@executor-js/sdk 1.5.5 → 1.5.7

package/dist/http-auth/authoring.d.ts

@@ -0,0 +1,52 @@
+import { Schema } from "effect";
+import { type ApiKeyAuthMethod, type AuthPlacement } from "./auth-method";
+export interface AuthTemplateVariable {
+    readonly type: "variable";
+    readonly name: string;
+}
+/** Mark where a credential input renders inside a template value:
+ *  `["Bearer ", variable("token")]`. */
+export declare const variable: (name: string) => AuthTemplateVariable;
+/** `string` (a static literal) or `prefix literals… + one variable, last`. */
+export declare const AuthTemplateValue: Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+    readonly type: Schema.Literal<"variable">;
+    readonly name: Schema.String;
+}>]>>]>;
+export type AuthTemplateValue = typeof AuthTemplateValue.Type;
+/** The request-shaped apikey authoring dialect. `slug` optional (backfilled
+ *  like every other input); `label` optional. */
+export declare const ApiKeyAuthTemplate: Schema.Struct<{
+    readonly slug: Schema.optional<Schema.String>;
+    readonly type: Schema.Literal<"apiKey">;
+    readonly label: Schema.optional<Schema.String>;
+    readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.Literal<"variable">;
+        readonly name: Schema.String;
+    }>]>>]>>>;
+    readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.Literal<"variable">;
+        readonly name: Schema.String;
+    }>]>>]>>>;
+}>;
+export type ApiKeyAuthTemplate = typeof ApiKeyAuthTemplate.Type;
+/** Normalize the request-shaped dialect into the canonical apikey method
+ *  (sans slug backfill — the caller's normalize pass owns slugs). */
+export declare const apiKeyMethodFromAuthTemplate: (template: ApiKeyAuthTemplate) => Omit<ApiKeyAuthMethod, "slug"> & {
+    readonly slug?: string;
+};
+/** Serialize a canonical method back into the request-shaped dialect — the
+ *  write side of read-modify-write flows (stored configs and the catalog
+ *  read as placements; auth INPUTS accept only this dialect). Same-named
+ *  same-carrier placements collapse, exactly as the renderer's header/query
+ *  records do. */
+export declare const apiKeyAuthTemplateFromMethod: (method: {
+    readonly slug?: string;
+    readonly label?: string;
+    readonly placements: readonly AuthPlacement[];
+}) => ApiKeyAuthTemplate;
+/** Whether an input union member is the request-shaped dialect. */
+export declare const isApiKeyAuthTemplate: (input: {
+    readonly kind?: string;
+    readonly type?: string;
+}) => input is ApiKeyAuthTemplate;
+//# sourceMappingURL=authoring.d.ts.map

package/dist/http-auth/authoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring.d.ts","sourceRoot":"","sources":["../../src/http-auth/authoring.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAkB,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAE1F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;wCACwC;AACxC,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,KAAG,oBAAoD,CAAC;AAU7F,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB;;;OAc5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAE9D;iDACiD;AACjD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAM7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAqBhE;qEACqE;AACrE,eAAO,MAAM,4BAA4B,GACvC,UAAU,kBAAkB,KAC3B,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAc3D,CAAC;AAEF;;;;kBAIkB;AAClB,eAAO,MAAM,4BAA4B,GAAI,QAAQ;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;CAC/C,KAAG,kBAmBH,CAAC;AAEF,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,GAAI,OAAO;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,KAAG,KAAK,IAAI,kBAA6C,CAAC"}

package/dist/http-auth/authoring.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authoring.test.d.ts.map

package/dist/http-auth/authoring.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring.test.d.ts","sourceRoot":"","sources":["../../src/http-auth/authoring.test.ts"],"names":[],"mappings":""}

package/dist/http-auth/index.d.ts

@@ -0,0 +1,5 @@
+export { ApiKeyAuthMethod, AuthCarrier, AuthPlacement, NoneAuthMethod, TOKEN_VARIABLE, apiKeyMethodLabel, describeApiKeyAuthMethod, describeNoneAuthMethod, normalizeAuthMethodSlugs, oauthBearerPlacement, renderAuthPlacements, requiredPlacementVariables, type RenderedAuthPlacements, } from "./auth-method";
+export { ApiKeyAuthTemplate, AuthTemplateValue, apiKeyAuthTemplateFromMethod, apiKeyMethodFromAuthTemplate, isApiKeyAuthTemplate, variable, type AuthTemplateVariable, } from "./authoring";
+export { LegacyApiKeyTemplate, LegacyTemplateValue, apiKeyMethodFromLegacyTemplate, decodeLegacyApiKeyTemplate, } from "./legacy";
+export { planAuthConfigMigration, runSqliteAuthConfigMigration, type AuthConfigMigrationRow, type AuthConfigMigrationUpdate, type AuthConfigTransform, type SqliteAuthConfigClient, } from "./migrate";
+//# sourceMappingURL=index.d.ts.map

package/dist/http-auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http-auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,QAAQ,EACR,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,WAAW,CAAC"}

package/dist/http-auth/legacy.d.ts

@@ -0,0 +1,42 @@
+import { Schema } from "effect";
+import { type ApiKeyAuthMethod } from "./auth-method";
+export declare const LegacyTemplateValue: Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+    readonly type: Schema.Literal<"variable">;
+    readonly name: Schema.String;
+}>]>>]>;
+export type LegacyTemplateValue = typeof LegacyTemplateValue.Type;
+/** The pre-canonical apiKey template shape (OpenAPI native + what the v1→v2
+ *  migration wrote into MCP/GraphQL configs). */
+export declare const LegacyApiKeyTemplate: Schema.Struct<{
+    readonly slug: Schema.String;
+    readonly type: Schema.Literal<"apiKey">;
+    readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.Literal<"variable">;
+        readonly name: Schema.String;
+    }>]>>]>>>;
+    readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.Literal<"variable">;
+        readonly name: Schema.String;
+    }>]>>]>>>;
+}>;
+export type LegacyApiKeyTemplate = typeof LegacyApiKeyTemplate.Type;
+export declare const decodeLegacyApiKeyTemplate: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => import("effect/Option").Option<{
+    readonly type: "apiKey";
+    readonly slug: string;
+    readonly headers?: {
+        readonly [x: string]: string | readonly (string | {
+            readonly name: string;
+            readonly type: "variable";
+        })[];
+    } | undefined;
+    readonly queryParams?: {
+        readonly [x: string]: string | readonly (string | {
+            readonly name: string;
+            readonly type: "variable";
+        })[];
+    } | undefined;
+}>;
+/** Rewrite a legacy apiKey template into the canonical placements method.
+ *  Slug and variable names are preserved verbatim. */
+export declare const apiKeyMethodFromLegacyTemplate: (template: LegacyApiKeyTemplate) => ApiKeyAuthMethod;
+//# sourceMappingURL=legacy.d.ts.map

package/dist/http-auth/legacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy.d.ts","sourceRoot":"","sources":["../../src/http-auth/legacy.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAkB,KAAK,gBAAgB,EAAsB,MAAM,eAAe,CAAC;AAO1F,eAAO,MAAM,mBAAmB;;;OAG9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC;AAElE;iDACiD;AACjD,eAAO,MAAM,oBAAoB;;;;;;;;;;;EAK/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAC;AAEpE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAAmD,CAAC;AAyB3F;sDACsD;AACtD,eAAO,MAAM,8BAA8B,GACzC,UAAU,oBAAoB,KAC7B,gBASF,CAAC"}

