@belonguniverseai/react-sdk 0.6.6 → 0.6.7

package/dist/components/connectors/connector-form.d.ts

@@ -0,0 +1,247 @@
+import { ConnectorAuthInput, ConnectorCredentialInput, ConnectorTransport } from '../../api/connectors.ts';
+/** The two transports, in menu order — the default first. */
+export declare const CONNECTOR_TRANSPORTS: readonly ConnectorTransport[];
+/** What a connector is reached with unless the user says otherwise. Nearly
+ *  every server published today speaks it; SSE is the older one. */
+export declare const DEFAULT_CONNECTOR_TRANSPORT: ConnectorTransport;
+export declare const isConnectorTransport: (value: string) => value is ConnectorTransport;
+export declare const MAX_CONNECTOR_NAME_CHARS = 100;
+export declare const MAX_CONNECTOR_DESCRIPTION_CHARS = 500;
+export declare const MAX_CONNECTOR_EMOJI_CHARS = 16;
+export declare const MAX_CONNECTOR_SERVER_URL_CHARS = 2048;
+export declare const MAX_CONNECTOR_HEADER_ROWS = 16;
+export declare const MAX_CONNECTOR_OAUTH_CLIENT_ID_CHARS = 256;
+export declare const MAX_CONNECTOR_OAUTH_CLIENT_SECRET_CHARS = 2048;
+export declare const MAX_CONNECTOR_OAUTH_SCOPE_CHARS = 1024;
+export declare const MAX_CONNECTOR_OAUTH_PARAM_ROWS = 10;
+export declare const MAX_CONNECTOR_OAUTH_PARAM_VALUE_CHARS = 512;
+export declare const MAX_CONNECTOR_TOKEN_ENDPOINT_CHARS = 2048;
+/**
+ * One row of the custom-headers editor. Rows are ORDERED and may be blank —
+ * the editor always keeps a row to type into.
+ *
+ * `id` is the row's REACT identity, not data: rows are added, removed from the
+ * middle and retyped, and keying them by array index makes React reuse the
+ * wrong input's DOM node (the value you typed follows the row above the one
+ * you deleted). It never reaches the wire — `validateConnectorAuth` builds the
+ * header map from `name`/`value` alone.
+ */
+export type ConnectorHeaderRow = {
+    readonly id: string;
+    readonly name: string;
+    readonly value: string;
+};
+/**
+ * One row of the extra-sign-in-settings editor. Same three fields as a header
+ * row and same reason for each of them (see above) — a separate type because
+ * the two editors bound their names and values differently, and a shared alias
+ * would invite validating one with the other's rules.
+ */
+export type ConnectorParamRow = {
+    readonly id: string;
+    readonly name: string;
+    readonly value: string;
+};
+/**
+ * The credential half of the form, as the dialog holds it in state.
+ *
+ * `oauth` is the odd one out and stays that way on purpose: every field is
+ * OPTIONAL and all-empty is the ordinary case, because there is no credential
+ * to type — signing in happens at the provider. They exist for the minority of
+ * apps that hand you an id and a secret to paste, or that insist on being asked
+ * for particular permissions, and they live behind a disclosure so the common
+ * path stays one choice in a menu.
+ *
+ * `oauth_client_credentials` is the opposite: its id and secret are REQUIRED,
+ * because they are the whole credential. It behaves like `bearer` — typed once,
+ * used immediately, replaced through Edit.
+ */
+export type ConnectorAuthDraft = {
+    readonly mode: "none";
+} | {
+    readonly mode: "bearer";
+    readonly token: string;
+} | {
+    readonly mode: "headers";
+    readonly rows: readonly ConnectorHeaderRow[];
+} | {
+    readonly mode: "oauth";
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly scope: string;
+    readonly params: readonly ConnectorParamRow[];
+} | {
+    readonly mode: "oauth_client_credentials";
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly tokenEndpoint: string;
+    readonly scope: string;
+};
+export type ConnectorAuthDraftMode = ConnectorAuthDraft["mode"];
+export type ConnectorFormDraft = {
+    readonly name: string;
+    readonly description: string;
+    readonly emoji: string;
+    readonly serverUrl: string;
+    /** Never validated, only carried: both members are legal, and the edit form
+     *  passes the STORED one straight back through (it cannot be changed). */
+    readonly transport: ConnectorTransport;
+    readonly auth: ConnectorAuthDraft;
+};
+/**
+ * What is wrong with the draft. A discriminated union rather than a message
+ * string so the copy lives in the i18n catalog and this module stays
+ * translatable — and so a new rule mechanically fails every `match` on it.
+ */
+export type ConnectorFormProblem = {
+    readonly kind: "name_empty";
+} | {
+    readonly kind: "name_too_long";
+} | {
+    readonly kind: "description_too_long";
+} | {
+    readonly kind: "emoji_too_long";
+} | {
+    readonly kind: "url_empty";
+} | {
+    readonly kind: "url_too_long";
+}
+/** Not a URL at all, or a scheme we could never dispatch (`file:`, `javascript:`). */
+ | {
+    readonly kind: "url_invalid";
+} | {
+    readonly kind: "token_empty";
+}
