@tangle-network/agent-integrations 0.43.0 → 0.45.0

package/dist/{chunk-HRPCFEGL.js → chunk-WTMOFI3U.js}

@@ -6,13 +6,15 @@ import {
 import {
   CredentialsExpired,
   DEFAULT_TANGLE_PLATFORM_URL,
+  ProviderConfigError,
+  ProviderRateLimited,
   ResourceContention,
   TANGLE_API_KEY_PREFIX,
   TANGLE_SERVICE_TOKEN_PREFIX,
   TangleIdentityUnreachableError,
   createTangleIdentityClient,
   tangleIdentity
-} from "./chunk-EQB46PIG.js";
+} from "./chunk-UWF33ESC.js";
 import {
   __export
 } from "./chunk-PZ5AY32C.js";
@@ -112,6 +114,8 @@ __export(adapters_exports, {
   chatwootConnector: () => chatwootConnector,
   checkoutConnector: () => checkoutConnector,
   circleConnector: () => circleConnector,
+  classifyGoogleError: () => classifyGoogleError,
+  classifyGoogleReason: () => classifyGoogleReason,
   clayConnector: () => clayConnector,
   clearoutConnector: () => clearoutConnector,
   clicdataConnector: () => clicdataConnector,
@@ -215,12 +219,14 @@ __export(adapters_exports, {
   gmail: () => gmail,
   gongConnector: () => gongConnector,
   googleAnalyticsConnector: () => googleAnalyticsConnector,
+  googleApiError: () => googleApiError,
   googleBigqueryConnector: () => googleBigqueryConnector,
   googleCalendar: () => googleCalendar,
   googleCloudStorageConnector: () => googleCloudStorageConnector,
   googleContactsConnector: () => googleContactsConnector,
   googleDocs: () => googleDocs,
   googleDrive: () => googleDrive,
+  googleErrorReason: () => googleErrorReason,
   googleForms: () => googleForms,
   googleGeminiConnector: () => googleGeminiConnector,
   googleMeetConnector: () => googleMeetConnector,
@@ -230,6 +236,7 @@ __export(adapters_exports, {
   googleSheets: () => googleSheets,
   googleSlidesConnector: () => googleSlidesConnector,
   googleTasksConnector: () => googleTasksConnector,
+  googleTestFailureReason: () => googleTestFailureReason,
   googleVertexaiConnector: () => googleVertexaiConnector,
   googlechatConnector: () => googlechatConnector,
   gorgiasConnector: () => gorgiasConnector,
@@ -689,6 +696,117 @@ function _resetPendingFlowsForTests() {
   defaultFlowStore.clear?.();
 }
 
+// src/connectors/adapters/google-errors.ts
+var AUTH_REASONS = /* @__PURE__ */ new Set([
+  "autherror",
+  "authenticationerror",
+  "invalidcredentials",
+  "invalid_grant",
+  "invalidgrant",
+  "unauthorized",
+  "unauthenticated",
+  "logindenied"
+]);
+var CONFIG_REASONS = /* @__PURE__ */ new Set([
+  "accessnotconfigured",
+  "insufficientpermissions",
+  "insufficientscopes",
+  "forbidden",
+  "permissiondenied",
+  "permission_denied",
+  "ssorequired"
+]);
+var QUOTA_REASONS = /* @__PURE__ */ new Set([
+  "ratelimitexceeded",
+  "userratelimitexceeded",
+  "userratelimitexceededunreg",
+  "dailylimitexceeded",
+  "quotaexceeded",
+  "resourceexhausted",
+  "resource_exhausted"
+]);
+function googleErrorReason(body) {
+  if (!body || typeof body !== "object") return void 0;
+  const error = body.error;
+  if (!error || typeof error !== "object") return void 0;
+  const fromErrors = error.errors?.find(
+    (entry) => typeof entry?.reason === "string" && entry.reason.length > 0
+  )?.reason;
+  if (fromErrors) return fromErrors;
+  if (typeof error.status === "string" && error.status.length > 0) {
+    return error.status;
+  }
+  return void 0;
+}
+function classifyGoogleReason(reason) {
+  if (!reason) return void 0;
+  const key = reason.toLowerCase();
+  if (QUOTA_REASONS.has(key)) return "quota";
+  if (AUTH_REASONS.has(key)) return "auth";
+  if (CONFIG_REASONS.has(key)) return "config";
+  return void 0;
+}
+function stringifyBody(body) {
+  const text = typeof body === "string" ? body : JSON.stringify(body ?? {});
+  return text.slice(0, 200);
+}
+function classifyGoogleError(status, body, context, dataSourceId) {
+  const reason = googleErrorReason(body);
+  const cls = classifyGoogleReason(reason);
+  const init = { status, reason, body };
+  const suffix = reason ? `: ${reason}` : "";
+  if (cls === "quota" || status === 429) {
+    return new ProviderRateLimited(
+      `${context} rate limit (${status})${suffix}`,
+      dataSourceId,
+      init
+    );
+  }
+  if (cls === "auth" || status === 401) {
+    return new CredentialsExpired(
+      `${context} rejected token (${status})${suffix}`,
+      dataSourceId,
+      init
+    );
+  }
+  if (cls === "config" || status === 403) {
+    return new ProviderConfigError(
+      `${context} permission/config error (${status})${suffix}`,
+      dataSourceId,
+      init
+    );
+  }
+  return new Error(`${context} ${status}: ${stringifyBody(body)}`);
+}
+async function googleApiError(res, context, dataSourceId) {
+  const body = await readErrorBody(res);
+  return classifyGoogleError(res.status, body, context, dataSourceId);
+}
+function googleTestFailureReason(status, body, provider) {
+  const reason = googleErrorReason(body);
+  const cls = classifyGoogleReason(reason);
+  const detail = reason ? `, ${reason}` : "";
+  if (cls === "quota" || status === 429) {
+    return `${provider} rate limit (${status}${detail}) \u2014 retry later`;
+  }
+  if (cls === "auth" || status === 401) {
+    return `${provider} rejected token (${status}${detail}) \u2014 reconnect required`;
+  }
+  if (cls === "config" || status === 403) {
+    return `${provider} permission/config error (${status}${detail}) \u2014 check the API is enabled and scopes are granted`;