package/dist/http-auth/migrate.d.ts

@@ -0,0 +1,30 @@
+export type AuthConfigTransform = (config: unknown) => unknown | null;
+export interface AuthConfigMigrationRow {
+    /** The integration row's primary key (`row_id`). */
+    readonly rowId: string;
+    readonly pluginId: string;
+    readonly config: unknown;
+}
+export interface AuthConfigMigrationUpdate {
+    readonly rowId: string;
+    readonly config: unknown;
+}
+/** Plan the config rewrites for a set of integration rows. `transforms` maps
+ *  plugin ids (`mcp` / `graphql` / `openapi`) to their migration functions;
+ *  rows of other plugins, and rows whose transform returns null, are left
+ *  untouched. */
+export declare const planAuthConfigMigration: (rows: readonly AuthConfigMigrationRow[], transforms: Record<string, AuthConfigTransform>) => readonly AuthConfigMigrationUpdate[];
+export interface SqliteAuthConfigClient {
+    execute(stmt: string | {
+        readonly sql: string;
+        readonly args: readonly unknown[];
+    }): Promise<{
+        readonly rows: readonly Record<string, unknown>[];
+    }>;
+}
+/** Rewrite pre-canonical integration `config` blobs in a SQLite database.
+ *  Idempotent (canonical rows plan no updates); returns the number of rows
+ *  rewritten. The `integration` table may not exist yet on a fresh database —
+ *  that counts as nothing to migrate. */
+export declare const runSqliteAuthConfigMigration: (client: SqliteAuthConfigClient, transforms: Record<string, AuthConfigTransform>) => Promise<number>;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/http-auth/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/http-auth/migrate.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,GAAG,IAAI,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;iBAGiB;AACjB,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,sBAAsB,EAAE,EACvC,YAAY,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,KAC9C,SAAS,yBAAyB,EASpC,CAAC;AASF,MAAM,WAAW,sBAAsB;IACrC,OAAO,CACL,IAAI,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,GACzE,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC,CAAC;CACnE;AAED;;;yCAGyC;AACzC,eAAO,MAAM,4BAA4B,GACvC,QAAQ,sBAAsB,EAC9B,YAAY,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,KAC9C,OAAO,CAAC,MAAM,CAqChB,CAAC"}

package/dist/http-auth/migrate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=migrate.test.d.ts.map

package/dist/http-auth/migrate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.d.ts","sourceRoot":"","sources":["../../src/http-auth/migrate.test.ts"],"names":[],"mappings":""}

package/dist/http-auth.js

@@ -0,0 +1,288 @@
+import "./chunk-7D4SUZUM.js";
+
+// src/http-auth/auth-method.ts
+import { Schema } from "effect";
+var TOKEN_VARIABLE = "token";
+var AuthCarrier = Schema.Literals(["header", "query"]);
+var AuthPlacement = Schema.Struct({
+  carrier: AuthCarrier,
+  /** Header name (e.g. `Authorization`) or query-param name (e.g. `token`). */
+  name: Schema.String,
+  /** Literal prepended to the credential value, e.g. `Bearer `. */
+  prefix: Schema.optional(Schema.String),
+  /** The credential input this placement renders from. Absent ⇒ `token`. */
+  variable: Schema.optional(Schema.String),
+  /** Render this exact value instead of a credential. */
+  literal: Schema.optional(Schema.String)
+});
+var ApiKeyAuthMethod = Schema.Struct({
+  slug: Schema.String,
+  kind: Schema.Literal("apikey"),
+  /** Display label; derived from the first placement when absent. */
+  label: Schema.optional(Schema.String),
+  placements: Schema.Array(AuthPlacement)
+});
+var NoneAuthMethod = Schema.Struct({
+  slug: Schema.String,
+  kind: Schema.Literal("none")
+});
+var renderPlacementValue = (placement, values) => {
+  if (placement.literal !== void 0) return placement.literal;
+  const value = values[placement.variable ?? TOKEN_VARIABLE];
+  if (value == null) return null;
+  return placement.prefix ? `${placement.prefix}${value}` : value;
+};
+var renderAuthPlacements = (placements, values) => {
+  const headers = {};
+  const queryParams = {};
+  for (const placement of placements) {
+    const rendered = renderPlacementValue(placement, values);
+    if (rendered === null) continue;
+    if (placement.carrier === "header") headers[placement.name] = rendered;
+    else queryParams[placement.name] = rendered;
+  }
+  return { headers, queryParams };
+};
+var requiredPlacementVariables = (placements) => {
+  const names = /* @__PURE__ */ new Set();
+  for (const placement of placements) {
+    if (placement.literal !== void 0) continue;
+    names.add(placement.variable ?? TOKEN_VARIABLE);
+  }
+  return [...names];
+};
+var oauthBearerPlacement = (header, prefix) => ({
+  carrier: "header",
+  name: header ?? "Authorization",
+  prefix: prefix ?? "Bearer "
+});
+var normalizeAuthMethodSlugs = (methods, defaultSlugFor) => {
+  const taken = /* @__PURE__ */ new Set();
+  return methods.map((method) => {
+    const requested = method.slug?.trim() || defaultSlugFor(method);
+    let slug = requested;
+    for (let n = 2; taken.has(slug); n += 1) slug = `${requested}_${n}`;
+    taken.add(slug);
+    return { ...method, slug };
+  });
+};
+var apiKeyMethodLabel = (method) => {
+  if (method.label !== void 0 && method.label.trim().length > 0) return method.label;
+  const first = method.placements.find(
+    (placement) => placement.name.trim().length > 0
+  );
+  return first ? `API key (${first.name})` : `API key (${method.slug})`;
+};
+var describePlacement = (placement) => ({
+  carrier: placement.carrier,
+  name: placement.name,
+  prefix: placement.prefix ?? "",
+  ...placement.variable !== void 0 ? { variable: placement.variable } : {},
+  ...placement.literal !== void 0 ? { literal: placement.literal } : {}
+});
+var describeApiKeyAuthMethod = (method) => ({
+  id: method.slug,
+  label: apiKeyMethodLabel(method),
+  kind: "apikey",
+  template: method.slug,
+  placements: method.placements.map(describePlacement)
+});
+var describeNoneAuthMethod = (slug) => ({
+  id: slug,
+  label: "No authentication",
+  kind: "none",
+  template: slug
+});
+
+// src/http-auth/authoring.ts
+import { Schema as Schema2 } from "effect";
+var variable = (name) => ({ type: "variable", name });
+var VariablePart = Schema2.Struct({
+  type: Schema2.Literal("variable"),
+  name: Schema2.String
+});
+var isVariablePart = (part) => typeof part !== "string";
+var AuthTemplateValue = Schema2.Union([
+  Schema2.String,
+  Schema2.Array(Schema2.Union([Schema2.String, VariablePart])).check(
+    Schema2.makeFilter((parts) => {
