@zackbart/connecta 0.31.0 → 0.33.0

package/dist/routes/ui-data.js

@@ -137,8 +137,8 @@ export function uiData(registry, baseUrl, options) {
                 const fields = credentialFields();
                 return Effect.succeed({
                     ...card,
-                    ...(fields?.length ? { fields } : {}),
-                    configured: false,
+                    ...(fields?.length ? { fields: fields.map((field) => ({ ...field, configured: null })) } : {}),
+                    configured: null,
                     removable: true,
                     testable: testRule.mode !== null,
                     error: "Stored credential could not be read.",

package/dist/routes/ui.js

@@ -9,7 +9,7 @@ import { CONNECTA_VERSION } from "../version.js";
 import { CONNECTA_FAVICON_ICO } from "../favicon.js";
 import { CONNECTA_FAVICON_SVG, operatorPageForPath, renderUiHtml } from "../ui.js";
 import { authorized, refuse, scopeFor, serveOperator, visibleRegistry, } from "./operator.js";
-import { mayManageConnector, privateJson } from "./shared.js";
+import { managesAgentTokens, mayManageConnector, privateJson, readsActivity } from "./shared.js";
 import { routeUiConfig } from "./ui-config.js";
 import { uiData } from "./ui-data.js";
 /**
@@ -84,7 +84,8 @@ export async function routeUi(context) {
             ? opts.config.auth.find((provider) => provider.uiAuth?.kind === "cloudflare-access")?.uiAuth
             : undefined;
         const uiAuth = ambient ??
-            opts.config.auth.find((provider) => provider.uiAuth && provider.uiAuth.kind !== "cloudflare-access")?.uiAuth;
+            opts.config.auth.find((provider) => provider.uiAuth && provider.uiAuth.kind !== "cloudflare-access")?.uiAuth ??
+            opts.config.auth.find((provider) => provider.uiAuth?.kind === "cloudflare-access")?.uiAuth;
         const mcpUrl = new URL("/mcp", baseUrl).toString();
         const clerkOrigin = uiAuth?.kind === "clerk" && isSafeHttpsUrl(uiAuth.frontendApiUrl)
             ? new URL(uiAuth.frontendApiUrl).origin
@@ -115,14 +116,14 @@ function operatorView({ opts }, authz, registry) {
     const visible = registry.listConnectors();
     const mayManage = (id) => {
         const connector = registry.getConnector(id);
-        return Boolean(connector && mayManageConnector(authz, connector));
+        return Boolean(connector && mayManageConnector(opts, authz, connector));
     };
     const permissions = (connector) => ({
         use: true,
         manageSharedAuth: connector.authScope !== "personal" && mayManage(connector.id),
         connectPersonal: connector.authScope === "personal" && mayManage(connector.id),
     });
-    const activityEnabled = Boolean(opts.config.activity?.store.list) && authz.operator;
+    const activityEnabled = Boolean(opts.config.activity?.store.list) && readsActivity(opts, authz);
     const credentialManagement = visible.some((c) => c.credential && mayManage(c.id))
         ? opts.config.vault
             ? "available"
@@ -169,17 +170,9 @@ function summary(context) {
         const authz = yield* authorized(context);
         const registry = yield* visibleRegistry(context, authz);
         const { visible, mayManage, permissions, activityEnabled, credentialManagement } = operatorView(context, authz, registry);
-        // Setup commands are offered per pool, but only for pools this identity's
-        // grant admits: `/mcp/<name>` answers every other name with one flat 404 so
-        // a credential cannot enumerate them, and the page must not undo that.
-        const pools = [];
-        for (const [name, pool] of opts.pools ?? []) {
-            const granted = yield* Effect.tryPromise(async () => (await pool.grant(authz.identity)) === true).pipe(
-            // A throwing grant is a refusal at the endpoint, and so a refusal here.
-            Effect.orElseSucceed(() => false));
-            if (granted)
-                pools.push(name);
-        }
+        // Only maintainers reach here (#837); setup commands are offered for every
+        // declared pool, since they administer them all.
+        const pools = [...opts.pools.keys()];
         return privateJson({
             ...(pools.length ? { pools } : {}),
             serverInfo: opts.config.serverInfo,
@@ -187,7 +180,7 @@ function summary(context) {
             activityEnabled,
             ...(opts.config.accessTokens
                 ? {
-                    accessTokenManagement: authz.accessTokenManagement && authz.identity.principal ? "available" : "requires_operator",
+                    accessTokenManagement: managesAgentTokens(opts, authz) ? "available" : "requires_operator",
                 }
                 : {}),
             credentialManagement,

