@zackbart/connecta 0.34.0 → 0.35.0

package/dist/providers/planning-center/safety.js

@@ -0,0 +1,188 @@
+/** Reviewed against the ten pinned public product contracts; see evidence/review.md. */
+import { safe, redact } from "../_shared/rest/value-safety.js";
+export const TABLE = {
+    title: "Planning Center",
+    embeddedUrls: {},
+    fields: {
+        "authenticity_secret": { verdict: "redact", reason: "Webhook HMAC verification key." },
+        "secret": { verdict: "redact", reason: "Services organization credential." },
+        "ical_code": { verdict: "redact", reason: "Private Services calendar-feed access code." },
+        "payload": { verdict: "redact", reason: "Opaque JSON webhook payload can embed stored credentials." },
+        "request_body": { verdict: "redact", reason: "Stored webhook request bytes can contain embedded credentials." },
+        "response_body": {
+            verdict: "redact",
+            reason: "Third-party response bytes are not a reviewed credential-free shape.",
+        },
+        "request_headers": { verdict: "redact", reason: "Stored webhook headers can contain authentication values." },
+        "response_headers": { verdict: "redact", reason: "Third-party headers can carry cookies and credentials." },
+        "file_download_url": { verdict: "redact", reason: "A vendor-minted private file download can grant access." },
+        signature: { verdict: "keep", reason: "Services Person email signature text, not a cryptographic signing value." },
+        alternate_keys: { verdict: "keep", reason: "Musical keys for a song arrangement." },
+    },
+    resources: {
+        key: "type",
+        rules: {
+            Attachment: {
+                reason: "Attachment download and thumbnail addresses can grant file access.",
+                paths: ["attributes.url", "attributes.thumbnail_url"],
+            },
+            AttachmentActivity: {
+                reason: "Activity can copy a private attachment address.",
+                paths: ["attributes.attachment_url"],
+            },
+            SongbookStatus: { reason: "An export download address can grant access.", paths: ["attributes.url"] },
+        },
+    },
+    operations: {
+        "GET /api/v2/personal_access_tokens": safe("Token inventory returns names, ids, dates and revocation metadata, never the token value.", ["data[].attributes.last_used_on"]),
+        "GET /api/v2/personal_access_tokens/{personal_access_token_id}": safe("Token inventory returns names, ids, dates and revocation metadata, never the token value.", ["data.attributes.last_used_on"]),
+        "GET /api/v2/personal_access_tokens/{personal_access_token_id}/person": safe("Token inventory returns names, ids, dates and revocation metadata, never the token value."),
+        "GET /api/v2/personal_access_tokens/{personal_access_token_id}/person/{person_id}": safe("Token inventory returns names, ids, dates and revocation metadata, never the token value."),
+        "POST /api/v2/personal_access_tokens/{personal_access_token_id}/revoke": safe("Token inventory returns names, ids, dates and revocation metadata, never the token value."),
+        "POST /groups/v2/groups/{group_id}/assign_campuses": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/me": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "POST /services/v2/media/{media_id}/assign_tags": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/people": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/people/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "POST /services/v2/people/{person_id}/assign_tags": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/people/{person_id}/person_team_position_assignments": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/person_team_position_assignments/{person_team_position_assignment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/people/{person_id}/person_team_position_assignments/{person_team_position_assignment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/plan_people": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/plan_people/{plan_person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/people/{person_id}/plan_people/{plan_person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/plan_people/{plan_person_id}/person": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/plan_people/{plan_person_id}/person/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/people/{person_id}/plan_people/{plan_person_id}/person/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/plan_people/{plan_person_id}/team": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/plan_people/{plan_person_id}/team/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/schedules/{schedule_id}/respond_to": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/schedules/{schedule_id}/respond_to/{respond_to_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/people/{person_id}/schedules/{schedule_id}/respond_to/{respond_to_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/schedules/{schedule_id}/team": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/schedules/{schedule_id}/team/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/team_leaders": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/team_leaders/{team_leader_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/team_leaders/{team_leader_id}/people": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/team_leaders/{team_leader_id}/people/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/people/{person_id}/team_leaders/{team_leader_id}/people/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/team_leaders/{team_leader_id}/team": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/people/{person_id}/team_leaders/{team_leader_id}/team/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/plans": redact("Stored credentials and opaque delivery headers stay withheld.", [
+            "data[].attributes.secret",
