@frontmcp/sdk 1.0.3 → 1.1.0-beta.1

package/auth/flows/oauth.callback.flow.d.ts

@@ -10,78 +10,78 @@
  * Notes: This is a simple "demo" login callback. In production, this would integrate
  * with a real identity provider or user database.
  */
-import { FlowBase, FlowRunOptions } from '../../common';
-import { z } from 'zod';
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{}, z.core.$loose>;
-    response: z.ZodObject<{}, z.core.$loose>;
-    next: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
-}, z.core.$strip>;
-declare const stateSchema: z.ZodObject<{
-    pendingAuthId: z.ZodOptional<z.ZodString>;
-    email: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    clientId: z.ZodOptional<z.ZodString>;
-    redirectUri: z.ZodOptional<z.ZodString>;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    codeChallenge: z.ZodOptional<z.ZodString>;
-    originalState: z.ZodOptional<z.ZodString>;
-    resource: z.ZodOptional<z.ZodString>;
-    authorizationCode: z.ZodOptional<z.ZodString>;
-    userSub: z.ZodOptional<z.ZodString>;
-    isIncremental: z.ZodDefault<z.ZodBoolean>;
-    targetAppId: z.ZodOptional<z.ZodString>;
-    targetToolId: z.ZodOptional<z.ZodString>;
-    existingSessionId: z.ZodOptional<z.ZodString>;
-    existingAuthorizationId: z.ZodOptional<z.ZodString>;
-    isFederated: z.ZodDefault<z.ZodBoolean>;
-    selectedProviders: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    skippedProviders: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    consentEnabled: z.ZodDefault<z.ZodBoolean>;
-    selectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodUnion<readonly [z.ZodObject<{
-    kind: z.ZodLiteral<"redirect">;
-    status: z.ZodDefault<z.ZodType<301 | 302 | 303 | 307 | 308, unknown, z.core.$ZodTypeInternals<301 | 302 | 303 | 307 | 308, unknown>>>;
-    location: z.ZodString;
-    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
-    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        value: z.ZodString;
-        path: z.ZodDefault<z.ZodString>;
-        domain: z.ZodOptional<z.ZodString>;
-        httpOnly: z.ZodDefault<z.ZodBoolean>;
-        secure: z.ZodOptional<z.ZodBoolean>;
-        sameSite: z.ZodOptional<z.ZodEnum<{
+import { z } from '@frontmcp/lazy-zod';
+import { FlowBase, type FlowRunOptions } from '../../common';
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    response: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    next: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>>;
+}, import("zod/v4/core").$strip>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    pendingAuthId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    email: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    redirectUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    codeChallenge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    originalState: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    resource: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    authorizationCode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    userSub: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    isIncremental: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    targetAppId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    targetToolId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    existingSessionId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    existingAuthorizationId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    isFederated: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    selectedProviders: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    skippedProviders: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    consentEnabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    selectedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
+    kind: import("@frontmcp/lazy-zod").ZodLiteral<"redirect">;
+    status: import("@frontmcp/lazy-zod").ZodDefault<z.ZodType<301 | 302 | 303 | 307 | 308, unknown>>;
+    location: import("@frontmcp/lazy-zod").ZodString;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
+    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodString;
+        value: import("@frontmcp/lazy-zod").ZodString;
+        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
             lax: "lax";
             none: "none";
         }>>;
-        maxAge: z.ZodOptional<z.ZodNumber>;
-        expires: z.ZodOptional<z.ZodDate>;
-    }, z.core.$strip>>>>;
-}, z.core.$strip>, z.ZodObject<{
-    status: z.ZodNumber;
-    body: z.ZodString;
-    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
-    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        value: z.ZodString;
-        path: z.ZodDefault<z.ZodString>;
-        domain: z.ZodOptional<z.ZodString>;
-        httpOnly: z.ZodDefault<z.ZodBoolean>;
-        secure: z.ZodOptional<z.ZodBoolean>;
-        sameSite: z.ZodOptional<z.ZodEnum<{
+        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
+    }, import("zod/v4/core").$strip>>>>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    status: import("@frontmcp/lazy-zod").ZodNumber;
+    body: import("@frontmcp/lazy-zod").ZodString;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
+    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodString;
+        value: import("@frontmcp/lazy-zod").ZodString;
+        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
             lax: "lax";
             none: "none";
         }>>;
-        maxAge: z.ZodOptional<z.ZodNumber>;
-        expires: z.ZodOptional<z.ZodDate>;
-    }, z.core.$strip>>>>;
-    kind: z.ZodLiteral<"html">;
-    contentType: z.ZodDefault<z.ZodLiteral<"text/html; charset=utf-8">>;
-}, z.core.$strip>]>;
+        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
+    }, import("zod/v4/core").$strip>>>>;
+    kind: import("@frontmcp/lazy-zod").ZodLiteral<"html">;
+    contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodLiteral<"text/html; charset=utf-8">>;
+}, import("zod/v4/core").$strip>]>;
 declare const plan: {
     readonly pre: ["parseInput", "validatePendingAuth"];
     readonly execute: ["handleIncrementalAuth", "handleFederatedAuth", "createAuthorizationCode", "redirectToClient"];

