@executor-js/plugin-openapi 0.0.1 → 0.1.0

package/dist/core.js

@@ -1,15 +1,27 @@
 import {
   AuthStrategy,
   DocResolver,
+  EncodingObject,
   ExtractedOperation,
   ExtractionResult,
   HeaderPreset,
   HttpMethod,
   InvocationConfig,
   InvocationResult,
+  MediaBinding,
+  OAuth2Auth,
+  OAuth2AuthorizationCodeFlow,
+  OAuth2ClientCredentialsFlow,
+  OAuth2Flows,
+  OAuth2Preset,
+  OAuth2SourceConfig,
   OpenApiExtractionError,
   OpenApiInvocationError,
+  OpenApiOAuthError,
   OpenApiParseError,
+  OpenApiSourceBindingInput,
+  OpenApiSourceBindingRef,
+  OpenApiSourceBindingValue,
   OperationBinding,
   OperationId,
   OperationParameter,
@@ -18,71 +30,48 @@ import {
   PreviewOperation,
   SecurityScheme,
   ServerInfo,
+  ServerVariable,
   SpecPreview,
+  annotationsForOperation,
   extract,
+  fetchSpecText,
   invoke,
-  makeInMemoryOperationStore,
-  makeKvOperationStore,
-  makeOpenApiInvoker,
+  invokeWithLayer,
+  makeDefaultOpenapiStore,
   openApiPlugin,
+  openapiSchema,
   parse,
   preferredContent,
   previewSpec,
-  resolveBaseUrl
-} from "./chunk-KPGROAQO.js";
-
-// src/sdk/config-file-store.ts
-import { Effect } from "effect";
-import { addSourceToConfig, removeSourceFromConfig, SECRET_REF_PREFIX } from "@executor/config";
-var translateSecretHeaders = (headers) => {
-  if (!headers) return void 0;
-  const result = {};
-  for (const [key, value] of Object.entries(headers)) {
-    if (typeof value === "string") {
-      result[key] = value;
-      continue;
-    }
-    const ref = `${SECRET_REF_PREFIX}${value.secretId}`;
-    result[key] = value.prefix ? { value: ref, prefix: value.prefix } : ref;
-  }
-  return result;
-};
-var toSourceConfig = (source) => ({
-  kind: "openapi",
-  spec: source.config.spec,
-  baseUrl: source.config.baseUrl,
-  namespace: source.namespace,
-  headers: translateSecretHeaders(source.config.headers)
-});
-var withConfigFile = (inner, configPath, fsLayer) => ({
-  ...inner,
-  putSource: (source) => Effect.gen(function* () {
-    yield* inner.putSource(source);
-    yield* addSourceToConfig(configPath, toSourceConfig(source)).pipe(
-      Effect.provide(fsLayer),
-      Effect.catchAll(() => Effect.void)
-    );
-  }),
-  removeSource: (namespace) => Effect.gen(function* () {
-    yield* inner.removeSource(namespace);
-    yield* removeSourceFromConfig(configPath, namespace).pipe(
-      Effect.provide(fsLayer),
-      Effect.catchAll(() => Effect.void)
-    );
-  })
-});
+  resolveBaseUrl,
+  resolveHeaders,
+  resolveSpecText,
+  substituteUrlVariables
+} from "./chunk-RBE3CVB4.js";
 export {
   AuthStrategy,
   DocResolver,
+  EncodingObject,
   ExtractedOperation,
   ExtractionResult,
   HeaderPreset,
   HttpMethod,
   InvocationConfig,
   InvocationResult,
+  MediaBinding,
+  OAuth2Auth,
+  OAuth2AuthorizationCodeFlow,
+  OAuth2ClientCredentialsFlow,
+  OAuth2Flows,
+  OAuth2Preset,
+  OAuth2SourceConfig,
   OpenApiExtractionError,
   OpenApiInvocationError,
+  OpenApiOAuthError,
   OpenApiParseError,
+  OpenApiSourceBindingInput,
+  OpenApiSourceBindingRef,
+  OpenApiSourceBindingValue,
   OperationBinding,
   OperationId,
   OperationParameter,
@@ -91,17 +80,22 @@ export {
   PreviewOperation,
   SecurityScheme,
   ServerInfo,
+  ServerVariable,
   SpecPreview,
+  annotationsForOperation,
   extract,
+  fetchSpecText,
   invoke,
-  makeInMemoryOperationStore,
-  makeKvOperationStore,
-  makeOpenApiInvoker,
+  invokeWithLayer,
+  makeDefaultOpenapiStore,
   openApiPlugin,
+  openapiSchema,
   parse,