+        ]),
+        "GET /services/v2/plans/{plan_id}": redact("Stored credentials and opaque delivery headers stay withheld.", [
+            "data.attributes.secret",
+        ]),
+        "GET /services/v2/series/{series_id}/plans/{plan_id}/live/{live_id}/controller": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/series/{series_id}/plans/{plan_id}/live/{live_id}/controller/{controller_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/series/{series_id}/plans/{plan_id}/live/{live_id}/controller/{controller_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/series/{series_id}/plans/{plan_id}/live/{live_id}/items": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/series/{series_id}/plans/{plan_id}/live/{live_id}/items/{item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "PATCH /services/v2/series/{series_id}/plans/{plan_id}/live/{live_id}/items/{item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/series/{series_id}/plans/{plan_id}/needed_positions/{needed_position_id}/team": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/series/{series_id}/plans/{plan_id}/needed_positions/{needed_position_id}/team/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/items": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "POST /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/items": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/items/{item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/items/{item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/team_members": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "POST /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/team_members": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/team_members/{team_member_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plan_templates/{plan_template_id}/team_members/{team_member_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plan_times/{plan_time_id}/split_team_rehearsal_assignments/{split_team_rehearsal_assignment_id}/team": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plan_times/{plan_time_id}/split_team_rehearsal_assignments/{split_team_rehearsal_assignment_id}/team/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/items": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "POST /services/v2/service_types/{service_type_id}/plans/{plan_id}/items": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/arrangement": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].links.keys", "included[].attributes.alternate_keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/arrangement/{arrangement_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/arrangement/{arrangement_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/key": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.alternate_keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/key/{key_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.alternate_keys"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/key/{key_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.alternate_keys"]),
+        "DELETE /services/v2/service_types/{service_type_id}/plans/{plan_id}/items/{item_id}/key/{key_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/live": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].attributes.signature", "included[].links.keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/live/{live_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].attributes.signature", "included[].links.keys"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plans/{plan_id}/live/{live_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].attributes.signature", "included[].links.keys"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/needed_positions": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "POST /services/v2/service_types/{service_type_id}/plans/{plan_id}/needed_positions": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/needed_positions/{needed_position_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plans/{plan_id}/needed_positions/{needed_position_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/signup_teams": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/signup_teams/{signup_team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/team_members": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "POST /services/v2/service_types/{service_type_id}/plans/{plan_id}/team_members": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/plans/{plan_id}/team_members/{team_member_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/service_types/{service_type_id}/plans/{plan_id}/team_members/{team_member_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "POST /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}/person": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}/person/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}/person/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}/team_position": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/person_team_position_assignments/{person_team_position_assignment_id}/team_position/{team_position_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/team": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/team_positions/{team_position_id}/team/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/teams": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "POST /services/v2/service_types/{service_type_id}/teams": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/service_types/{service_type_id}/teams/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/songs/{song_id}/arrangements": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].links.keys", "included[].attributes.alternate_keys"]),
+        "POST /services/v2/songs/{song_id}/arrangements": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "GET /services/v2/songs/{song_id}/arrangements/{arrangement_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "PATCH /services/v2/songs/{song_id}/arrangements/{arrangement_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "POST /services/v2/songs/{song_id}/arrangements/{arrangement_id}/assign_tags": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.alternate_keys"]),
