@frontmcp/auth 1.0.4 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (85) hide show
  1. package/authorities/authorities.context.d.ts +63 -0
  2. package/authorities/authorities.context.d.ts.map +1 -0
  3. package/authorities/authorities.engine.d.ts +65 -0
  4. package/authorities/authorities.engine.d.ts.map +1 -0
  5. package/authorities/authorities.errors.d.ts +59 -0
  6. package/authorities/authorities.errors.d.ts.map +1 -0
  7. package/authorities/authorities.evaluator.d.ts +28 -0
  8. package/authorities/authorities.evaluator.d.ts.map +1 -0
  9. package/authorities/authorities.metadata-augment.d.ts +31 -0
  10. package/authorities/authorities.metadata-augment.d.ts.map +1 -0
  11. package/authorities/authorities.profiles.d.ts +75 -0
  12. package/authorities/authorities.profiles.d.ts.map +1 -0
  13. package/authorities/authorities.registry.d.ts +86 -0
  14. package/authorities/authorities.registry.d.ts.map +1 -0
  15. package/authorities/authorities.schema.d.ts +24 -0
  16. package/authorities/authorities.schema.d.ts.map +1 -0
  17. package/authorities/authorities.scope-mapping.d.ts +16 -0
  18. package/authorities/authorities.scope-mapping.d.ts.map +1 -0
  19. package/authorities/authorities.types.d.ts +290 -0
  20. package/authorities/authorities.types.d.ts.map +1 -0
  21. package/authorities/index.d.ts +17 -0
  22. package/authorities/index.d.ts.map +1 -0
  23. package/authorization/authorization.class.d.ts +2 -3
  24. package/authorization/authorization.class.d.ts.map +1 -1
  25. package/authorization/authorization.types.d.ts +53 -54
  26. package/authorization/authorization.types.d.ts.map +1 -1
  27. package/authorization/index.d.ts +1 -1
  28. package/authorization/index.d.ts.map +1 -1
  29. package/cimd/cimd.types.d.ts +90 -90
  30. package/cimd/cimd.types.d.ts.map +1 -1
  31. package/common/jwt.types.d.ts +16 -16
  32. package/common/jwt.types.d.ts.map +1 -1
  33. package/common/session.types.d.ts +75 -76
  34. package/common/session.types.d.ts.map +1 -1
  35. package/common/zod-utils.d.ts +1 -1
  36. package/common/zod-utils.d.ts.map +1 -1
  37. package/consent/consent.types.d.ts +69 -69
  38. package/consent/consent.types.d.ts.map +1 -1
  39. package/context/frontmcp-auth-context.d.ts +113 -0
  40. package/context/frontmcp-auth-context.d.ts.map +1 -0
  41. package/context/frontmcp-auth-context.factory.d.ts +39 -0
  42. package/context/frontmcp-auth-context.factory.d.ts.map +1 -0
  43. package/context/frontmcp-auth-context.impl.d.ts +72 -0
  44. package/context/frontmcp-auth-context.impl.d.ts.map +1 -0
  45. package/context/index.d.ts +16 -0
  46. package/context/index.d.ts.map +1 -0
  47. package/detection/auth-provider-detection.d.ts +25 -25
  48. package/detection/auth-provider-detection.d.ts.map +1 -1
  49. package/esm/index.mjs +1036 -120
  50. package/esm/package.json +5 -5
  51. package/fetch/fetch-credential-middleware.d.ts +99 -0
  52. package/fetch/fetch-credential-middleware.d.ts.map +1 -0
  53. package/fetch/index.d.ts +10 -0
  54. package/fetch/index.d.ts.map +1 -0
  55. package/index.d.ts +6 -2
  56. package/index.d.ts.map +1 -1
  57. package/index.js +1619 -680
  58. package/machine-id/index.d.ts +1 -1
  59. package/machine-id/index.d.ts.map +1 -1
  60. package/options/app-auth.schema.d.ts +235 -235
  61. package/options/app-auth.schema.d.ts.map +1 -1
  62. package/options/orchestrated.schema.d.ts +371 -371
  63. package/options/orchestrated.schema.d.ts.map +1 -1
  64. package/options/public.schema.d.ts +16 -16
  65. package/options/public.schema.d.ts.map +1 -1
  66. package/options/schema.d.ts +227 -227
  67. package/options/schema.d.ts.map +1 -1
  68. package/options/shared.schemas.d.ts +97 -97
  69. package/options/shared.schemas.d.ts.map +1 -1
  70. package/options/transparent.schema.d.ts +30 -30
  71. package/options/transparent.schema.d.ts.map +1 -1
  72. package/options/typecheck.d.ts.map +1 -1
  73. package/package.json +5 -5
  74. package/session/authorization-vault.d.ts +380 -380
  75. package/session/authorization-vault.d.ts.map +1 -1
  76. package/session/authorization.store.d.ts +28 -29
  77. package/session/authorization.store.d.ts.map +1 -1
  78. package/session/encrypted-authorization-vault.d.ts +21 -21
  79. package/session/encrypted-authorization-vault.d.ts.map +1 -1
  80. package/session/transport-session.types.d.ts +166 -167
  81. package/session/transport-session.types.d.ts.map +1 -1
  82. package/session/vault-encryption.d.ts +27 -27
  83. package/session/vault-encryption.d.ts.map +1 -1
  84. package/vault/auth-providers.types.d.ts +45 -46
  85. package/vault/auth-providers.types.d.ts.map +1 -1
@@ -1,216 +1,216 @@
1
- import { z } from 'zod';
1
+ import { z } from '@frontmcp/lazy-zod';
2
2
  import type { LocalAuthOptionsInterface, RemoteAuthOptionsInterface } from './interfaces';
3
- export declare const localAuthSchema: z.ZodObject<{
4
- local: z.ZodOptional<z.ZodObject<{
5
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
6
- jwks: z.ZodOptional<z.ZodObject<{
7
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
8
- }, z.core.$strip>>;
9
- issuer: z.ZodOptional<z.ZodString>;
10
- }, z.core.$strip>>;
11
- tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
12
- redis: z.ZodObject<{
13
- host: z.ZodString;
14
- port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
15
- password: z.ZodOptional<z.ZodString>;
16
- db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
17
- tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
18
- keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
19
- defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
20
- }, z.core.$strip>;
21
- }, z.core.$strip>]>>;
22
- allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
23
