@executor-js/plugin-graphql 1.4.33 → 1.5.0

package/dist/react/client.d.ts

@@ -1,143 +1,154 @@
-export declare const GraphqlClient: import("effect/unstable/reactivity/AtomHttpApi").AtomHttpApiClient<"Plugin_graphqlClient", `Plugin_${string}Client`, import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"graphql", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"addSource", "POST", "/scopes/:scopeId/graphql/sources", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+export declare const GraphqlClient: import("effect/unstable/reactivity/AtomHttpApi").AtomHttpApiClient<"Plugin_graphqlClient", `Plugin_${string}Client`, import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"graphql", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"addIntegration", "POST", "/graphql/integrations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly endpoint: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
+    readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly introspectionJson: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly namespace: import("effect/Schema").String;
-    readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"secret">;
+    readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly authenticationTemplate: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"apiKey">;
+        readonly slug: import("effect/Schema").String;
+        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
+        readonly name: import("effect/Schema").String;
         readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>]>>>;
-    readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"secret">;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"oauth2">;
+        readonly slug: import("effect/Schema").String;
+        readonly header: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
     }>]>>>;
-    readonly oauth2: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"oauth2">;
-        readonly securitySchemeName: import("effect/Schema").String;
-        readonly flow: import("effect/Schema").Literals<readonly ["authorizationCode", "clientCredentials"]>;
-        readonly tokenUrl: import("effect/Schema").String;
-        readonly authorizationUrl: import("effect/Schema").withDecodingDefault<import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>>;
-        readonly issuerUrl: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-        readonly clientIdSlot: import("effect/Schema").String;
-        readonly clientSecretSlot: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly connectionSlot: import("effect/Schema").String;
-        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").String>;
-    }>>;
-    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly scope: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
-        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"text">;
-            readonly text: import("effect/Schema").String;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"secret">;
-            readonly secretId: import("effect/Schema").String;
-            readonly secretScope: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"connection">;
-            readonly connectionId: import("effect/Schema").String;
-        }>]>>>;
-        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"text">;
-            readonly text: import("effect/Schema").String;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"secret">;
-            readonly secretId: import("effect/Schema").String;
-            readonly secretScope: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"connection">;
-            readonly connectionId: import("effect/Schema").String;
-        }>]>>>;
-        readonly auth: import("effect/Schema").optional<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"none">;
-        }>, import("effect/Schema").Struct<{
-            readonly oauth2: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connection: import("effect/Schema").optional<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-                    readonly kind: import("effect/Schema").Literal<"text">;
-                    readonly text: import("effect/Schema").String;
-                    readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-                }>, import("effect/Schema").Struct<{
-                    readonly kind: import("effect/Schema").Literal<"secret">;
-                    readonly secretId: import("effect/Schema").String;
-                    readonly secretScope: import("effect/Schema").optional<import("effect/Schema").String>;
-                    readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
-                }>, import("effect/Schema").Struct<{
-                    readonly kind: import("effect/Schema").Literal<"connection">;
-                    readonly connectionId: import("effect/Schema").String;
-                }>]>>;
-            }>>;
-        }>]>>;
-    }>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly toolCount: import("effect/Schema").Number;
-    readonly namespace: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/sdk").InternalError | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlIntrospectionError, {
-    readonly _tag: "GraphqlIntrospectionError";
+    readonly slug: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/sdk").IntegrationAlreadyExistsError | typeof import("@executor-js/sdk").InternalError | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlIntrospectionError, {
     readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
 }, readonly [import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
     readonly message: import("effect/Schema").String;
 }>], {
-    readonly _tag: "GraphqlIntrospectionError";
     readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
 }>, import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
     readonly message: import("effect/Schema").String;
 }>, never, never> | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlExtractionError, {
-    readonly _tag: "GraphqlExtractionError";
     readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
 }, readonly [import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
     readonly message: import("effect/Schema").String;
 }>], {
+    readonly message: string;
     readonly _tag: "GraphqlExtractionError";
+}>, import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
+    readonly message: import("effect/Schema").String;
