@zuplo/runtime 6.73.29 → 6.73.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/out/esm/chunk-TOMTVLZA.js +405 -0
  2. package/out/esm/chunk-TOMTVLZA.js.map +1 -0
  3. package/out/esm/index.js +1 -1
  4. package/out/esm/index.js.map +1 -1
  5. package/out/esm/mcp-gateway/index.js +2 -2
  6. package/out/esm/mcp-gateway/index.js.map +1 -1
  7. package/out/types/index.d.ts +90 -1333
  8. package/out/types/mcp-gateway/index.d.ts +205 -1055
  9. package/package.json +1 -1
  10. package/out/esm/chunk-KO2ULO4I.js +0 -405
  11. package/out/esm/chunk-KO2ULO4I.js.map +0 -1
  12. /package/out/esm/{chunk-KO2ULO4I.js.LEGAL.txt → chunk-TOMTVLZA.js.LEGAL.txt} +0 -0
package/out/types/index.d.ts CHANGED
@@ -5,7 +5,6 @@ import { InboundPolicyHandler as InboundPolicyHandler_2 } from "../../policies.j
5
5
  import { KeyLike } from "jose";
6
6
  import { RequestGeneric as RequestGeneric_2 } from "../../request.js";
7
7
  import type { ValidateFunction } from "ajv";
8
- import { z } from "zod/v4";
9
8
 
10
9
  /**
11
10
  * The request/response **schema dialect** a policy is dealing with — named after
@@ -357,10 +356,10 @@ export declare function aiGatewayHandler(
357
356
  ): Promise<Response>;
358
357
 
359
358
  /**
360
- * Routes AI requests using the model selection stored in the request context.
361
- * Attach the `ai-gateway-model-filtering-v2-inbound` policy before this handler
362
- * runs, or call `AIGatewayModelRouting.set(context, routing)` from a custom
363
- * inbound policy.
359
+ * Routes AI requests using a model selection stored in request context by a
360
+ * filtering or custom-routing policy. When no policy selected routing, the
361
+ * handler uses the request's `providerName/model` as the route target. Requests
362
+ * without preselected routing must include a qualified model.
364
363
  *
365
364
  * @beta
366
365
  * @param request - The incoming AI Gateway request.
@@ -374,9 +373,6 @@ export declare function aiGatewayHandler(
374
373
  * "handler": {
375
374
  * "export": "aiGatewayHandlerV2",
376
375
  * "module": "$import(@zuplo/runtime)"
377
- * },
378
- * "policies": {
379
- * "inbound": ["ai-gateway-model-filtering-v2-inbound"]
380
376
  * }
381
377
  * }
382
378
  * ```
@@ -697,8 +693,10 @@ export declare interface AIGatewayModelInfo {
697
693
  *
698
694
  * The built-in model-routing policy matches the request against its allowList
699
695
  * of {@link AIGatewayRouteTarget} items, then `set()`s the winning target.
700
- * Custom policies can call `set()` directly instead. Provider API keys are
701
- * resolved internally and are never returned by `get()`.
696
+ * Custom policies can call `set()` directly instead. If neither kind of policy
697
+ * selects routing, `aiGatewayHandlerV2` calls `set()` with the request's
698
+ * `providerName/model`. Provider API keys are resolved internally and are never
699
+ * returned by `get()`.
702
700
  *
703
701
  * @public
704
702
  * @example
@@ -2672,6 +2670,8 @@ export declare interface AzureEventHubsRequestLoggerPluginOptions<T> {
2672
2670
  batchPeriodSeconds: number;
2673
2671
  }
2674
2672
 
2673
+ /* Excluded from this release type: BackgroundDispatchDebugLog */
2674
+
2675
2675
  /**
2676
2676
  * Utility for batching and dispatching events in the background.
2677
2677
  * Useful for aggregating logs, metrics, or other data before sending to external services.
@@ -2731,6 +2731,22 @@ export declare class BackgroundDispatcher<TPayload> {
2731
2731
  enqueue: (payload: TPayload) => void;
2732
2732
  }
2733
2733
 
2734
+ /**
2735
+ * A background dispatch failure with an optional diagnostic that is
2736
+ * safe to write at debug level.
2737
+ *
2738
+ * @public
2739
+ */
2740
+ export declare class BackgroundDispatchError extends Error {
2741
+ readonly debugLog: BackgroundDispatchDebugLog | undefined;
2742
+ constructor(
2743
+ message: string,
2744
+ options?: ErrorOptions & {
2745
+ debugLog?: BackgroundDispatchDebugLog;
2746
+ }
2747
+ );
2748
+ }
2749
+
2734
2750
  /**
2735
2751
  * A utility for loading and caching data in the background with automatic refresh
2736
2752
  * @public
@@ -6855,6 +6871,27 @@ export declare interface HydrolixRequestLoggerPluginOptions<T> {
6855
6871
  batchPeriodSeconds?: number;
6856
6872
  }
6857
6873
 
6874
+ /**
6875
+ * Hand-written mirror of {@link idJagConfigSchema}'s parsed output. Keeping
6876
+ * the type hand-written keeps zod out of the public policy class signatures
6877
+ * (this type is part of {@link McpOAuthRuntimeConfig}); the assertion below
6878
+ * fails to compile on drift.
6879
+ */
6880
+ declare type IdJagRuntimeConfig =
6881
+ | {
6882
+ enabled: false;
6883
+ }
6884
+ | {
6885
+ enabled: true;
6886
+ trustedIssuers: {
6887
+ issuer: string;
6888
+ jwksUrl: string;
6889
+ expectedClientIds?: string[];
6890
+ subjectMapping: "iss_prefix" | "iss_tenant_prefix" | "sub_id_only";
6891
+ }[];
6892
+ authorizationDetailsTypesAllowed?: string[];
6893
+ };
6894
+
6858
6895
  /**
6859
6896
  * Image generation tool
6860
6897
  */
@@ -7724,7 +7761,7 @@ declare type MaxConversationLength = number;
7724
7761
  * @title MCP Auth0 OAuth
7725
7762
  * @product mcp-gateway
7726
7763
  */
7727
- export declare class McpAuth0OAuthInboundPolicy extends InboundPolicy<ValidatedAuth0OAuthOptions> {
7764
+ export declare class McpAuth0OAuthInboundPolicy extends InboundPolicy<McpAuth0OAuthInboundPolicyOptions> {
7728
7765
  #private;
7729
7766
  static readonly policyType = "mcp-auth0-oauth";
7730
7767
  constructor(rawOptions: unknown, policyName: string);
@@ -7853,44 +7890,6 @@ export declare interface McpAuth0OAuthInboundPolicyOptions {
7853
7890
  };
7854
7891
  }
7855
7892
 
7856
- declare const mcpAuth0OAuthOptionsSchema: z.ZodObject<
7857
- {
7858
- auth0Domain: z.ZodString;
7859
- audience: z.ZodOptional<z.ZodString>;
7860
- clientId: z.ZodString;
7861
- clientSecret: z.ZodString;
7862
- scope: z.ZodOptional<z.ZodString>;
7863
- gateway: z.ZodOptional<
7864
- z.ZodObject<
7865
- {
7866
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
7867
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
7868
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
7869
- },
7870
- z.core.$strict
7871
- >
7872
- >;
7873
- idJag: z.ZodOptional<z.ZodUnknown>;
7874
- browserLoginOverrides: z.ZodOptional<
7875
- z.ZodObject<
7876
- {
7877
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
7878
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
7879
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
7880
- pkce: z.ZodOptional<
7881
- z.ZodEnum<{
7882
- none: "none";
7883
- S256: "S256";
7884
- }>
7885
- >;
7886
- },
7887
- z.core.$strict
7888
- >
7889
- >;
7890
- },
7891
- z.core.$strict
7892
- >;
7893
-
7894
7893
  /**
7895
7894
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
7896
7895
  * with browser login delegated to Clerk.