+        "POST /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.alternate_keys"]),
+        "GET /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.alternate_keys"]),
+        "PATCH /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.alternate_keys"]),
+        "DELETE /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}/attachments": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "POST /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}/attachments": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}/attachments/{attachment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "PATCH /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}/attachments/{attachment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "DELETE /services/v2/songs/{song_id}/arrangements/{arrangement_id}/keys/{key_id}/attachments/{attachment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "POST /services/v2/songs/{song_id}/assign_tags": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing."),
+        "GET /services/v2/songs/{song_id}/last_scheduled_item": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/songs/{song_id}/last_scheduled_item/{last_scheduled_item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "PATCH /services/v2/songs/{song_id}/last_scheduled_item/{last_scheduled_item_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.alternate_keys", "included[].links.keys"]),
+        "GET /services/v2/songs/{song_id}/unscoped_arrangements": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].links.keys", "included[].attributes.alternate_keys"]),
+        "GET /services/v2/songs/{song_id}/unscoped_arrangements/{unscoped_arrangement_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "PATCH /services/v2/songs/{song_id}/unscoped_arrangements/{unscoped_arrangement_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.links.keys", "included[].attributes.alternate_keys"]),
+        "GET /services/v2/teams": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "POST /services/v2/teams": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/people": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data[].attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/people/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "PATCH /services/v2/teams/{team_id}/people/{person_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["data.attributes.signature", "included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/person_team_position_assignments": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/person_team_position_assignments/{person_team_position_assignment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "PATCH /services/v2/teams/{team_id}/person_team_position_assignments/{person_team_position_assignment_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/team_leaders": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/team_leaders/{team_leader_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/team_positions": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /services/v2/teams/{team_id}/team_positions/{team_position_id}": safe("Services signatures are email text and keys are musical notation; assign actions are relationship changes, not signing.", ["included[].attributes.signature"]),
+        "GET /webhooks/v2/available_events": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+        "GET /webhooks/v2/webhook_subscriptions": redact("Stored credentials and opaque delivery headers stay withheld.", ["data[].attributes.authenticity_secret"], ["data[].links.rotate_secret"]),
+        "POST /webhooks/v2/webhook_subscriptions": redact("Stored credentials and opaque delivery headers stay withheld.", ["data.attributes.authenticity_secret"], ["data.links.rotate_secret"]),
+        "GET /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}": redact("Stored credentials and opaque delivery headers stay withheld.", ["data.attributes.authenticity_secret"], ["data.links.rotate_secret"]),
+        "PATCH /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}": redact("Stored credentials and opaque delivery headers stay withheld.", ["data.attributes.authenticity_secret"], ["data.links.rotate_secret"]),
+        "DELETE /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+        "GET /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/events": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+        "GET /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/events/{event_id}": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+        "GET /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/events/{event_id}/deliveries": redact("Stored credentials and opaque delivery headers stay withheld.", ["data[].attributes.request_headers", "data[].attributes.response_headers"]),
+        "GET /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/events/{event_id}/deliveries/{delivery_id}": redact("Stored credentials and opaque delivery headers stay withheld.", [
+            "data.attributes.request_headers",
+            "data.attributes.response_headers",
+        ]),
+        "POST /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/events/{event_id}/ignore": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+        "POST /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/events/{event_id}/redeliver": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+        "POST /webhooks/v2/webhook_subscriptions/{webhook_subscription_id}/rotate_secret": safe("Webhook event names and delivery status are metadata; opaque payloads and headers are withheld globally."),
+    },
+};

package/dist/providers/planning-center/skill.generated.js

@@ -1,30 +1,5 @@
 // Generated by scripts/generate-providers.mjs; do not edit.
