@zackbart/connecta 0.10.0 → 0.10.2

package/src/ui.ts

@@ -14,6 +14,7 @@ import {
 } from "./concurrency.js";
 import {
   type CredentialManagementCapability,
+  type AccessTokenManagementCapability,
   type UiConnector,
   type UiData,
   type UiTool,
@@ -32,6 +33,7 @@ import { CONNECTA_VERSION } from "./version.js";
 
 export {
   filterUiConnectors,
+  type AccessTokenManagementCapability,
   type CredentialManagementCapability,
   type UiConnector,
   type UiData,
@@ -265,17 +267,23 @@ export function droppedUiAuthUrls(uiAuth?: UiAuthConfig): string[] {
   ];
 }
 
-export type OperatorPage = "connections" | "credentials" | "activity";
+export type OperatorPage =
+  | "connections"
+  | "credentials"
+  | "tokens"
+  | "activity";
 
 const OPERATOR_PAGE_LABELS: Readonly<Record<OperatorPage, string>> = {
   connections: "Connections",
   credentials: "Credentials",
+  tokens: "Access tokens",
   activity: "Activity",
 };
 
 export function operatorPageForPath(path: string): OperatorPage | undefined {
   if (path === "/") return "connections";
   if (path === "/credentials") return "credentials";
+  if (path === "/tokens") return "tokens";
   if (path === "/activity") return "activity";
   return undefined;
 }
@@ -315,6 +323,7 @@ export async function buildUiData(
   defer?: DeferredWork,
   oauthManagement = false,
   discoveryConcurrency?: number,
+  accessTokenManagement: AccessTokenManagementCapability = "not_configured",
 ): Promise<UiData> {
   const requestScope = {};
   const connectorSet = registry.listConnectors();
@@ -474,6 +483,7 @@ export async function buildUiData(
     connectors,
     activityEnabled,
     credentialManagement,
+    accessTokenManagement,
     oauthManagement,
   };
 }
@@ -583,6 +593,8 @@ ${clerkScript}
           data-operator-page="connections"${page === "connections" ? ' aria-current="page"' : ""}>Connections</a>
         <a id="credentialsNav" class="navlink hidden" href="/credentials"
           data-operator-page="credentials"${page === "credentials" ? ' aria-current="page"' : ""}>Credentials</a>
+        <a id="tokensNav" class="navlink hidden" href="/tokens"
+          data-operator-page="tokens"${page === "tokens" ? ' aria-current="page"' : ""}>Access tokens</a>
         <a id="activityNav" class="navlink hidden" href="/activity"
           data-operator-page="activity"${page === "activity" ? ' aria-current="page"' : ""}>Activity</a>
       </nav>
@@ -656,6 +668,43 @@ ${clerkScript}
     </div>
   </section>
 
+  <section id="tokensView"${page === "tokens" ? "" : ' class="hidden"'}>
+    <div class="lead pgrid">
+      <h1 id="tokensHeading" class="pcap" tabindex="-1">Access tokens</h1>
+      <div class="pbody">
+        <p class="activity-copy">Create named Bearer tokens for MCP clients. Each secret is shown once; revoke it when that client should lose access.</p>
+        <p id="tokenNotice" class="meta" role="status" aria-live="polite"
+          tabindex="-1"></p>
+        <div id="tokenUnavailable" class="unavailable hidden"></div>
+        <div id="tokenAvailable" class="hidden">
+          <form id="tokenCreateForm" class="token-create">
+            <label for="tokenName">Client name</label>
+            <div class="row">
+              <input id="tokenName" type="text" maxlength="80"
+                placeholder="Claude desktop, ChatGPT production…"
+                autocomplete="off">
+              <button id="createToken" class="linklike" type="submit">Create token</button>
+            </div>
+          </form>
+          <section id="tokenReveal" class="token-reveal hidden"
+            aria-labelledby="tokenRevealHeading">
+            <div class="token-reveal-head">
+              <h2 id="tokenRevealHeading" tabindex="-1">Copy this token now</h2>
+              <span class="cap">Shown once</span>
+            </div>
+            <p class="meta">Store it in the MCP client before leaving this page. It cannot be displayed again.</p>
+            <div class="endpoint-row token-secret">
+              <code id="createdToken" class="mono"></code>
+              <button id="copyCreatedToken" class="linklike" type="button">Copy token</button>
+            </div>
+            <button id="dismissCreatedToken" class="linklike" type="button">I stored it</button>
+          </section>
+          <div id="tokenList" class="token-ledger" aria-busy="false"></div>
+        </div>
+      </div>
+    </div>
+  </section>
+
   <section id="activityView"${page === "activity" ? "" : ' class="hidden"'}>
     <div class="lead pgrid">
       <h1 id="activityHeading" class="pcap" tabindex="-1">Activity</h1>

