@nimbus-dev/connectors 0.2.1 → 0.2.3

package/connectors/vertex-ai/src/tools.ts

@@ -1,19 +1,22 @@
 import { z } from "zod";
+import {
+  cliArg,
+  createCliJsonRunner,
+  gcloudProjectArgs,
+  isRecord,
+  strField,
+} from "../../../shared/cli-json-kit.ts";
 import { mcpJsonResult as jsonResult } from "../../../shared/mcp-tool-kit.ts";
 import { nimbusSpawn } from "../../../shared/nimbus-spawn.ts";
 import type { ZodToolRegistrar } from "../../../shared/run-read-only-mcp-connector.ts";
 import { isSafeCliArg } from "../../../shared/safe-cli-arg.ts";
 
 /**
- * A value passed to the `gcloud ai` CLI (a Vertex AI region like `us-central1`
- * or a model id). Rejected at the schema boundary if it begins with `-` (argv
- * flag smuggling) or contains control characters. Exported so the contract test
- * can assert the guard rejects a `-`-prefixed value.
+ * The argv-injection guard every value passed to the `gcloud ai` CLI (a Vertex AI region like
+ * `us-central1`, or a model id) goes through. Re-exported so this connector's own test can assert
+ * the guard rejects a `-`-prefixed value.
  */
-export const cliArg = z
-  .string()
-  .min(1)
-  .refine(isSafeCliArg, { message: 'must not start with "-" or contain control characters' });
+export { cliArg };
 
 /**
  * GCP Vertex AI (Tier-3, no-row-data) MCP tool surface. ALL tools index Vertex
@@ -32,25 +35,10 @@ export const VERTEX_AI_TOOL_NAMES = [
 
 const DEFAULT_REGION = "us-central1";
 
-function isRecord(v: unknown): v is Record<string, unknown> {
-  return v !== null && typeof v === "object" && !Array.isArray(v);
-}
-
-function strField(r: Record<string, unknown>, key: string): string {
-  const v = r[key];
-  return typeof v === "string" ? v : "";
-}
-
 function asArray(parsed: unknown): unknown[] {
   return Array.isArray(parsed) ? parsed : [];
 }
 
-/** The configured GCP project id, if `GOOGLE_CLOUD_PROJECT` is set at spawn. */
-function projectArgs(): string[] {
-  const project = process.env["GOOGLE_CLOUD_PROJECT"]?.trim();
-  return project !== undefined && project !== "" ? ["--project", project] : [];
-}
-
 /**
  * Resolve the Vertex AI region: an explicit tool argument wins, else the
  * `VERTEX_AI_REGION` env injected at spawn, else `us-central1`. The result is a
@@ -69,21 +57,23 @@ function resolveRegion(explicit?: string): string {
  * spawn time. The `<region>` is `isSafeCliArg`-guarded before use (argv flag
  * smuggling). Throws on non-zero exit.
  */
+const runGcloudAi = createCliJsonRunner(
+  {
+    // The region has already been guarded by the caller below; everything else
+    // is a literal or a schema-validated argument.
+    argv: (args) => ["gcloud", "ai", ...args],
+    label: "gcloud ai",
+    emptyResult: [],
+  },
+  nimbusSpawn,
+);
+
 async function gcloudAi(args: string[], region: string): Promise<unknown> {
   const regionPreview = region.slice(0, 64);
   if (!isSafeCliArg(region)) {
     throw new Error(`Invalid region: ${regionPreview}`);
   }
-  const { code, stdout, stderr } = await nimbusSpawn(
-    ["gcloud", "ai", ...args, "--region", region, ...projectArgs(), "--format", "json"],
-    {},
-  );
-  const out = stdout.trim();
-  const err = stderr.trim();
-  if (code !== 0) {
-    throw new Error(`gcloud ai ${args[0] ?? ""} failed: ${err.slice(0, 400)}`);
-  }
-  return out === "" ? [] : (JSON.parse(out) as unknown);
+  return runGcloudAi([...args, "--region", region, ...gcloudProjectArgs(), "--format", "json"]);
 }
 
 function modelMatches(entry: unknown, q: string): boolean {

package/connectors/wiz/src/search-filter.ts

@@ -1,49 +1,25 @@
 import {
   asObjectish,
   makeQueryFilter,
+  nestedString,
+  objectNamesText,
   type SearchMatchOptions,
   stringField,
 } from "../../../shared/search-filter.ts";
 
 export type WizSearchMatchOptions = SearchMatchOptions;
 