package/dist/runtime/call-admission.js

@@ -12,6 +12,15 @@
 // shared queue between them was refused.
 import { Effect } from "effect";
 let program;
+const budgetCharges = new WeakMap();
+/** Bind budget-only admission to the partition already owned by this permit. */
+export function provideCallBudgetCharge(permit, charge) {
+    budgetCharges.set(permit, charge);
+}
+/** Charge an internal request without acquiring another concurrency permit. */
+export function chargeCallBudget(permit, signal) {
+    return Effect.clockWith((clock) => budgetCharges.get(permit)?.(clock.currentTimeMillisUnsafe(), signal) ?? Effect.void);
+}
 // What the live Clock reads, looked up on every call rather than bound once,
 // so a Date faked after a caller queued (vitest's setSystemTime) still counts.
 const liveNow = () => Date.now();

package/dist/server.js

@@ -2,6 +2,7 @@ import { Effect } from "effect";
 import { notFoundResponse } from "./branding.js";
 import { aggregateCallAdmissionSnapshots } from "./call-admission.js";
 import { isAdmittingExecutor } from "./executor-admission.js";
+import { isAgentPath } from "./routes/agent-path.js";
 import { createMcpRoute, MCP_CORS_HEADERS } from "./routes/mcp.js";
 import { routeOAuthCallback } from "./routes/oauth.js";
 import { routeOAuthClientMetadata } from "./routes/oauth-client-metadata.js";
@@ -59,6 +60,10 @@ export function createFetchHandler(opts) {
     };
     const route = (context) => Effect.gen(function* () {
         const { request, path, baseUrl } = context;
+        // The agent namespace is routed before anything else, so no path
+        // Cloudflare Access bypasses as `/agent/*` can reach a human route.
+        if (isAgentPath(path))
+            return (yield* routeMcp.handle(context)) ?? notFoundResponse(request, opts.config);
         const clientMetadata = routeOAuthClientMetadata(context);
         if (clientMetadata)
             return clientMetadata;
@@ -88,6 +93,9 @@ export function createFetchHandler(opts) {
             });
         }
         if (path.startsWith("/.well-known/")) {
+            const guardedMetadata = yield* routeMcp.handle(context);
+            if (guardedMetadata)
+                return guardedMetadata;
             const response = yield* metadata(request, baseUrl);
             if (response)
                 return response;

package/dist/skills.js

@@ -7,11 +7,12 @@ import { sentSecretsForRequest } from "./sent-secrets.js";
 const ROUTE = "Choose a route before discovery. One known-address read uses call_tool; one known-address write uses call_destructive_tool. Unknown-address read-only work starts with execute_code to discover, call, and return the answer; use the same route for reduction, multiple or dependent calls, loops, joins, or branches. Keep discovery and calls together when schemas suffice; do not return catalog matches alone. Sample unfamiliar reads.";
 const RECOVERY = 'When an auth error includes a handoff, give it to the user or operator. Use authorize_connector for a fresh link. Page resultId notices and format:"paged" handles with connecta.result(handleOrId, { page? }). Fetch skills({ name: "usage" }) only for missing guidance or program repair.';
 /**
- * The always-loaded MCP `instructions` string. A program runs reads and the
- * writes in trusted pools; a read-only pool routes every write to top-level
- * call_destructive_tool, where the host's permission prompt is the approval.
+ * The always-loaded MCP `instructions` string. An endpoint is writable or
+ * read-only: a writable one lets programs and call_destructive_tool write,
+ * and the client owns approval; a read-only one omits write tools from search
+ * and describe and refuses every write call. Guides may still name them.
  */
-export const CONNECTA_INSTRUCTIONS = `${ROUTE} Programs call reads in read-only pools and may also write in trusted pools. The execute_code description names this endpoint's trust. In a read-only pool, discover writes with search_tools then use call_destructive_tool. Never repeat a write to recover its output. ${RECOVERY}`;
+export const CONNECTA_INSTRUCTIONS = `${ROUTE} On a writable endpoint, programs and call_destructive_tool may write. On a read-only endpoint, search omits write tools and every write call is refused; guides may still name them. The execute_code description says which this endpoint is. Never repeat a write to recover its output. ${RECOVERY}`;
 export { USAGE_SKILL } from "./usage-guide.js";
 /** True when at least one of `connectors` carries a usage guide. */
 export function hasConnectorGuides(connectors) {

