@zuplo/cli 6.72.1 → 6.72.3

package/node_modules/@zuplo/runtime/out/types/mcp-gateway/index.d.ts

@@ -575,6 +575,52 @@ declare type HttpStatusCodeRangeDefinition =
   | "4XX"
   | "5XX";
 
+/**
+ * Client authentication used at the token endpoint.
+ * @public
+ */
+declare type IdJagClientAuth =
+  | {
+      method: "client_secret_post";
+      clientId: string;
+      /**
+       * OAuth client secret. Use `$env(VAR_NAME)` to source from an environment variable.
+       */
+      clientSecret: string;
+    }
+  | {
+      method: "client_secret_basic";
+      clientId: string;
+      /**
+       * OAuth client secret. Use `$env(VAR_NAME)` to source from an environment variable.
+       */
+      clientSecret: string;
+    }
+  | {
+      method: "private_key_jwt";
+      clientId: string;
+      /**
+       * PEM-encoded private key used to sign the client assertion. Use `$env(VAR_NAME)` to source from an environment variable.
+       */
+      privateKeyPem: string;
+      /**
+       * JWS algorithm used to sign the client assertion.
+       */
+      algorithm?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512";
+      /**
+       * Optional `kid` header set on the client assertion, for providers that select the verification key by key id.
+       */
+      keyId?: string;
+      /**
+       * Optional override for the client assertion `aud` claim. Defaults to the token endpoint URL.
+       */
+      audience?: string;
+      /**
+       * Client assertion lifetime in seconds.
+       */
+      expiresInSeconds?: number;
+    };
+
 /**
  * A policy that can modify the incoming HTTP request before it is sent to
  * the handler. If a response is returned, the request is short-circuited and
@@ -1107,20 +1153,20 @@ export declare interface McpAuth0OAuthInboundPolicyOptions {
          */
         enabled: true;
         /**
-         * Trusted ID-JAG issuers. These values are never published in OAuth metadata.
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
          *
          * @minItems 1
          */
-        trustedIssuers: [
+        trustedIssuers?: [
           {
             /**
-             * Exact issuer URL expected in the ID-JAG iss claim.
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
              */
-            issuer: string;
+            issuer?: string;
             /**
-             * JWKS URL used to verify ID-JAG signatures from this issuer.
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
              */
-            jwksUrl: string;
+            jwksUrl?: string;
             /**
              * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
              */
@@ -1132,13 +1178,13 @@ export declare interface McpAuth0OAuthInboundPolicyOptions {
           },
           ...{
             /**
-             * Exact issuer URL expected in the ID-JAG iss claim.
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
              */
-            issuer: string;
+            issuer?: string;
             /**
-             * JWKS URL used to verify ID-JAG signatures from this issuer.
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
              */
-            jwksUrl: string;
+            jwksUrl?: string;
             /**
              * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
              */
@@ -1404,7 +1450,7 @@ export declare type McpCapabilityResolver = (
  * @public
  * @product mcp-gateway
  */
-export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<McpClerkOAuthInboundPolicyOptions> {
+export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<ValidatedClerkOAuthOptions> {
   #private;
   static readonly policyType = "mcp-clerk-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -1452,6 +1498,69 @@ export declare interface McpClerkOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -1462,6 +1571,37 @@ export declare interface McpClerkOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpClerkOAuthOptionsSchema: z.ZodObject<
+  {
+    frontendApiUrl: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to Amazon Cognito.
@@ -1475,7 +1615,7 @@ export declare interface McpClerkOAuthInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<McpCognitoOAuthInboundPolicyOptions> {
+export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<ValidatedCognitoOAuthOptions> {
   #private;
   static readonly policyType = "mcp-cognito-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -1531,6 +1671,69 @@ export declare interface McpCognitoOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -1545,6 +1748,45 @@ export declare interface McpCognitoOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpCognitoOAuthOptionsSchema: z.ZodObject<
+  {
+    awsRegion: z.ZodString;
+    userPoolId: z.ZodString;
+    userPoolDomain: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to Microsoft Entra ID.
@@ -1557,7 +1799,7 @@ export declare interface McpCognitoOAuthInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<McpEntraOAuthInboundPolicyOptions> {
+export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<ValidatedEntraOAuthOptions> {
   #private;
   static readonly policyType = "mcp-entra-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -1605,6 +1847,69 @@ export declare interface McpEntraOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -1619,32 +1924,69 @@ export declare interface McpEntraOAuthInboundPolicyOptions {
   };
 }
 
-/**
- * Activates the MCP Gateway internal routes (OAuth authorization server,
- * upstream connection management, well-known metadata) on the runtime router.
