@executor-js/plugin-openapi 0.2.1 → 1.4.21

package/dist/sdk/plugin.d.ts

@@ -1,4 +1,4 @@
-import { Effect } from "effect";
+import { Effect, Option } from "effect";
 import type { Layer } from "effect";
 import { HttpClient } from "effect/unstable/http";
 import { type StorageFailure } from "@executor-js/sdk/core";
@@ -79,7 +79,79 @@ export interface OpenApiPluginOptions {
     readonly configFile?: ConfigFileSink;
 }
 export declare const openApiPlugin: import("@executor-js/sdk/core").ConfiguredPlugin<"openapi", {
-    previewSpec: (input: string | OpenApiPreviewInput) => Effect.Effect<SpecPreview, StorageFailure | OpenApiParseError | OpenApiExtractionError | OpenApiOAuthError, never>;
+    previewSpec: (input: string | OpenApiPreviewInput) => Effect.Effect<{
+        readonly title: Option.Option<string>;
+        readonly servers: readonly {
+            readonly url: string;
+            readonly description: Option.Option<string>;
+            readonly variables: Option.Option<{
+                readonly [x: string]: {
+                    readonly description: Option.Option<string>;
+                    readonly default: string;
+                    readonly enum: Option.Option<readonly string[]>;
+                };
+            }>;
+        }[];
+        readonly tags: readonly string[];
+        readonly version: Option.Option<string>;
+        readonly securitySchemes: readonly {
+            readonly type: "oauth2" | "http" | "apiKey" | "openIdConnect";
+            readonly in: Option.Option<"query" | "header" | "cookie">;
+            readonly name: string;
+            readonly description: Option.Option<string>;
+            readonly scheme: Option.Option<string>;
+            readonly bearerFormat: Option.Option<string>;
+            readonly headerName: Option.Option<string>;
+            readonly flows: Option.Option<{
+                readonly authorizationCode: Option.Option<{
+                    readonly scopes: {
+                        readonly [x: string]: string;
+                    };
+                    readonly authorizationUrl: string;
+                    readonly tokenUrl: string;
+                    readonly refreshUrl: Option.Option<string>;
+                }>;
+                readonly clientCredentials: Option.Option<{
+                    readonly scopes: {
+                        readonly [x: string]: string;
+                    };
+                    readonly tokenUrl: string;
+                    readonly refreshUrl: Option.Option<string>;
+                }>;
+            }>;
+            readonly openIdConnectUrl: Option.Option<string>;
+        }[];
+        readonly operations: readonly {
+            readonly method: "delete" | "options" | "get" | "put" | "post" | "head" | "patch" | "trace";
+            readonly tags: readonly string[];
+            readonly summary: Option.Option<string>;
+            readonly operationId: string;
+            readonly deprecated: boolean;
+            readonly path: string;
+        }[];
+        readonly authStrategies: readonly {
+            readonly schemes: readonly string[];
+        }[];
+        readonly headerPresets: readonly {
+            readonly headers: {
+                readonly [x: string]: string | null;
+            };
+            readonly secretHeaders: readonly string[];
+            readonly label: string;
+        }[];
+        readonly oauth2Presets: readonly {
+            readonly scopes: {
+                readonly [x: string]: string;
+            };
+            readonly authorizationUrl: Option.Option<string>;
+            readonly securitySchemeName: string;
+            readonly flow: "authorizationCode" | "clientCredentials";
+            readonly tokenUrl: string;
+            readonly refreshUrl: Option.Option<string>;
+            readonly label: string;
+        }[];
+        readonly operationCount: number;
+    }, StorageFailure | OpenApiParseError | OpenApiExtractionError | OpenApiOAuthError, never>;
     addSpec: (config: OpenApiSpecConfig) => Effect.Effect<{
         sourceId: string;
         toolCount: number;
@@ -92,8 +164,44 @@ export declare const openApiPlugin: import("@executor-js/sdk/core").ConfiguredPl
         name: string;
     } | null, StorageFailure, never>;
     updateSource: (namespace: string, scope: string, input: OpenApiUpdateSourceInput) => Effect.Effect<undefined, StorageFailure | OpenApiOAuthError, never>;
-    listSourceBindings: (sourceId: string, sourceScope: string) => Effect.Effect<readonly OpenApiSourceBindingRef[], StorageFailure, never>;
-    setSourceBinding: (input: OpenApiSourceBindingInput) => Effect.Effect<OpenApiSourceBindingRef, StorageFailure, never>;
+    listSourceBindings: (sourceId: string, sourceScope: string) => Effect.Effect<readonly {
+        readonly value: {
+            readonly secretId: string & import("effect/Brand").Brand<"SecretId">;
+            readonly kind: "secret";
+            readonly secretScopeId?: (string & import("effect/Brand").Brand<"ScopeId">) | undefined;
+        } | {
+            readonly connectionId: string & import("effect/Brand").Brand<"ConnectionId">;
+            readonly kind: "connection";
+        } | {
+            readonly text: string;
+            readonly kind: "text";
+        };
+        readonly createdAt: Date;
+        readonly sourceId: string;
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+        readonly updatedAt: Date;
+        readonly slot: string;
+        readonly sourceScopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    }[], StorageFailure, never>;
+    setSourceBinding: (input: OpenApiSourceBindingInput) => Effect.Effect<{
+        readonly value: {
+            readonly secretId: string & import("effect/Brand").Brand<"SecretId">;
+            readonly kind: "secret";
+            readonly secretScopeId?: (string & import("effect/Brand").Brand<"ScopeId">) | undefined;
+        } | {
+            readonly connectionId: string & import("effect/Brand").Brand<"ConnectionId">;
+            readonly kind: "connection";
+        } | {
+            readonly text: string;
+            readonly kind: "text";
+        };
+        readonly createdAt: Date;
+        readonly sourceId: string;
+        readonly scopeId: string & import("effect/Brand").Brand<"ScopeId">;
+        readonly updatedAt: Date;
+        readonly slot: string;
+        readonly sourceScopeId: string & import("effect/Brand").Brand<"ScopeId">;
+    }, StorageFailure, never>;
     removeSourceBinding: (sourceId: string, sourceScope: string, slot: string, scope: string) => Effect.Effect<void, StorageFailure, never>;
 }, OpenapiStore, OpenApiPluginOptions, {
     readonly openapi_source: {

package/dist/sdk/preview.d.ts

@@ -1,28 +1,33 @@
-import { Effect } from "effect";
+import { Effect, Option } from "effect";
 import { Schema } from "effect";
-import { ServerInfo } from "./types";
-declare const OAuth2AuthorizationCodeFlow_base: Schema.Class<OAuth2AuthorizationCodeFlow, Schema.Struct<{
+export declare const OAuth2AuthorizationCodeFlow: Schema.Struct<{
     readonly authorizationUrl: Schema.String;
     readonly tokenUrl: Schema.String;
     readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
     readonly scopes: Schema.$Record<Schema.String, Schema.String>;
-}>, {}>;
-export declare class OAuth2AuthorizationCodeFlow extends OAuth2AuthorizationCodeFlow_base {
-}
-declare const OAuth2ClientCredentialsFlow_base: Schema.Class<OAuth2ClientCredentialsFlow, Schema.Struct<{
+}>;
+export type OAuth2AuthorizationCodeFlow = typeof OAuth2AuthorizationCodeFlow.Type;
+export declare const OAuth2ClientCredentialsFlow: Schema.Struct<{
     readonly tokenUrl: Schema.String;
     readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
     readonly scopes: Schema.$Record<Schema.String, Schema.String>;
-}>, {}>;
-export declare class OAuth2ClientCredentialsFlow extends OAuth2ClientCredentialsFlow_base {
-}
-declare const OAuth2Flows_base: Schema.Class<OAuth2Flows, Schema.Struct<{
-    readonly authorizationCode: Schema.OptionFromOptional<typeof OAuth2AuthorizationCodeFlow>;
-    readonly clientCredentials: Schema.OptionFromOptional<typeof OAuth2ClientCredentialsFlow>;
-}>, {}>;
-export declare class OAuth2Flows extends OAuth2Flows_base {
-}
-declare const SecurityScheme_base: Schema.Class<SecurityScheme, Schema.Struct<{
+}>;
+export type OAuth2ClientCredentialsFlow = typeof OAuth2ClientCredentialsFlow.Type;
+export declare const OAuth2Flows: Schema.Struct<{
+    readonly authorizationCode: Schema.OptionFromOptional<Schema.Struct<{
+        readonly authorizationUrl: Schema.String;
+        readonly tokenUrl: Schema.String;
+        readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+        readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+    }>>;
+    readonly clientCredentials: Schema.OptionFromOptional<Schema.Struct<{
+        readonly tokenUrl: Schema.String;
+        readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+        readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+    }>>;
+}>;
+export type OAuth2Flows = typeof OAuth2Flows.Type;
+export declare const SecurityScheme: Schema.Struct<{
     /** Key name in components.securitySchemes (e.g. "api_token") */
     readonly name: Schema.String;
     /** OpenAPI security scheme type */
@@ -37,29 +42,38 @@ declare const SecurityScheme_base: Schema.Class<SecurityScheme, Schema.Struct<{
     readonly headerName: Schema.OptionFromOptional<Schema.String>;
     readonly description: Schema.OptionFromOptional<Schema.String>;
     /** For type: "oauth2" — declared flows (authorizationCode / clientCredentials only; implicit and password are deprecated). */
-    readonly flows: Schema.OptionFromOptional<typeof OAuth2Flows>;
+    readonly flows: Schema.OptionFromOptional<Schema.Struct<{
+        readonly authorizationCode: Schema.OptionFromOptional<Schema.Struct<{
+            readonly authorizationUrl: Schema.String;
+            readonly tokenUrl: Schema.String;
+            readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+            readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+        }>>;
+        readonly clientCredentials: Schema.OptionFromOptional<Schema.Struct<{
+            readonly tokenUrl: Schema.String;
+            readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+            readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+        }>>;
+    }>>;
     /** For type: "openIdConnect" — the discovery URL. */
     readonly openIdConnectUrl: Schema.OptionFromOptional<Schema.String>;
-}>, {}>;
-export declare class SecurityScheme extends SecurityScheme_base {
-}
-declare const AuthStrategy_base: Schema.Class<AuthStrategy, Schema.Struct<{
+}>;
+export type SecurityScheme = typeof SecurityScheme.Type;
+export declare const AuthStrategy: Schema.Struct<{
     /** The security schemes required together for this strategy */
     readonly schemes: Schema.$Array<Schema.String>;
-}>, {}>;
-export declare class AuthStrategy extends AuthStrategy_base {
-}
-declare const HeaderPreset_base: Schema.Class<HeaderPreset, Schema.Struct<{
+}>;
+export type AuthStrategy = typeof AuthStrategy.Type;
+export declare const HeaderPreset: Schema.Struct<{
     /** Human-readable label for the UI (e.g. "Bearer Token", "API Key + Email") */
     readonly label: Schema.String;
     /** Headers this strategy needs. Value is null when the user must provide it. */
     readonly headers: Schema.$Record<Schema.String, Schema.NullOr<Schema.String>>;
     /** Which headers should be stored as secrets */
     readonly secretHeaders: Schema.$Array<Schema.String>;
-}>, {}>;
-export declare class HeaderPreset extends HeaderPreset_base {
-}
-declare const OAuth2Preset_base: Schema.Class<OAuth2Preset, Schema.Struct<{
+}>;
+export type HeaderPreset = typeof HeaderPreset.Type;
+export declare const OAuth2Preset: Schema.Struct<{
     /** Human-readable label for the UI (e.g. "OAuth2 (Authorization Code) — oauth_app") */
     readonly label: Schema.String;
     /** The source security scheme this preset came from (components.securitySchemes key). */
@@ -74,39 +88,177 @@ declare const OAuth2Preset_base: Schema.Class<OAuth2Preset, Schema.Struct<{
     readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
     /** Declared scopes for this flow: `{ scope: description }`. */
     readonly scopes: Schema.$Record<Schema.String, Schema.String>;
-}>, {}>;
-export declare class OAuth2Preset extends OAuth2Preset_base {
-}
-declare const PreviewOperation_base: Schema.Class<PreviewOperation, Schema.Struct<{
+}>;
+export type OAuth2Preset = typeof OAuth2Preset.Type;
+export declare const PreviewOperation: Schema.Struct<{
     readonly operationId: Schema.String;
     readonly method: Schema.Literals<readonly ["get", "put", "post", "delete", "patch", "head", "options", "trace"]>;
     readonly path: Schema.String;
     readonly summary: Schema.OptionFromOptional<Schema.String>;
     readonly tags: Schema.$Array<Schema.String>;
     readonly deprecated: Schema.Boolean;
-}>, {}>;
-export declare class PreviewOperation extends PreviewOperation_base {
-}
-declare const SpecPreview_base: Schema.Class<SpecPreview, Schema.Struct<{
+}>;
+export type PreviewOperation = typeof PreviewOperation.Type;
+export declare const SpecPreview: Schema.Struct<{
     readonly title: Schema.OptionFromOptional<Schema.String>;
     readonly version: Schema.OptionFromOptional<Schema.String>;
     /** Reuses ServerInfo from extraction */
-    readonly servers: Schema.$Array<typeof ServerInfo>;
+    readonly servers: Schema.$Array<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly description: Schema.OptionFromOptional<Schema.String>;
+        readonly variables: Schema.OptionFromOptional<Schema.$Record<Schema.String, Schema.Struct<{
+            readonly default: Schema.String;
+            readonly enum: Schema.OptionFromOptional<Schema.$Array<Schema.String>>;
+            readonly description: Schema.OptionFromOptional<Schema.String>;
+        }>>>;
+    }>>;
     readonly operationCount: Schema.Number;
     /** Lightweight operation list for the add-source UI */
-    readonly operations: Schema.$Array<typeof PreviewOperation>;
+    readonly operations: Schema.$Array<Schema.Struct<{
+        readonly operationId: Schema.String;
+        readonly method: Schema.Literals<readonly ["get", "put", "post", "delete", "patch", "head", "options", "trace"]>;
+        readonly path: Schema.String;
+        readonly summary: Schema.OptionFromOptional<Schema.String>;
+        readonly tags: Schema.$Array<Schema.String>;
+        readonly deprecated: Schema.Boolean;
+    }>>;
     readonly tags: Schema.$Array<Schema.String>;
-    readonly securitySchemes: Schema.$Array<typeof SecurityScheme>;
+    readonly securitySchemes: Schema.$Array<Schema.Struct<{
+        /** Key name in components.securitySchemes (e.g. "api_token") */
+        readonly name: Schema.String;
+        /** OpenAPI security scheme type */
+        readonly type: Schema.Literals<readonly ["http", "apiKey", "oauth2", "openIdConnect"]>;
+        /** For type: "http" — e.g. "bearer", "basic" */
+        readonly scheme: Schema.OptionFromOptional<Schema.String>;
+        /** For type: "http" with scheme "bearer" — e.g. "JWT" */
+        readonly bearerFormat: Schema.OptionFromOptional<Schema.String>;
+        /** For type: "apiKey" — where the key goes */
+        readonly in: Schema.OptionFromOptional<Schema.Literals<readonly ["header", "query", "cookie"]>>;
+        /** For type: "apiKey" — the header/query/cookie name */
+        readonly headerName: Schema.OptionFromOptional<Schema.String>;
+        readonly description: Schema.OptionFromOptional<Schema.String>;
+        /** For type: "oauth2" — declared flows (authorizationCode / clientCredentials only; implicit and password are deprecated). */
+        readonly flows: Schema.OptionFromOptional<Schema.Struct<{
+            readonly authorizationCode: Schema.OptionFromOptional<Schema.Struct<{
+                readonly authorizationUrl: Schema.String;
+                readonly tokenUrl: Schema.String;
+                readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+                readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+            }>>;
+            readonly clientCredentials: Schema.OptionFromOptional<Schema.Struct<{
+                readonly tokenUrl: Schema.String;
+                readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+                readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+            }>>;
+        }>>;
+        /** For type: "openIdConnect" — the discovery URL. */
+        readonly openIdConnectUrl: Schema.OptionFromOptional<Schema.String>;
+    }>>;
     /** Valid auth strategies (each is a set of schemes used together) */
-    readonly authStrategies: Schema.$Array<typeof AuthStrategy>;
+    readonly authStrategies: Schema.$Array<Schema.Struct<{
+        /** The security schemes required together for this strategy */
+        readonly schemes: Schema.$Array<Schema.String>;
+    }>>;
     /** Pre-built header presets derived from auth strategies */
-    readonly headerPresets: Schema.$Array<typeof HeaderPreset>;
+    readonly headerPresets: Schema.$Array<Schema.Struct<{
+        /** Human-readable label for the UI (e.g. "Bearer Token", "API Key + Email") */
+        readonly label: Schema.String;
+        /** Headers this strategy needs. Value is null when the user must provide it. */
+        readonly headers: Schema.$Record<Schema.String, Schema.NullOr<Schema.String>>;
+        /** Which headers should be stored as secrets */
+        readonly secretHeaders: Schema.$Array<Schema.String>;
+    }>>;
     /** OAuth2 presets — one per (oauth2 scheme × supported flow) combination */
-    readonly oauth2Presets: Schema.$Array<typeof OAuth2Preset>;
-}>, {}>;
-export declare class SpecPreview extends SpecPreview_base {
-}
+    readonly oauth2Presets: Schema.$Array<Schema.Struct<{
+        /** Human-readable label for the UI (e.g. "OAuth2 (Authorization Code) — oauth_app") */
+        readonly label: Schema.String;
+        /** The source security scheme this preset came from (components.securitySchemes key). */
+        readonly securitySchemeName: Schema.String;
+        /** Which OAuth2 flow this preset uses. */
+        readonly flow: Schema.Literals<readonly ["authorizationCode", "clientCredentials"]>;
+        /** For authorizationCode: user-agent redirect URL (from the spec). */
+        readonly authorizationUrl: Schema.OptionFromOptional<Schema.String>;
+        /** Token endpoint to exchange the code / refresh. */
+        readonly tokenUrl: Schema.String;
+        /** Optional refresh endpoint if the spec declares one separately. */
+        readonly refreshUrl: Schema.OptionFromOptional<Schema.String>;
+        /** Declared scopes for this flow: `{ scope: description }`. */
+        readonly scopes: Schema.$Record<Schema.String, Schema.String>;
+    }>>;
+}>;
+export type SpecPreview = typeof SpecPreview.Type;
 /** Preview an OpenAPI spec — extract metadata without registering anything.
  *  Accepts either a URL or raw JSON/YAML text. */
-export declare const previewSpec: (input: string) => Effect.Effect<SpecPreview, import("./errors").OpenApiParseError | import("./errors").OpenApiExtractionError, import("effect/unstable/http/HttpClient").HttpClient>;
-export {};
+export declare const previewSpec: (input: string) => Effect.Effect<{
+    readonly title: Option.Option<string>;
+    readonly servers: readonly {
+        readonly url: string;
+        readonly description: Option.Option<string>;
+        readonly variables: Option.Option<{
+            readonly [x: string]: {
+                readonly description: Option.Option<string>;
+                readonly default: string;
+                readonly enum: Option.Option<readonly string[]>;
+            };
+        }>;
+    }[];
+    readonly tags: readonly string[];
+    readonly version: Option.Option<string>;
+    readonly securitySchemes: readonly {
+        readonly type: "oauth2" | "http" | "apiKey" | "openIdConnect";
+        readonly in: Option.Option<"query" | "header" | "cookie">;
+        readonly name: string;
+        readonly description: Option.Option<string>;
+        readonly scheme: Option.Option<string>;
+        readonly bearerFormat: Option.Option<string>;
+        readonly headerName: Option.Option<string>;
+        readonly flows: Option.Option<{
+            readonly authorizationCode: Option.Option<{
+                readonly scopes: {
+                    readonly [x: string]: string;
+                };
+                readonly authorizationUrl: string;
+                readonly tokenUrl: string;
+                readonly refreshUrl: Option.Option<string>;
+            }>;
+            readonly clientCredentials: Option.Option<{
+                readonly scopes: {
+                    readonly [x: string]: string;
+                };
+                readonly tokenUrl: string;
+                readonly refreshUrl: Option.Option<string>;
+            }>;
+        }>;
+        readonly openIdConnectUrl: Option.Option<string>;
+    }[];
+    readonly operations: readonly {
+        readonly method: "delete" | "options" | "get" | "put" | "post" | "head" | "patch" | "trace";
+        readonly tags: readonly string[];
+        readonly summary: Option.Option<string>;
+        readonly operationId: string;
+        readonly deprecated: boolean;
+        readonly path: string;
+    }[];
+    readonly authStrategies: readonly {
+        readonly schemes: readonly string[];
+    }[];
+    readonly headerPresets: readonly {
+        readonly headers: {
+            readonly [x: string]: string | null;
+        };
+        readonly secretHeaders: readonly string[];
+        readonly label: string;
+    }[];
+    readonly oauth2Presets: readonly {
+        readonly scopes: {
+            readonly [x: string]: string;
+        };
+        readonly authorizationUrl: Option.Option<string>;
