@zackbart/connecta 0.15.0 → 0.15.1

package/dist/providers/stripe.js.map

@@ -1 +1 @@
-{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../src/providers/stripe.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,GAEV,MAAM,6BAA6B,CAAC;AAcrC,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AA2B7D;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAElB;IACF,UAAU,EAAE;QACV,KAAK,EAAE;YACL;gBACE,cAAc,EAAE,CAAC;gBACjB,cAAc,EAAE,KAAK;gBACrB,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;aACnE;SACF;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE;YACL;gBACE,cAAc,EAAE,CAAC;gBACjB,cAAc,EAAE,KAAK;gBACrB,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAClE;SACF;KACF;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,6BAA6B;IAC7B,+BAA+B;CAChC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,WAAW,GAAoD,IAAI,GAAG,CAAC;IAC3E,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACnC,CAAC,eAAe,EAAE,aAAa,CAAC;IAChC,CAAC,eAAe,EAAE,UAAU,CAAC;IAC7B,CAAC,0BAA0B,EAAE,UAAU,CAAC;CACzC,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,UAAmB;IACvC,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IAChD,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IACE,UAAU,CAAC,eAAe,KAAK,IAAI;YACnC,UAAU,CAAC,YAAY,KAAK,KAAK,EACjC,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO;YACL,GAAG,UAAU;YACb,WAAW,EAAE;gBACX,GAAG,UAAU;gBACb,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,KAAK;aACrD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QACvD,OAAO;YACL,GAAG,UAAU;YACb,WAAW,EAAE;gBACX,GAAG,UAAU;gBACb,YAAY,EAAE,KAAK;gBACnB,eAAe,EAAE,IAAI;aACtB;SACF,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,qEAAqE;IACrE,sEAAsE;IACtE,2EAA2E;IAC3E,wEAAwE;IACxE,8CAA8C;IAC9C,OAAO;QACL,GAAG,UAAU;QACb,WAAW,EAAE;YACX,GAAG,UAAU;YACb,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,KAAK;SAC/C;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AACxC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AAExC;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,EAAU,EACV,IAAgB,EAChB,IAAmB;IAEnB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAClC,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,qBAAqB,IAAI,iCAAiC;gBACrE,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,mBAAmB,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAU,EAAE,OAAsB;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,+DAA+D,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,yDAAyD;YACpE,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAEX;IACF,UAAU,EAAE;QACV,KAAK,EAAE,qBAAqB;QAC5B,KAAK,EAAE,4CAA4C;QACnD,OAAO,EACL,yMAAyM;KAC5M;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EACL,uMAAuM;KAC1M;CACF,CAAC;AAEF,SAAS,UAAU,CACjB,IAAgB,EAChB,OAAe,EACf,YAAgC;IAEhC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,mBAAmB,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO;;QAED,IAAI,sBAAsB,OAAO;;EAEvC,IAAI,CAAC,OAAO;;;;;;;;kLAQoK,IAAI;;;EAIlL,mBAAmB;QACjB,CAAC,CAAC,gCAAgC,mBAAmB,IAAI;QACzD,CAAC,CAAC,EACN,EAAE,CAAC;AACL,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,MAAM,CAAC,EAAU,EAAE,OAAsB;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,6CAA6C,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACtC,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,EAAE;QAC9B,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;QAClC,WAAW,EAAE,oBAAoB,IAAI,CAAC,KAAK,OAAO,OAAO,EAAE;QAC3D,IAAI;QACJ,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACrC,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,OAAO;QACL,GAAG,SAAS;QACZ,KAAK,CAAC,SAAS,CAAC,GAAG;YACjB,OAAO,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../src/providers/stripe.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,GAEV,MAAM,6BAA6B,CAAC;AAcrC,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AA2B7D;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAElB;IACF,UAAU,EAAE;QACV,KAAK,EAAE;YACL;gBACE,cAAc,EAAE,CAAC;gBACjB,cAAc,EAAE,KAAK;gBACrB,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;aACnE;SACF;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE;YACL;gBACE,cAAc,EAAE,CAAC;gBACjB,cAAc,EAAE,KAAK;gBACrB,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAClE;SACF;KACF;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,6BAA6B;IAC7B,+BAA+B;CAChC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,WAAW,GAAoD,IAAI,GAAG,CAAC;IAC3E,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACnC,CAAC,eAAe,EAAE,aAAa,CAAC;IAChC,CAAC,eAAe,EAAE,UAAU,CAAC;IAC7B,CAAC,0BAA0B,EAAE,UAAU,CAAC;CACzC,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,UAAmB;IACvC,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IAChD,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IACE,UAAU,CAAC