apps 0.0.1-beta.67 → 0.0.1-beta.69

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/framework-reference.json +1 -1
  2. package/js/{chunk-5NQDJMLY.js → chunk-3R3KFCDU.js} +172 -12
  3. package/js/{chunk-MWKHKOTL.js → chunk-7LMU3ER3.js} +35 -1
  4. package/js/{chunk-WFPDJ4R3.js → chunk-CXDAEGXB.js} +3 -3
  5. package/js/{chunk-ZA6YCHLZ.js → chunk-CY4MT7PI.js} +5 -5
  6. package/js/{chunk-524HNOCY.js → chunk-DZN5TQ53.js} +83 -16
  7. package/js/{chunk-AZIV4XRH.js → chunk-ECCWT5GJ.js} +2 -2
  8. package/js/{chunk-5EOB55ID.js → chunk-FZB6D6ZD.js} +20 -10
  9. package/js/{chunk-6RH2UYRB.js → chunk-GJSNQSR7.js} +2 -2
  10. package/js/{chunk-TLWLJ7PD.js → chunk-JW5LYSER.js} +94 -3
  11. package/js/{chunk-T3FPHPJJ.js → chunk-MHB7IFG7.js} +1 -1
  12. package/js/{chunk-AQU56EPI.js → chunk-RUP4JMKO.js} +17 -10
  13. package/js/{chunk-X36WUWBJ.js → chunk-ZEJ3IKEC.js} +2 -2
  14. package/js/{chunk-K2VZ3O27.js → chunk-ZR7QAG67.js} +1 -1
  15. package/js/contracts.js +34 -2
  16. package/js/effect.js +9 -9
  17. package/js/graphql.js +11 -11
  18. package/js/host.js +9 -9
  19. package/js/index.js +59 -12
  20. package/js/mcp/effect.js +11 -11
  21. package/js/mcp/stdio.js +11 -11
  22. package/js/mcp.js +13 -13
  23. package/js/openapi.js +7 -7
  24. package/js/skills.js +5 -5
  25. package/package.json +1 -1
  26. package/runtime.json +1 -1
  27. package/types/app-cache/src/contracts/cache.d.ts +2 -0
  28. package/types/apps/src/contracts/host.d.ts +600 -2
  29. package/types/apps/src/contracts/network.d.ts +36 -0
  30. package/types/apps/src/contracts/placement.d.ts +102 -0
  31. package/types/apps/src/contracts/protocol-version.d.ts +1 -1
  32. package/types/apps/src/contracts/protocols/current.d.ts +1368 -2
  33. package/types/apps/src/contracts/provider.d.ts +25 -0
  34. package/types/apps/src/contracts/sql.d.ts +5 -0
  35. package/types/apps/src/implementation/openapi-compile.d.ts +3 -3
  36. package/types/apps/src/implementation/placement.d.ts +60 -0
  37. package/types/apps/src/implementation/provider.d.ts +8 -2
  38. package/types/apps/src/index.d.ts +27 -3
package/types/app-cache/src/contracts/cache.d.ts CHANGED
@@ -2,6 +2,8 @@
2
2
  import { Schema, type Effect } from "effect";
3
3
  declare const CacheError_base: Schema.Class<CacheError, Schema.TaggedStruct<"CacheError", {
4
4
  readonly reason: Schema.Literals<readonly ["unavailable", "storage", "invalid", "capacity", "timeout"]>;
5
+ /** Which of `cacheLimits` the request exceeded, when one did. */
6
+ readonly limit: Schema.optionalKey<Schema.Literals<readonly ["keyBytes", "entryBytes", "batchBytes", "batchEntries", "totalBytes", "totalEntries"]>>;
5
7
  }>, import("effect/Cause").YieldableError>;
6
8
  /** Expected cache failures never include keys, values or upstream exception text. */
7
9
  export declare class CacheError extends CacheError_base {
package/types/apps/src/contracts/host.d.ts CHANGED
@@ -20,8 +20,9 @@ export { ElicitationLimits, defaultElicitationLimits, FormElicitation, Elicitati
20
20
  export { McpClientLimits, defaultMcpClientLimits } from "./mcp.js";
21
21
  export * from "./webhook-protocol.js";
22
22
  export * from "./events.js";
23
+ export * from "./placement.js";
23
24
  export { AccountId, HttpUrl } from "./schema.js";
24
- export { OAuthClientAuth, OAuthSecretClientAuth, OAuthTokenRequestFormat, OAuthTokenResponse, } from "./provider.js";
25
+ export { OAuthAuthorizationParams, OAuthClientAuth, OAuthSecretClientAuth, OAuthTokenRequestFormat, OAuthTokenResponse, } from "./provider.js";
25
26
  /**
26
27
  * The host protocol this framework speaks and its wire schemas, from `protocols/current.ts`. The
27
28
  * released protocol modules are frozen records that host adapters read.
