@rubytech/create-maxy-code 0.1.352 → 0.1.354

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:f2401147fef814694ce3047b31834c7607dbd7f517e6abefeb990c80005d1bc6
+content-hash: sha256:7cdf605d8c40fcc1e028ad43fe5411edcd9c422101aa9a3d6564a83798ad243a
 brand: maxy-code
 product-name: Maxy
 ---
@@ -4118,6 +4118,21 @@ grep -E "adminuser-self-heal|graph-write-gate.*reject" <server.log>
 
 The `subReason=admin-user-no-accountid` path should be impossible on any install whose admin server has booted at least once after the boot self-heal shipped — if it fires, the diagnostic recipe is the cross-check above, not "rerun the heal."
 
+## An admin can no longer log in, or a credential changed and you don't know who/when
+
+**Symptom:** An admin's remote password or PIN stopped working, or an admin row vanished from `users.json` while `account.json` still lists them — with no obvious cause in `server.log`.
+
+**Diagnose:** every credential-store write is recorded in a dedicated append-only log, separate from `server.log`:
+
+```
+grep -E '\[users-audit\]|\[users-reconcile\]' ~/.<brand>/logs/users-audit.log ~/.<brand>/logs/server.log
+```
+
+- `[users-audit] action=<…> actor=<id8> [session=<id8>] field=<…> rowsBefore=<…> rowsAfter=<…> ts=<…>` — one line per write. Filter by `actor=` or `session=` to attribute a single mutation; a credential change with an agent behind it carries `session=` even when that session's transcript is gone. A `users.json` mtime change with **no** `[users-audit]` line in the same window means an out-of-band write (something edited the file directly, outside every audited path).
+- `[users-reconcile] op=ok admins=<n>` — emitted at boot and hourly; the stores agree. Absence of any `op=ok`/`op=divergence` line across an interval is itself the failure signal (the tick stopped).
+- `[users-reconcile] op=divergence accountOnly=<id8,…> usersOnly=<id8,…>` — the stores disagree. `accountOnly` is the incident shape: an admin is in `account.json` with no `users.json` row (they will fail every login). Cross-check the most recent `[users-audit] rowsAfter` against the divergence to see whether an audited delete caused it or an out-of-band write did. `usersOnly` is a `users.json` row no account references.
+- `[users-reconcile] op=error detail=…` — the reconcile itself could not read a store; the divergence state is unknown until the next clean tick.
+
 ## Fresh install opens to "Set your remote password" on the LAN URL
 
 **Symptom:** On a brand-new device, the LAN URL printed by `create-maxy` (e.g. `http://maxy.local:19200`) opens to a remote-password setup page instead of admin onboarding. This was an earlier regression and should not occur on any install built.

package/payload/platform/plugins/cloudflare/skills/calendar-site/SKILL.md

@@ -34,7 +34,7 @@ The public page shows open slots computed as the weekly window minus busy `:Meet
 <accountDir>/calendar-availability.json
 ```
 
-Collect from the operator, then write the file: the account `timezone` (IANA), the meeting `durationMins`, the `bufferMins` between meetings, and the `weekly` window as `{ mon: [["09:00","17:00"]], ... }` with an empty array for days that are closed. Add the `apiBase` (the brand tunnel origin that serves free/busy, `https://<brand-tunnel-domain>`), the `bookingDomain` (the custom domain the page will answer on), and `bookingDbName` (the D1 database name chosen below). Re-running this skill with new numbers is how availability is changed later; there is no separate editor.
+Collect from the operator, then write the file: the account `timezone` (IANA), the meeting `durationMins`, the `bufferMins` between meetings, and the `weekly` window as `{ mon: [["09:00","17:00"]], ... }` with an empty array for days that are closed. Also collect `daysAhead` (the booking horizon — a positive integer count of days the page lets visitors book into, e.g. `14`) and `allowMultiSlot` (a boolean: may a visitor combine consecutive open slots into one longer back-to-back booking? default `false`). Add the `apiBase` (the brand tunnel origin that serves free/busy, `https://<brand-tunnel-domain>`), the `bookingDomain` (the custom domain the page will answer on), and `bookingDbName` (the D1 database name chosen below). Re-running this skill with new numbers is how availability — including the horizon and the multi-slot choice — is changed later; there is no separate editor.
 
 ## Assemble the canonical tree
 
@@ -44,7 +44,7 @@ Copy the skill template into the one canonical Pages source path `site-deploy` e
 <accountDir>/pages/<project>/
 ```
 