package/dist/storage/keys.js

@@ -164,7 +164,12 @@ export const oauthHandoffKeys = {
     },
     handoff: (connectorId, stateHash) => validateStorageKey(`oauth-handoff:v1:${connectorId}:${stateHash}`),
 };
-/** Connecta-issued `cta_` access tokens: records, digest lookups, capacity. */
+/**
+ * Connecta-issued `cta_` access tokens: token records, digest lookups, one
+ * slot per declared agent naming its live record, and a never-deleted claim per
+ * legacy record an adoption has taken. `active` is the capacity
+ * ledger releases before 0.33 wrote; nothing writes it now.
+ */
 export const accessTokenKeys = {
     family: {
         name: "access-token",
@@ -178,6 +183,9 @@ export const accessTokenKeys = {
     recordPrefix: "access-token:v1:record:",
     record: (id) => validateStorageKey(`access-token:v1:record:${id}`),
     lookup: (tokenHash) => validateStorageKey(`access-token:v1:lookup:${tokenHash}`),
+    agent: (name) => validateStorageKey(`access-token:v1:agent:${name}`),
+    /** Write-once claim that a legacy token record has been taken by one agent's adoption. */
+    adopted: (legacyRecordId) => validateStorageKey(`access-token:v1:adopted:${legacyRecordId}`),
     active: "access-token:v1:active",
 };
 /**

package/dist/tool-safety.js

@@ -14,9 +14,17 @@ export function classifyTool(definition, override, review) {
         ? "read"
         : "write";
 }
-/** The only permission decision for a connector call. Approval is host-owned. */
-export function surfaceAllowsTool(classification, surface, trust = "read-only") {
-    return (classification === "read" ||
-        surface === "call_destructive_tool" ||
-        (surface === "execute_code" && trust === "trusted"));
+/**
+ * The only permission decision for a connector call. Approval is client-owned.
+ * A read-only endpoint refuses every write on every surface; a writable one
+ * sends writes through call_destructive_tool and programs, never call_tool.
+ */
+export function writeRefusal(classification, surface, readOnly = false) {
+    if (classification === "read")
+        return undefined;
+    if (readOnly)
+        return "read_only_endpoint";
+    return surface === "call_destructive_tool" || surface === "execute_code"
+        ? undefined
+        : "destructive_tool_requires_approval";
 }

package/dist/types.d.ts

@@ -95,7 +95,7 @@ export interface ToolDef {
      * Standard MCP tool behavior hints plus provider-specific extensions.
      * The registry classifies these after deployment overrides and provider
      * review. Only a stored read verdict may use call_tool; program writes
-     * require a trusted pool. Approval belongs to the host.
+     * require a writable endpoint. Approval belongs to the host.
      */
     annotations?: ToolAnnotations;
 }
@@ -727,6 +727,11 @@ export type AuthResult = {
     sessionCookies?: readonly string[];
     /** Human owner represented by a non-interactive access credential. */
     principal?: IdentityReference;
+    /**
+     * Declared agent name. Only the built-in `accessTokens()` adapter may
+     * set it; a result from any other provider that carries it is refused.
+     */
+    agent?: string;
 } | {
     ok: false;
     response: Response;
@@ -747,6 +752,12 @@ export interface AuthenticatedIdentity {
     subject?: IdentityReference;
     /** Human owner of personal connector authentication. */
     principal?: IdentityReference;
+    /**
+     * Name of the code-declared agent this caller is, from `agents`. Set only
+     * when the built-in access-token adapter admitted a `cta_` token bound to
+     * a currently declared agent; an agent never has a `principal`.
+     */
+    agent?: string;
     interactive: boolean;
 }
 /** Public browser-auth configuration exposed to connecta's status UI. */

