@zackbart/connecta 0.34.0 → 0.35.0

package/dist/providers/stripe/index.js

@@ -1,14 +1,10 @@
-import { skill } from "./skill.generated.js";
-import { apiConnector } from "../../connectors/api-connector.js";
-import { reviewedCatalog } from "../../catalog-drift.js";
 import { keys, optionsOf, variants } from "../../config-schema.js";
-import { defineProvider } from "../../provider.js";
-import { byAuth, hostedOAuth } from "../_shared/rest/dispatch.js";
-import { restTools } from "../_shared/rest/tools.js";
-import { stripeRest } from "./rest.js";
-export { STRIPE_API_BASE_URL } from "./rest.js";
-/** Stripe publishes one hosted MCP endpoint for every account and mode. */
-export const STRIPE_MCP_ENDPOINT = "https://mcp.stripe.com/";
+import { defineApiProvider } from "../../http/provider.js";
+import { authenticate, connectedAccount, MAX_RESPONSE_BYTES, READ_CAP_MS, MODE_COPY, probe, safety, stripeErrors, StripeApi, stripeIndex, stripeBinding, STRIPE_PAGES, STRIPE_VERDICTS, } from "./api.js";
+import { stripeTools } from "./tools.js";
+import { skill } from "./skill.generated.js";
+import { STRIPE_API_BASE_URL } from "./lib/config.js";
+export { STRIPE_API_BASE_URL } from "./lib/config.js";
 /**
  * Stripe documents no MCP-specific limit, so these transcribe the account limit
  * every request spends: 100 requests per second live, 25 in a sandbox. OAuth
@@ -39,201 +35,89 @@ const STRIPE_ADMISSION = {
         ],
     },
 };
-/**
- * Reviewed in #705's provider audit against https://docs.stripe.com/mcp.
- * Retains the release-reviewed inventory, including names absent from today's
- * public reference. Live annotations were not reverified without credentials.
- * No schema digest is asserted without a captured schema to review. This
- * classifies the hosted OAuth catalog only; the REST connector annotates each
- * tool it authors.
- */
-const STRIPE_CLASSIFICATION = {
-    tools: {
-        "stripe_api_search": {
-            "verdict": "read",
-            "reason": "Searches API method contracts and object records; it does not invoke mutating methods.",
-        },
-        "stripe_api_details": {
-            "verdict": "read",
-            "reason": "Reads the parameter contract for an API method; it does not execute that method.",
-        },
-        "stripe_api_read": {
-            "verdict": "read",
-            "reason": "The vendor restricts this generic tool to HTTP GET; all mutating methods use stripe_api_write.",
-        },
-        "get_stripe_account_info": { "verdict": "read", "reason": "Reads metadata for the selected Stripe account." },
-        "get_balance_summary": {
-            "verdict": "read",
-            "reason": "Retrieves Stripe balance summary information without changing vendor state.",
-        },
-        "list_metrics": {
-            "verdict": "read",
-            "reason": "Retrieves Stripe metrics information without changing vendor state.",
-        },
-        "explain_metric": {
-            "verdict": "read",
-            "reason": "Explains an existing metric definition without creating an analytics run.",
-        },
-        "metric_drilldown": { "verdict": "read", "reason": "Reads the breakdown of an existing metric." },
-        "show_metric_app": { "verdict": "read", "reason": "Displays an existing metric app without changing its data." },
-        "list_available_accounts_or_orgs": {
-            "verdict": "read",
-            "reason": "Retrieves Stripe available accounts or orgs information without changing vendor state.",
-        },
-        "manage_stripe_accounts": {
-            "verdict": "read",
-            "reason": "Selects account context for the session; the reviewed contract does not mutate payment or account records.",
-        },
-        "search_stripe_documentation": {
-            "verdict": "read",
-            "reason": "Searches Stripe reference documentation without accessing payment mutations.",
-        },
-        "stripe_api_write": {
-            "verdict": "destructive",