+  }
+  return `${provider} returned ${status}`;
+}
+async function readErrorBody(res) {
+  const text = await res.text().catch(() => "");
+  if (!text) return void 0;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+
 // src/connectors/adapters/google-calendar.ts
 var SCOPE_CALENDAR = "https://www.googleapis.com/auth/calendar";
 var SCOPE_WRITE = "https://www.googleapis.com/auth/calendar.events";
@@ -871,7 +989,7 @@ function googleCalendar(opts) {
       if (inv.capabilityName === "list_availability") {
         const calendarId = readMetaString(inv.source.metadata, "calendarId");
         const { timeMin, timeMax } = inv.args;
-        const fb = await freebusyQuery({ accessToken, calendarId, timeMin, timeMax });
+        const fb = await freebusyQuery({ accessToken, calendarId, timeMin, timeMax, sourceId: inv.source.id });
         return {
           data: { busy: fb.busy },
           fetchedAt: Date.now()
@@ -891,7 +1009,7 @@ function googleCalendar(opts) {
       }
       const calendarId = readMetaString(inv.source.metadata, "calendarId");
       const { start, end, summary, description, attendees } = inv.args;
-      const fb = await freebusyQuery({ accessToken, calendarId, timeMin: start, timeMax: end });
+      const fb = await freebusyQuery({ accessToken, calendarId, timeMin: start, timeMax: end, sourceId: inv.source.id });
       if (fb.busy.length > 0) {
         const startMs = Date.parse(start);
         const endMs = Date.parse(end);
@@ -901,7 +1019,8 @@ function googleCalendar(opts) {
           calendarId,
           searchFromMs: endMs,
           durationMs: durMs,
-          wanted: 3
+          wanted: 3,
+          sourceId: inv.source.id
         });
         throw new ResourceContention(
           `requested slot ${start}\u2013${end} is no longer free`,
@@ -939,12 +1058,8 @@ function googleCalendar(opts) {
           idempotentReplay: true
         };
       }
-      if (res.status === 401 || res.status === 403) {
-        throw new CredentialsExpired(`Google Calendar rejected token (${res.status})`, inv.source.id);
-      }
       if (!res.ok) {
-        const text = await res.text().catch(() => "");
-        throw new Error(`google-calendar book_slot ${res.status}: ${text.slice(0, 200)}`);
+        throw await googleApiError(res, "google-calendar book_slot", inv.source.id);
       }
       const created = await res.json();
       return {
@@ -1001,10 +1116,10 @@ function googleCalendar(opts) {
           headers: { authorization: `Bearer ${accessToken}` },
           signal: AbortSignal.timeout(8e3)
         });
-        if (res.status === 401 || res.status === 403) {
-          return { ok: false, reason: `Google rejected token (${res.status}) \u2014 reconnect required` };
+        if (!res.ok) {
+          const body = await res.json().catch(() => void 0);
+          return { ok: false, reason: googleTestFailureReason(res.status, body, "Google Calendar") };
         }
-        if (!res.ok) return { ok: false, reason: `Google returned ${res.status}` };
         return { ok: true };
       } catch (err) {
         return { ok: false, reason: err instanceof Error ? err.message : String(err) };
@@ -1048,12 +1163,8 @@ async function createEvent(inv, accessToken, timeoutMs) {
     body: JSON.stringify(event),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Calendar rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-calendar create_event ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-calendar create_event", inv.source.id);
   }
   const created = await res.json();
   return {
@@ -1093,12 +1204,8 @@ async function updateEvent(inv, accessToken, timeoutMs) {
     body: JSON.stringify(patch),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Calendar rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-calendar update_event ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-calendar update_event", inv.source.id);
   }
   const updated = await res.json();
   return {
@@ -1124,13 +1231,9 @@ async function deleteEvent(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Calendar rejected token (${res.status})`, inv.source.id);
-  }
   const idempotent = res.status === 404 || res.status === 410;
   if (!res.ok && !idempotent) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-calendar delete_event ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-calendar delete_event", inv.source.id);
   }
   return {
     status: "committed",
@@ -1148,12 +1251,8 @@ async function getEvent(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Calendar rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-calendar get_event ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-calendar get_event", inv.source.id);
   }
   const event = await res.json();
   return {
@@ -1178,12 +1277,8 @@ async function listEvents(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Calendar rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-calendar list_events ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-calendar list_events", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -1210,8 +1305,7 @@ async function freebusyQuery(input) {
     signal: AbortSignal.timeout(1e4)
   });
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`freebusy ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-calendar freebusy", input.sourceId);