+}>, never, never>>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getIntegration", "GET", "/graphql/integrations/:slug", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    slug: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").NullOr<import("effect/Schema").Unknown>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/sdk").IntegrationAlreadyExistsError | typeof import("@executor-js/sdk").InternalError | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlIntrospectionError, {
     readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
+}, readonly [import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
+    readonly message: import("effect/Schema").String;
+}>], {
+    readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
+}>, import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
+    readonly message: import("effect/Schema").String;
+}>, never, never> | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlExtractionError, {
+    readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
+}, readonly [import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
+    readonly message: import("effect/Schema").String;
+}>], {
+    readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
 }>, import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
     readonly message: import("effect/Schema").String;
-}>, never, never>>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSource", "GET", "/scopes/:scopeId/graphql/sources/:namespace", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
-    namespace: import("effect/Schema").String;
+}>, never, never>>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getConfig", "GET", "/graphql/integrations/:slug/config", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    slug: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
-    readonly namespace: import("effect/Schema").String;
-    readonly scope: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
-    readonly name: import("effect/Schema").String;
     readonly endpoint: import("effect/Schema").String;
-    readonly headers: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"binding">;
-        readonly slot: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+    readonly introspectionJson: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"apiKey">;
+        readonly slug: import("effect/Schema").String;
+        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
+        readonly name: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"oauth2">;
+        readonly slug: import("effect/Schema").String;
+        readonly header: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
     }>]>>;
-    readonly queryParams: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"binding">;
-        readonly slot: import("effect/Schema").String;
+}>>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/sdk").IntegrationAlreadyExistsError | typeof import("@executor-js/sdk").InternalError | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlIntrospectionError, {
+    readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
+}, readonly [import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
+    readonly message: import("effect/Schema").String;
+}>], {
+    readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
+}>, import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
+    readonly message: import("effect/Schema").String;
+}>, never, never> | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlExtractionError, {
+    readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
+}, readonly [import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
+    readonly message: import("effect/Schema").String;
+}>], {
+    readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
+}>, import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
+    readonly message: import("effect/Schema").String;
+}>, never, never>>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"configure", "POST", "/graphql/integrations/:slug/config", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    slug: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"apiKey">;
+        readonly slug: import("effect/Schema").String;
+        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
+        readonly name: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"oauth2">;
+        readonly slug: import("effect/Schema").String;
+        readonly header: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
     }>]>>;
-    readonly auth: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"none">;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["merge", "replace"]>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"apiKey">;
+        readonly slug: import("effect/Schema").String;
+        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
+        readonly name: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
     }>, import("effect/Schema").Struct<{
         readonly kind: import("effect/Schema").Literal<"oauth2">;
-        readonly connectionSlot: import("effect/Schema").String;
-    }>]>;
-}>>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/sdk").InternalError | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlIntrospectionError, {
-    readonly _tag: "GraphqlIntrospectionError";
+        readonly slug: import("effect/Schema").String;
+        readonly header: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>]>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/sdk").IntegrationAlreadyExistsError | typeof import("@executor-js/sdk").InternalError | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlIntrospectionError, {
     readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
 }, readonly [import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
     readonly message: import("effect/Schema").String;
 }>], {
-    readonly _tag: "GraphqlIntrospectionError";
     readonly message: string;
+    readonly _tag: "GraphqlIntrospectionError";
 }>, import("effect/Schema").TaggedStruct<"GraphqlIntrospectionError", {
     readonly message: import("effect/Schema").String;
 }>, never, never> | import("effect/Schema").decodeTo<import("effect/Schema").declareConstructor<import("../sdk").GraphqlExtractionError, {
-    readonly _tag: "GraphqlExtractionError";
     readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
 }, readonly [import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
     readonly message: import("effect/Schema").String;
 }>], {
-    readonly _tag: "GraphqlExtractionError";
     readonly message: string;
+    readonly _tag: "GraphqlExtractionError";
 }>, import("effect/Schema").TaggedStruct<"GraphqlExtractionError", {
     readonly message: import("effect/Schema").String;
 }>, never, never>>, never, never>, false>>;