-            "reason": "Can dispatch POST, PATCH, PUT, or DELETE across the Stripe API, including edits and cancellations.",
-        },
-        "create_refund": {
-            "verdict": "destructive",
-            "reason": "Moves money and changes an existing payment; a refund cannot be undone.",
-        },
-        "stripe_implementation_planner": {
-            "verdict": "write",
-            "reason": "Creates or continues provider-side planning state.",
-        },
-        "stripe_analytics": {
-            "verdict": "write",
-            "reason": "Mixes retrieval with durable query-run creation, so the whole tool is a write.",
-        },
-        "stripe_report": {
-            "verdict": "write",
-            "reason": "May create durable report-run state, so retrieval paths cannot make the whole tool read-only.",
-        },
-        "send_stripe_mcp_feedback": {
-            "verdict": "write",
-            "reason": "Submits feedback to Stripe, creating provider-side state.",
-        },
-    },
-};
-function instructionsSection(instructions) {
-    const text = instructions?.trim();
-    return text ? `\n## ${skill.instructionsHeading}\n\n${text}\n` : "";
-}
-function oauthUsageGuide(purpose, instructions) {
-    const { oauth, shared, oauth_limits } = skill.fragments;
-    return `# Stripe usage
-
-Scope: live and sandbox accounts. Connector purpose: ${purpose}${oauth}${shared}${oauth_limits}
-${instructionsSection(instructions)}`;
-}
-const MODE_COPY = {
-    production: {
-        title: "Stripe (production)",
-        blurb: "production — live money and real customers",
-        warning: "This is a PRODUCTION Stripe connection. Every write moves real money against real customers, and a refund cannot be undone. If a request could plausibly be a rehearsal, route it to a sandbox connector instead.",
-        rate: "100 requests per second",
-    },
-    sandbox: {
-        title: "Stripe (sandbox)",
-        blurb: "sandbox — test data, no real money",
-        warning: "This is a SANDBOX Stripe connection. Nothing here is real money and none of these objects exist in production, so never answer a question about live revenue, payouts, or a named customer from this connector.",
-        rate: "25 requests per second",
-    },
-};
-function keyUsageGuide(mode, purpose, connectedAccount, instructions) {
-    const copy = MODE_COPY[mode];
-    const { key, shared, key_limits, key_tail } = skill.fragments;
-    const connect = connectedAccount
-        ? `\n\nConnected account: \`${connectedAccount}\`. Every call acts as this Connect account; the platform account's own objects are out of reach here.`
-        : "";
-    return `# Stripe usage
-
-Mode: ${mode}. Connector purpose: ${purpose}
-
-${copy.warning}${connect}${key}${shared}${key_limits}${copy.rate}${key_tail}
-${instructionsSection(instructions)}`;
-}
-const COMMON = keys("title", "authScope", "purpose", "instructions", "maxResultBytes");
+const COMMON = keys("title", "authScope", "purpose", "instructions", "maxResultBytes", "readOnly");
 /** The closed options stripe() accepts, selected by `auth.type`; see `assertKnownOptions`. */
 const STRIPE_OPTIONS = variants(["auth", "type"], {
     // The never-typed keys stay out of the shape, so the walk refuses them by name.
-    oauth: optionsOf()({
-        ...COMMON,
-        auth: optionsOf()(keys("type")),
-    }).shape,
+    oauth: { ...COMMON, auth: optionsOf()(keys("type")) },
     apiKey: optionsOf()({
         ...COMMON,
         ...keys("mode", "connectedAccount"),
         auth: optionsOf()(keys("type")),
     }).shape,
-});
-function stripeOAuth(id, options, provider) {
-    return hostedOAuth(id, provider, {
-        url: STRIPE_MCP_ENDPOINT,
-        title: options.title ?? "Stripe",
-        description: `Stripe payments (live and sandbox accounts) — ${options.purpose}`,
-        callAdmission: STRIPE_ADMISSION.sandbox,
-        usageGuide: {
-            content: oauthUsageGuide(options.purpose, options.instructions),
-            // Explicit rather than derived: OAuth must lead with its account-scoped selector pair.
