@noodleseed/one 0.138.0 → 0.139.1

package/node_modules/@noodle-borg/connector-defs/dist/schema.d.ts

@@ -229,6 +229,98 @@ declare const httpOperationSchema: z.ZodObject<{
         audience: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
+/** One frozen upstream MCP tool projected as one ordinary connector operation. */
+declare const mcpOperationSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        read: "read";
+        action: "action";
+    }>;
+    tool: z.ZodString;
+    input: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+    output: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+    result: z.ZodDefault<z.ZodEnum<{
+        text: "text";
+        structured: "structured";
+    }>>;
+    auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"bearer">;
+        secret: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"apiKey">;
+        header: z.ZodString;
+        secret: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clientCredentials">;
+        profile: z.ZodDefault<z.ZodEnum<{
+            custom: "custom";
+            oauth2: "oauth2";
+        }>>;
+        tokenUrl: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: z.ZodString;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audience: z.ZodOptional<z.ZodString>;
+        authMethod: z.ZodOptional<z.ZodEnum<{
+            client_secret_basic: "client_secret_basic";
+            client_secret_post: "client_secret_post";
+        }>>;
+        custom: z.ZodOptional<z.ZodObject<{
+            requestFormat: z.ZodDefault<z.ZodEnum<{
+                json: "json";
+                form: "form";
+            }>>;
+            clientIdField: z.ZodDefault<z.ZodString>;
+            clientSecretField: z.ZodDefault<z.ZodString>;
+            tokenResponsePath: z.ZodDefault<z.ZodString>;
+            expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                jwt: "jwt";
+                expiresIn: "expiresIn";
+                expiresAt: "expiresAt";
+            }>>>;
+            fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"delegatedOAuth">;
+        provider: z.ZodString;
+        tokenUrl: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
+        clientSecret: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        authMethod: z.ZodOptional<z.ZodEnum<{
+            client_secret_basic: "client_secret_basic";
+            client_secret_post: "client_secret_post";
+        }>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"delegatedSessionCookie">;
+        provider: z.ZodString;
+        sessionUrl: z.ZodString;
+        tokenField: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"delegatedTokenExchange">;
+        tokenUrl: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: z.ZodString;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audience: z.ZodOptional<z.ZodString>;
+        authMethod: z.ZodOptional<z.ZodEnum<{
+            client_secret_basic: "client_secret_basic";
+            client_secret_post: "client_secret_post";
+        }>>;
+    }, z.core.$strict>], "kind">>;
+    limits: z.ZodOptional<z.ZodObject<{
+        maxResponseBytes: z.ZodNumber;
+    }, z.core.$strict>>;
+    fake: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        structuredContent: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>, z.ZodObject<{
+        text: z.ZodString;
+    }, z.core.$strict>]>>;
+    credentials: z.ZodOptional<z.ZodObject<{
+        profiles: z.ZodArray<z.ZodString>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audience: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 /**
  * A sandboxed-code operation: a JavaScript expression that evaluates to a handler `fn(input) -> output`,
  * run with no ambient authority. No `path`/`method`/`request`/`response` — those are HTTP transport
@@ -497,6 +589,189 @@ declare const httpConnectorDefSchema: z.ZodObject<{
         header: z.ZodString;
     }, z.core.$strict>], "kind">>>;
 }, z.core.$strict>;
+/** A governed remote MCP connector with a compile-time-frozen tool snapshot. */
+declare const mcpConnectorDefSchema: z.ZodObject<{
+    mcp: z.ZodObject<{
+        endpoint: z.ZodString;
+        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"bearer">;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"apiKey">;
+            header: z.ZodString;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clientCredentials">;
+            profile: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                oauth2: "oauth2";
+            }>>;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+            custom: z.ZodOptional<z.ZodObject<{
+                requestFormat: z.ZodDefault<z.ZodEnum<{
+                    json: "json";
+                    form: "form";
+                }>>;
+                clientIdField: z.ZodDefault<z.ZodString>;
+                clientSecretField: z.ZodDefault<z.ZodString>;
+                tokenResponsePath: z.ZodDefault<z.ZodString>;
+                expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                    jwt: "jwt";
+                    expiresIn: "expiresIn";
+                    expiresAt: "expiresAt";
+                }>>>;
+                fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedOAuth">;
+            provider: z.ZodString;
+            tokenUrl: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedSessionCookie">;
+            provider: z.ZodString;
+            sessionUrl: z.ZodString;
+            tokenField: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedTokenExchange">;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>], "kind">>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxResponseBytes: z.ZodOptional<z.ZodNumber>;
+        protocol: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