   preferredContent,
   previewSpec,
   resolveBaseUrl,
-  withConfigFile
+  resolveHeaders,
+  resolveSpecText,
+  substituteUrlVariables
 };
 //# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/sdk/config-file-store.ts"],"sourcesContent":["/**\n * Config-file wrapper for OpenApiOperationStore.\n *\n * Decorates an underlying store so that `putSource` and `removeSource` also\n * write to executor.jsonc.\n */\n\nimport { Effect } from \"effect\";\nimport { FileSystem } from \"@effect/platform\";\nimport type { Layer } from \"effect\";\n\nimport { addSourceToConfig, removeSourceFromConfig, SECRET_REF_PREFIX } from \"@executor/config\";\nimport type { SourceConfig as ConfigFileSourceConfig, ConfigHeaderValue } from \"@executor/config\";\n\nimport type { OpenApiOperationStore, StoredSource } from \"./operation-store\";\n\ntype PluginHeaderValue = string | { readonly secretId: string; readonly prefix?: string };\n\nconst translateSecretHeaders = (\n  headers: Readonly<Record<string, PluginHeaderValue>> | undefined,\n): Record<string, ConfigHeaderValue> | undefined => {\n  if (!headers) return undefined;\n  const result: Record<string, ConfigHeaderValue> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    if (typeof value === \"string\") {\n      result[key] = value;\n      continue;\n    }\n    const ref = `${SECRET_REF_PREFIX}${value.secretId}`;\n    result[key] = value.prefix ? { value: ref, prefix: value.prefix } : ref;\n  }\n  return result;\n};\n\nconst toSourceConfig = (source: StoredSource): ConfigFileSourceConfig => ({\n  kind: \"openapi\",\n  spec: source.config.spec,\n  baseUrl: source.config.baseUrl,\n  namespace: source.namespace,\n  headers: translateSecretHeaders(source.config.headers),\n});\n\nexport const withConfigFile = (\n  inner: OpenApiOperationStore,\n  configPath: string,\n  fsLayer: Layer.Layer<FileSystem.FileSystem>,\n): OpenApiOperationStore => ({\n  ...inner,\n  putSource: (source) =>\n    Effect.gen(function* () {\n      yield* inner.putSource(source);\n      yield* addSourceToConfig(configPath, toSourceConfig(source)).pipe(\n        Effect.provide(fsLayer),\n        Effect.catchAll(() => Effect.void),\n      );\n    }),\n  removeSource: (namespace) =>\n    Effect.gen(function* () {\n      yield* inner.removeSource(namespace);\n      yield* removeSourceFromConfig(configPath, namespace).pipe(\n        Effect.provide(fsLayer),\n        Effect.catchAll(() => Effect.void),\n      );\n    }),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,SAAS,cAAc;AAIvB,SAAS,mBAAmB,wBAAwB,yBAAyB;AAO7E,IAAM,yBAAyB,CAC7B,YACkD;AAClD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAA4C,CAAC;AACnD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,GAAG,IAAI;AACd;AAAA,IACF;AACA,UAAM,MAAM,GAAG,iBAAiB,GAAG,MAAM,QAAQ;AACjD,WAAO,GAAG,IAAI,MAAM,SAAS,EAAE,OAAO,KAAK,QAAQ,MAAM,OAAO,IAAI;AAAA,EACtE;AACA,SAAO;AACT;AAEA,IAAM,iBAAiB,CAAC,YAAkD;AAAA,EACxE,MAAM;AAAA,EACN,MAAM,OAAO,OAAO;AAAA,EACpB,SAAS,OAAO,OAAO;AAAA,EACvB,WAAW,OAAO;AAAA,EAClB,SAAS,uBAAuB,OAAO,OAAO,OAAO;AACvD;AAEO,IAAM,iBAAiB,CAC5B,OACA,YACA,aAC2B;AAAA,EAC3B,GAAG;AAAA,EACH,WAAW,CAAC,WACV,OAAO,IAAI,aAAa;AACtB,WAAO,MAAM,UAAU,MAAM;AAC7B,WAAO,kBAAkB,YAAY,eAAe,MAAM,CAAC,EAAE;AAAA,MAC3D,OAAO,QAAQ,OAAO;AAAA,MACtB,OAAO,SAAS,MAAM,OAAO,IAAI;AAAA,IACnC;AAAA,EACF,CAAC;AAAA,EACH,cAAc,CAAC,cACb,OAAO,IAAI,aAAa;AACtB,WAAO,MAAM,aAAa,SAAS;AACnC,WAAO,uBAAuB,YAAY,SAAS,EAAE;AAAA,MACnD,OAAO,QAAQ,OAAO;AAAA,MACtB,OAAO,SAAS,MAAM,OAAO,IAAI;AAAA,IACnC;AAAA,EACF,CAAC;AACL;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.js

@@ -1,10 +1,7 @@
 import {
   openApiPlugin
-} from "./chunk-KPGROAQO.js";
-
-// src/promise.ts
-var openApiPlugin2 = (options) => openApiPlugin(options);
+} from "./chunk-RBE3CVB4.js";
 export {
-  openApiPlugin2 as openApiPlugin
+  openApiPlugin
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/promise.ts"],"sourcesContent":["import { openApiPlugin as openApiPluginEffect } from \"./sdk/plugin\";\n\nexport type { OpenApiSpecConfig } from \"./sdk/plugin\";\nexport type { OpenApiOperationStore } from \"./sdk/operation-store\";\n\nexport interface OpenApiPluginOptions {\n  readonly operationStore?: import(\"./sdk/operation-store\").OpenApiOperationStore;\n}\n\nexport const openApiPlugin = (options?: OpenApiPluginOptions) => openApiPluginEffect(options);\n"],"mappings":";;;;;AASO,IAAMA,iBAAgB,CAAC,YAAmC,cAAoB,OAAO;","names":["openApiPlugin"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/react/AddOpenApiSource.d.ts

@@ -1,3 +1,16 @@
+import type { OAuth2Preset } from "../sdk/preview";
+export declare const OPENAPI_OAUTH_POPUP_NAME = "openapi-oauth";
+export declare const OPENAPI_OAUTH_CALLBACK_PATH = "/api/oauth/callback";
+export declare const openApiOAuthConnectionId: (namespaceSlug: string, flow: OAuth2Preset["flow"]) => string;
+/**
+ * OpenAPI 3.x requires OAuth2 tokenUrl/authorizationUrl to be absolute,
+ * but some specs ship relative paths like `/api/rest/v1/oauth/token`.
+ * Resolve them against the source's chosen baseUrl so the backend can
+ * fetch them directly and the absolute URL is what gets persisted on
+ * OAuth2Auth.
+ */
+export declare function resolveOAuthUrl(url: string, baseUrl: string): string;
+export declare function inferOAuthIssuerUrl(authorizationUrl: string): string | null;
 export default function AddOpenApiSource(props: {
     onComplete: () => void;
     onCancel: () => void;

package/dist/react/EditOpenApiSource.d.ts

@@ -1,4 +1,4 @@
 export default function EditOpenApiSource(props: {
-    sourceId: string;
-    onSave: () => void;
+    readonly sourceId: string;
+    readonly onSave: () => void;
 }): import("react/jsx-runtime").JSX.Element;

package/dist/react/OpenApiSourceSummary.d.ts

@@ -1,3 +1,5 @@
 export default function OpenApiSourceSummary(props: {
     sourceId: string;
-}): import("react/jsx-runtime").JSX.Element;
+    variant?: "badge" | "panel";
+    onAction?: () => void;
+}): import("react/jsx-runtime").JSX.Element | null;

package/dist/react/atoms.d.ts

@@ -0,0 +1,129 @@
+import type { ScopeId } from "@executor-js/sdk/core";
+export declare const openApiSourceAtom: (scopeId: ScopeId, namespace: string) => import("effect/unstable/reactivity/Atom").Atom<import("effect/unstable/reactivity/AsyncResult").AsyncResult<import("../sdk/store").StoredSourceSchema | null, import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>>;
+export declare const openApiSourceBindingsAtom: (scopeId: ScopeId, namespace: string, sourceScopeId: ScopeId) => import("effect/unstable/reactivity/Atom").Atom<import("effect/unstable/reactivity/AsyncResult").AsyncResult<readonly import("../sdk").OpenApiSourceBindingRef[], import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>>;
+export declare const previewOpenApiSpec: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly params: {
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly payload: {
+        readonly spec: string;
+        readonly specFetchCredentials?: {
+            readonly headers?: {
+                readonly [x: string]: string | {
+                    readonly secretId: string;
+                    readonly prefix?: string | undefined;
+                };
+            } | undefined;
+            readonly queryParams?: {
+                readonly [x: string]: string | {
+                    readonly secretId: string;
+                    readonly prefix?: string | undefined;
+                };
+            } | undefined;
+        } | undefined;
+    };
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, import("../sdk").SpecPreview, import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>;
+export declare const addOpenApiSpec: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly params: {
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly payload: {
+        readonly spec: string;
+        readonly name?: string | undefined;
+        readonly namespace?: string | undefined;
+        readonly oauth2?: import("../sdk").OAuth2Auth | import("../sdk").OAuth2SourceConfig | undefined;
+        readonly headers?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly queryParams?: {
+            readonly [x: string]: string | {
+                readonly secretId: string;
+                readonly prefix?: string | undefined;
+            };
+        } | undefined;
+        readonly baseUrl?: string | undefined;
+        readonly specFetchCredentials?: {
+            readonly headers?: {
+                readonly [x: string]: string | {
+                    readonly secretId: string;
+                    readonly prefix?: string | undefined;
+                };
+            } | undefined;
+            readonly queryParams?: {
+                readonly [x: string]: string | {
+                    readonly secretId: string;
+                    readonly prefix?: string | undefined;
+                };
+            } | undefined;
+        } | undefined;
+    };
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, {
+    readonly namespace: string;
+    readonly toolCount: number;
+}, import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>;
+export declare const updateOpenApiSource: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly params: {
+        readonly namespace: string;
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly payload: {
+        readonly name?: string | undefined;
+        readonly oauth2?: import("../sdk").OAuth2Auth | import("../sdk").OAuth2SourceConfig | undefined;
+        readonly headers?: {
+            readonly [x: string]: unknown;
+        } | undefined;
+        readonly queryParams?: {
+            readonly [x: string]: string | {
+                readonly secretId: string;
+                readonly prefix?: string | undefined;
+            };
+        } | undefined;
+        readonly baseUrl?: string | undefined;
+    };
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, {
+    readonly updated: boolean;
+}, import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>;
+export declare const setOpenApiSourceBinding: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly params: {
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly payload: {
+        readonly value: {
+            readonly secretId: string & import("effect/Brand").Brand<"SecretId">;
+            readonly kind: "secret";
+        } | {
+            readonly connectionId: string & import("effect/Brand").Brand<"ConnectionId">;
+            readonly kind: "connection";
+        } | {
+            readonly kind: "text";
+            readonly text: string;
+        };
+        readonly sourceId: string;
+        readonly scope: string & import("effect/Brand").Brand<"ScopeId">;
+        readonly slot: string;
+        readonly sourceScope: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, import("../sdk").OpenApiSourceBindingRef, import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>;
+export declare const removeOpenApiSourceBinding: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly params: {
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly payload: {
+        readonly sourceId: string;
+        readonly scope: string & import("effect/Brand").Brand<"ScopeId">;
+        readonly slot: string;
+        readonly sourceScope: string & import("effect/Brand").Brand<"ScopeId">;
+    };
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, {
+    readonly removed: boolean;
+}, import("@executor-js/api").InternalError | import("../sdk").OpenApiParseError | import("../sdk").OpenApiExtractionError | import("../sdk").OpenApiOAuthError>;

