@kya-os/contracts 1.5.3-canary.16 → 1.5.3-canary.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (71) hide show
  1. package/.turbo/turbo-build.log +17 -0
  2. package/.turbo/turbo-test$colon$coverage.log +85 -0
  3. package/.turbo/turbo-test.log +32 -0
  4. package/coverage/coverage-final.json +38 -0
  5. package/dist/consent/schemas.d.ts +18 -0
  6. package/dist/consent/schemas.js +10 -0
  7. package/dist/dashboard-config/schemas.d.ts +1424 -220
  8. package/dist/tool-protection/index.d.ts +418 -8
  9. package/dist/tool-protection/index.js +61 -2
  10. package/package.json +35 -129
  11. package/schemas/cli/register-output/v1.0.0.json +69 -0
  12. package/schemas/identity/v1.0.0.json +46 -0
  13. package/schemas/proof/v1.0.0.json +80 -0
  14. package/schemas/registry/receipt-v1.0.0.json +60 -0
  15. package/schemas/verifier/verify-page/v1.0.0.json +94 -0
  16. package/schemas/well-known/agent/v1.0.0.json +67 -0
  17. package/schemas/well-known/did/v1.0.0.json +174 -0
  18. package/scripts/emit-schemas.js +11 -0
  19. package/src/agentshield-api/admin-schemas.ts +31 -0
  20. package/src/agentshield-api/admin-types.ts +47 -0
  21. package/src/agentshield-api/endpoints.ts +60 -0
  22. package/src/agentshield-api/index.ts +70 -0
  23. package/src/agentshield-api/schemas.ts +304 -0
  24. package/src/agentshield-api/types.ts +317 -0
  25. package/src/audit/index.ts +128 -0
  26. package/src/cli.ts +156 -0
  27. package/src/config/base.ts +107 -0
  28. package/src/config/builder.ts +97 -0
  29. package/src/config/delegation.ts +232 -0
  30. package/src/config/identity.ts +252 -0
  31. package/src/config/index.ts +78 -0
  32. package/src/config/proofing.ts +138 -0
  33. package/src/config/tool-context.ts +41 -0
  34. package/src/config/tool-protection.ts +174 -0
  35. package/src/consent/index.ts +32 -0
  36. package/src/consent/schemas.ts +334 -0
  37. package/src/consent/types.ts +199 -0
  38. package/src/dashboard-config/default-config.json +86 -0
  39. package/src/dashboard-config/default-config.ts +266 -0
  40. package/src/dashboard-config/index.ts +48 -0
  41. package/src/dashboard-config/schemas.ts +286 -0
  42. package/src/dashboard-config/types.ts +404 -0
  43. package/src/delegation/constraints.ts +267 -0
  44. package/src/delegation/index.ts +8 -0
  45. package/src/delegation/schemas.ts +595 -0
  46. package/src/did/index.ts +9 -0
  47. package/src/did/resolve-contract.ts +255 -0
  48. package/src/did/schemas.ts +190 -0
  49. package/src/did/types.ts +224 -0
  50. package/src/env/constants.ts +70 -0
  51. package/src/env/index.ts +5 -0
  52. package/src/handshake.ts +125 -0
  53. package/src/index.ts +45 -0
  54. package/src/proof/index.ts +31 -0
  55. package/src/proof/proof-record.ts +163 -0
  56. package/src/proof/signing-spec.ts +146 -0
  57. package/src/proof.ts +99 -0
  58. package/src/registry.ts +146 -0
  59. package/src/runtime/errors.ts +153 -0
  60. package/src/runtime/headers.ts +136 -0
  61. package/src/runtime/index.ts +6 -0
  62. package/src/test.ts +143 -0
  63. package/src/tlkrc/index.ts +5 -0
  64. package/src/tlkrc/rotation.ts +153 -0
  65. package/src/tool-protection/index.ts +343 -0
  66. package/src/utils/validation.ts +93 -0
  67. package/src/vc/index.ts +8 -0
  68. package/src/vc/schemas.ts +277 -0
  69. package/src/vc/statuslist.ts +279 -0
  70. package/src/verifier.ts +92 -0
  71. package/src/well-known/index.ts +237 -0
package/dist/dashboard-config/schemas.d.ts CHANGED
@@ -121,6 +121,12 @@ export declare const delegationConfigSchema: z.ZodObject<{
121
121
  requireAuthForUnknown?: boolean | undefined;
122
122
  }>;
123
123
  }, "strip", z.ZodTypeAny, {
124
+ authorization: {
125
+ authorizationUrl?: string | undefined;
126
+ minReputationScore?: number | undefined;
127
+ resumeTokenTtl?: number | undefined;
128
+ requireAuthForUnknown?: boolean | undefined;
129
+ };
124
130
  enabled: boolean;
125
131
  enforceStrictly: boolean;
126
132
  verifier: {
@@ -128,13 +134,13 @@ export declare const delegationConfigSchema: z.ZodObject<{
128
134
  apiUrl?: string | undefined;
129
135
  cacheTtl?: number | undefined;
130
136
  };
137
+ }, {
131
138
  authorization: {
132
139
  authorizationUrl?: string | undefined;
133
140
  minReputationScore?: number | undefined;
134
141
  resumeTokenTtl?: number | undefined;
135
142
  requireAuthForUnknown?: boolean | undefined;
136
143
  };
137
- }, {
138
144
  enabled: boolean;
139
145
  enforceStrictly: boolean;
140
146
  verifier: {
@@ -142,12 +148,6 @@ export declare const delegationConfigSchema: z.ZodObject<{
142
148
  apiUrl?: string | undefined;
143
149
  cacheTtl?: number | undefined;
144
150
  };
145
- authorization: {
146
- authorizationUrl?: string | undefined;
147
- minReputationScore?: number | undefined;
148
- resumeTokenTtl?: number | undefined;
149
- requireAuthForUnknown?: boolean | undefined;
150
- };
151
151
  }>;
152
152
  /**
153
153
  * Tool protection configuration schema
@@ -169,16 +169,109 @@ export declare const toolProtectionConfigSchema: z.ZodObject<{
169
169
  requiredScopes: z.ZodArray<z.ZodString, "many">;
170
170
  riskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
171
171
  oauthProvider: z.ZodOptional<z.ZodString>;
172
+ authorization: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
173
+ type: z.ZodLiteral<"oauth">;
174
+ provider: z.ZodString;
175
+ requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
176
+ }, "strip", z.ZodTypeAny, {
177
+ type: "oauth";
178
+ provider: string;
179
+ requiredScopes?: string[] | undefined;
180
+ }, {
181
+ type: "oauth";
182
+ provider: string;
183
+ requiredScopes?: string[] | undefined;
184
+ }>, z.ZodObject<{
185
+ type: z.ZodLiteral<"mdl">;
186
+ issuer: z.ZodString;
187
+ credentialType: z.ZodOptional<z.ZodString>;
188
+ }, "strip", z.ZodTypeAny, {
189
+ type: "mdl";
190
+ issuer: string;
191
+ credentialType?: string | undefined;
192
+ }, {
193
+ type: "mdl";
194
+ issuer: string;
195
+ credentialType?: string | undefined;
196
+ }>, z.ZodObject<{
197
+ type: z.ZodLiteral<"idv">;
198
+ provider: z.ZodString;
199
+ verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
200
+ }, "strip", z.ZodTypeAny, {
201
+ type: "idv";
202
+ provider: string;
203
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
204
+ }, {
205
+ type: "idv";
206
+ provider: string;
207
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
208
+ }>, z.ZodObject<{
209
+ type: z.ZodLiteral<"credential">;
210
+ credentialType: z.ZodString;
211
+ issuer: z.ZodOptional<z.ZodString>;
212
+ }, "strip", z.ZodTypeAny, {
213
+ type: "credential";
214
+ credentialType: string;
215
+ issuer?: string | undefined;
216
+ }, {
217
+ type: "credential";
218
+ credentialType: string;
219
+ issuer?: string | undefined;
220
+ }>, z.ZodObject<{
221
+ type: z.ZodLiteral<"none">;
222
+ }, "strip", z.ZodTypeAny, {
223
+ type: "none";
224
+ }, {
225
+ type: "none";
226
+ }>]>>;
172
227
  }, "strip", z.ZodTypeAny, {
173
- requiresDelegation: boolean;
174
228
  requiredScopes: string[];
229
+ requiresDelegation: boolean;
175
230
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
176
231
  oauthProvider?: string | undefined;
232
+ authorization?: {
233
+ type: "oauth";
234
+ provider: string;
235
+ requiredScopes?: string[] | undefined;
236
+ } | {
237
+ type: "mdl";
238
+ issuer: string;
239
+ credentialType?: string | undefined;
240
+ } | {
241
+ type: "idv";
242
+ provider: string;
243
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
244
+ } | {
245
+ type: "credential";
246
+ credentialType: string;
247
+ issuer?: string | undefined;
248
+ } | {
249
+ type: "none";
250
+ } | undefined;
177
251
  }, {
178
- requiresDelegation: boolean;
179
252
  requiredScopes: string[];
253
+ requiresDelegation: boolean;
180
254
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
181
255
  oauthProvider?: string | undefined;
256
+ authorization?: {
257
+ type: "oauth";
258
+ provider: string;
259
+ requiredScopes?: string[] | undefined;
260
+ } | {
261
+ type: "mdl";
262
+ issuer: string;
263
+ credentialType?: string | undefined;
264
+ } | {
265
+ type: "idv";
266
+ provider: string;
267
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
268
+ } | {
269
+ type: "credential";
270
+ credentialType: string;
271
+ issuer?: string | undefined;
272
+ } | {
273
+ type: "none";
274
+ } | undefined;
182
275
  }>>>;
183
276
  }, "strip", z.ZodTypeAny, {
184
277
  source: "agentshield" | "inline" | "file";
@@ -187,10 +280,29 @@ export declare const toolProtectionConfigSchema: z.ZodObject<{
187
280
  cacheTtl: number;
188
281
  } | undefined;
189
282
  fallback?: Record<string, {
190
- requiresDelegation: boolean;
191
283
  requiredScopes: string[];
284
+ requiresDelegation: boolean;
192
285
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
193
286
  oauthProvider?: string | undefined;
287
+ authorization?: {
288
+ type: "oauth";
289
+ provider: string;
290
+ requiredScopes?: string[] | undefined;
291
+ } | {
292
+ type: "mdl";
293
+ issuer: string;
294
+ credentialType?: string | undefined;
295
+ } | {
296
+ type: "idv";
297
+ provider: string;
298
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
299
+ } | {
300
+ type: "credential";
301
+ credentialType: string;
302
+ issuer?: string | undefined;
303
+ } | {
304
+ type: "none";
305
+ } | undefined;
194
306
  }> | undefined;
195
307
  }, {
196
308
  source: "agentshield" | "inline" | "file";
@@ -199,10 +311,29 @@ export declare const toolProtectionConfigSchema: z.ZodObject<{
199
311
  cacheTtl: number;
200
312
  } | undefined;
201
313
  fallback?: Record<string, {
202
- requiresDelegation: boolean;
203
314
  requiredScopes: string[];
315
+ requiresDelegation: boolean;
204
316
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
205
317
  oauthProvider?: string | undefined;
318
+ authorization?: {
319
+ type: "oauth";
320
+ provider: string;
321
+ requiredScopes?: string[] | undefined;
322
+ } | {
323
+ type: "mdl";
324
+ issuer: string;
325
+ credentialType?: string | undefined;
326
+ } | {
327
+ type: "idv";
328
+ provider: string;
329
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
330
+ } | {
331
+ type: "credential";
332
+ credentialType: string;
333
+ issuer?: string | undefined;
334
+ } | {
335
+ type: "none";
336
+ } | undefined;
206
337
  }> | undefined;
207
338
  }>;
208
339
  /**
@@ -843,6 +974,12 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
843
974
  requireAuthForUnknown?: boolean | undefined;
844
975
  }>;
845
976
  }, "strip", z.ZodTypeAny, {
977
+ authorization: {
978
+ authorizationUrl?: string | undefined;
979
+ minReputationScore?: number | undefined;
980
+ resumeTokenTtl?: number | undefined;
981
+ requireAuthForUnknown?: boolean | undefined;
982
+ };
846
983
  enabled: boolean;
847
984
  enforceStrictly: boolean;
848
985
  verifier: {
@@ -850,13 +987,13 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
850
987
  apiUrl?: string | undefined;
851
988
  cacheTtl?: number | undefined;
852
989
  };
990
+ }, {
