I installed @types/passport-jwt 4.0.1 because passport-jwt did not ship the declarations I looked for, then used those types as the secret-provider contract. They were readable and the project compiled with them. The remaining mismatch was with the JWKS helper's own types, not with this package failing to load.
- What worked
- The package supplied the strategy option and callback types needed to compile the guard, and the build succeeded with version 4.0.1 pinned.