+      const variableIndexes = parts.flatMap((part, index) => isVariablePart(part) ? [index] : []);
+      if (variableIndexes.length > 1 || variableIndexes.length === 1 && variableIndexes[0] !== parts.length - 1) {
+        return "a template value renders at most ONE variable, as the FINAL part \u2014 split extra variables/suffixes into separate header or query entries";
+      }
+      return void 0;
+    })
+  )
+]);
+var ApiKeyAuthTemplate = Schema2.Struct({
+  slug: Schema2.optional(Schema2.String),
+  type: Schema2.Literal("apiKey"),
+  label: Schema2.optional(Schema2.String),
+  headers: Schema2.optional(Schema2.Record(Schema2.String, AuthTemplateValue)),
+  queryParams: Schema2.optional(Schema2.Record(Schema2.String, AuthTemplateValue))
+});
+var placementFromValue = (carrier, name, value) => {
+  if (typeof value === "string") return { carrier, name, literal: value };
+  const variablePart = value.find(isVariablePart);
+  if (variablePart === void 0) {
+    return { carrier, name, literal: value.filter((p) => typeof p === "string").join("") };
+  }
+  const prefix = value.filter((part) => typeof part === "string").join("");
+  return {
+    carrier,
+    name,
+    ...prefix ? { prefix } : {},
+    ...variablePart.name !== TOKEN_VARIABLE ? { variable: variablePart.name } : {}
+  };
+};
+var apiKeyMethodFromAuthTemplate = (template) => {
+  const placements = [];
+  for (const [name, value] of Object.entries(template.headers ?? {})) {
+    placements.push(placementFromValue("header", name, value));
+  }
+  for (const [name, value] of Object.entries(template.queryParams ?? {})) {
+    placements.push(placementFromValue("query", name, value));
+  }
+  return {
+    ...template.slug !== void 0 ? { slug: template.slug } : {},
+    kind: "apikey",
+    ...template.label !== void 0 ? { label: template.label } : {},
+    placements
+  };
+};
+var apiKeyAuthTemplateFromMethod = (method) => {
+  const headers = {};
+  const queryParams = {};
+  for (const placement of method.placements) {
+    const target = placement.carrier === "header" ? headers : queryParams;
+    target[placement.name] = placement.literal !== void 0 ? placement.literal : placement.prefix ? [placement.prefix, variable(placement.variable ?? TOKEN_VARIABLE)] : [variable(placement.variable ?? TOKEN_VARIABLE)];
+  }
+  return {
+    ...method.slug !== void 0 ? { slug: method.slug } : {},
+    type: "apiKey",
+    ...method.label !== void 0 ? { label: method.label } : {},
+    ...Object.keys(headers).length > 0 ? { headers } : {},
+    ...Object.keys(queryParams).length > 0 ? { queryParams } : {}
+  };
+};
+var isApiKeyAuthTemplate = (input) => input.type === "apiKey";
+
+// src/http-auth/legacy.ts
+import { Schema as Schema3 } from "effect";
+var LegacyVariablePart = Schema3.Struct({
+  type: Schema3.Literal("variable"),
+  name: Schema3.String
+});
+var LegacyTemplateValue = Schema3.Union([
+  Schema3.String,
+  Schema3.Array(Schema3.Union([Schema3.String, LegacyVariablePart]))
+]);
+var LegacyApiKeyTemplate = Schema3.Struct({
+  slug: Schema3.String,
+  type: Schema3.Literal("apiKey"),
+  headers: Schema3.optional(Schema3.Record(Schema3.String, LegacyTemplateValue)),
+  queryParams: Schema3.optional(Schema3.Record(Schema3.String, LegacyTemplateValue))
+});
+var decodeLegacyApiKeyTemplate = Schema3.decodeUnknownOption(LegacyApiKeyTemplate);
+var placementFromTemplateValue = (carrier, name, value) => {
+  if (typeof value === "string") return { carrier, name, literal: value };
+  const literals = [];
+  for (const part of value) {
+    if (typeof part === "string") {
+      literals.push(part);
+      continue;
+    }
+    const prefix = literals.join("");
+    return {
+      carrier,
+      name,
+      ...prefix ? { prefix } : {},
+      ...part.name !== TOKEN_VARIABLE ? { variable: part.name } : {}
+    };
+  }
+  return { carrier, name, literal: literals.join("") };
+};
+var apiKeyMethodFromLegacyTemplate = (template) => {
+  const placements = [];
+  for (const [name, value] of Object.entries(template.headers ?? {})) {
+    placements.push(placementFromTemplateValue("header", name, value));
+  }
+  for (const [name, value] of Object.entries(template.queryParams ?? {})) {
+    placements.push(placementFromTemplateValue("query", name, value));
+  }
+  return { slug: template.slug, kind: "apikey", placements };
+};
+
+// src/http-auth/migrate.ts
+var planAuthConfigMigration = (rows, transforms) => {
+  const updates = [];
+  for (const row of rows) {
+    const transform = transforms[row.pluginId];
+    if (!transform) continue;
+    const migrated = transform(row.config);
+    if (migrated !== null) updates.push({ rowId: row.rowId, config: migrated });
+  }
+  return updates;
+};
+var runSqliteAuthConfigMigration = async (client, transforms) => {
+  const exists = await client.execute(
+    "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'integration'"
+  );
+  if (exists.rows.length === 0) return 0;
+  const result = await client.execute("SELECT row_id, plugin_id, config FROM integration");
+  const rows = [];
+  for (const row of result.rows) {
+    if (typeof row.row_id !== "string" || typeof row.plugin_id !== "string") continue;
+    if (typeof row.config !== "string") continue;
+    let config;
+    try {
+      config = JSON.parse(row.config);
+    } catch {
+      continue;
+    }
+    rows.push({ rowId: row.row_id, pluginId: row.plugin_id, config });
+  }
+  const updates = planAuthConfigMigration(rows, transforms);
+  if (updates.length === 0) return 0;
+  await client.execute("BEGIN");
+  try {
+    for (const update of updates) {
+      await client.execute({
+        sql: "UPDATE integration SET config = ? WHERE row_id = ?",
+        args: [JSON.stringify(update.config), update.rowId]
+      });
+    }
+    await client.execute("COMMIT");
+  } catch (cause) {
+    await client.execute("ROLLBACK");
+    throw cause;
+  }
+  return updates.length;
+};
+export {
+  ApiKeyAuthMethod,
+  ApiKeyAuthTemplate,
+  AuthCarrier,
+  AuthPlacement,
+  AuthTemplateValue,
+  LegacyApiKeyTemplate,
+  LegacyTemplateValue,
+  NoneAuthMethod,
+  TOKEN_VARIABLE,
+  apiKeyAuthTemplateFromMethod,
+  apiKeyMethodFromAuthTemplate,
+  apiKeyMethodFromLegacyTemplate,
+  apiKeyMethodLabel,
+  decodeLegacyApiKeyTemplate,
+  describeApiKeyAuthMethod,
+  describeNoneAuthMethod,
+  isApiKeyAuthTemplate,
+  normalizeAuthMethodSlugs,
+  oauthBearerPlacement,
+  planAuthConfigMigration,
+  renderAuthPlacements,
+  requiredPlacementVariables,
+  runSqliteAuthConfigMigration,
+  variable
+};
+//# sourceMappingURL=http-auth.js.map

