@zuplo/cli 7.6.8 → 7.6.10

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jws/flattened/verify.d.ts

@@ -1,37 +1,25 @@
-import type * as types from '../../types.d.ts';
-/**
- * Interface for Flattened JWS Verification dynamic key resolution. No token components have been
- * verified at the time of this function call.
- */
-export interface FlattenedVerifyGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWSHeaderParameters, types.FlattenedJWSInput, KeyType | types.KeyObject | types.JWK> {
+import type * as t from '../../types.d.ts';
+/** Resolves a key for Flattened JWS verification from unverified headers and token data. */
+export interface FlattenedVerifyGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWSHeaderParameters, t.FlattenedJWSInput, KeyType | t.KeyObject | t.JWK> {
 }
 /**
- * Verifies the signature and format of and afterwards decodes the Flattened JWS.
+ * Verifies a Flattened JWS signature and decodes its payload.
  *
- * @param jws Flattened JWS.
- * @param key Key to verify the JWS with. See
+ * @param key Public key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWS Verify options.
  */
-export declare function flattenedVerify(jws: types.FlattenedJWSInput, key: types.KeyInput, options?: types.VerifyOptions): Promise<types.FlattenedVerifyResult>;
+export declare function flattenedVerify(jws: t.FlattenedJWSInput, key: t.KeyInput, options?: t.VerifyOptions): Promise<t.FlattenedVerifyResult>;
 /**
- * Verifies the signature and format of and afterwards decodes the Flattened JWS, resolving the key
- * dynamically. The result additionally carries the {@link types.ResolvedKey.key resolved key}.
+ * Verifies a Flattened JWS signature and decodes its payload with a dynamically resolved key,
+ * included in the result.
  *
- * @param jws Flattened JWS.
- * @param getKey Function resolving a key to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWS Verify options.
+ * @param getKey Resolves a public key or shared secret from unverified token data.
  */
-export declare function flattenedVerify<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jws: types.FlattenedJWSInput, getKey: FlattenedVerifyGetKey<KeyType>, options?: types.VerifyOptions): Promise<types.FlattenedVerifyResult & types.ResolvedKey<KeyType>>;
+export declare function flattenedVerify<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jws: t.FlattenedJWSInput, getKey: FlattenedVerifyGetKey<KeyType>, options?: t.VerifyOptions): Promise<t.FlattenedVerifyResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Verifies a Flattened JWS and decodes its payload using a key or key resolver. The result includes
+ * `key` only when a resolver is used.
  *
- * @param jws Flattened JWS.
- * @param key Key, or function resolving a key, to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWS Verify options.
+ * @param key Public key or shared secret, or a function resolving one.
  */
-export declare function flattenedVerify(jws: types.FlattenedJWSInput, key: types.KeyInput | FlattenedVerifyGetKey, options?: types.VerifyOptions): Promise<types.FlattenedVerifyResult & Partial<types.ResolvedKey>>;
+export declare function flattenedVerify(jws: t.FlattenedJWSInput, key: t.KeyInput | FlattenedVerifyGetKey, options?: t.VerifyOptions): Promise<t.FlattenedVerifyResult & Partial<t.ResolvedKey>>;