-The template ships `public/index.html`, `public/booking.js`, `public/booking.css`, `functions/api/book.ts`, `wrangler.toml`, and `schema.sql`. Two substitutions make it concrete: set the `<meta name="api-base">` content in `public/index.html` to the `apiBase` value (the booking page fetches free/busy cross-origin from the brand tunnel), and fill `wrangler.toml`'s `__PROJECT_NAME__`, `__D1_DATABASE_NAME__`, and `__D1_DATABASE_ID__` from the project name and the database created below. Leave no `__...__` placeholder in the assembled tree.
+The template ships `public/index.html`, `public/booking.js`, `public/booking.css`, `functions/api/book.ts`, `wrangler.toml`, and `schema.sql`. The substitutions that make it concrete are: in `public/index.html`, set the `<meta name="api-base">` content to the `apiBase` value (the booking page fetches free/busy cross-origin from the brand tunnel), set `<meta name="days-ahead">` content to `daysAhead`, and set `<meta name="allow-multi-slot">` content to `allowMultiSlot` as the literal `true` or `false`; and fill `wrangler.toml`'s `__PROJECT_NAME__`, `__D1_DATABASE_NAME__`, and `__D1_DATABASE_ID__` from the project name and the database created below. Leave no `__...__` placeholder in the assembled tree.
 
 ## Provision the D1 bookings table
 

package/payload/platform/plugins/cloudflare/skills/calendar-site/template/public/booking.css

@@ -41,6 +41,44 @@ body {
 .bk-day { margin-bottom: 20px; }
 .bk-day-title { font-size: 0.95rem; margin: 0 0 8px; color: var(--bk-ink); }
 .bk-day-slots { display: flex; flex-wrap: wrap; gap: 8px; }
+.bk-day-empty { margin: 0; font-size: 0.85rem; color: var(--bk-muted); }
+
+/* Five-day window pager. */
+.bk-nav {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 16px;
+}
+.bk-nav-label { font-size: 0.9rem; color: var(--bk-muted); }
+.bk-arrow {
+  border: 1px solid var(--bk-line);
+  background: transparent;
+  color: var(--bk-ink);
+  border-radius: 8px;
+  width: 36px;
+  height: 36px;
+  font-size: 1.1rem;
+  line-height: 1;
+  cursor: pointer;
+}
+.bk-arrow:hover:not(:disabled) { border-color: var(--bk-accent); color: var(--bk-accent); }
+.bk-arrow:disabled { opacity: 0.35; cursor: default; }
+
+/* Extend / shorten a back-to-back multi-slot booking (operator-enabled). */
+.bk-extend { display: flex; gap: 8px; margin: 0 0 4px; }
+.bk-extend-btn {
+  border: 1px solid var(--bk-accent);
+  background: transparent;
+  color: var(--bk-accent);
+  border-radius: 8px;
+  padding: 6px 12px;
+  font-size: 0.85rem;
+  cursor: pointer;
+}
+.bk-extend-btn:hover:not(:disabled) { background: var(--bk-accent); color: var(--bk-accent-ink); }
+.bk-extend-btn:disabled { opacity: 0.4; cursor: default; }
 
 .bk-slot {
   border: 1px solid var(--bk-accent);
@@ -54,6 +92,9 @@ body {
 .bk-slot:hover { background: var(--bk-accent); color: var(--bk-accent-ink); }
 
 .bk-form { display: flex; flex-direction: column; gap: 14px; }
+/* The form's display:flex would otherwise beat the UA [hidden] rule and show
+   the form before a slot is picked; this keeps `hidden` authoritative. */
+.bk-form[hidden] { display: none; }
 .bk-chosen { font-weight: 600; margin: 0 0 4px; }
 .bk-label { display: flex; flex-direction: column; gap: 4px; font-size: 0.85rem; color: var(--bk-muted); }
 .bk-input {

package/payload/platform/plugins/cloudflare/skills/calendar-site/template/public/booking.js

@@ -1,13 +1,29 @@
 // Public booking page (calendar-site skill). Dependency-free.
 // 1. Fetch open slots from the brand tunnel free/busy endpoint.
-// 2. Let the visitor pick one, then collect name/email/note.
+// 2. Page the horizon five days at a time, let the visitor pick a slot
+//    (and, when the operator allows it, extend to back-to-back slots).
 // 3. POST the booking to the same-origin Pages Function (/api/book → D1).
 (function () {
   'use strict'
 
