@zuplo/cli 7.6.9 → 7.6.10

package/node_modules/@inquirer/checkbox/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/checkbox",
-  "version": "5.2.4",
+  "version": "5.2.5",
   "description": "Inquirer checkbox prompt",
   "keywords": [
     "answer",
@@ -68,7 +68,7 @@
   },
   "dependencies": {
     "@inquirer/ansi": "^2.0.8",
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/figures": "^2.0.9",
     "@inquirer/type": "4.1.1"
   },
@@ -89,5 +89,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/confirm/dist/index.js

@@ -33,7 +33,7 @@ export default createPrompt((config, done) => {
     }
     const { transformer = boolToString } = config;
     function getBooleanValue(value, defaultValue) {
-        const v = value.toLowerCase();
+        const v = value.trim().toLowerCase();
         if (v === '')
             return defaultValue !== false;
         if (yes.toLowerCase().startsWith(v))

package/node_modules/@inquirer/confirm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/confirm",
-  "version": "6.3.1",
+  "version": "6.3.2",
   "description": "Inquirer confirm prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/type": "4.1.1"
   },
   "devDependencies": {
@@ -87,5 +87,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/core/dist/lib/create-prompt.js

@@ -10,6 +10,18 @@ import path from 'node:path';
 // Capture the real setImmediate at module load time so it works even when test
 // frameworks mock timers with vi.useFakeTimers() or similar.
 const nativeSetImmediate = globalThis.setImmediate;
+/**
+ * Register an event listener and return its disposer, so registrations collapse
+ * into a single statement: `cleanups.add(listenTo(rl, 'close', handler))`.
+ */
+function listenTo(target, event, listener) {
+    if ('on' in target) {
+        target.on(event, listener);
+        return () => target.removeListener(event, listener);
+    }
+    target.addEventListener(event, listener);
+    return () => target.removeEventListener(event, listener);
+}
 function getCallSites() {
     // oxlint-disable-next-line typescript/unbound-method
     const savedPrepareStackTrace = Error.prepareStackTrace;
@@ -53,41 +65,63 @@ export function createPrompt(view) {
         output.mute();
         const screen = new ScreenManager(rl);
         const { promise, resolve, reject } = PromisePolyfill.withResolver();
-        const cancel = () => reject(new CancelPromptError());
-        if (signal) {
-            const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
-            if (signal.aborted) {
-                abort();
-                return Object.assign(promise, { cancel });
-            }
-            signal.addEventListener('abort', abort);
-            cleanups.add(() => signal.removeEventListener('abort', abort));
-        }
-        cleanups.add(onSignalExit((code, signal) => {
-            reject(new ExitPromptError(`User force closed the prompt with ${code} ${signal}`));
-        }));
-        // SIGINT must be explicitly handled by the prompt so the ExitPromptError can be handled.
-        // Otherwise, the prompt will stop and in some scenarios never resolve.
-        // Ref issue #1741
-        const sigint = () => reject(new ExitPromptError(`User force closed the prompt with SIGINT`));
-        rl.on('SIGINT', sigint);
-        cleanups.add(() => rl.removeListener('SIGINT', sigint));
         return withHooks(rl, (cycle) => {
-            // The close event triggers immediately when the user press ctrl+c. SignalExit on the other hand
-            // triggers after the process is done (which happens after timeouts are done triggering.)
-            // We triggers the hooks cleanup phase on rl `close` so active timeouts can be cleared.
-            const hooksCleanup = AsyncResource.bind(() => effectScheduler.clearAll());
-            rl.on('close', hooksCleanup);
-            cleanups.add(() => rl.removeListener('close', hooksCleanup));
+            // Clear hook effects synchronously before the prompt settles: readline
+            // emits keypresses synchronously within a single data event, so a
+            // microtask-deferred cleanup would let same-tick input keep driving a
+            // settled prompt.
+            const clearEffects = AsyncResource.bind(() => effectScheduler.clearAll());
+            // The promise resolvers and effectScheduler.clearAll() are both idempotent,
+            // so repeated settlement attempts are harmless no-ops. If a hook cleanup
+            // throws, the cleanup error supersedes the settlement: the answer (or
+            // settlement error, e.g. AbortPromptError) is dropped in favor of
+            // rejecting with the cleanup error.
+            const settlePrompt = (settle) => {
+                try {
+                    clearEffects();
+                    settle();
+                }
+                catch (error) {
+                    reject(error);
