@executor-js/plugin-mcp 1.5.6 → 1.5.8

package/dist/McpAccountsPanel-QBCSCJE7.js

@@ -0,0 +1,83 @@
+import {
+  authMethodsFromConfig,
+  configureMcpAuth,
+  mcpAuthMethodInputsFromPlacements,
+  mcpServerAtom,
+  mcpWireAuthInput
+} from "./chunk-3AOD4VAW.js";
+import "./chunk-3H5Y7JCQ.js";
+
+// src/react/McpAccountsPanel.tsx
+import { useCallback, useMemo } from "react";
+import { useAtomSet, useAtomValue } from "@effect/atom-react";
+import * as AsyncResult from "effect/unstable/reactivity/AsyncResult";
+import * as Exit from "effect/Exit";
+import { IntegrationSlug } from "@executor-js/sdk/shared";
+import { AccountsSection } from "@executor-js/react/components/accounts-section";
+import {
+  useCustomMethodActions
+} from "@executor-js/react/lib/custom-auth-methods";
+import { integrationWriteKeys } from "@executor-js/react/api/reactivity-keys";
+import { jsx } from "react/jsx-runtime";
+function McpAccountsPanel(props) {
+  const { sourceId, integrationName, accountHandoff } = props;
+  const slug = IntegrationSlug.make(sourceId);
+  const serverResult = useAtomValue(mcpServerAtom(slug));
+  const doConfigureAuth = useAtomSet(configureMcpAuth, { mode: "promiseExit" });
+  const server = AsyncResult.isSuccess(serverResult) ? serverResult.value : null;
+  const config = server?.config ?? null;
+  const remote = config !== null && config.transport === "remote" ? config : null;
+  const existingTemplate = useMemo(
+    () => remote?.authenticationTemplate ?? [],
+    [remote]
+  );
+  const methods = useMemo(
+    () => remote ? authMethodsFromConfig(existingTemplate, remote.endpoint) : [],
+    [existingTemplate, remote]
+  );
+  const configure = useCallback(
+    async (input) => {
+      const exit = await doConfigureAuth({
+        params: { slug },
+        payload: {
+          authenticationTemplate: input.authenticationTemplate.map(mcpWireAuthInput),
+          ...input.mode ? { mode: input.mode } : {}
+        },
+        reactivityKeys: integrationWriteKeys
+      });
+      return Exit.map(exit, (result) => result.authenticationTemplate);
+    },
+    [doConfigureAuth, slug]
+  );
+  const codec = useMemo(
+    () => ({
+      toAuthMethods: (templates) => authMethodsFromConfig(templates, remote?.endpoint ?? ""),
+      // MCP custom methods are header credentials; the inputs omit slugs and
+      // the backend merge backfills `custom_<id>`.
+      templatesFromPlacements: (placements) => mcpAuthMethodInputsFromPlacements(placements),
+      slugOf: (template) => template.slug
+    }),
+    [remote?.endpoint]
+  );
+  const { createCustomMethod, removeCustomMethod } = useCustomMethodActions({
+    existing: existingTemplate,
+    codec,
+    configure
+  });
+  const canConfigureAuth = remote !== null;
+  return /* @__PURE__ */ jsx("div", { className: "mx-auto max-w-3xl space-y-8 px-6 py-8", children: /* @__PURE__ */ jsx(
+    AccountsSection,
+    {
+      integration: slug,
+      integrationName,
+      methods,
+      accountHandoff,
+      createCustomMethod: canConfigureAuth ? createCustomMethod : void 0,
+      removeCustomMethod: canConfigureAuth ? removeCustomMethod : void 0
+    }
+  ) });
+}
+export {
+  McpAccountsPanel as default
+};
+//# sourceMappingURL=McpAccountsPanel-QBCSCJE7.js.map

package/dist/McpAccountsPanel-QBCSCJE7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react/McpAccountsPanel.tsx"],"sourcesContent":["import { useCallback, useMemo } from \"react\";\nimport { useAtomSet, useAtomValue } from \"@effect/atom-react\";\nimport * as AsyncResult from \"effect/unstable/reactivity/AsyncResult\";\nimport * as Exit from \"effect/Exit\";\n\nimport { IntegrationSlug } from \"@executor-js/sdk/shared\";\nimport type { IntegrationAccountHandoff } from \"@executor-js/sdk/client\";\nimport { AccountsSection } from \"@executor-js/react/components/accounts-section\";\nimport type { AuthMethod, Placement } from \"@executor-js/react/lib/auth-placements\";\nimport {\n  useCustomMethodActions,\n  type AuthMethodsCodec,\n  type ConfigureAuthMethods,\n} from \"@executor-js/react/lib/custom-auth-methods\";\nimport { integrationWriteKeys } from \"@executor-js/react/api/reactivity-keys\";\n\nimport { configureMcpAuth, mcpServerAtom } from \"./atoms\";\nimport {\n  authMethodsFromConfig,\n  mcpAuthMethodInputsFromPlacements,\n  mcpWireAuthInput,\n} from \"./auth-method-config\";\nimport type { McpAuthMethod } from \"../sdk/types\";\n\n// ---------------------------------------------------------------------------\n// MCP Accounts hub — fills the generic detail page's `accounts` slot.\n//\n// Reads the integration's declared `authenticationTemplate` (via `getServer`),\n// converts it to generic `AuthMethod[]`, and composes the generic\n// `AccountsSection` — whose Add-account offers those methods plus a \"+ Custom\n// method\" row. The custom-method create/remove is the shared skeleton\n// (`useCustomMethodActions`) parameterized by the MCP codec and the\n// merge-append `configureAuth` endpoint, so adding an API key method never\n// displaces a declared OAuth method. Stdio servers have no remote credential\n// to configure — no methods, no custom-method affordance.