- * When no MCP-related policy is present the plugin registers no routes; it
- * still records `plugin.mcp-gateway` feature usage on construction so gateway
- * adoption is visible in telemetry regardless of route configuration.
- *
- * Importing from `@zuplo/runtime/mcp-gateway` is the opt-in: the runtime core
- * does not statically reference any MCP gateway code, so unrelated projects
- * pay no bundle cost.
- *
- * @beta
- * @example
- * ```ts
- * import { McpGatewayPlugin } from "@zuplo/runtime/mcp-gateway";
- *
- * export default async function (runtime: RuntimeExtensions) {
- *   runtime.addPlugin(new McpGatewayPlugin());
- * }
- * ```
- */
-export declare class McpGatewayPlugin extends SystemRuntimePlugin {
-  #private;
-  constructor(options?: McpGatewayPluginOptions);
-  registerRoutes(options: {
-    router: Router;
+declare const mcpEntraOAuthOptionsSchema: z.ZodObject<
+  {
+    tenantId: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
+/**
+ * Activates the MCP Gateway internal routes (OAuth authorization server,
+ * upstream connection management, well-known metadata) on the runtime router.
+ * When no MCP-related policy is present the plugin registers no routes; it
+ * still records `plugin.mcp-gateway` feature usage on construction so gateway
+ * adoption is visible in telemetry regardless of route configuration.
+ *
+ * Importing from `@zuplo/runtime/mcp-gateway` is the opt-in: the runtime core
+ * does not statically reference any MCP gateway code, so unrelated projects
+ * pay no bundle cost.
+ *
+ * @beta
+ * @example
+ * ```ts
+ * import { McpGatewayPlugin } from "@zuplo/runtime/mcp-gateway";
+ *
+ * export default async function (runtime: RuntimeExtensions) {
+ *   runtime.addPlugin(new McpGatewayPlugin());
+ * }
+ * ```
+ */
+export declare class McpGatewayPlugin extends SystemRuntimePlugin {
+  #private;
+  constructor(options?: McpGatewayPluginOptions);
+  registerRoutes(options: {
+    router: Router;
     runtimeSettings: RuntimeSettings;
     parsedRouteData?: ParsedRouteData;
   }): void;
@@ -1689,7 +2031,7 @@ export declare interface McpGatewayPluginOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<McpGoogleOAuthInboundPolicyOptions> {
+export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<ValidatedGoogleOAuthOptions> {
   #private;
   static readonly policyType = "mcp-google-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -1733,6 +2075,69 @@ export declare interface McpGoogleOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -1747,6 +2152,42 @@ export declare interface McpGoogleOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpGoogleOAuthOptionsSchema: z.ZodObject<
+  {
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to Keycloak.
@@ -1760,7 +2201,7 @@ export declare interface McpGoogleOAuthInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<McpKeycloakOAuthInboundPolicyOptions> {
+export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<ValidatedKeycloakOAuthOptions> {
   #private;
   static readonly policyType = "mcp-keycloak-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -1812,6 +2253,69 @@ export declare interface McpKeycloakOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -1826,6 +2330,44 @@ export declare interface McpKeycloakOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpKeycloakOAuthOptionsSchema: z.ZodObject<
+  {
+    keycloakBaseUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    realm: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to Logto.
@@ -1838,7 +2380,7 @@ export declare interface McpKeycloakOAuthInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<McpLogtoOAuthInboundPolicyOptions> {
+export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<ValidatedLogtoOAuthOptions> {
   #private;
   static readonly policyType = "mcp-logto-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -1886,6 +2428,69 @@ export declare interface McpLogtoOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -1900,6 +2505,43 @@ export declare interface McpLogtoOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpLogtoOAuthOptionsSchema: z.ZodObject<
+  {
+    logtoEndpoint: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token.
  *
@@ -2027,20 +2669,20 @@ export declare interface McpOAuthInboundPolicyOptions {
          */
         enabled: true;
         /**
-         * Trusted ID-JAG issuers. These values are never published in OAuth metadata.
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
          *
          * @minItems 1
          */
-        trustedIssuers: [
+        trustedIssuers?: [
           {
             /**
-             * Exact issuer URL expected in the ID-JAG iss claim.
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
              */
-            issuer: string;
+            issuer?: string;
             /**
-             * JWKS URL used to verify ID-JAG signatures from this issuer.
