@anuma/sdk 6.31.2 → 6.31.3

package/dist/tools/index.cjs

@@ -277,12 +277,16 @@ function buildUpdateEventBody(args) {
   }
   return eventBody;
 }
+var CALENDAR_EVENT_ID = /^[A-Za-z0-9_]+$/;
 async function updateCalendarEvent(accessToken, args) {
   const { eventId } = args;
+  if (typeof eventId !== "string" || !CALENDAR_EVENT_ID.test(eventId)) {
+    return `Error: Invalid event ID: ${String(eventId)}`;
+  }
   const eventBody = buildUpdateEventBody(args);
   try {
     const response = await fetch(
-      `https://www.googleapis.com/calendar/v3/calendars/primary/events/${eventId}`,
+      `https://www.googleapis.com/calendar/v3/calendars/primary/events/${encodeURIComponent(eventId)}`,
       {
         method: "PATCH",
         headers: {
@@ -1151,55 +1155,40 @@ function createWeatherTool(options, weatherOptions) {
 
 // src/lib/connectors/errors.ts
 var CONNECTOR_ERROR_MARKER = "__anuma_connector_error_v1";
-function buildConnectorErrorResult(code, provider, connectUrl, extras) {
+function buildConnectorErrorResult(code, provider, extras) {
   const payload = {
     __anuma_connector_error_v1: true,
     code,
     provider,
-    connect_url: connectUrl,
     missing_scopes: extras?.missingScopes,
     required: extras?.required
   };
   return JSON.stringify(payload);
 }
 
