apps 0.0.1-beta.9 → 0.0.1-beta.91

package/types/apps/src/contracts/protocols/4.d.ts

@@ -2,17 +2,24 @@
  * Host protocol 4: protocol 3 plus call kinds and routers. `call` carries the caller's `kind`, and
  * a bundle refuses a call whose tool has the other kind with `HostKindMismatch`. Inspection
  * answers with a catalog of tools and the routers that group them, instead of a list of tools.
- * Messages it does not change are protocol 3's, imported from its frozen module.
+ * Messages it does not change are protocol 3's, taken from its frozen module.
  *
  * Once released, this protocol is frozen like the earlier ones: `bun run check` compares
- * `protocol4` with `packages/apps/protocols/4.json`. See notes/apps-publishing.md.
+ * `protocol4` with `packages/apps/protocols/4.json`. The module imports only `effect` and earlier
+ * protocol modules, so no change elsewhere can alter it. See notes/apps-publishing.md.
  */
 import { Schema } from "effect";
-import { McpError } from "../mcp.js";
-import { ProviderError } from "../provider-error.js";
-import { SkillLoadFailed } from "../skills.js";
+import { McpError, ProviderError, SkillLoadFailed } from "./1.js";
 import { HostDeclarationInvalid, HostEvaluationFailed } from "./3.js";
 export { DeclaredAuthMethod, DeclaredProvider, DeclaredRequirements, ResolvedAccount, ResolvedAccounts, TrustedToolApproval, InvocationDeadline, SkillSources, SkillCatalogResponse, HostRequestInvalid, HostAccountsInvalid, HostDeclarationInvalid, HostEvaluationFailed, HostOperationNotFound, HostOperationFailed, HostToolNotFound, InputProblem, maxInputProblems, HostInputInvalid, HostToolBlocked, HostToolApprovalRequired, HostToolPolicyFailed, HostOutputInvalid, } from "./3.js";
+/** An image a client may show beside a router, such as an MCP server's own icon. Models never read it. */
+export declare const RouterIcon: Schema.Struct<{
+    readonly src: Schema.NonEmptyString;
+    readonly mimeType: Schema.optionalKey<Schema.String>;
+    readonly sizes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly theme: Schema.optionalKey<Schema.Literals<readonly ["light", "dark"]>>;
+}>;
+export type RouterIcon = typeof RouterIcon.Type;
 /**
  * Serializable live tool metadata; executable callbacks never cross this boundary. `name` is the
  * tool's full dotted path. `router` is the path of the router that owns it, omitted at the root.
@@ -315,7 +322,7 @@ export declare class HostKindMismatch extends HostKindMismatch_base {
  * Safe error envelope. Author failures carry only their name and bounded message with account
  * secrets replaced; no source, account fields, stack or cause value is serialized.
