@frontmcp/sdk 0.2.5 → 0.3.0

package/src/auth/flows/well-known.jwks.flow.d.ts

@@ -0,0 +1,261 @@
+import { FlowBase, FlowRunOptions, ScopeEntry, ServerRequest } from '../../common';
+import 'reflect-metadata';
+import { z } from 'zod';
+declare const inputSchema: z.ZodObject<{
+    request: z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>;
+    response: z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>;
+    next: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    request: {} & {
+        [k: string]: unknown;
+    };
+    response: {} & {
+        [k: string]: unknown;
+    };
+    next?: ((...args: unknown[]) => unknown) | undefined;
+}, {
+    request: {} & {
+        [k: string]: unknown;
+    };
+    response: {} & {
+        [k: string]: unknown;
+    };
+    next?: ((...args: unknown[]) => unknown) | undefined;
+}>;
+declare const stateSchema: z.ZodObject<{
+    isOrchestrated: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    isOrchestrated: boolean;
+}, {
+    isOrchestrated: boolean;
+}>;
+declare const outputSchema: z.ZodUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"json">;
+    status: z.ZodEffects<z.ZodNumber, number, number>;
+    body: z.ZodUnion<[z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>, z.ZodArray<z.ZodAny, "many">, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+    contentType: z.ZodDefault<z.ZodString>;
+} & {
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<["lax", "strict", "none"]>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }, {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    status: number;
+    kind: "json";
+    body: any[] | z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | Record<string, any>;
+    contentType: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}, {
+    status: number;
+    kind: "json";
+    body: any[] | z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | Record<string, any>;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+    contentType?: string | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"text">;
+    status: z.ZodEffects<z.ZodNumber, number, number>;
+    body: z.ZodString;
+    contentType: z.ZodDefault<z.ZodString>;
+} & {
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<["lax", "strict", "none"]>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }, {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    status: number;
+    kind: "text";
+    body: string;
+    contentType: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}, {
+    status: number;
+    kind: "text";
+    body: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+    contentType?: string | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"redirect">;
+    status: z.ZodDefault<z.ZodType<301 | 302 | 303 | 307 | 308, z.ZodTypeDef, 301 | 302 | 303 | 307 | 308>>;
+    location: z.ZodString;
+} & {
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<["lax", "strict", "none"]>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }, {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    status: 301 | 302 | 303 | 307 | 308;
+    kind: "redirect";
+    location: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}, {
+    kind: "redirect";
+    location: string;
+    status?: 301 | 302 | 303 | 307 | 308 | undefined;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}>]>;
+declare const plan: {
+    readonly pre: ["parseInput", "validateInput"];
+    readonly execute: ["collectData"];
+};
+declare global {
+    interface ExtendFlows {
+        'well-known.jwks': FlowRunOptions<WellKnownJwksFlow, typeof plan, typeof inputSchema, typeof outputSchema, typeof stateSchema>;
+    }
+}
+declare const name: "well-known.jwks";
+export default class WellKnownJwksFlow extends FlowBase<typeof name> {
+    static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    parseInput(): Promise<void>;
+    collectData(): Promise<void>;
+}
+export {};

package/src/auth/flows/well-known.jwks.flow.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+// auth/flows/well-known.jwks.flow.ts
+const common_1 = require("../../common");
+require("reflect-metadata");
+const zod_1 = require("zod");
+const path_utils_1 = require("../path.utils");
+const jwks_1 = require("../jwks");
+const inputSchema = common_1.httpInputSchema;
+const stateSchema = zod_1.z.object({
+    isOrchestrated: zod_1.z.boolean(),
+});
+const outputSchema = zod_1.z.union([common_1.HttpJsonSchema, common_1.HttpTextSchema, common_1.HttpRedirectSchema]);
+const plan = {
+    pre: ['parseInput', 'validateInput'],
+    execute: ['collectData'],
+};
+const name = 'well-known.jwks';
+const Stage = (0, common_1.StageHookOf)(name);
+let WellKnownJwksFlow = class WellKnownJwksFlow extends common_1.FlowBase {
+    static canActivate(request, scope) {
+        return (0, path_utils_1.makeWellKnownPaths)('jwks.json', scope.entryPath, scope.routeBase).has(request.path);