@@ -7903,7 +7902,7 @@ declare const mcpAuth0OAuthOptionsSchema: z.ZodObject<
7903
7902
  * @public
7904
7903
  * @product mcp-gateway
7905
7904
  */
7906
- export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<ValidatedClerkOAuthOptions> {
7905
+ export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<McpClerkOAuthInboundPolicyOptions> {
7907
7906
  #private;
7908
7907
  static readonly policyType = "mcp-clerk-oauth";
7909
7908
  constructor(rawOptions: unknown, policyName: string);
@@ -8024,37 +8023,6 @@ export declare interface McpClerkOAuthInboundPolicyOptions {
8024
8023
  };
8025
8024
  }
8026
8025
 
8027
- declare const mcpClerkOAuthOptionsSchema: z.ZodObject<
8028
- {
8029
- frontendApiUrl: z.ZodString;
8030
- clientId: z.ZodString;
8031
- clientSecret: z.ZodString;
8032
- scope: z.ZodOptional<z.ZodString>;
8033
- gateway: z.ZodOptional<
8034
- z.ZodObject<
8035
- {
8036
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8037
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8038
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8039
- },
8040
- z.core.$strict
8041
- >
8042
- >;
8043
- idJag: z.ZodOptional<z.ZodUnknown>;
8044
- browserLoginOverrides: z.ZodOptional<
8045
- z.ZodObject<
8046
- {
8047
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8048
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8049
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8050
- },
8051
- z.core.$strict
8052
- >
8053
- >;
8054
- },
8055
- z.core.$strict
8056
- >;
8057
-
8058
8026
  /**
8059
8027
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8060
8028
  * with browser login delegated to Amazon Cognito.
@@ -8068,7 +8036,7 @@ declare const mcpClerkOAuthOptionsSchema: z.ZodObject<
8068
8036
  * @public
8069
8037
  * @product mcp-gateway
8070
8038
  */
8071
- export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<ValidatedCognitoOAuthOptions> {
8039
+ export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<McpCognitoOAuthInboundPolicyOptions> {
8072
8040
  #private;
8073
8041
  static readonly policyType = "mcp-cognito-oauth";
8074
8042
  constructor(rawOptions: unknown, policyName: string);
@@ -8201,45 +8169,6 @@ export declare interface McpCognitoOAuthInboundPolicyOptions {
8201
8169
  };
8202
8170
  }
8203
8171
 
8204
- declare const mcpCognitoOAuthOptionsSchema: z.ZodObject<
8205
- {
8206
- awsRegion: z.ZodString;
8207
- userPoolId: z.ZodString;
8208
- userPoolDomain: z.ZodString;
8209
- clientId: z.ZodString;
8210
- clientSecret: z.ZodString;
8211
- scope: z.ZodOptional<z.ZodString>;
8212
- gateway: z.ZodOptional<
8213
- z.ZodObject<
8214
- {
8215
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8216
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8217
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8218
- },
8219
- z.core.$strict
8220
- >
8221
- >;
8222
- idJag: z.ZodOptional<z.ZodUnknown>;
8223
- browserLoginOverrides: z.ZodOptional<
8224
- z.ZodObject<
8225
- {
8226
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8227
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8228
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8229
- pkce: z.ZodOptional<
8230
- z.ZodEnum<{
8231
- none: "none";
8232
- S256: "S256";
8233
- }>
8234
- >;
8235
- },
8236
- z.core.$strict
8237
- >
8238
- >;
8239
- },
8240
- z.core.$strict
8241
- >;
8242
-
8243
8172
  /**
8244
8173
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8245
8174
  * with browser login delegated to Microsoft Entra ID.
@@ -8252,7 +8181,7 @@ declare const mcpCognitoOAuthOptionsSchema: z.ZodObject<
8252
8181
  * @public
8253
8182
  * @product mcp-gateway
8254
8183
  */
8255
- export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<ValidatedEntraOAuthOptions> {
8184
+ export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<McpEntraOAuthInboundPolicyOptions> {
8256
8185
  #private;
8257
8186
  static readonly policyType = "mcp-entra-oauth";
8258
8187
  constructor(rawOptions: unknown, policyName: string);
@@ -8377,43 +8306,6 @@ export declare interface McpEntraOAuthInboundPolicyOptions {
8377
8306
  };
8378
8307
  }
8379
8308
 
8380
- declare const mcpEntraOAuthOptionsSchema: z.ZodObject<
8381
- {
8382
- tenantId: z.ZodString;
8383
- clientId: z.ZodString;
8384
- clientSecret: z.ZodString;
8385
- scope: z.ZodOptional<z.ZodString>;
8386
- gateway: z.ZodOptional<
8387
- z.ZodObject<
8388
- {
8389
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8390
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8391
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8392
- },
8393
- z.core.$strict
8394
- >
8395
- >;
8396
- idJag: z.ZodOptional<z.ZodUnknown>;
8397
- browserLoginOverrides: z.ZodOptional<
8398
- z.ZodObject<
8399
- {
8400
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8401
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8402
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8403
- pkce: z.ZodOptional<
8404
- z.ZodEnum<{
8405
- none: "none";
8406
- S256: "S256";
8407
- }>
8408
- >;
8409
- },
8410
- z.core.$strict
8411
- >
8412
- >;
8413
- },
8414
- z.core.$strict
8415
- >;
8416
-
8417
8309
  /* Excluded from this release type: McpGatewayOAuthProtectedResourcePlugin */
8418
8310
 
8419
8311
  /**
@@ -8429,7 +8321,7 @@ declare const mcpEntraOAuthOptionsSchema: z.ZodObject<
8429
8321
  * @public
8430
8322
  * @product mcp-gateway
8431
8323
  */
8432
- export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<ValidatedGoogleOAuthOptions> {
8324
+ export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<McpGoogleOAuthInboundPolicyOptions> {
8433
8325
  #private;
8434
8326
  static readonly policyType = "mcp-google-oauth";
8435
8327
  constructor(rawOptions: unknown, policyName: string);
@@ -8550,42 +8442,6 @@ export declare interface McpGoogleOAuthInboundPolicyOptions {
8550
8442
  };
8551
8443
  }
8552
8444
 
8553
- declare const mcpGoogleOAuthOptionsSchema: z.ZodObject<
8554
- {
8555
- clientId: z.ZodString;
8556
- clientSecret: z.ZodString;
8557
- scope: z.ZodOptional<z.ZodString>;
8558
- gateway: z.ZodOptional<
8559
- z.ZodObject<
8560
- {
8561
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8562
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8563
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8564
- },
8565
- z.core.$strict
8566
- >
8567
- >;
8568
- idJag: z.ZodOptional<z.ZodUnknown>;
8569
- browserLoginOverrides: z.ZodOptional<
8570
- z.ZodObject<
8571
- {
8572
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8573
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8574
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8575
- pkce: z.ZodOptional<
8576
- z.ZodEnum<{
8577
- none: "none";
8578
- S256: "S256";
8579
- }>
8580
- >;
8581
- },
8582
- z.core.$strict
8583
- >
8584
- >;
8585
- },
8586
- z.core.$strict
8587
- >;
8588
-
8589
8445
  /**
8590
8446
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8591
8447
  * with browser login delegated to Keycloak.
