@zuplo/runtime 6.73.29 → 6.73.30

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/out/esm/{chunk-KO2ULO4I.js → chunk-6E46244D.js} +116 -116
  2. package/out/esm/chunk-6E46244D.js.map +1 -0
  3. package/out/esm/index.js +1 -1
  4. package/out/esm/mcp-gateway/index.js +2 -2
  5. package/out/esm/mcp-gateway/index.js.map +1 -1
  6. package/out/types/index.d.ts +72 -1333
  7. package/out/types/mcp-gateway/index.d.ts +205 -1055
  8. package/package.json +1 -1
  9. package/out/esm/chunk-KO2ULO4I.js.map +0 -1
  10. /package/out/esm/{chunk-KO2ULO4I.js.LEGAL.txt → chunk-6E46244D.js.LEGAL.txt} +0 -0
package/out/types/index.d.ts CHANGED
@@ -5,7 +5,6 @@ import { InboundPolicyHandler as InboundPolicyHandler_2 } from "../../policies.j
5
5
  import { KeyLike } from "jose";
6
6
  import { RequestGeneric as RequestGeneric_2 } from "../../request.js";
7
7
  import type { ValidateFunction } from "ajv";
8
- import { z } from "zod/v4";
9
8
 
10
9
  /**
11
10
  * The request/response **schema dialect** a policy is dealing with — named after
@@ -357,10 +356,10 @@ export declare function aiGatewayHandler(
357
356
  ): Promise<Response>;
358
357
 
359
358
  /**
360
- * Routes AI requests using the model selection stored in the request context.
361
- * Attach the `ai-gateway-model-filtering-v2-inbound` policy before this handler
362
- * runs, or call `AIGatewayModelRouting.set(context, routing)` from a custom
363
- * inbound policy.
359
+ * Routes AI requests using a model selection stored in request context by a
360
+ * filtering or custom-routing policy. When no policy selected routing, the
361
+ * handler uses the request's `providerName/model` as the route target. Requests
362
+ * without preselected routing must include a qualified model.
364
363
  *
365
364
  * @beta
366
365
  * @param request - The incoming AI Gateway request.
@@ -374,9 +373,6 @@ export declare function aiGatewayHandler(
374
373
  * "handler": {
375
374
  * "export": "aiGatewayHandlerV2",
376
375
  * "module": "$import(@zuplo/runtime)"
377
- * },
378
- * "policies": {
379
- * "inbound": ["ai-gateway-model-filtering-v2-inbound"]
380
376
  * }
381
377
  * }
382
378
  * ```
@@ -697,8 +693,10 @@ export declare interface AIGatewayModelInfo {
697
693
  *
698
694
  * The built-in model-routing policy matches the request against its allowList
699
695
  * of {@link AIGatewayRouteTarget} items, then `set()`s the winning target.
700
- * Custom policies can call `set()` directly instead. Provider API keys are
701
- * resolved internally and are never returned by `get()`.
696
+ * Custom policies can call `set()` directly instead. If neither kind of policy
697
+ * selects routing, `aiGatewayHandlerV2` calls `set()` with the request's
698
+ * `providerName/model`. Provider API keys are resolved internally and are never
699
+ * returned by `get()`.
702
700
  *
703
701
  * @public
704
702
  * @example
@@ -6855,6 +6853,27 @@ export declare interface HydrolixRequestLoggerPluginOptions<T> {
6855
6853
  batchPeriodSeconds?: number;
6856
6854
  }
6857
6855
 
6856
+ /**
6857
+ * Hand-written mirror of {@link idJagConfigSchema}'s parsed output. Keeping
6858
+ * the type hand-written keeps zod out of the public policy class signatures
6859
+ * (this type is part of {@link McpOAuthRuntimeConfig}); the assertion below
6860
+ * fails to compile on drift.
6861
+ */
6862
+ declare type IdJagRuntimeConfig =
6863
+ | {
6864
+ enabled: false;
6865
+ }
6866
+ | {
6867
+ enabled: true;
6868
+ trustedIssuers: {
6869
+ issuer: string;
6870
+ jwksUrl: string;
6871
+ expectedClientIds?: string[];
6872
+ subjectMapping: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
6873
+ }[];
6874
+ authorizationDetailsTypesAllowed?: string[];
6875
+ };
6876
+
6858
6877
  /**
6859
6878
  * Image generation tool
6860
6879
  */
@@ -7724,7 +7743,7 @@ declare type MaxConversationLength = number;
7724
7743
  * @title MCP Auth0 OAuth
7725
7744
  * @product mcp-gateway
7726
7745
  */
7727
- export declare class McpAuth0OAuthInboundPolicy extends InboundPolicy<ValidatedAuth0OAuthOptions> {
7746
+ export declare class McpAuth0OAuthInboundPolicy extends InboundPolicy<McpAuth0OAuthInboundPolicyOptions> {
7728
7747
  #private;
7729
7748
  static readonly policyType = "mcp-auth0-oauth";
7730
7749
  constructor(rawOptions: unknown, policyName: string);
@@ -7853,44 +7872,6 @@ export declare interface McpAuth0OAuthInboundPolicyOptions {
7853
7872
  };
7854
7873
  }
7855
7874
 
7856
- declare const mcpAuth0OAuthOptionsSchema: z.ZodObject<
7857
- {
7858
- auth0Domain: z.ZodString;
7859
- audience: z.ZodOptional<z.ZodString>;
7860
- clientId: z.ZodString;
7861
- clientSecret: z.ZodString;
7862
- scope: z.ZodOptional<z.ZodString>;
7863
- gateway: z.ZodOptional<
7864
- z.ZodObject<
7865
- {
7866
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
7867
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
7868
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
7869
- },
7870
- z.core.$strict
7871
- >
7872
- >;
7873
- idJag: z.ZodOptional<z.ZodUnknown>;
7874
- browserLoginOverrides: z.ZodOptional<
7875
- z.ZodObject<
7876
- {
7877
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
7878
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
7879
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
7880
- pkce: z.ZodOptional<
7881
- z.ZodEnum<{
7882
- none: "none";
7883
- S256: "S256";
7884
- }>
7885
- >;
7886
- },
7887
- z.core.$strict
7888
- >
7889
- >;
7890
- },
7891
- z.core.$strict
7892
- >;
7893
-
7894
7875
  /**
7895
7876
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
7896
7877
  * with browser login delegated to Clerk.