-function nestedString(row: Record<string, unknown>, parent: string, key: string): string {
-  const p = row[parent];
-  if (p === null || typeof p !== "object") {
-    return "";
-  }
-  return stringField(p as Record<string, unknown>, key);
-}
-
-function projectNames(row: Record<string, unknown>): string {
-  const projects = row["projects"];
-  if (!Array.isArray(projects)) {
-    return "";
-  }
-  const names: string[] = [];
-  for (const p of projects) {
-    if (p === null || typeof p !== "object") {
-      continue;
-    }
-    const name = stringField(p as Record<string, unknown>, "name");
-    if (name !== "") {
-      names.push(name);
-    }
-  }
-  return names.join(" ");
-}
-
 function fieldsOf(item: unknown): readonly string[] | null {
   const row = asObjectish(item);
   if (row === undefined) {
     return null;
   }
   return [
-    nestedString(row, "sourceRule", "name"),
+    nestedString(row, ["sourceRule", "name"]),
     stringField(row, "description"),
-    nestedString(row, "entity", "name"),
-    nestedString(row, "entity", "type"),
-    projectNames(row),
+    nestedString(row, ["entity", "name"]),
+    nestedString(row, ["entity", "type"]),
+    objectNamesText(row, "projects"),
   ];
 }
 

package/connectors/wiz/src/server.ts

@@ -1,192 +1,6 @@
-import { z } from "zod";
-
-import { searchToolInputSchema } from "../../../shared/mcp-search-tool.ts";
-import { mcpJsonResult as jsonResult } from "../../../shared/mcp-tool-kit.ts";
 import { runReadOnlyMcpConnector } from "../../../shared/run-read-only-mcp-connector.ts";
-import { filterWizIssues } from "./search-filter.ts";
-
-const DEFAULT_API = "https://api.app.wiz.io/graphql";
-const DEFAULT_AUTH = "https://auth.app.wiz.io/oauth/token";
-const SEVERITIES = ["INFORMATIONAL", "LOW", "MEDIUM", "HIGH", "CRITICAL"] as const;
-const STATUSES = ["OPEN", "IN_PROGRESS", "RESOLVED", "REJECTED"] as const;
-
-function apiUrl(): string {
-  const v = process.env["WIZ_API_URL"]?.trim();
-  return v === undefined || v === "" ? DEFAULT_API : v;
-}
-
-function authUrl(): string {
-  const v = process.env["WIZ_AUTH_URL"]?.trim();
-  return v === undefined || v === "" ? DEFAULT_AUTH : v;
-}
-
-async function fetchAccessToken(): Promise<string> {
-  const clientId = process.env["WIZ_CLIENT_ID"]?.trim();
-  const clientSecret = process.env["WIZ_CLIENT_SECRET"]?.trim();
-  if (clientId === undefined || clientId === "") {
-    throw new Error("WIZ_CLIENT_ID is not set");
-  }
-  if (clientSecret === undefined || clientSecret === "") {
-    throw new Error("WIZ_CLIENT_SECRET is not set");
-  }
-  const body = new URLSearchParams({
-    grant_type: "client_credentials",
-    client_id: clientId,
-    client_secret: clientSecret,
-    audience: "wiz-api",
-  });
-  const res = await fetch(authUrl(), {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: body.toString(),
-  });
-  const text = await res.text();
-  if (!res.ok) {
-    throw new Error(`Wiz auth ${String(res.status)}: ${text.slice(0, 400)}`);
-  }
-  const parsed = JSON.parse(text) as { access_token?: string };
-  if (typeof parsed.access_token !== "string" || parsed.access_token === "") {
-    throw new Error("Wiz auth: missing access_token in response");
-  }
-  return parsed.access_token;
-}
-
-let cachedToken: string | undefined;
-async function getToken(): Promise<string> {
-  cachedToken ??= await fetchAccessToken();
-  return cachedToken;
-}
-
-async function wizGraphql<T>(query: string, variables: Record<string, unknown>): Promise<T> {
-  const token = await getToken();
-  const res = await fetch(apiUrl(), {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json",
-      Accept: "application/json",
-    },
-    body: JSON.stringify({ query, variables }),
-  });
-  const text = await res.text();
-  if (!res.ok) {
-    throw new Error(`Wiz ${String(res.status)}: ${text.slice(0, 400)}`);
-  }
-  const parsed = JSON.parse(text) as { data?: T; errors?: unknown };
-  if (parsed.errors !== undefined) {
-    throw new Error(`Wiz GraphQL error: ${JSON.stringify(parsed.errors).slice(0, 400)}`);
-  }
-  if (parsed.data === undefined) {
-    throw new Error("Wiz GraphQL: response missing `data` field");
-  }
-  return parsed.data;
-}
-
-const ISSUES_QUERY = `
-query Issues($first: Int!, $after: String, $filterBy: IssueFilters) {
-  issues(first: $first, after: $after, filterBy: $filterBy) {
-    nodes {
-      id
-      sourceRule { id name }
-      severity
-      status
-      type
-      createdAt
-      updatedAt
-      resolvedAt
-      description
-      remediation
-      entity { id name type }
-      projects { id name slug }
-    }
-    pageInfo { hasNextPage endCursor }
-  }
-}
-`;
-
-const SINGLE_ISSUE_QUERY = `
-query Issue($id: ID!) {
-  issue(id: $id) {
-    id
-    sourceRule { id name }
-    severity
-    status
-    type
-    createdAt
-    updatedAt
-    resolvedAt
-    description
-    remediation
-    entity { id name type }
-    projects { id name slug }
-  }
-}
-`;
-
-interface IssuesPage {
-  readonly issues: {
-    readonly nodes: readonly unknown[];
-    readonly pageInfo: { readonly hasNextPage: boolean; readonly endCursor: string | null };
-  };
-}
+import { registerWizTools } from "./tools.ts";
 