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
24
- publicAccess: z.ZodOptional<z.ZodObject<{
25
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
26
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
27
- rateLimit: z.ZodDefault<z.ZodNumber>;
28
- }, z.core.$strip>>;
29
- consent: z.ZodOptional<z.ZodObject<{
30
- enabled: z.ZodDefault<z.ZodBoolean>;
31
- groupByApp: z.ZodDefault<z.ZodBoolean>;
32
- showDescriptions: z.ZodDefault<z.ZodBoolean>;
33
- allowSelectAll: z.ZodDefault<z.ZodBoolean>;
34
- requireSelection: z.ZodDefault<z.ZodBoolean>;
35
- customMessage: z.ZodOptional<z.ZodString>;
36
- rememberConsent: z.ZodDefault<z.ZodBoolean>;
37
- excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
38
- defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
39
- }, z.core.$strip>>;
40
- federatedAuth: z.ZodOptional<z.ZodObject<{
41
- stateValidation: z.ZodDefault<z.ZodEnum<{
3
+ export declare const localAuthSchema: import("@frontmcp/lazy-zod").ZodObject<{
4
+ local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
5
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
6
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
7
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
8
+ }, import("zod/v4/core").$strip>>;
9
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
10
+ }, import("zod/v4/core").$strip>>;
11
+ tokenStorage: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
12
+ redis: import("@frontmcp/lazy-zod").ZodObject<{
13
+ host: import("@frontmcp/lazy-zod").ZodString;
14
+ port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
15
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
16
+ db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
17
+ tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
18
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
19
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
20
+ }, import("zod/v4/core").$strip>;
21
+ }, import("zod/v4/core").$strip>]>>;
22
+ allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
23
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
24
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
25
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
26
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
27
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
28
+ }, import("zod/v4/core").$strip>>;
29
+ consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
30
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
31
+ groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
32
+ showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
33
+ allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
34
+ requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
35
+ customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
36
+ rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
37
+ excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
38
+ defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
39
+ }, import("zod/v4/core").$strip>>;
40
+ federatedAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
41
+ stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
42
42
  format: "format";
43
43
  strict: "strict";
44
44
  }>>;
45
- }, z.core.$strip>>;
46
- refresh: z.ZodOptional<z.ZodObject<{
47
- enabled: z.ZodDefault<z.ZodBoolean>;
48
- skewSeconds: z.ZodDefault<z.ZodNumber>;
49
- }, z.core.$strip>>;
50
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
51
- incrementalAuth: z.ZodOptional<z.ZodObject<{
52
- enabled: z.ZodDefault<z.ZodBoolean>;
53
- skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
45
+ }, import("zod/v4/core").$strip>>;
46
+ refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
47
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
48
+ skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
49
+ }, import("zod/v4/core").$strip>>;
50
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
51
+ incrementalAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
52
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
53
+ skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
54
54
  anonymous: "anonymous";
55
55
  "require-auth": "require-auth";
56
56
  }>>;
57
- allowSkip: z.ZodDefault<z.ZodBoolean>;
58
- showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
59
- }, z.core.$strip>>;
60
- cimd: z.ZodOptional<z.ZodObject<{
61
- enabled: z.ZodDefault<z.ZodBoolean>;
62
- cache: z.ZodOptional<z.ZodObject<{
63
- type: z.ZodDefault<z.ZodEnum<{
57
+ allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
58
+ showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
59
+ }, import("zod/v4/core").$strip>>;
60
+ cimd: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
61
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
62
+ cache: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
63
+ type: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
64
64
  memory: "memory";
65
65
  redis: "redis";
66
66
  }>>;
67
- defaultTtlMs: z.ZodDefault<z.ZodNumber>;
68
- maxTtlMs: z.ZodDefault<z.ZodNumber>;
69
- minTtlMs: z.ZodDefault<z.ZodNumber>;
70
- redis: z.ZodOptional<z.ZodObject<{
71
- url: z.ZodOptional<z.ZodString>;
72
- host: z.ZodOptional<z.ZodString>;
73
- port: z.ZodOptional<z.ZodNumber>;
74
- password: z.ZodOptional<z.ZodString>;
75
- db: z.ZodOptional<z.ZodNumber>;
76
- tls: z.ZodOptional<z.ZodBoolean>;
77
- keyPrefix: z.ZodDefault<z.ZodString>;
78
- }, z.core.$strip>>;
79
- }, z.core.$strip>>;
80
- security: z.ZodOptional<z.ZodObject<{
81
- blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
82
- allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
83
- blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
84
- warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
85
- allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
86
- }, z.core.$strip>>;
87
- network: z.ZodOptional<z.ZodObject<{
88
- timeoutMs: z.ZodDefault<z.ZodNumber>;
89
- maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
90
- redirectPolicy: z.ZodDefault<z.ZodEnum<{
67
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
68
+ maxTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
69
+ minTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
70
+ redis: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
71
+ url: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
72
+ host: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
73
+ port: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
74
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
75
+ db: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
76
+ tls: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
77
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
78
+ }, import("zod/v4/core").$strip>>;
79
+ }, import("zod/v4/core").$strip>>;
80
+ security: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
81
+ blockPrivateIPs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
82
+ allowedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
83
+ blockedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
84
+ warnOnLocalhostRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
85
+ allowInsecureForTesting: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
86
+ }, import("zod/v4/core").$strip>>;
87
+ network: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
88
+ timeoutMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
89
+ maxResponseSizeBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
90
+ redirectPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
91
91
  deny: "deny";
92
92
  "same-origin": "same-origin";
93
93
  allow: "allow";
94
94
  }>>;
95
- maxRedirects: z.ZodDefault<z.ZodNumber>;
96
- }, z.core.$strip>>;
97
- }, z.core.$strip>>;
98
- mode: z.ZodLiteral<"local">;
99
- }, z.core.$strip>;
100
- export declare const remoteAuthSchema: z.ZodObject<{
101
- local: z.ZodOptional<z.ZodObject<{
102
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
103
- jwks: z.ZodOptional<z.ZodObject<{
104
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
105
- }, z.core.$strip>>;
106
- issuer: z.ZodOptional<z.ZodString>;
107
- }, z.core.$strip>>;
108
- tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
109
- redis: z.ZodObject<{
110
- host: z.ZodString;
111
- port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
112
- password: z.ZodOptional<z.ZodString>;
113
- db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
114
- tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
115
- keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
116
- defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
117
- }, z.core.$strip>;
118
- }, z.core.$strip>]>>;
119
- allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
120
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
121
- publicAccess: z.ZodOptional<z.ZodObject<{
122
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
123
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
124
- rateLimit: z.ZodDefault<z.ZodNumber>;
125
- }, z.core.$strip>>;
126
- consent: z.ZodOptional<z.ZodObject<{
127
- enabled: z.ZodDefault<z.ZodBoolean>;
128
- groupByApp: z.ZodDefault<z.ZodBoolean>;
129
- showDescriptions: z.ZodDefault<z.ZodBoolean>;
130
- allowSelectAll: z.ZodDefault<z.ZodBoolean>;
131
- requireSelection: z.ZodDefault<z.ZodBoolean>;
132
- customMessage: z.ZodOptional<z.ZodString>;
133
- rememberConsent: z.ZodDefault<z.ZodBoolean>;
134
- excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
135
- defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
136
- }, z.core.$strip>>;
137
- federatedAuth: z.ZodOptional<z.ZodObject<{
138
- stateValidation: z.ZodDefault<z.ZodEnum<{
95
+ maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
96
+ }, import("zod/v4/core").$strip>>;
97
+ }, import("zod/v4/core").$strip>>;
98
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
99
+ }, import("zod/v4/core").$strip>;
100
+ export declare const remoteAuthSchema: import("@frontmcp/lazy-zod").ZodObject<{
101
+ local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
102
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
103
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
104
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
105
+ }, import("zod/v4/core").$strip>>;
106
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
107
+ }, import("zod/v4/core").$strip>>;
108
+ tokenStorage: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
109
+ redis: import("@frontmcp/lazy-zod").ZodObject<{
110
+ host: import("@frontmcp/lazy-zod").ZodString;
111
+ port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
112
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
113
+ db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
114
+ tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
115
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
116
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
117
+ }, import("zod/v4/core").$strip>;
118
+ }, import("zod/v4/core").$strip>]>>;
119
+ allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
120
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
121
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
122
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
123
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
124
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
125
+ }, import("zod/v4/core").$strip>>;
126
+ consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
127
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
128
+ groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
129
+ showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
130
+ allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
131
+ requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
132
+ customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
133
+ rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
134
+ excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
135
+ defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
136
+ }, import("zod/v4/core").$strip>>;
137
+ federatedAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
138
+ stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
139
139
  format: "format";
140
140
  strict: "strict";
141
141
  }>>;
142
- }, z.core.$strip>>;
143
- refresh: z.ZodOptional<z.ZodObject<{
144
- enabled: z.ZodDefault<z.ZodBoolean>;
145
- skewSeconds: z.ZodDefault<z.ZodNumber>;
146
- }, z.core.$strip>>;
147
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
148
- incrementalAuth: z.ZodOptional<z.ZodObject<{
149
- enabled: z.ZodDefault<z.ZodBoolean>;
150
- skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
142
+ }, import("zod/v4/core").$strip>>;
143
+ refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
144
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
145
+ skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
146
+ }, import("zod/v4/core").$strip>>;
147
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
148
+ incrementalAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
149
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
150
+ skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
151
151
  anonymous: "anonymous";
152
152
  "require-auth": "require-auth";
153
153
  }>>;
154
- allowSkip: z.ZodDefault<z.ZodBoolean>;
155
- showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
156
- }, z.core.$strip>>;
157
- cimd: z.ZodOptional<z.ZodObject<{
158
- enabled: z.ZodDefault<z.ZodBoolean>;
159
- cache: z.ZodOptional<z.ZodObject<{
160
- type: z.ZodDefault<z.ZodEnum<{
154
+ allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
155
+ showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
156
+ }, import("zod/v4/core").$strip>>;
157
+ cimd: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
158
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
159
+ cache: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
160
+ type: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
161
161
  memory: "memory";
162
162
  redis: "redis";
163
163
  }>>;
164
- defaultTtlMs: z.ZodDefault<z.ZodNumber>;
165
- maxTtlMs: z.ZodDefault<z.ZodNumber>;
166
- minTtlMs: z.ZodDefault<z.ZodNumber>;
167
- redis: z.ZodOptional<z.ZodObject<{
168
- url: z.ZodOptional<z.ZodString>;
169
- host: z.ZodOptional<z.ZodString>;
170
- port: z.ZodOptional<z.ZodNumber>;
171
- password: z.ZodOptional<z.ZodString>;
172
- db: z.ZodOptional<z.ZodNumber>;
173
- tls: z.ZodOptional<z.ZodBoolean>;
174
- keyPrefix: z.ZodDefault<z.ZodString>;
175
- }, z.core.$strip>>;
176
- }, z.core.$strip>>;
177
- security: z.ZodOptional<z.ZodObject<{
178
- blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
179
- allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
180
- blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
181
- warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
182
- allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
183
- }, z.core.$strip>>;
184
- network: z.ZodOptional<z.ZodObject<{
185
- timeoutMs: z.ZodDefault<z.ZodNumber>;
186
- maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
187
- redirectPolicy: z.ZodDefault<z.ZodEnum<{
164
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
165
+ maxTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
166
+ minTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
167
+ redis: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
168
+ url: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
169
+ host: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
170
+ port: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
171
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
172
+ db: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
173
+ tls: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
174
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
175
+ }, import("zod/v4/core").$strip>>;
176
+ }, import("zod/v4/core").$strip>>;
177
+ security: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
178
+ blockPrivateIPs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
179
+ allowedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
180
+ blockedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
181
+ warnOnLocalhostRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
182
+ allowInsecureForTesting: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
183
+ }, import("zod/v4/core").$strip>>;
184
+ network: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
185
+ timeoutMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
186
+ maxResponseSizeBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
187
+ redirectPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
188
188
  deny: "deny";
189
189
  "same-origin": "same-origin";
190
190
  allow: "allow";
191
191
  }>>;
192
- maxRedirects: z.ZodDefault<z.ZodNumber>;
193
- }, z.core.$strip>>;
194
- }, z.core.$strip>>;
195
- provider: z.ZodString;
196
- clientId: z.ZodOptional<z.ZodString>;
197
- clientSecret: z.ZodOptional<z.ZodString>;
198
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
199
- providerConfig: z.ZodOptional<z.ZodObject<{
200
- name: z.ZodOptional<z.ZodString>;
201
- id: z.ZodOptional<z.ZodString>;
202
- jwks: z.ZodOptional<z.ZodObject<{
203
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