package/dist/ui.d.ts

@@ -9,7 +9,7 @@ export { CONNECTA_FAVICON_SVG, resolveBranding, isSafeHttpUrl, isSafeHttpsUrl, i
 export type OperatorPage = import("./operator-ui/view.js").OperatorPage;
 export declare function operatorPageForPath(path: string): OperatorPage | undefined;
 export declare function operatorPageTitle(page: OperatorPage, configuredTitle: string): string;
-/** Report the verdict the registry stored, independent of pool trust. */
+/** Report the verdict the registry stored, independent of whether an endpoint is read-only. */
 export declare function uiToolSafety(definition: ToolDef): UiToolSafety;
 /**
  * The fix-prompt key for a connector that is not usable. Chosen from the
@@ -49,4 +49,4 @@ _nonce?: string, page?: OperatorPage): string;
 export declare function operatorUi(options?: {
     branding?: ConnectaBranding;
 }): OperatorSurface;
-export type { OperatorUiContract, OperatorConnectorOverlay, OperatorTool, OperatorViewer, OperatorGrant, OperatorPool, OperatorLastCall, } from "./operator-ui/contract.js";
+export type { OperatorUiContract, OperatorUiContractV2, OperatorRole, OperatorMember, OperatorPoolV2, OperatorRootEndpoint, OperatorMemberConnector, OperatorMemberManage, OperatorAgent, OperatorSharedSource, OperatorRunsAs, OperatorConnectorPoolCell, OperatorConnectorOverlay, OperatorTool, OperatorGrant, OperatorLastCall, } from "./operator-ui/contract.js";