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
              */
-            jwksUrl: string;
+            jwksUrl?: string;
             /**
              * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
              */
@@ -2052,13 +2694,13 @@ export declare interface McpOAuthInboundPolicyOptions {
           },
           ...{
             /**
-             * Exact issuer URL expected in the ID-JAG iss claim.
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
              */
-            issuer: string;
+            issuer?: string;
             /**
-             * JWKS URL used to verify ID-JAG signatures from this issuer.
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
              */
-            jwksUrl: string;
+            jwksUrl?: string;
             /**
              * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
              */
@@ -2080,106 +2722,196 @@ declare type McpOAuthRuntimeConfig = z.infer<
   typeof mcpOAuthRuntimeConfigSchema
 >;
 
-declare const mcpOAuthRuntimeConfigSchema: z.ZodObject<
-  {
-    oidc: z.ZodObject<
-      {
-        issuer: z.ZodURL;
-        jwksUrl: z.ZodURL;
-        audience: z.ZodOptional<z.ZodString>;
-      },
-      z.core.$strip
-    >;
-    browserLogin: z.ZodObject<
-      {
-        url: z.ZodURL;
-        tokenUrl: z.ZodOptional<z.ZodURL>;
-        clientId: z.ZodOptional<z.ZodString>;
-        clientSecret: z.ZodOptional<z.ZodString>;
-        scope: z.ZodDefault<z.ZodString>;
-        audience: z.ZodOptional<z.ZodString>;
-        pkce: z.ZodDefault<
-          z.ZodEnum<{
-            none: "none";
-            S256: "S256";
-          }>
-        >;
-        remoteTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-        stateTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-        sessionTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-      },
-      z.core.$strict
-    >;
-    gateway: z.ZodPipe<
-      z.ZodDefault<
-        z.ZodObject<
-          {
-            accessTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-            refreshTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-            cimdEnabled: z.ZodDefault<z.ZodBoolean>;
-          },
-          z.core.$strict
-        >
-      >,
-      z.ZodTransform<
+declare const mcpOAuthRuntimeConfigSchema: z.ZodPipe<
+  z.ZodObject<
+    {
+      oidc: z.ZodObject<
         {
-          accessTokenTtlSeconds: number;
-          refreshTokenTtlSeconds: number;
-          downstreamCimdEnabled: boolean;
+          issuer: z.ZodURL;
+          jwksUrl: z.ZodURL;
+          audience: z.ZodOptional<z.ZodString>;
         },
+        z.core.$strip
+      >;
+      browserLogin: z.ZodObject<
         {
-          accessTokenTtlSeconds: number;
-          refreshTokenTtlSeconds: number;
-          cimdEnabled: boolean;
-        }
-      >
-    >;
-    idJag: z.ZodDefault<
-      z.ZodOptional<
+          url: z.ZodURL;
+          tokenUrl: z.ZodOptional<z.ZodURL>;
+          clientId: z.ZodOptional<z.ZodString>;
+          clientSecret: z.ZodOptional<z.ZodString>;
+          scope: z.ZodDefault<z.ZodString>;
+          audience: z.ZodOptional<z.ZodString>;
+          pkce: z.ZodDefault<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+          remoteTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+          stateTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+          sessionTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+        },
+        z.core.$strict
+      >;
+      gateway: z.ZodPipe<
         z.ZodDefault<
-          z.ZodDiscriminatedUnion<
-            [
-              z.ZodObject<
-                {
-                  enabled: z.ZodLiteral<false>;
-                },
-                z.core.$strict
-              >,
-              z.ZodObject<
-                {
-                  enabled: z.ZodLiteral<true>;
-                  trustedIssuers: z.ZodArray<
-                    z.ZodObject<
-                      {
-                        issuer: z.ZodURL;
-                        jwksUrl: z.ZodURL;
-                        expectedClientIds: z.ZodOptional<
-                          z.ZodArray<z.ZodString>
-                        >;
-                        subjectMapping: z.ZodDefault<
-                          z.ZodEnum<{
-                            iss_prefix: "iss_prefix";
-                            iss_tenant_prefix: "iss_tenant_prefix";
-                            sub_id_only: "sub_id_only";
-                          }>
-                        >;
-                      },
-                      z.core.$strict
-                    >
-                  >;
-                  authorizationDetailsTypesAllowed: z.ZodOptional<
-                    z.ZodArray<z.ZodString>
-                  >;
-                },
-                z.core.$strict
-              >,
-            ]
+          z.ZodObject<
+            {
+              accessTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+              refreshTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+              cimdEnabled: z.ZodDefault<z.ZodBoolean>;
+            },
+            z.core.$strict
+          >
+        >,
+        z.ZodTransform<