-  var DAYS_AHEAD = 14
-  var apiBaseMeta = document.querySelector('meta[name="api-base"]')
-  var apiBase = (apiBaseMeta && apiBaseMeta.getAttribute('content')) || ''
+  var WINDOW_DAYS = 5
+
+  function metaContent(name) {
+    var el = document.querySelector('meta[name="' + name + '"]')
+    return el ? el.getAttribute('content') : null
+  }
+
+  // Operator-set booking horizon. The skill rewrites the meta at assemble time;
+  // fall back to 14 only when it is absent or left unsubstituted, so pages
+  // assembled before this change behave exactly as they did.
+  var parsedDaysAhead = parseInt(metaContent('days-ahead'), 10)
+  var daysAhead = isFinite(parsedDaysAhead) && parsedDaysAhead > 0 ? parsedDaysAhead : 14
+
+  // Operator choice: may a visitor combine consecutive open slots into one
+  // longer booking? Anything other than the literal "true" is off.
+  var allowMultiSlot = metaContent('allow-multi-slot') === 'true'
+
+  var apiBase = metaContent('api-base') || ''
 
   var statusEl = document.getElementById('bk-status')
   var slotsEl = document.getElementById('bk-slots')
@@ -18,7 +34,12 @@
   var durationEl = document.getElementById('bk-duration')
   var backBtn = document.getElementById('bk-back')
 
-  var chosenSlot = null
+  // The slots that share the chosen block's day, the index of the first slot
+  // in that block, and how many back-to-back slots it spans. count stays 1
+  // unless the operator enabled multi-slot bookings.
+  var block = null
+  // Extend/shorten controls, built lazily once and reused.
+  var multiControls = null
 
   function setStatus(msg) {
     statusEl.textContent = msg || ''
@@ -27,9 +48,57 @@
   function fmtDayHeading(d) {
     return d.toLocaleDateString([], { weekday: 'long', month: 'long', day: 'numeric' })
   }
+  function fmtShortDay(d) {
+    return d.toLocaleDateString([], { month: 'short', day: 'numeric' })
+  }
   function fmtTime(d) {
     return d.toLocaleTimeString([], { hour: 'numeric', minute: '2-digit' })
   }
+  function dayKey(d) {
+    return d.toDateString()
+  }
+  function startOfLocalDay(d) {
+    var x = new Date(d)
+    x.setHours(0, 0, 0, 0)
+    return x
+  }
+  function clear(el) {
+    while (el.firstChild) el.removeChild(el.firstChild)
+  }
+
+  // ---- horizon state, set once per free/busy load -------------------------
+  var allDays = [] // local-midnight Date per calendar day in the horizon
+  var slotsByDay = {} // dayKey -> ordered slot array
+  var windowStart = 0 // index into allDays, advances in WINDOW_DAYS steps
+
+  // The first and last slot of the chosen block — the single source of the
+  // block's index arithmetic, shared by the formatters and the submit payload.
+  function firstSlot() {
+    return block.daySlots[block.startIdx]
+  }
+  function lastSlot() {
+    return block.daySlots[block.startIdx + block.count - 1]
+  }
+  function blockStart() {
+    return new Date(firstSlot().start)
+  }
+  function blockEnd() {
+    return new Date(lastSlot().end)
+  }
+  // The slot immediately after the current block, if it is open and back-to-back.
+  function nextContiguousSlot() {
+    var next = block.daySlots[block.startIdx + block.count]
+    if (!next) return null
+    return next.start === lastSlot().end ? next : null
+  }
+
+  function fmtChosen() {
+    var start = blockStart()
+    if (block.count === 1) {
+      return fmtDayHeading(start) + ' at ' + fmtTime(start)
+    }
+    return fmtDayHeading(start) + ', ' + fmtTime(start) + ' – ' + fmtTime(blockEnd())
+  }
 
   function renderSlots(data) {
     var slots = (data && data.slots) || []
@@ -37,69 +106,184 @@
       durationEl.textContent = data.durationMins + ' minute meeting'
     }
     if (slots.length === 0) {
-      setStatus('No open times in the next two weeks. Please check back later.')
+      setStatus('No open times in the next ' + daysAhead + ' day' + (daysAhead === 1 ? '' : 's') + '. Please check back later.')
       return
     }
     setStatus('')
 