   }
   const json = await res.json();
   return { busy: json.calendars?.[input.calendarId]?.busy ?? [] };
@@ -1226,7 +1320,8 @@ async function findNextFreeSlots(input) {
       accessToken: input.accessToken,
       calendarId: input.calendarId,
       timeMin: new Date(cursor).toISOString(),
-      timeMax: new Date(windowEnd).toISOString()
+      timeMax: new Date(windowEnd).toISOString(),
+      sourceId: input.sourceId
     });
     const busy = fb.busy.map((b) => ({ s: Date.parse(b.start), e: Date.parse(b.end) })).filter((b) => Number.isFinite(b.s) && Number.isFinite(b.e)).sort((a, b) => a.s - b.s);
     let pos = cursor;
@@ -1480,10 +1575,10 @@ function googleDrive(opts) {
           headers: { authorization: `Bearer ${accessToken}` },
           signal: AbortSignal.timeout(8e3)
         });
-        if (res.status === 401 || res.status === 403) {
-          return { ok: false, reason: `Google rejected Drive token (${res.status}) \u2014 reconnect required` };
+        if (!res.ok) {
+          const body = await res.json().catch(() => void 0);
+          return { ok: false, reason: googleTestFailureReason(res.status, body, "Google Drive") };
         }
-        if (!res.ok) return { ok: false, reason: `Google Drive returned ${res.status}` };
         return { ok: true };
       } catch (err) {
         return { ok: false, reason: err instanceof Error ? err.message : String(err) };
@@ -1508,12 +1603,8 @@ async function listFiles(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive list_files ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive list_files", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -1532,15 +1623,11 @@ async function readFile(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (metaRes.status === 401 || metaRes.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${metaRes.status})`, inv.source.id);
-  }
   if (metaRes.status === 404) {
     throw new Error(`google-drive read_file: file ${fileId} not found`);
   }
   if (!metaRes.ok) {
-    const text = await metaRes.text().catch(() => "");
-    throw new Error(`google-drive read_file meta ${metaRes.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(metaRes, "google-drive read_file meta", inv.source.id);
   }
   const meta = await metaRes.json();
   const isNative = meta.mimeType.startsWith("application/vnd.google-apps.");
@@ -1552,8 +1639,7 @@ async function readFile(inv, accessToken, timeoutMs) {
       signal: AbortSignal.timeout(timeoutMs)
     });
     if (!res2.ok) {
-      const text = await res2.text().catch(() => "");
-      throw new Error(`google-drive read_file export ${res2.status}: ${text.slice(0, 200)}`);
+      throw await googleApiError(res2, "google-drive read_file export", inv.source.id);
     }
     const isTextLike2 = /^text\/|application\/(json|xml|csv|javascript)/.test(targetMime);
     if (isTextLike2) {
@@ -1574,8 +1660,7 @@ async function readFile(inv, accessToken, timeoutMs) {
     signal: AbortSignal.timeout(timeoutMs)
   });
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive read_file media ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive read_file media", inv.source.id);
   }
   const isTextLike = /^text\/|application\/(json|xml|csv|javascript)/.test(meta.mimeType);
   if (isTextLike) {
@@ -1608,9 +1693,6 @@ async function watchFolder(inv, accessToken, timeoutMs) {
     body: JSON.stringify(body),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 409) {
     const cached = inv.source.metadata.watchedChannels?.[channelId];
     return {
@@ -1621,8 +1703,7 @@ async function watchFolder(inv, accessToken, timeoutMs) {
     };
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive watch_folder ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive watch_folder", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -1667,12 +1748,8 @@ Content-Type: ${mimeType}\r
     body,
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive upload_file ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive upload_file", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -1707,12 +1784,8 @@ async function createFolder(inv, accessToken, timeoutMs) {
     body: JSON.stringify(body),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive create_folder ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive create_folder", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -1736,12 +1809,8 @@ async function deleteFile(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok && res.status !== 204) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive delete_file ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive delete_file", inv.source.id);
   }
   return {
     status: "committed",
@@ -1771,12 +1840,8 @@ async function moveFile(inv, accessToken, timeoutMs) {
     body: "{}",
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Drive rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-drive move_file ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-drive move_file", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -2030,10 +2095,10 @@ function googleSheets(opts) {
           headers: { authorization: `Bearer ${accessToken}` },
           signal: AbortSignal.timeout(8e3)
         });
-        if (res.status === 401 || res.status === 403) {
-          return { ok: false, reason: `Google rejected token (${res.status}) \u2014 reconnect required` };
