@frontmcp/auth 1.0.4 → 1.1.0

package/session/authorization-vault.d.ts

@@ -20,11 +20,11 @@
  * - No vault used, all data in JWT claims
  * - No incremental authorization support
  */
-import { z } from 'zod';
+import { z } from '@frontmcp/lazy-zod';
 /**
  * Supported credential types for app authentication
  */
-export declare const credentialTypeSchema: z.ZodEnum<{
+export declare const credentialTypeSchema: import("@frontmcp/lazy-zod").ZodEnum<{
     custom: "custom";
     oauth: "oauth";
     api_key: "api_key";
@@ -40,215 +40,215 @@ export type CredentialType = z.infer<typeof credentialTypeSchema>;
 /**
  * OAuth credential - standard OAuth 2.0 tokens
  */
-export declare const oauthCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"oauth">;
-    accessToken: z.ZodString;
-    refreshToken: z.ZodOptional<z.ZodString>;
-    tokenType: z.ZodDefault<z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    idToken: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const oauthCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth">;
+    accessToken: import("@frontmcp/lazy-zod").ZodString;
+    refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * API Key credential - sent in header or query param
  */
-export declare const apiKeyCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"api_key">;
-    key: z.ZodString;
-    headerName: z.ZodDefault<z.ZodString>;
-    headerPrefix: z.ZodOptional<z.ZodString>;
-    queryParam: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const apiKeyCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"api_key">;
+    key: import("@frontmcp/lazy-zod").ZodString;
+    headerName: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    headerPrefix: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    queryParam: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * Basic Auth credential - username and password
  */
-export declare const basicAuthCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"basic">;
-    username: z.ZodString;
-    password: z.ZodString;
-    encodedValue: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const basicAuthCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"basic">;
+    username: import("@frontmcp/lazy-zod").ZodString;
+    password: import("@frontmcp/lazy-zod").ZodString;
+    encodedValue: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * Bearer token credential - static bearer token
  */
-export declare const bearerCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"bearer">;
-    token: z.ZodString;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>;
+export declare const bearerCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"bearer">;
+    token: import("@frontmcp/lazy-zod").ZodString;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+}, import("zod/v4/core").$strip>;
 /**
  * Private key credential - for JWT signing or request signing
  */
-export declare const privateKeyCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"private_key">;
-    format: z.ZodEnum<{
+export declare const privateKeyCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"private_key">;
+    format: import("@frontmcp/lazy-zod").ZodEnum<{
         pem: "pem";
         jwk: "jwk";
         pkcs8: "pkcs8";
         pkcs12: "pkcs12";
     }>;
-    keyData: z.ZodString;
-    keyId: z.ZodOptional<z.ZodString>;
-    algorithm: z.ZodOptional<z.ZodString>;
-    passphrase: z.ZodOptional<z.ZodString>;
-    certificate: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+    keyData: import("@frontmcp/lazy-zod").ZodString;
+    keyId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    algorithm: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    certificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * mTLS credential - client certificate for mutual TLS
  */
-export declare const mtlsCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"mtls">;
-    certificate: z.ZodString;
-    privateKey: z.ZodString;
-    passphrase: z.ZodOptional<z.ZodString>;
-    caCertificate: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const mtlsCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"mtls">;
+    certificate: import("@frontmcp/lazy-zod").ZodString;
+    privateKey: import("@frontmcp/lazy-zod").ZodString;
+    passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    caCertificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * Custom credential - extensible for app-specific auth
  */
-export declare const customCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"custom">;
-    customType: z.ZodString;
-    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strip>;
+export declare const customCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"custom">;
+    customType: import("@frontmcp/lazy-zod").ZodString;
+    data: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodString>>;
+}, import("zod/v4/core").$strip>;
 /**
  * SSH Key credential - for SSH-based authentication
  */