-// src/lib/logger.ts
-var consoleLogger = {
-  debug: console.log.bind(console),
-  info: console.info.bind(console),
-  warn: console.warn.bind(console),
-  error: console.error.bind(console)
-};
-var LOGGER_STATE_KEY = /* @__PURE__ */ Symbol.for("@anuma/sdk/logger/v1");
-var loggerGlobal = globalThis;
-var fallbackLoggerState = { logger: consoleLogger };
-var fallbackWarned = false;
-function getLoggerState() {
-  try {
-    return loggerGlobal[LOGGER_STATE_KEY] ?? (loggerGlobal[LOGGER_STATE_KEY] = fallbackLoggerState);
-  } catch {
-    if (!fallbackWarned) {
-      fallbackWarned = true;
-      fallbackLoggerState.logger.warn(
-        "@anuma/sdk: the global object rejects new properties. This entrypoint keeps its own logger, so setLogger does not reach other entrypoints."
-      );
-    }
-    return fallbackLoggerState;
-  }
-}
-function getLogger() {
-  return getLoggerState().logger;
-}
-
 // src/tools/googleDrive.ts
 var DRIVE_PROVIDER = "gdrive";
+var DRIVE_FILE_ID = /^[A-Za-z0-9_-]+$/;
+var DRIVE_MIME_TYPE = /^[\w.+-]+\/[\w.+-]+$/;
+function invalidFileIdError(fileId) {
+  return `Error: Invalid file ID: ${String(fileId)}`;
+}
+function escapeDriveQueryValue(value) {
+  return value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
+}
+function withMimeTypeFilter(driveQuery, mimeType) {
+  if (!mimeType) return driveQuery;
+  if (!DRIVE_MIME_TYPE.test(mimeType)) return { error: `Error: Invalid mimeType: ${mimeType}` };
+  return `${driveQuery} and mimeType = '${escapeDriveQueryValue(mimeType)}'`;
+}
 async function searchDriveFiles(accessToken, args) {
   const { query, maxResults = 10, mimeType } = args;
-  let driveQuery = `fullText contains '${query.replace(/'/g, "\\'")}'`;
-  if (mimeType) {
-    driveQuery += ` and mimeType = '${mimeType}'`;
-  }
-  driveQuery += " and trashed = false";
+  const filtered = withMimeTypeFilter(
+    `fullText contains '${escapeDriveQueryValue(query)}'`,
+    mimeType
+  );
+  if (typeof filtered !== "string") return filtered.error;
+  const driveQuery = `${filtered} and trashed = false`;
   const params = new URLSearchParams({
     q: driveQuery,
     pageSize: String(maxResults),
@@ -1292,10 +1281,8 @@ function createGoogleDriveSearchTool(getAccessToken, requestDriveAccess) {
 }
 async function listRecentDriveFiles(accessToken, args) {
   const { maxResults = 10, mimeType } = args;
-  let driveQuery = "trashed = false";
-  if (mimeType) {
-    driveQuery += ` and mimeType = '${mimeType}'`;
-  }
+  const driveQuery = withMimeTypeFilter("trashed = false", mimeType);
+  if (typeof driveQuery !== "string") return driveQuery.error;
   const params = new URLSearchParams({
     q: driveQuery,
     pageSize: String(maxResults),
@@ -1382,7 +1369,7 @@ function createGoogleDriveListRecentTool(getAccessToken, requestDriveAccess) {
   };
 }
 async function findFileByName(accessToken, fileName) {
-  const driveQuery = `name contains '${fileName.replace(/'/g, "\\'")}' and trashed = false`;
+  const driveQuery = `name contains '${escapeDriveQueryValue(fileName)}' and trashed = false`;
   const params = new URLSearchParams({
     q: driveQuery,
     pageSize: "1",
@@ -1412,24 +1399,22 @@ var GOOGLE_DOCS_EXPORT_TYPES = {
 var MAX_CONTENT_LENGTH = 5e4;
 async function resolveFileId(accessToken, fileId, fileName) {
   if (fileId) {
-    return { fileId };
+    return DRIVE_FILE_ID.test(fileId) ? { fileId } : { error: invalidFileIdError(fileId) };
   }
   if (fileName) {
-    getLogger().debug("[google_drive_get_content] Searching for file by name:", fileName);
     const foundId = await findFileByName(accessToken, fileName);
     if (!foundId) {
       return {
         error: `Error: Could not find a file matching "${fileName}". Please check the file name and try again.`
       };
     }
-    getLogger().debug("[google_drive_get_content] Found file ID:", foundId);
-    return { fileId: foundId };
+    return DRIVE_FILE_ID.test(foundId) ? { fileId: foundId } : { error: invalidFileIdError(foundId) };
   }
   return { error: "Error: Please provide either a fileId or fileName to get file content." };
 }
 async function fetchFileMetadata(accessToken, fileId) {
   const response = await fetch(
-    `https://www.googleapis.com/drive/v3/files/${fileId}?fields=id,name,mimeType,webViewLink&supportsAllDrives=true`,
+    `https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}?fields=id,name,mimeType,webViewLink&supportsAllDrives=true`,
     { headers: { Authorization: `Bearer ${accessToken}` } }
   );
   if (!response.ok) {
@@ -1447,13 +1432,13 @@ function getContentUrl(fileId, mimeType) {
   if (GOOGLE_DOCS_EXPORT_TYPES[mimeType]) {
     const exportMimeType = GOOGLE_DOCS_EXPORT_TYPES[mimeType];
     return {
-      url: `https://www.googleapis.com/drive/v3/files/${fileId}/export?mimeType=${encodeURIComponent(exportMimeType)}&supportsAllDrives=true`,
+      url: `https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}/export?mimeType=${encodeURIComponent(exportMimeType)}&supportsAllDrives=true`,
       isExport: true
     };
   }
   if (mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/xml") {
     return {
-      url: `https://www.googleapis.com/drive/v3/files/${fileId}?alt=media&supportsAllDrives=true`,
+      url: `https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}?alt=media&supportsAllDrives=true`,
       isExport: false
     };
   }
@@ -1470,7 +1455,7 @@ Type: PDF${linkInfo}
 Note: PDF content cannot be extracted directly in the browser. The user can click the link above to view the PDF in Google Drive.`;
   }
   if (mimeType.startsWith("image/")) {
-    const directUrl = `https://drive.google.com/uc?export=view&id=${fileId}`;
+    const directUrl = `https://drive.google.com/uc?export=view&id=${encodeURIComponent(fileId)}`;
     return `File: ${name}
 Type: ${mimeType}${linkInfo}
 Direct image URL: ${directUrl}
@@ -1505,7 +1490,6 @@ Type: ${metadata.mimeType}${isExport ? " (exported as text)" : ""}
   return header + displayContent + footer;
 }
 async function getDriveFileContent(accessToken, args) {
-  getLogger().debug("[google_drive_get_content] Starting with:", args);
   const fileIdResult = await resolveFileId(accessToken, args.fileId, args.fileName);
   if ("error" in fileIdResult) {
     return fileIdResult.error;
@@ -1517,7 +1501,6 @@ async function getDriveFileContent(accessToken, args) {
       return metadataResult.error;
     }
     const { metadata } = metadataResult;
-    getLogger().debug("[google_drive_get_content] File metadata:", metadata);
     const contentUrlResult = getContentUrl(fileId, metadata.mimeType);
     if (!contentUrlResult) {
       return formatNonTextFileResponse(fileId, metadata);
@@ -1554,10 +1537,8 @@ function createGoogleDriveGetContentTool(getAccessToken, requestDriveAccess) {
       }
     },
     executor: async (args) => {
-      getLogger().debug("[google_drive_get_content] Executor called with args:", args);
       let token = getAccessToken();
       if (!token) {
-        getLogger().debug("[google_drive_get_content] No token, requesting access...");
         try {
           token = await requestDriveAccess();
         } catch {
@@ -1571,14 +1552,7 @@ function createGoogleDriveGetContentTool(getAccessToken, requestDriveAccess) {
         fileId: args.fileId,
         fileName: args.fileName
       };
-      const result = await getDriveFileContent(token, typedArgs);
-      getLogger().debug(
-        "[google_drive_get_content] Result length:",
-        result.length,
-        "First 200 chars:",
-        result.slice(0, 200)
-      );
-      return result;
+      return getDriveFileContent(token, typedArgs);
     }
   };
 }
@@ -1679,6 +1653,9 @@ function createGoogleDriveCreateFileTool(getAccessToken, requestDriveAccess) {
   };
 }
 async function updateDriveFile(accessToken, args) {
+  if (typeof args.fileId !== "string" || !DRIVE_FILE_ID.test(args.fileId)) {
+    return invalidFileIdError(args.fileId);
+  }
   const mimeType = (args.mimeType || "text/plain").replace(/[\r\n]/g, "");
   if (NATIVE_GOOGLE_MIME_TYPE.test(mimeType)) {
     return NATIVE_GOOGLE_MIME_ERROR;
@@ -2357,22 +2334,17 @@ function notionConnectorError(status, json) {
       return buildConnectorErrorResult(
         "scope_not_covered",
         NOTION_PROVIDER,
-        readString(json, "connect_url"),
         Array.isArray(missingScopes) ? { missingScopes } : void 0
       );
     }
     case "insufficient_scope":
-      return buildConnectorErrorResult("insufficient_scope", NOTION_PROVIDER, void 0, {
+      return buildConnectorErrorResult("insufficient_scope", NOTION_PROVIDER, {
         required: readString(json, "required")
       });
     case "upstream_unavailable":
       return buildConnectorErrorResult("upstream_unavailable", NOTION_PROVIDER);
     default:
-      return buildConnectorErrorResult(
-        "connector_not_connected",
-        NOTION_PROVIDER,
-        readString(json, "connect_url")
-      );
+      return buildConnectorErrorResult("connector_not_connected", NOTION_PROVIDER);
   }
 }
 function proxyRunner(callMcp) {
@@ -2888,6 +2860,34 @@ async function callNotionMCPTool(accessToken, toolName, args) {
   return callMCPTool(accessToken, toolName, args);
 }
 
+// src/lib/logger.ts
+var consoleLogger = {
+  debug: console.log.bind(console),
+  info: console.info.bind(console),
+  warn: console.warn.bind(console),
+  error: console.error.bind(console)
+};
+var LOGGER_STATE_KEY = /* @__PURE__ */ Symbol.for("@anuma/sdk/logger/v1");
+var loggerGlobal = globalThis;
+var fallbackLoggerState = { logger: consoleLogger };
+var fallbackWarned = false;
+function getLoggerState() {
+  try {
+    return loggerGlobal[LOGGER_STATE_KEY] ?? (loggerGlobal[LOGGER_STATE_KEY] = fallbackLoggerState);
+  } catch {
+    if (!fallbackWarned) {
+      fallbackWarned = true;
+      fallbackLoggerState.logger.warn(
+        "@anuma/sdk: the global object rejects new properties. This entrypoint keeps its own logger, so setLogger does not reach other entrypoints."
+      );
+    }
+    return fallbackLoggerState;
+  }
+}
+function getLogger() {
+  return getLoggerState().logger;
+}
+
 // src/tools/github.ts
 var GITHUB_API = "https://api.github.com";
 var FETCH_TIMEOUT_MS = 3e4;
@@ -3131,13 +3131,13 @@ function maybeConnectorError(status) {
 function connectorMintErrorToToolResult(err, provider) {
   switch (err.code) {
     case "connector_not_connected":
-      return buildConnectorErrorResult("connector_not_connected", err.provider, err.connectUrl);
+      return buildConnectorErrorResult("connector_not_connected", err.provider);
     case "scope_not_covered":
-      return buildConnectorErrorResult("scope_not_covered", err.provider, err.connectUrl, {
+      return buildConnectorErrorResult("scope_not_covered", err.provider, {
         missingScopes: err.missingScopes
       });
     case "insufficient_scope":
-      return buildConnectorErrorResult("insufficient_scope", provider, void 0, {
+      return buildConnectorErrorResult("insufficient_scope", provider, {
         required: err.required
       });
     case "upstream_unavailable":
@@ -3880,7 +3880,7 @@ function maybeConnectorError4(status, body) {
     return buildConnectorErrorResult("connector_not_connected", SLACK_PROVIDER);
   }
   if (body && body.ok === false && body.error === "missing_scope") {
-    return buildConnectorErrorResult("insufficient_scope", SLACK_PROVIDER, void 0, {
+    return buildConnectorErrorResult("insufficient_scope", SLACK_PROVIDER, {
       required: body.needed
     });
   }