 export const skill = {
-    "content": "# Planning Center usage\n\nPlanning Center Online church management — People, Services, Groups, Check-Ins, Calendar, Registrations, Giving, Publishing, Webhooks.\n\n## Identity first\n\n- A person id is the join key across every product: the id `search_people` returns is the person id (`personId` argument, `person_id` field) for Services schedules, Groups memberships, Giving donations, and Check-Ins. Resolve ids with list tools; never guess one.\n- A person id that used to resolve and now answers `not_found` was most likely merged. Read `/people/v2/person_mergers` with `where[person_to_remove_id]` and follow `person_to_keep_id`.\n- `get_me` names the user this token acts as. Every read and write runs with that user's permissions, product by product; a `provider_permission_denied` means an administrator must grant that user access to the product or record.\n\n## Results and paging\n\n- Records keep Planning Center's own snake_case attribute names; a relationship appears as `<relationship>_id`. Pass `raw: true` for the untouched JSON:API resources and `included`; `get_me` and `list_webhook_subscriptions` have no raw mode.\n- Lists page by offset: `perPage` up to 100, then pass `page.nextOffset` back as `offset` while `page.hasMore` is true. `page.totalCount` answers \"how many\" without paging — request `perPage: 1`.\n- A bare date in a date filter is the organization's local day; pass a full timestamp for exact bounds. Name filters are exact; end one with `%` for a prefix match.\n- `get_plan` fetches the plan, its items, and its team in one call and sets `itemsTruncated`/`teamMembersTruncated` past 100 rows; page the rest with `pco_api_get`.\n\n## What each product lets the API write\n\n- People: full read/write. `update_person` with `status: inactive` archives reversibly; a DELETE is permanent and only reachable through `pco_api_mutate`. `run_list` can fire list automations.\n- Services: full read/write. A plan's dates come from its plan times. Scheduling needs a team.\n- Groups: memberships and group settings are writable; groups cannot be created, and events and attendance are read-only.\n- Check-Ins and Registrations: read-only. Nobody can be checked in or registered through the API.\n- Calendar: events, instances, and times are read-only; tags, resources, rooms, and folders are writable through `pco_api_mutate`.\n- Giving: the named tools only read, amounts in integer cents. Creating or editing donations, refunds, and committing a batch move money and go through `pco_api_mutate`.\n- Publishing and the `api` product (organization, OAuth applications, personal access tokens) have no named tools; use the hatches.\n\n## The hatches\n\n- `pco_api_get` reaches any GET; `pco_api_mutate` any POST, PATCH, or DELETE, always approval-gated. Paths start `/<app>/v2`, exactly as Planning Center documents them; the connector owns host, auth, content type, and the `X-PCO-API-Version` header.\n- Bodies are JSON:API documents: `{\"data\":{\"type\":\"Email\",\"attributes\":{...}}}`. `null` clears an attribute; an omitted key is left alone.\n- Each product is pinned to a reviewed API version: people 2026-06-04, services 2018-11-01, groups 2023-07-10, check-ins 2025-05-28, calendar 2026-06-22, registrations 2025-05-01, giving 2019-10-18, publishing 2024-03-25, webhooks 2022-10-20, api 2026-09-24. Pass `version` only for an endpoint those versions lack.\n- Query parameters are name/value pairs with literal brackets: `where[status]`, `include`, `order`, `filter`, `fields[Person]`. Every list response's `meta` names the `can_query_by`, `can_order_by`, and `can_include` values for that endpoint; an unknown `where` key is ignored rather than refused.\n- File uploads go to a separate host (upload.planningcenteronline.com), which this connection does not reach.\n\n## Rate limits\n\nPlanning Center allows 100 requests per 20 seconds per user, shared by every integration running as that user. This connection admits 100 calls per 20 seconds, five at a time, per runtime — an approximation, not a guarantee. A `rate_limited` failure carries Planning Center's wait. Filter server-side and use `totalCount` rather than paging to count.\n",
-    "instructionsHeading": "Organization instructions",
-    "fragments": {
-        "heading": "# Planning Center usage\n\nPlanning Center Online church management — ",
-        "purpose": " — for: ",