204
- }, z.core.$strip>>;
205
- jwksUri: z.ZodOptional<z.ZodString>;
206
- dcrEnabled: z.ZodDefault<z.ZodBoolean>;
207
- authEndpoint: z.ZodOptional<z.ZodString>;
208
- tokenEndpoint: z.ZodOptional<z.ZodString>;
209
- registrationEndpoint: z.ZodOptional<z.ZodString>;
210
- userInfoEndpoint: z.ZodOptional<z.ZodString>;
211
- }, z.core.$strip>>;
212
- mode: z.ZodLiteral<"remote">;
213
- }, z.core.$strip>;
192
+ maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
193
+ }, import("zod/v4/core").$strip>>;
194
+ }, import("zod/v4/core").$strip>>;
195
+ provider: import("@frontmcp/lazy-zod").ZodString;
196
+ clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
197
+ clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
198
+ scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
199
+ providerConfig: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
200
+ name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
201
+ id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
202
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
203
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
204
+ }, import("zod/v4/core").$strip>>;
205
+ jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
206
+ dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
207
+ authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
208
+ tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
209
+ registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
210
+ userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
211
+ }, import("zod/v4/core").$strip>>;
212
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"remote">;
213
+ }, import("zod/v4/core").$strip>;
214
214
  export type LocalAuthOptions = z.infer<typeof localAuthSchema>;
215
215
  export type LocalAuthOptionsInput = LocalAuthOptionsInterface;
216
216
  export type RemoteAuthOptions = z.infer<typeof remoteAuthSchema>;
@@ -218,218 +218,218 @@ export type RemoteAuthOptionsInput = RemoteAuthOptionsInterface;
218
218
  export type LocalOrRemoteAuthOptions = LocalAuthOptions | RemoteAuthOptions;
219
219
  export type LocalOrRemoteAuthOptionsInput = LocalAuthOptionsInput | RemoteAuthOptionsInput;
220
220
  /** @deprecated Use localAuthSchema */
221
- export declare const orchestratedLocalSchema: z.ZodObject<{
222
- local: z.ZodOptional<z.ZodObject<{
223
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
224
- jwks: z.ZodOptional<z.ZodObject<{
225
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
226
- }, z.core.$strip>>;
227
- issuer: z.ZodOptional<z.ZodString>;
228
- }, z.core.$strip>>;
229
- tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
230
- redis: z.ZodObject<{
231
- host: z.ZodString;
232
- port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
233
- password: z.ZodOptional<z.ZodString>;
234
- db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
235
- tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
236
- keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
237
- defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
238
- }, z.core.$strip>;
239
- }, z.core.$strip>]>>;
240
- allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
241
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
242
- publicAccess: z.ZodOptional<z.ZodObject<{
243
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
244
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
245
- rateLimit: z.ZodDefault<z.ZodNumber>;
246
- }, z.core.$strip>>;
247
- consent: z.ZodOptional<z.ZodObject<{
248
- enabled: z.ZodDefault<z.ZodBoolean>;
249
- groupByApp: z.ZodDefault<z.ZodBoolean>;
250
- showDescriptions: z.ZodDefault<z.ZodBoolean>;
251
- allowSelectAll: z.ZodDefault<z.ZodBoolean>;
252
- requireSelection: z.ZodDefault<z.ZodBoolean>;
253
- customMessage: z.ZodOptional<z.ZodString>;
254
- rememberConsent: z.ZodDefault<z.ZodBoolean>;
255
- excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
256
- defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
257
- }, z.core.$strip>>;
258
- federatedAuth: z.ZodOptional<z.ZodObject<{
259
- stateValidation: z.ZodDefault<z.ZodEnum<{
221
+ export declare const orchestratedLocalSchema: import("@frontmcp/lazy-zod").ZodObject<{
222
+ local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
223
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
224
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
225
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
226
+ }, import("zod/v4/core").$strip>>;
227
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
228
+ }, import("zod/v4/core").$strip>>;
229
+ tokenStorage: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
230
+ redis: import("@frontmcp/lazy-zod").ZodObject<{
231
+ host: import("@frontmcp/lazy-zod").ZodString;
232
+ port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
233
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
234
+ db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
235
+ tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
236
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
237
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
238
+ }, import("zod/v4/core").$strip>;
239
+ }, import("zod/v4/core").$strip>]>>;
240
+ allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
241
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
242
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
243
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
244
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
245
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
246
+ }, import("zod/v4/core").$strip>>;
247
+ consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
248
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
249
+ groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
