npm - apps - Versions diffs - 0.0.1-beta.11 → 0.0.1-beta.13 - Mend

apps 0.0.1-beta.11 → 0.0.1-beta.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (28) hide show

package/framework-reference.json +1 -1
package/js/{chunk-TYVDBQSI.js → chunk-4ASNKGCV.js} +2 -2
package/js/{chunk-RELFXUOO.js → chunk-4DWF4ZWI.js} +5 -5
package/js/{chunk-KRSCJDTW.js → chunk-6HSH75OI.js} +20 -0
package/js/{chunk-YBRC463S.js → chunk-G4FT53I7.js} +2 -2
package/js/{chunk-WVVV4TX2.js → chunk-QS6CAHKC.js} +2 -2
package/js/{chunk-Z2QY3YTF.js → chunk-S73JGVR5.js} +2 -2
package/js/{chunk-EFAPIRVB.js → chunk-TG6DOCRO.js} +3 -3
package/js/{chunk-GPFVWWDZ.js → chunk-YPKG2QO5.js} +1 -1
package/js/contracts.js +5 -1
package/js/effect.js +5 -5
package/js/graphql.js +6 -6
package/js/host.js +5 -5
package/js/index.js +3 -3
package/js/mcp/effect.js +7 -7
package/js/mcp/stdio.js +7 -7
package/js/mcp.js +8 -8
package/js/openapi.js +4 -4
package/package.json +1 -1
package/runtime.json +1 -1
package/types/apps/src/contracts/host.d.ts +1 -1
package/types/apps/src/contracts/openapi.d.ts +1 -1
package/types/apps/src/contracts/protocols/1.d.ts +220 -66
package/types/apps/src/contracts/protocols/2.d.ts +60 -18
package/types/apps/src/contracts/protocols/3.d.ts +60 -18
package/types/apps/src/contracts/protocols/4.d.ts +100 -30
package/types/apps/src/contracts/protocols/5.d.ts +120 -36
package/types/apps/src/contracts/provider.d.ts +33 -6

package/types/apps/src/contracts/protocols/5.d.ts CHANGED Viewed

@@ -46,10 +46,15 @@ export declare const DeclaredRequirements: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -59,32 +64,41 @@ export declare const DeclaredRequirements: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -303,10 +317,15 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -316,32 +335,41 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -363,10 +391,15 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -376,32 +409,41 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -529,10 +571,15 @@ export declare const protocol5: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -542,32 +589,41 @@ export declare const protocol5: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -589,10 +645,15 @@ export declare const protocol5: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -602,32 +663,41 @@ export declare const protocol5: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -768,10 +838,15 @@ export declare const protocol5: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -781,32 +856,41 @@ export declare const protocol5: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;

package/types/apps/src/contracts/provider.d.ts CHANGED Viewed

@@ -24,6 +24,17 @@ export type ReservedAuthorizationParam = (typeof reservedAuthorizationParams)[nu
  * lets services define their own; the protocol and security parameters stay host-owned.
  */
 export declare const OAuthAuthorizationParams: Schema.$Record<Schema.String, Schema.String>;
+/** How the token endpoint reads requests. RFC 6749 uses a form; some services want JSON. */
+export declare const OAuthTokenRequestFormat: Schema.Literals<readonly ["form", "json"]>;
+export type OAuthTokenRequestFormat = typeof OAuthTokenRequestFormat.Type;
+/**
+ * Where a service nests the grant in its token response, as a dot-separated member path. Slack
+ * returns a user token under `authed_user`.
+ */
+export declare const OAuthTokenResponse: Schema.Struct<{
+    readonly path: Schema.String;
+}>;
+export type OAuthTokenResponse = typeof OAuthTokenResponse.Type;
 /**
  * OAuth endpoints and protocol choices. Omitted grant means authorization code; clients remain
  * host-owned. Declared endpoints may name an RFC 7009 `revocationUrl`; discovery reads the
@@ -35,10 +46,15 @@ export declare const OAuth2Config: Schema.Union<readonly [Schema.Struct<{
     readonly tokenUrl: Schema.optionalKey<Schema.Never>;
     readonly revocationUrl: Schema.optionalKey<Schema.Never>;
     readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+        readonly path: Schema.String;
+    }>>;
     readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
     readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
     readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
     readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+    readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+    readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
 }>, Schema.Struct<{
     /** Its query is kept; it cannot set protocol parameters or repeat `authorizationParams`. */
     readonly authorizationUrl: Schema.String;
@@ -48,28 +64,37 @@ export declare const OAuth2Config: Schema.Union<readonly [Schema.Struct<{
     /** RFC 8414 issuer identifier. Declared issuers are checked against the callback's `iss`. */
     readonly issuer: Schema.optionalKey<Schema.String>;
     readonly discover: Schema.optionalKey<Schema.Never>;
+    readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+        readonly path: Schema.String;
+    }>>;
     readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
     readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
     readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
     readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+    readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+    readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
 }>, Schema.Struct<{
+    readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+    readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+    readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+    readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
     readonly grant: Schema.Literal<"client_credentials">;
     readonly discover: Schema.String;
     readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
     readonly tokenUrl: Schema.optionalKey<Schema.Never>;
     readonly revocationUrl: Schema.optionalKey<Schema.Never>;
     readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>, Schema.Struct<{
     readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
     readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
-}>, Schema.Struct<{
+    readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
+    readonly discover: Schema.optionalKey<Schema.Never>;
+    readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+    readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
     readonly grant: Schema.Literal<"client_credentials">;
     readonly tokenUrl: Schema.String;
     readonly revocationUrl: Schema.optionalKey<Schema.String>;
     readonly scopes: Schema.$Array<Schema.String>;
-    readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-    readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
-    readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
-    readonly discover: Schema.optionalKey<Schema.Never>;
 }>]>;
 export type OAuth2Config = typeof OAuth2Config.Type;
 /** Default app-visible OAuth projection. Refresh tokens and client secrets remain with the host. */
@@ -123,7 +148,9 @@ export interface AccountCheckContext<Auth extends AuthMethods> {
 /**
  * A safe authenticated read proving the account works for this app. Returning passes; a thrown
  * `ProviderError` or HTTP status failure classifies the problem. Any other failure, including a
- * timeout, means the check could not verify the account, not that its credentials are bad.
+ * timeout, means the check could not verify the account, not that its credentials are bad. A
+ * thrown error's own message is shown to the user, bounded and with the checked credentials
+ * replaced, so write it for them.
  */
 export interface AccountCheck<Auth extends AuthMethods> {
     run(context: AccountCheckContext<Auth>): Effect.Effect<AccountCheckResult | void, unknown>;