package/dist/tools/index.d.mts

@@ -1015,12 +1015,12 @@ type ConnectorMintResult = {
 type ConnectorMintError = {
     code: "connector_not_connected";
     provider: string;
-    connectUrl: string;
+    connectUrl?: string;
 } | {
     code: "scope_not_covered";
     provider: string;
     missingScopes: string[];
-    connectUrl: string;
+    connectUrl?: string;
 } | {
     code: "insufficient_scope";
     required: string;
@@ -1106,11 +1106,10 @@ interface ConnectorErrorExtras {
  *
  * @param code       One of the recognized {@link ConnectorErrorCode} values.
  * @param provider   Logical provider name (`"gmail"`, `"gdrive"`, etc.).
- * @param connectUrl Optional connect URL surfaced to the user via the LLM reply.
  * @param extras     Optional `missingScopes` / `required` fields lifted by the
  *                   runtime parser into `ToolErrorInfo`.
  */
-declare function buildConnectorErrorResult(code: ConnectorErrorCode, provider: string, connectUrl?: string, extras?: ConnectorErrorExtras): string;
+declare function buildConnectorErrorResult(code: ConnectorErrorCode, provider: string, extras?: ConnectorErrorExtras): string;
 
 /**
  * Gmail tool factory for the chat system.

package/dist/tools/index.d.ts

@@ -1015,12 +1015,12 @@ type ConnectorMintResult = {
 type ConnectorMintError = {
     code: "connector_not_connected";
     provider: string;
-    connectUrl: string;
+    connectUrl?: string;
 } | {
     code: "scope_not_covered";
     provider: string;
     missingScopes: string[];
-    connectUrl: string;
+    connectUrl?: string;
 } | {
     code: "insufficient_scope";
     required: string;
@@ -1106,11 +1106,10 @@ interface ConnectorErrorExtras {
  *
  * @param code       One of the recognized {@link ConnectorErrorCode} values.
  * @param provider   Logical provider name (`"gmail"`, `"gdrive"`, etc.).
- * @param connectUrl Optional connect URL surfaced to the user via the LLM reply.
  * @param extras     Optional `missingScopes` / `required` fields lifted by the
  *                   runtime parser into `ToolErrorInfo`.
  */
-declare function buildConnectorErrorResult(code: ConnectorErrorCode, provider: string, connectUrl?: string, extras?: ConnectorErrorExtras): string;
+declare function buildConnectorErrorResult(code: ConnectorErrorCode, provider: string, extras?: ConnectorErrorExtras): string;
 
 /**
  * Gmail tool factory for the chat system.

package/dist/tools/index.mjs

@@ -121,12 +121,16 @@ function buildUpdateEventBody(args) {
   }
   return eventBody;
 }
+var CALENDAR_EVENT_ID = /^[A-Za-z0-9_]+$/;
 async function updateCalendarEvent(accessToken, args) {
   const { eventId } = args;
+  if (typeof eventId !== "string" || !CALENDAR_EVENT_ID.test(eventId)) {
+    return `Error: Invalid event ID: ${String(eventId)}`;
+  }
   const eventBody = buildUpdateEventBody(args);
   try {
     const response = await fetch(
-      `https://www.googleapis.com/calendar/v3/calendars/primary/events/${eventId}`,
+      `https://www.googleapis.com/calendar/v3/calendars/primary/events/${encodeURIComponent(eventId)}`,
       {
         method: "PATCH",
         headers: {
@@ -995,55 +999,40 @@ function createWeatherTool(options, weatherOptions) {
 
 // src/lib/connectors/errors.ts
 var CONNECTOR_ERROR_MARKER = "__anuma_connector_error_v1";
-function buildConnectorErrorResult(code, provider, connectUrl, extras) {
+function buildConnectorErrorResult(code, provider, extras) {
   const payload = {
     __anuma_connector_error_v1: true,
     code,
     provider,
-    connect_url: connectUrl,
     missing_scopes: extras?.missingScopes,
     required: extras?.required
   };
   return JSON.stringify(payload);
 }
 