 await runReadOnlyMcpConnector("nimbus-wiz", (reg) => {
-  reg(
-    "wiz_list",
-    "List Wiz issues. Filters map to the `IssueFilters` GraphQL input — severity, status, and entity type are all optional. Defaults to open issues across all severities, capped at 100.",
-    z.object({
-      severity: z.array(z.enum(SEVERITIES)).min(1).optional(),
-      status: z.array(z.enum(STATUSES)).min(1).optional(),
-      entityType: z.string().min(1).optional(),
-      limit: z.number().int().min(1).max(500).optional(),
-    }),
-    async (p) => {
-      const filterBy: Record<string, unknown> = {};
-      filterBy["status"] = p.status ?? ["OPEN"];
-      if (p.severity !== undefined && p.severity.length > 0) {
-        filterBy["severity"] = p.severity;
-      }
-      if (p.entityType !== undefined) {
-        filterBy["entityType"] = p.entityType;
-      }
-      const data = await wizGraphql<IssuesPage>(ISSUES_QUERY, {
-        first: p.limit ?? 100,
-        after: null,
-        filterBy,
-      });
-      return jsonResult(data.issues);
-    },
-  );
-
-  reg(
-    "wiz_get",
-    "Fetch one Wiz issue by its id. Throws when no match is found.",
-    z.object({
-      issueId: z.string().min(1),
-    }),
-    async (p) => {
-      const data = await wizGraphql<{ issue: unknown }>(SINGLE_ISSUE_QUERY, {
-        id: p.issueId,
-      });
-      if (data.issue === null) {
-        throw new Error(`Wiz: issue ${p.issueId} not found`);
-      }
-      return jsonResult(data.issue);
-    },
-  );
-
-  reg(
-    "wiz_search",
-    "Substring search across open issues. Matches the query against `sourceRule.name`, `description`, `entity.name`, `entity.type`, and project names (case-insensitive). Returns a `{ matches: [...] }` envelope.",
-    searchToolInputSchema(200),
-    async (p) => {
-      const data = await wizGraphql<IssuesPage>(ISSUES_QUERY, {
-        first: 500,
-        after: null,
-        filterBy: { status: ["OPEN"] },
-      });
-      const matches = filterWizIssues(data.issues.nodes, { query: p.query, limit: p.limit });
-      return jsonResult({ matches });
-    },
-  );
+  registerWizTools(reg);
 });

