@zackbart/connecta 0.24.4 → 0.26.0

package/dist/execute.d.ts

@@ -1,154 +0,0 @@
-import type { McpServer } from "@modelcontextprotocol/server";
-import type { ActivityRequestContext } from "./activity.js";
-import type { DeferredWork } from "./connector-scope.js";
-import { type ToolResult } from "./meta-tools.js";
-import { InvocationFailure } from "./invocation.js";
-import type { RegistryView } from "./registry.js";
-import type { Executor, ExecutorProvider, Logger } from "./types.js";
-/** Complete entries plus an exact omission count, all inside this byte cap. */
-export declare const CONNECTOR_INVENTORY_MAX_BYTES = 256;
-/**
- * Default budgets for `connecta.emit`. The byte budget is a transport bound,
- * not a context bound — emitted image/audio blocks reach the model as media,
- * not base64 text — so it sits far above the 24k return-value guard: room for
- * two or three real screenshots after base64's 4/3 inflation, well short of a
- * file-hosting ambition (design record M5).
- */
-export declare const EXECUTE_MAX_EMITTED_BYTES = 4000000;
-export declare const EXECUTE_MAX_EMITTED_BLOCKS = 32;
-type ExecuteDiagnosticOperation = "search" | "describe" | "call";
-interface ExecuteOperationDiagnostics {
-    operation: ExecuteDiagnosticOperation;
-    count: number;
-    failures: number;
-    durationMs: number;
-    resultBytes: number;
-    catalogMs: number;
-    connectorMs: number;
-}
-declare class ExecuteDiagnostics {
-    private readonly started;
-    private readonly operations;
-    admissionMs: number;
-    setupMs: number;
-    executorWallMs: number;
-    private emitted?;
-    /** Numbers only, per R8 — and only once something was emitted, so a
-     * non-emitting run's diagnostics stay byte-for-byte what they were. */
-    recordEmitted(count: number, bytes: number): void;
-    private stats;
-    recordCatalog(operation: "search" | "describe", durationMs: number, ok: boolean, result?: unknown): void;
-    recordCall(outcome: {
-        ok: boolean;
-        durationMs: number;
-        timing: {
-            catalogMs: number;
-            connectorMs: number;
-        };
-        value?: unknown;
-    }): void;
-    finish(): {
-        timing: {
-            totalMs: number;
-            admissionMs: number;
-            setupMs: number;
-            executorWallMs: number;
-            catalogMs: number;
-            connectorMs: number;
-        };
-        operations: ExecuteOperationDiagnostics[];
-        emitted?: {
-            count: number;
-            bytes: number;
-        };
-    };
-}
-/**
- * One MCP content block a program may emit. The complete set, by design:
- * `resource` and `resource_link` are refused in ethos.md — pointers get
- * followed, and connecta serves no resources for them to point at.
- */
-export type EmittedBlock = {
-    type: "text";
-    text: string;
-} | {
-    type: "image";
-    data: string;
-    mimeType: string;
-} | {
-    type: "audio";
-    data: string;
-    mimeType: string;
-};
-export declare class EmitCollector {
-    private readonly maxBytes;
-    private readonly maxBlocks;
-    private readonly diagnostics?;
-    readonly blocks: EmittedBlock[];
-    bytes: number;