@@ -8599,7 +8455,7 @@ declare const mcpGoogleOAuthOptionsSchema: z.ZodObject<
8599
8455
  * @public
8600
8456
  * @product mcp-gateway
8601
8457
  */
8602
- export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<ValidatedKeycloakOAuthOptions> {
8458
+ export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<McpKeycloakOAuthInboundPolicyOptions> {
8603
8459
  #private;
8604
8460
  static readonly policyType = "mcp-keycloak-oauth";
8605
8461
  constructor(rawOptions: unknown, policyName: string);
@@ -8728,44 +8584,6 @@ export declare interface McpKeycloakOAuthInboundPolicyOptions {
8728
8584
  };
8729
8585
  }
8730
8586
 
8731
- declare const mcpKeycloakOAuthOptionsSchema: z.ZodObject<
8732
- {
8733
- keycloakBaseUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
8734
- realm: z.ZodString;
8735
- clientId: z.ZodString;
8736
- clientSecret: z.ZodString;
8737
- scope: z.ZodOptional<z.ZodString>;
8738
- gateway: z.ZodOptional<
8739
- z.ZodObject<
8740
- {
8741
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8742
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8743
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8744
- },
8745
- z.core.$strict
8746
- >
8747
- >;
8748
- idJag: z.ZodOptional<z.ZodUnknown>;
8749
- browserLoginOverrides: z.ZodOptional<
8750
- z.ZodObject<
8751
- {
8752
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8753
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8754
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8755
- pkce: z.ZodOptional<
8756
- z.ZodEnum<{
8757
- none: "none";
8758
- S256: "S256";
8759
- }>
8760
- >;
8761
- },
8762
- z.core.$strict
8763
- >
8764
- >;
8765
- },
8766
- z.core.$strict
8767
- >;
8768
-
8769
8587
  /**
8770
8588
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
8771
8589
  * with browser login delegated to Logto.
@@ -8778,7 +8596,7 @@ declare const mcpKeycloakOAuthOptionsSchema: z.ZodObject<
8778
8596
  * @public
8779
8597
  * @product mcp-gateway
8780
8598
  */
8781
- export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<ValidatedLogtoOAuthOptions> {
8599
+ export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<McpLogtoOAuthInboundPolicyOptions> {
8782
8600
  #private;
8783
8601
  static readonly policyType = "mcp-logto-oauth";
8784
8602
  constructor(rawOptions: unknown, policyName: string);
@@ -8903,43 +8721,6 @@ export declare interface McpLogtoOAuthInboundPolicyOptions {
8903
8721
  };
8904
8722
  }
8905
8723
 
8906
- declare const mcpLogtoOAuthOptionsSchema: z.ZodObject<
8907
- {
8908
- logtoEndpoint: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
8909
- clientId: z.ZodString;
8910
- clientSecret: z.ZodString;
8911
- scope: z.ZodOptional<z.ZodString>;
8912
- gateway: z.ZodOptional<
8913
- z.ZodObject<
8914
- {
8915
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8916
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
8917
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
8918
- },
8919
- z.core.$strict
8920
- >
8921
- >;
8922
- idJag: z.ZodOptional<z.ZodUnknown>;
8923
- browserLoginOverrides: z.ZodOptional<
8924
- z.ZodObject<
8925
- {
8926
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
8927
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
8928
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
8929
- pkce: z.ZodOptional<
8930
- z.ZodEnum<{
8931
- none: "none";
8932
- S256: "S256";
8933
- }>
8934
- >;
8935
- },
8936
- z.core.$strict
8937
- >
8938
- >;
8939
- },
8940
- z.core.$strict
8941
- >;
8942
-
8943
8724
  /**
8944
8725
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token.