,eAAe,KAAK,IAAI;YACnC,UAAU,CAAC,YAAY,KAAK,KAAK,EACjC,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO;YACL,GAAG,UAAU;YACb,WAAW,EAAE;gBACX,GAAG,UAAU;gBACb,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,KAAK;aACrD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QACvD,OAAO;YACL,GAAG,UAAU;YACb,WAAW,EAAE;gBACX,GAAG,UAAU;gBACb,YAAY,EAAE,KAAK;gBACnB,eAAe,EAAE,IAAI;aACtB;SACF,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,qEAAqE;IACrE,sEAAsE;IACtE,2EAA2E;IAC3E,wEAAwE;IACxE,8CAA8C;IAC9C,OAAO;QACL,GAAG,UAAU;QACb,WAAW,EAAE;YACX,GAAG,UAAU;YACb,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,KAAK;SAC/C;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AACxC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AAExC;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,EAAU,EACV,IAAgB,EAChB,IAAmB;IAEnB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAClC,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,qBAAqB,IAAI,iCAAiC;gBACrE,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,mBAAmB,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAU,EAAE,OAAsB;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,+DAA+D,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,yDAAyD;YACpE,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAEX;IACF,UAAU,EAAE;QACV,KAAK,EAAE,qBAAqB;QAC5B,KAAK,EAAE,4CAA4C;QACnD,OAAO,EACL,yMAAyM;KAC5M;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EACL,uMAAuM;KAC1M;CACF,CAAC;AAEF,SAAS,UAAU,CACjB,IAAgB,EAChB,OAAe,EACf,YAAgC;IAEhC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,mBAAmB,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO;;QAED,IAAI,sBAAsB,OAAO;;EAEvC,IAAI,CAAC,OAAO;;;;;;;;kLAQoK,IAAI;;;EAIlL,mBAAmB;QACjB,CAAC,CAAC,gCAAgC,mBAAmB,IAAI;QACzD,CAAC,CAAC,EACN,EAAE,CAAC;AACL,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,MAAM,CAAC,EAAU,EAAE,OAAsB;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,WAAW,EAAE,6CAA6C,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACtC,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,EAAE;QAC9B,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;QAClC,WAAW,EAAE,oBAAoB,IAAI,CAAC,KAAK,OAAO,OAAO,EAAE;QAC3D,IAAI;QACJ,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACrC,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,OAAO;QACL,GAAG,SAAS;QACZ,KAAK,CAAC,SAAS,CAAC,GAAG;YACjB,OAAO,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/version.d.ts

@@ -4,5 +4,5 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export declare const CONNECTA_VERSION = "0.15.0";
+export declare const CONNECTA_VERSION = "0.15.1";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -4,5 +4,5 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export const CONNECTA_VERSION = "0.15.0";
+export const CONNECTA_VERSION = "0.15.1";
 //# sourceMappingURL=version.js.map

package/documentation/cloudflare.md

@@ -23,6 +23,18 @@ const edge = cloudflare("cloudflare_prod", {
 });
 ```
 
+Use the legacy user-scoped Global API Key when an existing deployment needs it:
+
+```ts
+const legacyEdge = cloudflare("cloudflare_legacy", {
+  purpose: "Legacy account administration",
+  authentication: "globalApiKey",
+});
+```
+
+The operator UI then asks for the Cloudflare user email and Global API Key as
+separate fields. The default remains a scoped API token.
+
 The `id` owns the ordinary connector namespaces; use a different id for every
 Cloudflare account or estate. `purpose` is required because an agent choosing
 between a production and a staging instance needs to know which one answers the
@@ -40,7 +52,7 @@ dependency would cost is real — an optional peer with its own install step and
 version skew, an import that never belongs in the root graph, and a second
 opinion about what a Cloudflare call looks like.
 
-The API itself does not need one. It is Bearer-token `fetch` with a uniform
+The API itself does not need one. It is authenticated `fetch` with a uniform
 `{ success, errors, messages, result, result_info }` response envelope. JSON,
 raw bytes, and multipart request bodies all use Web APIs, which keeps the
 provider Workers-clean and means `@zackbart/connecta/providers/cloudflare`
@@ -51,10 +63,16 @@ must be relative.
 
 ## Credentials
 
-The connection declares one operator-managed credential: a scoped Cloudflare
-API token, sent as `Authorization: Bearer <token>`. Create it under My Profile →
-API Tokens → Create Token. Do not use a Global API Key — it carries every
-permission on the account and cannot be scoped.
+The default credential is a scoped Cloudflare API token, sent as
+`Authorization: Bearer <token>`. Create it under My Profile → API Tokens →
+Create Token.
