@frontmcp/sdk 0.12.2 → 1.0.0-beta.2

package/common/types/options/auth/orchestrated.schema.d.ts

@@ -1,458 +1,3 @@
-import { z } from 'zod';
-export declare const orchestratedLocalSchema: z.ZodObject<{
-    local: z.ZodOptional<z.ZodObject<{
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        issuer: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"memory">;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"redis">;
-        config: z.ZodObject<{
-            host: z.ZodString;
-            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            password: z.ZodOptional<z.ZodString>;
-            db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-            keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-            defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        }, z.core.$strip>;
-    }, z.core.$strip>], "type">>;
-    allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
-    anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    publicAccess: z.ZodOptional<z.ZodObject<{
-        tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        rateLimit: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    consent: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        groupByApp: z.ZodDefault<z.ZodBoolean>;
-        showDescriptions: z.ZodDefault<z.ZodBoolean>;
-        allowSelectAll: z.ZodDefault<z.ZodBoolean>;
-        requireSelection: z.ZodDefault<z.ZodBoolean>;
-        customMessage: z.ZodOptional<z.ZodString>;
-        rememberConsent: z.ZodDefault<z.ZodBoolean>;
-        excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>;
-    federatedAuth: z.ZodOptional<z.ZodObject<{
-        stateValidation: z.ZodDefault<z.ZodEnum<{
-            format: "format";
-            strict: "strict";
-        }>>;
-    }, z.core.$strip>>;
-    refresh: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skewSeconds: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
-    incrementalAuth: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
-            anonymous: "anonymous";
-            "require-auth": "require-auth";
-        }>>;
-        allowSkip: z.ZodDefault<z.ZodBoolean>;
-        showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip>>;
-    cimd: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        cache: z.ZodOptional<z.ZodObject<{
-            type: z.ZodDefault<z.ZodEnum<{
-                memory: "memory";
-                redis: "redis";
-            }>>;
-            defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            maxTtlMs: z.ZodDefault<z.ZodNumber>;
-            minTtlMs: z.ZodDefault<z.ZodNumber>;
-            redis: z.ZodOptional<z.ZodObject<{
-                url: z.ZodOptional<z.ZodString>;
-                host: z.ZodOptional<z.ZodString>;
-                port: z.ZodOptional<z.ZodNumber>;
-                password: z.ZodOptional<z.ZodString>;
-                db: z.ZodOptional<z.ZodNumber>;
-                tls: z.ZodOptional<z.ZodBoolean>;
-                keyPrefix: z.ZodDefault<z.ZodString>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
-        security: z.ZodOptional<z.ZodObject<{
-            blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
-            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
-            allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
-        }, z.core.$strip>>;
-        network: z.ZodOptional<z.ZodObject<{
-            timeoutMs: z.ZodDefault<z.ZodNumber>;
-            maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
-            redirectPolicy: z.ZodDefault<z.ZodEnum<{
-                deny: "deny";
-                "same-origin": "same-origin";
-                allow: "allow";
-            }>>;
-            maxRedirects: z.ZodDefault<z.ZodNumber>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    mode: z.ZodLiteral<"orchestrated">;
-    type: z.ZodLiteral<"local">;
-}, z.core.$strip>;
-export declare const orchestratedRemoteSchema: z.ZodObject<{
-    local: z.ZodOptional<z.ZodObject<{
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        issuer: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"memory">;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"redis">;
-        config: z.ZodObject<{
-            host: z.ZodString;
-            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            password: z.ZodOptional<z.ZodString>;
-            db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-            keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-            defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        }, z.core.$strip>;
-    }, z.core.$strip>], "type">>;
-    allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
-    anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    publicAccess: z.ZodOptional<z.ZodObject<{
-        tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        rateLimit: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    consent: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        groupByApp: z.ZodDefault<z.ZodBoolean>;