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jws/general/sign.d.ts

@@ -1,52 +1,38 @@
-import type * as types from '../../types.d.ts';
-/** Used to build General JWS object's individual signatures. */
+import type * as t from '../../types.d.ts';
+/** Configures an individual signature in a General JWS. */
 export interface Signature {
+    /** Sets the JWS Protected Header. May only be called once. */
+    setProtectedHeader(protectedHeader: t.JWSHeaderParameters): Signature;
+    /** Sets the JWS Unprotected Header. May only be called once. */
+    setUnprotectedHeader(unprotectedHeader: t.JWSHeaderParameters): Signature;
     /**
-     * Sets the JWS Protected Header on the Signature object.
+     * Adds another signature to the enclosing {@link GeneralSign} and returns its configuration.
      *
-     * @param protectedHeader JWS Protected Header.
-     */
-    setProtectedHeader(protectedHeader: types.JWSHeaderParameters): Signature;
-    /**
-     * Sets the JWS Unprotected Header on the Signature object.
-     *
-     * @param unprotectedHeader JWS Unprotected Header.
-     */
-    setUnprotectedHeader(unprotectedHeader: types.JWSHeaderParameters): Signature;
-    /**
-     * A shorthand for calling {@link GeneralSign.addSignature addSignature()} on the enclosing
-     * {@link GeneralSign} instance.
-     *
-     * @param key Private Key or Secret to sign the individual JWS signature with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
-     * @param options JWS Sign options.
-     */
-    addSignature(key: types.KeyInput, options?: types.SignOptions): Signature;
-    /**
-     * A shorthand for calling {@link GeneralSign.sign sign()} on the enclosing {@link GeneralSign}
-     * instance. Takes no arguments — each signature's key is supplied to {@link addSignature}.
      */
-    sign(): Promise<types.GeneralJWS>;
-    /** Returns the enclosing {@link GeneralSign} instance */
+    addSignature(key: t.KeyInput, options?: t.SignOptions): Signature;
+    /** Creates all signatures on the enclosing {@link GeneralSign}, using their configured keys. */
+    sign(): Promise<t.GeneralJWS>;
+    /** Returns the enclosing {@link GeneralSign} instance. */
     done(): GeneralSign;
 }
-/** The GeneralSign class is used to build and sign General JWS objects. */
+/** Builds and signs General JWS objects. */
 export declare class GeneralSign {
     #private;
     /**
-     * {@link GeneralSign} constructor
+     * Creates a General JWS signer.
      *
      * @param payload Binary representation of the payload to sign.
      */
     constructor(payload: Uint8Array);
     /**
-     * Adds an additional signature for the General JWS object.
+     * Adds a signature and returns its configuration.
      *
-     * @param key Private Key or Secret to sign the individual JWS signature with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
-     * @param options JWS Sign options.
      */
-    addSignature(key: types.KeyInput, options?: types.SignOptions): Signature;
-    /** Signs and resolves the value of the General JWS object. */
-    sign(): Promise<types.GeneralJWS>;
+    addSignature(key: t.KeyInput, options?: t.SignOptions): Signature;
+    /** Signs the payload as a General JWS. */
+    sign(): Promise<t.GeneralJWS>;
 }

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jws/general/verify.d.ts

@@ -1,44 +1,29 @@
-import type * as types from '../../types.d.ts';
-/**
- * Interface for General JWS Verification dynamic key resolution. No token components have been
- * verified at the time of this function call.
- */
-export interface GeneralVerifyGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWSHeaderParameters, types.FlattenedJWSInput, KeyType | types.KeyObject | types.JWK> {
+import type * as t from '../../types.d.ts';
+/** Resolves a key for General JWS verification from unverified headers and token data. */
+export interface GeneralVerifyGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWSHeaderParameters, t.FlattenedJWSInput, KeyType | t.KeyObject | t.JWK> {
 }
 /**
- * Verifies the signature and format of and afterwards decodes the General JWS.
+ * Verifies a General JWS signature and decodes its payload.
  *
- * > Note: The function iterates over the `signatures` array in the General JWS and returns the verification
- * > result of the first signature entry that can be successfully verified. The result only contains
- * > the payload, protected header, and unprotected header of that successfully verified signature
- * > entry. Other signature entries' headers may be inspected solely to reject inconsistent use of the
- * > JWS Unencoded Payload Option, and their headers are not included in the returned result.
- * > Recipients of a General JWS should only rely on the returned (verified) data.
+ * > Note: Returns payload and headers from the first signature that verifies successfully. Other entries'
+ * > headers may be inspected to reject inconsistent use of the JWS Unencoded Payload Option, but are
+ * > not included in the result. Rely only on the returned data.
  *
- * @param jws General JWS.
- * @param key Key to verify the JWS with. See
+ * @param key Public key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWS Verify options.
  */
-export declare function generalVerify(jws: types.GeneralJWSInput, key: types.KeyInput, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult>;
+export declare function generalVerify(jws: t.GeneralJWSInput, key: t.KeyInput, options?: t.VerifyOptions): Promise<t.GeneralVerifyResult>;
 /**
- * Verifies the signature and format of and afterwards decodes the General JWS, resolving the key
- * dynamically. The result additionally carries the {@link types.ResolvedKey.key resolved key}.
+ * Verifies a General JWS signature and decodes its payload with a dynamically resolved key,
+ * included in the result.
  *
- * @param jws General JWS.
- * @param getKey Function resolving a key to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWS Verify options.
+ * @param getKey Resolves a public key or shared secret from unverified token data.
  */
-export declare function generalVerify<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jws: types.GeneralJWSInput, getKey: GeneralVerifyGetKey<KeyType>, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult & types.ResolvedKey<KeyType>>;
+export declare function generalVerify<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jws: t.GeneralJWSInput, getKey: GeneralVerifyGetKey<KeyType>, options?: t.VerifyOptions): Promise<t.GeneralVerifyResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Verifies a General JWS and decodes its payload using a key or key resolver. The result includes
+ * `key` only when a resolver is used.
  *
- * @param jws General JWS.
- * @param key Key, or function resolving a key, to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWS Verify options.
+ * @param key Public key or shared secret, or a function resolving one.
  */
-export declare function generalVerify(jws: types.GeneralJWSInput, key: types.KeyInput | GeneralVerifyGetKey, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult & Partial<types.ResolvedKey>>;
+export declare function generalVerify(jws: t.GeneralJWSInput, key: t.KeyInput | GeneralVerifyGetKey, options?: t.VerifyOptions): Promise<t.GeneralVerifyResult & Partial<t.ResolvedKey>>;

