@rafads/plugin-openapi 1.5.38

package/dist/core.js

@@ -0,0 +1,331 @@
+import {
+  makeDefaultOpenapiStore,
+  openApiPlugin,
+  resolveSpecFormatAdapter
+} from "./chunk-OR27BCXQ.js";
+import "./chunk-CURJJXB3.js";
+import "./chunk-O2LMSZ2Z.js";
+import {
+  AuthStrategy,
+  DocResolver,
+  EncodingObject,
+  ExtractedOperation,
+  ExtractionResult,
+  HeaderPreset,
+  HttpMethod,
+  InvocationResult,
+  MediaBinding,
+  OAuth2AuthorizationCodeFlow,
+  OAuth2ClientCredentialsFlow,
+  OAuth2Flows,
+  OAuth2Preset,
+  OperationBinding,
+  OperationId,
+  OperationParameter,
+  OperationRequestBody,
+  ParameterLocation,
+  PreviewOperation,
+  RESPONSE_HEADERS_TIMEOUT_MS,
+  SecurityScheme,
+  ServerInfo,
+  ServerVariable,
+  SpecPreview,
+  TOKEN_VARIABLE,
+  annotationsForOperation,
+  buildDefsJsonStreaming,
+  buildRequest,
+  checkHealthOpenApi,
+  compileAndPersistOpenApiOperations,
+  compileAndPersistOpenApiSpec,
+  compileAndPersistOpenApiSpecStreaming,
+  compileOpenApiDocument,
+  compileOpenApiSpec,
+  extract,
+  extractOpenApiUpstreamMessage,
+  fetchSpecText,
+  invoke,
+  invokeOpenApiBackedTool,
+  invokeWithLayer,
+  listHealthCheckCandidatesOpenApi,
+  loadOpenApiSpecText,
+  normalizeOpenApiAuthInputs,
+  normalizeOpenApiRefs,
+  openApiStoredOperationsFromCompiled,
+  openApiToolDefsFromCompiled,
+  parse,
+  preferredContent,
+  previewSpec,
+  resolveOpenApiBackedAnnotations,
+  resolveOpenApiBackedTools,
+  resolveServerUrl,
+  resolveSpecText,
+  streamOperationBindingsFromStructure,
+  substituteUrlVariables,
+  validateOpenApiBackedToolArgs
+} from "./chunk-HTHEUUJA.js";
+import {
+  AuthenticationSchema,
+  OpenApiIntegrationConfigSchema,
+  collectReferencedSchemas,
+  decodeOpenApiIntegrationConfig,
+  indexSchemas,
+  isStreamableSpec,
+  parseEntry,
+  parseHead,
+  parseSmallComponents,
+  renderAuthTemplate,
+  structuralSplit
+} from "./chunk-R7TVM3XD.js";
+import {
+  OpenApiAuthRequiredError,
+  OpenApiExtractionError,
+  OpenApiInvocationError,
+  OpenApiOAuthError,
+  OpenApiParseError
+} from "./chunk-CXFO6TLJ.js";
+
+// src/sdk/index.ts
+import { variable } from "@rafads/sdk/http-auth";
+
+// src/sdk/migrate-config.ts
+import { Option } from "effect";
+import { apiKeyMethodFromLegacyTemplate, decodeLegacyApiKeyTemplate } from "@rafads/sdk/http-auth";
+var isCanonicalEntry = (entry) => typeof entry === "object" && entry !== null && "kind" in entry && (entry.kind === "apikey" || entry.kind === "oauth2");
+var isLegacyOAuthEntry = (entry) => typeof entry === "object" && entry !== null && "type" in entry && entry.type === "oauth";
+var migrateEntry = (entry) => {
+  if (isCanonicalEntry(entry)) return entry;
+  if (isLegacyOAuthEntry(entry)) {
+    const { type: _type, ...rest } = entry;
+    return { ...rest, kind: "oauth2" };
+  }
+  const legacy = Option.getOrNull(decodeLegacyApiKeyTemplate(entry));
+  if (legacy !== null) return apiKeyMethodFromLegacyTemplate(legacy);
+  return null;
+};
+var migrateOpenApiAuthConfig = (config) => {
+  if (typeof config !== "object" || config === null) return null;
+  if (!("spec" in config) && !("specHash" in config)) return null;
+  if (!("authenticationTemplate" in config)) return null;
+  const entries = config.authenticationTemplate;
+  if (!Array.isArray(entries)) return null;
+  const migrated = entries.map(migrateEntry);
+  if (migrated.some((entry) => entry === null)) return null;
+  const changed = migrated.some((entry, index) => entry !== entries[index]);
+  if (!changed) return null;
+  const next = { ...config, authenticationTemplate: migrated };
+  return decodeOpenApiIntegrationConfig(next) !== null ? next : null;
+};
+
+// src/sdk/output-schema-migration.ts
+import { Effect, Option as Option2, Schema } from "effect";
+import { DataMigrationError } from "@rafads/sdk/core";
+var MIGRATION_NAME = "2026-06-11-openapi-output-envelope-unwrap";
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isEnvelopeStatusSchema = (value) => isRecord(value) && Object.keys(value).length === 1 && value.type === "integer";
+var isEnvelopeHeadersSchema = (value) => isRecord(value) && Object.keys(value).length === 2 && value.type === "object" && isRecord(value.additionalProperties) && Object.keys(value.additionalProperties).length === 1 && value.additionalProperties.type === "string";
+var unwrapOpenApiTransportEnvelope = (schema) => {
+  if (!isRecord(schema)) return void 0;
+  if (schema.type !== "object" || schema.additionalProperties !== false) return void 0;
+  const required = schema.required;
+  if (!Array.isArray(required) || required.length !== 3) return void 0;
+  if (!["status", "headers", "data"].every((key) => required.includes(key))) return void 0;
+  const properties = schema.properties;
+  if (!isRecord(properties) || !("data" in properties)) return void 0;
+  if (!isEnvelopeStatusSchema(properties.status)) return void 0;
+  if (!isEnvelopeHeadersSchema(properties.headers)) return void 0;
+  const data = properties.data;
+  const outputSchema = isRecord(data) && Object.keys(data).length === 0 ? null : data;
+  return { outputSchema };
+};
+var decodeJsonOption = Schema.decodeUnknownOption(Schema.UnknownFromJsonString);
+var execute = (client, stmt) => Effect.tryPromise({
+  try: () => client.execute(stmt),
+  catch: (cause) => new DataMigrationError({ migration: MIGRATION_NAME, cause })
+});
+var runSqliteOpenApiOutputSchemaMigration = (client) => Effect.gen(function* () {
+  const exists = yield* execute(
+    client,
+    "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'tool'"
+  );
+  if (exists.rows.length === 0) return 0;