250
+ showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
251
+ allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
252
+ requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
253
+ customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
254
+ rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
255
+ excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
256
+ defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
257
+ }, import("zod/v4/core").$strip>>;
258
+ federatedAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
259
+ stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
260
260
  format: "format";
261
261
  strict: "strict";
262
262
  }>>;
263
- }, z.core.$strip>>;
264
- refresh: z.ZodOptional<z.ZodObject<{
265
- enabled: z.ZodDefault<z.ZodBoolean>;
266
- skewSeconds: z.ZodDefault<z.ZodNumber>;
267
- }, z.core.$strip>>;
268
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
269
- incrementalAuth: z.ZodOptional<z.ZodObject<{
270
- enabled: z.ZodDefault<z.ZodBoolean>;
271
- skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
263
+ }, import("zod/v4/core").$strip>>;
264
+ refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
265
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
266
+ skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
267
+ }, import("zod/v4/core").$strip>>;
268
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
269
+ incrementalAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
270
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
271
+ skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
272
272
  anonymous: "anonymous";
273
273
  "require-auth": "require-auth";
274
274
  }>>;
275
- allowSkip: z.ZodDefault<z.ZodBoolean>;
276
- showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
277
- }, z.core.$strip>>;
278
- cimd: z.ZodOptional<z.ZodObject<{
279
- enabled: z.ZodDefault<z.ZodBoolean>;
280
- cache: z.ZodOptional<z.ZodObject<{
281
- type: z.ZodDefault<z.ZodEnum<{
275
+ allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
276
+ showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
277
+ }, import("zod/v4/core").$strip>>;
278
+ cimd: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
279
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
280
+ cache: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
281
+ type: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
282
282
  memory: "memory";
283
283
  redis: "redis";
284
284
  }>>;
285
- defaultTtlMs: z.ZodDefault<z.ZodNumber>;
286
- maxTtlMs: z.ZodDefault<z.ZodNumber>;
287
- minTtlMs: z.ZodDefault<z.ZodNumber>;
288
- redis: z.ZodOptional<z.ZodObject<{
289
- url: z.ZodOptional<z.ZodString>;
290
- host: z.ZodOptional<z.ZodString>;
291
- port: z.ZodOptional<z.ZodNumber>;
292
- password: z.ZodOptional<z.ZodString>;
293
- db: z.ZodOptional<z.ZodNumber>;
294
- tls: z.ZodOptional<z.ZodBoolean>;
295
- keyPrefix: z.ZodDefault<z.ZodString>;
296
- }, z.core.$strip>>;
297
- }, z.core.$strip>>;
298
- security: z.ZodOptional<z.ZodObject<{
299
- blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
300
- allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
301
- blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
302
- warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
303
- allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
304
- }, z.core.$strip>>;
305
- network: z.ZodOptional<z.ZodObject<{
306
- timeoutMs: z.ZodDefault<z.ZodNumber>;
307
- maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
308
- redirectPolicy: z.ZodDefault<z.ZodEnum<{
285
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
286
+ maxTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
287
+ minTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
288
+ redis: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
289
+ url: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
290
+ host: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
291
+ port: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
292
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
293
+ db: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
294
+ tls: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
295
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
296
+ }, import("zod/v4/core").$strip>>;
297
+ }, import("zod/v4/core").$strip>>;
298
+ security: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
299
+ blockPrivateIPs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
300
+ allowedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
301
+ blockedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
302
+ warnOnLocalhostRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
303
+ allowInsecureForTesting: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
304
+ }, import("zod/v4/core").$strip>>;
305
+ network: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
306
+ timeoutMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
307
+ maxResponseSizeBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
308
+ redirectPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
309
309
  deny: "deny";
310
310
  "same-origin": "same-origin";
311
311
  allow: "allow";
312
312
  }>>;
313
- maxRedirects: z.ZodDefault<z.ZodNumber>;
314
- }, z.core.$strip>>;
315
- }, z.core.$strip>>;
316
- mode: z.ZodLiteral<"local">;
317
- }, z.core.$strip>;
313
+ maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
314
+ }, import("zod/v4/core").$strip>>;
315
+ }, import("zod/v4/core").$strip>>;
316
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
317
+ }, import("zod/v4/core").$strip>;
318
318
  /** @deprecated Use remoteAuthSchema */
319
- export declare const orchestratedRemoteSchema: z.ZodObject<{