package/connectors/wiz/src/tools.ts

@@ -0,0 +1,168 @@
+import { z } from "zod";
+import { createAccessTokenCache } from "../../../shared/access-token-cache.ts";
+import { optionalEnv, requiredEnv } from "../../../shared/env-json-api.ts";
+import { postGraphql } from "../../../shared/graphql-json.ts";
+import { searchToolInputSchema } from "../../../shared/mcp-search-tool.ts";
+import { mcpJsonResult as jsonResult } from "../../../shared/mcp-tool-kit.ts";
+import type { ZodToolRegistrar } from "../../../shared/run-read-only-mcp-connector.ts";
+import { filterWizIssues } from "./search-filter.ts";
+
+const DEFAULT_API = "https://api.app.wiz.io/graphql";
+const DEFAULT_AUTH = "https://auth.app.wiz.io/oauth/token";
+const SEVERITIES = ["INFORMATIONAL", "LOW", "MEDIUM", "HIGH", "CRITICAL"] as const;
+const STATUSES = ["OPEN", "IN_PROGRESS", "RESOLVED", "REJECTED"] as const;
+
+function apiUrl(): string {
+  return optionalEnv("WIZ_API_URL", DEFAULT_API);
+}
+
+function authUrl(): string {
+  return optionalEnv("WIZ_AUTH_URL", DEFAULT_AUTH);
+}
+
+/** OAuth2 client-credentials against the Wiz auth endpoint. */
+const getToken = createAccessTokenCache({
+  label: "Wiz auth",
+  exchange: async () => {
+    const body = new URLSearchParams({
+      grant_type: "client_credentials",
+      client_id: requiredEnv("WIZ_CLIENT_ID"),
+      client_secret: requiredEnv("WIZ_CLIENT_SECRET"),
+      audience: "wiz-api",
+    });
+    const res = await fetch(authUrl(), {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: body.toString(),
+    });
+    return { ok: res.ok, status: res.status, text: await res.text() };
+  },
+});
+
+/** Forget the exchanged token. Tests only: the cache otherwise outlives the test that filled it. */
+export function __resetWizTokenForTests(): void {
+  getToken.clear();
+}
+
+async function wizGraphql<T>(query: string, variables: Record<string, unknown>): Promise<T> {
+  const token = await getToken();
+  return postGraphql<T>({
+    url: apiUrl(),
+    label: "Wiz",
+    headers: { Authorization: `Bearer ${token}` },
+    query,
+    variables,
+  });
+}
+
+const ISSUES_QUERY = `
+query Issues($first: Int!, $after: String, $filterBy: IssueFilters) {
+  issues(first: $first, after: $after, filterBy: $filterBy) {
+    nodes {
+      id
+      sourceRule { id name }
+      severity
+      status
+      type
+      createdAt
+      updatedAt
+      resolvedAt
+      description
+      remediation
+      entity { id name type }
+      projects { id name slug }
+    }
+    pageInfo { hasNextPage endCursor }
+  }
+}
+`;
+
+const SINGLE_ISSUE_QUERY = `
+query Issue($id: ID!) {
+  issue(id: $id) {
+    id
+    sourceRule { id name }
+    severity
+    status
+    type
+    createdAt
+    updatedAt
+    resolvedAt
+    description
+    remediation
+    entity { id name type }
+    projects { id name slug }
+  }
+}
+`;
+
+interface IssuesPage {
+  readonly issues: {
+    readonly nodes: readonly unknown[];
+    readonly pageInfo: { readonly hasNextPage: boolean; readonly endCursor: string | null };
+  };
+}
+
+/** Tool names exposed by this connector — for contract/introspection tests. */
+export const WIZ_TOOL_NAMES = ["wiz_get", "wiz_list", "wiz_search"] as const;
+
+export function registerWizTools(reg: ZodToolRegistrar): void {
+  reg(
+    "wiz_list",
+    "List Wiz issues. Filters map to the `IssueFilters` GraphQL input — severity, status, and entity type are all optional. Defaults to open issues across all severities, capped at 100.",
+    z.object({
+      severity: z.array(z.enum(SEVERITIES)).min(1).optional(),
+      status: z.array(z.enum(STATUSES)).min(1).optional(),
+      entityType: z.string().min(1).optional(),
+      limit: z.number().int().min(1).max(500).optional(),
+    }),
+    async (p) => {
+      const filterBy: Record<string, unknown> = {};
+      filterBy["status"] = p.status ?? ["OPEN"];
+      if (p.severity !== undefined && p.severity.length > 0) {
+        filterBy["severity"] = p.severity;
+      }
+      if (p.entityType !== undefined) {
+        filterBy["entityType"] = p.entityType;
+      }
+      const data = await wizGraphql<IssuesPage>(ISSUES_QUERY, {
+        first: p.limit ?? 100,
+        after: null,
+        filterBy,
+      });
+      return jsonResult(data.issues);
+    },
+  );
+
+  reg(
+    "wiz_get",
+    "Fetch one Wiz issue by its id. Throws when no match is found.",
+    z.object({
+      issueId: z.string().min(1),
+    }),
+    async (p) => {
+      const data = await wizGraphql<{ issue: unknown }>(SINGLE_ISSUE_QUERY, {
+        id: p.issueId,
+      });
+      if (data.issue === null) {
+        throw new Error(`Wiz: issue ${p.issueId} not found`);
+      }
+      return jsonResult(data.issue);
+    },
+  );
+
+  reg(
+    "wiz_search",
+    "Substring search across open issues. Matches the query against `sourceRule.name`, `description`, `entity.name`, `entity.type`, and project names (case-insensitive). Returns a `{ matches: [...] }` envelope.",
+    searchToolInputSchema(200),
+    async (p) => {
+      const data = await wizGraphql<IssuesPage>(ISSUES_QUERY, {
+        first: 500,
+        after: null,
+        filterBy: { status: ["OPEN"] },
+      });
+      const matches = filterWizIssues(data.issues.nodes, { query: p.query, limit: p.limit });
+      return jsonResult({ matches });
+    },
+  );
+}

