@vibe-agent-toolkit/resources 0.1.39-rc.8 → 0.1.39

package/dist/schemas/link-auth.d.ts

@@ -3,82 +3,290 @@
  *
  * Validates the shape of an adopter's linkAuth configuration: providers
  * (each either a `use: <macro>` reference or a full inline provider) plus
- * an optional cache config. Strict — typos in provider field names are
- * errors, per Postel's law ("writing our output → conservative").
+ * an optional cache config. **Passthrough** — per the repo Postel's Law
+ * rule, schemas that parse external data (adopter `vibe-agent-toolkit.config.yaml`)
+ * are liberal: unknown fields pass through rather than abort the parse, so
+ * an adopter with a forward-compatible field or a typo gets `vat resources
+ * validate` degrading gracefully instead of crashing. Typo-catching DX is
+ * a separate lint/warn pass, not a hard parse failure.
  *
  * Provider entries accept EITHER:
  *   - `{ use: <name>, ...overrides }` — reference a shipped macro by name;
- *     override fields are deep-merged on top at expansion time. Overrides
- *     are NOT strictly typed at this layer because they must match the
- *     macro's shape, which we cannot see until expansion. A typo in an
- *     override silently no-ops; the full provider shape is validated
- *     after expansion (slice 2 wires that).
- *   - A full inline `{ match, rewrite, auth, token, check }` — every field
- *     required, every nested object strict.
+ *     override fields are deep-merged on top at expansion time.
+ *   - A full inline `{ match, rewrite, auth, token, check }` — every required
+ *     field present, with declared-field types still enforced (passthrough
+ *     only relaxes unknown-key handling, not type checking on known fields).
  *
  * Mirrors the runtime types in `@vibe-agent-toolkit/utils`'s `link-auth/`
  * module. Keep these aligned: a config that parses here must satisfy the
  * `Provider` / `LinkAuthConfig` interfaces over there.
  *
- * Per design issue #113 §4 (vocabulary) and §5 (macros).
+ * Per design issue #113 §4 (vocabulary) and §5 (macros), and the repo
+ * CLAUDE.md Postel's Law rule for adopter-facing configs.
  */
 import { z } from 'zod';
 export declare const ProviderMatchSchema: z.ZodObject<{
     host: z.ZodString;
     excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    host: string;
-    excludeHost?: string[] | undefined;
-}, {
-    host: string;
-    excludeHost?: string[] | undefined;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    host: z.ZodString;
+    excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    host: z.ZodString;
+    excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, z.ZodTypeAny, "passthrough">>;
 export declare const RewriteRuleSchema: z.ZodObject<{
     when: z.ZodString;
     vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     to: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    when: string;
-    to: string;
-    vars?: Record<string, string> | undefined;
-}, {
-    when: string;
-    to: string;
-    vars?: Record<string, string> | undefined;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    when: z.ZodString;
+    vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    to: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    when: z.ZodString;
+    vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    to: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
 export declare const ProviderAuthSchema: z.ZodObject<{
     headers: z.ZodRecord<z.ZodString, z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    headers: Record<string, string>;
-}, {
-    headers: Record<string, string>;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+/**
+ * Optional fetch-mode header overrides (§6.2). Same shape as ProviderAuth,
+ * different role: `auth.headers` covers the health-check request; `fetch.headers`
+ * covers content retrieval (e.g. GitHub `application/vnd.github.raw` instead of
+ * `application/vnd.github+json`). Both templates expand against the same context.