-        showDescriptions: z.ZodDefault<z.ZodBoolean>;
-        allowSelectAll: z.ZodDefault<z.ZodBoolean>;
-        requireSelection: z.ZodDefault<z.ZodBoolean>;
-        customMessage: z.ZodOptional<z.ZodString>;
-        rememberConsent: z.ZodDefault<z.ZodBoolean>;
-        excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>;
-    federatedAuth: z.ZodOptional<z.ZodObject<{
-        stateValidation: z.ZodDefault<z.ZodEnum<{
-            format: "format";
-            strict: "strict";
-        }>>;
-    }, z.core.$strip>>;
-    refresh: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skewSeconds: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
-    incrementalAuth: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
-            anonymous: "anonymous";
-            "require-auth": "require-auth";
-        }>>;
-        allowSkip: z.ZodDefault<z.ZodBoolean>;
-        showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip>>;
-    cimd: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        cache: z.ZodOptional<z.ZodObject<{
-            type: z.ZodDefault<z.ZodEnum<{
-                memory: "memory";
-                redis: "redis";
-            }>>;
-            defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            maxTtlMs: z.ZodDefault<z.ZodNumber>;
-            minTtlMs: z.ZodDefault<z.ZodNumber>;
-            redis: z.ZodOptional<z.ZodObject<{
-                url: z.ZodOptional<z.ZodString>;
-                host: z.ZodOptional<z.ZodString>;
-                port: z.ZodOptional<z.ZodNumber>;
-                password: z.ZodOptional<z.ZodString>;
-                db: z.ZodOptional<z.ZodNumber>;
-                tls: z.ZodOptional<z.ZodBoolean>;
-                keyPrefix: z.ZodDefault<z.ZodString>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
-        security: z.ZodOptional<z.ZodObject<{
-            blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
-            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
-            allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
-        }, z.core.$strip>>;
-        network: z.ZodOptional<z.ZodObject<{
-            timeoutMs: z.ZodDefault<z.ZodNumber>;
-            maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
-            redirectPolicy: z.ZodDefault<z.ZodEnum<{
-                deny: "deny";
-                "same-origin": "same-origin";
-                allow: "allow";
-            }>>;
-            maxRedirects: z.ZodDefault<z.ZodNumber>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    mode: z.ZodLiteral<"orchestrated">;
-    type: z.ZodLiteral<"remote">;
-    remote: z.ZodObject<{
-        provider: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        id: z.ZodOptional<z.ZodString>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-        clientId: z.ZodOptional<z.ZodString>;
-        clientSecret: z.ZodOptional<z.ZodString>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        dcrEnabled: z.ZodDefault<z.ZodBoolean>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-}, z.core.$strip>;
-export declare const orchestratedAuthOptionsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    local: z.ZodOptional<z.ZodObject<{
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        issuer: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"memory">;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"redis">;
-        config: z.ZodObject<{
-            host: z.ZodString;
-            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            password: z.ZodOptional<z.ZodString>;
-            db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-            keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-            defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        }, z.core.$strip>;
-    }, z.core.$strip>], "type">>;
-    allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
-    anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    publicAccess: z.ZodOptional<z.ZodObject<{
-        tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        rateLimit: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    consent: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        groupByApp: z.ZodDefault<z.ZodBoolean>;
-        showDescriptions: z.ZodDefault<z.ZodBoolean>;
-        allowSelectAll: z.ZodDefault<z.ZodBoolean>;
-        requireSelection: z.ZodDefault<z.ZodBoolean>;
-        customMessage: z.ZodOptional<z.ZodString>;
-        rememberConsent: z.ZodDefault<z.ZodBoolean>;
-        excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>;
-    federatedAuth: z.ZodOptional<z.ZodObject<{
-        stateValidation: z.ZodDefault<z.ZodEnum<{
-            format: "format";
-            strict: "strict";
-        }>>;
-    }, z.core.$strip>>;
-    refresh: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skewSeconds: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
-    incrementalAuth: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