8945
8726
  *
@@ -9116,201 +8897,37 @@ export declare interface McpOAuthInboundPolicyOptions {
9116
8897
  };
9117
8898
  }
9118
8899
 
9119
- declare type McpOAuthRuntimeConfig = z.infer<
9120
- typeof mcpOAuthRuntimeConfigSchema
9121
- >;
9122
-
9123
- declare const mcpOAuthRuntimeConfigSchema: z.ZodPipe<
9124
- z.ZodObject<
9125
- {
9126
- oidc: z.ZodObject<
9127
- {
9128
- issuer: z.ZodURL;
9129
- jwksUrl: z.ZodURL;
9130
- audience: z.ZodOptional<z.ZodString>;
9131
- },
9132
- z.core.$strip
9133
- >;
9134
- browserLogin: z.ZodObject<
9135
- {
9136
- url: z.ZodURL;
9137
- tokenUrl: z.ZodOptional<z.ZodURL>;
9138
- clientId: z.ZodOptional<z.ZodString>;
9139
- clientSecret: z.ZodOptional<z.ZodString>;
9140
- scope: z.ZodDefault<z.ZodString>;
9141
- audience: z.ZodOptional<z.ZodString>;
9142
- pkce: z.ZodDefault<
9143
- z.ZodEnum<{
9144
- none: "none";
9145
- S256: "S256";
9146
- }>
9147
- >;
9148
- remoteTimeoutMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9149
- stateTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9150
- sessionTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9151
- },
9152
- z.core.$strict
9153
- >;
9154
- gateway: z.ZodPipe<
9155
- z.ZodDefault<
9156
- z.ZodObject<
9157
- {
9158
- accessTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9159
- refreshTokenTtlSeconds: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
9160
- cimdEnabled: z.ZodDefault<z.ZodBoolean>;
9161
- },
9162
- z.core.$strict
9163
- >
9164
- >,
9165
- z.ZodTransform<
9166
- {
9167
- accessTokenTtlSeconds: number;
9168
- refreshTokenTtlSeconds: number;
9169
- downstreamCimdEnabled: boolean;
9170
- },
9171
- {
9172
- accessTokenTtlSeconds: number;
9173
- refreshTokenTtlSeconds: number;
9174
- cimdEnabled: boolean;
9175
- }
9176
- >
9177
- >;
9178
- idJag: z.ZodDefault<
9179
- z.ZodOptional<
9180
- z.ZodDefault<
9181
- z.ZodDiscriminatedUnion<
9182
- [
9183
- z.ZodObject<
9184
- {
9185
- enabled: z.ZodLiteral<false>;
9186
- },
9187
- z.core.$strict
9188
- >,
9189
- z.ZodObject<
9190
- {
9191
- enabled: z.ZodLiteral<true>;
9192
- trustedIssuers: z.ZodOptional<
9193
- z.ZodArray<
9194
- z.ZodObject<
9195
- {
9196
- issuer: z.ZodOptional<z.ZodURL>;
9197
- jwksUrl: z.ZodOptional<z.ZodURL>;
9198
- expectedClientIds: z.ZodOptional<
9199
- z.ZodArray<z.ZodString>
9200
- >;
9201
- subjectMapping: z.ZodDefault<
9202
- z.ZodEnum<{
9203
- iss_prefix: "iss_prefix";
9204
- iss_tenant_prefix: "iss_tenant_prefix";
9205
- sub_id_only: "sub_id_only";
9206
- }>
9207
- >;
9208
- },
9209
- z.core.$strict
9210
- >
9211
- >
9212
- >;
9213
- authorizationDetailsTypesAllowed: z.ZodOptional<
9214
- z.ZodArray<z.ZodString>
9215
- >;
9216
- },
9217
- z.core.$strict
9218
- >,
9219
- ]
9220
- >
9221
- >
9222
- >
9223
- >;
9224
- },
9225
- z.core.$strict
9226
- >,
9227
- z.ZodTransform<
9228
- {
9229
- idJag:
9230
- | {
9231
- enabled: false;
9232
- }
9233
- | {
9234
- enabled: true;
9235
- trustedIssuers: {
9236
- issuer: string;
9237
- jwksUrl: string;
9238
- subjectMapping:
9239
- | "iss_prefix"
9240
- | "iss_tenant_prefix"
9241
- | "sub_id_only";
9242
- expectedClientIds?: string[] | undefined;
9243
- }[];
9244
- authorizationDetailsTypesAllowed?: string[] | undefined;
9245
- };
9246
- oidc: {
9247
- issuer: string;
9248
- jwksUrl: string;
9249
- audience?: string | undefined;
9250
- };
9251
- browserLogin: {
9252
- url: string;
9253
- scope: string;
9254
- pkce: "none" | "S256";
9255
- remoteTimeoutMs: number;
9256
- stateTtlSeconds: number;
9257
- sessionTtlSeconds: number;
9258
- tokenUrl?: string | undefined;
9259
- clientId?: string | undefined;
9260
- clientSecret?: string | undefined;
9261
- audience?: string | undefined;
9262
- };
9263
- gateway: {
9264
- accessTokenTtlSeconds: number;
9265
- refreshTokenTtlSeconds: number;
9266
- downstreamCimdEnabled: boolean;
9267
- };
9268
- },
9269
- {
9270
- oidc: {
9271
- issuer: string;
9272
- jwksUrl: string;
9273
- audience?: string | undefined;
9274
- };
9275
- browserLogin: {
9276
- url: string;
9277
- scope: string;
9278
- pkce: "none" | "S256";
9279
- remoteTimeoutMs: number;
9280
- stateTtlSeconds: number;
9281
- sessionTtlSeconds: number;
9282
- tokenUrl?: string | undefined;
9283
- clientId?: string | undefined;
9284
- clientSecret?: string | undefined;
9285
- audience?: string | undefined;
9286
- };
9287
- gateway: {
9288
- accessTokenTtlSeconds: number;
9289
- refreshTokenTtlSeconds: number;
9290
- downstreamCimdEnabled: boolean;
9291
- };
9292
- idJag:
9293
- | {
9294
- enabled: false;
9295
- }
9296
- | {
9297
- enabled: true;
9298
- trustedIssuers?:
9299
- | {
9300
- subjectMapping:
9301
- | "iss_prefix"
9302
- | "iss_tenant_prefix"
9303
- | "sub_id_only";
9304
- issuer?: string | undefined;
9305
- jwksUrl?: string | undefined;
9306
- expectedClientIds?: string[] | undefined;
9307
- }[]
9308
- | undefined;
9309
- authorizationDetailsTypesAllowed?: string[] | undefined;
9310
- };
9311
- }
9312
- >
9313
- >;
8900
+ /**
8901
+ * The gateway's resolved OAuth runtime configuration — the parsed, defaulted
8902
+ * output of {@link mcpOAuthRuntimeConfigSchema}. Hand-written so the public
8903
+ * MCP OAuth policy class signatures contain no zod types; the assertion below
8904
+ * fails to compile if this interface drifts from the schema.
8905
+ */
8906
+ declare interface McpOAuthRuntimeConfig {
8907
+ oidc: {
8908
+ issuer: string;
8909
+ jwksUrl: string;
8910
+ audience?: string;
8911
+ };
8912
+ browserLogin: {
8913
+ url: string;
8914
+ tokenUrl?: string;
8915
+ clientId?: string;
8916
+ clientSecret?: string;
8917
+ scope: string;
8918
+ audience?: string;
8919
+ pkce: "S256" | "none";
8920
+ remoteTimeoutMs: number;
8921
+ stateTtlSeconds: number;
8922
+ sessionTtlSeconds: number;
8923
+ };
8924
+ gateway: {
8925
+ accessTokenTtlSeconds: number;
8926
+ refreshTokenTtlSeconds: number;
8927
+ downstreamCimdEnabled: boolean;
8928
+ };
8929
+ idJag: IdJagRuntimeConfig;
8930
+ }
9314
8931
 
9315
8932
  /**
9316
8933
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
@@ -9324,7 +8941,7 @@ declare const mcpOAuthRuntimeConfigSchema: z.ZodPipe<
9324
8941
  * @public
9325
8942
  * @product mcp-gateway
9326
8943
  */
9327
- export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<ValidatedOktaOAuthOptions> {
8944
+ export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<McpOktaOAuthInboundPolicyOptions> {
9328
8945
  #private;
9329
8946
  static readonly policyType = "mcp-okta-oauth";
9330
8947
  constructor(rawOptions: unknown, policyName: string);
@@ -9453,44 +9070,6 @@ export declare interface McpOktaOAuthInboundPolicyOptions {
9453
9070
  };
9454
9071
  }
9455
9072
 
9456
- declare const mcpOktaOAuthOptionsSchema: z.ZodObject<
9457
- {
9458
- oktaDomain: z.ZodString;
9459
- authorizationServerId: z.ZodOptional<z.ZodString>;
9460
- clientId: z.ZodString;
9461
- clientSecret: z.ZodString;
9462
- scope: z.ZodOptional<z.ZodString>;
9463
- gateway: z.ZodOptional<
9464
- z.ZodObject<
9465
- {
9466
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9467
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9468
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
9469
- },
9470
- z.core.$strict
9471
- >
9472
- >;
9473
- idJag: z.ZodOptional<z.ZodUnknown>;
9474
- browserLoginOverrides: z.ZodOptional<
9475
- z.ZodObject<
9476
- {
9477
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
9478
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
9479
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
9480
- pkce: z.ZodOptional<
9481
- z.ZodEnum<{
9482
- none: "none";
9483
- S256: "S256";
9484
- }>
9485
- >;
9486
- },
9487
- z.core.$strict
9488
- >
9489
- >;
9490
- },
9491
- z.core.$strict
9492
- >;
9493
-
9494
9073
  /**
9495
9074
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
9496
9075
  * with browser login delegated to OneLogin.