+  const result = yield* execute(
+    client,
+    "SELECT row_id, output_schema FROM tool WHERE plugin_id = 'openapi' AND output_schema IS NOT NULL"
+  );
+  const updates = [];
+  for (const row of result.rows) {
+    if (typeof row.row_id !== "string" || typeof row.output_schema !== "string") continue;
+    const schema = decodeJsonOption(row.output_schema);
+    if (Option2.isNone(schema)) continue;
+    const unwrapped = unwrapOpenApiTransportEnvelope(schema.value);
+    if (unwrapped !== void 0) updates.push({ rowId: row.row_id, ...unwrapped });
+  }
+  if (updates.length === 0) return 0;
+  const applyAll = Effect.gen(function* () {
+    for (const update of updates) {
+      yield* execute(client, {
+        sql: "UPDATE tool SET output_schema = ? WHERE row_id = ?",
+        args: [
+          update.outputSchema === null ? null : JSON.stringify(update.outputSchema),
+          update.rowId
+        ]
+      });
+    }
+    yield* execute(client, "COMMIT");
+  });
+  yield* execute(client, "BEGIN");
+  yield* applyAll.pipe(Effect.tapError(() => execute(client, "ROLLBACK").pipe(Effect.ignore)));
+  return updates.length;
+});
+var openApiOutputSchemaDataMigration = {
+  name: MIGRATION_NAME,
+  run: (client) => runSqliteOpenApiOutputSchemaMigration(client).pipe(Effect.asVoid)
+};
+
+// src/sdk/ndjson-output-migration.ts
+import { Effect as Effect2 } from "effect";
+import { DataMigrationError as DataMigrationError2 } from "@rafads/sdk/core";
+var MIGRATION_NAME2 = "2026-07-09-openapi-ndjson-output-arrays";
+var NDJSON_TYPE_PROBES = [
+  "application/stream+json",
+  "application/x-ndjson",
+  "application/jsonl"
+];
+var execute2 = (client, stmt) => Effect2.tryPromise({
+  try: () => client.execute(stmt),
+  catch: (cause) => new DataMigrationError2({ migration: MIGRATION_NAME2, cause })
+});
+var tableExists = (client, table) => Effect2.map(
+  execute2(client, {
+    sql: "SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?",
+    args: [table]
+  }),
+  (result) => result.rows.length > 0
+);
+var runSqliteNdjsonOutputMigration = (client) => Effect2.gen(function* () {
+  for (const table of ["connection", "plugin_storage"]) {
+    if (!(yield* tableExists(client, table))) return 0;
+  }
+  const probes = NDJSON_TYPE_PROBES.map(() => "ps.data LIKE ?").join(" OR ");
+  const affected = yield* execute2(client, {
+    sql: `SELECT DISTINCT ps.tenant AS tenant, json_extract(ps.data, '$.integration') AS integration
+            FROM plugin_storage ps
+            WHERE ps.collection = 'operation' AND (${probes})`,
+    args: NDJSON_TYPE_PROBES.map((probe) => `%${probe}%`)
+  });
+  let marked = 0;
+  for (const row of affected.rows) {
+    if (typeof row.tenant !== "string" || typeof row.integration !== "string") continue;
+    yield* execute2(client, {
+      sql: "UPDATE connection SET tools_synced_at = NULL WHERE tenant = ? AND integration = ?",
+      args: [row.tenant, row.integration]
+    });
+    marked += 1;
+  }
+  return marked;
+});
+var openApiNdjsonOutputDataMigration = {
+  name: MIGRATION_NAME2,
+  run: (client) => runSqliteNdjsonOutputMigration(client).pipe(Effect2.asVoid)
+};
+
+// src/sdk/spec-blob-migration.ts
+import { Effect as Effect3 } from "effect";
+import { runSqliteConfigBlobMigration } from "@rafads/sdk/core";
+var MIGRATION_NAME3 = "2026-06-12-openapi-spec-to-blob";
+var openApiSpecBlobDataMigration = {
+  name: MIGRATION_NAME3,
+  run: (client) => runSqliteConfigBlobMigration(client, {
+    migrationName: MIGRATION_NAME3,
+    pluginId: "openapi",
+    inlineField: "spec",
+    hashField: "specHash",
+    blobKeyPrefix: "spec"
+  }).pipe(Effect3.asVoid)
+};
+export {
+  AuthStrategy,
+  AuthenticationSchema,
+  DocResolver,
+  EncodingObject,
+  ExtractedOperation,
+  ExtractionResult,
+  HeaderPreset,
+  HttpMethod,
+  InvocationResult,
+  MediaBinding,
+  OAuth2AuthorizationCodeFlow,
+  OAuth2ClientCredentialsFlow,
+  OAuth2Flows,
+  OAuth2Preset,
+  OpenApiAuthRequiredError,
+  OpenApiExtractionError,
+  OpenApiIntegrationConfigSchema,
+  OpenApiInvocationError,
+  OpenApiOAuthError,
+  OpenApiParseError,
+  OperationBinding,
+  OperationId,
+  OperationParameter,
+  OperationRequestBody,
+  ParameterLocation,
+  PreviewOperation,
+  RESPONSE_HEADERS_TIMEOUT_MS,
+  SecurityScheme,
+  ServerInfo,
+  ServerVariable,
+  SpecPreview,
+  TOKEN_VARIABLE,
+  annotationsForOperation,
+  buildDefsJsonStreaming,
+  buildRequest,
+  checkHealthOpenApi,
+  collectReferencedSchemas,
+  compileAndPersistOpenApiOperations,
+  compileAndPersistOpenApiSpec,
+  compileAndPersistOpenApiSpecStreaming,
+  compileOpenApiDocument,
+  compileOpenApiSpec,
+  decodeOpenApiIntegrationConfig,
+  extract,
+  extractOpenApiUpstreamMessage,
+  fetchSpecText,
+  indexSchemas,
+  invoke,
+  invokeOpenApiBackedTool,
+  invokeWithLayer,
+  isStreamableSpec,
+  listHealthCheckCandidatesOpenApi,
+  loadOpenApiSpecText,
+  makeDefaultOpenapiStore,
+  migrateOpenApiAuthConfig,
+  normalizeOpenApiAuthInputs,
+  normalizeOpenApiRefs,
+  openApiNdjsonOutputDataMigration,
+  openApiOutputSchemaDataMigration,
+  openApiPlugin,
+  openApiSpecBlobDataMigration,
+  openApiStoredOperationsFromCompiled,
+  openApiToolDefsFromCompiled,
+  parse,
+  parseEntry,
+  parseHead,
+  parseSmallComponents,
+  preferredContent,
+  previewSpec,
+  renderAuthTemplate,
+  resolveOpenApiBackedAnnotations,
+  resolveOpenApiBackedTools,
+  resolveServerUrl,
+  resolveSpecFormatAdapter,
+  resolveSpecText,
+  runSqliteNdjsonOutputMigration,
+  runSqliteOpenApiOutputSchemaMigration,
+  streamOperationBindingsFromStructure,
+  structuralSplit,
+  substituteUrlVariables,
+  unwrapOpenApiTransportEnvelope,
+  validateOpenApiBackedToolArgs,
+  variable
+};
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/index.ts","../src/sdk/migrate-config.ts","../src/sdk/output-schema-migration.ts","../src/sdk/ndjson-output-migration.ts","../src/sdk/spec-blob-migration.ts"],"sourcesContent":["export { parse, resolveSpecText, fetchSpecText } from \"./parse\";\nexport { extract, streamOperationBindingsFromStructure } from \"./extract\";\nexport {\n  structuralSplit,\n  isStreamableSpec,\n  indexSchemas,\n  collectReferencedSchemas,\n  parseEntry,\n  parseHead,\n  parseSmallComponents,\n  type SpecStructure,\n  type ByteRange,\n  type KeepPathItem,\n} from \"./split\";\nexport {\n  invoke,\n  invokeWithLayer,\n  buildRequest,\n  annotationsForOperation,\n  RESPONSE_HEADERS_TIMEOUT_MS,\n  type InvokeOptions,\n} from \"./invoke\";\nexport {\n  buildDefsJsonStreaming,\n  checkHealthOpenApi,\n  compileAndPersistOpenApiOperations,\n  compileAndPersistOpenApiSpec,\n  compileAndPersistOpenApiSpecStreaming,\n  compileOpenApiDocument,\n  compileOpenApiSpec,\n  extractOpenApiUpstreamMessage,\n  invokeOpenApiBackedTool,\n  listHealthCheckCandidatesOpenApi,\n  loadOpenApiSpecText,\n  normalizeOpenApiRefs,\n  openApiStoredOperationsFromCompiled,\n  openApiToolDefsFromCompiled,\n  resolveOpenApiBackedAnnotations,\n  resolveOpenApiBackedTools,\n  validateOpenApiBackedToolArgs,\n  type CompiledOpenApiSpec,\n  type OpenApiPersistResult,\n} from \"./backing\";\nexport type { ParsedDocument } from \"./parse\";\nexport {\n  openApiPlugin,\n  type OpenApiSpecConfig,\n  type OpenApiConfigureInput,\n  type OpenApiSpecInput,\n  type OpenApiPreviewInput,\n  type OpenApiPluginExtension,\n  type OpenApiPluginOptions,\n} from \"./plugin\";\nexport {\n  resolveSpecFormatAdapter,\n  type ConvertedSpec,\n  type DerivedIdentity,\n  type SpecFetchCredentials,\n  type SpecFetchInput,\n  type SpecFormatAdapter,\n} from \"./spec-format\";\nexport { type OpenapiStore, type StoredOperation, makeDefaultOpenapiStore } from \"./store\";\nexport {\n  decodeOpenApiIntegrationConfig,\n  renderAuthTemplate,\n  AuthenticationSchema,\n  OpenApiIntegrationConfigSchema,\n  type OpenApiIntegrationConfig,\n  type RenderedAuth,\n} from \"./config\";\nexport {\n  previewSpec,\n  SecurityScheme,\n  AuthStrategy,\n  HeaderPreset,\n  OAuth2Preset,\n  OAuth2Flows,\n  OAuth2AuthorizationCodeFlow,\n  OAuth2ClientCredentialsFlow,\n  PreviewOperation,\n  SpecPreview,\n} from \"./preview\";\nexport {\n  DocResolver,\n  resolveServerUrl,\n  substituteUrlVariables,\n  preferredContent,\n} from \"./openapi-utils\";\n\nexport {\n  OpenApiParseError,\n  OpenApiExtractionError,\n  OpenApiInvocationError,\n  OpenApiOAuthError,\n  OpenApiAuthRequiredError,\n} from \"./errors\";\n\nexport {\n  EncodingObject,\n  ExtractedOperation,\n  ExtractionResult,\n  InvocationResult,\n  MediaBinding,\n  OperationBinding,\n  OperationParameter,\n  OperationRequestBody,\n  ServerInfo,\n  ServerVariable,\n  OperationId,\n  HttpMethod,\n  ParameterLocation,\n  TOKEN_VARIABLE,\n  normalizeOpenApiAuthInputs,\n  type Authentication,\n  type AuthenticationInput,\n  type APIKeyAuthentication,\n} from \"./types\";\n// Request-shaped authoring: `headers: { Authorization: [\"Bearer \", variable(\"token\")] }`.\nexport { variable, type ApiKeyAuthTemplate } from \"@rafads/sdk/http-auth\";\n\nexport { migrateOpenApiAuthConfig } from \"./migrate-config\";\n\nexport {\n  openApiOutputSchemaDataMigration,\n  runSqliteOpenApiOutputSchemaMigration,\n  unwrapOpenApiTransportEnvelope,\n} from \"./output-schema-migration\";\n\nexport {\n  openApiNdjsonOutputDataMigration,\n  runSqliteNdjsonOutputMigration,\n} from \"./ndjson-output-migration\";\n\nexport { openApiSpecBlobDataMigration } from \"./spec-blob-migration\";\n","// ---------------------------------------------------------------------------\n// One-off config migration — rewrite pre-canonical OpenAPI integration\n// `config` blobs into the canonical placements model. Runs once per database\n// (boot for local/selfhost, out-of-band script for cloud); runtime code\n// decodes ONLY the canonical shape (`decodeOpenApiIntegrationConfig`).\n//\n// The retired shape is the `variable()`-templated apiKey:\n//   { slug, type: \"apiKey\", headers/queryParams: Record<name,\n//     string | (string | {type:\"variable\", name})[]> }\n// Each entry becomes one placement: prefix = literals before the first\n// variable, the variable name preserved VERBATIM (it keys the connections'\n// stored `item_ids`; the canonical `token` is stored as absent), a\n// literal-only value becomes a `literal` placement. OAuth templates\n// re-key from the retired `type: \"oauth\"` spelling to `kind: \"oauth2\"`.\n// ---------------------------------------------------------------------------\n\nimport { Option } from \"effect\";\nimport { apiKeyMethodFromLegacyTemplate, decodeLegacyApiKeyTemplate } from \"@rafads/sdk/http-auth\";\n\nimport { decodeOpenApiIntegrationConfig } from \"./config\";\n\nconst isCanonicalEntry = (entry: unknown): boolean =>\n  typeof entry === \"object\" &&\n  entry !== null &&\n  \"kind\" in entry &&\n  ((entry as { kind: unknown }).kind === \"apikey\" ||\n    (entry as { kind: unknown }).kind === \"oauth2\");\n\n/** The retired oauth spelling: `type: \"oauth\"` instead of `kind: \"oauth2\"`. */\nconst isLegacyOAuthEntry = (\n  entry: unknown,\n): entry is { readonly type: \"oauth\" } & Record<string, unknown> =>\n  typeof entry === \"object\" &&\n  entry !