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jwt/decrypt.d.ts

@@ -1,41 +1,34 @@
-import type * as types from '../types.d.ts';
-/** Combination of JWE Decryption options and JWT Claims Set verification options. */
-export interface JWTDecryptOptions extends types.DecryptOptions, types.JWTClaimVerificationOptions {
+import type * as t from '../types.d.ts';
+/** JWE decryption and JWT Claims Set validation options. */
+export interface JWTDecryptOptions extends t.DecryptOptions, t.JWTClaimVerificationOptions {
 }
 /**
- * Interface for JWT Decryption dynamic key resolution. No token components have been verified at
- * the time of this function call.
+ * Resolves a JWT decryption key. No token components have been authenticated when this function is
+ * called.
  */
-export interface JWTDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.CompactJWEHeaderParameters, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
+export interface JWTDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWEHeaderParameters, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
 }
 /**
- * Verifies the JWT format (to be a JWE Compact format), decrypts the ciphertext, validates the JWT
- * Claims Set.
+ * Decrypts a Compact JWE-formatted JWT and validates its Claims Set.
  *
- * @param jwt JSON Web Token value (encoded as JWE).
- * @param key Private Key or Secret to decrypt and verify the JWT with. See
+ * @param key Private key or shared secret to decrypt and verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtDecrypt<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, key: types.KeyInput, options?: JWTDecryptOptions): Promise<types.JWTDecryptResult<PayloadType>>;
+export declare function jwtDecrypt<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput, options?: JWTDecryptOptions): Promise<t.JWTDecryptResult<PayloadType>>;
 /**
- * Decrypts a JWT and validates its JWT Claims Set, resolving the key dynamically. The result
- * additionally carries the {@link types.ResolvedKey.key resolved key}.
+ * Decrypts a JWT and validates its claims, returning the dynamically
+ * {@link t.ResolvedKey.key resolved key}.
  *
- * @param jwt JSON Web Token value (encoded as JWE).
- * @param getKey Function resolving Private Key or Secret to decrypt and verify the JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWT Decryption and JWT Claims Set validation options.
+ * @param getKey Function resolving a private key or shared secret to decrypt and verify the JWT
+ *   with. See {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
  */
-export declare function jwtDecrypt<PayloadType = types.JWTPayload, KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jwt: string | Uint8Array, getKey: JWTDecryptGetKey<KeyType>, options?: JWTDecryptOptions): Promise<types.JWTDecryptResult<PayloadType> & types.ResolvedKey<KeyType>>;
+export declare function jwtDecrypt<PayloadType = t.JWTPayload, KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwt: string | Uint8Array, getKey: JWTDecryptGetKey<KeyType>, options?: JWTDecryptOptions): Promise<t.JWTDecryptResult<PayloadType> & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Accepts a key or key resolver. Use this overload when forwarding either form; the result includes
+ * `key` only when a resolver was used.
  *
- * @param jwt JSON Web Token value (encoded as JWE).
- * @param key Private Key or Secret, or a function resolving one, to decrypt and verify the JWT
- *   with. See {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWT Decryption and JWT Claims Set validation options.
+ * @param key Private key or shared secret, or a function resolving one, to decrypt and verify the
+ *   JWT with. See
+ *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
  */
-export declare function jwtDecrypt<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, key: types.KeyInput | JWTDecryptGetKey, options?: JWTDecryptOptions): Promise<types.JWTDecryptResult<PayloadType> & Partial<types.ResolvedKey>>;
+export declare function jwtDecrypt<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput | JWTDecryptGetKey, options?: JWTDecryptOptions): Promise<t.JWTDecryptResult<PayloadType> & Partial<t.ResolvedKey>>;