+        if (!res.ok) {
+          const body = await res.json().catch(() => void 0);
+          return { ok: false, reason: googleTestFailureReason(res.status, body, "Google Sheets") };
         }
-        if (!res.ok) return { ok: false, reason: `Google returned ${res.status}` };
         return { ok: true };
       } catch (err) {
         return { ok: false, reason: err instanceof Error ? err.message : String(err) };
@@ -2060,12 +2125,8 @@ async function fetchAllRows(accessToken, meta) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(15e3)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Sheets rejected token (${res.status})`, "");
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-sheets values.get ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-sheets values.get", "");
   }
   const json = await res.json();
   const grid = json.values ?? [];
@@ -2178,12 +2239,8 @@ async function updateRow(inv, accessToken, timeoutMs) {
     body: JSON.stringify({ values: [updatedValues] }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Sheets rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-sheets update_row ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-sheets update_row", inv.source.id);
   }
   const updatedValuesByHeader = Object.fromEntries(
     meta.headers.map((h, i) => [h, updatedValues[i] ?? ""])
@@ -2218,12 +2275,8 @@ async function appendRow(inv, accessToken, timeoutMs) {
     body: JSON.stringify({ values: args.values }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Sheets rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-sheets append_row ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-sheets append_row", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -2254,12 +2307,8 @@ async function clearRange(inv, accessToken, timeoutMs) {
     body: "{}",
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Sheets rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-sheets clear_range ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-sheets clear_range", inv.source.id);
   }
   const json = await res.json().catch(() => ({}));
   return {
@@ -2285,12 +2334,8 @@ async function createSheet(inv, accessToken, timeoutMs) {
     body: JSON.stringify({ properties: { title: args.title } }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Sheets rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-sheets create_sheet ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-sheets create_sheet", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -2450,6 +2495,9 @@ async function executeRestRequest(spec, request, inv, requiredArgs) {
       }
     };
   }
+  if (request.existenceCheck && (res.status === 204 || res.status === 404)) {
+    return { data: { exists: res.status === 204 } };
+  }
   if (!res.ok) {
     throw new Error(`${spec.kind} ${request.method} ${url.pathname} HTTP ${res.status}: ${(await safeErrorText(res)).slice(0, 300)}`);
   }
@@ -2882,10 +2930,10 @@ function gmail(opts) {
           headers: { authorization: `Bearer ${accessToken}` },
           signal: AbortSignal.timeout(8e3)
         });
-        if (res.status === 401 || res.status === 403) {
-          return { ok: false, reason: `Google rejected Gmail token (${res.status}) \u2014 reconnect required` };
+        if (!res.ok) {
+          const body = await res.json().catch(() => void 0);
+          return { ok: false, reason: googleTestFailureReason(res.status, body, "Gmail") };
         }
-        if (!res.ok) return { ok: false, reason: `Gmail returned ${res.status}` };
         return { ok: true };
       } catch (err) {
         return { ok: false, reason: err instanceof Error ? err.message : String(err) };
@@ -2906,12 +2954,8 @@ async function listMessages(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (listRes.status === 401 || listRes.status === 403) {
-    throw new CredentialsExpired(`Gmail rejected token (${listRes.status})`, inv.source.id);
-  }
   if (!listRes.ok) {
-    const text = await listRes.text().catch(() => "");
-    throw new Error(`gmail list_messages ${listRes.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(listRes, "gmail list_messages", inv.source.id);
   }
   const listJson = await listRes.json();
   const ids = listJson.messages ?? [];
@@ -2951,15 +2995,11 @@ async function readMessage(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Gmail rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`gmail read_message: message ${id} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`gmail read_message ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "gmail read_message", inv.source.id);
   }
   const full = await res.json();
   const headers = new Map((full.payload?.headers ?? []).map((h) => [h.name.toLowerCase(), h.value]));
@@ -3035,12 +3075,8 @@ ${args.body}`;
     body: JSON.stringify({ raw: encodeBase64Url(raw) }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (sendRes.status === 401 || sendRes.status === 403) {
-    throw new CredentialsExpired(`Gmail rejected token (${sendRes.status})`, inv.source.id);
-  }
   if (!sendRes.ok) {
-    const text = await sendRes.text().catch(() => "");
-    throw new Error(`gmail send ${sendRes.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(sendRes, "gmail send", inv.source.id);
   }
   const sent = await sendRes.json();
   return {