package/connectors/zendesk/src/server.ts

@@ -1,77 +1,6 @@
-import { z } from "zod";
-import { matchesResult, searchToolInputSchema } from "../../../shared/mcp-search-tool.ts";
-import {
-  encodeBasicAuthHeader,
-  mcpJsonResult as jsonResult,
-} from "../../../shared/mcp-tool-kit.ts";
 import { runReadOnlyMcpConnector } from "../../../shared/run-read-only-mcp-connector.ts";
-import { filterZendeskTickets } from "./search-filter.ts";
-
-function trimTrailingSlash(s: string): string {
-  return s.endsWith("/") ? s.slice(0, -1) : s;
-}
-
-function baseUrl(): string {
-  const v = process.env["ZENDESK_URL"]?.trim();
-  if (v === undefined || v === "") {
-    throw new Error("ZENDESK_URL is not set");
-  }
-  return trimTrailingSlash(v);
-}
-
-function authHeader(): Record<string, string> {
-  const email = process.env["ZENDESK_EMAIL"]?.trim();
-  if (email === undefined || email === "") {
-    throw new Error("ZENDESK_EMAIL is not set");
-  }
-  const token = process.env["ZENDESK_API_TOKEN"]?.trim();
-  if (token === undefined || token === "") {
-    throw new Error("ZENDESK_API_TOKEN is not set");
-  }
-  return {
-    Authorization: encodeBasicAuthHeader(`${email}/token`, token),
-    Accept: "application/json",
-  };
-}
-
-async function zendeskGet(path: string): Promise<unknown> {
-  const res = await fetch(`${baseUrl()}${path}`, { headers: authHeader() });
-  const text = await res.text();
-  if (!res.ok) {
-    throw new Error(`Zendesk ${String(res.status)}: ${text.slice(0, 400)}`);
-  }
-  return JSON.parse(text) as unknown;
-}
+import { registerZendeskTools } from "./tools.ts";
 
 await runReadOnlyMcpConnector("nimbus-zendesk", (reg) => {
-  reg(
-    "zendesk_list",
-    "List the user's Zendesk tickets (`GET /api/v2/tickets.json?page[size]=100`). Returns the cursor-pagination envelope `{ tickets: [...], meta: { has_more, after_cursor }, links: { next } }` — `tickets` holds the ticket objects.",
-    z.object({}),
-    async () => {
-      return jsonResult(await zendeskGet(`/api/v2/tickets.json?page[size]=100`));
-    },
-  );
-
-  reg(
-    "zendesk_get",
-    "Fetch one Zendesk ticket by its numeric id (`GET /api/v2/tickets/{id}.json`). Returns the `{ ticket: {...} }` envelope. Throws when no match is found.",
-    z.object({
-      id: z.string().min(1),
-    }),
-    async (p) => {
-      return jsonResult(await zendeskGet(`/api/v2/tickets/${encodeURIComponent(p.id)}.json`));
-    },
-  );
-
-  reg(
-    "zendesk_search",
-    "Substring search across the user's Zendesk tickets (first page only). Matches the query against the ticket subject, description, status, priority, type, and tags (case-insensitive). Returns a `{ matches: [...] }` envelope.",
-    searchToolInputSchema(100),
-    async (p) => {
-      const root = await zendeskGet(`/api/v2/tickets.json?page[size]=100`);
-      const tickets = (root as { tickets?: unknown[] } | null)?.tickets;
-      return matchesResult(tickets, filterZendeskTickets, p);
-    },
-  );
+  registerZendeskTools(reg);
 });