+            legacy: "legacy";
+            modern: "modern";
+        }>>;
+    }, z.core.$strict>;
+    operations: z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<{
+            read: "read";
+            action: "action";
+        }>;
+        tool: z.ZodString;
+        input: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+        output: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+        result: z.ZodDefault<z.ZodEnum<{
+            text: "text";
+            structured: "structured";
+        }>>;
+        auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"bearer">;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"apiKey">;
+            header: z.ZodString;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clientCredentials">;
+            profile: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                oauth2: "oauth2";
+            }>>;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+            custom: z.ZodOptional<z.ZodObject<{
+                requestFormat: z.ZodDefault<z.ZodEnum<{
+                    json: "json";
+                    form: "form";
+                }>>;
+                clientIdField: z.ZodDefault<z.ZodString>;
+                clientSecretField: z.ZodDefault<z.ZodString>;
+                tokenResponsePath: z.ZodDefault<z.ZodString>;
+                expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                    jwt: "jwt";
+                    expiresIn: "expiresIn";
+                    expiresAt: "expiresAt";
+                }>>>;
+                fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedOAuth">;
+            provider: z.ZodString;
+            tokenUrl: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedSessionCookie">;
+            provider: z.ZodString;
+            sessionUrl: z.ZodString;
+            tokenField: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedTokenExchange">;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>], "kind">>;
+        limits: z.ZodOptional<z.ZodObject<{
+            maxResponseBytes: z.ZodNumber;
+        }, z.core.$strict>>;
+        fake: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            structuredContent: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strict>, z.ZodObject<{
+            text: z.ZodString;
+        }, z.core.$strict>]>>;
+        credentials: z.ZodOptional<z.ZodObject<{
+            profiles: z.ZodArray<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    id: z.ZodString;
+    version: z.ZodString;
+    kind: z.ZodOptional<z.ZodEnum<{
+        custom: "custom";
+        builtin: "builtin";
+        catalog: "catalog";
+    }>>;
+    credentialProfiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"bearer">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"apiKey">;
+        header: z.ZodString;
+    }, z.core.$strict>], "kind">>>;
+}, z.core.$strict>;
 /** A compute connector: sandboxed-code operations, no `http` block. */
 declare const computeConnectorDefSchema: z.ZodObject<{
     operations: z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -779,9 +1054,190 @@ declare const connectorDefSchema: z.ZodUnion<readonly [z.ZodObject<{
         header: z.ZodString;
     }, z.core.$strict>], "kind">>>;
 }, z.core.$strict>, z.ZodObject<{
-    operations: z.ZodRecord<z.ZodString, z.ZodObject<{
-        type: z.ZodEnum<{
-            read: "read";
+    mcp: z.ZodObject<{
+        endpoint: z.ZodString;
+        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"bearer">;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"apiKey">;
+            header: z.ZodString;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clientCredentials">;
+            profile: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                oauth2: "oauth2";
+            }>>;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+            custom: z.ZodOptional<z.ZodObject<{
+                requestFormat: z.ZodDefault<z.ZodEnum<{
+                    json: "json";
+                    form: "form";
+                }>>;
+                clientIdField: z.ZodDefault<z.ZodString>;
+                clientSecretField: z.ZodDefault<z.ZodString>;
+                tokenResponsePath: z.ZodDefault<z.ZodString>;
+                expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                    jwt: "jwt";
+                    expiresIn: "expiresIn";
+                    expiresAt: "expiresAt";
+                }>>>;
+                fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedOAuth">;
+            provider: z.ZodString;
+            tokenUrl: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedSessionCookie">;
+            provider: z.ZodString;
+            sessionUrl: z.ZodString;
+            tokenField: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedTokenExchange">;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>], "kind">>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxResponseBytes: z.ZodOptional<z.ZodNumber>;
+        protocol: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
+            legacy: "legacy";
+            modern: "modern";
+        }>>;
+    }, z.core.$strict>;
+    operations: z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<{
+            read: "read";
+            action: "action";
+        }>;
+        tool: z.ZodString;
+        input: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+        output: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+        result: z.ZodDefault<z.ZodEnum<{
+            text: "text";
+            structured: "structured";
+        }>>;
+        auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"bearer">;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"apiKey">;