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jwt/encrypt.d.ts

@@ -1,62 +1,57 @@
-import type * as types from '../types.d.ts';
-/**
- * EncryptJWT constructor
- *
- * @param payload The JWT Claims Set object. Defaults to an empty object.
- */
-declare const EncryptJWT_base: new (payload?: types.JWTPayload) => types.ProduceJWT;
-/** The EncryptJWT class is used to build and encrypt Compact JWE formatted JSON Web Tokens. */
+import type * as t from '../types.d.ts';
+/** @param payload Initial JWT Claims Set. Defaults to an empty object. */
+declare const EncryptJWT_base: new (payload?: t.JWTPayload) => t.ProduceJWT;
+/** Builds and encrypts Compact JWE-formatted JSON Web Tokens. */
 export declare class EncryptJWT extends EncryptJWT_base {
     #private;
     /**
-     * Sets the JWE Protected Header on the EncryptJWT object.
+     * Sets the JWE Protected Header. May only be called once.
      *
      * @param protectedHeader JWE Protected Header. Must contain an "alg" (JWE Algorithm) and "enc"
      *   (JWE Encryption Algorithm) properties.
      */
-    setProtectedHeader(protectedHeader: types.CompactJWEHeaderParameters): this;
+    setProtectedHeader(protectedHeader: t.CompactJWEHeaderParameters): this;
     /**
-     * Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
-     * the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
-     * and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
-     * appropriate JOSE Header.
-     *
-     * @param parameters JWE Key Management parameters.
+     * Sets JWE Key Management parameters, such as ECDH-ES "apu" and "apv" or PBES2 "p2c", and adds
+     * them to the appropriate JOSE Header. Use this instead of the header setters for algorithm
+     * inputs. May only be called once.
      */
-    setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): this;
+    setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
     /**
-     * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
-     * "enc" (Encryption Algorithm) Header Parameter.
-     *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * Sets the content encryption key. By default, a suitable random key is generated for the JWE
+     * "enc" (Encryption Algorithm). May only be called once.
      *
-     * @param cek JWE Content Encryption Key.
+     * @deprecated For testing and vector validation only; allow random generation in production.
      */
     setContentEncryptionKey(cek: Uint8Array): this;
     /**
-     * Sets the JWE Initialization Vector to use for content encryption, by default a random suitable
-     * one is generated for the JWE "enc" (Encryption Algorithm) Header Parameter.
-     *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * Sets the Initialization Vector for content encryption. By default, a suitable random IV is
+     * generated for the JWE "enc" (Encryption Algorithm). May only be called once.
      *
-     * @param iv JWE Initialization Vector.
+     * @deprecated For testing and vector validation only; allow random generation in production.
      */
     setInitializationVector(iv: Uint8Array): this;
-    /** Replicates the "iss" (Issuer) Claim as a JWE Protected Header Parameter. */
+    /**
+     * Replicates the "iss" (Issuer) Claim in the JWE Protected Header, exposing it without
+     * decryption.
+     */
     replicateIssuerAsHeader(): this;
-    /** Replicates the "sub" (Subject) Claim as a JWE Protected Header Parameter. */
+    /**
+     * Replicates the "sub" (Subject) Claim in the JWE Protected Header, exposing it without
+     * decryption.
+     */
     replicateSubjectAsHeader(): this;
-    /** Replicates the "aud" (Audience) Claim as a JWE Protected Header Parameter. */
+    /**
+     * Replicates the "aud" (Audience) Claim in the JWE Protected Header, exposing it without
+     * decryption.
+     */
     replicateAudienceAsHeader(): this;
     /**
      * Encrypts and returns the JWT.
      *
-     * @param key Public Key or Secret to encrypt the JWT with. See
+     * @param key Public key or shared secret to encrypt the JWT with. See
      *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
-     * @param options JWE Encryption options.
      */
-    encrypt(key: types.KeyInput, options?: types.EncryptOptions): Promise<string>;
+    encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<string>;
 }
 export {};