+ */
+export declare const ProviderFetchSchema: z.ZodObject<{
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
 export declare const TokenSourceSchema: z.ZodUnion<[z.ZodObject<{
     env: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    env: string;
-}, {
-    env: string;
-}>, z.ZodObject<{
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    env: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    env: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+    command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
-}, "strict", z.ZodTypeAny, {
-    command: string | string[];
-}, {
-    command: string | string[];
-}>]>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+}, z.ZodTypeAny, "passthrough">>]>;
 export declare const ProviderCheckSchema: z.ZodObject<{
     method: z.ZodEnum<["GET", "HEAD"]>;
     aliveStatus: z.ZodArray<z.ZodNumber, "many">;
     notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
-}, "strict", z.ZodTypeAny, {
-    method: "GET" | "HEAD";
-    aliveStatus: number[];
-    notFoundMeaning: "ambiguous" | "dead";
-}, {
-    method: "GET" | "HEAD";
-    aliveStatus: number[];
-    notFoundMeaning: "ambiguous" | "dead";
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    method: z.ZodEnum<["GET", "HEAD"]>;
+    aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+    notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    method: z.ZodEnum<["GET", "HEAD"]>;
+    aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+    notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const InlineProviderSchema: z.ZodObject<{
+    match: z.ZodObject<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
+    rewrite: z.ZodArray<z.ZodObject<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    auth: z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    fetch: z.ZodOptional<z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        env: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+    check: z.ZodObject<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    match: z.ZodObject<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
+    rewrite: z.ZodArray<z.ZodObject<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    auth: z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    fetch: z.ZodOptional<z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        env: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+    check: z.ZodObject<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    match: z.ZodObject<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
+    rewrite: z.ZodArray<z.ZodObject<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    auth: z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    fetch: z.ZodOptional<z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        env: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+    check: z.ZodObject<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, z.ZodTypeAny, "passthrough">>;
 export declare const ProviderEntrySchema: z.ZodUnion<[z.ZodObject<{
     use: z.ZodString;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
@@ -89,293 +297,831 @@ export declare const ProviderEntrySchema: z.ZodUnion<[z.ZodObject<{
     match: z.ZodObject<{
         host: z.ZodString;
         excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        host: string;
-        excludeHost?: string[] | undefined;
-    }, {
-        host: string;
-        excludeHost?: string[] | undefined;
-    }>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
     rewrite: z.ZodArray<z.ZodObject<{
         when: z.ZodString;
         vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         to: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        when: string;
-        to: string;
-        vars?: Record<string, string> | undefined;
-    }, {
-        when: string;
-        to: string;
-        vars?: Record<string, string> | undefined;
-    }>, "many">;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
     auth: z.ZodObject<{
         headers: z.ZodRecord<z.ZodString, z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        headers: Record<string, string>;
-    }, {
-        headers: Record<string, string>;
-    }>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    fetch: z.ZodOptional<z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
     token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
         env: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        env: string;
-    }, {
-        env: string;
-    }>, z.ZodObject<{
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
         command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
-    }, "strict", z.ZodTypeAny, {
-        command: string | string[];
-    }, {
-        command: string | string[];
-    }>]>, "many">;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
     check: z.ZodObject<{
         method: z.ZodEnum<["GET", "HEAD"]>;
         aliveStatus: z.ZodArray<z.ZodNumber, "many">;
         notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
-    }, "strict", z.ZodTypeAny, {
-        method: "GET" | "HEAD";
-        aliveStatus: number[];
-        notFoundMeaning: "ambiguous" | "dead";
-    }, {
-        method: "GET" | "HEAD";
-        aliveStatus: number[];
-        notFoundMeaning: "ambiguous" | "dead";
-    }>;
-}, "strict", z.ZodTypeAny, {
-    match: {
-        host: string;
-        excludeHost?: string[] | undefined;
-    };
-    rewrite: {
-        when: string;
-        to: string;
-        vars?: Record<string, string> | undefined;
-    }[];
-    auth: {
-        headers: Record<string, string>;
-    };
-    token: ({
-        env: string;
-    } | {