+            header: z.ZodString;
+            secret: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clientCredentials">;
+            profile: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                oauth2: "oauth2";
+            }>>;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+            custom: z.ZodOptional<z.ZodObject<{
+                requestFormat: z.ZodDefault<z.ZodEnum<{
+                    json: "json";
+                    form: "form";
+                }>>;
+                clientIdField: z.ZodDefault<z.ZodString>;
+                clientSecretField: z.ZodDefault<z.ZodString>;
+                tokenResponsePath: z.ZodDefault<z.ZodString>;
+                expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                    jwt: "jwt";
+                    expiresIn: "expiresIn";
+                    expiresAt: "expiresAt";
+                }>>>;
+                fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedOAuth">;
+            provider: z.ZodString;
+            tokenUrl: z.ZodOptional<z.ZodString>;
+            clientId: z.ZodOptional<z.ZodString>;
+            clientSecret: z.ZodOptional<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedSessionCookie">;
+            provider: z.ZodString;
+            sessionUrl: z.ZodString;
+            tokenField: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"delegatedTokenExchange">;
+            tokenUrl: z.ZodString;
+            clientId: z.ZodString;
+            clientSecret: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+            authMethod: z.ZodOptional<z.ZodEnum<{
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+        }, z.core.$strict>], "kind">>;
+        limits: z.ZodOptional<z.ZodObject<{
+            maxResponseBytes: z.ZodNumber;
+        }, z.core.$strict>>;
+        fake: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            structuredContent: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strict>, z.ZodObject<{
+            text: z.ZodString;
+        }, z.core.$strict>]>>;
+        credentials: z.ZodOptional<z.ZodObject<{
+            profiles: z.ZodArray<z.ZodString>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            audience: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    id: z.ZodString;
+    version: z.ZodString;
+    kind: z.ZodOptional<z.ZodEnum<{
+        custom: "custom";
+        builtin: "builtin";
+        catalog: "catalog";
+    }>>;
+    credentialProfiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"bearer">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"apiKey">;
+        header: z.ZodString;
+    }, z.core.$strict>], "kind">>>;
+}, z.core.$strict>, z.ZodObject<{
+    operations: z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<{
+            read: "read";
             action: "action";
         }>;
         input: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
@@ -1055,6 +1511,187 @@ export declare const connectorFileSchema: z.ZodObject<{
             kind: z.ZodLiteral<"apiKey">;
             header: z.ZodString;
         }, z.core.$strict>], "kind">>>;
+    }, z.core.$strict>, z.ZodObject<{
+        mcp: z.ZodObject<{
+            endpoint: z.ZodString;
+            allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"bearer">;
+                secret: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"apiKey">;
+                header: z.ZodString;
+                secret: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"clientCredentials">;
+                profile: z.ZodDefault<z.ZodEnum<{
+                    custom: "custom";
+                    oauth2: "oauth2";
+                }>>;
+                tokenUrl: z.ZodString;
+                clientId: z.ZodString;
+                clientSecret: z.ZodString;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                audience: z.ZodOptional<z.ZodString>;
+                authMethod: z.ZodOptional<z.ZodEnum<{
+                    client_secret_basic: "client_secret_basic";
+                    client_secret_post: "client_secret_post";
+                }>>;
+                custom: z.ZodOptional<z.ZodObject<{
+                    requestFormat: z.ZodDefault<z.ZodEnum<{
+                        json: "json";
+                        form: "form";
+                    }>>;
+                    clientIdField: z.ZodDefault<z.ZodString>;
+                    clientSecretField: z.ZodDefault<z.ZodString>;
+                    tokenResponsePath: z.ZodDefault<z.ZodString>;
+                    expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                        jwt: "jwt";
+                        expiresIn: "expiresIn";
+                        expiresAt: "expiresAt";
+                    }>>>;
+                    fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"delegatedOAuth">;
+                provider: z.ZodString;
+                tokenUrl: z.ZodOptional<z.ZodString>;
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                authMethod: z.ZodOptional<z.ZodEnum<{
+                    client_secret_basic: "client_secret_basic";
+                    client_secret_post: "client_secret_post";
+                }>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"delegatedSessionCookie">;
+                provider: z.ZodString;
+                sessionUrl: z.ZodString;
+                tokenField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"delegatedTokenExchange">;
+                tokenUrl: z.ZodString;
+                clientId: z.ZodString;
+                clientSecret: z.ZodString;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                audience: z.ZodOptional<z.ZodString>;
+                authMethod: z.ZodOptional<z.ZodEnum<{