@@ -49,6 +50,602 @@ export { McpError, SkillLoadFailed } from "./protocols/current.js";
49
50
  export { DeclaredAuthMethod, DeclaredProvider, ResolvedAccount, ResolvedAccounts, TrustedToolApproval, InvocationDeadline, HostedTool, HostedToolSummary, HostRouterError, HostedRouter, HostedCatalog, HostedCatalogSummary, SkillSources, SkillCatalogResponse, HostRequestInvalid, HostAccountsInvalid, HostDeclarationInvalid, HostEvaluationFailed, HostOperationNotFound, HostOperationFailed, HostToolNotFound, HostKindMismatch, InputProblem, maxInputProblems, HostInputInvalid, HostToolBlocked, HostToolApprovalRequired, HostToolPolicyFailed, HostOutputInvalid, HostError, HostResponse, HostInvocation, } from "./protocols/current.js";
50
51
  /** Raw host inputs; the host boundary parses and redacts these immediately. */
51
52
  export type ResolvedAccountsInput = typeof ResolvedAccounts.Encoded;
53
+ /**
54
+ * An account as the host sends it to the runner. `managed` marks a credential issued to the
55
+ * instance operator's own OAuth client: the runner seals every one of its strings, whatever the
56
+ * method exposes, so that only the operator's placement can send it. The runner removes the mark;
57
+ * a bundle reads a `ResolvedAccount`. Not part of any host protocol.
58
+ */
59
+ export declare const HostAccount: Schema.Struct<{
60
+ readonly managed: Schema.optionalKey<Schema.Literal<true>>;
61
+ readonly id: Schema.brand<Schema.String, "acc">;
62
+ readonly provider: Schema.Struct<{
63
+ readonly name: Schema.NonEmptyString;
64
+ readonly auth: Schema.$Record<Schema.NonEmptyString, Schema.Union<readonly [Schema.Struct<{
65
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
66
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
67
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
68
+ readonly in: Schema.Literal<"header">;
69
+ readonly name: Schema.String;
70
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
71
+ readonly field: Schema.NonEmptyString;
72
+ }>, Schema.Struct<{
73
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
74
+ readonly field: Schema.NonEmptyString;
75
+ }>]>>;
76
+ }>]>>;
77
+ }>, Schema.Struct<{
78
+ readonly in: Schema.Literal<"query">;
79
+ readonly name: Schema.NonEmptyString;
80
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
81
+ readonly field: Schema.NonEmptyString;
82
+ }>, Schema.Struct<{
83
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
84
+ readonly field: Schema.NonEmptyString;
85
+ }>]>>;
86
+ }>]>>;
87
+ }>]>>>;
88
+ readonly type: Schema.Literal<"secrets">;
89
+ readonly label: Schema.String;
90
+ readonly fields: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
91
+ }>, Schema.Struct<{
92
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
93
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
94
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
95
+ readonly in: Schema.Literal<"header">;
96
+ readonly name: Schema.String;
97
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
98
+ readonly field: Schema.NonEmptyString;
99
+ }>, Schema.Struct<{
100
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
101
+ readonly field: Schema.NonEmptyString;
102
+ }>]>>;
103
+ }>]>>;
104
+ }>, Schema.Struct<{
105
+ readonly in: Schema.Literal<"query">;
106
+ readonly name: Schema.NonEmptyString;
107
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
108
+ readonly field: Schema.NonEmptyString;
109
+ }>, Schema.Struct<{
110
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
111
+ readonly field: Schema.NonEmptyString;
112
+ }>]>>;
113
+ }>]>>;
114
+ }>]>>>;
115
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
116
+ readonly discover: Schema.String;
117
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.String>;
118
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
119
+ readonly tokenUrl: Schema.optionalKey<Schema.Never>;
120
+ readonly revocationUrl: Schema.optionalKey<Schema.Never>;
121
+ readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
122
+ readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
123
+ readonly path: Schema.String;
124
+ }>>;
125
+ readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
126
+ readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
127
+ readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
128
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
129
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
130
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
131
+ readonly type: Schema.Literal<"oauth2">;
132
+ }>, Schema.Struct<{
133
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
134
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
135
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
136
+ readonly in: Schema.Literal<"header">;
137
+ readonly name: Schema.String;
138