\n// ---------------------------------------------------------------------------\n\nexport default function McpAccountsPanel(props: {\n  readonly sourceId: string;\n  readonly integrationName: string;\n  readonly accountHandoff?: IntegrationAccountHandoff | null;\n}) {\n  const { sourceId, integrationName, accountHandoff } = props;\n  const slug = IntegrationSlug.make(sourceId);\n  const serverResult = useAtomValue(mcpServerAtom(slug));\n  const doConfigureAuth = useAtomSet(configureMcpAuth, { mode: \"promiseExit\" });\n\n  const server = AsyncResult.isSuccess(serverResult) ? serverResult.value : null;\n  const config = server?.config ?? null;\n  const remote = config !== null && config.transport === \"remote\" ? config : null;\n\n  const existingTemplate = useMemo<readonly McpAuthMethod[]>(\n    () => remote?.authenticationTemplate ?? [],\n    [remote],\n  );\n\n  const methods = useMemo<readonly AuthMethod[]>(\n    () => (remote ? authMethodsFromConfig(existingTemplate, remote.endpoint) : []),\n    [existingTemplate, remote],\n  );\n\n  const configure = useCallback<ConfigureAuthMethods<McpAuthMethod>>(\n    async (input) => {\n      const exit = await doConfigureAuth({\n        params: { slug },\n        payload: {\n          authenticationTemplate: input.authenticationTemplate.map(mcpWireAuthInput),\n          ...(input.mode ? { mode: input.mode } : {}),\n        },\n        reactivityKeys: integrationWriteKeys,\n      });\n      return Exit.map(exit, (result) => result.authenticationTemplate);\n    },\n    [doConfigureAuth, slug],\n  );\n\n  const codec = useMemo<AuthMethodsCodec<McpAuthMethod>>(\n    () => ({\n      toAuthMethods: (templates: readonly McpAuthMethod[]) =>\n        authMethodsFromConfig(templates, remote?.endpoint ?? \"\"),\n      // MCP custom methods are header credentials; the inputs omit slugs and\n      // the backend merge backfills `custom_<id>`.\n      templatesFromPlacements: (placements: readonly Placement[]) =>\n        mcpAuthMethodInputsFromPlacements(placements) as readonly McpAuthMethod[],\n      slugOf: (template: McpAuthMethod) => template.slug,\n    }),\n    [remote?.endpoint],\n  );\n\n  const { createCustomMethod, removeCustomMethod } = useCustomMethodActions({\n    existing: existingTemplate,\n    codec,\n    configure,\n  });\n\n  const canConfigureAuth = remote !== null;\n\n  return (\n    <div className=\"mx-auto max-w-3xl space-y-8 px-6 py-8\">\n      <AccountsSection\n        integration={slug}\n        integrationName={integrationName}\n        methods={methods}\n        accountHandoff={accountHandoff}\n        createCustomMethod={canConfigureAuth ? createCustomMethod : undefined}\n        removeCustomMethod={canConfigureAuth ? removeCustomMethod : undefined}\n      />\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,aAAa,eAAe;AACrC,SAAS,YAAY,oBAAoB;AACzC,YAAY,iBAAiB;AAC7B,YAAY,UAAU;AAEtB,SAAS,uBAAuB;AAEhC,SAAS,uBAAuB;AAEhC;AAAA,EACE;AAAA,OAGK;AACP,SAAS,4BAA4B;AAqF/B;AA9DS,SAAR,iBAAkC,OAItC;AACD,QAAM,EAAE,UAAU,iBAAiB,eAAe,IAAI;AACtD,QAAM,OAAO,gBAAgB,KAAK,QAAQ;AAC1C,QAAM,eAAe,aAAa,cAAc,IAAI,CAAC;AACrD,QAAM,kBAAkB,WAAW,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE5E,QAAM,SAAqB,sBAAU,YAAY,IAAI,aAAa,QAAQ;AAC1E,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,SAAS,WAAW,QAAQ,OAAO,cAAc,WAAW,SAAS;AAE3E,QAAM,mBAAmB;AAAA,IACvB,MAAM,QAAQ,0BAA0B,CAAC;AAAA,IACzC,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,UAAU;AAAA,IACd,MAAO,SAAS,sBAAsB,kBAAkB,OAAO,QAAQ,IAAI,CAAC;AAAA,IAC5E,CAAC,kBAAkB,MAAM;AAAA,EAC3B;AAEA,QAAM,YAAY;AAAA,IAChB,OAAO,UAAU;AACf,YAAM,OAAO,MAAM,gBAAgB;AAAA,QACjC,QAAQ,EAAE,KAAK;AAAA,QACf,SAAS;AAAA,UACP,wBAAwB,MAAM,uBAAuB,IAAI,gBAAgB;AAAA,UACzE,GAAI,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,QAC3C;AAAA,QACA,gBAAgB;AAAA,MAClB,CAAC;AACD,aAAY,SAAI,MAAM,CAAC,WAAW,OAAO,sBAAsB;AAAA,IACjE;AAAA,IACA,CAAC,iBAAiB,IAAI;AAAA,EACxB;AAEA,QAAM,QAAQ;AAAA,IACZ,OAAO;AAAA,MACL,eAAe,CAAC,cACd,sBAAsB,WAAW,QAAQ,YAAY,EAAE;AAAA;AAAA;AAAA,MAGzD,yBAAyB,CAAC,eACxB,kCAAkC,UAAU;AAAA,MAC9C,QAAQ,CAAC,aAA4B,SAAS;AAAA,IAChD;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,EACnB;AAEA,QAAM,EAAE,oBAAoB,mBAAmB,IAAI,uBAAuB;AAAA,IACxE,UAAU;AAAA,IACV;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,WAAW;AAEpC,SACE,oBAAC,SAAI,WAAU,yCACb;AAAA,IAAC;AAAA;AAAA,MACC,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA,oBAAoB,mBAAmB,qBAAqB;AAAA,MAC5D,oBAAoB,mBAAmB,qBAAqB;AAAA;AAAA,EAC9D,GACF;AAEJ;","names":[]}

package/dist/api/group.d.ts

@@ -23,6 +23,28 @@ export declare const McpGroup: HttpApiGroup.HttpApiGroup<"mcp", HttpApiEndpoint.
     readonly slug: Schema.optional<Schema.String>;
     readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
     readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    /** Declared auth methods a connection can be applied through. */
+    readonly authenticationTemplate: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"none">;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"oauth2">;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"apiKey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+    }>]>>>;
+    /** Single-method shorthand (legacy callers); ignored when
+     *  `authenticationTemplate` is present. */
     readonly auth: Schema.optional<Schema.Union<readonly [Schema.Struct<{
         readonly kind: Schema.Literal<"none">;
     }>, Schema.Struct<{
@@ -60,15 +82,24 @@ export declare const McpGroup: HttpApiGroup.HttpApiGroup<"mcp", HttpApiEndpoint.