+/** A row with a value typed but no header name. */
+ | {
+    readonly kind: "header_name_empty";
+} | {
+    readonly kind: "header_name_invalid";
+    readonly name: string;
+} | {
+    readonly kind: "header_name_duplicate";
+    readonly name: string;
+} | {
+    readonly kind: "header_value_newline";
+    readonly name: string;
+} | {
+    readonly kind: "header_rows_exceeded";
+    readonly maxCount: number;
+}
+/** A secret typed with no id. Both blank is fine; a secret alone is a paste
+ *  that went wrong, and the server refuses it too. */
+ | {
+    readonly kind: "oauth_client_id_missing";
+} | {
+    readonly kind: "oauth_client_id_too_long";
+} | {
+    readonly kind: "oauth_client_secret_too_long";
+}
+/** Not a permissions line the app could be asked for — a stray quote, a tab,
+ *  or two spaces where one word was meant. */
+ | {
+    readonly kind: "oauth_scope_invalid";
+} | {
+    readonly kind: "oauth_scope_too_long";
+}
+/** A setting with a value typed but no name. */
+ | {
+    readonly kind: "oauth_param_name_empty";
+} | {
+    readonly kind: "oauth_param_name_invalid";
+    readonly name: string;
+}
+/** A name the sign-in address already uses for something of its own. */
+ | {
+    readonly kind: "oauth_param_name_reserved";
+    readonly name: string;
+} | {
+    readonly kind: "oauth_param_name_duplicate";
+    readonly name: string;
+} | {
+    readonly kind: "oauth_param_value_newline";
+    readonly name: string;
+} | {
+    readonly kind: "oauth_param_value_too_long";
+    readonly name: string;
+} | {
+    readonly kind: "oauth_params_exceeded";
+    readonly maxCount: number;
+}
+/** The service credential's two required halves. Unlike the sign-in mode's,
+ *  these ARE the credential, so neither may be left blank. */
+ | {
+    readonly kind: "cc_client_id_missing";
+} | {
+    readonly kind: "cc_client_id_too_long";
+} | {
+    readonly kind: "cc_client_secret_missing";
+} | {
+    readonly kind: "cc_client_secret_too_long";
+} | {
+    readonly kind: "cc_token_endpoint_invalid";
+} | {
+    readonly kind: "cc_token_endpoint_too_long";
+}
+/** Re-signing in is the Connect action, not a field on the edit form. */
+ | {
+    readonly kind: "oauth_not_replaceable";
+};
+/** The normalized payload a valid draft submits — trimmed, with blank header
+ *  rows dropped and the emoji omitted (not empty-stringed) when unset. */
+export type ConnectorFormValues = {
+    readonly name: string;
+    readonly description: string;
+    readonly emoji?: string;
+    readonly serverUrl: string;
+    readonly transport: ConnectorTransport;
+    readonly auth: ConnectorAuthInput;
+};
+export type ConnectorFormValidation = {
+    readonly kind: "ok";
+    readonly values: ConnectorFormValues;
+} | {
+    readonly kind: "invalid";
+    readonly problem: ConnectorFormProblem;
+};
+/** The auth half's own verdict, for the CREATE form (OAuth included). */
+export type ConnectorAuthValidation = {
+    readonly kind: "ok";
+    readonly value: ConnectorAuthInput;
+} | {
+    readonly kind: "invalid";
+    readonly problem: ConnectorFormProblem;
+};
+/** The narrower verdict the EDIT dialog needs — a credential it can replace. */
+export type ConnectorCredentialValidation = {
+    readonly kind: "ok";
+    readonly value: ConnectorCredentialInput;
+} | {
+    readonly kind: "invalid";
+    readonly problem: ConnectorFormProblem;
+};
+/**
+ * The server's ORIGIN, for showing a user which host they pointed at without
+ * echoing a path or query back (either can carry a token). Falls back to the
+ * raw string when it does not parse — a value we cannot read is still a value
+ * the user typed and may need to recognise.
+ */
+export declare const connectorServerOrigin: (serverUrl: string) => string;
+/** Validate the auth half alone. Accepts every mode the CREATE form offers. */
+export declare const validateConnectorAuth: (auth: ConnectorAuthDraft) => ConnectorAuthValidation;
+/**
+ * Validate a credential the EDIT dialog can actually replace.
+ *
+ * `oauth` is refused rather than accepted-and-ignored: re-signing in is the
+ * Connect action, and a save button that silently did nothing would be worse
+ * than a sentence saying where the control is. The edit dialog does not offer
+ * the mode, so this is the belt to that braces — and it keeps the patch's type
+ * honest instead of widening it to a shape the server refuses.
+ *
+ * A SERVICE credential passes, and has to: an app that stopped honouring an id
+ * and secret has no window to send anyone to, so typing the new pair here is
+ * the whole recovery.
+ */
+export declare const validateConnectorCredential: (auth: ConnectorAuthDraft) => ConnectorCredentialValidation;
+/** Validate the whole add-a-connector form. */
+export declare const validateConnectorForm: (draft: ConnectorFormDraft) => ConnectorFormValidation;