-export declare const sshKeyCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"ssh_key">;
-    privateKey: z.ZodString;
-    publicKey: z.ZodOptional<z.ZodString>;
-    passphrase: z.ZodOptional<z.ZodString>;
-    keyType: z.ZodDefault<z.ZodEnum<{
+export declare const sshKeyCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"ssh_key">;
+    privateKey: import("@frontmcp/lazy-zod").ZodString;
+    publicKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    keyType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         rsa: "rsa";
         dsa: "dsa";
         ed25519: "ed25519";
         ecdsa: "ecdsa";
     }>>;
-    fingerprint: z.ZodOptional<z.ZodString>;
-    username: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+    fingerprint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    username: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * Service Account credential - for cloud provider service accounts (GCP, AWS, Azure)
  */
-export declare const serviceAccountCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"service_account">;
-    provider: z.ZodEnum<{
+export declare const serviceAccountCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"service_account">;
+    provider: import("@frontmcp/lazy-zod").ZodEnum<{
         custom: "custom";
         gcp: "gcp";
         aws: "aws";
         azure: "azure";
     }>;
-    credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    projectId: z.ZodOptional<z.ZodString>;
-    region: z.ZodOptional<z.ZodString>;
-    assumeRoleArn: z.ZodOptional<z.ZodString>;
-    externalId: z.ZodOptional<z.ZodString>;
-    serviceAccountId: z.ZodOptional<z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>;
+    credentials: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+    projectId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    region: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    assumeRoleArn: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    externalId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    serviceAccountId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+}, import("zod/v4/core").$strip>;
 /**
  * PKCE OAuth credential - OAuth 2.0 with PKCE for public clients
  */
-export declare const pkceOAuthCredentialSchema: z.ZodObject<{
-    type: z.ZodLiteral<"oauth_pkce">;
-    accessToken: z.ZodString;
-    refreshToken: z.ZodOptional<z.ZodString>;
-    tokenType: z.ZodDefault<z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    idToken: z.ZodOptional<z.ZodString>;
-    issuer: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
+export declare const pkceOAuthCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth_pkce">;
+    accessToken: import("@frontmcp/lazy-zod").ZodString;
+    refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * Union of all credential types
  */
-export declare const credentialSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    type: z.ZodLiteral<"oauth">;
-    accessToken: z.ZodString;
-    refreshToken: z.ZodOptional<z.ZodString>;
-    tokenType: z.ZodDefault<z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    idToken: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"api_key">;
-    key: z.ZodString;
-    headerName: z.ZodDefault<z.ZodString>;
-    headerPrefix: z.ZodOptional<z.ZodString>;
-    queryParam: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"basic">;
-    username: z.ZodString;
-    password: z.ZodString;
-    encodedValue: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"bearer">;
-    token: z.ZodString;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"private_key">;
-    format: z.ZodEnum<{
+export declare const credentialSchema: import("@frontmcp/lazy-zod").ZodDiscriminatedUnion<[import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth">;
+    accessToken: import("@frontmcp/lazy-zod").ZodString;
+    refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"api_key">;
+    key: import("@frontmcp/lazy-zod").ZodString;
+    headerName: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    headerPrefix: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    queryParam: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"basic">;
+    username: import("@frontmcp/lazy-zod").ZodString;
+    password: import("@frontmcp/lazy-zod").ZodString;
+    encodedValue: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"bearer">;
+    token: import("@frontmcp/lazy-zod").ZodString;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"private_key">;
+    format: import("@frontmcp/lazy-zod").ZodEnum<{
         pem: "pem";
         jwk: "jwk";
         pkcs8: "pkcs8";
         pkcs12: "pkcs12";
     }>;
-    keyData: z.ZodString;
-    keyId: z.ZodOptional<z.ZodString>;
-    algorithm: z.ZodOptional<z.ZodString>;
-    passphrase: z.ZodOptional<z.ZodString>;
-    certificate: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"mtls">;
-    certificate: z.ZodString;
-    privateKey: z.ZodString;
-    passphrase: z.ZodOptional<z.ZodString>;