package/dist/react/defaults.d.ts

@@ -1,2 +1,16 @@
-import { type HttpCredentialsState } from "@executor-js/react/plugins/http-credentials";
-export declare const initialGraphqlCredentials: () => HttpCredentialsState;
+import type { ConnectionName, Owner } from "@executor-js/sdk/shared";
+/** The slug of the apiKey auth template the add flow declares + targets. */
+export declare const GRAPHQL_APIKEY_TEMPLATE = "apiKey";
+/** Build the apiKey auth template the integration stores. The connection's
+ *  value is written to `headerName` at invoke time (no prefix — the user pastes
+ *  the full header value, e.g. `Bearer ghp_…`). */
+export declare const graphqlApiKeyAuthTemplate: (headerName: string) => {
+    readonly kind: "apiKey";
+    readonly slug: string;
+    readonly in: "header";
+    readonly name: string;
+};
+/** Deterministic connection name for a GraphQL integration + owner. Keeps a
+ *  single owner-scoped credential per integration so re-adding overwrites
+ *  rather than accumulating duplicates. */
+export declare const graphqlConnectionName: (slug: string, owner: Owner) => ConnectionName;

package/dist/react/index.d.ts

@@ -1,3 +1,3 @@
-export { graphqlSourcePlugin } from "./source-plugin";
+export { graphqlIntegrationPlugin } from "./source-plugin";
 export { GraphqlClient } from "./client";
-export { addGraphqlSource } from "./atoms";
+export { addGraphqlIntegration, graphqlIntegrationConfigAtom } from "./atoms";

package/dist/react/source-plugin.d.ts

@@ -1,2 +1,2 @@
-import type { SourcePlugin } from "@executor-js/sdk/client";
-export declare const graphqlSourcePlugin: SourcePlugin;
+import type { IntegrationPlugin } from "@executor-js/sdk/client";
+export declare const graphqlIntegrationPlugin: IntegrationPlugin;

package/dist/sdk/errors.d.ts

@@ -23,16 +23,18 @@ export declare class GraphqlInvocationError extends GraphqlInvocationError_base<
 declare const GraphqlAuthRequiredError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
     readonly _tag: "GraphqlAuthRequiredError";
 } & Readonly<A>;
+/** A tool invocation could not produce a usable credential. Re-keyed for v2:
+ *  references the connection by (owner, integration, name) instead of a v1
+ *  source id + scope. */
 export declare class GraphqlAuthRequiredError extends GraphqlAuthRequiredError_base<{
     readonly code: AuthToolFailureCode;
     readonly message: string;
-    readonly sourceId: string;
-    readonly sourceScope: string;
-    readonly credentialKind: "secret" | "connection" | "oauth" | "upstream";
+    readonly owner: string;
+    readonly integration: string;
+    readonly connection: string;
+    readonly credentialKind: "secret" | "oauth" | "upstream";
     readonly credentialLabel?: string;
-    readonly slotKey?: string;
-    readonly secretId?: string;
-    readonly connectionId?: string;
+    readonly template?: string;
     readonly status?: number;
     readonly details?: unknown;
     readonly cause?: unknown;