@@ -3056,12 +3092,8 @@ async function sendReply(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (threadRes.status === 401 || threadRes.status === 403) {
-    throw new CredentialsExpired(`Gmail rejected token (${threadRes.status})`, inv.source.id);
-  }
   if (!threadRes.ok) {
-    const text = await threadRes.text().catch(() => "");
-    throw new Error(`gmail send_reply thread fetch ${threadRes.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(threadRes, "gmail send_reply thread fetch", inv.source.id);
   }
   const thread = await threadRes.json();
   const last = thread.messages?.[thread.messages.length - 1];
@@ -3104,12 +3136,8 @@ ${body}`;
     body: JSON.stringify(sendBody),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (sendRes.status === 401 || sendRes.status === 403) {
-    throw new CredentialsExpired(`Gmail rejected token (${sendRes.status})`, inv.source.id);
-  }
   if (!sendRes.ok) {
-    const text = await sendRes.text().catch(() => "");
-    throw new Error(`gmail send_reply ${sendRes.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(sendRes, "gmail send_reply", inv.source.id);
   }
   const sent = await sendRes.json();
   return {
@@ -3135,12 +3163,8 @@ async function watchLabel(inv, accessToken, timeoutMs) {
     body: JSON.stringify(body),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Gmail rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`gmail watch_label ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "gmail watch_label", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -7297,6 +7321,83 @@ var githubConnector = declarativeRestConnector({
       },
       request: { method: "GET", path: "/search/issues", query: { q: "{q}", per_page: "{per_page}" } }
     },
+    {
+      name: "users.getAuthenticated",
+      class: "read",
+      description: "Resolve the authenticated user (the token owner). Quest verification anchors author:/owner: filters to this login, so it must be resolved first.",
+      parameters: { type: "object", properties: {}, required: [] },
+      request: { method: "GET", path: "/user" }
+    },
+    {
+      name: "activity.checkStarred",
+      class: "read",
+      description: "Check whether the authenticated user has starred a repository. Returns { exists: true } when starred, { exists: false } when not.",
+      parameters: repoParams,
+      request: { method: "GET", path: "/user/starred/{owner}/{repo}", existenceCheck: true }
+    },
+    {
+      name: "users.checkFollowing",
+      class: "read",
+      description: "Check whether the authenticated user follows another user. Returns { exists: true } when following, { exists: false } when not.",
+      parameters: {
+        type: "object",
+        properties: { target: { type: "string", description: "Login of the user to check the follow against." } },
+        required: ["target"]
+      },
+      request: { method: "GET", path: "/user/following/{target}", existenceCheck: true }
+    },
+    {
+      name: "repos.listCommits",
+      class: "read",
+      description: "List commits on a repository, optionally filtered to a single author login/email. Used to verify a user contributed to the repo.",
+      parameters: {
+        type: "object",
+        properties: {
+          owner: { type: "string" },
+          repo: { type: "string" },
+          author: { type: "string", description: "Restrict to commits authored by this GitHub login or email." },
+          per_page: { type: "integer", minimum: 1, maximum: 100 }
+        },
+        required: ["owner", "repo"]
+      },
+      request: {
+        method: "GET",
+        path: "/repos/{owner}/{repo}/commits",
+        query: { author: "{author}", per_page: "{per_page}" }
+      }
+    },
+    {
+      name: "repos.getReadme",
+      class: "read",
+      description: "Read a repository's README (returns base64-encoded content). Used to verify README mentions.",
+      parameters: repoParams,
+      request: { method: "GET", path: "/repos/{owner}/{repo}/readme" }
+    },
+    {
+      name: "search.code",
+      class: "read",
+      description: "Search code across GitHub. Used to verify code usage of a symbol or string.",
+      parameters: {
+        type: "object",
+        properties: { q: { type: "string" }, per_page: { type: "integer", minimum: 1, maximum: 100 } },
+        required: ["q"]
+      },
+      request: { method: "GET", path: "/search/code", query: { q: "{q}", per_page: "{per_page}" } }
+    },
+    {
+      name: "orgs.checkMembership",
+      class: "read",
+      description: "Check whether a user is a member of an organization. Returns { exists: true } when a member, { exists: false } when not.",
+      parameters: {
+        type: "object",
+        properties: {
+          org: { type: "string" },
+          user: { type: "string", description: "Login of the user to check membership for." }
+        },
+        required: ["org", "user"]
+      },
+      request: { method: "GET", path: "/orgs/{org}/members/{user}", existenceCheck: true }
+    },
     {
       name: "issues.create",
       class: "mutation",
@@ -38378,10 +38479,10 @@ function googleDocs(opts) {
           headers: { authorization: `Bearer ${accessToken}` },
           signal: AbortSignal.timeout(8e3)
         });
-        if (res.status === 401 || res.status === 403) {