+        readonly securitySchemeName: string;
+        readonly flow: "authorizationCode" | "clientCredentials";
+        readonly tokenUrl: string;
+        readonly refreshUrl: Option.Option<string>;
+        readonly label: string;
+    }[];
+    readonly operationCount: number;
+}, import("./errors").OpenApiParseError | import("./errors").OpenApiExtractionError, import("effect/unstable/http/HttpClient").HttpClient>;

package/dist/sdk/store.d.ts

@@ -1,6 +1,6 @@
 import { Effect, Schema } from "effect";
 import { type StorageDeps, type StorageFailure } from "@executor-js/sdk/core";
-import { ConfiguredHeaderValue, ConfiguredHeaderBinding, OAuth2SourceConfig, OperationBinding } from "./types";
+import { ConfiguredHeaderValue, OAuth2SourceConfig, OperationBinding } from "./types";
 export declare const openapiSchema: {
     readonly openapi_source: {
         readonly fields: {
@@ -236,7 +236,7 @@ export interface StoredSource {
     readonly name: string;
     readonly config: SourceConfig;
 }
-declare const StoredSourceSchema_base: Schema.Class<StoredSourceSchema, Schema.Struct<{
+export declare const StoredSourceSchema: Schema.Struct<{
     readonly namespace: Schema.String;
     readonly scope: Schema.String;
     readonly name: Schema.String;
@@ -245,17 +245,43 @@ declare const StoredSourceSchema_base: Schema.Class<StoredSourceSchema, Schema.S
         readonly sourceUrl: Schema.optional<Schema.String>;
         readonly baseUrl: Schema.optional<Schema.String>;
         readonly namespace: Schema.optional<Schema.String>;
-        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, typeof ConfiguredHeaderBinding]>>>;
-        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, typeof ConfiguredHeaderBinding]>>>;
+        readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly kind: Schema.Literal<"binding">;
+            readonly slot: Schema.String;
+            readonly prefix: Schema.optional<Schema.String>;
+        }>]>>>;
+        readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Struct<{
+            readonly kind: Schema.Literal<"binding">;
+            readonly slot: Schema.String;
+            readonly prefix: Schema.optional<Schema.String>;
+        }>]>>>;
         readonly specFetchCredentials: Schema.optional<Schema.Struct<{
-            readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, typeof ConfiguredHeaderBinding]>>>;
-            readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, typeof ConfiguredHeaderBinding]>>>;
+            readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Struct<{
+                readonly kind: Schema.Literal<"binding">;
+                readonly slot: Schema.String;
+                readonly prefix: Schema.optional<Schema.String>;
+            }>]>>>;
+            readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Struct<{
+                readonly kind: Schema.Literal<"binding">;
+                readonly slot: Schema.String;
+                readonly prefix: Schema.optional<Schema.String>;
+            }>]>>>;
+        }>>;
+        readonly oauth2: Schema.optional<Schema.Struct<{
+            readonly kind: Schema.Literal<"oauth2">;
+            readonly securitySchemeName: Schema.String;
+            readonly flow: Schema.Literals<readonly ["authorizationCode", "clientCredentials"]>;
+            readonly tokenUrl: Schema.String;
+            readonly authorizationUrl: Schema.NullOr<Schema.String>;
+            readonly issuerUrl: Schema.optional<Schema.NullOr<Schema.String>>;
+            readonly clientIdSlot: Schema.String;
+            readonly clientSecretSlot: Schema.NullOr<Schema.String>;
+            readonly connectionSlot: Schema.String;
+            readonly scopes: Schema.$Array<Schema.String>;
         }>>;
-        readonly oauth2: Schema.optional<typeof OAuth2SourceConfig>;
     }>;
-}>, {}>;
-export declare class StoredSourceSchema extends StoredSourceSchema_base {
-}
+}>;
+export type StoredSourceSchema = typeof StoredSourceSchema.Type;
 export type StoredSourceSchemaType = typeof StoredSourceSchema.Type;
 export interface StoredOperation {
     readonly toolId: string;
@@ -283,4 +309,3 @@ export interface OpenapiStore {
     readonly removeSource: (namespace: string, scope: string) => Effect.Effect<void, StorageFailure>;
 }
 export declare const makeDefaultOpenapiStore: ({ adapter }: StorageDeps<OpenapiSchema>) => OpenapiStore;
-export {};