+
+Set `authentication: "globalApiKey"` to use the legacy user-scoped scheme. The
+credential form stores two encrypted fields and sends them as `X-Auth-Email`
+and `X-Auth-Key`. The Global API Key has the same access as its Cloudflare user
+across every account and zone that user can reach. It cannot be scoped, only
+one can exist per user, and it has no expiry or IP limits. Cloudflare recommends
+API tokens for new use, but existing Global API Keys remain supported.
 
 Grant only what the deployment needs:
 
@@ -83,10 +101,9 @@ scope. "Cache Purge" is a single permission with no Read/Write split, and
 Cloudflare's own reference renders a few labels differently between its
 Dashboard and API tabs.
 
-`verify_api_token` needs no permission beyond the token existing, which is what
-makes it the right first call when something fails. The `/credentials` Test
-action runs the same verification against the candidate token before it is
-stored.
+`verify_api_token` needs no permission beyond the token existing. In legacy
+mode, `verify_global_api_key` reads `/user` to confirm the email and key pair.
+The `/credentials` Test action runs the matching check before storage.
 
 Cloudflare rate-limits *authentication failures* aggressively and separately
 from the global limit: a few requests with a bad token return HTTP 429 with
@@ -146,7 +163,8 @@ method classification into user input:
   default; `responseType: "text" | "base64"` retrieves scripts, logs, R2
   objects, and media bodies without pretending they have a JSON envelope.
 - `cloudflare_api_mutate` accepts JSON POST, PUT, PATCH, and DELETE. It is always
-  destructive, even when a particular POST is merely additive.
+  destructive, even when a particular POST is merely additive. It preserves
+  ordinary non-envelope JSON from endpoints such as `/graphql`.
 - `cloudflare_api_upload` accepts POST or PUT plus exactly one of raw text,
   base64 bytes, or multipart fields/files. It is always destructive and reads
   no local files.
@@ -160,7 +178,7 @@ Paths are relative to `/client/v4`. Absolute URLs, protocol-relative paths,
 `..` traversal, fragments, and embedded query strings are refused locally;
 query parameters are explicit name/value pairs. These tools reuse the same
 credential, admission budget, abort signal, envelope parsing, and typed failure
-mapping as named tools. They do not widen the token's Cloudflare permissions.
+mapping as named tools. They do not widen the configured credential's access.
 
 This is intentionally not OpenAPI ingestion: it creates three stable tools,
 not one tool per Cloudflare operation. For example, an agent can list Images at
@@ -271,8 +289,8 @@ official table mapping error codes to causes, so that set is assembled from
 community reports and probing, not from documentation. The same goes for the
 claim below that `10000` is overloaded — that is an observation about responses
 seen in practice. Treat both as well-supported readings that Cloudflare could
-invalidate without notice, and prefer `verify_api_token` over the code list
-when a diagnosis actually matters.
+invalidate without notice. Prefer `verify_api_token` or
+`verify_global_api_key`, as configured, when a diagnosis matters.
 
 Two ordering decisions are deliberate. The 429 branch is checked before the
 authentication codes, because Cloudflare reuses the generic `10000` code on
@@ -280,15 +298,15 @@ throttled responses and reading a rate limit as an auth failure would tell an
 agent to stop when it should wait. And `10000` is *not* itself treated as an
 auth code: Cloudflare returns it for "Authentication error" but also for
 ordinary validation failures like "Invalid pagination cursor" and
-"domain_name is required", so routing on it would tell an agent its token was
+"domain_name is required", so routing on it would tell an agent its credential was
 broken when its arguments were. Genuine `10000` auth failures arrive with 401
 or 403 and are caught by status.
 
 Because the connection declares an operator-managed credential rather than an
 OAuth flow, an `auth_required` failure resolves to the `operator_config`
-recovery mode — the fix is a human updating the token, not an authorization
-URL the agent can open. A missing token fails that way before any request is
-made.
+recovery mode — the fix is a human updating the credential, not an authorization
+URL the agent can open. A missing credential fails that way before any request
+is made.
 
 Some failures never reach Cloudflare at all. A blank scope id, a `purge_cache`
 call with no variant or two, and an `update_dns_record` with nothing to change
@@ -309,5 +327,5 @@ enforcement of it. Each runtime keeps its own counter, so N Worker isolates or
 Node processes serving one deployment can each admit up to 1,200 — and the
 dashboard traffic of a human sharing the account is counted by Cloudflare but
 not by Connecta. `maxConcurrency` is the bound that actually protects a shared
-token, because a single `execute_code` program can fan out far faster than the
-window notices.
+credential, because a single `execute_code` program can fan out far faster than
+the window notices.