+    }
+    async parseInput() {
+        this.state.set({
+            isOrchestrated: false, // scope.orchestrated, TODO: fix
+        });
+    }
+    async collectData() {
+        const { isOrchestrated } = this.state.required;
+        const jwksSvc = this.get(jwks_1.JwksService);
+        // Orchestrated gateway → serve own JWKS
+        if (isOrchestrated) {
+            const keysDoc = jwksSvc.getPublicJwks();
+            if (!keysDoc?.keys || !Array.isArray(keysDoc.keys)) {
+                throw new Error('orchestrator jwks not available');
+            }
+            this.respond(common_1.httpRespond.json(keysDoc));
+            return;
+        }
+        const primary = this.scope.auth.options;
+        if (primary) {
+            if (primary.jwks && primary.jwks.keys.length) {
+                this.respond(common_1.httpRespond.json(primary.jwks));
+            }
+            else {
+                const location = primary.jwksUri ?? `${primary.baseUrl}/.well-known/jwks.json`;
+                this.respond(common_1.httpRespond.redirect(location));
+            }
+        }
+        else {
+            this.respond(common_1.httpRespond.notFound());
+        }
+    }
+};
+tslib_1.__decorate([
+    Stage('parseInput'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], WellKnownJwksFlow.prototype, "parseInput", null);
+tslib_1.__decorate([
+    Stage('collectData'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], WellKnownJwksFlow.prototype, "collectData", null);
+WellKnownJwksFlow = tslib_1.__decorate([
+    (0, common_1.Flow)({
+        name,
+        plan,
+        inputSchema,
+        outputSchema,
+        access: 'public',
+        middleware: {
+            method: 'GET',
+        },
+    })
+], WellKnownJwksFlow);
+exports.default = WellKnownJwksFlow;
+//# sourceMappingURL=well-known.jwks.flow.js.map

package/src/auth/flows/well-known.jwks.flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"well-known.jwks.flow.js","sourceRoot":"","sources":["../../../../src/auth/flows/well-known.jwks.flow.ts"],"names":[],"mappings":";;;AAAA,qCAAqC;AACrC,yCAIsB;AACtB,4BAA0B;AAC1B,6BAAsB;AACtB,8CAAiD;AACjD,kCAAoC;AAGpC,MAAM,WAAW,GAAG,wBAAe,CAAC;AAEpC,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,uBAAc,EAAE,uBAAc,EAAE,2BAAkB,CAAC,CAAC,CAAC;AAEnF,MAAM,IAAI,GAAG;IACX,GAAG,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;IACpC,OAAO,EAAE,CAAC,aAAa,CAAC;CACW,CAAC;AActC,MAAM,IAAI,GAAG,iBAA0B,CAAC;AACxC,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;AAajB,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,iBAAqB;IAClE,MAAM,CAAC,WAAW,CAAC,OAAsB,EAAE,KAAiB;QAC1D,OAAO,IAAA,+BAAkB,EAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7F,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACb,cAAc,EAAE,KAAK,EAAE,gCAAgC;SACxD,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW;QACf,MAAM,EAAC,cAAc,EAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAW,CAAC,CAAC;QAEtC,wCAAwC;QACxC,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,oBAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAA4B,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,oBAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,OAAO,wBAAwB,CAAC;gBAC/E,IAAI,CAAC,OAAO,CAAC,oBAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,oBAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;CACF,CAAA;AAjCO;IADL,KAAK,CAAC,YAAY,CAAC;;;;mDAKnB;AAGK;IADL,KAAK,CAAC,aAAa,CAAC;;;;oDA0BpB;AAtCkB,iBAAiB;IAVrC,IAAA,aAAI,EAAC;QACJ,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE;YACV,MAAM,EAAE,KAAK;SACd;KACF,CAAC;GACmB,iBAAiB,CAuCrC;kBAvCoB,iBAAiB","sourcesContent":["// auth/flows/well-known.jwks.flow.ts\nimport {\n  Flow, FlowBase, FlowPlan,\n  FlowRunOptions, httpInputSchema, HttpJsonSchema, HttpRedirectSchema, httpRespond, HttpTextSchema,\n  RemoteAuthOptions, ScopeEntry, ServerRequest, StageHookOf,\n} from '../../common';\nimport 'reflect-metadata';\nimport {z} from 'zod';\nimport {makeWellKnownPaths} from '../path.utils';\nimport {JwksService} from '../jwks';\n\n\nconst inputSchema = httpInputSchema;\n\nconst stateSchema = z.object({\n  isOrchestrated: z.boolean(),\n});\n\nconst outputSchema = z.union([HttpJsonSchema, HttpTextSchema, HttpRedirectSchema]);\n\nconst plan = {\n  pre: ['parseInput', 'validateInput'],\n  execute: ['collectData'],\n} as const satisfies FlowPlan<string>;\n\ndeclare global {\n  interface ExtendFlows {\n    'well-known.jwks': FlowRunOptions<\n      WellKnownJwksFlow,\n      typeof plan,\n      typeof inputSchema,\n      typeof outputSchema,\n      typeof stateSchema\n    >;\n  }\n}\n\nconst name = 'well-known.jwks' as const;\nconst Stage = StageHookOf(name);\n\n\n@Flow({\n  name,\n  plan,\n  inputSchema,\n  outputSchema,\n  access: 'public',\n  middleware: {\n    method: 'GET',\n  },\n})\nexport default class WellKnownJwksFlow extends FlowBase<typeof name> {\n  static