@zackbart/connecta 0.19.0 → 0.20.0

package/dist/operator-ui/generated.d.ts

@@ -1,2 +1,2 @@
-export declare const OPERATOR_UI_CSS = "/* src/operator-ui/browser.css */\n:root {\n  color-scheme: light;\n  --ink: #000;\n  --paper: #fff;\n  --rule: #ccc;\n  --muted: #666;\n  --trace: #f5f5f5;\n  --shell: 70rem;\n  --pad: 1rem;\n  --gap: 1.5rem;\n  --sans:\n    \"Helvetica Neue\",\n    Helvetica,\n    Arial,\n    sans-serif;\n  --mono:\n    ui-monospace,\n    \"SF Mono\",\n    Menlo,\n    Monaco,\n    \"Cascadia Code\",\n    Consolas,\n    monospace;\n}\n* {\n  border-radius: 0;\n  box-sizing: border-box;\n}\nhtml {\n  background: var(--paper);\n  color: var(--ink);\n  font-family: var(--sans);\n  font-size: 16px;\n  line-height: 1.5;\n  -webkit-font-smoothing: antialiased;\n  text-rendering: optimizeLegibility;\n}\nbody {\n  margin: 0;\n  min-height: 100vh;\n}\n::selection {\n  background: var(--ink);\n  color: var(--paper);\n}\n:is(h1, h2, h3, p, ul, ol) {\n  margin: 0;\n  padding: 0;\n}\n:is(h1, h2, h3) {\n  font-size: inherit;\n  font-weight: 400;\n}\n:is(ul, ol) {\n  list-style: none;\n}\na {\n  color: inherit;\n}\nbutton,\ninput {\n  font: inherit;\n}\nbutton {\n  background: none;\n  border: 0;\n  color: inherit;\n  cursor: pointer;\n  margin: 0;\n  padding: 0;\n  text-align: left;\n}\nbutton:disabled {\n  cursor: wait;\n  opacity: .5;\n}\ninput {\n  background: var(--paper);\n  border: 1px solid var(--rule);\n  color: var(--ink);\n  min-height: 2rem;\n  padding: .2rem .5rem;\n}\ninput:focus-visible {\n  outline-offset: -1px;\n}\n:is(a, button, input, summary):focus-visible {\n  outline: 1px solid var(--ink);\n}\n:is(a, button, summary):focus-visible {\n  outline-offset: 2px;\n}\n.skip-link {\n  background: var(--paper);\n  left: var(--pad);\n  padding: .5rem;\n  position: fixed;\n  top: -4rem;\n  z-index: 10;\n}\n.skip-link:focus {\n  top: var(--pad);\n}\n.shell {\n  margin: 0 auto;\n  max-width: var(--shell);\n  padding-left: var(--pad);\n  padding-right: var(--pad);\n}\n.pgrid {\n  column-gap: var(--gap);\n  display: grid;\n  grid-template-columns: repeat(3, minmax(0, 1fr));\n  row-gap: 1rem;\n}\n.pcap {\n  grid-column: 1;\n}\n.pbody {\n  grid-column: 2 / -1;\n  min-width: 0;\n}\n.cap,\n.meta {\n  color: var(--muted);\n  font-size: .9em;\n}\n.mono {\n  font-family: var(--mono);\n  font-size: .78rem;\n}\n.visually-hidden {\n  clip: rect(0 0 0 0);\n  clip-path: inset(50%);\n  height: 1px;\n  overflow: hidden;\n  position: absolute;\n  white-space: nowrap;\n  width: 1px;\n}\n.masthead {\n  align-items: start;\n  padding-bottom: var(--pad);\n  padding-top: var(--pad);\n}\n.brand {\n  font-weight: 500;\n  grid-column: 1;\n  text-decoration: none;\n}\n.mast-nav {\n  display: flex;\n  gap: var(--gap);\n  grid-column: 2 / -1;\n  justify-content: space-between;\n  min-width: 0;\n}\n.mast-actions {\n  display: flex;\n  gap: var(--gap);\n  justify-content: flex-end;\n  min-width: 0;\n}\n.page-nav,\n.session-actions {\n  display: flex;\n  flex-wrap: wrap;\n  gap: .5rem var(--gap);\n}\n.mast-actions :is(a, button) {\n  align-items: center;\n  display: inline-flex;\n  min-height: 2rem;\n}\n.navlink,\n.linklike {\n  text-decoration: underline;\n  text-decoration-thickness: 1.5px;\n  text-underline-offset: .22em;\n}\n.navlink {\n  text-decoration-color: transparent;\n}\n.navlink:hover,\n.navlink:focus-visible,\n.navlink[aria-current=page] {\n  text-decoration-color: currentColor;\n}\n.linklike {\n  text-decoration-color: currentColor;\n}\n.linklike:hover,\n.linklike:focus-visible {\n  text-decoration-color: transparent;\n}\n.page {\n  padding-bottom: 5rem;\n}\n.lead {\n  margin-top: 6rem;\n}\n.section,\n.section + .section {\n  margin-top: 3rem;\n}\n.lead-copy,\n.body-copy {\n  max-width: 34em;\n}\n.lead-copy > * + *,\n.body-copy > * + * {\n  margin-top: 1.5rem;\n}\n.row,\n.actions {\n  align-items: center;\n  display: flex;\n  flex-wrap: wrap;\n  gap: var(--gap);\n}\n.row input {\n  flex: 1;\n  min-width: 12rem;\n}\n.gate-actions {\n  margin-top: 1.5rem;\n}\n#err {\n  margin-top: 1.5rem;\n  text-decoration: underline;\n}\n.endpoint {\n  border-bottom: 1px solid var(--rule);\n  border-top: 1px solid var(--rule);\n}\n.endpoint-row {\n  align-items: baseline;\n  display: flex;\n  gap: var(--gap);\n  min-width: 0;\n  padding: .75rem 0;\n}\n.endpoint-row code {\n  flex: 1;\n  min-width: 0;\n  overflow-x: auto;\n  white-space: nowrap;\n}\n.endpoint-row button {\n  flex: none;\n}\n.connector-tools {\n  border-bottom: 1px solid var(--rule);\n}\n.toolbar {\n  margin-bottom: 1.5rem;\n}\n.toolbar input {\n  flex-basis: 18rem;\n}\n#oauthNotice {\n  margin-bottom: .75rem;\n}\n#oauthNotice:empty {\n  display: none;\n}\n.error-notice,\n.msg {\n  text-decoration: underline;\n}\n.card,\n.credential-card,\n.activity-item {\n  padding-left: 1.25rem;\n  position: relative;\n}\n.card::before,\n.credential-card::before,\n.activity-item::before {\n  background: var(--rule);\n  bottom: 0;\n  content: \"\";\n  left: .25rem;\n  position: absolute;\n  top: 0;\n  width: 1px;\n}\n.card {\n  border-top: 1px solid var(--rule);\n  padding-bottom: .75rem;\n  padding-top: .75rem;\n}\n.connector-head {\n  display: grid;\n  gap: var(--gap);\n  grid-template-columns: minmax(0, 2fr) minmax(10rem, 1fr);\n}\n.connector-title {\n  align-items: baseline;\n  display: flex;\n  gap: .5rem;\n}\n.connector-title .dot,\n.activity-stamp .dot {\n  margin-left: -1.25rem;\n}\n.activity-stamp {\n  align-items: baseline;\n  display: flex;\n  gap: .75rem;\n}\n.card h2 {\n  overflow-wrap: anywhere;\n}\n.connector-state {\n  text-align: right;\n}\n.dot {\n  background: var(--paper);\n  border: 1px solid var(--ink);\n  display: inline-block;\n  flex: none;\n  height: .5rem;\n  width: .5rem;\n  z-index: 1;\n}\n.dot.ok {\n  background: var(--ink);\n}\n.dot.auth_required {\n  background:\n    linear-gradient(\n      90deg,\n      var(--ink) 50%,\n      var(--paper) 50%);\n}\n.connector-description {\n  margin-top: .25rem;\n  max-width: 40rem;\n}\n.connector-message,\n.connector-auth {\n  margin-top: .75rem;\n}\n.connector-drift {\n  border-top: 1px solid var(--rule);\n  margin-top: .75rem;\n  padding-top: .75rem;\n}\n.drift-summary {\n  margin-top: .25rem;\n}\n.drift-counts {\n  display: flex;\n  flex-wrap: wrap;\n  gap: .25rem var(--gap);\n  margin-top: .5rem;\n}\n.drift-count {\n  color: var(--muted);\n  font-size: .9em;\n}\n.drift-count.flagged {\n  color: var(--ink);\n}\n.drift-count-value {\n  font-family: var(--mono);\n  margin-right: .35rem;\n}\n.drift-count.flagged .drift-count-value {\n  text-decoration: underline;\n}\n.credential-ledger {\n  border-bottom: 1px solid var(--rule);\n}\n.credential-card {\n  border-top: 1px solid var(--rule);\n  padding-bottom: .75rem;\n  padding-top: .75rem;\n}\n.credential-head {\n  align-items: baseline;\n  display: flex;\n  flex-wrap: wrap;\n  gap: .25rem var(--gap);\n  justify-content: space-between;\n}\n.credential-copy {\n  margin-top: .25rem;\n  max-width: 40rem;\n}\n.credential-field-summary {\n  border-top: 1px solid var(--rule);\n  margin-top: .75rem;\n}\n.credential-field-summary > div {\n  border-bottom: 1px solid var(--rule);\n  display: flex;\n  flex-wrap: wrap;\n  gap: .25rem var(--gap);\n  justify-content: space-between;\n  padding: .5rem 0;\n}\n.credential-actions {\n  display: flex;\n  flex-wrap: wrap;\n  gap: var(--gap);\n  margin-top: .75rem;\n}\n.credential-actions button,\n.credential-form button,\n.activity-controls button,\n.activity-more {\n  align-items: center;\n  display: inline-flex;\n  min-height: 2.75rem;\n}\n.credential-form {\n  align-items: center;\n  display: flex;\n  flex-wrap: wrap;\n  gap: .75rem var(--gap);\n  margin-top: .75rem;\n}\n.credential-form > input {\n  flex: 1 1 18rem;\n}\n.credential-fields {\n  display: grid;\n  flex: 1 1 100%;\n  gap: .75rem;\n}\n.credential-field {\n  align-items: center;\n  display: grid;\n  gap: var(--gap);\n  grid-template-columns: minmax(9rem, 12rem) 1fr;\n}\n.credential-field input {\n  min-width: 0;\n  width: 100%;\n}\n.danger {\n  text-decoration-style: double;\n}\n.token-create {\n  border-bottom: 1px solid var(--rule);\n  border-top: 1px solid var(--rule);\n  padding: .75rem 0;\n}\n.token-create > label {\n  display: block;\n  margin-bottom: .5rem;\n}\n.token-create input {\n  flex: 1 1 18rem;\n}\n.token-create button,\n.token-card button,\n.token-reveal button {\n  align-items: center;\n  display: inline-flex;\n  min-height: 2.75rem;\n}\n.token-reveal {\n  background: var(--ink);\n  color: var(--paper);\n  margin-top: 1.5rem;\n  padding: 1rem 1.25rem;\n}\n.token-reveal .meta,\n.token-reveal .cap {\n  color: #bbb;\n}\n.token-reveal-head,\n.token-card-head {\n  align-items: baseline;\n  display: flex;\n  flex-wrap: wrap;\n  gap: .25rem var(--gap);\n  justify-content: space-between;\n}\n.token-secret {\n  border-bottom: 1px solid #555;\n  border-top: 1px solid #555;\n  margin-top: .75rem;\n}\n.token-secret code {\n  color: var(--paper);\n  user-select: all;\n}\n.token-ledger {\n  border-bottom: 1px solid var(--rule);\n  margin-top: 1.5rem;\n}\n.token-card {\n  border-top: 1px solid var(--rule);\n  padding: .75rem 0 .75rem 1.25rem;\n  position: relative;\n}\n.token-card::before {\n  background: var(--ink);\n  bottom: 0;\n  content: \"\";\n  left: .25rem;\n  position: absolute;\n  top: 0;\n  width: 1px;\n}\n.token-card.revoked {\n  color: var(--muted);\n}\n.token-card.revoked::before {\n  background: var(--rule);\n}\ndetails {\n  margin-top: .75rem;\n}\nsummary {\n  cursor: pointer;\n  list-style: none;\n  width: max-content;\n}\nsummary::-webkit-details-marker {\n  display: none;\n}\n.tool-list {\n  border-bottom: 1px solid var(--rule);\n  margin-top: .5rem;\n}\n.tool {\n  border-top: 1px solid var(--rule);\n  display: grid;\n  gap: .25rem var(--gap);\n  grid-template-columns: minmax(12rem, 1fr) minmax(0, 2fr);\n  padding: .5rem 0;\n}\n.tool code {\n  font-family: var(--mono);\n  font-size: .78rem;\n  overflow-wrap: anywhere;\n}\n.tool .td {\n  color: var(--muted);\n  font-size: .9em;\n}\n.empty {\n  border-top: 1px solid var(--rule);\n  padding: .75rem 0;\n}\n.activity-copy {\n  margin-bottom: 1.5rem;\n}\n.activity-controls {\n  margin-bottom: 1.5rem;\n}\n.activity-controls input {\n  flex: 1 1 18rem;\n}\n#activityNotice {\n  margin-bottom: .75rem;\n}\n.activity-ledger {\n  border-bottom: 1px solid var(--rule);\n}\n.activity-item {\n  border-top: 1px solid var(--rule);\n  display: grid;\n  gap: .25rem var(--gap);\n  grid-template-columns: minmax(9rem, .85fr) minmax(12rem, 1.4fr) minmax(8rem, .9fr);\n  padding-bottom: .75rem;\n  padding-top: .75rem;\n}\n.activity-time,\n.activity-actor,\n.activity-detail {\n  color: var(--muted);\n  font-size: .82rem;\n}\n.activity-actor-id {\n  color: var(--muted);\n  margin-top: .1rem;\n}\n.activity-address {\n  font-family: var(--mono);\n  font-size: .78rem;\n  overflow-wrap: anywhere;\n}\n.activity-outcome {\n  font-size: .9em;\n}\n.activity-item.error .activity-outcome,\n.activity-item.timeout .activity-outcome,\n.activity-item.cancelled .activity-outcome {\n  text-decoration: underline;\n}\n.activity-empty {\n  border-top: 1px solid var(--rule);\n  padding: .75rem 0;\n}\n.activity-more {\n  margin-top: .75rem;\n}\n.unavailable {\n  background: var(--trace);\n  border-bottom: 1px solid var(--rule);\n  border-top: 1px solid var(--rule);\n  padding: .75rem;\n}\n@media (prefers-reduced-motion: reduce) {\n  html:focus-within {\n    scroll-behavior: auto;\n  }\n}\n@media (max-width: 36.99rem) {\n  .pgrid {\n    grid-template-columns: repeat(2, minmax(0, 1fr));\n  }\n  .pcap,\n  .pbody {\n    grid-column: 1 / -1;\n  }\n  .masthead .brand {\n    grid-column: 1;\n  }\n  .mast-nav {\n    grid-column: 1 / -1;\n    grid-row: 2;\n    justify-content: flex-start;\n  }\n  .product {\n    display: none;\n  }\n  .mast-actions {\n    align-items: flex-start;\n    flex-direction: column;\n    font-size: .875rem;\n    gap: .25rem;\n  }\n  .lead {\n    margin-top: 4rem;\n  }\n  .section,\n  .section + .section {\n    margin-top: 2.5rem;\n  }\n  .connector-head,\n  .tool,\n  .activity-item {\n    grid-template-columns: 1fr;\n  }\n  .connector-state {\n    text-align: left;\n  }\n  .credential-field {\n    align-items: start;\n    grid-template-columns: 1fr;\n    gap: .25rem;\n  }\n  input {\n    min-height: 2.75rem;\n  }\n}\n";
-export declare const OPERATOR_UI_SCRIPT = "\"use strict\";\n(() => {\n  // node_modules/preact/dist/preact.module.js\n  var n;\n  var l;\n  var u;\n  var t;\n  var i;\n  var r;\n  var o;\n  var e;\n  var f;\n  var c;\n  var a;\n  var s;\n  var h;\n  var p;\n  var v;\n  var y;\n  var d = {};\n  var w = [];\n  var _ = /acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i;\n  var g = Array.isArray;\n  function m(n2, l3) {\n    for (var u4 in l3) n2[u4] = l3[u4];\n    return n2;\n  }\n  function b(n2) {\n    n2 && n2.parentNode && n2.parentNode.removeChild(n2);\n  }\n  function k(l3, u4, t3) {\n    var i3, r3, o3, e3 = {};\n    for (o3 in u4) \"key\" == o3 ? i3 = u4[o3] : \"ref\" == o3 ? r3 = u4[o3] : e3[o3] = u4[o3];\n    if (arguments.length > 2 && (e3.children = arguments.length > 3 ? n.call(arguments, 2) : t3), \"function\" == typeof l3 && null != l3.defaultProps) for (o3 in l3.defaultProps) void 0 === e3[o3] && (e3[o3] = l3.defaultProps[o3]);\n    return x(l3, e3, i3, r3, null);\n  }\n  function x(n2, t3, i3, r3, o3) {\n    var e3 = { type: n2, props: t3, key: i3, ref: r3, __k: null, __: null, __b: 0, __e: null, __c: null, constructor: void 0, __v: null == o3 ? ++u : o3, __i: -1, __u: 0 };\n    return null == o3 && null != l.vnode && l.vnode(e3), e3;\n  }\n  function S(n2) {\n    return n2.children;\n  }\n  function C(n2, l3) {\n    this.props = n2, this.context = l3;\n  }\n  function $(n2, l3) {\n    if (null == l3) return n2.__ ? $(n2.__, n2.__i + 1) : null;\n    for (var u4; l3 < n2.__k.length; l3++) if (null != (u4 = n2.__k[l3]) && null != u4.__e) return u4.__e;\n    return \"function\" == typeof n2.type ? $(n2) : null;\n  }\n  function I(n2) {\n    if (n2.__P && n2.__d) {\n      var u4 = n2.__v, t3 = u4.__e, i3 = [], r3 = [], o3 = m({}, u4);\n      o3.__v = u4.__v + 1, l.vnode && l.vnode(o3), q(n2.__P, o3, u4, n2.__n, n2.__P.namespaceURI, 32 & u4.__u ? [t3] : null, i3, null == t3 ? $(u4) : t3, !!(32 & u4.__u), r3), o3.__v = u4.__v, o3.__.__k[o3.__i] = o3, D(i3, o3, r3), u4.__e = u4.__ = null, o3.__e != t3 && P(o3);\n    }\n  }\n  function P(n2) {\n    if (null != (n2 = n2.__) && null != n2.__c) return n2.__e = n2.__c.base = null, n2.__k.some(function(l3) {\n      if (null != l3 && null != l3.__e) return n2.__e = n2.__c.base = l3.__e;\n    }), P(n2);\n  }\n  function A(n2) {\n    (!n2.__d && (n2.__d = true) && i.push(n2) && !H.__r++ || r != l.debounceRendering) && ((r = l.debounceRendering) || o)(H);\n  }\n  function H() {\n    try {\n      for (var n2, l3 = 1; i.length; ) i.length > l3 && i.sort(e), n2 = i.shift(), l3 = i.length, I(n2);\n    } finally {\n      i.length = H.__r = 0;\n    }\n  }\n  function L(n2, l3, u4, t3, i3, r3, o3, e3, f4, c3, a3) {\n    var s3, h3, p3, v3, y3, _3, g2 = t3 && t3.__k || w, m3 = l3.length;\n    for (f4 = T(u4, l3, g2, f4, m3), s3 = 0; s3 < m3; s3++) null != (p3 = u4.__k[s3]) && (h3 = -1 != p3.__i && g2[p3.__i] || d, p3.__i = s3, _3 = q(n2, p3, h3, i3, r3, o3, e3, f4, c3, a3), v3 = p3.__e, p3.ref && h3.ref != p3.ref && (h3.ref && J(h3.ref, null, p3), a3.push(p3.ref, p3.__c || v3, p3)), null == y3 && null != v3 && (y3 = v3), 4 & p3.__u ? (f4 = j(p3, f4, n2), h3.__e && (h3.__e = null)) : \"function\" == typeof p3.type && void 0 !== _3 ? f4 = _3 : v3 && (f4 = v3.nextSibling), p3.__u &= -7);\n    return u4.__e = y3, f4;\n  }\n  function T(n2, l3, u4, t3, i3) {\n    var r3, o3, e3, f4, c3, a3 = u4.length, s3 = a3, h3 = 0;\n    for (n2.