package/dist/sdk/index.d.ts

@@ -1,7 +1,7 @@
 export { introspect, parseIntrospectionJson } from "./introspect";
 export { extract, type ExtractionOutput } from "./extract";
-export { invoke, invokeWithLayer, resolveHeaders } from "./invoke";
-export { graphqlPlugin, type GraphqlSourceConfig, type GraphqlPluginExtension, type GraphqlPluginOptions, type GraphqlConfigureSourceInput, type GraphqlSourceRef, } from "./plugin";
-export { graphqlSchema, makeDefaultGraphqlStore, type GraphqlSchema, type GraphqlStore, type StoredGraphqlSource, type StoredOperation, } from "./store";
-export { GraphqlIntrospectionError, GraphqlExtractionError, GraphqlInvocationError, } from "./errors";
-export { ExtractedField, ExtractionResult, GraphqlArgument, GraphqlCredentialInput, GraphqlOperationKind, GraphqlSourceAuth, GraphqlSourceAuthInput, InvocationConfig, InvocationResult, OperationBinding, HeaderValue, QueryParamValue, ConfiguredGraphqlCredentialValue, GRAPHQL_OAUTH_CONNECTION_SLOT, graphqlHeaderSlot, graphqlQueryParamSlot, } from "./types";
+export { invoke, invokeWithLayer } from "./invoke";
+export { describeGraphqlAuthMethods, graphqlPlugin, type GraphqlPluginExtension, type GraphqlPluginOptions, type GraphqlAddIntegrationInput, type GraphqlConfigureInput, type GraphqlConfigureAuthInput, } from "./plugin";
+export { makeDefaultGraphqlStore, type GraphqlStore, type StoredOperation } from "./store";
+export { GraphqlIntrospectionError, GraphqlExtractionError, GraphqlInvocationError, GraphqlAuthRequiredError, } from "./errors";
+export { ApiKeyAuthTemplate, AuthTemplate, decodeGraphqlIntegrationConfig, decodeGraphqlIntegrationConfigOption, ExtractedField, ExtractionResult, GraphqlArgument, GraphqlIntegrationConfig, GraphqlOperationKind, InvocationResult, OAuthAuthTemplate, OperationBinding, type ApiKeyAuthTemplate as ApiKeyAuthTemplateType, } from "./types";

package/dist/sdk/introspect.d.ts

@@ -332,8 +332,8 @@ export declare const introspect: (endpoint: string, headers?: Record<string, str
     readonly __schema: {
         readonly types: readonly {
             readonly name: string;
-            readonly kind: string;
             readonly description: string | null;
+            readonly kind: string;
             readonly fields: readonly {
                 readonly name: string;
                 readonly type: {

package/dist/sdk/invoke.d.ts

@@ -1,10 +1,7 @@
 import { Effect, Layer } from "effect";
 import { HttpClient } from "effect/unstable/http";
 import { GraphqlInvocationError } from "./errors";
-import { type HeaderValue, type OperationBinding } from "./types";
-export declare const resolveHeaders: (headers: Record<string, HeaderValue>, secrets: {
-    readonly get: (id: string) => Effect.Effect<string | null, unknown>;
-}) => Effect.Effect<Record<string, string>>;
+import { type OperationBinding } from "./types";
 export declare const endpointForTelemetry: (endpoint: string) => string;
 export declare const invoke: (operation: {
     readonly kind: "query" | "mutation";

