@executor-js/plugin-openapi 1.5.5 → 1.5.7

package/dist/chunk-C3IJX4AN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/errors.ts","../src/sdk/parse.ts","../src/sdk/openapi-utils.ts","../src/sdk/types.ts","../src/sdk/extract.ts","../src/sdk/preview.ts"],"sourcesContent":["import { Data, Schema } from \"effect\";\nimport type { Option } from \"effect\";\nimport type { AuthToolFailureCode } from \"@executor-js/sdk/core\";\n\n// HTTP status lives on the class declaration so HttpApiBuilder's error\n// encoder (which reads `ast.annotations` off the schema it stored on\n// `group.addError(...)`) finds it. Applying the annotation post-hoc\n// via `.annotate(...)` in group.ts produced a transform-wrapper AST\n// whose status was not picked up — the error then slipped the typed\n// channel and was captured as a 500 by the observability middleware,\n// spamming Sentry on user misconfig.\nexport class OpenApiParseError extends Schema.TaggedErrorClass<OpenApiParseError>()(\n  \"OpenApiParseError\",\n  {\n    message: Schema.String,\n  },\n  { httpApiStatus: 400 },\n) {}\n\nexport class OpenApiExtractionError extends Schema.TaggedErrorClass<OpenApiExtractionError>()(\n  \"OpenApiExtractionError\",\n  {\n    message: Schema.String,\n  },\n  { httpApiStatus: 400 },\n) {}\n\nexport class OpenApiInvocationError extends Data.TaggedError(\"OpenApiInvocationError\")<{\n  readonly message: string;\n  readonly statusCode: Option.Option<number>;\n  readonly cause?: unknown;\n}> {}\n\nexport class OpenApiOAuthError extends Schema.TaggedErrorClass<OpenApiOAuthError>()(\n  \"OpenApiOAuthError\",\n  {\n    message: Schema.String,\n  },\n  { httpApiStatus: 400 },\n) {}\n\n// ---------------------------------------------------------------------------\n// Auth required — v2 reframes this around the connection (owner/integration/\n// name) that supplies the missing credential, not v1's source/slot/secret.\n// ---------------------------------------------------------------------------\n\nexport class OpenApiAuthRequiredError extends Data.TaggedError(\"OpenApiAuthRequiredError\")<{\n  readonly code: AuthToolFailureCode;\n  readonly message: string;\n  readonly owner: \"org\" | \"user\";\n  readonly integration: string;\n  readonly connection: string;\n  readonly credentialKind: \"secret\" | \"oauth\" | \"upstream\";\n  readonly credentialLabel?: string;\n  readonly status?: number;\n  readonly details?: unknown;\n  readonly cause?: unknown;\n}> {}\n","import type { OpenAPI, OpenAPIV3, OpenAPIV3_1 } from \"openapi-types\";\nimport { Duration, Effect, Schema } from \"effect\";\nimport { HttpClient, HttpClientRequest } from \"effect/unstable/http\";\nimport YAML from \"yaml\";\n\nimport { OpenApiExtractionError, OpenApiParseError } from \"./errors\";\n\nexport type ParsedDocument = OpenAPIV3.Document | OpenAPIV3_1.Document;\n\nexport interface SpecFetchCredentials {\n  readonly headers?: Record<string, string>;\n  readonly queryParams?: Record<string, string>;\n}\n\n// ExtractionError subclass raised from parse() for non-3.x specs\nclass OpenApiExtractionErrorFromParse extends OpenApiExtractionError {}\n\n/**\n * Fetch an OpenAPI spec URL and return its body text. Uses the Effect\n * HttpClient so the caller chooses the transport via layer — in Cloudflare\n * Workers, `FetchHttpClient.layer` binds to the Workers-native `fetch`.\n * Bounded by a 60s timeout.\n */\nexport const fetchSpecText = Effect.fn(\"OpenApi.fetchSpecText\")(function* (\n  url: string,\n  credentials?: SpecFetchCredentials,\n) {\n  const client = yield* HttpClient.HttpClient;\n  const requestUrl = new URL(url);\n  for (const [name, value] of Object.entries(credentials?.queryParams ?? {})) {\n    requestUrl.searchParams.set(name, value);\n  }\n  let request = HttpClientRequest.get(requestUrl.toString()).pipe(\n    HttpClientRequest.setHeader(\"Accept\", \"application/json, application/yaml, text/yaml, */*\"),\n  );\n  for (const [name, value] of Object.entries(credentials?.headers ?? {})) {\n    request = HttpClientRequest.setHeader(request, name, value);\n  }\n  const response = yield* client.execute(request).pipe(\n    Effect.timeout(Duration.seconds(60)),\n    Effect.mapError(\n      (_cause) =>\n        new OpenApiParseError({\n          message: \"Failed to fetch OpenAPI document\",\n        }),\n    ),\n  );\n  if (response.status < 200 || response.status >= 300) {\n    return yield* new OpenApiParseError({\n      message: `Failed to fetch OpenAPI document: HTTP ${response.status}`,\n    });\n  }\n  return yield* response.text.pipe(\n    Effect.mapError(\n      (_cause) =>\n        new OpenApiParseError({\n          message: \"Failed to read OpenAPI document body\",\n        }),\n    ),\n  );\n});\n\n/**\n * Resolve an input string to spec text — if it's a URL, fetch it via\n * HttpClient; otherwise return it as-is.\n */\nexport const resolveSpecText = (input: string, credentials?: SpecFetchCredentials) =>\n  input.startsWith(\"http://\") || input.startsWith(\"https://\")\n    ? fetchSpecText(input, credentials)\n    : Effect.succeed(input);\n\n/**\n * Parse an OpenAPI document from spec text and validate it's OpenAPI 3.x.\n *\n * NOTE: does NOT resolve `$ref`s. `DocResolver` + `normalizeOpenApiRefs`\n * downstream work on refs lazily, so inlining them here would just waste\n * memory — and for big specs (e.g. Cloudflare's API) that blows through\n * the 128MB Cloudflare Workers memory cap.\n */\nexport const parse = Effect.fn(\"OpenApi.parse\")(function* (text: string) {\n  const api = yield* parseTextToObject(text);\n\n  if (!isOpenApi3(api)) {\n    return yield* new OpenApiExtractionErrorFromParse({\n      message:\n        \"Only OpenAPI 3.x documents are supported. Swagger 2.x documents should be converted first.\",\n    });\n  }\n\n  return api as ParsedDocument;\n});\n\n// ---------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------\n\nconst isOpenApi3 = (doc: OpenAPI.Document): doc is OpenAPIV3.Document | OpenAPIV3_1.Document =>\n  \"openapi\" in doc && typeof doc.openapi === \"string\" && doc.openapi.startsWith(\"3.\");\n\nconst parseTextToObject = (text: string): Effect.Effect<OpenAPI.Document, OpenApiParseError> =>\n  Effect.gen(function* () {\n    const trimmed = text.trim();\n    if (trimmed.length === 0) {\n      return yield* new OpenApiParseError({\n        message: \"OpenAPI document is empty\",\n      });\n    }\n\n    const parsed = yield* parseJsonLike(trimmed).pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to parse OpenAPI document\",\n          }),\n      ),\n    );\n\n    if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n      return yield* new OpenApiParseError({\n        message: \"OpenAPI document must parse to an object\",\n      });\n    }\n\n    return parsed as OpenAPI.Document;\n  });\n\nconst parseJsonText = Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.Unknown));\n\nconst parseJsonLike = (text: string): Effect.Effect<unknown, unknown> => {\n  const parseYaml = Effect.try({\n    try: () => YAML.parse(text) as unknown,\n    catch: () => \"YamlParseFailed\" as const,\n  });\n  if (!text.startsWith(\"{\") && !text.startsWith(\"[\")) return parseYaml;\n  return parseJsonText(text).pipe(Effect.catch(() => parseYaml));\n};\n","// ---------------------------------------------------------------------------\n// OpenAPI type aliases and $ref resolution\n//\n// Wraps the openapi-types V3/V3_1 union mess and provides clean ref resolution.\n// ---------------------------------------------------------------------------\n\nimport type { OpenAPIV3, OpenAPIV3_1 } from \"openapi-types\";\nimport type { ParsedDocument } from \"./parse\";\nimport type { ServerVariable } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Type aliases — collapse V3 / V3_1 unions into single names\n// ---------------------------------------------------------------------------\n\nexport type ParameterObject = OpenAPIV3.ParameterObject | OpenAPIV3_1.ParameterObject;\nexport type OperationObject = OpenAPIV3.OperationObject | OpenAPIV3_1.OperationObject;\nexport type PathItemObject = OpenAPIV3.PathItemObject | OpenAPIV3_1.PathItemObject;\nexport type RequestBodyObject = OpenAPIV3.RequestBodyObject | OpenAPIV3_1.RequestBodyObject;\nexport type ResponseObject = OpenAPIV3.ResponseObject | OpenAPIV3_1.ResponseObject;\nexport type MediaTypeObject = OpenAPIV3.MediaTypeObject | OpenAPIV3_1.MediaTypeObject;\nexport type ServerObject = OpenAPIV3.ServerObject | OpenAPIV3_1.ServerObject;\n\n// ---------------------------------------------------------------------------\n// DocResolver — wraps a parsed document for clean $ref resolution\n// ---------------------------------------------------------------------------\n\nexport class DocResolver {\n  constructor(readonly doc: ParsedDocument) {}\n\n  /** Resolve a value that might be a $ref, returning the resolved object */\n  resolve<T>(value: T | OpenAPIV3.ReferenceObject | OpenAPIV3_1.ReferenceObject): T | null {\n    if (isRef(value)) {\n      const resolved = this.resolvePointer(value.$ref);\n      return resolved as T | null;\n    }\n    return value as T;\n  }\n\n  private resolvePointer(ref: string): unknown {\n    if (!ref.startsWith(\"#/\")) return null;\n    const segments = ref.slice(2).split(\"/\");\n    let current: unknown = this.doc;\n    for (const segment of segments) {\n      if (typeof current !== \"object\" || current === null) return null;\n      current = (current as Record<string, unknown>)[segment];\n    }\n    return current;\n  }\n}\n\nconst isRef = (value: unknown): value is { $ref: string } =>\n  typeof value === \"object\" && value !== null && \"$ref\" in value;\n\n// ---------------------------------------------------------------------------\n// Server URL resolution\n// ---------------------------------------------------------------------------\n\n/** Substitute `{var}` placeholders in a templated URL using a plain map. */\nexport const substituteUrlVariables = (url: string, values: Record<string, string>): string => {\n  let out = url;\n  for (const [name, value] of Object.entries(values)) {\n    out = out.replaceAll(`{${name}}`, value);\n  }\n  return out;\n};\n\n/** Resolve a templated server URL, filling each `{var}` from `overrides` when\n *  non-empty, otherwise the variable's spec default. URLs without placeholders\n *  pass through unchanged. */\nexport const resolveServerUrl = (\n  templateUrl: string,\n  variables: Record<string, ServerVariable> | undefined,\n  overrides: Record<string, string>,\n): string => {\n  const values: Record<string, string> = {};\n  for (const [name, v] of Object.entries(variables ?? {})) values[name] = v.default;\n  for (const [name, value] of Object.entries(overrides)) {\n    if (value) values[name] = value;\n  }\n  return substituteUrlVariables(templateUrl, values);\n};\n\n// ---------------------------------------------------------------------------\n// Content negotiation\n// ---------------------------------------------------------------------------\n\n/**\n * Return all declared media entries in spec order. `Object.entries` on a\n * plain object preserves insertion order in modern engines, which matches\n * spec declaration order as the parser produced it.\n */\nexport const declaredContents = (\n  content: Record<string, MediaTypeObject> | undefined,\n): ReadonlyArray<{ mediaType: string; media: MediaTypeObject }> => {\n  if (!content) return [];\n  return Object.entries(content).map(([mediaType, media]) => ({ mediaType, media }));\n};\n\n/**\n * Pick the default media type for a requestBody or response. Matches\n * swagger-client behaviour: **first declared wins** (not JSON-first). Spec\n * authors order content entries to signal intent (upload-heavy endpoints\n * declare multipart first, JSON second); respecting that order avoids\n * silently downgrading a multipart endpoint to JSON.\n *\n * For response bodies we still want a JSON preference because the server\n * picks the response content type, not the client — the old `application/\n * json` preference is preserved via `preferredResponseContent` below.\n */\nexport const preferredContent = (\n  content: Record<string, MediaTypeObject> | undefined,\n): { mediaType: string; media: MediaTypeObject } | undefined => {\n  const first = declaredContents(content)[0];\n  return first ? first : undefined;\n};\n\n/** Response-side content picker — still JSON-first because the server\n *  picks the response media type, so we want to advertise a preference. */\nexport const preferredResponseContent = (\n  content: Record<string, MediaTypeObject> | undefined,\n): { mediaType: string; media: MediaTypeObject } | undefined => {\n  if (!content) return undefined;\n  const entries = Object.entries(content);\n  const pick =\n    entries.find(([mt]) => mt === \"application/json\") ??\n    entries.find(([mt]) => mt.toLowerCase().includes(\"+json\")) ??\n    entries.find(([mt]) => mt.toLowerCase().includes(\"json\")) ??\n    entries[0];\n  return pick ? { mediaType: pick[0], media: pick[1] } : undefined;\n};\n","import { Schema } from \"effect\";\nimport { AuthTemplateSlug, type OAuthAuthentication } from \"@executor-js/sdk/shared\";\nimport {\n  apiKeyMethodFromAuthTemplate,\n  isApiKeyAuthTemplate,\n  type ApiKeyAuthMethod,\n  type ApiKeyAuthTemplate,\n} from \"@executor-js/sdk/http-auth\";\n\n// ---------------------------------------------------------------------------\n// Auth-template model.\n//\n// The apiKey method is the SHARED placements model (`@executor-js/sdk/http-auth`,\n// the same shape the graphql/mcp plugins store): N header/query placements,\n// each rendered from its own credential input. The oauth template is\n// mechanism-intrinsic and comes from core (`OAuthAuthentication`, keyed\n// `kind: \"oauth2\"` with stored endpoints+scopes); an integration's\n// `Authentication` union composes the two. Client credentials\n// (clientId/secret) live on the core `OAuthClient`, not here.\n//\n// Pre-canonical stored templates (`type: \"apiKey\"` with `variable()`-templated\n// header/query records) are rewritten by the one-off config migration\n// (`migrate-config.ts`) — runtime code knows only this model.\n// ---------------------------------------------------------------------------\n\nexport { TOKEN_VARIABLE } from \"@executor-js/sdk/http-auth\";\n\nexport type APIKeyAuthentication = ApiKeyAuthMethod;\n\n/** Every method is keyed by `kind` — `kind: \"oauth2\"` | `kind: \"apikey\"`. */\nexport type Authentication = OAuthAuthentication | APIKeyAuthentication;\n\n/** What auth inputs accept: oauth templates (wire-typed: plain slug) plus the\n *  request-shaped apikey dialect (`type: \"apiKey\"`, headers/queryParams\n *  records) — the ONE apikey authoring shape. Stored configs and the catalog\n *  read as canonical placements; `apiKeyAuthTemplateFromMethod` serializes\n *  them back for read-modify-write flows. */\nexport type OAuthAuthenticationInput = Omit<OAuthAuthentication, \"slug\"> & {\n  readonly slug: string;\n};\nexport type AuthenticationInput = OAuthAuthenticationInput | ApiKeyAuthTemplate;\n\n/** Expand the request-shaped dialect into canonical placements and brand the\n *  oauth slugs. A dialect entry without a slug gets a blank one —\n *  `mergeAuthTemplates` backfills `custom_<id>`. */\nexport const normalizeOpenApiAuthInputs = (\n  inputs: readonly AuthenticationInput[],\n): readonly Authentication[] =>\n  inputs.map((input): Authentication => {\n    if (!isApiKeyAuthTemplate(input)) {\n      return { ...input, slug: AuthTemplateSlug.make(input.slug) };\n    }\n    const method = apiKeyMethodFromAuthTemplate(input);\n    return { ...method, slug: method.slug ?? \"\" };\n  });\n\n// ---------------------------------------------------------------------------\n// Branded IDs\n// ---------------------------------------------------------------------------\n\nexport const OperationId = Schema.String.pipe(Schema.brand(\"OperationId\"));\nexport type OperationId = typeof OperationId.Type;\n\n// ---------------------------------------------------------------------------\n// HTTP\n// ---------------------------------------------------------------------------\n\nexport const HttpMethod = Schema.Literals([\n  \"get\",\n  \"put\",\n  \"post\",\n  \"delete\",\n  \"patch\",\n  \"head\",\n  \"options\",\n  \"trace\",\n]);\nexport type HttpMethod = typeof HttpMethod.Type;\n\nexport const ParameterLocation = Schema.Literals([\"path\", \"query\", \"header\", \"cookie\"]);\nexport type ParameterLocation = typeof ParameterLocation.Type;\n\n// ---------------------------------------------------------------------------\n// Extracted operation\n// ---------------------------------------------------------------------------\n\nexport const OperationParameter = Schema.Struct({\n  name: Schema.String,\n  location: ParameterLocation,\n  required: Schema.Boolean,\n  schema: Schema.OptionFromOptional(Schema.Unknown),\n  style: Schema.OptionFromOptional(Schema.String),\n  explode: Schema.OptionFromOptional(Schema.Boolean),\n  allowReserved: Schema.OptionFromOptional(Schema.Boolean),\n  description: Schema.OptionFromOptional(Schema.String),\n});\nexport type OperationParameter = typeof OperationParameter.Type;\n\n/**\n * OpenAPI 3.x `Encoding Object` (§4.8.15). Declared per-property inside a\n * multipart/form-data or application/x-www-form-urlencoded request body.\n *\n * - `contentType` — for multipart, overrides the per-part `Content-Type`\n *   header (e.g. `application/json` for a JSON-encoded metadata part).\n * - `style` / `explode` / `allowReserved` — for form-urlencoded, control\n *   array / object serialization the same way parameter-level style does.\n */\nexport const EncodingObject = Schema.Struct({\n  contentType: Schema.OptionFromOptional(Schema.String),\n  style: Schema.OptionFromOptional(Schema.String),\n  explode: Schema.OptionFromOptional(Schema.Boolean),\n  allowReserved: Schema.OptionFromOptional(Schema.Boolean),\n});\nexport type EncodingObject = typeof EncodingObject.Type;\n\nexport const MediaBinding = Schema.Struct({\n  contentType: Schema.String,\n  schema: Schema.OptionFromOptional(Schema.Unknown),\n  encoding: Schema.OptionFromOptional(Schema.Record(Schema.String, EncodingObject)),\n});\nexport type MediaBinding = typeof MediaBinding.Type;\n\nexport const OperationRequestBody = Schema.Struct({\n  required: Schema.Boolean,\n  /** Default media type — first declared in spec order (not JSON-first).