package/auth/flows/oauth.callback.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.callback.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.callback.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEL,QAAQ,EAER,cAAc,EAMf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,QAAA,MAAM,WAAW;;;;iBAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBA4Bf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAgD,CAAC;AAEnE,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,iBAAiB,EACjB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAcvC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,MAAM,CAAgD;IAGxD,UAAU;IAsDV,mBAAmB;IAqHzB;;;;OAIG;IAEG,qBAAqB;IAyB3B;;;;;;OAMG;IAEG,mBAAmB;IAiInB,uBAAuB;IAmEvB,gBAAgB;IAqCtB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAqDxB"}
+{"version":3,"file":"oauth.callback.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.callback.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,EAEL,QAAQ,EAOR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAGtB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;gCA4Bf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAAgD,CAAC;AAEnE,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,iBAAiB,EACjB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAcvC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,MAAM,CAAgD;IAGxD,UAAU;IAsDV,mBAAmB;IAqHzB;;;;OAIG;IAEG,qBAAqB;IAyB3B;;;;;;OAMG;IAEG,mBAAmB;IAiInB,uBAAuB;IAmEvB,gBAAgB;IAqCtB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,eAAe;CAqDxB"}

package/auth/flows/oauth.provider-callback.flow.d.ts

@@ -17,66 +17,66 @@
  * 6. If more providers in queue, redirect to next
  * 7. If all providers done, issue FrontMCP JWT
  */
-import { FlowBase, FlowRunOptions } from '../../common';
-import { z } from 'zod';
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{}, z.core.$loose>;
-    response: z.ZodObject<{}, z.core.$loose>;
-    next: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
-}, z.core.$strip>;
-declare const stateSchema: z.ZodObject<{
-    providerId: z.ZodOptional<z.ZodString>;
-    code: z.ZodOptional<z.ZodString>;
-    error: z.ZodOptional<z.ZodString>;
-    errorDescription: z.ZodOptional<z.ZodString>;
-    providerState: z.ZodOptional<z.ZodString>;
-    federatedSessionId: z.ZodOptional<z.ZodString>;
-    federatedSession: z.ZodOptional<z.ZodUnknown>;
-    providerTokens: z.ZodOptional<z.ZodUnknown>;
-    providerUserInfo: z.ZodOptional<z.ZodUnknown>;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodUnion<readonly [z.ZodObject<{
-    kind: z.ZodLiteral<"redirect">;
-    status: z.ZodDefault<z.ZodType<301 | 302 | 303 | 307 | 308, unknown, z.core.$ZodTypeInternals<301 | 302 | 303 | 307 | 308, unknown>>>;
-    location: z.ZodString;
-    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
-    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        value: z.ZodString;
-        path: z.ZodDefault<z.ZodString>;
-        domain: z.ZodOptional<z.ZodString>;
-        httpOnly: z.ZodDefault<z.ZodBoolean>;
-        secure: z.ZodOptional<z.ZodBoolean>;
-        sameSite: z.ZodOptional<z.ZodEnum<{
+import { z } from '@frontmcp/lazy-zod';
+import { FlowBase, type FlowRunOptions } from '../../common';
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    response: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    next: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>>;
+}, import("zod/v4/core").$strip>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    providerId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    code: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    error: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    errorDescription: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    providerState: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    federatedSessionId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    federatedSession: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
+    providerTokens: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
+    providerUserInfo: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
+    kind: import("@frontmcp/lazy-zod").ZodLiteral<"redirect">;
+    status: import("@frontmcp/lazy-zod").ZodDefault<z.ZodType<301 | 302 | 303 | 307 | 308, unknown>>;
+    location: import("@frontmcp/lazy-zod").ZodString;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
+    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodString;
+        value: import("@frontmcp/lazy-zod").ZodString;
+        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
             lax: "lax";
             none: "none";
         }>>;
-        maxAge: z.ZodOptional<z.ZodNumber>;
-        expires: z.ZodOptional<z.ZodDate>;
-    }, z.core.$strip>>>>;
-}, z.core.$strip>, z.ZodObject<{
-    status: z.ZodNumber;
-    body: z.ZodString;
-    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
-    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        value: z.ZodString;
-        path: z.ZodDefault<z.ZodString>;
-        domain: z.ZodOptional<z.ZodString>;
-        httpOnly: z.ZodDefault<z.ZodBoolean>;
-        secure: z.ZodOptional<z.ZodBoolean>;
-        sameSite: z.ZodOptional<z.ZodEnum<{
+        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
+    }, import("zod/v4/core").$strip>>>>;
+}, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    status: import("@frontmcp/lazy-zod").ZodNumber;
+    body: import("@frontmcp/lazy-zod").ZodString;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
+    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodString;
+        value: import("@frontmcp/lazy-zod").ZodString;
+        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
             lax: "lax";
             none: "none";
         }>>;
-        maxAge: z.ZodOptional<z.ZodNumber>;
-        expires: z.ZodOptional<z.ZodDate>;
-    }, z.core.$strip>>>>;
-    kind: z.ZodLiteral<"html">;
-    contentType: z.ZodDefault<z.ZodLiteral<"text/html; charset=utf-8">>;
-}, z.core.$strip>]>;
+        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
+    }, import("zod/v4/core").$strip>>>>;
+    kind: import("@frontmcp/lazy-zod").ZodLiteral<"html">;
+    contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodLiteral<"text/html; charset=utf-8">>;
+}, import("zod/v4/core").$strip>]>;
 declare const plan: {
     readonly pre: ["parseInput", "loadFederatedSession", "validateProviderCallback"];
     readonly execute: ["exchangeProviderCode", "storeProviderTokens", "handleNextProviderOrComplete"];

package/auth/flows/oauth.provider-callback.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.provider-callback.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.provider-callback.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAEL,QAAQ,EAER,cAAc,EAOf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,QAAA,MAAM,WAAW;;;;iBAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;iBAcf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAgD,CAAC;AAEnE,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,yBAAyB,EAAE,cAAc,CACvC,yBAAyB,EACzB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,yBAAkC,CAAC;AAchD,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAwD;IAEtE;;;OAGG;IACH,OAAO,CAAC,YAAY;IASd,UAAU;IA0BV,oBAAoB;IAkEpB,wBAAwB;IAmDxB,oBAAoB;IA0EpB,mBAAmB;IAkDnB,4BAA4B;IAkElC;;OAEG;YACW,qBAAqB;IA8CnC;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAqDvB,OAAO,CAAC,kBAAkB;CAO3B"}
+{"version":3,"file":"oauth.provider-callback.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.provider-callback.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,EAEL,QAAQ,EAQR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAItB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;;;;;;;;;gCAcf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAAgD,CAAC;AAEnE,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,yBAAyB,EAAE,cAAc,CACvC,yBAAyB,EACzB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,yBAAkC,CAAC;AAchD,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAwD;IAEtE;;;OAGG;IACH,OAAO,CAAC,YAAY;IASd,UAAU;IA0BV,oBAAoB;IAkEpB,wBAAwB;IAmDxB,oBAAoB;IA0EpB,mBAAmB;IAkDnB,4BAA4B;IAkElC;;OAEG;YACW,qBAAqB;IA8CnC;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAqDvB,OAAO,CAAC,kBAAkB;CAO3B"}