package/dist/ui.js

@@ -4,33 +4,31 @@ import { routeCredentials } from "./routes/credentials.js";
 import { routeOAuthManagement } from "./routes/oauth-management.js";
 import { uiData } from "./routes/ui-data.js";
 import { runEdge } from "./runtime/run.js";
-import { OPERATOR_UI_STYLE_PATH, OPERATOR_UI_SCRIPT_PATH, OPERATOR_UI_NOTICES_PATH } from "./operator-ui/generated.js";
+import { OPERATOR_UI_STYLE_PATH, OPERATOR_UI_SCHEME_PATH, OPERATOR_UI_SCRIPT_PATH, OPERATOR_UI_NOTICES_PATH, } from "./operator-ui/generated.js";
 export { filterUiConnectors, } from "./operator-ui/model.js";
 import { escapeHtml, isSafeHttpsUrl, renderPage, resolveBranding } from "./branding.js";
 export { CONNECTA_FAVICON_SVG, resolveBranding, isSafeHttpUrl, isSafeHttpsUrl, isSafeIconHref } from "./branding.js";
 const OPERATOR_PAGE_LABELS = {
-    overview: "Overview",
+    endpoints: "Endpoints",
     connections: "Connectors",
     connector: "Connector",
-    tools: "Tools",
-    access: "Access",
-    config: "Config",
-    tokens: "Access tokens",
+    settings: "Settings",
+    tokens: "Tokens",
     activity: "Activity",
 };
 export function operatorPageForPath(path) {
     if (path === "/")
-        return "overview";
+        return "endpoints";
     if (path === "/connectors")
         return "connections";
     if (/^\/connectors\/[a-z0-9_-]+$/.test(path))
         return "connector";
     if (path === "/tools")
-        return "tools";
+        return "connections";
     if (path === "/access")
-        return "access";
-    if (path === "/config")
-        return "config";
+        return "endpoints";
+    if (path === "/config" || path === "/settings")
+        return "settings";
     if (path === "/tokens")
         return "tokens";
     if (path === "/activity")
@@ -40,7 +38,7 @@ export function operatorPageForPath(path) {
 export function operatorPageTitle(page, configuredTitle) {
     return `${OPERATOR_PAGE_LABELS[page]} — ${configuredTitle}`;
 }
-/** Report the verdict the registry stored, independent of pool trust. */
+/** Report the verdict the registry stored, independent of whether an endpoint is read-only. */
 export function uiToolSafety(definition) {
     if (definition.classification === "read")
         return "runs_in_programs";
@@ -101,7 +99,7 @@ function jsonForInlineScript(value) {
  */
 export function renderUiHtml(uiAuth, mcpUrl = "/mcp", branding, 
 /** @deprecated Scripts load from same-origin assets; ignored. */
-_nonce, page = "overview") {
+_nonce, page = "endpoints") {
     const clerk = uiAuth?.kind === "clerk" ? uiAuth : undefined;
     // The Clerk loader's origin. A value that fails the gate is dropped rather
     // than escaped into the page: the loader tag is simply not emitted, the gate
@@ -130,13 +128,15 @@ _nonce, page = "overview") {
         : "";
     // The shared layout owns the head, scheme, theme, and masthead; the shell
     // adds its own bundle (which already imports the shared tokens), the nav
-    // mount, and the app.
+    // mount, and the app. The scheme initializer blocks, ahead of the
+    // stylesheet, so a saved color scheme holds from the first paint.
     return renderPage(branding, {
         title: operatorPageTitle(page, brand.pageTitle),
         uiMounted: true,
         operatorShell: true,
         styles: "",
-        head: `<link rel="stylesheet" href="${OPERATOR_UI_STYLE_PATH}"><link rel="license" href="${OPERATOR_UI_NOTICES_PATH}">` +
+        head: `<script src="${OPERATOR_UI_SCHEME_PATH}"></script>` +
+            `<link rel="stylesheet" href="${OPERATOR_UI_STYLE_PATH}"><link rel="license" href="${OPERATOR_UI_NOTICES_PATH}">` +
             clerkScript,
         skipTo: { id: "operatorContent", label: "Skip to operator page" },
         mastheadEnd: '<div id="operatorNav"></div>',
@@ -156,6 +156,7 @@ _nonce, page = "overview") {
             auth,
             mcpUrl,
             initialPage: page,
+            schemePinned: brand.theme.colorScheme !== "system",
             titleSuffix: brand.pageTitle,
             productName: brand.productName,
             productDescription: brand.description,
@@ -186,6 +187,7 @@ export function operatorUi(options = {}) {
         "/tools",
         "/access",
         "/config",
+        "/settings",
         "/ui",
         "/ui/*",
         "/favicon.svg",

package/dist/usage-guide.js

@@ -16,9 +16,9 @@ description: How to route work between one execute_code program and Connecta's e
 
 Read one account with call_tool: \`{ "address": "crm.get_account", "args": { "id": "acct_42" } }\`.
 Discover and call together when schemas suffice. search_tools covers catalog
-inspection and write discovery in read-only pools. Programs may
-write only in trusted pools; the tool description states this endpoint's trust.
-Unannotated tools fail closed to writes.
+inspection. On a read-only endpoint, as execute_code's description says, search
+omits writes (guides may name them) and each fails read_only_endpoint; tell the
+user. Unannotated tools fail closed to writes.
 
 ## The global and the envelopes
 

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const CONNECTA_VERSION = "0.31.0";
+export declare const CONNECTA_VERSION = "0.33.0";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Generated from package.json by scripts/generate-version.mjs.
 // Workers-safe: no runtime filesystem read or deployment override.
-export const CONNECTA_VERSION = "0.31.0";
+export const CONNECTA_VERSION = "0.33.0";