-// src/lib/logger.ts
-var consoleLogger = {
-  debug: console.log.bind(console),
-  info: console.info.bind(console),
-  warn: console.warn.bind(console),
-  error: console.error.bind(console)
-};
-var LOGGER_STATE_KEY = /* @__PURE__ */ Symbol.for("@anuma/sdk/logger/v1");
-var loggerGlobal = globalThis;
-var fallbackLoggerState = { logger: consoleLogger };
-var fallbackWarned = false;
-function getLoggerState() {
-  try {
-    return loggerGlobal[LOGGER_STATE_KEY] ?? (loggerGlobal[LOGGER_STATE_KEY] = fallbackLoggerState);
-  } catch {
-    if (!fallbackWarned) {
-      fallbackWarned = true;
-      fallbackLoggerState.logger.warn(
-        "@anuma/sdk: the global object rejects new properties. This entrypoint keeps its own logger, so setLogger does not reach other entrypoints."
-      );
-    }
-    return fallbackLoggerState;
-  }
-}
-function getLogger() {
-  return getLoggerState().logger;
-}
-
 // src/tools/googleDrive.ts
 var DRIVE_PROVIDER = "gdrive";
+var DRIVE_FILE_ID = /^[A-Za-z0-9_-]+$/;
+var DRIVE_MIME_TYPE = /^[\w.+-]+\/[\w.+-]+$/;
+function invalidFileIdError(fileId) {
+  return `Error: Invalid file ID: ${String(fileId)}`;
+}
+function escapeDriveQueryValue(value) {
+  return value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
+}
+function withMimeTypeFilter(driveQuery, mimeType) {
+  if (!mimeType) return driveQuery;
+  if (!DRIVE_MIME_TYPE.test(mimeType)) return { error: `Error: Invalid mimeType: ${mimeType}` };
+  return `${driveQuery} and mimeType = '${escapeDriveQueryValue(mimeType)}'`;
+}
 async function searchDriveFiles(accessToken, args) {
   const { query, maxResults = 10, mimeType } = args;
-  let driveQuery = `fullText contains '${query.replace(/'/g, "\\'")}'`;
-  if (mimeType) {
-    driveQuery += ` and mimeType = '${mimeType}'`;
-  }
-  driveQuery += " and trashed = false";
+  const filtered = withMimeTypeFilter(
+    `fullText contains '${escapeDriveQueryValue(query)}'`,
+    mimeType
+  );
+  if (typeof filtered !== "string") return filtered.error;
+  const driveQuery = `${filtered} and trashed = false`;
   const params = new URLSearchParams({
     q: driveQuery,
     pageSize: String(maxResults),
@@ -1136,10 +1125,8 @@ function createGoogleDriveSearchTool(getAccessToken, requestDriveAccess) {
 }
 async function listRecentDriveFiles(accessToken, args) {
   const { maxResults = 10, mimeType } = args;
-  let driveQuery = "trashed = false";
-  if (mimeType) {
-    driveQuery += ` and mimeType = '${mimeType}'`;
-  }
+  const driveQuery = withMimeTypeFilter("trashed = false", mimeType);
+  if (typeof driveQuery !== "string") return driveQuery.error;
   const params = new URLSearchParams({
     q: driveQuery,
     pageSize: String(maxResults),
@@ -1226,7 +1213,7 @@ function createGoogleDriveListRecentTool(getAccessToken, requestDriveAccess) {
   };
 }
 async function findFileByName(accessToken, fileName) {
-  const driveQuery = `name contains '${fileName.replace(/'/g, "\\'")}' and trashed = false`;
+  const driveQuery = `name contains '${escapeDriveQueryValue(fileName)}' and trashed = false`;
   const params = new URLSearchParams({
     q: driveQuery,
     pageSize: "1",
@@ -1256,24 +1243,22 @@ var GOOGLE_DOCS_EXPORT_TYPES = {
 var MAX_CONTENT_LENGTH = 5e4;
 async function resolveFileId(accessToken, fileId, fileName) {
   if (fileId) {
-    return { fileId };
+    return DRIVE_FILE_ID.test(fileId) ? { fileId } : { error: invalidFileIdError(fileId) };
   }
   if (fileName) {
-    getLogger().debug("[google_drive_get_content] Searching for file by name:", fileName);
     const foundId = await findFileByName(accessToken, fileName);
     if (!foundId) {
       return {
         error: `Error: Could not find a file matching "${fileName}". Please check the file name and try again.`
       };
     }
-    getLogger().debug("[google_drive_get_content] Found file ID:", foundId);
-    return { fileId: foundId };
+    return DRIVE_FILE_ID.test(foundId) ? { fileId: foundId } : { error: invalidFileIdError(foundId) };
   }
   return { error: "Error: Please provide either a fileId or fileName to get file content." };
 }
 async function fetchFileMetadata(accessToken, fileId) {
   const response = await fetch(
-    `https://www.googleapis.com/drive/v3/files/${fileId}?fields=id,name,mimeType,webViewLink&supportsAllDrives=true`,
+    `https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}?fields=id,name,mimeType,webViewLink&supportsAllDrives=true`,
     { headers: { Authorization: `Bearer ${accessToken}` } }
   );
   if (!response.ok) {
@@ -1291,13 +1276,13 @@ function getContentUrl(fileId, mimeType) {