         readonly remoteTransport: Schema.withConstructorDefault<Schema.optionalKey<Schema.Literals<readonly ["streamable-http", "sse", "auto"]>>>;
         readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
         readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
-        readonly auth: Schema.Union<readonly [Schema.Struct<{
+        readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly slug: Schema.String;
             readonly kind: Schema.Literal<"none">;
         }>, Schema.Struct<{
-            readonly kind: Schema.Literal<"header">;
-            readonly headerName: Schema.String;
-            readonly prefix: Schema.optional<Schema.String>;
+            readonly slug: Schema.String;
+            readonly kind: Schema.Literal<"apikey">;
+            readonly label: Schema.optional<Schema.String>;
+            readonly placements: Schema.$Array<Schema.Struct<{
+                readonly carrier: Schema.Literals<readonly ["header", "query"]>;
+                readonly name: Schema.String;
+                readonly prefix: Schema.optional<Schema.String>;
+                readonly variable: Schema.optional<Schema.String>;
+                readonly literal: Schema.optional<Schema.String>;
+            }>>;
         }>, Schema.Struct<{
+            readonly slug: Schema.String;
             readonly kind: Schema.Literal<"oauth2">;
-        }>]>;
+        }>]>>;
     }>, Schema.Struct<{
         readonly transport: Schema.Literal<"stdio">;
         readonly command: Schema.String;
@@ -85,15 +116,24 @@ export declare const McpGroup: HttpApiGroup.HttpApiGroup<"mcp", HttpApiEndpoint.
         readonly remoteTransport: Schema.withConstructorDefault<Schema.optionalKey<Schema.Literals<readonly ["streamable-http", "sse", "auto"]>>>;
         readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
         readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
-        readonly auth: Schema.Union<readonly [Schema.Struct<{
+        readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly slug: Schema.String;
             readonly kind: Schema.Literal<"none">;
         }>, Schema.Struct<{
-            readonly kind: Schema.Literal<"header">;
-            readonly headerName: Schema.String;
-            readonly prefix: Schema.optional<Schema.String>;
+            readonly slug: Schema.String;
+            readonly kind: Schema.Literal<"apikey">;
+            readonly label: Schema.optional<Schema.String>;
+            readonly placements: Schema.$Array<Schema.Struct<{
+                readonly carrier: Schema.Literals<readonly ["header", "query"]>;
+                readonly name: Schema.String;
+                readonly prefix: Schema.optional<Schema.String>;
+                readonly variable: Schema.optional<Schema.String>;
+                readonly literal: Schema.optional<Schema.String>;
+            }>>;
         }>, Schema.Struct<{
+            readonly slug: Schema.String;
             readonly kind: Schema.Literal<"oauth2">;
-        }>]>;
+        }>]>>;
     }>, Schema.Struct<{
         readonly transport: Schema.Literal<"stdio">;
         readonly command: Schema.String;
@@ -108,15 +148,24 @@ export declare const McpGroup: HttpApiGroup.HttpApiGroup<"mcp", HttpApiEndpoint.
         readonly remoteTransport: Schema.withConstructorDefault<Schema.optionalKey<Schema.Literals<readonly ["streamable-http", "sse", "auto"]>>>;
         readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
         readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
-        readonly auth: Schema.Union<readonly [Schema.Struct<{
+        readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly slug: Schema.String;
             readonly kind: Schema.Literal<"none">;
         }>, Schema.Struct<{
-            readonly kind: Schema.Literal<"header">;
-            readonly headerName: Schema.String;
-            readonly prefix: Schema.optional<Schema.String>;
+            readonly slug: Schema.String;
+            readonly kind: Schema.Literal<"apikey">;
+            readonly label: Schema.optional<Schema.String>;
+            readonly placements: Schema.$Array<Schema.Struct<{
+                readonly carrier: Schema.Literals<readonly ["header", "query"]>;
+                readonly name: Schema.String;
+                readonly prefix: Schema.optional<Schema.String>;
+                readonly variable: Schema.optional<Schema.String>;
+                readonly literal: Schema.optional<Schema.String>;
+            }>>;
         }>, Schema.Struct<{
+            readonly slug: Schema.String;
             readonly kind: Schema.Literal<"oauth2">;
-        }>]>;
+        }>]>>;
     }>, Schema.Struct<{
         readonly transport: Schema.Literal<"stdio">;
         readonly command: Schema.String;
@@ -124,4 +173,46 @@ export declare const McpGroup: HttpApiGroup.HttpApiGroup<"mcp", HttpApiEndpoint.
         readonly env: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
         readonly cwd: Schema.optional<Schema.String>;
     }>]>;
+}>>, HttpApiEndpoint.Json<typeof InternalError | typeof McpConnectionError | typeof McpToolDiscoveryError>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"configureAuth", "POST", "/mcp/servers/:slug/auth", HttpApiEndpoint.StringTree<Schema.Struct<{
+    slug: Schema.brand<Schema.String, "IntegrationSlug">;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<Schema.Struct<{
+    readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"none">;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly kind: Schema.Literal<"oauth2">;
+    }>, Schema.Struct<{
+        readonly slug: Schema.optional<Schema.String>;
+        readonly type: Schema.Literal<"apiKey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly type: Schema.Literal<"variable">;
+            readonly name: Schema.String;
+        }>]>>]>>>;
+    }>]>>;
+    readonly mode: Schema.optional<Schema.Literals<readonly ["merge", "replace"]>>;
+}>>, HttpApiEndpoint.StringTree<never>, HttpApiEndpoint.Json<Schema.Struct<{
+    readonly authenticationTemplate: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly slug: Schema.String;
+        readonly kind: Schema.Literal<"none">;
+    }>, Schema.Struct<{
+        readonly slug: Schema.String;
+        readonly kind: Schema.Literal<"apikey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly placements: Schema.$Array<Schema.Struct<{