\n   *  Used when the caller does not override via the tool's `contentType` arg. */\n  contentType: Schema.String,\n  /** Schema of the default media type. Kept for backward compat with stored\n   *  bindings from before `contents` was added. */\n  schema: Schema.OptionFromOptional(Schema.Unknown),\n  /** All declared media types in spec order. Populated by `extract.ts`\n   *  going forward; older persisted bindings may have this unset and will\n   *  fall back to `{contentType, schema}`. */\n  contents: Schema.OptionFromOptional(Schema.Array(MediaBinding)),\n});\nexport type OperationRequestBody = typeof OperationRequestBody.Type;\n\nexport const ServerVariable = Schema.Struct({\n  default: Schema.String,\n  enum: Schema.OptionFromOptional(Schema.Array(Schema.String)),\n  description: Schema.OptionFromOptional(Schema.String),\n});\nexport type ServerVariable = typeof ServerVariable.Type;\n\nexport const ServerInfo = Schema.Struct({\n  url: Schema.String,\n  description: Schema.OptionFromOptional(Schema.String),\n  variables: Schema.OptionFromOptional(Schema.Record(Schema.String, ServerVariable)),\n});\nexport type ServerInfo = typeof ServerInfo.Type;\n\nexport const ExtractedOperation = Schema.Struct({\n  operationId: OperationId,\n  toolPath: Schema.OptionFromOptional(Schema.String),\n  method: HttpMethod,\n  servers: Schema.Array(ServerInfo),\n  pathTemplate: Schema.String,\n  summary: Schema.OptionFromOptional(Schema.String),\n  description: Schema.OptionFromOptional(Schema.String),\n  tags: Schema.Array(Schema.String),\n  parameters: Schema.Array(OperationParameter),\n  requestBody: Schema.OptionFromOptional(OperationRequestBody),\n  inputSchema: Schema.OptionFromOptional(Schema.Unknown),\n  outputSchema: Schema.OptionFromOptional(Schema.Unknown),\n  deprecated: Schema.Boolean,\n});\nexport type ExtractedOperation = typeof ExtractedOperation.Type;\n\nexport const ExtractionResult = Schema.Struct({\n  title: Schema.OptionFromOptional(Schema.String),\n  version: Schema.OptionFromOptional(Schema.String),\n  servers: Schema.Array(ServerInfo),\n  operations: Schema.Array(ExtractedOperation),\n});\nexport type ExtractionResult = typeof ExtractionResult.Type;\n\n// ---------------------------------------------------------------------------\n// Operation binding — minimal invocation data (no schemas/metadata)\n// ---------------------------------------------------------------------------\n\nexport const OperationBinding = Schema.Struct({\n  method: HttpMethod,\n  servers: Schema.optional(Schema.Array(ServerInfo)),\n  pathTemplate: Schema.String,\n  parameters: Schema.Array(OperationParameter),\n  requestBody: Schema.OptionFromOptional(OperationRequestBody),\n});\nexport type OperationBinding = typeof OperationBinding.Type;\n\n// ---------------------------------------------------------------------------\n// Invocation\n// ---------------------------------------------------------------------------\n\nexport const InvocationResult = Schema.Struct({\n  status: Schema.Number,\n  headers: Schema.Record(Schema.String, Schema.String),\n  data: Schema.NullOr(Schema.Unknown),\n  error: Schema.NullOr(Schema.Unknown),\n});\nexport type InvocationResult = typeof InvocationResult.Type;\n","import { Effect, Option } from \"effect\";\n\nimport { OpenApiExtractionError } from \"./errors\";\nimport type { ParsedDocument } from \"./parse\";\nimport {\n  declaredContents,\n  DocResolver,\n  preferredResponseContent,\n  type OperationObject,\n  type ParameterObject,\n  type PathItemObject,\n  type RequestBodyObject,\n  type ResponseObject,\n  type ServerObject,\n} from \"./openapi-utils\";\nimport {\n  EncodingObject,\n  ExtractedOperation,\n  ExtractionResult,\n  type HttpMethod,\n  MediaBinding,\n  OperationId,\n  OperationParameter,\n  OperationRequestBody,\n  type ParameterLocation,\n  ServerInfo,\n  ServerVariable,\n} from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\nconst HTTP_METHODS: readonly HttpMethod[] = [\n  \"get\",\n  \"put\",\n  \"post\",\n  \"delete\",\n  \"patch\",\n  \"head\",\n  \"options\",\n  \"trace\",\n];\n\nconst VALID_PARAM_LOCATIONS = new Set<string>([\"path\", \"query\", \"header\", \"cookie\"]);\n\n// ---------------------------------------------------------------------------\n// Parameter extraction\n// ---------------------------------------------------------------------------\n\nconst extractParameters = (\n  pathItem: PathItemObject,\n  operation: OperationObject,\n  r: DocResolver,\n): OperationParameter[] => {\n  const merged = new Map<string, ParameterObject>();\n\n  for (const raw of pathItem.parameters ?? []) {\n    const p = r.resolve<ParameterObject>(raw);\n    if (!p) continue;\n    merged.set(`${p.in}:${p.name}`, p);\n  }\n  for (const raw of operation.parameters ?? []) {\n    const p = r.resolve<ParameterObject>(raw);\n    if (!p) continue;\n    merged.set(`${p.in}:${p.name}`, p);\n  }\n\n  return [...merged.values()]\n    .filter((p) => VALID_PARAM_LOCATIONS.has(p.in))\n    .map((p) =>\n      OperationParameter.make({\n        name: p.name,\n        location: p.in as ParameterLocation,\n        required: p.in === \"path\" ? true : p.required === true,\n        schema: Option.fromNullishOr(p.schema),\n        style: Option.fromNullishOr(p.style),\n        explode: Option.fromNullishOr(p.explode),\n        allowReserved: Option.fromNullishOr(\"allowReserved\" in p ? p.allowReserved : undefined),\n        description: Option.fromNullishOr(p.description),\n      }),\n    );\n};\n\n// ---------------------------------------------------------------------------\n// Request body extraction\n// ---------------------------------------------------------------------------\n\nconst buildEncodingRecord = (\n  encoding: Record<string, unknown> | undefined,\n): Record<string, EncodingObject> | undefined => {\n  if (!encoding) return undefined;\n  const out: Record<string, EncodingObject> = {};\n  for (const [prop, raw] of Object.entries(encoding)) {\n    if (typeof raw !== \"object\" || raw === null) continue;\n    const e = raw as {\n      contentType?: string;\n      style?: string;\n      explode?: boolean;\n      allowReserved?: boolean;\n    };\n    out[prop] = EncodingObject.make({\n      contentType: Option.fromNullishOr(e.contentType),\n      style: Option.fromNullishOr(e.style),\n      explode: Option.fromNullishOr(e.explode),\n      allowReserved: Option.fromNullishOr(e.allowReserved),\n    });\n  }\n  return Object.keys(out).length > 0 ? out : undefined;\n};\n\nconst extractRequestBody = (\n  operation: OperationObject,\n  r: DocResolver,\n): OperationRequestBody | undefined => {\n  if (!operation.requestBody) return undefined;\n\n  const body = r.resolve<RequestBodyObject>(operation.requestBody);\n  if (!body) return undefined;\n\n  const contents = declaredContents(body.content).map(({ mediaType, media }) =>\n    MediaBinding.make({\n      contentType: mediaType,\n      schema: Option.fromNullishOr(media.schema),\n      encoding: Option.fromNullishOr(\n        buildEncodingRecord((media as { encoding?: Record<string, unknown> }).encoding),\n      ),\n    }),\n  );\n  if (contents.length === 0) return undefined;\n\n  // Default = first declared (spec author's preferred order). Callers can\n  // override at invoke time with a `contentType` arg.\n  const defaultContent = contents[0]!;\n\n  return OperationRequestBody.make({\n    required: body.required === true,\n    contentType: defaultContent.contentType,\n    schema: defaultContent.schema,\n    contents: Option.some(contents),\n  });\n};\n\n// ---------------------------------------------------------------------------\n// Response schema extraction\n// ---------------------------------------------------------------------------\n\nconst extractOutputSchema = (operation: OperationObject, r: DocResolver): unknown | undefined => {\n  if (!operation.responses) return undefined;\n\n  const entries = Object.entries(operation.responses);\n  const preferred = [\n    ...entries.filter(([s]) => /^2\\d\\d$/.test(s)).sort(([a], [b]) => a.localeCompare(b)),\n    ...entries.filter(([s]) => s === \"default\"),\n  ];\n\n  for (const [, ref] of preferred) {\n    const resp = r.resolve<ResponseObject>(ref);\n    if (!resp) continue;\n    const content = preferredResponseContent(resp.content);\n    if (content?.media.schema) return content.media.schema;\n  }\n\n  return undefined;\n};\n\n// ---------------------------------------------------------------------------\n// Input schema builder\n// ---------------------------------------------------------------------------\n\n// Optional `server` input — host selection + server-URL variables. Undefined\n// when there's nothing to configure (a single server with no variables).\nconst buildServerInputProperty = (\n  servers: readonly ServerInfo[],\n): Record<string, unknown> | undefined => {\n  const variableDefs: Record<string, ServerVariable> = {};\n  for (const server of servers) {\n    for (const [name, v] of Object.entries(Option.getOrUndefined(server.variables) ?? {})) {\n      if (!(name in variableDefs)) variableDefs[name] = v;\n    }\n  }\n  const hasMultiple = servers.length > 1;\n  const variableNames = Object.keys(variableDefs);\n  if (!hasMultiple && variableNames.length === 0) return undefined;\n\n  const properties: Record<string, unknown> = {};\n  if (hasMultiple) {\n    properties.url = {\n      type: \"string\",\n      enum: servers.map((server) => server.url),\n      default: servers[0]!.url,\n      description: \"Which of the spec's servers to send the request to.\",\n    };\n  }\n  if (variableNames.length > 0) {\n    properties.variables = {\n      type: \"object\",\n      additionalProperties: false,\n      properties: Object.fromEntries(\n        Object.entries(variableDefs).map(([name, v]) => [\n          name,\n          {\n            type: \"string\",\n            default: v.default,\n            ...(Option.isSome(v.enum) ? { enum: v.enum.value } : {}),\n            ...(Option.isSome(v.description) ? { description: v.description.value } : {}),\n          },\n        ]),\n      ),\n      description: \"Values for the server URL `{variables}`; spec defaults apply when omitted.\",\n    };\n  }\n  return {\n    type: \"object\",\n    additionalProperties: false,\n    properties,\n    description: \"Optional host selection and server-URL variables for this request.\",\n  };\n};\n\nconst buildInputSchema = (\n  parameters: readonly OperationParameter[],\n  requestBody: OperationRequestBody | undefined,\n  servers: readonly ServerInfo[],\n): Record<string, unknown> | undefined => {\n  const properties: Record<string, unknown> = {};\n  const required: string[] = [];\n\n  for (const param of parameters) {\n    properties[param.name] = Option.getOrElse(param.schema, () => ({ type: \"string\" }));\n    if (param.required) required.push(param.name);\n  }\n\n  // A path/query parameter named `server` takes precedence over the host input.\n  const serverProperty = buildServerInputProperty(servers);\n  if (serverProperty && !(\"server\" in properties)) properties.server = serverProperty;\n\n  if (requestBody) {\n    properties.body = Option.getOrElse(requestBody.schema, () => ({ type: \"object\" }));\n    if (requestBody.required) required.push(\"body\");\n\n    // When the spec declares multiple media types for this requestBody,\n    // expose `contentType` so the model can pick. Default = first declared.\n    // `body` schema tracks the default; the model is responsible for\n    // supplying a body shape that matches whichever contentType it picks.\n    const contents = Option.getOrUndefined(requestBody.contents);\n    if (contents && contents.length > 1) {\n      properties.contentType = {\n        type: \"string\",\n        enum: contents.map((c) => c.contentType),\n        default: requestBody.contentType,\n        description:\n          \"Content-Type for the request body. Declared media types for this operation, in spec order.\",\n      };\n    }\n  }\n\n  if (Object.keys(properties).length === 0) return undefined;\n\n  return {\n    type: \"object\",\n    properties,\n    ...(required.length > 0 ? { required } : {}),\n    additionalProperties: false,\n  };\n};\n\n// ---------------------------------------------------------------------------\n// Operation ID derivation\n// ---------------------------------------------------------------------------\n\nconst deriveOperationId = (\n  method: HttpMethod,\n  pathTemplate: string,\n  operation: OperationObject,\n): string =>\n  operation.operationId ??\n  (`${method}_${pathTemplate.replace(/[^a-zA-Z0-9]+/g, \"_\")}`.replace(/^_+|_+$/g, \"\") ||\n    `${method}_operation`);\n\nconst explicitToolPath = (operation: OperationObject): string | undefined => {\n  const value = (operation as Record<string, unknown>)[\"x-executor-toolPath\"];\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n};\n\nconst explicitPathTemplate = (operation: OperationObject): string | undefined => {\n  const value = (operation as Record<string, unknown>)[\"x-executor-pathTemplate\"];\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n};\n\n// ---------------------------------------------------------------------------\n// Server extraction\n// ---------------------------------------------------------------------------\n\nconst extractServerList = (servers: readonly ServerObject[] | undefined): ServerInfo[] =>\n  (servers ?? []).flatMap((server) => {\n    if (!server.url) return [];\n    const serverVariables = server.variables as\n      | Record<\n          string,\n          {\n            readonly default?: string;\n            readonly enum?: readonly string[];\n            readonly description?: string;\n          }\n        >\n      | undefined;\n    const vars = serverVariables\n      ? Object.fromEntries(\n          Object.entries(serverVariables).flatMap(([name, v]) => {\n            if (v.default === undefined || v.default === null) return [];\n            const enumValues = Array.isArray(v.enum)\n              ? v.enum.filter((x): x is string => typeof x === \"string\")\n              : undefined;\n            return [\n              [\n                name,\n                ServerVariable.make({\n                  default: String(v.default),\n                  enum:\n                    enumValues && enumValues.length > 0 ? Option.some(enumValues) : Option.none(),\n                  description: Option.fromNullishOr(v.description),\n                }),\n              ],\n            ];\n          }),\n        )\n      : undefined;\n    return [\n      ServerInfo.make({\n        url: server.url,\n        description: Option.fromNullishOr(server.description),\n        variables: vars && Object.keys(vars).length > 0 ? Option.some(vars) : Option.none(),\n      }),\n    ];\n  });\n\nconst extractServers = (doc: ParsedDocument): ServerInfo[] => extractServerList(doc.servers);\n\nconst operationServers = (\n  pathItem: PathItemObject,\n  operation: OperationObject,\n  docServers: readonly ServerInfo[],\n): readonly ServerInfo[] => {\n  const operationLevel = extractServerList(operation.servers);\n  if (operationLevel.length > 0) return operationLevel;\n  const pathLevel = extractServerList(pathItem.servers);\n  if (pathLevel.length > 0) return pathLevel;\n  return docServers;\n};\n\n// ---------------------------------------------------------------------------\n// Main extraction\n// ---------------------------------------------------------------------------\n\n/** Extract all operations from a bundled OpenAPI 3.x document */\nexport const extract = Effect.fn(\"OpenApi.extract\")(function* (doc: ParsedDocument) {\n  const paths = doc.paths;\n  if (!paths) {\n    return yield* new OpenApiExtractionError({\n      message: \"OpenAPI document has no paths defined\",\n    });\n  }\n\n  const r = new DocResolver(doc);\n  const docServers = extractServers(doc);\n  const operations: ExtractedOperation[] = [];\n\n  for (const [pathTemplate, pathItem] of Object.entries(paths).sort(([a], [b]) =>\n    a.localeCompare(b),\n  )) {\n    if (!pathItem) continue;\n\n    for (const method of HTTP_METHODS) {\n      const operation = pathItem[method];\n      if (!operation) continue;\n\n      const parameters = extractParameters(pathItem, operation, r);\n      const requestBody = extractRequestBody(operation, r);\n      const servers = operationServers(pathItem, operation, docServers);\n      const inputSchema = buildInputSchema(parameters, requestBody, servers);\n      const outputSchema = extractOutputSchema(operation, r);\n      const tags = (operation.tags ?? []).filter((t) => t.trim().length > 0);\n      const operationPathTemplate = explicitPathTemplate(operation) ?? pathTemplate;\n\n      operations.push(\n        ExtractedOperation.make({\n          operationId: OperationId.make(deriveOperationId(method, pathTemplate, operation)),\n          toolPath: Option.fromNullishOr(explicitToolPath(operation)),\n          method,\n          servers,\n          pathTemplate: operationPathTemplate,\n          summary: Option.fromNullishOr(operation.summary),\n          description: Option.fromNullishOr(operation.description),\n          tags,\n          parameters,\n          requestBody: Option.fromNullishOr(requestBody),\n          inputSchema: Option.fromNullishOr(inputSchema),\n          outputSchema: Option.fromNullishOr(outputSchema),\n          deprecated: operation.deprecated === true,\n        }),\n      );\n    }\n  }\n\n  return ExtractionResult.make({\n    title: Option.fromNullishOr(doc.info?.title),\n    version: Option.fromNullishOr(doc.info?.version),\n    servers: docServers,\n    operations,\n  });\n});\n","import { Effect, Option, Predicate } from \"effect\";\nimport { Schema } from \"effect\";\n\nimport { parse, resolveSpecText, type ParsedDocument } from \"./parse\";\nimport { extract } from \"./extract\";\nimport { DocResolver } from \"./openapi-utils\";\nimport { HttpMethod, ServerInfo, type ExtractionResult } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// OAuth 2.0 flows — one entry per supported grant type\n// ---------------------------------------------------------------------------\n\n/** Scopes declared by a flow: `{ scopeName: description }` */\nconst OAuth2Scopes = Schema.Record(Schema.String, Schema.String);\nconst SecuritySchemeType = Schema.Literals([\"http\", \"apiKey\", \"oauth2\", \"openIdConnect\"]);\ntype SecuritySchemeType = typeof SecuritySchemeType.Type;\n\nconst decodeSecuritySchemeType = Schema.decodeUnknownOption(SecuritySchemeType);\n\nexport const OAuth2AuthorizationCodeFlow = Schema.Struct({\n  authorizationUrl: Schema.String,\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.OptionFromOptional(Schema.String),\n  scopes: OAuth2Scopes,\n});\nexport type OAuth2AuthorizationCodeFlow = typeof OAuth2AuthorizationCodeFlow.Type;\n\nexport const OAuth2ClientCredentialsFlow = Schema.Struct({\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.OptionFromOptional(Schema.String),\n  scopes: OAuth2Scopes,\n});\nexport type OAuth2ClientCredentialsFlow = typeof OAuth2ClientCredentialsFlow.Type;\n\nexport const OAuth2Flows = Schema.Struct({\n  authorizationCode: Schema.OptionFromOptional(OAuth2AuthorizationCodeFlow),\n  clientCredentials: Schema.OptionFromOptional(OAuth2ClientCredentialsFlow),\n});\nexport type OAuth2Flows = typeof OAuth2Flows.Type;\n\n// ---------------------------------------------------------------------------\n// Security scheme — what the spec declares it needs\n// ---------------------------------------------------------------------------\n\nexport const SecurityScheme = Schema.Struct({\n  /** Key name in components.securitySchemes (e.g. \"api_token\") */\n  name: Schema.String,\n  /** OpenAPI security scheme type */\n  type: SecuritySchemeType,\n  /** For type: \"http\" — e.g. \"bearer\", \"basic\" */\n  scheme: Schema.OptionFromOptional(Schema.String),\n  /** For type: \"http\" with scheme \"bearer\" — e.g. \"JWT\" */\n  bearerFormat: Schema.OptionFromOptional(Schema.String),\n  /** For type: \"apiKey\" — where the key goes */\n  in: Schema.OptionFromOptional(Schema.Literals([\"header\", \"query\", \"cookie\"])),\n  /** For type: \"apiKey\" — the header/query/cookie name */\n  headerName: Schema.OptionFromOptional(Schema.String),\n  description: Schema.OptionFromOptional(Schema.String),\n  /** For type: \"oauth2\" — declared flows (authorizationCode / clientCredentials only; implicit and password are deprecated). */\n  flows: Schema.OptionFromOptional(OAuth2Flows),\n  /** For type: \"openIdConnect\" — the discovery URL. */\n  openIdConnectUrl: Schema.OptionFromOptional(Schema.String),\n});\nexport type SecurityScheme = typeof SecurityScheme.Type;\n\n// ---------------------------------------------------------------------------\n// Auth strategy — a valid combination of security