== null &&\n  \"type\" in entry &&\n  (entry as { type: unknown }).type === \"oauth\";\n\nconst migrateEntry = (entry: unknown): unknown | null => {\n  if (isCanonicalEntry(entry)) return entry;\n  if (isLegacyOAuthEntry(entry)) {\n    const { type: _type, ...rest } = entry;\n    return { ...rest, kind: \"oauth2\" };\n  }\n  const legacy = Option.getOrNull(decodeLegacyApiKeyTemplate(entry));\n  if (legacy !== null) return apiKeyMethodFromLegacyTemplate(legacy);\n  return null;\n};\n\n/** Rewrite a stored OpenAPI integration config blob into the canonical shape.\n *  Returns the rewritten config, or `null` when no rewrite is needed (already\n *  canonical, no auth templates, or not this plugin's shape). Idempotent. */\nexport const migrateOpenApiAuthConfig = (config: unknown): unknown | null => {\n  if (typeof config !== \"object\" || config === null) return null;\n  if (!(\"spec\" in config) && !(\"specHash\" in config)) return null;\n  if (!(\"authenticationTemplate\" in config)) return null;\n\n  const entries = (config as { authenticationTemplate: unknown }).authenticationTemplate;\n  if (!Array.isArray(entries)) return null;\n\n  const migrated = entries.map(migrateEntry);\n  if (migrated.some((entry) => entry === null)) return null;\n  const changed = migrated.some((entry, index) => entry !== entries[index]);\n  if (!changed) return null;\n\n  const next = { ...config, authenticationTemplate: migrated };\n  return decodeOpenApiIntegrationConfig(next) !== null ? next : null;\n};\n","// ---------------------------------------------------------------------------\n// Data migration: unwrap the retired {status, headers, data} transport\n// envelope from persisted OpenAPI tool output schemas. The runtime returns\n// the upstream payload as `data` (status/headers live in the ToolResult\n// `http` side channel), so persisted schemas must describe the payload\n// only — otherwise describe previews show an envelope invocations no\n// longer return. Mirrors the cloud drizzle migration\n// (apps/cloud/drizzle/0002_unwrap_openapi_output_envelope.sql) for the\n// libSQL-backed apps, where it runs once through the data-migration ledger.\n//\n// Idempotent: payload-shaped rows don't match the envelope signature, so\n// re-running plans zero updates.\n// ---------------------------------------------------------------------------\n\nimport { Effect, Option, Schema } from \"effect\";\nimport { DataMigrationError, type SqliteDataMigrationClient } from \"@rafads/sdk/core\";\n\nconst MIGRATION_NAME = \"2026-06-11-openapi-output-envelope-unwrap\";\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n// `{\"type\": \"integer\"}` — the envelope's `status` property schema, exactly.\nconst isEnvelopeStatusSchema = (value: unknown): boolean =>\n  isRecord(value) && Object.keys(value).length === 1 && value.type === \"integer\";\n\n// `{\"type\": \"object\", \"additionalProperties\": {\"type\": \"string\"}}` — the\n// envelope's `headers` property schema, exactly.\nconst isEnvelopeHeadersSchema = (value: unknown): boolean =>\n  isRecord(value) &&\n  Object.keys(value).length === 2 &&\n  value.type === \"object\" &&\n  isRecord(value.additionalProperties) &&\n  Object.keys(value.additionalProperties).length === 1 &&\n  value.additionalProperties.type === \"string\";\n\n/**\n * If `schema` is the retired transport envelope, return the payload schema\n * to persist instead (`null` when the envelope carried an empty `{}` data\n * schema — the new producer persists no output schema for those). Returns\n * undefined when the schema is not an envelope and the row must be left\n * untouched.\n */\nexport const unwrapOpenApiTransportEnvelope = (\n  schema: unknown,\n): { readonly outputSchema: unknown | null } | undefined => {\n  if (!isRecord(schema)) return undefined;\n  if (schema.type !== \"object\" || schema.additionalProperties !== false) return undefined;\n  const required = schema.required;\n  if (!Array.isArray(required) || required.length !== 3) return undefined;\n  if (![\"status\", \"headers\", \"data\"].every((key) => required.includes(key))) return undefined;\n  const properties = schema.properties;\n  if (!isRecord(properties) || !(\"data\" in properties)) return undefined;\n  if (!isEnvelopeStatusSchema(properties.status)) return undefined;\n  if (!isEnvelopeHeadersSchema(properties.headers)) return undefined;\n  const data = properties.data;\n  const outputSchema = isRecord(data) && Object.keys(data).length === 0 ? null : data;\n  return { outputSchema };\n};\n\nconst decodeJsonOption = Schema.decodeUnknownOption(Schema.UnknownFromJsonString);\n\nconst execute = (\n  client: SqliteDataMigrationClient,\n  stmt: string | { readonly sql: string; readonly args: readonly unknown[] },\n) =>\n  Effect.tryPromise({\n    try: () => client.execute(stmt),\n    catch: (cause) => new DataMigrationError({ migration: MIGRATION_NAME, cause }),\n  });\n\n/** Unwrap envelope-shaped openapi tool output schemas in a SQLite database.\n *  Returns the number of rows rewritten. The `tool` table may not exist yet\n *  on a fresh database — that counts as nothing to migrate. */\nexport const runSqliteOpenApiOutputSchemaMigration = (\n  client: SqliteDataMigrationClient,\n): Effect.Effect<number, DataMigrationError> =>\n  Effect.gen(function* () {\n    const exists = yield* execute(\n      client,\n      \"SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'tool'\",\n    );\n    if (exists.rows.length === 0) return 0;\n\n    const result = yield* execute(\n      client,\n      \"SELECT row_id, output_schema FROM tool WHERE plugin_id = 'openapi' AND output_schema IS NOT NULL\",\n    );\n    const updates: { readonly rowId: string; readonly outputSchema: unknown | null }[] = [];\n    for (const row of result.rows) {\n      if (typeof row.row_id !