package/dist/sdk/plugin.d.ts

@@ -1,125 +1,115 @@
 import { Effect, Schema } from "effect";
 import type { Layer } from "effect";
 import { HttpClient } from "effect/unstable/http";
-import { type PluginCtx, type StorageFailure } from "@executor-js/sdk/core";
-import { OAuth2SourceConfig } from "@executor-js/sdk/http-source";
-import { type ConfigFileSink } from "@executor-js/config";
+import { IntegrationAlreadyExistsError, type AuthMethodDescriptor, type IntegrationRecord, type PluginCtx, type StorageFailure } from "@executor-js/sdk/core";
 import { GraphqlIntrospectionError } from "./errors";
-import { type GraphqlStore, type StoredGraphqlSource } from "./store";
-import { type ConfiguredGraphqlCredentialValue, type GraphqlConfiguredValueInput, type GraphqlCredentialInput, type HeaderValue as HeaderValueValue, type GraphqlSourceAuthInput } from "./types";
-export type HeaderValue = HeaderValueValue;
-export type GraphqlCredentialValue = ConfiguredGraphqlCredentialValue;
-export interface GraphqlSourceConfig {
-    /** The GraphQL endpoint URL */
-    readonly endpoint: string;
-    /**
-     * Executor scope id that owns this source row. Must be one of the
-     * executor's configured scopes. Typical shape: an admin adds the
-     * source at the outermost (organization) scope so it's visible to
-     * every inner (per-user) scope via fall-through reads.
-     */
-    readonly scope: string;
-    /** Display name for the source. */
-    readonly name: string;
-    /** Optional: introspection JSON text (if endpoint doesn't support introspection) */
-    readonly introspectionJson?: string;
-    /** Namespace for the tools. */
-    readonly namespace: string;
-    /** Headers applied to every request. Secret entries declare source-owned slots. */
-    readonly headers?: Record<string, GraphqlConfiguredValueInput>;
-    /** Query parameters applied to every request. Secret entries declare source-owned slots. */
-    readonly queryParams?: Record<string, GraphqlConfiguredValueInput>;
-    /** Optional OAuth2 credential used as a Bearer token for every request. */
-    readonly oauth2?: OAuth2SourceConfig;
-    /** Initial credential bindings used while adding and introspecting this source. */
-    readonly credentials?: GraphqlInitialCredentialsInput;
-}
-declare const GraphqlInitialCredentialsInputSchema: Schema.Struct<{
-    readonly scope: Schema.String;
-    readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Struct<{
-        readonly kind: Schema.Literal<"text">;
-        readonly text: Schema.String;
+import { type GraphqlStore } from "./store";
+import { AuthTemplate, GraphqlIntegrationConfig } from "./types";
+/** Register a GraphQL integration in the catalog. `endpoint` is the GraphQL URL;
+ *  `slug` (defaulted from the endpoint) is the catalog id; `introspectionJson`
+ *  supplies the schema when the endpoint disables live introspection; `headers`
+ *  / `queryParams` are static and also applied to add-time introspection;
+ *  `authenticationTemplate` declares the auth methods a connection can apply
+ *  through. */
+declare const GraphqlAddIntegrationInputSchema: Schema.Struct<{
+    readonly endpoint: Schema.String;
+    readonly slug: Schema.optional<Schema.String>;
+    readonly name: Schema.optional<Schema.String>;
+    readonly introspectionJson: Schema.optional<Schema.String>;
+    readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly authenticationTemplate: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"apiKey">;
+        readonly slug: Schema.String;
+        readonly in: Schema.Literals<readonly ["header", "query"]>;
+        readonly name: Schema.String;
         readonly prefix: Schema.optional<Schema.String>;
     }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"secret">;
-        readonly secretId: Schema.String;
-        readonly secretScope: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"oauth2">;
+        readonly slug: Schema.String;
+        readonly header: Schema.optional<Schema.String>;
         readonly prefix: Schema.optional<Schema.String>;
-    }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"connection">;
-        readonly connectionId: Schema.String;
     }>]>>>;
-    readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Struct<{
-        readonly kind: Schema.Literal<"text">;