+                }
+            };
+            const resolvePrompt = (value) => settlePrompt(() => resolve(value));
+            const rejectPrompt = (error) => settlePrompt(() => reject(error));
+            const promptPromise = Object.assign(promise
+                .finally(() => {
+                cleanups.forEach((cleanup) => cleanup());
+                screen.done({ clearContent: Boolean(context.clearPromptOnDone) });
+                output.end();
+            })
+                .then(() => promise), { cancel: () => rejectPrompt(new CancelPromptError()) });
+            if (signal) {
+                const abort = () => rejectPrompt(new AbortPromptError({ cause: signal.reason }));
+                if (signal.aborted) {
+                    abort();
+                    return promptPromise;
+                }
+                cleanups.add(listenTo(signal, 'abort', abort));
+            }
+            cleanups.add(onSignalExit((code, signal) => {
+                rejectPrompt(new ExitPromptError(`User force closed the prompt with ${code} ${signal}`));
+            }));
+            // SIGINT must be explicitly handled by the prompt so the ExitPromptError can be handled.
+            // Otherwise, the prompt will stop and in some scenarios never resolve.
+            // Ref issue #1741
+            cleanups.add(listenTo(rl, 'SIGINT', () => rejectPrompt(new ExitPromptError(`User force closed the prompt with SIGINT`))));
+            // Fallback for readline closing without the prompt settling (e.g. stdin
+            // EOF), so active effect timeouts still get cleared. Every settlement
+            // path already clears effects through settlePrompt; this event triggers
+            // immediately when the user presses ctrl+c, while signal-exit only
+            // triggers after the process is done (after timeouts finish triggering).
+            cleanups.add(listenTo(rl, 'close', clearEffects));
             const startCycle = () => {
                 // Re-renders only happen when the state change; but the readline cursor could
                 // change position and that also requires a re-render (and a manual one because
                 // we mute the streams). We set the listener after the initial workLoop to avoid
                 // a double render if render triggered by a state change sets the cursor to the
                 // right position.
-                const checkCursorPos = () => screen.checkCursorPos();
-                rl.input.on('keypress', checkCursorPos);
-                cleanups.add(() => rl.input.removeListener('keypress', checkCursorPos));
+                cleanups.add(listenTo(rl.input, 'keypress', () => screen.checkCursorPos()));
                 let pendingDone = null;
                 cycle(() => {
                     let effectsSettled = false;
@@ -97,7 +131,7 @@ export function createPrompt(view) {
                                 // After the cycle completes (async validation path), the "done"
                                 // render already flushed via setStatus → handleChange, so resolve
                                 // immediately.
-                                resolve(value);
+                                resolvePrompt(value);
                             }
                             else {
                                 pendingDone = { value };
@@ -117,13 +151,13 @@ export function createPrompt(view) {
                         effectScheduler.run();
                     }
                     catch (error) {
-                        reject(error);
+                        rejectPrompt(error);
                     }
                     effectsSettled = true;
                     if (pendingDone !== null) {
                         const { value } = pendingDone;
                         pendingDone = null;
-                        resolve(value);
+                        resolvePrompt(value);
                     }
                 });
             };
@@ -143,22 +177,7 @@ export function createPrompt(view) {
             else {
                 startCycle();
             }
-            return Object.assign(promise
-                .then((answer) => {
-                effectScheduler.clearAll();
-                return answer;
-            }, (error) => {
-                effectScheduler.clearAll();
-                throw error;
-            })
-                // Wait for the promise to settle, then cleanup.
-                .finally(() => {
-                cleanups.forEach((cleanup) => cleanup());
-                screen.done({ clearContent: Boolean(context.clearPromptOnDone) });
-                output.end();
-            })
-                // Once cleanup is done, let the expose promise resolve/reject to the internal one.
-                .then(() => promise), { cancel });
+            return promptPromise;
         });
     };
     return prompt;