+            readonly carrier: Schema.Literals<readonly ["header", "query"]>;
+            readonly name: Schema.String;
+            readonly prefix: Schema.optional<Schema.String>;
+            readonly variable: Schema.optional<Schema.String>;
+            readonly literal: Schema.optional<Schema.String>;
+        }>>;
+    }>, Schema.Struct<{
+        readonly slug: Schema.String;
+        readonly kind: Schema.Literal<"oauth2">;
+    }>]>>;
 }>>, HttpApiEndpoint.Json<typeof InternalError | typeof McpConnectionError | typeof McpToolDiscoveryError>, never, never>, false>;

package/dist/api/index.d.ts

@@ -37,6 +37,24 @@ export declare const mcpHttpPlugin: import("@executor-js/sdk/core").ConfiguredPl
     removeServer: (slug: string) => import("effect/Effect").Effect<void, import("@executor-js/sdk/core").StorageFailure, never>;
     getServer: (slug: string) => import("effect/Effect").Effect<import("@executor-js/sdk/core").IntegrationRecord | null, import("@executor-js/sdk/core").StorageFailure, never>;
     configureServer: (slug: string, config: import("../sdk").McpIntegrationConfig) => import("effect/Effect").Effect<void, import("@executor-js/sdk/core").StorageFailure, never>;
+    configureAuth: (slug: string, input: import("../sdk/plugin").McpConfigureAuthInput) => import("effect/Effect").Effect<readonly ({
+        readonly slug: string;
+        readonly kind: "apikey";
+        readonly placements: readonly {
+            readonly name: string;
+            readonly carrier: "header" | "query";
+            readonly variable?: string | undefined;
+            readonly prefix?: string | undefined;
+            readonly literal?: string | undefined;
+        }[];
+        readonly label?: string | undefined;
+    } | {
+        readonly slug: string;
+        readonly kind: "none";
+    } | {
+        readonly slug: string;
+        readonly kind: "oauth2";
+    })[], import("@executor-js/sdk/core").StorageFailure, never>;
 }, {}, McpPluginOptions, typeof McpExtensionService, import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").ApiGroup<"executor", "mcp">, never, import("effect/unstable/http/HttpRouter").Request<"Requires", McpExtensionService>>, import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"mcp", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"probeEndpoint", "POST", "/mcp/probe", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly endpoint: import("effect/Schema").String;
     readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
@@ -58,6 +76,25 @@ export declare const mcpHttpPlugin: import("@executor-js/sdk/core").ConfiguredPl
     readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
     readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly authenticationTemplate: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"none">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"oauth2">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"apiKey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
+        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
+    }>]>>>;
     readonly auth: import("effect/Schema").optional<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
         readonly kind: import("effect/Schema").Literal<"none">;
     }>, import("effect/Schema").Struct<{
@@ -95,15 +132,24 @@ export declare const mcpHttpPlugin: import("@executor-js/sdk/core").ConfiguredPl
         readonly remoteTransport: import("effect/Schema").withConstructorDefault<import("effect/Schema").optionalKey<import("effect/Schema").Literals<readonly ["streamable-http", "sse", "auto"]>>>;
         readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
         readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-        readonly auth: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly slug: import("effect/Schema").String;
             readonly kind: import("effect/Schema").Literal<"none">;
         }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"header">;
-            readonly headerName: import("effect/Schema").String;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly slug: import("effect/Schema").String;
+            readonly kind: import("effect/Schema").Literal<"apikey">;
+            readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly placements: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+                readonly carrier: import("effect/Schema").Literals<readonly ["header", "query"]>;
+                readonly name: import("effect/Schema").String;
+                readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly variable: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly literal: import("effect/Schema").optional<import("effect/Schema").String>;
+            }>>;
         }>, import("effect/Schema").Struct<{
+            readonly slug: import("effect/Schema").String;
             readonly kind: import("effect/Schema").Literal<"oauth2">;
-        }>]>;
+        }>]>>;
     }>, import("effect/Schema").Struct<{
         readonly transport: import("effect/Schema").Literal<"stdio">;
         readonly command: import("effect/Schema").String;
@@ -120,15 +166,24 @@ export declare const mcpHttpPlugin: import("@executor-js/sdk/core").ConfiguredPl
         readonly remoteTransport: import("effect/Schema").withConstructorDefault<import("effect/Schema").optionalKey<import("effect/Schema").Literals<readonly ["streamable-http", "sse", "auto"]>>>;
         readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
         readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-        readonly auth: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly slug: import("effect/Schema").String;
             readonly kind: import("effect/Schema").Literal<"none">;
         }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"header">;
-            readonly headerName: import("effect/Schema").String;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly slug: import("effect/Schema").String;
+            readonly kind: import("effect/Schema").Literal<"apikey">;
+            readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly placements: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+                readonly carrier: import("effect/Schema").Literals<readonly ["header", "query"]>;