canActivate(request: ServerRequest, scope: ScopeEntry) {\n    return makeWellKnownPaths('jwks.json', scope.entryPath, scope.routeBase).has(request.path);\n  }\n\n  @Stage('parseInput')\n  async parseInput() {\n    this.state.set({\n      isOrchestrated: false, // scope.orchestrated, TODO: fix\n    });\n  }\n\n  @Stage('collectData')\n  async collectData() {\n    const {isOrchestrated} = this.state.required;\n    const jwksSvc = this.get(JwksService);\n\n    // Orchestrated gateway → serve own JWKS\n    if (isOrchestrated) {\n      const keysDoc = jwksSvc.getPublicJwks();\n      if (!keysDoc?.keys || !Array.isArray(keysDoc.keys)) {\n        throw new Error('orchestrator jwks not available');\n      }\n      this.respond(httpRespond.json(keysDoc));\n      return;\n    }\n\n    const primary = this.scope.auth.options as RemoteAuthOptions;\n    if (primary) {\n      if (primary.jwks && primary.jwks.keys.length) {\n        this.respond(httpRespond.json(primary.jwks));\n      } else {\n        const location = primary.jwksUri ?? `${primary.baseUrl}/.well-known/jwks.json`;\n        this.respond(httpRespond.redirect(location));\n      }\n    } else {\n      this.respond(httpRespond.notFound());\n    }\n  }\n}\n"]}

package/src/auth/flows/well-known.oauth-authorization-server.flow.d.ts

@@ -0,0 +1,282 @@
+import 'reflect-metadata';
+import { z } from 'zod';
+import { FlowBase, FlowRunOptions, ScopeEntry, ServerRequest } from '../../common';
+declare const inputSchema: z.ZodObject<{
+    request: z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>;
+    response: z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>;
+    next: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    request: {} & {
+        [k: string]: unknown;
+    };
+    response: {} & {
+        [k: string]: unknown;
+    };
+    next?: ((...args: unknown[]) => unknown) | undefined;
+}, {
+    request: {} & {
+        [k: string]: unknown;
+    };
+    response: {} & {
+        [k: string]: unknown;
+    };
+    next?: ((...args: unknown[]) => unknown) | undefined;
+}>;
+export declare const outputSchema: z.ZodUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"json">;
+    status: z.ZodLiteral<200>;
+    contentType: z.ZodLiteral<"application/json; charset=utf-8">;
+    body: z.ZodObject<{
+        issuer: z.ZodString;
+        authorization_endpoint: z.ZodString;
+        token_endpoint: z.ZodString;
+        userinfo_endpoint: z.ZodOptional<z.ZodString>;
+        jwks_uri: z.ZodString;
+        registration_endpoint: z.ZodOptional<z.ZodString>;
+        token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodEnum<["client_secret_basic", "client_secret_post", "private_key_jwt"]>, "many">>;
+        response_types_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["code"]>, "many">>;
+        grant_types_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "refresh_token"]>, "many">>;
+        scopes_supported: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        code_challenge_methods_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["S256"]>, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        issuer: z.ZodString;
+        authorization_endpoint: z.ZodString;
+        token_endpoint: z.ZodString;
+        userinfo_endpoint: z.ZodOptional<z.ZodString>;
+        jwks_uri: z.ZodString;
+        registration_endpoint: z.ZodOptional<z.ZodString>;
+        token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodEnum<["client_secret_basic", "client_secret_post", "private_key_jwt"]>, "many">>;
+        response_types_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["code"]>, "many">>;
+        grant_types_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "refresh_token"]>, "many">>;
+        scopes_supported: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        code_challenge_methods_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["S256"]>, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        issuer: z.ZodString;
+        authorization_endpoint: z.ZodString;
+        token_endpoint: z.ZodString;
+        userinfo_endpoint: z.ZodOptional<z.ZodString>;
+        jwks_uri: z.ZodString;
+        registration_endpoint: z.ZodOptional<z.ZodString>;
+        token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodEnum<["client_secret_basic", "client_secret_post", "private_key_jwt"]>, "many">>;
+        response_types_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["code"]>, "many">>;
+        grant_types_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "refresh_token"]>, "many">>;
+        scopes_supported: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        code_challenge_methods_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["S256"]>, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, "strip", z.ZodTypeAny, {
+    status: 200;
+    kind: "json";
+    body: {