package/node_modules/@inquirer/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/core",
-  "version": "12.0.2",
+  "version": "12.0.3",
   "description": "Core Inquirer prompt API",
   "keywords": [
     "answer",
@@ -94,5 +94,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/editor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/editor",
-  "version": "5.3.2",
+  "version": "5.3.3",
   "description": "Inquirer multiline editor prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/external-editor": "^3.0.5",
     "@inquirer/type": "4.1.1"
   },
@@ -88,5 +88,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/expand/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/expand",
-  "version": "5.1.4",
+  "version": "5.1.5",
   "description": "Inquirer checkbox prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/type": "4.1.1"
   },
   "devDependencies": {
@@ -87,5 +87,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/input/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/input",
-  "version": "5.1.5",
+  "version": "5.1.6",
   "description": "Inquirer input text prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/type": "4.1.1"
   },
   "devDependencies": {
@@ -87,5 +87,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/number/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/number",
-  "version": "4.2.2",
+  "version": "4.2.3",
   "description": "Inquirer number prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/type": "4.1.1"
   },
   "devDependencies": {
@@ -87,5 +87,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/password/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/password",
-  "version": "5.2.1",
+  "version": "5.2.2",
   "description": "Inquirer password prompt",
   "keywords": [
     "answer",
@@ -68,7 +68,7 @@
   },
   "dependencies": {
     "@inquirer/ansi": "^2.0.8",
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/type": "4.1.1"
   },
   "devDependencies": {
@@ -88,5 +88,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/rawlist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/rawlist",
-  "version": "5.3.4",
+  "version": "5.3.5",
   "description": "Inquirer rawlist prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/type": "4.1.1"
   },
   "devDependencies": {
@@ -87,5 +87,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/search/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/search",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "description": "Inquirer search prompt",
   "keywords": [
     "answer",
@@ -67,7 +67,7 @@
     "tsc": "tsc"
   },
   "dependencies": {
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/figures": "^2.0.9",
     "@inquirer/type": "4.1.1"
   },
@@ -88,5 +88,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@inquirer/select/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquirer/select",
-  "version": "5.2.4",
+  "version": "5.2.5",
   "description": "Inquirer select/list prompt",
   "keywords": [
     "answer",
@@ -68,7 +68,7 @@
   },
   "dependencies": {
     "@inquirer/ansi": "^2.0.8",
-    "@inquirer/core": "^12.0.2",
+    "@inquirer/core": "^12.0.3",
     "@inquirer/figures": "^2.0.9",
     "@inquirer/type": "4.1.1"
   },
@@ -89,5 +89,5 @@
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "gitHead": "5748bd9966b5e175ddf5995ee4cdce6f60c4272e"
+  "gitHead": "cbdb34bfc6c245941d80ef88493c50b3d6dbfce6"
 }

package/node_modules/@modelcontextprotocol/client/node_modules/jose/dist/types/index.d.ts

@@ -48,8 +48,7 @@ import * as base64url from './util/base64url.js';
 export { base64url };
 export type { AnyJWK, CompactDecryptResult, CompactJWEHeaderParameters, CompactJWSHeaderParameters, CompactVerifyResult, CritOption, CryptoKey, DecryptOptions, EncryptOptions, FlattenedDecryptResult, FlattenedJWE, FlattenedJWS, FlattenedJWSInput, FlattenedVerifyResult, GeneralDecryptResult, GeneralJWE, GeneralJWS, GeneralJWSInput, GeneralVerifyResult, GetKeyFunction, JoseHeaderParameters, JSONWebKeySet, JWEContentEncryptionAlgorithm, JWEHeaderParameters, JWEKeyManagementAlgorithm, JWEKeyManagementHeaderParameters, JWK_AKP_Private, JWK_AKP_Public, JWK_EC_Private, JWK_EC_Public, JWK_oct, JWK_OKP_Private, JWK_OKP_Public, JWK_RSA_Private, JWK_RSA_Public, JWK, JWKKeyType, JWKParameters, JWSAlgorithm, JWSHeaderParameters, JWTClaimVerificationOptions, JWTDecryptResult, JWTHeaderParameters, JWTPayload, JWTVerifyResult, KeyInput, KeyObject, ProduceJWT, ResolvedKey, SignOptions, VerifyOptions, } from './types.d.ts';
 /**
- * In prior releases this indicated whether a Node.js-specific build was loaded, this is now fixed
- * to `"WebCryptoAPI"`
+ * Identified the loaded runtime-specific build in prior releases; now always `"WebCryptoAPI"`.
  *
  * @deprecated Remove any runtime branching on this value; it is always `"WebCryptoAPI"`.
  */