-          return { ok: false, reason: `Google rejected Docs token (${res.status}) \u2014 reconnect required` };
+        if (!res.ok) {
+          const body = await res.json().catch(() => void 0);
+          return { ok: false, reason: googleTestFailureReason(res.status, body, "Google Docs") };
         }
-        if (!res.ok) return { ok: false, reason: `Google userinfo returned ${res.status}` };
         return { ok: true };
       } catch (err) {
         return { ok: false, reason: err instanceof Error ? err.message : String(err) };
@@ -38417,15 +38518,11 @@ async function getDocument2(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Docs rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`google-docs get_document: document ${documentId} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-docs get_document ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-docs get_document", inv.source.id);
   }
   const doc = await res.json();
   return {
@@ -38456,12 +38553,8 @@ async function createDocument2(inv, accessToken, timeoutMs) {
     body: JSON.stringify({ title }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (createRes.status === 401 || createRes.status === 403) {
-    throw new CredentialsExpired(`Google Docs rejected token (${createRes.status})`, inv.source.id);
-  }
   if (!createRes.ok) {
-    const text = await createRes.text().catch(() => "");
-    throw new Error(`google-docs create_document ${createRes.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(createRes, "google-docs create_document", inv.source.id);
   }
   const created = await createRes.json();
   let revisionId = created.revisionId;
@@ -38487,12 +38580,8 @@ async function createDocument2(inv, accessToken, timeoutMs) {
         signal: AbortSignal.timeout(timeoutMs)
       }
     );
-    if (insertRes.status === 401 || insertRes.status === 403) {
-      throw new CredentialsExpired(`Google Docs rejected token (${insertRes.status})`, inv.source.id);
-    }
     if (!insertRes.ok) {
-      const text = await insertRes.text().catch(() => "");
-      throw new Error(`google-docs create_document insertText ${insertRes.status}: ${text.slice(0, 200)}`);
+      throw await googleApiError(insertRes, "google-docs create_document insertText", inv.source.id);
     }
     const insertJson = await insertRes.json();
     revisionId = insertJson.writeControl?.requiredRevisionId ?? revisionId;
@@ -38514,15 +38603,11 @@ async function appendText(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (docRes.status === 401 || docRes.status === 403) {
-    throw new CredentialsExpired(`Google Docs rejected token (${docRes.status})`, inv.source.id);
-  }
   if (docRes.status === 404) {
     throw new Error(`google-docs append_text: document ${documentId} not found`);
   }
   if (!docRes.ok) {
-    const errText = await docRes.text().catch(() => "");
-    throw new Error(`google-docs append_text fetch ${docRes.status}: ${errText.slice(0, 200)}`);
+    throw await googleApiError(docRes, "google-docs append_text fetch", inv.source.id);
   }
   const doc = await docRes.json();
   const insertIndex = findAppendIndex(doc);
@@ -38551,9 +38636,6 @@ async function appendText(inv, accessToken, timeoutMs) {
       signal: AbortSignal.timeout(timeoutMs)
     }
   );
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Docs rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 400 && requiredRevisionId) {
     const errBody = await res.text().catch(() => "");
     if (/FAILED_PRECONDITION|requiredRevisionId/i.test(errBody)) {
@@ -38566,8 +38648,7 @@ async function appendText(inv, accessToken, timeoutMs) {
     throw new Error(`google-docs append_text ${res.status}: ${errBody.slice(0, 200)}`);
   }
   if (!res.ok) {
-    const errBody = await res.text().catch(() => "");
-    throw new Error(`google-docs append_text ${res.status}: ${errBody.slice(0, 200)}`);
+    throw await googleApiError(res, "google-docs append_text", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -38592,15 +38673,11 @@ async function deleteDocument(inv, accessToken, timeoutMs) {
     body: JSON.stringify({ trashed: true }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Docs rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`google-docs delete_document: document ${documentId} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-docs delete_document ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-docs delete_document", inv.source.id);
   }
   const json = await res.json().catch(() => ({}));
   return {
@@ -38626,15 +38703,11 @@ async function exportDocument(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Docs rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`google-docs export_document: document ${documentId} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-docs export_document ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-docs export_document", inv.source.id);
   }
   const buf = new Uint8Array(await res.arrayBuffer());
   let binary = "";
@@ -38879,10 +38952,10 @@ function googleForms(opts) {
           headers: { authorization: `Bearer ${accessToken}` },
           signal: AbortSignal.timeout(8e3)
         });
-        if (res.status === 401 || res.status === 403) {
-          return { ok: false, reason: `Google rejected Forms token (${res.status}) \u2014 reconnect required` };
+        if (!res.ok) {
+          const body = await res.json().catch(() => void 0);