-        "identity": "\n\n## Identity first\n\n- A person id is the join key across every product: the id `search_people` returns is the person id (`personId` argument, `person_id` field) for ",
-        "conventions": ". Resolve ids with list tools; never guess one.\n- A person id that used to resolve and now answers `not_found` was most likely merged. Read `/people/v2/person_mergers` with `where[person_to_remove_id]` and follow `person_to_keep_id`.\n- `get_me` names the user this token acts as. Every read and write runs with that user's permissions, product by product; a `provider_permission_denied` means an administrator must grant that user access to the product or record.\n\n## Results and paging\n\n- Records keep Planning Center's own snake_case attribute names; a relationship appears as `<relationship>_id`. Pass `raw: true` for the untouched JSON:API resources and `included`; `get_me` and `list_webhook_subscriptions` have no raw mode.\n- Lists page by offset: `perPage` up to 100, then pass `page.nextOffset` back as `offset` while `page.hasMore` is true. `page.totalCount` answers \"how many\" without paging — request `perPage: 1`.\n- A bare date in a date filter is the organization's local day; pass a full timestamp for exact bounds. Name filters are exact; end one with `%` for a prefix match.\n",
-        "plans": "- `get_plan` fetches the plan, its items, and its team in one call and sets `itemsTruncated`/`teamMembersTruncated` past 100 rows; page the rest with `pco_api_get`.\n",
-        "writes": "\n## What each product lets the API write\n\n",
-        "people": "- People: full read/write. `update_person` with `status: inactive` archives reversibly; a DELETE is permanent and only reachable through `pco_api_mutate`. `run_list` can fire list automations.\n",
-        "people_without_lists": "- People: full read/write, except lists. `update_person` with `status: inactive` archives reversibly; a DELETE is permanent and only reachable through `pco_api_mutate`.\n",
-        "services": "- Services: full read/write. A plan's dates come from its plan times. Scheduling needs a team.\n",
-        "groups": "- Groups: memberships and group settings are writable; groups cannot be created, and events and attendance are read-only.\n",
-        "check_ins_registrations": "- Check-Ins and Registrations: read-only. Nobody can be checked in or registered through the API.\n",
-        "check_ins": "- Check-Ins: read-only. Nobody can be checked in through the API.\n",
-        "registrations": "- Registrations: read-only. Nobody can be registered through the API.\n",
-        "calendar": "- Calendar: events, instances, and times are read-only; tags, resources, rooms, and folders are writable through `pco_api_mutate`.\n",
-        "giving": "- Giving: the named tools only read, amounts in integer cents. Creating or editing donations, refunds, and committing a batch move money and go through `pco_api_mutate`.\n",
-        "publishing_api": "- Publishing and the `api` product (organization, OAuth applications, personal access tokens) have no named tools; use the hatches.\n",
-        "publishing": "- Publishing has no named tools; use the hatches.\n",
-        "api": "- The `api` product (organization, OAuth applications, personal access tokens) has no named tools; use the hatches.\n",
-        "hatches": "\n## The hatches\n\n- `pco_api_get` reaches any GET; `pco_api_mutate` any POST, PATCH, or DELETE, always approval-gated. Paths start `/<app>/v2`, exactly as Planning Center documents them; the connector owns host, auth, content type, and the `X-PCO-API-Version` header.\n- Bodies are JSON:API documents: `{\"data\":{\"type\":\"Email\",\"attributes\":{...}}}`. `null` clears an attribute; an omitted key is left alone.\n- Each product is pinned to a reviewed API version: ",
-        "pins": ". Pass `version` only for an endpoint those versions lack.\n- Query parameters are name/value pairs with literal brackets: `where[status]`, `include`, `order`, `filter`, `fields[Person]`. Every list response's `meta` names the `can_query_by`, `can_order_by`, and `can_include` values for that endpoint; an unknown `where` key is ignored rather than refused.\n- File uploads go to a separate host (upload.planningcenteronline.com), which this connection does not reach.\n",