package/dist/workspace-address.js

@@ -0,0 +1,9 @@
+// The one rule for a Google Workspace address, shared by the Workspace
+// providers' fixed `subject` and a pool's `owner` (#837, decisions/0006), so
+// config accepts exactly the addresses a delegated token can be minted for.
+/** A plausible mailbox: one `@`, no whitespace or control characters. */
+const ADDRESS = /^[^\s@<>()",;:\\[\]]+@[^\s@<>()",;:\\[\]]+\.[^\s@<>()",;:\\[\]]+$/;
+/** Whether `value`, already trimmed, is a Workspace email address. */
+export function isWorkspaceAddress(value) {
+    return typeof value === "string" && ADDRESS.test(value);
+}

package/dist/workspace-subject.js

@@ -0,0 +1,23 @@
+// Whose account a Google Workspace connector acts as, for the operator
+// matrix (#837, decisions/0006). The Workspace providers tag the connector
+// they build; nothing else can, and nothing a request sends reaches this.
+// Read only by the operator contract, which never shows a mapping function.
+const tagged = new WeakMap();
+/** Tag a Workspace connector with its subject kind, returning it unchanged. */
+export function tagWorkspaceSubject(connector, subject) {
+    tagged.set(connector, typeof subject === "string" ? { kind: "fixed", subject } : { kind: "mapping" });
+    return connector;
+}
+/**
+ * The subject kind of a tagged connector, or undefined for any other. Walks
+ * the prototype chain, since provider construction may wrap a connector it
+ * cannot restamp in an object that inherits from it.
+ */
+export function workspaceSubjectOf(connector) {
+    for (let current = connector; current; current = Object.getPrototypeOf(current)) {
+        const subject = tagged.get(current);
+        if (subject)
+            return subject;
+    }
+    return undefined;
+}

package/documentation/README.md

@@ -1,34 +1,58 @@
 # Agent documentation
 
-Choose a route by the work you are doing. Each route identifies the task guide
-and contracts needed to operate an endpoint, set up a deployment, connect a
-service, or change Connecta itself.
+Start here when operating a deployment installed with `@zackbart/connecta`.
+All operator procedures below are available in the installed package; paths in
+this directory are relative to `node_modules/@zackbart/connecta/documentation/`.
+For an existing endpoint, start with [Operating an endpoint](./operating.md).
+For a new deployment, start with [Deploying Connecta](./deploying.md).
 
-| Your task                                                             | Start here                                                            | Read next when needed                                                                                                                            |
-| --------------------------------------------------------------------- | --------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
-| Use an existing endpoint to answer a question or perform a task       | [Operating an endpoint](./operating.md)                               | [Meta-tools](./meta-tools.md), [guest API](./code-mode.md)                                                                                       |
-| Set up, configure, upgrade, or diagnose a deployment                  | [Deploying Connecta](./deploying.md)                                  | [Auth](./auth.md), [operator UI](./operator-ui.md)                                                                                               |
-| Add a maintained integration, remote MCP, or HTTP API to a deployment | [Integrating services](./integrating.md)                              | Provider skill, [classification](./architecture.md#providers-and-reviewed-classification), [downstream auth](./auth.md#shared-and-personal-auth) |
-| Change Connecta's source, tests, or published contracts               | [AGENTS.md](https://github.com/zackbart/connecta/blob/main/AGENTS.md) | [Principles](https://github.com/zackbart/connecta/blob/main/PRINCIPLES.md), [architecture](./architecture.md), then the affected contract        |
+## Operator tasks
+
+| Task                                     | Self-contained procedure                                                                                                            |
+| ---------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
+| Add or remove a connector                | [Change the connector roster](./integrating.md#add-or-remove-a-connector)                                                           |
+| Organize an agent's pools                | [Organizing an agent's pools](./auth.md#organizing-an-agents-pools)                                                                 |
+| Add a person (maintainer or pool member) | [Add a person](./auth.md#add-a-person), [member page](./operator-ui.md#use-the-member-page)                                         |
+| Connect a shared credential              | [Connect a shared credential](./auth.md#connect-a-shared-credential)                                                                |
+| Issue, rotate, or revoke an agent token  | [Manage an agent token](./auth.md#issue-rotate-or-revoke-an-agent-token)                                                            |
+| Upgrade between versions                 | [Upgrade an existing deployment](./deploying.md#upgrade-an-existing-deployment), including [migration to 0.33](./migration-0.33.md) |
+| Diagnose with `connecta doctor`          | [Verify and diagnose](./deploying.md#verify-and-diagnose)                                                                           |
+
+## Audience rule
+
+Shipped docs (`documentation/`, `templates/`, `examples/worker/`, and the root
+`README.md`) are written first for an agent operating a deployment from the
+installed package. Operator conventions must be self-contained rules plus a
+neutral example. Decision records and issues explain why; no operator task
+requires them, `spec/`, `.claude/`, or the Connecta source checkout. Those
+three directories do not ship. Contributor source maps, INV citations, and
+implementation/test evidence belong under clearly labeled contributor
+headings and are optional for operators. Use `assistant`, `alice`, `bob`,
+`crm`, `tickets`, `notes_alice`, and `alice@example.com` in examples; never
+real deployment, client, person, or organization names. Maintained provider
+product names stay.
 