-    constructor(maxBytes: number, maxBlocks: number, diagnostics?: ExecuteDiagnostics | undefined);
-    accept(raw: unknown): void;
-}
-/**
- * Expose one host provider and typed guest errors. Catalogs load only when
- * the program calls a tool or asks search/describe.
- */
-export declare function buildSandboxProviders(registry: RegistryView, baseUrl: string, _logger: Logger, activity?: ActivityRequestContext, limits?: {
-    signal?: AbortSignal | undefined;
-    maxHostCalls?: number | undefined;
-    hostCallTimeoutMs?: number | undefined;
-    discoveryConcurrency?: number | undefined;
-    /** Per-connector deadline for in-program catalog probes. Default 30_000. */
-    probeTimeoutMs?: number | undefined;
-    onInvocationFailure?: ((failure: InvocationFailure) => void) | undefined;
-    diagnostics?: ExecuteDiagnostics | undefined;
-    /**
-     * Where `connecta.emit` collects. The handler that will deliver the
-     * blocks owns it; without one, emit fails loudly rather than accept
-     * blocks nobody will ever return.
-     */
-    emitCollector?: EmitCollector | undefined;
-    /** Runtime-owned tail for stale catalog refreshes. */
-    defer?: DeferredWork | undefined;
-}): Promise<ExecutorProvider[]>;
-/** The execute_code handler. Exported for direct testing. */
-export declare function createExecuteTool(registry: RegistryView, baseUrl: string, executor: Executor, logger: Logger, activity?: ActivityRequestContext, config?: {
-    discoveryConcurrency?: number | undefined;
-    probeTimeoutMs?: number | undefined;
-    maxEmittedBytes?: number | undefined;
-    maxEmittedBlocks?: number | undefined;
-    maxHostCalls?: number | undefined;
-    hostCallTimeoutMs?: number | undefined;
-    defer?: DeferredWork | undefined;
-}): ({ code, diagnostics: diagnosticsRequested }: {
-    code: string;
-    diagnostics?: boolean;
-}, options?: {
-    signal?: AbortSignal;
-}) => Promise<ToolResult>;
-/** Register the execute_code meta-tool. Only called when an executor is configured. */
-export declare function registerExecuteTool(server: McpServer, registry: RegistryView, ctx: {
-    baseUrl: string;
-    executor: Executor;
-    logger: Logger;
-    activity?: ActivityRequestContext | undefined;
-    requestSignal?: AbortSignal | undefined;
-    discoveryConcurrency?: number | undefined;
-    /**
-     * The deployment's configured per-connector probe deadline. Programs probe
-     * the same downstream catalogs the top-level tools do, so an operator who
-     * tightened `discovery.probeTimeoutMs` gets it honored inside the sandbox
-     * too rather than silently falling back to the 30s default.
-     */
-    probeTimeoutMs?: number | undefined;
-    /** Aggregate serialized-byte budget for connecta.emit. Default 4_000_000. */
-    maxEmittedBytes?: number | undefined;
-    /** Block-count budget for connecta.emit. Default 32. */
-    maxEmittedBlocks?: number | undefined;
-    /** Host calls one program may make. Default 20. */
-    maxHostCalls?: number | undefined;
-    /** Deadline per host call in milliseconds. Default 15_000. */
-    hostCallTimeoutMs?: number | undefined;
-    defer?: DeferredWork | undefined;
-}): void;
-export {};