package/connectors/zendesk/src/tools.ts

@@ -0,0 +1,60 @@
+import { z } from "zod";
+import { createJsonGetter, requiredBaseUrl, requiredEnv } from "../../../shared/env-json-api.ts";
+import { matchesResult, searchToolInputSchema } from "../../../shared/mcp-search-tool.ts";
+import {
+  encodeBasicAuthHeader,
+  mcpJsonResult as jsonResult,
+} from "../../../shared/mcp-tool-kit.ts";
+import type { ZodToolRegistrar } from "../../../shared/run-read-only-mcp-connector.ts";
+import { filterZendeskTickets } from "./search-filter.ts";
+
+function authHeader(): Record<string, string> {
+  const email = requiredEnv("ZENDESK_EMAIL");
+  const token = requiredEnv("ZENDESK_API_TOKEN");
+  return {
+    Authorization: encodeBasicAuthHeader(`${email}/token`, token),
+    Accept: "application/json",
+  };
+}
+
+const zendeskGet = createJsonGetter({
+  base: () => requiredBaseUrl("ZENDESK_URL"),
+  label: "Zendesk",
+  headers: authHeader,
+});
+
+/** Tool names exposed by this connector — for contract/introspection tests. */
+export const ZENDESK_TOOL_NAMES = ["zendesk_get", "zendesk_list", "zendesk_search"] as const;
+
+export function registerZendeskTools(reg: ZodToolRegistrar): void {
+  reg(
+    "zendesk_list",
+    "List the user's Zendesk tickets (`GET /api/v2/tickets.json?page[size]=100`). Returns the cursor-pagination envelope `{ tickets: [...], meta: { has_more, after_cursor }, links: { next } }` — `tickets` holds the ticket objects.",
+    z.object({}),
+    async () => {
+      return jsonResult(await zendeskGet(`/api/v2/tickets.json?page[size]=100`));
+    },
+  );
+
+  reg(
+    "zendesk_get",
+    "Fetch one Zendesk ticket by its numeric id (`GET /api/v2/tickets/{id}.json`). Returns the `{ ticket: {...} }` envelope. Throws when no match is found.",
+    z.object({
+      id: z.string().min(1),
+    }),
+    async (p) => {
+      return jsonResult(await zendeskGet(`/api/v2/tickets/${encodeURIComponent(p.id)}.json`));
+    },
+  );
+
+  reg(
+    "zendesk_search",
+    "Substring search across the user's Zendesk tickets (first page only). Matches the query against the ticket subject, description, status, priority, type, and tags (case-insensitive). Returns a `{ matches: [...] }` envelope.",
+    searchToolInputSchema(100),
+    async (p) => {
+      const root = await zendeskGet(`/api/v2/tickets.json?page[size]=100`);
+      const tickets = (root as { tickets?: unknown[] } | null)?.tickets;
+      return matchesResult(tickets, filterZendeskTickets, p);
+    },
+  );
+}

package/connectors/zoom/src/search-filter.ts

@@ -1,16 +1,10 @@
-import { stringField } from "../../../shared/search-filter.ts";
+import { asRecord, stringField } from "../../../shared/search-filter.ts";
 
 export interface ZoomSearchOptions {
   readonly query: string;
   readonly limit?: number;
 }
 
-function asRecord(v: unknown): Record<string, unknown> | undefined {
-  return v !== null && typeof v === "object" && !Array.isArray(v)
-    ? (v as Record<string, unknown>)
-    : undefined;
-}
-
 export function filterZoomMeetings(
   meetings: readonly unknown[],
   options: ZoomSearchOptions,