package/dist/http-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/http-auth/auth-method.ts","../src/http-auth/authoring.ts","../src/http-auth/legacy.ts","../src/http-auth/migrate.ts"],"sourcesContent":["import { Schema } from \"effect\";\nimport type { AuthMethodDescriptor, AuthPlacementDescriptor } from \"../integration\";\n\n// ---------------------------------------------------------------------------\n// The shared HTTP auth-method vocabulary for protocol plugins (openapi,\n// graphql, mcp). An integration declares a LIST of auth methods; a connection\n// binds one by its `slug` (`connection.template`) and supplies one credential\n// value per `variable` the method's placements reference (D11: core resolves\n// `values: Record<variable, string|null>`, the plugin renders them onto the\n// request).\n//\n// Core itself never imports this module — core stays carrier-agnostic (a\n// connection could be a CLI login or a DB URL). It ships as the\n// `@executor-js/sdk/http-auth` subpath purely as a home: composition, not\n// location, is what keeps headers/query params an HTTP-plugin concern.\n//\n// OAuth methods are NOT modeled here — their config genuinely differs per\n// plugin (openapi stores endpoints+scopes, graphql an optional header\n// override, mcp discovers everything at connect time). Each plugin's method\n// union is `NoneAuthMethod | ApiKeyAuthMethod | <its own oauth variant>`.\n// OAuth-refreshed connections resolve only the `token` input, so oauth\n// values must never be mixed into a placements method.\n// ---------------------------------------------------------------------------\n\n/** The canonical input variable of single-credential methods. A placement\n *  with no `variable` renders from it, and core resolves a connection created\n *  with a bare `{ value }` into `{ token: value }`. */\nexport const TOKEN_VARIABLE = \"token\";\n\nexport const AuthCarrier = Schema.Literals([\"header\", \"query\"]);\nexport type AuthCarrier = typeof AuthCarrier.Type;\n\n/** One spot on the outbound request a method writes to.\n *\n *  Credential placement: renders `prefix + values[variable ?? \"token\"]`.\n *  Two placements naming the same variable share one credential input; a\n *  placement naming its own variable gets its own input (e.g. Datadog's two\n *  keys).\n *\n *  Literal placement (`literal` set): renders the literal verbatim and\n *  references no credential — static values a method carries alongside its\n *  credential (e.g. a fixed version header). */\nexport const AuthPlacement = Schema.Struct({\n  carrier: AuthCarrier,\n  /** Header name (e.g. `Authorization`) or query-param name (e.g. `token`). */\n  name: Schema.String,\n  /** Literal prepended to the credential value, e.g. `Bearer `. */\n  prefix: Schema.optional(Schema.String),\n  /** The credential input this placement renders from. Absent ⇒ `token`. */\n  variable: Schema.optional(Schema.String),\n  /** Render this exact value instead of a credential. */\n  literal: Schema.optional(Schema.String),\n});\nexport type AuthPlacement = typeof AuthPlacement.Type;\n\nexport const ApiKeyAuthMethod = Schema.Struct({\n  slug: Schema.String,\n  kind: Schema.Literal(\"apikey\"),\n  /** Display label; derived from the first placement when absent. */\n  label: Schema.optional(Schema.String),\n  placements: Schema.Array(AuthPlacement),\n});\nexport type ApiKeyAuthMethod = typeof ApiKeyAuthMethod.Type;\n\n/** An open integration — connections carry no credential. */\nexport const NoneAuthMethod = Schema.Struct({\n  slug: Schema.String,\n  kind: Schema.Literal(\"none\"),\n});\nexport type NoneAuthMethod = typeof NoneAuthMethod.Type;\n\n// ---------------------------------------------------------------------------\n// Rendering\n// ---------------------------------------------------------------------------\n\nexport interface RenderedAuthPlacements {\n  readonly headers: Record<string, string>;\n  readonly queryParams: Record<string, string>;\n}\n\nconst renderPlacementValue = (\n  placement: AuthPlacement,\n  values: Record<string, string | null>,\n): string | null => {\n  if (placement.literal !== undefined) return placement.literal;\n  const value = values[placement.variable ?? TOKEN_VARIABLE];\n  if (value == null) return null;\n  return placement.prefix ? `${placement.prefix}${value}` : value;\n};\n\n/** Render a method's placements with a connection's resolved values. Total:\n *  a credential placement whose variable resolved to nothing is skipped —\n *  callers own their missing-value policy (fail the invocation, dial\n *  unauthenticated, …) and should gate on `requiredPlacementVariables`. */\nexport const renderAuthPlacements = (\n  placements: readonly AuthPlacement[],\n  values: Record<string, string | null>,\n): RenderedAuthPlacements => {\n  const headers: Record<string, string> = {};\n  const queryParams: Record<string, string> = {};\n  for (const placement of placements) {\n    const rendered = renderPlacementValue(placement, values);\n    if (rendered === null) continue;\n    if (placement.carrier === \"header\") headers[placement.name] = rendered;\n    else queryParams[placement.name] = rendered;\n  }\n  return { headers, queryParams };\n};\n\n/** The distinct credential inputs a method's placements reference — what a\n *  connection must supply. Literal placements reference none. */\nexport const requiredPlacementVariables = (\n  placements: readonly AuthPlacement[],\n): readonly string[] => {\n  const names = new Set<string>();\n  for (const placement of placements) {\n    if (placement.literal !== undefined) continue;\n    names.add(placement.variable ?? TOKEN_VARIABLE);\n  }\n  return [...names];\n};\n\n/** The conventional rendering of an OAuth access token, as a placement — for\n *  plugins whose oauth method applies the token as a plain (possibly\n *  customized) header. The token is always the `token` input. */\nexport const oauthBearerPlacement = (header?: string, prefix?: string): AuthPlacement => ({\n  carrier: \"header\",\n  name: header ?? \"Authorization\",\n  prefix: prefix ?? \"Bearer \",\n});\n\n// ---------------------------------------------------------------------------\n// Slug normalization — methods are input without slugs from UIs/agents; every\n// stored method needs a stable one (`connection.template` binds by it).\n// ---------------------------------------------------------------------------\n\n/** Assign each method a stable slug: a caller-provided one wins, otherwise\n *  `defaultSlugFor(method)`, suffixed `_2`, `_3`, … on collision. */\nexport const normalizeAuthMethodSlugs = <T extends { readonly slug?: string | undefined }>(\n  methods: readonly T[],\n  defaultSlugFor: (method: T) => string,\n): readonly (T & { readonly slug: string })[] => {\n  const taken = new Set<string>();\n  return methods.map((method: T): T & { readonly slug: string } => {\n    const requested = method.slug?.trim() || defaultSlugFor(method);\n    let slug = requested;\n    for (let n = 2; taken.has(slug); n += 1) slug = `${requested}_${n}`;\n    taken.add(slug);\n    return { ...method, slug };\n  });\n};\n\n// ---------------------------------------------------------------------------\n// Catalog projection — the plugin-agnostic `AuthMethodDescriptor` every\n// plugin's `describeAuthMethods` emits (the descriptor TYPE stays in\n// @executor-js/sdk: core carries it as opaque catalog metadata).