853
991
  authorization: {
854
992
  authorizationUrl?: string | undefined;
855
993
  minReputationScore?: number | undefined;
856
994
  resumeTokenTtl?: number | undefined;
857
995
  requireAuthForUnknown?: boolean | undefined;
858
996
  };
859
- }, {
860
997
  enabled: boolean;
861
998
  enforceStrictly: boolean;
862
999
  verifier: {
@@ -864,12 +1001,6 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
864
1001
  apiUrl?: string | undefined;
865
1002
  cacheTtl?: number | undefined;
866
1003
  };
867
- authorization: {
868
- authorizationUrl?: string | undefined;
869
- minReputationScore?: number | undefined;
870
- resumeTokenTtl?: number | undefined;
871
- requireAuthForUnknown?: boolean | undefined;
872
- };
873
1004
  }>;
874
1005
  toolProtection: z.ZodObject<{
875
1006
  source: z.ZodEnum<["agentshield", "inline", "file"]>;
@@ -888,16 +1019,109 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
888
1019
  requiredScopes: z.ZodArray<z.ZodString, "many">;
889
1020
  riskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
890
1021
  oauthProvider: z.ZodOptional<z.ZodString>;
1022
+ authorization: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
1023
+ type: z.ZodLiteral<"oauth">;
1024
+ provider: z.ZodString;
1025
+ requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1026
+ }, "strip", z.ZodTypeAny, {
1027
+ type: "oauth";
1028
+ provider: string;
1029
+ requiredScopes?: string[] | undefined;
1030
+ }, {
1031
+ type: "oauth";
1032
+ provider: string;
1033
+ requiredScopes?: string[] | undefined;
1034
+ }>, z.ZodObject<{
1035
+ type: z.ZodLiteral<"mdl">;
1036
+ issuer: z.ZodString;
1037
+ credentialType: z.ZodOptional<z.ZodString>;
1038
+ }, "strip", z.ZodTypeAny, {
1039
+ type: "mdl";
1040
+ issuer: string;
1041
+ credentialType?: string | undefined;
1042
+ }, {
1043
+ type: "mdl";
1044
+ issuer: string;
1045
+ credentialType?: string | undefined;
1046
+ }>, z.ZodObject<{
1047
+ type: z.ZodLiteral<"idv">;
1048
+ provider: z.ZodString;
1049
+ verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
1050
+ }, "strip", z.ZodTypeAny, {
1051
+ type: "idv";
1052
+ provider: string;
1053
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1054
+ }, {
1055
+ type: "idv";
1056
+ provider: string;
1057
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1058
+ }>, z.ZodObject<{
1059
+ type: z.ZodLiteral<"credential">;
1060
+ credentialType: z.ZodString;
1061
+ issuer: z.ZodOptional<z.ZodString>;
1062
+ }, "strip", z.ZodTypeAny, {
1063
+ type: "credential";
1064
+ credentialType: string;
1065
+ issuer?: string | undefined;
1066
+ }, {
1067
+ type: "credential";
1068
+ credentialType: string;
1069
+ issuer?: string | undefined;
1070
+ }>, z.ZodObject<{
1071
+ type: z.ZodLiteral<"none">;
1072
+ }, "strip", z.ZodTypeAny, {
1073
+ type: "none";
1074
+ }, {
1075
+ type: "none";
1076
+ }>]>>;
891
1077
  }, "strip", z.ZodTypeAny, {
892
- requiresDelegation: boolean;
893
1078
  requiredScopes: string[];
1079
+ requiresDelegation: boolean;
894
1080
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
895
1081
  oauthProvider?: string | undefined;
1082
+ authorization?: {
1083
+ type: "oauth";
1084
+ provider: string;
1085
+ requiredScopes?: string[] | undefined;
1086
+ } | {
1087
+ type: "mdl";
1088
+ issuer: string;
1089
+ credentialType?: string | undefined;
1090
+ } | {
1091
+ type: "idv";
1092
+ provider: string;
1093
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1094
+ } | {
1095
+ type: "credential";
1096
+ credentialType: string;
1097
+ issuer?: string | undefined;
1098
+ } | {
1099
+ type: "none";
1100
+ } | undefined;
896
1101
  }, {
897
- requiresDelegation: boolean;
898
1102
  requiredScopes: string[];
1103
+ requiresDelegation: boolean;
899
1104
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
900
1105
  oauthProvider?: string | undefined;
1106
+ authorization?: {
1107
+ type: "oauth";
1108
+ provider: string;
1109
+ requiredScopes?: string[] | undefined;
1110
+ } | {
1111
+ type: "mdl";
1112
+ issuer: string;
1113
+ credentialType?: string | undefined;
1114
+ } | {
1115
+ type: "idv";
1116
+ provider: string;
1117
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1118
+ } | {
1119
+ type: "credential";
1120
+ credentialType: string;
1121
+ issuer?: string | undefined;
1122
+ } | {
1123
+ type: "none";
1124
+ } | undefined;
901
1125
  }>>>;
902
1126
  }, "strip", z.ZodTypeAny, {
903
1127
  source: "agentshield" | "inline" | "file";
@@ -906,10 +1130,29 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
906
1130
  cacheTtl: number;
907
1131
  } | undefined;
908
1132
  fallback?: Record<string, {
909
- requiresDelegation: boolean;
910
1133
  requiredScopes: string[];
1134
+ requiresDelegation: boolean;
911
1135
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
912
1136
  oauthProvider?: string | undefined;
1137
+ authorization?: {
1138
+ type: "oauth";
1139
+ provider: string;
1140
+ requiredScopes?: string[] | undefined;
1141
+ } | {
1142
+ type: "mdl";
1143
+ issuer: string;
1144
+ credentialType?: string | undefined;
1145
+ } | {
1146
+ type: "idv";
1147
+ provider: string;
1148
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1149
+ } | {
1150
+ type: "credential";
1151
+ credentialType: string;
1152
+ issuer?: string | undefined;
1153
+ } | {
1154
+ type: "none";
1155
+ } | undefined;
913
1156
  }> | undefined;
914
1157
  }, {
915
1158
  source: "agentshield" | "inline" | "file";
@@ -918,10 +1161,29 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
918
1161
  cacheTtl: number;
919
1162
  } | undefined;
920
1163
  fallback?: Record<string, {
921
- requiresDelegation: boolean;
922
1164
  requiredScopes: string[];
1165
+ requiresDelegation: boolean;
923
1166
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
924
1167
  oauthProvider?: string | undefined;
1168
+ authorization?: {
1169
+ type: "oauth";
1170
+ provider: string;
1171
+ requiredScopes?: string[] | undefined;
1172
+ } | {
1173
+ type: "mdl";
1174
+ issuer: string;
1175
+ credentialType?: string | undefined;
1176
+ } | {
1177
+ type: "idv";
1178
+ provider: string;
1179
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1180
+ } | {
1181
+ type: "credential";
1182
+ credentialType: string;
1183
+ issuer?: string | undefined;
1184
+ } | {
1185
+ type: "none";
1186
+ } | undefined;
925
1187
  }> | undefined;
926
1188
  }>;
927
1189
  audit: z.ZodObject<{
@@ -1274,6 +1536,12 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
1274
1536
  };
1275
1537
  };
1276
1538
  delegation: {
1539
+ authorization: {
1540
+ authorizationUrl?: string | undefined;
1541
+ minReputationScore?: number | undefined;
1542
+ resumeTokenTtl?: number | undefined;
1543
+ requireAuthForUnknown?: boolean | undefined;
1544
+ };
1277
1545
  enabled: boolean;
1278
1546
  enforceStrictly: boolean;
1279
1547
  verifier: {
@@ -1281,12 +1549,6 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
1281
1549
  apiUrl?: string | undefined;
1282
1550
  cacheTtl?: number | undefined;
1283
1551
  };
1284
- authorization: {
1285
- authorizationUrl?: string | undefined;
1286
- minReputationScore?: number | undefined;
1287
- resumeTokenTtl?: number | undefined;
1288
- requireAuthForUnknown?: boolean | undefined;
1289
- };
1290
1552
  };
1291
1553
  toolProtection: {
1292
1554
  source: "agentshield" | "inline" | "file";
@@ -1295,10 +1557,29 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
1295
1557
  cacheTtl: number;
1296
1558
  } | undefined;
1297
1559
  fallback?: Record<string, {
1298
- requiresDelegation: boolean;
1299
1560
  requiredScopes: string[];
1561
+ requiresDelegation: boolean;
1300
1562
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
1301
1563
  oauthProvider?: string | undefined;
1564
+ authorization?: {
1565
+ type: "oauth";
1566
+ provider: string;
1567
+ requiredScopes?: string[] | undefined;
1568
+ } | {
1569
+ type: "mdl";
1570
+ issuer: string;
1571
+ credentialType?: string | undefined;
1572
+ } | {
1573
+ type: "idv";
1574
+ provider: string;
1575
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1576
+ } | {
1577
+ type: "credential";
1578
+ credentialType: string;
1579
+ issuer?: string | undefined;
1580
+ } | {
1581
+ type: "none";
1582
+ } | undefined;
1302
1583
  }> | undefined;
1303
1584
  };
1304
1585
  audit: {
@@ -1384,6 +1665,12 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
1384
1665
  };
1385
1666
  };
1386
1667
  delegation: {
1668
+ authorization: {
1669
+ authorizationUrl?: string | undefined;
1670
+ minReputationScore?: number | undefined;
1671
+ resumeTokenTtl?: number | undefined;
1672
+ requireAuthForUnknown?: boolean | undefined;
1673
+ };
1387
1674
  enabled: boolean;
1388
1675
  enforceStrictly: boolean;
1389
1676
  verifier: {
@@ -1391,12 +1678,6 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
1391
1678
  apiUrl?: string | undefined;
1392
1679
  cacheTtl?: number | undefined;
1393
1680
  };
1394
- authorization: {
1395
- authorizationUrl?: string | undefined;
1396
- minReputationScore?: number | undefined;
1397
- resumeTokenTtl?: number | undefined;
1398
- requireAuthForUnknown?: boolean | undefined;
1399
- };
1400
1681
  };
1401
1682
  toolProtection: {
1402
1683
  source: "agentshield" | "inline" | "file";
@@ -1405,10 +1686,29 @@ export declare const mcpIServerConfigSchema: z.ZodObject<{
1405
1686
  cacheTtl: number;
1406
1687
  } | undefined;
1407
1688
  fallback?: Record<string, {
1408
- requiresDelegation: boolean;
1409
1689
  requiredScopes: string[];
1690
+ requiresDelegation: boolean;
1410
1691
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
1411
1692
  oauthProvider?: string | undefined;
1693
+ authorization?: {
1694
+ type: "oauth";
1695
+ provider: string;
1696
+ requiredScopes?: string[] | undefined;
1697
+ } | {
1698
+ type: "mdl";
1699
+ issuer: string;
1700
+ credentialType?: string | undefined;
1701
+ } | {
1702
+ type: "idv";
1703
+ provider: string;
1704
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1705
+ } | {
1706
+ type: "credential";
1707
+ credentialType: string;
1708
+ issuer?: string | undefined;
1709
+ } | {
1710
+ type: "none";
1711
+ } | undefined;
1412
1712
  }> | undefined;
1413
1713
  };
1414
1714
  audit: {
@@ -1589,6 +1889,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
1589
1889
  requireAuthForUnknown?: boolean | undefined;
1590
1890
  }>;
1591
1891
  }, "strip", z.ZodTypeAny, {
1892
+ authorization: {
1893
+ authorizationUrl?: string | undefined;
1894
+ minReputationScore?: number | undefined;
1895
+ resumeTokenTtl?: number | undefined;
1896
+ requireAuthForUnknown?: boolean | undefined;
1897
+ };
1592
1898
  enabled: boolean;
1593
1899
  enforceStrictly: boolean;
1594
1900
  verifier: {
@@ -1596,13 +1902,13 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
1596
1902
  apiUrl?: string | undefined;
1597
1903
  cacheTtl?: number | undefined;
1598
1904
  };
1905
+ }, {
1599
1906
  authorization: {
1600
1907
  authorizationUrl?: string | undefined;
1601
1908
  minReputationScore?: number | undefined;