== \"string\" || typeof row.output_schema !== \"string\") continue;\n      const schema = decodeJsonOption(row.output_schema);\n      if (Option.isNone(schema)) continue;\n      const unwrapped = unwrapOpenApiTransportEnvelope(schema.value);\n      if (unwrapped !== undefined) updates.push({ rowId: row.row_id, ...unwrapped });\n    }\n    if (updates.length === 0) return 0;\n\n    const applyAll = Effect.gen(function* () {\n      for (const update of updates) {\n        yield* execute(client, {\n          sql: \"UPDATE tool SET output_schema = ? WHERE row_id = ?\",\n          args: [\n            update.outputSchema === null ? null : JSON.stringify(update.outputSchema),\n            update.rowId,\n          ],\n        });\n      }\n      yield* execute(client, \"COMMIT\");\n    });\n\n    yield* execute(client, \"BEGIN\");\n    yield* applyAll.pipe(Effect.tapError(() => execute(client, \"ROLLBACK\").pipe(Effect.ignore)));\n    return updates.length;\n  });\n\n/** Registry entry for the boot-time data-migration ledger. */\nexport const openApiOutputSchemaDataMigration = {\n  name: MIGRATION_NAME,\n  run: (client: SqliteDataMigrationClient) =>\n    runSqliteOpenApiOutputSchemaMigration(client).pipe(Effect.asVoid),\n};\n","// ---------------------------------------------------------------------------\n// Data migration: rebuild tool catalogs whose operations return NDJSON.\n//\n// Extraction used to persist an NDJSON operation's PER-LINE response schema as\n// the tool's output schema, while the invoke path returns an ARRAY of parsed\n// lines, so describe previews promised a single object that invocations never\n// returned. The producer now wraps those schemas in an array; the per-line\n// shape can't be recognized from a persisted `tool` row alone (it's just a\n// JSON schema), but the stored operation bindings kept the response content\n// type, so the affected connections are findable and the catalog machinery\n// already knows how to rebuild them: stale-mark `tools_synced_at` and the next\n// read re-produces the rows through the fixed producer. Mirrors the cloud\n// drizzle migration (apps/cloud/drizzle/0010_ndjson_output_arrays.sql).\n//\n// Effectively idempotent: re-running re-marks the same connections, and a\n// rebuild from unchanged bindings writes identical rows.\n// ---------------------------------------------------------------------------\n\nimport { Effect } from \"effect\";\nimport { DataMigrationError, type SqliteDataMigrationClient } from \"@rafads/sdk/core\";\n\nconst MIGRATION_NAME = \"2026-07-09-openapi-ndjson-output-arrays\";\n\n// Substring probes for the NDJSON media types (NDJSON_MEDIA_TYPES in\n// openapi-utils.ts). The binding JSON inside `plugin_storage.data` may be a\n// nested object or a re-encoded string, so a LIKE over the raw row text is the\n// shape-agnostic match; false positives only cause a harmless extra rebuild.\nconst NDJSON_TYPE_PROBES = [\n  \"application/stream+json\",\n  \"application/x-ndjson\",\n  \"application/jsonl\",\n] as const;\n\nconst execute = (\n  client: SqliteDataMigrationClient,\n  stmt: string | { readonly sql: string; readonly args: readonly unknown[] },\n) =>\n  Effect.tryPromise({\n    try: () => client.execute(stmt),\n    catch: (cause) => new DataMigrationError({ migration: MIGRATION_NAME, cause }),\n  });\n\nconst tableExists = (client: SqliteDataMigrationClient, table: string) =>\n  Effect.map(\n    execute(client, {\n      sql: \"SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?\",\n      args: [table],\n    }),\n    (result) => result.rows.length > 0,\n  );\n\n/** Stale-mark every connection whose integration has at least one stored\n *  operation binding with an NDJSON response, so the next read rebuilds its\n *  tool rows (with array-wrapped output schemas). Returns the number of\n *  connections marked. Fresh databases may lack either table; nothing to\n *  migrate. */\nexport const runSqliteNdjsonOutputMigration = (\n  client: SqliteDataMigrationClient,\n): Effect.Effect<number, DataMigrationError> =>\n  Effect.gen(function* () {\n    for (const table of [\"connection\", \"plugin_storage\"]) {\n      if (!(yield* tableExists(client, table))) return 0;\n    }\n\n    const probes = NDJSON_TYPE_PROBES.map(() => \"ps.data LIKE ?\").join(\" OR \");\n    const affected = yield* execute(client, {\n      sql: `SELECT DISTINCT ps.tenant AS tenant, json_extract(ps.data, '$.integration') AS integration\n            FROM plugin_storage ps\n            WHERE ps.collection = 'operation' AND (${probes})`,\n      args: NDJSON_TYPE_PROBES.map((probe) => `%${probe}%`),\n    });\n\n    let marked = 0;\n    for (const row of affected.rows) {\n      if (typeof row.tenant !== \"string\" || typeof row.integration !== \"string\") continue;\n      yield* execute(client, {\n        sql: \"UPDATE connection SET tools_synced_at = NULL WHERE tenant = ? AND integration = ?\",\n        args: [row.tenant, row.integration],\n      });\n      marked += 1;\n    }\n    return marked;\n  });\n\n/** Registry entry for the boot-time data-migration ledger. */\nexport const openApiNdjsonOutputDataMigration = {\n  name: MIGRATION_NAME,\n  run: (client: SqliteDataMigrationClient) =>\n    runSqliteNdjsonOutputMigration(client).pipe(Effect.asVoid),\n};\n","// ---------------------------------------------------------------------------\n// Data migration: move inline OpenAPI spec text out of `integration.config`\n// into the blob table (`spec/<sha256>`, config keeps `specHash`) — the\n// libSQL-ledger counterpart of cloud's out-of-band migrate-specs-to-blobs\n// script. Runs once per database through the data-migration ledger; the\n// shared body lives in @rafads/sdk (`runSqliteConfigBlobMigration`).