-    var byDay = {}
-    var order = []
+    // The full calendar-day list for the horizon, today first. setDate keeps
+    // local midnight across DST, unlike adding fixed millisecond spans.
+    var today = startOfLocalDay(new Date())
+    allDays = []
+    for (var i = 0; i < daysAhead; i++) {
+      var d = new Date(today)
+      d.setDate(today.getDate() + i)
+      allDays.push(d)
+    }
+
+    slotsByDay = {}
     slots.forEach(function (s) {
-      var start = new Date(s.start)
-      var key = start.toDateString()
-      if (!byDay[key]) {
-        byDay[key] = []
-        order.push(key)
-      }
-      byDay[key].push(s)
+      var k = dayKey(new Date(s.start))
+      if (!slotsByDay[k]) slotsByDay[k] = []
+      slotsByDay[k].push(s)
+    })
+    Object.keys(slotsByDay).forEach(function (k) {
+      slotsByDay[k].sort(function (a, b) {
+        return new Date(a.start) - new Date(b.start)
+      })
     })
 
-    order.forEach(function (key) {
-      var group = document.createElement('div')
-      group.className = 'bk-day'
-      var h = document.createElement('h2')
-      h.className = 'bk-day-title'
-      h.textContent = fmtDayHeading(new Date(key))
-      group.appendChild(h)
-
-      var row = document.createElement('div')
-      row.className = 'bk-day-slots'
-      byDay[key].forEach(function (s) {
-        var btn = document.createElement('button')
-        btn.type = 'button'
-        btn.className = 'bk-slot'
-        btn.textContent = fmtTime(new Date(s.start))
-        btn.addEventListener('click', function () {
-          chooseSlot(s)
-        })
-        row.appendChild(btn)
+    windowStart = 0
+    console.log('[booking] daysAhead=' + daysAhead + ' allowMultiSlot=' + allowMultiSlot + ' windowStart=' + windowStart)
+    renderWindow()
+  }
+
+  function renderWindow() {
+    clear(slotsEl)
+
+    var nav = document.createElement('div')
+    nav.className = 'bk-nav'
+
+    var back = document.createElement('button')
+    back.type = 'button'
+    back.className = 'bk-arrow'
+    back.setAttribute('aria-label', 'Previous days')
+    back.textContent = '‹'
+    back.disabled = windowStart === 0
+    back.addEventListener('click', function () {
+      windowStart = Math.max(0, windowStart - WINDOW_DAYS)
+      console.log('[booking] windowStart=' + windowStart)
+      renderWindow()
+    })
+
+    var label = document.createElement('span')
+    label.className = 'bk-nav-label'
+    var lastIdx = Math.min(windowStart + WINDOW_DAYS, allDays.length) - 1
+    label.textContent = fmtShortDay(allDays[windowStart]) + ' – ' + fmtShortDay(allDays[lastIdx])
+
+    var fwd = document.createElement('button')
+    fwd.type = 'button'
+    fwd.className = 'bk-arrow'
+    fwd.setAttribute('aria-label', 'Next days')
+    fwd.textContent = '›'
+    fwd.disabled = windowStart + WINDOW_DAYS >= allDays.length
+    fwd.addEventListener('click', function () {
+      // Reachable only when not disabled, so a full step always has room.
+      windowStart += WINDOW_DAYS
+      console.log('[booking] windowStart=' + windowStart)
+      renderWindow()
+    })
+
+    nav.appendChild(back)
+    nav.appendChild(label)
+    nav.appendChild(fwd)
+    slotsEl.appendChild(nav)
+
+    for (var i = windowStart; i < windowStart + WINDOW_DAYS && i < allDays.length; i++) {
+      slotsEl.appendChild(renderDayGroup(allDays[i]))
+    }
+  }
+
+  // One day's heading plus its slot buttons (or the empty note). Kept as its own
+  // function so each slot button closes over that day's own slot array — a shared
+  // loop-scoped var would leave every handler pointing at the last day rendered.
+  function renderDayGroup(day) {
+    var group = document.createElement('div')
+    group.className = 'bk-day'
+
+    var h = document.createElement('h2')
+    h.className = 'bk-day-title'
+    h.textContent = fmtDayHeading(day)
+    group.appendChild(h)
+
+    var daySlots = slotsByDay[dayKey(day)]
+    if (!daySlots || daySlots.length === 0) {
+      var note = document.createElement('p')
+      note.className = 'bk-day-empty'
+      note.textContent = 'No availability'
+      group.appendChild(note)
+      return group
+    }
+
+    var row = document.createElement('div')
+    row.className = 'bk-day-slots'
+    daySlots.forEach(function (s, idx) {
+      var btn = document.createElement('button')
+      btn.type = 'button'
+      btn.className = 'bk-slot'
+      btn.textContent = fmtTime(new Date(s.start))
+      btn.addEventListener('click', function () {
+        chooseSlot(daySlots, idx)
       })
-      group.appendChild(row)
-      slotsEl.appendChild(group)
+      row.appendChild(btn)
+    })
+    group.appendChild(row)
+    return group
+  }
+
+  function ensureMultiControls() {
+    if (multiControls) return multiControls
+    multiControls = document.createElement('div')
+    multiControls.className = 'bk-extend'
+
+    var shorten = document.createElement('button')
+    shorten.type = 'button'
+    shorten.className = 'bk-extend-btn'
+    shorten.id = 'bk-shorten'
+    shorten.textContent = '− Shorten'
+    shorten.addEventListener('click', function () {
+      if (block.count > 1) {
+        block.count--
+        refreshChosen()
+      }
     })
+
+    var extend = document.createElement('button')
+    extend.type = 'button'
+    extend.className = 'bk-extend-btn'
+    extend.id = 'bk-extend'
+    extend.textContent = '+ Add next slot'
+    extend.addEventListener('click', function () {
+      if (nextContiguousSlot()) {
+        block.count++
+        refreshChosen()
+      }
+    })
+
+    multiControls.appendChild(shorten)
+    multiControls.appendChild(extend)
+    chosenEl.insertAdjacentElement('afterend', multiControls)
+    return multiControls
+  }
+
+  function refreshChosen() {
+    chosenEl.textContent = fmtChosen()
+    if (!allowMultiSlot) return
+    ensureMultiControls()
+    document.getElementById('bk-shorten').disabled = block.count <= 1
+    document.getElementById('bk-extend').disabled = !nextContiguousSlot()
   }
 