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
139
+ readonly field: Schema.NonEmptyString;
140
+ }>, Schema.Struct<{
141
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
142
+ readonly field: Schema.NonEmptyString;
143
+ }>]>>;
144
+ }>]>>;
145
+ }>, Schema.Struct<{
146
+ readonly in: Schema.Literal<"query">;
147
+ readonly name: Schema.NonEmptyString;
148
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
149
+ readonly field: Schema.NonEmptyString;
150
+ }>, Schema.Struct<{
151
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
152
+ readonly field: Schema.NonEmptyString;
153
+ }>]>>;
154
+ }>]>>;
155
+ }>]>>>;
156
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
157
+ readonly authorizationUrl: Schema.String;
158
+ readonly tokenUrl: Schema.String;
159
+ readonly revocationUrl: Schema.optionalKey<Schema.String>;
160
+ readonly scopes: Schema.$Array<Schema.String>;
161
+ readonly issuer: Schema.optionalKey<Schema.String>;
162
+ readonly discover: Schema.optionalKey<Schema.Never>;
163
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.Never>;
164
+ readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
165
+ readonly path: Schema.String;
166
+ }>>;
167
+ readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
168
+ readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
169
+ readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
170
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
171
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
172
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
173
+ readonly type: Schema.Literal<"oauth2">;
174
+ }>, Schema.Struct<{
175
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
176
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
177
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
178
+ readonly in: Schema.Literal<"header">;
179
+ readonly name: Schema.String;
180
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
181
+ readonly field: Schema.NonEmptyString;
182
+ }>, Schema.Struct<{
183
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
184
+ readonly field: Schema.NonEmptyString;
185
+ }>]>>;
186
+ }>]>>;
187
+ }>, Schema.Struct<{
188
+ readonly in: Schema.Literal<"query">;
189
+ readonly name: Schema.NonEmptyString;
190
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
191
+ readonly field: Schema.NonEmptyString;
192
+ }>, Schema.Struct<{
193
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
194
+ readonly field: Schema.NonEmptyString;
195
+ }>]>>;
196
+ }>]>>;
197
+ }>]>>>;
198
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
199
+ readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
200
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
201
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
202
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
203
+ readonly grant: Schema.Literal<"client_credentials">;
204
+ readonly discover: Schema.String;
205
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.String>;
206
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
207
+ readonly tokenUrl: Schema.optionalKey<Schema.Never>;
208
+ readonly revocationUrl: Schema.optionalKey<Schema.Never>;
209
+ readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
210
+ readonly type: Schema.Literal<"oauth2">;
211
+ }>, Schema.Struct<{
212
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
213
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
214
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
215
+ readonly in: Schema.Literal<"header">;
216
+ readonly name: Schema.String;
217
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
218
+ readonly field: Schema.NonEmptyString;
219
+ }>, Schema.Struct<{
220
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
221
+ readonly field: Schema.NonEmptyString;
222
+ }>]>>;
223
+ }>]>>;
224
+ }>, Schema.Struct<{
225
+ readonly in: Schema.Literal<"query">;
226
+ readonly name: Schema.NonEmptyString;
227
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
228
+ readonly field: Schema.NonEmptyString;
229
+ }>, Schema.Struct<{
230
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
231
+ readonly field: Schema.NonEmptyString;
232
+ }>]>>;
233
+ }>]>>;
234
+ }>]>>>;
235
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
236
+ readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
237
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
238
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
239
+ readonly discover: Schema.optionalKey<Schema.Never>;
240
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.Never>;
241
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
242
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
243
+ readonly grant: Schema.Literal<"client_credentials">;
244
+ readonly tokenUrl: Schema.String;
245