+                readonly name: import("effect/Schema").String;
+                readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly variable: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly literal: import("effect/Schema").optional<import("effect/Schema").String>;
+            }>>;
         }>, import("effect/Schema").Struct<{
+            readonly slug: import("effect/Schema").String;
             readonly kind: import("effect/Schema").Literal<"oauth2">;
-        }>]>;
+        }>]>>;
     }>, import("effect/Schema").Struct<{
         readonly transport: import("effect/Schema").Literal<"stdio">;
         readonly command: import("effect/Schema").String;
@@ -143,15 +198,24 @@ export declare const mcpHttpPlugin: import("@executor-js/sdk/core").ConfiguredPl
         readonly remoteTransport: import("effect/Schema").withConstructorDefault<import("effect/Schema").optionalKey<import("effect/Schema").Literals<readonly ["streamable-http", "sse", "auto"]>>>;
         readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
         readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-        readonly auth: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly slug: import("effect/Schema").String;
             readonly kind: import("effect/Schema").Literal<"none">;
         }>, import("effect/Schema").Struct<{
-            readonly kind: import("effect/Schema").Literal<"header">;
-            readonly headerName: import("effect/Schema").String;
-            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly slug: import("effect/Schema").String;
+            readonly kind: import("effect/Schema").Literal<"apikey">;
+            readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly placements: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+                readonly carrier: import("effect/Schema").Literals<readonly ["header", "query"]>;
+                readonly name: import("effect/Schema").String;
+                readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly variable: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly literal: import("effect/Schema").optional<import("effect/Schema").String>;
+            }>>;
         }>, import("effect/Schema").Struct<{
+            readonly slug: import("effect/Schema").String;
             readonly kind: import("effect/Schema").Literal<"oauth2">;
-        }>]>;
+        }>]>>;
     }>, import("effect/Schema").Struct<{
         readonly transport: import("effect/Schema").Literal<"stdio">;
         readonly command: import("effect/Schema").String;
@@ -159,4 +223,46 @@ export declare const mcpHttpPlugin: import("@executor-js/sdk/core").ConfiguredPl
         readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
         readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
     }>]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").McpConnectionError | typeof import("../sdk").McpToolDiscoveryError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"configureAuth", "POST", "/mcp/servers/:slug/auth", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    slug: import("effect/Schema").brand<import("effect/Schema").String, "IntegrationSlug">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"none">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly kind: import("effect/Schema").Literal<"oauth2">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literal<"apiKey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
+        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"variable">;
+            readonly name: import("effect/Schema").String;
+        }>]>>]>>>;
+    }>]>>;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["merge", "replace"]>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly authenticationTemplate: import("effect/Schema").$Array<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").Literal<"none">;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").Literal<"apikey">;
+        readonly label: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly placements: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly carrier: import("effect/Schema").Literals<readonly ["header", "query"]>;
+            readonly name: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly variable: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly literal: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+    }>, import("effect/Schema").Struct<{
+        readonly slug: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").Literal<"oauth2">;
+    }>]>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").McpConnectionError | typeof import("../sdk").McpToolDiscoveryError>, never, never>, false>>;

package/dist/{chunk-N4EAF5CA.js → chunk-3AOD4VAW.js}

@@ -1,9 +1,11 @@
 import {
-  McpAuthTemplate,
+  McpAuthMethod,
+  McpAuthMethodInput,
+  McpAuthShorthand,
   McpConnectionError,
   McpIntegrationConfig,
   McpToolDiscoveryError
-} from "./chunk-6OEQZ72N.js";
+} from "./chunk-3H5Y7JCQ.js";
 
 // src/react/atoms.ts
 import { ReactivityKey } from "@executor-js/react/api/reactivity-keys";
@@ -33,7 +35,11 @@ var AddRemoteServerPayload = Schema.Struct({
   slug: Schema.optional(Schema.String),
   queryParams: Schema.optional(StringMap),
   headers: Schema.optional(StringMap),
-  auth: Schema.optional(McpAuthTemplate)
+  /** Declared auth methods a connection can be applied through. */
+  authenticationTemplate: Schema.optional(Schema.Array(McpAuthMethodInput)),
+  /** Single-method shorthand (legacy callers); ignored when
+   *  `authenticationTemplate` is present. */
+  auth: Schema.optional(McpAuthShorthand)
 });
 var AddStdioServerPayload = Schema.Struct({
   transport: Schema.Literal("stdio"),
@@ -72,6 +78,13 @@ var ConfigureServerPayload = Schema.Struct({
 var ConfigureServerResponse = Schema.Struct({
   config: McpIntegrationConfig
 });
+var ConfigureAuthPayload = Schema.Struct({
+  authenticationTemplate: Schema.Array(McpAuthMethodInput),
+  mode: Schema.optional(Schema.Literals(["merge", "replace"]))
+});
+var ConfigureAuthResponse = Schema.Struct({
+  authenticationTemplate: Schema.Array(McpAuthMethod)
+});
 var GetServerResponse = Schema.NullOr(
   Schema.Struct({
     slug: IntegrationSlug,
@@ -118,6 +131,13 @@ var McpGroup = HttpApiGroup.make("mcp").add(
     success: ConfigureServerResponse,
     error: [InternalError, McpConnectionError, McpToolDiscoveryError]