+                    client_secret_basic: "client_secret_basic";
+                    client_secret_post: "client_secret_post";
+                }>>;
+            }, z.core.$strict>], "kind">>;
+            timeoutMs: z.ZodOptional<z.ZodNumber>;
+            maxResponseBytes: z.ZodOptional<z.ZodNumber>;
+            protocol: z.ZodOptional<z.ZodEnum<{
+                auto: "auto";
+                legacy: "legacy";
+                modern: "modern";
+            }>>;
+        }, z.core.$strict>;
+        operations: z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                read: "read";
+                action: "action";
+            }>;
+            tool: z.ZodString;
+            input: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+            output: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodTransform<Record<string, unknown>, Record<string, unknown>>>>;
+            result: z.ZodDefault<z.ZodEnum<{
+                text: "text";
+                structured: "structured";
+            }>>;
+            auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"bearer">;
+                secret: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"apiKey">;
+                header: z.ZodString;
+                secret: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"clientCredentials">;
+                profile: z.ZodDefault<z.ZodEnum<{
+                    custom: "custom";
+                    oauth2: "oauth2";
+                }>>;
+                tokenUrl: z.ZodString;
+                clientId: z.ZodString;
+                clientSecret: z.ZodString;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                audience: z.ZodOptional<z.ZodString>;
+                authMethod: z.ZodOptional<z.ZodEnum<{
+                    client_secret_basic: "client_secret_basic";
+                    client_secret_post: "client_secret_post";
+                }>>;
+                custom: z.ZodOptional<z.ZodObject<{
+                    requestFormat: z.ZodDefault<z.ZodEnum<{
+                        json: "json";
+                        form: "form";
+                    }>>;
+                    clientIdField: z.ZodDefault<z.ZodString>;
+                    clientSecretField: z.ZodDefault<z.ZodString>;
+                    tokenResponsePath: z.ZodDefault<z.ZodString>;
+                    expirySource: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                        jwt: "jwt";
+                        expiresIn: "expiresIn";
+                        expiresAt: "expiresAt";
+                    }>>>;
+                    fallbackTtlSeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"delegatedOAuth">;
+                provider: z.ZodString;
+                tokenUrl: z.ZodOptional<z.ZodString>;
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                authMethod: z.ZodOptional<z.ZodEnum<{
+                    client_secret_basic: "client_secret_basic";
+                    client_secret_post: "client_secret_post";
+                }>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"delegatedSessionCookie">;
+                provider: z.ZodString;
+                sessionUrl: z.ZodString;
+                tokenField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"delegatedTokenExchange">;
+                tokenUrl: z.ZodString;
+                clientId: z.ZodString;
+                clientSecret: z.ZodString;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                audience: z.ZodOptional<z.ZodString>;
+                authMethod: z.ZodOptional<z.ZodEnum<{
+                    client_secret_basic: "client_secret_basic";
+                    client_secret_post: "client_secret_post";
+                }>>;
+            }, z.core.$strict>], "kind">>;
+            limits: z.ZodOptional<z.ZodObject<{
+                maxResponseBytes: z.ZodNumber;
+            }, z.core.$strict>>;
+            fake: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+                structuredContent: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strict>, z.ZodObject<{
+                text: z.ZodString;
+            }, z.core.$strict>]>>;
+            credentials: z.ZodOptional<z.ZodObject<{
+                profiles: z.ZodArray<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                audience: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        id: z.ZodString;
+        version: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            custom: "custom";
+            builtin: "builtin";
+            catalog: "catalog";
+        }>>;
+        credentialProfiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"bearer">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"apiKey">;
+            header: z.ZodString;
+        }, z.core.$strict>], "kind">>>;
     }, z.core.$strict>, z.ZodObject<{
         operations: z.ZodRecord<z.ZodString, z.ZodObject<{
             type: z.ZodEnum<{
@@ -1096,8 +1733,10 @@ export type ConnectorFile = z.infer<typeof connectorFileSchema>;
 export type ConnectorDef = z.infer<typeof connectorDefSchema>;
 export type HttpConnectorDef = z.infer<typeof httpConnectorDefSchema>;
 export type ComputeConnectorDef = z.infer<typeof computeConnectorDefSchema>;
+export type McpConnectorDef = z.infer<typeof mcpConnectorDefSchema>;
 export type HttpOperationDef = z.infer<typeof httpOperationSchema>;
 export type ComputeOperationDef = z.infer<typeof computeOperationSchema>;
+export type McpOperationDef = z.infer<typeof mcpOperationSchema>;
 export type HttpAuthDef = z.infer<typeof httpAuthSchema>;
 export type CredentialProfileDef = z.infer<typeof credentialProfileSchema>;
 export type OperationCredentialsDef = z.infer<typeof operationCredentialsSchema>;