@@ -7903,7 +7884,7 @@ declare const mcpAuth0OAuthOptionsSchema: z.ZodObject<
7903
7884
  * @public
7904
7885
  * @product mcp-gateway
7905
7886
  */
7906
- export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<ValidatedClerkOAuthOptions> {
7887
+ export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<McpClerkOAuthInboundPolicyOptions> {
7907
7888
  #private;
7908
7889
  static readonly policyType = "mcp-clerk-oauth";
7909
7890
  constructor(rawOptions: unknown, policyName: string);
@@ -8024,37 +8005,6 @@ export declare interface McpClerkOAuthInboundPolicyOptions {
8024
8005
  };
8025
8006
  }
8026
8007
 
8027
- declare const mcpClerkOAuthOptionsSchema: z.ZodObject<
8028
- {
8029
- frontendApiUrl: z.ZodString;
8030
- clientId: z.ZodString;
8031
- clientSecret: z.ZodString;
8032
- scope: z.ZodOptional<z.ZodString>;
8033
- gateway: z.ZodOptional<
8034
- z.ZodObject<
8035
- {
8036
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8037
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8038
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8039
- },
8040
- z.core.$strict
8041
- >
8042
- >;
8043
- idJag: z.ZodOptional<z.ZodUnknown>;
8044
- browserLoginOverrides: z.ZodOptional<
8045
- z.ZodObject<
8046
- {
8047
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8048
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8049
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8050
- },
8051
- z.core.$strict
8052
- >
8053
- >;
8054
- },
8055
- z.core.$strict
8056
- >;
8057
-
8058
8008
  /**
8059
8009
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8060
8010
  * with browser login delegated to Amazon Cognito.
@@ -8068,7 +8018,7 @@ declare const mcpClerkOAuthOptionsSchema: z.ZodObject<
8068
8018
  * @public
8069
8019
  * @product mcp-gateway
8070
8020
  */
8071
- export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<ValidatedCognitoOAuthOptions> {
8021
+ export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<McpCognitoOAuthInboundPolicyOptions> {
8072
8022
  #private;
8073
8023
  static readonly policyType = "mcp-cognito-oauth";
8074
8024
  constructor(rawOptions: unknown, policyName: string);
@@ -8201,45 +8151,6 @@ export declare interface McpCognitoOAuthInboundPolicyOptions {
8201
8151
  };
8202
8152
  }
8203
8153
 
8204
- declare const mcpCognitoOAuthOptionsSchema: z.ZodObject<
8205
- {
8206
- awsRegion: z.ZodString;
8207
- userPoolId: z.ZodString;
8208
- userPoolDomain: z.ZodString;
8209
- clientId: z.ZodString;
8210
- clientSecret: z.ZodString;
8211
- scope: z.ZodOptional<z.ZodString>;
8212
- gateway: z.ZodOptional<
8213
- z.ZodObject<
8214
- {
8215
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8216
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8217
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8218
- },
8219
- z.core.$strict
8220
- >
8221
- >;
8222
- idJag: z.ZodOptional<z.ZodUnknown>;
8223
- browserLoginOverrides: z.ZodOptional<
8224
- z.ZodObject<
8225
- {
8226
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8227
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8228
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8229
- pkce: z.ZodOptional<
8230
- z.ZodEnum<{
8231
- none: "none";
8232
- S256: "S256";
8233
- }>
8234
- >;
8235
- },
8236
- z.core.$strict
8237
- >
8238
- >;
8239
- },
8240
- z.core.$strict
8241
- >;
8242
-
8243
8154
  /**
8244
8155
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8245
8156
  * with browser login delegated to Microsoft Entra ID.
@@ -8252,7 +8163,7 @@ declare const mcpCognitoOAuthOptionsSchema: z.ZodObject<
8252
8163
  * @public
8253
8164
  * @product mcp-gateway
8254
8165
  */
8255
- export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<ValidatedEntraOAuthOptions> {
8166
+ export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<McpEntraOAuthInboundPolicyOptions> {
8256
8167
  #private;
8257
8168
  static readonly policyType = "mcp-entra-oauth";
8258
8169
  constructor(rawOptions: unknown, policyName: string);
@@ -8377,43 +8288,6 @@ export declare interface McpEntraOAuthInboundPolicyOptions {
8377
8288
  };
8378
8289
  }
8379
8290
 
8380
- declare const mcpEntraOAuthOptionsSchema: z.ZodObject<
8381
- {
8382
- tenantId: z.ZodString;
8383
- clientId: z.ZodString;
8384
- clientSecret: z.ZodString;
8385
- scope: z.ZodOptional<z.ZodString>;
8386
- gateway: z.ZodOptional<
8387
- z.ZodObject<
8388
- {
8389
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8390
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8391
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8392
- },
8393
- z.core.$strict
8394
- >
8395
- >;
8396
- idJag: z.ZodOptional<z.ZodUnknown>;
8397
- browserLoginOverrides: z.ZodOptional<
8398
- z.ZodObject<
8399
- {
8400
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8401
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8402
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8403
- pkce: z.ZodOptional<
8404
- z.ZodEnum<{
8405
- none: "none";
8406
- S256: "S256";
8407
- }>
8408
- >;
8409
- },
8410
- z.core.$strict
8411
- >
8412
- >;
8413
- },
8414
- z.core.$strict
8415
- >;
8416
-
8417
8291
  /* Excluded from this release type: McpGatewayOAuthProtectedResourcePlugin */
8418
8292
 
8419
8293
  /**
@@ -8429,7 +8303,7 @@ declare const mcpEntraOAuthOptionsSchema: z.ZodObject<
8429
8303
  * @public
8430
8304
  * @product mcp-gateway
8431
8305
  */
8432
- export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<ValidatedGoogleOAuthOptions> {
8306
+ export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<McpGoogleOAuthInboundPolicyOptions> {
8433
8307
  #private;
8434
8308
  static readonly policyType = "mcp-google-oauth";
8435
8309
  constructor(rawOptions: unknown, policyName: string);
@@ -8550,42 +8424,6 @@ export declare interface McpGoogleOAuthInboundPolicyOptions {
8550
8424
  };
8551
8425
  }
8552
8426
 
8553
- declare const mcpGoogleOAuthOptionsSchema: z.ZodObject<
8554
- {
8555
- clientId: z.ZodString;
8556
- clientSecret: z.ZodString;
8557
- scope: z.ZodOptional<z.ZodString>;
8558
- gateway: z.ZodOptional<
8559
- z.ZodObject<
8560
- {
8561
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8562
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8563
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8564
- },
8565
- z.core.$strict
8566
- >
8567
- >;
8568
- idJag: z.ZodOptional<z.ZodUnknown>;
8569
- browserLoginOverrides: z.ZodOptional<
8570
- z.ZodObject<
8571
- {
8572
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8573
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8574
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8575
- pkce: z.ZodOptional<
8576
- z.ZodEnum<{
8577
- none: "none";
8578
- S256: "S256";
8579
- }>
8580
- >;
8581
- },
8582
- z.core.$strict
8583
- >
8584
- >;
8585
- },
8586
- z.core.$strict
8587
- >;
8588
-
8589
8427
  /**
8590
8428
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8591
8429
  * with browser login delegated to Keycloak.