package/src/version.ts

@@ -4,4 +4,4 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export const CONNECTA_VERSION = "0.10.0";
+export const CONNECTA_VERSION = "0.10.2";

package/templates/node/.env.example

@@ -0,0 +1,5 @@
+# Required. Use a long random value and keep it out of source control.
+CONNECTA_TOKEN=replace-me
+
+# Optional. Defaults to 8787.
+PORT=8787

package/templates/node/AGENTS.md

@@ -0,0 +1,19 @@
+# Working on this Connecta deployment
+
+This repository is deployment configuration, not a copy of Connecta itself.
+
+- Edit `src/index.ts` for connectors, authentication, storage, and public URL.
+- Keep `executor: quickJsExecutor()` for the prescribed seven-tool code-first
+  surface.
+- Keep credentials in environment variables or an external secret store.
+  Never commit `.env`, `.connecta-state.json`, tokens, or credential values.
+- Add application logic only inside deliberate `api()` connector handlers.
+  Do not copy or modify Connecta package internals here.
+- Prefer `api()` when the agent must see an exact reviewed capability surface;
+  `remoteMcp()` follows the downstream server's evolving tool catalog.
+- Run `npm run typecheck` after configuration changes. With the server running,
+  run `CONNECTA_TOKEN=... npm run doctor` before calling setup complete.
+
+Do not add alternate entrypoints, policy layers, generated connector catalogs,
+or runtime connector registration. Keep the deployment small enough to review
+as configuration.

package/templates/node/README.md

@@ -0,0 +1,33 @@
+# Connecta deployment
+
+This is the prescribed small Node deployment. Install and run it:
+
+```sh
+npm install
+CONNECTA_TOKEN=dev-token npm start
+```
+
+Then point an MCP client at `http://localhost:8787/mcp` with
+`Authorization: Bearer dev-token`.
+
+## Deployment contract
+
+- Edit `src/index.ts` for connectors, auth, storage, and the public URL.
+- Keep `executor: quickJsExecutor()` for the seven-tool code-first surface.
+- Keep secrets in environment variables or an external secret store.
+- Add application code only inside deliberate `api()` connector handlers.
+- Do not copy Connecta package internals into this deployment.
+- `AGENTS.md` is the canonical convention file; `CLAUDE.md` points to it.
+
+Verify a change with:
+
+```sh
+npm run typecheck
+# In another terminal, while npm start is running:
+CONNECTA_TOKEN=dev-token npm run doctor
+```
+
+Doctor checks health, the executor, and the exact prescribed seven-tool
+model-facing surface by running a harmless sandbox program. It reads the bearer
+from `CONNECTA_TOKEN`; it never accepts the secret as a command-line argument.
+Remote URLs must use HTTPS.

package/templates/node/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "connecta-deployment",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "engines": {
+    "node": ">=20.9.0"
+  },
+  "scripts": {
+    "doctor": "connecta doctor",
+    "start": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@zackbart/connecta": "0.10.2",
+    "quickjs-emscripten": "0.32.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.23.1",
+    "typescript": "^5.6.0"
+  }
+}

package/templates/node/src/index.ts

@@ -0,0 +1,43 @@
+/**
+ * Prescribed Connecta deployment.
+ *
+ * Keep this file as deployment configuration: connectors, authentication,
+ * storage, and public origin. Add application logic only inside deliberate
+ * api() connector handlers.
+ */
+import { api, bearerToken, createConnecta } from "@zackbart/connecta";
+import { fileStorage, listen } from "@zackbart/connecta/node";
+import { quickJsExecutor } from "@zackbart/connecta/quickjs";
+
+const token = process.env.CONNECTA_TOKEN;
+if (!token) {
+  throw new Error(
+    "CONNECTA_TOKEN is required. Refusing to start without inbound auth.",
+  );
+}
+const port = Number(process.env.PORT ?? 8787);
+
+const connecta = createConnecta({
+  storage: fileStorage("./.connecta-state.json"),
+  auth: bearerToken(token, { subjectId: "operator" }),
+  publicUrl: `http://localhost:${port}`,
+  // Keep this for the prescribed seven-tool code-first surface.
+  executor: quickJsExecutor(),
+  connectors: [
+    api("time", {
+      description: "Time — current timestamp",
+      tools: [
+        {
+          name: "get_now",
+          description: "Return the current time as an ISO 8601 timestamp.",
+          inputSchema: { type: "object", properties: {} },
+          annotations: { readOnlyHint: true },
+          handler: async () => ({ now: new Date().toISOString() }),
+        },
+      ],
+    }),
+  ],
+});
+
+listen(connecta, port);
+console.log(`connecta listening on http://localhost:${port}/mcp`);

package/templates/node/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": ["src/**/*.ts"]
+}