   if (GOOGLE_DOCS_EXPORT_TYPES[mimeType]) {
     const exportMimeType = GOOGLE_DOCS_EXPORT_TYPES[mimeType];
     return {
-      url: `https://www.googleapis.com/drive/v3/files/${fileId}/export?mimeType=${encodeURIComponent(exportMimeType)}&supportsAllDrives=true`,
+      url: `https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}/export?mimeType=${encodeURIComponent(exportMimeType)}&supportsAllDrives=true`,
       isExport: true
     };
   }
   if (mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/xml") {
     return {
-      url: `https://www.googleapis.com/drive/v3/files/${fileId}?alt=media&supportsAllDrives=true`,
+      url: `https://www.googleapis.com/drive/v3/files/${encodeURIComponent(fileId)}?alt=media&supportsAllDrives=true`,
       isExport: false
     };
   }
@@ -1314,7 +1299,7 @@ Type: PDF${linkInfo}
 Note: PDF content cannot be extracted directly in the browser. The user can click the link above to view the PDF in Google Drive.`;
   }
   if (mimeType.startsWith("image/")) {
-    const directUrl = `https://drive.google.com/uc?export=view&id=${fileId}`;
+    const directUrl = `https://drive.google.com/uc?export=view&id=${encodeURIComponent(fileId)}`;
     return `File: ${name}
 Type: ${mimeType}${linkInfo}
 Direct image URL: ${directUrl}
@@ -1349,7 +1334,6 @@ Type: ${metadata.mimeType}${isExport ? " (exported as text)" : ""}
   return header + displayContent + footer;
 }
 async function getDriveFileContent(accessToken, args) {
-  getLogger().debug("[google_drive_get_content] Starting with:", args);
   const fileIdResult = await resolveFileId(accessToken, args.fileId, args.fileName);
   if ("error" in fileIdResult) {
     return fileIdResult.error;
@@ -1361,7 +1345,6 @@ async function getDriveFileContent(accessToken, args) {
       return metadataResult.error;
     }
     const { metadata } = metadataResult;
-    getLogger().debug("[google_drive_get_content] File metadata:", metadata);
     const contentUrlResult = getContentUrl(fileId, metadata.mimeType);
     if (!contentUrlResult) {
       return formatNonTextFileResponse(fileId, metadata);
@@ -1398,10 +1381,8 @@ function createGoogleDriveGetContentTool(getAccessToken, requestDriveAccess) {
       }
     },
     executor: async (args) => {
-      getLogger().debug("[google_drive_get_content] Executor called with args:", args);
       let token = getAccessToken();
       if (!token) {
-        getLogger().debug("[google_drive_get_content] No token, requesting access...");
         try {
           token = await requestDriveAccess();
         } catch {
@@ -1415,14 +1396,7 @@ function createGoogleDriveGetContentTool(getAccessToken, requestDriveAccess) {
         fileId: args.fileId,
         fileName: args.fileName
       };
-      const result = await getDriveFileContent(token, typedArgs);
-      getLogger().debug(
-        "[google_drive_get_content] Result length:",
-        result.length,
-        "First 200 chars:",
-        result.slice(0, 200)
-      );
-      return result;
+      return getDriveFileContent(token, typedArgs);
     }
   };
 }
@@ -1523,6 +1497,9 @@ function createGoogleDriveCreateFileTool(getAccessToken, requestDriveAccess) {
   };
 }
 async function updateDriveFile(accessToken, args) {
+  if (typeof args.fileId !== "string" || !DRIVE_FILE_ID.test(args.fileId)) {
+    return invalidFileIdError(args.fileId);
+  }
   const mimeType = (args.mimeType || "text/plain").replace(/[\r\n]/g, "");
   if (NATIVE_GOOGLE_MIME_TYPE.test(mimeType)) {
     return NATIVE_GOOGLE_MIME_ERROR;
@@ -2201,22 +2178,17 @@ function notionConnectorError(status, json) {
       return buildConnectorErrorResult(
         "scope_not_covered",
         NOTION_PROVIDER,
-        readString(json, "connect_url"),
         Array.isArray(missingScopes) ? { missingScopes } : void 0
       );
     }
     case "insufficient_scope":
-      return buildConnectorErrorResult("insufficient_scope", NOTION_PROVIDER, void 0, {
+      return buildConnectorErrorResult("insufficient_scope", NOTION_PROVIDER, {
         required: readString(json, "required")
       });
     case "upstream_unavailable":
       return buildConnectorErrorResult("upstream_unavailable", NOTION_PROVIDER);
     default:
-      return buildConnectorErrorResult(
-        "connector_not_connected",
-        NOTION_PROVIDER,
-        readString(json, "connect_url")
-      );
+      return buildConnectorErrorResult("connector_not_connected", NOTION_PROVIDER);
   }
 }
 function proxyRunner(callMcp) {
@@ -2732,6 +2704,34 @@ async function callNotionMCPTool(accessToken, toolName, args) {
   return callMCPTool(accessToken, toolName, args);
 }
 
