@executor-js/plugin-graphql 1.5.6 → 1.5.8

package/dist/react/atoms.d.ts

@@ -6,11 +6,19 @@ export declare const graphqlConfigAtom: (slug: IntegrationSlug) => Atom.Atom<Asy
     readonly name: string;
     readonly endpoint: string;
     readonly authenticationTemplate: readonly ({
-        readonly name: string;
-        readonly in: "header" | "query";
         readonly slug: string;
-        readonly kind: "apiKey";
-        readonly prefix?: string | undefined;
+        readonly kind: "apikey";
+        readonly placements: readonly {
+            readonly name: string;
+            readonly carrier: "header" | "query";
+            readonly variable?: string | undefined;
+            readonly prefix?: string | undefined;
+            readonly literal?: string | undefined;
+        }[];
+        readonly label?: string | undefined;
+    } | {
+        readonly slug: string;
+        readonly kind: "none";
     } | {
         readonly slug: string;
         readonly kind: "oauth2";
@@ -20,7 +28,6 @@ export declare const graphqlConfigAtom: (slug: IntegrationSlug) => Atom.Atom<Asy
     readonly headers?: {
         readonly [x: string]: string;
     } | undefined;
-    readonly introspectionJson?: string | undefined;
     readonly queryParams?: {
         readonly [x: string]: string;
     } | undefined;
@@ -33,22 +40,35 @@ export declare const addGraphqlIntegration: Atom.AtomResultFn<{
         readonly headers?: {
             readonly [x: string]: string;
         } | undefined;
-        readonly introspectionJson?: string | undefined;
         readonly queryParams?: {
             readonly [x: string]: string;
         } | undefined;
         readonly authenticationTemplate?: readonly ({
-            readonly name: string;
-            readonly in: "header" | "query";
-            readonly slug: string;
-            readonly kind: "apiKey";
-            readonly prefix?: string | undefined;
+            readonly type: "apiKey";
+            readonly slug?: string | undefined;
+            readonly label?: string | undefined;
+            readonly headers?: {
+                readonly [x: string]: string | readonly (string | {
+                    readonly name: string;
+                    readonly type: "variable";
+                })[];
+            } | undefined;
+            readonly queryParams?: {
+                readonly [x: string]: string | readonly (string | {
+                    readonly name: string;
+                    readonly type: "variable";
+                })[];
+            } | undefined;
+        } | {
+            readonly kind: "none";
+            readonly slug?: string | undefined;
         } | {
-            readonly slug: string;
             readonly kind: "oauth2";
             readonly header?: string | undefined;
+            readonly slug?: string | undefined;
             readonly prefix?: string | undefined;
         })[] | undefined;
+        readonly introspectionJson?: string | undefined;
     };
     readonly responseMode?: "decoded-only" | undefined;
     readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
@@ -62,15 +82,28 @@ export declare const graphqlConfigure: Atom.AtomResultFn<{
     };
     readonly payload: {
         readonly authenticationTemplate: readonly ({
-            readonly name: string;
-            readonly in: "header" | "query";
-            readonly slug: string;
-            readonly kind: "apiKey";
-            readonly prefix?: string | undefined;
+            readonly type: "apiKey";
+            readonly slug?: string | undefined;
+            readonly label?: string | undefined;
+            readonly headers?: {
+                readonly [x: string]: string | readonly (string | {
+                    readonly name: string;
+                    readonly type: "variable";
+                })[];
+            } | undefined;
+            readonly queryParams?: {
+                readonly [x: string]: string | readonly (string | {
+                    readonly name: string;
+                    readonly type: "variable";
+                })[];
+            } | undefined;
+        } | {
+            readonly kind: "none";
+            readonly slug?: string | undefined;
         } | {
-            readonly slug: string;
             readonly kind: "oauth2";
             readonly header?: string | undefined;
+            readonly slug?: string | undefined;
             readonly prefix?: string | undefined;
         })[];
         readonly mode?: "replace" | "merge" | undefined;
@@ -79,11 +112,19 @@ export declare const graphqlConfigure: Atom.AtomResultFn<{
     readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
 }, {
     readonly authenticationTemplate: readonly ({
-        readonly name: string;
-        readonly in: "header" | "query";
         readonly slug: string;
-        readonly kind: "apiKey";
-        readonly prefix?: string | undefined;
+        readonly kind: "apikey";
+        readonly placements: readonly {
+            readonly name: string;
+            readonly carrier: "header" | "query";
+            readonly variable?: string | undefined;
+            readonly prefix?: string | undefined;
+            readonly literal?: string | undefined;
+        }[];
+        readonly label?: string | undefined;
+    } | {
+        readonly slug: string;
+        readonly kind: "none";
     } | {
         readonly slug: string;
         readonly kind: "oauth2";
@@ -99,22 +140,35 @@ export declare const addGraphqlIntegrationOptimistic: Atom.AtomResultFn<{
         readonly headers?: {
             readonly [x: string]: string;
         } | undefined;
-        readonly introspectionJson?: string | undefined;
         readonly queryParams?: {
             readonly [x: string]: string;
         } | undefined;
         readonly authenticationTemplate?: readonly ({
-            readonly name: string;
-            readonly in: "header" | "query";
-            readonly slug: string;
-            readonly kind: "apiKey";
-            readonly prefix?: string | undefined;
+            readonly type: "apiKey";
+            readonly slug?: string | undefined;
+            readonly label?: string | undefined;
+            readonly headers?: {
+                readonly [x: string]: string | readonly (string | {
+                    readonly name: string;
+                    readonly type: "variable";
+                })[];
+            } | undefined;
+            readonly queryParams?: {
+                readonly [x: string]: string | readonly (string | {
+                    readonly name: string;
+                    readonly type: "variable";
+                })[];
+            } | undefined;
+        } | {
+            readonly kind: "none";
+            readonly slug?: string | undefined;
         } | {
-            readonly slug: string;
             readonly kind: "oauth2";
             readonly header?: string | undefined;
+            readonly slug?: string | undefined;
             readonly prefix?: string | undefined;
         })[] | undefined;
+        readonly introspectionJson?: string | undefined;
     };
     readonly responseMode?: "decoded-only" | undefined;
     readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;