+ readonly revocationUrl: Schema.optionalKey<Schema.String>;
246
+ readonly scopes: Schema.$Array<Schema.String>;
247
+ readonly type: Schema.Literal<"oauth2">;
248
+ }>]>>;
249
+ readonly hosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
250
+ }>;
251
+ readonly method: Schema.NonEmptyString;
252
+ readonly generation: Schema.optionalKey<Schema.Int>;
253
+ readonly fields: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
254
+ }>;
255
+ export type HostAccount = typeof HostAccount.Type;
256
+ /** An invocation's selections as the host sends them to the runner; see `HostAccount`. */
257
+ export declare const HostAccounts: Schema.$Record<Schema.NonEmptyString, Schema.Union<readonly [Schema.Struct<{
258
+ readonly managed: Schema.optionalKey<Schema.Literal<true>>;
259
+ readonly id: Schema.brand<Schema.String, "acc">;
260
+ readonly provider: Schema.Struct<{
261
+ readonly name: Schema.NonEmptyString;
262
+ readonly auth: Schema.$Record<Schema.NonEmptyString, Schema.Union<readonly [Schema.Struct<{
263
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
264
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
265
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
266
+ readonly in: Schema.Literal<"header">;
267
+ readonly name: Schema.String;
268
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
269
+ readonly field: Schema.NonEmptyString;
270
+ }>, Schema.Struct<{
271
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
272
+ readonly field: Schema.NonEmptyString;
273
+ }>]>>;
274
+ }>]>>;
275
+ }>, Schema.Struct<{
276
+ readonly in: Schema.Literal<"query">;
277
+ readonly name: Schema.NonEmptyString;
278
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
279
+ readonly field: Schema.NonEmptyString;
280
+ }>, Schema.Struct<{
281
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
282
+ readonly field: Schema.NonEmptyString;
283
+ }>]>>;
284
+ }>]>>;
285
+ }>]>>>;
286
+ readonly type: Schema.Literal<"secrets">;
287
+ readonly label: Schema.String;
288
+ readonly fields: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
289
+ }>, Schema.Struct<{
290
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
291
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
292
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
293
+ readonly in: Schema.Literal<"header">;
294
+ readonly name: Schema.String;
295
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
296
+ readonly field: Schema.NonEmptyString;
297
+ }>, Schema.Struct<{
298
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
299
+ readonly field: Schema.NonEmptyString;
300
+ }>]>>;
301
+ }>]>>;
302
+ }>, Schema.Struct<{
303
+ readonly in: Schema.Literal<"query">;
304
+ readonly name: Schema.NonEmptyString;
305
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
306
+ readonly field: Schema.NonEmptyString;
307
+ }>, Schema.Struct<{
308
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
309
+ readonly field: Schema.NonEmptyString;
310
+ }>]>>;
311
+ }>]>>;
312
+ }>]>>>;
313
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
314
+ readonly discover: Schema.String;
315
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.String>;
316
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
317
+ readonly tokenUrl: Schema.optionalKey<Schema.Never>;
318
+ readonly revocationUrl: Schema.optionalKey<Schema.Never>;
319
+ readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
320
+ readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
321
+ readonly path: Schema.String;
322
+ }>>;
323
+ readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
324
+ readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
325
+ readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
326
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
327
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
328
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
329
+ readonly type: Schema.Literal<"oauth2">;
330
+ }>, Schema.Struct<{
331
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
332
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
333
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
334
+ readonly in: Schema.Literal<"header">;
335
+ readonly name: Schema.String;
336
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
337
+ readonly field: Schema.NonEmptyString;
338
+ }>, Schema.Struct<{
339
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
340
+ readonly field: Schema.NonEmptyString;
341
+ }>]>>;
342
+ }>]>>;
343
+ }>, Schema.Struct<{
344
+ readonly in: Schema.Literal<"query">;
345
+ readonly name: Schema.NonEmptyString;
346
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
347
+ readonly field: Schema.NonEmptyString;
348
+ }>, Schema.Struct<{
349
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
350
+ readonly field: Schema.NonEmptyString;
351
+ }>]>>;
