@frontmcp/sdk 0.4.0 → 0.5.0

package/src/common/metadata/app.metadata.d.ts

@@ -82,384 +82,225 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
-    providers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>>;
-    authProviders: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>>;
-    plugins: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    adapters: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    tools: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    resources: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    prompts: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-        type: z.ZodLiteral<"remote">;
-        id: z.ZodOptional<z.ZodString>;
-        name: z.ZodString;
-        baseUrl: z.ZodString;
-        dcrEnabled: z.ZodOptional<z.ZodBoolean>;
-        clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
-            clientId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            clientId: string;
-        }, {
-            clientId: string;
-        }>], z.ZodUnknown>, z.ZodString>]>>;
-        mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"local">;
-        id: z.ZodString;
-        name: z.ZodString;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }>]>>;
-    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    id: z.ZodOptional<z.ZodString>;
-    name: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    providers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>>;
-    authProviders: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>>;
-    plugins: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    adapters: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    tools: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    resources: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    prompts: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-        type: z.ZodLiteral<"remote">;
-        id: z.ZodOptional<z.ZodString>;
-        name: z.ZodString;
-        baseUrl: z.ZodString;
-        dcrEnabled: z.ZodOptional<z.ZodBoolean>;
-        clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
-            clientId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            clientId: string;
-        }, {
-            clientId: string;
-        }>], z.ZodUnknown>, z.ZodString>]>>;
-        mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
+    providers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>>;
+    authProviders: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>>;
+    plugins: z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>;
+    adapters: z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>;
+    resources: z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>;
+    prompts: z.ZodOptional<z.ZodArray<z.ZodCustom<import("../interfaces").Type<unknown>, import("../interfaces").Type<unknown>>>>;
+    auth: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        mode: z.ZodLiteral<"public">;
+        issuer: z.ZodOptional<z.ZodString>;
+        sessionTtl: z.ZodDefault<z.ZodNumber>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
         jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }>, z.ZodObject<{
+            keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+        }, z.core.$strip>>;
+        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"transparent">;
+        remote: z.ZodObject<{
+            provider: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            jwksUri: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            dcrEnabled: z.ZodDefault<z.ZodBoolean>;
+            authEndpoint: z.ZodOptional<z.ZodString>;
+            tokenEndpoint: z.ZodOptional<z.ZodString>;
+            registrationEndpoint: z.ZodOptional<z.ZodString>;
+            userInfoEndpoint: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        allowAnonymous: z.ZodDefault<z.ZodBoolean>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"local">;
-        id: z.ZodString;
-        name: z.ZodString;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
+        local: z.ZodOptional<z.ZodObject<{
+            signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            issuer: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"memory">;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"redis">;
+            config: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                password: z.ZodOptional<z.ZodString>;
+                db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>], "type">>;
+        sessionMode: z.ZodDefault<z.ZodEnum<{
+            stateful: "stateful";
+            stateless: "stateless";
         }>>;
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }>]>>;
-    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    id: z.ZodOptional<z.ZodString>;
-    name: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    providers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>>;
-    authProviders: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>>;
-    plugins: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    adapters: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    tools: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    resources: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    prompts: z.ZodOptional<z.ZodArray<z.ZodType<import("../interfaces").Type<unknown>, z.ZodTypeDef, import("../interfaces").Type<unknown>>, "many">>;
-    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        consent: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            groupByApp: z.ZodDefault<z.ZodBoolean>;
+            showDescriptions: z.ZodDefault<z.ZodBoolean>;
+            allowSelectAll: z.ZodDefault<z.ZodBoolean>;
+            requireSelection: z.ZodDefault<z.ZodBoolean>;
+            customMessage: z.ZodOptional<z.ZodString>;
+            rememberConsent: z.ZodDefault<z.ZodBoolean>;
+            excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        refresh: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skewSeconds: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        incrementalAuth: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
+                anonymous: "anonymous";
+                "require-auth": "require-auth";
+            }>>;
+            allowSkip: z.ZodDefault<z.ZodBoolean>;
+            showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"remote">;
-        id: z.ZodOptional<z.ZodString>;
-        name: z.ZodString;
-        baseUrl: z.ZodString;
-        dcrEnabled: z.ZodOptional<z.ZodBoolean>;
-        clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
-            clientId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            clientId: string;
-        }, {
-            clientId: string;
-        }>], z.ZodUnknown>, z.ZodString>]>>;
-        mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
+        remote: z.ZodObject<{
+            provider: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            jwksUri: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            dcrEnabled: z.ZodDefault<z.ZodBoolean>;
+            authEndpoint: z.ZodOptional<z.ZodString>;
+            tokenEndpoint: z.ZodOptional<z.ZodString>;
+            registrationEndpoint: z.ZodOptional<z.ZodString>;
+            userInfoEndpoint: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        local: z.ZodOptional<z.ZodObject<{
+            signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            issuer: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"memory">;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"redis">;
+            config: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                password: z.ZodOptional<z.ZodString>;
+                db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>], "type">>;
+        sessionMode: z.ZodDefault<z.ZodEnum<{
+            stateful: "stateful";
+            stateless: "stateless";
         }>>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"local">;
-        id: z.ZodString;
-        name: z.ZodString;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }>]>>;
-    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
-}, z.ZodTypeAny, "passthrough">>;
+        allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        consent: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            groupByApp: z.ZodDefault<z.ZodBoolean>;
+            showDescriptions: z.ZodDefault<z.ZodBoolean>;
+            allowSelectAll: z.ZodDefault<z.ZodBoolean>;
+            requireSelection: z.ZodDefault<z.ZodBoolean>;
+            customMessage: z.ZodOptional<z.ZodString>;
+            rememberConsent: z.ZodDefault<z.ZodBoolean>;
+            excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        refresh: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skewSeconds: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        incrementalAuth: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
+                anonymous: "anonymous";
+                "require-auth": "require-auth";
+            }>>;
+            allowSkip: z.ZodDefault<z.ZodBoolean>;
+            showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>]>>;
+    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
+}, z.core.$loose>;
 /**
  * Declarative metadata describing what a remote encapsulated mcp app.