1602
1909
  resumeTokenTtl?: number | undefined;
1603
1910
  requireAuthForUnknown?: boolean | undefined;
1604
1911
  };
1605
- }, {
1606
1912
  enabled: boolean;
1607
1913
  enforceStrictly: boolean;
1608
1914
  verifier: {
@@ -1610,12 +1916,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
1610
1916
  apiUrl?: string | undefined;
1611
1917
  cacheTtl?: number | undefined;
1612
1918
  };
1613
- authorization: {
1614
- authorizationUrl?: string | undefined;
1615
- minReputationScore?: number | undefined;
1616
- resumeTokenTtl?: number | undefined;
1617
- requireAuthForUnknown?: boolean | undefined;
1618
- };
1619
1919
  }>;
1620
1920
  toolProtection: z.ZodObject<{
1621
1921
  source: z.ZodEnum<["agentshield", "inline", "file"]>;
@@ -1634,16 +1934,109 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
1634
1934
  requiredScopes: z.ZodArray<z.ZodString, "many">;
1635
1935
  riskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
1636
1936
  oauthProvider: z.ZodOptional<z.ZodString>;
1937
+ authorization: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
1938
+ type: z.ZodLiteral<"oauth">;
1939
+ provider: z.ZodString;
1940
+ requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1941
+ }, "strip", z.ZodTypeAny, {
1942
+ type: "oauth";
1943
+ provider: string;
1944
+ requiredScopes?: string[] | undefined;
1945
+ }, {
1946
+ type: "oauth";
1947
+ provider: string;
1948
+ requiredScopes?: string[] | undefined;
1949
+ }>, z.ZodObject<{
1950
+ type: z.ZodLiteral<"mdl">;
1951
+ issuer: z.ZodString;
1952
+ credentialType: z.ZodOptional<z.ZodString>;
1953
+ }, "strip", z.ZodTypeAny, {
1954
+ type: "mdl";
1955
+ issuer: string;
1956
+ credentialType?: string | undefined;
1957
+ }, {
1958
+ type: "mdl";
1959
+ issuer: string;
1960
+ credentialType?: string | undefined;
1961
+ }>, z.ZodObject<{
1962
+ type: z.ZodLiteral<"idv">;
1963
+ provider: z.ZodString;
1964
+ verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
1965
+ }, "strip", z.ZodTypeAny, {
1966
+ type: "idv";
1967
+ provider: string;
1968
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1969
+ }, {
1970
+ type: "idv";
1971
+ provider: string;
1972
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
1973
+ }>, z.ZodObject<{
1974
+ type: z.ZodLiteral<"credential">;
1975
+ credentialType: z.ZodString;
1976
+ issuer: z.ZodOptional<z.ZodString>;
1977
+ }, "strip", z.ZodTypeAny, {
1978
+ type: "credential";
1979
+ credentialType: string;
1980
+ issuer?: string | undefined;
1981
+ }, {
1982
+ type: "credential";
1983
+ credentialType: string;
1984
+ issuer?: string | undefined;
1985
+ }>, z.ZodObject<{
1986
+ type: z.ZodLiteral<"none">;
1987
+ }, "strip", z.ZodTypeAny, {
1988
+ type: "none";
1989
+ }, {
1990
+ type: "none";
1991
+ }>]>>;
1637
1992
  }, "strip", z.ZodTypeAny, {
1638
- requiresDelegation: boolean;
1639
1993
  requiredScopes: string[];
1994
+ requiresDelegation: boolean;
1640
1995
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
1641
1996
  oauthProvider?: string | undefined;
1997
+ authorization?: {
1998
+ type: "oauth";
1999
+ provider: string;
2000
+ requiredScopes?: string[] | undefined;
2001
+ } | {
2002
+ type: "mdl";
2003
+ issuer: string;
2004
+ credentialType?: string | undefined;
2005
+ } | {
2006
+ type: "idv";
2007
+ provider: string;
2008
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2009
+ } | {
2010
+ type: "credential";
2011
+ credentialType: string;
2012
+ issuer?: string | undefined;
2013
+ } | {
2014
+ type: "none";
2015
+ } | undefined;
1642
2016
  }, {
1643
- requiresDelegation: boolean;
1644
2017
  requiredScopes: string[];
2018
+ requiresDelegation: boolean;
1645
2019
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
1646
2020
  oauthProvider?: string | undefined;
2021
+ authorization?: {
2022
+ type: "oauth";
2023
+ provider: string;
2024
+ requiredScopes?: string[] | undefined;
2025
+ } | {
2026
+ type: "mdl";
2027
+ issuer: string;
2028
+ credentialType?: string | undefined;
2029
+ } | {
2030
+ type: "idv";
2031
+ provider: string;
2032
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2033
+ } | {
2034
+ type: "credential";
2035
+ credentialType: string;
2036
+ issuer?: string | undefined;
2037
+ } | {
2038
+ type: "none";
2039
+ } | undefined;
1647
2040
  }>>>;
1648
2041
  }, "strip", z.ZodTypeAny, {
1649
2042
  source: "agentshield" | "inline" | "file";
@@ -1652,10 +2045,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
1652
2045
  cacheTtl: number;
1653
2046
  } | undefined;
1654
2047
  fallback?: Record<string, {
1655
- requiresDelegation: boolean;
1656
2048
  requiredScopes: string[];
2049
+ requiresDelegation: boolean;
1657
2050
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
1658
2051
  oauthProvider?: string | undefined;
2052
+ authorization?: {
2053
+ type: "oauth";
2054
+ provider: string;
2055
+ requiredScopes?: string[] | undefined;
2056
+ } | {
2057
+ type: "mdl";
2058
+ issuer: string;
2059
+ credentialType?: string | undefined;
2060
+ } | {
2061
+ type: "idv";
2062
+ provider: string;
2063
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2064
+ } | {
2065
+ type: "credential";
2066
+ credentialType: string;
2067
+ issuer?: string | undefined;
2068
+ } | {
2069
+ type: "none";
2070
+ } | undefined;
1659
2071
  }> | undefined;
1660
2072
  }, {
1661
2073
  source: "agentshield" | "inline" | "file";
@@ -1664,10 +2076,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
1664
2076
  cacheTtl: number;
1665
2077
  } | undefined;
1666
2078
  fallback?: Record<string, {
1667
- requiresDelegation: boolean;
1668
2079
  requiredScopes: string[];
2080
+ requiresDelegation: boolean;
1669
2081
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
1670
2082
  oauthProvider?: string | undefined;
2083
+ authorization?: {
2084
+ type: "oauth";
2085
+ provider: string;
2086
+ requiredScopes?: string[] | undefined;
2087
+ } | {
2088
+ type: "mdl";
2089
+ issuer: string;
2090
+ credentialType?: string | undefined;
2091
+ } | {
2092
+ type: "idv";
2093
+ provider: string;
2094
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2095
+ } | {
2096
+ type: "credential";
2097
+ credentialType: string;
2098
+ issuer?: string | undefined;
2099
+ } | {
2100
+ type: "none";
2101
+ } | undefined;
1671
2102
  }> | undefined;
1672
2103
  }>;
1673
2104
  audit: z.ZodObject<{
@@ -2020,6 +2451,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2020
2451
  };
2021
2452
  };
2022
2453
  delegation: {
2454
+ authorization: {
2455
+ authorizationUrl?: string | undefined;
2456
+ minReputationScore?: number | undefined;
2457
+ resumeTokenTtl?: number | undefined;
2458
+ requireAuthForUnknown?: boolean | undefined;
2459
+ };
2023
2460
  enabled: boolean;
2024
2461
  enforceStrictly: boolean;
2025
2462
  verifier: {
@@ -2027,12 +2464,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2027
2464
  apiUrl?: string | undefined;
2028
2465
  cacheTtl?: number | undefined;
2029
2466
  };
2030
- authorization: {
2031
- authorizationUrl?: string | undefined;
2032
- minReputationScore?: number | undefined;
2033
- resumeTokenTtl?: number | undefined;
2034
- requireAuthForUnknown?: boolean | undefined;
2035
- };
2036
2467
  };
2037
2468
  toolProtection: {
2038
2469
  source: "agentshield" | "inline" | "file";
@@ -2041,10 +2472,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2041
2472
  cacheTtl: number;
2042
2473
  } | undefined;
2043
2474
  fallback?: Record<string, {
2044
- requiresDelegation: boolean;
2045
2475
  requiredScopes: string[];
2476
+ requiresDelegation: boolean;
2046
2477
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2047
2478
  oauthProvider?: string | undefined;
2479
+ authorization?: {
2480
+ type: "oauth";
2481
+ provider: string;
2482
+ requiredScopes?: string[] | undefined;
2483
+ } | {
2484
+ type: "mdl";
2485
+ issuer: string;
2486
+ credentialType?: string | undefined;
2487
+ } | {
2488
+ type: "idv";
2489
+ provider: string;
2490
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2491
+ } | {
2492
+ type: "credential";
2493
+ credentialType: string;
2494
+ issuer?: string | undefined;
2495
+ } | {
2496
+ type: "none";
2497
+ } | undefined;
2048
2498
  }> | undefined;
2049
2499
  };
2050
2500
  audit: {
@@ -2130,6 +2580,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2130
2580
  };
2131
2581
  };
2132
2582
  delegation: {
2583
+ authorization: {
2584
+ authorizationUrl?: string | undefined;
2585
+ minReputationScore?: number | undefined;
2586
+ resumeTokenTtl?: number | undefined;
2587
+ requireAuthForUnknown?: boolean | undefined;
2588
+ };
2133
2589
  enabled: boolean;
2134
2590
  enforceStrictly: boolean;
2135
2591
  verifier: {
@@ -2137,12 +2593,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2137
2593
  apiUrl?: string | undefined;
2138
2594
  cacheTtl?: number | undefined;
2139
2595
  };
2140
- authorization: {
2141
- authorizationUrl?: string | undefined;
2142
- minReputationScore?: number | undefined;
2143
- resumeTokenTtl?: number | undefined;
2144
- requireAuthForUnknown?: boolean | undefined;
2145
- };
2146
2596
  };
2147
2597
  toolProtection: {
2148
2598
  source: "agentshield" | "inline" | "file";
@@ -2151,10 +2601,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2151
2601
  cacheTtl: number;
2152
2602
  } | undefined;
2153
2603
  fallback?: Record<string, {
2154
- requiresDelegation: boolean;
2155
2604
  requiredScopes: string[];
2605
+ requiresDelegation: boolean;
2156
2606
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2157
2607
  oauthProvider?: string | undefined;
2608
+ authorization?: {
2609
+ type: "oauth";
2610
+ provider: string;
2611
+ requiredScopes?: string[] | undefined;
2612
+ } | {
2613
+ type: "mdl";
2614
+ issuer: string;
2615
+ credentialType?: string | undefined;
2616
+ } | {
2617
+ type: "idv";
2618
+ provider: string;
2619
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2620
+ } | {
2621
+ type: "credential";
2622
+ credentialType: string;
2623
+ issuer?: string | undefined;
2624
+ } | {
2625
+ type: "none";
2626
+ } | undefined;
2158
2627
  }> | undefined;
2159
2628
  };
2160
2629
  audit: {
@@ -2242,6 +2711,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2242
2711
  };
2243
2712
  };
2244
2713
  delegation: {
2714
+ authorization: {
2715
+ authorizationUrl?: string | undefined;
2716
+ minReputationScore?: number | undefined;
2717
+ resumeTokenTtl?: number | undefined;
2718
+ requireAuthForUnknown?: boolean | undefined;
2719
+ };
2245
2720
  enabled: boolean;
2246
2721
  enforceStrictly: boolean;
2247
2722
  verifier: {
@@ -2249,12 +2724,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2249
2724
  apiUrl?: string | undefined;
2250
2725
  cacheTtl?: number | undefined;
2251
2726
  };
2252
- authorization: {
2253
- authorizationUrl?: string | undefined;
2254
- minReputationScore?: number | undefined;
2255
- resumeTokenTtl?: number | undefined;
2256
- requireAuthForUnknown?: boolean | undefined;
2257
- };
2258
2727
  };
2259
2728
  toolProtection: {
2260
2729