   })
+).add(
+  HttpApiEndpoint.post("configureAuth", "/mcp/servers/:slug/auth", {
+    params: SlugParams,
+    payload: ConfigureAuthPayload,
+    success: ConfigureAuthResponse,
+    error: [InternalError, McpConnectionError, McpToolDiscoveryError]
+  })
 );
 
 // src/react/client.ts
@@ -136,11 +156,60 @@ var probeMcpEndpoint = McpClient.mutation("mcp", "probeEndpoint");
 var addMcpServer = McpClient.mutation("mcp", "addServer");
 var removeMcpServer = McpClient.mutation("mcp", "removeServer");
 var configureMcpServer = McpClient.mutation("mcp", "configureServer");
+var configureMcpAuth = McpClient.mutation("mcp", "configureAuth");
+
+// src/react/auth-method-config.ts
+import { AuthTemplateSlug } from "@executor-js/sdk/shared";
+import {
+  authMethodFromSharedTemplate,
+  editorValueFromSharedMethod,
+  sharedMethodInputFromEditorValue,
+  wirePlacementsFromEditor
+} from "@executor-js/react/lib/shared-auth-method-codec";
+import { wireAuthInputFromShared } from "@executor-js/react/lib/shared-auth-method-codec";
+var mcpWireAuthInput = (method) => wireAuthInputFromShared(method);
+var oauthAuthMethod = (slug, endpoint) => ({
+  id: slug,
+  label: "OAuth",
+  kind: "oauth",
+  source: slug.startsWith("custom_") ? "custom" : "spec",
+  template: AuthTemplateSlug.make(slug),
+  placements: [],
+  oauth: { discoveryUrl: endpoint, supportsDynamicRegistration: true }
+});
+function mcpAuthMethodInputFromEditorValue(value) {
+  if (value.kind === "oauth") return { kind: "oauth2" };
+  return sharedMethodInputFromEditorValue(value) ?? {
+    kind: "none"
+  };
+}
+function editorValueFromMcpAuthMethod(method) {
+  if (method.kind === "oauth2") {
+    return { kind: "oauth", authorizationUrl: "", tokenUrl: "", scopes: [] };
+  }
+  return editorValueFromSharedMethod(method);
+}
+function authMethodsFromConfig(methods, endpoint) {
+  return methods.map((method) => {
+    if (method.kind === "oauth2") return oauthAuthMethod(method.slug, endpoint);
+    return authMethodFromSharedTemplate(method);
+  });
+}
+function mcpAuthMethodInputsFromPlacements(placements) {
+  const wire = wirePlacementsFromEditor(placements);
+  if (wire.length === 0) return [];
+  return [{ kind: "apikey", placements: wire }];
+}
 
 export {
   mcpServerAtom,
   probeMcpEndpoint,
   addMcpServer,
-  configureMcpServer
+  configureMcpAuth,
+  mcpWireAuthInput,
+  mcpAuthMethodInputFromEditorValue,
+  editorValueFromMcpAuthMethod,
+  authMethodsFromConfig,
+  mcpAuthMethodInputsFromPlacements
 };
-//# sourceMappingURL=chunk-N4EAF5CA.js.map
+//# sourceMappingURL=chunk-3AOD4VAW.js.map

package/dist/chunk-3AOD4VAW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react/atoms.ts","../src/react/client.ts","../src/api/group.ts","../src/react/auth-method-config.ts"],"sourcesContent":["import type { IntegrationSlug } from \"@executor-js/sdk/shared\";\nimport { ReactivityKey } from \"@executor-js/react/api/reactivity-keys\";\nimport { McpClient } from \"./client\";\n\n// ---------------------------------------------------------------------------\n// Query atoms (v2)\n//\n// An MCP server is an integration. `getServer` reads the integration row's\n// opaque config (transport, endpoint, auth template). Credentials are separate\n// owner-scoped connections, created through the core connections / oauth surface\n// — there is no per-server credential binding to read here anymore.\n// ---------------------------------------------------------------------------\n\nexport const mcpServerAtom = (slug: IntegrationSlug) =>\n  McpClient.query(\"mcp\", \"getServer\", {\n    params: { slug },\n    timeToLive: \"15 seconds\",\n    reactivityKeys: [ReactivityKey.integrations, ReactivityKey.tools],\n  });\n\n// ---------------------------------------------------------------------------\n// Mutation atoms\n// ---------------------------------------------------------------------------\n\nexport const probeMcpEndpoint = McpClient.mutation(\"mcp\", \"probeEndpoint\");\nexport const addMcpServer = McpClient.mutation(\"mcp\", \"addServer\");\nexport const removeMcpServer = McpClient.mutation(\"mcp\", \"removeServer\");\nexport const configureMcpServer = McpClient.mutation(\"mcp\", \"configureServer\");\n// Merge-append auth methods onto an integration's `authenticationTemplate`.\nexport const configureMcpAuth = McpClient.mutation(\"mcp\", \"configureAuth\");\n","import { createPluginAtomClient } from \"@executor-js/sdk/client\";\nimport {\n  getExecutorApiBaseUrl,\n  getExecutorServerAuthorizationHeader,\n} from \"@executor-js/react/api/server-connection\";\nimport { McpGroup } from \"../api/group\";\n\nexport const McpClient = createPluginAtomClient(McpGroup, {\n  baseUrl: getExecutorApiBaseUrl,\n  authorizationHeader: getExecutorServerAuthorizationHeader,\n});\n","import { HttpApiEndpoint, HttpApiGroup } from \"effect/unstable/httpapi\";\nimport { Schema } from \"effect\";\nimport {\n  IntegrationSlug,\n  InternalError,\n  IntegrationAlreadyExistsError,\n} from \"@executor-js/sdk/shared\";\n\nimport { McpConnectionError, McpToolDiscoveryError } from \"../sdk/errors\";\nimport {\n  McpAuthMethod,\n  McpAuthMethodInput,\n  McpAuthShorthand,\n  McpIntegrationConfig,\n} from \"../sdk/types\";\n\n// ---------------------------------------------------------------------------\n// Params\n// ---------------------------------------------------------------------------\n\nconst SlugParams = { slug: IntegrationSlug };\n\nconst StringMap = Schema.Record(Schema.String, Schema.String);\n\n// ---------------------------------------------------------------------------\n// Add server — discriminated union on transport. An MCP server is registered\n// as an integration; connections (credentials) are created separately through\n// the core connections / oauth surface.