@@ -9503,7 +9082,7 @@ declare const mcpOktaOAuthOptionsSchema: z.ZodObject<
9503
9082
  * @public
9504
9083
  * @product mcp-gateway
9505
9084
  */
9506
- export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<ValidatedOneLoginOAuthOptions> {
9085
+ export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<McpOneLoginOAuthInboundPolicyOptions> {
9507
9086
  #private;
9508
9087
  static readonly policyType = "mcp-onelogin-oauth";
9509
9088
  constructor(rawOptions: unknown, policyName: string);
@@ -9624,37 +9203,6 @@ export declare interface McpOneLoginOAuthInboundPolicyOptions {
9624
9203
  };
9625
9204
  }
9626
9205
 
9627
- declare const mcpOneLoginOAuthOptionsSchema: z.ZodObject<
9628
- {
9629
- oneLoginSubdomain: z.ZodString;
9630
- clientId: z.ZodString;
9631
- clientSecret: z.ZodString;
9632
- scope: z.ZodOptional<z.ZodString>;
9633
- gateway: z.ZodOptional<
9634
- z.ZodObject<
9635
- {
9636
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9637
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9638
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
9639
- },
9640
- z.core.$strict
9641
- >
9642
- >;
9643
- idJag: z.ZodOptional<z.ZodUnknown>;
9644
- browserLoginOverrides: z.ZodOptional<
9645
- z.ZodObject<
9646
- {
9647
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
9648
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
9649
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
9650
- },
9651
- z.core.$strict
9652
- >
9653
- >;
9654
- },
9655
- z.core.$strict
9656
- >;
9657
-
9658
9206
  /**
9659
9207
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
9660
9208
  * with browser login delegated to PingOne.
@@ -9668,7 +9216,7 @@ declare const mcpOneLoginOAuthOptionsSchema: z.ZodObject<
9668
9216
  * @public
9669
9217
  * @product mcp-gateway
9670
9218
  */
9671
- export declare class McpPingOAuthInboundPolicy extends InboundPolicy<ValidatedPingOAuthOptions> {
9219
+ export declare class McpPingOAuthInboundPolicy extends InboundPolicy<McpPingOAuthInboundPolicyOptions> {
9672
9220
  #private;
9673
9221
  static readonly policyType = "mcp-ping-oauth";
9674
9222
  constructor(rawOptions: unknown, policyName: string);
@@ -9807,54 +9355,6 @@ export declare interface McpPingOAuthInboundPolicyOptions {
9807
9355
  };
9808
9356
  }
9809
9357
 
9810
- declare const mcpPingOAuthOptionsSchema: z.ZodObject<
9811
- {
9812
- environmentId: z.ZodOptional<z.ZodString>;
9813
- region: z.ZodOptional<
9814
- z.ZodEnum<{
9815
- "north-america": "north-america";
9816
- canada: "canada";
9817
- europe: "europe";
9818
- singapore: "singapore";
9819
- australia: "australia";
9820
- "asia-pacific": "asia-pacific";
9821
- }>
9822
- >;
9823
- customDomain: z.ZodOptional<z.ZodString>;
9824
- clientId: z.ZodString;
9825
- clientSecret: z.ZodString;
9826
- scope: z.ZodOptional<z.ZodString>;
9827
- gateway: z.ZodOptional<
9828
- z.ZodObject<
9829
- {
9830
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9831
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
9832
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
9833
- },
9834
- z.core.$strict
9835
- >
9836
- >;
9837
- idJag: z.ZodOptional<z.ZodUnknown>;
9838
- browserLoginOverrides: z.ZodOptional<
9839
- z.ZodObject<
9840
- {
9841
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
9842
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
9843
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
9844
- pkce: z.ZodOptional<
9845
- z.ZodEnum<{
9846
- none: "none";
9847
- S256: "S256";
9848
- }>
9849
- >;
9850
- },
9851
- z.core.$strict
9852
- >
9853
- >;
9854
- },
9855
- z.core.$strict
9856
- >;
9857
-
9858
9358
  /**
9859
9359
  * An MCP Server handler for Zuplo
9860
9360
  * Only POST requests are supported for the HTTP streamable MCP transport.