@@ -8599,7 +8437,7 @@ declare const mcpGoogleOAuthOptionsSchema: z.ZodObject<
8599
8437
  * @public
8600
8438
  * @product mcp-gateway
8601
8439
  */
8602
- export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<ValidatedKeycloakOAuthOptions> {
8440
+ export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<McpKeycloakOAuthInboundPolicyOptions> {
8603
8441
  #private;
8604
8442
  static readonly policyType = "mcp-keycloak-oauth";
8605
8443
  constructor(rawOptions: unknown, policyName: string);
@@ -8728,44 +8566,6 @@ export declare interface McpKeycloakOAuthInboundPolicyOptions {
8728
8566
  };
8729
8567
  }
8730
8568
 
8731
- declare const mcpKeycloakOAuthOptionsSchema: z.ZodObject<
8732
- {
8733
- keycloakBaseUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
8734
- realm: z.ZodString;
8735
- clientId: z.ZodString;
8736
- clientSecret: z.ZodString;
8737
- scope: z.ZodOptional<z.ZodString>;
8738
- gateway: z.ZodOptional<
8739
- z.ZodObject<
8740
- {
8741
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8742
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8743
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8744
- },
8745
- z.core.$strict
8746
- >
8747
- >;
8748
- idJag: z.ZodOptional<z.ZodUnknown>;
8749
- browserLoginOverrides: z.ZodOptional<
8750
- z.ZodObject<
8751
- {
8752
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8753
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8754
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8755
- pkce: z.ZodOptional<
8756
- z.ZodEnum<{
8757
- none: "none";
8758
- S256: "S256";
8759
- }>
8760
- >;
8761
- },
8762
- z.core.$strict
8763
- >
8764
- >;
8765
- },
8766
- z.core.$strict
8767
- >;
8768
-
8769
8569
  /**
8770
8570
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8771
8571
  * with browser login delegated to Logto.
@@ -8778,7 +8578,7 @@ declare const mcpKeycloakOAuthOptionsSchema: z.ZodObject<
8778
8578
  * @public
8779
8579
  * @product mcp-gateway
8780
8580
  */
8781
- export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<ValidatedLogtoOAuthOptions> {
8581
+ export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<McpLogtoOAuthInboundPolicyOptions> {
8782
8582
  #private;
8783
8583
  static readonly policyType = "mcp-logto-oauth";
8784
8584
  constructor(rawOptions: unknown, policyName: string);
@@ -8903,43 +8703,6 @@ export declare interface McpLogtoOAuthInboundPolicyOptions {
8903
8703
  };
8904
8704
  }
8905
8705
 
8906
- declare const mcpLogtoOAuthOptionsSchema: z.ZodObject<
8907
- {
8908
- logtoEndpoint: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
8909
- clientId: z.ZodString;
8910
- clientSecret: z.ZodString;
8911
- scope: z.ZodOptional<z.ZodString>;
8912
- gateway: z.ZodOptional<
8913
- z.ZodObject<
8914
- {
8915
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8916
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8917
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8918
- },
8919
- z.core.$strict
8920
- >
8921
- >;
8922
- idJag: z.ZodOptional<z.ZodUnknown>;
8923
- browserLoginOverrides: z.ZodOptional<
8924
- z.ZodObject<
8925
- {
8926
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8927
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8928
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8929
- pkce: z.ZodOptional<
8930
- z.ZodEnum<{
8931
- none: "none";
8932
- S256: "S256";
8933
- }>
8934
- >;
8935
- },
8936
- z.core.$strict
8937
- >
8938
- >;
8939
- },
8940
- z.core.$strict
8941
- >;
8942
-
8943
8706
  /**
8944
8707
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token.
8945
8708
  *
@@ -9116,201 +8879,37 @@ export declare interface McpOAuthInboundPolicyOptions {
9116
8879
  };
9117
8880
  }
9118
8881
 
9119
- declare type McpOAuthRuntimeConfig = z.infer<
9120
- typeof mcpOAuthRuntimeConfigSchema
9121
- >;
9122
-
9123
- declare const mcpOAuthRuntimeConfigSchema: z.ZodPipe<
9124
- z.ZodObject<
9125
- {
9126
- oidc: z.ZodObject<
9127
- {
9128
- issuer: z.ZodURL;
9129
- jwksUrl: z.ZodURL;
9130
- audience: z.ZodOptional<z.ZodString>;
9131
- },
9132
- z.core.$strip
9133
- >;
9134
- browserLogin: z.ZodObject<
9135
- {
9136
- url: z.ZodURL;
9137
- tokenUrl: z.ZodOptional<z.ZodURL>;
9138
- clientId: z.ZodOptional<z.ZodString>;
9139
- clientSecret: z.ZodOptional<z.ZodString>;
9140
- scope: z.ZodDefault<z.ZodString>;
9141
- audience: z.ZodOptional<z.ZodString>;
9142
- pkce: z.ZodDefault<
9143
- z.ZodEnum<{
9144
- none: "none";
9145
- S256: "S256";
9146
- }>
9147
- >;
9148
- remoteTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9149
- stateTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9150
- sessionTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9151
- },
9152
- z.core.$strict
9153
- >;
9154
- gateway: z.ZodPipe<
9155
- z.ZodDefault<
9156
- z.ZodObject<
9157
- {
9158
- accessTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9159
- refreshTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9160
- cimdEnabled: z.ZodDefault<z.ZodBoolean>;
9161
- },
9162
- z.core.$strict
9163
- >
9164
- >,
9165
- z.ZodTransform<
9166
- {
9167
- accessTokenTtlSeconds: number;
9168
- refreshTokenTtlSeconds: number;
9169
- downstreamCimdEnabled: boolean;
9170
- },
9171
- {
9172
- accessTokenTtlSeconds: number;
9173
- refreshTokenTtlSeconds: number;
9174
- cimdEnabled: boolean;
9175
- }
9176
- >
9177
- >;
9178
- idJag: z.ZodDefault<
9179
- z.ZodOptional<
9180
- z.ZodDefault<
9181
- z.ZodDiscriminatedUnion<
9182
- [
9183
- z.ZodObject<
9184
- {
9185
- enabled: z.ZodLiteral<false>;
9186
- },
9187
- z.core.$strict
9188
- >,
9189
- z.ZodObject<
9190
- {
9191
- enabled: z.ZodLiteral<true>;
9192
- trustedIssuers: z.ZodOptional<
9193
- z.ZodArray<
9194