package/documentation/connectors.md

@@ -47,13 +47,15 @@ choice does not grant the connection different runtime privileges. Two
 instances of the same provider are isolated in exactly the same way as two
 hand-written connectors with different ids.
 
-A prebuilt connection's vetted annotations are fill-in only. They classify what
-the downstream leaves unannotated and do not argue with what it states — not an
-explicit `destructiveHint: true` or `readOnlyHint: false` on a name the
-connection files as a read, nor an explicit `readOnlyHint: true` on a name no
-release has classified at all. Silence on an unclassified name still means not
-read-only, so catalog drift fails closed. The fail-closed read-only invariant
-is unchanged by the authoring path.
+A prebuilt connection's vetted annotations fill in downstream silence and
+otherwise preserve explicit annotations. This includes an explicit
+`destructiveHint: true` or `readOnlyHint: false` on a vetted read, and an
+explicit `readOnlyHint: true` on a name no release has classified. One narrow
+exception stays fail-closed: a release-reviewed destructive classification
+overrides a contradictory `readOnlyHint: true`, because Connecta has
+independently established that the tool mutates existing state. Silence on an
+unclassified name still means not read-only. The authoring path never weakens
+the fail-closed read-only invariant.
 
 Prebuilt means preferred when available, not mandatory. A deployment may mix
 prebuilt connections, custom `remoteMcp()` connections, and custom `api()`

package/documentation/linear.md

@@ -83,18 +83,17 @@ The wrapper classifies Linear's documented `list_*`, `get_*`, and
 downstream leaves unannotated fails closed onto `call_destructive_tool` until a
 Connecta release reviews it.
 
-That classification is **fill-in only**, and unconditionally so: it supplies
-the annotations Linear leaves unset and contradicts an explicit downstream
-annotation in neither direction. A tool on the read allowlist arriving with
+That classification fills in downstream silence and otherwise preserves
+explicit annotations. A tool on the read allowlist arriving with
 `destructiveHint: true` or `readOnlyHint: false` keeps exactly what the
 downstream said and stays behind `call_destructive_tool`. A tool on neither
 maintained list arriving with `readOnlyHint: true` keeps that too, and stays
 callable from `execute_code`. Both are the downstream telling you this
 release's allowlist is stale, and on a name no release has reviewed its word is
-the only evidence there is. The one classification that still outranks the
-downstream is a name this release reviewed and filed destructive: a `save_*`
-tool claiming `readOnlyHint: true` is a downstream bug rather than news, and
-stays on the approval path.
+the only evidence there is. One narrow fail-closed exception applies to a name
+this release reviewed and filed destructive: a `save_*` tool claiming
+`readOnlyHint: true` is a downstream bug rather than news, and stays on the
+approval path.
 
 One detail of Linear's own design shapes the classification: **`save_*` tools
 are upserts.** Omitting a record id creates; supplying one updates in place.

package/documentation/mixpanel.md

@@ -49,18 +49,17 @@ documented create, update, edit, merge, dismiss, duplicate, and delete tools as
 writes. An unfamiliar tool the downstream leaves unannotated fails closed onto
 `call_destructive_tool` until a Connecta release reviews it.
 
-That classification is **fill-in only**, and unconditionally so: it supplies
-the annotations Mixpanel leaves unset and contradicts an explicit downstream
-annotation in neither direction. A tool on the read allowlist arriving with
+That classification fills in downstream silence and otherwise preserves
+explicit annotations. A tool on the read allowlist arriving with
 `destructiveHint: true` or `readOnlyHint: false` keeps exactly what the
 downstream said and stays behind `call_destructive_tool`. A tool on neither
 maintained list arriving with `readOnlyHint: true` keeps that too, and stays
 callable from `execute_code`. Both are the downstream telling you this
 release's allowlist is stale, and on a name no release has reviewed its word is
-the only evidence there is. The one classification that still outranks the
-downstream is a name this release reviewed and filed destructive: a
-`Delete-Dashboard` claiming `readOnlyHint: true` is a downstream bug rather
-than news, and stays on the approval path. Maintained writes that only create
+the only evidence there is. One narrow fail-closed exception applies to a name
+this release reviewed and filed destructive: a `Delete-Dashboard` claiming
+`readOnlyHint: true` is a downstream bug rather than news, and stays on the
+approval path. Maintained writes that only create
 something new (`Create-Dashboard`, `Create-Cohort`, `Create-Metric`, and the
 rest) leave `destructiveHint` unset; `readOnlyHint: false` already routes them
 through the destructive path, and asserting destruction only inflates the

package/documentation/stripe.md

@@ -137,18 +137,18 @@ exists rather than a fresh object appearing beside it. Additive writes
 `readOnlyHint: false` already routes them through `call_destructive_tool`, and
 asserting destruction only inflates the approval copy the host shows a human.