package/dist/react/client.d.ts

@@ -1,3 +1,88 @@
-import { AtomHttpApi } from "@effect-atom/atom-react";
-import { OpenApiGroup } from "../api/group";
-export declare const OpenApiClient: AtomHttpApi.AtomHttpApiClient<"OpenApiClient", "OpenApiClient", typeof OpenApiGroup | typeof import("@executor/api").ToolsApi | typeof import("@executor/api").SourcesApi | typeof import("@executor/api").SecretsApi | typeof import("@executor/api").ExecutionsApi | typeof import("@executor/api").ScopeApi, import("@effect/platform/HttpApiError").HttpApiDecodeError, never>;
+export declare const OpenApiClient: import("effect/unstable/reactivity/AtomHttpApi").AtomHttpApiClient<"Plugin_openapiClient", `Plugin_${string}Client`, import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"openapi", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"previewSpec", "POST", "/scopes/:scopeId/openapi/preview", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly spec: import("effect/Schema").String;
+    readonly specFetchCredentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly secretId: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>]>>>;
+        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly secretId: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>]>>>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("../sdk").SpecPreview>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"addSpec", "POST", "/scopes/:scopeId/openapi/specs", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly spec: import("effect/Schema").String;
+    readonly specFetchCredentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly secretId: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>]>>>;
+        readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+            readonly secretId: import("effect/Schema").String;
+            readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>]>>>;
+    }>>;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly baseUrl: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly namespace: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+        readonly secretId: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>]>>>;
+    readonly oauth2: import("effect/Schema").optional<import("effect/Schema").Union<readonly [typeof import("../sdk").OAuth2Auth, typeof import("../sdk").OAuth2SourceConfig]>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly toolCount: import("effect/Schema").Number;
+    readonly namespace: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSource", "GET", "/scopes/:scopeId/openapi/sources/:namespace", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+    namespace: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").NullOr<typeof import("../sdk/store").StoredSourceSchema>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"updateSource", "PATCH", "/scopes/:scopeId/openapi/sources/:namespace", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+    namespace: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly baseUrl: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly headers: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly queryParams: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Struct<{
+        readonly secretId: import("effect/Schema").String;
+        readonly prefix: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>]>>>;
+    readonly oauth2: import("effect/Schema").optional<import("effect/Schema").Union<readonly [typeof import("../sdk").OAuth2Auth, typeof import("../sdk").OAuth2SourceConfig]>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly updated: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSourceBindings", "GET", "/scopes/:scopeId/openapi/sources/:namespace/base/:sourceScopeId/bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+    namespace: import("effect/Schema").String;
+    sourceScopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").$Array<typeof import("../sdk").OpenApiSourceBindingRef>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"setSourceBinding", "POST", "/scopes/:scopeId/openapi/source-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly sourceId: import("effect/Schema").String;
+    readonly sourceScope: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+    readonly scope: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+    readonly slot: import("effect/Schema").String;
+    readonly value: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"secret">;
+        readonly secretId: import("effect/Schema").brand<import("effect/Schema").String, "SecretId">;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"connection">;
+        readonly connectionId: import("effect/Schema").brand<import("effect/Schema").String, "ConnectionId">;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"text">;
+        readonly text: import("effect/Schema").String;
+    }>]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("../sdk").OpenApiSourceBindingRef>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"removeSourceBinding", "POST", "/scopes/:scopeId/openapi/source-bindings/remove", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    scopeId: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly sourceId: import("effect/Schema").String;
+    readonly sourceScope: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+    readonly slot: import("effect/Schema").String;
+    readonly scope: import("effect/Schema").brand<import("effect/Schema").String, "ScopeId">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly removed: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@executor-js/api").InternalError | typeof import("../sdk").OpenApiParseError | typeof import("../sdk").OpenApiExtractionError | typeof import("../sdk").OpenApiOAuthError>, never, never>, false>>;

package/dist/react/plugin-client.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("@executor-js/sdk/client").ClientPluginSpec<"openapi">;
+export default _default;

package/dist/react/source-plugin.d.ts

@@ -1,2 +1,2 @@
-import type { SourcePlugin } from "@executor/react/plugins/source-plugin";
+import type { SourcePlugin } from "@executor-js/sdk/client";
 export declare const openApiSourcePlugin: SourcePlugin;

package/dist/sdk/client-credentials-oauth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/credential-status.d.ts