\n// ---------------------------------------------------------------------------\n\nexport const apiKeyMethodLabel = (method: ApiKeyAuthMethod): string => {\n  if (method.label !== undefined && method.label.trim().length > 0) return method.label;\n  const first = method.placements.find(\n    (placement: AuthPlacement) => placement.name.trim().length > 0,\n  );\n  return first ? `API key (${first.name})` : `API key (${method.slug})`;\n};\n\nconst describePlacement = (placement: AuthPlacement): AuthPlacementDescriptor => ({\n  carrier: placement.carrier,\n  name: placement.name,\n  prefix: placement.prefix ?? \"\",\n  ...(placement.variable !== undefined ? { variable: placement.variable } : {}),\n  ...(placement.literal !== undefined ? { literal: placement.literal } : {}),\n});\n\nexport const describeApiKeyAuthMethod = (method: ApiKeyAuthMethod): AuthMethodDescriptor => ({\n  id: method.slug,\n  label: apiKeyMethodLabel(method),\n  kind: \"apikey\",\n  template: method.slug,\n  placements: method.placements.map(describePlacement),\n});\n\nexport const describeNoneAuthMethod = (slug: string): AuthMethodDescriptor => ({\n  id: slug,\n  label: \"No authentication\",\n  kind: \"none\",\n  template: slug,\n});\n","// ---------------------------------------------------------------------------\n// Request-shaped authoring — the second accepted INPUT dialect for apikey\n// methods, alongside canonical placements. It reads like the HTTP request it\n// produces:\n//\n//   {\n//     slug: \"bearer\",\n//     type: \"apiKey\",\n//     headers: { Authorization: [\"Bearer \", variable(\"token\")] },\n//     queryParams: { team_id: [variable(\"team_id\")] },\n//   }\n//\n// A record value is either a parts-array (`prefix literals… + one variable,\n// last`) rendering a credential input, or a plain string rendering a static\n// literal. Normalized to canonical placements at the boundary — STORED\n// configs carry only the canonical shape.\n//\n// Authoring is strict where the migration is tolerant: a parts-array with a\n// variable anywhere but last, or with more than one variable, is rejected at\n// decode time with a pointed message (the renderer and UI honor exactly\n// prefix+variable, so accepting more would silently lose information —\n// `migrate-config` only flattens that way for pre-existing stored data).\n// ---------------------------------------------------------------------------\n\nimport { Schema } from \"effect\";\n\nimport { TOKEN_VARIABLE, type ApiKeyAuthMethod, type AuthPlacement } from \"./auth-method\";\n\nexport interface AuthTemplateVariable {\n  readonly type: \"variable\";\n  readonly name: string;\n}\n\n/** Mark where a credential input renders inside a template value:\n *  `[\"Bearer \", variable(\"token\")]`. */\nexport const variable = (name: string): AuthTemplateVariable => ({ type: \"variable\", name });\n\nconst VariablePart = Schema.Struct({\n  type: Schema.Literal(\"variable\"),\n  name: Schema.String,\n});\n\nconst isVariablePart = (part: string | AuthTemplateVariable): part is AuthTemplateVariable =>\n  typeof part !== \"string\";\n\n/** `string` (a static literal) or `prefix literals… + one variable, last`. */\nexport const AuthTemplateValue = Schema.Union([\n  Schema.String,\n  Schema.Array(Schema.Union([Schema.String, VariablePart])).check(\n    Schema.makeFilter((parts) => {\n      const variableIndexes = parts.flatMap((part, index) => (isVariablePart(part) ? [index] : []));\n      if (\n        variableIndexes.length > 1 ||\n        (variableIndexes.length === 1 && variableIndexes[0] !== parts.length - 1)\n      ) {\n        return \"a template value renders at most ONE variable, as the FINAL part — split extra variables/suffixes into separate header or query entries\";\n      }\n      return undefined;\n    }),\n  ),\n]);\nexport type AuthTemplateValue = typeof AuthTemplateValue.Type;\n\n/** The request-shaped apikey authoring dialect. `slug` optional (backfilled\n *  like every other input); `label` optional. */\nexport const ApiKeyAuthTemplate = Schema.Struct({\n  slug: Schema.optional(Schema.String),\n  type: Schema.Literal(\"apiKey\"),\n  label: Schema.optional(Schema.String),\n  headers: Schema.optional(Schema.Record(Schema.String, AuthTemplateValue)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, AuthTemplateValue)),\n});\nexport type ApiKeyAuthTemplate = typeof ApiKeyAuthTemplate.Type;\n\nconst placementFromValue = (\n  carrier: \"header\" | \"query\",\n  name: string,\n  value: AuthTemplateValue,\n): AuthPlacement => {\n  if (typeof value === \"string\") return { carrier, name, literal: value };\n  const variablePart = value.find(isVariablePart);\n  if (variablePart === undefined) {\n    return { carrier, name, literal: value.filter((p) => typeof p === \"string\").join(\"\") };\n  }\n  const prefix = value.filter((part): part is string => typeof part === \"string\").join(\"\");\n  return {\n    carrier,\n    name,\n    ...(prefix ? { prefix } : {}),\n    ...(variablePart.name !== TOKEN_VARIABLE ? { variable: variablePart.name } : {}),\n  };\n};\n\n/** Normalize the request-shaped dialect into the canonical apikey method\n *  (sans slug backfill — the caller's normalize pass owns slugs). */\nexport const apiKeyMethodFromAuthTemplate = (\n  template: ApiKeyAuthTemplate,\n): Omit<ApiKeyAuthMethod, \"slug\"> & { readonly slug?: string } => {\n  const placements: AuthPlacement[] = [];\n  for (const [name, value] of Object.entries(template.headers ?? {})) {\n    placements.push(placementFromValue(\"header\", name, value));\n  }\n  for (const [name, value] of Object.entries(template.queryParams ?? {})) {\n    placements.push(placementFromValue(\"query\", name, value));\n  }\n  return {\n    ...(template.slug !== undefined ? { slug: template.slug } : {}),\n    kind: \"apikey\",\n    ...(template.label !== undefined ? { label: template.label } : {}),\n    placements,\n  };\n};\n\n/** Serialize a canonical method back into the request-shaped dialect — the\n *  write side of read-modify-write flows (stored configs and the catalog\n *  read as placements; auth INPUTS accept only this dialect). Same-named\n *  same-carrier placements collapse, exactly as the renderer's header/query\n *  records do. */\nexport const apiKeyAuthTemplateFromMethod = (method: {\n  readonly slug?: string;\n  readonly label?: string;\n  readonly placements: readonly AuthPlacement[];\n}): ApiKeyAuthTemplate => {\n  const headers: Record<string, AuthTemplateValue> = {};\n  const queryParams: Record<string, AuthTemplateValue> = {};\n  for (const placement of method.placements) {\n    const target = placement.carrier === \"header\" ? headers : queryParams;\n    target[placement.name] =\n      placement.literal !== undefined\n        ? placement.literal\n        : placement.prefix\n          ? [placement.prefix, variable(placement.variable ?? TOKEN_VARIABLE)]\n          : [variable(placement.variable ?? TOKEN_VARIABLE)];\n  }\n  return {\n    ...(method.slug !== undefined ? { slug: method.slug } : {}),\n    type: \"apiKey\",\n    ...(method.label !== undefined ? { label: method.label } : {}),\n    ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    ...(Object.keys(queryParams).length > 0 ? { queryParams } : {}),\n  };\n};\n\n/** Whether an input union member is the request-shaped dialect. */\nexport const isApiKeyAuthTemplate = (input: {\n  readonly kind?: string;\n  readonly type?: string;\n}): input is ApiKeyAuthTemplate => input.type === \"apiKey\";\n","// ---------------------------------------------------------------------------\n// FROZEN legacy shapes — input vocabulary for the one-off config migrations.