\n// ---------------------------------------------------------------------------\n\nconst AddRemoteServerPayload = Schema.Struct({\n  transport: Schema.optional(Schema.Literal(\"remote\")),\n  name: Schema.String,\n  endpoint: Schema.String,\n  remoteTransport: Schema.optional(Schema.Literals([\"streamable-http\", \"sse\", \"auto\"])),\n  slug: Schema.optional(Schema.String),\n  queryParams: Schema.optional(StringMap),\n  headers: Schema.optional(StringMap),\n  /** Declared auth methods a connection can be applied through. */\n  authenticationTemplate: Schema.optional(Schema.Array(McpAuthMethodInput)),\n  /** Single-method shorthand (legacy callers); ignored when\n   *  `authenticationTemplate` is present. */\n  auth: Schema.optional(McpAuthShorthand),\n});\n\nconst AddStdioServerPayload = Schema.Struct({\n  transport: Schema.Literal(\"stdio\"),\n  name: Schema.String,\n  command: Schema.String,\n  args: Schema.optional(Schema.Array(Schema.String)),\n  env: Schema.optional(StringMap),\n  cwd: Schema.optional(Schema.String),\n  slug: Schema.optional(Schema.String),\n});\n\nconst AddServerPayload = Schema.Union([AddRemoteServerPayload, AddStdioServerPayload]);\n\nconst ProbeEndpointPayload = Schema.Struct({\n  endpoint: Schema.String,\n  headers: Schema.optional(StringMap),\n  queryParams: Schema.optional(StringMap),\n});\n\nconst ProbeEndpointResponse = Schema.Struct({\n  connected: Schema.Boolean,\n  requiresAuthentication: Schema.Boolean,\n  requiresOAuth: Schema.Boolean,\n  supportsDynamicRegistration: Schema.Boolean,\n  name: Schema.String,\n  slug: Schema.String,\n  toolCount: Schema.NullOr(Schema.Number),\n  serverName: Schema.NullOr(Schema.String),\n});\n\n// ---------------------------------------------------------------------------\n// Responses\n// ---------------------------------------------------------------------------\n\nconst AddServerResponse = Schema.Struct({\n  slug: Schema.String,\n});\n\nconst RemoveServerResponse = Schema.Struct({\n  removed: Schema.Boolean,\n});\n\nconst ConfigureServerPayload = Schema.Struct({\n  config: McpIntegrationConfig,\n});\n\nconst ConfigureServerResponse = Schema.Struct({\n  config: McpIntegrationConfig,\n});\n\n// The configureAuth payload/response — custom auth methods to merge-append\n// onto the integration's `authenticationTemplate` (or `replace` the set).\n// Mirrors the GraphQL/OpenAPI configure endpoints.\nconst ConfigureAuthPayload = Schema.Struct({\n  authenticationTemplate: Schema.Array(McpAuthMethodInput),\n  mode: Schema.optional(Schema.Literals([\"merge\", \"replace\"])),\n});\n\nconst ConfigureAuthResponse = Schema.Struct({\n  authenticationTemplate: Schema.Array(McpAuthMethod),\n});\n\nconst GetServerResponse = Schema.NullOr(\n  Schema.Struct({\n    slug: IntegrationSlug,\n    description: Schema.String,\n    kind: Schema.String,\n    canRemove: Schema.Boolean,\n    canRefresh: Schema.Boolean,\n    config: McpIntegrationConfig,\n  }),\n);\n\n// ---------------------------------------------------------------------------\n// Group\n//\n// Integrations are tenant-level (no scope segment); plugin domain errors carry\n// their own `HttpApiSchema` status (4xx). `InternalError` is the shared opaque\n// 500 translated at the HTTP edge.\n// ---------------------------------------------------------------------------\n\nexport const McpGroup = HttpApiGroup.make(\"mcp\")\n  .add(\n    HttpApiEndpoint.post(\"probeEndpoint\", \"/mcp/probe\", {\n      payload: ProbeEndpointPayload,\n      success: ProbeEndpointResponse,\n      error: [InternalError, McpConnectionError, McpToolDiscoveryError],\n    }),\n  )\n  .add(\n    HttpApiEndpoint.post(\"addServer\", \"/mcp/servers\", {\n      payload: AddServerPayload,\n      success: AddServerResponse,\n      error: [\n        InternalError,\n        McpConnectionError,\n        McpToolDiscoveryError,\n        IntegrationAlreadyExistsError,\n      ],\n    }),\n  )\n  .add(\n    HttpApiEndpoint.delete(\"removeServer\", \"/mcp/servers/:slug\", {\n      params: SlugParams,\n      success: RemoveServerResponse,\n      error: [InternalError, McpConnectionError, McpToolDiscoveryError],\n    }),\n  )\n  .add(\n    HttpApiEndpoint.get(\"getServer\", \"/mcp/servers/:slug\", {\n      params: SlugParams,\n      success: GetServerResponse,\n      error: [InternalError, McpConnectionError, McpToolDiscoveryError],\n    }),\n  )\n  .add(\n    HttpApiEndpoint.post(\"configureServer\", \"/mcp/servers/:slug/config\", {\n      params: SlugParams,\n      payload: ConfigureServerPayload,\n      success: ConfigureServerResponse,\n      error: [InternalError, McpConnectionError, McpToolDiscoveryError],\n    }),\n  )\n  .add(\n    HttpApiEndpoint.post(\"configureAuth\", \"/mcp/servers/:slug/auth\", {\n      params: SlugParams,\n      payload: ConfigureAuthPayload,\n      success: ConfigureAuthResponse,\n      error: [InternalError, McpConnectionError, McpToolDiscoveryError],\n    }),\n  );\n","// ---------------------------------------------------------------------------\n// MCP ↔ generic auth-method converters — a thin oauth adapter over the shared\n// codec (`@executor-js/react/lib/shared-auth-method-codec`). The apikey/none\n// paths (multi-placement, multi-variable) live in the shared codec; MCP only\n// contributes its oauth flavor: endpoint-less methods whose metadata is\n// discovered at connect time (`discoveryUrl` = the MCP endpoint).\n// ---------------------------------------------------------------------------\n\nimport { AuthTemplateSlug } from \"@executor-js/sdk/shared\";\nimport type { AuthTemplateEditorValue } from \"@executor-js/react/components/auth-template-editor\";\nimport type { AuthMethod, Placement } from \"@executor-js/react/lib/auth-placements\";\nimport {\n  authMethodFromSharedTemplate,\n  editorValueFromSharedMethod,\n  sharedMethodInputFromEditorValue,\n  wirePlacementsFromEditor,\n} from \"@executor-js/react/lib/shared-auth-method-codec\";\n\nimport { wireAuthInputFromShared } from \"@executor-js/react/lib/shared-auth-method-codec\";\nimport type { McpAuthMethod, McpAuthMethodInput, McpCanonicalAuthMethodInput } from \"../sdk/types\";\n\n/** Serialize a canonical method into the wire input union (apikey → the\n *  request-shaped dialect; none/oauth2 pass through). */\nexport const mcpWireAuthInput = (\n  method: McpAuthMethod | McpCanonicalAuthMethodInput,\n): McpAuthMethodInput => wireAuthInputFromShared(method) as McpAuthMethodInput;\n\nconst oauthAuthMethod = (slug: string, endpoint: string): AuthMethod => ({\n  id: slug,\n  label: \"OAuth\",\n  kind: \"oauth\",\n  source: slug.startsWith(\"custom_\") ? \"custom\" : \"spec\",\n  template: AuthTemplateSlug.make(slug),\n  placements: [],\n  oauth: { discoveryUrl: endpoint, supportsDynamicRegistration: true },\n});\n\n/** Convert a generic editor value into one MCP auth-method input (no slug —\n *  the backend assigns carrier-derived slugs). An apikey value keeps every\n *  named placement (headers and query params mix freely); one with no usable\n *  placement falls back to `none`. */\nexport function mcpAuthMethodInputFromEditorValue(\n  value: AuthTemplateEditorValue,\n): McpCanonicalAuthMethodInput {\n  if (value.kind === \"oauth\") return { kind: \"oauth2\" };\n  return (sharedMethodInputFromEditorValue(value) ?? {\n    kind: \"none\",\n  }) as McpCanonicalAuthMethodInput;\n}\n\n/** Convert one stored MCP method into the generic editor value. */\nexport function editorValueFromMcpAuthMethod(method: McpAuthMethod): AuthTemplateEditorValue {\n  if (method.kind === \"oauth2\") {\n    return { kind: \"oauth\", authorizationUrl: \"\", tokenUrl: \"\", scopes: [] };\n  }\n  return editorValueFromSharedMethod(method);\n}\n\n/** Project the stored methods into the generic `AuthMethod[]` the hub renders.