  source: "agentshield" | "inline" | "file";
@@ -2263,10 +2732,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2263
2732
  cacheTtl: number;
2264
2733
  } | undefined;
2265
2734
  fallback?: Record<string, {
2266
- requiresDelegation: boolean;
2267
2735
  requiredScopes: string[];
2736
+ requiresDelegation: boolean;
2268
2737
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2269
2738
  oauthProvider?: string | undefined;
2739
+ authorization?: {
2740
+ type: "oauth";
2741
+ provider: string;
2742
+ requiredScopes?: string[] | undefined;
2743
+ } | {
2744
+ type: "mdl";
2745
+ issuer: string;
2746
+ credentialType?: string | undefined;
2747
+ } | {
2748
+ type: "idv";
2749
+ provider: string;
2750
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2751
+ } | {
2752
+ type: "credential";
2753
+ credentialType: string;
2754
+ issuer?: string | undefined;
2755
+ } | {
2756
+ type: "none";
2757
+ } | undefined;
2270
2758
  }> | undefined;
2271
2759
  };
2272
2760
  audit: {
@@ -2354,6 +2842,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2354
2842
  };
2355
2843
  };
2356
2844
  delegation: {
2845
+ authorization: {
2846
+ authorizationUrl?: string | undefined;
2847
+ minReputationScore?: number | undefined;
2848
+ resumeTokenTtl?: number | undefined;
2849
+ requireAuthForUnknown?: boolean | undefined;
2850
+ };
2357
2851
  enabled: boolean;
2358
2852
  enforceStrictly: boolean;
2359
2853
  verifier: {
@@ -2361,12 +2855,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2361
2855
  apiUrl?: string | undefined;
2362
2856
  cacheTtl?: number | undefined;
2363
2857
  };
2364
- authorization: {
2365
- authorizationUrl?: string | undefined;
2366
- minReputationScore?: number | undefined;
2367
- resumeTokenTtl?: number | undefined;
2368
- requireAuthForUnknown?: boolean | undefined;
2369
- };
2370
2858
  };
2371
2859
  toolProtection: {
2372
2860
  source: "agentshield" | "inline" | "file";
@@ -2375,10 +2863,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2375
2863
  cacheTtl: number;
2376
2864
  } | undefined;
2377
2865
  fallback?: Record<string, {
2378
- requiresDelegation: boolean;
2379
2866
  requiredScopes: string[];
2867
+ requiresDelegation: boolean;
2380
2868
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2381
2869
  oauthProvider?: string | undefined;
2870
+ authorization?: {
2871
+ type: "oauth";
2872
+ provider: string;
2873
+ requiredScopes?: string[] | undefined;
2874
+ } | {
2875
+ type: "mdl";
2876
+ issuer: string;
2877
+ credentialType?: string | undefined;
2878
+ } | {
2879
+ type: "idv";
2880
+ provider: string;
2881
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
2882
+ } | {
2883
+ type: "credential";
2884
+ credentialType: string;
2885
+ issuer?: string | undefined;
2886
+ } | {
2887
+ type: "none";
2888
+ } | undefined;
2382
2889
  }> | undefined;
2383
2890
  };
2384
2891
  audit: {
@@ -2479,6 +2986,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2479
2986
  };
2480
2987
  };
2481
2988
  delegation: {
2989
+ authorization: {
2990
+ authorizationUrl?: string | undefined;
2991
+ minReputationScore?: number | undefined;
2992
+ resumeTokenTtl?: number | undefined;
2993
+ requireAuthForUnknown?: boolean | undefined;
2994
+ };
2482
2995
  enabled: boolean;
2483
2996
  enforceStrictly: boolean;
2484
2997
  verifier: {
@@ -2486,12 +2999,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2486
2999
  apiUrl?: string | undefined;
2487
3000
  cacheTtl?: number | undefined;
2488
3001
  };
2489
- authorization: {
2490
- authorizationUrl?: string | undefined;
2491
- minReputationScore?: number | undefined;
2492
- resumeTokenTtl?: number | undefined;
2493
- requireAuthForUnknown?: boolean | undefined;
2494
- };
2495
3002
  };
2496
3003
  toolProtection: {
2497
3004
  source: "agentshield" | "inline" | "file";
@@ -2500,10 +3007,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2500
3007
  cacheTtl: number;
2501
3008
  } | undefined;
2502
3009
  fallback?: Record<string, {
2503
- requiresDelegation: boolean;
2504
3010
  requiredScopes: string[];
3011
+ requiresDelegation: boolean;
2505
3012
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2506
3013
  oauthProvider?: string | undefined;
3014
+ authorization?: {
3015
+ type: "oauth";
3016
+ provider: string;
3017
+ requiredScopes?: string[] | undefined;
3018
+ } | {
3019
+ type: "mdl";
3020
+ issuer: string;
3021
+ credentialType?: string | undefined;
3022
+ } | {
3023
+ type: "idv";
3024
+ provider: string;
3025
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3026
+ } | {
3027
+ type: "credential";
3028
+ credentialType: string;
3029
+ issuer?: string | undefined;
3030
+ } | {
3031
+ type: "none";
3032
+ } | undefined;
2507
3033
  }> | undefined;
2508
3034
  };
2509
3035
  audit: {
@@ -2598,6 +3124,12 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2598
3124
  };
2599
3125
  };
2600
3126
  delegation: {
3127
+ authorization: {
3128
+ authorizationUrl?: string | undefined;
3129
+ minReputationScore?: number | undefined;
3130
+ resumeTokenTtl?: number | undefined;
3131
+ requireAuthForUnknown?: boolean | undefined;
3132
+ };
2601
3133
  enabled: boolean;
2602
3134
  enforceStrictly: boolean;
2603
3135
  verifier: {
@@ -2605,12 +3137,6 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2605
3137
  apiUrl?: string | undefined;
2606
3138
  cacheTtl?: number | undefined;
2607
3139
  };
2608
- authorization: {
2609
- authorizationUrl?: string | undefined;
2610
- minReputationScore?: number | undefined;
2611
- resumeTokenTtl?: number | undefined;
2612
- requireAuthForUnknown?: boolean | undefined;
2613
- };
2614
3140
  };
2615
3141
  toolProtection: {
2616
3142
  source: "agentshield" | "inline" | "file";
@@ -2619,10 +3145,29 @@ export declare const getServerConfigResponseSchema: z.ZodObject<{
2619
3145
  cacheTtl: number;
2620
3146
  } | undefined;
2621
3147
  fallback?: Record<string, {
2622
- requiresDelegation: boolean;
2623
3148
  requiredScopes: string[];
3149
+ requiresDelegation: boolean;
2624
3150
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2625
3151
  oauthProvider?: string | undefined;
3152
+ authorization?: {
3153
+ type: "oauth";
3154
+ provider: string;
3155
+ requiredScopes?: string[] | undefined;
3156
+ } | {
3157
+ type: "mdl";
3158
+ issuer: string;
3159
+ credentialType?: string | undefined;
3160
+ } | {
3161
+ type: "idv";
3162
+ provider: string;
3163
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3164
+ } | {
3165
+ type: "credential";
3166
+ credentialType: string;
3167
+ issuer?: string | undefined;
3168
+ } | {
3169
+ type: "none";
3170
+ } | undefined;
2626
3171
  }> | undefined;
2627
3172
  };
2628
3173
  audit: {
@@ -2798,6 +3343,12 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
2798
3343
  requireAuthForUnknown?: boolean | undefined;
2799
3344
  }>;
2800
3345
  }, "strip", z.ZodTypeAny, {
3346
+ authorization: {
3347
+ authorizationUrl?: string | undefined;
3348
+ minReputationScore?: number | undefined;
3349
+ resumeTokenTtl?: number | undefined;
3350
+ requireAuthForUnknown?: boolean | undefined;
3351
+ };
2801
3352
  enabled: boolean;
2802
3353
  enforceStrictly: boolean;
2803
3354
  verifier: {
@@ -2805,13 +3356,13 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
2805
3356
  apiUrl?: string | undefined;
2806
3357
  cacheTtl?: number | undefined;
2807
3358
  };
3359
+ }, {
2808
3360
  authorization: {
2809
3361
  authorizationUrl?: string | undefined;
2810
3362
  minReputationScore?: number | undefined;
2811
3363
  resumeTokenTtl?: number | undefined;
2812
3364
  requireAuthForUnknown?: boolean | undefined;
2813
3365
  };
2814
- }, {
2815
3366
  enabled: boolean;
2816
3367
  enforceStrictly: boolean;
2817
3368
  verifier: {
@@ -2819,12 +3370,6 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
2819
3370
  apiUrl?: string | undefined;
2820
3371
  cacheTtl?: number | undefined;
2821
3372
  };
2822
- authorization: {
2823
- authorizationUrl?: string | undefined;
2824
- minReputationScore?: number | undefined;
2825
- resumeTokenTtl?: number | undefined;
2826
- requireAuthForUnknown?: boolean | undefined;
2827
- };
2828
3373
  }>>;
2829
3374
  toolProtection: z.ZodOptional<z.ZodObject<{
2830
3375
  source: z.ZodEnum<["agentshield", "inline", "file"]>;
@@ -2843,16 +3388,109 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
2843
3388
  requiredScopes: z.ZodArray<z.ZodString, "many">;
2844
3389
  riskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
2845
3390
  oauthProvider: z.ZodOptional<z.ZodString>;
3391
+ authorization: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
3392
+ type: z.ZodLiteral<"oauth">;
3393
+ provider: z.ZodString;
3394
+ requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3395
+ }, "strip", z.ZodTypeAny, {
3396
+ type: "oauth";
3397
+ provider: string;
3398
+ requiredScopes?: string[] | undefined;
3399
+ }, {
3400
+ type: "oauth";
3401
+ provider: string;
3402
+ requiredScopes?: string[] | undefined;
3403
+ }>, z.ZodObject<{
3404
+ type: z.ZodLiteral<"mdl">;
3405
+ issuer: z.ZodString;
3406
+ credentialType: z.ZodOptional<z.ZodString>;
3407
+ }, "strip", z.ZodTypeAny, {
3408
+ type: "mdl";
3409
+ issuer: string;
3410
+ credentialType?: string | undefined;
3411
+ }, {
3412
+ type: "mdl";
3413
+ issuer: string;
3414
+ credentialType?: string | undefined;
3415
+ }>, z.ZodObject<{
3416
+ type: z.ZodLiteral<"idv">;
3417
+ provider: z.ZodString;
3418
+ verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
3419
+ }, "strip", z.ZodTypeAny, {
3420
+ type: "idv";
3421
+ provider: string;
3422
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3423
+ }, {
3424
+ type: "idv";
3425
+ provider: string;
3426
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3427
+ }>, z.ZodObject<{
3428
+ type: z.ZodLiteral<"credential">;
3429
+ credentialType: z.ZodString;
3430
+ issuer: z.ZodOptional<z.ZodString>;
3431
+ }, "strip", z.ZodTypeAny, {
3432
+ type: "credential";
3433
+ credentialType: string;
3434
+ issuer?: string | undefined;
3435
+ }, {
3436
+ type: "credential";
3437
+ credentialType: string;
3438
+ issuer?: string | undefined;
3439
+ }>, z.ZodObject<{
3440
+ type: z.ZodLiteral<"none">;
3441
+ }, "strip", z.ZodTypeAny, {
3442
+ type: "none";
3443
+ }, {
3444
+ type: "none";
3445
+ }>]>>;
2846
3446
  }, "strip", z.ZodTypeAny, {
2847
- requiresDelegation: boolean;
2848
3447
  requiredScopes: string[];
3448
+ requiresDelegation: boolean;
2849
3449
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2850
3450
  oauthProvider?: string | undefined;
3451
+ authorization?: {
3452
+ type: "oauth";
3453
+ provider: string;
3454
+ requiredScopes?: string[] | undefined;
3455
+ } | {
3456
+ type: "mdl";
3457
+ issuer: string;
3458
+ credentialType?: string | undefined;
3459
+ } | {
3460
+ type: "idv";
3461
+ provider: string;
3462
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3463
+ } | {
3464
+ type: "credential";
3465
+ credentialType: string;
3466
+ issuer?: string | undefined;
3467
+ } | {
3468
+ type: "none";
3469