\n//\n// Before the canonical placements model, the OpenAPI plugin (and the v1→v2\n// migration, which wrote this shape into MCP and GraphQL configs too) stored\n// apiKey methods as header/query records of TEMPLATE VALUES: a string literal\n// or a part-array interleaving literals with `{ type: \"variable\", name }`\n// references.\n//\n// Runtime code must not import this module — it exists so every plugin's\n// `migrate-config` rewrites stored blobs the same way, and the rules below are\n// the contract: variable names are preserved VERBATIM (they key the\n// connections' stored `item_ids`), the placement prefix is the literal run\n// before the first variable, a literal-only value becomes a `literal`\n// placement, and anything after the first variable is dropped (matching what\n// the descriptor projection has always shown).\n// ---------------------------------------------------------------------------\n\nimport { Schema } from \"effect\";\n\nimport { TOKEN_VARIABLE, type ApiKeyAuthMethod, type AuthPlacement } from \"./auth-method\";\n\nconst LegacyVariablePart = Schema.Struct({\n  type: Schema.Literal(\"variable\"),\n  name: Schema.String,\n});\n\nexport const LegacyTemplateValue = Schema.Union([\n  Schema.String,\n  Schema.Array(Schema.Union([Schema.String, LegacyVariablePart])),\n]);\nexport type LegacyTemplateValue = typeof LegacyTemplateValue.Type;\n\n/** The pre-canonical apiKey template shape (OpenAPI native + what the v1→v2\n *  migration wrote into MCP/GraphQL configs). */\nexport const LegacyApiKeyTemplate = Schema.Struct({\n  slug: Schema.String,\n  type: Schema.Literal(\"apiKey\"),\n  headers: Schema.optional(Schema.Record(Schema.String, LegacyTemplateValue)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, LegacyTemplateValue)),\n});\nexport type LegacyApiKeyTemplate = typeof LegacyApiKeyTemplate.Type;\n\nexport const decodeLegacyApiKeyTemplate = Schema.decodeUnknownOption(LegacyApiKeyTemplate);\n\nconst placementFromTemplateValue = (\n  carrier: \"header\" | \"query\",\n  name: string,\n  value: LegacyTemplateValue,\n): AuthPlacement => {\n  if (typeof value === \"string\") return { carrier, name, literal: value };\n  const literals: string[] = [];\n  for (const part of value) {\n    if (typeof part === \"string\") {\n      literals.push(part);\n      continue;\n    }\n    const prefix = literals.join(\"\");\n    return {\n      carrier,\n      name,\n      ...(prefix ? { prefix } : {}),\n      ...(part.name !== TOKEN_VARIABLE ? { variable: part.name } : {}),\n    };\n  }\n  return { carrier, name, literal: literals.join(\"\") };\n};\n\n/** Rewrite a legacy apiKey template into the canonical placements method.\n *  Slug and variable names are preserved verbatim. */\nexport const apiKeyMethodFromLegacyTemplate = (\n  template: LegacyApiKeyTemplate,\n): ApiKeyAuthMethod => {\n  const placements: AuthPlacement[] = [];\n  for (const [name, value] of Object.entries(template.headers ?? {})) {\n    placements.push(placementFromTemplateValue(\"header\", name, value));\n  }\n  for (const [name, value] of Object.entries(template.queryParams ?? {})) {\n    placements.push(placementFromTemplateValue(\"query\", name, value));\n  }\n  return { slug: template.slug, kind: \"apikey\", placements };\n};\n","/* oxlint-disable executor/no-try-catch-or-throw, executor/no-json-parse -- boundary: one-shot config migration drives a raw SQL client (JSON text columns, transaction + rollback) */\n// ---------------------------------------------------------------------------\n// One-off auth-config migration planner — the driver-agnostic core every app\n// wires its own SQL around. Each protocol plugin exports a pure\n// `migrate<Plugin>AuthConfig(config) → config | null` (null = leave the row\n// untouched); this plans which integration rows to rewrite. Idempotent by\n// construction: re-running over migrated rows plans zero updates.\n// ---------------------------------------------------------------------------\n\nexport type AuthConfigTransform = (config: unknown) => unknown | null;\n\nexport interface AuthConfigMigrationRow {\n  /** The integration row's primary key (`row_id`). */\n  readonly rowId: string;\n  readonly pluginId: string;\n  readonly config: unknown;\n}\n\nexport interface AuthConfigMigrationUpdate {\n  readonly rowId: string;\n  readonly config: unknown;\n}\n\n/** Plan the config rewrites for a set of integration rows. `transforms` maps\n *  plugin ids (`mcp` / `graphql` / `openapi`) to their migration functions;\n *  rows of other plugins, and rows whose transform returns null, are left\n *  untouched. */\nexport const planAuthConfigMigration = (\n  rows: readonly AuthConfigMigrationRow[],\n  transforms: Record<string, AuthConfigTransform>,\n): readonly AuthConfigMigrationUpdate[] => {\n  const updates: AuthConfigMigrationUpdate[] = [];\n  for (const row of rows) {\n    const transform = transforms[row.pluginId];\n    if (!transform) continue;\n    const migrated = transform(row.config);\n    if (migrated !== null) updates.push({ rowId: row.rowId, config: migrated });\n  }\n  return updates;\n};\n\n// ---------------------------------------------------------------------------\n// SQLite runner — shared by the libSQL-backed apps (local boot, selfhost\n// boot). Structural client interface so this package stays dependency-free;\n// `@libsql/client` satisfies it. Postgres apps (cloud) wire their own SQL\n// around `planAuthConfigMigration`.\n// ---------------------------------------------------------------------------\n\nexport interface SqliteAuthConfigClient {\n  execute(\n    stmt: string | { readonly sql: string; readonly args: readonly unknown[] },\n  ): Promise<{ readonly rows: readonly Record<string, unknown>[] }>;\n}\n\n/** Rewrite pre-canonical integration `config` blobs in a SQLite database.\n *  Idempotent (canonical rows plan no updates); returns the number of rows\n *  rewritten. The `integration` table may not exist yet on a fresh database —\n *  that counts as nothing to migrate. */\nexport const runSqliteAuthConfigMigration = async (\n  client: SqliteAuthConfigClient,\n  transforms: Record<string, AuthConfigTransform>,\n): Promise<number> => {\n  const exists = await client.execute(\n    \"SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'integration'\",\n  );\n  if (exists.rows.length === 0) return 0;\n\n  const result = await client.execute(\"SELECT row_id, plugin_id, config FROM integration\");\n  const rows: AuthConfigMigrationRow[] = [];\n  for (const row of result.rows) {\n    if (typeof row.row_id !== \"string\" || typeof row.plugin_id !== \"string\") continue;\n    if (typeof row.config !== \"string\") continue;\n    let config: unknown;\n    try {\n      config = JSON.parse(row.config);\n    } catch {\n      continue;\n    }\n    rows.push({ rowId: row.row_id, pluginId: row.plugin_id, config });\n  }\n\n  const updates = planAuthConfigMigration(rows, transforms);\n  if (updates.length === 0) return 0;\n\n  await client.execute(\"BEGIN\");\n  try {\n    for (const update of updates) {\n      await client.execute({\n        sql: \"UPDATE integration SET config = ? WHERE row_id = ?