package/dist/react/auth-method-config.d.ts

@@ -1,9 +1,22 @@
+import type { AuthTemplateEditorValue } from "@executor-js/react/components/auth-template-editor";
 import type { AuthMethod, Placement } from "@executor-js/react/lib/auth-placements";
-import type { AuthTemplate } from "../sdk/types";
-/** Map each stored GraphQL auth template to a generic `AuthMethod`. A `custom_`
- *  slug marks a user-defined method; everything else is spec-declared. */
-export declare function authMethodsFromConfig(templates: readonly AuthTemplate[]): AuthMethod[];
-/** Build GraphQL `apiKey` templates from generic placements. The optional
- *  `slug` names the FIRST emitted template (subsequent placements get an empty
- *  slug so the backend assigns a `custom_<id>` each). */
-export declare function graphqlTemplatesFromPlacements(placements: readonly Placement[], slug?: string): AuthTemplate[];
+import type { GraphqlAuthMethod, GraphqlAuthMethodInput, GraphqlCanonicalAuthMethodInput } from "../sdk/types";
+/** Convert a generic editor value into one GraphQL auth-method input (no slug
+ *  — the backend assigns carrier-derived slugs). An apikey value keeps every
+ *  named placement (headers and query params mix freely); one with no usable
+ *  placement falls back to `none`. */
+export declare function graphqlAuthMethodInputFromEditorValue(value: AuthTemplateEditorValue): GraphqlAuthMethodInput;
+/** Convert one stored GraphQL method into the generic editor value. */
+export declare function editorValueFromGraphqlAuthMethod(method: GraphqlAuthMethod): AuthTemplateEditorValue;
+/** Project the stored methods into the generic `AuthMethod[]` the hub renders.
+ *  Mirrors the server's `describeGraphqlAuthMethods`; `custom_` slugs mark
+ *  user-created methods (removable from the hub). */
+export declare function authMethodsFromConfig(methods: readonly GraphqlAuthMethod[]): AuthMethod[];
+/** Build the GraphQL method input for a custom method from generic placements
+ *  — ONE method carrying every named placement (header + query mix in a single
+ *  method; each placement renders from its own input variable, or shares one).
+ *  Empty when no placement is usable. */
+export declare function graphqlAuthMethodInputsFromPlacements(placements: readonly Placement[]): GraphqlAuthMethodInput[];
+/** Serialize a canonical method into the wire input union (apikey → the
+ *  request-shaped dialect; none/oauth2 pass through). */
+export declare const graphqlWireAuthInput: (method: GraphqlAuthMethod | GraphqlCanonicalAuthMethodInput) => GraphqlAuthMethodInput;