package/dist/executor-result.d.ts

@@ -1,10 +0,0 @@
-import type { ExecuteResult } from "./types.js";
-export declare const MAX_EXECUTE_LOG_CHARS = 4000;
-export declare function serializeResultText(value: unknown): string;
-export declare function guardExecuteResultValue(value: unknown): unknown;
-export declare function truncateExecuteText(text: string, max: number): string;
-/**
- * Apply the public execute_code result/log policy before a child result enters
- * IPC. The parent repeats the guard for third-party Executor implementations.
- */
-export declare function prepareExecuteResultForTransport(outcome: ExecuteResult): ExecuteResult;

package/dist/executors/quickjs-child.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/executors/quickjs-protocol.d.ts

@@ -1,67 +0,0 @@
-import type { ExecuteResult } from "../types.js";
-import type { QuickJsRuntimeOptions } from "./quickjs-runtime.js";
-export declare const MAX_QUICKJS_IPC_BYTES: number;
-export declare const MAX_QUICKJS_LOG_TRANSPORT_BYTES: number;
-/** Preserve #84's stopgap before a host value enters the child/WASM process. */
-export declare const MAX_QUICKJS_HOST_RPC_BYTES: number;
-export interface RunPayload {
-    id: number;
-    code: string;
-    providers: Array<{
-        name: string;
-        prelude?: string;
-    }>;
-    options: QuickJsRuntimeOptions;
-}
-export type ParentToChildMessage = {
-    type: "run";
-    payloadJson: string;
-} | {
-    type: "host-result";
-    jobId: number;
-    callId: number;
-    payloadJson: string;
-};
-export type ChildToParentMessage = {
-    type: "ready";
-} | {
-    type: "host-call";
-    jobId: number;
-    callId: number;
-    payloadJson: string;
-} | {
-    type: "log";
-    jobId: number;
-    payloadJson: string;
-} | {
-    type: "result";
-    jobId: number;
-    payloadJson: string;
-};
-export interface HostCallPayload {
-    namespace: string;
-    functionName: string;
-    args: unknown[];
-}
-export type HostResultPayload = {
-    ok: true;
-    value: unknown;
-} | {
-    ok: false;
-    error: string;
-};
-export interface ExecutionPayload {
-    outcome: ExecuteResult;
-    /**
-     * Set by the runtime on wall-clock expiry. The parent recycles the child on
-     * this flag, never on error text a guest can fabricate.
-     */
-    timedOut?: boolean;
-}
-export declare function hostCallLabel(payload: {
-    namespace: string;
-    functionName: string;
-    args: unknown[];
-}): string;
-export declare function serializedBytes(text: string): number;
-export declare function stringifyBounded(value: unknown, label: string, limit?: number): string;

package/dist/favicon.d.ts

@@ -1 +0,0 @@
-export declare const CONNECTA_FAVICON_ICO: Uint8Array<ArrayBufferLike>;

package/dist/identity.d.ts

@@ -1,4 +0,0 @@
-import type { IdentityReference } from "./types.js";
-export declare function validIdentityReference(value: IdentityReference | undefined): value is IdentityReference;
-/** Deterministic pseudonymous partition; raw emails and ids do not enter keys. */
-export declare function identityStorageKey(identity: IdentityReference): Promise<string>;

package/dist/invocation.d.ts

@@ -1,74 +0,0 @@
-import { type ActivityCallSource, type ActivityRequestContext, type AgentFriction } from "./activity.js";
-import { CatalogService, type ResolvedCatalogTool } from "./catalog-service.js";
-import { type CallErrorDetails } from "./errors.js";
-import { type RegistryView } from "./registry.js";
-export interface InvocationTiming {
-    catalogMs: number;
-    admissionMs: number;
-    connectorMs: number;
-    resultProcessingMs: number;
-    totalMs: number;
-}
-interface InvocationBase {
-    durationMs: number;
-    attempts: number;
-    timing: InvocationTiming;
-    resolved?: ResolvedCatalogTool;
-}
-export type InvocationOutcome<T> = (InvocationBase & {
-    ok: true;
-    value: T;
-    resolved: ResolvedCatalogTool;
-}) | (InvocationBase & {
-    ok: false;
-    error: CallErrorDetails;
-});
-export interface InvocationContext<T> {
-    source: ActivityCallSource;
-    allowDestructive?: boolean;
-    timeoutMs?: number;
-    requestSignal?: AbortSignal;
-    unwrapResult?: boolean;
-    /**
-     * Caller-owned result policy. MCP applies result paging here; code mode
-     * normally accepts the already-unwrapped value unchanged.
-     */
-    processResult?: (value: unknown, resolved: ResolvedCatalogTool) => T | Promise<T>;
-    /**
-     * Optional payload-free friction class derived from a *successful* result —
-     * today only an oversized one that had to be paged. It is deliberately not an
-     * `errorCode`: the call succeeded, and a consumer that keys its dashboards on
-     * "has an error code" must not count a truncation as a failure.
-     */
-    activityFriction?: (value: T) => AgentFriction | undefined;
-    /**
-     * Called after address/catalog/safety admission and before the first provider
-     * attempt. Code mode uses it for its host-call budget.
-     */
-    beforeDispatch?: () => void;
-}
-export declare class InvocationFailure extends Error {
-    readonly details: CallErrorDetails;
-    readonly code: string;
-    readonly retryable: boolean;
-    readonly retryAfterMs: number | undefined;
-    readonly connector: string | undefined;
-    readonly operation: string | undefined;
-    readonly recovery: CallErrorDetails["recovery"];
-    readonly nextAction: CallErrorDetails["nextAction"];
-    readonly retry: string | undefined;
-    constructor(details: CallErrorDetails);
-}
-/**
- * Shared downstream invocation engine. Address/catalog resolution is delegated
- * to the request-local CatalogService; every remaining call semantic lives
- * here so MCP and code mode cannot drift independently.
- */
-export declare class InvocationService {
-    private readonly registry;
-    private readonly catalog;
-    private readonly activity?;
-    constructor(registry: RegistryView, catalog: CatalogService, activity?: ActivityRequestContext | undefined);
-    invoke<T = unknown>(address: string, args: unknown, context: InvocationContext<T>): Promise<InvocationOutcome<T>>;
-}
-export {};

