@frontmcp/auth 1.0.4 → 1.1.0

package/options/shared.schemas.d.ts

@@ -1,67 +1,67 @@
-import { z } from 'zod';
-import { RedisConfig } from '../session/transport-session.types';
+import { z } from '@frontmcp/lazy-zod';
+import { type RedisConfig } from '../session/transport-session.types';
 /**
  * Public access configuration for tools/prompts
  */
-export declare const publicAccessConfigSchema: z.ZodObject<{
-    tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-    prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-    rateLimit: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip>;
+export declare const publicAccessConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
+    prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
+    rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
+}, import("zod/v4/core").$strip>;
 export type PublicAccessConfig = z.infer<typeof publicAccessConfigSchema>;
 export type PublicAccessConfigInput = z.input<typeof publicAccessConfigSchema>;
 /**
  * Local signing configuration (for local auth mode)
  */
-export declare const localSigningConfigSchema: z.ZodObject<{
-    signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-    jwks: z.ZodOptional<z.ZodObject<{
-        keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
-    }, z.core.$strip>>;
-    issuer: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const localSigningConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("../common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+    jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown>>;
+    }, import("zod/v4/core").$strip>>;
+    issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 export type LocalSigningConfig = z.infer<typeof localSigningConfigSchema>;
 export type LocalSigningConfigInput = z.input<typeof localSigningConfigSchema>;
 /**
  * Advanced provider configuration options.
  * These are less commonly used and are grouped into an optional sub-object.
  */
-export declare const providerConfigSchema: z.ZodObject<{
-    name: z.ZodOptional<z.ZodString>;
-    id: z.ZodOptional<z.ZodString>;
-    jwks: z.ZodOptional<z.ZodObject<{
-        keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
-    }, z.core.$strip>>;
-    jwksUri: z.ZodOptional<z.ZodString>;
-    dcrEnabled: z.ZodDefault<z.ZodBoolean>;
-    authEndpoint: z.ZodOptional<z.ZodString>;
-    tokenEndpoint: z.ZodOptional<z.ZodString>;
-    registrationEndpoint: z.ZodOptional<z.ZodString>;
-    userInfoEndpoint: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const providerConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown>>;
+    }, import("zod/v4/core").$strip>>;
+    jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 export type ProviderConfig = z.infer<typeof providerConfigSchema>;
 export type ProviderConfigInput = z.input<typeof providerConfigSchema>;
 /**
  * Remote OAuth provider configuration (internal, full flat shape)
  * Used internally after flattening for compatibility.
  */
-export declare const remoteProviderConfigSchema: z.ZodObject<{
-    provider: z.ZodString;
-    name: z.ZodOptional<z.ZodString>;
-    id: z.ZodOptional<z.ZodString>;
-    jwks: z.ZodOptional<z.ZodObject<{
-        keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
-    }, z.core.$strip>>;
-    jwksUri: z.ZodOptional<z.ZodString>;
-    clientId: z.ZodOptional<z.ZodString>;
-    clientSecret: z.ZodOptional<z.ZodString>;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    dcrEnabled: z.ZodDefault<z.ZodBoolean>;
-    authEndpoint: z.ZodOptional<z.ZodString>;
-    tokenEndpoint: z.ZodOptional<z.ZodString>;
-    registrationEndpoint: z.ZodOptional<z.ZodString>;
-    userInfoEndpoint: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const remoteProviderConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    provider: import("@frontmcp/lazy-zod").ZodString;
+    name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown>>;
+    }, import("zod/v4/core").$strip>>;
+    jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 export type RemoteProviderConfig = z.infer<typeof remoteProviderConfigSchema>;
 export type RemoteProviderConfigInput = z.input<typeof remoteProviderConfigSchema>;
 /**
@@ -74,27 +74,27 @@ export declare const flatRemoteProviderFields: {
      * OAuth provider base URL (required)
      * @example 'https://auth.example.com'
      */
-    provider: z.ZodString;
+    provider: import("@frontmcp/lazy-zod").ZodString;
     /** Client ID for this MCP server */
-    clientId: z.ZodOptional<z.ZodString>;
+    clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     /** Client secret (for confidential clients) */
-    clientSecret: z.ZodOptional<z.ZodString>;
+    clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     /** Scopes to request from the upstream provider */
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
     /** Advanced provider configuration */
-    providerConfig: z.ZodOptional<z.ZodObject<{
-        name: z.ZodOptional<z.ZodString>;
-        id: z.ZodOptional<z.ZodString>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("../common/jwt.types").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-        dcrEnabled: z.ZodDefault<z.ZodBoolean>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
+    providerConfig: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("../common/jwt.types").JWK, unknown>>;
+        }, import("zod/v4/core").$strip>>;
+        jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
 };
 /**
  * Token storage configuration for local/remote modes.
@@ -102,32 +102,32 @@ export declare const flatRemoteProviderFields: {
  * Simple string 'memory' for in-memory storage,
  * or an object with redis config for Redis storage.
  */
-export declare const tokenStorageConfigSchema: z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
-    redis: z.ZodObject<{
-        host: z.ZodString;
-        port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        password: z.ZodOptional<z.ZodString>;
-        db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-        keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-        defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-    }, z.core.$strip>;
-}, z.core.$strip>]>;
+export declare const tokenStorageConfigSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
+    redis: import("@frontmcp/lazy-zod").ZodObject<{
+        host: import("@frontmcp/lazy-zod").ZodString;
+        port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+        password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+        tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
+        keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
+        defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+    }, import("zod/v4/core").$strip>;
+}, import("zod/v4/core").$strip>]>;
 export type TokenStorageConfig = z.infer<typeof tokenStorageConfigSchema>;
 export type TokenStorageConfigInput = z.input<typeof tokenStorageConfigSchema>;
 /**
  * Token refresh configuration
  */
-export declare const tokenRefreshConfigSchema: z.ZodObject<{
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    skewSeconds: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip>;
+export declare const tokenRefreshConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
+}, import("zod/v4/core").$strip>;
 export type TokenRefreshConfig = z.infer<typeof tokenRefreshConfigSchema>;
 export type TokenRefreshConfigInput = z.input<typeof tokenRefreshConfigSchema>;
 /**
  * Behavior when a tool from a skipped (not yet authorized) app is called
  */
-export declare const skippedAppBehaviorSchema: z.ZodEnum<{
+export declare const skippedAppBehaviorSchema: import("@frontmcp/lazy-zod").ZodEnum<{
     anonymous: "anonymous";
     "require-auth": "require-auth";
 }>;
@@ -136,43 +136,43 @@ export type SkippedAppBehavior = z.infer<typeof skippedAppBehaviorSchema>;
  * Consent configuration for tool selection
  * Allows users to choose which MCP tools to expose to the LLM
  */
-export declare const consentConfigSchema: z.ZodObject<{
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    groupByApp: z.ZodDefault<z.ZodBoolean>;
-    showDescriptions: z.ZodDefault<z.ZodBoolean>;
-    allowSelectAll: z.ZodDefault<z.ZodBoolean>;
-    requireSelection: z.ZodDefault<z.ZodBoolean>;
-    customMessage: z.ZodOptional<z.ZodString>;
-    rememberConsent: z.ZodDefault<z.ZodBoolean>;
-    excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>;
+export declare const consentConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+}, import("zod/v4/core").$strip>;
 export type ConsentConfig = z.infer<typeof consentConfigSchema>;
 export type ConsentConfigInput = z.input<typeof consentConfigSchema>;
 /**
  * Federated authentication configuration
  */
-export declare const federatedAuthConfigSchema: z.ZodObject<{
-    stateValidation: z.ZodDefault<z.ZodEnum<{
+export declare const federatedAuthConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         format: "format";
         strict: "strict";
     }>>;
-}, z.core.$strip>;
+}, import("zod/v4/core").$strip>;
 export type FederatedAuthConfig = z.infer<typeof federatedAuthConfigSchema>;
 export type FederatedAuthConfigInput = z.input<typeof federatedAuthConfigSchema>;
 /**
  * Progressive/Incremental authorization configuration
  * Allows users to authorize apps one at a time after initial auth
  */
-export declare const incrementalAuthConfigSchema: z.ZodObject<{
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
+export declare const incrementalAuthConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         anonymous: "anonymous";
         "require-auth": "require-auth";
     }>>;
-    allowSkip: z.ZodDefault<z.ZodBoolean>;
-    showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
-}, z.core.$strip>;
+    allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>;
 export type IncrementalAuthConfig = z.infer<typeof incrementalAuthConfigSchema>;
 export type IncrementalAuthConfigInput = z.input<typeof incrementalAuthConfigSchema>;
 export { cimdCacheConfigSchema, cimdSecurityConfigSchema, cimdNetworkConfigSchema, cimdConfigSchema, type CimdCacheConfig, type CimdSecurityConfig, type CimdNetworkConfig, type CimdConfig, type CimdConfigInput, } from '../cimd';