 ## Contract reference
 
-| Guide                                                       | Owns                                                                                                          |
-| ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
-| [Meta-tools](./meta-tools.md)                               | Six top-level tools, discovery, direct-call results, paging, skills, and recovery                             |
-| [Code mode](./code-mode.md)                                 | JavaScript guest API, executor requirements, output, retries, cancellation, limits, and writes                |
-| [Auth](./auth.md)                                           | Inbound identity, grants, pools, machine tokens, credential ownership, and downstream OAuth                   |
-| [Architecture](./architecture.md)                           | Request lifetimes, routes, storage, configuration, import boundaries, and Effect implementation               |
-| [Operator UI](./operator-ui.md)                             | Optional UI setup, scoped configuration and live-data contract, activity disclosure, and UI implementation    |
-| [Operator UI tests](./operator-tests.md)                    | Browser state matrix, real-server flows, and snapshot maintenance                                             |
-| [Provider migration for 0.29](./provider-migration-0.29.md) | Upgrade actions for Notion, Vercel, and Cloudflare; provider reconciliation tables supply exact name mappings |
-| [Provider auth migration](./provider-auth-migration.md)     | Upgrade actions when `auth` selects hosted MCP or Connecta's REST connector, Stripe and Vercel                |
+| Guide                                                            | Owns                                                                                                          |
+| ---------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
+| [Meta-tools](./meta-tools.md)                                    | Six top-level tools, discovery, direct-call results, paging, skills, and recovery                             |
+| [Code mode](./code-mode.md)                                      | JavaScript guest API, executor requirements, output, retries, cancellation, limits, and writes                |
+| [Auth](./auth.md)                                                | Inbound identity, maintainers, pools and members, agents, credential ownership, and downstream OAuth          |
+| [Architecture (contributor reference)](./architecture.md)        | Request lifetimes, routes, storage, configuration, import boundaries, and Effect implementation               |
+| [Operator UI](./operator-ui.md)                                  | Optional UI setup, scoped configuration and live-data contract, activity disclosure, and UI implementation    |
+| [Operator UI tests (contributor reference)](./operator-tests.md) | Browser state matrix, real-server flows, and snapshot maintenance                                             |
+| [Migration to 0.33](./migration-0.33.md)                         | Upgrade actions from 0.32 options to maintainers, members, agents, agent endpoints, and pool owners           |
+| [Provider migration for 0.29](./provider-migration-0.29.md)      | Upgrade actions for Notion, Vercel, and Cloudflare; provider reconciliation tables supply exact name mappings |
+| [Provider auth migration](./provider-auth-migration.md)          | Upgrade actions when `auth` selects hosted MCP or Connecta's REST connector, Stripe and Vercel                |
 
 Each long contract starts with task routes. Follow those section links before
-reading the whole guide. Source and test pointers identify where to check a
-claim or implement a change.
+reading the whole guide. Contributor references at the end are optional
+implementation evidence.
+
+## Contributor reference
 
-## Documentation ownership
+### Documentation ownership
 
 The root [README](../README.md) explains the product for people. It owns what
 Connecta offers, how the pieces connect, deployment choices, and the setup