 
-That classification is **fill-in only**, and unconditionally so: it supplies
-the annotations Stripe leaves unset — Stripe documents no MCP annotations at
-all — and contradicts an explicit downstream annotation in neither direction. A
-tool on the read allowlist arriving with `destructiveHint: true` or
-`readOnlyHint: false` keeps exactly what the downstream said and stays behind
-`call_destructive_tool`. A tool on neither maintained list arriving with
-`readOnlyHint: true` keeps that too, and stays callable from `execute_code`.
-Both are the downstream telling you this release's allowlist is stale, and on a
-name no release has reviewed its word is the only evidence there is. The one
-classification that still outranks the downstream is a name this release
-reviewed and filed destructive: a `create_refund` claiming `readOnlyHint: true`
-is a downstream bug rather than news, and stays on the approval path.
+That classification fills in downstream silence and otherwise preserves
+explicit annotations. It supplies the annotations Stripe leaves unset — Stripe
+documents no MCP annotations at all. A tool on the read allowlist arriving with
+`destructiveHint: true` or `readOnlyHint: false` keeps exactly what the
+downstream said and stays behind `call_destructive_tool`. A tool on neither
+maintained list arriving with `readOnlyHint: true` keeps that too, and stays
+callable from `execute_code`. Both are the downstream telling you this release's
+allowlist is stale, and on a name no release has reviewed its word is the only
+evidence there is. One narrow fail-closed exception applies to a name this
+release reviewed and filed destructive: a `create_refund` claiming
+`readOnlyHint: true` is a downstream bug rather than news, and stays on the
+approval path.
 
 An unfamiliar tool that annotates nothing fails closed onto
 `call_destructive_tool` until a Connecta release reviews it. That is not

package/ethos.md

@@ -69,7 +69,7 @@ proposing one without a new argument is not.
 | Multi-tenancy / account model | refused | one deployment per tenant; deploy again instead |
 | Policy engine, approvals, pauses | refused | the host asks the human; connecta only annotates |
 | Runtime connector registration | refused | config-as-code is the security model |
-| Prebuilt connections as the preferred authoring path | accepted | an a-la-carte provider constructor, imported and constructed in the deployment file, encodes maintained defaults for providers connecta actually uses — preferred *when maintained*, with no promise of one per provider; it returns exactly one ordinary `Connector` with no extra privileges — never a bundle, a group, a preset, or a registry — its tools are hand-written or proxied from a downstream MCP catalog, never generated from a schema document; its vetted annotations classify what the downstream leaves unannotated and never overrule an explicit one; `remoteMcp()` and `api()` stay first-class ([#297](https://github.com/zackbart/connecta/issues/297)) |
+| Prebuilt connections as the preferred authoring path | accepted | an a-la-carte provider constructor, imported and constructed in the deployment file, encodes maintained defaults for providers connecta actually uses — preferred *when maintained*, with no promise of one per provider; it returns exactly one ordinary `Connector` with no extra privileges — never a bundle, a group, a preset, or a registry — its tools are hand-written or proxied from a downstream MCP catalog, never generated from a schema document; its vetted annotations classify what the downstream leaves unannotated and otherwise preserve explicit annotations, with one fail-closed exception: a release-reviewed destructive classification outranks a contradictory downstream `readOnlyHint: true`, because Connecta has independently established that the tool mutates existing state; `remoteMcp()` and `api()` stay first-class ([#297](https://github.com/zackbart/connecta/issues/297), [#315](https://github.com/zackbart/connecta/issues/315)) |
 | Guarded raw REST escape hatches in a prebuilt connection | accepted | a large, fast-moving provider cannot be honestly represented by a small frozen list: a GET-only tool may expose provider-relative reads, while JSON mutations and explicit-content uploads stay separate and always cross the destructive boundary; the connector owns authentication, rate limits, error mapping, URL confinement, and safe method classification, while the provider token remains the capability boundary — this is not schema ingestion, runtime connector registration, or permission widening |
 | Provider registry / integration marketplace | refused | prebuilt connections are imports, not listings; discovery happens in documentation, never at runtime ([#297](https://github.com/zackbart/connecta/issues/297)) |
 | Protocol sessions & server push | refused | stateless per request |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zackbart/connecta",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "type": "module",
   "sideEffects": false,
   "description": "One MCP to rule them all — a single MCP endpoint aggregating many downstream connectors behind a code-first surface of seven meta-tools.",