package/auth/flows/oauth.register.flow.d.ts

@@ -5,20 +5,7 @@
  *
  * Purpose: Let clients register programmatically (redirect URIs, grant types, etc.).
  */
-/**
- * Quick checklist (security & correctness)
- * - PKCE (S256) required for public clients (and basically for all).
- * - Use authorization code grant only (no implicit/hybrid).
- * - Rotate refresh tokens and bind them to client + user + scopes.
- * - Prefer private_key_jwt or mTLS for confidential clients.
- * - PAR + JAR recommended for higher security.
- * - Consider DPoP (proof-of-possession) to reduce token replay.
- * - Keep codes very short-lived (e.g., ≤60 s) and single-use.
- * - Publish discovery and JWKS, rotate keys safely.
- * - Decide JWT vs opaque access tokens; provide introspection if opaque.
- */
-import { FlowBase, FlowRunOptions } from '../../common';
-import { z } from 'zod';
+import { FlowBase, type FlowRunOptions } from '../../common';
 /** Simple in-memory registry (dev only) */
 type RegisteredClient = {
     client_id: string;
@@ -37,56 +24,56 @@ export declare const DevClientRegistry: {
     get(client_id: string): RegisteredClient | undefined;
     has(client_id: string): boolean;
 };
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{}, z.core.$loose>;
-    response: z.ZodObject<{}, z.core.$loose>;
-    next: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodObject<{
-    kind: z.ZodLiteral<"json">;
-    status: z.ZodNumber;
-    body: z.ZodUnion<readonly [z.ZodObject<{}, z.core.$loose>, z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>;
-    contentType: z.ZodDefault<z.ZodString>;
-    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
-    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        value: z.ZodString;
-        path: z.ZodDefault<z.ZodString>;
-        domain: z.ZodOptional<z.ZodString>;
-        httpOnly: z.ZodDefault<z.ZodBoolean>;
-        secure: z.ZodOptional<z.ZodBoolean>;
-        sameSite: z.ZodOptional<z.ZodEnum<{
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    response: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    next: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>>;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    kind: import("@frontmcp/lazy-zod").ZodLiteral<"json">;
+    status: import("@frontmcp/lazy-zod").ZodNumber;
+    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodAny>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodAny>]>;
+    contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
+    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodString;
+        value: import("@frontmcp/lazy-zod").ZodString;
+        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
             lax: "lax";
             none: "none";
         }>>;
-        maxAge: z.ZodOptional<z.ZodNumber>;
-        expires: z.ZodOptional<z.ZodDate>;
-    }, z.core.$strip>>>>;
-}, z.core.$strip>;
-declare const stateSchema: z.ZodObject<{
-    body: z.ZodObject<{
-        redirect_uris: z.ZodArray<z.ZodString>;
-        token_endpoint_auth_method: z.ZodDefault<z.ZodEnum<{
+        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
+    }, import("zod/v4/core").$strip>>>>;
+}, import("zod/v4/core").$strip>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    body: import("@frontmcp/lazy-zod").ZodObject<{
+        redirect_uris: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+        token_endpoint_auth_method: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
             none: "none";
             client_secret_basic: "client_secret_basic";
             client_secret_post: "client_secret_post";
             private_key_jwt: "private_key_jwt";
             tls_client_auth: "tls_client_auth";
         }>>;
-        grant_types: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        grant_types: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodEnum<{
             authorization_code: "authorization_code";
             refresh_token: "refresh_token";
             "urn:ietf:params:oauth:grant-type:device_code": "urn:ietf:params:oauth:grant-type:device_code";
         }>>>;
-        response_types: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        response_types: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodEnum<{
             code: "code";
         }>>>;
-        client_name: z.ZodOptional<z.ZodString>;
-        scope: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>;
-    isDev: z.ZodBoolean;
-}, z.core.$strip>;
+        client_name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$loose>;
+    isDev: import("@frontmcp/lazy-zod").ZodBoolean;
+}, import("zod/v4/core").$strip>;
 declare const plan: {
     readonly pre: ["parseInput", "validateInput"];
     readonly execute: ["registerClient", "respondRegistration"];