+          {
+            accessTokenTtlSeconds: number;
+            refreshTokenTtlSeconds: number;
+            downstreamCimdEnabled: boolean;
+          },
+          {
+            accessTokenTtlSeconds: number;
+            refreshTokenTtlSeconds: number;
+            cimdEnabled: boolean;
+          }
+        >
+      >;
+      idJag: z.ZodDefault<
+        z.ZodOptional<
+          z.ZodDefault<
+            z.ZodDiscriminatedUnion<
+              [
+                z.ZodObject<
+                  {
+                    enabled: z.ZodLiteral<false>;
+                  },
+                  z.core.$strict
+                >,
+                z.ZodObject<
+                  {
+                    enabled: z.ZodLiteral<true>;
+                    trustedIssuers: z.ZodOptional<
+                      z.ZodArray<
+                        z.ZodObject<
+                          {
+                            issuer: z.ZodOptional<z.ZodURL>;
+                            jwksUrl: z.ZodOptional<z.ZodURL>;
+                            expectedClientIds: z.ZodOptional<
+                              z.ZodArray<z.ZodString>
+                            >;
+                            subjectMapping: z.ZodDefault<
+                              z.ZodEnum<{
+                                iss_prefix: "iss_prefix";
+                                iss_tenant_prefix: "iss_tenant_prefix";
+                                sub_id_only: "sub_id_only";
+                              }>
+                            >;
+                          },
+                          z.core.$strict
+                        >
+                      >
+                    >;
+                    authorizationDetailsTypesAllowed: z.ZodOptional<
+                      z.ZodArray<z.ZodString>
+                    >;
+                  },
+                  z.core.$strict
+                >,
+              ]
+            >
           >
         >
-      >
-    >;
-  },
-  z.core.$strict
+      >;
+    },
+    z.core.$strict
+  >,
+  z.ZodTransform<
+    {
+      idJag:
+        | {
+            enabled: false;
+          }
+        | {
+            enabled: true;
+            trustedIssuers: {
+              issuer: string;
+              jwksUrl: string;
+              subjectMapping:
+                | "iss_prefix"
+                | "iss_tenant_prefix"
+                | "sub_id_only";
+              expectedClientIds?: string[] | undefined;
+            }[];
+            authorizationDetailsTypesAllowed?: string[] | undefined;
+          };
+      oidc: {
+        issuer: string;
+        jwksUrl: string;
+        audience?: string | undefined;
+      };
+      browserLogin: {
+        url: string;
+        scope: string;
+        pkce: "none" | "S256";
+        remoteTimeoutMs: number;
+        stateTtlSeconds: number;
+        sessionTtlSeconds: number;
+        tokenUrl?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        audience?: string | undefined;
+      };
+      gateway: {
+        accessTokenTtlSeconds: number;
+        refreshTokenTtlSeconds: number;
+        downstreamCimdEnabled: boolean;
+      };
+    },
+    {
+      oidc: {
+        issuer: string;
+        jwksUrl: string;
+        audience?: string | undefined;
+      };
+      browserLogin: {
+        url: string;
+        scope: string;
+        pkce: "none" | "S256";
+        remoteTimeoutMs: number;
+        stateTtlSeconds: number;
+        sessionTtlSeconds: number;
+        tokenUrl?: string | undefined;
+        clientId?: string | undefined;
+        clientSecret?: string | undefined;
+        audience?: string | undefined;
+      };
+      gateway: {
+        accessTokenTtlSeconds: number;
+        refreshTokenTtlSeconds: number;
+        downstreamCimdEnabled: boolean;
+      };
+      idJag:
+        | {
+            enabled: false;
+          }
+        | {
+            enabled: true;
+            trustedIssuers?:
+              | {
+                  subjectMapping:
+                    | "iss_prefix"
+                    | "iss_tenant_prefix"
+                    | "sub_id_only";
+                  issuer?: string | undefined;
+                  jwksUrl?: string | undefined;
+                  expectedClientIds?: string[] | undefined;
+                }[]
+              | undefined;
+            authorizationDetailsTypesAllowed?: string[] | undefined;
+          };
+    }
+  >
 >;
 
 /**
@@ -2194,7 +2926,7 @@ declare const mcpOAuthRuntimeConfigSchema: z.ZodObject<
  * @public
  * @product mcp-gateway
  */
-export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<McpOktaOAuthInboundPolicyOptions> {
+export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<ValidatedOktaOAuthOptions> {
   #private;
   static readonly policyType = "mcp-okta-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -2246,6 +2978,69 @@ export declare interface McpOktaOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -2260,6 +3055,44 @@ export declare interface McpOktaOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpOktaOAuthOptionsSchema: z.ZodObject<
+  {
+    oktaDomain: z.ZodString;
+    authorizationServerId: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to OneLogin.