\n *  Mirrors the server's `describeMcpAuthMethods`; `custom_` slugs mark\n *  user-created methods (removable from the hub). `endpoint` feeds the oauth\n *  method's probe-at-connect `discoveryUrl`. */\nexport function authMethodsFromConfig(\n  methods: readonly McpAuthMethod[],\n  endpoint: string,\n): AuthMethod[] {\n  return methods.map((method: McpAuthMethod): AuthMethod => {\n    if (method.kind === \"oauth2\") return oauthAuthMethod(method.slug, endpoint);\n    return authMethodFromSharedTemplate(method);\n  });\n}\n\n/** Build the MCP method input for a custom method from generic placements —\n *  ONE method carrying every named placement (header + query mix in a single\n *  method; each placement renders from its own input variable, or shares one).\n *  Empty when no placement is usable. */\nexport function mcpAuthMethodInputsFromPlacements(\n  placements: readonly Placement[],\n): McpCanonicalAuthMethodInput[] {\n  const wire = wirePlacementsFromEditor(placements);\n  if (wire.length === 0) return [];\n  return [{ kind: \"apikey\", placements: wire }];\n}\n"],"mappings":";;;;;;;;;;AACA,SAAS,qBAAqB;;;ACD9B,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACJP,SAAS,iBAAiB,oBAAoB;AAC9C,SAAS,cAAc;AACvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP,IAAM,aAAa,EAAE,MAAM,gBAAgB;AAE3C,IAAM,YAAY,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM;AAQ5D,IAAM,yBAAyB,OAAO,OAAO;AAAA,EAC3C,WAAW,OAAO,SAAS,OAAO,QAAQ,QAAQ,CAAC;AAAA,EACnD,MAAM,OAAO;AAAA,EACb,UAAU,OAAO;AAAA,EACjB,iBAAiB,OAAO,SAAS,OAAO,SAAS,CAAC,mBAAmB,OAAO,MAAM,CAAC,CAAC;AAAA,EACpF,MAAM,OAAO,SAAS,OAAO,MAAM;AAAA,EACnC,aAAa,OAAO,SAAS,SAAS;AAAA,EACtC,SAAS,OAAO,SAAS,SAAS;AAAA;AAAA,EAElC,wBAAwB,OAAO,SAAS,OAAO,MAAM,kBAAkB,CAAC;AAAA;AAAA;AAAA,EAGxE,MAAM,OAAO,SAAS,gBAAgB;AACxC,CAAC;AAED,IAAM,wBAAwB,OAAO,OAAO;AAAA,EAC1C,WAAW,OAAO,QAAQ,OAAO;AAAA,EACjC,MAAM,OAAO;AAAA,EACb,SAAS,OAAO;AAAA,EAChB,MAAM,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC;AAAA,EACjD,KAAK,OAAO,SAAS,SAAS;AAAA,EAC9B,KAAK,OAAO,SAAS,OAAO,MAAM;AAAA,EAClC,MAAM,OAAO,SAAS,OAAO,MAAM;AACrC,CAAC;AAED,IAAM,mBAAmB,OAAO,MAAM,CAAC,wBAAwB,qBAAqB,CAAC;AAErF,IAAM,uBAAuB,OAAO,OAAO;AAAA,EACzC,UAAU,OAAO;AAAA,EACjB,SAAS,OAAO,SAAS,SAAS;AAAA,EAClC,aAAa,OAAO,SAAS,SAAS;AACxC,CAAC;AAED,IAAM,wBAAwB,OAAO,OAAO;AAAA,EAC1C,WAAW,OAAO;AAAA,EAClB,wBAAwB,OAAO;AAAA,EAC/B,eAAe,OAAO;AAAA,EACtB,6BAA6B,OAAO;AAAA,EACpC,MAAM,OAAO;AAAA,EACb,MAAM,OAAO;AAAA,EACb,WAAW,OAAO,OAAO,OAAO,MAAM;AAAA,EACtC,YAAY,OAAO,OAAO,OAAO,MAAM;AACzC,CAAC;AAMD,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,MAAM,OAAO;AACf,CAAC;AAED,IAAM,uBAAuB,OAAO,OAAO;AAAA,EACzC,SAAS,OAAO;AAClB,CAAC;AAED,IAAM,yBAAyB,OAAO,OAAO;AAAA,EAC3C,QAAQ;AACV,CAAC;AAED,IAAM,0BAA0B,OAAO,OAAO;AAAA,EAC5C,QAAQ;AACV,CAAC;AAKD,IAAM,uBAAuB,OAAO,OAAO;AAAA,EACzC,wBAAwB,OAAO,MAAM,kBAAkB;AAAA,EACvD,MAAM,OAAO,SAAS,OAAO,SAAS,CAAC,SAAS,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,IAAM,wBAAwB,OAAO,OAAO;AAAA,EAC1C,wBAAwB,OAAO,MAAM,aAAa;AACpD,CAAC;AAED,IAAM,oBAAoB,OAAO;AAAA,EAC/B,OAAO,OAAO;AAAA,IACZ,MAAM;AAAA,IACN,aAAa,OAAO;AAAA,IACpB,MAAM,OAAO;AAAA,IACb,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,IACnB,QAAQ;AAAA,EACV,CAAC;AACH;AAUO,IAAM,WAAW,aAAa,KAAK,KAAK,EAC5C;AAAA,EACC,gBAAgB,KAAK,iBAAiB,cAAc;AAAA,IAClD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO,CAAC,eAAe,oBAAoB,qBAAqB;AAAA,EAClE,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,KAAK,aAAa,gBAAgB;AAAA,IAChD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,OAAO,gBAAgB,sBAAsB;AAAA,IAC3D,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,OAAO,CAAC,eAAe,oBAAoB,qBAAqB;AAAA,EAClE,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,IAAI,aAAa,sBAAsB;AAAA,IACrD,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,OAAO,CAAC,eAAe,oBAAoB,qBAAqB;AAAA,EAClE,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,KAAK,mBAAmB,6BAA6B;AAAA,IACnE,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO,CAAC,eAAe,oBAAoB,qBAAqB;AAAA,EAClE,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,KAAK,iBAAiB,2BAA2B;AAAA,IAC/D,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO,CAAC,eAAe,oBAAoB,qBAAqB;AAAA,EAClE,CAAC;AACH;;;ADvKK,IAAM,YAAY,uBAAuB,UAAU;AAAA,EACxD,SAAS;AAAA,EACT,qBAAqB;AACvB,CAAC;;;ADGM,IAAM,gBAAgB,CAAC,SAC5B,UAAU,MAAM,OAAO,aAAa;AAAA,EAClC,QAAQ,EAAE,KAAK;AAAA,EACf,YAAY;AAAA,EACZ,gBAAgB,CAAC,cAAc,cAAc,cAAc,KAAK;AAClE,CAAC;AAMI,IAAM,mBAAmB,UAAU,SAAS,OAAO,eAAe;AAClE,IAAM,eAAe,UAAU,SAAS,OAAO,WAAW;AAC1D,IAAM,kBAAkB,UAAU,SAAS,OAAO,cAAc;AAChE,IAAM,qBAAqB,UAAU,SAAS,OAAO,iBAAiB;AAEtE,IAAM,mBAAmB,UAAU,SAAS,OAAO,eAAe;;;AGrBzE,SAAS,wBAAwB;AAGjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AAKjC,IAAM,mBAAmB,CAC9B,WACuB,wBAAwB,MAAM;AAEvD,IAAM,kBAAkB,CAAC,MAAc,cAAkC;AAAA,EACvE,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,MAAM;AAAA,EACN,QAAQ,KAAK,WAAW,SAAS,IAAI,WAAW;AAAA,EAChD,UAAU,iBAAiB,KAAK,IAAI;AAAA,EACpC,YAAY,CAAC;AAAA,EACb,OAAO,EAAE,cAAc,UAAU,6BAA6B,KAAK;AACrE;AAMO,SAAS,kCACd,OAC6B;AAC7B,MAAI,MAAM,SAAS,QAAS,QAAO,EAAE,MAAM,SAAS;AACpD,SAAQ,iCAAiC,KAAK,KAAK;AAAA,IACjD,MAAM;AAAA,EACR;AACF;AAGO,SAAS,6BAA6B,QAAgD;AAC3F,MAAI,OAAO,SAAS,UAAU;AAC5B,WAAO,EAAE,MAAM,SAAS,kBAAkB,IAAI,UAAU,IAAI,QAAQ,CAAC,EAAE;AAAA,EACzE;AACA,SAAO,4BAA4B,MAAM;AAC3C;AAMO,SAAS,sBACd,SACA,UACc;AACd,SAAO,QAAQ,IAAI,CAAC,WAAsC;AACxD,QAAI,OAAO,SAAS,SAAU,QAAO,gBAAgB,OAAO,MAAM,QAAQ;AAC1E,WAAO,6BAA6B,MAAM;AAAA,EAC5C,CAAC;AACH;AAMO,SAAS,kCACd,YAC+B;AAC/B,QAAM,OAAO,yBAAyB,UAAU;AAChD,MAAI,KAAK,WAAW,EAAG,QAAO,CAAC;AAC/B,SAAO,CAAC,EAAE,MAAM,UAAU,YAAY,KAAK,CAAC;AAC9C;","names":[]}