package/options/shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.schemas.d.ts","sourceRoot":"","sources":["../../src/options/shared.schemas.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAqB,MAAM,oCAAoC,CAAC;AAMpF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;iBAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;iBAoC/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMvE;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAqErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAOnF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;IACnC;;;OAGG;;IAGH,oCAAoC;;IAGpC,+CAA+C;;IAG/C,mDAAmD;;IAGnD,sCAAsC;;;;;;;;;;;;;;CAEvC,CAAC;AAMF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;mBAAyE,CAAC;AAE/G,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;iBAYnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;EAAwC,CAAC;AAE9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM1E;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAqD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMrE;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAQpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAMjF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;iBA4BtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMrF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"shared.schemas.d.ts","sourceRoot":"","sources":["../../src/options/shared.schemas.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAMzF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;gCAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;gCAkBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;gCAoC/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMvE;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;gCAqErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAOnF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;IACnC;;;OAGG;;IAGH,oCAAoC;;IAGpC,+CAA+C;;IAG/C,mDAAmD;;IAGnD,sCAAsC;;;;;;;;;;;;;;CAEvC,CAAC;AAMF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;kCAAyE,CAAC;AAE/G,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;gCAYnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM/E;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;EAAwC,CAAC;AAE9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM1E;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;gCAqD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMrE;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;gCAQpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAMjF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;gCA4BtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMrF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,WAAW,EAAE,CAAC"}