\n// ---------------------------------------------------------------------------\n\nimport { Effect } from \"effect\";\nimport { runSqliteConfigBlobMigration, type SqliteDataMigrationClient } from \"@rafads/sdk/core\";\n\nconst MIGRATION_NAME = \"2026-06-12-openapi-spec-to-blob\";\n\n/** Registry entry for the boot-time data-migration ledger. */\nexport const openApiSpecBlobDataMigration = {\n  name: MIGRATION_NAME,\n  run: (client: SqliteDataMigrationClient) =>\n    runSqliteConfigBlobMigration(client, {\n      migrationName: MIGRATION_NAME,\n      pluginId: \"openapi\",\n      inlineField: \"spec\",\n      hashField: \"specHash\",\n      blobKeyPrefix: \"spec\",\n    }).pipe(Effect.asVoid),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsHA,SAAS,gBAAyC;;;ACtGlD,SAAS,cAAc;AACvB,SAAS,gCAAgC,kCAAkC;AAI3E,IAAM,mBAAmB,CAAC,UACxB,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,UACR,MAA4B,SAAS,YACpC,MAA4B,SAAS;AAG1C,IAAM,qBAAqB,CACzB,UAEA,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAA4B,SAAS;AAExC,IAAM,eAAe,CAAC,UAAmC;AACvD,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,MAAI,mBAAmB,KAAK,GAAG;AAC7B,UAAM,EAAE,MAAM,OAAO,GAAG,KAAK,IAAI;AACjC,WAAO,EAAE,GAAG,MAAM,MAAM,SAAS;AAAA,EACnC;AACA,QAAM,SAAS,OAAO,UAAU,2BAA2B,KAAK,CAAC;AACjE,MAAI,WAAW,KAAM,QAAO,+BAA+B,MAAM;AACjE,SAAO;AACT;AAKO,IAAM,2BAA2B,CAAC,WAAoC;AAC3E,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,MAAI,EAAE,UAAU,WAAW,EAAE,cAAc,QAAS,QAAO;AAC3D,MAAI,EAAE,4BAA4B,QAAS,QAAO;AAElD,QAAM,UAAW,OAA+C;AAChE,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AAEpC,QAAM,WAAW,QAAQ,IAAI,YAAY;AACzC,MAAI,SAAS,KAAK,CAAC,UAAU,UAAU,IAAI,EAAG,QAAO;AACrD,QAAM,UAAU,SAAS,KAAK,CAAC,OAAO,UAAU,UAAU,QAAQ,KAAK,CAAC;AACxE,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,OAAO,EAAE,GAAG,QAAQ,wBAAwB,SAAS;AAC3D,SAAO,+BAA+B,IAAI,MAAM,OAAO,OAAO;AAChE;;;ACpDA,SAAS,QAAQ,UAAAA,SAAQ,cAAc;AACvC,SAAS,0BAA0D;AAEnE,IAAM,iBAAiB;AAEvB,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAGrE,IAAM,yBAAyB,CAAC,UAC9B,SAAS,KAAK,KAAK,OAAO,KAAK,KAAK,EAAE,WAAW,KAAK,MAAM,SAAS;AAIvE,IAAM,0BAA0B,CAAC,UAC/B,SAAS,KAAK,KACd,OAAO,KAAK,KAAK,EAAE,WAAW,KAC9B,MAAM,SAAS,YACf,SAAS,MAAM,oBAAoB,KACnC,OAAO,KAAK,MAAM,oBAAoB,EAAE,WAAW,KACnD,MAAM,qBAAqB,SAAS;AAS/B,IAAM,iCAAiC,CAC5C,WAC0D;AAC1D,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,MAAI,OAAO,SAAS,YAAY,OAAO,yBAAyB,MAAO,QAAO;AAC9E,QAAM,WAAW,OAAO;AACxB,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO;AAC9D,MAAI,CAAC,CAAC,UAAU,WAAW,MAAM,EAAE,MAAM,CAAC,QAAQ,SAAS,SAAS,GAAG,CAAC,EAAG,QAAO;AAClF,QAAM,aAAa,OAAO;AAC1B,MAAI,CAAC,SAAS,UAAU,KAAK,EAAE,UAAU,YAAa,QAAO;AAC7D,MAAI,CAAC,uBAAuB,WAAW,MAAM,EAAG,QAAO;AACvD,MAAI,CAAC,wBAAwB,WAAW,OAAO,EAAG,QAAO;AACzD,QAAM,OAAO,WAAW;AACxB,QAAM,eAAe,SAAS,IAAI,KAAK,OAAO,KAAK,IAAI,EAAE,WAAW,IAAI,OAAO;AAC/E,SAAO,EAAE,aAAa;AACxB;AAEA,IAAM,mBAAmB,OAAO,oBAAoB,OAAO,qBAAqB;AAEhF,IAAM,UAAU,CACd,QACA,SAEA,OAAO,WAAW;AAAA,EAChB,KAAK,MAAM,OAAO,QAAQ,IAAI;AAAA,EAC9B,OAAO,CAAC,UAAU,IAAI,mBAAmB,EAAE,WAAW,gBAAgB,MAAM,CAAC;AAC/E,CAAC;AAKI,IAAM,wCAAwC,CACnD,WAEA,OAAO,IAAI,aAAa;AACtB,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAA+E,CAAC;AACtF,aAAW,OAAO,OAAO,MAAM;AAC7B,QAAI,OAAO,IAAI,WAAW,YAAY,OAAO,IAAI,kBAAkB,SAAU;AAC7E,UAAM,SAAS,iBAAiB,IAAI,aAAa;AACjD,QAAIA,QAAO,OAAO,MAAM,EAAG;AAC3B,UAAM,YAAY,+BAA+B,OAAO,KAAK;AAC7D,QAAI,cAAc,OAAW,SAAQ,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,UAAU,CAAC;AAAA,EAC/E;AACA,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,QAAM,WAAW,OAAO,IAAI,aAAa;AACvC,eAAW,UAAU,SAAS;AAC5B,aAAO,QAAQ,QAAQ;AAAA,QACrB,KAAK;AAAA,QACL,MAAM;AAAA,UACJ,OAAO,iBAAiB,OAAO,OAAO,KAAK,UAAU,OAAO,YAAY;AAAA,UACxE,OAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO,QAAQ,QAAQ,QAAQ;AAAA,EACjC,CAAC;AAED,SAAO,QAAQ,QAAQ,OAAO;AAC9B,SAAO,SAAS,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ,UAAU,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;AAC3F,SAAO,QAAQ;AACjB,CAAC;AAGI,IAAM,mCAAmC;AAAA,EAC9C,MAAM;AAAA,EACN,KAAK,CAAC,WACJ,sCAAsC,MAAM,EAAE,KAAK,OAAO,MAAM;AACpE;;;ACvGA,SAAS,UAAAC,eAAc;AACvB,SAAS,sBAAAC,2BAA0D;AAEnE,IAAMC,kBAAiB;AAMvB,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAMC,WAAU,CACd,QACA,SAEAH,QAAO,WAAW;AAAA,EAChB,KAAK,MAAM,OAAO,QAAQ,IAAI;AAAA,EAC9B,OAAO,CAAC,UAAU,IAAIC,oBAAmB,EAAE,WAAWC,iBAAgB,MAAM,CAAC;AAC/E,CAAC;AAEH,IAAM,cAAc,CAAC,QAAmC,UACtDF,QAAO;AAAA,EACLG,SAAQ,QAAQ;AAAA,IACd,KAAK;AAAA,IACL,MAAM,CAAC,KAAK;AAAA,EACd,CAAC;AAAA,EACD,CAAC,WAAW,OAAO,KAAK,SAAS;AACnC;AAOK,IAAM,iCAAiC,CAC5C,WAEAH,QAAO,IAAI,aAAa;AACtB,aAAW,SAAS,CAAC,cAAc,gBAAgB,GAAG;AACpD,QAAI,EAAE,OAAO,YAAY,QAAQ,KAAK,GAAI,QAAO;AAAA,EACnD;AAEA,QAAM,SAAS,mBAAmB,IAAI,MAAM,gBAAgB,EAAE,KAAK,MAAM;AACzE,QAAM,WAAW,OAAOG,SAAQ,QAAQ;AAAA,IACtC,KAAK;AAAA;AAAA,qDAE0C,MAAM;AAAA,IACrD,MAAM,mBAAmB,IAAI,CAAC,UAAU,IAAI,KAAK,GAAG;AAAA,EACtD,CAAC;AAED,MAAI,SAAS;AACb,aAAW,OAAO,SAAS,MAAM;AAC/B,QAAI,OAAO,IAAI,WAAW,YAAY,OAAO,IAAI,gBAAgB,SAAU;AAC3E,WAAOA,SAAQ,QAAQ;AAAA,MACrB,KAAK;AAAA,MACL,MAAM,CAAC,IAAI,QAAQ,IAAI,WAAW;AAAA,IACpC,CAAC;AACD,cAAU;AAAA,EACZ;AACA,SAAO;AACT,CAAC;AAGI,IAAM,mCAAmC;AAAA,EAC9C,MAAMD;AAAA,EACN,KAAK,CAAC,WACJ,+BAA+B,MAAM,EAAE,KAAKF,QAAO,MAAM;AAC7D;;;ACjFA,SAAS,UAAAI,eAAc;AACvB,SAAS,oCAAoE;AAE7E,IAAMC,kBAAiB;AAGhB,IAAM,+BAA+B;AAAA,EAC1C,MAAMA;AAAA,EACN,KAAK,CAAC,WACJ,6BAA6B,QAAQ;AAAA,IACnC,eAAeA;AAAA,IACf,UAAU;AAAA,IACV,aAAa;AAAA,IACb,WAAW;AAAA,IACX,eAAe;AAAA,EACjB,CAAC,EAAE,KAAKD,QAAO,MAAM;AACzB;","names":["Option","Effect","DataMigrationError","MIGRATION_NAME","execute","Effect","MIGRATION_NAME"]}