\",\n        args: [JSON.stringify(update.config), update.rowId],\n      });\n    }\n    await client.execute(\"COMMIT\");\n  } catch (cause) {\n    await client.execute(\"ROLLBACK\");\n    throw cause;\n  }\n  return updates.length;\n};\n"],"mappings":";;;AAAA,SAAS,cAAc;AA2BhB,IAAM,iBAAiB;AAEvB,IAAM,cAAc,OAAO,SAAS,CAAC,UAAU,OAAO,CAAC;AAavD,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACzC,SAAS;AAAA;AAAA,EAET,MAAM,OAAO;AAAA;AAAA,EAEb,QAAQ,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAErC,UAAU,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAEvC,SAAS,OAAO,SAAS,OAAO,MAAM;AACxC,CAAC;AAGM,IAAM,mBAAmB,OAAO,OAAO;AAAA,EAC5C,MAAM,OAAO;AAAA,EACb,MAAM,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAE7B,OAAO,OAAO,SAAS,OAAO,MAAM;AAAA,EACpC,YAAY,OAAO,MAAM,aAAa;AACxC,CAAC;AAIM,IAAM,iBAAiB,OAAO,OAAO;AAAA,EAC1C,MAAM,OAAO;AAAA,EACb,MAAM,OAAO,QAAQ,MAAM;AAC7B,CAAC;AAYD,IAAM,uBAAuB,CAC3B,WACA,WACkB;AAClB,MAAI,UAAU,YAAY,OAAW,QAAO,UAAU;AACtD,QAAM,QAAQ,OAAO,UAAU,YAAY,cAAc;AACzD,MAAI,SAAS,KAAM,QAAO;AAC1B,SAAO,UAAU,SAAS,GAAG,UAAU,MAAM,GAAG,KAAK,KAAK;AAC5D;AAMO,IAAM,uBAAuB,CAClC,YACA,WAC2B;AAC3B,QAAM,UAAkC,CAAC;AACzC,QAAM,cAAsC,CAAC;AAC7C,aAAW,aAAa,YAAY;AAClC,UAAM,WAAW,qBAAqB,WAAW,MAAM;AACvD,QAAI,aAAa,KAAM;AACvB,QAAI,UAAU,YAAY,SAAU,SAAQ,UAAU,IAAI,IAAI;AAAA,QACzD,aAAY,UAAU,IAAI,IAAI;AAAA,EACrC;AACA,SAAO,EAAE,SAAS,YAAY;AAChC;AAIO,IAAM,6BAA6B,CACxC,eACsB;AACtB,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,aAAa,YAAY;AAClC,QAAI,UAAU,YAAY,OAAW;AACrC,UAAM,IAAI,UAAU,YAAY,cAAc;AAAA,EAChD;AACA,SAAO,CAAC,GAAG,KAAK;AAClB;AAKO,IAAM,uBAAuB,CAAC,QAAiB,YAAoC;AAAA,EACxF,SAAS;AAAA,EACT,MAAM,UAAU;AAAA,EAChB,QAAQ,UAAU;AACpB;AASO,IAAM,2BAA2B,CACtC,SACA,mBAC+C;AAC/C,QAAM,QAAQ,oBAAI,IAAY;AAC9B,SAAO,QAAQ,IAAI,CAAC,WAA6C;AAC/D,UAAM,YAAY,OAAO,MAAM,KAAK,KAAK,eAAe,MAAM;AAC9D,QAAI,OAAO;AACX,aAAS,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,KAAK,EAAG,QAAO,GAAG,SAAS,IAAI,CAAC;AACjE,UAAM,IAAI,IAAI;AACd,WAAO,EAAE,GAAG,QAAQ,KAAK;AAAA,EAC3B,CAAC;AACH;AAQO,IAAM,oBAAoB,CAAC,WAAqC;AACrE,MAAI,OAAO,UAAU,UAAa,OAAO,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,OAAO;AAChF,QAAM,QAAQ,OAAO,WAAW;AAAA,IAC9B,CAAC,cAA6B,UAAU,KAAK,KAAK,EAAE,SAAS;AAAA,EAC/D;AACA,SAAO,QAAQ,YAAY,MAAM,IAAI,MAAM,YAAY,OAAO,IAAI;AACpE;AAEA,IAAM,oBAAoB,CAAC,eAAuD;AAAA,EAChF,SAAS,UAAU;AAAA,EACnB,MAAM,UAAU;AAAA,EAChB,QAAQ,UAAU,UAAU;AAAA,EAC5B,GAAI,UAAU,aAAa,SAAY,EAAE,UAAU,UAAU,SAAS,IAAI,CAAC;AAAA,EAC3E,GAAI,UAAU,YAAY,SAAY,EAAE,SAAS,UAAU,QAAQ,IAAI,CAAC;AAC1E;AAEO,IAAM,2BAA2B,CAAC,YAAoD;AAAA,EAC3F,IAAI,OAAO;AAAA,EACX,OAAO,kBAAkB,MAAM;AAAA,EAC/B,MAAM;AAAA,EACN,UAAU,OAAO;AAAA,EACjB,YAAY,OAAO,WAAW,IAAI,iBAAiB;AACrD;AAEO,IAAM,yBAAyB,CAAC,UAAwC;AAAA,EAC7E,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU;AACZ;;;ACnKA,SAAS,UAAAA,eAAc;AAWhB,IAAM,WAAW,CAAC,UAAwC,EAAE,MAAM,YAAY,KAAK;AAE1F,IAAM,eAAeC,QAAO,OAAO;AAAA,EACjC,MAAMA,QAAO,QAAQ,UAAU;AAAA,EAC/B,MAAMA,QAAO;AACf,CAAC;AAED,IAAM,iBAAiB,CAAC,SACtB,OAAO,SAAS;AAGX,IAAM,oBAAoBA,QAAO,MAAM;AAAA,EAC5CA,QAAO;AAAA,EACPA,QAAO,MAAMA,QAAO,MAAM,CAACA,QAAO,QAAQ,YAAY,CAAC,CAAC,EAAE;AAAA,IACxDA,QAAO,WAAW,CAAC,UAAU;AAC3B,YAAM,kBAAkB,MAAM,QAAQ,CAAC,MAAM,UAAW,eAAe,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAE;AAC5F,UACE,gBAAgB,SAAS,KACxB,gBAAgB,WAAW,KAAK,gBAAgB,CAAC,MAAM,MAAM,SAAS,GACvE;AACA,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF,CAAC;AAKM,IAAM,qBAAqBA,QAAO,OAAO;AAAA,EAC9C,MAAMA,QAAO,SAASA,QAAO,MAAM;AAAA,EACnC,MAAMA,QAAO,QAAQ,QAAQ;AAAA,EAC7B,OAAOA,QAAO,SAASA,QAAO,MAAM;AAAA,EACpC,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQ,iBAAiB,CAAC;AAAA,EACxE,aAAaA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQ,iBAAiB,CAAC;AAC9E,CAAC;AAGD,IAAM,qBAAqB,CACzB,SACA,MACA,UACkB;AAClB,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,SAAS,MAAM,SAAS,MAAM;AACtE,QAAM,eAAe,MAAM,KAAK,cAAc;AAC9C,MAAI,iBAAiB,QAAW;AAC9B,WAAO,EAAE,SAAS,MAAM,SAAS,MAAM,OAAO,CAAC,MAAM,OAAO,MAAM,QAAQ,EAAE,KAAK,EAAE,EAAE;AAAA,EACvF;AACA,QAAM,SAAS,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ,EAAE,KAAK,EAAE;AACvF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IAC3B,GAAI,aAAa,SAAS,iBAAiB,EAAE,UAAU,aAAa,KAAK,IAAI,CAAC;AAAA,EAChF;AACF;AAIO,IAAM,+BAA+B,CAC1C,aACgE;AAChE,QAAM,aAA8B,CAAC;AACrC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,GAAG;AAClE,eAAW,KAAK,mBAAmB,UAAU,MAAM,KAAK,CAAC;AAAA,EAC3D;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,eAAe,CAAC,CAAC,GAAG;AACtE,eAAW,KAAK,mBAAmB,SAAS,MAAM,KAAK,CAAC;AAAA,EAC1D;AACA,SAAO;AAAA,IACL,GAAI,SAAS,SAAS,SAAY,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,IAC7D,MAAM;AAAA,IACN,GAAI,SAAS,UAAU,SAAY,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;AAAA,IAChE;AAAA,EACF;AACF;AAOO,IAAM,+BAA+B,CAAC,WAInB;AACxB,QAAM,UAA6C,CAAC;AACpD,QAAM,cAAiD,CAAC;AACxD,aAAW,aAAa,OAAO,YAAY;AACzC,UAAM,SAAS,UAAU,YAAY,WAAW,UAAU;AAC1D,WAAO,UAAU,IAAI,IACnB,UAAU,YAAY,SAClB,UAAU,UACV,UAAU,SACR,CAAC,UAAU,QAAQ,SAAS,UAAU,YAAY,cAAc,CAAC,IACjE,CAAC,SAAS,UAAU,YAAY,cAAc,CAAC;AAAA,EACzD;AACA,SAAO;AAAA,IACL,GAAI,OAAO,SAAS,SAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,IACzD,MAAM;AAAA,IACN,GAAI,OAAO,UAAU,SAAY,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IAC5D,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD,GAAI,OAAO,KAAK,WAAW,EAAE,SAAS,IAAI,EAAE,YAAY,IAAI,CAAC;AAAA,EAC/D;AACF;AAGO,IAAM,uBAAuB,CAAC,UAGF,MAAM,SAAS;;;ACjIlD,SAAS,UAAAC,eAAc;AAIvB,IAAM,qBAAqBC,QAAO,OAAO;AAAA,EACvC,MAAMA,QAAO,QAAQ,UAAU;AAAA,EAC/B,MAAMA,QAAO;AACf,CAAC;AAEM,IAAM,sBAAsBA,QAAO,MAAM;AAAA,EAC9CA,QAAO;AAAA,EACPA,QAAO,MAAMA,QAAO,MAAM,CAACA,QAAO,QAAQ,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAKM,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EAChD,MAAMA,QAAO;AAAA,EACb,MAAMA,QAAO,QAAQ,QAAQ;AAAA,EAC7B,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQ,mBAAmB,CAAC;AAAA,EAC1E,aAAaA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQ,mBAAmB,CAAC;AAChF,CAAC;AAGM,IAAM,6BAA6BA,QAAO,oBAAoB,oBAAoB;AAEzF,IAAM,6BAA6B,CACjC,SACA,MACA,UACkB;AAClB,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,SAAS,MAAM,SAAS,MAAM;AACtE,QAAM,WAAqB,CAAC;AAC5B,aAAW,QAAQ,OAAO;AACxB,QAAI,OAAO,SAAS,UAAU;AAC5B,eAAS,KAAK,IAAI;AAClB;AAAA,IACF;AACA,UAAM,SAAS,SAAS,KAAK,EAAE;AAC/B,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,GAAI,KAAK,SAAS,iBAAiB,EAAE,UAAU,KAAK,KAAK,IAAI,CAAC;AAAA,IAChE;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,SAAS,SAAS,KAAK,EAAE,EAAE;AACrD;AAIO,IAAM,iCAAiC,CAC5C,aACqB;AACrB,QAAM,aAA8B,CAAC;AACrC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,GAAG;AAClE,eAAW,KAAK,2BAA2B,UAAU,MAAM,KAAK,CAAC;AAAA,EACnE;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,eAAe,CAAC,CAAC,GAAG;AACtE,eAAW,KAAK,2BAA2B,SAAS,MAAM,KAAK,CAAC;AAAA,EAClE;AACA,SAAO,EAAE,MAAM,SAAS,MAAM,MAAM,UAAU,WAAW;AAC3D;;;ACtDO,IAAM,0BAA0B,CACrC,MACA,eACyC;AACzC,QAAM,UAAuC,CAAC;AAC9C,aAAW,OAAO,MAAM;AACtB,UAAM,YAAY,WAAW,IAAI,QAAQ;AACzC,QAAI,CAAC,UAAW;AAChB,UAAM,WAAW,UAAU,IAAI,MAAM;AACrC,QAAI,aAAa,KAAM,SAAQ,KAAK,EAAE,OAAO,IAAI,OAAO,QAAQ,SAAS,CAAC;AAAA,EAC5E;AACA,SAAO;AACT;AAmBO,IAAM,+BAA+B,OAC1C,QACA,eACoB;AACpB,QAAM,SAAS,MAAM,OAAO;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,QAAM,SAAS,MAAM,OAAO,QAAQ,mDAAmD;AACvF,QAAM,OAAiC,CAAC;AACxC,aAAW,OAAO,OAAO,MAAM;AAC7B,QAAI,OAAO,IAAI,WAAW,YAAY,OAAO,IAAI,cAAc,SAAU;AACzE,QAAI,OAAO,IAAI,WAAW,SAAU;AACpC,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,IAAI,MAAM;AAAA,IAChC,QAAQ;AACN;AAAA,IACF;AACA,SAAK,KAAK,EAAE,OAAO,IAAI,QAAQ,UAAU,IAAI,WAAW,OAAO,CAAC;AAAA,EAClE;AAEA,QAAM,UAAU,wBAAwB,MAAM,UAAU;AACxD,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,QAAM,OAAO,QAAQ,OAAO;AAC5B,MAAI;AACF,eAAW,UAAU,SAAS;AAC5B,YAAM,OAAO,QAAQ;AAAA,QACnB,KAAK;AAAA,QACL,MAAM,CAAC,KAAK,UAAU,OAAO,MAAM,GAAG,OAAO,KAAK;AAAA,MACpD,CAAC;AAAA,IACH;AACA,UAAM,OAAO,QAAQ,QAAQ;AAAA,EAC/B,SAAS,OAAO;AACd,UAAM,OAAO,QAAQ,UAAU;AAC/B,UAAM;AAAA,EACR;AACA,SAAO,QAAQ;AACjB;","names":["Schema","Schema","Schema","Schema"]}