package/auth/flows/oauth.register.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.register.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.register.flow.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;GAWG;AAEH,OAAO,EAEL,QAAQ,EAER,cAAc,EAKf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,2CAA2C;AAC3C,KAAK,gBAAgB,GAAG;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,EACtB,MAAM,GACN,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAIF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB;mBACb,MAAM;mBAGN,MAAM;CAGtB,CAAC;AAEF,QAAA,MAAM,WAAW;;;;iBAAkB,CAAC;AACpC,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;iBAAiB,CAAC;AAkBpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBAGf,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,iBAAiB,EACjB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAcvC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,UAAU,CAAC,CAAmB;IAGhC,UAAU;IAaV,aAAa;IAwEb,cAAc;IA6Bd,mBAAmB;IAqBnB,cAAc;CAGrB"}
+{"version":3,"file":"oauth.register.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.register.flow.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkBH,OAAO,EAEL,QAAQ,EAMR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,2CAA2C;AAC3C,KAAK,gBAAgB,GAAG;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,EACtB,MAAM,GACN,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAIF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB;mBACb,MAAM;mBAGN,MAAM;CAGtB,CAAC;AAEF,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AACpC,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAkBpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,gBAAgB,EAAE,cAAc,CAC9B,iBAAiB,EACjB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,gBAAyB,CAAC;AAcvC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,UAAU,CAAC,CAAmB;IAGhC,UAAU;IAaV,aAAa;IAwEb,cAAc;IA6Bd,mBAAmB;IAqBnB,cAAc;CAGrB"}

package/auth/flows/oauth.token.flow.d.ts

@@ -28,94 +28,67 @@
  * - Publish discovery and JWKS, rotate keys safely.
  * - Decide JWT vs opaque access tokens; provide introspection if opaque.
  */
-/**
- *
- * OAuth 2.0 Device Authorization Grant ("device code flow")
- * Who does what (at a glance)
- *
- * Device/TV/CLI (no browser)
- * Calls POST /oauth/device_authorization, shows the user a code + URL, and polls POST /oauth/token.
- *
- * User (on phone/laptop browser)
- * Visits the given verification_uri and authenticates using your normal OAuth login (whatever you already have). No new UI required beyond two tiny endpoints.
- *
- * Auth Server (you)
- * Stores the device transaction and, after the user authenticates, marks it as approved so the device's /oauth/token polling succeeds.
- *
- * Endpoints you need (only two "new" ones)
- *
- * POST /oauth/device_authorization ✅ (device calls)
- *
- * POST /oauth/token with grant urn:ietf:params:oauth:grant-type:device_code ✅ (device polls)
- *
- * GET /activate ➜ "UI handler" (user lands here from verification_uri — this just redirects into your existing /oauth/authorize)
- *
- * GET /activate/callback ➜ "UI handler" (your existing flow returns here after the user logs in; you flip the device record to approved and show a basic "All set" page)
- *
- * That's it. No pages with complex consent screens are required; reuse your normal /oauth/authorize
- */
-import { FlowBase, FlowRunOptions } from '../../common';
-import { z } from 'zod';
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{}, z.core.$loose>;
-    response: z.ZodObject<{}, z.core.$loose>;
-    next: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
-}, z.core.$strip>;
-declare const stateSchema: z.ZodObject<{
-    body: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        grant_type: z.ZodLiteral<"anonymous">;
-        client_id: z.ZodString;
-        resource: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        grant_type: z.ZodLiteral<"authorization_code">;
-        code: z.ZodString;
-        redirect_uri: z.ZodString;
-        client_id: z.ZodString;
-        code_verifier: z.ZodString;
-    }, z.core.$strip>, z.ZodObject<{
-        grant_type: z.ZodLiteral<"refresh_token">;
-        refresh_token: z.ZodString;
-        client_id: z.ZodString;
-    }, z.core.$strip>], "grant_type">>;