package/dist/mcp-result.d.ts

@@ -1,8 +0,0 @@
-import type { Connector } from "./types.js";
-/**
- * Unwrap an MCP CallToolResult into an ordinary JavaScript value:
- * `toolResult` wins when present, then `structuredContent`; all-text content is
- * JSON-parsed when possible. Downstream `isError` results become exceptions.
- * Non-MCP connectors already return plain values.
- */
-export declare function unwrapMcpResult(kind: Connector["kind"], result: unknown): unknown;

package/dist/meta-tools.d.ts

@@ -1,129 +0,0 @@
-import type { McpServer } from "@modelcontextprotocol/server";
-import type { ActivityRequestContext } from "./activity.js";
-import { MAX_DESCRIBE_ADDRESSES, MAX_DISCOVERY_RESULT_BYTES, MAX_SEARCH_LIMIT } from "./catalog-service.js";
-import type { DeferredWork } from "./connector-scope.js";
-import { type RegistryView } from "./registry.js";
-export { MAX_DESCRIBE_ADDRESSES, MAX_DISCOVERY_RESULT_BYTES, MAX_SEARCH_LIMIT, };
-interface TextContent {
-    type: "text";
-    text: string;
-}
-export interface ToolResult {
-    content: TextContent[];
-    isError?: boolean;
-    structuredContent?: Record<string, unknown>;
-    [x: string]: unknown;
-}
-export declare function jsonResult(obj: unknown, text?: string): ToolResult;
-export declare function errorResult(message: string): ToolResult;
-/**
- * Move a byte `offset` back to the nearest UTF-8 codepoint boundary in
- * `[0, offset]`, so decoding from it never starts mid-character (which emits
- * U+FFFD for the severed tail).
- *
- * Backwards, never forwards: re-serving a few bytes the caller already has is
- * recoverable, silently skipping the rest of a character is not. Offsets the
- * server itself produced (`nextOffset`) are already boundaries and come back
- * unchanged, so this only moves an offset a client computed on its own
- * (issue #38). An offset at or past `bytes.length` is left alone — there is no
- * character there to split.
- */
-export declare function alignStartToCharBoundary(bytes: Uint8Array, offset: number): number;
-/** End boundary for UTF-8-safe, forward-progressing result pages. See
- * documentation/meta-tools.md#result-representation. */
-export declare function alignEndToCharBoundary(bytes: Uint8Array, offset: number, end: number, total: number): number;
-export interface SearchArgs {
-    query?: string;
-    connector?: string;
-    safety?: "readOnly" | "approvalRequired" | "all";
-    limit?: number;
-    offset?: number;
-    fullDescriptions?: boolean;
-    includeSchemas?: "compact" | "json";
-}
-type ResultMode = "mcp" | "value";
-export interface CallArgs {
-    address: string;
-    args?: Record<string, unknown>;
-    resultMode?: ResultMode;
-    timeoutMs?: number;
-    /** Include connector/catalog/result-processing timing segments. */
-    diagnostics?: boolean;
-}
-export interface DestructiveCallArgs extends CallArgs {
-    /** Short model-authored context for the host's approval UI; never downstream input. */
-    reason?: string;
-}
-export interface GetResultArgs {
-    id: string;
-    /**
-     * Byte offset to page from; a whole number >= 0, aligned back to the nearest
-     * character boundary and reported as the response's `offset`. Defaults to 0.