@@ -2272,7 +3105,7 @@ export declare interface McpOktaOAuthInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<McpOneLoginOAuthInboundPolicyOptions> {
+export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<ValidatedOneLoginOAuthOptions> {
   #private;
   static readonly policyType = "mcp-onelogin-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -2320,6 +3153,69 @@ export declare interface McpOneLoginOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -2330,6 +3226,37 @@ export declare interface McpOneLoginOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpOneLoginOAuthOptionsSchema: z.ZodObject<
+  {
+    oneLoginSubdomain: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to PingOne.
@@ -2343,7 +3270,7 @@ export declare interface McpOneLoginOAuthInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpPingOAuthInboundPolicy extends InboundPolicy<McpPingOAuthInboundPolicyOptions> {
+export declare class McpPingOAuthInboundPolicy extends InboundPolicy<ValidatedPingOAuthOptions> {
   #private;
   static readonly policyType = "mcp-ping-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -2405,6 +3332,69 @@ export declare interface McpPingOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -2419,6 +3409,54 @@ export declare interface McpPingOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpPingOAuthOptionsSchema: z.ZodObject<
+  {
+    environmentId: z.ZodOptional<z.ZodString>;
+    region: z.ZodOptional<
+      z.ZodEnum<{
+        "north-america": "north-america";
+        canada: "canada";
+        europe: "europe";
+        singapore: "singapore";
+        australia: "australia";
+        "asia-pacific": "asia-pacific";
+      }>
+    >;
+    customDomain: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 export declare function McpProxyHandler(
   request: ZuploRequest,
   context: ZuploContext
@@ -2468,9 +3506,9 @@ export declare interface McpTokenExchangeInboundPolicyOptions {
    */
   protectedResourceMetadataUrl?: string;
   /**
-   * Authentication mode. `user-oauth` performs per-user OAuth federation; `shared-oauth` uses a gateway-wide OAuth grant.
+   * Authentication mode. `user-oauth` performs per-user OAuth federation; `shared-oauth` uses a gateway-wide OAuth grant; `id-jag` exchanges the caller's identity assertion at the configured IdP for an ID-JAG (Identity Assertion JWT Authorization Grant, also known as Cross-App Access / XAA), then redeems it at the upstream Resource Authorization Server for an upstream access token.
    */
-  authMode: "user-oauth" | "shared-oauth";
+  authMode: "user-oauth" | "shared-oauth" | "id-jag";
   /**
    * OAuth scopes to request from the upstream (for OAuth modes).
    */
@@ -2502,6 +3540,47 @@ export declare interface McpTokenExchangeInboundPolicyOptions {
           | "client_secret_post"
           | "none";
       };
+  /**
+   * ID-JAG (Cross-App Access / XAA) token-exchange configuration. Required when `authMode` is `id-jag`; not used by the OAuth modes.
+   */
+  idJag?: {
+    /**
+     * Scopes to request on the ID-JAG token exchange at the IdP.
+     */
+    scopes?: string[];
+    /**
+     * Delimiter used to join scopes in the token-exchange request. Defaults to a single space.
+     */
+    scopeDelimiter?: string;
+    /**
+     * The identity provider that exchanges the caller's identity assertion for an ID-JAG.
+     */
+    idp: {
+      /**
+       * The IdP token endpoint used for the ID-JAG token exchange.
+       */
+      tokenUrl: string;
+      clientAuth: IdJagClientAuth;
+    };
+    /**
+     * The upstream Resource Authorization Server that redeems the ID-JAG for an upstream access token.
+     */
+    resourceAs: {
+      /**
+       * The Resource Authorization Server token endpoint where the gateway redeems the ID-JAG via the jwt-bearer grant.
+       */
+      tokenUrl: string;
+      /**
+       * The `audience` value sent on the ID-JAG token exchange, identifying the Resource Authorization Server (typically its issuer).
