ }, import("zod/v4/core").$strip>]>;
255
255
  export type AuthOptions = z.infer<typeof authOptionsSchema>;
256
256
  /**
257
257
  * Auth options input type (for user configuration).
@@ -1 +1 @@
1
- {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/options/schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAMzD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAK5B,CAAC;AAMH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACpD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC"}
1
+ {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/options/schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AASzD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAK5B,CAAC;AAMH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACpD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC"}