@zackbart/connecta 0.24.4 → 0.26.0

package/dist/providers/notion.js

@@ -89,7 +89,7 @@ function notionFailure(status, body, headers) {
         return new ConnectorCallError("unavailable", `${labelled} Notion is overloaded; retry after the reported window.`, { retryAfterMs: retryAfter ?? 5_000 });
     }
     if (status === 401) {
-        return new ConnectorCallError("auth_required", `${labelled} The Notion integration token is missing or invalid — an operator must set a valid token on /credentials.`);
+        return new ConnectorCallError("auth_required", `${labelled} The Notion integration token is missing or invalid. Call authorize_connector for recovery options. When available, an operator can set a valid token in this connection in the operator UI.`);
     }
     if (status === 403) {
         return new ConnectorCallError("connector_call_failed", `${labelled} The token is valid but this integration is not allowed to perform this operation. An operator must enable the matching capability on the Notion integration (comment capabilities are off by default) or share the object with it. Re-authorizing will not help.`, { retryable: false });
@@ -133,7 +133,7 @@ const send = guardedFetch({
     authenticate: async (ctx) => {
         const token = (await ctx.credential?.get())?.trim();
         if (!token) {
-            throw new ConnectorCallError("auth_required", "No Notion integration token is configured for this connector — an operator must add one on /credentials before any Notion call can run.");
+            throw new ConnectorCallError("auth_required", "No Notion integration token is configured for this connector. Call authorize_connector for recovery options. When available, an operator can add the token in this connection in the operator UI.");
         }
         return { Authorization: `Bearer ${token}` };
     },