-     */
-    offset?: number;
-    /** Page size in bytes; a whole number >= 1. Defaults to the deployment cap. */
-    maxBytes?: number;
-}
-export interface AuthorizeArgs {
-    connector: string;
-    force?: boolean;
-}
-export interface SkillArgs {
-    name?: string;
-}
-/**
- * Every meta-tool handler over a registry, one per registered tool. Exported for
- * direct testing; registerMetaTools() wires the six explicit tools onto an
- * McpServer. `opts.defaultToolTimeoutMs` supplies a deadline for calls that
- * don't carry one. (execute_code is registered separately by
- * registerExecuteTool, and builds its own services over the same registry.)
- *
- * What execute_code shares with these handlers is the services layer beneath
- * them — `CatalogService` and `InvocationService` — not the handlers, which no
- * in-program path calls.
- *
- * Deployment-wide result-size caps are read off the registry view rather than
- * passed in: `ConnectaConfig.calls.maxResultBytes` and its per-connector
- * override each have one runtime source of truth.
- */
-export declare function createMetaTools(registry: RegistryView, baseUrl: string, opts?: {
-    /** Deadline applied when a call passes no `timeoutMs`. Off when unset. */
-    defaultToolTimeoutMs?: number | undefined;
-    /** Per-connector deadline for the search/describe probe fan-out. Default 30_000. */
-    probeTimeoutMs?: number | undefined;
-    /** Maximum simultaneous connector discovery operations. Default 4. */
-    discoveryConcurrency?: number | undefined;
-    activity?: ActivityRequestContext | undefined;
-    canManageAuth?: ((id: string) => boolean) | undefined;
-    credentialHandoffUrl?: string | undefined;
-    /** Inbound request cancellation shared by every call this request makes. */
-    requestSignal?: AbortSignal | undefined;
-    /** Runtime-owned tail for stale catalog refreshes. */
-    defer?: DeferredWork | undefined;
-}): {
-    skills(args?: SkillArgs): Promise<ToolResult>;
-    searchTools(args: SearchArgs): Promise<ToolResult>;
-    callTool(args: CallArgs): Promise<ToolResult>;
-    callDestructiveTool(args: DestructiveCallArgs): Promise<ToolResult>;
-    getResult(args: GetResultArgs): Promise<ToolResult>;
-    authorizeConnector(args: AuthorizeArgs): Promise<ToolResult>;
-};
-/**
- * Register the six explicit meta-tools onto an McpServer instance.
- * `registerExecuteTool` adds the seventh, `execute_code`. Broad discovery and
- * multi-call work uses discovery and ordinary JavaScript promises inside a
- * program, which `execute_code` builds over the same
- * `CatalogService` and `InvocationService` these handlers use — one shared
- * services layer, two adapters above it.
- */
-export declare function registerMetaTools(server: McpServer, registry: RegistryView, ctx: {
-    baseUrl: string;
-    defaultToolTimeoutMs?: number | undefined;
-    probeTimeoutMs?: number | undefined;
-    discoveryConcurrency?: number | undefined;
-    activity?: ActivityRequestContext | undefined;
-    canManageAuth?: ((id: string) => boolean) | undefined;
-    credentialHandoffUrl?: string | undefined;
-    requestSignal?: AbortSignal | undefined;
-    defer?: DeferredWork | undefined;
-}): void;

