@zackbart/connecta 0.34.1 → 0.36.0

package/dist/providers/stripe/index.js

@@ -1,14 +1,10 @@
-import { skill } from "./skill.generated.js";
-import { apiConnector } from "../../connectors/api-connector.js";
-import { reviewedCatalog } from "../../catalog-drift.js";
 import { keys, optionsOf, variants } from "../../config-schema.js";
-import { defineProvider } from "../../provider.js";
-import { byAuth, hostedOAuth } from "../_shared/rest/dispatch.js";
-import { restTools } from "../_shared/rest/tools.js";
-import { stripeRest } from "./rest.js";
-export { STRIPE_API_BASE_URL } from "./rest.js";
-/** Stripe publishes one hosted MCP endpoint for every account and mode. */
-export const STRIPE_MCP_ENDPOINT = "https://mcp.stripe.com/";
+import { defineApiProvider } from "../../http/provider.js";
+import { authenticate, connectedAccount, MAX_RESPONSE_BYTES, READ_CAP_MS, MODE_COPY, probe, safety, stripeErrors, StripeApi, stripeIndex, stripeBinding, STRIPE_PAGES, STRIPE_VERDICTS, } from "./api.js";
+import { stripeTools } from "./tools.js";
+import { skill } from "./skill.generated.js";
+import { STRIPE_API_BASE_URL } from "./lib/config.js";
+export { STRIPE_API_BASE_URL } from "./lib/config.js";
 /**
  * Stripe documents no MCP-specific limit, so these transcribe the account limit
  * every request spends: 100 requests per second live, 25 in a sandbox. OAuth
@@ -39,221 +35,89 @@ const STRIPE_ADMISSION = {
         ],
     },
 };
-/**
- * Re-reviewed for #343 against the hosted OAuth catalog and official MCP and
- * analytics docs on 2026-10-19 (#703). Digests cover the complete describe
- * schemas captured in fixtures.ts, not inferred result shapes. The documented
- * get_stripe_account_info remains reviewed without an uncaptured digest.
- * This review applies only to hosted OAuth; REST annotates its own tools.
- */
-const STRIPE_CLASSIFICATION = {
-    "tools": {
-        "stripe_api_search": {
-            "verdict": "read",
-            "reason": "Searches API method contracts and object records; it does not invoke mutating methods.",
-            "schemaDigest": "sha256:1fdb44c12347b21b3896250e2a3c88763b54f4cdfe4fff27f7067d004e3097e4",
-        },
-        "stripe_api_details": {
-            "verdict": "read",
-            "reason": "Reads the parameter contract for an API method; it does not execute that method.",
-            "schemaDigest": "sha256:a80bf5b685eba9b0cb91df7fa36afac04bcb97a7dcadb3c07bd22f0a4fcc7771",
-        },
-        "stripe_api_read": {
-            "verdict": "read",
-            "reason": "The vendor restricts this generic tool to HTTP GET; all mutating methods use stripe_api_write.",
-            "schemaDigest": "sha256:90b15c317384e244a19472d2bffcc0da73a1174f16fd89a7562134a3da5d0d53",
-        },
-        "get_stripe_account_info": {
-            "verdict": "read",
-            "reason": "Reads metadata for the selected Stripe account; still documented although absent from the observed hosted catalog.",
-        },
-        "get_balance_summary": {
-            "verdict": "read",
-            "reason": "Retrieves Stripe balance summary information without changing vendor state.",
-            "schemaDigest": "sha256:857973344e59ca7199bc65e62d5e7198332542339f387b7363626ad752437a11",
-        },
-        "list_available_accounts_or_orgs": {
-            "verdict": "read",
-            "reason": "Lists accessible accounts with stripe_context and livemode without changing vendor state; verified in the hosted catalog despite omission from public docs.",
-            "schemaDigest": "sha256:5ed608b204ddf3e117f419a0443db5bdc28783133476e953338f525489dd5626",
-        },
-        "manage_stripe_accounts": {
-            "verdict": "read",
-            "reason": "Returns a Dashboard reconsent URL; the tool itself does not add accounts, remove accounts, or change permissions.",
-            "schemaDigest": "sha256:abb66368ed8d461b1106eb2257235a5d836f76906674c44be9ac816b6d509cd4",
-        },
-        "search_stripe_documentation": {
-            "verdict": "read",
-            "reason": "Searches Stripe reference documentation without accessing payment mutations.",
-            "schemaDigest": "sha256:18b5d9f565d28bc4786ba1f657a2c291c43f4c9137e4c5ca5fbbf5dd114eae67",
-        },
-        "stripe_api_write": {