+          return { ok: false, reason: googleTestFailureReason(res.status, body, "Google Forms") };
         }
-        if (!res.ok) return { ok: false, reason: `Google userinfo returned ${res.status}` };
         return { ok: true };
       } catch (err) {
         return { ok: false, reason: err instanceof Error ? err.message : String(err) };
@@ -38910,15 +38983,11 @@ async function getForm(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Forms rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`google-forms get_form: form ${formId} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-forms get_form ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-forms get_form", inv.source.id);
   }
   const form = await res.json();
   return {
@@ -38946,15 +39015,11 @@ async function listResponses(inv, accessToken, timeoutMs) {
     headers: { authorization: `Bearer ${accessToken}` },
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Forms rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`google-forms list_responses: form ${formId} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-forms list_responses ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-forms list_responses", inv.source.id);
   }
   const envelope = await res.json();
   const responses = (envelope.responses ?? []).map((r) => ({
@@ -38984,15 +39049,11 @@ async function getResponse(inv, accessToken, timeoutMs) {
       signal: AbortSignal.timeout(timeoutMs)
     }
   );
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Forms rejected token (${res.status})`, inv.source.id);
-  }
   if (res.status === 404) {
     throw new Error(`google-forms get_response: response ${responseId} not found`);
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-forms get_response ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-forms get_response", inv.source.id);
   }
   const r = await res.json();
   return {
@@ -39021,12 +39082,8 @@ async function createForm(inv, accessToken, timeoutMs) {
     body: JSON.stringify({ info }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Forms rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-forms create_form ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-forms create_form", inv.source.id);
   }
   const form = await res.json();
   return {
@@ -39060,12 +39117,8 @@ async function batchUpdate(inv, accessToken, timeoutMs) {
     body: JSON.stringify(body),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  if (res.status === 401 || res.status === 403) {
-    throw new CredentialsExpired(`Google Forms rejected token (${res.status})`, inv.source.id);
-  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`google-forms batch_update ${res.status}: ${text.slice(0, 200)}`);
+    throw await googleApiError(res, "google-forms batch_update", inv.source.id);
   }
   const json = await res.json();
   return {
@@ -113175,11 +113228,11 @@ var twinLabsConnector = declarativeRestConnector({
 // src/connectors/adapters/twitter.ts
 var AUTH_URL18 = "https://twitter.com/i/oauth2/authorize";
 var TOKEN_URL19 = "https://api.twitter.com/2/oauth2/token";
-var SCOPES14 = ["tweet.read", "tweet.write", "users.read", "like.write", "offline.access"];
+var SCOPES14 = ["tweet.read", "tweet.write", "users.read", "follows.read", "like.write", "like.read", "offline.access"];
 var TWITTER_SPEC = {
   kind: "twitter",
   displayName: "Twitter",
-  description: "Post tweets and reply to tweets on Twitter.",
+  description: "Read and verify Twitter/X engagement (follows, tweets, likes, retweets, mentions) and post or reply to tweets.",
   auth: {
     kind: "one_of",
     preferred: "oauth2",
@@ -113201,7 +113254,10 @@ var TWITTER_SPEC = {
   category: "comms",
   defaultConsistencyModel: "authoritative",
   baseUrl: "https://api.twitter.com/2",
-  test: { method: "GET", path: "/tweets/search/recent" },
+  // `/users/me` is the cheapest read that proves the grant: it needs only
+  // users.read, carries no required query param, and works on the free tier
+  // (unlike `/tweets/search/recent`, which 400s without a `query`).
+  test: { method: "GET", path: "/users/me" },
   capabilities: [
     {
       name: "tweets.create",
@@ -113299,6 +113355,123 @@ var TWITTER_SPEC = {
       },
       cas: "native-idempotency",
       externalEffect: true
+    },
+    // Read capabilities (official X API v2) — power quest verification in
+    // blueprint-agent. `users.me` is the anchor: it resolves the connected
+    // user id every other read needs. Optional `max_results` / `pagination_token`
+    // are dropped from the query when the caller omits them, so the declarative
+    // engine renders the bare endpoint by default. `following`, `liking_users`,
+    // and `retweeted_by` are gated behind a PAID X API tier at runtime — the
+    // capability is always present; availability is the registered app's tier.
+    {
+      name: "users.me",
+      class: "read",
+      description: 'Resolve the connected account (id, name, username) \u2014 anchors every other read. Pass user_fields (e.g. "public_metrics,created_at") to also fetch follower count and account age for anti-bot gating.',
+      parameters: {
+        type: "object",
+        properties: {
+          user_fields: {
+            type: "string",
+            description: 'Optional X `user.fields` selector, e.g. "public_metrics,created_at".'