- z.ZodObject<
9195
- {
9196
- issuer: z.ZodOptional<z.ZodURL>;
9197
- jwksUrl: z.ZodOptional<z.ZodURL>;
9198
- expectedClientIds: z.ZodOptional<
9199
- z.ZodArray<z.ZodString>
9200
- >;
9201
- subjectMapping: z.ZodDefault<
9202
- z.ZodEnum<{
9203
- iss_prefix: "iss_prefix";
9204
- iss_tenant_prefix: "iss_tenant_prefix";
9205
- sub_id_only: "sub_id_only";
9206
- }>
9207
- >;
9208
- },
9209
- z.core.$strict
9210
- >
9211
- >
9212
- >;
9213
- authorizationDetailsTypesAllowed: z.ZodOptional<
9214
- z.ZodArray<z.ZodString>
9215
- >;
9216
- },
9217
- z.core.$strict
9218
- >,
9219
- ]
9220
- >
9221
- >
9222
- >
9223
- >;
9224
- },
9225
- z.core.$strict
9226
- >,
9227
- z.ZodTransform<
9228
- {
9229
- idJag:
9230
- | {
9231
- enabled: false;
9232
- }
9233
- | {
9234
- enabled: true;
9235
- trustedIssuers: {
9236
- issuer: string;
9237
- jwksUrl: string;
9238
- subjectMapping:
9239
- | "iss_prefix"
9240
- | "iss_tenant_prefix"
9241
- | "sub_id_only";
9242
- expectedClientIds?: string[] | undefined;
9243
- }[];
9244
- authorizationDetailsTypesAllowed?: string[] | undefined;
9245
- };
9246
- oidc: {
9247
- issuer: string;
9248
- jwksUrl: string;
9249
- audience?: string | undefined;
9250
- };
9251
- browserLogin: {
9252
- url: string;
9253
- scope: string;
9254
- pkce: "none" | "S256";
9255
- remoteTimeoutMs: number;
9256
- stateTtlSeconds: number;
9257
- sessionTtlSeconds: number;
9258
- tokenUrl?: string | undefined;
9259
- clientId?: string | undefined;
9260
- clientSecret?: string | undefined;
9261
- audience?: string | undefined;
9262
- };
9263
- gateway: {
9264
- accessTokenTtlSeconds: number;
9265
- refreshTokenTtlSeconds: number;
9266
- downstreamCimdEnabled: boolean;
9267
- };
9268
- },
9269
- {
9270
- oidc: {
9271
- issuer: string;
9272
- jwksUrl: string;
9273
- audience?: string | undefined;
9274
- };
9275
- browserLogin: {
9276
- url: string;
9277
- scope: string;
9278
- pkce: "none" | "S256";
9279
- remoteTimeoutMs: number;
9280
- stateTtlSeconds: number;
9281
- sessionTtlSeconds: number;
9282
- tokenUrl?: string | undefined;
9283
- clientId?: string | undefined;
9284
- clientSecret?: string | undefined;
9285
- audience?: string | undefined;
9286
- };
9287
- gateway: {
9288
- accessTokenTtlSeconds: number;
9289
- refreshTokenTtlSeconds: number;
9290
- downstreamCimdEnabled: boolean;
9291
- };
9292
- idJag:
9293
- | {
9294
- enabled: false;
9295
- }
9296
- | {
9297
- enabled: true;
9298
- trustedIssuers?:
9299
- | {
9300
- subjectMapping:
9301
- | "iss_prefix"
9302
- | "iss_tenant_prefix"
9303
- | "sub_id_only";
9304
- issuer?: string | undefined;
9305
- jwksUrl?: string | undefined;
9306
- expectedClientIds?: string[] | undefined;
9307
- }[]
9308
- | undefined;
9309
- authorizationDetailsTypesAllowed?: string[] | undefined;
9310
- };
9311
- }
9312
- >
9313
- >;
8882
+ /**
8883
+ * The gateway's resolved OAuth runtime configuration — the parsed, defaulted
8884
+ * output of {@link mcpOAuthRuntimeConfigSchema}. Hand-written so the public
8885
+ * MCP OAuth policy class signatures contain no zod types; the assertion below
8886
+ * fails to compile if this interface drifts from the schema.
8887
+ */
8888
+ declare interface McpOAuthRuntimeConfig {
8889
+ oidc: {
8890
+ issuer: string;
8891
+ jwksUrl: string;
8892
+ audience?: string;
8893
+ };
8894
+ browserLogin: {
8895
+ url: string;
8896
+ tokenUrl?: string;
8897
+ clientId?: string;
8898
+ clientSecret?: string;
8899
+ scope: string;
8900
+ audience?: string;
8901
+ pkce: "S256" | "none";
8902
+ remoteTimeoutMs: number;
8903
+ stateTtlSeconds: number;
8904
+ sessionTtlSeconds: number;
8905
+ };
8906
+ gateway: {
8907
+ accessTokenTtlSeconds: number;
8908
+ refreshTokenTtlSeconds: number;
8909
+ downstreamCimdEnabled: boolean;
8910
+ };
8911
+ idJag: IdJagRuntimeConfig;
8912
+ }
9314
8913
 
9315
8914
  /**
9316
8915
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
@@ -9324,7 +8923,7 @@ declare const mcpOAuthRuntimeConfigSchema: z.ZodPipe<
9324
8923
  * @public
9325
8924
  * @product mcp-gateway
9326
8925
  */
9327
- export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<ValidatedOktaOAuthOptions> {
8926
+ export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<McpOktaOAuthInboundPolicyOptions> {
9328
8927
  #private;
9329
8928
  static readonly policyType = "mcp-okta-oauth";
9330
8929
  constructor(rawOptions: unknown, policyName: string);
@@ -9453,44 +9052,6 @@ export declare interface McpOktaOAuthInboundPolicyOptions {
9453
9052
  };
9454
9053
  }
9455
9054
 
9456
- declare const mcpOktaOAuthOptionsSchema: z.ZodObject<
9457
- {
9458
- oktaDomain: z.ZodString;
9459
- authorizationServerId: z.ZodOptional<z.ZodString>;
9460
- clientId: z.ZodString;
9461
- clientSecret: z.ZodString;
9462
- scope: z.ZodOptional<z.ZodString>;
9463
- gateway: z.ZodOptional<
9464
- z.ZodObject<
9465
- {
9466
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9467
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9468
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
9469
- },
9470
- z.core.$strict
9471
- >
9472
- >;
9473
- idJag: z.ZodOptional<z.ZodUnknown>;
9474
- browserLoginOverrides: z.ZodOptional<
9475
- z.ZodObject<
9476
- {
9477
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
9478
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
9479
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
9480
- pkce: z.ZodOptional<
9481
- z.ZodEnum<{
9482
- none: "none";
9483
- S256: "S256";
9484
- }>
9485
- >;
9486
- },
9487
- z.core.$strict
9488
- >
9489
- >;
9490
- },
9491
- z.core.$strict
9492
- >;
9493
-
9494
9055
  /**
9495
9056
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
9496
9057
  * with browser login delegated to OneLogin.