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jwt/sign.d.ts

@@ -1,26 +1,21 @@
-import type * as types from '../types.d.ts';
-/**
- * SignJWT constructor
- *
- * @param payload The JWT Claims Set object. Defaults to an empty object.
- */
-declare const SignJWT_base: new (payload?: types.JWTPayload) => types.ProduceJWT;
-/** The SignJWT class is used to build and sign Compact JWS formatted JSON Web Tokens. */
+import type * as t from '../types.d.ts';
+/** @param payload Initial JWT Claims Set. Defaults to an empty object. */
+declare const SignJWT_base: new (payload?: t.JWTPayload) => t.ProduceJWT;
+/** Builds and signs Compact JWS-formatted JSON Web Tokens. */
 export declare class SignJWT extends SignJWT_base {
     #private;
     /**
-     * Sets the JWS Protected Header on the SignJWT object.
+     * Sets the JWS Protected Header. May only be called once.
      *
      * @param protectedHeader JWS Protected Header. Must contain an "alg" (JWS Algorithm) property.
      */
-    setProtectedHeader(protectedHeader: types.JWTHeaderParameters): this;
+    setProtectedHeader(protectedHeader: t.JWTHeaderParameters): this;
     /**
      * Signs and returns the JWT.
      *
-     * @param key Private Key or Secret to sign the JWT with. See
+     * @param key Private key or shared secret to sign the JWT with. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
-     * @param options JWT Sign options.
      */
-    sign(key: types.KeyInput, options?: types.SignOptions): Promise<string>;
+    sign(key: t.KeyInput, options?: t.SignOptions): Promise<string>;
 }
 export {};

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jwt/unsecured.d.ts

@@ -1,28 +1,19 @@
-import type * as types from '../types.d.ts';
-/** Result of decoding an Unsecured JWT. */
-export interface UnsecuredResult<PayloadType = types.JWTPayload> {
+import type * as t from '../types.d.ts';
+/** Decoded Unsecured JWT. */
+export interface UnsecuredResult<PayloadType = t.JWTPayload> {
     /** JWT Claims Set. */
-    payload: PayloadType & types.JWTPayload & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never);
+    payload: PayloadType & t.JWTPayload & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never);
     /** The decoded JOSE Header; always `{ "alg": "none" }` for an Unsecured JWT. */
-    header: types.JWSHeaderParameters;
+    header: t.JWSHeaderParameters;
 }
-/**
- * UnsecuredJWT constructor
- *
- * @param payload The JWT Claims Set object. Defaults to an empty object.
- */
-declare const UnsecuredJWT_base: new (payload?: types.JWTPayload) => types.ProduceJWT;
-/** The UnsecuredJWT class is a utility for dealing with `{ "alg": "none" }` Unsecured JWTs. */
+/** @param payload Initial JWT Claims Set. Defaults to an empty object. */
+declare const UnsecuredJWT_base: new (payload?: t.JWTPayload) => t.ProduceJWT;
+/** Encodes and decodes `{ "alg": "none" }` Unsecured JWTs. */
 export declare class UnsecuredJWT extends UnsecuredJWT_base {
     private jwt;
     /** Encodes the Unsecured JWT. */
     encode(): string;
-    /**
-     * Decodes an unsecured JWT.
-     *
-     * @param jwt Unsecured JWT to decode the payload of.
-     * @param options JWT Claims Set validation options.
-     */
-    static decode<PayloadType = types.JWTPayload>(jwt: string, options?: types.JWTClaimVerificationOptions): UnsecuredResult<PayloadType>;
+    /** Decodes an unsecured JWT and validates its claims without authenticating the token. */
+    static decode<PayloadType = t.JWTPayload>(jwt: string, options?: t.JWTClaimVerificationOptions): UnsecuredResult<PayloadType>;
 }
 export {};