+ } | undefined;
2851
3470
  }, {
2852
- requiresDelegation: boolean;
2853
3471
  requiredScopes: string[];
3472
+ requiresDelegation: boolean;
2854
3473
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2855
3474
  oauthProvider?: string | undefined;
3475
+ authorization?: {
3476
+ type: "oauth";
3477
+ provider: string;
3478
+ requiredScopes?: string[] | undefined;
3479
+ } | {
3480
+ type: "mdl";
3481
+ issuer: string;
3482
+ credentialType?: string | undefined;
3483
+ } | {
3484
+ type: "idv";
3485
+ provider: string;
3486
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3487
+ } | {
3488
+ type: "credential";
3489
+ credentialType: string;
3490
+ issuer?: string | undefined;
3491
+ } | {
3492
+ type: "none";
3493
+ } | undefined;
2856
3494
  }>>>;
2857
3495
  }, "strip", z.ZodTypeAny, {
2858
3496
  source: "agentshield" | "inline" | "file";
@@ -2861,10 +3499,29 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
2861
3499
  cacheTtl: number;
2862
3500
  } | undefined;
2863
3501
  fallback?: Record<string, {
2864
- requiresDelegation: boolean;
2865
3502
  requiredScopes: string[];
3503
+ requiresDelegation: boolean;
2866
3504
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2867
3505
  oauthProvider?: string | undefined;
3506
+ authorization?: {
3507
+ type: "oauth";
3508
+ provider: string;
3509
+ requiredScopes?: string[] | undefined;
3510
+ } | {
3511
+ type: "mdl";
3512
+ issuer: string;
3513
+ credentialType?: string | undefined;
3514
+ } | {
3515
+ type: "idv";
3516
+ provider: string;
3517
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3518
+ } | {
3519
+ type: "credential";
3520
+ credentialType: string;
3521
+ issuer?: string | undefined;
3522
+ } | {
3523
+ type: "none";
3524
+ } | undefined;
2868
3525
  }> | undefined;
2869
3526
  }, {
2870
3527
  source: "agentshield" | "inline" | "file";
@@ -2873,10 +3530,29 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
2873
3530
  cacheTtl: number;
2874
3531
  } | undefined;
2875
3532
  fallback?: Record<string, {
2876
- requiresDelegation: boolean;
2877
3533
  requiredScopes: string[];
3534
+ requiresDelegation: boolean;
2878
3535
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
2879
3536
  oauthProvider?: string | undefined;
3537
+ authorization?: {
3538
+ type: "oauth";
3539
+ provider: string;
3540
+ requiredScopes?: string[] | undefined;
3541
+ } | {
3542
+ type: "mdl";
3543
+ issuer: string;
3544
+ credentialType?: string | undefined;
3545
+ } | {
3546
+ type: "idv";
3547
+ provider: string;
3548
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3549
+ } | {
3550
+ type: "credential";
3551
+ credentialType: string;
3552
+ issuer?: string | undefined;
3553
+ } | {
3554
+ type: "none";
3555
+ } | undefined;
2880
3556
  }> | undefined;
2881
3557
  }>>;
2882
3558
  audit: z.ZodOptional<z.ZodObject<{
@@ -3229,6 +3905,12 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3229
3905
  };
3230
3906
  } | undefined;
3231
3907
  delegation?: {
3908
+ authorization: {
3909
+ authorizationUrl?: string | undefined;
3910
+ minReputationScore?: number | undefined;
3911
+ resumeTokenTtl?: number | undefined;
3912
+ requireAuthForUnknown?: boolean | undefined;
3913
+ };
3232
3914
  enabled: boolean;
3233
3915
  enforceStrictly: boolean;
3234
3916
  verifier: {
@@ -3236,12 +3918,6 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3236
3918
  apiUrl?: string | undefined;
3237
3919
  cacheTtl?: number | undefined;
3238
3920
  };
3239
- authorization: {
3240
- authorizationUrl?: string | undefined;
3241
- minReputationScore?: number | undefined;
3242
- resumeTokenTtl?: number | undefined;
3243
- requireAuthForUnknown?: boolean | undefined;
3244
- };
3245
3921
  } | undefined;
3246
3922
  toolProtection?: {
3247
3923
  source: "agentshield" | "inline" | "file";
@@ -3250,10 +3926,29 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3250
3926
  cacheTtl: number;
3251
3927
  } | undefined;
3252
3928
  fallback?: Record<string, {
3253
- requiresDelegation: boolean;
3254
3929
  requiredScopes: string[];
3930
+ requiresDelegation: boolean;
3255
3931
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3256
3932
  oauthProvider?: string | undefined;
3933
+ authorization?: {
3934
+ type: "oauth";
3935
+ provider: string;
3936
+ requiredScopes?: string[] | undefined;
3937
+ } | {
3938
+ type: "mdl";
3939
+ issuer: string;
3940
+ credentialType?: string | undefined;
3941
+ } | {
3942
+ type: "idv";
3943
+ provider: string;
3944
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
3945
+ } | {
3946
+ type: "credential";
3947
+ credentialType: string;
3948
+ issuer?: string | undefined;
3949
+ } | {
3950
+ type: "none";
3951
+ } | undefined;
3257
3952
  }> | undefined;
3258
3953
  } | undefined;
3259
3954
  audit?: {
@@ -3339,6 +4034,12 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3339
4034
  };
3340
4035
  } | undefined;
3341
4036
  delegation?: {
4037
+ authorization: {
4038
+ authorizationUrl?: string | undefined;
4039
+ minReputationScore?: number | undefined;
4040
+ resumeTokenTtl?: number | undefined;
4041
+ requireAuthForUnknown?: boolean | undefined;
4042
+ };
3342
4043
  enabled: boolean;
3343
4044
  enforceStrictly: boolean;
3344
4045
  verifier: {
@@ -3346,12 +4047,6 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3346
4047
  apiUrl?: string | undefined;
3347
4048
  cacheTtl?: number | undefined;
3348
4049
  };
3349
- authorization: {
3350
- authorizationUrl?: string | undefined;
3351
- minReputationScore?: number | undefined;
3352
- resumeTokenTtl?: number | undefined;
3353
- requireAuthForUnknown?: boolean | undefined;
3354
- };
3355
4050
  } | undefined;
3356
4051
  toolProtection?: {
3357
4052
  source: "agentshield" | "inline" | "file";
@@ -3360,10 +4055,29 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3360
4055
  cacheTtl: number;
3361
4056
  } | undefined;
3362
4057
  fallback?: Record<string, {
3363
- requiresDelegation: boolean;
3364
4058
  requiredScopes: string[];
4059
+ requiresDelegation: boolean;
3365
4060
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3366
4061
  oauthProvider?: string | undefined;
4062
+ authorization?: {
4063
+ type: "oauth";
4064
+ provider: string;
4065
+ requiredScopes?: string[] | undefined;
4066
+ } | {
4067
+ type: "mdl";
4068
+ issuer: string;
4069
+ credentialType?: string | undefined;
4070
+ } | {
4071
+ type: "idv";
4072
+ provider: string;
4073
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4074
+ } | {
4075
+ type: "credential";
4076
+ credentialType: string;
4077
+ issuer?: string | undefined;
4078
+ } | {
4079
+ type: "none";
4080
+ } | undefined;
3367
4081
  }> | undefined;
3368
4082
  } | undefined;
3369
4083
  audit?: {
@@ -3452,6 +4166,12 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3452
4166
  };
3453
4167
  } | undefined;
3454
4168
  delegation?: {
4169
+ authorization: {
4170
+ authorizationUrl?: string | undefined;
4171
+ minReputationScore?: number | undefined;
4172
+ resumeTokenTtl?: number | undefined;
4173
+ requireAuthForUnknown?: boolean | undefined;
4174
+ };
3455
4175
  enabled: boolean;
3456
4176
  enforceStrictly: boolean;
3457
4177
  verifier: {
@@ -3459,12 +4179,6 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3459
4179
  apiUrl?: string | undefined;
3460
4180
  cacheTtl?: number | undefined;
3461
4181
  };
3462
- authorization: {
3463
- authorizationUrl?: string | undefined;
3464
- minReputationScore?: number | undefined;
3465
- resumeTokenTtl?: number | undefined;
3466
- requireAuthForUnknown?: boolean | undefined;
3467
- };
3468
4182
  } | undefined;
3469
4183
  toolProtection?: {
3470
4184
  source: "agentshield" | "inline" | "file";
@@ -3473,10 +4187,29 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3473
4187
  cacheTtl: number;
3474
4188
  } | undefined;
3475
4189
  fallback?: Record<string, {
3476
- requiresDelegation: boolean;
3477
4190
  requiredScopes: string[];
4191
+ requiresDelegation: boolean;
3478
4192
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3479
4193
  oauthProvider?: string | undefined;
4194
+ authorization?: {
4195
+ type: "oauth";
4196
+ provider: string;
4197
+ requiredScopes?: string[] | undefined;
4198
+ } | {
4199
+ type: "mdl";
4200
+ issuer: string;
4201
+ credentialType?: string | undefined;
4202
+ } | {
4203
+ type: "idv";
4204
+ provider: string;
4205
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4206
+ } | {
4207
+ type: "credential";
4208
+ credentialType: string;
4209
+ issuer?: string | undefined;
4210
+ } | {
4211
+ type: "none";
4212
+ } | undefined;
3480
4213
  }> | undefined;
3481
4214
  } | undefined;
3482
4215
  audit?: {
@@ -3565,6 +4298,12 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3565
4298
  };
3566
4299
  } | undefined;
3567
4300
  delegation?: {
4301
+ authorization: {
4302
+ authorizationUrl?: string | undefined;
4303
+ minReputationScore?: number | undefined;
4304
+ resumeTokenTtl?: number | undefined;
4305
+ requireAuthForUnknown?: boolean | undefined;
4306
+ };
3568
4307
  enabled: boolean;
3569
4308
  enforceStrictly: boolean;
3570
4309
  verifier: {
@@ -3572,12 +4311,6 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3572
4311
  apiUrl?: string | undefined;
3573
4312
  cacheTtl?: number | undefined;
3574
4313
  };
3575
- authorization: {
3576
- authorizationUrl?: string | undefined;
3577
- minReputationScore?: number | undefined;
3578
- resumeTokenTtl?: number | undefined;
3579
- requireAuthForUnknown?: boolean | undefined;
3580
- };
3581
4314
  } | undefined;
3582
4315
  toolProtection?: {
3583
4316
  source: "agentshield" | "inline" | "file";
@@ -3586,10 +4319,29 @@ export declare const updateServerConfigRequestSchema: z.ZodObject<{
3586
4319
  cacheTtl: number;
3587
4320
  } | undefined;
3588
4321
  fallback?: Record<string, {
3589
- requiresDelegation: boolean;
3590
4322
  requiredScopes: string[];
4323
+ requiresDelegation: boolean;
3591
4324
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3592
4325
  oauthProvider?: string | undefined;
4326
+ authorization?: {
4327
+ type: "oauth";
4328
+ provider: string;
4329
+ requiredScopes?: string[] | undefined;
4330
+ } | {
4331
+ type: "mdl";
4332
+ issuer: string;
4333
+ credentialType?: string | undefined;
4334
+ } | {
4335
+ type: "idv";
4336
+ provider: string;
4337
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4338
+ } | {
4339
+ type: "credential";
4340
+ credentialType: string;
4341
+ issuer?: string | undefined;
4342
+ } | {
4343
+ type: "none";
4344
+ } | undefined;
3593
4345
  }> | undefined;
3594
4346
  } | undefined;
3595
4347
  audit?: {
@@ -3761,6 +4513,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
3761
4513
  requireAuthForUnknown?: boolean | undefined;
3762
4514
  }>;
3763
4515
  }, "strip", z.ZodTypeAny, {
4516
+ authorization: {
4517
+ authorizationUrl?: string | undefined;
4518
+ minReputationScore?: number | undefined;
4519
+ resumeTokenTtl?: number | undefined;
4520
+ requireAuthForUnknown?: boolean | undefined;
4521
+ };
3764
4522