schemes\n// ---------------------------------------------------------------------------\n\nexport const AuthStrategy = Schema.Struct({\n  /** The security schemes required together for this strategy */\n  schemes: Schema.Array(Schema.String),\n});\nexport type AuthStrategy = typeof AuthStrategy.Type;\n\n// ---------------------------------------------------------------------------\n// Header preset — derived from an auth strategy\n// ---------------------------------------------------------------------------\n\nexport const HeaderPreset = Schema.Struct({\n  /** Human-readable label for the UI (e.g. \"Bearer Token\", \"API Key + Email\") */\n  label: Schema.String,\n  /** Headers this strategy needs. Value is null when the user must provide it. */\n  headers: Schema.Record(Schema.String, Schema.NullOr(Schema.String)),\n  /** Which headers should be stored as secrets */\n  secretHeaders: Schema.Array(Schema.String),\n});\nexport type HeaderPreset = typeof HeaderPreset.Type;\n\n// ---------------------------------------------------------------------------\n// OAuth2 preset — derived from an oauth2 security scheme + a flow choice\n// ---------------------------------------------------------------------------\n\nexport const OAuth2Preset = Schema.Struct({\n  /** Human-readable label for the UI (e.g. \"OAuth2 (Authorization Code) — oauth_app\") */\n  label: Schema.String,\n  /** The source security scheme this preset came from (components.securitySchemes key). */\n  securitySchemeName: Schema.String,\n  /** Which OAuth2 flow this preset uses. */\n  flow: Schema.Literals([\"authorizationCode\", \"clientCredentials\"]),\n  /** For authorizationCode: user-agent redirect URL (from the spec). */\n  authorizationUrl: Schema.OptionFromOptional(Schema.String),\n  /** Token endpoint to exchange the code / refresh. */\n  tokenUrl: Schema.String,\n  /** Optional refresh endpoint if the spec declares one separately. */\n  refreshUrl: Schema.OptionFromOptional(Schema.String),\n  /** Declared scopes for this flow: `{ scope: description }`. */\n  scopes: Schema.Record(Schema.String, Schema.String),\n  /** Identity scopes to request alongside API scopes. `\"auto\"` discovers standard OIDC scopes. */\n  identityScopes: Schema.Union([\n    Schema.Literal(\"auto\"),\n    Schema.Literal(false),\n    Schema.Array(Schema.String),\n  ]),\n});\nexport type OAuth2Preset = typeof OAuth2Preset.Type;\n\n// ---------------------------------------------------------------------------\n// Preview operation — lightweight shape for the add-source UI list\n// ---------------------------------------------------------------------------\n\nexport const PreviewOperation = Schema.Struct({\n  operationId: Schema.String,\n  method: HttpMethod,\n  path: Schema.String,\n  summary: Schema.OptionFromOptional(Schema.String),\n  tags: Schema.Array(Schema.String),\n  deprecated: Schema.Boolean,\n});\nexport type PreviewOperation = typeof PreviewOperation.Type;\n\n// ---------------------------------------------------------------------------\n// Spec preview — everything the frontend needs\n// ---------------------------------------------------------------------------\n\nexport const SpecPreview = Schema.Struct({\n  title: Schema.OptionFromOptional(Schema.String),\n  version: Schema.OptionFromOptional(Schema.String),\n  /** Reuses ServerInfo from extraction */\n  servers: Schema.Array(ServerInfo),\n  operationCount: Schema.Number,\n  /** Lightweight operation list for the add-source UI */\n  operations: Schema.Array(PreviewOperation),\n  tags: Schema.Array(Schema.String),\n  securitySchemes: Schema.Array(SecurityScheme),\n  /** Valid auth strategies (each is a set of schemes used together) */\n  authStrategies: Schema.Array(AuthStrategy),\n  /** Pre-built header presets derived from auth strategies */\n  headerPresets: Schema.Array(HeaderPreset),\n  /** OAuth2 presets — one per (oauth2 scheme × supported flow) combination */\n  oauth2Presets: Schema.Array(OAuth2Preset),\n});\nexport type SpecPreview = typeof SpecPreview.Type;\n\n// ---------------------------------------------------------------------------\n// Security scheme extraction\n// ---------------------------------------------------------------------------\n\nconst stringRecord = (value: unknown): Record<string, string> => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return {};\n  const out: Record<string, string> = {};\n  for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n    if (typeof v === \"string\") out[k] = v;\n  }\n  return out;\n};\n\nconst extractFlows = (rawFlows: unknown): Option.Option<OAuth2Flows> => {\n  if (!rawFlows || typeof rawFlows !== \"object\") return Option.none();\n  const flows = rawFlows as Record<string, unknown>;\n\n  const parseFlow = <K extends \"authorizationCode\" | \"clientCredentials\">(key: K): unknown =>\n    flows[key];\n\n  let authorizationCode: Option.Option<OAuth2AuthorizationCodeFlow> = Option.none();\n  const authCodeRaw = parseFlow(\"authorizationCode\");\n  if (authCodeRaw && typeof authCodeRaw === \"object\") {\n    const f = authCodeRaw as Record<string, unknown>;\n    const authUrl = typeof f.authorizationUrl === \"string\" ? f.authorizationUrl : null;\n    const tokenUrl = typeof f.tokenUrl === \"string\" ? f.tokenUrl : null;\n    if (authUrl && tokenUrl) {\n      authorizationCode = Option.some(\n        OAuth2AuthorizationCodeFlow.make({\n          authorizationUrl: authUrl,\n          tokenUrl,\n          refreshUrl: Option.fromNullishOr(\n            typeof f.refreshUrl === \"string\" ? f.refreshUrl : undefined,\n          ),\n          scopes: stringRecord(f.scopes),\n        }),\n      );\n    }\n  }\n\n  let clientCredentials: Option.Option<OAuth2ClientCredentialsFlow> = Option.none();\n  const ccRaw = parseFlow(\"clientCredentials\");\n  if (ccRaw && typeof ccRaw === \"object\") {\n    const f = ccRaw as Record<string, unknown>;\n    const tokenUrl = typeof f.tokenUrl === \"string\" ? f.tokenUrl : null;\n    if (tokenUrl) {\n      clientCredentials = Option.some(\n        OAuth2ClientCredentialsFlow.make({\n          tokenUrl,\n          refreshUrl: Option.fromNullishOr(\n            typeof f.refreshUrl === \"string\" ? f.refreshUrl : undefined,\n          ),\n          scopes: stringRecord(f.scopes),\n        }),\n      );\n    }\n  }\n\n  if (Option.isNone(authorizationCode) && Option.isNone(clientCredentials)) {\n    return Option.none();\n  }\n  return Option.some(OAuth2Flows.make({ authorizationCode, clientCredentials }));\n};\n\nconst extractSecuritySchemes = (\n  rawSchemes: Record<string, unknown>,\n  resolver: DocResolver,\n): SecurityScheme[] =>\n  Object.entries(rawSchemes).flatMap(([name, schemeOrRef]) => {\n    if (!schemeOrRef || typeof schemeOrRef !== \"object\") return [];\n    // Resolve $ref so schemes defined via `$ref` aren't silently dropped.\n    const resolved = resolver.resolve<Record<string, unknown>>(\n      schemeOrRef as Record<string, unknown>,\n    );\n    if (!resolved || typeof resolved !== \"object\") return [];\n    const scheme = resolved;\n\n    const type = decodeSecuritySchemeType(scheme.type);\n    if (Option.isNone(type)) return [];\n    const schemeType = type.value;\n\n    return [\n      SecurityScheme.make({\n        name,\n        type: schemeType,\n        scheme: Option.fromNullishOr(scheme.scheme as string | undefined),\n        bearerFormat: Option.fromNullishOr(scheme.bearerFormat as string | undefined),\n        in: Option.fromNullishOr(scheme.in as \"header\" | \"query\" | \"cookie\" | undefined),\n        headerName: Option.fromNullishOr(scheme.name as string | undefined),\n        description: Option.fromNullishOr(scheme.description as string | undefined),\n        flows: schemeType === \"oauth2\" ? extractFlows(scheme.flows) : Option.none(),\n        openIdConnectUrl: Option.fromNullishOr(scheme.openIdConnectUrl as string | undefined),\n      }),\n    ];\n  });\n\n// ---------------------------------------------------------------------------\n// Header preset builder\n// ---------------------------------------------------------------------------\n\nconst buildHeaderPresets = (\n  schemes: readonly SecurityScheme[],\n  strategies: readonly AuthStrategy[],\n): HeaderPreset[] => {\n  const schemeMap = new Map(schemes.map((s) => [s.name, s]));\n\n  return strategies.flatMap((strategy) => {\n    const resolved = strategy.schemes\n      .map((name) => schemeMap.get(name))\n      .filter(Predicate.isNotUndefined);\n\n    if (resolved.length === 0) return [];\n\n    const headers: Record<string, string | null> = {};\n    const secretHeaders: string[] = [];\n    const labelParts: string[] = [];\n\n    for (const scheme of resolved) {\n      if (scheme.type === \"http\" && Option.getOrElse(scheme.scheme, () => \"\") === \"bearer\") {\n        headers[\"Authorization\"] = null;\n        secretHeaders.push(\"Authorization\");\n        labelParts.push(\"Bearer Token\");\n      } else if (scheme.type === \"http\" && Option.getOrElse(scheme.scheme, () => \"\") === \"basic\") {\n        headers[\"Authorization\"] = null;\n        secretHeaders.push(\"Authorization\");\n        labelParts.push(\"Basic Auth\");\n      } else if (scheme.type === \"apiKey\" && Option.getOrElse(scheme.in, () => \"\") === \"header\") {\n        const headerName = Option.getOrElse(scheme.headerName, () => scheme.name);\n        headers[headerName] = null;\n        secretHeaders.push(headerName);\n        labelParts.push(scheme.name);\n      } else if (scheme.type === \"apiKey\") {\n        labelParts.push(`${scheme.name} (${Option.getOrElse(scheme.in, () => \"unknown\")})`);\n      } else if (scheme.type === \"oauth2\" || scheme.type === \"openIdConnect\") {\n        return [];\n      } else {\n        labelParts.push(scheme.name);\n      }\n    }\n\n    if (Object.keys(headers).length === 0 && resolved.length > 0) {\n      return [\n        HeaderPreset.make({\n          label: labelParts.join(\" + \"),\n          headers: {},\n          secretHeaders: [],\n        }),\n      ];\n    }\n\n    return [\n      HeaderPreset.make({\n        label: labelParts.join(\" + \"),\n        headers,\n        secretHeaders,\n      }),\n    ];\n  });\n};\n\n// ---------------------------------------------------------------------------\n// OAuth2 preset builder\n// ---------------------------------------------------------------------------\n\nconst buildOAuth2Presets = (schemes: readonly SecurityScheme[]): OAuth2Preset[] => {\n  const presets: OAuth2Preset[] = [];\n  for (const scheme of schemes) {\n    if (scheme.type !== \"oauth2\") continue;\n    if (Option.isNone(scheme.flows)) continue;\n    const flows = scheme.flows.value;\n\n    if (Option.isSome(flows.authorizationCode)) {\n      const flow = flows.authorizationCode.value;\n      presets.push(\n        OAuth2Preset.make({\n          label: `OAuth2 Authorization Code · ${scheme.name}`,\n          securitySchemeName: scheme.name,\n          flow: \"authorizationCode\",\n          authorizationUrl: Option.some(flow.authorizationUrl),\n          tokenUrl: flow.tokenUrl,\n          refreshUrl: flow.refreshUrl,\n          scopes: flow.scopes,\n          identityScopes: \"auto\",\n        }),\n      );\n    }\n\n    if (Option.isSome(flows.clientCredentials)) {\n      const flow = flows.clientCredentials.value;\n      presets.push(\n        OAuth2Preset.make({\n          label: `OAuth2 Client Credentials · ${scheme.name}`,\n          securitySchemeName: scheme.name,\n          flow: \"clientCredentials\",\n          authorizationUrl: Option.none(),\n          tokenUrl: flow.tokenUrl,\n          refreshUrl: flow.refreshUrl,\n          scopes: flow.scopes,\n          identityScopes: false,\n        }),\n      );\n    }\n  }\n  return presets;\n};\n\n// ---------------------------------------------------------------------------\n// Collect unique tags from extraction result\n// ---------------------------------------------------------------------------\n\nconst collectTags = (result: ExtractionResult): string[] => {\n  const tagSet = new Set<string>();\n  for (const op of result.operations) {\n    for (const tag of op.tags) tagSet.add(tag);\n  }\n  return [...tagSet].sort();\n};\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/** Preview already-resolved spec text — extract metadata without registering\n *  anything and without any HTTP dependency. */\nexport const previewSpecText = Effect.fn(\"OpenApi.previewSpecText\")(function* (specText: string) {\n  const doc: ParsedDocument = yield* parse(specText);\n  const result = yield* extract(doc);\n\n  const resolver = new DocResolver(doc);\n  const securitySchemes = extractSecuritySchemes(doc.components?.securitySchemes ?? {}, resolver);\n\n  const rawSecurity = (doc.security ?? []) as Array<Record<string, unknown>>;\n  const declaredStrategies = rawSecurity.map((entry) =>\n    AuthStrategy.make({ schemes: Object.keys(entry) }),\n  );\n  // Fall back to one strategy per scheme when the spec only declares schemes\n  // under components (e.g. Sentry) so the user still sees auth options.\n  const authStrategies =\n    declaredStrategies.length > 0\n      ? declaredStrategies\n      : securitySchemes.map((scheme) => AuthStrategy.make({ schemes: [scheme.name] }));\n\n  return SpecPreview.make({\n    title: result.title,\n    version: result.version,\n    servers: result.servers,\n    operationCount: result.operations.length,\n    operations: result.operations.map((op) =>\n      PreviewOperation.make({\n        operationId: op.operationId,\n        method: op.method,\n        path: op.pathTemplate,\n        summary: op.summary,\n        tags: op.tags,\n        deprecated: op.deprecated,\n      }),\n    ),\n    tags: collectTags(result),\n    securitySchemes,\n    authStrategies,\n    headerPresets: buildHeaderPresets(securitySchemes, authStrategies),\n    oauth2Presets: buildOAuth2Presets(securitySchemes),\n  });\n});\n\n/** Preview an OpenAPI spec — extract metadata without registering anything.\n *  Accepts either a URL or raw JSON/YAML text. */\nexport const previewSpec = Effect.fn(\"OpenApi.previewSpec\")(function* (input: string) {\n  const specText = yield* resolveSpecText(input);\n  return yield* previewSpecText(specText);\n});\n"],"mappings":";AAAA,SAAS,MAAM,cAAc;AAWtB,IAAM,oBAAN,cAAgC,OAAO,iBAAoC;AAAA,EAChF;AAAA,EACA;AAAA,IACE,SAAS,OAAO;AAAA,EAClB;AAAA,EACA,EAAE,eAAe,IAAI;AACvB,EAAE;AAAC;AAEI,IAAM,yBAAN,cAAqC,OAAO,iBAAyC;AAAA,EAC1F;AAAA,EACA;AAAA,IACE,SAAS,OAAO;AAAA,EAClB;AAAA,EACA,EAAE,eAAe,IAAI;AACvB,EAAE;AAAC;AAEI,IAAM,yBAAN,cAAqC,KAAK,YAAY,wBAAwB,EAIlF;AAAC;AAEG,IAAM,oBAAN,cAAgC,OAAO,iBAAoC;AAAA,EAChF;AAAA,EACA;AAAA,IACE,SAAS,OAAO;AAAA,EAClB;AAAA,EACA,EAAE,eAAe,IAAI;AACvB,EAAE;AAAC;AAOI,IAAM,2BAAN,cAAuC,KAAK,YAAY,0BAA0B,EAWtF;AAAC;;;ACxDJ,SAAS,UAAU,QAAQ,UAAAA,eAAc;AACzC,SAAS,YAAY,yBAAyB;AAC9C,OAAO,UAAU;AAYjB,IAAM,kCAAN,cAA8C,uBAAuB;AAAC;AAQ/D,IAAM,gBAAgB,OAAO,GAAG,uBAAuB,EAAE,WAC9D,KACA,aACA;AACA,QAAM,SAAS,OAAO,WAAW;AACjC,QAAM,aAAa,IAAI,IAAI,GAAG;AAC9B,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,aAAa,eAAe,CAAC,CAAC,GAAG;AAC1E,eAAW,aAAa,IAAI,MAAM,KAAK;AAAA,EACzC;AACA,MAAI,UAAU,kBAAkB,IAAI,WAAW,SAAS,CAAC,EAAE;AAAA,IACzD,kBAAkB,UAAU,UAAU,oDAAoD;AAAA,EAC5F;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,aAAa,WAAW,CAAC,CAAC,GAAG;AACtE,cAAU,kBAAkB,UAAU,SAAS,MAAM,KAAK;AAAA,EAC5D;AACA,QAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,IAC9C,OAAO,QAAQ,SAAS,QAAQ,EAAE,CAAC;AAAA,IACnC,OAAO;AAAA,MACL,CAAC,WACC,IAAI,kBAAkB;AAAA,QACpB,SAAS;AAAA,MACX,CAAC;AAAA,IACL;AAAA,EACF;AACA,MAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AACnD,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS,0CAA0C,SAAS,MAAM;AAAA,IACpE,CAAC;AAAA,EACH;AACA,SAAO,OAAO,SAAS,KAAK;AAAA,IAC1B,OAAO;AAAA,MACL,CAAC,WACC,IAAI,kBAAkB;AAAA,QACpB,SAAS;AAAA,MACX,CAAC;AAAA,IACL;AAAA,EACF;AACF,CAAC;AAMM,IAAM,kBAAkB,CAAC,OAAe,gBAC7C,MAAM,WAAW,SAAS,KAAK,MAAM,WAAW,UAAU,IACtD,cAAc,OAAO,WAAW,IAChC,OAAO,QAAQ,KAAK;AAUnB,IAAM,QAAQ,OAAO,GAAG,eAAe,EAAE,WAAW,MAAc;AACvE,QAAM,MAAM,OAAO,kBAAkB,IAAI;AAEzC,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,WAAO,OAAO,IAAI,gCAAgC;AAAA,MAChD,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AAEA,SAAO;AACT,CAAC;AAMD,IAAM,aAAa,CAAC,QAClB,aAAa,OAAO,OAAO,IAAI,YAAY,YAAY,IAAI,QAAQ,WAAW,IAAI;AAEpF,IAAM,oBAAoB,CAAC,SACzB,OAAO,IAAI,aAAa;AACtB,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,OAAO,cAAc,OAAO,EAAE;AAAA,IAC3C,OAAO;AAAA,MACL,MACE,IAAI,kBAAkB;AAAA,QACpB,SAAS;AAAA,MACX,CAAC;AAAA,IACL;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,SAAO;AACT,CAAC;AAEH,IAAM,gBAAgBC,QAAO,oBAAoBA,QAAO,eAAeA,QAAO,OAAO,CAAC;AAEtF,IAAM,gBAAgB,CAAC,SAAkD;AACvE,QAAM,YAAY,OAAO,IAAI;AAAA,IAC3B,KAAK,MAAM,KAAK,MAAM,IAAI;AAAA,IAC1B,OAAO,MAAM;AAAA,EACf,CAAC;AACD,MAAI,CAAC,KAAK,WAAW,GAAG,KAAK,CAAC,KAAK,WAAW,GAAG,EAAG,QAAO;AAC3D,SAAO,cAAc,IAAI,EAAE,KAAK,OAAO,MAAM,MAAM,SAAS,CAAC;AAC/D;;;AC7GO,IAAM,cAAN,MAAkB;AAAA,EACvB,YAAqB,KAAqB;AAArB;AAAA,EAAsB;AAAA,EAAtB;AAAA;AAAA,EAGrB,QAAW,OAA8E;AACvF,QAAI,MAAM,KAAK,GAAG;AAChB,YAAM,WAAW,KAAK,eAAe,MAAM,IAAI;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,KAAsB;AAC3C,QAAI,CAAC,IAAI,WAAW,IAAI,EAAG,QAAO;AAClC,UAAM,WAAW,IAAI,MAAM,CAAC,EAAE,MAAM,GAAG;AACvC,QAAI,UAAmB,KAAK;AAC5B,eAAW,WAAW,UAAU;AAC9B,UAAI,OAAO,YAAY,YAAY,YAAY,KAAM,QAAO;AAC5D,gBAAW,QAAoC,OAAO;AAAA,IACxD;AACA,WAAO;AAAA,EACT;AACF;AAEA,IAAM,QAAQ,CAAC,UACb,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU;AAOpD,IAAM,yBAAyB,CAAC,KAAa,WAA2C;AAC7F,MAAI,MAAM;AACV,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,UAAM,IAAI,WAAW,IAAI,IAAI,KAAK,KAAK;AAAA,EACzC;AACA,SAAO;AACT;AAKO,IAAM,mBAAmB,CAC9B,aACA,WACA,cACW;AACX,QAAM,SAAiC,CAAC;AACxC,aAAW,CAAC,MAAM,CAAC,KAAK,OAAO,QAAQ,aAAa,CAAC,CAAC,EAAG,QAAO,IAAI,IAAI,EAAE;AAC1E,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AACrD,QAAI,MAAO,QAAO,IAAI,IAAI;AAAA,EAC5B;AACA,SAAO,uBAAuB,aAAa,MAAM;AACnD;AAWO,IAAM,mBAAmB,CAC9B,YACiE;AACjE,MAAI,CAAC,QAAS,QAAO,CAAC;AACtB,SAAO,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,EAAE,WAAW,MAAM,EAAE;AACnF;AAaO,IAAM,mBAAmB,CAC9B,YAC8D;AAC9D,QAAM,QAAQ,iBAAiB,OAAO,EAAE,CAAC;AACzC,SAAO,QAAQ,QAAQ;AACzB;AAIO,IAAM,2BAA2B,CACtC,YAC8D;AAC9D,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,QAAM,OACJ,QAAQ,KAAK,CAAC,CAAC,EAAE,MAAM,OAAO,kBAAkB,KAChD,QAAQ,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,SAAS,OAAO,CAAC,KACzD,QAAQ,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,SAAS,MAAM,CAAC,KACxD,QAAQ,CAAC;AACX,SAAO,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,EAAE,IAAI;AACzD;;;ACjIA,SAAS,UAAAC,eAAc;AACvB,SAAS,wBAAkD;AAC3D;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAkBP,SAAS,sBAAsB;AAoBxB,IAAM,6BAA6B,CACxC,WAEA,OAAO,IAAI,CAAC,UAA0B;AACpC,MAAI,CAAC,qBAAqB,KAAK,GAAG;AAChC,WAAO,EAAE,GAAG,OAAO,MAAM,iBAAiB,KAAK,MAAM,IAAI,EAAE;AAAA,EAC7D;AACA,QAAM,SAAS,6BAA6B,KAAK;AACjD,SAAO,EAAE,GAAG,QAAQ,MAAM,OAAO,QAAQ,GAAG;AAC9C,CAAC;AAMI,IAAM,cAAcA,QAAO,OAAO,KAAKA,QAAO,MAAM,aAAa,CAAC;AAOlE,IAAM,aAAaA,QAAO,SAAS;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,oBAAoBA,QAAO,SAAS,CAAC,QAAQ,SAAS,UAAU,QAAQ,CAAC;AAO/E,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EAC9C,MAAMA,QAAO;AAAA,EACb,UAAU;AAAA,EACV,UAAUA,QAAO;AAAA,EACjB,QAAQA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EAChD,OAAOA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAC9C,SAASA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EACjD,eAAeA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EACvD,aAAaA,QAAO,mBAAmBA,QAAO,MAAM;AACtD,CAAC;AAYM,IAAM,iBAAiBA,QAAO,OAAO;AAAA,EAC1C,aAAaA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACpD,OAAOA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAC9C,SAASA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EACjD,eAAeA,QAAO,mBAAmBA,QAAO,OAAO;AACzD,CAAC;AAGM,IAAM,eAAeA,QAAO,OAAO;AAAA,EACxC,aAAaA,QAAO;AAAA,EACpB,QAAQA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EAChD,UAAUA,QAAO,mBAAmBA,QAAO,OAAOA,QAAO,QAAQ,cAAc,CAAC;AAClF,CAAC;AAGM,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EAChD,UAAUA,QAAO;AAAA;AAAA;AAAA,EAGjB,aAAaA,QAAO;AAAA;AAAA;AAAA,EAGpB,QAAQA,QAAO,mBAAmBA,QAAO,OAAO;AAAA;AAAA;AAAA;AAAA,EAIhD,UAAUA,QAAO,mBAAmBA,QAAO,MAAM,YAAY,CAAC;AAChE,CAAC;AAGM,IAAM,iBAAiBA,QAAO,OAAO;AAAA,EAC1C,SAASA,QAAO;AAAA,EAChB,MAAMA,QAAO,mBAAmBA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA,EAC3D,aAAaA,QAAO,mBAAmBA,QAAO,MAAM;AACtD,CAAC;AAGM,IAAM,aAAaA,QAAO,OAAO;AAAA,EACtC,KAAKA,QAAO;AAAA,EACZ,aAAaA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACpD,WAAWA,QAAO,mBAAmBA,QAAO,OAAOA,QAAO,QAAQ,cAAc,CAAC;AACnF,CAAC;AAGM,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EAC9C,aAAa;AAAA,EACb,UAAUA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACjD,QAAQ;AAAA,EACR,SAASA,QAAO,MAAM,UAAU;AAAA,EAChC,cAAcA,QAAO;AAAA,EACrB,SAASA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAChD,aAAaA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACpD,MAAMA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAChC,YAAYA,QAAO,MAAM,kBAAkB;AAAA,EAC3C,aAAaA,QAAO,mBAAmB,oBAAoB;AAAA,EAC3D,aAAaA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EACrD,cAAcA,QAAO,mBAAmBA,QAAO,OAAO;AAAA,EACtD,YAAYA,QAAO;AACrB,CAAC;AAGM,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EAC5C,OAAOA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAC9C,SAASA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAChD,SAASA,QAAO,MAAM,UAAU;AAAA,EAChC,YAAYA,QAAO,MAAM,kBAAkB;AAC7C,CAAC;AAOM,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EAC5C,QAAQ;AAAA,EACR,SAASA,QAAO,SAASA,QAAO,MAAM,UAAU,CAAC;AAAA,EACjD,cAAcA,QAAO;AAAA,EACrB,YAAYA,QAAO,MAAM,kBAAkB;AAAA,EAC3C,aAAaA,QAAO,mBAAmB,oBAAoB;AAC7D,CAAC;AAOM,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EAC5C,QAAQA,QAAO;AAAA,EACf,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AAAA,EACnD,MAAMA,QAAO,OAAOA,QAAO,OAAO;AAAA,EAClC,OAAOA,QAAO,OAAOA,QAAO,OAAO;AACrC,CAAC;;;ACtMD,SAAS,UAAAC,SAAQ,cAAc;AAiC/B,IAAM,eAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,wBAAwB,oBAAI,IAAY,CAAC,QAAQ,SAAS,UAAU,QAAQ,CAAC;AAMnF,IAAM,oBAAoB,CACxB,UACA,WACA,MACyB;AACzB,QAAM,SAAS,oBAAI,IAA6B;AAEhD,aAAW,OAAO,SAAS,cAAc,CAAC,GAAG;AAC3C,UAAM,IAAI,EAAE,QAAyB,GAAG;AACxC,QAAI,CAAC,EAAG;AACR,WAAO,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAAA,EACnC;AACA,aAAW,OAAO,UAAU,cAAc,CAAC,GAAG;AAC5C,UAAM,IAAI,EAAE,QAAyB,GAAG;AACxC,QAAI,CAAC,EAAG;AACR,WAAO,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAAA,EACnC;AAEA,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC,EACvB,OAAO,CAAC,MAAM,sBAAsB,IAAI,EAAE,EAAE,CAAC,EAC7C;AAAA,IAAI,CAAC,MACJ,mBAAmB,KAAK;AAAA,MACtB,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE,OAAO,SAAS,OAAO,EAAE,aAAa;AAAA,MAClD,QAAQ,OAAO,cAAc,EAAE,MAAM;AAAA,MACrC,OAAO,OAAO,cAAc,EAAE,KAAK;AAAA,MACnC,SAAS,OAAO,cAAc,EAAE,OAAO;AAAA,MACvC,eAAe,OAAO,cAAc,mBAAmB,IAAI,EAAE,gBAAgB,MAAS;AAAA,MACtF,aAAa,OAAO,cAAc,EAAE,WAAW;AAAA,IACjD,CAAC;AAAA,EACH;AACJ;AAMA,IAAM,sBAAsB,CAC1B,aAC+C;AAC/C,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,MAAsC,CAAC;AAC7C,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAClD,QAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM;AAC7C,UAAM,IAAI;AAMV,QAAI,IAAI,IAAI,eAAe,KAAK;AAAA,MAC9B,aAAa,OAAO,cAAc,EAAE,WAAW;AAAA,MAC/C,OAAO,OAAO,cAAc,EAAE,KAAK;AAAA,MACnC,SAAS,OAAO,cAAc,EAAE,OAAO;AAAA,MACvC,eAAe,OAAO,cAAc,EAAE,aAAa;AAAA,IACrD,CAAC;AAAA,EACH;AACA,SAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAC7C;AAEA,IAAM,qBAAqB,CACzB,WACA,MACqC;AACrC,MAAI,CAAC,UAAU,YAAa,QAAO;AAEnC,QAAM,OAAO,EAAE,QAA2B,UAAU,WAAW;AAC/D,MAAI,CAAC,KAAM,QAAO;AAElB,QAAM,WAAW,iBAAiB,KAAK,OAAO,EAAE;AAAA,IAAI,CAAC,EAAE,WAAW,MAAM,MACtE,aAAa,KAAK;AAAA,MAChB,aAAa;AAAA,MACb,QAAQ,OAAO,cAAc,MAAM,MAAM;AAAA,MACzC,UAAU,OAAO;AAAA,QACf,oBAAqB,MAAiD,QAAQ;AAAA,MAChF;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,SAAS,WAAW,EAAG,QAAO;AAIlC,QAAM,iBAAiB,SAAS,CAAC;AAEjC,SAAO,qBAAqB,KAAK;AAAA,IAC/B,UAAU,KAAK,aAAa;AAAA,IAC5B,aAAa,eAAe;AAAA,IAC5B,QAAQ,eAAe;AAAA,IACvB,UAAU,OAAO,KAAK,QAAQ;AAAA,EAChC,CAAC;AACH;AAMA,IAAM,sBAAsB,CAAC,WAA4B,MAAwC;AAC/F,MAAI,CAAC,UAAU,UAAW,QAAO;AAEjC,QAAM,UAAU,OAAO,QAAQ,UAAU,SAAS;AAClD,QAAM,YAAY;AAAA,IAChB,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA,IACnF,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,SAAS;AAAA,EAC5C;AAEA,aAAW,CAAC,EAAE,GAAG,KAAK,WAAW;AAC/B,UAAM,OAAO,EAAE,QAAwB,GAAG;AAC1C,QAAI,CAAC,KAAM;AACX,UAAM,UAAU,yBAAyB,KAAK,OAAO;AACrD,QAAI,SAAS,MAAM,OAAQ,QAAO,QAAQ,MAAM;AAAA,EAClD;AAEA,SAAO;AACT;AAQA,IAAM,2BAA2B,CAC/B,YACwC;AACxC,QAAM,eAA+C,CAAC;AACtD,aAAW,UAAU,SAAS;AAC5B,eAAW,CAAC,MAAM,CAAC,KAAK,OAAO,QAAQ,OAAO,eAAe,OAAO,SAAS,KAAK,CAAC,CAAC,GAAG;AACrF,UAAI,EAAE,QAAQ,cAAe,cAAa,IAAI,IAAI;AAAA,IACpD;AAAA,EACF;AACA,QAAM,cAAc,QAAQ,SAAS;AACrC,QAAM,gBAAgB,OAAO,KAAK,YAAY;AAC9C,MAAI,CAAC,eAAe,cAAc,WAAW,EAAG,QAAO;AAEvD,QAAM,aAAsC,CAAC;AAC7C,MAAI,aAAa;AACf,eAAW,MAAM;AAAA,MACf,MAAM;AAAA,MACN,MAAM,QAAQ,IAAI,CAAC,WAAW,OAAO,GAAG;AAAA,MACxC,SAAS,QAAQ,CAAC,EAAG;AAAA,MACrB,aAAa;AAAA,IACf;AAAA,EACF;AACA,MAAI,cAAc,SAAS,GAAG;AAC5B,eAAW,YAAY;AAAA,MACrB,MAAM;AAAA,MACN,sBAAsB;AAAA,MACtB,YAAY,OAAO;AAAA,QACjB,OAAO,QAAQ,YAAY,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;AAAA,UAC9C;AAAA,UACA;AAAA,YACE,MAAM;AAAA,YACN,SAAS,EAAE;AAAA,YACX,GAAI,OAAO,OAAO,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,IAAI,CAAC;AAAA,YACtD,GAAI,OAAO,OAAO,EAAE,WAAW,IAAI,EAAE,aAAa,EAAE,YAAY,MAAM,IAAI,CAAC;AAAA,UAC7E;AAAA,QACF,CAAC;AAAA,MACH;AAAA,MACA,aAAa;AAAA,IACf;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,sBAAsB;AAAA,IACtB;AAAA,IACA,aAAa;AAAA,EACf;AACF;AAEA,IAAM,mBAAmB,CACvB,YACA,aACA,YACwC;AACxC,QAAM,aAAsC,CAAC;AAC7C,QAAM,WAAqB,CAAC;AAE5B,aAAW,SAAS,YAAY;AAC9B,eAAW,MAAM,IAAI,IAAI,OAAO,UAAU,MAAM,QAAQ,OAAO,EAAE,MAAM,SAAS,EAAE;AAClF,QAAI,MAAM,SAAU,UAAS,KAAK,MAAM,IAAI;AAAA,EAC9C;AAGA,QAAM,iBAAiB,yBAAyB,OAAO;AACvD,MAAI,kBAAkB,EAAE,YAAY,YAAa,YAAW,SAAS;AAErE,MAAI,aAAa;AACf,eAAW,OAAO,OAAO,UAAU,YAAY,QAAQ,OAAO,EAAE,MAAM,SAAS,EAAE;AACjF,QAAI,YAAY,SAAU,UAAS,KAAK,MAAM;AAM9C,UAAM,WAAW,OAAO,eAAe,YAAY,QAAQ;AAC3D,QAAI,YAAY,SAAS,SAAS,GAAG;AACnC,iBAAW,cAAc;AAAA,QACvB,MAAM;AAAA,QACN,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,WAAW;AAAA,QACvC,SAAS,YAAY;AAAA,QACrB,aACE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,UAAU,EAAE,WAAW,EAAG,QAAO;AAEjD,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,SAAS,SAAS,IAAI,EAAE,SAAS,IAAI,CAAC;AAAA,IAC1C,sBAAsB;AAAA,EACxB;AACF;AAMA,IAAM,oBAAoB,CACxB,QACA,cACA,cAEA,UAAU,gBACT,GAAG,MAAM,IAAI,aAAa,QAAQ,kBAAkB,GAAG,CAAC,GAAG,QAAQ,YAAY,EAAE,KAChF,GAAG,MAAM;AAEb,IAAM,mBAAmB,CAAC,cAAmD;AAC3E,QAAM,QAAS,UAAsC,qBAAqB;AAC1E,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,IAAM,uBAAuB,CAAC,cAAmD;AAC/E,QAAM,QAAS,UAAsC,yBAAyB;AAC9E,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAMA,IAAM,oBAAoB,CAAC,aACxB,WAAW,CAAC,GAAG,QAAQ,CAAC,WAAW;AAClC,MAAI,CAAC,OAAO,IAAK,QAAO,CAAC;AACzB,QAAM,kBAAkB,OAAO;AAU/B,QAAM,OAAO,kBACT,OAAO;AAAA,IACL,OAAO,QAAQ,eAAe,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM;AACrD,UAAI,EAAE,YAAY,UAAa,EAAE,YAAY,KAAM,QAAO,CAAC;AAC3D,YAAM,aAAa,MAAM,QAAQ,EAAE,IAAI,IACnC,EAAE,KAAK,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IACvD;AACJ,aAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,eAAe,KAAK;AAAA,YAClB,SAAS,OAAO,EAAE,OAAO;AAAA,YACzB,MACE,cAAc,WAAW,SAAS,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK;AAAA,YAC9E,aAAa,OAAO,cAAc,EAAE,WAAW;AAAA,UACjD,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,IACA;AACJ,SAAO;AAAA,IACL,WAAW,KAAK;AAAA,MACd,KAAK,OAAO;AAAA,MACZ,aAAa,OAAO,cAAc,OAAO,WAAW;AAAA,MACpD,WAAW,QAAQ,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK;AAAA,IACpF,CAAC;AAAA,EACH;AACF,CAAC;AAEH,IAAM,iBAAiB,CAAC,QAAsC,kBAAkB,IAAI,OAAO;AAE3F,IAAM,mBAAmB,CACvB,UACA,WACA,eAC0B;AAC1B,QAAM,iBAAiB,kBAAkB,UAAU,OAAO;AAC1D,MAAI,eAAe,SAAS,EAAG,QAAO;AACtC,QAAM,YAAY,kBAAkB,SAAS,OAAO;AACpD,MAAI,UAAU,SAAS,EAAG,QAAO;AACjC,SAAO;AACT;AAOO,IAAM,UAAUC,QAAO,GAAG,iBAAiB,EAAE,WAAW,KAAqB;AAClF,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,OAAO;AACV,WAAO,OAAO,IAAI,uBAAuB;AAAA,MACvC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,IAAI,IAAI,YAAY,GAAG;AAC7B,QAAM,aAAa,eAAe,GAAG;AACrC,QAAM,aAAmC,CAAC;AAE1C,aAAW,CAAC,cAAc,QAAQ,KAAK,OAAO,QAAQ,KAAK,EAAE;AAAA,IAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MACxE,EAAE,cAAc,CAAC;AAAA,EACnB,GAAG;AACD,QAAI,CAAC,SAAU;AAEf,eAAW,UAAU,cAAc;AACjC,YAAM,YAAY,SAAS,MAAM;AACjC,UAAI,CAAC,UAAW;AAEhB,YAAM,aAAa,kBAAkB,UAAU,WAAW,CAAC;AAC3D,YAAM,cAAc,mBAAmB,WAAW,CAAC;AACnD,YAAM,UAAU,iBAAiB,UAAU,WAAW,UAAU;AAChE,YAAM,cAAc,iBAAiB,YAAY,aAAa,OAAO;AACrE,YAAM,eAAe,oBAAoB,WAAW,CAAC;AACrD,YAAM,QAAQ,UAAU,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;AACrE,YAAM,wBAAwB,qBAAqB,SAAS,KAAK;AAEjE,iBAAW;AAAA,QACT,mBAAmB,KAAK;AAAA,UACtB,aAAa,YAAY,KAAK,kBAAkB,QAAQ,cAAc,SAAS,CAAC;AAAA,UAChF,UAAU,OAAO,cAAc,iBAAiB,SAAS,CAAC;AAAA,UAC1D;AAAA,UACA;AAAA,UACA,cAAc;AAAA,UACd,SAAS,OAAO,cAAc,UAAU,OAAO;AAAA,UAC/C,aAAa,OAAO,cAAc,UAAU,WAAW;AAAA,UACvD;AAAA,UACA;AAAA,UACA,aAAa,OAAO,cAAc,WAAW;AAAA,UAC7C,aAAa,OAAO,cAAc,WAAW;AAAA,UAC7C,cAAc,OAAO,cAAc,YAAY;AAAA,UAC/C,YAAY,UAAU,eAAe;AAAA,QACvC,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO,iBAAiB,KAAK;AAAA,IAC3B,OAAO,OAAO,cAAc,IAAI,MAAM,KAAK;AAAA,IAC3C,SAAS,OAAO,cAAc,IAAI,MAAM,OAAO;AAAA,IAC/C,SAAS;AAAA,IACT;AAAA,EACF,CAAC;AACH,CAAC;;;AC3ZD,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,iBAAiB;AAC1C,SAAS,UAAAC,eAAc;AAYvB,IAAM,eAAeC,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AAC/D,IAAM,qBAAqBA,QAAO,SAAS,CAAC,QAAQ,UAAU,UAAU,eAAe,CAAC;AAGxF,IAAM,2BAA2BA,QAAO,oBAAoB,kBAAkB;AAEvE,IAAM,8BAA8BA,QAAO,OAAO;AAAA,EACvD,kBAAkBA,QAAO;AAAA,EACzB,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACnD,QAAQ;AACV,CAAC;AAGM,IAAM,8BAA8BA,QAAO,OAAO;AAAA,EACvD,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACnD,QAAQ;AACV,CAAC;AAGM,IAAM,cAAcA,QAAO,OAAO;AAAA,EACvC,mBAAmBA,QAAO,mBAAmB,2BAA2B;AAAA,EACxE,mBAAmBA,QAAO,mBAAmB,2BAA2B;AAC1E,CAAC;AAOM,IAAM,iBAAiBA,QAAO,OAAO;AAAA;AAAA,EAE1C,MAAMA,QAAO;AAAA;AAAA,EAEb,MAAM;AAAA;AAAA,EAEN,QAAQA,QAAO,mBAAmBA,QAAO,MAAM;AAAA;AAAA,EAE/C,cAAcA,QAAO,mBAAmBA,QAAO,MAAM;AAAA;AAAA,EAErD,IAAIA,QAAO,mBAAmBA,QAAO,SAAS,CAAC,UAAU,SAAS,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE5E,YAAYA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EACnD,aAAaA,QAAO,mBAAmBA,QAAO,MAAM;AAAA;AAAA,EAEpD,OAAOA,QAAO,mBAAmB,WAAW;AAAA;AAAA,EAE5C,kBAAkBA,QAAO,mBAAmBA,QAAO,MAAM;AAC3D,CAAC;AAOM,IAAM,eAAeA,QAAO,OAAO;AAAA;AAAA,EAExC,SAASA,QAAO,MAAMA,QAAO,MAAM;AACrC,CAAC;AAOM,IAAM,eAAeA,QAAO,OAAO;AAAA;AAAA,EAExC,OAAOA,QAAO;AAAA;AAAA,EAEd,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAOA,QAAO,MAAM,CAAC;AAAA;AAAA,EAElE,eAAeA,QAAO,MAAMA,QAAO,MAAM;AAC3C,CAAC;AAOM,IAAM,eAAeA,QAAO,OAAO;AAAA;AAAA,EAExC,OAAOA,QAAO;AAAA;AAAA,EAEd,oBAAoBA,QAAO;AAAA;AAAA,EAE3B,MAAMA,QAAO,SAAS,CAAC,qBAAqB,mBAAmB,CAAC;AAAA;AAAA,EAEhE,kBAAkBA,QAAO,mBAAmBA,QAAO,MAAM;AAAA;AAAA,EAEzD,UAAUA,QAAO;AAAA;AAAA,EAEjB,YAAYA,QAAO,mBAAmBA,QAAO,MAAM;AAAA;AAAA,EAEnD,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AAAA;AAAA,EAElD,gBAAgBA,QAAO,MAAM;AAAA,IAC3BA,QAAO,QAAQ,MAAM;AAAA,IACrBA,QAAO,QAAQ,KAAK;AAAA,IACpBA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAC5B,CAAC;AACH,CAAC;AAOM,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EAC5C,aAAaA,QAAO;AAAA,EACpB,QAAQ;AAAA,EACR,MAAMA,QAAO;AAAA,EACb,SAASA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAChD,MAAMA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAChC,YAAYA,QAAO;AACrB,CAAC;AAOM,IAAM,cAAcA,QAAO,OAAO;AAAA,EACvC,OAAOA,QAAO,mBAAmBA,QAAO,MAAM;AAAA,EAC9C,SAASA,QAAO,mBAAmBA,QAAO,MAAM;AAAA;AAAA,EAEhD,SAASA,QAAO,MAAM,UAAU;AAAA,EAChC,gBAAgBA,QAAO;AAAA;AAAA,EAEvB,YAAYA,QAAO,MAAM,gBAAgB;AAAA,EACzC,MAAMA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAChC,iBAAiBA,QAAO,MAAM,cAAc;AAAA;AAAA,EAE5C,gBAAgBA,QAAO,MAAM,YAAY;AAAA;AAAA,EAEzC,eAAeA,QAAO,MAAM,YAAY;AAAA;AAAA,EAExC,eAAeA,QAAO,MAAM,YAAY;AAC1C,CAAC;AAOD,IAAM,eAAe,CAAC,UAA2C;AAC/D,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACzE,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAgC,GAAG;AACrE,QAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI;AAAA,EACtC;AACA,SAAO;AACT;AAEA,IAAM,eAAe,CAAC,aAAkD;AACtE,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAOC,QAAO,KAAK;AAClE,QAAM,QAAQ;AAEd,QAAM,YAAY,CAAsD,QACtE,MAAM,GAAG;AAEX,MAAI,oBAAgEA,QAAO,KAAK;AAChF,QAAM,cAAc,UAAU,mBAAmB;AACjD,MAAI,eAAe,OAAO,gBAAgB,UAAU;AAClD,UAAM,IAAI;AACV,UAAM,UAAU,OAAO,EAAE,qBAAqB,WAAW,EAAE,mBAAmB;AAC9E,UAAM,WAAW,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAC/D,QAAI,WAAW,UAAU;AACvB,0BAAoBA,QAAO;AAAA,QACzB,4BAA4B,KAAK;AAAA,UAC/B,kBAAkB;AAAA,UAClB;AAAA,UACA,YAAYA,QAAO;AAAA,YACjB,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAAA,UACpD;AAAA,UACA,QAAQ,aAAa,EAAE,MAAM;AAAA,QAC/B,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,MAAI,oBAAgEA,QAAO,KAAK;AAChF,QAAM,QAAQ,UAAU,mBAAmB;AAC3C,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,IAAI;AACV,UAAM,WAAW,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAC/D,QAAI,UAAU;AACZ,0BAAoBA,QAAO;AAAA,QACzB,4BAA4B,KAAK;AAAA,UAC/B;AAAA,UACA,YAAYA,QAAO;AAAA,YACjB,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAAA,UACpD;AAAA,UACA,QAAQ,aAAa,EAAE,MAAM;AAAA,QAC/B,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,MAAIA,QAAO,OAAO,iBAAiB,KAAKA,QAAO,OAAO,iBAAiB,GAAG;AACxE,WAAOA,QAAO,KAAK;AAAA,EACrB;AACA,SAAOA,QAAO,KAAK,YAAY,KAAK,EAAE,mBAAmB,kBAAkB,CAAC,CAAC;AAC/E;AAEA,IAAM,yBAAyB,CAC7B,YACA,aAEA,OAAO,QAAQ,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,WAAW,MAAM;AAC1D,MAAI,CAAC,eAAe,OAAO,gBAAgB,SAAU,QAAO,CAAC;AAE7D,QAAM,WAAW,SAAS;AAAA,IACxB;AAAA,EACF;AACA,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO,CAAC;AACvD,QAAM,SAAS;AAEf,QAAM,OAAO,yBAAyB,OAAO,IAAI;AACjD,MAAIA,QAAO,OAAO,IAAI,EAAG,QAAO,CAAC;AACjC,QAAM,aAAa,KAAK;AAExB,SAAO;AAAA,IACL,eAAe,KAAK;AAAA,MAClB;AAAA,MACA,MAAM;AAAA,MACN,QAAQA,QAAO,cAAc,OAAO,MAA4B;AAAA,MAChE,cAAcA,QAAO,cAAc,OAAO,YAAkC;AAAA,MAC5E,IAAIA,QAAO,cAAc,OAAO,EAA+C;AAAA,MAC/E,YAAYA,QAAO,cAAc,OAAO,IAA0B;AAAA,MAClE,aAAaA,QAAO,cAAc,OAAO,WAAiC;AAAA,MAC1E,OAAO,eAAe,WAAW,aAAa,OAAO,KAAK,IAAIA,QAAO,KAAK;AAAA,MAC1E,kBAAkBA,QAAO,cAAc,OAAO,gBAAsC;AAAA,IACtF,CAAC;AAAA,EACH;AACF,CAAC;AAMH,IAAM,qBAAqB,CACzB,SACA,eACmB;AACnB,QAAM,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzD,SAAO,WAAW,QAAQ,CAAC,aAAa;AACtC,UAAM,WAAW,SAAS,QACvB,IAAI,CAAC,SAAS,UAAU,IAAI,IAAI,CAAC,EACjC,OAAO,UAAU,cAAc;AAElC,QAAI,SAAS,WAAW,EAAG,QAAO,CAAC;AAEnC,UAAM,UAAyC,CAAC;AAChD,UAAM,gBAA0B,CAAC;AACjC,UAAM,aAAuB,CAAC;AAE9B,eAAW,UAAU,UAAU;AAC7B,UAAI,OAAO,SAAS,UAAUA,QAAO,UAAU,OAAO,QAAQ,MAAM,EAAE,MAAM,UAAU;AACpF,gBAAQ,eAAe,IAAI;AAC3B,sBAAc,KAAK,eAAe;AAClC,mBAAW,KAAK,cAAc;AAAA,MAChC,WAAW,OAAO,SAAS,UAAUA,QAAO,UAAU,OAAO,QAAQ,MAAM,EAAE,MAAM,SAAS;AAC1F,gBAAQ,eAAe,IAAI;AAC3B,sBAAc,KAAK,eAAe;AAClC,mBAAW,KAAK,YAAY;AAAA,MAC9B,WAAW,OAAO,SAAS,YAAYA,QAAO,UAAU,OAAO,IAAI,MAAM,EAAE,MAAM,UAAU;AACzF,cAAM,aAAaA,QAAO,UAAU,OAAO,YAAY,MAAM,OAAO,IAAI;AACxE,gBAAQ,UAAU,IAAI;AACtB,sBAAc,KAAK,UAAU;AAC7B,mBAAW,KAAK,OAAO,IAAI;AAAA,MAC7B,WAAW,OAAO,SAAS,UAAU;AACnC,mBAAW,KAAK,GAAG,OAAO,IAAI,KAAKA,QAAO,UAAU,OAAO,IAAI,MAAM,SAAS,CAAC,GAAG;AAAA,MACpF,WAAW,OAAO,SAAS,YAAY,OAAO,SAAS,iBAAiB;AACtE,eAAO,CAAC;AAAA,MACV,OAAO;AACL,mBAAW,KAAK,OAAO,IAAI;AAAA,MAC7B;AAAA,IACF;AAEA,QAAI,OAAO,KAAK,OAAO,EAAE,WAAW,KAAK,SAAS,SAAS,GAAG;AAC5D,aAAO;AAAA,QACL,aAAa,KAAK;AAAA,UAChB,OAAO,WAAW,KAAK,KAAK;AAAA,UAC5B,SAAS,CAAC;AAAA,UACV,eAAe,CAAC;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,QAChB,OAAO,WAAW,KAAK,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAMA,IAAM,qBAAqB,CAAC,YAAuD;AACjF,QAAM,UAA0B,CAAC;AACjC,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAO,SAAS,SAAU;AAC9B,QAAIA,QAAO,OAAO,OAAO,KAAK,EAAG;AACjC,UAAM,QAAQ,OAAO,MAAM;AAE3B,QAAIA,QAAO,OAAO,MAAM,iBAAiB,GAAG;AAC1C,YAAM,OAAO,MAAM,kBAAkB;AACrC,cAAQ;AAAA,QACN,aAAa,KAAK;AAAA,UAChB,OAAO,kCAA+B,OAAO,IAAI;AAAA,UACjD,oBAAoB,OAAO;AAAA,UAC3B,MAAM;AAAA,UACN,kBAAkBA,QAAO,KAAK,KAAK,gBAAgB;AAAA,UACnD,UAAU,KAAK;AAAA,UACf,YAAY,KAAK;AAAA,UACjB,QAAQ,KAAK;AAAA,UACb,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAIA,QAAO,OAAO,MAAM,iBAAiB,GAAG;AAC1C,YAAM,OAAO,MAAM,kBAAkB;AACrC,cAAQ;AAAA,QACN,aAAa,KAAK;AAAA,UAChB,OAAO,kCAA+B,OAAO,IAAI;AAAA,UACjD,oBAAoB,OAAO;AAAA,UAC3B,MAAM;AAAA,UACN,kBAAkBA,QAAO,KAAK;AAAA,UAC9B,UAAU,KAAK;AAAA,UACf,YAAY,KAAK;AAAA,UACjB,QAAQ,KAAK;AAAA,UACb,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMA,IAAM,cAAc,CAAC,WAAuC;AAC1D,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,MAAM,OAAO,YAAY;AAClC,eAAW,OAAO,GAAG,KAAM,QAAO,IAAI,GAAG;AAAA,EAC3C;AACA,SAAO,CAAC,GAAG,MAAM,EAAE,KAAK;AAC1B;AAQO,IAAM,kBAAkBC,QAAO,GAAG,yBAAyB,EAAE,WAAW,UAAkB;AAC/F,QAAM,MAAsB,OAAO,MAAM,QAAQ;AACjD,QAAM,SAAS,OAAO,QAAQ,GAAG;AAEjC,QAAM,WAAW,IAAI,YAAY,GAAG;AACpC,QAAM,kBAAkB,uBAAuB,IAAI,YAAY,mBAAmB,CAAC,GAAG,QAAQ;AAE9F,QAAM,cAAe,IAAI,YAAY,CAAC;AACtC,QAAM,qBAAqB,YAAY;AAAA,IAAI,CAAC,UAC1C,aAAa,KAAK,EAAE,SAAS,OAAO,KAAK,KAAK,EAAE,CAAC;AAAA,EACnD;AAGA,QAAM,iBACJ,mBAAmB,SAAS,IACxB,qBACA,gBAAgB,IAAI,CAAC,WAAW,aAAa,KAAK,EAAE,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AAEnF,SAAO,YAAY,KAAK;AAAA,IACtB,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO,WAAW;AAAA,IAClC,YAAY,OAAO,WAAW;AAAA,MAAI,CAAC,OACjC,iBAAiB,KAAK;AAAA,QACpB,aAAa,GAAG;AAAA,QAChB,QAAQ,GAAG;AAAA,QACX,MAAM,GAAG;AAAA,QACT,SAAS,GAAG;AAAA,QACZ,MAAM,GAAG;AAAA,QACT,YAAY,GAAG;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,YAAY,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA,eAAe,mBAAmB,iBAAiB,cAAc;AAAA,IACjE,eAAe,mBAAmB,eAAe;AAAA,EACnD,CAAC;AACH,CAAC;AAIM,IAAM,cAAcA,QAAO,GAAG,qBAAqB,EAAE,WAAW,OAAe;AACpF,QAAM,WAAW,OAAO,gBAAgB,KAAK;AAC7C,SAAO,OAAO,gBAAgB,QAAQ;AACxC,CAAC;","names":["Schema","Schema","Schema","Effect","Effect","Effect","Option","Schema","Schema","Option","Effect"]}

package/dist/{chunk-OSIFYIQP.js → chunk-C6PH4R7Q.js}

@@ -1,6 +1,7 @@
 import {
-  OpenApiParseError
-} from "./chunk-YVRI7KRC.js";
+  OpenApiParseError,
+  resolveServerUrl
+} from "./chunk-C3IJX4AN.js";
 
 // src/sdk/google-discovery.ts
 import { Effect, Option, Predicate, Schema, SchemaGetter } from "effect";
@@ -410,7 +411,7 @@ var googleOauthTemplate = (scopes) => (
   [
     {
       slug: AuthTemplateSlug.make(GOOGLE_OAUTH_SECURITY_SCHEME),
-      type: "oauth",
+      kind: "oauth2",
       authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,
       tokenUrl: GOOGLE_OAUTH_TOKEN_URL,
       scopes: Object.keys(scopes)
@@ -613,11 +614,99 @@ var convertGoogleDiscoveryBundleToOpenApi = Effect.fn(
   };
 });
 
+// src/sdk/derive-auth.ts
+import * as Option2 from "effect/Option";
+import { AuthTemplateSlug as AuthTemplateSlug2 } from "@executor-js/sdk/shared";
+function resolveOAuthUrl(url, baseUrl) {
+  if (!url) return url;
+  try {
+    new URL(url);
+    return url;
+  } catch {
+    if (!baseUrl) return url;
+    try {
+      return new URL(url, baseUrl).toString();
+    } catch {
+      return url;
+    }
+  }
+}
+var standardOidcIdentityScopes = ["openid", "email", "profile"];
+var identityScopesForPreset = (identityScopes) => {
+  if (identityScopes === false) return [];
+  return identityScopes === "auto" ? standardOidcIdentityScopes : identityScopes;
+};
+var resolvedOAuthScopes = (apiScopes, identityScopes) => {
+  const merged = new Set(apiScopes);
+  for (const scope of identityScopesForPreset(identityScopes)) merged.add(scope);
+  return [...merged];
+};
+var headerPrefix = (preset, headerName) => {
+  const label = preset.label.toLowerCase();
+  if (headerName.toLowerCase() === "authorization") {
+    if (label.includes("bearer")) return "Bearer ";
+    if (label.includes("basic")) return "Basic ";
+  }
+  return void 0;
+};
+var apiKeyTemplateFromHeaderPreset = (preset, slug) => ({
+  slug,
+  kind: "apikey",
+  // Every secret header shares the one credential input (the canonical
+  // `token`, stored as an absent placement variable).
+  placements: preset.secretHeaders.map((headerName) => {
+    const prefix = headerPrefix(preset, headerName);
+    return { carrier: "header", name: headerName, ...prefix ? { prefix } : {} };
+  })
+});
+var oauthTemplateFromPreset = (preset, baseUrl, slug, scopes) => ({
+  slug,
+  kind: "oauth2",
+  authorizationUrl: resolveOAuthUrl(
+    Option2.getOrElse(preset.authorizationUrl, () => ""),
+    baseUrl
+  ),
+  tokenUrl: resolveOAuthUrl(preset.tokenUrl, baseUrl),
+  scopes: [...scopes]
+});
+var detectedAuthenticationTemplates = (headerPresets, oauth2Presets, baseUrl) => {
+  const templates = [];
+  headerPresets.forEach((preset, index) => {
+    templates.push(
+      apiKeyTemplateFromHeaderPreset(preset, AuthTemplateSlug2.make(`apikey-${index}`))
+    );
+  });
+  for (const preset of oauth2Presets) {
+    const scopes = resolvedOAuthScopes(Object.keys(preset.scopes), preset.identityScopes);
+    templates.push(
+      oauthTemplateFromPreset(
+        preset,
+        baseUrl,
+        AuthTemplateSlug2.make(`oauth-${preset.securitySchemeName}`),
+        scopes
+      )
+    );
+  }
+  return templates;
+};
+var firstBaseUrlForPreview = (preview) => {
+  const firstServer = preview.servers[0];
+  return firstServer ? resolveServerUrl(firstServer.url, Option2.getOrUndefined(firstServer.variables), {}) : "";
+};
+var deriveAuthenticationTemplateFromPreview = (preview, baseUrl) => detectedAuthenticationTemplates(
+  preview.headerPresets,
+  preview.oauth2Presets,
+  baseUrl ?? firstBaseUrlForPreview(preview)
+);
+
 export {
   compactGoogleOAuthScopes,
   isGoogleDiscoveryUrl,
   fetchGoogleDiscoveryDocument,
   convertGoogleDiscoveryToOpenApi,
-  convertGoogleDiscoveryBundleToOpenApi
+  convertGoogleDiscoveryBundleToOpenApi,
+  detectedAuthenticationTemplates,
+  firstBaseUrlForPreview,
+  deriveAuthenticationTemplateFromPreview
 };
-//# sourceMappingURL=chunk-OSIFYIQP.js.map
+//# sourceMappingURL=chunk-C6PH4R7Q.js.map

package/dist/chunk-C6PH4R7Q.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/google-discovery.ts","../src/sdk/google-oauth-scopes.ts","../src/sdk/derive-auth.ts"],"sourcesContent":["// Converts Google Discovery documents directly into OpenAPI 3.x. Public\n// Discovery converters currently target Swagger 2.0 or a broad conversion\n// pipeline; this adapter emits the shape Executor parses while preserving\n// Executor-specific tool ids and query semantics.\nimport { Effect, Option, Predicate, Schema, SchemaGetter } from \"effect\";\nimport { HttpClient, HttpClientRequest } from \"effect/unstable/http\";\n\nimport { OpenApiParseError } from \"./errors\";\nimport { compactGoogleOAuthScopes } from \"./google-oauth-scopes\";\nimport type { SpecFetchCredentials } from \"./parse\";\nimport type { Authentication } from \"./types\";\nimport { AuthTemplateSlug } from \"@executor-js/sdk/shared\";\n\nconst DISCOVERY_SERVICE_HOST = \"https://www.googleapis.com/discovery/v1/apis\";\nconst GOOGLE_BUNDLE_BASE_URL = \"https://www.googleapis.com/\";\nconst GOOGLE_OAUTH_AUTHORIZATION_URL = \"https://accounts.google.com/o/oauth2/v2/auth\";\nconst GOOGLE_OAUTH_TOKEN_URL = \"https://oauth2.googleapis.com/token\";\nconst OPENAPI_SCHEMA_TYPES = new Set([\n  \"array\",\n  \"boolean\",\n  \"integer\",\n  \"null\",\n  \"number\",\n  \"object\",\n  \"string\",\n]);\n\ntype JsonPrimitive = string | number | boolean | null;\ntype JsonValue = JsonPrimitive | readonly JsonValue[] | { readonly [key: string]: JsonValue };\n\ntype OpenApiSchemaObject = {\n  readonly $ref?: string;\n  readonly type?: \"array\" | \"boolean\" | \"integer\" | \"null\" | \"number\" | \"object\" | \"string\";\n  readonly description?: string;\n  readonly title?: string;\n  readonly format?: string;\n  readonly readOnly?: boolean;\n  readonly default?: JsonValue;\n  readonly enum?: readonly JsonValue[];\n  readonly items?: OpenApiSchemaObject;\n  readonly properties?: Record<string, OpenApiSchemaObject>;\n  readonly required?: readonly string[];\n  readonly additionalProperties?: boolean | OpenApiSchemaObject;\n};\n\ntype OpenApiParameterObject = {\n  readonly name: string;\n  readonly in: \"path\" | \"query\" | \"header\";\n  readonly required: boolean;\n  readonly description?: string;\n  readonly schema: OpenApiSchemaObject;\n  readonly style?: \"form\";\n  readonly explode?: boolean;\n  readonly allowReserved?: boolean;\n};\n\ntype OpenApiOperationObject = {\n  readonly operationId: string;\n  readonly \"x-executor-toolPath\": string;\n  readonly \"x-executor-pathTemplate\"?: string;\n  readonly tags?: readonly string[];\n  readonly description?: string;\n  readonly servers?: readonly { readonly url: string }[];\n  readonly parameters: readonly OpenApiParameterObject[];\n  readonly requestBody?: {\n    readonly required: false;\n    readonly content: {\n      readonly \"application/json\": {\n        readonly schema: OpenApiSchemaObject;\n      };\n    };\n  };\n  readonly responses: {\n    readonly \"200\": {\n      readonly description: \"Successful response\";\n      readonly content: {\n        readonly \"application/json\": {\n          readonly schema: OpenApiSchemaObject;\n        };\n      };\n    };\n  };\n  readonly security?: readonly Record<string, readonly string[]>[];\n  readonly \"x-google-scopes\": readonly string[];\n};\n\ntype OpenApiDocument = {\n  readonly openapi: \"3.1.0\";\n  readonly info: {\n    readonly title: string;\n    readonly version: string;\n  };\n  readonly servers: readonly { readonly url: string }[];\n  readonly paths: Record<string, Record<string, OpenApiOperationObject>>;\n  readonly components: {\n    readonly schemas: Record<string, OpenApiSchemaObject>;\n    readonly securitySchemes?: Record<\n      string,\n      {\n        readonly type: \"oauth2\";\n        readonly flows: {\n          readonly authorizationCode: {\n            readonly authorizationUrl: string;\n            readonly tokenUrl: string;\n            readonly scopes: Record<string, string>;\n          };\n        };\n      }\n    >;\n  };\n  readonly security?: readonly Record<string, readonly string[]>[];\n  readonly \"x-executor-origin\":\n    | {\n        readonly kind: \"googleDiscovery\";\n        readonly discoveryUrl: string;\n        readonly service: string;\n        readonly version: string;\n      }\n    | {\n        readonly kind: \"googleDiscoveryBundle\";\n        readonly services: readonly {\n          readonly discoveryUrl: string;\n          readonly service: string;\n          readonly version: string;\n        }[];\n      };\n};\n\nconst TextOption = Schema.OptionFromOptional(Schema.Trim).pipe(\n  Schema.decode({\n    decode: SchemaGetter.transform((value) => Option.filter(value, (text) => text.length > 0)),\n    encode: SchemaGetter.transform((value) => value),\n  }),\n  Schema.withDecodingDefaultType(Effect.succeed(Option.none())),\n);\nconst TextArray = Schema.optional(Schema.Array(Schema.String)).pipe(\n  Schema.withDecodingDefaultType(Effect.succeed([] as string[])),\n);\nconst UnknownRecord = Schema.Record(Schema.String, Schema.Unknown);\nconst UnknownRecordWithDefault = Schema.optional(UnknownRecord).pipe(\n  Schema.withDecodingDefaultType(Effect.succeed({})),\n);\n\nconst DiscoveryParameter = Schema.Struct({\n  type: Schema.optional(Schema.String),\n  description: TextOption,\n  properties: UnknownRecordWithDefault,\n  items: Schema.optional(Schema.Unknown),\n  additionalProperties: Schema.optional(Schema.Union([Schema.Boolean, Schema.Unknown])),\n  enum: TextArray,\n  format: Schema.optional(Schema.String),\n  readOnly: Schema.optional(Schema.Boolean),\n  default: Schema.optional(Schema.Union([Schema.String, Schema.Number, Schema.Boolean])),\n  $ref: Schema.optional(Schema.String),\n  location: Schema.optional(Schema.Literals([\"path\", \"query\", \"header\"])),\n  required: Schema.optional(Schema.Boolean),\n  repeated: Schema.optional(Schema.Boolean),\n});\ntype DiscoveryParameter = typeof DiscoveryParameter.Type;\n\nconst DiscoveryRef = Schema.Struct({\n  $ref: Schema.optional(Schema.String),\n});\n\nconst DiscoveryMethod = Schema.Struct({\n  id: TextOption,\n  description: TextOption,\n  httpMethod: Schema.optional(Schema.String),\n  path: TextOption,\n  parameters: UnknownRecordWithDefault,\n  request: Schema.optional(DiscoveryRef),\n  response: Schema.optional(DiscoveryRef),\n  scopes: TextArray,\n});\ntype DiscoveryMethod = typeof DiscoveryMethod.Type;\n\nconst DiscoveryResource = Schema.Struct({\n  methods: UnknownRecordWithDefault,\n  resources: UnknownRecordWithDefault,\n});\n\nconst DiscoveryDocument = Schema.Struct({\n  name: TextOption,\n  version: TextOption,\n  title: TextOption,\n  rootUrl: TextOption,\n  servicePath: Schema.optional(Schema.Trim).pipe(\n    Schema.withDecodingDefaultType(Effect.succeed(\"\")),\n  ),\n  parameters: UnknownRecordWithDefault,\n  methods: UnknownRecordWithDefault,\n  resources: UnknownRecordWithDefault,\n  schemas: UnknownRecordWithDefault,\n  auth: Schema.optional(\n    Schema.Struct({\n      oauth2: Schema.optional(\n        Schema.Struct({\n          scopes: Schema.optional(\n            Schema.Record(\n              Schema.String,\n              Schema.Struct({\n                description: TextOption,\n              }),\n            ),\n          ).pipe(Schema.withDecodingDefaultType(Effect.succeed({}))),\n        }),\n      ),\n    }),\n  ),\n});\ntype DiscoveryDocument = typeof DiscoveryDocument.Type;\n\nexport interface GoogleDiscoveryOpenApiConversion {\n  readonly specText: string;\n  readonly baseUrl: string;\n  readonly title: string;\n  readonly service: string;\n  readonly version: string;\n  readonly discoveryUrls?: readonly string[];\n  /** The v2 oauth auth template the converted integration declares, when the\n   *  Discovery document advertises OAuth2 scopes. */\n  readonly authenticationTemplate?: readonly Authentication[];\n}\n\nconst decodeDiscoveryDocument = Schema.decodeUnknownSync(DiscoveryDocument);\nconst decodeDiscoveryParameter = Schema.decodeUnknownSync(DiscoveryParameter);\nconst decodeDiscoveryMethod = Schema.decodeUnknownSync(DiscoveryMethod);\nconst decodeDiscoveryResource = Schema.decodeUnknownSync(DiscoveryResource);\nconst parseJson = Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.Unknown));\n\nconst normalizeDiscoveryUrl = (discoveryUrl: string): string => {\n  const trimmed = discoveryUrl.trim();\n  if (!URL.canParse(trimmed)) return trimmed;\n  const parsed = new URL(trimmed);\n  if (parsed.pathname !== \"/$discovery/rest\") return trimmed;\n  const version = parsed.searchParams.get(\"version\")?.trim();\n  if (!version) return trimmed;\n  const host = parsed.hostname.toLowerCase();\n  if (!host.endsWith(\".googleapis.com\")) return trimmed;\n  const rawService = host.slice(0, -\".googleapis.com\".length);\n  const service =\n    rawService === \"calendar-json\"\n      ? \"calendar\"\n      : rawService.endsWith(\"-json\")\n        ? rawService.slice(0, -5)\n        : rawService;\n  return service ? `${DISCOVERY_SERVICE_HOST}/${service}/${version}/rest` : trimmed;\n};\n\nexport const isGoogleDiscoveryUrl = (url: string): boolean => {\n  const trimmed = url.trim();\n  if (!URL.canParse(trimmed)) return false;\n  const parsed = new URL(trimmed);\n  const host = parsed.hostname.toLowerCase();\n  if (!host.endsWith(\"googleapis.com\")) return false;\n  return parsed.pathname.includes(\"/discovery/\") || parsed.pathname.includes(\"$discovery\");\n};\n\nexport const fetchGoogleDiscoveryDocument = Effect.fn(\"OpenApi.fetchGoogleDiscoveryDocument\")(\n  function* (discoveryUrl: string, credentials?: SpecFetchCredentials) {\n    const client = yield* HttpClient.HttpClient;\n    const requestUrl = new URL(discoveryUrl);\n    for (const [name, value] of Object.entries(credentials?.queryParams ?? {})) {\n      requestUrl.searchParams.set(name, value);\n    }\n    let request = HttpClientRequest.get(requestUrl.toString()).pipe(\n      HttpClientRequest.setHeader(\"Accept\", \"application/json, */*\"),\n    );\n    for (const [name, value] of Object.entries(credentials?.headers ?? {})) {\n      request = HttpClientRequest.setHeader(request, name, value);\n    }\n    const response = yield* client.execute(request).pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to fetch Google Discovery document\",\n          }),\n      ),\n    );\n    if (response.status < 200 || response.status >= 300) {\n      return yield* new OpenApiParseError({\n        message: `Failed to fetch Google Discovery document: HTTP ${response.status}`,\n      });\n    }\n    return yield* response.text.pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to read Google Discovery document body\",\n          }),\n      ),\n    );\n  },\n);\n\nconst schemaRef = (name: string) => `#/components/schemas/${name}`;\n\nconst identitySchemaName = (name: string): string => name;\n\nconst schemaComponentPart = (value: string): string =>\n  value\n    .trim()\n    .replace(/[^A-Za-z0-9._-]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\") || \"schema\";\n\nconst normalizeDiscoveryPathTemplate = (pathTemplate: string): string =>\n  pathTemplate.replaceAll(/\\{\\+([^{}]+)\\}/g, \"{$1}\");\n\nconst pathUsesReservedExpansion = (pathTemplate: string, parameterName: string): boolean =>\n  pathTemplate.includes(`{+${parameterName}}`);\n\nconst uniquePathKey = (\n  paths: Record<string, Record<string, OpenApiOperationObject>>,\n  preferredPath: string,\n  method: string,\n  toolPath: string,\n): string => {\n  if (!paths[preferredPath]?.[method]) return preferredPath;\n  const disambiguated = `/${toolPath.replace(/[^A-Za-z0-9._~-]+/g, \"/\")}`;\n  if (!paths[disambiguated]?.[method]) return disambiguated;\n  let index = 2;\n  while (paths[`${disambiguated}/${index}`]?.[method]) index += 1;\n  return `${disambiguated}/${index}`;\n};\n\nconst discoveryDescription = (value: unknown): string | undefined =>\n  typeof value === \"string\"\n    ? value\n    : Option.isOption(value) && Option.isSome(value)\n      ? typeof value.value === \"string\"\n        ? value.value\n        : undefined\n      : undefined;\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst jsonValue = (value: unknown): JsonValue | undefined => {\n  if (\n    value === null ||\n    typeof value === \"string\" ||\n    typeof value === \"number\" ||\n    typeof value === \"boolean\"\n  ) {\n    return value;\n  }\n  if (Array.isArray(value)) {\n    const values = value.map(jsonValue);\n    return values.every(Predicate.isNotUndefined) ? values : undefined;\n  }\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).flatMap(([key, item]) => {\n    const converted = jsonValue(item);\n    return converted === undefined ? [] : [[key, converted] as const];\n  });\n  return Object.fromEntries(entries);\n};\n\nconst stringArray = (value: unknown): readonly string[] | undefined => {\n  if (!Array.isArray(value)) return undefined;\n  const strings = value.filter((item): item is string => typeof item === \"string\");\n  return strings.length === value.length ? strings : undefined;\n};\n\nconst schemaType = (value: unknown): OpenApiSchemaObject[\"type\"] | undefined =>\n  typeof value === \"string\" && OPENAPI_SCHEMA_TYPES.has(value)\n    ? (value as OpenApiSchemaObject[\"type\"])\n    : undefined;\n\nconst discoverySchemaToOpenApiSchema = (\n  raw: unknown,\n  schemaNameForRef: (name: string) => string = identitySchemaName,\n): OpenApiSchemaObject => {\n  if (!isRecord(raw)) return {};\n  const schema = raw;\n  if (typeof schema.$ref === \"string\") return { $ref: schemaRef(schemaNameForRef(schema.$ref)) };\n\n  const description = discoveryDescription(schema.description);\n  const title = discoveryDescription(schema.title);\n  const defaultValue = jsonValue(schema.default);\n  const enumValues = Array.isArray(schema.enum)\n    ? schema.enum.map(jsonValue).filter(Predicate.isNotUndefined)\n    : [];\n  const format = typeof schema.format === \"string\" ? schema.format : undefined;\n  const readOnly = typeof schema.readOnly === \"boolean\" ? schema.readOnly : undefined;\n  const type = schemaType(schema.type);\n\n  const base = {\n    ...(description !== undefined ? { description } : {}),\n    ...(title !== undefined ? { title } : {}),\n    ...(format !== undefined ? { format } : {}),\n    ...(readOnly !== undefined ? { readOnly } : {}),\n    ...(defaultValue !== undefined ? { default: defaultValue } : {}),\n    ...(enumValues.length > 0 ? { enum: enumValues } : {}),\n  } satisfies OpenApiSchemaObject;\n\n  if (type === \"array\") {\n    return {\n      ...base,\n      type: \"array\",\n      items: discoverySchemaToOpenApiSchema(schema.items, schemaNameForRef),\n    };\n  }\n\n  const properties = schema.properties;\n  if (\n    type === \"object\" ||\n    (isRecord(properties) && Object.keys(properties).length > 0) ||\n    schema.additionalProperties !== undefined\n  ) {\n    const convertedProperties = isRecord(properties)\n      ? Object.fromEntries(\n          Object.entries(properties).map(([name, value]) => [\n            name,\n            discoverySchemaToOpenApiSchema(value, schemaNameForRef),\n          ]),\n        )\n      : undefined;\n    const required = stringArray(schema.required);\n    const additionalProperties =\n      schema.additionalProperties === undefined\n        ? undefined\n        : typeof schema.additionalProperties === \"boolean\"\n          ? schema.additionalProperties\n          : discoverySchemaToOpenApiSchema(schema.additionalProperties, schemaNameForRef);\n    return {\n      ...base,\n      type: \"object\",\n      ...(convertedProperties && Object.keys(convertedProperties).length > 0\n        ? { properties: convertedProperties }\n        : {}),\n      ...(required && required.length > 0 ? { required } : {}),\n      ...(additionalProperties !== undefined ? { additionalProperties } : {}),\n    };\n  }\n\n  return type !== undefined ? { ...base, type } : base;\n};\n\nconst parameterSchema = (\n  parameter: DiscoveryParameter,\n  schemaNameForRef: (name: string) => string = identitySchemaName,\n): OpenApiSchemaObject => {\n  const base = discoverySchemaToOpenApiSchema(parameter, schemaNameForRef);\n  return parameter.repeated\n    ? {\n        type: \"array\",\n        items: base,\n      }\n    : base;\n};\n\nconst methodToolPath = (service: string, methodId: string): string =>\n  methodId.startsWith(`${service}.`) ? methodId.slice(service.length + 1) : methodId;\n\nconst collectMethods = (resource: unknown): DiscoveryMethod[] => {\n  const decoded = decodeDiscoveryResource(resource);\n  const direct = Object.values(decoded.methods ?? {}).map((raw) => decodeDiscoveryMethod(raw));\n  const nested = Object.values(decoded.resources ?? {}).flatMap(collectMethods);\n  return [...direct, ...nested];\n};\n\nconst discoveryScopes = (document: DiscoveryDocument): Record<string, string> =>\n  Object.fromEntries(\n    Object.entries(document.auth?.oauth2?.scopes ?? {}).map(([scope, value]) => [\n      scope,\n      Option.getOrElse(value.description, () => \"\"),\n    ]),\n  );\n\n// The scope set the converted integration DECLARES (and that `oauth.start`\n// requests at connect) must match the consent the picker previews. Both run the\n// raw Discovery union through `compactGoogleOAuthScopes`, which drops scopes a\n// user OAuth consent screen can't show (`chat.bot`/`chat.app.