package/dist/index.js

@@ -0,0 +1,19 @@
+import {
+  openApiPlugin
+} from "./chunk-OR27BCXQ.js";
+import "./chunk-CURJJXB3.js";
+import "./chunk-O2LMSZ2Z.js";
+import {
+  TOKEN_VARIABLE
+} from "./chunk-HTHEUUJA.js";
+import "./chunk-R7TVM3XD.js";
+import "./chunk-CXFO6TLJ.js";
+
+// src/promise.ts
+import { variable } from "@rafads/sdk/http-auth";
+export {
+  TOKEN_VARIABLE,
+  openApiPlugin,
+  variable
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/promise.ts"],"sourcesContent":["export { openApiPlugin } from \"./sdk/plugin\";\nexport type {\n  OpenApiPluginOptions,\n  OpenApiPluginExtension,\n  OpenApiSpecConfig,\n  OpenApiSpecInput,\n  OpenApiPreviewInput,\n} from \"./sdk/plugin\";\n\n// Auth-template authoring helpers. Author apikey methods as canonical\n// placements, or request-shaped: `headers: { Authorization: [\"Bearer \",\n// variable(\"token\")] }` — both normalize to the same stored model.\nexport { TOKEN_VARIABLE } from \"./sdk/types\";\nexport type { Authentication, AuthenticationInput, APIKeyAuthentication } from \"./sdk/types\";\nexport { variable, type ApiKeyAuthTemplate } from \"@rafads/sdk/http-auth\";\n"],"mappings":";;;;;;;;;;;;AAcA,SAAS,gBAAyC;","names":[]}

package/dist/providers/google/config.d.ts

@@ -0,0 +1,34 @@
+import { Schema } from "effect";
+import type { Authentication } from "../../sdk/types";
+export declare const GoogleIntegrationConfigSchema: Schema.Struct<{
+    readonly specHash: Schema.optional<Schema.String>;
+    readonly specUrl: Schema.optional<Schema.String>;
+    readonly googleDiscoveryUrls: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly baseUrl: Schema.optional<Schema.String>;
+    readonly headers: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly queryParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+    readonly authenticationTemplate: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly slug: Schema.String;
+        readonly kind: Schema.Literal<"oauth2">;
+        readonly authorizationUrl: Schema.String;
+        readonly tokenUrl: Schema.String;
+        readonly resource: Schema.optional<Schema.NullOr<Schema.String>>;
+        readonly scopes: Schema.$Array<Schema.String>;
+        readonly supportsClientIdMetadataDocument: Schema.optional<Schema.Boolean>;
+    }>, Schema.Struct<{
+        readonly slug: Schema.String;
+        readonly kind: Schema.Literal<"apikey">;
+        readonly label: Schema.optional<Schema.String>;
+        readonly placements: Schema.$Array<Schema.Struct<{
+            readonly carrier: Schema.Literals<readonly ["header", "query"]>;
+            readonly name: Schema.String;
+            readonly prefix: Schema.optional<Schema.String>;
+            readonly variable: Schema.optional<Schema.String>;
+            readonly literal: Schema.optional<Schema.String>;
+        }>>;
+    }>]>>>;
+}>;
+export type GoogleIntegrationConfig = Omit<typeof GoogleIntegrationConfigSchema.Type, "authenticationTemplate"> & {
+    readonly authenticationTemplate?: readonly Authentication[];
+};
+export declare const decodeGoogleIntegrationConfig: (value: unknown) => GoogleIntegrationConfig | null;