package/dist/operator-ui/generated.d.ts

@@ -1,2 +0,0 @@
-export declare const OPERATOR_UI_CSS: string;
-export declare const OPERATOR_UI_SCRIPT: string;

package/dist/operator-ui/view.d.ts

@@ -1,188 +0,0 @@
-import type { CatalogDriftReport } from "../types.js";
-import type { CredentialManagementCapability, UiConnector, UiData } from "./model.js";
-/**
- * Everything the operator app knows, and every rule for changing it, with no
- * DOM in sight. The components render this and nothing else, so the questions
- * that matter — what a page shows while it loads, what an identity change
- * erases, whether a value may become an href — are answered by functions a test
- * can call directly rather than by reading rendered markup back out of a
- * browser.
- */
-export type OperatorPage = "connections" | "activity";
-export declare const OPERATOR_PAGES: readonly OperatorPage[];
-export declare const PAGE_META: Readonly<Record<OperatorPage, {
-    path: string;
-    label: string;
-}>>;
-export declare function pageForPath(path: string): OperatorPage;
-export interface UiActivityActor {
-    kind?: string;
-    id?: string;
-    namespace?: string;
-    label?: string;
-}
-export interface UiActivityEvent {
-    occurredAt: string;
-    actor?: UiActivityActor;
-    connectorId: string;
-    toolName: string;
-    address: string;
-    source: string;
-    outcome: string;
-    durationMs: number;
-    attempts: number;
-    errorCode?: string;
-    friction?: string;
-}
-/** A message with the tone that decides its live region: status or alert. */
-export interface Notice {
-    message: string;
-    tone: "info" | "error";
-}
-export declare function info(message: string): Notice;
-export declare function failure(message: string): Notice;
-/**
- * A remote collection's four states, named once so every page spells them the
- * same way. `idle` is "nobody has asked yet" and is what makes a re-entered
- * page fetch again after an identity change.
- */
-type LoadPhase = "idle" | "loading" | "ready" | "error";
-export interface OperatorState {
-    page: OperatorPage;
-    /**
-     * Bumped by every identity change. Async work captures it before awaiting and
-     * throws its result away if the operator is no longer the one who asked —
-     * the fence that keeps one identity's data off another identity's screen.
-     */
-    generation: number;
-    /** `loading` until the first /ui/data answer decides gated or ready. */
-    session: "loading" | "gated" | "ready";
-    gate: Notice | null;
-    /** True while a signed-in operator's /ui/data is in flight. */
-    refreshing: boolean;
-    /**
-     * Element id the next render should focus. A rebuilt page has no stable node
-     * to hand focus to from an event handler, so the request travels through
-     * state and the shell spends it once the new markup exists.
-     */
-    pendingFocus: string | null;
-    data: UiData | null;
-    connectorFilter: string;
-    oauthNotice: Notice | null;
-    /** Connector id whose OAuth mutation is in flight. */
-    oauthBusy: string | null;
-    credentialNotice: Notice | null;
-    /** Connector id whose credential form is open. */
-    credentialEditing: string | null;
-    /** Connector id whose credential mutation is in flight. */
-    credentialBusy: string | null;
-    activityPhase: LoadPhase;
-    activityNotice: Notice | null;
-    activityEvents: UiActivityEvent[];
-    activityCursor: string | null;
-    activitySearch: string;
-}
-export declare function initialState(page: OperatorPage): OperatorState;
-/**
- * Drop to the gate and forget the previous operator. Bumping the generation is
- * what makes the drop stick: work already in flight for the old identity
- * resolves into a state that no longer accepts it.
- */
-export declare function resetIdentity(state: OperatorState, gate?: Notice | null): OperatorState;
-/**
- * Leaving a page closes what should not survive it: a one-time secret, a half
- * typed credential, and the notices that answered the page just left.
- */
-export declare function withPage(state: OperatorState, page: OperatorPage): OperatorState;
-export declare function credentialUnavailableCopy(capability?: CredentialManagementCapability): string;
-export declare function connectorStatusLabel(status: string): string;
-export declare function toolCountLabel(count: number): string;
-/** The tone a status carries wherever it is rendered as a badge or a tile. */
-export type Tone = "ok" | "warn" | "danger" | "neutral";
-export declare function connectorStatusTone(status: string): Tone;
-/**
- * The deployment in four numbers, so the page answers "is anything wrong"
- * above the list instead of only inside it. `attention` is what an operator
- * can act on now; `unavailable` is what they cannot. A connector still loading
- * its catalog counts only toward `total`, since calling it connected or failed
- * would be a guess either way.
- */
-export interface ConnectorSummary {
-    total: number;
-    connected: number;