320
- local: z.ZodOptional<z.ZodObject<{
321
- signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
322
- jwks: z.ZodOptional<z.ZodObject<{
323
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
324
- }, z.core.$strip>>;
325
- issuer: z.ZodOptional<z.ZodString>;
326
- }, z.core.$strip>>;
327
- tokenStorage: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"memory">, z.ZodObject<{
328
- redis: z.ZodObject<{
329
- host: z.ZodString;
330
- port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
331
- password: z.ZodOptional<z.ZodString>;
332
- db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
333
- tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
334
- keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
335
- defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
336
- }, z.core.$strip>;
337
- }, z.core.$strip>]>>;
338
- allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
339
- anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
340
- publicAccess: z.ZodOptional<z.ZodObject<{
341
- tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
342
- prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
343
- rateLimit: z.ZodDefault<z.ZodNumber>;
344
- }, z.core.$strip>>;
345
- consent: z.ZodOptional<z.ZodObject<{
346
- enabled: z.ZodDefault<z.ZodBoolean>;
347
- groupByApp: z.ZodDefault<z.ZodBoolean>;
348
- showDescriptions: z.ZodDefault<z.ZodBoolean>;
349
- allowSelectAll: z.ZodDefault<z.ZodBoolean>;
350
- requireSelection: z.ZodDefault<z.ZodBoolean>;
351
- customMessage: z.ZodOptional<z.ZodString>;
352
- rememberConsent: z.ZodDefault<z.ZodBoolean>;
353
- excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
354
- defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
355
- }, z.core.$strip>>;
356
- federatedAuth: z.ZodOptional<z.ZodObject<{
357
- stateValidation: z.ZodDefault<z.ZodEnum<{
319
+ export declare const orchestratedRemoteSchema: import("@frontmcp/lazy-zod").ZodObject<{
320
+ local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
321
+ signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
322
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
323
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
324
+ }, import("zod/v4/core").$strip>>;
325
+ issuer: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
326
+ }, import("zod/v4/core").$strip>>;
327
+ tokenStorage: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
328
+ redis: import("@frontmcp/lazy-zod").ZodObject<{
329
+ host: import("@frontmcp/lazy-zod").ZodString;
330
+ port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
331
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
332
+ db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
333
+ tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
334
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
335
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
336
+ }, import("zod/v4/core").$strip>;
337
+ }, import("zod/v4/core").$strip>]>>;
338
+ allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
339
+ anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
340
+ publicAccess: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
341
+ tools: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
342
+ prompts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"all">, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
343
+ rateLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
344
+ }, import("zod/v4/core").$strip>>;
345
+ consent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
346
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
347
+ groupByApp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
348
+ showDescriptions: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
349
+ allowSelectAll: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
350
+ requireSelection: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
351
+ customMessage: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
352
+ rememberConsent: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
353
+ excludedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
354
+ defaultSelectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
355
+ }, import("zod/v4/core").$strip>>;
356
+ federatedAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
357
+ stateValidation: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
358
358
  format: "format";
359
359
  strict: "strict";
360
360
  }>>;
361
- }, z.core.$strip>>;
362
- refresh: z.ZodOptional<z.ZodObject<{
363
- enabled: z.ZodDefault<z.ZodBoolean>;
364
- skewSeconds: z.ZodDefault<z.ZodNumber>;
365
- }, z.core.$strip>>;
366
- expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
367
- incrementalAuth: z.ZodOptional<z.ZodObject<{
368
- enabled: z.ZodDefault<z.ZodBoolean>;
369
- skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
361
+ }, import("zod/v4/core").$strip>>;
362
+ refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
363
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
364
+ skewSeconds: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
365
+ }, import("zod/v4/core").$strip>>;
366
+ expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
367
+ incrementalAuth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
368
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
369
+ skippedAppBehavior: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
370
370
  anonymous: "anonymous";
371
371
  "require-auth": "require-auth";
372
372
  }>>;
373
- allowSkip: z.ZodDefault<z.ZodBoolean>;
374
- showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
375
- }, z.core.$strip>>;
376
- cimd: z.ZodOptional<z.ZodObject<{
377
- enabled: z.ZodDefault<z.ZodBoolean>;
378
- cache: z.ZodOptional<z.ZodObject<{
379
- type: z.ZodDefault<z.ZodEnum<{
373
+ allowSkip: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
374
+ showAllAppsAtOnce: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
375
+ }, import("zod/v4/core").$strip>>;
376
+ cimd: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
377
+ enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
378
+ cache: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
379
+ type: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
380
380
  memory: "memory";
381
381
  redis: "redis";
382
382
  }>>;
383
- defaultTtlMs: z.ZodDefault<z.ZodNumber>;
384
- maxTtlMs: z.ZodDefault<z.ZodNumber>;
385
- minTtlMs: z.ZodDefault<z.ZodNumber>;
386
- redis: z.ZodOptional<z.ZodObject<{
387
- url: z.ZodOptional<z.ZodString>;
388
- host: z.ZodOptional<z.ZodString>;
389
- port: z.ZodOptional<z.ZodNumber>;
390
- password: z.ZodOptional<z.ZodString>;
391
- db: z.ZodOptional<z.ZodNumber>;
392
- tls: z.ZodOptional<z.ZodBoolean>;
393
- keyPrefix: z.ZodDefault<z.ZodString>;
394
- }, z.core.$strip>>;
395
- }, z.core.$strip>>;
396
- security: z.ZodOptional<z.ZodObject<{
397
- blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
398
- allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
399
- blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
400
- warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
401
- allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
402
- }, z.core.$strip>>;
403
- network: z.ZodOptional<z.ZodObject<{
404
- timeoutMs: z.ZodDefault<z.ZodNumber>;
405
- maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
406
- redirectPolicy: z.ZodDefault<z.ZodEnum<{
383
+ defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
384
+ maxTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
385
+ minTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
386
+ redis: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
387
+ url: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
388
+ host: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
389
+ port: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
390
+ password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
391
+ db: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
392
+ tls: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
393
+ keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
394
+ }, import("zod/v4/core").$strip>>;
395
+ }, import("zod/v4/core").$strip>>;
396
+ security: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
397
+ blockPrivateIPs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
398
+ allowedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
399
+ blockedDomains: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
400
+ warnOnLocalhostRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
401
+ allowInsecureForTesting: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
402
+ }, import("zod/v4/core").$strip>>;
403
+ network: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
404
+ timeoutMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
405
+ maxResponseSizeBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
406
+ redirectPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
407
407
  deny: "deny";
408
408
  "same-origin": "same-origin";
409
409
  allow: "allow";
410
410
  }>>;
411
- maxRedirects: z.ZodDefault<z.ZodNumber>;
412
- }, z.core.$strip>>;
413
- }, z.core.$strip>>;
414
- provider: z.ZodString;
415
- clientId: z.ZodOptional<z.ZodString>;
416
- clientSecret: z.ZodOptional<z.ZodString>;
417
- scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
418
- providerConfig: z.ZodOptional<z.ZodObject<{
419
- name: z.ZodOptional<z.ZodString>;
420
- id: z.ZodOptional<z.ZodString>;
421
- jwks: z.ZodOptional<z.ZodObject<{
422
- keys: z.ZodArray<z.ZodType<import("..").JWK, unknown, z.core.$ZodTypeInternals<import("..").JWK, unknown>>>;
423
- }, z.core.$strip>>;
424
- jwksUri: z.ZodOptional<z.ZodString>;
425
- dcrEnabled: z.ZodDefault<z.ZodBoolean>;
426
- authEndpoint: z.ZodOptional<z.ZodString>;
427
- tokenEndpoint: z.ZodOptional<z.ZodString>;
428
- registrationEndpoint: z.ZodOptional<z.ZodString>;
429
- userInfoEndpoint: z.ZodOptional<z.ZodString>;
430
- }, z.core.$strip>>;
431
- mode: z.ZodLiteral<"remote">;
432
- }, z.core.$strip>;
411
+ maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
412
+ }, import("zod/v4/core").$strip>>;
413
+ }, import("zod/v4/core").$strip>>;
414
+ provider: import("@frontmcp/lazy-zod").ZodString;
415
+ clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
416
+ clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
417
+ scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
418
+ providerConfig: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
419
+ name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
420
+ id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
421
+ jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
422
+ keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("..").JWK, unknown>>;
423
+ }, import("zod/v4/core").$strip>>;
424
+ jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
425
+ dcrEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
426
+ authEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
427
+ tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
428
+ registrationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
429
+ userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
430
+ }, import("zod/v4/core").$strip>>;
431
+ mode: import("@frontmcp/lazy-zod").ZodLiteral<"remote">;
432
+ }, import("zod/v4/core").$strip>;
433
433
  /** @deprecated Use LocalAuthOptions */
434
434
  export type OrchestratedLocalOptions = LocalAuthOptions;
435
435
  /** @deprecated Use LocalAuthOptionsInput */