-        "disabled": "- This deployment disables some products, and the hatches refuse their paths before sending. While any product is disabled they also refuse People lists, list results, rules, and conditions, by path or `include`, because a list's conditions can draw on any product; webhook event and delivery payloads; and any change to an existing webhook subscription, whose id does not name its product. A new subscription must name a reachable product's event.\n",
-        "limits": "\n## Rate limits\n\nPlanning Center allows 100 requests per 20 seconds per user, shared by every integration running as that user. This connection admits 100 calls per 20 seconds, five at a time, per runtime — an approximation, not a guarantee. A `rate_limited` failure carries Planning Center's wait. Filter server-side and use `totalCount` rather than paging to count.\n",
-        "published": "# Planning Center usage\n\nPlanning Center Online church management — People, Services, Groups, Check-Ins, Calendar, Registrations, Giving, Publishing, Webhooks.\n\n## Identity first\n\n- A person id is the join key across every product: the id `search_people` returns is the person id (`personId` argument, `person_id` field) for Services schedules, Groups memberships, Giving donations, and Check-Ins. Resolve ids with list tools; never guess one.\n- A person id that used to resolve and now answers `not_found` was most likely merged. Read `/people/v2/person_mergers` with `where[person_to_remove_id]` and follow `person_to_keep_id`.\n- `get_me` names the user this token acts as. Every read and write runs with that user's permissions, product by product; a `provider_permission_denied` means an administrator must grant that user access to the product or record.\n\n## Results and paging\n\n- Records keep Planning Center's own snake_case attribute names; a relationship appears as `<relationship>_id`. Pass `raw: true` for the untouched JSON:API resources and `included`; `get_me` and `list_webhook_subscriptions` have no raw mode.\n- Lists page by offset: `perPage` up to 100, then pass `page.nextOffset` back as `offset` while `page.hasMore` is true. `page.totalCount` answers \"how many\" without paging — request `perPage: 1`.\n- A bare date in a date filter is the organization's local day; pass a full timestamp for exact bounds. Name filters are exact; end one with `%` for a prefix match.\n- `get_plan` fetches the plan, its items, and its team in one call and sets `itemsTruncated`/`teamMembersTruncated` past 100 rows; page the rest with `pco_api_get`.\n\n## What each product lets the API write\n\n- People: full read/write. `update_person` with `status: inactive` archives reversibly; a DELETE is permanent and only reachable through `pco_api_mutate`. `run_list` can fire list automations.\n- Services: full read/write. A plan's dates come from its plan times. Scheduling needs a team.\n- Groups: memberships and group settings are writable; groups cannot be created, and events and attendance are read-only.\n- Check-Ins and Registrations: read-only. Nobody can be checked in or registered through the API.\n- Calendar: events, instances, and times are read-only; tags, resources, rooms, and folders are writable through `pco_api_mutate`.\n- Giving: the named tools only read, amounts in integer cents. Creating or editing donations, refunds, and committing a batch move money and go through `pco_api_mutate`.\n- Publishing and the `api` product (organization, OAuth applications, personal access tokens) have no named tools; use the hatches.\n\n## The hatches\n\n- `pco_api_get` reaches any GET; `pco_api_mutate` any POST, PATCH, or DELETE, always approval-gated. Paths start `/<app>/v2`, exactly as Planning Center documents them; the connector owns host, auth, content type, and the `X-PCO-API-Version` header.\n- Bodies are JSON:API documents: `{\"data\":{\"type\":\"Email\",\"attributes\":{...}}}`. `null` clears an attribute; an omitted key is left alone.\n- Each product is pinned to a reviewed API version: people 2026-06-04, services 2018-11-01, groups 2023-07-10, check-ins 2025-05-28, calendar 2026-06-22, registrations 2025-05-01, giving 2019-10-18, publishing 2024-03-25, webhooks 2022-10-20, api 2026-09-24. Pass `version` only for an endpoint those versions lack.\n- Query parameters are name/value pairs with literal brackets: `where[status]`, `include`, `order`, `filter`, `fields[Person]`. Every list response's `meta` names the `can_query_by`, `can_order_by`, and `can_include` values for that endpoint; an unknown `where` key is ignored rather than refused.\n- File uploads go to a separate host (upload.planningcenteronline.com), which this connection does not reach.\n\n## Rate limits\n\nPlanning Center allows 100 requests per 20 seconds per user, shared by every integration running as that user. This connection admits 100 calls per 20 seconds, five at a time, per runtime — an approximation, not a guarantee. A `rate_limited` failure carries Planning Center's wait. Filter server-side and use `totalCount` rather than paging to count.\n"