  */
@@ -506,367 +347,221 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
-    urlType: z.ZodEnum<["worker", "url"]>;
-    url: z.ZodString;
-    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-        type: z.ZodLiteral<"remote">;
-        id: z.ZodOptional<z.ZodString>;
-        name: z.ZodString;
-        baseUrl: z.ZodString;
-        dcrEnabled: z.ZodOptional<z.ZodBoolean>;
-        clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
-            clientId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            clientId: string;
-        }, {
-            clientId: string;
-        }>], z.ZodUnknown>, z.ZodString>]>>;
-        mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"local">;
-        id: z.ZodString;
-        name: z.ZodString;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }>]>>;
-    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    id: z.ZodOptional<z.ZodString>;
-    name: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    urlType: z.ZodEnum<["worker", "url"]>;
+    urlType: z.ZodEnum<{
+        url: "url";
+        worker: "worker";
+    }>;
     url: z.ZodString;
-    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-        type: z.ZodLiteral<"remote">;
-        id: z.ZodOptional<z.ZodString>;
-        name: z.ZodString;
-        baseUrl: z.ZodString;
-        dcrEnabled: z.ZodOptional<z.ZodBoolean>;
-        clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
-            clientId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            clientId: string;
-        }, {
-            clientId: string;
-        }>], z.ZodUnknown>, z.ZodString>]>>;
-        mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
+    auth: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        mode: z.ZodLiteral<"public">;
+        issuer: z.ZodOptional<z.ZodString>;
+        sessionTtl: z.ZodDefault<z.ZodNumber>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
         jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }>, z.ZodObject<{
+            keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+        }, z.core.$strip>>;
+        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"transparent">;
+        remote: z.ZodObject<{
+            provider: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            jwksUri: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            dcrEnabled: z.ZodDefault<z.ZodBoolean>;
+            authEndpoint: z.ZodOptional<z.ZodString>;
+            tokenEndpoint: z.ZodOptional<z.ZodString>;
+            registrationEndpoint: z.ZodOptional<z.ZodString>;
+            userInfoEndpoint: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        requiredScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        allowAnonymous: z.ZodDefault<z.ZodBoolean>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"local">;
-        id: z.ZodString;
-        name: z.ZodString;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
+        local: z.ZodOptional<z.ZodObject<{
+            signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            issuer: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"memory">;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"redis">;
+            config: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                password: z.ZodOptional<z.ZodString>;
+                db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>], "type">>;
+        sessionMode: z.ZodDefault<z.ZodEnum<{
+            stateful: "stateful";
+            stateless: "stateless";
         }>>;
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }>]>>;
-    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    id: z.ZodOptional<z.ZodString>;
-    name: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-    urlType: z.ZodEnum<["worker", "url"]>;
-    url: z.ZodString;
-    auth: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        consent: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            groupByApp: z.ZodDefault<z.ZodBoolean>;
+            showDescriptions: z.ZodDefault<z.ZodBoolean>;
+            allowSelectAll: z.ZodDefault<z.ZodBoolean>;
+            requireSelection: z.ZodDefault<z.ZodBoolean>;
+            customMessage: z.ZodOptional<z.ZodString>;
+            rememberConsent: z.ZodDefault<z.ZodBoolean>;
+            excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        refresh: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skewSeconds: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        incrementalAuth: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
+                anonymous: "anonymous";
+                "require-auth": "require-auth";
+            }>>;
+            allowSkip: z.ZodDefault<z.ZodBoolean>;
+            showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"remote">;
-        id: z.ZodOptional<z.ZodString>;
-        name: z.ZodString;
-        baseUrl: z.ZodString;
-        dcrEnabled: z.ZodOptional<z.ZodBoolean>;
-        clientId: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodFunction<z.ZodTuple<[z.ZodObject<{
-            clientId: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            clientId: string;
-        }, {
-            clientId: string;
-        }>], z.ZodUnknown>, z.ZodString>]>>;
-        mode: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"orchestrated">, z.ZodLiteral<"transparent">]>>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
-        }>>;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        authEndpoint: z.ZodOptional<z.ZodString>;