  enabled: boolean;
3765
4523
  enforceStrictly: boolean;
3766
4524
  verifier: {
@@ -3768,13 +4526,13 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
3768
4526
  apiUrl?: string | undefined;
3769
4527
  cacheTtl?: number | undefined;
3770
4528
  };
4529
+ }, {
3771
4530
  authorization: {
3772
4531
  authorizationUrl?: string | undefined;
3773
4532
  minReputationScore?: number | undefined;
3774
4533
  resumeTokenTtl?: number | undefined;
3775
4534
  requireAuthForUnknown?: boolean | undefined;
3776
4535
  };
3777
- }, {
3778
4536
  enabled: boolean;
3779
4537
  enforceStrictly: boolean;
3780
4538
  verifier: {
@@ -3782,12 +4540,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
3782
4540
  apiUrl?: string | undefined;
3783
4541
  cacheTtl?: number | undefined;
3784
4542
  };
3785
- authorization: {
3786
- authorizationUrl?: string | undefined;
3787
- minReputationScore?: number | undefined;
3788
- resumeTokenTtl?: number | undefined;
3789
- requireAuthForUnknown?: boolean | undefined;
3790
- };
3791
4543
  }>;
3792
4544
  toolProtection: z.ZodObject<{
3793
4545
  source: z.ZodEnum<["agentshield", "inline", "file"]>;
@@ -3806,16 +4558,109 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
3806
4558
  requiredScopes: z.ZodArray<z.ZodString, "many">;
3807
4559
  riskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
3808
4560
  oauthProvider: z.ZodOptional<z.ZodString>;
4561
+ authorization: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
4562
+ type: z.ZodLiteral<"oauth">;
4563
+ provider: z.ZodString;
4564
+ requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
4565
+ }, "strip", z.ZodTypeAny, {
4566
+ type: "oauth";
4567
+ provider: string;
4568
+ requiredScopes?: string[] | undefined;
4569
+ }, {
4570
+ type: "oauth";
4571
+ provider: string;
4572
+ requiredScopes?: string[] | undefined;
4573
+ }>, z.ZodObject<{
4574
+ type: z.ZodLiteral<"mdl">;
4575
+ issuer: z.ZodString;
4576
+ credentialType: z.ZodOptional<z.ZodString>;
4577
+ }, "strip", z.ZodTypeAny, {
4578
+ type: "mdl";
4579
+ issuer: string;
4580
+ credentialType?: string | undefined;
4581
+ }, {
4582
+ type: "mdl";
4583
+ issuer: string;
4584
+ credentialType?: string | undefined;
4585
+ }>, z.ZodObject<{
4586
+ type: z.ZodLiteral<"idv">;
4587
+ provider: z.ZodString;
4588
+ verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
4589
+ }, "strip", z.ZodTypeAny, {
4590
+ type: "idv";
4591
+ provider: string;
4592
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4593
+ }, {
4594
+ type: "idv";
4595
+ provider: string;
4596
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4597
+ }>, z.ZodObject<{
4598
+ type: z.ZodLiteral<"credential">;
4599
+ credentialType: z.ZodString;
4600
+ issuer: z.ZodOptional<z.ZodString>;
4601
+ }, "strip", z.ZodTypeAny, {
4602
+ type: "credential";
4603
+ credentialType: string;
4604
+ issuer?: string | undefined;
4605
+ }, {
4606
+ type: "credential";
4607
+ credentialType: string;
4608
+ issuer?: string | undefined;
4609
+ }>, z.ZodObject<{
4610
+ type: z.ZodLiteral<"none">;
4611
+ }, "strip", z.ZodTypeAny, {
4612
+ type: "none";
4613
+ }, {
4614
+ type: "none";
4615
+ }>]>>;
3809
4616
  }, "strip", z.ZodTypeAny, {
3810
- requiresDelegation: boolean;
3811
4617
  requiredScopes: string[];
4618
+ requiresDelegation: boolean;
3812
4619
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3813
4620
  oauthProvider?: string | undefined;
4621
+ authorization?: {
4622
+ type: "oauth";
4623
+ provider: string;
4624
+ requiredScopes?: string[] | undefined;
4625
+ } | {
4626
+ type: "mdl";
4627
+ issuer: string;
4628
+ credentialType?: string | undefined;
4629
+ } | {
4630
+ type: "idv";
4631
+ provider: string;
4632
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4633
+ } | {
4634
+ type: "credential";
4635
+ credentialType: string;
4636
+ issuer?: string | undefined;
4637
+ } | {
4638
+ type: "none";
4639
+ } | undefined;
3814
4640
  }, {
3815
- requiresDelegation: boolean;
3816
4641
  requiredScopes: string[];
4642
+ requiresDelegation: boolean;
3817
4643
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3818
4644
  oauthProvider?: string | undefined;
4645
+ authorization?: {
4646
+ type: "oauth";
4647
+ provider: string;
4648
+ requiredScopes?: string[] | undefined;
4649
+ } | {
4650
+ type: "mdl";
4651
+ issuer: string;
4652
+ credentialType?: string | undefined;
4653
+ } | {
4654
+ type: "idv";
4655
+ provider: string;
4656
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4657
+ } | {
4658
+ type: "credential";
4659
+ credentialType: string;
4660
+ issuer?: string | undefined;
4661
+ } | {
4662
+ type: "none";
4663
+ } | undefined;
3819
4664
  }>>>;
3820
4665
  }, "strip", z.ZodTypeAny, {
3821
4666
  source: "agentshield" | "inline" | "file";
@@ -3824,10 +4669,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
3824
4669
  cacheTtl: number;
3825
4670
  } | undefined;
3826
4671
  fallback?: Record<string, {
3827
- requiresDelegation: boolean;
3828
4672
  requiredScopes: string[];
4673
+ requiresDelegation: boolean;
3829
4674
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3830
4675
  oauthProvider?: string | undefined;
4676
+ authorization?: {
4677
+ type: "oauth";
4678
+ provider: string;
4679
+ requiredScopes?: string[] | undefined;
4680
+ } | {
4681
+ type: "mdl";
4682
+ issuer: string;
4683
+ credentialType?: string | undefined;
4684
+ } | {
4685
+ type: "idv";
4686
+ provider: string;
4687
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4688
+ } | {
4689
+ type: "credential";
4690
+ credentialType: string;
4691
+ issuer?: string | undefined;
4692
+ } | {
4693
+ type: "none";
4694
+ } | undefined;
3831
4695
  }> | undefined;
3832
4696
  }, {
3833
4697
  source: "agentshield" | "inline" | "file";
@@ -3836,10 +4700,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
3836
4700
  cacheTtl: number;
3837
4701
  } | undefined;
3838
4702
  fallback?: Record<string, {
3839
- requiresDelegation: boolean;
3840
4703
  requiredScopes: string[];
4704
+ requiresDelegation: boolean;
3841
4705
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
3842
4706
  oauthProvider?: string | undefined;
4707
+ authorization?: {
4708
+ type: "oauth";
4709
+ provider: string;
4710
+ requiredScopes?: string[] | undefined;
4711
+ } | {
4712
+ type: "mdl";
4713
+ issuer: string;
4714
+ credentialType?: string | undefined;
4715
+ } | {
4716
+ type: "idv";
4717
+ provider: string;
4718
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
4719
+ } | {
4720
+ type: "credential";
4721
+ credentialType: string;
4722
+ issuer?: string | undefined;
4723
+ } | {
4724
+ type: "none";
4725
+ } | undefined;
3843
4726
  }> | undefined;
3844
4727
  }>;
3845
4728
  audit: z.ZodObject<{
@@ -4192,6 +5075,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4192
5075
  };
4193
5076
  };
4194
5077
  delegation: {
5078
+ authorization: {
5079
+ authorizationUrl?: string | undefined;
5080
+ minReputationScore?: number | undefined;
5081
+ resumeTokenTtl?: number | undefined;
5082
+ requireAuthForUnknown?: boolean | undefined;
5083
+ };
4195
5084
  enabled: boolean;
4196
5085
  enforceStrictly: boolean;
4197
5086
  verifier: {
@@ -4199,12 +5088,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4199
5088
  apiUrl?: string | undefined;
4200
5089
  cacheTtl?: number | undefined;
4201
5090
  };
4202
- authorization: {
4203
- authorizationUrl?: string | undefined;
4204
- minReputationScore?: number | undefined;
4205
- resumeTokenTtl?: number | undefined;
4206
- requireAuthForUnknown?: boolean | undefined;
4207
- };
4208
5091
  };
4209
5092
  toolProtection: {
4210
5093
  source: "agentshield" | "inline" | "file";
@@ -4213,10 +5096,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4213
5096
  cacheTtl: number;
4214
5097
  } | undefined;
4215
5098
  fallback?: Record<string, {
4216
- requiresDelegation: boolean;
4217
5099
  requiredScopes: string[];
5100
+ requiresDelegation: boolean;
4218
5101
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
4219
5102
  oauthProvider?: string | undefined;
5103
+ authorization?: {
5104
+ type: "oauth";
5105
+ provider: string;
5106
+ requiredScopes?: string[] | undefined;
5107
+ } | {
5108
+ type: "mdl";
5109
+ issuer: string;
5110
+ credentialType?: string | undefined;
5111
+ } | {
5112
+ type: "idv";
5113
+ provider: string;
5114
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
5115
+ } | {
5116
+ type: "credential";
5117
+ credentialType: string;
5118
+ issuer?: string | undefined;
5119
+ } | {
5120
+ type: "none";
5121
+ } | undefined;
4220
5122
  }> | undefined;
4221
5123
  };
4222
5124
  audit: {
@@ -4302,6 +5204,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4302
5204
  };
4303
5205
  };
4304
5206
  delegation: {
5207
+ authorization: {
5208
+ authorizationUrl?: string | undefined;
5209
+ minReputationScore?: number | undefined;
5210
+ resumeTokenTtl?: number | undefined;
5211
+ requireAuthForUnknown?: boolean | undefined;
5212
+ };
4305
5213
  enabled: boolean;
4306
5214
  enforceStrictly: boolean;
4307
5215
  verifier: {
@@ -4309,12 +5217,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4309
5217
  apiUrl?: string | undefined;
4310
5218
  cacheTtl?: number | undefined;
4311
5219
  };
4312
- authorization: {
4313
- authorizationUrl?: string | undefined;
4314
- minReputationScore?: number | undefined;
4315
- resumeTokenTtl?: number | undefined;
4316
- requireAuthForUnknown?: boolean | undefined;
4317
- };
4318
5220
  };
4319
5221
  toolProtection: {
4320
5222
  source: "agentshield" | "inline" | "file";
@@ -4323,10 +5225,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4323
5225
  cacheTtl: number;
4324
5226
  } | undefined;
4325
5227
  fallback?: Record<string, {
4326
- requiresDelegation: boolean;
4327
5228
  requiredScopes: string[];
5229
+ requiresDelegation: boolean;
4328
5230
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
4329
5231
  oauthProvider?: string | undefined;
5232
+ authorization?: {
5233
+ type: "oauth";
5234
+ provider: string;
5235
+ requiredScopes?: string[] | undefined;
5236
+ } | {
5237
+ type: "mdl";
5238
+ issuer: string;
5239
+ credentialType?: string | undefined;
5240
+ } | {
5241
+ type: "idv";
5242
+ provider: string;
5243
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
5244
+ } | {
5245
+ type: "credential";
5246
+ credentialType: string;
5247
+ issuer?: string | undefined;
5248
+ } | {
5249
+ type: "none";
5250
+ } | undefined;
4330
5251
  }> | undefined;
4331
5252
  };
4332
5253
  audit: {
@@ -4427,6 +5348,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4427
5348
  };
4428
5349
  };
4429
5350
  delegation: {
5351
+ authorization: {
5352
+ authorizationUrl?: string | undefined;
5353
+ minReputationScore?: number | undefined;
5354
+ resumeTokenTtl?: number | undefined;
5355
+ requireAuthForUnknown?: boolean | undefined;
5356
+ };
4430
5357
  enabled: boolean;
4431
5358
  enforceStrictly: boolean;
4432
5359
  verifier: {
@@ -4434,12 +5361,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4434