-    }
+    "content": "## Identity first\n\nA People person id joins records across products. Resolve people by identity,\nthen join on `person_id`; names can repeat. A membership, scheduled person,\nworkflow card and person each have their own record id.\n\n`get_me` identifies the token's user and the organization's time zone. Bare\ndates mean the organization's local day; use a timestamp with an offset for\nan exact boundary. Name filters are exact unless their value ends in `%`.\n\nAn old person id may have been merged. Read `/people/v2/person_mergers` with\n`where[person_to_remove_id]`, follow `person_to_keep_id`, then read that profile.\nAn empty history does not establish that a person was merged.\n\nReduce pastoral information inside `execute_code` and return aggregates unless\nthe task needs named people. A named projection omits some safe vendor fields;\nread the indexed record when the task needs those fields.\n\n<!-- when: people -->\n## People and follow-up\n\nResolve a person before changing their profile. An omitted attribute leaves\nthe current value alone; `null` clears it. Archiving a person is reversible;\ndeleting a profile is permanent.\n\nWorkflow cards join people to a workflow and its ordered steps. Resolve both\nthe card id and its person id before acting on a card. Snoozing needs a duration;\npromoting a card completes its step, while skipping moves on without completing\nit. A workflow card note and a profile note are different records. Profile note\ncategories can notify their subscribers.\n\nCustom field values need their field-definition records to supply names and\ndata types. Form answers similarly join submissions, values and fields; the\nAPI cannot submit a form on someone's behalf.\n<!-- end -->\n\n<!-- when: lists -->\nSaved People lists are live cross-product queries. Their results are only as\nfresh as their last refresh. Refreshing a list can fire its automations, such\nas adding a person to a workflow, and is a write even when the task is a count.\n<!-- end -->\n\n<!-- when: services -->\n## Services plans and schedules\n\nResolve the service type before finding a dated plan. Plan times define the\nservice dates. `get_plan` combines the plan, order of service and scheduled\nteam; a cut section can be read through its indexed items or team-members path.\nItem durations are seconds, so divide by 60 when reporting minutes.\n\nScheduling needs a team and may need a position. `C` means confirmed, `U`\nunconfirmed and `D` declined. Preparing a notification and sending it are\ndifferent actions. A song item's identity comes from its song and arrangement;\nmusical keys are not credentials. Services cannot upload a file through this\nconnection.\n<!-- end -->\n\n<!-- when: groups -->\n## Groups membership joins\n\nUse a group's membership records to distinguish leaders from members. On this\nAPI version memberships carry no person attributes; `include=person` supplies\nnames, and the related person id supplies contact details and other product\nrecords. The API can change memberships and group settings, but cannot create\na group, create a meeting or record group attendance.\n<!-- end -->\n\n<!-- when: check-ins -->\n## Check-Ins occurrences\n\nAn event is recurring; its event period is a dated occurrence. Period counts\nare the efficient attendance answer. Individual check-ins join a person to a\nperiod, and date filtering uses the period's start, not the check-in's creation\ntime. The API cannot check anyone in or out.\n<!-- end -->\n\n<!-- when: calendar -->\n## Calendar occurrences\n\nEvent instances expand recurrence into occurrences. A booking can return a\n`BookedEvent` stub when the user lacks access to its event. Events, instances\nand times are read-only; tags, resources, rooms and folders have write APIs.\n<!-- end -->\n\n<!-- when: registrations -->\n## Registrations\n\nA signup describes a registration event. Its attendee records join back to\nPeople and distinguish active, waitlisted and canceled attendees. This API\ncannot register someone.