package/dist/components/connectors/portal-theme.d.ts

@@ -0,0 +1,8 @@
+import { CSSProperties } from 'react';
+export type PortalTheme = {
+    /** Spread onto the portaled content element. */
+    readonly style: CSSProperties;
+    /** `"dark"` when the dock is dark, so Tailwind's `.dark` variants apply. */
+    readonly className: string | undefined;
+};
+export declare const usePortalTheme: () => PortalTheme;

package/dist/components/connectors/product-name.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The product name the connector copy says out loud — "Simetrik" on the tenant
+ * preset, "Belong" by default, or whatever a host pushed with
+ * `belong.setTheme({ brand })`.
+ *
+ * The same value `app.openAssistant` and `embed.agentWorking` interpolate, read
+ * from the same live store; the connector surfaces need it because they are
+ * PROPLESS (see `ConnectorsListSurface`'s module doc) and cannot be handed the
+ * theme the way `EmbedLogin` is. Lives in a plain `.ts` module for the reason
+ * `portal-theme.ts` does — the component files stay clean React Fast Refresh
+ * boundaries.
+ *
+ * Why the name is in the copy at all: "connect an app so the agent can act on
+ * your data" is a sentence a user cannot weigh, because "the agent" is not
+ * anything they signed up for. The brand is (§42 — name the product).
+ */
+export declare const useProductName: () => string;

package/dist/components/connectors/use-connector-oauth.d.ts

@@ -0,0 +1,28 @@
+import { ConnectorNotice } from './connector-copy.ts';
+export type ConnectorOAuthPhase = {
+    readonly kind: "idle";
+}
+/** The server is discovering the provider; nothing is on screen yet. */
+ | {
+    readonly kind: "starting";
+} | {
+    readonly kind: "waiting";
+    readonly connectorId: string;
+    /** Rendered as a link when the popup did not open. */
+    readonly authorizationUrl: string;
+    readonly popupBlocked: boolean;
+} | {
+    readonly kind: "done";
+    readonly connectorId: string;
+} | {
+    readonly kind: "failed";
+    readonly notice: ConnectorNotice;
+};
+export type ConnectorOAuthConnect = {
+    readonly phase: ConnectorOAuthPhase;
+    /** Start (or restart) the flow for one connector. */
+    readonly connect: (connectorId: string) => Promise<void>;
+    /** Back to `idle` — what a dialog calls when it reopens. */
+    readonly reset: () => void;
+};
+export declare const useConnectorOAuthConnect: () => ConnectorOAuthConnect;