-    grantType: z.ZodOptional<z.ZodEnum<{
+import { FlowBase, type FlowRunOptions } from '../../common';
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    response: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
+    next: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>>;
+}, import("zod/v4/core").$strip>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    body: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDiscriminatedUnion<[import("@frontmcp/lazy-zod").ZodObject<{
+        grant_type: import("@frontmcp/lazy-zod").ZodLiteral<"anonymous">;
+        client_id: import("@frontmcp/lazy-zod").ZodString;
+        resource: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        grant_type: import("@frontmcp/lazy-zod").ZodLiteral<"authorization_code">;
+        code: import("@frontmcp/lazy-zod").ZodString;
+        redirect_uri: import("@frontmcp/lazy-zod").ZodString;
+        client_id: import("@frontmcp/lazy-zod").ZodString;
+        code_verifier: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        grant_type: import("@frontmcp/lazy-zod").ZodLiteral<"refresh_token">;
+        refresh_token: import("@frontmcp/lazy-zod").ZodString;
+        client_id: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>], "grant_type">>;
+    grantType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
         anonymous: "anonymous";
         authorization_code: "authorization_code";
         refresh_token: "refresh_token";
     }>>;
-    isDefaultAuthProvider: z.ZodBoolean;
-    isOrchestrated: z.ZodBoolean;
-    tokenResponse: z.ZodOptional<z.ZodObject<{
-        access_token: z.ZodString;
-        token_type: z.ZodLiteral<"Bearer">;
-        expires_in: z.ZodNumber;
-        refresh_token: z.ZodOptional<z.ZodString>;
-        scope: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    error: z.ZodOptional<z.ZodString>;
-    errorDescription: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodObject<{
-    kind: z.ZodLiteral<"json">;
-    status: z.ZodNumber;
-    body: z.ZodUnion<readonly [z.ZodObject<{}, z.core.$loose>, z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>;
-    contentType: z.ZodDefault<z.ZodString>;
-    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
-    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        value: z.ZodString;
-        path: z.ZodDefault<z.ZodString>;
-        domain: z.ZodOptional<z.ZodString>;
-        httpOnly: z.ZodDefault<z.ZodBoolean>;
-        secure: z.ZodOptional<z.ZodBoolean>;
-        sameSite: z.ZodOptional<z.ZodEnum<{
+    isDefaultAuthProvider: import("@frontmcp/lazy-zod").ZodBoolean;
+    isOrchestrated: import("@frontmcp/lazy-zod").ZodBoolean;
+    tokenResponse: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        access_token: import("@frontmcp/lazy-zod").ZodString;
+        token_type: import("@frontmcp/lazy-zod").ZodLiteral<"Bearer">;
+        expires_in: import("@frontmcp/lazy-zod").ZodNumber;
+        refresh_token: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    error: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    errorDescription: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    kind: import("@frontmcp/lazy-zod").ZodLiteral<"json">;
+    status: import("@frontmcp/lazy-zod").ZodNumber;
+    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodAny>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodAny>]>;
+    contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
+    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        name: import("@frontmcp/lazy-zod").ZodString;
+        value: import("@frontmcp/lazy-zod").ZodString;
+        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
             lax: "lax";
             none: "none";
         }>>;
-        maxAge: z.ZodOptional<z.ZodNumber>;
-        expires: z.ZodOptional<z.ZodDate>;
-    }, z.core.$strip>>>>;
-}, z.core.$strip>;
+        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
+    }, import("zod/v4/core").$strip>>>>;
+}, import("zod/v4/core").$strip>;
 declare const plan: {
     readonly pre: ["parseInput", "validateInput"];
     readonly execute: ["handleAuthorizationCodeGrant", "handleRefreshTokenGrant", "handleAnonymousGrant", "buildTokenResponse"];