-        tokenEndpoint: z.ZodOptional<z.ZodString>;
-        registrationEndpoint: z.ZodOptional<z.ZodString>;
-        userInfoEndpoint: z.ZodOptional<z.ZodString>;
-        jwksUri: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }, {
-        type: "remote";
-        name: string;
-        baseUrl: string;
-        id?: string | undefined;
-        dcrEnabled?: boolean | undefined;
-        clientId?: string | ((args_0: {
-            clientId: string;
-        }, ...args: unknown[]) => string) | undefined;
-        mode?: "orchestrated" | "transparent" | undefined;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        authEndpoint?: string | undefined;
-        tokenEndpoint?: string | undefined;
-        registrationEndpoint?: string | undefined;
-        userInfoEndpoint?: string | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        jwksUri?: string | undefined;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"local">;
-        id: z.ZodString;
-        name: z.ZodString;
-        scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        grantTypes: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"authorization_code">, z.ZodLiteral<"refresh_token">]>, "many">>;
-        allowAnonymous: z.ZodOptional<z.ZodBoolean>;
-        consent: z.ZodOptional<z.ZodBoolean>;
-        jwks: z.ZodOptional<z.ZodObject<{
-            keys: z.ZodArray<z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, "many">;
-        }, "strip", z.ZodTypeAny, {
-            keys: import("../types").JWK[];
-        }, {
-            keys: import("../types").JWK[];
+        remote: z.ZodObject<{
+            provider: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            id: z.ZodOptional<z.ZodString>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            jwksUri: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            dcrEnabled: z.ZodDefault<z.ZodBoolean>;
+            authEndpoint: z.ZodOptional<z.ZodString>;
+            tokenEndpoint: z.ZodOptional<z.ZodString>;
+            registrationEndpoint: z.ZodOptional<z.ZodString>;
+            userInfoEndpoint: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        local: z.ZodOptional<z.ZodObject<{
+            signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
+            }, z.core.$strip>>;
+            issuer: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        tokenStorage: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"memory">;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"redis">;
+            config: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                password: z.ZodOptional<z.ZodString>;
+                db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>], "type">>;
+        sessionMode: z.ZodDefault<z.ZodEnum<{
+            stateful: "stateful";
+            stateless: "stateless";
         }>>;
-        signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, z.ZodTypeDef, import("../types").JWK>, z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }, {
-        type: "local";
-        id: string;
-        name: string;
-        allowAnonymous?: boolean | undefined;
-        consent?: boolean | undefined;
-        scopes?: string[] | undefined;
-        grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
-        jwks?: {
-            keys: import("../types").JWK[];
-        } | undefined;
-        signKey?: import("../types").JWK | Uint8Array<ArrayBuffer> | undefined;
-    }>]>>;
-    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
-}, z.ZodTypeAny, "passthrough">>;
+        allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
+        anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        publicAccess: z.ZodOptional<z.ZodObject<{
+            tools: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+            rateLimit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        consent: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            groupByApp: z.ZodDefault<z.ZodBoolean>;
+            showDescriptions: z.ZodDefault<z.ZodBoolean>;
+            allowSelectAll: z.ZodDefault<z.ZodBoolean>;
+            requireSelection: z.ZodDefault<z.ZodBoolean>;
+            customMessage: z.ZodOptional<z.ZodString>;
+            rememberConsent: z.ZodDefault<z.ZodBoolean>;
+            excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        refresh: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skewSeconds: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        expectedAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+        incrementalAuth: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            skippedAppBehavior: z.ZodDefault<z.ZodEnum<{
+                anonymous: "anonymous";
+                "require-auth": "require-auth";
+            }>>;
+            allowSkip: z.ZodDefault<z.ZodBoolean>;
+            showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        transport: z.ZodOptional<z.ZodObject<{
+            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
+            enableSseListener: z.ZodDefault<z.ZodBoolean>;
+            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
+            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
+            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>]>>;
+    standalone: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"includeInParent">, z.ZodBoolean]>>>;
+}, z.core.$loose>;
 export type AppMetadata = LocalAppMetadata | RemoteAppMetadata;