package/dist/providers/revenuecat.js

@@ -5,7 +5,7 @@ import { defined } from "../connectors/api.js";
 export const REVENUECAT_MCP_ENDPOINT = "https://mcp.revenuecat.ai/mcp";
 /**
  * Reviewed reads, every `Read` row of RevenueCat's tool reference as read on
- * 2026-08-30 (P5). The list is a superset: plan, platform, and beta enrollment
+ * 2026-09-21 (P5). The list is a superset: plan, platform, and beta enrollment
  * gate parts of the catalog, so a name this account never returns costs
  * nothing while an unlisted new one fails closed.
  */
@@ -23,7 +23,11 @@ const READ_ONLY_TOOLS = new Set([
     // Products and prices
     "get-product",
     "get-product-store-state",
+    // Deprecated in RevenueCat's reference — superseded by the plan family's
+    // own read-back below — but still served, so the classification stands.
     "get-product-store-state-operation",
+    "get-product-store-state-plan",
+    "list-product-store-state-plans",
     "list-products",
     // Entitlements
     "get-entitlement",
@@ -100,19 +104,36 @@ const WRITE_TOOLS = new Map([
     ["archive-product", "destructive"],
     ["create-product", "additive"],
     // Named `create-`, but "Configure prices for a product": the price set
-    // already exists, so this overwrites it, and it is money-facing.
+    // already exists, so this overwrites it, and it is money-facing. Deprecated
+    // in RevenueCat's reference; products are priced through the plan family
+    // below, but the tool is still served, so the classification stands.
     ["create-product-prices", "destructive"],
     // "Fills *missing* App Store subscription territory prices" — by
-    // RevenueCat's own word it writes only where nothing is set.
+    // RevenueCat's own word it writes only where nothing is set. Deprecated in
+    // RevenueCat's reference; still served, so the classification stands.
     ["equalize-subscription-prices", "additive"],
-    // An upsert.
+    // An upsert. Deprecated in RevenueCat's reference — the store-state plan
+    // family below replaces it — but still served, so the classification stands.
     ["set-product-store-state", "destructive"],
     // Sends products to Apple for review.
     ["submit-products-to-store", "destructive"],
     ["unarchive-product", "destructive"],
     ["update-product", "destructive"],
     // Reserves a new App Store Connect review screenshot slot; replaces nothing.
+    // Deprecated in RevenueCat's reference; still served, so the classification
+    // stands.
     ["upload-product-store-state-screenshot", "additive"],
+    // Product store state plans, the workflow RevenueCat deprecated
+    // `set-product-store-state` for. Create brings a draft into being and
+    // touches nothing else; plan recomputes an existing plan's proposed change,
+    // overwriting its previous planning; apply pushes the whole plan into
+    // RevenueCat and the app stores; update and discard act on an existing plan
+    // by name. Every step past create is asynchronous.
+    ["create-product-store-state-plan", "additive"],
+    ["plan-product-store-state-plan", "destructive"],
+    ["apply-product-store-state-plan", "destructive"],
+    ["update-product-store-state-plan", "destructive"],
+    ["discard-product-store-state-plan", "destructive"],
     // Entitlements
     ["archive-entitlement", "destructive"],
     // Attach adds membership and removes nothing; detach is the destructive half.
@@ -135,6 +156,11 @@ const WRITE_TOOLS = new Map([
     // Targeting and audiences
     ["create-audience", "additive"],
     ["update-audience", "destructive"],
+    // Targeting rules follow the verb: create brings one into being, update
+    // and delete act on a rule the project already has.
+    ["create-targeting-rule", "additive"],
+    ["update-targeting-rule", "destructive"],
+    ["delete-targeting-rule", "destructive"],
     // Paywalls
     ["attach-offering-to-paywall", "destructive"],
     ["detach-offering-from-paywall", "destructive"],
@@ -204,7 +230,8 @@ function sharedUsageGuide() {
 - Customer and subscription objects are large, and a customer's history is larger. Page with the cursor the list returned rather than raising the page size, and reduce inside \`execute_code\` — select the fields the question needs and return those, not the whole object.
 - Whether a customer should have access is \`gives_access\` on each subscription from \`list-subscriptions\`, which RevenueCat calls the authoritative flag. \`status\` and \`expires_date\` describe the store-side state and disagree with it during grace periods, billing retries, and promotional grants — answer access questions from \`gives_access\` and say which subscription it came from.
 - \`get-chart-data\` is the metrics path: read \`get-chart-options-schema\` for the chart you want before calling it, rather than guessing an option name. \`get-overview-metrics\` and \`get-revenue-metric\` answer the summary questions in one call.
-- \`create-paywall-ai\`, \`edit-paywall-ai\`, and \`set-product-store-state\` are asynchronous. They return a task or operation id; poll it with \`get-paywall-ai-task\` or \`get-product-store-state-operation\` rather than assuming the work finished when the call returned.
+- \`create-paywall-ai\` and \`edit-paywall-ai\` are asynchronous. Poll the task id they return with \`get-paywall-ai-task\` rather than assuming the work finished when the call returned.
+- Store changes ride the plan workflow, not the deprecated direct tools: \`create-product-store-state-plan\`, then \`plan-product-store-state-plan\`, then \`apply-product-store-state-plan\`. Every step past the create is asynchronous — read the plan back with \`get-product-store-state-plan\` between steps instead of assuming the last one finished.
 - This connection's tool list is not a fixed set. RevenueCat gates parts of its MCP catalog by plan, platform, and beta enrollment — paywall AI editing, benchmarks, experiments, virtual currencies, and the account-billing tools are the usual absentees — so search this connector for what it actually exposes rather than assuming a documented tool is here.
 - \`render-paywall-screenshot\` is unclassified on purpose because RevenueCat's reference gives it no access column. The current server marks it read-only, which Connecta preserves; without that annotation it fails closed onto \`call_destructive_tool\`.
 - RevenueCat meters API v2 per minute and per domain, and the domains differ: 480 requests per minute for customer information and virtual currencies, 60 for project configuration and audiences, 25 for charts and metrics. It answers a breach with \`429\`, a \`Retry-After\` header, and a \`backoff_ms\` field. Back off on that rather than retrying immediately, and expect chart sweeps to hit the ceiling long before customer reads do.

package/dist/providers/stripe.d.ts

@@ -28,8 +28,9 @@ export interface StripeOAuthOptions extends StripeCommonOptions {
  * Static credentials have one fixed mode, including Stripe Connect calls.
  *
  * Both static shapes belong here: a key the deployment supplies as a literal
- * header, and one the operator pastes at `/credentials`. Neither can discover
- * its own mode — a restricted key answers for exactly one — so both declare it.
+ * header, and one the operator pastes into the connection in the operator UI.
+ * Neither can discover its own mode, since a restricted key answers for
+ * exactly one, so both declare it.
  */
 export interface StripeHeaderOptions extends StripeCommonOptions {
     auth: Exclude<RemoteMcpAuth, {

package/dist/providers/vercel.js

@@ -138,7 +138,7 @@ function vercelTransport(baseUrl) {
         authenticate: async (ctx) => {
             const token = (await ctx.credential?.get())?.trim();
             if (!token) {
-                throw new ConnectorCallError("auth_required", "No Vercel access token is configured for this connector. An operator must add one on /credentials before any Vercel call can run.");
+                throw new ConnectorCallError("auth_required", "No Vercel access token is configured for this connector. Call authorize_connector for recovery options. When available, an operator can add the token in this connection in the operator UI.");
             }
             return { Authorization: `Bearer ${token}` };
         },