+        scopes_supported: string[];
+        issuer: string;
+        authorization_endpoint: string;
+        token_endpoint: string;
+        jwks_uri: string;
+        response_types_supported: "code"[];
+        grant_types_supported: ("authorization_code" | "refresh_token")[];
+        code_challenge_methods_supported: "S256"[];
+        userinfo_endpoint?: string | undefined;
+        registration_endpoint?: string | undefined;
+        token_endpoint_auth_methods_supported?: ("client_secret_basic" | "client_secret_post" | "private_key_jwt")[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    contentType: "application/json; charset=utf-8";
+}, {
+    status: 200;
+    kind: "json";
+    body: {
+        issuer: string;
+        authorization_endpoint: string;
+        token_endpoint: string;
+        jwks_uri: string;
+        scopes_supported?: string[] | undefined;
+        userinfo_endpoint?: string | undefined;
+        registration_endpoint?: string | undefined;
+        token_endpoint_auth_methods_supported?: ("client_secret_basic" | "client_secret_post" | "private_key_jwt")[] | undefined;
+        response_types_supported?: "code"[] | undefined;
+        grant_types_supported?: ("authorization_code" | "refresh_token")[] | undefined;
+        code_challenge_methods_supported?: "S256"[] | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    contentType: "application/json; charset=utf-8";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"redirect">;
+    status: z.ZodDefault<z.ZodType<301 | 302 | 303 | 307 | 308, z.ZodTypeDef, 301 | 302 | 303 | 307 | 308>>;
+    location: z.ZodString;
+} & {
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<["lax", "strict", "none"]>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }, {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    status: 301 | 302 | 303 | 307 | 308;
+    kind: "redirect";
+    location: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}, {
+    kind: "redirect";
+    location: string;
+    status?: 301 | 302 | 303 | 307 | 308 | undefined;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"text">;
+    status: z.ZodEffects<z.ZodNumber, number, number>;
+    body: z.ZodString;
+    contentType: z.ZodDefault<z.ZodString>;
+} & {
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<["lax", "strict", "none"]>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }, {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    status: number;
+    kind: "text";
+    body: string;
+    contentType: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        path: string;
+        name: string;
+        httpOnly: boolean;
+        domain?: string | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+}, {
+    status: number;
+    kind: "text";
+    body: string;
+    headers?: Record<string, string | string[]> | undefined;
+    cookies?: {
+        value: string;
+        name: string;
+        path?: string | undefined;
+        domain?: string | undefined;
+        httpOnly?: boolean | undefined;
+        secure?: boolean | undefined;
+        sameSite?: "lax" | "strict" | "none" | undefined;
+        maxAge?: number | undefined;
+        expires?: Date | undefined;
+    }[] | undefined;
+    contentType?: string | undefined;
+}>]>;
+export declare const wellKnownAsStateSchema: z.ZodObject<{
+    baseUrl: z.ZodString;
+    scopesSupported: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    tokenEndpointAuthMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<["client_secret_basic", "client_secret_post", "private_key_jwt"]>, "many">>;
+    dcrEnabled: z.ZodDefault<z.ZodBoolean>;
+    isOrchestrated: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    baseUrl: string;
+    dcrEnabled: boolean;
+    scopesSupported: string[];
+    isOrchestrated: boolean;
+    tokenEndpointAuthMethods: ("client_secret_basic" | "client_secret_post" | "private_key_jwt")[];
+}, {
+    baseUrl: string;
+    isOrchestrated: boolean;
+    dcrEnabled?: boolean | undefined;
+    scopesSupported?: string[] | undefined;
+    tokenEndpointAuthMethods?: ("client_secret_basic" | "client_secret_post" | "private_key_jwt")[] | undefined;
+}>;
+declare const wellKnownAsPlan: {
+    readonly pre: ["parseInput"];
+    readonly execute: ["collectData"];
+};
+type WellKnownAsPlan = typeof wellKnownAsPlan;
+type WellKnownAsFlowOptions = FlowRunOptions<WellKnownAsFlow, WellKnownAsPlan, typeof inputSchema, typeof outputSchema, typeof wellKnownAsStateSchema>;
+declare global {
+    interface ExtendFlows {
+        'well-known.oauth-authorization-server': WellKnownAsFlowOptions;
+    }
+}
+declare const name: "well-known.oauth-authorization-server";
+export default class WellKnownAsFlow extends FlowBase<typeof name> {
+    static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    parseInput(): Promise<void>;
+    collectData(): Promise<void>;
+}
+export {};