-            summary: "Live and sandbox Stripe accounts. List accounts; carry the returned stripe_context and livemode before acting.",
-        },
-    });
-}
-function stripeApiKey(id, options, provider) {
-    const mode = options.mode;
-    if (mode !== "production" && mode !== "sandbox") {
-        throw new Error(`stripe("${id}") requires mode "production" or "sandbox" with apiKey auth.`);
-    }
-    let connectedAccount;
-    if (options.connectedAccount !== undefined) {
-        connectedAccount = typeof options.connectedAccount === "string" ? options.connectedAccount.trim() : "";
-        if (!/^acct_[A-Za-z0-9]+$/.test(connectedAccount)) {
-            throw new Error(`stripe("${id}") connectedAccount must be a Stripe account id ("acct_...").`);
-        }
-    }
-    const copy = MODE_COPY[mode];
-    const live = mode === "production" ? "live" : "test";
-    const rest = stripeRest(mode, connectedAccount);
-    return apiConnector(id, {
-        ...provider.connectorOptions,
-        title: options.title ?? copy.title,
-        description: `Stripe payments (${copy.blurb}) — ${options.purpose}`,
-        credential: {
-            label: `Stripe ${live}-mode secret or restricted key`,
-            description: `A ${live}-mode secret (sk_${live}_…) or restricted (rk_${live}_…) key; prefer a restricted key with only the permissions this connector needs. It is sent only to api.stripe.com and files.stripe.com, stored encrypted, and never displayed.`,
-            placeholder: `rk_${live}_…`,
-        },
-        testCredential: rest.testCredential,
-        callAdmission: STRIPE_ADMISSION[mode],
-        usageGuide: {
-            content: keyUsageGuide(mode, options.purpose, connectedAccount, options.instructions),
-            // Explicit rather than derived: a key connector must lead with its one mode.
-            summary: mode === "production"
-                ? "PRODUCTION: real money. One live-mode key over REST; search operations, read details, then read or write."
-                : "Sandbox: test data only. One test-mode key over REST; search operations, read details, then read or write.",
-        },
-        tools: [...restTools(rest.vendor), ...rest.tools],
-    });
+}, undefined, ["oauth"]);
+function usageGuide(options) {
+    const copy = MODE_COPY[options.mode];
+    const account = connectedAccount(options);
+    return {
+        heading: "Stripe usage",
+        summary: options.mode === "production"
+            ? "PRODUCTION: real money. One configured live-mode key over REST; resolve ids before acting."
+            : "Sandbox: test data only. One configured test-mode key over REST; resolve ids before acting.",
+        context: [
+            `Mode: ${options.mode}. Connector purpose: ${options.purpose}`,
+            copy.warning,
+            "This connection's key is already configured and reaches exactly one Stripe account in this mode; there is no account selection or sign-in step.",
+            ...(account
+                ? [
+                    `Connected account: ${account}. Every call acts as this Connect account; the platform account's own objects are out of reach here.`,
+                ]
+                : []),
+            ...(options.readOnly === true ? ["This connection is read-only: every write is refused."] : []),
+        ],
+        required: true,
+    };
 }
-/**
- * A maintained Stripe connection. `auth` selects the implementation: OAuth
- * reaches Stripe's hosted MCP server; an API key reaches Connecta's REST
- * connector to `api.stripe.com`.