-  function chooseSlot(slot) {
-    chosenSlot = slot
-    var start = new Date(slot.start)
-    chosenEl.textContent = fmtDayHeading(start) + ' at ' + fmtTime(start)
+  function chooseSlot(daySlots, idx) {
+    block = { daySlots: daySlots, startIdx: idx, count: 1 }
+    refreshChosen()
     slotsEl.hidden = true
     formEl.hidden = false
   }
 
   backBtn.addEventListener('click', function () {
-    chosenSlot = null
+    block = null
     formEl.hidden = true
     slotsEl.hidden = false
   })
 
   formEl.addEventListener('submit', function (e) {
     e.preventDefault()
-    if (!chosenSlot) return
+    if (!block) return
     var fd = new FormData(formEl)
     var payload = {
-      slotStart: chosenSlot.start,
-      slotEnd: chosenSlot.end,
+      slotStart: firstSlot().start,
+      slotEnd: lastSlot().end,
       name: fd.get('name'),
       email: fd.get('email'),
       note: fd.get('note'),
@@ -125,8 +309,7 @@
         }
         formEl.hidden = true
         doneEl.hidden = false
-        var start = new Date(chosenSlot.start)
-        doneMsg.textContent = 'Confirmed for ' + fmtDayHeading(start) + ' at ' + fmtTime(start) + '. A confirmation will follow by email.'
+        doneMsg.textContent = 'Confirmed for ' + fmtChosen() + '. A confirmation will follow by email.'
       })
       .catch(function (err) {
         submitBtn.disabled = false
@@ -137,8 +320,14 @@
 
   function load() {
     setStatus('Loading available times…')
+    // Fetch exactly the horizon the page renders: from now through the end of
+    // the last calendar day in [today, today + daysAhead). Bounding `to` to a
+    // local-midnight day edge (not now + daysAhead*24h) keeps the fetched range
+    // and the rendered `allDays` window in the same local frame, so no slot is
+    // returned for a day the window cannot show.
     var from = new Date()
-    var to = new Date(from.getTime() + DAYS_AHEAD * 24 * 60 * 60 * 1000)
+    var to = startOfLocalDay(from)
+    to.setDate(to.getDate() + daysAhead)
     var url = apiBase + '/api/calendar/free-busy?from=' + encodeURIComponent(from.toISOString()) + '&to=' + encodeURIComponent(to.toISOString())
     fetch(url)
       .then(function (res) {

package/payload/platform/plugins/cloudflare/skills/calendar-site/template/public/index.html