package/dist/react/client.d.ts

@@ -6,16 +6,25 @@ export declare const GraphqlClient: import("effect/unstable/reactivity/AtomHttpA
     readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
     readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
     readonly authenticationTemplate: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"apiKey">;
-        readonly slug: import("effect/Schema").String;
-        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
-        readonly name: import("effect/Schema").String;
-        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"none">;
     }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly kind: import("effect/Schema").Literal<"oauth2">;
-        readonly slug: import("effect/Schema").String;
         readonly header: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"apiKey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
+        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
     }>]>>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly slug: import("effect/Schema").String;
@@ -67,15 +76,22 @@ export declare const GraphqlClient: import("effect/unstable/reactivity/AtomHttpA
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
     readonly endpoint: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
-    readonly introspectionJson: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
     readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
     readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"apiKey">;
         readonly slug: import("effect/Schema").String;
-        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
-        readonly name: import("effect/Schema").String;
-        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"none">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").Literal<"apikey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly placements: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly carrier: import("effect/Schema").Literals<readonly ["header", "query"]>;
+            readonly name: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly variable: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly literal: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
     }>, import("effect/Schema").Struct<{
         readonly kind: import("effect/Schema").Literal<"oauth2">;
         readonly slug: import("effect/Schema").String;
@@ -106,25 +122,42 @@ export declare const GraphqlClient: import("effect/unstable/reactivity/AtomHttpA
     slug: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"apiKey">;
-        readonly slug: import("effect/Schema").String;
-        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
-        readonly name: import("effect/Schema").String;
-        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"none">;
     }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly kind: import("effect/Schema").Literal<"oauth2">;
-        readonly slug: import("effect/Schema").String;
         readonly header: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"apiKey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
+        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
     }>]>>;
     readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["merge", "replace"]>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literal<"apiKey">;
         readonly slug: import("effect/Schema").String;
-        readonly in: import("effect/Schema").Literals<readonly ["header", "query"]>;
-        readonly name: import("effect/Schema").String;
-        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"none">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").Literal<"apikey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly placements: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly carrier: import("effect/Schema").Literals<readonly ["header", "query"]>;
+            readonly name: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly variable: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly literal: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
     }>, import("effect/Schema").Struct<{
         readonly kind: import("effect/Schema").Literal<"oauth2">;
         readonly slug: import("effect/Schema").String;

package/dist/react/defaults.d.ts

@@ -1,15 +1,4 @@
 import type { ConnectionName, Owner } from "@executor-js/sdk/shared";
-/** The slug of the apiKey auth template the add flow declares + targets. */
-export declare const GRAPHQL_APIKEY_TEMPLATE = "apiKey";
-/** Build the apiKey auth template the integration stores. The connection's
- *  value is written to `headerName` at invoke time (no prefix — the user pastes
- *  the full header value, e.g. `Bearer ghp_…`). */
-export declare const graphqlApiKeyAuthTemplate: (headerName: string) => {
-    readonly kind: "apiKey";
-    readonly slug: string;
-    readonly in: "header";
-    readonly name: string;
-};
 /** Deterministic connection name for a GraphQL integration + owner. Keeps a
  *  single owner-scoped credential per integration so re-adding overwrites
  *  rather than accumulating duplicates. */

package/dist/sdk/index.d.ts

@@ -4,4 +4,7 @@ export { invoke, invokeWithLayer } from "./invoke";
 export { describeGraphqlAuthMethods, graphqlPlugin, type GraphqlPluginExtension, type GraphqlPluginOptions, type GraphqlAddIntegrationInput, type GraphqlConfigureInput, type GraphqlConfigureAuthInput, } from "./plugin";
 export { makeDefaultGraphqlStore, type GraphqlStore, type StoredOperation } from "./store";
 export { GraphqlIntrospectionError, GraphqlExtractionError, GraphqlInvocationError, GraphqlAuthRequiredError, } from "./errors";
-export { ApiKeyAuthTemplate, AuthTemplate, decodeGraphqlIntegrationConfig, decodeGraphqlIntegrationConfigOption, ExtractedField, ExtractionResult, GraphqlArgument, GraphqlIntegrationConfig, GraphqlOperationKind, InvocationResult, OAuthAuthTemplate, OperationBinding, type ApiKeyAuthTemplate as ApiKeyAuthTemplateType, } from "./types";
+export { decodeGraphqlIntegrationConfig, decodeGraphqlIntegrationConfigOption, ExtractedField, ExtractionResult, GraphqlArgument, GraphqlAuthMethod, GraphqlAuthMethodInput, GraphqlIntegrationConfig, GraphqlOAuthMethod, GraphqlOperationKind, InvocationResult, normalizeGraphqlAuthMethods, OperationBinding, } from "./types";
+export { migrateGraphqlAuthConfig } from "./migrate-config";
+export { graphqlIntrospectionBlobDataMigration } from "./introspection-blob-migration";
+export { variable, type ApiKeyAuthTemplate } from "@executor-js/sdk/http-auth";