*`/`keep`) and\n// collapses sub-scopes under their broad parent (`gmail.*` → `mail.google.com`,\n// `userinfo.email` → `email`). Descriptions are preserved where the raw map had\n// them; compaction-introduced identity scopes (`email`/`profile`) fall back to\n// the broad parent's description. Per-operation `x-google-scopes`/`security`\n// stay RAW — they describe which scope each method needs, not consent.\nconst compactDiscoveryScopeMap = (raw: Record<string, string>): Record<string, string> => {\n  const descriptionFor = (scope: string): string => {\n    if (raw[scope] !== undefined) return raw[scope];\n    if (scope === \"email\") return raw[\"https://www.googleapis.com/auth/userinfo.email\"] ?? \"\";\n    if (scope === \"profile\") return raw[\"https://www.googleapis.com/auth/userinfo.profile\"] ?? \"\";\n    return \"\";\n  };\n  return Object.fromEntries(\n    compactGoogleOAuthScopes(Object.keys(raw)).map((scope) => [scope, descriptionFor(scope)]),\n  );\n};\n\nconst allDiscoveryMethods = (document: DiscoveryDocument): DiscoveryMethod[] => [\n  ...Object.values(document.methods ?? {}).map((raw) => decodeDiscoveryMethod(raw)),\n  ...Object.values(document.resources ?? {}).flatMap(collectMethods),\n];\n\ntype DiscoveryDocumentInfo = {\n  readonly discoveryUrl: string;\n  readonly document: DiscoveryDocument;\n  readonly service: string;\n  readonly version: string;\n  readonly rootUrl: string;\n  readonly baseUrl: string;\n  readonly title: string;\n};\n\nconst discoveryDocumentInfo = (\n  document: DiscoveryDocument,\n  discoveryUrl: string,\n): Effect.Effect<DiscoveryDocumentInfo, OpenApiParseError> =>\n  Effect.gen(function* () {\n    const service = Option.getOrUndefined(document.name);\n    const version = Option.getOrUndefined(document.version);\n    const rootUrl = Option.getOrUndefined(document.rootUrl);\n    if (!service || !version || !rootUrl) {\n      return yield* new OpenApiParseError({\n        message: \"Google Discovery document is missing one of: name, version, rootUrl\",\n      });\n    }\n\n    return {\n      discoveryUrl,\n      document,\n      service,\n      version,\n      rootUrl,\n      baseUrl: new URL(document.servicePath || \"\", rootUrl).toString(),\n      title: Option.getOrElse(document.title, () => `${service} ${version}`),\n    };\n  });\n\nconst buildDiscoveryOperation = (input: {\n  readonly document: DiscoveryDocument;\n  readonly method: DiscoveryMethod;\n  readonly toolPath: string;\n  readonly pathTemplate: string;\n  readonly schemaNameForRef?: (name: string) => string;\n  readonly serverUrl?: string;\n  readonly tags?: readonly string[];\n}): OpenApiOperationObject => {\n  const mergedParameters = new Map<string, DiscoveryParameter>();\n  for (const [name, raw] of Object.entries(input.document.parameters ?? {})) {\n    const parameter = decodeDiscoveryParameter(raw);\n    if (parameter.location) mergedParameters.set(name, parameter);\n  }\n  for (const [name, raw] of Object.entries(input.method.parameters ?? {})) {\n    const parameter = decodeDiscoveryParameter(raw);\n    if (parameter.location) mergedParameters.set(name, parameter);\n  }\n\n  const methodScopes = input.method.scopes ?? [];\n  const methodDescription = Option.getOrUndefined(input.method.description);\n  const schemaNameForRef = input.schemaNameForRef ?? identitySchemaName;\n\n  return {\n    operationId: input.toolPath,\n    \"x-executor-toolPath\": input.toolPath,\n    \"x-executor-pathTemplate\": input.pathTemplate,\n    ...(input.tags && input.tags.length > 0 ? { tags: input.tags } : {}),\n    ...(methodDescription !== undefined ? { description: methodDescription } : {}),\n    ...(input.serverUrl ? { servers: [{ url: input.serverUrl }] } : {}),\n    parameters: [...mergedParameters.entries()].flatMap(([name, parameter]) => {\n      const location = parameter.location;\n      if (!location) return [];\n      const description = Option.getOrUndefined(parameter.description);\n      const allowReserved =\n        location === \"path\" && pathUsesReservedExpansion(input.pathTemplate, name);\n      return [\n        {\n          name,\n          in: location,\n          required: location === \"path\" ? true : parameter.required === true,\n          ...(description !== undefined ? { description } : {}),\n          schema: parameterSchema(parameter, schemaNameForRef),\n          ...(location === \"query\"\n            ? { style: \"form\" as const, explode: parameter.repeated === true }\n            : {}),\n          ...(allowReserved ? { allowReserved: true } : {}),\n        },\n      ];\n    }),\n    ...(input.method.request?.$ref\n      ? {\n          requestBody: {\n            required: false,\n            content: {\n              \"application/json\": {\n                schema: { $ref: schemaRef(schemaNameForRef(input.method.request.$ref)) },\n              },\n            },\n          },\n        }\n      : {}),\n    responses: {\n      \"200\": {\n        description: \"Successful response\",\n        content: {\n          \"application/json\": {\n            schema: input.method.response?.$ref\n              ? { $ref: schemaRef(schemaNameForRef(input.method.response.$ref)) }\n              : {},\n          },\n        },\n      },\n    },\n    ...(methodScopes.length > 0 ? { security: [{ googleOAuth2: methodScopes }] } : {}),\n    \"x-google-scopes\": methodScopes,\n  };\n};\n\nconst GOOGLE_OAUTH_SECURITY_SCHEME = \"googleOAuth2\";\n\n/** The v2 oauth auth template for a Google-discovery integration. The spec\n *  itself carries the matching `securitySchemes.googleOAuth2` entry; this is the\n *  catalog-level template a connection's access token renders through. */\nconst googleOauthTemplate = (scopes: Record<string, string>): readonly Authentication[] =>\n  // A Google-discovery integration is ALWAYS OAuth, so it ALWAYS declares its\n  // oauth method — even when the compacted scope set is empty (e.g. a bundle of\n  // only limited-consent APIs like Google Keep, whose scopes Google won't grant\n  // through standard consent). Without this the integration declares no auth\n  // method and the \"Add account\" / \"Add a connection\" actions are disabled, so\n  // you can't even start the flow. Empty `scopes` just requests no scope.\n  [\n    {\n      slug: AuthTemplateSlug.make(GOOGLE_OAUTH_SECURITY_SCHEME),\n      kind: \"oauth2\",\n      authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,\n      tokenUrl: GOOGLE_OAUTH_TOKEN_URL,\n      scopes: Object.keys(scopes),\n    },\n  ];\n\nexport const convertGoogleDiscoveryToOpenApi = Effect.fn(\"OpenApi.convertGoogleDiscovery\")(\n  function* (input: { readonly discoveryUrl: string; readonly documentText: string }) {\n    const parsed = yield* parseJson(input.documentText).pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to parse Google Discovery document\",\n          }),\n      ),\n    );\n    const document = yield* Effect.try({\n      try: () => decodeDiscoveryDocument(parsed),\n      catch: () =>\n        new OpenApiParseError({\n          message: \"Failed to decode Google Discovery document\",\n        }),\n    });\n\n    const info = yield* discoveryDocumentInfo(document, input.discoveryUrl);\n    const { service, version, baseUrl, title } = info;\n    const paths: Record<string, Record<string, OpenApiOperationObject>> = {};\n\n    for (const method of allDiscoveryMethods(document)) {\n      const methodId = Option.getOrUndefined(method.id);\n      const pathTemplate = Option.getOrUndefined(method.path);\n      if (!methodId || !pathTemplate || !method.httpMethod) continue;\n\n      const toolPath = methodToolPath(service, methodId);\n      const path = normalizeDiscoveryPathTemplate(\n        pathTemplate.startsWith(\"/\") ? pathTemplate : `/${pathTemplate}`,\n      );\n      const methodKey = method.httpMethod.toLowerCase();\n      const pathKey = uniquePathKey(paths, path, methodKey, toolPath);\n\n      paths[pathKey] ??= {};\n      paths[pathKey]![methodKey] = buildDiscoveryOperation({\n        document,\n        method,\n        toolPath,\n        pathTemplate: pathTemplate.startsWith(\"/\") ? pathTemplate : `/${pathTemplate}`,\n      });\n    }\n\n    const scopes = compactDiscoveryScopeMap(discoveryScopes(document));\n    const authenticationTemplate = googleOauthTemplate(scopes);\n\n    const spec: OpenApiDocument = {\n      openapi: \"3.1.0\",\n      info: {\n        title,\n        version,\n      },\n      servers: [{ url: baseUrl }],\n      paths,\n      components: {\n        schemas: Object.fromEntries(\n          Object.entries(document.schemas ?? {}).map(([name, schema]) => [\n            name,\n            discoverySchemaToOpenApiSchema(schema),\n          ]),\n        ),\n        ...(authenticationTemplate\n          ? {\n              securitySchemes: {\n                googleOAuth2: {\n                  type: \"oauth2\",\n                  flows: {\n                    authorizationCode: {\n                      authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,\n                      tokenUrl: GOOGLE_OAUTH_TOKEN_URL,\n                      scopes,\n                    },\n                  },\n                },\n              },\n            }\n          : {}),\n      },\n      ...(authenticationTemplate ? { security: [{ googleOAuth2: Object.keys(scopes) }] } : {}),\n      \"x-executor-origin\": {\n        kind: \"googleDiscovery\",\n        discoveryUrl: normalizeDiscoveryUrl(input.discoveryUrl),\n        service,\n        version,\n      },\n    };\n\n    return {\n      // @effect-diagnostics-next-line preferSchemaOverJson:off\n      specText: JSON.stringify(spec),\n      baseUrl,\n      title,\n      service,\n      version,\n      ...(authenticationTemplate ? { authenticationTemplate } : {}),\n    };\n  },\n);\n\nexport const convertGoogleDiscoveryBundleToOpenApi = Effect.fn(\n  \"OpenApi.convertGoogleDiscoveryBundle\",\n)(function* (input: {\n  readonly documents: readonly { readonly discoveryUrl: string; readonly documentText: string }[];\n}) {\n  if (input.documents.length === 0) {\n    return yield* new OpenApiParseError({\n      message: \"Google Discovery bundle requires at least one document\",\n    });\n  }\n\n  const infos = yield* Effect.forEach(input.documents, ({ discoveryUrl, documentText }) =>\n    Effect.gen(function* () {\n      const parsed = yield* parseJson(documentText).pipe(\n        Effect.mapError(\n          () =>\n            new OpenApiParseError({\n              message: \"Failed to parse Google Discovery document\",\n            }),\n        ),\n      );\n      const document = yield* Effect.try({\n        try: () => decodeDiscoveryDocument(parsed),\n        catch: () =>\n          new OpenApiParseError({\n            message: \"Failed to decode Google Discovery document\",\n          }),\n      });\n      return yield* discoveryDocumentInfo(document, discoveryUrl);\n    }),\n  );\n\n  const paths: Record<string, Record<string, OpenApiOperationObject>> = {};\n  const schemas: Record<string, OpenApiSchemaObject> = {};\n  const rawScopes: Record<string, string> = {};\n\n  for (const info of infos) {\n    const schemaPrefix = schemaComponentPart(`${info.service}_${info.version}`);\n    const schemaNameForRef = (name: string) => `${schemaPrefix}_${schemaComponentPart(name)}`;\n\n    for (const [scope, description] of Object.entries(discoveryScopes(info.document))) {\n      rawScopes[scope] ??= description;\n    }\n\n    for (const [name, schema] of Object.entries(info.document.schemas ?? {})) {\n      schemas[schemaNameForRef(name)] = discoverySchemaToOpenApiSchema(schema, schemaNameForRef);\n    }\n\n    for (const method of allDiscoveryMethods(info.document)) {\n      const methodId = Option.getOrUndefined(method.id);\n      const rawPathTemplate = Option.getOrUndefined(method.path);\n      if (!methodId || !rawPathTemplate || !method.httpMethod) continue;\n\n      const toolPath = methodId;\n      const wirePath = rawPathTemplate.startsWith(\"/\") ? rawPathTemplate : `/${rawPathTemplate}`;\n      const openApiPath = normalizeDiscoveryPathTemplate(wirePath);\n      const methodKey = method.httpMethod.toLowerCase();\n      const pathKey = uniquePathKey(paths, openApiPath, methodKey, toolPath);\n\n      paths[pathKey] ??= {};\n      paths[pathKey]![methodKey] = buildDiscoveryOperation({\n        document: info.document,\n        method,\n        toolPath,\n        pathTemplate: wirePath,\n        schemaNameForRef,\n        serverUrl: info.baseUrl,\n        tags: [info.title],\n      });\n    }\n  }\n\n  const scopes = compactDiscoveryScopeMap(rawScopes);\n  const authenticationTemplate = googleOauthTemplate(scopes);\n  const spec: OpenApiDocument = {\n    openapi: \"3.1.0\",\n    info: {\n      title: \"Google\",\n      version: \"google-discovery-bundle\",\n    },\n    servers: [{ url: GOOGLE_BUNDLE_BASE_URL }],\n    paths,\n    components: {\n      schemas,\n      ...(authenticationTemplate\n        ? {\n            securitySchemes: {\n              googleOAuth2: {\n                type: \"oauth2\",\n                flows: {\n                  authorizationCode: {\n                    authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,\n                    tokenUrl: GOOGLE_OAUTH_TOKEN_URL,\n                    scopes,\n                  },\n                },\n              },\n            },\n          }\n        : {}),\n    },\n    ...(authenticationTemplate ? { security: [{ googleOAuth2: Object.keys(scopes) }] } : {}),\n    \"x-executor-origin\": {\n      kind: \"googleDiscoveryBundle\",\n      services: infos.map((info) => ({\n        discoveryUrl: normalizeDiscoveryUrl(info.discoveryUrl),\n        service: info.service,\n        version: info.version,\n      })),\n    },\n  };\n\n  return {\n    // @effect-diagnostics-next-line preferSchemaOverJson:off\n    specText: JSON.stringify(spec),\n    baseUrl: GOOGLE_BUNDLE_BASE_URL,\n    title: \"Google\",\n    service: \"google\",\n    version: \"google-discovery-bundle\",\n    discoveryUrls: infos.map((info) => normalizeDiscoveryUrl(info.discoveryUrl)),\n    ...(authenticationTemplate ? { authenticationTemplate } : {}),\n  };\n});\n","const googleUserConsentBlockedScopes = new Set([\n  \"https://www.googleapis.com/auth/chat.bot\",\n  \"https://www.googleapis.com/auth/chat.import\",\n  \"https://www.googleapis.com/auth/keep\",\n  \"https://www.googleapis.com/auth/keep.readonly\",\n]);\n\nconst googleUserConsentBlockedScopePrefixes = [\"https://www.googleapis.com/auth/chat.app.\"];\n\nconst googleBroadScopeGroups: readonly {\n  readonly broad: string;\n  readonly prefixes: readonly string[];\n}[] = [\n  {\n    broad: \"https://mail.google.com/\",\n    prefixes: [\"https://www.googleapis.com/auth/gmail.\"],\n  },\n  {\n    broad: \"https://www.googleapis.com/auth/calendar\",\n    prefixes: [\"https://www.googleapis.com/auth/calendar.\"],\n  },\n  {\n    broad: \"https://www.googleapis.com/auth/drive\",\n    prefixes: [\"https://www.googleapis.com/auth/drive.\"],\n  },\n];\n\nconst normalizeGoogleIdentityScope = (scope: string): string =>\n  scope === \"https://www.googleapis.com/auth/userinfo.email\"\n    ? \"email\"\n    : scope === \"https://www.googleapis.com/auth/userinfo.profile\"\n      ? \"profile\"\n      : scope;\n\nconst orderedUniqueScopes = (scopes: Iterable<string>): string[] => {\n  const ordered: string[] = [];\n  const seen = new Set<string>();\n  for (const scope of scopes) {\n    const trimmed = scope.trim();\n    if (!trimmed || seen.has(trimmed)) continue;\n    seen.add(trimmed);\n    ordered.push(trimmed);\n  }\n  return ordered;\n};\n\nexport const isGoogleUserConsentOAuthScope = (scope: string): boolean =>\n  !googleUserConsentBlockedScopes.has(scope) &&\n  !googleUserConsentBlockedScopePrefixes.some((prefix) => scope.startsWith(prefix));\n\nexport const filterGoogleUserConsentOAuthScopes = (scopes: Iterable<string>): string[] =>\n  orderedUniqueScopes(scopes).filter(isGoogleUserConsentOAuthScope);\n\nexport const compactGoogleOAuthScopes = (scopes: Iterable<string>): string[] => {\n  const ordered = filterGoogleUserConsentOAuthScopes([...scopes].map(normalizeGoogleIdentityScope));\n  const present = new Set(ordered);\n  return ordered.filter(\n    (scope) =>\n      !googleBroadScopeGroups.some(\n        (group) =>\n          scope !== group.broad &&\n          present.has(group.broad) &&\n          group.prefixes.some((prefix) => scope.startsWith(prefix)),\n      ),\n  );\n};\n","// Spec-detected auth → stored `Authentication` templates, shared by every add\n// path. The React add flow derives templates from the preview before calling\n// `addSpec`; `addSpec` itself falls back to the same derivation when the\n// caller omits `authenticationTemplate` (the agentic/API path has no client\n// to do it). One implementation so the web UI and headless callers cannot\n// drift: an integration added over MCP gets the same auth methods the add\n// page would have produced.\nimport * as Option from \"effect/Option\";\n\nimport { AuthTemplateSlug, type OAuthAuthentication } from \"@executor-js/sdk/shared\";\n\nimport type { HeaderPreset, OAuth2Preset, SpecPreview } from \"./preview\";\nimport type { APIKeyAuthentication, Authentication } from \"./types\";\nimport { resolveServerUrl } from \"./openapi-utils\";\n\n// ---------------------------------------------------------------------------\n// OpenAPI url helpers — specs sometimes ship relative OAuth endpoints; resolve\n// them against the chosen base URL so the stored auth template is absolute.\n// ---------------------------------------------------------------------------\n\nexport function resolveOAuthUrl(url: string, baseUrl: string): string {\n  if (!url) return url;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor normalizes provider metadata URLs\n  try {\n    new URL(url);\n    return url;\n  } catch {\n    if (!baseUrl) return url;\n    // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor resolves relative provider metadata URLs\n    try {\n      return new URL(url, baseUrl).toString();\n    } catch {\n      return url;\n    }\n  }\n}\n\nconst standardOidcIdentityScopes = [\"openid\", \"email\", \"profile\"] as const;\n\nconst identityScopesForPreset = (\n  identityScopes: OAuth2Preset[\"identityScopes\"],\n): readonly string[] => {\n  if (identityScopes === false) return [];\n  return identityScopes === \"auto\" ? standardOidcIdentityScopes : identityScopes;\n};\n\nexport const resolvedOAuthScopes = (\n  apiScopes: Iterable<string>,\n  identityScopes: OAuth2Preset[\"identityScopes\"],\n): string[] => {\n  const merged = new Set(apiScopes);\n  for (const scope of identityScopesForPreset(identityScopes)) merged.add(scope);\n  return [...merged];\n};\n\n// ---------------------------------------------------------------------------\n// Auth-template builders — turn a preview preset into the integration's stored\n// `Authentication` template (v2). The header preset becomes an `apiKey` template\n// whose secret header value renders the resolved credential via `variable(token)`;\n// the oauth2 preset becomes an `oauth` template carrying the provider endpoints.