-    caCertificate: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"custom">;
-    customType: z.ZodString;
-    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"ssh_key">;
-    privateKey: z.ZodString;
-    publicKey: z.ZodOptional<z.ZodString>;
-    passphrase: z.ZodOptional<z.ZodString>;
-    keyType: z.ZodDefault<z.ZodEnum<{
+    keyData: import("@frontmcp/lazy-zod").ZodString;
+    keyId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    algorithm: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    certificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"mtls">;
+    certificate: import("@frontmcp/lazy-zod").ZodString;
+    privateKey: import("@frontmcp/lazy-zod").ZodString;
+    passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    caCertificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"custom">;
+    customType: import("@frontmcp/lazy-zod").ZodString;
+    data: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"ssh_key">;
+    privateKey: import("@frontmcp/lazy-zod").ZodString;
+    publicKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    keyType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         rsa: "rsa";
         dsa: "dsa";
         ed25519: "ed25519";
         ecdsa: "ecdsa";
     }>>;
-    fingerprint: z.ZodOptional<z.ZodString>;
-    username: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"service_account">;
-    provider: z.ZodEnum<{
+    fingerprint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    username: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"service_account">;
+    provider: import("@frontmcp/lazy-zod").ZodEnum<{
         custom: "custom";
         gcp: "gcp";
         aws: "aws";
         azure: "azure";
     }>;
-    credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    projectId: z.ZodOptional<z.ZodString>;
-    region: z.ZodOptional<z.ZodString>;
-    assumeRoleArn: z.ZodOptional<z.ZodString>;
-    externalId: z.ZodOptional<z.ZodString>;
-    serviceAccountId: z.ZodOptional<z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"oauth_pkce">;
-    accessToken: z.ZodString;
-    refreshToken: z.ZodOptional<z.ZodString>;
-    tokenType: z.ZodDefault<z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    idToken: z.ZodOptional<z.ZodString>;
-    issuer: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>], "type">;
+    credentials: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+    projectId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    region: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    assumeRoleArn: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    externalId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    serviceAccountId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth_pkce">;
+    accessToken: import("@frontmcp/lazy-zod").ZodString;
+    refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>], "type">;
 export type OAuthCredential = z.infer<typeof oauthCredentialSchema>;
 export type ApiKeyCredential = z.infer<typeof apiKeyCredentialSchema>;
 export type BasicAuthCredential = z.infer<typeof basicAuthCredentialSchema>;
@@ -263,288 +263,288 @@ export type Credential = z.infer<typeof credentialSchema>;
 /**
  * Credential stored for an app in the vault
  */
-export declare const appCredentialSchema: z.ZodObject<{
-    appId: z.ZodString;
-    providerId: z.ZodString;
-    credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"oauth">;
-        accessToken: z.ZodString;
-        refreshToken: z.ZodOptional<z.ZodString>;
-        tokenType: z.ZodDefault<z.ZodString>;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        idToken: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"api_key">;
-        key: z.ZodString;
-        headerName: z.ZodDefault<z.ZodString>;
-        headerPrefix: z.ZodOptional<z.ZodString>;
-        queryParam: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"basic">;
-        username: z.ZodString;
-        password: z.ZodString;
-        encodedValue: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"bearer">;
-        token: z.ZodString;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"private_key">;
-        format: z.ZodEnum<{
+export declare const appCredentialSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    appId: import("@frontmcp/lazy-zod").ZodString;
+    providerId: import("@frontmcp/lazy-zod").ZodString;
+    credential: import("@frontmcp/lazy-zod").ZodDiscriminatedUnion<[import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth">;
+        accessToken: import("@frontmcp/lazy-zod").ZodString;
+        refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+        idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"api_key">;
+        key: import("@frontmcp/lazy-zod").ZodString;
+        headerName: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        headerPrefix: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        queryParam: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"basic">;