package/dist/components/embed/EmbedRail.d.ts

@@ -7,7 +7,7 @@ import { BelongTheme, BelongThemePalette, PresetName } from '../../types/public.
  *  two must carry the SAME members: this one is what the chrome renders, that
  *  one is what the router and localStorage persist, and a view present in only
  *  one of them is a view you can reach but not come back to after a reload. */
-export type EmbedView = "chat" | "files" | "scheduled" | "prompts";
+export type EmbedView = "chat" | "files" | "scheduled" | "prompts" | "connectors";
 /**
  * 52px rail. Top: user avatar (account + theme controls). Middle: Chat /
  * Files nav (active = Ocean primary fill, brand-driven). Bottom
@@ -15,7 +15,7 @@ export type EmbedView = "chat" | "files" | "scheduled" | "prompts";
  * expand-to-modal — then the collapse toggle. Active fill + brand colours come
  * from `palette` so a host brand push re-themes everything.
  */
-export declare function EmbedRail({ view, collapsed, user, theme, palette, sessions, activeId, planProgress, speakEnabled, ttsSupported, voiceSupported, voiceStatus, pendingVoiceDraft, voiceActionFlash, accent, cssVars, presets, activePreset, onSelectView, onToggleCollapse, onToggleMode, onToggleSide, onAccentChange, onAccentReset, onCssVarsChange, onApplyPreset, onLogout, onNewSession, onSelectSession, onSelectAgentLine, onCloseAgentLine, onDeleteSession, onRenameSession, onSessionsOpen, onViewStats, onToggleSpeak, onExpand, }: {
+export declare function EmbedRail({ view, collapsed, user, theme, palette, sessions, activeId, planProgress, speakEnabled, ttsSupported, voiceSupported, voiceStatus, pendingVoiceDraft, voiceActionFlash, accent, cssVars, presets, activePreset, onSelectView, onToggleCollapse, onToggleMode, onToggleSide, onAccentChange, onAccentReset, onCssVarsChange, onApplyPreset, onLogout, onNewSession, onSelectSession, onSelectAgentLine, onCloseAgentLine, onDeleteSession, onRenameSession, onSessionsOpen, onViewStats, onToggleSpeak, onExpand, connectorsUnavailable, }: {
     view: EmbedView;
     collapsed: boolean;
     user: string | null;
@@ -86,4 +86,16 @@ export declare function EmbedRail({ view, collapsed, user, theme, palette, sessi
     onViewStats?: (sessionId: string) => void;
     onToggleSpeak: () => void;
     onExpand: () => void;
+    /**
+     * This deployment answered "the connectors feature is off here" — the rail
+     * then hides the Connectors entry entirely, because a surface that can only
+     * ever say "unavailable" is worse than no entry at all.
+     *
+     * Optional and defaulting to FALSE so the entry shows OPTIMISTICALLY: the
+     * dock's list query is still in flight on first paint, and a rail item that
+     * pops in a second late reads as a glitch. Only a resolved `featureAbsent`
+     * (404, or a 503 whose body is `connectors_disabled`) flips this — an
+     * ordinary outage keeps the entry, and the surface shows its retry state.
+     */
+    connectorsUnavailable?: boolean;
 }): import("react").JSX.Element;