-        command: string | string[];
-    })[];
-    check: {
-        method: "GET" | "HEAD";
-        aliveStatus: number[];
-        notFoundMeaning: "ambiguous" | "dead";
-    };
-}, {
-    match: {
-        host: string;
-        excludeHost?: string[] | undefined;
-    };
-    rewrite: {
-        when: string;
-        to: string;
-        vars?: Record<string, string> | undefined;
-    }[];
-    auth: {
-        headers: Record<string, string>;
-    };
-    token: ({
-        env: string;
-    } | {
-        command: string | string[];
-    })[];
-    check: {
-        method: "GET" | "HEAD";
-        aliveStatus: number[];
-        notFoundMeaning: "ambiguous" | "dead";
-    };
-}>]>;
-export declare const LinkAuthCacheSchema: z.ZodObject<{
-    ttlMinutes: z.ZodOptional<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    ttlMinutes?: number | undefined;
-}, {
-    ttlMinutes?: number | undefined;
-}>;
-export declare const LinkAuthConfigSchema: z.ZodObject<{
-    cache: z.ZodOptional<z.ZodObject<{
-        ttlMinutes: z.ZodOptional<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        ttlMinutes?: number | undefined;
-    }, {
-        ttlMinutes?: number | undefined;
-    }>>;
-    providers: z.ZodArray<z.ZodUnion<[z.ZodObject<{
-        use: z.ZodString;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        use: z.ZodString;
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        use: z.ZodString;
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    match: z.ZodObject<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
+    rewrite: z.ZodArray<z.ZodObject<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    auth: z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    fetch: z.ZodOptional<z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        env: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+    check: z.ZodObject<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    match: z.ZodObject<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        host: z.ZodString;
+        excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>;
+    rewrite: z.ZodArray<z.ZodObject<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        when: z.ZodString;
+        vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        to: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    auth: z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    fetch: z.ZodOptional<z.ZodObject<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        env: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        env: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+    check: z.ZodObject<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        method: z.ZodEnum<["GET", "HEAD"]>;
+        aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+        notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, z.ZodTypeAny, "passthrough">>]>;
+export declare const LinkAuthCacheSchema: z.ZodObject<{
+    ttlMinutes: z.ZodOptional<z.ZodNumber>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    ttlMinutes: z.ZodOptional<z.ZodNumber>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    ttlMinutes: z.ZodOptional<z.ZodNumber>;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const LinkAuthConfigSchema: z.ZodObject<{
+    cache: z.ZodOptional<z.ZodObject<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    providers: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        use: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        use: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        use: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    cache: z.ZodOptional<z.ZodObject<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    providers: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        use: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        use: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        use: z.ZodString;
     }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
         match: z.ZodObject<{
             host: z.ZodString;
             excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        }, "strict", z.ZodTypeAny, {
-            host: string;
-            excludeHost?: string[] | undefined;
-        }, {
-            host: string;
-            excludeHost?: string[] | undefined;
-        }>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
         rewrite: z.ZodArray<z.ZodObject<{
             when: z.ZodString;
             vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             to: z.ZodString;
-        }, "strict", z.ZodTypeAny, {
-            when: string;
-            to: string;
-            vars?: Record<string, string> | undefined;
-        }, {
-            when: string;
-            to: string;
-            vars?: Record<string, string> | undefined;
-        }>, "many">;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
         auth: z.ZodObject<{
             headers: z.ZodRecord<z.ZodString, z.ZodString>;
-        }, "strict", z.ZodTypeAny, {
-            headers: Record<string, string>;
-        }, {
-            headers: Record<string, string>;
-        }>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
         token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
             env: z.ZodString;
-        }, "strict", z.ZodTypeAny, {
-            env: string;
-        }, {
-            env: string;
-        }>, z.ZodObject<{
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
             command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
-        }, "strict", z.ZodTypeAny, {
-            command: string | string[];
-        }, {
-            command: string | string[];
-        }>]>, "many">;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
         check: z.ZodObject<{
             method: z.ZodEnum<["GET", "HEAD"]>;
             aliveStatus: z.ZodArray<z.ZodNumber, "many">;
             notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
-        }, "strict", z.ZodTypeAny, {
-            method: "GET" | "HEAD";
-            aliveStatus: number[];
-            notFoundMeaning: "ambiguous" | "dead";
-        }, {
-            method: "GET" | "HEAD";
-            aliveStatus: number[];
-            notFoundMeaning: "ambiguous" | "dead";
-        }>;
-    }, "strict", z.ZodTypeAny, {
-        match: {
-            host: string;
-            excludeHost?: string[] | undefined;
-        };
-        rewrite: {
-            when: string;
-            to: string;
-            vars?: Record<string, string> | undefined;
-        }[];
-        auth: {
-            headers: Record<string, string>;
-        };
-        token: ({
-            env: string;
-        } | {
-            command: string | string[];
-        })[];
-        check: {
-            method: "GET" | "HEAD";
-            aliveStatus: number[];
-            notFoundMeaning: "ambiguous" | "dead";
-        };
-    }, {
-        match: {
-            host: string;
-            excludeHost?: string[] | undefined;
-        };
-        rewrite: {
-            when: string;
-            to: string;
-            vars?: Record<string, string> | undefined;
-        }[];
-        auth: {
-            headers: Record<string, string>;
-        };
-        token: ({
-            env: string;
-        } | {
-            command: string | string[];
-        })[];
-        check: {
-            method: "GET" | "HEAD";
-            aliveStatus: number[];
-            notFoundMeaning: "ambiguous" | "dead";
-        };
-    }>]>, "many">;
-}, "strict", z.ZodTypeAny, {
-    providers: ({
-        match: {
-            host: string;
-            excludeHost?: string[] | undefined;
-        };
-        rewrite: {
-            when: string;
-            to: string;
-            vars?: Record<string, string> | undefined;
-        }[];
-        auth: {
-            headers: Record<string, string>;
-        };
-        token: ({
-            env: string;
-        } | {
-            command: string | string[];
-        })[];
-        check: {
-            method: "GET" | "HEAD";
-            aliveStatus: number[];
-            notFoundMeaning: "ambiguous" | "dead";
-        };
-    } | z.objectOutputType<{
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    cache: z.ZodOptional<z.ZodObject<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        ttlMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    providers: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        use: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         use: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">)[];
-    cache?: {
-        ttlMinutes?: number | undefined;
-    } | undefined;
-}, {
-    providers: ({
-        match: {
-            host: string;
-            excludeHost?: string[] | undefined;
-        };
-        rewrite: {
-            when: string;
-            to: string;
-            vars?: Record<string, string> | undefined;
-        }[];
-        auth: {
-            headers: Record<string, string>;
-        };
-        token: ({
-            env: string;
-        } | {
-            command: string | string[];
-        })[];
-        check: {
-            method: "GET" | "HEAD";
-            aliveStatus: number[];
-            notFoundMeaning: "ambiguous" | "dead";
-        };
-    } | z.objectInputType<{
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         use: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">)[];
-    cache?: {
-        ttlMinutes?: number | undefined;
-    } | undefined;
-}>;
-export type LinkAuthConfig = z.infer<typeof LinkAuthConfigSchema>;
+    }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        match: z.ZodObject<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            host: z.ZodString;
+            excludeHost: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>;
+        rewrite: z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            when: z.ZodString;
+            vars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            to: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, "many">;
+        auth: z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>;
+        fetch: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+        token: z.ZodArray<z.ZodUnion<[z.ZodObject<{
+            env: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            env: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+        }, z.ZodTypeAny, "passthrough">>]>, "many">;
+        check: z.ZodObject<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            method: z.ZodEnum<["GET", "HEAD"]>;
+            aliveStatus: z.ZodArray<z.ZodNumber, "many">;
+            notFoundMeaning: z.ZodEnum<["ambiguous", "dead"]>;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">;
+}, z.ZodTypeAny, "passthrough">>;
+/**
+ * Adopter-facing config shape — what an `vibe-agent-toolkit.config.yaml`
+ * parses to. Distinct from `@vibe-agent-toolkit/utils`'s `LinkAuthConfig`
+ * (the engine shape, with fully-expanded providers only). The bridge
+ * function `buildLinkAuthEngineConfig` converts between the two.
+ */
+export type LinkAuthProjectConfig = z.infer<typeof LinkAuthConfigSchema>;
 export type ProviderEntry = z.infer<typeof ProviderEntrySchema>;
 export type RewriteRule = z.infer<typeof RewriteRuleSchema>;
 export type TokenSource = z.infer<typeof TokenSourceSchema>;