  */
-export declare const HostError: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/index.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/index.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof HostKindMismatch]>;
+export declare const HostError: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof HostKindMismatch]>;
 /** Expected host failures. */
 export type HostError = typeof HostError.Type;
 /** Portable response envelope; callers parse the success value for their operation. */
@@ -325,7 +332,7 @@ export declare const HostResponse: Schema.Union<readonly [Schema.Struct<{
     readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
 }>, Schema.Struct<{
     readonly ok: Schema.Literal<false>;
-    readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/index.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/index.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof HostKindMismatch]>;
+    readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof HostKindMismatch]>;
 }>]>;
 /** Parsed response envelope. */
 export type HostResponse = typeof HostResponse.Type;
@@ -442,10 +449,15 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -455,32 +467,41 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -502,10 +523,15 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -515,32 +541,41 @@ export declare const HostInvocation: Schema.Struct<{
                 readonly scopes: Schema.$Array<Schema.String>;
                 readonly issuer: Schema.optionalKey<Schema.String>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                    readonly path: Schema.String;
+                }>>;
                 readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                 readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                 readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                 readonly grant: Schema.Literal<"client_credentials">;
                 readonly discover: Schema.String;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                 readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                 readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly type: Schema.Literal<"oauth2">;
             }>, Schema.Struct<{
                 readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                readonly grant: Schema.Literal<"client_credentials">;
-                readonly tokenUrl: Schema.String;
-                readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                readonly scopes: Schema.$Array<Schema.String>;
                 readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                 readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                 readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                 readonly discover: Schema.optionalKey<Schema.Never>;
+                readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                readonly grant: Schema.Literal<"client_credentials">;
+                readonly tokenUrl: Schema.String;
+                readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                readonly scopes: Schema.$Array<Schema.String>;
                 readonly type: Schema.Literal<"oauth2">;
             }>]>>;
         }>;
@@ -676,10 +711,15 @@ export declare const protocol4: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -689,32 +729,41 @@ export declare const protocol4: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -736,10 +785,15 @@ export declare const protocol4: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -749,32 +803,41 @@ export declare const protocol4: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -895,7 +958,7 @@ export declare const protocol4: {
             readonly toolError: Schema.optionalKey<Schema.Literal<true>>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: Schema.Union<readonly [typeof import("../api-response-error.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("../workflows.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("../../../../app-data/src/index.js").DatabaseLimitExceeded, typeof import("../../../../app-data/src/index.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("../elicitation.js").ElicitationFailed, typeof HostKindMismatch]>;
+            readonly error: Schema.Union<readonly [typeof import("./1.js").OpenapiResponseError, typeof ProviderError, typeof McpError, typeof SkillLoadFailed, typeof import("./3.js").WorkflowFailure, typeof import("./1.js").HostRequestInvalid, typeof import("./1.js").HostAccountsInvalid, typeof HostDeclarationInvalid, typeof HostEvaluationFailed, typeof import("./1.js").HostOperationNotFound, typeof import("./3.js").HostOperationFailed, typeof import("./3.js").DatabaseLimitExceeded, typeof import("./3.js").DatabaseFieldReserved, typeof import("./1.js").HostToolNotFound, typeof import("./1.js").HostInputInvalid, typeof import("./1.js").HostOutputInvalid, typeof import("./1.js").HostToolBlocked, typeof import("./1.js").HostToolApprovalRequired, typeof import("./1.js").HostToolPolicyFailed, typeof import("./1.js").ElicitationFailed, typeof HostKindMismatch]>;
         }>]>;
         readonly requirements: Schema.Struct<{
             readonly capabilities: Schema.optionalKey<Schema.Struct<{
@@ -930,10 +993,15 @@ export declare const protocol4: {
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
@@ -943,32 +1011,41 @@ export declare const protocol4: {
                         readonly scopes: Schema.$Array<Schema.String>;
                         readonly issuer: Schema.optionalKey<Schema.String>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly tokenResponse: Schema.optionalKey<Schema.Struct<{
+                            readonly path: Schema.String;
+                        }>>;
                         readonly grant: Schema.optionalKey<Schema.Literal<"authorization_code">>;
                         readonly authorizationParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