-        readonly text: Schema.String;
+}>;
+export type GraphqlAddIntegrationInput = typeof GraphqlAddIntegrationInputSchema.Type;
+declare const GraphqlConfigureInputSchema: Schema.Struct<{
+    readonly name: Schema.optional<Schema.String>;
+    readonly endpoint: Schema.optional<Schema.String>;
+    readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly authenticationTemplate: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"apiKey">;
+        readonly slug: Schema.String;
+        readonly in: Schema.Literals<readonly ["header", "query"]>;
+        readonly name: Schema.String;
         readonly prefix: Schema.optional<Schema.String>;
     }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"secret">;
-        readonly secretId: Schema.String;
-        readonly secretScope: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"oauth2">;
+        readonly slug: Schema.String;
+        readonly header: Schema.optional<Schema.String>;
         readonly prefix: Schema.optional<Schema.String>;
-    }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"connection">;
-        readonly connectionId: Schema.String;
     }>]>>>;
-    readonly auth: Schema.optional<Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"none">;
+}>;
+export type GraphqlConfigureInput = typeof GraphqlConfigureInputSchema.Type;
+/** Input for the custom-method-create flow (HTTP `POST /graphql/integrations/
+ *  :slug/config`). Unlike `configure` (which REPLACES the whole config for the
+ *  generic repair path), `configureAuth` MERGE-APPENDS these templates onto the
+ *  integration's existing `authenticationTemplate`, mirroring OpenAPI's
+ *  `configure`. */
+declare const GraphqlConfigureAuthInputSchema: Schema.Struct<{
+    readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"apiKey">;
+        readonly slug: Schema.String;
+        readonly in: Schema.Literals<readonly ["header", "query"]>;
+        readonly name: Schema.String;
+        readonly prefix: Schema.optional<Schema.String>;
     }>, Schema.Struct<{
-        readonly oauth2: Schema.optional<Schema.Struct<{
-            readonly connection: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
-                readonly kind: Schema.Literal<"text">;
-                readonly text: Schema.String;
-                readonly prefix: Schema.optional<Schema.String>;
-            }>, Schema.Struct<{
-                readonly kind: Schema.Literal<"secret">;
-                readonly secretId: Schema.String;
-                readonly secretScope: Schema.optional<Schema.String>;
-                readonly prefix: Schema.optional<Schema.String>;
-            }>, Schema.Struct<{
-                readonly kind: Schema.Literal<"connection">;
-                readonly connectionId: Schema.String;
-            }>]>>;
-        }>>;
+        readonly kind: Schema.Literal<"oauth2">;
+        readonly slug: Schema.String;
+        readonly header: Schema.optional<Schema.String>;
+        readonly prefix: Schema.optional<Schema.String>;
     }>]>>;
+    readonly mode: Schema.optional<Schema.Literals<readonly ["merge", "replace"]>>;
 }>;
-type GraphqlInitialCredentialsInput = typeof GraphqlInitialCredentialsInputSchema.Type;
-export interface GraphqlSourceRef {
-    readonly id: string;
-    readonly scope: string;
-}
-export interface GraphqlConfigureSourceInput {
-    readonly scope: string;
-    readonly name?: string;
-    readonly endpoint?: string;
-    readonly headers?: Record<string, GraphqlCredentialInput>;
-    readonly queryParams?: Record<string, GraphqlCredentialInput>;
-    readonly auth?: GraphqlSourceAuthInput;
-}
-export interface GraphqlPluginOptions {
-    readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient>;
-    /** If provided, source add/remove is mirrored to executor.jsonc
-     *  (best-effort — file errors are logged, not raised). */
-    readonly configFile?: ConfigFileSink;
-}
-declare const makeGraphqlExtension: (ctx: PluginCtx<GraphqlStore>, httpClientLayer: Layer.Layer<HttpClient.HttpClient>, configFile: ConfigFileSink | undefined) => {
-    addSource: (config: GraphqlSourceConfig) => Effect.Effect<{
+export type GraphqlConfigureAuthInput = typeof GraphqlConfigureAuthInputSchema.Type;
+export declare const describeGraphqlAuthMethods: (record: IntegrationRecord) => readonly AuthMethodDescriptor[];
+export declare const describeGraphqlIntegrationDisplay: (record: IntegrationRecord) => {
+    readonly url?: string;
+};
+declare const makeGraphqlExtension: (ctx: PluginCtx<GraphqlStore>) => {
+    /** Register a GraphQL integration (introspects + persists operations). */
+    addIntegration: (input: GraphqlAddIntegrationInput) => Effect.Effect<{
+        slug: string;
+        name: string;
         toolCount: number;
-        namespace: string;
-    }, StorageFailure | GraphqlIntrospectionError | import("./errors").GraphqlExtractionError, never>;
-    removeSource: (namespace: string, scope: string) => Effect.Effect<void, StorageFailure, never>;
-    getSource: (namespace: string, scope: string) => Effect.Effect<StoredGraphqlSource | null, StorageFailure, never>;
-    configureSource: (namespace: string, scope: string, targetScope: string, input: Omit<GraphqlConfigureSourceInput, "scope">) => Effect.Effect<void, StorageFailure, never>;
-    configure: (source: GraphqlSourceRef, input: GraphqlConfigureSourceInput) => Effect.Effect<void, StorageFailure, never>;
+    }, StorageFailure | IntegrationAlreadyExistsError | GraphqlIntrospectionError | import("./errors").GraphqlExtractionError, never>;
+    /** Read the integration's stored config. */
+    getIntegration: (slug: string) => Effect.Effect<unknown, StorageFailure, never>;
+    /** Read the integration's decoded config (auth templates surfaced). */
+    getConfig: (slug: string) => Effect.Effect<GraphqlIntegrationConfig | null, StorageFailure>;
+    /** Merge-append custom auth methods (custom-method-create flow). */
+    configureAuth: (slug: string, input: GraphqlConfigureAuthInput) => Effect.Effect<readonly AuthTemplate[], StorageFailure>;
+    removeIntegration: (slug: string) => Effect.Effect<void, StorageFailure, never>;
+    configure: (slug: string, input: GraphqlConfigureInput) => Effect.Effect<void, StorageFailure, never>;
 };
 export type GraphqlPluginExtension = ReturnType<typeof makeGraphqlExtension>;
+export interface GraphqlPluginOptions {
+    readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient>;
+}
 export declare const graphqlPlugin: import("@executor-js/sdk/core").ConfiguredPlugin<"graphql", {
-    addSource: (config: GraphqlSourceConfig) => Effect.Effect<{
+    /** Register a GraphQL integration (introspects + persists operations). */
+    addIntegration: (input: GraphqlAddIntegrationInput) => Effect.Effect<{
+        slug: string;
+        name: string;
         toolCount: number;
-        namespace: string;
-    }, StorageFailure | GraphqlIntrospectionError | import("./errors").GraphqlExtractionError, never>;
-    removeSource: (namespace: string, scope: string) => Effect.Effect<void, StorageFailure, never>;
-    getSource: (namespace: string, scope: string) => Effect.Effect<StoredGraphqlSource | null, StorageFailure, never>;
-    configureSource: (namespace: string, scope: string, targetScope: string, input: Omit<GraphqlConfigureSourceInput, "scope">) => Effect.Effect<void, StorageFailure, never>;
-    configure: (source: GraphqlSourceRef, input: GraphqlConfigureSourceInput) => Effect.Effect<void, StorageFailure, never>;
-}, GraphqlStore, GraphqlPluginOptions, {}, undefined, Layer.Layer<unknown, never, never>, import("effect/unstable/httpapi/HttpApiGroup").Any>;
+    }, StorageFailure | IntegrationAlreadyExistsError | GraphqlIntrospectionError | import("./errors").GraphqlExtractionError, never>;
+    /** Read the integration's stored config. */
+    getIntegration: (slug: string) => Effect.Effect<unknown, StorageFailure, never>;
+    /** Read the integration's decoded config (auth templates surfaced). */
+    getConfig: (slug: string) => Effect.Effect<GraphqlIntegrationConfig | null, StorageFailure>;
+    /** Merge-append custom auth methods (custom-method-create flow). */
+    configureAuth: (slug: string, input: GraphqlConfigureAuthInput) => Effect.Effect<readonly AuthTemplate[], StorageFailure>;
+    removeIntegration: (slug: string) => Effect.Effect<void, StorageFailure, never>;
+    configure: (slug: string, input: GraphqlConfigureInput) => Effect.Effect<void, StorageFailure, never>;
+}, GraphqlStore, GraphqlPluginOptions, undefined, Layer.Layer<unknown, never, never>, import("effect/unstable/httpapi/HttpApiGroup").Any>;
 export {};