package/dist/registry.d.ts

@@ -3,6 +3,7 @@ import type { CatalogDriftReport, Connector, ConnectorContext, ConnectorStatus,
 import { type DeferredWork } from "./connector-scope.js";
 import { type CatalogDriftActivityContext } from "./activity.js";
 import { type CallAdmissionPermit, type ConnectorCallAdmissionSnapshot } from "./call-admission.js";
+import { type ConnectorCaller } from "./connector-caller.js";
 /**
  * Split `"<connectorId>.<toolName>"` on the first dot. Connector ids contain
  * no dots, so a downstream tool name may. Exported because an address that
@@ -58,7 +59,7 @@ export interface RegistryOptions {
     /**
      * Cap on inline result size before truncation + get_result paging. Must be a
      * whole number of bytes >= 1; anything else warns at startup and falls back
-     * to the default 50_000.
+     * to the default 24_000.
      */
     maxResultBytes?: number | undefined;
     results?: {
@@ -129,8 +130,11 @@ export type ToolAccess = ReadonlyMap<string, ReadonlySet<string>>;
 export interface RegistryScope {
     connectorIds: "all" | readonly string[];
     toolAccess?: ToolAccess;
+    guardedToolAccess?: ToolAccess;
     subjectKey?: string;
     principalKey?: string;
+    /** The admitted caller, readable only by built-in connectors; see connector-caller.ts. */
+    caller?: ConnectorCaller;
 }
 /**
  * Holds the connector set, resolves addresses, and caches per-connector tool
@@ -147,7 +151,7 @@ export declare class Registry implements RegistryView {
     private readonly catalogGenerations;
     /** Serialize persisted catalog set/delete operations within this isolate. */
     private readonly catalogMutations;
-    /** Same-request cold loads share one promise without retaining the request.
+    /** Same-request cold loads share one read without retaining the request.
      * See documentation/architecture.md#the-two-lifetimes. */
     private readonly requestCatalogLoads;
     /** One live refresh per connector across agent and operator requests. */
@@ -283,11 +287,37 @@ export declare class Registry implements RegistryView {
     private enqueueCatalogMutation;
     private refreshToolsWithContext;
     /**
-     * Publish one shared refresh promise before starting its connector work.
-     * The first caller owns the scope and deadline; every later caller joins the
-     * result without gaining access to that context.
+     * Whether a refresh may still enter the shared cache layers: its generation
+     * is current, and the flight it runs in has been neither abandoned nor
+     * outlived its bound. Asked at each publication point, since listing and
+     * snapshotting both yield, and a late result must never overwrite the one a
+     * fresh attempt published in the meantime.
+     */
+    private mayPublish;
+    /**
+     * Publish one shared refresh before starting its connector work. The first
+     * caller owns the scope and signal, and the flight lives `boundMs` from now
+     * at most; every later caller joins the result without gaining access to
+     * that context. A flight found past its bound is abandoned here, and this
+     * caller starts the fresh attempt.
      */
     private startCatalogRefresh;
+    /**
+     * Give up on a flight that outlived its bound. Later readers start a fresh
+     * attempt, its joiners are told to, and nothing its owner lists from now on
+     * reaches a cache. The owner's work is left alone: it belongs to another
+     * request, which nothing here may reach into, and it can no longer publish.
+     */
+    private abandonCatalogRefresh;
+    /**
+     * Wait on another caller's flight, no longer than its bound. Succeeds with
+     * its tools, or with `undefined` when it will not answer for this caller —
+     * past its bound, when this waiter abandons it, or failed for its owner
+     * alone — so the caller makes a fresh attempt. The timer is this waiter's
+     * own: on workerd it is what keeps a request that waits on another alive,
+     * and bounded.
+     */
+    private joinCatalogRefresh;
     /** Force a live listTools refresh and replace both catalog cache layers. */
     private refreshTools;
     private observeCatalogAccess;
@@ -303,9 +333,15 @@ export declare class Registry implements RegistryView {
      * WeakMap neither roots the request scope nor lets its connector context
      * escape into another request; settled entries are also removed eagerly.
      *
+     * The read owns its signal, and each caller waits under its own: one that
+     * is cancelled while others wait leaves with its own failure, and the read
+     * is cancelled only when every caller has gone (src/runtime/shared-read.ts).
+     *
      * The deployment-wide flight below this layer coalesces the actual live
-     * refresh across requests. Its first caller's context and deadline govern;
-     * later callers join only its result, never its request scope.
+     * refresh across requests. Its owner's context governs the listing, and its
+     * owner's deadline bounds it; later callers join only its result, never its
+     * request scope, and a failure that was the owner's alone sends them to a
+     * fresh attempt rather than to them.
      */
     getTools(id: string, baseUrl: string, requestScope?: object, callOptions?: ConnectorOperationOptions, readOptions?: CatalogReadOptions): Promise<ToolDef[]>;
     credentialDriftFor(id: string): Promise<string | undefined>;