+        username: import("@frontmcp/lazy-zod").ZodString;
+        password: import("@frontmcp/lazy-zod").ZodString;
+        encodedValue: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"bearer">;
+        token: import("@frontmcp/lazy-zod").ZodString;
+        expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"private_key">;
+        format: import("@frontmcp/lazy-zod").ZodEnum<{
             pem: "pem";
             jwk: "jwk";
             pkcs8: "pkcs8";
             pkcs12: "pkcs12";
         }>;
-        keyData: z.ZodString;
-        keyId: z.ZodOptional<z.ZodString>;
-        algorithm: z.ZodOptional<z.ZodString>;
-        passphrase: z.ZodOptional<z.ZodString>;
-        certificate: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"mtls">;
-        certificate: z.ZodString;
-        privateKey: z.ZodString;
-        passphrase: z.ZodOptional<z.ZodString>;
-        caCertificate: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"custom">;
-        customType: z.ZodString;
-        data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"ssh_key">;
-        privateKey: z.ZodString;
-        publicKey: z.ZodOptional<z.ZodString>;
-        passphrase: z.ZodOptional<z.ZodString>;
-        keyType: z.ZodDefault<z.ZodEnum<{
+        keyData: import("@frontmcp/lazy-zod").ZodString;
+        keyId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        algorithm: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        certificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"mtls">;
+        certificate: import("@frontmcp/lazy-zod").ZodString;
+        privateKey: import("@frontmcp/lazy-zod").ZodString;
+        passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        caCertificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"custom">;
+        customType: import("@frontmcp/lazy-zod").ZodString;
+        data: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+        headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodString>>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"ssh_key">;
+        privateKey: import("@frontmcp/lazy-zod").ZodString;
+        publicKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        keyType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
             rsa: "rsa";
             dsa: "dsa";
             ed25519: "ed25519";
             ecdsa: "ecdsa";
         }>>;
-        fingerprint: z.ZodOptional<z.ZodString>;
-        username: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"service_account">;
-        provider: z.ZodEnum<{
+        fingerprint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        username: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"service_account">;
+        provider: import("@frontmcp/lazy-zod").ZodEnum<{
             custom: "custom";
             gcp: "gcp";
             aws: "aws";
             azure: "azure";
         }>;
-        credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        projectId: z.ZodOptional<z.ZodString>;
-        region: z.ZodOptional<z.ZodString>;
-        assumeRoleArn: z.ZodOptional<z.ZodString>;
-        externalId: z.ZodOptional<z.ZodString>;
-        serviceAccountId: z.ZodOptional<z.ZodString>;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"oauth_pkce">;
-        accessToken: z.ZodString;
-        refreshToken: z.ZodOptional<z.ZodString>;
-        tokenType: z.ZodDefault<z.ZodString>;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        idToken: z.ZodOptional<z.ZodString>;
-        issuer: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>], "type">;
-    acquiredAt: z.ZodNumber;
-    lastUsedAt: z.ZodOptional<z.ZodNumber>;
-    expiresAt: z.ZodOptional<z.ZodNumber>;
-    isValid: z.ZodDefault<z.ZodBoolean>;
-    invalidReason: z.ZodOptional<z.ZodString>;
-    userInfo: z.ZodOptional<z.ZodObject<{
-        sub: z.ZodOptional<z.ZodString>;
-        email: z.ZodOptional<z.ZodString>;
-        name: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, z.core.$strip>;
+        credentials: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+        projectId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        region: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        assumeRoleArn: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        externalId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        serviceAccountId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth_pkce">;
+        accessToken: import("@frontmcp/lazy-zod").ZodString;
+        refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+        idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>], "type">;
+    acquiredAt: import("@frontmcp/lazy-zod").ZodNumber;
+    lastUsedAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+    isValid: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    invalidReason: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    userInfo: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        sub: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        email: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    metadata: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+}, import("zod/v4/core").$strip>;