package/dist/components/embed/rail-flags.d.ts

@@ -40,3 +40,17 @@ export declare const MULTI_AGENT_RAIL_ENABLED = true;
  * back with no other change.
  */
 export declare const VOICE_CALL_BUTTON_ENABLED = false;
+/**
+ * The Connectors tab in the MOBILE bottom nav bar (the desktop rail entry is
+ * always on — it is only gated by whether the deployment has the feature).
+ *
+ * `false` on purpose: the bar is AT CAPACITY. `MobileNavBar`'s own comment
+ * measures it — BEL-259's fourth tab already took the row to 7 cells (8 with
+ * the dial button), which at 375px in Spanish overflows into a horizontal
+ * scroller, and a fifth view tab pushes the sessions switcher and the close
+ * chevron further behind a swipe the user has no reason to attempt. Connectors
+ * is a set-up-once surface; a phone is where you USE what you connected, not
+ * where you register an app. Flip to `true` once the bar is re-thought (an
+ * overflow "More" cell), and the tab appears with no other change.
+ */
+export declare const CONNECTORS_MOBILE_TAB_ENABLED = false;

package/dist/embed/dock-state.d.ts

@@ -5,7 +5,7 @@
  * in the stream-state store; this module owns only view + size. Best-effort:
  * disabled/quota'd storage just means no cross-reload restore.
  */
-export type DockView = "chat" | "files" | "scheduled" | "prompts";
+export type DockView = "chat" | "files" | "scheduled" | "prompts" | "connectors";
 export type DockSize = "collapsed" | "expanded" | "modal";
 export type DockState = {
     readonly view: DockView;