-            anonymous: "anonymous";
-            "require-auth": "require-auth";
-        }>>;
-        allowSkip: z.ZodDefault<z.ZodBoolean>;
-        showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip>>;
-    cimd: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        cache: z.ZodOptional<z.ZodObject<{
-            type: z.ZodDefault<z.ZodEnum<{
-                memory: "memory";
-                redis: "redis";
-            }>>;
-            defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            maxTtlMs: z.ZodDefault<z.ZodNumber>;
-            minTtlMs: z.ZodDefault<z.ZodNumber>;
-            redis: z.ZodOptional<z.ZodObject<{
-                url: z.ZodOptional<z.ZodString>;
-                host: z.ZodOptional<z.ZodString>;
-                port: z.ZodOptional<z.ZodNumber>;
-                password: z.ZodOptional<z.ZodString>;
-                db: z.ZodOptional<z.ZodNumber>;
-                tls: z.ZodOptional<z.ZodBoolean>;
-                keyPrefix: z.ZodDefault<z.ZodString>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
-        security: z.ZodOptional<z.ZodObject<{
-            blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
-            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
-            allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
-        }, z.core.$strip>>;
-        network: z.ZodOptional<z.ZodObject<{
-            timeoutMs: z.ZodDefault<z.ZodNumber>;
-            maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
-            redirectPolicy: z.ZodDefault<z.ZodEnum<{
-                deny: "deny";
-                "same-origin": "same-origin";
-                allow: "allow";
-            }>>;
-            maxRedirects: z.ZodDefault<z.ZodNumber>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    mode: z.ZodLiteral<"orchestrated">;
-    type: z.ZodLiteral<"local">;
-}, z.core.$strip>, z.ZodObject<{
-    local: z.ZodOptional<z.ZodObject<{
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        issuer: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"memory">;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"redis">;
-        config: z.ZodObject<{
-            host: z.ZodString;
-            port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            password: z.ZodOptional<z.ZodString>;
-            db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-            tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-            keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-            defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        }, z.core.$strip>;
-    }, z.core.$strip>], "type">>;
-    allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
-    anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    publicAccess: z.ZodOptional<z.ZodObject<{
-        tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        rateLimit: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    consent: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        groupByApp: z.ZodDefault<z.ZodBoolean>;
-        showDescriptions: z.ZodDefault<z.ZodBoolean>;
-        allowSelectAll: z.ZodDefault<z.ZodBoolean>;
-        requireSelection: z.ZodDefault<z.ZodBoolean>;
-        customMessage: z.ZodOptional<z.ZodString>;
-        rememberConsent: z.ZodDefault<z.ZodBoolean>;
-        excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>;
-    federatedAuth: z.ZodOptional<z.ZodObject<{
-        stateValidation: z.ZodDefault<z.ZodEnum<{
-            format: "format";
-            strict: "strict";
-        }>>;
-    }, z.core.$strip>>;
-    refresh: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skewSeconds: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
-    incrementalAuth: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
-            anonymous: "anonymous";
-            "require-auth": "require-auth";
-        }>>;
-        allowSkip: z.ZodDefault<z.ZodBoolean>;
-        showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip>>;
-    cimd: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        cache: z.ZodOptional<z.ZodObject<{
-            type: z.ZodDefault<z.ZodEnum<{
-                memory: "memory";
-                redis: "redis";
-            }>>;
-            defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            maxTtlMs: z.ZodDefault<z.ZodNumber>;
-            minTtlMs: z.ZodDefault<z.ZodNumber>;
-            redis: z.ZodOptional<z.ZodObject<{
-                url: z.ZodOptional<z.ZodString>;
-                host: z.ZodOptional<z.ZodString>;
-                port: z.ZodOptional<z.ZodNumber>;
-                password: z.ZodOptional<z.ZodString>;
-                db: z.ZodOptional<z.ZodNumber>;
-                tls: z.ZodOptional<z.ZodBoolean>;
-                keyPrefix: z.ZodDefault<z.ZodString>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
-        security: z.ZodOptional<z.ZodObject<{
-            blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