@@ -0,0 +1,23 @@
+import type { ConnectionId, ScopeId } from "@executor-js/sdk/core";
+import type { ConfiguredHeaderValue, OpenApiSourceBindingValue } from "./types";
+export type BindingRowForCredentialStatus = {
+    readonly slot: string;
+    readonly scopeId: ScopeId;
+    readonly value: OpenApiSourceBindingValue;
+};
+export type SourceForCredentialStatus = {
+    readonly config: {
+        readonly headers?: Record<string, ConfiguredHeaderValue>;
+        readonly oauth2?: {
+            readonly securitySchemeName: string;
+            readonly flow: "authorizationCode" | "clientCredentials";
+            readonly clientIdSlot: string;
+            readonly clientSecretSlot: string | null;
+            readonly connectionSlot: string;
+        };
+    };
+};
+export declare const effectiveBindingForScope: (rows: readonly BindingRowForCredentialStatus[], slot: string, targetScope: ScopeId, ranks: ReadonlyMap<string, number>) => BindingRowForCredentialStatus | null;
+export declare function missingCredentialLabels(source: SourceForCredentialStatus, bindings: readonly BindingRowForCredentialStatus[], targetScope: ScopeId, ranks: ReadonlyMap<string, number>, options?: {
+    readonly liveConnectionIds?: ReadonlySet<string> | readonly ConnectionId[];
+}): string[];

package/dist/sdk/credential-status.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/errors.d.ts

@@ -1,17 +1,13 @@
 import { Schema } from "effect";
 import type { Option } from "effect";
-declare const OpenApiParseError_base: Schema.TaggedErrorClass<OpenApiParseError, "OpenApiParseError", {
-    readonly _tag: Schema.tag<"OpenApiParseError">;
-} & {
-    message: typeof Schema.String;
-}>;
+declare const OpenApiParseError_base: Schema.Class<OpenApiParseError, Schema.TaggedStruct<"OpenApiParseError", {
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
 export declare class OpenApiParseError extends OpenApiParseError_base {
 }
-declare const OpenApiExtractionError_base: Schema.TaggedErrorClass<OpenApiExtractionError, "OpenApiExtractionError", {
-    readonly _tag: Schema.tag<"OpenApiExtractionError">;
-} & {
-    message: typeof Schema.String;
-}>;
+declare const OpenApiExtractionError_base: Schema.Class<OpenApiExtractionError, Schema.TaggedStruct<"OpenApiExtractionError", {
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
 export declare class OpenApiExtractionError extends OpenApiExtractionError_base {
 }
 declare const OpenApiInvocationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
@@ -23,4 +19,9 @@ export declare class OpenApiInvocationError extends OpenApiInvocationError_base<
     readonly cause?: unknown;
 }> {
 }
+declare const OpenApiOAuthError_base: Schema.Class<OpenApiOAuthError, Schema.TaggedStruct<"OpenApiOAuthError", {
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class OpenApiOAuthError extends OpenApiOAuthError_base {
+}
 export {};

package/dist/sdk/form-urlencoded-body.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/index.d.ts