package/dist/index.d.ts

@@ -4,22 +4,23 @@ export { fumadb } from "@executor-js/fumadb";
 export type { FumaDB } from "@executor-js/fumadb";
 export type { AbstractQuery, Condition, ConditionBuilder } from "@executor-js/fumadb/query";
 export { column, idColumn, schema as fumaSchema, table } from "@executor-js/fumadb/schema";
-export type { AnyColumn, AnySchema, AnyTable, Column, Schema as FumaSchema } from "@executor-js/fumadb/schema";
+export type { AnyColumn, AnySchema, AnyTable, Column, Schema as FumaSchema, } from "@executor-js/fumadb/schema";
 export type { FumaDb, FumaQuery, FumaRow, FumaTables, IFumaClient, StorageFailure, } from "./fuma-runtime";
 export { StorageError, UniqueViolationError, isStorageFailure } from "./fuma-runtime";
 export { IntegrationSlug, AuthTemplateSlug, ConnectionName, OAuthClientSlug, OAuthState, ProviderKey, ProviderItemId, ConnectionAddress, ToolAddress, ToolName, ElicitationId, PolicyId, Tenant, Subject, Owner, } from "./ids";
 export { connectionIdentifier, isConnectionIdentifier } from "./connection-name-identifier";
 export { ToolNotFoundError, ToolInvocationError, ToolBlockedError, NoHandlerError, PluginNotLoadedError, IntegrationNotFoundError, IntegrationAlreadyExistsError, IntegrationRemovalNotAllowedError, ConnectionNotFoundError, CredentialProviderNotRegisteredError, CredentialResolutionError, type ExecuteError, type ExecutorError, } from "./errors";
 export type { AuthMethodDescriptor, AuthMethodOAuthDescriptor, AuthPlacementDescriptor, Integration, IntegrationConfig, IntegrationDisplayDescriptor, RegisterIntegrationInput, } from "./integration";
+export { freshCustomAuthSlug, mergeAuthTemplates } from "./integration";
 export type { Connection, ConnectionRef, ConnectionValueInput, CreateConnectionInput, } from "./connection";
 export type { Tool, ToolDef, ToolListFilter, ToolAnnotations } from "./tool";
 export type { CredentialProvider, ProviderEntry } from "./provider";
 export { ToolSchemaView, IntegrationDetectionResult } from "./types";
-export { bigintColumn, boolColumn, coreSchema, coreTables, dateColumn, isToolPolicyAction, jsonColumn, keyColumn, nullableBigintColumn, nullableJsonColumn, nullableKeyColumn, nullableTextColumn, textColumn, TOOL_POLICY_ACTIONS, type CoreSchema, type IntegrationRow, type ConnectionRow, type OAuthClientRow, type OAuthSessionRow, type ToolRow, type DefinitionRow, type ToolPolicyRow, type PluginStorageRow, type BlobRow, type ToolPolicyAction, } from "./core-schema";
+export { bigintColumn, boolColumn, coreSchema, coreTables, dateColumn, isToolPolicyAction, jsonColumn, keyColumn, nullableBigintColumn, nullableJsonColumn, nullableKeyColumn, nullableTextColumn, textColumn, TOOL_POLICY_ACTIONS, type CoreSchema, type IntegrationRow, type ConnectionRow, type OAuthClientRow, type OAuthSessionRow, type ToolRow, type ToolInvocationRow, type DefinitionRow, type ToolPolicyRow, type PluginStorageRow, type BlobRow, type ToolPolicyAction, } from "./core-schema";
 export { ORG_SUBJECT, executorOwnerPolicyName, executorUnscopedPolicyName, type ExecutorOwnerPolicyContext, } from "./owner-policy";
 export { matchPattern, isValidPattern, effectivePolicyFromSorted, ToolPolicyActionSchema, type ToolPolicy, type CreateToolPolicyInput, type UpdateToolPolicyInput, type RemoveToolPolicyInput, type PolicyMatch, type EffectivePolicy, type PolicySource, } from "./policies";
 export { FormElicitation, UrlElicitation, ElicitationAction, ElicitationResponse, ElicitationDeclinedError, type ElicitationRequest, type ElicitationHandler, type ElicitationContext, type OnElicitation, type InvokeOptions, } from "./elicitation";
-export { pluginBlobStore, makeInMemoryBlobStore, makeFumaBlobStore, type BlobStore, type PluginBlobStore, type OwnerPartitions, } from "./blob";
+export { pluginBlobStore, makeInMemoryBlobStore, makeFumaBlobStore, sha256Hex, type BlobStore, type PluginBlobStore, type OwnerPartitions, } from "./blob";
 export { definePluginStorageCollection, pluginStorageId, type PluginStorageCollectionDefinition, type PluginStorageCollectionFacade, type PluginStorageCollectionIndexedField, type PluginStorageCollectionKeyInput, type PluginStorageCollectionListInput, type PluginStorageCollectionOrderBy, type PluginStorageCollectionPutInput, type PluginStorageCollectionQueryInput, type PluginStorageCollectionScopedKeyInput, type PluginStorageCollectionWhere, type PluginStorageConfig, type PluginStorageEntry, type PluginStorageFacade, type PluginStorageIndexField, type PluginStorageIndexSpec, type PluginStorageKeyInput, type PluginStorageListInput, type PluginStoragePutInput, type PluginStorageRuntimeCollectionDefinition, type PluginStorageRuntimeIndexSpec, type PluginStorageSchema, type PluginStorageSchemaType, type PluginStorageScopedKeyInput, type PluginStorageWhereFilter, type PluginStorageWhereValue, } from "./plugin-storage";
 export { OAUTH2_PROVIDER_KEY, OAUTH2_SESSION_TTL_MS } from "./oauth";
 export { OAuthStartError, OAuthCompleteError, OAuthProbeError, OAuthRegisterDynamicError, OAuthSessionNotFoundError, type OAuthGrant, type OAuthAuthentication, type OAuthClient, type OAuthClientSummary, type CreateOAuthClientInput, type RegisterDynamicClientInput, type ConnectResult, type OAuthStartInput, type OAuthCompleteInput, type OAuthProbeInput, type OAuthProbeResult, type OAuthService, } from "./oauth-client";
@@ -30,6 +31,8 @@ export { type Executor, type ExecutorConfig, type ExecutorDb, type ExecutorDbFac
 export { defineExecutorConfig, type ExecutorCliConfig, type ExecutorPluginsFactory, } from "./config";
 export { buildToolTypeScriptPreview } from "./schema-types";
 export { InternalError } from "./api-errors";
-export { ToolResult, isToolResult, type ToolError } from "./tool-result";
+export { ToolResult, isToolResult, type ToolError, type ToolHttpMeta } from "./tool-result";
+export { DataMigrationError, DuplicateDataMigrationError, runSqliteDataMigrations, sqliteDataMigration, type SqliteDataMigration, type SqliteDataMigrationClient, } from "./sqlite-data-migrations";
+export { runSqliteConfigBlobMigration, type SqliteConfigBlobMigrationOptions, } from "./sqlite-config-blob-migration";
 export { authToolFailure, type AuthToolFailureCode, type AuthToolFailureInput, } from "./auth-tool-failure";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,EACL,OAAO,EACP,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,aAAa,GACd,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,UAAU,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAC3F,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE/G,YAAY,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGtF,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,MAAM,EACN,OAAO,EACP,KAAK,GACN,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,EACvB,oCAAoC,EACpC,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,UAAU,CAAC;AAGlB,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAG7E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGpE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AAGrE,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,SAAS,EACT,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,OAAO,EACZ,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,0BAA0B,GAChC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EACxC,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,iCAAiC,EACtC,KAAK,qCAAqC,EAC1C,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wCAAwC,EAC7C,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,GAC7B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,yBAAyB,EACzB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,yBAAyB,EACzB,oCAAoC,EACpC,iCAAiC,EACjC,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,GAClC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,gCAAgC,EACrC,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,MAAM,EACX,YAAY,EACZ,IAAI,GACL,MAAM,UAAU,CAAC;AAOlB,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,EACL,OAAO,EACP,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,aAAa,GACd,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,UAAU,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAC3F,YAAY,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,MAAM,EACN,MAAM,IAAI,UAAU,GACrB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGtF,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,MAAM,EACN,OAAO,EACP,KAAK,GACN,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,EACvB,oCAAoC,EACpC,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,UAAU,CAAC;AAGlB,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAG7E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGpE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AAGrE,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,SAAS,EACT,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,OAAO,EACZ,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,0BAA0B,GAChC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AAMvB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EACxC,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,iCAAiC,EACtC,KAAK,qCAAqC,EAC1C,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wCAAwC,EAC7C,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,GAC7B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,yBAAyB,EACzB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,yBAAyB,EACzB,oCAAoC,EACpC,iCAAiC,EACjC,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,GAClC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,gCAAgC,EACrC,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,MAAM,EACX,YAAY,EACZ,IAAI,GACL,MAAM,UAAU,CAAC;AAOlB,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAG5F,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,4BAA4B,EAC5B,KAAK,gCAAgC,GACtC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -4,7 +4,7 @@ import {
 import {
   collectTables,
   createExecutor
-} from "./chunk-WN6EB76P.js";
+} from "./chunk-YPVKRUZV.js";
 import {
   ConnectionNotFoundError,
   CredentialProviderNotRegisteredError,
@@ -22,12 +22,11 @@ import {
   ToolNotFoundError,
   ToolSchemaView,
   UrlElicitation
-} from "./chunk-3RRMGXEN.js";
+} from "./chunk-UKOTOKXM.js";
 import "./chunk-EIHWBY6T.js";
 import {
   AuthTemplateSlug,
   ConnectionName,
-  ElicitationId,
   IntegrationSlug,
   Owner,
   PolicyId,
@@ -113,7 +112,6 @@ export {
   CredentialProviderNotRegisteredError,
   CredentialResolutionError,
   ElicitationAction,
-  ElicitationId,
   ElicitationResponse,
   FormElicitation,
   IntegrationDetectionResult,