 export type AppCredential = z.infer<typeof appCredentialSchema>;
 /**
  * Consent record stored in vault
  */
-export declare const vaultConsentRecordSchema: z.ZodObject<{
-    enabled: z.ZodBoolean;
-    selectedToolIds: z.ZodArray<z.ZodString>;
-    availableToolIds: z.ZodArray<z.ZodString>;
-    consentedAt: z.ZodNumber;
-    version: z.ZodDefault<z.ZodString>;
-}, z.core.$strip>;
+export declare const vaultConsentRecordSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    enabled: import("@frontmcp/lazy-zod").ZodBoolean;
+    selectedToolIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+    availableToolIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+    consentedAt: import("@frontmcp/lazy-zod").ZodNumber;
+    version: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 /**
  * Federated login record stored in vault
  */
-export declare const vaultFederatedRecordSchema: z.ZodObject<{
-    selectedProviderIds: z.ZodArray<z.ZodString>;
-    skippedProviderIds: z.ZodArray<z.ZodString>;
-    primaryProviderId: z.ZodOptional<z.ZodString>;
-    completedAt: z.ZodNumber;
-}, z.core.$strip>;
+export declare const vaultFederatedRecordSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    selectedProviderIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+    skippedProviderIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+    primaryProviderId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    completedAt: import("@frontmcp/lazy-zod").ZodNumber;
+}, import("zod/v4/core").$strip>;
 /**
  * Pending incremental authorization request
  */
-export declare const pendingIncrementalAuthSchema: z.ZodObject<{
-    id: z.ZodString;
-    appId: z.ZodString;
-    toolId: z.ZodOptional<z.ZodString>;
-    authUrl: z.ZodString;
-    requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    elicitId: z.ZodOptional<z.ZodString>;
-    createdAt: z.ZodNumber;
-    expiresAt: z.ZodNumber;
-    status: z.ZodEnum<{
+export declare const pendingIncrementalAuthSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    id: import("@frontmcp/lazy-zod").ZodString;
+    appId: import("@frontmcp/lazy-zod").ZodString;
+    toolId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    authUrl: import("@frontmcp/lazy-zod").ZodString;
+    requiredScopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    elicitId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    createdAt: import("@frontmcp/lazy-zod").ZodNumber;
+    expiresAt: import("@frontmcp/lazy-zod").ZodNumber;
+    status: import("@frontmcp/lazy-zod").ZodEnum<{
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
         expired: "expired";
     }>;
-}, z.core.$strip>;
+}, import("zod/v4/core").$strip>;
 /**
  * Authorization vault entry (the full session state)
  */
-export declare const authorizationVaultEntrySchema: z.ZodObject<{
-    id: z.ZodString;
-    userSub: z.ZodString;
-    userEmail: z.ZodOptional<z.ZodString>;
-    userName: z.ZodOptional<z.ZodString>;
-    clientId: z.ZodString;
-    createdAt: z.ZodNumber;
-    lastAccessAt: z.ZodNumber;
-    appCredentials: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        appId: z.ZodString;
-        providerId: z.ZodString;
-        credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
-            type: z.ZodLiteral<"oauth">;
-            accessToken: z.ZodString;
-            refreshToken: z.ZodOptional<z.ZodString>;
-            tokenType: z.ZodDefault<z.ZodString>;
-            expiresAt: z.ZodOptional<z.ZodNumber>;
-            scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-            idToken: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"api_key">;
-            key: z.ZodString;
-            headerName: z.ZodDefault<z.ZodString>;
-            headerPrefix: z.ZodOptional<z.ZodString>;
-            queryParam: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"basic">;
-            username: z.ZodString;
-            password: z.ZodString;
-            encodedValue: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"bearer">;
-            token: z.ZodString;
-            expiresAt: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"private_key">;
-            format: z.ZodEnum<{
+export declare const authorizationVaultEntrySchema: import("@frontmcp/lazy-zod").ZodObject<{
+    id: import("@frontmcp/lazy-zod").ZodString;
+    userSub: import("@frontmcp/lazy-zod").ZodString;
+    userEmail: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    userName: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    clientId: import("@frontmcp/lazy-zod").ZodString;
+    createdAt: import("@frontmcp/lazy-zod").ZodNumber;
+    lastAccessAt: import("@frontmcp/lazy-zod").ZodNumber;
+    appCredentials: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodObject<{