__k = new Array(i3), r3 = 0; r3 < i3; r3++) null != (o3 = l3[r3]) && \"boolean\" != typeof o3 && \"function\" != typeof o3 ? (\"string\" == typeof o3 || \"number\" == typeof o3 || \"bigint\" == typeof o3 || o3.constructor == String ? o3 = n2.__k[r3] = x(null, o3, null, null, null) : g(o3) ? o3 = n2.__k[r3] = x(S, { children: o3 }, null, null, null) : void 0 === o3.constructor && o3.__b > 0 ? o3 = n2.__k[r3] = x(o3.type, o3.props, o3.key, o3.ref ? o3.ref : null, o3.__v) : n2.__k[r3] = o3, f4 = r3 + h3, o3.__ = n2, o3.__b = n2.__b + 1, e3 = null, -1 != (c3 = o3.__i = O(o3, u4, f4, s3)) && (s3--, (e3 = u4[c3]) && (e3.__u |= 2)), null == e3 || null == e3.__v ? (-1 == c3 && (i3 > a3 ? h3-- : i3 < a3 && h3++), \"function\" != typeof o3.type && (o3.__u |= 4)) : c3 != f4 && (c3 == f4 - 1 ? h3-- : c3 == f4 + 1 ? h3++ : (c3 > f4 ? h3-- : h3++, o3.__u |= 4))) : n2.__k[r3] = null;\n    if (s3) for (r3 = 0; r3 < a3; r3++) null != (e3 = u4[r3]) && 0 == (2 & e3.__u) && (e3.__e == t3 && (t3 = $(e3)), K(e3, e3));\n    return t3;\n  }\n  function j(n2, l3, u4) {\n    var t3, i3;\n    if (\"function\" == typeof n2.type) {\n      for (t3 = n2.__k, i3 = 0; t3 && i3 < t3.length; i3++) t3[i3] && (t3[i3].__ = n2, l3 = j(t3[i3], l3, u4));\n      return l3;\n    }\n    n2.__e != l3 && (l3 && n2.type && !l3.parentNode && (l3 = $(n2)), l3 = u4.insertBefore(n2.__e, l3 || null));\n    do {\n      l3 = l3 && l3.nextSibling;\n    } while (null != l3 && 8 == l3.nodeType);\n    return l3;\n  }\n  function O(n2, l3, u4, t3) {\n    var i3, r3, o3, e3 = n2.key, f4 = n2.type, c3 = l3[u4], a3 = null != c3 && 0 == (2 & c3.__u);\n    if (null === c3 && null == e3 || a3 && e3 == c3.key && f4 == c3.type) return u4;\n    if (t3 > (a3 ? 1 : 0)) {\n      for (i3 = u4 - 1, r3 = u4 + 1; i3 >= 0 || r3 < l3.length; ) if (null != (c3 = l3[o3 = i3 >= 0 ? i3-- : r3++]) && 0 == (2 & c3.__u) && e3 == c3.key && f4 == c3.type) return o3;\n    }\n    return -1;\n  }\n  function z(n2, l3, u4) {\n    \"-\" == l3[0] ? n2.setProperty(l3, null == u4 ? \"\" : u4) : n2[l3] = null == u4 ? \"\" : \"number\" != typeof u4 || _.test(l3) ? u4 : u4 + \"px\";\n  }\n  function N(n2, l3, u4, t3, i3) {\n    var r3, o3;\n    n: if (\"style\" == l3) if (\"string\" == typeof u4) n2.style.cssText = u4;\n    else {\n      if (\"string\" == typeof t3 && (n2.style.cssText = t3 = \"\"), t3) for (l3 in t3) u4 && l3 in u4 || z(n2.style, l3, \"\");\n      if (u4) for (l3 in u4) t3 && u4[l3] == t3[l3] || z(n2.style, l3, u4[l3]);\n    }\n    else if (\"o\" == l3[0] && \"n\" == l3[1]) r3 = l3 != (l3 = l3.replace(s, \"$1\")), o3 = l3.toLowerCase(), l3 = o3 in n2 || \"onFocusOut\" == l3 || \"onFocusIn\" == l3 ? o3.slice(2) : l3.slice(2), n2.l || (n2.l = {}), n2.l[l3 + r3] = u4, u4 ? t3 ? u4[a] = t3[a] : (u4[a] = h, n2.addEventListener(l3, r3 ? v : p, r3)) : n2.removeEventListener(l3, r3 ? v : p, r3);\n    else {\n      if (\"http://www.w3.org/2000/svg\" == i3) l3 = l3.replace(/xlink(H|:h)/, \"h\").replace(/sName$/, \"s\");\n      else if (\"width\" != l3 && \"height\" != l3 && \"href\" != l3 && \"list\" != l3 && \"form\" != l3 && \"tabIndex\" != l3 && \"download\" != l3 && \"rowSpan\" != l3 && \"colSpan\" != l3 && \"role\" != l3 && \"popover\" != l3 && l3 in n2) try {\n        n2[l3] = null == u4 ? \"\" : u4;\n        break n;\n      } catch (n3) {\n      }\n      \"function\" == typeof u4 || (null == u4 || false === u4 && \"-\" != l3[4] ? n2.removeAttribute(l3) : n2.setAttribute(l3, \"popover\" == l3 && 1 == u4 ? \"\" : u4));\n    }\n  }\n  function V(n2) {\n    return function(u4) {\n      if (this.l) {\n        var t3 = this.l[u4.type + n2];\n        if (null == u4[c]) u4[c] = h++;\n        else if (u4[c] < t3[a]) return;\n        return t3(l.event ? l.event(u4) : u4);\n      }\n    };\n  }\n  function q(n2, u4, t3, i3, r3, o3, e3, f4, c3, a3) {\n    var s3, h3, p3, v3, y3, d3, _3, k3, x2, M, I2, P2, A2, H2, T2, j3, F = u4.type;\n    if (void 0 !== u4.constructor) return null;\n    128 & t3.__u && (c3 = !!(32 & t3.__u), o3 = [f4 = u4.__e = t3.__e]), (s3 = l.__b) && s3(u4);\n    n: if (\"function\" == typeof F) {\n      h3 = e3.length;\n      try {\n        if (x2 = u4.props, M = F.prototype && F.prototype.render, I2 = (s3 = F.contextType) && i3[s3.__c], P2 = s3 ? I2 ? I2.props.value : s3.__ : i3, t3.__c ? k3 = (p3 = u4.__c = t3.__c).__ = p3.__E : (M ? u4.__c = p3 = new F(x2, P2) : (u4.__c = p3 = new C(x2, P2), p3.constructor = F, p3.render = Q), I2 && I2.sub(p3), p3.state || (p3.state = {}), p3.__n = i3, v3 = p3.__d = true, p3.__h = [], p3._sb = []), M && null == p3.__s && (p3.__s = p3.state), M && null != F.getDerivedStateFromProps && (p3.__s == p3.state && (p3.__s = m({}, p3.__s)), m(p3.__s, F.getDerivedStateFromProps(x2, p3.__s))), y3 = p3.props, d3 = p3.state, p3.__v = u4, v3) M && null == F.getDerivedStateFromProps && null != p3.componentWillMount && p3.componentWillMount(), M && null != p3.componentDidMount && p3.__h.push(p3.componentDidMount);\n        else {\n          if (M && null == F.getDerivedStateFromProps && x2 !== y3 && null != p3.componentWillReceiveProps && p3.componentWillReceiveProps(x2, P2), u4.__v == t3.__v || !p3.__e && null != p3.shouldComponentUpdate && false === p3.shouldComponentUpdate(x2, p3.__s, P2)) {\n            u4.__v != t3.__v && (p3.props = x2, p3.state = p3.__s, p3.__d = false), u4.__e = t3.__e, u4.__k = t3.__k, u4.__k.some(function(n3) {\n              n3 && (n3.__ = u4);\n            }), w.push.apply(p3.__h, p3._sb), p3._sb = [], p3.__h.length && e3.push(p3), f4 = $(t3);\n            break n;\n          }\n          null != p3.componentWillUpdate && p3.componentWillUpdate(x2, p3.__s, P2), M && null != p3.componentDidUpdate && p3.__h.push(function() {\n            p3.componentDidUpdate(y3, d3, _3);\n          });\n        }\n        if (p3.context = P2, p3.props = x2, p3.__P = n2, p3.__e = false, A2 = l.__r, H2 = 0, M) p3.state = p3.__s, p3.__d = false, A2 && A2(u4), s3 = p3.render(p3.props, p3.state, p3.context), w.push.apply(p3.__h, p3._sb), p3._sb = [];\n        else do {\n          p3.__d = false, A2 && A2(u4), s3 = p3.render(p3.props, p3.state, p3.context), p3.state = p3.__s;\n        } while (p3.__d && ++H2 < 25);\n        p3.state = p3.__s, null != p3.getChildContext && (i3 = m(m({}, i3), p3.getChildContext())), M && !v3 && null != p3.getSnapshotBeforeUpdate && (_3 = p3.getSnapshotBeforeUpdate(y3, d3)), T2 = null != s3 && s3.type === S && null == s3.key ? E(s3.props.children) : s3, f4 = L(n2, g(T2) ? T2 : [T2], u4, t3, i3, r3, o3, e3, f4, c3, a3), p3.base = u4.__e, u4.__u &= -161, p3.__h.length && e3.push(p3), k3 && (p3.__E = p3.__ = null);\n      } catch (n3) {\n        if (e3.length = h3, u4.__v = null, c3 || null != o3) {\n          if (n3.then) {\n            for (u4.__u |= c3 ? 160 : 128; f4 && 8 == f4.nodeType && f4.nextSibling; ) f4 = f4.nextSibling;\n            null != o3 && (o3[o3.indexOf(f4)] = null), u4.__e = f4;\n          } else if (null != o3) for (j3 = o3.length; j3--; ) b(o3[j3]);\n        } else u4.__e = t3.__e;\n        null == u4.__k && (u4.__k = t3.__k || []), n3.then || B(u4), l.__e(n3, u4, t3);\n      }\n    } else null == o3 && u4.__v == t3.__v ? (u4.__k = t3.__k, u4.__e = t3.__e) : f4 = u4.__e = G(t3.__e, u4, t3, i3, r3, o3, e3, c3, a3);\n    return (s3 = l.diffed) && s3(u4), 128 & u4.__u ? void 0 : f4;\n  }\n  function B(n2) {\n    n2 && (n2.__c && (n2.__c.__e = true), n2.__k && n2.__k.some(B));\n  }\n  function D(n2, u4, t3) {\n    for (var i3 = 0; i3 < t3.length; i3++) J(t3[i3], t3[++i3], t3[++i3]);\n    l.__c && l.__c(u4, n2), n2.some(function(u5) {\n      try {\n        n2 = u5.__h, u5.__h = [], n2.some(function(n3) {\n          n3.call(u5);\n        });\n      } catch (n3) {\n        l.__e(n3, u5.__v);\n      }\n    });\n  }\n  function E(n2) {\n    return \"object\" != typeof n2 || null == n2 || n2.__b > 0 ? n2 : g(n2) ? n2.map(E) : void 0 !== n2.constructor ? null : m({}, n2);\n  }\n  function G(u4, t3, i3, r3, o3, e3, f4, c3, a3) {\n    var s3, h3, p3, v3, y3, w3, _3, m3 = i3.props || d, k3 = t3.props, x2 = t3.type;\n    if (\"svg\" == x2 ? o3 = \"http://www.w3.org/2000/svg\" : \"math\" == x2 ? o3 = \"http://www.w3.org/1998/Math/MathML\" : o3 || (o3 = \"http://www.w3.org/1999/xhtml\"), null != e3) {\n      for (s3 = 0; s3 < e3.length; s3++) if ((y3 = e3[s3]) && \"setAttribute\" in y3 == !!x2 && (x2 ? y3.localName == x2 : 3 == y3.nodeType)) {\n        u4 = y3, e3[s3] = null;\n        break;\n      }\n    }\n    if (null == u4) {\n      if (null == x2) return document.createTextNode(k3);\n      u4 = document.createElementNS(o3, x2, k3.is && k3), c3 && (l.__m && l.__m(t3, e3), c3 = false), e3 = null;\n    }\n    if (null == x2) m3 === k3 || c3 && u4.data == k3 || (u4.data = k3);\n    else {\n      if (e3 = \"textarea\" == x2 && null != k3.defaultValue ? null : e3 && n.call(u4.childNodes), !c3 && null != e3) for (m3 = {}, s3 = 0; s3 < u4.attributes.length; s3++) m3[(y3 = u4.attributes[s3]).name] = y3.value;\n      for (s3 in m3) y3 = m3[s3], \"dangerouslySetInnerHTML\" == s3 ? p3 = y3 : \"children\" == s3 || s3 in k3 || \"value\" == s3 && \"defaultValue\" in k3 || \"checked\" == s3 && \"defaultChecked\" in k3 || N(u4, s3, null, y3, o3);\n      for (s3 in k3) y3 = k3[s3], \"children\" == s3 ? v3 = y3 : \"dangerouslySetInnerHTML\" == s3 ? h3 = y3 : \"value\" == s3 ? w3 = y3 : \"checked\" == s3 ? _3 = y3 : c3 && \"function\" != typeof y3 || m3[s3] === y3 || N(u4, s3, y3, m3[s3], o3);\n      if (h3) c3 || p3 && (h3.__html == p3.__html || h3.__html == u4.innerHTML) || (u4.innerHTML = h3.__html), t3.__k = [];\n      else if (p3 && (u4.innerHTML = \"\"), L(\"template\" == t3.type ? u4.content : u4, g(v3) ? v3 : [v3], t3, i3, r3, \"foreignObject\" == x2 ? \"http://www.w3.org/1999/xhtml\" : o3, e3, f4, e3 ? e3[0] : i3.__k && $(i3, 0), c3, a3), null != e3) for (s3 = e3.length; s3--; ) b(e3[s3]);\n      c3 && \"textarea\" != x2 || (s3 = \"value\", \"progress\" == x2 && null == w3 ? u4.removeAttribute(\"value\") : null != w3 && (w3 !== u4[s3] || \"progress\" == x2 && !w3 || \"option\" == x2 && w3 != m3[s3]) && N(u4, s3, w3, m3[s3], o3), s3 = \"checked\", null != _3 && _3 != u4[s3] && N(u4, s3, _3, m3[s3], o3));\n    }\n    return u4;\n  }\n  function J(n2, u4, t3) {\n    try {\n      if (\"function\" == typeof n2) {\n        var i3 = \"function\" == typeof n2.__u;\n        i3 && n2.__u(), i3 && null == u4 || (n2.__u = n2(u4));\n      } else n2.current = u4;\n    } catch (n3) {\n      l.__e(n3, t3);\n    }\n  }\n  function K(n2, u4, t3) {\n    var i3, r3;\n    if (l.unmount && l.unmount(n2), (i3 = n2.ref) && (i3.current && i3.current != n2.__e || J(i3, null, u4)), null != (i3 = n2.__c)) {\n      if (i3.componentWillUnmount) try {\n        i3.componentWillUnmount();\n      } catch (n3) {\n        l.__e(n3, u4);\n      }\n      i3.base = i3.__P = i3.__n = null;\n    }\n    if (i3 = n2.__k) for (r3 = 0; r3 < i3.length; r3++) i3[r3] && K(i3[r3], u4, t3 || \"function\" != typeof n2.type);\n    t3 || b(n2.__e), n2.__c = n2.__ = n2.__e = void 0;\n  }\n  function Q(n2, l3, u4) {\n    return this.constructor(n2, u4);\n  }\n  function R(u4, t3, i3) {\n    var r3, o3, e3, f4;\n    t3 == document && (t3 = document.documentElement), l.__ && l.__(u4, t3), o3 = (r3 = \"function\" == typeof i3) ? null : i3 && i3.__k || t3.__k, e3 = [], f4 = [], q(t3, u4 = (!r3 && i3 || t3).__k = k(S, null, [u4]), o3 || d, d, t3.namespaceURI, !r3 && i3 ? [i3] : o3 ? null : t3.firstChild ? n.call(t3.childNodes) : null, e3, !r3 && i3 ? i3 : o3 ? o3.__e : t3.firstChild, r3, f4), D(e3, u4, f4), u4.props.children = null;\n  }\n  n = w.slice, l = { __e: function(n2, l3, u4, t3) {\n    for (var i3, r3, o3; l3 = l3.__; ) if ((i3 = l3.__c) && !i3.__) try {\n      if ((r3 = i3.constructor) && null != r3.getDerivedStateFromError && (i3.setState(r3.getDerivedStateFromError(n2)), o3 = i3.__d), null != i3.componentDidCatch && (i3.componentDidCatch(n2, t3 || {}), o3 = i3.__d), o3) return i3.__E = i3;\n    } catch (l4) {\n      n2 = l4;\n    }\n    throw n2;\n  } }, u = 0, t = function(n2) {\n    return null != n2 && void 0 === n2.constructor;\n  }, C.prototype.setState = function(n2, l3) {\n    var u4;\n    u4 = null != this.__s && this.__s != this.state ? this.__s : this.__s = m({}, this.state), \"function\" == typeof n2 && (n2 = n2(m({}, u4), this.props)), n2 && m(u4, n2), null != n2 && this.__v && (l3 && this._sb.push(l3), A(this));\n  }, C.prototype.forceUpdate = function(n2) {\n    this.__v && (this.__e = true, n2 && this.__h.push(n2), A(this));\n  }, C.prototype.render = S, i = [], o = \"function\" == typeof Promise ? Promise.prototype.then.bind(Promise.resolve()) : setTimeout, e = function(n2, l3) {\n    return n2.__v.__b - l3.__v.__b;\n  }, H.__r = 0, f = Math.random().toString(8), c = \"__d\" + f, a = \"__a\" + f, s = /(PointerCapture)$|Capture$/i, h = 0, p = V(false), v = V(true), y = 0;\n\n  // node_modules/preact/hooks/dist/hooks.module.js\n  var t2;\n  var r2;\n  var u2;\n  var i2;\n  var o2 = 0;\n  var f2 = [];\n  var c2 = l;\n  var e2 = c2.__b;\n  var a2 = c2.__r;\n  var v2 = c2.diffed;\n  var l2 = c2.__c;\n  var m2 = c2.unmount;\n  var p2 = c2.__;\n  function s2(n2, t3) {\n    c2.__h && c2.__h(r2, n2, o2 || t3), o2 = 0;\n    var u4 = r2.__H || (r2.__H = { __: [], __h: [] });\n    return n2 >= u4.__.length && u4.__.push({}), u4.__[n2];\n  }\n  function d2(n2) {\n    return o2 = 1, y2(D2, n2);\n  }\n  function y2(n2, u4, i3) {\n    var o3 = s2(t2++, 2);\n    if (o3.t = n2, !o3.__c && (o3.__ = [i3 ? i3(u4) : D2(void 0, u4), function(n3) {\n      var t3 = o3.__N ? o3.__N[0] : o3.__[0], r3 = o3.t(t3, n3);\n      t3 !== r3 && (o3.__N = [r3, o3.__[1]], o3.__c.setState({}));\n    }], o3.__c = r2, !r2.__f)) {\n      var f4 = function(n3, t3, r3) {\n        if (!o3.__c.__H) return true;\n        var u5 = false, i4 = o3.__c.props !== n3;\n        if (o3.__c.__H.__.some(function(n4) {\n          if (n4.__N) {\n            u5 = true;\n            var t4 = n4.__[0];\n            n4.__ = n4.__N, n4.__N = void 0, t4 !== n4.__[0] && (i4 = true);\n          }\n        }), c3) {\n          var f5 = c3.call(this, n3, t3, r3);\n          return u5 ? f5 || i4 : f5;\n        }\n        return !u5 || i4;\n      };\n      r2.__f = true;\n      var c3 = r2.shouldComponentUpdate, e3 = r2.componentWillUpdate;\n      r2.componentWillUpdate = function(n3, t3, r3) {\n        if (this.__e) {\n          var u5 = c3;\n          c3 = void 0, f4(n3, t3, r3), c3 = u5;\n        }\n        e3 && e3.call(this, n3, t3, r3);\n      }, r2.shouldComponentUpdate = f4;\n    }\n    return o3.__N || o3.__;\n  }\n  function h2(n2, u4) {\n    var i3 = s2(t2++, 3);\n    !c2.__s && C2(i3.__H, u4) && (i3.__ = n2, i3.u = u4, r2.__H.__h.push(i3));\n  }\n  function _2(n2, u4) {\n    var i3 = s2(t2++, 4);\n    !c2.__s && C2(i3.__H, u4) && (i3.__ = n2, i3.u = u4, r2.__h.push(i3));\n  }\n  function j2() {\n    for (var n2; n2 = f2.shift(); ) {\n      var t3 = n2.__H;\n      if (n2.__P && t3) try {\n        t3.__h.some(z2), t3.__h.some(B2), t3.__h = [];\n      } catch (r3) {\n        t3.__h = [], c2.__e(r3, n2.__v);\n      }\n    }\n  }\n  c2.__b = function(n2) {\n    r2 = null, e2 && e2(n2);\n  }, c2.__ = function(n2, t3) {\n    n2 && t3.__k && t3.__k.__m && (n2.__m = t3.__k.__m), p2 && p2(n2, t3);\n  }, c2.__r = function(n2) {\n    a2 && a2(n2), t2 = 0;\n    var i3 = (r2 = n2.__c).__H;\n    i3 && (u2 === r2 ? (i3.__h = [], r2.__h = [], i3.__.some(function(n3) {\n      n3.__N && (n3.__ = n3.__N), n3.u = n3.__N = void 0;\n    })) : (i3.__h.some(z2), i3.__h.some(B2), i3.__h = [], t2 = 0)), u2 = r2;\n  }, c2.diffed = function(n2) {\n    v2 && v2(n2);\n    var t3 = n2.__c;\n    t3 && t3.__H && (t3.__H.__h.length && (1 !== f2.push(t3) && i2 === c2.requestAnimationFrame || ((i2 = c2.requestAnimationFrame) || w2)(j2)), t3.__H.__.some(function(n3) {\n      n3.u && (n3.__H = n3.u, n3.u = void 0);\n    })), u2 = r2 = null;\n  }, c2.__c = function(n2, t3) {\n    t3.some(function(n3) {\n      try {\n        n3.__h.some(z2), n3.__h = n3.__h.filter(function(n4) {\n          return !n4.__ || B2(n4);\n        });\n      } catch (r3) {\n        t3.some(function(n4) {\n          n4.__h && (n4.__h = []);\n        }), t3 = [], c2.__e(r3, n3.__v);\n      }\n    }), l2 && l2(n2, t3);\n  }, c2.unmount = function(n2) {\n    m2 && m2(n2);\n    var t3, r3 = n2.__c;\n    r3 && r3.__H && (r3.__H.__.some(function(n3) {\n      try {\n        z2(n3);\n      } catch (n4) {\n        t3 = n4;\n      }\n    }), r3.__H = void 0, t3 && c2.__e(t3, r3.__v));\n  };\n  var k2 = \"function\" == typeof requestAnimationFrame;\n  function w2(n2) {\n    var t3, r3 = function() {\n      clearTimeout(u4), k2 && cancelAnimationFrame(t3), setTimeout(n2);\n    }, u4 = setTimeout(r3, 35);\n    k2 && (t3 = requestAnimationFrame(r3));\n  }\n  function z2(n2) {\n    var t3 = r2, u4 = n2.__c;\n    \"function\" == typeof u4 && (n2.__c = void 0, u4()), r2 = t3;\n  }\n  function B2(n2) {\n    var t3 = r2;\n    n2.__c = n2.__(), r2 = t3;\n  }\n  function C2(n2, t3) {\n    return !n2 || n2.length !== t3.length || t3.some(function(t4, r3) {\n      return t4 !== n2[r3];\n    });\n  }\n  function D2(n2, t3) {\n    return \"function\" == typeof t3 ? t3(n2) : t3;\n  }\n\n  // src/operator-ui/view.ts\n  var OPERATOR_PAGES = [\n    \"connections\",\n    \"credentials\",\n    \"tokens\",\n    \"activity\"\n  ];\n  var PAGE_META = {\n    connections: { path: \"/\", label: \"Connections\" },\n    credentials: { path: \"/credentials\", label: \"Credentials\" },\n    tokens: { path: \"/tokens\", label: \"Access tokens\" },\n    activity: { path: \"/activity\", label: \"Activity\" }\n  };\n  function pageForPath(path) {\n    const match = OPERATOR_PAGES.find((page) => PAGE_META[page].path === path);\n    return match ?? \"connections\";\n  }\n  function info(message2) {\n    return { message: message2, tone: \"info\" };\n  }\n  function failure(message2) {\n    return { message: message2, tone: \"error\" };\n  }\n  function initialState(page) {\n    return {\n      page,\n      generation: 0,\n      session: \"loading\",\n      gate: null,\n      refreshing: false,\n      pendingFocus: null,\n      ...identityScopedState()\n    };\n  }\n  function identityScopedState() {\n    return {\n      data: null,\n      connectorFilter: \"\",\n      oauthNotice: null,\n      oauthBusy: null,\n      credentialNotice: null,\n      credentialEditing: null,\n      credentialBusy: null,\n      tokenPhase: \"idle\",\n      tokenNotice: null,\n      tokens: [],\n      createdToken: null,\n      tokenRenaming: null,\n      tokenBusy: false,\n      activityPhase: \"idle\",\n      activityNotice: null,\n      activityEvents: [],\n      activityCursor: null,\n      activitySearch: \"\"\n    };\n  }\n  function resetIdentity(state2, gate2 = null) {\n    return {\n      ...state2,\n      generation: state2.generation + 1,\n      session: \"gated\",\n      gate: gate2,\n      refreshing: false,\n      pendingFocus: null,\n      ...identityScopedState()\n    };\n  }\n  function withPage(state2, page) {\n    return {\n      ...state2,\n      page,\n      createdToken: null,\n      tokenRenaming: null,\n      tokenNotice: null,\n      credentialEditing: null,\n      credentialNotice: null\n    };\n  }\n  function credentialUnavailableCopy(capability) {\n    if (capability === \"no_slots\") {\n      return \"No connectors declare operator-managed credential slots. Connector credentials remain configuration-as-code until a slot is declared.\";\n    }\n    if (capability === \"vault_not_configured\") {\n      return \"Credential storage is not configured. Set credentials.encryptionKey before managing connector credentials here.\";\n    }\n    return \"Credential management requires an eligible Clerk operator. Bearer-authenticated sessions can inspect connections but cannot manage stored credentials.\";\n  }\n  function accessTokenUnavailableCopy(capability) {\n    if (capability === \"not_configured\") {\n      return \"Access tokens are not configured for this deployment. Add accessTokens to the deployment configuration to enable them.\";\n    }\n    return \"Access token management requires an eligible Clerk operator. A Bearer token can connect to MCP, but it cannot create or revoke other tokens.\";\n  }\n  function connectorStatusLabel(status) {\n    if (status === \"ok\") return \"Connected\";\n    if (status === \"auth_required\") return \"Authorization needed\";\n    return \"Unavailable\";\n  }\n  function toolCountLabel(count) {\n    return `${count} ${count === 1 ? \"tool\" : \"tools\"}`;\n  }\n  var DRIFT_CATEGORIES = [\n    { key: \"unclassifiedTools\", label: \"Unclassified\" },\n    { key: \"unservedTools\", label: \"Unserved\" },\n    { key: \"annotationConflicts\", label: \"Annotation conflicts\" },\n    { key: \"schemaChanges\", label: \"Schema changes\" }\n  ];\n  function driftTotal(drift) {\n    if (!drift) return 0;\n    return DRIFT_CATEGORIES.reduce((sum, { key }) => sum + (drift[key] || 0), 0);\n  }\n  function driftState(drift) {\n    if (!drift) return \"unavailable\";\n    return driftTotal(drift) > 0 ? \"warning\" : \"clean\";\n  }\n  function driftCounts(drift) {\n    if (!drift) return [];\n    return DRIFT_CATEGORIES.map(({ key, label }) => ({\n      key,\n      label,\n      count: drift[key] || 0\n    }));\n  }\n  function driftSummary(drift) {\n    const state2 = driftState(drift);\n    if (state2 === \"unavailable\") {\n      return \"No catalog refresh observed yet in this runtime.\";\n    }\n    const observed = formatDate(drift?.observedAt);\n    const when = observed ? ` \u00B7 observed ${observed}` : \"\";\n    if (state2 === \"clean\") return `Matches the reviewed manifest${when}`;\n    const total = driftTotal(drift);\n    return `${total} difference${total === 1 ? \"\" : \"s\"} from the reviewed manifest${when}`;\n  }\n  function safeHttpHref(url) {\n    if (!url) return null;\n    try {\n      const protocol = new URL(url).protocol;\n      return protocol === \"http:\" || protocol === \"https:\" ? url : null;\n    } catch {\n      return null;\n    }\n  }\n  function formatDate(value) {\n    if (!value) return \"\";\n    const date = new Date(value);\n    return Number.isNaN(date.valueOf()) ? \"\" : date.toLocaleString();\n  }\n  function actorLabel(actor) {\n    if (!actor?.kind) return \"unknown\";\n    if (actor.label) return `${actor.kind} \u00B7 ${actor.label}`;\n    return actor.id ? `${actor.kind} \u00B7 ${actor.id}` : actor.kind;\n  }\n  function actorStableId(actor) {\n    if (!actor?.id) return null;\n    if (!actor.label && !actor.namespace) return null;\n    return actor.namespace ? `${actor.namespace} \u00B7 ${actor.id}` : actor.id;\n  }\n  function activityMatches(event, query) {\n    const q2 = query.trim().toLowerCase();\n    if (!q2) return true;\n    return [\n      event.address,\n      event.connectorId,\n      event.toolName,\n      event.source,\n      event.outcome,\n      event.errorCode,\n      event.friction,\n      event.actor?.kind,\n      event.actor?.id,\n      event.actor?.namespace,\n      event.actor?.label\n    ].some((value) => String(value ?? \"\").toLowerCase().includes(q2));\n  }\n  function filterActivity(events, query) {\n    return events.filter((event) => activityMatches(event, query));\n  }\n  function activitySummary(events) {\n    if (events.length === 0) return \"Arguments and results are never stored.\";\n    const tools = new Set(events.map((event) => event.address)).size;\n    return `${events.length} loaded call${events.length === 1 ? \"\" : \"s\"} \u00B7 ${tools} tool${tools === 1 ? \"\" : \"s\"} \u00B7 no arguments or results stored`;\n  }\n  var ACTIVITY_OUTCOMES = [\"success\", \"error\", \"timeout\", \"cancelled\"];\n  function activityOutcomeClass(outcome) {\n    return ACTIVITY_OUTCOMES.includes(outcome) ? outcome : \"error\";\n  }\n  function activityDetail(event) {\n    const parts = [event.source];\n    if (event.attempts > 1) parts.push(`${event.attempts} attempts`);\n    if (event.friction) parts.push(event.friction);\n    if (event.errorCode && event.errorCode !== event.friction) {\n      parts.push(event.errorCode);\n    }\n    return parts.join(\" \u00B7 \");\n  }\n  function credentialStateLabel(credential) {\n    if (!credential.configured) return \"not configured\";\n    const masked = credential.fields?.length ? \"configured\" : `configured \u00B7 \u2022\u2022\u2022\u2022${credential.lastFour ?? \"\"}`;\n    return credential.updatedAt ? `${masked} \u00B7 updated ${formatDate(credential.updatedAt)}` : masked;\n  }\n  function gateCopy(kind, signedIn) {\n    if (kind !== \"clerk\") {\n      return \"Paste an operator bearer token to open this page. Nothing is requested until you do.\";\n    }\n    return signedIn ? \"Signed in with Clerk, but this account cannot open deployment-wide operator pages.\" : \"Sign in with Clerk to open this operator page.\";\n  }\n\n  // src/operator-ui/app/config.ts\n  var auth = AUTH;\n  var mcpUrl = MCP_URL;\n  var initialPage = INITIAL_PAGE;\n  var titleSuffix = TITLE_SUFFIX;\n  var productName = PRODUCT_NAME;\n  var productDescription = PRODUCT_DESCRIPTION;\n  var productOperatorLabel = PRODUCT_OPERATOR_LABEL;\n  var TOKEN_KEY = \"connecta:token\";\n\n  // src/operator-ui/app/store.ts\n  var state = initialState(initialPage);\n  var listeners = /* @__PURE__ */ new Set();\n  function getState() {\n    return state;\n  }\n  function subscribe(listener) {\n    listeners.add(listener);\n    return () => listeners.delete(listener);\n  }\n  function set(patch) {\n    state = { ...state, ...patch };\n    for (const listener of listeners) listener();\n  }\n  function fence() {\n    const generation = state.generation;\n    return () => generation === state.generation;\n  }\n  function message(error, fallback) {\n    return error instanceof Error && error.message ? error.message : fallback;\n  }\n  function sessionToken() {\n    return auth.kind === \"clerk\" ? Promise.resolve(window.Clerk?.session?.getToken() ?? null) : Promise.resolve(localStorage.getItem(TOKEN_KEY));\n  }\n  function gate(notice = null) {\n    state = resetIdentity(state, notice);\n    for (const listener of listeners) listener();\n  }\n  async function operatorRequest(path, method, current, body) {\n    const token = await sessionToken();\n    if (!current()) throw new Error(\"The operator session changed.\");\n    if (!token) throw new Error(\"Your operator session has expired.\");\n    const res = await fetch(path, {\n      method,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        ...body ? { \"Content-Type\": \"application/json\" } : {}\n      },\n      ...body ? { body: JSON.stringify(body) } : {}\n    });\n    if (res.status === 204) return null;\n    let payload = {};\n    try {\n      payload = await res.json();\n    } catch {\n    }\n    if (res.status === 401) {\n      throw new Error(\"Your operator session was not accepted. Sign in again.\");\n    }\n    if (res.status === 403) {\n      throw new Error(\"This identity may not perform that action.\");\n    }\n    if (!res.ok) {\n      throw new Error(payload.error || `Request failed (${res.status}).`);\n    }\n    return payload;\n  }\n  async function loadData() {\n    const current = fence();\n    if (state.session === \"ready\") set({ refreshing: true });\n    let token;\n    try {\n      token = await sessionToken();\n    } catch (error) {\n      if (!current()) return;\n      const why = message(error, \"unknown error\");\n      return gate(failure(`Could not read the Clerk session: ${why}`));\n    }\n    if (!current()) return;\n    if (!token) return gate(null);\n    let res;\n    try {\n      res = await fetch(\"/ui/data\", {\n        headers: { Authorization: `Bearer ${token}` }\n      });\n    } catch (error) {\n      if (!current()) return;\n      return gate(failure(`Network error: ${message(error, \"unknown error\")}`));\n    }\n    if (!current()) return;\n    if (res.status === 401 || res.status === 403) {\n      if (auth.kind === \"clerk\") {\n        return gate(\n          failure(\n            res.status === 403 ? \"This Clerk account is not allowed to access connecta.\" : \"Your Clerk session was not accepted. Sign out and try again.\"\n          )\n        );\n      }\n      localStorage.removeItem(TOKEN_KEY);\n      return gate(failure(\"Token rejected \u2014 enter a valid bearer token.\"));\n    }\n    if (!res.ok) return gate(failure(`Error ${res.status}`));\n    let data;\n    try {\n      data = await res.json();\n    } catch {\n      if (!current()) return;\n      return gate(failure(\"Operator data could not be read.\"));\n    }\n    if (!current()) return;\n    set({ data, session: \"ready\", gate: null, refreshing: false });\n  }\n  async function mutate(options) {\n    const current = fence();\n    set(options.busy);\n    try {\n      const payload = await options.request(current);\n      if (!current()) return;\n      if (options.reload) await loadData();\n      if (!current()) return;\n      set(options.done(payload));\n    } catch (error) {\n      if (!current()) return;\n      if (options.reload) {\n        try {\n          await loadData();\n        } catch {\n        }\n        if (!current()) return;\n      }\n      set(options.failed(failure(message(error, options.fallback))));\n    }\n  }\n  function focusHandled() {\n    if (state.pendingFocus !== null) set({ pendingFocus: null });\n  }\n  function setPage(page, focus = false) {\n    state = withPage(state, page);\n    if (focus) {\n      state = {\n        ...state,\n        pendingFocus: state.session === \"ready\" ? `${page}Heading` : \"gateHeading\"\n      };\n    }\n    for (const listener of listeners) listener();\n  }\n  function navigate(page, href) {\n    history.pushState({ operatorPage: page }, \"\", href);\n    setPage(page, true);\n  }\n  function setConnectorFilter(connectorFilter) {\n    set({ connectorFilter });\n  }\n  function setActivitySearch(activitySearch) {\n    set({ activitySearch });\n  }\n  function signInWithBearer(value) {\n    gate(null);\n    localStorage.setItem(TOKEN_KEY, value);\n    void loadData().then(() => {\n      if (state.session === \"ready\") set({ pendingFocus: `${state.page}Heading` });\n    });\n  }\n  function forgetBearer() {\n    localStorage.removeItem(TOKEN_KEY);\n    gate(null);\n    set({ pendingFocus: \"token\" });\n  }\n  function oauthAction(connector, action) {\n    const disconnecting = action === \"disconnect\";\n    const confirmed = window.confirm(\n      disconnecting ? `Disconnect OAuth for ${connector}? Stored credentials and any pending authorization will be removed.` : `Restart OAuth for ${connector}? Stored credentials and any pending authorization will be replaced.`\n    );\n    if (!confirmed) return Promise.resolve();\n    return mutate({\n      request: (current) => operatorRequest(\n        `/ui/oauth/${encodeURIComponent(connector)}`,\n        disconnecting ? \"DELETE\" : \"POST\",\n        current\n      ),\n      busy: { oauthNotice: null, oauthBusy: connector },\n      done: (payload) => ({\n        oauthBusy: null,\n        pendingFocus: \"oauthNotice\",\n        oauthNotice: info(\n          disconnecting ? \"OAuth disconnected. Restart authorization when you are ready to reconnect.\" : payload?.message || \"Authorization restarted. Open the authorization link to reconnect.\"\n        )\n      }),\n      failed: (notice) => ({\n        oauthBusy: null,\n        oauthNotice: notice,\n        pendingFocus: \"oauthNotice\"\n      }),\n      fallback: \"OAuth action failed.\",\n      reload: true\n    });\n  }\n  function editCredential(connector) {\n    set({ credentialEditing: connector, credentialNotice: null });\n  }\n  function refuseCredential(copy) {\n    set({ credentialNotice: failure(copy), pendingFocus: \"credentialNotice\" });\n  }\n  function credentialMutation(connector, request, done, reload = true) {\n    const land = (credentialNotice) => ({\n      credentialBusy: null,\n      credentialNotice,\n      pendingFocus: \"credentialNotice\"\n    });\n    return mutate({\n      request,\n      busy: { credentialBusy: connector, credentialNotice: null },\n      done: (payload) => land(done(payload)),\n      failed: land,\n      fallback: \"Credential action failed.\",\n      reload\n    });\n  }\n  function saveCredential(connector, body) {\n    return credentialMutation(\n      connector,\n      (current) => operatorRequest(\n        `/ui/credentials/${encodeURIComponent(connector)}`,\n        \"PUT\",\n        current,\n        body\n      ),\n      () => {\n        set({ credentialEditing: null });\n        return info(\"Credential saved.\");\n      }\n    );\n  }\n  function removeCredential(connector) {\n    const confirmed = window.confirm(\n      \"Remove this credential? The connector will stop authenticating until a replacement is added.\"\n    );\n    if (!confirmed) return Promise.resolve();\n    return credentialMutation(\n      connector,\n      (current) => operatorRequest(\n        `/ui/credentials/${encodeURIComponent(connector)}`,\n        \"DELETE\",\n        current\n      ),\n      () => info(\"Credential removed.\")\n    );\n  }\n  function testCredential(connector) {\n    return credentialMutation(\n      connector,\n      (current) => operatorRequest(\n        `/ui/credentials/${encodeURIComponent(connector)}/test`,\n        \"POST\",\n        current\n      ),\n      (payload) => {\n        const copy = payload?.message || (payload?.ok ? \"Credential is valid.\" : \"Credential test failed.\");\n        return payload?.ok ? info(copy) : failure(copy);\n      },\n      false\n    );\n  }\n  async function loadAccessTokens() {\n    const current = fence();\n    set({ tokenPhase: \"loading\", tokenNotice: null });\n    try {\n      const payload = await operatorRequest(\"/ui/access-tokens\", \"GET\", current);\n      if (!current()) return;\n      set({ tokenPhase: \"ready\", tokens: payload?.accessTokens ?? [] });\n    } catch (error) {\n      if (!current()) return;\n      set({\n        tokenPhase: \"error\",\n        tokenNotice: failure(\n          message(error, \"Access tokens could not be loaded.\")\n        )\n      });\n    }\n  }\n  function tokenFailure(tokenNotice) {\n    return { tokenBusy: false, tokenNotice, pendingFocus: \"tokenNotice\" };\n  }\n  function createAccessToken(name) {\n    if (!name) {\n      set(tokenFailure(failure(\"Name the MCP client before creating a token.\")));\n      return Promise.resolve(false);\n    }\n    let created = false;\n    return mutate({\n      request: (current) => operatorRequest(\"/ui/access-tokens\", \"POST\", current, { name }),\n      busy: { tokenBusy: true, tokenNotice: null },\n      done: (payload) => {\n        const issued = payload?.accessToken;\n        if (!payload?.token || !issued) {\n          throw new Error(\"The created token was not returned.\");\n        }\n        created = true;\n        return {\n          tokenBusy: false,\n          tokenPhase: \"ready\",\n          tokens: [\n            issued,\n            ...state.tokens.filter((token) => token.id !== issued.id)\n          ],\n          createdToken: payload.token,\n          tokenNotice: info(\"Access token created.\"),\n          pendingFocus: \"tokenRevealHeading\"\n        };\n      },\n      failed: tokenFailure,\n      fallback: \"Access token could not be created.\"\n    }).then(() => created);\n  }\n  function dismissCreatedToken() {\n    set({ createdToken: null });\n  }\n  function renameAccessToken(id) {\n    set({ tokenRenaming: id });\n  }\n  function accessTokenMutation(id, method, body, success, fallback) {\n    return mutate({\n      request: (current) => operatorRequest(\n        `/ui/access-tokens/${encodeURIComponent(id)}`,\n        method,\n        current,\n        body\n      ),\n      busy: { tokenBusy: true, tokenNotice: null },\n      done: (payload) => ({\n        tokenBusy: false,\n        tokenRenaming: null,\n        tokenNotice: info(success),\n        pendingFocus: \"tokenNotice\",\n        ...payload?.accessToken ? {\n          tokens: state.tokens.map(\n            (token) => token.id === id ? payload.accessToken : token\n          )\n        } : {}\n      }),\n      failed: tokenFailure,\n      fallback\n    });\n  }\n  function saveAccessTokenName(id, name) {\n    return accessTokenMutation(\n      id,\n      \"PUT\",\n      { name },\n      \"Access token renamed.\",\n      \"Access token could not be renamed.\"\n    );\n  }\n  function revokeAccessToken(id) {\n    const named = state.tokens.find((token) => token.id === id);\n    const confirmed = window.confirm(\n      `Revoke ${named?.name || \"this access token\"}? Its MCP client will immediately lose access.`\n    );\n    if (!confirmed) return Promise.resolve();\n    return accessTokenMutation(\n      id,\n      \"DELETE\",\n      void 0,\n      \"Access token revoked.\",\n      \"Access token could not be revoked.\"\n    );\n  }\n  async function loadActivity(reset) {\n    if (!state.data?.activityEnabled) return;\n    const current = fence();\n    set({\n      activityPhase: \"loading\",\n      activityNotice: null,\n      ...reset ? { activityEvents: [], activityCursor: null } : {}\n    });\n    const params = new URLSearchParams({ limit: \"50\" });\n    if (!reset && state.activityCursor) {\n      params.set(\"cursor\", state.activityCursor);\n    }\n    try {\n      const payload = await operatorRequest(\n        `/ui/activity?${params}`,\n        \"GET\",\n        current\n      );\n      if (!current()) return;\n      set({\n        activityPhase: \"ready\",\n        activityEvents: [\n          ...reset ? [] : state.activityEvents,\n          ...payload?.events ?? []\n        ],\n        activityCursor: payload?.nextCursor ?? null\n      });\n    } catch (error) {\n      if (!current()) return;\n      set({\n        activityPhase: \"error\",\n        activityNotice: failure(message(error, \"Activity could not be loaded.\"))\n      });\n    }\n  }\n  function signIn() {\n    window.Clerk?.redirectToSignIn({\n      signInFallbackRedirectUrl: window.location.href,\n      signUpFallbackRedirectUrl: window.location.href\n    });\n  }\n  function signOut() {\n    const clerk = window.Clerk;\n    gate(null);\n    void clerk?.signOut({ redirectUrl: window.location.href });\n  }\n  async function boot() {\n    const onPop = () => setPage(pageForPath(window.location.pathname), true);\n    window.addEventListener(\"popstate\", onPop);\n    window.addEventListener(\"pagehide\", dismissCreatedToken);\n    if (auth.kind === \"clerk\") {\n      const clerk = window.Clerk;\n      if (!clerk) {\n        const why = \"Clerk could not load. Check your network and try again.\";\n        return gate(failure(why));\n      }\n      try {\n        await clerk.load({\n          ...auth.signInUrl ? { signInUrl: auth.signInUrl } : {},\n          ...auth.signUpUrl ? { signUpUrl: auth.signUpUrl } : {},\n          signInFallbackRedirectUrl: window.location.href,\n          signUpFallbackRedirectUrl: window.location.href,\n          afterSignOutUrl: window.location.href\n        });\n        let sessionId = clerk.session?.id ?? null;\n        clerk.addListener((resources) => {\n          const next = resources.session?.id ?? null;\n          if (next === sessionId) return;\n          sessionId = next;\n          gate(null);\n          void loadData();\n        });\n      } catch (error) {\n        const why = message(error, \"unknown error\");\n        return gate(failure(`Clerk could not initialize: ${why}`));\n      }\n    }\n    await loadData();\n  }\n\n  // node_modules/preact/jsx-runtime/dist/jsxRuntime.module.js\n  var f3 = 0;\n  function u3(e3, t3, n2, o3, i3, u4) {\n    t3 || (t3 = {});\n    var a3, c3, p3 = t3;\n    if (\"ref\" in p3) for (c3 in p3 = {}, t3) \"ref\" == c3 ? a3 = t3[c3] : p3[c3] = t3[c3];\n    var l3 = { type: e3, props: p3, key: n2, ref: a3, __k: null, __: null, __b: 0, __e: null, __c: null, constructor: void 0, __v: --f3, __i: -1, __u: 0, __source: i3, __self: u4 };\n    if (\"function\" == typeof e3 && (a3 = e3.defaultProps)) for (c3 in a3) void 0 === p3[c3] && (p3[c3] = a3[c3]);\n    return l.vnode && l.vnode(l3), l3;\n  }\n\n  // src/operator-ui/app/parts.tsx\n  function NoticeLine({\n    id,\n    notice,\n    className = \"meta\"\n  }) {\n    return /* @__PURE__ */ u3(\n      \"p\",\n      {\n        id,\n        class: notice?.tone === \"error\" ? `${className} error-notice` : className,\n        role: notice?.tone === \"error\" ? \"alert\" : \"status\",\n        \"aria-live\": \"polite\",\n        tabIndex: -1,\n        children: notice ? notice.message : null\n      }\n    );\n  }\n  function Empty({ children }) {\n    return /* @__PURE__ */ u3(\"p\", { class: \"empty\", children });\n  }\n  function Unavailable({ children }) {\n    return /* @__PURE__ */ u3(\"div\", { class: \"unavailable\", children });\n  }\n  function PageLink({\n    page,\n    class: className,\n    current,\n    children\n  }) {\n    const href = PAGE_META[page].path;\n    return /* @__PURE__ */ u3(\n      \"a\",\n      {\n        class: className,\n        href,\n        ...current ? { \"aria-current\": \"page\" } : {},\n        onClick: (event) => {\n          if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) {\n            return;\n          }\n          event.preventDefault();\n          navigate(page, href);\n        },\n        children\n      }\n    );\n  }\n  function CopyButton({\n    value,\n    label,\n    class: className = \"linklike\"\n  }) {\n    const [status, setStatus] = d2(\"idle\");\n    h2(() => {\n      if (status === \"idle\") return;\n      const timer = window.setTimeout(() => setStatus(\"idle\"), 1600);\n      return () => window.clearTimeout(timer);\n    }, [status]);\n    return /* @__PURE__ */ u3(\n      \"button\",\n      {\n        class: className,\n        type: \"button\",\n        onClick: () => {\n          navigator.clipboard.writeText(value).then(\n            () => setStatus(\"copied\"),\n            () => setStatus(\"failed\")\n          );\n        },\n        children: status === \"copied\" ? \"Copied\" : status === \"failed\" ? \"Copy failed\" : label\n      }\n    );\n  }\n\n  // src/operator-ui/app/activity.tsx\n  function ActivityRow({ event }) {\n    const outcome = activityOutcomeClass(event.outcome);\n    const stableId = actorStableId(event.actor);\n    return /* @__PURE__ */ u3(\"article\", { class: `activity-item ${outcome}`, children: [\n      /* @__PURE__ */ u3(\"div\", { class: \"activity-stamp\", children: [\n        /* @__PURE__ */ u3(\n          \"span\",\n          {\n            class: outcome === \"success\" ? \"dot ok\" : \"dot\",\n            \"aria-hidden\": \"true\"\n          }\n        ),\n        /* @__PURE__ */ u3(\"div\", { children: [\n          /* @__PURE__ */ u3(\"time\", { class: \"activity-time\", dateTime: event.occurredAt, children: formatDate(event.occurredAt) }),\n          /* @__PURE__ */ u3(\"div\", { class: \"activity-actor\", children: actorLabel(event.actor) }),\n          stableId ? /* @__PURE__ */ u3(\"div\", { class: \"activity-actor-id mono\", children: stableId }) : null\n        ] })\n      ] }),\n      /* @__PURE__ */ u3(\"div\", { children: [\n        /* @__PURE__ */ u3(\"div\", { class: \"activity-address\", children: event.address }),\n        /* @__PURE__ */ u3(\"div\", { class: \"activity-detail\", children: activityDetail(event) })\n      ] }),\n      /* @__PURE__ */ u3(\"div\", { children: [\n        /* @__PURE__ */ u3(\"div\", { class: \"activity-outcome\", children: event.outcome }),\n        /* @__PURE__ */ u3(\"div\", { class: \"activity-detail\", children: [\n          event.durationMs,\n          \" ms\"\n        ] })\n      ] })\n    ] });\n  }\n  function ActivityPage({ state: state2 }) {\n    const enabled = Boolean(state2.data?.activityEnabled);\n    const loading = state2.activityPhase === \"loading\";\n    const visible = filterActivity(state2.activityEvents, state2.activitySearch);\n    return /* @__PURE__ */ u3(\"section\", { id: \"activityView\", children: /* @__PURE__ */ u3(\"div\", { class: \"lead pgrid\", children: [\n      /* @__PURE__ */ u3(\"h1\", { id: \"activityHeading\", class: \"pcap\", tabIndex: -1, children: \"Activity\" }),\n      /* @__PURE__ */ u3(\"div\", { class: \"pbody\", children: [\n        /* @__PURE__ */ u3(\"p\", { class: \"activity-copy\", id: \"activitySummary\", children: activitySummary(state2.activityEvents) }),\n        !enabled ? /* @__PURE__ */ u3(Unavailable, { children: [\n          \"Activity history is not configured. Add an\",\n          \" \",\n          /* @__PURE__ */ u3(\"span\", { class: \"mono\", children: \"activity.store\" }),\n          \" with a list reader to enable this page.\"\n        ] }) : /* @__PURE__ */ u3(\"div\", { id: \"activityAvailable\", children: [\n          /* @__PURE__ */ u3(\"div\", { class: \"row activity-controls\", children: [\n            /* @__PURE__ */ u3(\n              \"input\",\n              {\n                id: \"activitySearch\",\n                type: \"search\",\n                placeholder: \"Search user, tool, or outcome\u2026\",\n                \"aria-label\": \"Search loaded activity\",\n                value: state2.activitySearch,\n                onInput: (event) => setActivitySearch(event.currentTarget.value)\n              }\n            ),\n            /* @__PURE__ */ u3(\n              \"button\",\n              {\n                id: \"refreshActivity\",\n                class: \"linklike\",\n                type: \"button\",\n                disabled: loading,\n                onClick: () => void loadActivity(true),\n                children: loading ? \"Loading\u2026\" : \"Refresh\"\n              }\n            )\n          ] }),\n          /* @__PURE__ */ u3(NoticeLine, { id: \"activityNotice\", notice: state2.activityNotice }),\n          /* @__PURE__ */ u3(\n            \"div\",\n            {\n              id: \"activityList\",\n              class: \"activity-ledger\",\n              \"aria-busy\": loading ? \"true\" : \"false\",\n              children: loading && state2.activityEvents.length === 0 ? /* @__PURE__ */ u3(\"div\", { class: \"activity-empty\", children: \"Loading activity\u2026\" }) : state2.activityPhase === \"error\" && state2.activityEvents.length === 0 ? /* @__PURE__ */ u3(\"p\", { class: \"activity-empty\", children: /* @__PURE__ */ u3(\n                \"button\",\n                {\n                  class: \"linklike\",\n                  type: \"button\",\n                  onClick: () => void loadActivity(true),\n                  children: \"Try loading activity again\"\n                }\n              ) }) : visible.length === 0 ? /* @__PURE__ */ u3(\"div\", { class: \"activity-empty\", children: state2.activitySearch.trim() ? \"No loaded activity matches this search.\" : \"No connector tool calls recorded yet.\" }) : visible.map((event, index) => /* @__PURE__ */ u3(\n                ActivityRow,\n                {\n                  event\n                },\n                `${event.occurredAt}-${event.address}-${index}`\n              ))\n            }\n          ),\n          state2.activityCursor ? /* @__PURE__ */ u3(\n            \"button\",\n            {\n              id: \"moreActivity\",\n              class: \"linklike activity-more\",\n              type: \"button\",\n              disabled: loading,\n              onClick: () => void loadActivity(false),\n              children: loading ? \"Loading\u2026\" : \"Load older\"\n            }\n          ) : null\n        ] })\n      ] })\n    ] }) });\n  }\n\n  // src/operator-ui/model.ts\n  function filterUiConnectors(connectors, query) {\n    const q2 = query.trim().toLowerCase();\n    const filtered = [];\n    for (const connector of connectors) {\n      const connectorText = [\n        connector.id,\n        connector.title,\n        connector.description,\n        connector.status\n      ].join(\" \").toLowerCase();\n      const connectorMatches = Boolean(q2 && connectorText.includes(q2));\n      const tools = connector.tools.filter(\n        (tool) => !q2 || connectorMatches || `${tool.name} ${tool.description ?? \"\"}`.toLowerCase().includes(q2)\n      );\n      if (q2 && tools.length === 0 && !connectorMatches) continue;\n      filtered.push({ connector, tools });\n    }\n    return filtered;\n  }\n\n  // src/operator-ui/app/connections.tsx\n  var DRIFT_HEADING = {\n    clean: \"Catalog drift \u00B7 none\",\n    warning: \"Catalog drift \u00B7 review\",\n    unavailable: \"Catalog drift \u00B7 not observed\"\n  };\n  function DriftPanel({ connector }) {\n    const drift = connector.catalogDrift;\n    const state2 = driftState(drift);\n    return /* @__PURE__ */ u3(\n      \"div\",\n      {\n        id: `drift-${connector.id}`,\n        class: `connector-drift ${state2}`,\n        \"data-drift\": state2,\n        children: [\n          /* @__PURE__ */ u3(\"p\", { class: \"cap\", children: DRIFT_HEADING[state2] }),\n          /* @__PURE__ */ u3(\"p\", { class: \"meta drift-summary\", children: driftSummary(drift) }),\n          state2 === \"unavailable\" ? null : /* @__PURE__ */ u3(\"ul\", { class: \"drift-counts\", children: driftCounts(drift).map(({ key, label, count }) => /* @__PURE__ */ u3(\"li\", { class: count > 0 ? \"drift-count flagged\" : \"drift-count\", children: [\n            /* @__PURE__ */ u3(\"span\", { class: \"drift-count-value\", children: count }),\n            /* @__PURE__ */ u3(\"span\", { class: \"drift-count-label\", children: label })\n          ] }, key)) })\n        ]\n      }\n    );\n  }\n  function ConnectorCard({\n    connector,\n    tools,\n    expanded,\n    oauthManagement,\n    busy\n  }) {\n    const name = connector.title || connector.id;\n    const authorization = safeHttpHref(connector.authorizationUrl);\n    return /* @__PURE__ */ u3(\"div\", { class: \"card\", children: [\n      /* @__PURE__ */ u3(\"div\", { class: \"connector-head\", children: [\n        /* @__PURE__ */ u3(\"div\", { children: [\n          /* @__PURE__ */ u3(\"div\", { class: \"connector-title\", children: [\n            /* @__PURE__ */ u3(\"span\", { class: `dot ${connector.status}`, \"aria-hidden\": \"true\" }),\n            /* @__PURE__ */ u3(\"h2\", { children: name })\n          ] }),\n          connector.description ? /* @__PURE__ */ u3(\"p\", { class: \"connector-description meta\", children: connector.description }) : null\n        ] }),\n        /* @__PURE__ */ u3(\"div\", { class: \"connector-state cap\", children: [\n          connectorStatusLabel(connector.status),\n          \" \u00B7\",\n          \" \",\n          toolCountLabel(connector.toolCount),\n          /* @__PURE__ */ u3(\"br\", {}),\n          /* @__PURE__ */ u3(\"span\", { class: \"mono\", children: connector.id })\n        ] })\n      ] }),\n      connector.message ? /* @__PURE__ */ u3(\"p\", { class: \"connector-message msg\", children: connector.message }) : null,\n      connector.authorizationUrl ? /* @__PURE__ */ u3(\"p\", { class: authorization ? \"connector-auth\" : \"connector-auth meta\", children: authorization ? /* @__PURE__ */ u3(\n        \"a\",\n        {\n          class: \"linklike\",\n          href: authorization,\n          target: \"_blank\",\n          rel: \"noopener\",\n          children: \"Authorize connector \u2192\"\n        }\n      ) : `Authorization URL: ${connector.authorizationUrl}` }) : null,\n      /* @__PURE__ */ u3(DriftPanel, { connector }),\n      connector.catalogAccess ? /* @__PURE__ */ u3(\"p\", { class: \"meta\", children: [\n        \"Last agent catalog read \u00B7 \",\n        connector.catalogAccess.state,\n        \" \u00B7\",\n        \" \",\n        new Date(connector.catalogAccess.observedAt).toLocaleString()\n      ] }) : null,\n      connector.oauth && oauthManagement ? /* @__PURE__ */ u3(\"div\", { class: \"credential-actions\", children: [\n        /* @__PURE__ */ u3(\n          \"button\",\n          {\n            type: \"button\",\n            class: \"linklike danger\",\n            \"aria-label\": `Disconnect OAuth for ${name}`,\n            disabled: busy,\n            onClick: () => void oauthAction(connector.id, \"disconnect\"),\n            children: \"Disconnect OAuth\"\n          }\n        ),\n        /* @__PURE__ */ u3(\n          \"button\",\n          {\n            type: \"button\",\n            class: \"linklike\",\n            \"aria-label\": `${connector.status === \"ok\" ? \"Reconnect OAuth for\" : \"Restart authorization for\"} ${name}`,\n            disabled: busy,\n            onClick: () => void oauthAction(connector.id, \"reconnect\"),\n            children: connector.status === \"ok\" ? \"Reconnect OAuth\" : \"Restart authorization\"\n          }\n        )\n      ] }) : null,\n      connector.credential ? /* @__PURE__ */ u3(\"p\", { class: \"connector-auth\", children: /* @__PURE__ */ u3(PageLink, { page: \"credentials\", class: \"linklike\", children: \"Manage credential \u2192\" }) }) : null,\n      tools.length ? /* @__PURE__ */ u3(\"details\", { open: expanded, children: [\n        /* @__PURE__ */ u3(\"summary\", { class: \"linklike\", children: [\n          \"Show tools (\",\n          tools.length,\n          \")\"\n        ] }),\n        /* @__PURE__ */ u3(\"div\", { class: \"tool-list\", children: tools.map((tool) => /* @__PURE__ */ u3(\"div\", { class: \"tool\", children: [\n          /* @__PURE__ */ u3(\"code\", { children: tool.address }),\n          tool.description ? /* @__PURE__ */ u3(\"span\", { class: \"td\", children: tool.description }) : null\n        ] }, tool.address)) })\n      ] }) : null\n    ] });\n  }\n  function ConnectionsPage({ state: state2 }) {\n    const data = state2.data;\n    const query = state2.connectorFilter.trim();\n    const filtered = data ? filterUiConnectors(data.connectors, query) : [];\n    return /* @__PURE__ */ u3(\"section\", { id: \"connectionsView\", children: [\n      /* @__PURE__ */ u3(\"div\", { class: \"lead pgrid\", children: [\n        /* @__PURE__ */ u3(\"h1\", { id: \"connectionsHeading\", class: \"pcap\", tabIndex: -1, children: \"Connections\" }),\n        /* @__PURE__ */ u3(\"div\", { class: \"pbody lead-copy\", children: [\n          /* @__PURE__ */ u3(\"p\", { children: \"Use this endpoint to give an MCP client access to the tools below.\" }),\n          /* @__PURE__ */ u3(\"div\", { class: \"endpoint\", children: /* @__PURE__ */ u3(\"div\", { class: \"endpoint-row\", children: [\n            /* @__PURE__ */ u3(\"code\", { id: \"mcpUrl\", class: \"mono\", children: mcpUrl }),\n            /* @__PURE__ */ u3(CopyButton, { value: mcpUrl, label: \"Copy URL\" })\n          ] }) }),\n          /* @__PURE__ */ u3(\"p\", { class: \"cap\", id: \"serverInfo\", children: data ? `${data.serverInfo?.name || productName} v${data.connectaVersion || \"?\"}` : productOperatorLabel }),\n          /* @__PURE__ */ u3(NoticeLine, { id: \"oauthNotice\", notice: state2.oauthNotice })\n        ] })\n      ] }),\n      /* @__PURE__ */ u3(\"section\", { class: \"section pgrid\", \"aria-labelledby\": \"connectorLedgerHeading\", children: [\n        /* @__PURE__ */ u3(\"h2\", { class: \"pcap\", id: \"connectorLedgerHeading\", children: \"Connectors\" }),\n        /* @__PURE__ */ u3(\"div\", { class: \"pbody\", children: [\n          /* @__PURE__ */ u3(\"div\", { class: \"row toolbar\", children: /* @__PURE__ */ u3(\n            \"input\",\n            {\n              id: \"filter\",\n              type: \"search\",\n              placeholder: \"Filter connectors or tools\u2026\",\n              \"aria-label\": \"Filter connectors or tools\",\n              value: state2.connectorFilter,\n              onInput: (event) => setConnectorFilter(event.currentTarget.value)\n            }\n          ) }),\n          /* @__PURE__ */ u3(\n            \"div\",\n            {\n              id: \"list\",\n              class: \"connector-tools\",\n              \"aria-busy\": state2.refreshing || !data ? \"true\" : \"false\",\n              children: !data ? /* @__PURE__ */ u3(Empty, { children: \"Loading connectors\u2026\" }) : filtered.length === 0 ? /* @__PURE__ */ u3(Empty, { children: query ? \"No connectors or tools match this filter.\" : \"No connectors are declared in this deployment.\" }) : filtered.map(({ connector, tools }) => /* @__PURE__ */ u3(\n                ConnectorCard,\n                {\n                  connector,\n                  tools,\n                  expanded: Boolean(query),\n                  oauthManagement: data.oauthManagement,\n                  busy: state2.oauthBusy === connector.id\n                },\n                connector.id\n              ))\n            }\n          )\n        ] })\n      ] })\n    ] });\n  }\n\n  // src/operator-ui/app/credentials.tsx\n  function CredentialForm({\n    connector,\n    credential,\n    busy\n  }) {\n    const fields = credential.fields ?? [];\n    const [values, setValues] = d2({});\n    const single = fields.length === 0;\n    const inputId = `credential-input-${connector}`;\n    const submit = () => {\n      if (single) {\n        const value = (values.value ?? \"\").trim();\n        if (!value) return refuseCredential(\"Paste a credential before saving.\");\n        return void saveCredential(connector, { value });\n      }\n      const entries = {};\n      for (const field of fields) {\n        const value = (values[field.name] ?? \"\").trim();\n        if (!value) {\n          return refuseCredential(\n            \"Complete every credential field before saving.\"\n          );\n        }\n        entries[field.name] = value;\n      }\n      void saveCredential(connector, { values: entries });\n    };\n    return /* @__PURE__ */ u3(\"div\", { class: \"credential-form\", \"data-credential-form\": connector, children: [\n      single ? /* @__PURE__ */ u3(S, { children: [\n        /* @__PURE__ */ u3(\"label\", { class: \"visually-hidden\", for: inputId, children: credential.label }),\n        /* @__PURE__ */ u3(\n          \"input\",\n          {\n            id: inputId,\n            type: \"password\",\n            \"aria-label\": credential.label,\n            placeholder: credential.placeholder || \"Paste credential\",\n            autocomplete: \"new-password\",\n            autocapitalize: \"none\",\n            spellcheck: false,\n            value: values.value ?? \"\",\n            onInput: (event) => setValues({ value: event.currentTarget.value })\n          }\n        )\n      ] }) : /* @__PURE__ */ u3(\"div\", { class: \"credential-fields\", children: fields.map((field, index) => {\n        const id = `credential-input-${connector}-${index}`;\n        return /* @__PURE__ */ u3(\"div\", { class: \"credential-field\", children: [\n          /* @__PURE__ */ u3(\"label\", { for: id, children: field.label }),\n          /* @__PURE__ */ u3(\n            \"input\",\n            {\n              id,\n              type: field.inputType || \"password\",\n              placeholder: field.placeholder || field.label,\n              autocomplete: (field.inputType ?? \"password\") === \"password\" ? \"new-password\" : \"off\",\n              autocapitalize: \"none\",\n              spellcheck: false,\n              value: values[field.name] ?? \"\",\n              onInput: (event) => setValues({\n                ...values,\n                [field.name]: event.currentTarget.value\n              })\n            }\n          )\n        ] }, field.name);\n      }) }),\n      /* @__PURE__ */ u3(\"button\", { class: \"linklike\", type: \"button\", disabled: busy, onClick: submit, children: busy ? \"Saving\u2026\" : \"Save\" }),\n      /* @__PURE__ */ u3(\n        \"button\",\n        {\n          class: \"linklike\",\n          type: \"button\",\n          disabled: busy,\n          onClick: () => editCredential(null),\n          children: \"Cancel\"\n        }\n      )\n    ] });\n  }\n  function CredentialCard({\n    connector,\n    credential,\n    editing,\n    busy\n  }) {\n    const configured = Boolean(credential.configured);\n    const removable = configured || Boolean(credential.removable);\n    return /* @__PURE__ */ u3(\n      \"section\",\n      {\n        class: \"credential-card\",\n        id: `credential-${connector.id}`,\n        \"aria-labelledby\": `credential-title-${connector.id}`,\n        children: [\n          /* @__PURE__ */ u3(\"div\", { class: \"credential-head\", children: [\n            /* @__PURE__ */ u3(\"div\", { class: \"connector-title\", children: [\n              /* @__PURE__ */ u3(\n                \"span\",\n                {\n                  class: `dot ${configured ? \"ok\" : \"auth_required\"}`,\n                  \"aria-hidden\": \"true\"\n                }\n              ),\n              /* @__PURE__ */ u3(\"h2\", { id: `credential-title-${connector.id}`, children: connector.title || connector.id })\n            ] }),\n            /* @__PURE__ */ u3(\"span\", { class: \"credential-state\", children: credentialStateLabel(credential) })\n          ] }),\n          /* @__PURE__ */ u3(\"p\", { class: \"mono\", children: [\n            connector.id,\n            \" \u00B7 \",\n            credential.label\n          ] }),\n          credential.description ? /* @__PURE__ */ u3(\"p\", { class: \"credential-copy meta\", children: credential.description }) : null,\n          credential.fields?.length ? /* @__PURE__ */ u3(\"div\", { class: \"credential-field-summary\", children: credential.fields.map((field) => /* @__PURE__ */ u3(\"div\", { children: [\n            /* @__PURE__ */ u3(\"span\", { children: field.label }),\n            /* @__PURE__ */ u3(\"span\", { class: \"meta\", children: field.configured ? `configured \u00B7 \u2022\u2022\u2022\u2022${field.lastFour ?? \"\"}${field.updatedAt ? ` \u00B7 updated ${formatDate(field.updatedAt)}` : \"\"}` : \"not configured\" })\n          ] }, field.name)) }) : null,\n          credential.error ? /* @__PURE__ */ u3(\"div\", { class: \"msg\", children: credential.error }) : null,\n          credential.notice ? /* @__PURE__ */ u3(\"p\", { class: \"credential-copy meta\", children: credential.notice }) : null,\n          /* @__PURE__ */ u3(\"div\", { class: \"credential-actions\", children: [\n            /* @__PURE__ */ u3(\n              \"button\",\n              {\n                class: \"linklike\",\n                type: \"button\",\n                disabled: busy,\n                onClick: () => editCredential(editing ? null : connector.id),\n                children: removable ? \"Replace\" : \"Add credential\"\n              }\n            ),\n            configured && credential.testable ? /* @__PURE__ */ u3(\n              \"button\",\n              {\n                class: \"linklike\",\n                type: \"button\",\n                disabled: busy,\n                onClick: () => void testCredential(connector.id),\n                children: busy ? \"Working\u2026\" : \"Test\"\n              }\n            ) : null,\n            removable ? /* @__PURE__ */ u3(\n              \"button\",\n              {\n                class: \"linklike danger\",\n                type: \"button\",\n                disabled: busy,\n                onClick: () => void removeCredential(connector.id),\n                children: \"Remove\"\n              }\n            ) : null\n          ] }),\n          editing ? /* @__PURE__ */ u3(\n            CredentialForm,\n            {\n              connector: connector.id,\n              credential,\n              busy\n            }\n          ) : null\n        ]\n      }\n    );\n  }\n  function CredentialsPage({ state: state2 }) {\n    const data = state2.data;\n    const available = data?.credentialManagement === \"available\";\n    const slots = (data?.connectors ?? []).filter(\n      (connector) => Boolean(connector.credential)\n    );\n    return /* @__PURE__ */ u3(\"section\", { id: \"credentialsView\", children: /* @__PURE__ */ u3(\"div\", { class: \"lead pgrid\", children: [\n      /* @__PURE__ */ u3(\"h1\", { id: \"credentialsHeading\", class: \"pcap\", tabIndex: -1, children: \"Credentials\" }),\n      /* @__PURE__ */ u3(\"div\", { class: \"pbody\", children: [\n        /* @__PURE__ */ u3(\"p\", { class: \"activity-copy\", children: \"Rotate operator-managed connector credentials. Stored values are never returned or displayed.\" }),\n        /* @__PURE__ */ u3(NoticeLine, { id: \"credentialNotice\", notice: state2.credentialNotice }),\n        !available ? /* @__PURE__ */ u3(Unavailable, { children: credentialUnavailableCopy(data?.credentialManagement) }) : /* @__PURE__ */ u3(\n          \"div\",\n          {\n            id: \"credentialList\",\n            class: \"credential-ledger\",\n            \"aria-busy\": state2.credentialBusy ? \"true\" : \"false\",\n            children: slots.length === 0 ? /* @__PURE__ */ u3(Empty, { children: \"No connector in this deployment declares a credential slot yet.\" }) : slots.map((connector) => /* @__PURE__ */ u3(\n              CredentialCard,\n              {\n                connector,\n                credential: connector.credential,\n                editing: state2.credentialEditing === connector.id,\n                busy: state2.credentialBusy === connector.id\n              },\n              connector.id\n            ))\n          }\n        )\n      ] })\n    ] }) });\n  }\n\n  // src/operator-ui/app/tokens.tsx\n  function CreateForm({ busy }) {\n    const [name, setName] = d2(\"\");\n    return /* @__PURE__ */ u3(\n      \"form\",\n      {\n        id: \"tokenCreateForm\",\n        class: \"token-create\",\n        onSubmit: (event) => {\n          event.preventDefault();\n          void createAccessToken(name.trim()).then((created) => {\n            if (created) setName(\"\");\n          });\n        },\n        children: [\n          /* @__PURE__ */ u3(\"label\", { for: \"tokenName\", children: \"Client name\" }),\n          /* @__PURE__ */ u3(\"div\", { class: \"row\", children: [\n            /* @__PURE__ */ u3(\n              \"input\",\n              {\n                id: \"tokenName\",\n                type: \"text\",\n                maxLength: 80,\n                placeholder: \"Claude desktop, ChatGPT production\u2026\",\n                autocomplete: \"off\",\n                value: name,\n                onInput: (event) => setName(event.currentTarget.value)\n              }\n            ),\n            /* @__PURE__ */ u3(\"button\", { id: \"createToken\", class: \"linklike\", type: \"submit\", disabled: busy, children: busy ? \"Creating\u2026\" : \"Create token\" })\n          ] })\n        ]\n      }\n    );\n  }\n  function Reveal({ token }) {\n    return /* @__PURE__ */ u3(\n      \"section\",\n      {\n        id: \"tokenReveal\",\n        class: \"token-reveal\",\n        \"aria-labelledby\": \"tokenRevealHeading\",\n        children: [\n          /* @__PURE__ */ u3(\"div\", { class: \"token-reveal-head\", children: [\n            /* @__PURE__ */ u3(\"h2\", { id: \"tokenRevealHeading\", tabIndex: -1, children: \"Copy this token now\" }),\n            /* @__PURE__ */ u3(\"span\", { class: \"cap\", children: \"Shown once\" })\n          ] }),\n          /* @__PURE__ */ u3(\"p\", { class: \"meta\", children: \"Store it in the MCP client before leaving this page. It cannot be displayed again.\" }),\n          /* @__PURE__ */ u3(\"div\", { class: \"endpoint-row token-secret\", children: [\n            /* @__PURE__ */ u3(\"code\", { id: \"createdToken\", class: \"mono\", children: token }),\n            /* @__PURE__ */ u3(CopyButton, { value: token, label: \"Copy token\" })\n          ] }),\n          /* @__PURE__ */ u3(\"button\", { class: \"linklike\", type: \"button\", onClick: dismissCreatedToken, children: \"I stored it\" })\n        ]\n      }\n    );\n  }\n  function TokenCard({\n    token,\n    renaming,\n    busy\n  }) {\n    const [name, setName] = d2(token.name);\n    const revoked = Boolean(token.revokedAt);\n    return /* @__PURE__ */ u3(\n      \"section\",\n      {\n        class: revoked ? \"token-card revoked\" : \"token-card\",\n        \"aria-labelledby\": `access-token-${token.id}`,\n        children: [\n          /* @__PURE__ */ u3(\"div\", { class: \"token-card-head\", children: [\n            /* @__PURE__ */ u3(\"div\", { children: [\n              /* @__PURE__ */ u3(\"h2\", { id: `access-token-${token.id}`, children: token.name }),\n              /* @__PURE__ */ u3(\"p\", { class: \"mono\", children: [\n                token.tokenPrefix,\n                \"\u2026\"\n              ] })\n            ] }),\n            /* @__PURE__ */ u3(\"div\", { class: \"cap\", children: revoked ? `Revoked ${formatDate(token.revokedAt)}` : `Created ${formatDate(token.createdAt)}` })\n          ] }),\n          /* @__PURE__ */ u3(\"div\", { class: \"credential-actions\", children: [\n            /* @__PURE__ */ u3(\n              \"button\",\n              {\n                class: \"linklike\",\n                type: \"button\",\n                disabled: busy,\n                onClick: () => {\n                  setName(token.name);\n                  renameAccessToken(renaming ? null : token.id);\n                },\n                children: \"Rename\"\n              }\n            ),\n            revoked ? null : /* @__PURE__ */ u3(\n              \"button\",\n              {\n                class: \"linklike danger\",\n                type: \"button\",\n                disabled: busy,\n                onClick: () => void revokeAccessToken(token.id),\n                children: \"Revoke\"\n              }\n            )\n          ] }),\n          renaming ? /* @__PURE__ */ u3(\n            \"form\",\n            {\n              class: \"credential-form\",\n              onSubmit: (event) => {\n                event.preventDefault();\n                const next = name.trim();\n                if (next) void saveAccessTokenName(token.id, next);\n              },\n              children: [\n                /* @__PURE__ */ u3(\"label\", { class: \"visually-hidden\", for: `token-name-${token.id}`, children: \"Token name\" }),\n                /* @__PURE__ */ u3(\n                  \"input\",\n                  {\n                    id: `token-name-${token.id}`,\n                    type: \"text\",\n                    maxLength: 80,\n                    autocomplete: \"off\",\n                    value: name,\n                    onInput: (event) => setName(event.currentTarget.value)\n                  }\n                ),\n                /* @__PURE__ */ u3(\"button\", { class: \"linklike\", type: \"submit\", disabled: busy, children: \"Save name\" }),\n                /* @__PURE__ */ u3(\n                  \"button\",\n                  {\n                    class: \"linklike\",\n                    type: \"button\",\n                    disabled: busy,\n                    onClick: () => renameAccessToken(null),\n                    children: \"Cancel\"\n                  }\n                )\n              ]\n            }\n          ) : null\n        ]\n      }\n    );\n  }\n  function TokensPage({ state: state2 }) {\n    const available = state2.data?.accessTokenManagement === \"available\";\n    return /* @__PURE__ */ u3(\"section\", { id: \"tokensView\", children: /* @__PURE__ */ u3(\"div\", { class: \"lead pgrid\", children: [\n      /* @__PURE__ */ u3(\"h1\", { id: \"tokensHeading\", class: \"pcap\", tabIndex: -1, children: \"Access tokens\" }),\n      /* @__PURE__ */ u3(\"div\", { class: \"pbody\", children: [\n        /* @__PURE__ */ u3(\"p\", { class: \"activity-copy\", children: \"Create named Bearer tokens for MCP clients. Each secret is shown once; revoke it when that client should lose access.\" }),\n        /* @__PURE__ */ u3(NoticeLine, { id: \"tokenNotice\", notice: state2.tokenNotice }),\n        !available ? /* @__PURE__ */ u3(Unavailable, { children: accessTokenUnavailableCopy(state2.data?.accessTokenManagement) }) : /* @__PURE__ */ u3(\"div\", { id: \"tokenAvailable\", children: [\n          state2.createdToken ? /* @__PURE__ */ u3(Reveal, { token: state2.createdToken }) : /* @__PURE__ */ u3(CreateForm, { busy: state2.tokenBusy }),\n          /* @__PURE__ */ u3(\n            \"div\",\n            {\n              id: \"tokenList\",\n              class: \"token-ledger\",\n              \"aria-busy\": state2.tokenPhase === \"loading\" ? \"true\" : \"false\",\n              children: state2.tokenPhase === \"loading\" ? /* @__PURE__ */ u3(Empty, { children: \"Loading access tokens\u2026\" }) : state2.tokenPhase === \"error\" ? /* @__PURE__ */ u3(\"p\", { class: \"empty\", children: /* @__PURE__ */ u3(\n                \"button\",\n                {\n                  class: \"linklike\",\n                  type: \"button\",\n                  onClick: () => void loadAccessTokens(),\n                  children: \"Try loading access tokens again\"\n                }\n              ) }) : state2.tokens.length === 0 ? /* @__PURE__ */ u3(Empty, { children: \"No access tokens yet. Name the first MCP client above.\" }) : state2.tokens.map((token) => /* @__PURE__ */ u3(\n                TokenCard,\n                {\n                  token,\n                  renaming: state2.tokenRenaming === token.id,\n                  busy: state2.tokenBusy\n                },\n                token.id\n              ))\n            }\n          )\n        ] })\n      ] })\n    ] }) });\n  }\n\n  // src/operator-ui/app/main.tsx\n  function useOperatorState() {\n    const [, bump] = y2((count) => count + 1, 0);\n    const snapshot = getState();\n    _2(() => {\n      const unsubscribe = subscribe(() => bump(void 0));\n      if (getState() !== snapshot) bump(void 0);\n      return unsubscribe;\n    }, []);\n    return snapshot;\n  }\n  function visiblePages(state2) {\n    return OPERATOR_PAGES.filter((page) => {\n      if (page === \"credentials\") {\n        return state2.data?.credentialManagement === \"available\";\n      }\n      if (page === \"tokens\") {\n        return state2.data?.accessTokenManagement === \"available\";\n      }\n      if (page === \"activity\") return Boolean(state2.data?.activityEnabled);\n      return true;\n    });\n  }\n  function OperatorNav() {\n    const state2 = useOperatorState();\n    if (state2.session !== \"ready\") return null;\n    return /* @__PURE__ */ u3(\"div\", { class: \"mast-actions\", children: [\n      /* @__PURE__ */ u3(\"nav\", { class: \"page-nav\", \"aria-label\": \"Operator pages\", children: visiblePages(state2).map((page) => /* @__PURE__ */ u3(\n        PageLink,\n        {\n          page,\n          class: \"navlink\",\n          current: state2.page === page,\n          children: PAGE_META[page].label\n        },\n        page\n      )) }),\n      /* @__PURE__ */ u3(\"div\", { class: \"session-actions\", \"aria-label\": \"Session actions\", children: auth.kind === \"clerk\" ? /* @__PURE__ */ u3(\"button\", { class: \"navlink\", type: \"button\", onClick: signOut, children: \"Sign out\" }) : /* @__PURE__ */ u3(\"button\", { class: \"navlink\", type: \"button\", onClick: forgetBearer, children: \"Change token\" }) })\n    ] });\n  }\n  function Gate({ state: state2 }) {\n    const [token, setToken] = d2(\"\");\n    const signedIn = auth.kind === \"clerk\" && Boolean(window.Clerk?.user);\n    const loading = state2.session === \"loading\";\n    return /* @__PURE__ */ u3(\"section\", { id: \"gate\", children: /* @__PURE__ */ u3(\"div\", { class: \"lead pgrid\", children: [\n      /* @__PURE__ */ u3(\"h1\", { id: \"gateHeading\", class: \"pcap\", tabIndex: -1, children: PAGE_META[state2.page].label }),\n      /* @__PURE__ */ u3(\"div\", { class: \"pbody lead-copy\", children: [\n        /* @__PURE__ */ u3(\"p\", { children: productDescription }),\n        /* @__PURE__ */ u3(\"p\", { id: \"gateCopy\", class: \"meta\", children: loading ? \"Checking your session\u2026\" : gateCopy(auth.kind, signedIn) }),\n        loading ? null : auth.kind === \"clerk\" ? /* @__PURE__ */ u3(\"div\", { id: \"clerkGate\", class: \"actions gate-actions\", children: signedIn ? /* @__PURE__ */ u3(\"button\", { class: \"linklike\", type: \"button\", onClick: signOut, children: \"Sign out\" }) : /* @__PURE__ */ u3(\"button\", { id: \"signin\", class: \"linklike\", type: \"button\", onClick: signIn, children: \"Team sign in\" }) }) : /* @__PURE__ */ u3(\n          \"form\",\n          {\n            id: \"tokenGate\",\n            class: \"row gate-actions\",\n            onSubmit: (event) => {\n              event.preventDefault();\n              const value = token.trim();\n              if (!value) return;\n              setToken(\"\");\n              signInWithBearer(value);\n            },\n            children: [\n              /* @__PURE__ */ u3(\n                \"input\",\n                {\n                  id: \"token\",\n                  type: \"password\",\n                  placeholder: \"Bearer token\",\n                  autocomplete: \"off\",\n                  \"aria-label\": \"Bearer token\",\n                  value: token,\n                  onInput: (event) => setToken(event.currentTarget.value)\n                }\n              ),\n              /* @__PURE__ */ u3(\"button\", { id: \"save\", class: \"linklike\", type: \"submit\", children: \"Open operator pages\" })\n            ]\n          }\n        ),\n        /* @__PURE__ */ u3(NoticeLine, { id: \"err\", notice: state2.gate, className: \"\" })\n      ] })\n    ] }) });\n  }\n  function CurrentPage({ state: state2 }) {\n    if (state2.page === \"credentials\") return /* @__PURE__ */ u3(CredentialsPage, { state: state2 });\n    if (state2.page === \"tokens\") return /* @__PURE__ */ u3(TokensPage, { state: state2 });\n    if (state2.page === \"activity\") return /* @__PURE__ */ u3(ActivityPage, { state: state2 });\n    return /* @__PURE__ */ u3(ConnectionsPage, { state: state2 });\n  }\n  function OperatorApp() {\n    const state2 = useOperatorState();\n    const ready = state2.session === \"ready\";\n    h2(() => {\n      document.title = `${PAGE_META[state2.page].label} \u2014 ${titleSuffix}`;\n    }, [state2.page]);\n    h2(() => {\n      if (!ready) return;\n      if (state2.page === \"tokens\" && state2.data?.accessTokenManagement === \"available\" && state2.tokenPhase === \"idle\") {\n        void loadAccessTokens();\n      }\n      if (state2.page === \"activity\" && state2.data?.activityEnabled && state2.activityPhase === \"idle\") {\n        void loadActivity(true);\n      }\n    });\n    h2(() => {\n      if (!state2.pendingFocus) return;\n      document.getElementById(state2.pendingFocus)?.focus();\n      focusHandled();\n    }, [state2.pendingFocus]);\n    return ready ? /* @__PURE__ */ u3(\"div\", { id: \"app\", children: /* @__PURE__ */ u3(CurrentPage, { state: state2 }) }) : /* @__PURE__ */ u3(Gate, { state: state2 });\n  }\n  function mount(id, view) {\n    const host = document.getElementById(id);\n    if (!host) return;\n    host.textContent = \"\";\n    R(view, host);\n  }\n  mount(\"operatorNav\", /* @__PURE__ */ u3(OperatorNav, {}));\n  mount(\"operatorContent\", /* @__PURE__ */ u3(OperatorApp, {}));\n  void boot();\n})();\n";
+export declare const OPERATOR_UI_CSS: string;
+export declare const OPERATOR_UI_SCRIPT: string;

package/dist/skills.d.ts

@@ -1,5 +1,5 @@
 import type { Connector } from "./types.js";
-export declare const CONNECTA_INSTRUCTIONS = "Choose a route before discovery. For one read at an unknown address, use search_tools then call_tool; a known address needs only call_tool. For read-only reduction, multiple or dependent calls, loops, joins, or branches, use one execute_code program that discovers, calls, and returns the reduced answer. Only readOnlyHint: true tools run there. Keep unannotated, write-capable, or destructive work top level: search_tools then call_destructive_tool. After auth_required use authorize_connector. After a truncated direct result use fields or get_result. connecta.ui(html) exists only inside execute_code, not in connector search; return the same summary data the HTML renders. Fetch skills({ name: \"usage\" }) once for program syntax, selection, repair, examples, and runtime details.";
+export declare const CONNECTA_INSTRUCTIONS = "Choose a route before discovery. For one read at an unknown address, use search_tools then call_tool; a known address needs only call_tool. For read-only reduction, multiple or dependent calls, loops, joins, or branches, use one execute_code program that discovers, calls, and returns the reduced answer. Only readOnlyHint: true tools run there. Keep unannotated, write-capable, or destructive work top level: search_tools then call_destructive_tool. After auth_required use authorize_connector. After a truncated direct result use get_result. connecta.ui(html) exists only inside execute_code, not in connector search; return the same summary data the HTML renders. Fetch skills({ name: \"usage\" }) once for program syntax, selection, repair, examples, and runtime details.";
 /** Shared Connecta routing guidance, byte-identical across deployments. */
 export declare const USAGE_SKILL: string;
 /** The always-loaded MCP `instructions` string. */

package/dist/skills.js

@@ -1,4 +1,4 @@
-export const CONNECTA_INSTRUCTIONS = 'Choose a route before discovery. For one read at an unknown address, use search_tools then call_tool; a known address needs only call_tool. For read-only reduction, multiple or dependent calls, loops, joins, or branches, use one execute_code program that discovers, calls, and returns the reduced answer. Only readOnlyHint: true tools run there. Keep unannotated, write-capable, or destructive work top level: search_tools then call_destructive_tool. After auth_required use authorize_connector. After a truncated direct result use fields or get_result. connecta.ui(html) exists only inside execute_code, not in connector search; return the same summary data the HTML renders. Fetch skills({ name: "usage" }) once for program syntax, selection, repair, examples, and runtime details.';
+export const CONNECTA_INSTRUCTIONS = 'Choose a route before discovery. For one read at an unknown address, use search_tools then call_tool; a known address needs only call_tool. For read-only reduction, multiple or dependent calls, loops, joins, or branches, use one execute_code program that discovers, calls, and returns the reduced answer. Only readOnlyHint: true tools run there. Keep unannotated, write-capable, or destructive work top level: search_tools then call_destructive_tool. After auth_required use authorize_connector. After a truncated direct result use get_result. connecta.ui(html) exists only inside execute_code, not in connector search; return the same summary data the HTML renders. Fetch skills({ name: "usage" }) once for program syntax, selection, repair, examples, and runtime details.';
 const USAGE_SKILL_BASE = `# Connecta usage
 
 ## The surface
@@ -17,7 +17,7 @@ The minimum guest API is:
 - \`connecta.call("connector.tool", args)\` uses the canonical address and returns the unwrapped value.
 - \`connecta.search(args)\` returns \`{ tools, total, offset, limit, hasMore }\`; \`connecta.describe(args)\` returns \`{ tools }\`.
 - \`connecta.batch(calls)\` runs 2–10 independent calls. Each outcome is \`{ address, ok: true, data }\` or \`{ address, ok: false, error, errorDetails }\`.
-- \`console.log(...)\` is captured. \`connecta.emit(block)\` and \`connecta.ui(html, options?)\` produce rich output.
+- \`console.log(...)\` is captured. \`connecta.emit(block)\` and \`connecta.ui(html)\` produce rich output.
 
 ## Discover and select
 
@@ -39,10 +39,10 @@ Caught Connecta errors expose \`message\`, \`code\`, \`retryable\`, and \`detail
 
 - \`destructive_tool_requires_approval\`: stop the program and use the returned canonical address with top-level \`call_destructive_tool\`.
 - \`auth_required\`: let the failure reach the model, then use top-level \`authorize_connector\`, give its handoff to the operator, and retry after recovery.
-- A truncated direct-call result: retry \`call_tool\` with \`fields\`, or follow its \`get_result\` action. A truncated program result has no page handle; filter, map, or slice inside a new program.
+- A truncated direct-call result: follow its \`get_result\` action. A truncated program result has no page handle; filter, map, or slice inside a new program.
 - Unknown addresses and tools carry scoped search recovery. Use it inside the current run. Do not invent an address.
 
-For a direct call, \`fields\` selects JSON dot-paths and \`[]\` traverses arrays, for example \`results[].id\`. Projection misses return \`data\` plus \`$connecta\` feedback. \`resultMode: "value"\` unwraps the result. \`timeoutMs\` sets its deadline. \`maxRetries\` is honored only for safely annotated tools. \`diagnostics: true\` adds timing.
+For a direct call, \`resultMode: "value"\` unwraps the result. \`timeoutMs\` sets its deadline. \`maxRetries\` is honored only for safely annotated tools. \`diagnostics: true\` adds timing.
 
 \`get_result({ id, offset?, maxBytes? })\` returns \`{ text, offset, nextOffset?, totalBytes }\` for a direct-call result. Both sizes are byte counts: \`maxBytes\` must be a whole number at least 1 and defaults to the deployment cap; \`offset\` must be a whole number at least 0 and defaults to 0. An offset inside a multi-byte character moves back to its first byte, and the response reports the served offset. Follow \`nextOffset\` to reassemble pages. An unknown or expired id is an error.
 
@@ -64,7 +64,7 @@ Dependent calls, only when the second needs a value from the first:
 
 ## Rendering a view
 
-\`connecta.emit\` accepts text, image, or audio blocks and delivers them only on success. \`connecta.ui(html)\` renders one success-only display view outside model context. One argument is display-only. Bind read-only refresh or drill-down calls with \`{ reads: { name: { address, fixedArgs?, viewArgs? } } }\`; page markup calls \`connecta.read(name, args)\`. Admission and one shared budget apply to the UI and emitted content, not separate budgets. Fetch and check the data shape first. On empty or missing data, return a trimmed first record instead of rendering. Otherwise render returned variables and return the same initial summary because the model reads the return value, not the view. A second, invalid, or over-budget UI call throws catchably.
+\`connecta.emit\` accepts text, image, or audio blocks and delivers them only on success. \`connecta.ui(html)\` renders one success-only display view outside model context. The view has local HTML and JavaScript only: no network, connector calls, discovery, conversation messages, or host links. One shared budget applies to the UI and emitted content, not separate budgets. Fetch and check the data shape first. On empty or missing data, return a trimmed first record instead of rendering. Otherwise render returned variables and return the same summary because the model reads the return value, not the view. A second, invalid, or over-budget UI call throws catchably.
 
 `;
 /** Deployment-scoped guide routing appended to the shared usage guide. */

package/dist/version.d.ts

@@ -4,4 +4,4 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export declare const CONNECTA_VERSION = "0.19.0";
+export declare const CONNECTA_VERSION = "0.20.0";

package/dist/version.js

@@ -4,4 +4,4 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export const CONNECTA_VERSION = "0.19.0";
+export const CONNECTA_VERSION = "0.20.0";

package/documentation/code-mode.md

@@ -503,9 +503,9 @@ the security posture live in the [design record](https://github.com/zackbart/con
 [#277](https://github.com/zackbart/connecta/issues/277)); this section is the
 contract, and it wins where the two disagree.
 
-**U1.** `connecta.ui(html, options?)` accepts one non-empty HTML string and at
-most the bounded read manifest `V1` defines. The one-argument call stays
-display-only; every other shape throws catchably and accepts nothing.
+**U1.** `connecta.ui(html)` accepts exactly one non-empty HTML string. There is
+no options parameter, read manifest, or sugar form. Every other shape throws
+catchably and accepts nothing.
 
 **U2.** At most one payload per run. A second call throws catchably, naming the
 constraint; the first accepted payload stands. One tool result renders one view,
@@ -513,7 +513,7 @@ and last-wins would silently discard a payload the program deliberately
 supplied.
 
 **U3.** Delivered on success only, and out of model context: the tool result
-gains `_meta["connecta/ui"] = { html, reads? }` and the JSON envelope gains `ui: true`,
+gains `_meta["connecta/ui"] = { html }` and the JSON envelope gains `ui: true`,
 so the model learns a view rendered without seeing its bytes. `structuredContent`
 stays the envelope alone. The single-label `connecta/ui` prefix is deliberate —
 connecta has no domain to reverse, and fabricating one to satisfy MCP's
@@ -526,29 +526,31 @@ with `emittedDiscarded: N` when one failure discards both.
 
 **U4.** The payload spends the aggregate emit byte budget
 (`ConnectaConfig.execute.maxEmittedBytes`), measured at the call as the
-serialized bytes of `{ html, reads? }` — `M5`'s measurement. Over budget throws
+serialized bytes of `{ html }` — `M5`'s measurement. Over budget throws
 catchably, naming the budget and the room remaining, with nothing partially
 accepted. It spends no block count (`maxEmittedBlocks`: it is not a block) and no
 host-call budget (`L4`). One transport bound covers everything rich a program
 delivers.
 
 **U5.** One static shell: a connecta-authored HTML5 document at
-`ui://connecta/program-ui/v2`, mimeType `text/html;profile=mcp-app`, declared on
+`ui://connecta/program-ui/v3`, mimeType `text/html;profile=mcp-app`, declared on
 `execute_code` via `_meta.ui.resourceUri` together with an explicit
-`_meta.ui.visibility: ["model"]`. Only `call_tool` declares app visibility; all
-other tools say model-only. A `resources/read` handler answers exactly that
-URI and fails on any other; `resources/list` is served and returns an empty list.
+`_meta.ui.visibility: ["model"]`. The other six tools declare the same
+model-only visibility without a resource URI. Omission defaults to model and
+app visibility, which would let a display-only view call them. A
+`resources/read` handler answers exactly that URI and fails on any other;
+`resources/list` is served and returns an empty list.
 The version segment bumps whenever the shell's bytes change, because hosts cache
 templates by URI.
 
 **U6.** The shell renders the payload in a nested iframe
 (`srcdoc`, `sandbox="allow-scripts"`, no `allow-same-origin`) and declares no CSP
 domains, so the host applies its restrictive default and the `about:srcdoc` frame
-inherits `default-src 'none'; connect-src 'none'`. One argument stays display-only;
-a `V1` manifest installs only named `connecta.read`, with no direct network, raw
-tool calls, discovery, conversation, writes, or links. The shell participates in the Apps lifecycle —
-initialize, tool-result, size-changed, resource-teardown — and forwards no
-channel whatsoever from the inner frame to the host. That isolation makes
+inherits `default-src 'none'; connect-src 'none'`. The shell offers no direct
+network, tool calls, discovery, conversation messages, writes, or links. It
+participates in the Apps lifecycle — initialize, tool-result, size-changed,
+resource-teardown — and forwards no channel whatsoever from the inner frame to
+the host. That isolation makes
 program views fixed-height by construction: with no bridge there is no
 content-height signal, the shell reports only its own box, and content taller
 than that scrolls inside the inner frame rather than growing the view.
@@ -591,16 +593,14 @@ the same mistake as automatic host-side projection, refused in `ethos.md`
 
 **U13.** The always-loaded MCP instructions locate `connecta.ui(html)` before an
 agent chooses a route: it exists only inside `execute_code`, never in connector
-search, and carries `U12`'s mirrored-return duty. The detailed call, binding,
-budget, and repair rules live in the on-demand `usage` skill. The location
+search, and carries `U12`'s mirrored-return duty. The detailed call, budget,
+and repair rules live in the on-demand `usage` skill. The location
 distinction rides `initialize`, under a 1,000-character ceiling for the complete
 instructions string. This promotes existing contract, not capability: the
 seven-tool surface, guest API, catalog, Apps delivery, and runtime do not change
 ([#286](https://github.com/zackbart/connecta/issues/286),
 [#418](https://github.com/zackbart/connecta/issues/418)).
 
-Bounded view reads follow normative [`V1`–`V8`](https://github.com/zackbart/connecta/blob/main/records/program-ui-read-calls.md) ([#287](https://github.com/zackbart/connecta/issues/287), [#289](https://github.com/zackbart/connecta/issues/289)).
-
 ## Retry semantics
 
 **Y1.** Connecta retries nothing beneath a program. `call_tool` accepts an
@@ -878,7 +878,7 @@ the upstream `Executor` shape assignable.
 | `U1`, `U2` | `test/guest-api-contract.test.ts` (invalid and repeated calls throw catchably, first payload stands), `test/execute-ui.test.ts` (every rejected shape) |
 | `U3` | `test/guest-api-contract.test.ts` (`_meta` payload and `ui: true`, identical on both executors), `test/execute-ui.test.ts` (`structuredContent`, byte-for-byte no-call path, discard structured and plain, coexistence with `emittedDiscarded`), `test/quickjs-executor.test.ts` (mid-run shutdown) |
 | `U4` | `test/execute-ui.test.ts` (one shared byte aggregate crossed in either order; block count and host-call budget untouched) |
-| `U5`, `U10`, `U11` | `test/server.test.ts` (the shell URI, mimeType, and body; every other URI fails; empty listing; `execute_code`'s `_meta.ui`; exactly one declared extension) |
+| `U5`, `U10`, `U11` | `test/server.test.ts` (the shell URI, mimeType, and body; every other URI fails; empty listing; exact model-only `_meta.ui` on all seven tools; exactly one declared extension) |
 | `U6` | `test/execute-ui.test.ts` (valid HTML5, `srcdoc` and sandbox attributes, no `allow-same-origin`, no path from the inner frame to the host) |
 | `U7`, `U8` | two arms passing one case table, `test/codemode-compat.test.ts` |
 | `U9` | `test/execute-ui.test.ts` (a `ui` byte aggregate distinct from `emitted`, absent when nothing was accepted) |

package/documentation/meta-tools.md

@@ -192,36 +192,10 @@ offsets and totals refer to that exact compact text.
 A `call_tool` truncation notice carries both the historical `resultId` and an
 exact `nextAction: { tool: "get_result", arguments: { id, offset: 0 } }`. The
 handle is therefore
-directly actionable without copying an identifier out of prose; re-calling with
-`fields` remains the smaller alternative when projection is possible. Program results and oversized discovery responses carry no such
-route — paging a program's return value is a refused shape, because a program
-can shrink anything before it returns.
-
-`fields` keeps its historical flat `{ "<path>": value }` result when every
-requested dot-path resolves. Dot notation traverses objects; append `[]` to an
-array field before continuing, as in `results[].id`. Empty arrays resolve to
-empty arrays. An exact downstream
-`$connecta` field is always escaped under `data`. If any path misses—or that
-reserved name is selected—the result carries matches under `data` and reserves `$connecta` for a
-`type: "field_projection"` recovery record naming each `unmatchedFields`
-entry. A path that resolves for only some array elements stays in `data` and
-appears in `partialFields`; its unresolved positions serialize as `null`, while
-the recovery record distinguishes them from genuine downstream nulls. A path
-that misses every element appears in `unmatchedFields` and is omitted from
-`data`. Both lists scale with requested paths, never with array length. When a
-miss matches a declared array path except for `[]`, the record also carries the
-traversal hint. The discriminator means downstream fields
-named `data`, `projection`,
-or `$connecta` remain ordinary values nested under `data`, never apparent
-metadata. A declared output schema contributes a bounded `availableFields`
-list and a `schemaCoverage` verdict. Only a completely analyzed, closed schema
-can label paths `invalidFields`; open, patterned, tuple, unresolvable, cyclic,
-`$ref`-sibling, or traversal-limited shapes stay `partial`. Traversal bounds
-depth, nodes, path count, individual path characters/bytes, and cumulative path
-characters/bytes before sorting or rendering. Without a schema, Connecta
-reports only observed misses and does not pretend it knows the complete runtime
-shape. API values and JSON-parseable downstream MCP text blocks follow the same
-rule.
+directly actionable without copying an identifier out of prose. Program results
+and oversized discovery responses carry no such route — paging a program's
+return value is a refused shape, because a program can shrink anything before
+it returns.
 
 ## Lexical discovery
 

package/documentation/operations.md

@@ -96,14 +96,14 @@ optional.
 | `admission.requests?` | 16 active / 32 queued / 5 s / 1 s | global FIFO `/mcp` capacity, taken before auth ([request admission](./request-admission.md)) |
 | `admission.code?` | 2 active / 8 queued / 5 s / 1 s | fallback pool for an executor that owns no `acquire()`; ignored with a warning when it does |
 
-Options removed in earlier releases throw with their migration named rather
-than falling back to a default: `toolkits`
-([#178](https://github.com/zackbart/connecta/issues/178)), `credentials.health`
-([#179](https://github.com/zackbart/connecta/issues/179)), `surface` and
-`calls.maxBatchResultBytes`
-([#273](https://github.com/zackbart/connecta/issues/273)), and the flat v0.6
-paths. Silently ignoring a removed option is how a deployment ends up running a
-policy its config file says it has.
+An unknown own option throws before construction does deployment work. The
+check covers the top level, every configuration group, admission pools,
+branding icons, and server icons; the error names the rejected path without
+copying its value. Removed options such as `toolkits`, `credentials.health`,
+`surface`, `calls.maxBatchResultBytes`, and the flat v0.6 paths now take that
+same path. The [upgrade guide](./upgrading.md#removed-options-that-throw) keeps
+their historical mappings. Silently ignoring either a typo or a removed option
+is how a deployment runs a policy its config file does not describe.
 
 ### Deployment as a release unit
 
@@ -226,19 +226,19 @@ in.
 | `cloudflare-provider.test.ts` | `cloudflare()` construction, tool surface, request building, projections, typed failures, and credential test |
 | `code-first-surface.test.ts` | the seven-tool surface itself — an executor required, every removed option and top-level tool refused, compact always-loaded routing pinned below 1,000 characters, complete on-demand usage served, and `connecta.ui` findable before connector search |
 | `codemode-compat.test.ts` | the `Executor` seam staying structurally compatible with `@cloudflare/codemode`'s `DynamicWorkerExecutor`, enforced by `tsc` |
-| `config.test.ts` | the grouped `ConnectaConfig` boundary — each group forwarding to its internals, malformed admission bounds failing construction, and one complete migration error for legacy own-properties |
+| `config.test.ts` | the grouped `ConnectaConfig` boundary — each group forwarding to its internals, malformed admission bounds failing construction, and unknown own-properties rejected by their complete path before construction does work |
 | `credentials.test.ts` | the pure stored-shape classifier (containment, not equality) and the AES-GCM vault: round-trip, ciphertext bound to its connector id, named field sets, masked metadata, wrong-key rejection, deletion, coexistence with OAuth keys |
 | `d1-activity-example.test.ts` | the Worker example's deployment-owned D1 activity store: actor namespace round-trip, payload-free friction reconstructed from the persisted code, and agreement with the package's friction table |
 | `downstream-oauth.test.ts` | `KvOAuthProvider` round-trips and races, `auth_required` versus `error`, `startAuth`/`finishAuth`, callback refusal equality, bounded diagnostics, and HTML escaping |
 | `errors.test.ts` | `ConnectorCallError` codes, retryable defaults and overrides, `retryAfterMs` round-trip, typed-over-heuristic classification, `AbortError` as a retryable timeout, and framing errors |
 | `execute.test.ts` | the code-mode host bridge: identifier sanitization, MCP-result unwrapping, sandbox provider construction, authenticated thrown-failure framing, fail-closed filtering of destructive and unannotated tools, MCP/code-mode invocation parity, and payload-free describe diagnostics |
 | `execute-emit.test.ts` | `connecta.emit` (M1–M10) — block validation, budgets, the provider, delivery after the result envelope on success only, and the defaults |
-| `execute-ui.test.ts` | `connecta.ui` (U1–U9) — validation, multiplicity and budget, the provider, `_meta` delivery, and the Apps shell |
+| `execute-ui.test.ts` | display-only `connecta.ui` (U1–U13) — one-string validation, multiplicity and budget, the provider, `_meta` delivery, shell isolation, and the absence of a payload-to-host call path |
 | `executor-admission.test.ts` | the portable bounded FIFO both pools use: active and queue ceilings, stable retryable overload, queue timeout, cancellation removal, idempotent release, shutdown |
 | `guarded-fetch.test.ts` | the guarded transport — construction, request building, destination confinement, and response handling |
 | `guest-api-contract.test.ts` | the shared guest contract on the Dynamic Worker, including caught call, typed inline describe recovery, discovery, utility, batch, and budget failure codes; plus the real authority boundary — local `data:` fetch, denied egress, unresolved DNS, empty environment paths, unavailable filesystem/HTTP builtins, and present runtime globals |
 | `linear-provider.test.ts` | the Linear proxy's construction, classification, and guide |
-| `meta-tools-call.test.ts` | registry-backed calls: structured errors, field projection, truncation and `get_result`, per-connector result bounds, JSON representation failures, MCP content bounds, and offset alignment |
+| `meta-tools-call.test.ts` | registry-backed calls: structured errors, truncation and `get_result`, per-connector result bounds, JSON representation failures, MCP content bounds, and offset alignment |
 | `meta-tools-search.test.ts` | registry-backed discovery: bounded search with page and address maxima, compact and JSON schemas with constraints, typed describe recovery and suggestions, and structured-result compatibility |
 | `meta-tools.test.ts` | the remaining registry-backed meta-tools: the complete on-demand usage skill, connector-guide selection and summary bounds, stored-credential drift, catalog health, authorization, probe timeouts, and unavailable or unknown browse recovery |
 | `mixpanel-provider.test.ts` | the Mixpanel proxy, its conditional-input guide and complete reviewed schema-digest manifest |
@@ -254,7 +254,7 @@ in.
 | `request-admission.test.ts` | `/mcp` bounded before auth, the stable 503 and `Retry-After`, health and operator responsiveness under saturation, payload-free counters, queued cancellation, shutdown rejection while active work drains, and the separate fallback code pool |
 | `result-shapes.test.ts` | passive output-shape learning: value-free bounded inference, merging, 256-entry LRU eviction, 24-hour expiry, runtime isolation, read-only admission, declared-schema precedence, definition-change invalidation, discovery provenance, and failure isolation |
 | `revenuecat-provider.test.ts` | the RevenueCat proxy's per-project key scoping and account-wide OAuth guides, its purpose-bearing summary, the argued borderline verdicts in its digest-free manifest, and the deliberately unclassified `render-paywall-screenshot` |
-| `server.test.ts` | end-to-end `/mcp` (401 → compact initialize instructions → seven compact definitions with bounded connector inventory → complete usage skill → `call_tool`), conditional guide pointers, open routes, Clerk `.well-known` metadata without network, code mode, and deferred catalog reads through both discovery surfaces |
+| `server.test.ts` | end-to-end `/mcp` (401 → compact initialize instructions → seven compact definitions with bounded connector inventory and exact model-only Apps metadata → complete usage skill → `call_tool`), conditional guide pointers, open routes, Clerk `.well-known` metadata without network, code mode, and deferred catalog reads through both discovery surfaces |
 | `server-route-contracts.test.ts` | the route contracts `server.ts` must keep byte-identical: every built-in answered ahead of connector routes inside the security wrapper, open data-free shells with framing denied, per-route auth and same-origin requirements with exact 401/403/405 bodies, and OAuth `verifyState`-before-`finishAuth` ordering |
 | `startup-warnings.test.ts` | every construction-time `logger.warn` and, as importantly, the conditions that must *not* trigger one: open mode with a credential or OAuth connector, `publicUrl` unset beside OAuth, dropped branding and `uiAuth` URLs, a missing `verifyState`, a credential test-hook mismatch, and an unusable `calls.maxResultBytes` |
 | `stripe-provider.test.ts` | the Stripe proxy's mixed-mode OAuth and fixed-mode header contracts, admission, exact account selectors, and no-guess rule |
@@ -294,7 +294,7 @@ justification for *not* re-running it in workerd, so "it was easier" is not one.
 | Suite | Covers |
 | --- | --- |
 | `browser/operator-ui.spec.ts` | the operator wiring in a real browser: Clerk loader order across its version redirect and a real load failure, the shell staying open until authentication, credential and access-token and OAuth flows end to end, drift shown without naming a tool, and every failure and empty state |
-| `browser/program-ui.spec.ts` | the Apps shell in a real browser: a bound view merging fixed and declared arguments and correlating concurrent reads, and the one-string payload receiving no read bridge ([program UI read calls](https://github.com/zackbart/connecta/blob/main/records/program-ui-read-calls.md)) |
+| `browser/program-ui.spec.ts` | the display-only Apps shell in a real browser: local payload JavaScript runs, `connecta` stays absent, and forged payload messages never become host tool calls |
 
 **The `_transportFactory` seam.** `RemoteMcpOptions._transportFactory` is
 internal, not public API: when set, `remoteMcp()` uses that `Transport` instead

package/documentation/provider-conventions.md

@@ -183,10 +183,9 @@ tokens.
 
 ### H8 — Every tool declares an `outputSchema`
 
-Declared outputs are what produce `outputKeys` and the `fields` projection's
-`availableFields`, and they let a program reduce a result without first
-fetching one to look at. Connecta measured *declared* output schemas at 0 of 30
-tools on one real deployment and 3 of 30 on another
+Declared outputs produce `outputKeys` and let a program reduce a result without
+first fetching one to look at. Connecta measured *declared* output schemas at 0
+of 30 tools on one real deployment and 3 of 30 on another
 ([#282](https://github.com/zackbart/connecta/issues/282)) — nearly every tool an
 agent meets is a shape it can only learn by calling. A maintained provider has
 no excuse to join that majority.