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/jwt/verify.d.ts

@@ -1,38 +1,35 @@
-import type * as types from '../types.d.ts';
-/** Combination of JWS Verification options and JWT Claims Set verification options. */
-export interface JWTVerifyOptions extends types.VerifyOptions, types.JWTClaimVerificationOptions {
+import type * as t from '../types.d.ts';
+/** JWS verification and JWT Claims Set validation options. */
+export interface JWTVerifyOptions extends t.VerifyOptions, t.JWTClaimVerificationOptions {
 }
 /**
- * Interface for JWT Verification dynamic key resolution. No token components have been verified at
- * the time of this function call.
+ * Resolves a JWT verification key. No token components have been authenticated when this function
+ * is called.
  */
-export interface JWTVerifyGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.CompactJWSHeaderParameters, types.FlattenedJWSInput, KeyType | types.KeyObject | types.JWK> {
+export interface JWTVerifyGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWSHeaderParameters, t.FlattenedJWSInput, KeyType | t.KeyObject | t.JWK> {
 }
 /**
- * Verifies the JWT format (to be a JWS Compact format), verifies the JWS signature, validates the
- * JWT Claims Set.
+ * Verifies a Compact JWS-formatted JWT and validates its Claims Set.
  *
- * @param jwt JSON Web Token value (encoded as JWS).
- * @param key Key to verify the JWT with. See
+ * @param key Public key or shared secret to verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWT Decryption and JWT Claims Set validation options.
+ * @param options JWT Verification and JWT Claims Set validation options.
  */
-export declare function jwtVerify<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, key: types.KeyInput, options?: JWTVerifyOptions): Promise<types.JWTVerifyResult<PayloadType>>;
+export declare function jwtVerify<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput, options?: JWTVerifyOptions): Promise<t.JWTVerifyResult<PayloadType>>;
 /**
- * @param jwt JSON Web Token value (encoded as JWS).
- * @param getKey Function resolving a key to verify the JWT with. See
+ * Verifies the JWT signature and claims, returning the resolved key.
+ *
+ * @param getKey Function resolving a public key or shared secret to verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWT Decryption and JWT Claims Set validation options.
+ * @param options JWT Verification and JWT Claims Set validation options.
  */
-export declare function jwtVerify<PayloadType = types.JWTPayload, KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey<KeyType>, options?: JWTVerifyOptions): Promise<types.JWTVerifyResult<PayloadType> & types.ResolvedKey<KeyType>>;
+export declare function jwtVerify<PayloadType = t.JWTPayload, KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey<KeyType>, options?: JWTVerifyOptions): Promise<t.JWTVerifyResult<PayloadType> & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Accepts a key or key resolver. Use this overload when forwarding either form; the result includes
+ * `key` only when a resolver was used.
  *
- * @param jwt JSON Web Token value (encoded as JWS).
  * @param key Key, or function resolving a key, to verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- * @param options JWT Decryption and JWT Claims Set validation options.
+ * @param options JWT Verification and JWT Claims Set validation options.
  */
-export declare function jwtVerify<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, key: types.KeyInput | JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<types.JWTVerifyResult<PayloadType> & Partial<types.ResolvedKey>>;
+export declare function jwtVerify<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput | JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<t.JWTVerifyResult<PayloadType> & Partial<t.ResolvedKey>>;

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/key/export.d.ts

@@ -1,19 +1,19 @@
-import type * as types from '../types.d.ts';
+import type * as t from '../types.d.ts';
 /**
- * Exports a public {@link !CryptoKey} or {@link !KeyObject} to a PEM-encoded SPKI string format.
+ * Exports a public key to PEM-encoded SPKI. CryptoKey inputs must be extractable.
  *
- * @param key Key to export to a PEM-encoded SPKI string format.
+ * @param key Key to export.
  */
-export declare function exportSPKI(key: types.CryptoKey | types.KeyObject): Promise<string>;
+export declare function exportSPKI(key: t.CryptoKey | t.KeyObject): Promise<string>;
 /**
- * Exports a private {@link !CryptoKey} or {@link !KeyObject} to a PEM-encoded PKCS8 string format.
+ * Exports a private key to PEM-encoded PKCS#8. CryptoKey inputs must be extractable.
  *
- * @param key Key to export to a PEM-encoded PKCS8 string format.
+ * @param key Key to export.
  */
-export declare function exportPKCS8(key: types.CryptoKey | types.KeyObject): Promise<string>;
+export declare function exportPKCS8(key: t.CryptoKey | t.KeyObject): Promise<string>;
 /**
- * Exports a {@link !CryptoKey}, {@link !KeyObject}, or {@link !Uint8Array} to a JWK.
+ * Exports a key to JWK. CryptoKey inputs must be extractable.
  *
- * @param key Key to export as JWK.
+ * @param key Key to export.
  */
-export declare function exportJWK(key: types.CryptoKey | types.KeyObject | Uint8Array): Promise<types.JWK>;
+export declare function exportJWK(key: t.CryptoKey | t.KeyObject | Uint8Array): Promise<t.JWK>;