@@ -9905,7 +9405,7 @@ declare interface McpTool {
9905
9405
  * @public
9906
9406
  * @product mcp-gateway
9907
9407
  */
9908
- export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<ValidatedWorkosOAuthOptions> {
9408
+ export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<McpWorkosOAuthInboundPolicyOptions> {
9909
9409
  #private;
9910
9410
  static readonly policyType = "mcp-workos-oauth";
9911
9411
  constructor(rawOptions: unknown, policyName: string);
@@ -10026,42 +9526,6 @@ export declare interface McpWorkosOAuthInboundPolicyOptions {
10026
9526
  };
10027
9527
  }
10028
9528
 
10029
- declare const mcpWorkosOAuthOptionsSchema: z.ZodObject<
10030
- {
10031
- clientId: z.ZodString;
10032
- clientSecret: z.ZodString;
10033
- scope: z.ZodOptional<z.ZodString>;
10034
- gateway: z.ZodOptional<
10035
- z.ZodObject<
10036
- {
10037
- accessTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
10038
- refreshTokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
10039
- cimdEnabled: z.ZodOptional<z.ZodBoolean>;
10040
- },
10041
- z.core.$strict
10042
- >
10043
- >;
10044
- idJag: z.ZodOptional<z.ZodUnknown>;
10045
- browserLoginOverrides: z.ZodOptional<
10046
- z.ZodObject<
10047
- {
10048
- remoteTimeoutMs: z.ZodOptional<z.ZodNumber>;
10049
- stateTtlSeconds: z.ZodOptional<z.ZodNumber>;
10050
- sessionTtlSeconds: z.ZodOptional<z.ZodNumber>;
10051
- pkce: z.ZodOptional<
10052
- z.ZodEnum<{
10053
- none: "none";
10054
- S256: "S256";
10055
- }>
10056
- >;
10057
- },
10058
- z.core.$strict
10059
- >
10060
- >;
10061
- },
10062
- z.core.$strict
10063
- >;
10064
-
10065
9529
  declare interface MemoryCacheOptions {
10066
9530
  maxSize: number;
10067
9531
  }
@@ -13050,7 +12514,7 @@ export declare interface RequireOriginInboundPolicyOptions {
13050
12514
  * @product api-gateway
13051
12515
  * @public
13052
12516
  */
13053
- export declare class RequireUserClaimsInboundPolicy extends InboundPolicy<ValidatedOptions> {
12517
+ export declare class RequireUserClaimsInboundPolicy extends InboundPolicy<RequireUserClaimsInboundPolicyOptions> {
13054
12518
  #private;
13055
12519
  static readonly policyType = "require-user-claims";
13056
12520
  constructor(rawOptions: unknown, policyName: string);
@@ -13068,667 +12532,6 @@ export declare interface RequireUserClaimsInboundPolicyOptions {
13068
12532
  rule: Rule;
13069
12533
  }
13070
12534
 
13071
- declare const requireUserClaimsOptionsSchema: z.ZodObject<
13072
- {
13073
- rule: z.ZodUnion<
13074
- readonly [
13075
- z.ZodObject<
13076
- {
13077
- and: z.ZodArray<
13078
- z.ZodUnion<
13079
- readonly [
13080
- z.ZodObject<
13081
- {
13082
- and: z.ZodArray<
13083
- z.ZodUnion<
13084
- readonly [
13085
- z.ZodObject<
13086
- {
13087
- and: z.ZodArray<
13088
- z.ZodUnion<
13089
- readonly [
13090
- z.ZodObject<
13091
- {
13092
- claim: z.ZodString;
13093
- eq: z.ZodUnion<
13094
- readonly [
13095
- z.ZodString,
13096
- z.ZodNumber,
13097
- z.ZodBoolean,
13098
- ]
13099
- >;
13100
- },
13101
- z.core.$strict
13102
- >,
13103
- z.ZodObject<
13104
- {
13105
- claim: z.ZodString;
13106
- in: z.ZodArray<
13107
- z.ZodUnion<
13108
- readonly [
13109
- z.ZodString,
13110
- z.ZodNumber,
13111
- z.ZodBoolean,
13112
- ]
13113
- >
13114
- >;
13115
- },
13116
- z.core.$strict
13117
- >,
13118
- z.ZodObject<
13119
- {
13120
- claim: z.ZodString;
13121
- startsWith: z.ZodString;
13122
- },
13123
- z.core.$strict
13124
- >,
13125
- ]
13126
- >
13127
- >;
13128
- },
13129
- z.core.$strict
13130
- >,
13131
- z.ZodObject<
13132
- {
13133
- or: z.ZodArray<
13134
- z.ZodUnion<
13135
- readonly [
13136
- z.ZodObject<
13137
- {
13138
- claim: z.ZodString;
13139
- eq: z.ZodUnion<
13140
- readonly [
13141
- z.ZodString,
13142
- z.ZodNumber,
13143
- z.ZodBoolean,
13144
- ]
13145
- >;
13146
- },
13147
- z.core.$strict
13148
- >,
13149
- z.ZodObject<
13150
- {
13151
- claim: z.ZodString;
13152
- in: z.ZodArray<
13153
- z.ZodUnion<
13154
- readonly [
13155
- z.ZodString,
13156
- z.ZodNumber,
13157
- z.ZodBoolean,
13158
- ]
13159
- >
13160
- >;
13161
- },
13162
- z.core.$strict
13163
- >,
13164
- z.ZodObject<
13165
- {
13166
- claim: z.ZodString;
13167
- startsWith: z.ZodString;
13168
- },
13169
- z.core.$strict
13170
- >,
13171
- ]
13172
- >
13173
- >;
13174
- },
13175
- z.core.$strict
13176
- >,
13177
- z.ZodObject<
13178
- {
13179
- claim: z.ZodString;
13180
- eq: z.ZodUnion<
13181
- readonly [
13182
- z.ZodString,
13183
- z.ZodNumber,
13184
- z.ZodBoolean,
13185
- ]
13186
- >;
13187
- },
13188
- z.core.$strict
13189
- >,
13190
- z.ZodObject<
13191
- {
13192
- claim: z.ZodString;
13193
- in: z.ZodArray<
13194
- z.ZodUnion<
13195
- readonly [
13196
- z.ZodString,
13197
- z.ZodNumber,
13198
- z.ZodBoolean,
13199
- ]
13200
- >
13201
- >;
13202
- },
13203
- z.core.$strict
13204
- >,
13205
- z.ZodObject<
13206
- {
13207
- claim: z.ZodString;
13208
- startsWith: z.ZodString;
13209
- },
13210
- z.core.$strict
13211
- >,
13212
- ]
13213
- >
13214
- >;
13215
- },
13216
- z.core.$strict
13217
- >,
13218
- z.ZodObject<
13219
- {
13220
- or: z.ZodArray<
13221
- z.ZodUnion<
13222
- readonly [
13223
- z.ZodObject<
13224
- {
13225
- and: z.ZodArray<
13226
- z.ZodUnion<
13227
- readonly [
13228
- z.ZodObject<
13229
- {
13230
- claim: z.ZodString;
13231
- eq: z.ZodUnion<
13232
- readonly [
13233
- z.ZodString,
13234
- z.ZodNumber,
13235