352
+ }>]>>;
353
+ }>]>>>;
354
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
355
+ readonly authorizationUrl: Schema.String;
356
+ readonly tokenUrl: Schema.String;
357
+ readonly revocationUrl: Schema.optionalKey<Schema.String>;
358
+ readonly scopes: Schema.$Array<Schema.String>;
359
+ readonly issuer: Schema.optionalKey<Schema.String>;
360
+ readonly discover: Schema.optionalKey<Schema.Never>;
361
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.Never>;
362
+ readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
363
+ readonly path: Schema.String;
364
+ }>>;
365
+ readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
366
+ readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
367
+ readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
368
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
369
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
370
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
371
+ readonly type: Schema.Literal<"oauth2">;
372
+ }>, Schema.Struct<{
373
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
374
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
375
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
376
+ readonly in: Schema.Literal<"header">;
377
+ readonly name: Schema.String;
378
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
379
+ readonly field: Schema.NonEmptyString;
380
+ }>, Schema.Struct<{
381
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
382
+ readonly field: Schema.NonEmptyString;
383
+ }>]>>;
384
+ }>]>>;
385
+ }>, Schema.Struct<{
386
+ readonly in: Schema.Literal<"query">;
387
+ readonly name: Schema.NonEmptyString;
388
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
389
+ readonly field: Schema.NonEmptyString;
390
+ }>, Schema.Struct<{
391
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
392
+ readonly field: Schema.NonEmptyString;
393
+ }>]>>;
394
+ }>]>>;
395
+ }>]>>>;
396
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
397
+ readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
398
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
399
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
400
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
401
+ readonly grant: Schema.Literal<"client_credentials">;
402
+ readonly discover: Schema.String;
403
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.String>;
404
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
405
+ readonly tokenUrl: Schema.optionalKey<Schema.Never>;
406
+ readonly revocationUrl: Schema.optionalKey<Schema.Never>;
407
+ readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
408
+ readonly type: Schema.Literal<"oauth2">;
409
+ }>, Schema.Struct<{
410
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
411
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
412
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
413
+ readonly in: Schema.Literal<"header">;
414
+ readonly name: Schema.String;
415
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
416
+ readonly field: Schema.NonEmptyString;
417
+ }>, Schema.Struct<{
418
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
419
+ readonly field: Schema.NonEmptyString;
420
+ }>]>>;
421
+ }>]>>;
422
+ }>, Schema.Struct<{
423
+ readonly in: Schema.Literal<"query">;
424
+ readonly name: Schema.NonEmptyString;
425
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
426
+ readonly field: Schema.NonEmptyString;
427
+ }>, Schema.Struct<{
428
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
429
+ readonly field: Schema.NonEmptyString;
430
+ }>]>>;
431
+ }>]>>;
432
+ }>]>>>;
433
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
434
+ readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
435
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
436
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
437
+ readonly discover: Schema.optionalKey<Schema.Never>;
438
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.Never>;
439
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
440
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
441
+ readonly grant: Schema.Literal<"client_credentials">;
442
+ readonly tokenUrl: Schema.String;
443
+ readonly revocationUrl: Schema.optionalKey<Schema.String>;
444
+ readonly scopes: Schema.$Array<Schema.String>;
445
+ readonly type: Schema.Literal<"oauth2">;
446
+ }>]>>;
447
+ readonly hosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
448
+ }>;
449
+ readonly method: Schema.NonEmptyString;
450
+ readonly generation: Schema.optionalKey<Schema.Int>;
451
+ readonly fields: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
452
+ }>, Schema.$Array<Schema.Struct<{
453
+ readonly managed: Schema.optionalKey<Schema.Literal<true>>;
454
+ readonly id: Schema.brand<Schema.String, "acc">;
455
+ readonly provider: Schema.Struct<{