package/node_modules/@modelcontextprotocol/sdk/node_modules/jose/dist/types/key/generate_key_pair.d.ts

@@ -1,40 +1,33 @@
-import type * as types from '../types.d.ts';
-/**
- * JWA Algorithm Identifiers that {@link generateKeyPair} is able to generate a key pair for, subject
- * to runtime support.
- */
+import type * as t from '../types.d.ts';
+/** Algorithms supported by {@link generateKeyPair}, subject to runtime support. */
 export type GenerateKeyPairAlgorithm = 'PS256' | 'PS384' | 'PS512' | 'RS256' | 'RS384' | 'RS512' | 'RSA-OAEP' | 'RSA-OAEP-256' | 'RSA-OAEP-384' | 'RSA-OAEP-512' | 'ES256' | 'ES384' | 'ES512' | 'Ed25519' | 'EdDSA' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | 'ECDH-ES' | 'ECDH-ES+A128KW' | 'ECDH-ES+A192KW' | 'ECDH-ES+A256KW' | (string & {});
-/** Asymmetric key pair generation function result. */
+/** Generated asymmetric key pair. */
 export interface GenerateKeyPairResult {
-    /** The generated Private Key. */
-    privateKey: types.CryptoKey;
-    /** Public Key corresponding to the generated Private Key. */
-    publicKey: types.CryptoKey;
+    privateKey: t.CryptoKey;
+    publicKey: t.CryptoKey;
 }
-/** Asymmetric key pair generation function options. */
+/** Asymmetric key pair generation options. */
 export interface GenerateKeyPairOptions {
     /**
-     * The EC "crv" (Curve) or OKP "crv" (Subtype of Key Pair) value to generate. The curve must be
-     * both supported on the runtime as well as applicable for the given JWA algorithm identifier.
+     * EC curve or OKP key subtype. Must be supported by the algorithm and runtime. ECDH-ES defaults
+     * to P-256.
      */
     crv?: string;
+    /** RSA modulus length in bits. Must be an integer of at least 2048; defaults to 2048. */
+    modulusLength?: number;
     /**
-     * A hint for RSA algorithms to generate an RSA key of a given `modulusLength` (Key size in bits).
-     * JOSE requires 2048 bits or larger. Default is 2048.
+     * Whether the private key is extractable. Defaults to false; the public key is always
+     * extractable.
      */
-    modulusLength?: number;
-    /** The value to use as {@link !SubtleCrypto.generateKey} `extractable` argument. Default is false. */
     extractable?: boolean;
 }
 /**
- * Generates a private and a public key for a given JWA algorithm identifier. This can only generate
- * asymmetric key pairs. For symmetric secrets use the `generateSecret` function.
+ * Generates an asymmetric key pair for a JWA algorithm identifier.
  *
- * > Note: The `privateKey` is generated with `extractable` set to `false` by default. See
- * > {@link GenerateKeyPairOptions.extractable} to generate an extractable `privateKey`.
+ * > Note: Private keys are not extractable by default. Set {@link GenerateKeyPairOptions.extractable} to
+ * > export them; public keys are always extractable.
  *
  * @param alg JWA Algorithm Identifier to be used with the generated key pair. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- * @param options Additional options passed down to the key pair generation.
  */
 export declare function generateKeyPair(alg: GenerateKeyPairAlgorithm, options?: GenerateKeyPairOptions): Promise<GenerateKeyPairResult>;