5361
  apiUrl?: string | undefined;
4435
5362
  cacheTtl?: number | undefined;
4436
5363
  };
4437
- authorization: {
4438
- authorizationUrl?: string | undefined;
4439
- minReputationScore?: number | undefined;
4440
- resumeTokenTtl?: number | undefined;
4441
- requireAuthForUnknown?: boolean | undefined;
4442
- };
4443
5364
  };
4444
5365
  toolProtection: {
4445
5366
  source: "agentshield" | "inline" | "file";
@@ -4448,10 +5369,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4448
5369
  cacheTtl: number;
4449
5370
  } | undefined;
4450
5371
  fallback?: Record<string, {
4451
- requiresDelegation: boolean;
4452
5372
  requiredScopes: string[];
5373
+ requiresDelegation: boolean;
4453
5374
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
4454
5375
  oauthProvider?: string | undefined;
5376
+ authorization?: {
5377
+ type: "oauth";
5378
+ provider: string;
5379
+ requiredScopes?: string[] | undefined;
5380
+ } | {
5381
+ type: "mdl";
5382
+ issuer: string;
5383
+ credentialType?: string | undefined;
5384
+ } | {
5385
+ type: "idv";
5386
+ provider: string;
5387
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
5388
+ } | {
5389
+ type: "credential";
5390
+ credentialType: string;
5391
+ issuer?: string | undefined;
5392
+ } | {
5393
+ type: "none";
5394
+ } | undefined;
4455
5395
  }> | undefined;
4456
5396
  };
4457
5397
  audit: {
@@ -4544,6 +5484,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4544
5484
  };
4545
5485
  };
4546
5486
  delegation: {
5487
+ authorization: {
5488
+ authorizationUrl?: string | undefined;
5489
+ minReputationScore?: number | undefined;
5490
+ resumeTokenTtl?: number | undefined;
5491
+ requireAuthForUnknown?: boolean | undefined;
5492
+ };
4547
5493
  enabled: boolean;
4548
5494
  enforceStrictly: boolean;
4549
5495
  verifier: {
@@ -4551,12 +5497,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4551
5497
  apiUrl?: string | undefined;
4552
5498
  cacheTtl?: number | undefined;
4553
5499
  };
4554
- authorization: {
4555
- authorizationUrl?: string | undefined;
4556
- minReputationScore?: number | undefined;
4557
- resumeTokenTtl?: number | undefined;
4558
- requireAuthForUnknown?: boolean | undefined;
4559
- };
4560
5500
  };
4561
5501
  toolProtection: {
4562
5502
  source: "agentshield" | "inline" | "file";
@@ -4565,10 +5505,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4565
5505
  cacheTtl: number;
4566
5506
  } | undefined;
4567
5507
  fallback?: Record<string, {
4568
- requiresDelegation: boolean;
4569
5508
  requiredScopes: string[];
5509
+ requiresDelegation: boolean;
4570
5510
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
4571
5511
  oauthProvider?: string | undefined;
5512
+ authorization?: {
5513
+ type: "oauth";
5514
+ provider: string;
5515
+ requiredScopes?: string[] | undefined;
5516
+ } | {
5517
+ type: "mdl";
5518
+ issuer: string;
5519
+ credentialType?: string | undefined;
5520
+ } | {
5521
+ type: "idv";
5522
+ provider: string;
5523
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
5524
+ } | {
5525
+ type: "credential";
5526
+ credentialType: string;
5527
+ issuer?: string | undefined;
5528
+ } | {
5529
+ type: "none";
5530
+ } | undefined;
4572
5531
  }> | undefined;
4573
5532
  };
4574
5533
  audit: {
@@ -4674,6 +5633,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4674
5633
  };
4675
5634
  };
4676
5635
  delegation: {
5636
+ authorization: {
5637
+ authorizationUrl?: string | undefined;
5638
+ minReputationScore?: number | undefined;
5639
+ resumeTokenTtl?: number | undefined;
5640
+ requireAuthForUnknown?: boolean | undefined;
5641
+ };
4677
5642
  enabled: boolean;
4678
5643
  enforceStrictly: boolean;
4679
5644
  verifier: {
@@ -4681,12 +5646,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4681
5646
  apiUrl?: string | undefined;
4682
5647
  cacheTtl?: number | undefined;
4683
5648
  };
4684
- authorization: {
4685
- authorizationUrl?: string | undefined;
4686
- minReputationScore?: number | undefined;
4687
- resumeTokenTtl?: number | undefined;
4688
- requireAuthForUnknown?: boolean | undefined;
4689
- };
4690
5649
  };
4691
5650
  toolProtection: {
4692
5651
  source: "agentshield" | "inline" | "file";
@@ -4695,10 +5654,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4695
5654
  cacheTtl: number;
4696
5655
  } | undefined;
4697
5656
  fallback?: Record<string, {
4698
- requiresDelegation: boolean;
4699
5657
  requiredScopes: string[];
5658
+ requiresDelegation: boolean;
4700
5659
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
4701
5660
  oauthProvider?: string | undefined;
5661
+ authorization?: {
5662
+ type: "oauth";
5663
+ provider: string;
5664
+ requiredScopes?: string[] | undefined;
5665
+ } | {
5666
+ type: "mdl";
5667
+ issuer: string;
5668
+ credentialType?: string | undefined;
5669
+ } | {
5670
+ type: "idv";
5671
+ provider: string;
5672
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
5673
+ } | {
5674
+ type: "credential";
5675
+ credentialType: string;
5676
+ issuer?: string | undefined;
5677
+ } | {
5678
+ type: "none";
5679
+ } | undefined;
4702
5680
  }> | undefined;
4703
5681
  };
4704
5682
  audit: {
@@ -4798,6 +5776,12 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4798
5776
  };
4799
5777
  };
4800
5778
  delegation: {
5779
+ authorization: {
5780
+ authorizationUrl?: string | undefined;
5781
+ minReputationScore?: number | undefined;
5782
+ resumeTokenTtl?: number | undefined;
5783
+ requireAuthForUnknown?: boolean | undefined;
5784
+ };
4801
5785
  enabled: boolean;
4802
5786
  enforceStrictly: boolean;
4803
5787
  verifier: {
@@ -4805,12 +5789,6 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4805
5789
  apiUrl?: string | undefined;
4806
5790
  cacheTtl?: number | undefined;
4807
5791
  };
4808
- authorization: {
4809
- authorizationUrl?: string | undefined;
4810
- minReputationScore?: number | undefined;
4811
- resumeTokenTtl?: number | undefined;
4812
- requireAuthForUnknown?: boolean | undefined;
4813
- };
4814
5792
  };
4815
5793
  toolProtection: {
4816
5794
  source: "agentshield" | "inline" | "file";
@@ -4819,10 +5797,29 @@ export declare const updateServerConfigResponseSchema: z.ZodObject<{
4819
5797
  cacheTtl: number;
4820
5798
  } | undefined;
4821
5799
  fallback?: Record<string, {
4822
- requiresDelegation: boolean;
4823
5800
  requiredScopes: string[];
5801
+ requiresDelegation: boolean;
4824
5802
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
4825
5803
  oauthProvider?: string | undefined;
5804
+ authorization?: {
5805
+ type: "oauth";
5806
+ provider: string;
5807
+ requiredScopes?: string[] | undefined;
5808
+ } | {
5809
+ type: "mdl";
5810
+ issuer: string;
5811
+ credentialType?: string | undefined;
5812
+ } | {
5813
+ type: "idv";
5814
+ provider: string;
5815
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
5816
+ } | {
5817
+ type: "credential";
5818
+ credentialType: string;
5819
+ issuer?: string | undefined;
5820
+ } | {
5821
+ type: "none";
5822
+ } | undefined;
4826
5823
  }> | undefined;
4827
5824
  };
4828
5825
  audit: {
@@ -5003,6 +6000,12 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5003
6000
  requireAuthForUnknown?: boolean | undefined;
5004
6001
  }>;
5005
6002
  }, "strip", z.ZodTypeAny, {
6003
+ authorization: {
6004
+ authorizationUrl?: string | undefined;
6005
+ minReputationScore?: number | undefined;
6006
+ resumeTokenTtl?: number | undefined;
6007
+ requireAuthForUnknown?: boolean | undefined;
6008
+ };
5006
6009
  enabled: boolean;
5007
6010
  enforceStrictly: boolean;
5008
6011
  verifier: {
@@ -5010,13 +6013,13 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5010
6013
  apiUrl?: string | undefined;
5011
6014
  cacheTtl?: number | undefined;
5012
6015
  };
6016
+ }, {
5013
6017
  authorization: {
5014
6018
  authorizationUrl?: string | undefined;
5015
6019
  minReputationScore?: number | undefined;
5016
6020
  resumeTokenTtl?: number | undefined;
5017
6021
  requireAuthForUnknown?: boolean | undefined;
5018
6022
  };
5019
- }, {
5020
6023
  enabled: boolean;
5021
6024
  enforceStrictly: boolean;
5022
6025
  verifier: {
@@ -5024,12 +6027,6 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5024
6027
  apiUrl?: string | undefined;
5025
6028
  cacheTtl?: number | undefined;
5026
6029
  };
5027
- authorization: {
5028
- authorizationUrl?: string | undefined;
5029
- minReputationScore?: number | undefined;
5030
- resumeTokenTtl?: number | undefined;
5031
- requireAuthForUnknown?: boolean | undefined;
5032
- };
5033
6030
  }>>;
5034
6031
  toolProtection: z.ZodOptional<z.ZodObject<{
5035
6032
  source: z.ZodEnum<["agentshield", "inline", "file"]>;
@@ -5048,16 +6045,109 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5048
6045
  requiredScopes: z.ZodArray<z.ZodString, "many">;
5049
6046
  riskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
5050
6047
  oauthProvider: z.ZodOptional<z.ZodString>;
6048
+ authorization: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
6049
+ type: z.ZodLiteral<"oauth">;
6050
+ provider: z.ZodString;
6051
+ requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
6052
+ }, "strip", z.ZodTypeAny, {
6053
+ type: "oauth";
6054
+ provider: string;
6055
+ requiredScopes?: string[] | undefined;
6056
+ }, {
6057
+ type: "oauth";
6058
+ provider: string;
6059
+ requiredScopes?: string[] | undefined;
6060
+ }>, z.ZodObject<{
6061
+ type: z.ZodLiteral<"mdl">;
6062
+ issuer: z.ZodString;
6063
+ credentialType: z.ZodOptional<z.ZodString>;
6064
+ }, "strip", z.ZodTypeAny, {
6065
+ type: "mdl";
6066
+ issuer: string;
6067
+ credentialType?: string | undefined;
6068
+ }, {
6069
+ type: "mdl";
6070
+ issuer: string;
6071
+ credentialType?: string | undefined;
6072
+ }>, z.ZodObject<{
6073
+ type: z.ZodLiteral<"idv">;
6074
+ provider: z.ZodString;
6075
+ verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
6076
+ }, "strip", z.ZodTypeAny, {
6077
+ type: "idv";
6078
+ provider: string;
6079
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6080
+ }, {
6081
+ type: "idv";
6082
+ provider: string;
6083
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6084
+ }>, z.ZodObject<{
6085
+ type: z.ZodLiteral<"credential">;
6086
+ credentialType: z.ZodString;
6087
+ issuer: z.ZodOptional<z.ZodString>;
6088
+ }, "strip", z.ZodTypeAny, {
6089
+ type: "credential";
6090
+ credentialType: string;
6091
+ issuer?: string | undefined;
6092
+ }, {
6093
+ type: "credential";
6094
+ credentialType: string;
6095
+ issuer?: string | undefined;
6096
+ }>, z.ZodObject<{
6097
+ type: z.ZodLiteral<"none">;
6098
+ }, "strip", z.ZodTypeAny, {
6099
+ type: "none";
6100
+ }, {
6101
+ type: "none";
6102
+ }>]>>;
5051
6103
  }, "strip", z.ZodTypeAny, {
5052
- requiresDelegation: boolean;
5053
6104
  requiredScopes: string[];
6105
+ requiresDelegation: boolean;
5054
6106
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5055
6107
  oauthProvider?: string | undefined;
6108
+ authorization?: {
6109
+ type: "oauth";
6110
+ provider: string;
6111