456
+ readonly name: Schema.NonEmptyString;
457
+ readonly auth: Schema.$Record<Schema.NonEmptyString, Schema.Union<readonly [Schema.Struct<{
458
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
459
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
460
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
461
+ readonly in: Schema.Literal<"header">;
462
+ readonly name: Schema.String;
463
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
464
+ readonly field: Schema.NonEmptyString;
465
+ }>, Schema.Struct<{
466
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
467
+ readonly field: Schema.NonEmptyString;
468
+ }>]>>;
469
+ }>]>>;
470
+ }>, Schema.Struct<{
471
+ readonly in: Schema.Literal<"query">;
472
+ readonly name: Schema.NonEmptyString;
473
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
474
+ readonly field: Schema.NonEmptyString;
475
+ }>, Schema.Struct<{
476
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
477
+ readonly field: Schema.NonEmptyString;
478
+ }>]>>;
479
+ }>]>>;
480
+ }>]>>>;
481
+ readonly type: Schema.Literal<"secrets">;
482
+ readonly label: Schema.String;
483
+ readonly fields: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
484
+ }>, Schema.Struct<{
485
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
486
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
487
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
488
+ readonly in: Schema.Literal<"header">;
489
+ readonly name: Schema.String;
490
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
491
+ readonly field: Schema.NonEmptyString;
492
+ }>, Schema.Struct<{
493
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
494
+ readonly field: Schema.NonEmptyString;
495
+ }>]>>;
496
+ }>]>>;
497
+ }>, Schema.Struct<{
498
+ readonly in: Schema.Literal<"query">;
499
+ readonly name: Schema.NonEmptyString;
500
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
501
+ readonly field: Schema.NonEmptyString;
502
+ }>, Schema.Struct<{
503
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
504
+ readonly field: Schema.NonEmptyString;
505
+ }>]>>;
506
+ }>]>>;
507
+ }>]>>>;
508
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
509
+ readonly discover: Schema.String;
510
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.String>;
511
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
512
+ readonly tokenUrl: Schema.optionalKey<Schema.Never>;
513
+ readonly revocationUrl: Schema.optionalKey<Schema.Never>;
514
+ readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
515
+ readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
516
+ readonly path: Schema.String;
517
+ }>>;
518
+ readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
519
+ readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
520
+ readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
521
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
522
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
523
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
524
+ readonly type: Schema.Literal<"oauth2">;
525
+ }>, Schema.Struct<{
526
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
527
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
528
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
529
+ readonly in: Schema.Literal<"header">;
530
+ readonly name: Schema.String;
531
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
532
+ readonly field: Schema.NonEmptyString;
533
+ }>, Schema.Struct<{
534
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
535
+ readonly field: Schema.NonEmptyString;
536
+ }>]>>;
537
+ }>]>>;
538
+ }>, Schema.Struct<{
539
+ readonly in: Schema.Literal<"query">;
540
+ readonly name: Schema.NonEmptyString;
541
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
542
+ readonly field: Schema.NonEmptyString;
543
+ }>, Schema.Struct<{
544
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
545
+ readonly field: Schema.NonEmptyString;
546
+ }>]>>;
547
+ }>]>>;
548
+ }>]>>>;
549
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
550
+ readonly authorizationUrl: Schema.String;
551
+ readonly tokenUrl: Schema.String;
552
+ readonly revocationUrl: Schema.optionalKey<Schema.String>;
553
+ readonly scopes: Schema.$Array<Schema.String>;
554
+ readonly issuer: Schema.optionalKey<Schema.String>;
555
+ readonly discover: Schema.optionalKey<Schema.Never>;
556
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.Never>;
557
+ readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
558
+ readonly path: Schema.String;
559
+ }>>;
560
+ readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
561
+ readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
562
+ readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
563
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
564