-            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
-            allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
-        }, z.core.$strip>>;
-        network: z.ZodOptional<z.ZodObject<{
-            timeoutMs: z.ZodDefault<z.ZodNumber>;
-            maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
-            redirectPolicy: z.ZodDefault<z.ZodEnum<{
-                deny: "deny";
-                "same-origin": "same-origin";
-                allow: "allow";
-            }>>;
-            maxRedirects: z.ZodDefault<z.ZodNumber>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>>;
-    mode: z.ZodLiteral<"orchestrated">;
-    type: z.ZodLiteral<"remote">;
-    remote: z.ZodObject<{
-        provider: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        id: z.ZodOptional<z.ZodString>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown, z.core.$ZodTypeInternals<import("@frontmcp/auth").JWK, unknown>>>;
-        }, z.core.$strip>>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-        clientId: z.ZodOptional<z.ZodString>;
-        clientSecret: z.ZodOptional<z.ZodString>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        dcrEnabled: z.ZodDefault<z.ZodBoolean>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-}, z.core.$strip>], "type">;
-/**
- * Orchestrated local mode options
- */
-export type OrchestratedLocalOptions = z.infer<typeof orchestratedLocalSchema>;
-export type OrchestratedLocalOptionsInput = z.input<typeof orchestratedLocalSchema>;
-/**
- * Orchestrated remote mode options
- */
-export type OrchestratedRemoteOptions = z.infer<typeof orchestratedRemoteSchema>;
-export type OrchestratedRemoteOptionsInput = z.input<typeof orchestratedRemoteSchema>;
-/**
- * Orchestrated mode options (union of local and remote)
- */
-export type OrchestratedAuthOptions = z.infer<typeof orchestratedAuthOptionsSchema>;
-export type OrchestratedAuthOptionsInput = z.input<typeof orchestratedAuthOptionsSchema>;
-/**
- * Orchestrated type (local or remote)
- */
-export type OrchestratedType = 'local' | 'remote';
+export { localAuthSchema, remoteAuthSchema, orchestratedLocalSchema, orchestratedRemoteSchema } from '@frontmcp/auth';
+export type { LocalAuthOptions, LocalAuthOptionsInput, RemoteAuthOptions, RemoteAuthOptionsInput, LocalOrRemoteAuthOptions, LocalOrRemoteAuthOptionsInput, OrchestratedLocalOptions, OrchestratedLocalOptionsInput, OrchestratedRemoteOptions, OrchestratedRemoteOptionsInput, OrchestratedAuthOptions, OrchestratedAuthOptionsInput, } from '@frontmcp/auth';
 //# sourceMappingURL=orchestrated.schema.d.ts.map

package/common/types/options/auth/orchestrated.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/orchestrated.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkGxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIlC,CAAC;AAOH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAUnC,CAAC;AAMH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAGxC,CAAC;AAMH;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC/E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACjF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEtF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEzF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/orchestrated.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAEtH,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC"}

package/common/types/options/auth/public.schema.d.ts

@@ -1,22 +1,3 @@
-import { z } from 'zod';
-export declare const publicAuthOptionsSchema: z.ZodObject<{
-    mode: z.ZodLiteral<"public">;
-    issuer: z.ZodOptional<z.ZodString>;
-    sessionTtl: z.ZodDefault<z.ZodNumber>;
-    anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    publicAccess: z.ZodOptional<z.ZodObject<{
-        tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
-        rateLimit: z.ZodDefault<z.ZodNumber>;
-    }, z.core.$strip>>;
-    jwks: z.ZodOptional<z.ZodObject<{
-        keys: z.ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("libs/auth/dist/common/jwt.types").JWK, unknown>>>;
-    }, z.core.$strip>>;
-    signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown, z.core.$ZodTypeInternals<import("libs/auth/dist/common/jwt.types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-}, z.core.$strip>;
-/**
- * Public mode options (output type with defaults applied)
- */
-export type PublicAuthOptions = z.infer<typeof publicAuthOptionsSchema>;
-export type PublicAuthOptionsInput = z.input<typeof publicAuthOptionsSchema>;
+export { publicAuthOptionsSchema } from '@frontmcp/auth';
+export type { PublicAuthOptions, PublicAuthOptionsInput } from '@frontmcp/auth';
 //# sourceMappingURL=public.schema.d.ts.map

package/common/types/options/auth/public.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/public.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqClC,CAAC;AAMH;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"public.schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/public.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}