package/dist/providers/google/discovery.d.ts

@@ -0,0 +1,49 @@
+import { Effect } from "effect";
+import { HttpClient } from "effect/unstable/http";
+import { OpenApiParseError } from "../../sdk/errors";
+import type { Authentication } from "../../sdk/types";
+interface SpecFetchCredentials {
+    readonly headers?: Record<string, string>;
+    readonly queryParams?: Record<string, string>;
+}
+export interface GoogleDiscoveryOpenApiConversion {
+    readonly specText: string;
+    readonly baseUrl: string;
+    readonly title: string;
+    readonly service: string;
+    readonly version: string;
+    readonly discoveryUrls?: readonly string[];
+    /** The v2 oauth auth template the converted integration declares, when the
+     *  Discovery document advertises OAuth2 scopes. */
+    readonly authenticationTemplate?: readonly Authentication[];
+}
+export declare const normalizeGoogleDiscoveryUrl: (discoveryUrl: string) => string | null;
+export declare const isGoogleDiscoveryUrl: (url: string) => boolean;
+export declare const fetchGoogleDiscoveryDocument: (discoveryUrl: string, credentials?: SpecFetchCredentials | undefined) => Effect.Effect<string, OpenApiParseError, HttpClient.HttpClient>;
+export declare const convertGoogleDiscoveryToOpenApi: (input: {
+    readonly discoveryUrl: string;
+    readonly documentText: string;
+}) => Effect.Effect<{
+    authenticationTemplate?: readonly Authentication[] | undefined;
+    specText: string;
+    baseUrl: string;
+    title: string;
+    service: string;
+    version: string;
+}, OpenApiParseError, never>;
+export declare const convertGoogleDiscoveryBundleToOpenApi: (input: {
+    readonly documents: readonly {
+        readonly discoveryUrl: string;
+        readonly documentText: string;
+    }[];
+    readonly consentScopes?: readonly string[];
+}) => Effect.Effect<{
+    authenticationTemplate?: readonly Authentication[] | undefined;
+    specText: string;
+    baseUrl: string;
+    title: string;
+    service: string;
+    version: string;
+    discoveryUrls: string[];
+}, OpenApiParseError, never>;
+export {};

package/dist/providers/google/discovery.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/providers/google/index.d.ts

@@ -0,0 +1,5 @@
+export { convertGoogleDiscoveryBundleToOpenApi, convertGoogleDiscoveryToOpenApi, fetchGoogleDiscoveryDocument, isGoogleDiscoveryUrl, type GoogleDiscoveryOpenApiConversion, } from "./discovery";
+export { googleOpenApiBundlePreset, googleCatalog, googleOpenApiPresets, googlePhotosOpenApiBundlePreset, googlePhotosOpenApiPresets, googlePhotosPresetIds, GOOGLE_PHOTOS_ICON, GOOGLE_PHOTOS_PRESET_ID, googleStandardUserOAuthPresets, googleOAuthConsentScopes, googleOAuthConsentScopesForPreset, googleServiceSlug, googleAudienceWarningsForUrls, googlePresetForDiscoveryUrl, type GoogleOpenApiOAuthAudience, type GoogleOpenApiPreset, type GooglePreset, } from "./presets";
+export { compactGoogleOAuthScopes, filterGoogleUserConsentOAuthScopes, isGoogleUserConsentOAuthScope, } from "./oauth-scopes";
+export { deriveGoogleDiscoveryIdentity, googleDiscoveryAdapter } from "./spec-format-adapter";
+export { googleOpenApiOwnershipDataMigration, runSqliteGoogleOpenApiOwnershipMigration, } from "./openapi-ownership-migration";

package/dist/providers/google/oauth-scopes.d.ts

@@ -0,0 +1,3 @@
+export declare const isGoogleUserConsentOAuthScope: (scope: string) => boolean;
+export declare const filterGoogleUserConsentOAuthScopes: (scopes: Iterable<string>) => string[];
+export declare const compactGoogleOAuthScopes: (scopes: Iterable<string>) => string[];

package/dist/providers/google/oauth-scopes.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/providers/google/openapi-ownership-migration.d.ts

@@ -0,0 +1,7 @@
+import { Effect } from "effect";
+import { DataMigrationError, type SqliteDataMigrationClient } from "@rafads/sdk/core";
+export declare const runSqliteGoogleOpenApiOwnershipMigration: (client: SqliteDataMigrationClient) => Effect.Effect<number, DataMigrationError>;
+export declare const googleOpenApiOwnershipDataMigration: {
+    name: string;
+    run: (client: SqliteDataMigrationClient) => Effect.Effect<void, DataMigrationError, never>;
+};

package/dist/providers/google/openapi-ownership-migration.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/providers/google/presets.d.ts

@@ -0,0 +1,31 @@
+import type { IntegrationPreset } from "@rafads/sdk/core";
+export interface GooglePreset {
+    readonly id: string;
+    readonly name: string;
+    readonly summary: string;
+    readonly url?: string;
+    readonly icon?: string;
+    readonly featured?: boolean;
+}
+export type GoogleOpenApiOAuthAudience = "standard-user" | "advanced-user" | "workspace-admin" | "unsupported-user";
+export type GoogleOpenApiPreset = GooglePreset & {
+    readonly oauthAudience: GoogleOpenApiOAuthAudience;
+};
+export declare const GOOGLE_BUNDLE_PRESET_ID = "google";
+export declare const GOOGLE_PHOTOS_PRESET_ID = "google-photos";
+export declare const GOOGLE_PHOTOS_ICON = "https://www.gstatic.com/images/branding/product/2x/photos_96dp.png";
+export declare const googleOpenApiBundlePreset: GooglePreset;
+export declare const googlePhotosOpenApiBundlePreset: GooglePreset;
+export declare const googleOpenApiPresets: readonly GoogleOpenApiPreset[];
+export declare const googleStandardUserOAuthPresets: GoogleOpenApiPreset[];
+export declare const googlePhotosPresetIds: readonly string[];
+export declare const googlePhotosOpenApiPresets: readonly GoogleOpenApiPreset[];
+export declare const googleOAuthConsentScopes: Readonly<Record<string, readonly string[]>>;
+export declare const googleOAuthConsentScopesForPreset: (presetId: string) => readonly string[];
+export declare const googleServiceSlug: (presetId: string) => string;
+export declare const googleCatalog: readonly IntegrationPreset[];
+export declare const googlePresetForDiscoveryUrl: (url: string) => GoogleOpenApiPreset | undefined;
+/** The distinct caution-tier audiences (`workspace-admin`, `unsupported-user`)
+ *  among the supplied Discovery URLs - the ones whose consent the user should be
+ *  warned about. Returns `[]` when every URL is a standard/advanced API. */
+export declare const googleAudienceWarningsForUrls: (urls: readonly string[]) => readonly GoogleOpenApiOAuthAudience[];

package/dist/providers/google/presets.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/providers/google/spec-format-adapter.d.ts

@@ -0,0 +1,3 @@
+import { type DerivedIdentity, type SpecFormatAdapter } from "../../sdk/spec-format";
+export declare const deriveGoogleDiscoveryIdentity: (doc: unknown) => DerivedIdentity | null;
+export declare const googleDiscoveryAdapter: SpecFormatAdapter;

package/dist/providers/google/spec-format-adapter.test.d.ts

@@ -0,0 +1 @@
+export {};