package/dist/i18n/messages/en.d.ts

@@ -294,6 +294,7 @@ export declare const en: {
         readonly navFiles: "Files";
         readonly navScheduled: "Scheduled";
         readonly navPrompts: "Prompts";
+        readonly navConnectors: "Connectors";
         readonly chatPlanRunning: "Chat — plan running, {{completed}} of {{total}} steps done";
         readonly devMode: "Dev mode";
         readonly devModeTitle: "Dev mode (belong:dev)";
@@ -397,6 +398,159 @@ export declare const en: {
         readonly micMuted: "Mic muted";
         readonly agentWorking: "{{name}} is working…";
     };
+    readonly connectors: {
+        readonly viewTitle: "Connectors";
+        readonly subtitle: "Connect services so {{product}} can access and act on your data";
+        readonly searchPlaceholder: "Search your connectors";
+        readonly loading: "Loading your connectors…";
+        readonly loadError: "Couldn't load your connectors.";
+        readonly unavailable: "Connecting your own apps isn't turned on here.";
+        readonly noResults: "No connectors match “{{q}}”.";
+        readonly empty: "No connected apps yet.";
+        readonly emptyHint: "Connect your tools so the agent can use them in your tasks.";
+        readonly add: "Add connector";
+        readonly actionsMenu: "Connector actions";
+        readonly edit: "Edit";
+        readonly refresh: "Refresh";
+        readonly refreshing: "Refreshing…";
+        readonly turnOn: "Turn on";
+        readonly turnOff: "Turn off";
+        readonly delete: "Delete";
+        readonly close: "Close";
+        readonly cancel: "Cancel";
+        readonly toolsCount_one: "{{count}} tool";
+        readonly toolsCount_other: "{{count}} tools";
+        readonly statusConnected: "Connected";
+        readonly needsAttention: "Needs attention";
+        readonly statusError: "Couldn't connect";
+        readonly statusOff: "Off";
+        readonly enabledLabel: "Available to the agent";
+        readonly addTitle: "Add custom connector";
+        readonly addDescription: "Connect {{product}} to external apps.";
+        readonly editTitle: "Edit connector";
+        readonly nameLabel: "Name";
+        readonly namePlaceholder: "My App";
+        readonly descriptionLabel: "Description (optional)";
+        readonly descriptionPlaceholder: "A brief description of your connector";
+        readonly emojiLabel: "Icon (optional)";
+        readonly emojiPlaceholder: "🔗";
+        readonly urlLabel: "MCP server URL";
+        readonly urlPlaceholder: "https://example.com/mcp";
+        readonly urlHint: "From the app's own setup page. This can't be changed later.";
+        readonly urlFixed: "The address can't be changed. Add a new connector to point somewhere else.";
+        readonly advanced: "Advanced";
+        readonly authLabel: "Authentication";
+        readonly authNone: "No authentication";
+        readonly authOAuth: "Sign in through the app";
+        readonly authBearer: "Access token";
+        readonly authHeaders: "Custom headers";
+        readonly authClientCredentials: "Service credentials";
+        readonly oauthHint: "You'll sign in on the app's own page. Nothing to type here.";
+        readonly oauthAppCredentials: "I was given app credentials";
+        readonly oauthAppCredentialsHint: "Only if the app asked you to register it and gave you an ID. Most apps don't.";
+        readonly oauthClientId: "Client ID";
+        readonly oauthClientSecret: "Client Secret";
+        readonly oauthScope: "Permissions (optional)";
+        readonly oauthScopePlaceholder: "read write";
+        readonly oauthScopeHint: "Only if the app told you exactly what to ask for. Separate them with spaces.";
+        readonly oauthParams: "Extra settings (optional)";
+        readonly oauthParamsHint: "Only if the app's setup page told you to add them.";
+        readonly oauthParamNamePlaceholder: "Setting";
+        readonly oauthParamValuePlaceholder: "Value";
+        readonly addOAuthParam: "Add setting";
+        readonly removeOAuthParam: "Remove setting";
+        readonly ccHint: "Use the ID and secret the app issued. You won't be asked to sign in.";
+        readonly ccTokenEndpoint: "Token URL (optional)";
+        readonly ccTokenEndpointPlaceholder: "https://example.com/token";
+        readonly ccTokenEndpointHint: "Only if the app gave you one. Otherwise we find it from the address above.";
+        readonly ccNeedsCredentials: "This app stopped accepting the saved credentials. Edit this connector and enter them again.";
+        readonly transportLabel: "Transport";
+        readonly transportStreamableHttp: "Streamable HTTP";
+        readonly transportSse: "SSE";
+        readonly connect: "Connect";
+        readonly connectStarting: "Opening the app…";
+        readonly connectWaiting: "Waiting for you to finish signing in…";
+        readonly connectPopupBlocked: "Your browser blocked the sign-in window.";
+        readonly connectOpenManually: "Open the sign-in page";
+        readonly tokenLabel: "Access token";
+        readonly tokenPlaceholder: "Paste the token from the app";
+        readonly headerNamePlaceholder: "Header";
+        readonly headerValuePlaceholder: "Value";
+        readonly addHeader: "Add header";
+        readonly removeHeader: "Remove header";
+        readonly replaceCredentials: "Replace credentials";
+        readonly replaceCredentialsHint: "Saved credentials are never shown again. Enter them to replace them.";
+        readonly risk: "I understand custom connectors can introduce risks.";
+        readonly riskDetail: "{{product}} can't verify this app or guarantee answer quality, so only use connectors from sources you trust.";
+        readonly submitAdd: "Add";
+        readonly submitAdding: "Adding…";