+        appId: import("@frontmcp/lazy-zod").ZodString;
+        providerId: import("@frontmcp/lazy-zod").ZodString;
+        credential: import("@frontmcp/lazy-zod").ZodDiscriminatedUnion<[import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth">;
+            accessToken: import("@frontmcp/lazy-zod").ZodString;
+            refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+            expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+            idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"api_key">;
+            key: import("@frontmcp/lazy-zod").ZodString;
+            headerName: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+            headerPrefix: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            queryParam: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"basic">;
+            username: import("@frontmcp/lazy-zod").ZodString;
+            password: import("@frontmcp/lazy-zod").ZodString;
+            encodedValue: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"bearer">;
+            token: import("@frontmcp/lazy-zod").ZodString;
+            expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"private_key">;
+            format: import("@frontmcp/lazy-zod").ZodEnum<{
                 pem: "pem";
                 jwk: "jwk";
                 pkcs8: "pkcs8";
                 pkcs12: "pkcs12";
             }>;
-            keyData: z.ZodString;
-            keyId: z.ZodOptional<z.ZodString>;
-            algorithm: z.ZodOptional<z.ZodString>;
-            passphrase: z.ZodOptional<z.ZodString>;
-            certificate: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"mtls">;
-            certificate: z.ZodString;
-            privateKey: z.ZodString;
-            passphrase: z.ZodOptional<z.ZodString>;
-            caCertificate: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"custom">;
-            customType: z.ZodString;
-            data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"ssh_key">;
-            privateKey: z.ZodString;
-            publicKey: z.ZodOptional<z.ZodString>;
-            passphrase: z.ZodOptional<z.ZodString>;
-            keyType: z.ZodDefault<z.ZodEnum<{
+            keyData: import("@frontmcp/lazy-zod").ZodString;
+            keyId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            algorithm: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            certificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"mtls">;
+            certificate: import("@frontmcp/lazy-zod").ZodString;
+            privateKey: import("@frontmcp/lazy-zod").ZodString;
+            passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            caCertificate: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"custom">;
+            customType: import("@frontmcp/lazy-zod").ZodString;
+            data: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+            headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodString>>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"ssh_key">;
+            privateKey: import("@frontmcp/lazy-zod").ZodString;
+            publicKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            passphrase: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            keyType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
                 rsa: "rsa";
                 dsa: "dsa";
                 ed25519: "ed25519";
                 ecdsa: "ecdsa";
             }>>;
-            fingerprint: z.ZodOptional<z.ZodString>;
-            username: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"service_account">;
-            provider: z.ZodEnum<{
+            fingerprint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            username: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"service_account">;
+            provider: import("@frontmcp/lazy-zod").ZodEnum<{
                 custom: "custom";
                 gcp: "gcp";
                 aws: "aws";
                 azure: "azure";
             }>;
-            credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            projectId: z.ZodOptional<z.ZodString>;
-            region: z.ZodOptional<z.ZodString>;
-            assumeRoleArn: z.ZodOptional<z.ZodString>;
-            externalId: z.ZodOptional<z.ZodString>;
-            serviceAccountId: z.ZodOptional<z.ZodString>;
-            expiresAt: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"oauth_pkce">;
-            accessToken: z.ZodString;
-            refreshToken: z.ZodOptional<z.ZodString>;
-            tokenType: z.ZodDefault<z.ZodString>;
-            expiresAt: z.ZodOptional<z.ZodNumber>;
-            scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-            idToken: z.ZodOptional<z.ZodString>;
-            issuer: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>], "type">;
-        acquiredAt: z.ZodNumber;
-        lastUsedAt: z.ZodOptional<z.ZodNumber>;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-        isValid: z.ZodDefault<z.ZodBoolean>;
-        invalidReason: z.ZodOptional<z.ZodString>;
-        userInfo: z.ZodOptional<z.ZodObject<{
-            sub: z.ZodOptional<z.ZodString>;
-            email: z.ZodOptional<z.ZodString>;
-            name: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strip>>>;
-    consent: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodBoolean;
-        selectedToolIds: z.ZodArray<z.ZodString>;
-        availableToolIds: z.ZodArray<z.ZodString>;
-        consentedAt: z.ZodNumber;
-        version: z.ZodDefault<z.ZodString>;
-    }, z.core.$strip>>;
-    federated: z.ZodOptional<z.ZodObject<{
-        selectedProviderIds: z.ZodArray<z.ZodString>;
-        skippedProviderIds: z.ZodArray<z.ZodString>;
-        primaryProviderId: z.ZodOptional<z.ZodString>;
-        completedAt: z.ZodNumber;
-    }, z.core.$strip>>;
-    pendingAuths: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        appId: z.ZodString;
-        toolId: z.ZodOptional<z.ZodString>;
-        authUrl: z.ZodString;
-        requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        elicitId: z.ZodOptional<z.ZodString>;
-        createdAt: z.ZodNumber;
-        expiresAt: z.ZodNumber;
-        status: z.ZodEnum<{
+            credentials: import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>;
+            projectId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            region: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            assumeRoleArn: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            externalId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            serviceAccountId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodLiteral<"oauth_pkce">;
+            accessToken: import("@frontmcp/lazy-zod").ZodString;
+            refreshToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            tokenType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+            expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            scopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+            idToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>], "type">;
+        acquiredAt: import("@frontmcp/lazy-zod").ZodNumber;
+        lastUsedAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expiresAt: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        isValid: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        invalidReason: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        userInfo: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            sub: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            email: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        metadata: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+    }, import("zod/v4/core").$strip>>>;
+    consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        enabled: import("@frontmcp/lazy-zod").ZodBoolean;
+        selectedToolIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+        availableToolIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+        consentedAt: import("@frontmcp/lazy-zod").ZodNumber;
+        version: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    federated: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        selectedProviderIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+        skippedProviderIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+        primaryProviderId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        completedAt: import("@frontmcp/lazy-zod").ZodNumber;
+    }, import("zod/v4/core").$strip>>;
+    pendingAuths: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        id: import("@frontmcp/lazy-zod").ZodString;
+        appId: import("@frontmcp/lazy-zod").ZodString;
+        toolId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        authUrl: import("@frontmcp/lazy-zod").ZodString;
+        requiredScopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+        elicitId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        createdAt: import("@frontmcp/lazy-zod").ZodNumber;
+        expiresAt: import("@frontmcp/lazy-zod").ZodNumber;
+        status: import("@frontmcp/lazy-zod").ZodEnum<{
             pending: "pending";
             completed: "completed";
             cancelled: "cancelled";
             expired: "expired";
         }>;
-    }, z.core.$strip>>;
-    authorizedAppIds: z.ZodArray<z.ZodString>;
-    skippedAppIds: z.ZodArray<z.ZodString>;
-}, z.core.$strip>;
+    }, import("zod/v4/core").$strip>>;
+    authorizedAppIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+    skippedAppIds: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 export type VaultConsentRecord = z.infer<typeof vaultConsentRecordSchema>;
 export type VaultFederatedRecord = z.infer<typeof vaultFederatedRecordSchema>;
 export type PendingIncrementalAuth = z.infer<typeof pendingIncrementalAuthSchema>;