- */
-export const stripe = defineProvider({
+export const stripe = defineApiProvider({
     name: "stripe",
     title: "Stripe",
-    kind: "dual",
     readme: "Stripe",
     bundle: {
-        "baselineGzip": 232089,
-        "maxGzip": 292089,
-        "note": "./providers/stripe remeasures at 232,089 B gzip (#801), from 170,771 B on main: auth now selects the implementation, so the entry carries the hosted MCP client and Connecta's REST connector (api(), the schema validator, guarded transport, the shared REST module) plus the pinned Stripe operation index (638 operations; request details to depth 2, without descriptions or enums over 50 values; 37,918 B gzip as source). Details were shrunk before the cap moved: the first full index measured 81 KB gzip. The cap uses the existing baseline + 60,000 B policy.",
+        baselineGzip: 379663,
+        note: "./providers/stripe measures 379,663 B gzip standalone in F3 (#703), Node 22 CI static at 9420933711af5e42bf9d134d1b73bed114a48fa0 (run 39997464724, Run pnpm run check:build). This entry includes the shared Effect provider kit, paid once per deployment; standalone provider sizes are not additive. Provider entries are reported, not capped (#899).",
     },
     skill,
     options: STRIPE_OPTIONS,
-    classify: STRIPE_CLASSIFICATION,
-    create: byAuth({ oauth: stripeOAuth, apiKey: stripeApiKey }),
+    vendor: StripeApi,
+    baseUrl: (options) => {
+        connectedAccount(options);
+        return STRIPE_API_BASE_URL;
+    },
+    displayTitle: (options) => MODE_COPY[options.mode].title,
+    description: (options) => `Stripe payments (${MODE_COPY[options.mode].blurb}) — ${options.purpose}`,
+    maxResponseBytes: MAX_RESPONSE_BYTES,
+    idempotencyKey: true,
+    timeoutMs: READ_CAP_MS,
+    headers: { "Stripe-Version": stripeIndex.version },
+    defaultCallAdmission: (options) => STRIPE_ADMISSION[options.mode],
+    credential: (options) => {
+        const live = options.mode === "production" ? "live" : "test";
+        return {
+            label: `Stripe ${live}-mode secret or restricted key`,
+            description: `A ${live}-mode secret (sk_${live}_…) or restricted (rk_${live}_…) key; prefer a restricted key with only the permissions this connector needs. It is sent only to api.stripe.com and files.stripe.com, stored encrypted, and never displayed.`,
+            placeholder: `rk_${live}_…`,
+        };
+    },
+    authenticate,
+    safety,
+    errors: stripeErrors,
+    probe,
+    guide: usageGuide,
+    hatch: {
+        name: "stripe",
+        title: "Stripe",
+        index: stripeIndex,
+        verdicts: STRIPE_VERDICTS,
+        named: { "GET /v1/account": "get_stripe_account_info", "GET /v1/balance": "get_balance_summary" },
+        pathExample: "/v1/customers/cus_123",
+        pages: STRIPE_PAGES,
+        pageCursor: "argument",
+        binding: stripeBinding,
+        idempotency: { header: "Idempotency-Key", methods: ["POST"] },
+        notes: () => ({
+            read: "Pass page.nextCursor as cursor; starting_after or ending_before record-id anchors are allowed only on the first request, without cursor. v1 parameters use bracketed form encoding; v2 bodies are JSON. Quote PDFs use the confined files origin.",
+            write: "POST sends an Idempotency-Key; DELETE sends none. v1 bodies are form-encoded, including nested fields; v2 bodies are JSON. Upload files in the Stripe Dashboard.",
+        }),
+    },
+    tools: stripeTools,
 });
-/** @deprecated Read `stripe.definition.classify` instead. Kept for existing imports. */
-export const STRIPE_VETTED_CATALOG = reviewedCatalog(stripe.definition.classify, 'defineProvider("stripe")');

package/dist/providers/stripe/lib/config.d.ts

@@ -0,0 +1,4 @@
+/** Which Stripe environment a secret or restricted key reaches. */
+export type StripeMode = "production" | "sandbox";
+/** Stripe's main REST origin. The PDF origin is confined separately. */
+export declare const STRIPE_API_BASE_URL = "https://api.stripe.com";

package/dist/providers/stripe/lib/config.js

@@ -0,0 +1,2 @@
+/** Stripe's main REST origin. The PDF origin is confined separately. */
+export const STRIPE_API_BASE_URL = "https://api.stripe.com";