\n// ---------------------------------------------------------------------------\n\nconst headerPrefix = (preset: HeaderPreset, headerName: string): string | undefined => {\n  const label = preset.label.toLowerCase();\n  if (headerName.toLowerCase() === \"authorization\") {\n    if (label.includes(\"bearer\")) return \"Bearer \";\n    if (label.includes(\"basic\")) return \"Basic \";\n  }\n  return undefined;\n};\n\nconst apiKeyTemplateFromHeaderPreset = (\n  preset: HeaderPreset,\n  slug: AuthTemplateSlug,\n): APIKeyAuthentication => ({\n  slug,\n  kind: \"apikey\",\n  // Every secret header shares the one credential input (the canonical\n  // `token`, stored as an absent placement variable).\n  placements: preset.secretHeaders.map((headerName) => {\n    const prefix = headerPrefix(preset, headerName);\n    return { carrier: \"header\" as const, name: headerName, ...(prefix ? { prefix } : {}) };\n  }),\n});\n\nconst oauthTemplateFromPreset = (\n  preset: OAuth2Preset,\n  baseUrl: string,\n  slug: AuthTemplateSlug,\n  scopes: readonly string[],\n): OAuthAuthentication => ({\n  slug,\n  kind: \"oauth2\",\n  authorizationUrl: resolveOAuthUrl(\n    Option.getOrElse(preset.authorizationUrl, () => \"\"),\n    baseUrl,\n  ),\n  tokenUrl: resolveOAuthUrl(preset.tokenUrl, baseUrl),\n  scopes: [...scopes],\n});\n\n// ---------------------------------------------------------------------------\n// All spec-detected auth methods → the union of stored `Authentication`\n// templates. Header presets become apiKey templates; each oauth2 preset becomes\n// an oauth template (with its declared API scopes plus, for auth-code flows,\n// the standard identity scopes). Slugs stay deterministic per method so the\n// stored template is stable across previews of the same spec.\n// ---------------------------------------------------------------------------\n\nexport const detectedAuthenticationTemplates = (\n  headerPresets: readonly HeaderPreset[],\n  oauth2Presets: readonly OAuth2Preset[],\n  baseUrl: string,\n): readonly Authentication[] => {\n  const templates: Authentication[] = [];\n  headerPresets.forEach((preset, index) => {\n    templates.push(\n      apiKeyTemplateFromHeaderPreset(preset, AuthTemplateSlug.make(`apikey-${index}`)),\n    );\n  });\n  for (const preset of oauth2Presets) {\n    const scopes = resolvedOAuthScopes(Object.keys(preset.scopes), preset.identityScopes);\n    templates.push(\n      oauthTemplateFromPreset(\n        preset,\n        baseUrl,\n        AuthTemplateSlug.make(`oauth-${preset.securitySchemeName}`),\n        scopes,\n      ),\n    );\n  }\n  return templates;\n};\n\nexport const firstBaseUrlForPreview = (preview: SpecPreview): string => {\n  const firstServer = preview.servers[0];\n  return firstServer\n    ? resolveServerUrl(firstServer.url, Option.getOrUndefined(firstServer.variables), {})\n    : \"\";\n};\n\n/** The fallback `addSpec` uses when no explicit template was passed: every\n *  spec-detected method, resolved against the integration's base URL. */\nexport const deriveAuthenticationTemplateFromPreview = (\n  preview: SpecPreview,\n  baseUrl: string | undefined,\n): readonly Authentication[] =>\n  detectedAuthenticationTemplates(\n    preview.headerPresets,\n    preview.oauth2Presets,\n    baseUrl ?? firstBaseUrlForPreview(preview),\n  );\n"],"mappings":";;;;;;AAIA,SAAS,QAAQ,QAAQ,WAAW,QAAQ,oBAAoB;AAChE,SAAS,YAAY,yBAAyB;;;ACL9C,IAAM,iCAAiC,oBAAI,IAAI;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,wCAAwC,CAAC,2CAA2C;AAE1F,IAAM,yBAGA;AAAA,EACJ;AAAA,IACE,OAAO;AAAA,IACP,UAAU,CAAC,wCAAwC;AAAA,EACrD;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,UAAU,CAAC,2CAA2C;AAAA,EACxD;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,UAAU,CAAC,wCAAwC;AAAA,EACrD;AACF;AAEA,IAAM,+BAA+B,CAAC,UACpC,UAAU,mDACN,UACA,UAAU,qDACR,YACA;AAER,IAAM,sBAAsB,CAAC,WAAuC;AAClE,QAAM,UAAoB,CAAC;AAC3B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,WAAW,KAAK,IAAI,OAAO,EAAG;AACnC,SAAK,IAAI,OAAO;AAChB,YAAQ,KAAK,OAAO;AAAA,EACtB;AACA,SAAO;AACT;AAEO,IAAM,gCAAgC,CAAC,UAC5C,CAAC,+BAA+B,IAAI,KAAK,KACzC,CAAC,sCAAsC,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC;AAE3E,IAAM,qCAAqC,CAAC,WACjD,oBAAoB,MAAM,EAAE,OAAO,6BAA6B;AAE3D,IAAM,2BAA2B,CAAC,WAAuC;AAC9E,QAAM,UAAU,mCAAmC,CAAC,GAAG,MAAM,EAAE,IAAI,4BAA4B,CAAC;AAChG,QAAM,UAAU,IAAI,IAAI,OAAO;AAC/B,SAAO,QAAQ;AAAA,IACb,CAAC,UACC,CAAC,uBAAuB;AAAA,MACtB,CAAC,UACC,UAAU,MAAM,SAChB,QAAQ,IAAI,MAAM,KAAK,KACvB,MAAM,SAAS,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC;AAAA,IAC5D;AAAA,EACJ;AACF;;;ADtDA,SAAS,wBAAwB;AAEjC,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,iCAAiC;AACvC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAuGD,IAAM,aAAa,OAAO,mBAAmB,OAAO,IAAI,EAAE;AAAA,EACxD,OAAO,OAAO;AAAA,IACZ,QAAQ,aAAa,UAAU,CAAC,UAAU,OAAO,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AAAA,IACzF,QAAQ,aAAa,UAAU,CAAC,UAAU,KAAK;AAAA,EACjD,CAAC;AAAA,EACD,OAAO,wBAAwB,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC;AAC9D;AACA,IAAM,YAAY,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC,EAAE;AAAA,EAC7D,OAAO,wBAAwB,OAAO,QAAQ,CAAC,CAAa,CAAC;AAC/D;AACA,IAAM,gBAAgB,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AACjE,IAAM,2BAA2B,OAAO,SAAS,aAAa,EAAE;AAAA,EAC9D,OAAO,wBAAwB,OAAO,QAAQ,CAAC,CAAC,CAAC;AACnD;AAEA,IAAM,qBAAqB,OAAO,OAAO;AAAA,EACvC,MAAM,OAAO,SAAS,OAAO,MAAM;AAAA,EACnC,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,OAAO,OAAO,SAAS,OAAO,OAAO;AAAA,EACrC,sBAAsB,OAAO,SAAS,OAAO,MAAM,CAAC,OAAO,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,EACpF,MAAM;AAAA,EACN,QAAQ,OAAO,SAAS,OAAO,MAAM;AAAA,EACrC,UAAU,OAAO,SAAS,OAAO,OAAO;AAAA,EACxC,SAAS,OAAO,SAAS,OAAO,MAAM,CAAC,OAAO,QAAQ,OAAO,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACrF,MAAM,OAAO,SAAS,OAAO,MAAM;AAAA,EACnC,UAAU,OAAO,SAAS,OAAO,SAAS,CAAC,QAAQ,SAAS,QAAQ,CAAC,CAAC;AAAA,EACtE,UAAU,OAAO,SAAS,OAAO,OAAO;AAAA,EACxC,UAAU,OAAO,SAAS,OAAO,OAAO;AAC1C,CAAC;AAGD,IAAM,eAAe,OAAO,OAAO;AAAA,EACjC,MAAM,OAAO,SAAS,OAAO,MAAM;AACrC,CAAC;AAED,IAAM,kBAAkB,OAAO,OAAO;AAAA,EACpC,IAAI;AAAA,EACJ,aAAa;AAAA,EACb,YAAY,OAAO,SAAS,OAAO,MAAM;AAAA,EACzC,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,SAAS,OAAO,SAAS,YAAY;AAAA,EACrC,UAAU,OAAO,SAAS,YAAY;AAAA,EACtC,QAAQ;AACV,CAAC;AAGD,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,SAAS;AAAA,EACT,WAAW;AACb,CAAC;AAED,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,aAAa,OAAO,SAAS,OAAO,IAAI,EAAE;AAAA,IACxC,OAAO,wBAAwB,OAAO,QAAQ,EAAE,CAAC;AAAA,EACnD;AAAA,EACA,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,MAAM,OAAO;AAAA,IACX,OAAO,OAAO;AAAA,MACZ,QAAQ,OAAO;AAAA,QACb,OAAO,OAAO;AAAA,UACZ,QAAQ,OAAO;AAAA,YACb,OAAO;AAAA,cACL,OAAO;AAAA,cACP,OAAO,OAAO;AAAA,gBACZ,aAAa;AAAA,cACf,CAAC;AAAA,YACH;AAAA,UACF,EAAE,KAAK,OAAO,wBAAwB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AAAA,QAC3D,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH;AACF,CAAC;AAeD,IAAM,0BAA0B,OAAO,kBAAkB,iBAAiB;AAC1E,IAAM,2BAA2B,OAAO,kBAAkB,kBAAkB;AAC5E,IAAM,wBAAwB,OAAO,kBAAkB,eAAe;AACtE,IAAM,0BAA0B,OAAO,kBAAkB,iBAAiB;AAC1E,IAAM,YAAY,OAAO,oBAAoB,OAAO,eAAe,OAAO,OAAO,CAAC;AAElF,IAAM,wBAAwB,CAAC,iBAAiC;AAC9D,QAAM,UAAU,aAAa,KAAK;AAClC,MAAI,CAAC,IAAI,SAAS,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,IAAI,IAAI,OAAO;AAC9B,MAAI,OAAO,aAAa,mBAAoB,QAAO;AACnD,QAAM,UAAU,OAAO,aAAa,IAAI,SAAS,GAAG,KAAK;AACzD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAAO,OAAO,SAAS,YAAY;AACzC,MAAI,CAAC,KAAK,SAAS,iBAAiB,EAAG,QAAO;AAC9C,QAAM,aAAa,KAAK,MAAM,GAAG,CAAC,kBAAkB,MAAM;AAC1D,QAAM,UACJ,eAAe,kBACX,aACA,WAAW,SAAS,OAAO,IACzB,WAAW,MAAM,GAAG,EAAE,IACtB;AACR,SAAO,UAAU,GAAG,sBAAsB,IAAI,OAAO,IAAI,OAAO,UAAU;AAC5E;AAEO,IAAM,uBAAuB,CAAC,QAAyB;AAC5D,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,IAAI,SAAS,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,IAAI,IAAI,OAAO;AAC9B,QAAM,OAAO,OAAO,SAAS,YAAY;AACzC,MAAI,CAAC,KAAK,SAAS,gBAAgB,EAAG,QAAO;AAC7C,SAAO,OAAO,SAAS,SAAS,aAAa,KAAK,OAAO,SAAS,SAAS,YAAY;AACzF;AAEO,IAAM,+BAA+B,OAAO,GAAG,sCAAsC;AAAA,EAC1F,WAAW,cAAsB,aAAoC;AACnE,UAAM,SAAS,OAAO,WAAW;AACjC,UAAM,aAAa,IAAI,IAAI,YAAY;AACvC,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,aAAa,eAAe,CAAC,CAAC,GAAG;AAC1E,iBAAW,aAAa,IAAI,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,UAAU,kBAAkB,IAAI,WAAW,SAAS,CAAC,EAAE;AAAA,MACzD,kBAAkB,UAAU,UAAU,uBAAuB;AAAA,IAC/D;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,aAAa,WAAW,CAAC,CAAC,GAAG;AACtE,gBAAU,kBAAkB,UAAU,SAAS,MAAM,KAAK;AAAA,IAC5D;AACA,UAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,MAC9C,OAAO;AAAA,QACL,MACE,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL;AAAA,IACF;AACA,QAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AACnD,aAAO,OAAO,IAAI,kBAAkB;AAAA,QAClC,SAAS,mDAAmD,SAAS,MAAM;AAAA,MAC7E,CAAC;AAAA,IACH;AACA,WAAO,OAAO,SAAS,KAAK;AAAA,MAC1B,OAAO;AAAA,QACL,MACE,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAM,YAAY,CAAC,SAAiB,wBAAwB,IAAI;AAEhE,IAAM,qBAAqB,CAAC,SAAyB;AAErD,IAAM,sBAAsB,CAAC,UAC3B,MACG,KAAK,EACL,QAAQ,qBAAqB,GAAG,EAChC,QAAQ,YAAY,EAAE,KAAK;AAEhC,IAAM,iCAAiC,CAAC,iBACtC,aAAa,WAAW,mBAAmB,MAAM;AAEnD,IAAM,4BAA4B,CAAC,cAAsB,kBACvD,aAAa,SAAS,KAAK,aAAa,GAAG;AAE7C,IAAM,gBAAgB,CACpB,OACA,eACA,QACA,aACW;AACX,MAAI,CAAC,MAAM,aAAa,IAAI,MAAM,EAAG,QAAO;AAC5C,QAAM,gBAAgB,IAAI,SAAS,QAAQ,sBAAsB,GAAG,CAAC;AACrE,MAAI,CAAC,MAAM,aAAa,IAAI,MAAM,EAAG,QAAO;AAC5C,MAAI,QAAQ;AACZ,SAAO,MAAM,GAAG,aAAa,IAAI,KAAK,EAAE,IAAI,MAAM,EAAG,UAAS;AAC9D,SAAO,GAAG,aAAa,IAAI,KAAK;AAClC;AAEA,IAAM,uBAAuB,CAAC,UAC5B,OAAO,UAAU,WACb,QACA,OAAO,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,IAC3C,OAAO,MAAM,UAAU,WACrB,MAAM,QACN,SACF;AAER,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,IAAM,YAAY,CAAC,UAA0C;AAC3D,MACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,WACjB;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAM,SAAS,MAAM,IAAI,SAAS;AAClC,WAAO,OAAO,MAAM,UAAU,cAAc,IAAI,SAAS;AAAA,EAC3D;AACA,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,QAAM,UAAU,OAAO,QAAQ,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI,MAAM;AAC7D,UAAM,YAAY,UAAU,IAAI;AAChC,WAAO,cAAc,SAAY,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAU;AAAA,EAClE,CAAC;AACD,SAAO,OAAO,YAAY,OAAO;AACnC;AAEA,IAAM,cAAc,CAAC,UAAkD;AACrE,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,QAAM,UAAU,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ;AAC/E,SAAO,QAAQ,WAAW,MAAM,SAAS,UAAU;AACrD;AAEA,IAAM,aAAa,CAAC,UAClB,OAAO,UAAU,YAAY,qBAAqB,IAAI,KAAK,IACtD,QACD;AAEN,IAAM,iCAAiC,CACrC,KACA,mBAA6C,uBACrB;AACxB,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO,CAAC;AAC5B,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,SAAS,SAAU,QAAO,EAAE,MAAM,UAAU,iBAAiB,OAAO,IAAI,CAAC,EAAE;AAE7F,QAAM,cAAc,qBAAqB,OAAO,WAAW;AAC3D,QAAM,QAAQ,qBAAqB,OAAO,KAAK;AAC/C,QAAM,eAAe,UAAU,OAAO,OAAO;AAC7C,QAAM,aAAa,MAAM,QAAQ,OAAO,IAAI,IACxC,OAAO,KAAK,IAAI,SAAS,EAAE,OAAO,UAAU,cAAc,IAC1D,CAAC;AACL,QAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AACnE,QAAM,WAAW,OAAO,OAAO,aAAa,YAAY,OAAO,WAAW;AAC1E,QAAM,OAAO,WAAW,OAAO,IAAI;AAEnC,QAAM,OAAO;AAAA,IACX,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,IACvC,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,IACzC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,IAC7C,GAAI,iBAAiB,SAAY,EAAE,SAAS,aAAa,IAAI,CAAC;AAAA,IAC9D,GAAI,WAAW,SAAS,IAAI,EAAE,MAAM,WAAW,IAAI,CAAC;AAAA,EACtD;AAEA,MAAI,SAAS,SAAS;AACpB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN,OAAO,+BAA+B,OAAO,OAAO,gBAAgB;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,aAAa,OAAO;AAC1B,MACE,SAAS,YACR,SAAS,UAAU,KAAK,OAAO,KAAK,UAAU,EAAE,SAAS,KAC1D,OAAO,yBAAyB,QAChC;AACA,UAAM,sBAAsB,SAAS,UAAU,IAC3C,OAAO;AAAA,MACL,OAAO,QAAQ,UAAU,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;AAAA,QAChD;AAAA,QACA,+BAA+B,OAAO,gBAAgB;AAAA,MACxD,CAAC;AAAA,IACH,IACA;AACJ,UAAM,WAAW,YAAY,OAAO,QAAQ;AAC5C,UAAM,uBACJ,OAAO,yBAAyB,SAC5B,SACA,OAAO,OAAO,yBAAyB,YACrC,OAAO,uBACP,+BAA+B,OAAO,sBAAsB,gBAAgB;AACpF,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN,GAAI,uBAAuB,OAAO,KAAK,mBAAmB,EAAE,SAAS,IACjE,EAAE,YAAY,oBAAoB,IAClC,CAAC;AAAA,MACL,GAAI,YAAY,SAAS,SAAS,IAAI,EAAE,SAAS,IAAI,CAAC;AAAA,MACtD,GAAI,yBAAyB,SAAY,EAAE,qBAAqB,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,SAAO,SAAS,SAAY,EAAE,GAAG,MAAM,KAAK,IAAI;AAClD;AAEA,IAAM,kBAAkB,CACtB,WACA,mBAA6C,uBACrB;AACxB,QAAM,OAAO,+BAA+B,WAAW,gBAAgB;AACvE,SAAO,UAAU,WACb;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT,IACA;AACN;AAEA,IAAM,iBAAiB,CAAC,SAAiB,aACvC,SAAS,WAAW,GAAG,OAAO,GAAG,IAAI,SAAS,MAAM,QAAQ,SAAS,CAAC,IAAI;AAE5E,IAAM,iBAAiB,CAAC,aAAyC;AAC/D,QAAM,UAAU,wBAAwB,QAAQ;AAChD,QAAM,SAAS,OAAO,OAAO,QAAQ,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,sBAAsB,GAAG,CAAC;AAC3F,QAAM,SAAS,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,EAAE,QAAQ,cAAc;AAC5E,SAAO,CAAC,GAAG,QAAQ,GAAG,MAAM;AAC9B;AAEA,IAAM,kBAAkB,CAAC,aACvB,OAAO;AAAA,EACL,OAAO,QAAQ,SAAS,MAAM,QAAQ,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;AAAA,IAC1E;AAAA,IACA,OAAO,UAAU,MAAM,aAAa,MAAM,EAAE;AAAA,EAC9C,CAAC;AACH;AAWF,IAAM,2BAA2B,CAAC,QAAwD;AACxF,QAAM,iBAAiB,CAAC,UAA0B;AAChD,QAAI,IAAI,KAAK,MAAM,OAAW,QAAO,IAAI,KAAK;AAC9C,QAAI,UAAU,QAAS,QAAO,IAAI,gDAAgD,KAAK;AACvF,QAAI,UAAU,UAAW,QAAO,IAAI,kDAAkD,KAAK;AAC3F,WAAO;AAAA,EACT;AACA,SAAO,OAAO;AAAA,IACZ,yBAAyB,OAAO,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,eAAe,KAAK,CAAC,CAAC;AAAA,EAC1F;AACF;AAEA,IAAM,sBAAsB,CAAC,aAAmD;AAAA,EAC9E,GAAG,OAAO,OAAO,SAAS,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,sBAAsB,GAAG,CAAC;AAAA,EAChF,GAAG,OAAO,OAAO,SAAS,aAAa,CAAC,CAAC,EAAE,QAAQ,cAAc;AACnE;AAYA,IAAM,wBAAwB,CAC5B,UACA,iBAEA,OAAO,IAAI,aAAa;AACtB,QAAM,UAAU,OAAO,eAAe,SAAS,IAAI;AACnD,QAAM,UAAU,OAAO,eAAe,SAAS,OAAO;AACtD,QAAM,UAAU,OAAO,eAAe,SAAS,OAAO;AACtD,MAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS;AACpC,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,IAAI,IAAI,SAAS,eAAe,IAAI,OAAO,EAAE,SAAS;AAAA,IAC/D,OAAO,OAAO,UAAU,SAAS,OAAO,MAAM,GAAG,OAAO,IAAI,OAAO,EAAE;AAAA,EACvE;AACF,CAAC;AAEH,IAAM,0BAA0B,CAAC,UAQH;AAC5B,QAAM,mBAAmB,oBAAI,IAAgC;AAC7D,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,MAAM,SAAS,cAAc,CAAC,CAAC,GAAG;AACzE,UAAM,YAAY,yBAAyB,GAAG;AAC9C,QAAI,UAAU,SAAU,kBAAiB,IAAI,MAAM,SAAS;AAAA,EAC9D;AACA,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,MAAM,OAAO,cAAc,CAAC,CAAC,GAAG;AACvE,UAAM,YAAY,yBAAyB,GAAG;AAC9C,QAAI,UAAU,SAAU,kBAAiB,IAAI,MAAM,SAAS;AAAA,EAC9D;AAEA,QAAM,eAAe,MAAM,OAAO,UAAU,CAAC;AAC7C,QAAM,oBAAoB,OAAO,eAAe,MAAM,OAAO,WAAW;AACxE,QAAM,mBAAmB,MAAM,oBAAoB;AAEnD,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,uBAAuB,MAAM;AAAA,IAC7B,2BAA2B,MAAM;AAAA,IACjC,GAAI,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,IAClE,GAAI,sBAAsB,SAAY,EAAE,aAAa,kBAAkB,IAAI,CAAC;AAAA,IAC5E,GAAI,MAAM,YAAY,EAAE,SAAS,CAAC,EAAE,KAAK,MAAM,UAAU,CAAC,EAAE,IAAI,CAAC;AAAA,IACjE,YAAY,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,MAAM,SAAS,MAAM;AACzE,YAAM,WAAW,UAAU;AAC3B,UAAI,CAAC,SAAU,QAAO,CAAC;AACvB,YAAM,cAAc,OAAO,eAAe,UAAU,WAAW;AAC/D,YAAM,gBACJ,aAAa,UAAU,0BAA0B,MAAM,cAAc,IAAI;AAC3E,aAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,IAAI;AAAA,UACJ,UAAU,aAAa,SAAS,OAAO,UAAU,aAAa;AAAA,UAC9D,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,UACnD,QAAQ,gBAAgB,WAAW,gBAAgB;AAAA,UACnD,GAAI,aAAa,UACb,EAAE,OAAO,QAAiB,SAAS,UAAU,aAAa,KAAK,IAC/D,CAAC;AAAA,UACL,GAAI,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,GAAI,MAAM,OAAO,SAAS,OACtB;AAAA,MACE,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,EAAE,MAAM,UAAU,iBAAiB,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF,IACA,CAAC;AAAA,IACL,WAAW;AAAA,MACT,OAAO;AAAA,QACL,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,MAAM,OAAO,UAAU,OAC3B,EAAE,MAAM,UAAU,iBAAiB,MAAM,OAAO,SAAS,IAAI,CAAC,EAAE,IAChE,CAAC;AAAA,UACP;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,GAAI,aAAa,SAAS,IAAI,EAAE,UAAU,CAAC,EAAE,cAAc,aAAa,CAAC,EAAE,IAAI,CAAC;AAAA,IAChF,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAM,+BAA+B;AAKrC,IAAM,sBAAsB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3B;AAAA,IACE;AAAA,MACE,MAAM,iBAAiB,KAAK,4BAA4B;AAAA,MACxD,MAAM;AAAA,MACN,kBAAkB;AAAA,MAClB,UAAU;AAAA,MACV,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC5B;AAAA,EACF;AAAA;AAEK,IAAM,kCAAkC,OAAO,GAAG,gCAAgC;AAAA,EACvF,WAAW,OAAyE;AAClF,UAAM,SAAS,OAAO,UAAU,MAAM,YAAY,EAAE;AAAA,MAClD,OAAO;AAAA,QACL,MACE,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL;AAAA,IACF;AACA,UAAM,WAAW,OAAO,OAAO,IAAI;AAAA,MACjC,KAAK,MAAM,wBAAwB,MAAM;AAAA,MACzC,OAAO,MACL,IAAI,kBAAkB;AAAA,QACpB,SAAS;AAAA,MACX,CAAC;AAAA,IACL,CAAC;AAED,UAAM,OAAO,OAAO,sBAAsB,UAAU,MAAM,YAAY;AACtE,UAAM,EAAE,SAAS,SAAS,SAAS,MAAM,IAAI;AAC7C,UAAM,QAAgE,CAAC;AAEvE,eAAW,UAAU,oBAAoB,QAAQ,GAAG;AAClD,YAAM,WAAW,OAAO,eAAe,OAAO,EAAE;AAChD,YAAM,eAAe,OAAO,eAAe,OAAO,IAAI;AACtD,UAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,WAAY;AAEtD,YAAM,WAAW,eAAe,SAAS,QAAQ;AACjD,YAAM,OAAO;AAAA,QACX,aAAa,WAAW,GAAG,IAAI,eAAe,IAAI,YAAY;AAAA,MAChE;AACA,YAAM,YAAY,OAAO,WAAW,YAAY;AAChD,YAAM,UAAU,cAAc,OAAO,MAAM,WAAW,QAAQ;AAE9D,YAAM,OAAO,MAAM,CAAC;AACpB,YAAM,OAAO,EAAG,SAAS,IAAI,wBAAwB;AAAA,QACnD;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc,aAAa,WAAW,GAAG,IAAI,eAAe,IAAI,YAAY;AAAA,MAC9E,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,yBAAyB,gBAAgB,QAAQ,CAAC;AACjE,UAAM,yBAAyB,oBAAoB,MAAM;AAEzD,UAAM,OAAwB;AAAA,MAC5B,SAAS;AAAA,MACT,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,MACA,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;AAAA,MAC1B;AAAA,MACA,YAAY;AAAA,QACV,SAAS,OAAO;AAAA,UACd,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,MAAM;AAAA,YAC7D;AAAA,YACA,+BAA+B,MAAM;AAAA,UACvC,CAAC;AAAA,QACH;AAAA,QACA,GAAI,yBACA;AAAA,UACE,iBAAiB;AAAA,YACf,cAAc;AAAA,cACZ,MAAM;AAAA,cACN,OAAO;AAAA,gBACL,mBAAmB;AAAA,kBACjB,kBAAkB;AAAA,kBAClB,UAAU;AAAA,kBACV;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF,IACA,CAAC;AAAA,MACP;AAAA,MACA,GAAI,yBAAyB,EAAE,UAAU,CAAC,EAAE,cAAc,OAAO,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;AAAA,MACtF,qBAAqB;AAAA,QACnB,MAAM;AAAA,QACN,cAAc,sBAAsB,MAAM,YAAY;AAAA,QACtD;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA;AAAA,MAEL,UAAU,KAAK,UAAU,IAAI;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,yBAAyB,EAAE,uBAAuB,IAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAEO,IAAM,wCAAwC,OAAO;AAAA,EAC1D;AACF,EAAE,WAAW,OAEV;AACD,MAAI,MAAM,UAAU,WAAW,GAAG;AAChC,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,OAAO,OAAO;AAAA,IAAQ,MAAM;AAAA,IAAW,CAAC,EAAE,cAAc,aAAa,MACjF,OAAO,IAAI,aAAa;AACtB,YAAM,SAAS,OAAO,UAAU,YAAY,EAAE;AAAA,QAC5C,OAAO;AAAA,UACL,MACE,IAAI,kBAAkB;AAAA,YACpB,SAAS;AAAA,UACX,CAAC;AAAA,QACL;AAAA,MACF;AACA,YAAM,WAAW,OAAO,OAAO,IAAI;AAAA,QACjC,KAAK,MAAM,wBAAwB,MAAM;AAAA,QACzC,OAAO,MACL,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL,CAAC;AACD,aAAO,OAAO,sBAAsB,UAAU,YAAY;AAAA,IAC5D,CAAC;AAAA,EACH;AAEA,QAAM,QAAgE,CAAC;AACvE,QAAM,UAA+C,CAAC;AACtD,QAAM,YAAoC,CAAC;AAE3C,aAAW,QAAQ,OAAO;AACxB,UAAM,eAAe,oBAAoB,GAAG,KAAK,OAAO,IAAI,KAAK,OAAO,EAAE;AAC1E,UAAM,mBAAmB,CAAC,SAAiB,GAAG,YAAY,IAAI,oBAAoB,IAAI,CAAC;AAEvF,eAAW,CAAC,OAAO,WAAW,KAAK,OAAO,QAAQ,gBAAgB,KAAK,QAAQ,CAAC,GAAG;AACjF,gBAAU,KAAK,MAAM;AAAA,IACvB;AAEA,eAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,KAAK,SAAS,WAAW,CAAC,CAAC,GAAG;AACxE,cAAQ,iBAAiB,IAAI,CAAC,IAAI,+BAA+B,QAAQ,gBAAgB;AAAA,IAC3F;AAEA,eAAW,UAAU,oBAAoB,KAAK,QAAQ,GAAG;AACvD,YAAM,WAAW,OAAO,eAAe,OAAO,EAAE;AAChD,YAAM,kBAAkB,OAAO,eAAe,OAAO,IAAI;AACzD,UAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,WAAY;AAEzD,YAAM,WAAW;AACjB,YAAM,WAAW,gBAAgB,WAAW,GAAG,IAAI,kBAAkB,IAAI,eAAe;AACxF,YAAM,cAAc,+BAA+B,QAAQ;AAC3D,YAAM,YAAY,OAAO,WAAW,YAAY;AAChD,YAAM,UAAU,cAAc,OAAO,aAAa,WAAW,QAAQ;AAErE,YAAM,OAAO,MAAM,CAAC;AACpB,YAAM,OAAO,EAAG,SAAS,IAAI,wBAAwB;AAAA,QACnD,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd;AAAA,QACA,WAAW,KAAK;AAAA,QAChB,MAAM,CAAC,KAAK,KAAK;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,SAAS,yBAAyB,SAAS;AACjD,QAAM,yBAAyB,oBAAoB,MAAM;AACzD,QAAM,OAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,SAAS,CAAC,EAAE,KAAK,uBAAuB,CAAC;AAAA,IACzC;AAAA,IACA,YAAY;AAAA,MACV;AAAA,MACA,GAAI,yBACA;AAAA,QACE,iBAAiB;AAAA,UACf,cAAc;AAAA,YACZ,MAAM;AAAA,YACN,OAAO;AAAA,cACL,mBAAmB;AAAA,gBACjB,kBAAkB;AAAA,gBAClB,UAAU;AAAA,gBACV;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,IACA,GAAI,yBAAyB,EAAE,UAAU,CAAC,EAAE,cAAc,OAAO,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;AAAA,IACtF,qBAAqB;AAAA,MACnB,MAAM;AAAA,MACN,UAAU,MAAM,IAAI,CAAC,UAAU;AAAA,QAC7B,cAAc,sBAAsB,KAAK,YAAY;AAAA,QACrD,SAAS,KAAK;AAAA,QACd,SAAS,KAAK;AAAA,MAChB,EAAE;AAAA,IACJ;AAAA,EACF;AAEA,SAAO;AAAA;AAAA,IAEL,UAAU,KAAK,UAAU,IAAI;AAAA,IAC7B,SAAS;AAAA,IACT,OAAO;AAAA,IACP,SAAS;AAAA,IACT,SAAS;AAAA,IACT,eAAe,MAAM,IAAI,CAAC,SAAS,sBAAsB,KAAK,YAAY,CAAC;AAAA,IAC3E,GAAI,yBAAyB,EAAE,uBAAuB,IAAI,CAAC;AAAA,EAC7D;AACF,CAAC;;;AE90BD,YAAYA,aAAY;AAExB,SAAS,oBAAAC,yBAAkD;AAWpD,SAAS,gBAAgB,KAAa,SAAyB;AACpE,MAAI,CAAC,IAAK,QAAO;AAEjB,MAAI;AACF,QAAI,IAAI,GAAG;AACX,WAAO;AAAA,EACT,QAAQ;AACN,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI;AACF,aAAO,IAAI,IAAI,KAAK,OAAO,EAAE,SAAS;AAAA,IACxC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,6BAA6B,CAAC,UAAU,SAAS,SAAS;AAEhE,IAAM,0BAA0B,CAC9B,mBACsB;AACtB,MAAI,mBAAmB,MAAO,QAAO,CAAC;AACtC,SAAO,mBAAmB,SAAS,6BAA6B;AAClE;AAEO,IAAM,sBAAsB,CACjC,WACA,mBACa;AACb,QAAM,SAAS,IAAI,IAAI,SAAS;AAChC,aAAW,SAAS,wBAAwB,cAAc,EAAG,QAAO,IAAI,KAAK;AAC7E,SAAO,CAAC,GAAG,MAAM;AACnB;AASA,IAAM,eAAe,CAAC,QAAsB,eAA2C;AACrF,QAAM,QAAQ,OAAO,MAAM,YAAY;AACvC,MAAI,WAAW,YAAY,MAAM,iBAAiB;AAChD,QAAI,MAAM,SAAS,QAAQ,EAAG,QAAO;AACrC,QAAI,MAAM,SAAS,OAAO,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,IAAM,iCAAiC,CACrC,QACA,UAC0B;AAAA,EAC1B;AAAA,EACA,MAAM;AAAA;AAAA;AAAA,EAGN,YAAY,OAAO,cAAc,IAAI,CAAC,eAAe;AACnD,UAAM,SAAS,aAAa,QAAQ,UAAU;AAC9C,WAAO,EAAE,SAAS,UAAmB,MAAM,YAAY,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG;AAAA,EACvF,CAAC;AACH;AAEA,IAAM,0BAA0B,CAC9B,QACA,SACA,MACA,YACyB;AAAA,EACzB;AAAA,EACA,MAAM;AAAA,EACN,kBAAkB;AAAA,IACT,kBAAU,OAAO,kBAAkB,MAAM,EAAE;AAAA,IAClD;AAAA,EACF;AAAA,EACA,UAAU,gBAAgB,OAAO,UAAU,OAAO;AAAA,EAClD,QAAQ,CAAC,GAAG,MAAM;AACpB;AAUO,IAAM,kCAAkC,CAC7C,eACA,eACA,YAC8B;AAC9B,QAAM,YAA8B,CAAC;AACrC,gBAAc,QAAQ,CAAC,QAAQ,UAAU;AACvC,cAAU;AAAA,MACR,+BAA+B,QAAQC,kBAAiB,KAAK,UAAU,KAAK,EAAE,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACD,aAAW,UAAU,eAAe;AAClC,UAAM,SAAS,oBAAoB,OAAO,KAAK,OAAO,MAAM,GAAG,OAAO,cAAc;AACpF,cAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA;AAAA,QACAA,kBAAiB,KAAK,SAAS,OAAO,kBAAkB,EAAE;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,yBAAyB,CAAC,YAAiC;AACtE,QAAM,cAAc,QAAQ,QAAQ,CAAC;AACrC,SAAO,cACH,iBAAiB,YAAY,KAAY,uBAAe,YAAY,SAAS,GAAG,CAAC,CAAC,IAClF;AACN;AAIO,IAAM,0CAA0C,CACrD,SACA,YAEA;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,uBAAuB,OAAO;AAC3C;","names":["Option","AuthTemplateSlug","AuthTemplateSlug"]}

package/dist/{chunk-BSLE6HCE.js → chunk-IB36ED7Y.js}

@@ -3,7 +3,7 @@ import {
   OpenApiOAuthError,
   OpenApiParseError,
   SpecPreview
-} from "./chunk-YVRI7KRC.js";
+} from "./chunk-C3IJX4AN.js";
 
 // src/react/atoms.ts
 import * as Atom from "effect/unstable/reactivity/Atom";
@@ -19,6 +19,7 @@ import {
 // src/api/group.ts
 import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
 import { Schema } from "effect";
+import { ApiKeyAuthMethod, ApiKeyAuthTemplate } from "@executor-js/sdk/http-auth";
 import {
   InternalError,
   IntegrationAlreadyExistsError,
@@ -46,29 +47,15 @@ var OpenApiSpecInputPayload = Schema.Union([
     urls: Schema.Array(Schema.String)
   })
 ]);
-var AuthenticationVariablePayload = Schema.Struct({
-  type: Schema.Literal("variable"),
-  name: Schema.String
+var OAuthTemplatePayload = Schema.Struct({
+  slug: Schema.String,
+  kind: Schema.Literal("oauth2"),
+  authorizationUrl: Schema.String,
+  tokenUrl: Schema.String,
+  scopes: Schema.Array(Schema.String)
 });
-var AuthenticationTemplateValuePayload = Schema.Union([
-  Schema.String,
-  Schema.Array(Schema.Union([Schema.String, AuthenticationVariablePayload]))
-]);
-var AuthenticationPayload = Schema.Union([
-  Schema.Struct({
-    slug: Schema.String,
-    type: Schema.Literal("apiKey"),
-    headers: Schema.optional(Schema.Record(Schema.String, AuthenticationTemplateValuePayload)),
-    queryParams: Schema.optional(Schema.Record(Schema.String, AuthenticationTemplateValuePayload))
-  }),
-  Schema.Struct({
-    slug: Schema.String,
-    type: Schema.Literal("oauth"),
-    authorizationUrl: Schema.String,
-    tokenUrl: Schema.String,
-    scopes: Schema.Array(Schema.String)
-  })
-]);
+var AuthenticationPayload = Schema.Union([OAuthTemplatePayload, ApiKeyAuthTemplate]);
+var AuthenticationResponse = Schema.Union([OAuthTemplatePayload, ApiKeyAuthMethod]);
 var AddSpecPayload = Schema.Struct({
   spec: OpenApiSpecInputPayload,
   slug: Schema.String,
@@ -97,16 +84,15 @@ var IntegrationView = Schema.Struct({
   canRefresh: Schema.Boolean
 });
 var OpenApiConfigView = Schema.Struct({
-  spec: Schema.String,
   sourceUrl: Schema.optional(Schema.String),
   googleDiscoveryUrls: Schema.optional(Schema.Array(Schema.String)),
   baseUrl: Schema.optional(Schema.String),
   headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),
   queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),
-  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationPayload))
+  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationResponse))
 });
 var ConfigureResponse = Schema.Struct({
-  authenticationTemplate: Schema.Array(AuthenticationPayload)
+  authenticationTemplate: Schema.Array(AuthenticationResponse)
 });
 var OpenApiGroup = HttpApiGroup.make("openapi").add(
   HttpApiEndpoint.post("previewSpec", "/openapi/preview", {
@@ -178,4 +164,4 @@ export {
   addOpenApiSpec,
   openapiConfigure
 };
-//# sourceMappingURL=chunk-BSLE6HCE.js.map
+//# sourceMappingURL=chunk-IB36ED7Y.js.map

package/dist/chunk-IB36ED7Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react/atoms.ts","../src/react/client.ts","../src/api/group.ts"],"sourcesContent":["import type { IntegrationSlug } from \"@executor-js/sdk/shared\";\nimport * as Atom from \"effect/unstable/reactivity/Atom\";\nimport { ReactivityKey } from \"@executor-js/react/api/reactivity-keys\";\nimport { OpenApiClient } from \"./client\";\n\n// ---------------------------------------------------------------------------\n// Query atoms — v2: the integration catalog is the unit of identity (the v1\n// per-scope `source` row is gone). `getIntegration` returns the catalog entry\n// (slug/description/kind/canRemove/canRefresh); credentials are owner-scoped\n// connections read from the shared `connections` API, not bound per source.\n// ---------------------------------------------------------------------------\n\nexport const openApiIntegrationAtom = (slug: IntegrationSlug) =>\n  OpenApiClient.query(\"openapi\", \"getIntegration\", {\n    params: { slug },\n    timeToLive: \"15 seconds\",\n    reactivityKeys: [ReactivityKey.integrations, ReactivityKey.tools],\n  });\n\n// The full opaque config (including `authenticationTemplate`), used by the\n// configure UX to render existing auth methods and add custom ones.\nexport const openApiConfigAtom = (slug: IntegrationSlug) =>\n  OpenApiClient.query(\"openapi\", \"getConfig\", {\n    params: { slug },\n    timeToLive: \"15 seconds\",\n    reactivityKeys: [ReactivityKey.integrations, ReactivityKey.tools],\n  });\n\n// ---------------------------------------------------------------------------\n// Mutation atoms\n// ---------------------------------------------------------------------------\n\nexport const previewOpenApiSpec = OpenApiClient.mutation(\"openapi\", \"previewSpec\");\n\nexport const addOpenApiSpec = OpenApiClient.mutation(\"openapi\", \"addSpec\");\n\nexport const removeOpenApiSpec = OpenApiClient.mutation(\"openapi\", \"removeSpec\");\n\n// Add / merge custom auth methods onto an integration's `authenticationTemplate`.\nexport const openapiConfigure = OpenApiClient.mutation(\"openapi\", \"configure\");\n\n// `getIntegration` is read-only; the atom family lets a caller pass a slug.\nexport const openApiIntegrationFamily = Atom.family(openApiIntegrationAtom);\n\n// `getConfig` is read-only; the atom family lets a caller pass a slug.\nexport const openApiConfigFamily = Atom.family(openApiConfigAtom);\n","import { createPluginAtomClient } from \"@executor-js/sdk/client\";\nimport {\n  getExecutorApiBaseUrl,\n  getExecutorServerAuthorizationHeader,\n} from \"@executor-js/react/api/server-connection\";\nimport { OpenApiGroup } from \"../api/group\";\n\nexport const OpenApiClient = createPluginAtomClient(OpenApiGroup, {\n  baseUrl: getExecutorApiBaseUrl,\n  authorizationHeader: getExecutorServerAuthorizationHeader,\n});\n","import { HttpApiEndpoint, HttpApiGroup } from \"effect/unstable/httpapi\";\nimport { Schema } from \"effect\";\nimport { ApiKeyAuthMethod, ApiKeyAuthTemplate } from \"@executor-js/sdk/http-auth\";\nimport {\n  InternalError,\n  IntegrationAlreadyExistsError,\n  IntegrationSlug,\n} from \"@executor-js/sdk/shared\";\n\nimport { OpenApiParseError, OpenApiExtractionError, OpenApiOAuthError } from \"../sdk/errors\";\nimport { SpecPreview } from \"../sdk/preview\";\n\n// ---------------------------------------------------------------------------\n// Errors — the plugin-domain tagged errors flow directly to clients\n// (4xx, each carrying its own `httpApiStatus`). `InternalError` is the shared\n// opaque 500 surface; `StorageError` → `InternalError` translation happens at\n// service wiring time. `IntegrationAlreadyExistsError` (409) blocks re-adding\n// an existing slug — see addSpec.\n// ---------------------------------------------------------------------------\n\nconst DomainErrors = [\n  InternalError,\n  OpenApiParseError,\n  OpenApiExtractionError,\n  OpenApiOAuthError,\n  IntegrationAlreadyExistsError,\n] as const;\n\nconst SlugParams = {\n  slug: Schema.String,\n};\n\n// ---------------------------------------------------------------------------\n// Payloads\n// ---------------------------------------------------------------------------\n\nconst OpenApiSpecInputPayload = Schema.Union([\n  Schema.Struct({ kind: Schema.Literal(\"url\"), url: Schema.String }),\n  Schema.Struct({ kind: Schema.Literal(\"blob\"), value: Schema.String }),\n  Schema.Struct({\n    kind: Schema.Literal(\"googleDiscovery\"),\n    url: Schema.String,\n  }),\n  Schema.Struct({\n    kind: Schema.Literal(\"googleDiscoveryBundle\"),\n    urls: Schema.Array(Schema.String),\n  }),\n]);\n\nconst OAuthTemplatePayload = Schema.Struct({\n  slug: Schema.String,\n  kind: Schema.Literal(\"oauth2\"),\n  authorizationUrl: Schema.String,\n  tokenUrl: Schema.String,\n  scopes: Schema.Array(Schema.String),\n});\n\n/** Auth INPUTS: oauth templates + the request-shaped apikey dialect. */\nconst AuthenticationPayload = Schema.Union([OAuthTemplatePayload, ApiKeyAuthTemplate]);\n\n/** Auth in RESPONSES: the canonical stored shapes (placements). */\nconst AuthenticationResponse = Schema.Union([OAuthTemplatePayload, ApiKeyAuthMethod]);\n\nconst AddSpecPayload = Schema.Struct({\n  spec: OpenApiSpecInputPayload,\n  slug: Schema.String,\n  description: Schema.optional(Schema.String),\n  baseUrl: Schema.optional(Schema.String),\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationPayload)),\n});\n\nconst PreviewSpecPayload = Schema.Struct({\n  spec: Schema.String,\n});\n\n// The `configure` payload — the new/updated auth methods to merge onto the\n// integration's `authenticationTemplate`. Reuses the same `AuthenticationPayload`\n// schema as `addSpec` so a custom apiKey method round-trips identically.\nconst ConfigurePayload = Schema.Struct({\n  authenticationTemplate: Schema.Array(AuthenticationPayload),\n  mode: Schema.optional(Schema.Literals([\"merge\", \"replace\"])),\n});\n\n// ---------------------------------------------------------------------------\n// Responses\n// ---------------------------------------------------------------------------\n\nconst AddSpecResponse = Schema.Struct({\n  slug: IntegrationSlug,\n  toolCount: Schema.Number,\n});\n\nconst IntegrationView = Schema.Struct({\n  slug: IntegrationSlug,\n  description: Schema.String,\n  kind: Schema.String,\n  canRemove: Schema.Boolean,\n  canRefresh: Schema.Boolean,\n});\n\n// The integration config surfaced for the configure UX. Unlike\n// `IntegrationView` (catalog identity only), this carries the\n// `authenticationTemplate` the configure flow reads/writes. The spec text is\n// deliberately NOT served: it's a multi-MB build artifact in the plugin blob\n// store, and no client reads it (the configure UI only touches the template).\nconst OpenApiConfigView = Schema.Struct({\n  sourceUrl: Schema.optional(Schema.String),\n  googleDiscoveryUrls: Schema.optional(Schema.Array(Schema.String)),\n  baseUrl: Schema.optional(Schema.String),\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationResponse)),\n});\n\n// The configure result — the merged `authenticationTemplate` after the new\n// custom methods were appended/replaced.\nconst ConfigureResponse = Schema.Struct({\n  authenticationTemplate: Schema.Array(AuthenticationResponse),\n});\n\n// ---------------------------------------------------------------------------\n// Group — addSpec/preview/get/remove over the integration catalog.\n// ---------------------------------------------------------------------------\n\nexport const OpenApiGroup = HttpApiGroup.make(\"openapi\")\n  .add(\n    HttpApiEndpoint.post(\"previewSpec\", \"/openapi/preview\", {\n      payload: PreviewSpecPayload,\n      success: SpecPreview,\n      error: DomainErrors,\n    }),\n  )\n  .add(\n    HttpApiEndpoint.post(\"addSpec\", \"/openapi/specs\", {\n      payload: AddSpecPayload,\n      success: AddSpecResponse,\n      error: DomainErrors,\n    }),\n  )\n  .add(\n    HttpApiEndpoint.get(\"getIntegration\", \"/openapi/integrations/:slug\", {\n      params: SlugParams,\n      success: Schema.NullOr(IntegrationView),\n      error: DomainErrors,\n    }),\n  )\n  .add(\n    HttpApiEndpoint.get(\"getConfig\", \"/openapi/integrations/:slug/config\", {\n      params: SlugParams,\n      success: Schema.NullOr(OpenApiConfigView),\n      error: DomainErrors,\n    }),\n  )\n  .add(\n    HttpApiEndpoint.post(\"configure\", \"/openapi/integrations/:slug/config\", {\n      params: SlugParams,\n      payload: ConfigurePayload,\n      success: ConfigureResponse,\n      error: DomainErrors,\n    }),\n  )\n  .add(\n    HttpApiEndpoint.delete(\"removeSpec\", \"/openapi/integrations/:slug\", {\n      params: SlugParams,\n      success: Schema.Void,\n      error: DomainErrors,\n    }),\n  );\n"],"mappings":";;;;;;;;AACA,YAAY,UAAU;AACtB,SAAS,qBAAqB;;;ACF9B,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACJP,SAAS,iBAAiB,oBAAoB;AAC9C,SAAS,cAAc;AACvB,SAAS,kBAAkB,0BAA0B;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAaP,IAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,aAAa;AAAA,EACjB,MAAM,OAAO;AACf;AAMA,IAAM,0BAA0B,OAAO,MAAM;AAAA,EAC3C,OAAO,OAAO,EAAE,MAAM,OAAO,QAAQ,KAAK,GAAG,KAAK,OAAO,OAAO,CAAC;AAAA,EACjE,OAAO,OAAO,EAAE,MAAM,OAAO,QAAQ,MAAM,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EACpE,OAAO,OAAO;AAAA,IACZ,MAAM,OAAO,QAAQ,iBAAiB;AAAA,IACtC,KAAK,OAAO;AAAA,EACd,CAAC;AAAA,EACD,OAAO,OAAO;AAAA,IACZ,MAAM,OAAO,QAAQ,uBAAuB;AAAA,IAC5C,MAAM,OAAO,MAAM,OAAO,MAAM;AAAA,EAClC,CAAC;AACH,CAAC;AAED,IAAM,uBAAuB,OAAO,OAAO;AAAA,EACzC,MAAM,OAAO;AAAA,EACb,MAAM,OAAO,QAAQ,QAAQ;AAAA,EAC7B,kBAAkB,OAAO;AAAA,EACzB,UAAU,OAAO;AAAA,EACjB,QAAQ,OAAO,MAAM,OAAO,MAAM;AACpC,CAAC;AAGD,IAAM,wBAAwB,OAAO,MAAM,CAAC,sBAAsB,kBAAkB,CAAC;AAGrF,IAAM,yBAAyB,OAAO,MAAM,CAAC,sBAAsB,gBAAgB,CAAC;AAEpF,IAAM,iBAAiB,OAAO,OAAO;AAAA,EACnC,MAAM;AAAA,EACN,MAAM,OAAO;AAAA,EACb,aAAa,OAAO,SAAS,OAAO,MAAM;AAAA,EAC1C,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,EACtC,SAAS,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA,EACpE,aAAa,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA,EACxE,wBAAwB,OAAO,SAAS,OAAO,MAAM,qBAAqB,CAAC;AAC7E,CAAC;AAED,IAAM,qBAAqB,OAAO,OAAO;AAAA,EACvC,MAAM,OAAO;AACf,CAAC;AAKD,IAAM,mBAAmB,OAAO,OAAO;AAAA,EACrC,wBAAwB,OAAO,MAAM,qBAAqB;AAAA,EAC1D,MAAM,OAAO,SAAS,OAAO,SAAS,CAAC,SAAS,SAAS,CAAC,CAAC;AAC7D,CAAC;AAMD,IAAM,kBAAkB,OAAO,OAAO;AAAA,EACpC,MAAM;AAAA,EACN,WAAW,OAAO;AACpB,CAAC;AAED,IAAM,kBAAkB,OAAO,OAAO;AAAA,EACpC,MAAM;AAAA,EACN,aAAa,OAAO;AAAA,EACpB,MAAM,OAAO;AAAA,EACb,WAAW,OAAO;AAAA,EAClB,YAAY,OAAO;AACrB,CAAC;AAOD,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,WAAW,OAAO,SAAS,OAAO,MAAM;AAAA,EACxC,qBAAqB,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC;AAAA,EAChE,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,EACtC,SAAS,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA,EACpE,aAAa,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA,EACxE,wBAAwB,OAAO,SAAS,OAAO,MAAM,sBAAsB,CAAC;AAC9E,CAAC;AAID,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,wBAAwB,OAAO,MAAM,sBAAsB;AAC7D,CAAC;AAMM,IAAM,eAAe,aAAa,KAAK,SAAS,EACpD;AAAA,EACC,gBAAgB,KAAK,eAAe,oBAAoB;AAAA,IACtD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO;AAAA,EACT,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,KAAK,WAAW,kBAAkB;AAAA,IAChD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO;AAAA,EACT,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,IAAI,kBAAkB,+BAA+B;AAAA,IACnE,QAAQ;AAAA,IACR,SAAS,OAAO,OAAO,eAAe;AAAA,IACtC,OAAO;AAAA,EACT,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,IAAI,aAAa,sCAAsC;AAAA,IACrE,QAAQ;AAAA,IACR,SAAS,OAAO,OAAO,iBAAiB;AAAA,IACxC,OAAO;AAAA,EACT,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,KAAK,aAAa,sCAAsC;AAAA,IACtE,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,OAAO;AAAA,EACT,CAAC;AACH,EACC;AAAA,EACC,gBAAgB,OAAO,cAAc,+BAA+B;AAAA,IAClE,QAAQ;AAAA,IACR,SAAS,OAAO;AAAA,IAChB,OAAO;AAAA,EACT,CAAC;AACH;;;ADlKK,IAAM,gBAAgB,uBAAuB,cAAc;AAAA,EAChE,SAAS;AAAA,EACT,qBAAqB;AACvB,CAAC;;;ADEM,IAAM,yBAAyB,CAAC,SACrC,cAAc,MAAM,WAAW,kBAAkB;AAAA,EAC/C,QAAQ,EAAE,KAAK;AAAA,EACf,YAAY;AAAA,EACZ,gBAAgB,CAAC,cAAc,cAAc,cAAc,KAAK;AAClE,CAAC;AAII,IAAM,oBAAoB,CAAC,SAChC,cAAc,MAAM,WAAW,aAAa;AAAA,EAC1C,QAAQ,EAAE,KAAK;AAAA,EACf,YAAY;AAAA,EACZ,gBAAgB,CAAC,cAAc,cAAc,cAAc,KAAK;AAClE,CAAC;AAMI,IAAM,qBAAqB,cAAc,SAAS,WAAW,aAAa;AAE1E,IAAM,iBAAiB,cAAc,SAAS,WAAW,SAAS;AAElE,IAAM,oBAAoB,cAAc,SAAS,WAAW,YAAY;AAGxE,IAAM,mBAAmB,cAAc,SAAS,WAAW,WAAW;AAGtE,IAAM,2BAAgC,YAAO,sBAAsB;AAGnE,IAAM,sBAA2B,YAAO,iBAAiB;","names":[]}