                         readonly tokenEndpointAuthMethod: Schema.optionalKey<Schema.Literals<readonly ["none", "client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
+                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
                         readonly grant: Schema.Literal<"client_credentials">;
                         readonly discover: Schema.String;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly tokenUrl: Schema.optionalKey<Schema.Never>;
                         readonly revocationUrl: Schema.optionalKey<Schema.Never>;
                         readonly scopes: Schema.optionalKey<Schema.$Array<Schema.String>>;
-                        readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
-                        readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>, Schema.Struct<{
                         readonly response: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-                        readonly grant: Schema.Literal<"client_credentials">;
-                        readonly tokenUrl: Schema.String;
-                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
-                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly tokenEndpointAuthMethod: Schema.Literals<readonly ["client_secret_post", "client_secret_basic", "client_secret_basic_raw"]>;
                         readonly resource: Schema.optionalKey<Schema.NullOr<Schema.String>>;
                         readonly authorizationUrl: Schema.optionalKey<Schema.Never>;
                         readonly discover: Schema.optionalKey<Schema.Never>;
+                        readonly scopeSeparator: Schema.optionalKey<Schema.String>;
+                        readonly tokenRequestFormat: Schema.optionalKey<Schema.Literals<readonly ["form", "json"]>>;
+                        readonly grant: Schema.Literal<"client_credentials">;
+                        readonly tokenUrl: Schema.String;
+                        readonly revocationUrl: Schema.optionalKey<Schema.String>;
+                        readonly scopes: Schema.$Array<Schema.String>;
                         readonly type: Schema.Literal<"oauth2">;
                     }>]>>;
                 }>;
@@ -1098,10 +1175,10 @@ export declare const protocol4: {
         readonly elicitationRequest: Schema.Struct<{
             readonly mode: Schema.Literal<"form">;
             readonly requestedSchema: Schema.toEncoded<Schema.Struct<{
-                readonly $schema: Schema.decodeTo<Schema.optional<Schema.String>, Schema.optionalKey<Schema.String>, never, never>;
+                readonly $schema: Schema.decodeTo<Schema.toType<Schema.optional<Schema.String>>, Schema.optionalKey<Schema.String>, never, never>;
                 readonly type: Schema.tag<"object">;
-                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/unstable/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/unstable/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/unstable/ai/McpSchema").ElicitationString, typeof import("effect/unstable/ai/McpSchema").ElicitationNumber, typeof import("effect/unstable/ai/McpSchema").ElicitationBoolean]>>;
-                readonly required: Schema.decodeTo<Schema.optional<Schema.$Array<Schema.String>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
+                readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [typeof import("effect/ai/McpSchema").LegacyTitledEnum, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledSingleSelectEnum, typeof import("effect/ai/McpSchema").TitledSingleSelectEnum]>, Schema.Union<readonly [typeof import("effect/ai/McpSchema").UntitledMultiSelectEnum, typeof import("effect/ai/McpSchema").TitledMultiSelectEnum]>]>, typeof import("effect/ai/McpSchema").ElicitationString, typeof import("effect/ai/McpSchema").ElicitationNumber, typeof import("effect/ai/McpSchema").ElicitationBoolean]>>;
+                readonly required: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Array<Schema.String>>>, Schema.optionalKey<Schema.$Array<Schema.String>>, never, never>;
             }>>;
             readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
             readonly message: Schema.String;
@@ -1111,14 +1188,14 @@ export declare const protocol4: {
             readonly response: Schema.Union<readonly [Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literal<"accept">;
-                readonly content: Schema.decodeTo<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
+                readonly content: Schema.decodeTo<Schema.toType<Schema.optional<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>>, Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.$Array<Schema.String>]>>>, never, never>;
             }>, Schema.Struct<{
                 readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
                 readonly action: Schema.Literals<readonly ["cancel", "decline"]>;
             }>]>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../elicitation.js").ElicitationFailed;
+            readonly error: typeof import("./1.js").ElicitationFailed;
         }>]>;
         readonly workflowStep: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"do">;
@@ -1154,7 +1231,7 @@ export declare const protocol4: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../workflows.js").WorkflowFailure;
+            readonly error: typeof import("./3.js").WorkflowFailure;
         }>]>;
         readonly workflowControl: Schema.Union<readonly [Schema.Struct<{
             readonly operation: Schema.Literal<"start">;
@@ -1223,7 +1300,7 @@ export declare const protocol4: {
             readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
         }>, Schema.Struct<{
             readonly ok: Schema.Literal<false>;
-            readonly error: typeof import("../../../../app-cache/src/index.js").CacheError;
+            readonly error: typeof import("./1.js").CacheError;
         }>]>;
     };
 };