- z.ZodBoolean,
13236
- ]
13237
- >;
13238
- },
13239
- z.core.$strict
13240
- >,
13241
- z.ZodObject<
13242
- {
13243
- claim: z.ZodString;
13244
- in: z.ZodArray<
13245
- z.ZodUnion<
13246
- readonly [
13247
- z.ZodString,
13248
- z.ZodNumber,
13249
- z.ZodBoolean,
13250
- ]
13251
- >
13252
- >;
13253
- },
13254
- z.core.$strict
13255
- >,
13256
- z.ZodObject<
13257
- {
13258
- claim: z.ZodString;
13259
- startsWith: z.ZodString;
13260
- },
13261
- z.core.$strict
13262
- >,
13263
- ]
13264
- >
13265
- >;
13266
- },
13267
- z.core.$strict
13268
- >,
13269
- z.ZodObject<
13270
- {
13271
- or: z.ZodArray<
13272
- z.ZodUnion<
13273
- readonly [
13274
- z.ZodObject<
13275
- {
13276
- claim: z.ZodString;
13277
- eq: z.ZodUnion<
13278
- readonly [
13279
- z.ZodString,
13280
- z.ZodNumber,
13281
- z.ZodBoolean,
13282
- ]
13283
- >;
13284
- },
13285
- z.core.$strict
13286
- >,
13287
- z.ZodObject<
13288
- {
13289
- claim: z.ZodString;
13290
- in: z.ZodArray<
13291
- z.ZodUnion<
13292
- readonly [
13293
- z.ZodString,
13294
- z.ZodNumber,
13295
- z.ZodBoolean,
13296
- ]
13297
- >
13298
- >;
13299
- },
13300
- z.core.$strict
13301
- >,
13302
- z.ZodObject<
13303
- {
13304
- claim: z.ZodString;
13305
- startsWith: z.ZodString;
13306
- },
13307
- z.core.$strict
13308
- >,
13309
- ]
13310
- >
13311
- >;
13312
- },
13313
- z.core.$strict
13314
- >,
13315
- z.ZodObject<
13316
- {
13317
- claim: z.ZodString;
13318
- eq: z.ZodUnion<
13319
- readonly [
13320
- z.ZodString,
13321
- z.ZodNumber,
13322
- z.ZodBoolean,
13323
- ]
13324
- >;
13325
- },
13326
- z.core.$strict
13327
- >,
13328
- z.ZodObject<
13329
- {
13330
- claim: z.ZodString;
13331
- in: z.ZodArray<
13332
- z.ZodUnion<
13333
- readonly [
13334
- z.ZodString,
13335
- z.ZodNumber,
13336
- z.ZodBoolean,
13337
- ]
13338
- >
13339
- >;
13340
- },
13341
- z.core.$strict
13342
- >,
13343
- z.ZodObject<
13344
- {
13345
- claim: z.ZodString;
13346
- startsWith: z.ZodString;
13347
- },
13348
- z.core.$strict
13349
- >,
13350
- ]
13351
- >
13352
- >;
13353
- },
13354
- z.core.$strict
13355
- >,
13356
- z.ZodObject<
13357
- {
13358
- claim: z.ZodString;
13359
- eq: z.ZodUnion<
13360
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13361
- >;
13362
- },
13363
- z.core.$strict
13364
- >,
13365
- z.ZodObject<
13366
- {
13367
- claim: z.ZodString;
13368
- in: z.ZodArray<
13369
- z.ZodUnion<
13370
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13371
- >
13372
- >;
13373
- },
13374
- z.core.$strict
13375
- >,
13376
- z.ZodObject<
13377
- {
13378
- claim: z.ZodString;
13379
- startsWith: z.ZodString;
13380
- },
13381
- z.core.$strict
13382
- >,
13383
- ]
13384
- >
13385
- >;
13386
- },
13387
- z.core.$strict
13388
- >,
13389
- z.ZodObject<
13390
- {
13391
- or: z.ZodArray<
13392
- z.ZodUnion<
13393
- readonly [
13394
- z.ZodObject<
13395
- {
13396
- and: z.ZodArray<
13397
- z.ZodUnion<
13398
- readonly [
13399
- z.ZodObject<
13400
- {
13401
- and: z.ZodArray<
13402
- z.ZodUnion<
13403
- readonly [
13404
- z.ZodObject<
13405
- {
13406
- claim: z.ZodString;
13407
- eq: z.ZodUnion<
13408
- readonly [
13409
- z.ZodString,
13410
- z.ZodNumber,
13411
- z.ZodBoolean,
13412
- ]
13413
- >;
13414
- },
13415
- z.core.$strict
13416
- >,
13417
- z.ZodObject<
13418
- {
13419
- claim: z.ZodString;
13420
- in: z.ZodArray<
13421
- z.ZodUnion<
13422
- readonly [
13423
- z.ZodString,
13424
- z.ZodNumber,
13425
- z.ZodBoolean,
13426
- ]
13427
- >
13428
- >;
13429
- },
13430
- z.core.$strict
13431
- >,
13432
- z.ZodObject<
13433
- {
13434
- claim: z.ZodString;
13435
- startsWith: z.ZodString;
13436
- },
13437
- z.core.$strict
13438
- >,
13439
- ]
13440
- >
13441
- >;
13442
- },
13443
- z.core.$strict
13444
- >,
13445
- z.ZodObject<
13446
- {
13447
- or: z.ZodArray<
13448
- z.ZodUnion<
13449
- readonly [
13450
- z.ZodObject<
13451
- {
13452
- claim: z.ZodString;
13453
- eq: z.ZodUnion<
13454
- readonly [
13455
- z.ZodString,
13456
- z.ZodNumber,
13457
- z.ZodBoolean,
13458
- ]
13459
- >;
13460
- },
13461
- z.core.$strict
13462
- >,
13463
- z.ZodObject<
13464
- {
13465
- claim: z.ZodString;
13466
- in: z.ZodArray<
13467
- z.ZodUnion<
13468
- readonly [
13469
- z.ZodString,
13470
- z.ZodNumber,
13471
- z.ZodBoolean,
13472
- ]
13473
- >
13474
- >;
13475
- },
13476
- z.core.$strict
13477
- >,
13478
- z.ZodObject<
13479
- {
13480
- claim: z.ZodString;
13481
- startsWith: z.ZodString;
13482
- },
13483
- z.core.$strict
13484
- >,
13485
- ]
13486
- >
13487
- >;
13488
- },
13489
- z.core.$strict
13490
- >,
13491
- z.ZodObject<
13492
- {
13493
- claim: z.ZodString;
13494
- eq: z.ZodUnion<
13495
- readonly [
13496
- z.ZodString,
13497
- z.ZodNumber,
13498
- z.ZodBoolean,
13499
- ]
13500
- >;
13501
- },
13502
- z.core.$strict
13503
- >,
13504
- z.ZodObject<
13505
- {
13506
- claim: z.ZodString;
13507
- in: z.ZodArray<
13508
- z.ZodUnion<
13509
- readonly [
13510
- z.ZodString,
13511
- z.ZodNumber,
13512
- z.ZodBoolean,
13513
- ]
13514
- >
13515
- >;
13516
- },
13517
- z.core.$strict
13518
- >,
13519
- z.ZodObject<
13520
- {
13521
- claim: z.ZodString;
13522
- startsWith: z.ZodString;
13523
- },
13524
- z.core.$strict
13525
- >,
13526
- ]
13527
- >
13528
- >;
13529
- },
13530
- z.core.$strict
13531
- >,
13532
- z.ZodObject<
13533
- {
13534
- or: z.ZodArray<
13535
- z.ZodUnion<
13536
- readonly [
13537
- z.ZodObject<
13538
- {
13539
- and: z.ZodArray<
13540
- z.ZodUnion<
13541
- readonly [
13542
- z.ZodObject<
13543
- {
13544
- claim: z.ZodString;
13545
- eq: z.ZodUnion<
13546
- readonly [
13547
- z.ZodString,
13548
- z.ZodNumber,
13549
- z.ZodBoolean,
13550
- ]
13551
- >;
13552
- },
13553
- z.core.$strict
13554
- >,
13555
- z.ZodObject<
13556
- {
13557
- claim: z.ZodString;
13558
- in: z.ZodArray<
13559
- z.ZodUnion<
13560
- readonly [
13561
- z.ZodString,
13562
- z.ZodNumber,
13563
- z.ZodBoolean,
13564
- ]
13565
- >
13566
- >;
13567
- },
13568
- z.core.$strict
13569
- >,
13570
- z.ZodObject<
13571
- {
13572
- claim: z.ZodString;
13573
- startsWith: z.ZodString;
13574
- },
13575
- z.core.$strict
13576
- >,
13577
- ]
13578
- >
13579
- >;
13580
- },
13581
- z.core.$strict
13582
- >,
13583
- z.ZodObject<
13584
- {
13585
- or: z.ZodArray<
13586
- z.ZodUnion<
13587
- readonly [
13588
- z.ZodObject<
13589
- {
13590
- claim: z.ZodString;
13591
- eq: z.ZodUnion<
13592
- readonly [
13593
- z.ZodString,
13594
- z.ZodNumber,
13595
- z.ZodBoolean,
13596
- ]
13597
- >;
13598
- },
13599
- z.core.$strict
13600
- >,
13601
- z.ZodObject<
13602
- {
13603
- claim: z.ZodString;
13604
- in: z.ZodArray<
13605
- z.ZodUnion<
13606
- readonly [
13607
- z.ZodString,
13608
- z.ZodNumber,
13609
- z.ZodBoolean,
13610
- ]
13611
- >
13612
- >;
13613
- },
13614
- z.core.$strict
13615
- >,
13616
- z.ZodObject<
13617
- {
13618
- claim: z.ZodString;
13619
- startsWith: z.ZodString;
13620
- },
13621
- z.core.$strict
13622
- >,
13623
- ]
13624
- >
13625
- >;
13626
- },
13627
- z.core.$strict
13628
- >,
13629
- z.ZodObject<
13630
- {
13631
- claim: z.ZodString;
13632
- eq: z.ZodUnion<
13633
- readonly [
13634
- z.ZodString,
13635
- z.ZodNumber,
13636
- z.ZodBoolean,
13637
- ]
13638
- >;
13639
- },
13640
- z.core.$strict
13641
- >,
13642
- z.ZodObject<
13643
- {
13644
- claim: z.ZodString;
13645
- in: z.ZodArray<
13646
- z.ZodUnion<
13647
- readonly [
13648
- z.ZodString,
13649
- z.ZodNumber,
13650
- z.ZodBoolean,
13651
- ]
13652
- >
13653
- >;
13654
- },
13655
- z.core.$strict
13656
- >,
13657
- z.ZodObject<
13658
- {
13659
- claim: z.ZodString;
13660
- startsWith: z.ZodString;
13661
- },
13662
- z.core.$strict
13663
- >,
13664
- ]
13665
- >
13666
- >;
13667
- },
13668
- z.core.$strict
13669
- >,
13670
- z.ZodObject<
13671
- {
13672
- claim: z.ZodString;
13673
- eq: z.ZodUnion<
13674
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13675
- >;
13676
- },
13677
- z.core.$strict
13678
- >,
13679
- z.ZodObject<
13680
- {
13681
- claim: z.ZodString;
13682
- in: z.ZodArray<
13683
- z.ZodUnion<
13684
- readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]
13685
- >
13686
- >;
13687
- },
13688
- z.core.$strict
13689
- >,
13690
- z.ZodObject<
13691
- {
13692
- claim: z.ZodString;
13693
- startsWith: z.ZodString;
13694
- },
13695
- z.core.$strict
13696
- >,
13697
- ]
13698
- >
13699
- >;
13700
- },
13701
- z.core.$strict
13702
- >,
13703
- z.ZodObject<
13704
- {
13705
- claim: z.ZodString;
13706
- eq: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>;
13707
- },
13708
- z.core.$strict
13709
- >,
13710
- z.ZodObject<
13711
- {
13712
- claim: z.ZodString;
13713
- in: z.ZodArray<
13714
- z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>
13715
- >;
13716
- },
13717
- z.core.$strict
13718
- >,
13719
- z.ZodObject<
13720
- {
13721
- claim: z.ZodString;
13722
- startsWith: z.ZodString;
13723
- },
13724
- z.core.$strict
13725
- >,
13726
- ]
13727
- >;
13728
- },
13729
- z.core.$strict
13730
- >;
13731
-
13732
12535
  declare type ResolveRequestParams<
13733
12536
  TParams extends RequestParamsDefault | undefined,
13734
12537
  > = TParams extends RequestParamsDefault ? TParams : RequestParamsDefault;
@@ -15686,52 +14489,6 @@ declare interface Usage {
15686
14489
 
15687
14490
  declare type UserDataDefault = any;
15688
14491
 
15689
- declare type ValidatedAuth0OAuthOptions = z.infer<
15690
- typeof mcpAuth0OAuthOptionsSchema
15691
- >;
15692
-
15693
- declare type ValidatedClerkOAuthOptions = z.infer<
15694
- typeof mcpClerkOAuthOptionsSchema
15695
- >;
15696
-
15697
- declare type ValidatedCognitoOAuthOptions = z.infer<
15698
- typeof mcpCognitoOAuthOptionsSchema
15699
- >;
15700
-
15701
- declare type ValidatedEntraOAuthOptions = z.infer<
15702
- typeof mcpEntraOAuthOptionsSchema
15703
- >;
15704
-
15705
- declare type ValidatedGoogleOAuthOptions = z.infer<
15706
- typeof mcpGoogleOAuthOptionsSchema
15707
- >;
15708
-
15709
- declare type ValidatedKeycloakOAuthOptions = z.infer<
15710
- typeof mcpKeycloakOAuthOptionsSchema
15711
- >;
15712
-
15713
- declare type ValidatedLogtoOAuthOptions = z.infer<
15714
- typeof mcpLogtoOAuthOptionsSchema
15715
- >;
15716
-
15717
- declare type ValidatedOktaOAuthOptions = z.infer<
15718
- typeof mcpOktaOAuthOptionsSchema
15719
- >;
15720
-
15721
- declare type ValidatedOneLoginOAuthOptions = z.infer<
15722
- typeof mcpOneLoginOAuthOptionsSchema
15723
- >;
15724
-
15725
- declare type ValidatedOptions = z.infer<typeof requireUserClaimsOptionsSchema>;
15726
-
15727
- declare type ValidatedPingOAuthOptions = z.infer<
15728
- typeof mcpPingOAuthOptionsSchema
15729
- >;
15730
-
15731
- declare type ValidatedWorkosOAuthOptions = z.infer<
15732
- typeof mcpWorkosOAuthOptionsSchema
15733
- >;
15734
-
15735
14492
  /**
15736
14493
  * Validates the body of an incoming request based on a JSON schema.
15737
14494
  *