@@ -6,6 +6,12 @@
   <!-- The calendar-site skill rewrites the content of this tag to the brand
        tunnel origin that serves /api/calendar/free-busy. -->
   <meta name="api-base" content="__API_BASE__" />
+  <!-- Operator-set booking horizon (positive integer days). The skill rewrites
+       the content; booking.js falls back to 14 when it is left unsubstituted. -->
+  <meta name="days-ahead" content="__DAYS_AHEAD__" />
+  <!-- Operator choice: may a visitor combine consecutive open slots into one
+       longer booking? "true" or "false"; booking.js falls back to false. -->
+  <meta name="allow-multi-slot" content="__ALLOW_MULTI_SLOT__" />
   <title>Book a time</title>
   <link rel="stylesheet" href="/booking.css" />
 </head>

package/payload/platform/plugins/connector/mcp/dist/lib/call.d.ts

@@ -1,4 +1,6 @@
-import { type Refusal } from "./ssrf.js";
+import type { LookupFunction } from "node:net";
+import { fetch as undiciFetch, type Dispatcher } from "undici";
+import { type Refusal, type Resolution } from "./ssrf.js";
 import type { ConnectorRecord } from "./store.js";
 export interface CallParams {
     method: string;
@@ -8,10 +10,16 @@ export interface CallParams {
     headers?: Record<string, string>;
 }
 export interface CallDeps {
-    /** Override for tests; defaults to global fetch. */
-    fetchImpl?: typeof fetch;
-    /** Override for tests so a loopback stub is reachable; defaults to the real SSRF guard. */
-    guard?: (targetHost: string, registeredHost: string, kind: "request" | "redirect") => Promise<Refusal | null>;
+    /** Override for tests; defaults to undici's fetch (same instance as the pinned dispatcher). */
+    fetchImpl?: typeof undiciFetch;
+    /** Override for tests so a loopback stub resolves; defaults to the real address-validating resolve. */
+    resolve?: (targetHost: string, registeredHost: string, kind: "request" | "redirect") => Promise<Resolution>;
+    /**
+     * Build the dispatcher that pins the connection to the validated addresses. Defaults to
+     * the real pinned dispatcher. Tests return `undefined` to skip pinning (a pinned loopback
+     * address would otherwise fail the public re-validation).
+     */
+    makeDispatcher?: (addresses: string[]) => Dispatcher | undefined;
     /** Sink for `[connector]` lifecycle lines; the secret is never passed to it. */
     log?: (line: string) => void;
     reqId?: string;
@@ -27,10 +35,20 @@ export type CallResult = {
     refused: Refusal;
 };
 /**
- * Make one authenticated, host-bound request to a registered connector. The guard runs
- * before the request and before every redirect hop; the credential is injected from the
- * caller-supplied secret and never logged. Returns status + redacted headers + capped body,
- * or a refusal when the guard rejects the target.
+ * Build the DNS lookup an undici dispatcher uses to dial a connector. It returns the
+ * pre-validated addresses without consulting DNS — so no second, independent lookup
+ * happens at connect time — and re-validates each is public, failing closed. undici
+ * always calls it with `{ all: true }`; the single-result branch is kept for completeness.
+ */
+export declare function pinnedLookup(addresses: string[]): LookupFunction;
+/** Dispatcher that dials only the validated addresses; TLS/SNI still use the hostname, so cert validation is unchanged. */
+export declare function pinnedDispatcher(addresses: string[]): Dispatcher;
+/**
+ * Make one authenticated, host-bound request to a registered connector. The host is resolved
+ * and validated before the request and before every redirect hop, and the socket is pinned to
+ * the validated addresses so no second connect-time lookup can land on a rebind. The credential
+ * is injected from the caller-supplied secret and never logged. Returns status + redacted headers
+ * + capped body, or a refusal when resolution rejects the target.
  */
 export declare function performCall(rec: ConnectorRecord, secret: string, params: CallParams, deps?: CallDeps): Promise<CallResult>;
 //# sourceMappingURL=call.d.ts.map

package/payload/platform/plugins/connector/mcp/dist/lib/call.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../../src/lib/call.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,QAAQ;IACvB,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,UAAU,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9G,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC/F;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAapC;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,UAAU,CAAC,CA6DrB"}
+{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../../src/lib/call.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAS,KAAK,IAAI,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEtE,OAAO,EAA8B,KAAK,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,QAAQ;IACvB,+FAA+F;IAC/F,SAAS,CAAC,EAAE,OAAO,WAAW,CAAC;IAC/B,uGAAuG;IACvG,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5G;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,UAAU,GAAG,SAAS,CAAC;IACjE,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC/F;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAQpC;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,cAAc,CAUhE;AAED,2HAA2H;AAC3H,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,UAAU,CAEhE;AAkBD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,UAAU,CAAC,CA8FrB"}