+          }
+        }
+      },
+      request: { method: "GET", path: "/users/me", query: { "user.fields": "{user_fields}" } }
+    },
+    {
+      name: "users.following",
+      class: "read",
+      description: "List the accounts a user follows, for verifying follows and followed_by. Cursor with pagination_token. Gated behind a paid X API tier.",
+      parameters: {
+        type: "object",
+        properties: {
+          id: { type: "string", description: "User id whose following list to read (from users.me)." },
+          max_results: { type: "integer", description: "Page size (1\u20131000)." },
+          pagination_token: { type: "string", description: "Cursor from a prior page (meta.next_token)." }
+        },
+        required: ["id"]
+      },
+      request: {
+        method: "GET",
+        path: "/users/{id}/following",
+        query: { max_results: "{max_results}", pagination_token: "{pagination_token}" }
+      }
+    },
+    {
+      name: "users.tweets",
+      class: "read",
+      description: "List recent tweets authored by a user, for verifying tweeted. Hashtag filtering is applied by the caller. Cursor with pagination_token.",
+      parameters: {
+        type: "object",
+        properties: {
+          id: { type: "string", description: "Author user id (from users.me)." },
+          max_results: { type: "integer", description: "Page size (5\u2013100)." },
+          pagination_token: { type: "string", description: "Cursor from a prior page (meta.next_token)." }
+        },
+        required: ["id"]
+      },
+      request: {
+        method: "GET",
+        path: "/users/{id}/tweets",
+        query: { max_results: "{max_results}", "tweet.fields": "text,created_at", pagination_token: "{pagination_token}" }
+      }
+    },
+    {
+      name: "tweets.retweetedBy",
+      class: "read",
+      description: "List the accounts that retweeted a tweet, for verifying retweeted. Cursor with pagination_token. Gated behind a paid X API tier.",
+      parameters: {
+        type: "object",
+        properties: {
+          id: { type: "string", description: "Tweet id to inspect." },
+          max_results: { type: "integer", description: "Page size (1\u2013100)." },
+          pagination_token: { type: "string", description: "Cursor from a prior page (meta.next_token)." }
+        },
+        required: ["id"]
+      },
+      request: {
+        method: "GET",
+        path: "/tweets/{id}/retweeted_by",
+        query: { max_results: "{max_results}", pagination_token: "{pagination_token}" }
+      }
+    },
+    {
+      name: "tweets.likingUsers",
+      class: "read",
+      description: "List the accounts that liked a tweet, for verifying liked. Requires the like.read scope and a paid X API tier.",
+      parameters: {
+        type: "object",
+        properties: {
+          id: { type: "string", description: "Tweet id to inspect." },
+          max_results: { type: "integer", description: "Page size (1\u2013100)." },
+          pagination_token: { type: "string", description: "Cursor from a prior page (meta.next_token)." }
+        },
+        required: ["id"]
+      },
+      request: {
+        method: "GET",
+        path: "/tweets/{id}/liking_users",
+        query: { max_results: "{max_results}", pagination_token: "{pagination_token}" }
+      }
+    },
+    {
+      name: "users.mentions",
+      class: "read",
+      description: "List tweets that mention a user, for verifying mentioned. Author filtering is applied by the caller. Cursor with pagination_token.",
+      parameters: {
+        type: "object",
+        properties: {
+          id: { type: "string", description: "Mentioned user id (from users.me)." },
+          max_results: { type: "integer", description: "Page size (5\u2013100)." },
+          pagination_token: { type: "string", description: "Cursor from a prior page (meta.next_token)." }
+        },
+        required: ["id"]
+      },
+      request: {
+        method: "GET",
+        path: "/users/{id}/mentions",
+        query: { max_results: "{max_results}", "tweet.fields": "author_id,text", pagination_token: "{pagination_token}" }
+      }
     }
   ]
 };
@@ -124080,7 +124253,13 @@ var gongConnector = declarativeRestConnector({
       "api:flows:write"
     ],
     clientIdEnv: "GONG_OAUTH_CLIENT_ID",
-    clientSecretEnv: "GONG_OAUTH_CLIENT_SECRET"
+    clientSecretEnv: "GONG_OAUTH_CLIENT_SECRET",
+    // Gong returns the per-customer API host on the token response; capture it
+    // into metadata.apiBaseUrlForCustomer so `baseUrl` resolution below finds
+    // it. Required: the generic api.gong.io host is invalid for OAuth apps, so
+    // a missing value fails the exchange loud rather than minting a connection
+    // that looks active while every call 404s.
+    tokenMetadata: { apiBaseUrlForCustomer: { field: "api_base_url_for_customer", required: true } }
   },
   category: "comms",
   defaultConsistencyModel: "authoritative",
@@ -124592,6 +124771,11 @@ export {
   exchangeAuthorizationCode,
   refreshAccessToken,
   _resetPendingFlowsForTests,
+  googleErrorReason,
+  classifyGoogleReason,
+  classifyGoogleError,
+  googleApiError,
+  googleTestFailureReason,
   googleCalendar,
   googleDrive,
   googleSheets,
@@ -125129,4 +125313,4 @@ export {
   demandbaseConnector,
   adapters_exports
 };
-//# sourceMappingURL=chunk-HRPCFEGL.js.map
+//# sourceMappingURL=chunk-WTMOFI3U.js.map