+ requiredScopes?: string[] | undefined;
6112
+ } | {
6113
+ type: "mdl";
6114
+ issuer: string;
6115
+ credentialType?: string | undefined;
6116
+ } | {
6117
+ type: "idv";
6118
+ provider: string;
6119
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6120
+ } | {
6121
+ type: "credential";
6122
+ credentialType: string;
6123
+ issuer?: string | undefined;
6124
+ } | {
6125
+ type: "none";
6126
+ } | undefined;
5056
6127
  }, {
5057
- requiresDelegation: boolean;
5058
6128
  requiredScopes: string[];
6129
+ requiresDelegation: boolean;
5059
6130
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5060
6131
  oauthProvider?: string | undefined;
6132
+ authorization?: {
6133
+ type: "oauth";
6134
+ provider: string;
6135
+ requiredScopes?: string[] | undefined;
6136
+ } | {
6137
+ type: "mdl";
6138
+ issuer: string;
6139
+ credentialType?: string | undefined;
6140
+ } | {
6141
+ type: "idv";
6142
+ provider: string;
6143
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6144
+ } | {
6145
+ type: "credential";
6146
+ credentialType: string;
6147
+ issuer?: string | undefined;
6148
+ } | {
6149
+ type: "none";
6150
+ } | undefined;
5061
6151
  }>>>;
5062
6152
  }, "strip", z.ZodTypeAny, {
5063
6153
  source: "agentshield" | "inline" | "file";
@@ -5066,10 +6156,29 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5066
6156
  cacheTtl: number;
5067
6157
  } | undefined;
5068
6158
  fallback?: Record<string, {
5069
- requiresDelegation: boolean;
5070
6159
  requiredScopes: string[];
6160
+ requiresDelegation: boolean;
5071
6161
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5072
6162
  oauthProvider?: string | undefined;
6163
+ authorization?: {
6164
+ type: "oauth";
6165
+ provider: string;
6166
+ requiredScopes?: string[] | undefined;
6167
+ } | {
6168
+ type: "mdl";
6169
+ issuer: string;
6170
+ credentialType?: string | undefined;
6171
+ } | {
6172
+ type: "idv";
6173
+ provider: string;
6174
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6175
+ } | {
6176
+ type: "credential";
6177
+ credentialType: string;
6178
+ issuer?: string | undefined;
6179
+ } | {
6180
+ type: "none";
6181
+ } | undefined;
5073
6182
  }> | undefined;
5074
6183
  }, {
5075
6184
  source: "agentshield" | "inline" | "file";
@@ -5078,10 +6187,29 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5078
6187
  cacheTtl: number;
5079
6188
  } | undefined;
5080
6189
  fallback?: Record<string, {
5081
- requiresDelegation: boolean;
5082
6190
  requiredScopes: string[];
6191
+ requiresDelegation: boolean;
5083
6192
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5084
6193
  oauthProvider?: string | undefined;
6194
+ authorization?: {
6195
+ type: "oauth";
6196
+ provider: string;
6197
+ requiredScopes?: string[] | undefined;
6198
+ } | {
6199
+ type: "mdl";
6200
+ issuer: string;
6201
+ credentialType?: string | undefined;
6202
+ } | {
6203
+ type: "idv";
6204
+ provider: string;
6205
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6206
+ } | {
6207
+ type: "credential";
6208
+ credentialType: string;
6209
+ issuer?: string | undefined;
6210
+ } | {
6211
+ type: "none";
6212
+ } | undefined;
5085
6213
  }> | undefined;
5086
6214
  }>>;
5087
6215
  audit: z.ZodOptional<z.ZodObject<{
@@ -5434,6 +6562,12 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5434
6562
  };
5435
6563
  } | undefined;
5436
6564
  delegation?: {
6565
+ authorization: {
6566
+ authorizationUrl?: string | undefined;
6567
+ minReputationScore?: number | undefined;
6568
+ resumeTokenTtl?: number | undefined;
6569
+ requireAuthForUnknown?: boolean | undefined;
6570
+ };
5437
6571
  enabled: boolean;
5438
6572
  enforceStrictly: boolean;
5439
6573
  verifier: {
@@ -5441,12 +6575,6 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5441
6575
  apiUrl?: string | undefined;
5442
6576
  cacheTtl?: number | undefined;
5443
6577
  };
5444
- authorization: {
5445
- authorizationUrl?: string | undefined;
5446
- minReputationScore?: number | undefined;
5447
- resumeTokenTtl?: number | undefined;
5448
- requireAuthForUnknown?: boolean | undefined;
5449
- };
5450
6578
  } | undefined;
5451
6579
  toolProtection?: {
5452
6580
  source: "agentshield" | "inline" | "file";
@@ -5455,10 +6583,29 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5455
6583
  cacheTtl: number;
5456
6584
  } | undefined;
5457
6585
  fallback?: Record<string, {
5458
- requiresDelegation: boolean;
5459
6586
  requiredScopes: string[];
6587
+ requiresDelegation: boolean;
5460
6588
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5461
6589
  oauthProvider?: string | undefined;
6590
+ authorization?: {
6591
+ type: "oauth";
6592
+ provider: string;
6593
+ requiredScopes?: string[] | undefined;
6594
+ } | {
6595
+ type: "mdl";
6596
+ issuer: string;
6597
+ credentialType?: string | undefined;
6598
+ } | {
6599
+ type: "idv";
6600
+ provider: string;
6601
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6602
+ } | {
6603
+ type: "credential";
6604
+ credentialType: string;
6605
+ issuer?: string | undefined;
6606
+ } | {
6607
+ type: "none";
6608
+ } | undefined;
5462
6609
  }> | undefined;
5463
6610
  } | undefined;
5464
6611
  audit?: {
@@ -5544,6 +6691,12 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5544
6691
  };
5545
6692
  } | undefined;
5546
6693
  delegation?: {
6694
+ authorization: {
6695
+ authorizationUrl?: string | undefined;
6696
+ minReputationScore?: number | undefined;
6697
+ resumeTokenTtl?: number | undefined;
6698
+ requireAuthForUnknown?: boolean | undefined;
6699
+ };
5547
6700
  enabled: boolean;
5548
6701
  enforceStrictly: boolean;
5549
6702
  verifier: {
@@ -5551,12 +6704,6 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5551
6704
  apiUrl?: string | undefined;
5552
6705
  cacheTtl?: number | undefined;
5553
6706
  };
5554
- authorization: {
5555
- authorizationUrl?: string | undefined;
5556
- minReputationScore?: number | undefined;
5557
- resumeTokenTtl?: number | undefined;
5558
- requireAuthForUnknown?: boolean | undefined;
5559
- };
5560
6707
  } | undefined;
5561
6708
  toolProtection?: {
5562
6709
  source: "agentshield" | "inline" | "file";
@@ -5565,10 +6712,29 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5565
6712
  cacheTtl: number;
5566
6713
  } | undefined;
5567
6714
  fallback?: Record<string, {
5568
- requiresDelegation: boolean;
5569
6715
  requiredScopes: string[];
6716
+ requiresDelegation: boolean;
5570
6717
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5571
6718
  oauthProvider?: string | undefined;
6719
+ authorization?: {
6720
+ type: "oauth";
6721
+ provider: string;
6722
+ requiredScopes?: string[] | undefined;
6723
+ } | {
6724
+ type: "mdl";
6725
+ issuer: string;
6726
+ credentialType?: string | undefined;
6727
+ } | {
6728
+ type: "idv";
6729
+ provider: string;
6730
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6731
+ } | {
6732
+ type: "credential";
6733
+ credentialType: string;
6734
+ issuer?: string | undefined;
6735
+ } | {
6736
+ type: "none";
6737
+ } | undefined;
5572
6738
  }> | undefined;
5573
6739
  } | undefined;
5574
6740
  audit?: {
@@ -5657,6 +6823,12 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5657
6823
  };
5658
6824
  } | undefined;
5659
6825
  delegation?: {
6826
+ authorization: {
6827
+ authorizationUrl?: string | undefined;
6828
+ minReputationScore?: number | undefined;
6829
+ resumeTokenTtl?: number | undefined;
6830
+ requireAuthForUnknown?: boolean | undefined;
6831
+ };
5660
6832
  enabled: boolean;
5661
6833
  enforceStrictly: boolean;
5662
6834
  verifier: {
@@ -5664,12 +6836,6 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5664
6836
  apiUrl?: string | undefined;
5665
6837
  cacheTtl?: number | undefined;
5666
6838
  };
5667
- authorization: {
5668
- authorizationUrl?: string | undefined;
5669
- minReputationScore?: number | undefined;
5670
- resumeTokenTtl?: number | undefined;
5671
- requireAuthForUnknown?: boolean | undefined;
5672
- };
5673
6839
  } | undefined;
5674
6840
  toolProtection?: {
5675
6841
  source: "agentshield" | "inline" | "file";
@@ -5678,10 +6844,29 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5678
6844
  cacheTtl: number;
5679
6845
  } | undefined;
5680
6846
  fallback?: Record<string, {
5681
- requiresDelegation: boolean;
5682
6847
  requiredScopes: string[];
6848
+ requiresDelegation: boolean;
5683
6849
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5684
6850
  oauthProvider?: string | undefined;
6851
+ authorization?: {
6852
+ type: "oauth";
6853
+ provider: string;
6854
+ requiredScopes?: string[] | undefined;
6855
+ } | {
6856
+ type: "mdl";
6857
+ issuer: string;
6858
+ credentialType?: string | undefined;
6859
+ } | {
6860
+ type: "idv";
6861
+ provider: string;
6862
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6863
+ } | {
6864
+ type: "credential";
6865
+ credentialType: string;
6866
+ issuer?: string | undefined;
6867
+ } | {
6868
+ type: "none";
6869
+ } | undefined;
5685
6870
  }> | undefined;
5686
6871
  } | undefined;
5687
6872
  audit?: {
@@ -5770,6 +6955,12 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5770
6955
  };
5771
6956
  } | undefined;
5772
6957
  delegation?: {
6958
+ authorization: {
6959
+ authorizationUrl?: string | undefined;
6960
+ minReputationScore?: number | undefined;
6961
+ resumeTokenTtl?: number | undefined;
6962
+ requireAuthForUnknown?: boolean | undefined;
6963
+ };
5773
6964
  enabled: boolean;
5774
6965
  enforceStrictly: boolean;
5775
6966
  verifier: {
@@ -5777,12 +6968,6 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5777
6968
  apiUrl?: string | undefined;
5778
6969
  cacheTtl?: number | undefined;
5779
6970
  };
5780
- authorization: {
5781
- authorizationUrl?: string | undefined;
5782
- minReputationScore?: number | undefined;
5783
- resumeTokenTtl?: number | undefined;
5784
- requireAuthForUnknown?: boolean | undefined;
5785
- };
5786
6971
  } | undefined;
5787
6972
  toolProtection?: {
5788
6973
  source: "agentshield" | "inline" | "file";
@@ -5791,10 +6976,29 @@ export declare const validateServerConfigRequestSchema: z.ZodObject<{
5791
6976
  cacheTtl: number;
5792
6977
  } | undefined;
5793
6978
  fallback?: Record<string, {
5794
- requiresDelegation: boolean;
5795
6979
  requiredScopes: string[];
6980
+ requiresDelegation: boolean;
5796
6981
  riskLevel?: "low" | "medium" | "high" | "critical" | undefined;
5797
6982
  oauthProvider?: string | undefined;
6983
+ authorization?: {
6984
+ type: "oauth";
6985
+ provider: string;
6986
+ requiredScopes?: string[] | undefined;
6987
+ } | {
6988
+ type: "mdl";
6989
+ issuer: string;
6990
+ credentialType?: string | undefined;
6991
+ } | {
6992
+ type: "idv";
6993
+ provider: string;
6994
+ verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
6995
+ } | {
6996
+ type: "credential";
6997
+ credentialType: string;
6998
+ issuer?: string | undefined;
6999
+ } | {
7000
+ type: "none";
7001
+ } | undefined;
5798
7002
  }> | undefined;
5799
7003
  } | undefined;
5800
7004
  audit?: {