package/options/transparent.schema.d.ts

@@ -1,34 +1,34 @@
-import { z } from 'zod';
+import { z } from '@frontmcp/lazy-zod';
 import type { TransparentAuthOptionsInterface } from './interfaces';
-export declare const transparentAuthOptionsSchema: z.ZodObject<{
-    expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
-    requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    allowAnonymous: z.ZodDefault<z.ZodBoolean>;
-    anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    publicAccess: z.ZodOptional<z.ZodObject<{
-        tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        rateLimit: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    provider: z.ZodString;
-    clientId: z.ZodOptional<z.ZodString>;
-    clientSecret: z.ZodOptional<z.ZodString>;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    providerConfig: z.ZodOptional<z.ZodObject<{
-        name: z.ZodOptional<z.ZodString>;
-        id: z.ZodOptional<z.ZodString>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-        dcrEnabled: z.ZodDefault<z.ZodBoolean>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    mode: z.ZodLiteral<"transparent">;
-}, z.core.$strip>;
+export declare const transparentAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
+    requiredScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    allowAnonymous: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
+        prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
+        rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>>;
+    provider: import("@frontmcp/lazy-zod").ZodString;
+    clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    providerConfig: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
+        }, import("zod/v4/core").$strip>>;
+        jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    mode: import("@frontmcp/lazy-zod").ZodLiteral<"transparent">;
+}, import("zod/v4/core").$strip>;
 export type TransparentAuthOptions = z.infer<typeof transparentAuthOptionsSchema>;
 export type TransparentAuthOptionsInput = TransparentAuthOptionsInterface;
 //# sourceMappingURL=transparent.schema.d.ts.map

package/options/transparent.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transparent.schema.d.ts","sourceRoot":"","sources":["../../src/options/transparent.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAOpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqCgB,CAAC;AAM1D,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,+BAA+B,CAAC"}
+{"version":3,"file":"transparent.schema.d.ts","sourceRoot":"","sources":["../../src/options/transparent.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAQpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAqCgB,CAAC;AAM1D,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,+BAA+B,CAAC"}

package/options/typecheck.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typecheck.d.ts","sourceRoot":"","sources":["../../src/options/typecheck.ts"],"names":[],"mappings":"AAgEA,OAAO,EAAE,CAAC"}
+{"version":3,"file":"typecheck.d.ts","sourceRoot":"","sources":["../../src/options/typecheck.ts"],"names":[],"mappings":"AA+DA,OAAO,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/auth",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "FrontMCP Auth - Authentication, session management, and credential vault",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -47,10 +47,10 @@
     "node": ">=24.0.0"
   },
   "peerDependencies": {
-    "zod": "^4.0.0",
     "ioredis": "^5.0.0",
     "@vercel/kv": "^3.0.0",
-    "@frontmcp/storage-sqlite": "1.0.4"
+    "@frontmcp/storage-sqlite": "1.1.0",
+    "@frontmcp/lazy-zod": "1.1.0"
   },
   "peerDependenciesMeta": {
     "ioredis": {
@@ -64,8 +64,8 @@
     }
   },
   "dependencies": {
-    "@frontmcp/utils": "1.0.4",
-    "@frontmcp/di": "1.0.4",
+    "@frontmcp/utils": "1.1.0",
+    "@frontmcp/di": "1.1.0",
     "jose": "^6.0.0"
   },
   "devDependencies": {