+       */
+      audience: string;
+      /**
+       * Optional `resource` indicator sent on the token exchange, identifying the upstream MCP resource. Defaults to the upstream MCP server URL from the route handler's rewritePattern.
+       */
+      resource?: string;
+      clientAuth: IdJagClientAuth;
+    };
+  };
 }
 
 /**
@@ -2517,7 +3596,7 @@ export declare interface McpTokenExchangeInboundPolicyOptions {
  * @public
  * @product mcp-gateway
  */
-export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<McpWorkosOAuthInboundPolicyOptions> {
+export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<ValidatedWorkosOAuthOptions> {
   #private;
   static readonly policyType = "mcp-workos-oauth";
   constructor(rawOptions: unknown, policyName: string);
@@ -2561,6 +3640,69 @@ export declare interface McpWorkosOAuthInboundPolicyOptions {
      */
     cimdEnabled?: boolean;
   };
+  /**
+   * Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.
+   */
+  idJag?:
+    | {
+        /**
+         * Disable ID-JAG support.
+         */
+        enabled: false;
+      }
+    | {
+        /**
+         * Enable ID-JAG support.
+         */
+        enabled: true;
+        /**
+         * Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.
+         *
+         * @minItems 1
+         */
+        trustedIssuers?: [
+          {
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          },
+          ...{
+            /**
+             * Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP.
+             */
+            issuer?: string;
+            /**
+             * JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP.
+             */
+            jwksUrl?: string;
+            /**
+             * Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client.
+             */
+            expectedClientIds?: string[];
+            /**
+             * How the ID-JAG subject is mapped into the gateway subject ID.
+             */
+            subjectMapping?: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
+          }[],
+        ];
+        /**
+         * Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs.
+         */
+        authorizationDetailsTypesAllowed?: string[];
+      };
   /**
    * Optional overrides for the derived browser-login settings.
    */
@@ -2575,6 +3717,42 @@ export declare interface McpWorkosOAuthInboundPolicyOptions {
   };
 }
 
+declare const mcpWorkosOAuthOptionsSchema: z.ZodObject<
+  {
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    gateway: z.ZodOptional<
+      z.ZodObject<
+        {
+          accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          cimdEnabled: z.ZodOptional<z.ZodBoolean>;
+        },
+        z.core.$strict
+      >
+    >;
+    idJag: z.ZodOptional<z.ZodUnknown>;
+    browserLoginOverrides: z.ZodOptional<
+      z.ZodObject<
+        {
+          remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
+          stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
+          pkce: z.ZodOptional<
+            z.ZodEnum<{
+              none: "none";
+              S256: "S256";
+            }>
+          >;
+        },
+        z.core.$strict
+      >
+    >;
+  },
+  z.core.$strict
+>;
+
 /**
  * Arbitrary MCP _meta fields to expose downstream.
  * @public
@@ -3902,10 +5080,50 @@ declare type ValidatedAuth0OAuthOptions = z.infer<
   typeof mcpAuth0OAuthOptionsSchema
 >;
 
+declare type ValidatedClerkOAuthOptions = z.infer<
+  typeof mcpClerkOAuthOptionsSchema
+>;
+
+declare type ValidatedCognitoOAuthOptions = z.infer<
+  typeof mcpCognitoOAuthOptionsSchema
+>;
+
+declare type ValidatedEntraOAuthOptions = z.infer<
+  typeof mcpEntraOAuthOptionsSchema
+>;
+
+declare type ValidatedGoogleOAuthOptions = z.infer<
+  typeof mcpGoogleOAuthOptionsSchema
+>;
+
+declare type ValidatedKeycloakOAuthOptions = z.infer<
+  typeof mcpKeycloakOAuthOptionsSchema
+>;
+
+declare type ValidatedLogtoOAuthOptions = z.infer<
+  typeof mcpLogtoOAuthOptionsSchema
+>;
+
+declare type ValidatedOktaOAuthOptions = z.infer<
+  typeof mcpOktaOAuthOptionsSchema
+>;
+
+declare type ValidatedOneLoginOAuthOptions = z.infer<
+  typeof mcpOneLoginOAuthOptionsSchema
+>;
+
 declare type ValidatedOptions = z.infer<
   typeof mcpCapabilityFilterOptionsSchema
 >;
 
+declare type ValidatedPingOAuthOptions = z.infer<
+  typeof mcpPingOAuthOptionsSchema
+>;
+
+declare type ValidatedWorkosOAuthOptions = z.infer<
+  typeof mcpWorkosOAuthOptionsSchema
+>;
+
 /**
  * @public
  */