package/node_modules/@modelcontextprotocol/client/node_modules/jose/dist/types/jwe/compact/decrypt.d.ts

@@ -1,28 +1,24 @@
 import type * as t from '../../types.d.ts';
-/** Dynamic key resolver for Compact JWE decryption. */
+/** Resolves a key for Compact JWE decryption from unverified headers and token data. */
 export interface CompactDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWEHeaderParameters, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
 }
 /**
  * Decrypts a Compact JWE.
  *
- * @param key Private Key or Secret to decrypt the JWE with. See
+ * @param key Private key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
  */
 export declare function compactDecrypt(jwe: string | Uint8Array, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.CompactDecryptResult>;
 /**
- * Decrypts a Compact JWE, resolving the key dynamically. The result additionally carries the
- * {@link t.ResolvedKey.key resolved key}.
+ * Decrypts a Compact JWE with a dynamically resolved key, included in the result.
  *
- * @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+ * @param getKey Resolves a private key or shared secret from unverified token data.
  */
 export declare function compactDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: string | Uint8Array, getKey: CompactDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.CompactDecryptResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Decrypts a Compact JWE with a key or key resolver. The result includes `key` only when a resolver
+ * is used.
  *
- * @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+ * @param key Private key or shared secret, or a function resolving one.
  */
 export declare function compactDecrypt(jwe: string | Uint8Array, key: t.KeyInput | CompactDecryptGetKey, options?: t.DecryptOptions): Promise<t.CompactDecryptResult & Partial<t.ResolvedKey>>;

package/node_modules/@modelcontextprotocol/client/node_modules/jose/dist/types/jwe/compact/encrypt.d.ts

@@ -3,40 +3,37 @@ import type * as t from '../../types.d.ts';
 export declare class CompactEncrypt {
     #private;
     /**
-     * {@link CompactEncrypt} constructor
+     * Creates a Compact JWE encryptor.
      *
      * @param plaintext Binary representation of the plaintext to encrypt.
      */
     constructor(plaintext: Uint8Array);
     /**
-     * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
-     * "enc" (Encryption Algorithm) Header Parameter.
+     * Sets a content encryption key instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * @deprecated Use only for testing and vector validation.
      */
     setContentEncryptionKey(cek: Uint8Array): this;
     /**
-     * Sets the JWE Initialization Vector to use for content encryption, by default a random suitable
-     * one is generated for the JWE "enc" (Encryption Algorithm) Header Parameter.
+     * Sets the content encryption IV instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * @deprecated Use only for testing and vector validation.
      */
     setInitializationVector(iv: Uint8Array): this;
-    /** Sets the JWE Protected Header on the CompactEncrypt object. */
+    /** Sets the JWE Protected Header. May only be called once. */
     setProtectedHeader(protectedHeader: t.CompactJWEHeaderParameters): this;
     /**
-     * Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
-     * the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
-     * and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
-     * appropriate JOSE Header.
+     * Sets key management inputs such as ECDH-ES "apu"/"apv" or PBES2 "p2c". Use this method instead
+     * of header setters; the resulting parameters are added to the JOSE header. May only be called
+     * once.
      */
     setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
     /**
-     * Encrypts and resolves the value of the Compact JWE string.
+     * Encrypts the plaintext as a Compact JWE.
      *
-     * @param key Public Key or Secret to encrypt the JWE with. See
+     * @param key Public key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
      */
     encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<string>;

package/node_modules/@modelcontextprotocol/client/node_modules/jose/dist/types/jwe/flattened/decrypt.d.ts