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
565
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
566
+ readonly type: Schema.Literal<"oauth2">;
567
+ }>, Schema.Struct<{
568
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
569
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
570
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
571
+ readonly in: Schema.Literal<"header">;
572
+ readonly name: Schema.String;
573
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
574
+ readonly field: Schema.NonEmptyString;
575
+ }>, Schema.Struct<{
576
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
577
+ readonly field: Schema.NonEmptyString;
578
+ }>]>>;
579
+ }>]>>;
580
+ }>, Schema.Struct<{
581
+ readonly in: Schema.Literal<"query">;
582
+ readonly name: Schema.NonEmptyString;
583
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
584
+ readonly field: Schema.NonEmptyString;
585
+ }>, Schema.Struct<{
586
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
587
+ readonly field: Schema.NonEmptyString;
588
+ }>]>>;
589
+ }>]>>;
590
+ }>]>>>;
591
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
592
+ readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
593
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
594
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
595
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
596
+ readonly grant: Schema.Literal<"client_credentials">;
597
+ readonly discover: Schema.String;
598
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.String>;
599
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
600
+ readonly tokenUrl: Schema.optionalKey<Schema.Never>;
601
+ readonly revocationUrl: Schema.optionalKey<Schema.Never>;
602
+ readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
603
+ readonly type: Schema.Literal<"oauth2">;
604
+ }>, Schema.Struct<{
605
+ readonly plain: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
606
+ readonly raw: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
607
+ readonly request: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
608
+ readonly in: Schema.Literal<"header">;
609
+ readonly name: Schema.String;
610
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
611
+ readonly field: Schema.NonEmptyString;
612
+ }>, Schema.Struct<{
613
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
614
+ readonly field: Schema.NonEmptyString;
615
+ }>]>>;
616
+ }>]>>;
617
+ }>, Schema.Struct<{
618
+ readonly in: Schema.Literal<"query">;
619
+ readonly name: Schema.NonEmptyString;
620
+ readonly value: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
621
+ readonly field: Schema.NonEmptyString;
622
+ }>, Schema.Struct<{
623
+ readonly base64: Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Struct<{
624
+ readonly field: Schema.NonEmptyString;
625
+ }>]>>;
626
+ }>]>>;
627
+ }>]>>>;
628
+ readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
629
+ readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
630
+ readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
631
+ readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
632
+ readonly discover: Schema.optionalKey<Schema.Never>;
633
+ readonly authorizationServerMetadataUrl: Schema.optionalKey<Schema.Never>;
634
+ readonly scopeSeparator: Schema.optionalKey<Schema.String>;
635
+ readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
636
+ readonly grant: Schema.Literal<"client_credentials">;
637
+ readonly tokenUrl: Schema.String;
638
+ readonly revocationUrl: Schema.optionalKey<Schema.String>;
639
+ readonly scopes: Schema.$Array<Schema.String>;
640
+ readonly type: Schema.Literal<"oauth2">;
641
+ }>]>>;
642
+ readonly hosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
643
+ }>;
644
+ readonly method: Schema.NonEmptyString;
645
+ readonly generation: Schema.optionalKey<Schema.Int>;
646
+ readonly fields: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
647
+ }>>]>>;
648
+ export type HostAccounts = typeof HostAccounts.Type;
52
649
  /** Trusted invocation context, supplied separately from the Request. */
53
650
  export interface HostContext {
54
651
  /** Trusted host deadline; never accepted in public operation JSON. */
@@ -67,7 +664,8 @@ export interface HostContext {
67
664
  readonly approval?: TrustedToolApproval;
68
665
  /** The data facet's SQLite storage, for apps that declare `sql`. Never exposed to app code. */
69
666
  readonly storage?: AppSqlStorage;
70
- readonly accounts: Redacted.Redacted<ResolvedAccounts>;
667
+ /** The invocation's accounts as the host resolved them; see `HostAccount`. */
668
+ readonly accounts: Redacted.Redacted<HostAccounts>;
71
669
  }
72
670
  /** Skill commands. Send sources only to builds that declare skillSources. */
73
671
  export declare const skillsCommand: (sources: boolean) => {