package/auth/flows/oauth.token.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.token.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.token.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH;;;;;;;;GAQG;AACH;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAEL,QAAQ,EAER,cAAc,EAKf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,WAAW;;;;iBAAkB,CAAC;AA2CpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;iBAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,aAAa,EAAE,cAAc,CAC3B,cAAc,EACd,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,aAAsB,CAAC;AAcpC,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC/D,OAAO,CAAC,MAAM,CAA6C;IAGrD,UAAU;IA4BV,aAAa;IAmBb,4BAA4B;IAiD5B,uBAAuB;IAiDvB,oBAAoB;IAapB,kBAAkB;IAqBlB,cAAc;CAGrB"}
+{"version":3,"file":"oauth.token.flow.d.ts","sourceRoot":"","sources":["../../../src/auth/flows/oauth.token.flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH;;;;;;;;GAQG;AACH;;;;;;;;;;;GAWG;AAgCH,OAAO,EAGL,QAAQ,EAOR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAGtB,QAAA,MAAM,WAAW;;;;gCAAkB,CAAC;AA2CpC,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAkBf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;gCAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,aAAa,EAAE,cAAc,CAC3B,cAAc,EACd,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,aAAsB,CAAC;AAcpC,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC/D,OAAO,CAAC,MAAM,CAA6C;IAGrD,UAAU;IA4BV,aAAa;IAmBb,4BAA4B;IAiD5B,uBAAuB;IAiDvB,oBAAoB;IAkCpB,kBAAkB;IAqBlB,cAAc;CAGrB"}