@@ -1,28 +1,24 @@
 import type * as t from '../../types.d.ts';
-/** Dynamic key resolver for Flattened JWE decryption. */
+/** Resolves a key for Flattened JWE decryption from unverified headers and token data. */
 export interface FlattenedDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWEHeaderParameters | undefined, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
 }
 /**
  * Decrypts a Flattened JWE.
  *
- * @param key Private Key or Secret to decrypt the JWE with. See
+ * @param key Private key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
  */
 export declare function flattenedDecrypt(jwe: t.FlattenedJWE, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult>;
 /**
- * Decrypts a Flattened JWE, resolving the key dynamically. The result additionally carries the
- * {@link t.ResolvedKey.key resolved key}.
+ * Decrypts a Flattened JWE with a dynamically resolved key, included in the result.
  *
- * @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+ * @param getKey Resolves a private key or shared secret from unverified token data.
  */
 export declare function flattenedDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: t.FlattenedJWE, getKey: FlattenedDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Decrypts a Flattened JWE with a key or key resolver. The result includes `key` only when a
+ * resolver is used.
  *
- * @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+ * @param key Private key or shared secret, or a function resolving one.
  */
 export declare function flattenedDecrypt(jwe: t.FlattenedJWE, key: t.KeyInput | FlattenedDecryptGetKey, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult & Partial<t.ResolvedKey>>;

package/node_modules/@modelcontextprotocol/client/node_modules/jose/dist/types/jwe/flattened/encrypt.d.ts

@@ -3,46 +3,43 @@ import type * as t from '../../types.d.ts';
 export declare class FlattenedEncrypt {
     #private;
     /**
-     * {@link FlattenedEncrypt} constructor
+     * Creates a Flattened JWE encryptor.
      *
      * @param plaintext Binary representation of the plaintext to encrypt.
      */
     constructor(plaintext: Uint8Array);
     /**
-     * Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
-     * the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
-     * and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
-     * appropriate JOSE Header.
+     * Sets key management inputs such as ECDH-ES "apu"/"apv" or PBES2 "p2c". Use this method instead
+     * of header setters; the resulting parameters are added to the JOSE header. May only be called
+     * once.
      */
     setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
-    /** Sets the JWE Protected Header on the FlattenedEncrypt object. */
+    /** Sets the JWE Protected Header. May only be called once. */
     setProtectedHeader(protectedHeader: t.JWEHeaderParameters): this;
-    /** Sets the JWE Shared Unprotected Header on the FlattenedEncrypt object. */
+    /** Sets the JWE Shared Unprotected Header. May only be called once. */
     setSharedUnprotectedHeader(sharedUnprotectedHeader: t.JWEHeaderParameters): this;
-    /** Sets the JWE Per-Recipient Unprotected Header on the FlattenedEncrypt object. */
+    /** Sets the JWE Per-Recipient Unprotected Header. May only be called once. */
     setUnprotectedHeader(unprotectedHeader: t.JWEHeaderParameters): this;
-    /** Sets the Additional Authenticated Data on the FlattenedEncrypt object. */
+    /** Sets additional data to authenticate without encrypting it. */
     setAdditionalAuthenticatedData(aad: Uint8Array): this;
     /**
-     * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
-     * "enc" (Encryption Algorithm) Header Parameter.
+     * Sets a content encryption key instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * @deprecated Use only for testing and vector validation.
      */
     setContentEncryptionKey(cek: Uint8Array): this;
     /**
-     * Sets the JWE Initialization Vector to use for content encryption, by default a random suitable
-     * one is generated for the JWE "enc" (Encryption Algorithm) Header Parameter.
+     * Sets the content encryption IV instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * @deprecated Use only for testing and vector validation.
      */
     setInitializationVector(iv: Uint8Array): this;
     /**
-     * Encrypts and resolves the value of the Flattened JWE object.
+     * Encrypts the plaintext as a Flattened JWE.
      *
-     * @param key Public Key or Secret to encrypt the JWE with. See
+     * @param key Public key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
      */
     encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<t.FlattenedJWE>;