package/dist/sdk/introspection-blob-migration.d.ts

@@ -0,0 +1,7 @@
+import { Effect } from "effect";
+import { type SqliteDataMigrationClient } from "@executor-js/sdk/core";
+/** Registry entry for the boot-time data-migration ledger. */
+export declare const graphqlIntrospectionBlobDataMigration: {
+    name: string;
+    run: (client: SqliteDataMigrationClient) => Effect.Effect<void, import("@executor-js/sdk/core").DataMigrationError, never>;
+};

package/dist/sdk/migrate-config.d.ts

@@ -0,0 +1,6 @@
+/** Rewrite a stored GraphQL integration config blob into the canonical shape.
+ *  Returns the rewritten config, or `null` when no rewrite is needed (already
+ *  canonical, or not this plugin's shape at all). Throws nothing: an
+ *  unmigratable blob also returns `null` and stays untouched. Idempotent —
+ *  feeding the output back returns `null`. */
+export declare const migrateGraphqlAuthConfig: (config: unknown) => unknown | null;

package/dist/sdk/plugin.d.ts

@@ -4,7 +4,7 @@ import { HttpClient } from "effect/unstable/http";
 import { IntegrationAlreadyExistsError, type AuthMethodDescriptor, type IntegrationRecord, type PluginCtx, type StorageFailure } from "@executor-js/sdk/core";
 import { GraphqlIntrospectionError } from "./errors";
 import { type GraphqlStore } from "./store";
-import { AuthTemplate, GraphqlIntegrationConfig } from "./types";
+import { GraphqlIntegrationConfig, type GraphqlAuthMethod } from "./types";
 /** Register a GraphQL integration in the catalog. `endpoint` is the GraphQL URL;
  *  `slug` (defaulted from the endpoint) is the catalog id; `introspectionJson`
  *  supplies the schema when the endpoint disables live introspection; `headers`
@@ -19,16 +19,25 @@ declare const GraphqlAddIntegrationInputSchema: Schema.Struct<{
     readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
     readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
     readonly authenticationTemplate: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"apiKey">;
-        readonly slug: Schema.String;
-        readonly in: Schema.Literals<readonly ["header", "query"]>;
-        readonly name: Schema.String;
-        readonly prefix: Schema.optional<Schema.String>;
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"none">;
     }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
         readonly kind: Schema.Literal<"oauth2">;
-        readonly slug: Schema.String;
         readonly header: Schema.optional<Schema.String>;
         readonly prefix: Schema.optional<Schema.String>;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"apiKey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
     }>]>>>;
 }>;
 export type GraphqlAddIntegrationInput = typeof GraphqlAddIntegrationInputSchema.Type;
@@ -38,36 +47,54 @@ declare const GraphqlConfigureInputSchema: Schema.Struct<{
     readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
     readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
     readonly authenticationTemplate: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"apiKey">;
-        readonly slug: Schema.String;
-        readonly in: Schema.Literals<readonly ["header", "query"]>;
-        readonly name: Schema.String;
-        readonly prefix: Schema.optional<Schema.String>;
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"none">;
     }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
         readonly kind: Schema.Literal<"oauth2">;
-        readonly slug: Schema.String;
         readonly header: Schema.optional<Schema.String>;
         readonly prefix: Schema.optional<Schema.String>;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"apiKey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
     }>]>>>;
 }>;
 export type GraphqlConfigureInput = typeof GraphqlConfigureInputSchema.Type;
 /** Input for the custom-method-create flow (HTTP `POST /graphql/integrations/
  *  :slug/config`). Unlike `configure` (which REPLACES the whole config for the
- *  generic repair path), `configureAuth` MERGE-APPENDS these templates onto the
+ *  generic repair path), `configureAuth` MERGE-APPENDS these methods onto the
  *  integration's existing `authenticationTemplate`, mirroring OpenAPI's
  *  `configure`. */
 declare const GraphqlConfigureAuthInputSchema: Schema.Struct<{
     readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"apiKey">;
-        readonly slug: Schema.String;
-        readonly in: Schema.Literals<readonly ["header", "query"]>;
-        readonly name: Schema.String;
-        readonly prefix: Schema.optional<Schema.String>;
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"none">;
     }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
         readonly kind: Schema.Literal<"oauth2">;
-        readonly slug: Schema.String;
         readonly header: Schema.optional<Schema.String>;
         readonly prefix: Schema.optional<Schema.String>;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"apiKey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
     }>]>>;
     readonly mode: Schema.optional<Schema.Literals<readonly ["merge", "replace"]>>;
 }>;
@@ -88,7 +115,7 @@ declare const makeGraphqlExtension: (ctx: PluginCtx<GraphqlStore>) => {
     /** Read the integration's decoded config (auth templates surfaced). */
     getConfig: (slug: string) => Effect.Effect<GraphqlIntegrationConfig | null, StorageFailure>;
     /** Merge-append custom auth methods (custom-method-create flow). */
-    configureAuth: (slug: string, input: GraphqlConfigureAuthInput) => Effect.Effect<readonly AuthTemplate[], StorageFailure>;
+    configureAuth: (slug: string, input: GraphqlConfigureAuthInput) => Effect.Effect<readonly GraphqlAuthMethod[], StorageFailure>;
     removeIntegration: (slug: string) => Effect.Effect<void, StorageFailure, never>;
     configure: (slug: string, input: GraphqlConfigureInput) => Effect.Effect<void, StorageFailure, never>;
 };
@@ -108,7 +135,7 @@ export declare const graphqlPlugin: import("@executor-js/sdk/core").ConfiguredPl
     /** Read the integration's decoded config (auth templates surfaced). */
     getConfig: (slug: string) => Effect.Effect<GraphqlIntegrationConfig | null, StorageFailure>;
     /** Merge-append custom auth methods (custom-method-create flow). */
-    configureAuth: (slug: string, input: GraphqlConfigureAuthInput) => Effect.Effect<readonly AuthTemplate[], StorageFailure>;
+    configureAuth: (slug: string, input: GraphqlConfigureAuthInput) => Effect.Effect<readonly GraphqlAuthMethod[], StorageFailure>;
     removeIntegration: (slug: string) => Effect.Effect<void, StorageFailure, never>;
     configure: (slug: string, input: GraphqlConfigureInput) => Effect.Effect<void, StorageFailure, never>;
 }, GraphqlStore, GraphqlPluginOptions, undefined, Layer.Layer<unknown, never, never>, import("effect/unstable/httpapi/HttpApiGroup").Any>;

package/dist/sdk/store.d.ts

@@ -8,11 +8,21 @@ export interface StoredOperation {
     readonly integration: string;
     readonly binding: OperationBinding;
 }
+/** Blob key for an introspection snapshot's content hash. Content-addressed
+ *  so re-puts are idempotent and identical schemas share one blob per
+ *  partition. */
+export declare const introspectionBlobKey: (introspectionHash: string) => string;
 export interface GraphqlStore {
     /** Replace the stored operation bindings for an integration. */
     readonly replaceOperations: (integration: string, operations: readonly StoredOperation[]) => Effect.Effect<void, StorageFailure>;
     readonly getOperation: (integration: string, toolName: string) => Effect.Effect<StoredOperation | null, StorageFailure>;
     readonly listOperations: (integration: string) => Effect.Effect<readonly StoredOperation[], StorageFailure>;
     readonly removeOperations: (integration: string) => Effect.Effect<void, StorageFailure>;
+    /** Persist an introspection JSON snapshot under its content hash. Org-owned
+     *  and content-addressed; never removed on integration removal because
+     *  another integration in the tenant may share the hash. */
+    readonly putIntrospection: (introspectionHash: string, introspectionJson: string) => Effect.Effect<void, StorageFailure>;
+    /** Load an introspection snapshot by content hash; null when absent. */
+    readonly getIntrospection: (introspectionHash: string) => Effect.Effect<string | null, StorageFailure>;
 }
-export declare const makeDefaultGraphqlStore: ({ pluginStorage }: StorageDeps) => GraphqlStore;
+export declare const makeDefaultGraphqlStore: ({ pluginStorage, blobs }: StorageDeps) => GraphqlStore;