@@ -1,11 +1,9 @@
-export { parse } from "./parse";
+export { parse, resolveSpecText, fetchSpecText } from "./parse";
 export { extract } from "./extract";
-export { invoke, makeOpenApiInvoker } from "./invoke";
-export { openApiPlugin, type OpenApiSpecConfig, type OpenApiPluginExtension } from "./plugin";
-export { type OpenApiOperationStore, type StoredOperation, type StoredSource, type SourceConfig, } from "./operation-store";
-export { makeKvOperationStore, makeInMemoryOperationStore } from "./kv-operation-store";
-export { withConfigFile } from "./config-file-store";
-export { previewSpec, SecurityScheme, AuthStrategy, HeaderPreset, PreviewOperation, SpecPreview, } from "./preview";
-export { DocResolver, resolveBaseUrl, preferredContent } from "./openapi-utils";
-export { OpenApiParseError, OpenApiExtractionError, OpenApiInvocationError } from "./errors";
-export { ExtractedOperation, ExtractionResult, InvocationConfig, InvocationResult, OperationBinding, OperationParameter, OperationRequestBody, ServerInfo, OperationId, HttpMethod, ParameterLocation, } from "./types";
+export { invoke, invokeWithLayer, resolveHeaders, annotationsForOperation } from "./invoke";
+export { openApiPlugin, type OpenApiSpecConfig, type OpenApiPluginExtension, type OpenApiPluginOptions, type OpenApiUpdateSourceInput, } from "./plugin";
+export { openapiSchema, type OpenapiSchema, type OpenapiStore, type StoredOperation, type StoredSource, type SourceConfig, makeDefaultOpenapiStore, } from "./store";
+export { previewSpec, SecurityScheme, AuthStrategy, HeaderPreset, OAuth2Preset, OAuth2Flows, OAuth2AuthorizationCodeFlow, OAuth2ClientCredentialsFlow, PreviewOperation, SpecPreview, } from "./preview";
+export { DocResolver, resolveBaseUrl, substituteUrlVariables, preferredContent, } from "./openapi-utils";
+export { OpenApiParseError, OpenApiExtractionError, OpenApiInvocationError, OpenApiOAuthError, } from "./errors";
+export { EncodingObject, ExtractedOperation, ExtractionResult, InvocationConfig, InvocationResult, MediaBinding, OAuth2Auth, OAuth2SourceConfig, OpenApiSourceBindingInput, OpenApiSourceBindingRef, OpenApiSourceBindingValue, OperationBinding, OperationParameter, OperationRequestBody, ServerInfo, ServerVariable, OperationId, HttpMethod, ParameterLocation, } from "./types";

package/dist/sdk/invoke.d.ts

@@ -1,23 +1,14 @@
 import { Effect, Layer } from "effect";
-import { HttpClient } from "@effect/platform";
-import { type ToolInvoker, type ScopeId, type SecretId } from "@executor-js/sdk";
+import { HttpClient } from "effect/unstable/http";
+import type { SecretOwnedByConnectionError, StorageFailure } from "@executor-js/sdk/core";
 import { OpenApiInvocationError } from "./errors";
-import type { OpenApiOperationStore } from "./operation-store";
-import { type OperationBinding, InvocationConfig, InvocationResult } from "./types";
-/** Invoke an OpenAPI operation binding. Requires HttpClient in the context. */
-export declare const invoke: (operation: OperationBinding, args: Record<string, unknown>, config: InvocationConfig, resolvedHeaders?: Record<string, string> | undefined) => Effect.Effect<InvocationResult, OpenApiInvocationError | import("@effect/platform/HttpClientError").ResponseError, HttpClient.HttpClient>;
-/**
- * Derive tool annotations from the HTTP method and path.
- */
+import { type HeaderValue, type OperationBinding, InvocationResult } from "./types";
+export declare const resolveHeaders: (headers: Record<string, HeaderValue>, secrets: {
+    readonly get: (id: string) => Effect.Effect<string | null, SecretOwnedByConnectionError | StorageFailure>;
+}) => Effect.Effect<Record<string, string>, OpenApiInvocationError | StorageFailure>;
+export declare const invoke: (operation: OperationBinding, args: Record<string, unknown>, resolvedHeaders: Record<string, string>, sourceQueryParams?: Record<string, string> | undefined) => Effect.Effect<InvocationResult, OpenApiInvocationError, HttpClient.HttpClient>;
+export declare const invokeWithLayer: (operation: OperationBinding, args: Record<string, unknown>, baseUrl: string, resolvedHeaders: Record<string, string>, sourceQueryParams: Record<string, string>, httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>) => Effect.Effect<InvocationResult, OpenApiInvocationError, never>;
 export declare const annotationsForOperation: (method: string, pathTemplate: string) => {
     requiresApproval?: boolean;
     approvalDescription?: string;
 };
-export declare const makeOpenApiInvoker: (opts: {
-    readonly operationStore: OpenApiOperationStore;
-    readonly httpClientLayer: Layer.Layer<HttpClient.HttpClient>;
-    readonly secrets: {
-        readonly resolve: (secretId: SecretId, scopeId: ScopeId) => Effect.Effect<string, unknown>;
-    };
-    readonly scopeId: ScopeId;
-}) => ToolInvoker;

package/dist/sdk/multi-scope-bearer.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/multi-scope-oauth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/non-json-body.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/oauth-refresh.test.d.ts

@@ -0,0 +1 @@
+export {};