+        readonly submitSave: "Save changes";
+        readonly submitSaving: "Saving…";
+        readonly toolsTitle: "Tools";
+        readonly toolsEmpty: "This app didn't offer any tools.";
+        readonly toolToggle: "Use {{tool}}";
+        readonly refusedTitle_one: "One tool was skipped";
+        readonly refusedTitle_other: "{{count}} tools were skipped";
+        readonly errorNameEmpty: "Give this connector a name.";
+        readonly errorNameTooLong: "That name is too long.";
+        readonly errorDescriptionTooLong: "That description is too long.";
+        readonly errorEmojiTooLong: "Use a single emoji.";
+        readonly errorUrlEmpty: "Add the MCP server URL.";
+        readonly errorUrlInvalid: "That doesn't look like a web address — it should start with https://.";
+        readonly errorUrlTooLong: "That address is too long.";
+        readonly errorTokenEmpty: "Paste the access token.";
+        readonly errorHeaderNameEmpty: "Name every header you filled in.";
+        readonly errorHeaderNameInvalid: "“{{name}}” isn't a valid header name — use letters, numbers and dashes.";
+        readonly errorHeaderNameDuplicate: "“{{name}}” is listed twice.";
+        readonly errorHeaderValueNewline: "The value for “{{name}}” can't contain line breaks.";
+        readonly errorHeaderRowsExceeded: "You can add up to {{maxCount}} headers.";
+        readonly errorOAuthClientIdMissing: "Add the Client ID that goes with that secret.";
+        readonly errorOAuthClientIdTooLong: "That Client ID is too long.";
+        readonly errorOAuthClientSecretTooLong: "That Client Secret is too long.";
+        readonly errorOAuthScopeInvalid: "Use single spaces between permissions, and no quotes.";
+        readonly errorOAuthScopeTooLong: "That list of permissions is too long.";
+        readonly errorOAuthParamNameEmpty: "Name every setting you filled in.";
+        readonly errorOAuthParamNameInvalid: "“{{name}}” isn't a valid setting name — use lowercase letters, numbers and underscores.";
+        readonly errorOAuthParamNameReserved: "“{{name}}” is used by the sign-in itself — pick another name.";
+        readonly errorOAuthParamNameDuplicate: "“{{name}}” is listed twice.";
+        readonly errorOAuthParamValueNewline: "The value for “{{name}}” can't contain line breaks.";
+        readonly errorOAuthParamValueTooLong: "The value for “{{name}}” is too long.";
+        readonly errorOAuthParamsExceeded: "You can add up to {{maxCount}} settings.";
+        readonly errorCcClientIdMissing: "Add the Client ID the app gave you.";
+        readonly errorCcClientSecretMissing: "Add the Client Secret the app gave you.";
+        readonly errorCcTokenEndpointInvalid: "That doesn't look like a web address — it should start with https://.";
+        readonly errorCcTokenEndpointTooLong: "That address is too long.";
+        readonly errorOAuthNotReplaceable: "To sign in again, use Connect on the connector itself.";
+        readonly errorNameTaken: "You already have a connector whose tools are named “{{alias}}”. Pick another name.";
+        readonly errorInvalidName: "That name can't be used — include some letters or numbers.";
+        readonly errorLimitReached: "You've reached the limit of {{maxCount}} connectors. Remove one to add another.";
+        readonly errorUrlBlocked: "That address can't be used.";
+        readonly errorToolBudget: "That app offers more tools than there's room for.";
+        readonly errorDiscoveryUnreachable: "We couldn't reach that address.";
+        readonly errorDiscoveryTimeout: "The server took too long to answer.";
+        readonly errorDiscoveryProtocol: "That address doesn't speak the connector protocol.";
+        readonly errorDiscoveryUnauthorized: "The app refused the credentials this connector uses. Update them and try again.";
+        readonly errorDiscoveryDrifted: "That app's tools changed while we were reading them — try again.";
+        readonly errorNeedsAuth: "This connector has to be reconnected before it can refresh.";
+        readonly errorCredentialsUnreadable: "We can't read the saved credentials any more — enter them again.";
+        readonly errorForbidden: "You don't have permission to change connectors here.";
+        readonly errorUnavailable: "Connectors aren't available right now.";
+        readonly errorSaveFailed: "Couldn't save — try again.";
+        readonly errorRefreshFailed: "Couldn't refresh — try again.";
+        readonly errorGone: "That connector is no longer there.";
+        readonly errorWrongAuthMode: "This connector doesn't sign in — it already has its credentials.";
+        readonly errorOAuthDiscovery: "That app doesn't offer a sign-in we can use.";
+        readonly errorOAuthNoApp: "That app needs credentials before it can sign you in. Add them and try again.";
+        readonly errorOAuthUnavailable: "Signing in through an app isn't set up here.";
+        readonly errorOAuthAbandoned: "The sign-in window closed before it finished.";
+        readonly errorOAuthTimedOut: "The sign-in took too long. Try again.";
+        readonly errorOAuthFailed: "Couldn't start the sign-in — try again.";
+        readonly errorOAuthUnsupported: "This app doesn't offer a sign-in service here. Paste the Token URL from the app's setup page.";
+        readonly errorOAuthTokenFailed: "The app refused those credentials.";
+        readonly deleteConfirmTitle: "Delete {{name}}?";
+        readonly deleteConfirmBody: "The agent will lose access to its tools. This can't be undone.";
+        readonly deleteConfirm: "Delete connector";
+    };
     readonly app: {
         readonly uploadNoWorkspace: "Open the terminal once so your workspace exists, then upload.";
         readonly uploadTooLarge: "{{name}} is too large (max 25 MB).";