-    attention: number;
-    unavailable: number;
-    tools: number;
-    /** Connectors whose last observed catalog refresh differed from the manifest. */
-    drifting: number;
-}
-export declare function summarizeConnectors(connectors: readonly UiConnector[]): ConnectorSummary;
-/**
- * The one line above the list. Connected and tool counts are always present;
- * the two counts an operator may have to act on appear only when they are not
- * zero, so a healthy deployment stays short.
- */
-export declare function connectorSummaryParts(summary: ConnectorSummary): Array<{
-    text: string;
-    tone: Tone;
-}>;
-/** Who owns this connector's downstream credentials, in two words. */
-export declare function authScopeLabel(scope: UiConnector["authScope"]): string;
-/**
- * What this identity may do with a connector, in one line. Being able to use it
- * is implied by seeing it at all, so the sentence covers authentication, which
- * is the part that differs between operators.
- */
-export declare function permissionLabel(connector: UiConnector): string;
-/**
- * Hosted-provider catalog drift, as an operator reads it
- * ([#343](https://github.com/zackbart/connecta/issues/343)).
- *
- * - `unavailable` — no refresh has been observed in this runtime, so there is
- *   nothing to report. Deliberately not `clean`: "we have not looked" and "we
- *   looked and it matches" are different answers, and only one of them is a
- *   reason to stop worrying.
- * - `clean` — a refresh happened and every category counted zero.
- * - `warning` — a refresh happened and at least one category did not.
- */
-export type DriftState = "clean" | "warning" | "unavailable";
-export declare function driftTotal(drift?: CatalogDriftReport): number;
-export declare function driftState(drift?: CatalogDriftReport): DriftState;
-/** Every category with its count, so a clean report still shows its zeros. */
-export declare function driftCounts(drift?: CatalogDriftReport): Array<{
-    key: string;
-    label: string;
-    count: number;
-}>;
-/** One line naming the state and when it was observed. Never what drifted. */
-export declare function driftSummary(drift?: CatalogDriftReport): string;
-/**
- * Only http/https may become a clickable href — the browser half of the gate
- * `src/ui.ts` applies before an authorizationUrl is ever serialized. A hostile
- * downstream that gets a `javascript:` URL past one of them still meets the
- * other, and the caller renders inert text instead of a link.
- */
-export declare function safeHttpHref(url: string | undefined): string | null;
-/** Locale timestamp, or "" for anything that is not a readable date. */
-export declare function formatDate(value?: string): string;
-export declare function actorLabel(actor?: UiActivityActor): string;
-/**
- * The stable id behind a friendly label, shown only when a label or namespace
- * could otherwise make two different people look like one.
- */
-export declare function actorStableId(actor?: UiActivityActor): string | null;
-export declare function filterActivity(events: UiActivityEvent[], query: string): UiActivityEvent[];
-/** Counts only. What the deployment ran, never what it sent or received. */
-export declare function activitySummary(events: UiActivityEvent[]): string;
-export declare function activityOutcomeClass(outcome: string): string;
-/** The one-line detail under an address: source, retries, and friction. */
-export declare function activityDetail(event: UiActivityEvent): string;
-export declare function credentialStateLabel(credential: {
-    configured: boolean;
-    fields?: unknown[];
-    lastFour?: string;
-    updatedAt?: string;
-}): string;
-/** Gate copy for each browser-auth shape, so the sign-in state is never a blank page. */
-export declare function gateCopy(kind: string, signedIn: boolean): string;
-export {};

package/dist/result-shapes.d.ts

@@ -1,13 +0,0 @@
-import type { JsonSchema, ToolDef } from "./types.js";
-/**
- * Passive, process-local output-shape learning. Provider declarations always
- * win; observations are an open, optional-field routing aid and never a
- * replacement contract.
- */
-export declare class ObservedOutputSchemas {
-    private readonly entries;
-    private cacheKey;
-    private set;
-    get(connectorId: string, definition: ToolDef): JsonSchema | undefined;
-    observe(connectorId: string, definition: ToolDef, value: unknown): void;
-}

package/dist/retired-toolkits.d.ts

@@ -1,2 +0,0 @@
-/** Fail loudly when JavaScript callers pass the retired audience-scoping keys. */
-export declare function assertNoRetiredToolkitOptions(source: string, options: object): void;

package/dist/routes/activity.d.ts

@@ -1,2 +0,0 @@
-import { type RouteContext } from "./shared.js";
-export declare function routeActivity(context: RouteContext): Promise<Response | null>;

package/dist/routes/credentials.d.ts

@@ -1,2 +0,0 @@
-import { type RouteContext } from "./shared.js";
-export declare function routeCredentials(context: RouteContext): Promise<Response | null>;