@@ -9503,7 +9064,7 @@ declare const mcpOktaOAuthOptionsSchema: z.ZodObject<
9503
9064
  * @public
9504
9065
  * @product mcp-gateway
9505
9066
  */
9506
- export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<ValidatedOneLoginOAuthOptions> {
9067
+ export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<McpOneLoginOAuthInboundPolicyOptions> {
9507
9068
  #private;
9508
9069
  static readonly policyType = "mcp-onelogin-oauth";
9509
9070
  constructor(rawOptions: unknown, policyName: string);
@@ -9624,37 +9185,6 @@ export declare interface McpOneLoginOAuthInboundPolicyOptions {
9624
9185
  };
9625
9186
  }
9626
9187
 
9627
- declare const mcpOneLoginOAuthOptionsSchema: z.ZodObject<
9628
- {
9629
- oneLoginSubdomain: z.ZodString;
9630
- clientId: z.ZodString;
9631
- clientSecret: z.ZodString;
9632
- scope: z.ZodOptional<z.ZodString>;
9633
- gateway: z.ZodOptional<
9634
- z.ZodObject<
9635
- {
9636
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9637
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9638
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
9639
- },
9640
- z.core.$strict
9641
- >
9642
- >;
9643
- idJag: z.ZodOptional<z.ZodUnknown>;
9644
- browserLoginOverrides: z.ZodOptional<
9645
- z.ZodObject<
9646
- {
9647
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
9648
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
9649
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
9650
- },
9651
- z.core.$strict
9652
- >
9653
- >;
9654
- },
9655
- z.core.$strict
9656
- >;
9657
-
9658
9188
  /**
9659
9189
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
9660
9190
  * with browser login delegated to PingOne.
@@ -9668,7 +9198,7 @@ declare const mcpOneLoginOAuthOptionsSchema: z.ZodObject<
9668
9198
  * @public
9669
9199
  * @product mcp-gateway
9670
9200
  */
9671
- export declare class McpPingOAuthInboundPolicy extends InboundPolicy<ValidatedPingOAuthOptions> {
9201
+ export declare class McpPingOAuthInboundPolicy extends InboundPolicy<McpPingOAuthInboundPolicyOptions> {
9672
9202
  #private;
9673
9203
  static readonly policyType = "mcp-ping-oauth";
9674
9204
  constructor(rawOptions: unknown, policyName: string);
@@ -9807,54 +9337,6 @@ export declare interface McpPingOAuthInboundPolicyOptions {
9807
9337
  };
9808
9338
  }
9809
9339
 
9810
- declare const mcpPingOAuthOptionsSchema: z.ZodObject<
9811
- {
9812
- environmentId: z.ZodOptional<z.ZodString>;
9813
- region: z.ZodOptional<
9814
- z.ZodEnum<{
9815
- "north-america": "north-america";
9816
- canada: "canada";
9817
- europe: "europe";
9818
- singapore: "singapore";
9819
- australia: "australia";
9820
- "asia-pacific": "asia-pacific";
9821
- }>
9822
- >;
9823
- customDomain: z.ZodOptional<z.ZodString>;
9824
- clientId: z.ZodString;
9825
- clientSecret: z.ZodString;
9826
- scope: z.ZodOptional<z.ZodString>;
9827
- gateway: z.ZodOptional<
9828
- z.ZodObject<
9829
- {
9830
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9831
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9832
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
9833
- },
9834
- z.core.$strict
9835
- >
9836
- >;
9837
- idJag: z.ZodOptional<z.ZodUnknown>;
9838
- browserLoginOverrides: z.ZodOptional<
9839
- z.ZodObject<
9840
- {
9841
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
9842
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
9843
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
9844
- pkce: z.ZodOptional<
9845
- z.ZodEnum<{
9846
- none: "none";
9847
- S256: "S256";
9848
- }>
9849
- >;
9850
- },
9851
- z.core.$strict
9852
- >
9853
- >;
9854
- },
9855
- z.core.$strict
9856
- >;
9857
-
9858
9340
  /**
9859
9341
  * An MCP Server handler for Zuplo
9860
9342
  * Only POST requests are supported for the HTTP streamable MCP transport.
