apps 0.0.1-beta.7 → 0.0.1-beta.73

package/types/apps/src/contracts/protocols/5.d.ts

@@ -6,11 +6,37 @@
  * unchanged.
  *
  * Once released this protocol is frozen like the earlier ones: `bun run check` compares `protocol5` with
- * `packages/apps/protocols/5.json`. Define the next protocol instead of editing this file.
+ * `packages/apps/protocols/5.json`. The module imports only `effect` and earlier protocol modules,
+ * so no change elsewhere can alter it. Define the next protocol instead of editing this file.
  * See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
 export * from "./4.js";
+/**
+ * Upstream identity that a passing account check may report for display. Only these fields are
+ * retained; the host never stores raw provider responses.
+ */
+export declare const AccountInfo: Schema.Struct<{
+    readonly externalId: Schema.optionalKey<Schema.String>;
+    readonly displayName: Schema.optionalKey<Schema.String>;
+    readonly username: Schema.optionalKey<Schema.String>;
+    readonly email: Schema.optionalKey<Schema.String>;
+    readonly avatarUrl: Schema.optionalKey<Schema.String>;
+    readonly profileUrl: Schema.optionalKey<Schema.String>;
+}>;
+export type AccountInfo = typeof AccountInfo.Type;
+/** A passing account check. Failures are thrown, so there is no failing variant. */
+export declare const AccountCheckResult: Schema.Struct<{
+    readonly accountInfo: Schema.optionalKey<Schema.Struct<{
+        readonly externalId: Schema.optionalKey<Schema.String>;
+        readonly displayName: Schema.optionalKey<Schema.String>;
+        readonly username: Schema.optionalKey<Schema.String>;
+        readonly email: Schema.optionalKey<Schema.String>;
+        readonly avatarUrl: Schema.optionalKey<Schema.String>;
+        readonly profileUrl: Schema.optionalKey<Schema.String>;
+    }>>;
+}>;
+export type AccountCheckResult = typeof AccountCheckResult.Type;
 /** Account slots available without binding accounts or evaluating the app factory. */
 export declare const DeclaredRequirements: Schema.Struct<{
     /** Protocol support of this retained framework build, not an author-declared requirement. */
@@ -46,10 +72,15 @@ export declare const DeclaredRequirements: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -59,32 +90,41 @@ export declare const DeclaredRequirements: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -303,10 +343,15 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -316,32 +361,41 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -363,10 +417,15 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -376,32 +435,41 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -529,10 +597,15 @@ export declare const protocol5: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -542,32 +615,41 @@ export declare const protocol5: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -589,10 +671,15 @@ export declare const protocol5: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -602,32 +689,41 @@ export declare const protocol5: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -768,10 +864,15 @@ export declare const protocol5: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -781,32 +882,41 @@ export declare const protocol5: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -834,7 +944,7 @@ export declare const protocol5: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof import("../provider-error.js").ProviderError, typeof import("../mcp.js").McpError, typeof import("../skills.js").SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/index.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/index.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof import("./4.js").HostKindMismatch]>;
         }>]>;
         readonly catalog: Schema.Struct<{
             readonly tools: Schema.$Array<Schema.Struct<{
@@ -881,7 +991,7 @@ export declare const protocol5: {
                 }>>>;
                 readonly tags: Schema.optionalKey<Schema.$Record<Schema.NonEmptyString, Schema.String>>;
                 readonly skill: Schema.optionalKey<Schema.NonEmptyString>;
-                readonly error: Schema.optionalKey<Schema.Union<readonly [typeof import("../provider-error.js").ProviderError, typeof import("../mcp.js").McpError, typeof import("../skills.js").SkillLoadFailed, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed]>>;
+                readonly error: Schema.optionalKey<Schema.Union<readonly [typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed]>>;
             }>>;
         }>;
         readonly catalogSummary: Schema.Struct<{
@@ -926,7 +1036,7 @@ export declare const protocol5: {
                 }>>>;
                 readonly tags: Schema.optionalKey<Schema.$Record<Schema.NonEmptyString, Schema.String>>;
                 readonly skill: Schema.optionalKey<Schema.NonEmptyString>;
-                readonly error: Schema.optionalKey<Schema.Union<readonly [typeof import("../provider-error.js").ProviderError, typeof import("../mcp.js").McpError, typeof import("../skills.js").SkillLoadFailed, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed]>>;
+                readonly error: Schema.optionalKey<Schema.Union<readonly [typeof import("./1.js").ProviderError, typeof import("./1.js").McpError, typeof import("./1.js").SkillLoadFailed, typeof import("./3.js").HostDeclarationInvalid, typeof import("./3.js").HostEvaluationFailed]>>;
             }>>;
         }>;
         readonly skills: Schema.Union<readonly [Schema.Struct<{
@@ -959,10 +1069,10 @@ export declare const protocol5: {
         readonly elicitationRequest: Schema.Struct<{
             readonly mode: Schema.Literal<"form">;
             readonly requestedSchema: Schema.toEncoded<Schema.Struct<{
-                readonly $schema: Schema.decodeTo<Schema.optional<Schema.String>, Schema.optionalKey<Schema.String>, never, never>;
+                readonly $schema: Schema.decodeTo<Schema.toType<Schema.optional<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
                 readonly type: Schema.tag<"object">;
-                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/unstable/ai/McpSchema").ElicitationString, typeof import("effect/unstable/ai/McpSchema").ElicitationNumber, typeof import("effect/unstable/ai/McpSchema").ElicitationBoolean]>>;
-                readonly required: Schema.decodeTo<Schema.optional<Schema.$Array<Schema.String>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/ai/McpSchema").ElicitationString, typeof import("effect/ai/McpSchema").ElicitationNumber, typeof import("effect/ai/McpSchema").ElicitationBoolean]>>;
+                readonly required: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
             }>>;
             readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
             readonly message: Schema.String;
@@ -972,14 +1082,14 @@ export declare const protocol5: {
             readonly response: Schema.Union<readonly [Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literal<"accept">;
-                readonly content: Schema.decodeTo<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
+                readonly content: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
             }>, Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literals<readonly ["cancel", "decline"]>;
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -1015,7 +1125,7 @@ export declare const protocol5: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../workflows.js").WorkflowFailure;
+            readonly error: typeof import("./3.js").WorkflowFailure;
         }>]>;
         readonly workflowControl: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"start">;
@@ -1084,7 +1194,7 @@ export declare const protocol5: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };