@zackbart/connecta 0.22.1 → 0.22.3

package/AGENTS.md

@@ -122,11 +122,12 @@ dead, and neither is a state to leave the repository in.
 - **CHANGELOG.** Each release opens with a narrative paragraph — what this
   release is, what breaks, what a deployment can ignore — then
   `### Added` / `### Changed` / `### Fixed`.
-- **Provider drift.** Before tagging a release, run `npm run drift:check` with
-  local provider credentials exported. It diffs each hosted-MCP catalog against
-  its vetted manifest and each hand-written provider's touched endpoints against
-  the provider's published OpenAPI document. Findings are read by a human and
-  become GitHub issues — no credential goes near CI, and nothing files itself.
+- **Provider drift.** Run `npm run providers:check` for the credential-free
+  public check across every maintained provider. It covers official MCP
+  documentation and OpenAPI contracts and never reads a provider credential.
+  Remote MCP schemas remain owned by the live `tools/list` response rather than
+  a vendored copy. Findings are read by a human and become GitHub issues;
+  nothing files itself.
   See
   [`documentation/provider-conventions.md`](./documentation/provider-conventions.md#the-maintainer-run-drift-check).
 - **Releases.** `npm run release:check`, tag `v<version>` matching

package/CHANGELOG.md

@@ -2,6 +2,65 @@
 
 All notable changes to this package are documented here.
 
+## 0.22.3 — 2026-09-03
+
+This patch carries OAuth discovery across the browser redirect. It matters for
+downstream MCP servers whose authentication challenge names a protected-resource
+metadata URL outside the RFC 9728 default path, including Cloudflare Access
+Managed OAuth. Existing grants and connectors using the default path require no
+configuration or storage migration.
+
+### Fixed
+
+- **Non-default OAuth discovery survives callbacks.** The KV OAuth provider now
+  persists the SDK's discovery state in the authorization generation, restores
+  it in the callback's fresh request scope, and deletes it through discovery,
+  all-credential, and generation cleanup. A callback therefore exchanges its
+  code against the same validated authorization-server issuer that registered
+  the client instead of invalidating that client after rediscovery (#523).
+
+## 0.22.2 — 2026-09-01
+
+This patch makes the maintained-provider release check credential-free and
+adds explicit official-MCP alternatives beside the existing Cloudflare,
+Notion, and Vercel API connections. Existing declarations still select the
+hand-written API interface by default. Linear, Mixpanel, RevenueCat, and Stripe
+remain MCP-only, and deployments that do not select a new interface need no
+configuration or credential change.
+
+### Added
+
+- **Selectable API and MCP interfaces.** Cloudflare, Notion, and Vercel accept
+  `surface: "mcp"` for their official hosted server while preserving the API
+  default. Each MCP wrapper supplies release-reviewed safety classifications,
+  keeps unknown tools fail-closed, and leaves provider descriptions and input
+  and output schemas untouched.
+- **Credential-free provider validation.** `npm run providers:check` compares
+  every maintained provider with official public evidence: touched OpenAPI
+  operations for the three hand-written interfaces, and endpoint, OAuth, and
+  documented tool inventories for the seven hosted interfaces. It reads no
+  provider credential and generates no runtime tool.
+
+### Changed
+
+- **Public evidence replaces authenticated drift setup.** The lower-level
+  `drift:check` command now defaults to the same specification and documentation
+  checks; the credential helper and `--hosted` mode are removed. Live
+  `tools/list` responses remain authoritative for MCP schemas.
+- **Hosted safety manifests refreshed.** Stripe and RevenueCat classifications
+  now cover their current official tool references. Vercel URL fetching is
+  approval-gated because an application GET route is not guaranteed to be
+  observational.
+
+### Fixed
+
+- **Reviewed Vercel event drift.** Build-log projection accepts the expanded
+  deployment-event variants, including events without a published timestamp,
+  and the touched-endpoint digest records the reviewed contract (#520).
+- **Schema ownership stays intact.** Deterministic coverage now proves the
+  safety wrapper preserves each provider description, input schema, and output
+  schema by reference instead of substituting a vendored definition (#521).
+
 ## 0.22.1 — 2026-08-31
 
 This patch adds a maintained Vercel connection over the public REST API. It is

package/README.md

@@ -63,8 +63,10 @@ Fifty issues in, one small object out. Your context window notices.
 - **Wrap any HTTP API by hand.** A few lines per tool. No OpenAPI conversion —
   generated tool sprawl is the problem, not the fix.
 - **Use maintained connections** for Cloudflare, Linear, Mixpanel, Notion,
-  RevenueCat, Stripe, and Vercel — known endpoints, auth defaults, and vetted
-  read/write classifications, imported one at a time.
+  RevenueCat, Stripe, and Vercel: known endpoints, auth defaults, and vetted
+  read/write classifications, imported one at a time. Cloudflare, Notion, and
+  Vercel each let the deployment choose their hand-written API interface or
+  official hosted MCP.
 - **Let the agent work in code.** Search, chain, filter, join, and reduce
   inside the sandbox instead of round-tripping every call through the model.
 - **Teach undeclared result shapes by using them.** Successful read-only calls

package/dist/auth/downstream-oauth.d.ts

@@ -1,4 +1,4 @@
-import type { FetchLike, OAuthClientInformationContext, OAuthClientInformationMixed, OAuthClientMetadata, OAuthClientProvider, OAuthTokens } from "@modelcontextprotocol/client";
+import type { FetchLike, OAuthClientInformationContext, OAuthClientInformationMixed, OAuthClientMetadata, OAuthClientProvider, OAuthDiscoveryState, OAuthTokens } from "@modelcontextprotocol/client";
 import type { KVStorage } from "../types.js";
 type OAuthRefreshFlightOutcome = {
     status: "refreshed";
@@ -134,6 +134,8 @@ export declare class KvOAuthProvider implements OAuthClientProvider {
     get clientMetadata(): OAuthClientMetadata;
     clientInformation(ctx?: OAuthClientInformationContext): Promise<OAuthClientInformationMixed | undefined>;
     saveClientInformation(info: OAuthClientInformationMixed, ctx?: OAuthClientInformationContext): Promise<void>;
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
     tokens(ctx?: OAuthClientInformationContext): Promise<OAuthTokens | undefined>;
     saveTokens(tokens: OAuthTokens, ctx?: OAuthClientInformationContext): Promise<void>;
     /**

package/dist/auth/downstream-oauth.js

@@ -24,6 +24,7 @@ const OAUTH_VALUE_KEYS = [
     "oauth:pending",
     "oauth:verifier",
     "oauth:state",
+    "oauth:discovery",
 ];
 const MAX_CLEANUP_BACKLOG = 1_000;
 function isRefreshTokenRequest(init) {
@@ -621,6 +622,12 @@ export class KvOAuthProvider {
     async saveClientInformation(info, ctx) {
         await this.writeValue("oauth:client", info, (value) => JSON.stringify(value), ctx?.issuer);
     }
+    async discoveryState() {
+        return (await this.readValue("oauth:discovery", (raw) => JSON.parse(raw)))?.value;
+    }
+    async saveDiscoveryState(state) {
+        await this.writeValue("oauth:discovery", state, (value) => JSON.stringify(value));
+    }
     async tokens(ctx) {
         const refreshGeneration = ctx ? await this.flowGeneration() : undefined;
         const successIdentity = refreshGeneration !== undefined
@@ -800,6 +807,7 @@ export class KvOAuthProvider {
                     oauthValueStorageKey("oauth:client", generation),
                     oauthValueStorageKey("oauth:tokens", generation),
                     oauthValueStorageKey("oauth:verifier", generation),
+                    oauthValueStorageKey("oauth:discovery", generation),
                 ]);
             }
             else if (scope === "client") {
@@ -811,6 +819,9 @@ export class KvOAuthProvider {
             else if (scope === "verifier") {
                 await this.storage.delete(oauthValueStorageKey("oauth:verifier", generation));
             }
+            else if (scope === "discovery") {
+                await this.storage.delete(oauthValueStorageKey("oauth:discovery", generation));
+            }
             if (endsRefresh) {
                 this.failRefreshFlight(new Error("OAuth refresh invalidated credentials before tokens were saved."));
             }

package/dist/catalog-drift.d.ts

@@ -25,9 +25,9 @@ interface VettedToolRecord {
      * Digest of the input and output schemas that release read, or undefined
      * when no release has recorded them. Undefined is not "unchanged": a
      * manifest with no digest cannot report a schema change, and says so by
-     * counting none. `npm run drift:check -- --record` reads them from a live
-     * catalog and prints the block a release pastes in
-     * ([#351](https://github.com/zackbart/connecta/issues/351)).
+     * counting none. The credential-free provider check does not create or
+     * update schema digests; the live `tools/list` response remains the schema
+     * agents receive ([#351](https://github.com/zackbart/connecta/issues/351)).
      */
     schemaDigest?: string;
 }

package/dist/providers/cloudflare.d.ts

@@ -1,19 +1,30 @@
-import type { Connector, ConnectorCredentialConfig } from "../types.js";
+import { type RemoteMcpAuth } from "../connectors/remote-mcp.js";
+import type { Connector, ConnectorCallAdmissionPolicy, ConnectorCredentialConfig } from "../types.js";
 /** Cloudflare's v4 REST base. Override only for a proxy or a test double. */
 export declare const CLOUDFLARE_API_BASE = "https://api.cloudflare.com/client/v4";
+/** Cloudflare's official whole-API hosted MCP endpoint. */
+export declare const CLOUDFLARE_MCP_ENDPOINT = "https://mcp.cloudflare.com/mcp";
 /** Authentication schemes accepted by Cloudflare's v4 API. */
 export type CloudflareAuthentication = "apiToken" | "globalApiKey";
 /** See documentation/cloudflare.md#dns-record-types. */
 export declare const CLOUDFLARE_DNS_RECORD_TYPES: readonly ["A", "AAAA", "CAA", "CERT", "CNAME", "DNSKEY", "DS", "HTTPS", "LOC", "MX", "NAPTR", "NS", "OPENPGPKEY", "PTR", "SMIMEA", "SRV", "SSHFP", "SVCB", "TLSA", "TXT", "URI"];
 /** Content-valued types only; see documentation/cloudflare.md#dns-record-types. */
 export declare const CLOUDFLARE_CONTENT_DNS_RECORD_TYPES: readonly ["A", "AAAA", "CNAME", "MX", "NS", "OPENPGPKEY", "PTR", "TXT"];
-export interface CloudflareOptions {
-    /** Human-readable display name; defaults to "Cloudflare". */
+interface CloudflareCommonOptions {
+    /** Human-readable display name; defaults identify the selected interface. */
     title?: string;
     /** Downstream auth ownership. Defaults to one shared deployment grant. */
     authScope?: "shared" | "personal";
     /** Which account/estate this connection administers, and for whom. */
     purpose: string;
+    /** Account-specific conventions appended to the maintained provider guide. */
+    instructions?: string;
+    /** Connector-specific inline result limit; omit to inherit the deployment. */
+    maxResultBytes?: number;
+}
+export interface CloudflareApiOptions extends CloudflareCommonOptions {
+    /** Omit for backward compatibility; the hand-written API interface is default. */
+    surface?: "api";
     /**
      * Default account id for account-scoped tools. When set, `accountId` becomes
      * an optional argument; when omitted, agents must pass one and can find it
@@ -32,12 +43,22 @@ export interface CloudflareOptions {
     authentication?: CloudflareAuthentication;
     /** Credential presentation override; credentials are always operator-managed. */
     credential?: ConnectorCredentialConfig;
-    /** Account-specific conventions appended to the maintained provider guide. */
-    instructions?: string;
-    /** Connector-specific inline result limit; omit to inherit the deployment. */
-    maxResultBytes?: number;
     /** Simultaneous downstream calls. Defaults to 6. */
     maxConcurrency?: number;
 }
-/** A maintained Cloudflare REST API connection. */
-export declare function cloudflare(id: string, options: CloudflareOptions): Connector;
+export interface CloudflareMcpOptions extends CloudflareCommonOptions {
+    surface: "mcp";
+    /** OAuth by default, or a scoped API token for a headless deployment. */
+    auth?: RemoteMcpAuth;
+    /** Optional per-runtime downstream call-admission policy. */
+    callAdmission?: ConnectorCallAdmissionPolicy;
+}
+/** Backward-compatible API options; existing consumers may extend this interface. */
+export interface CloudflareOptions extends CloudflareApiOptions {
+}
+/** Select one Cloudflare interface when deployment configuration constructs it. */
+export type CloudflareConnectionOptions = CloudflareOptions | CloudflareMcpOptions;
+export declare const CLOUDFLARE_MCP_VETTED_CATALOG: import("../catalog-drift.js").VettedCatalog;
+/** A maintained Cloudflare connection using the selected provider interface. */
+export declare function cloudflare(id: string, options: CloudflareConnectionOptions): Connector;
+export {};

package/dist/providers/cloudflare.js

@@ -1,9 +1,13 @@
 /** See documentation/cloudflare.md#no-sdk-on-purpose. */
-import { api } from "../connectors/api.js";
+import { api, defined } from "../connectors/api.js";
+import { remoteMcp, withCredentialDefaults, } from "../connectors/remote-mcp.js";
+import { vettedCatalog, withVettedCatalog } from "../catalog-drift.js";
 import { guardedFetch, retryAfterMs, } from "../connectors/guarded-fetch.js";
 import { ConnectorCallError } from "../errors.js";
 /** Cloudflare's v4 REST base. Override only for a proxy or a test double. */
 export const CLOUDFLARE_API_BASE = "https://api.cloudflare.com/client/v4";
+/** Cloudflare's official whole-API hosted MCP endpoint. */
+export const CLOUDFLARE_MCP_ENDPOINT = "https://mcp.cloudflare.com/mcp";
 /** See documentation/cloudflare.md#dns-record-types. */
 export const CLOUDFLARE_DNS_RECORD_TYPES = [
     "A",
@@ -2381,7 +2385,7 @@ function buildTools(scope, authentication) {
     ];
     return tools;
 }
-function usageGuide(purpose, scope, instructions, authentication) {
+function apiUsageGuide(purpose, scope, instructions, authentication) {
     const accountInstructions = instructions?.trim();
     const zoneLine = scope.zoneId
         ? `This connector defaults to zone \`${scope.zoneId}\`; omit \`zoneId\` unless the request names a different domain.`
@@ -2411,12 +2415,64 @@ ${accountInstructions
         ? `\n## Account instructions\n\n${accountInstructions}\n`
         : ""}`;
 }
-/** A maintained Cloudflare REST API connection. */
-export function cloudflare(id, options) {
-    const purpose = options.purpose.trim();
-    if (!purpose) {
-        throw new Error("cloudflare() requires a non-empty account purpose.");
-    }
+export const CLOUDFLARE_MCP_VETTED_CATALOG = vettedCatalog({
+    reads: new Set(["search"]),
+    // `execute` can send any method to more than 2,500 API endpoints. Its input
+    // schema cannot prove a particular program is observational, so it stays on
+    // the approval path even when that program happens to issue only GETs.
+    writes: new Map([["execute", "destructive"]]),
+});
+function mcpUsageGuide(purpose, instructions) {
+    const accountInstructions = instructions?.trim();
+    return `# Cloudflare MCP usage
+
+Official whole-API MCP interface: ${purpose}
+
+- The catalog contains \`search\` and \`execute\`. Search runs code against
+  Cloudflare's OpenAPI document. Execute runs code that may call any authorized
+  Cloudflare API endpoint.
+- Use \`search\` to find the exact method, path, and fields before writing an
+  execute program. Do not guess an endpoint from product naming.
+- Connecta routes every \`execute\` call through approval because the tool can
+  mix GET, POST, PUT, PATCH, and DELETE requests inside one program. The MCP
+  schema cannot establish that arbitrary code is read-only.
+- Keep returned values small. Filter and project inside the Cloudflare MCP
+  program, then reduce again inside Connecta's \`execute_code\` when several
+  calls must be joined.
+- OAuth and API-token permissions remain the provider-side boundary. An
+  \`auth_required\` failure needs authorization or a token with the required
+  Cloudflare permission.
+${accountInstructions
+        ? `\n## Account instructions\n\n${accountInstructions}\n`
+        : ""}`;
+}
+function cloudflareMcp(id, purpose, options) {
+    const connector = remoteMcp(id, {
+        url: CLOUDFLARE_MCP_ENDPOINT,
+        ...defined({
+            authScope: options.authScope,
+            callAdmission: options.callAdmission,
+            maxResultBytes: options.maxResultBytes,
+        }),
+        title: options.title ?? "Cloudflare (MCP)",
+        description: `Cloudflare's official whole-API MCP interface: ${purpose}`,
+        auth: withCredentialDefaults(options.auth ?? { type: "oauth" }, {
+            credential: {
+                label: "Cloudflare API token",
+                description: "A scoped Cloudflare API token. Connecta sends it as a bearer token to mcp.cloudflare.com and stores it encrypted.",
+                placeholder: "Paste Cloudflare API token",
+            },
+        }),
+        requireHttps: true,
+        usageGuide: {
+            content: mcpUsageGuide(purpose, options.instructions),
+            summary: "Official whole-API MCP. Search the OpenAPI document, then approve each mixed-method execute program.",
+            required: true,
+        },
+    });
+    return withVettedCatalog(connector, CLOUDFLARE_MCP_VETTED_CATALOG);
+}
+function cloudflareApi(id, purpose, options) {
     const maxConcurrency = options.maxConcurrency ?? 6;
     if (!Number.isInteger(maxConcurrency) || maxConcurrency < 1) {
         throw new Error("cloudflare() maxConcurrency must be a positive integer.");
@@ -2437,7 +2493,7 @@ export function cloudflare(id, options) {
         credential: credentialConfig(authentication, options.credential),
         callAdmission: admissionPolicy(maxConcurrency),
         usageGuide: {
-            content: usageGuide(purpose, scope, options.instructions, authentication),
+            content: apiUsageGuide(purpose, scope, options.instructions, authentication),
             // Explicit rather than derived: the first content line is the zone
             // scoping rule, which varies per deployment and reads as an instruction
             // rather than as the routing fact a browsing agent needs.
@@ -2485,3 +2541,13 @@ export function cloudflare(id, options) {
             }),
     });
 }
+/** A maintained Cloudflare connection using the selected provider interface. */
+export function cloudflare(id, options) {
+    const purpose = options.purpose.trim();
+    if (!purpose) {
+        throw new Error("cloudflare() requires a non-empty account purpose.");
+    }
+    return options.surface === "mcp"
+        ? cloudflareMcp(id, purpose, options)
+        : cloudflareApi(id, purpose, options);
+}

package/dist/providers/notion.d.ts

@@ -1,10 +1,12 @@
-import type { Connector } from "../types.js";
+import type { Connector, ConnectorCallAdmissionPolicy } from "../types.js";
 /** Notion's REST origin. Every tool below speaks to exactly this host. */
 export declare const NOTION_API_BASE_URL = "https://api.notion.com";
+/** Notion's official hosted MCP endpoint. */
+export declare const NOTION_MCP_ENDPOINT = "https://mcp.notion.com/mcp";
 /** See documentation/notion.md#the-pinned-api-version. */
 export declare const NOTION_API_VERSION = "2026-03-11";
-export interface NotionOptions {
-    /** Human-readable display name; defaults to "Notion". */
+interface NotionCommonOptions {
+    /** Human-readable display name; defaults identify the selected interface. */
     title?: string;
     /** Downstream auth ownership. Defaults to one shared deployment grant. */
     authScope?: "shared" | "personal";
@@ -12,6 +14,13 @@ export interface NotionOptions {
     purpose: string;
     /** Workspace-specific conventions appended to the maintained provider guide. */
     instructions?: string;
+    /** Connector-specific inline result limit; omit to inherit the deployment. */
+    maxResultBytes?: number;
+}
+/** Connecta's maintained hand-written Notion REST interface. */
+export interface NotionApiOptions extends NotionCommonOptions {
+    /** Omit for backward compatibility; the hand-written API interface is default. */
+    surface?: "api";
     /** Operator-facing label for the integration token. */
     credentialLabel?: string;
     /**
@@ -19,8 +28,20 @@ export interface NotionOptions {
      * Defaults to 25; Notion's maximum is 100.
      */
     defaultPageSize?: number;
-    /** Connector-specific inline result limit; omit to inherit the deployment. */
-    maxResultBytes?: number;
 }
-/** A maintained Notion connection over the public REST API. */
-export declare function notion(id: string, options: NotionOptions): Connector;
+/** Notion's official hosted MCP interface, authenticated through OAuth. */
+export interface NotionMcpOptions extends NotionCommonOptions {
+    surface: "mcp";
+    /** Optional per-runtime downstream call-admission policy. */
+    callAdmission?: ConnectorCallAdmissionPolicy;
+}
+/** Backward-compatible API options; existing consumers may extend this interface. */
+export interface NotionOptions extends NotionApiOptions {
+}
+/** Select one Notion interface when deployment configuration constructs it. */
+export type NotionConnectionOptions = NotionOptions | NotionMcpOptions;
+/** Release-reviewed Notion MCP inventory and safety verdicts. */
+export declare const NOTION_MCP_VETTED_CATALOG: import("../catalog-drift.js").VettedCatalog;
+/** A maintained Notion connection using the selected provider interface. */
+export declare function notion(id: string, options: NotionConnectionOptions): Connector;
+export {};

package/dist/providers/notion.js

@@ -1,8 +1,12 @@
-import { api } from "../connectors/api.js";
+import { api, defined } from "../connectors/api.js";
+import { remoteMcp } from "../connectors/remote-mcp.js";
+import { vettedCatalog, withVettedCatalog } from "../catalog-drift.js";
 import { guardedFetch, retryAfterMs, } from "../connectors/guarded-fetch.js";
 import { ConnectorCallError } from "../errors.js";
 /** Notion's REST origin. Every tool below speaks to exactly this host. */
 export const NOTION_API_BASE_URL = "https://api.notion.com";
+/** Notion's official hosted MCP endpoint. */
+export const NOTION_MCP_ENDPOINT = "https://mcp.notion.com/mcp";
 /** See documentation/notion.md#the-pinned-api-version. */
 export const NOTION_API_VERSION = "2026-03-11";
 /** Notion's hard cap on `page_size` for every paginated endpoint. */
@@ -1393,7 +1397,7 @@ function buildTools(defaultPageSize) {
 // Guide and constructor
 // ---------------------------------------------------------------------------
 /** See documentation/notion.md#databases-contain-data-sources. */
-function usageGuide(purpose, instructions) {
+function apiUsageGuide(purpose, instructions) {
     const accountInstructions = instructions?.trim();
     return `# Notion usage
 
@@ -1490,12 +1494,95 @@ ${accountInstructions
         ? `\n## Workspace instructions\n\n${accountInstructions}\n`
         : ""}`;
 }
-/** A maintained Notion connection over the public REST API. */
-export function notion(id, options) {
-    const purpose = options.purpose.trim();
-    if (!purpose) {
-        throw new Error("notion() requires a non-empty workspace purpose.");
-    }
+/** Release-reviewed Notion MCP inventory and safety verdicts. */
+export const NOTION_MCP_VETTED_CATALOG = vettedCatalog({
+    reads: new Set([
+        "notion-search",
+        "notion-search-skills",
+        "notion-fetch",
+        "notion-download-attachment",
+        "notion-query-data-sources",
+        "notion-query-meeting-notes",
+        "notion-search-agents",
+        "notion-list-agents",
+        "notion-query-sessions",
+        "notion-search-sessions",
+        "notion-get-session-status",
+        "notion-wait-session",
+        "notion-list-session-events",
+        "notion-read-session-event",
+        "notion-get-comments",
+        "notion-get-teams",
+        "notion-get-users",
+        "notion-get-async-task",
+    ]),
+    writes: new Map([
+        ["notion-create-file-upload", "additive"],
+        ["notion-create-attachment", "additive"],
+        ["notion-create-pages", "additive"],
+        ["notion-duplicate-page", "additive"],
+        ["notion-create-database", "additive"],
+        ["notion-create-folder", "additive"],
+        ["notion-create-view", "additive"],
+        ["notion-spawn-session", "additive"],
+        ["notion-send-message-to-session", "additive"],
+        ["notion-create-comment", "additive"],
+        ["notion-update-page", "destructive"],
+        ["notion-convert-page-to-skill", "destructive"],
+        ["notion-move-pages", "destructive"],
+        ["notion-update-data-source", "destructive"],
+        ["notion-update-view", "destructive"],
+        ["notion-stop-session", "destructive"],
+    ]),
+});
+function mcpUsageGuide(purpose, instructions) {
+    const accountInstructions = instructions?.trim();
+    return `# Notion MCP usage
+
+Official MCP interface: tool names, descriptions, argument schemas, and result
+schemas come from Notion's live server. Connecta preserves that catalog and
+only fills in release-reviewed safety annotations when Notion leaves them out.
+
+Workspace purpose: ${purpose}
+
+- Discover the live catalog before assuming a tool exists. Notion can gate
+  tools by workspace, account, client, and rollout independently of Connecta.
+- Start broad discovery with \`notion-search\`, then use \`notion-fetch\` on
+  the exact page, database, data source, or object before changing it.
+- Use the live input schema as the contract. Notion owns these MCP schemas;
+  the REST schemas in Connecta's API interface do not apply to MCP tools with
+  similar names.
+- Session and agent tools can launch asynchronous work. Read session state and
+  events before sending another message, waiting, or stopping a session.
+- File uploads and attachment tools create durable workspace state. Keep
+  downloads inside the requested task and do not expose signed attachment URLs.
+- An \`auth_required\` failure means this connector's OAuth grant is missing or
+  expired. Run \`authorize_connector\` for this connector id, then retry.
+${accountInstructions
+        ? `\n## Workspace instructions\n\n${accountInstructions}\n`
+        : ""}`;
+}
+function notionMcp(id, purpose, options) {
+    const connector = remoteMcp(id, {
+        url: NOTION_MCP_ENDPOINT,
+        ...defined({
+            authScope: options.authScope,
+            callAdmission: options.callAdmission,
+            maxResultBytes: options.maxResultBytes,
+        }),
+        title: options.title ?? "Notion (MCP)",
+        description: `Notion's official hosted MCP interface: ${purpose}`,
+        auth: { type: "oauth" },
+        requireHttps: true,
+        usageGuide: {
+            content: mcpUsageGuide(purpose, options.instructions),
+            summary: "Official MCP. Live Notion schemas, object discovery, sessions, agents, attachments, and OAuth ownership.",
+            required: true,
+        },
+    });
+    return withVettedCatalog(connector, NOTION_MCP_VETTED_CATALOG);
+}
+function notionApi(id, purpose, options) {
     const defaultPageSize = options.defaultPageSize ?? DEFAULT_PAGE_SIZE;
     if (!Number.isInteger(defaultPageSize) ||
         defaultPageSize < 1 ||
@@ -1530,7 +1617,7 @@ export function notion(id, options) {
         },
         callAdmission: NOTION_ADMISSION,
         usageGuide: {
-            content: usageGuide(purpose, options.instructions),
+            content: apiUsageGuide(purpose, options.instructions),
             summary: "Database-to-data-source lookup, property write rules, lean-vs-raw results, and Notion's overloaded 403/404.",
             required: true,
         },
@@ -1540,3 +1627,13 @@ export function notion(id, options) {
             : {}),
     });
 }
+/** A maintained Notion connection using the selected provider interface. */
+export function notion(id, options) {
+    const purpose = options.purpose.trim();
+    if (!purpose) {
+        throw new Error("notion() requires a non-empty workspace purpose.");
+    }
+    return options.surface === "mcp"
+        ? notionMcp(id, purpose, options)
+        : notionApi(id, purpose, options);
+}

package/dist/providers/revenuecat.js

@@ -108,9 +108,19 @@ const WRITE_TOOLS = new Map([
     ["create-audience", "additive"],
     ["update-audience", "destructive"],
     // Paywalls
+    ["attach-offering-to-paywall", "destructive"],
+    ["detach-offering-from-paywall", "destructive"],
     ["duplicate-paywall", "additive"],
     ["publish-paywall", "destructive"],
     ["unpublish-paywall", "destructive"],
+    // Offerings and experiments added to the published reference after #512.
+    ["duplicate-offering", "additive"],
+    ["create-experiment", "additive"],
+    ["pause-experiment", "destructive"],
+    ["resume-experiment", "destructive"],
+    ["start-experiment", "destructive"],
+    ["stop-experiment", "destructive"],
+    ["update-experiment", "destructive"],
     // Customers and subscriptions
     ["assign-customer-offering", "destructive"],
     ["grant-customer-entitlement", "destructive"],

package/dist/providers/stripe.js

@@ -37,7 +37,12 @@ const READ_ONLY_TOOLS = new Set([
     "stripe_api_search",
     "stripe_api_details",
     "stripe_api_read",
+    "get_stripe_account_info",
     "get_balance_summary",
+    "list_metrics",
+    "explain_metric",
+    "metric_drilldown",
+    "show_metric_app",
     "list_available_accounts_or_orgs",
     "manage_stripe_accounts",
     "search_stripe_documentation",
@@ -45,8 +50,10 @@ const READ_ONLY_TOOLS = new Set([
 /** Reviewed writes, including mixed read/create tools: `documentation/stripe.md`. */
 const WRITE_TOOLS = new Map([
     ["stripe_api_write", "destructive"],
+    ["create_refund", "destructive"],
     ["stripe_implementation_planner", "additive"],
     ["stripe_analytics", "additive"],
+    ["stripe_report", "additive"],
     ["send_stripe_mcp_feedback", "additive"],
 ]);
 /** Release-reviewed manifest; see provider conventions P5 and P13. */