+// src/lib/logger.ts
+var consoleLogger = {
+  debug: console.log.bind(console),
+  info: console.info.bind(console),
+  warn: console.warn.bind(console),
+  error: console.error.bind(console)
+};
+var LOGGER_STATE_KEY = /* @__PURE__ */ Symbol.for("@anuma/sdk/logger/v1");
+var loggerGlobal = globalThis;
+var fallbackLoggerState = { logger: consoleLogger };
+var fallbackWarned = false;
+function getLoggerState() {
+  try {
+    return loggerGlobal[LOGGER_STATE_KEY] ?? (loggerGlobal[LOGGER_STATE_KEY] = fallbackLoggerState);
+  } catch {
+    if (!fallbackWarned) {
+      fallbackWarned = true;
+      fallbackLoggerState.logger.warn(
+        "@anuma/sdk: the global object rejects new properties. This entrypoint keeps its own logger, so setLogger does not reach other entrypoints."
+      );
+    }
+    return fallbackLoggerState;
+  }
+}
+function getLogger() {
+  return getLoggerState().logger;
+}
+
 // src/tools/github.ts
 var GITHUB_API = "https://api.github.com";
 var FETCH_TIMEOUT_MS = 3e4;
@@ -2975,13 +2975,13 @@ function maybeConnectorError(status) {
 function connectorMintErrorToToolResult(err, provider) {
   switch (err.code) {
     case "connector_not_connected":
-      return buildConnectorErrorResult("connector_not_connected", err.provider, err.connectUrl);
+      return buildConnectorErrorResult("connector_not_connected", err.provider);
     case "scope_not_covered":
-      return buildConnectorErrorResult("scope_not_covered", err.provider, err.connectUrl, {
+      return buildConnectorErrorResult("scope_not_covered", err.provider, {
         missingScopes: err.missingScopes
       });
     case "insufficient_scope":
-      return buildConnectorErrorResult("insufficient_scope", provider, void 0, {
+      return buildConnectorErrorResult("insufficient_scope", provider, {
         required: err.required
       });
     case "upstream_unavailable":
@@ -3724,7 +3724,7 @@ function maybeConnectorError4(status, body) {
     return buildConnectorErrorResult("connector_not_connected", SLACK_PROVIDER);
   }
   if (body && body.ok === false && body.error === "missing_scope") {
-    return buildConnectorErrorResult("insufficient_scope", SLACK_PROVIDER, void 0, {
+    return buildConnectorErrorResult("insufficient_scope", SLACK_PROVIDER, {
       required: body.needed
     });
   }