@@ -9905,7 +9387,7 @@ declare interface McpTool {
9905
9387
  * @public
9906
9388
  * @product mcp-gateway
9907
9389
  */
9908
- export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<ValidatedWorkosOAuthOptions> {
9390
+ export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<McpWorkosOAuthInboundPolicyOptions> {
9909
9391
  #private;
9910
9392
  static readonly policyType = "mcp-workos-oauth";
9911
9393
  constructor(rawOptions: unknown, policyName: string);
@@ -10026,42 +9508,6 @@ export declare interface McpWorkosOAuthInboundPolicyOptions {
10026
9508
  };
10027
9509
  }
10028
9510
 
10029
- declare const mcpWorkosOAuthOptionsSchema: z.ZodObject<
10030
- {
10031
- clientId: z.ZodString;
10032
- clientSecret: z.ZodString;
10033
- scope: z.ZodOptional<z.ZodString>;
10034
- gateway: z.ZodOptional<
10035
- z.ZodObject<
10036
- {
10037
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
10038
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
10039
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
10040
- },
10041
- z.core.$strict
10042
- >
10043
- >;
10044
- idJag: z.ZodOptional<z.ZodUnknown>;
10045
- browserLoginOverrides: z.ZodOptional<
10046
- z.ZodObject<
10047
- {
10048
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
10049
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
10050
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
10051
- pkce: z.ZodOptional<
10052
- z.ZodEnum<{
10053
- none: "none";
10054
- S256: "S256";
10055
- }>
10056
- >;
10057
- },
10058
- z.core.$strict
10059
- >
10060
- >;
10061
- },
10062
- z.core.$strict
10063
- >;
10064
-
10065
9511
  declare interface MemoryCacheOptions {
10066
9512
  maxSize: number;
10067
9513
  }
@@ -13050,7 +12496,7 @@ export declare interface RequireOriginInboundPolicyOptions {
13050
12496
  * @product api-gateway
13051
12497
  * @public
13052
12498
  */
13053
- export declare class RequireUserClaimsInboundPolicy extends InboundPolicy<ValidatedOptions> {
12499
+ export declare class RequireUserClaimsInboundPolicy extends InboundPolicy<RequireUserClaimsInboundPolicyOptions> {
13054
12500
  #private;
13055
12501
  static readonly policyType = "require-user-claims";
13056
12502
  constructor(rawOptions: unknown, policyName: string);
@@ -13068,667 +12514,6 @@ export declare interface RequireUserClaimsInboundPolicyOptions {
13068
12514
  rule: Rule;
13069
12515
  }
13070
12516
 
13071
- declare const requireUserClaimsOptionsSchema: z.ZodObject<
13072
- {
13073
- rule: z.ZodUnion<
13074
- readonly [
13075
- z.ZodObject<
13076
- {
13077
- and: z.ZodArray<
13078
- z.ZodUnion<
13079
- readonly [
13080
- z.ZodObject<
13081
- {
13082
- and: z.ZodArray<
13083
- z.ZodUnion<
13084
- readonly [
13085
- z.ZodObject<
13086
- {
13087
- and: z.ZodArray<
13088
- z.ZodUnion<
13089
- readonly [
13090
- z.ZodObject<
13091
- {
13092
- claim: z.ZodString;
13093
- eq: z.ZodUnion<
13094
- readonly [
13095
- z.ZodString,
13096
- z.ZodNumber,
13097
- z.ZodBoolean,
13098
- ]
13099
- >;
13100
- },
13101
- z.core.$strict
13102
- >,
13103
- z.ZodObject<
13104
- {
13105
- claim: z.ZodString;
13106
- in: z.ZodArray<
13107
- z.ZodUnion<
13108
- readonly [
13109
- z.ZodString,
13110
- z.ZodNumber,
13111
- z.ZodBoolean,
13112
- ]
13113
- >
13114
- >;
13115
- },
13116
- z.core.$strict
13117
- >,
13118
- z.ZodObject<
13119
- {
13120
- claim: z.ZodString;
13121
- startsWith: z.ZodString;
13122
- },
13123
- z.core.$strict
13124
- >,
13125
- ]
13126
- >
13127
- >;
13128
- },
13129
- z.core.$strict
13130
- >,
13131
- z.ZodObject<
13132
- {
13133
- or: z.ZodArray<
13134
- z.ZodUnion<
13135
- readonly [
13136
- z.ZodObject<
13137
- {
13138
- claim: z.ZodString;
13139
- eq: z.ZodUnion<
13140
- readonly [
13141
- z.ZodString,
13142
- z.ZodNumber,
13143
- z.ZodBoolean,
13144
- ]
13145
- >;
13146
- },
13147
- z.core.$strict
13148
- >,
13149
- z.ZodObject<
13150
- {
13151
- claim: z.ZodString;
13152
- in: z.ZodArray<
13153
- z.ZodUnion<
13154
- readonly [
13155
- z.ZodString,
13156
- z.ZodNumber,
13157
- z.ZodBoolean,
13158
- ]
13159
- >
13160
- >;
13161
- },
13162
- z.core.$strict
13163
- >,
13164
- z.ZodObject<
13165
- {
13166
- claim: z.ZodString;
13167
- startsWith: z.ZodString;
13168
- },
13169
- z.core.$strict
13170
- >,
13171
- ]
13172
- >
13173
- >;
13174
- },
13175
- z.core.$strict
13176
- >,
13177
- z.ZodObject<
13178
- {
13179
- claim: z.ZodString;
13180
- eq: z.ZodUnion<
13181
- readonly [
13182
- z.ZodString,
13183
- z.ZodNumber,
13184
- z.ZodBoolean,
13185
- ]
13186
- >;
13187
- },
13188
- z.core.$strict
13189
- >,
13190
- z.ZodObject<
13191
- {
13192
- claim: z.ZodString;
13193
- in: z.ZodArray<
13194
- z.ZodUnion<
13195
- readonly [
13196
- z.ZodString,
13197
- z.ZodNumber,
13198
- z.ZodBoolean,
13199
- ]
13200
- >
13201
- >;
13202
- },
13203
- z.core.$strict
13204
- >,
13205
- z.ZodObject<
13206
- {
13207
- claim: z.ZodString;
13208
- startsWith: z.ZodString;
13209
- },
13210
- z.core.$strict
13211
- >,
13212
- ]
13213
- >
13214
- >;
13215
- },
13216
- z.core.$strict
13217
- >,
13218
- z.ZodObject<
13219
- {
13220
- or: z.ZodArray<
13221
- z.ZodUnion<
13222
- readonly [
13223
- z.ZodObject<
13224
- {
13225
- and: z.ZodArray<
13226
- z.ZodUnion<
13227
- readonly [
13228
- z.ZodObject<
13229
- {
13230
- claim: z.ZodString;
13231
- eq: z.ZodUnion<
13232
- readonly [
13233
- z.ZodString,
13234
- z.ZodNumber,
13235
- z.ZodBoolean,
13236
- ]
13237
- >;
13238
- },
13239
- z.core.$strict
13240
- >,
13241
- z.ZodObject<
13242
- {
13243
- claim: z.ZodString;
13244
- in: z.ZodArray<
13245
- z.ZodUnion<
13246
- readonly [
13247
- z.ZodString,
13248
- z.ZodNumber,
13249
- z.ZodBoolean,
13250
- ]
13251
- >
13252
- >;
13253
- },
13254
- z.core.$strict
13255
- >,
13256
- z.ZodObject<
13257
- {
13258
- claim: z.ZodString;
13259
- startsWith: z.ZodString;
13260
- },
13261
- z.core.$strict
13262
- >,
13263
- ]
13264
- >
13265
- >;
13266
- },
13267
- z.core.$strict
13268
- >,
13269
- z.ZodObject<
13270
- {
13271
- or: z.ZodArray<
13272
- z.ZodUnion<
13273
- readonly [
13274
- z.ZodObject<
13275
- {
13276
- claim: z.ZodString;
13277
- eq: z.ZodUnion<
13278
- readonly [
13279
- z.ZodString,
13280
- z.ZodNumber,
13281
- z.ZodBoolean,
13282
- ]
13283
- >;
13284
- },
13285
- z.core.$strict
13286
- >,
13287
- z.ZodObject<
13288
- {
13289
- claim: z.ZodString;
13290
- in: z.ZodArray<
13291
- z.ZodUnion<
13292
- readonly [
13293
- z.ZodString,
13294
- z.ZodNumber,
13295
- z.ZodBoolean,
13296
- ]
13297
- >
13298
- >;
13299
- },
13300
- z.core.$strict
13301
- >,
13302
- z.ZodObject<
13303
- {
13304
- claim: z.ZodString;
13305
- startsWith: z.ZodString;
13306
- },
13307
- z.core.$strict
13308
- >,
13309
- ]
13310
- >
13311
- >;
13312
- },
13313
- z.core.$strict
13314
- >,
13315
- z.ZodObject<
13316
- {
13317
- claim: z.ZodString;
13318
- eq: z.ZodUnion<
13319
- readonly [
13320
- z.ZodString,
13321
- z.ZodNumber,
13322
- z.ZodBoolean,
13323
- ]
13324
- >;
13325
- },
13326
- z.core.$strict
13327
- >,
13328
- z.ZodObject<
13329
- {
13330
- claim: z.ZodString;
13331
- in: z.ZodArray<
13332
- z.ZodUnion<
13333
- readonly [
13334
- z.ZodString,
13335
- z.ZodNumber,
13336
- z.ZodBoolean,
13337
- ]
13338
- >
13339
- >;
13340
- },
13341
- z.core.$strict
13342
- >,
13343
- z.ZodObject<
13344
- {
13345
- claim: z.ZodString;
13346
- startsWith: z.ZodString;
13347
- },
13348
- z.core.$strict
13349
- >,
13350
- ]
13351
- >
13352
- >;
13353
- },
13354
- z.core.$strict
13355
- >,
13356
- z.ZodObject<
13357
- {
13358
- claim: z.ZodString;
13359
- eq: z.ZodUnion<
13360
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13361
- >;
13362
- },
13363
- z.core.$strict
13364
- >,
13365
- z.ZodObject<
13366
- {
13367
- claim: z.ZodString;
13368
- in: z.ZodArray<
13369
- z.ZodUnion<
13370
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13371
- >
13372
- >;
13373
- },
13374
- z.core.$strict
13375
- >,
13376
- z.ZodObject<
13377
- {
13378
- claim: z.ZodString;
13379
- startsWith: z.ZodString;
13380
- },
13381
- z.core.$strict
13382
- >,
13383
- ]
13384
- >
13385
- >;
13386
- },
13387
- z.core.$strict
13388
- >,
13389
- z.ZodObject<
13390
- {
13391
- or: z.ZodArray<
13392
- z.ZodUnion<
13393
- readonly [
13394
- z.ZodObject<
13395
- {
13396
- and: z.ZodArray<
13397
- z.ZodUnion<
13398
- readonly [
13399
- z.ZodObject<
13400
- {
13401
- and: z.ZodArray<
13402
- z.ZodUnion<
13403
- readonly [
13404
- z.ZodObject<
13405
- {
13406
- claim: z.ZodString;
13407
- eq: z.ZodUnion<
13408
- readonly [
13409
- z.ZodString,
13410
- z.ZodNumber,
13411
- z.ZodBoolean,
13412
- ]
13413
- >;
13414
- },
13415
- z.core.$strict
13416
- >,
13417
- z.ZodObject<
13418
- {
13419
- claim: z.ZodString;
13420
- in: z.ZodArray<
13421
- z.ZodUnion<
13422
- readonly [
13423
- z.ZodString,
13424
- z.ZodNumber,
13425
- z.ZodBoolean,
13426
- ]
13427
- >
13428
- >;
13429
- },
13430
- z.core.$strict
13431
- >,
13432
- z.ZodObject<
13433
- {
13434
- claim: z.ZodString;
13435
- startsWith: z.ZodString;
13436
- },
13437
- z.core.$strict
13438
- >,
13439
- ]
13440
- >
13441
- >;
13442
- },
13443
- z.core.$strict
13444
- >,
13445
- z.ZodObject<
13446
- {
13447
- or: z.ZodArray<
13448
- z.ZodUnion<
13449
- readonly [
13450
- z.ZodObject<
13451
- {
13452
- claim: z.ZodString;
13453
- eq: z.ZodUnion<
13454
- readonly [
13455
- z.ZodString,
13456
- z.ZodNumber,
13457
- z.ZodBoolean,
13458
- ]
13459
- >;
13460
- },
13461
- z.core.$strict
13462
- >,
13463
- z.ZodObject<
13464
- {
13465
- claim: z.ZodString;
13466
- in: z.ZodArray<
13467
- z.ZodUnion<
13468
- readonly [
13469
- z.ZodString,
13470
- z.ZodNumber,
13471
- z.ZodBoolean,
13472
- ]
13473
- >
13474
- >;
13475
- },
13476
- z.core.$strict
13477
- >,
13478
- z.ZodObject<
13479
- {
13480
- claim: z.ZodString;
13481
- startsWith: z.ZodString;
13482
- },
13483
- z.core.$strict
13484
- >,
13485
- ]
13486
- >
13487
- >;
13488
- },
13489
- z.core.$strict
13490
- >,
13491
- z.ZodObject<
13492
- {
13493
- claim: z.ZodString;
13494
- eq: z.ZodUnion<
13495
- readonly [
13496
- z.ZodString,
13497
- z.ZodNumber,
13498
- z.ZodBoolean,
13499
- ]
13500
- >;
13501
- },
13502
- z.core.$strict
13503
- >,
13504
- z.ZodObject<
13505
- {
13506
- claim: z.ZodString;
13507
- in: z.ZodArray<
13508
- z.ZodUnion<
13509
- readonly [
13510
- z.ZodString,
13511
- z.ZodNumber,
13512
- z.ZodBoolean,
13513
- ]
13514
- >
13515
- >;
13516
- },
13517
- z.core.$strict
13518
- >,
13519
- z.ZodObject<
13520
- {
13521
- claim: z.ZodString;
13522
- startsWith: z.ZodString;
13523
- },
13524
- z.core.$strict
13525
- >,
13526
- ]
13527
- >
13528
- >;
13529
- },
13530
- z.core.$strict
13531
- >,
13532
- z.ZodObject<
13533
- {
13534
- or: z.ZodArray<
13535
- z.ZodUnion<
13536
- readonly [
13537
- z.ZodObject<
13538
- {
13539
- and: z.ZodArray<