\n<!-- end -->\n\n<!-- when: giving -->\n## Giving amounts and donor joins\n\nAmounts are integer cents with an explicit currency. A donation's designations\nallocate it across funds; do not count a donation once per designation. Join\ndonors by person id and funds by fund id. Recurring schedules and the donations\nthey produce are different records. Creating/editing a donation, refunding it\nor committing a batch changes financial records; named giving tools only read.\n<!-- end -->\n\n<!-- when: publishing -->\n## Publishing\n\nEpisodes, channels and resources are available through the indexed API. A public\nChurch Center link and a media resource are different things; use the record\nthe task asks for. Signed download URL generation is refused because the\nprivate link would remain withheld.\n<!-- end -->\n\n<!-- when: webhooks -->\n## Webhooks\n\nA subscription names an event and callback destination. Signing keys, private\ndownload destinations and opaque event/delivery payloads or headers remain\nwithheld. Status and event metadata are available for audits.\nWebhook signing-key rotation is refused: the new credential cannot be returned\nor installed on the receiver through this connection.\n<!-- end -->\n\n<!-- when: api -->\n## Organization API\n\nThe organization API includes application metadata and personal-access-token\ninventory. Inventory records describe tokens; they do not return their values.\nRevoking a token is a write and may interrupt another integration, including\nthis connection if its own token is revoked.\n<!-- end -->\n\n<!-- when: limited -->\n## Product boundary\n\nSome products are unavailable on this connection. People lists and their rules\nare unavailable because they can query another product. Webhook payloads and\nchanges to existing subscriptions are unavailable because their ids do not name\ntheir product. A new subscription must name a reachable product's event.\n\nStored workflow cards, notes, custom fields and form answers remain readable\nwhen reachable: staff or automations may have copied information into them.\nThe connection does not infer the provenance of those stored records.\n<!-- end -->\n\n## Not available\n\nOnly reviewed product versions and indexed operations are callable. File\nuploads use a separate host this connection does not reach. Credentials and\nprivate calendar access codes cannot be recovered through a tool.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `list_person_field_data`, `list_person_notes`, `list_workflow_cards`, `list_workflows`, `pco_api_details`, `pco_api_search`, `search_people`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. For `pco_api_read`, put it in `query[page.param]` or `body[page.param]`, as `page.in` specifies. Keep the original method, path, filters, page size, fields and headers. Paged `list_*` and `search_*` reads take `limit` (default 25, at most 100). The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n<!-- when: services -->\n- **Paging:** For `list_person_schedules`, `list_plans`, `list_service_types`, `list_teams`, pass `page.nextCursor` as the top-level `cursor`.\n<!-- end -->\n<!-- when: groups -->\n- **Paging:** For `list_group_memberships`, `list_groups`, pass `page.nextCursor` as the top-level `cursor`.\n<!-- end -->\n<!-- when: giving -->\n- **Paging:** For `list_donations`, `list_funds`, pass `page.nextCursor` as the top-level `cursor`.\n<!-- end -->\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `pco_api_search` finds this API's operations and reads no account data, `pco_api_details` shows one operation's contract, and `pco_api_read` calls a reviewed read. `pco_api_write` calls a reviewed write; the host may ask the user to confirm it. An operation without a reviewed verdict is refused. 2 operations are refused by design; use `pco_api_details` with the method and path to inspect the original operation summary and its separate refusal. Use details for refused methods outside the read/write call schemas; those methods remain unavailable.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. `not_found` means the record does not exist; this API tells absence from a permission gap. `conflict` means: HTTP 409 for duplicate records in People.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
+    "instructionsHeading": "Organization instructions"
 };