13540
- z.ZodUnion<
13541
- readonly [
13542
- z.ZodObject<
13543
- {
13544
- claim: z.ZodString;
13545
- eq: z.ZodUnion<
13546
- readonly [
13547
- z.ZodString,
13548
- z.ZodNumber,
13549
- z.ZodBoolean,
13550
- ]
13551
- >;
13552
- },
13553
- z.core.$strict
13554
- >,
13555
- z.ZodObject<
13556
- {
13557
- claim: z.ZodString;
13558
- in: z.ZodArray<
13559
- z.ZodUnion<
13560
- readonly [
13561
- z.ZodString,
13562
- z.ZodNumber,
13563
- z.ZodBoolean,
13564
- ]
13565
- >
13566
- >;
13567
- },
13568
- z.core.$strict
13569
- >,
13570
- z.ZodObject<
13571
- {
13572
- claim: z.ZodString;
13573
- startsWith: z.ZodString;
13574
- },
13575
- z.core.$strict
13576
- >,
13577
- ]
13578
- >
13579
- >;
13580
- },
13581
- z.core.$strict
13582
- >,
13583
- z.ZodObject<
13584
- {
13585
- or: z.ZodArray<
13586
- z.ZodUnion<
13587
- readonly [
13588
- z.ZodObject<
13589
- {
13590
- claim: z.ZodString;
13591
- eq: z.ZodUnion<
13592
- readonly [
13593
- z.ZodString,
13594
- z.ZodNumber,
13595
- z.ZodBoolean,
13596
- ]
13597
- >;
13598
- },
13599
- z.core.$strict
13600
- >,
13601
- z.ZodObject<
13602
- {
13603
- claim: z.ZodString;
13604
- in: z.ZodArray<
13605
- z.ZodUnion<
13606
- readonly [
13607
- z.ZodString,
13608
- z.ZodNumber,
13609
- z.ZodBoolean,
13610
- ]
13611
- >
13612
- >;
13613
- },
13614
- z.core.$strict
13615
- >,
13616
- z.ZodObject<
13617
- {
13618
- claim: z.ZodString;
13619
- startsWith: z.ZodString;
13620
- },
13621
- z.core.$strict
13622
- >,
13623
- ]
13624
- >
13625
- >;
13626
- },
13627
- z.core.$strict
13628
- >,
13629
- z.ZodObject<
13630
- {
13631
- claim: z.ZodString;
13632
- eq: z.ZodUnion<
13633
- readonly [
13634
- z.ZodString,
13635
- z.ZodNumber,
13636
- z.ZodBoolean,
13637
- ]
13638
- >;
13639
- },
13640
- z.core.$strict
13641
- >,
13642
- z.ZodObject<
13643
- {
13644
- claim: z.ZodString;
13645
- in: z.ZodArray<
13646
- z.ZodUnion<
13647
- readonly [
13648
- z.ZodString,
13649
- z.ZodNumber,
13650
- z.ZodBoolean,
13651
- ]
13652
- >
13653
- >;
13654
- },
13655
- z.core.$strict
13656
- >,
13657
- z.ZodObject<
13658
- {
13659
- claim: z.ZodString;
13660
- startsWith: z.ZodString;
13661
- },
13662
- z.core.$strict
13663
- >,
13664
- ]
13665
- >
13666
- >;
13667
- },
13668
- z.core.$strict
13669
- >,
13670
- z.ZodObject<
13671
- {
13672
- claim: z.ZodString;
13673
- eq: z.ZodUnion<
13674
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13675
- >;
13676
- },
13677
- z.core.$strict
13678
- >,
13679
- z.ZodObject<
13680
- {
13681
- claim: z.ZodString;
13682
- in: z.ZodArray<
13683
- z.ZodUnion<
13684
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13685
- >
13686
- >;
13687
- },
13688
- z.core.$strict
13689
- >,
13690
- z.ZodObject<
13691
- {
13692
- claim: z.ZodString;
13693
- startsWith: z.ZodString;
13694
- },
13695
- z.core.$strict
13696
- >,
13697
- ]
13698
- >
13699
- >;
13700
- },
13701
- z.core.$strict
13702
- >,
13703
- z.ZodObject<
13704
- {
13705
- claim: z.ZodString;
13706
- eq: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>;
13707
- },
13708
- z.core.$strict
13709
- >,
13710
- z.ZodObject<
13711
- {
13712
- claim: z.ZodString;
13713
- in: z.ZodArray<
13714
- z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>
13715
- >;
13716
- },
13717
- z.core.$strict
13718
- >,
13719
- z.ZodObject<
13720
- {
13721
- claim: z.ZodString;
13722
- startsWith: z.ZodString;
13723
- },
13724
- z.core.$strict
13725
- >,
13726
- ]
13727
- >;
13728
- },
13729
- z.core.$strict
13730
- >;
13731
-
13732
12517
  declare type ResolveRequestParams<
13733
12518
  TParams extends RequestParamsDefault | undefined,
13734
12519
  > = TParams extends RequestParamsDefault ? TParams : RequestParamsDefault;
@@ -15686,52 +14471,6 @@ declare interface Usage {
15686
14471
 
15687
14472
  declare type UserDataDefault = any;
15688
14473
 
15689
- declare type ValidatedAuth0OAuthOptions = z.infer<
15690
- typeof mcpAuth0OAuthOptionsSchema
15691
- >;
15692
-
15693
- declare type ValidatedClerkOAuthOptions = z.infer<
15694
- typeof mcpClerkOAuthOptionsSchema
15695
- >;
15696
-
15697
- declare type ValidatedCognitoOAuthOptions = z.infer<
15698
- typeof mcpCognitoOAuthOptionsSchema
15699
- >;
15700
-
15701
- declare type ValidatedEntraOAuthOptions = z.infer<
15702
- typeof mcpEntraOAuthOptionsSchema
15703
- >;
15704
-
15705
- declare type ValidatedGoogleOAuthOptions = z.infer<
15706
- typeof mcpGoogleOAuthOptionsSchema
15707
- >;
15708
-
15709
- declare type ValidatedKeycloakOAuthOptions = z.infer<
15710
- typeof mcpKeycloakOAuthOptionsSchema
15711
- >;
15712
-
15713
- declare type ValidatedLogtoOAuthOptions = z.infer<
15714
- typeof mcpLogtoOAuthOptionsSchema
15715
- >;
15716
-
15717
- declare type ValidatedOktaOAuthOptions = z.infer<
15718
- typeof mcpOktaOAuthOptionsSchema
15719
- >;
15720
-
15721
- declare type ValidatedOneLoginOAuthOptions = z.infer<
15722
- typeof mcpOneLoginOAuthOptionsSchema
15723
- >;
15724
-
15725
- declare type ValidatedOptions = z.infer<typeof requireUserClaimsOptionsSchema>;
15726
-
15727
- declare type ValidatedPingOAuthOptions = z.infer<
15728
- typeof mcpPingOAuthOptionsSchema
15729
- >;
15730
-
15731
- declare type ValidatedWorkosOAuthOptions = z.infer<
15732
- typeof mcpWorkosOAuthOptionsSchema
15733
- >;
15734
-
15735
14474
  /**
15736
14475
  * Validates the body of an incoming request based on a JSON schema.
15737
14476
  *