-            "verdict": "destructive",
-            "reason": "Can dispatch POST, PATCH, PUT, or DELETE across the Stripe API, including edits and cancellations.",
-            "schemaDigest": "sha256:61d1bdc4e6862989c46250bdbea3adfc6169c24dbf6e8b20fc4251108da5c4e7",
-        },
-        "convert_currency": {
-            "verdict": "destructive",
-            "reason": "Converts existing funds between currencies in a Financial Account, changing balances.",
-            "schemaDigest": "sha256:5a861f71e41b6c680452a5817d7c67c4a708796a4e0dcf7adbd8c4f89c6c99f8",
-        },
-        "send_money": {
-            "verdict": "destructive",
-            "reason": "Sends funds to a third-party recipient through an outbound payment or payout link.",
-            "schemaDigest": "sha256:5415856ee7e5073f3e6ea3280c5f17289449ded3dbb92d4a4ab9b52af1ed3049",
-        },
-        "setup_recipient": {
-            "verdict": "destructive",
-            "reason": "Creates a recipient account for outbound payments; retain the upstream destructive hint rather than treating setup as a read.",
-            "schemaDigest": "sha256:75e0bb1003a3a74badab81d4fb76f4a8481b186f7755b0a7ee73f1623b163457",
-        },
-        "transfer_money": {
-            "verdict": "destructive",
-            "reason": "Moves existing funds between Stripe balances or Financial Accounts.",
-            "schemaDigest": "sha256:e75be95113883df72577127387cf2a11fae51d2cc01df80a085f4b276bd362d8",
-        },
-        "atlas_company_formation": {
-            "verdict": "destructive",
-            "reason": "Creates or advances company formation state; list and retrieve actions share this mutating tool boundary.",
-            "schemaDigest": "sha256:648e1faca5f5ac3dc7018890a336081135842d9418ee6df94dcbd81b7d861694",
-        },
-        "stripe_implementation_planner": {
-            "verdict": "write",
-            "reason": "Creates or continues provider-side planning state.",
-            "schemaDigest": "sha256:284dce4e701ab4cb9b9c9fbf61104cae2eab0b9eef1b986f128fc1bbc42ef185",
-        },
-        "stripe_analytics": {
-            "verdict": "write",
-            "reason": "The hosted schema includes execute_query_run and execute_query_template alongside retrieval; asynchronous query-run creation makes the whole tool a write even though it analyzes existing data.",
-            "schemaDigest": "sha256:c6b22ff19b5fe2d359b20f99b67591ba74cf504870123711579556b6937916b9",
-        },
-        "send_stripe_feedback": {
-            "verdict": "write",
-            "reason": "Submits feedback to Stripe, creating provider-side state; replaces send_stripe_mcp_feedback.",
-            "schemaDigest": "sha256:4ac352f04a8d974bdb56503f4826e7fbc19458e0f0d0c369f17e82d5fb6a7a86",
-        },
-    },
-};
-function instructionsSection(instructions) {
-    const text = instructions?.trim();
-    return text ? `\n## ${skill.instructionsHeading}\n\n${text}\n` : "";
-}
-function oauthUsageGuide(purpose, instructions) {
-    const { oauth, shared, oauth_limits } = skill.fragments;
-    return `# Stripe usage
-
-Scope: live and sandbox accounts. Connector purpose: ${purpose}${oauth}${shared}${oauth_limits}
-${instructionsSection(instructions)}`;
-}
-const MODE_COPY = {
-    production: {
-        title: "Stripe (production)",
-        blurb: "production — live money and real customers",
-        warning: "This is a PRODUCTION Stripe connection. Every write moves real money against real customers, and a refund cannot be undone. If a request could plausibly be a rehearsal, route it to a sandbox connector instead.",
-        rate: "100 requests per second",
-    },
-    sandbox: {
-        title: "Stripe (sandbox)",
-        blurb: "sandbox — test data, no real money",
-        warning: "This is a SANDBOX Stripe connection. Nothing here is real money and none of these objects exist in production, so never answer a question about live revenue, payouts, or a named customer from this connector.",
-        rate: "25 requests per second",
-    },
-};
-function keyUsageGuide(mode, purpose, connectedAccount, instructions) {
-    const copy = MODE_COPY[mode];
-    const { key, shared, key_limits, key_tail } = skill.fragments;
-    const connect = connectedAccount
-        ? `\n\nConnected account: \`${connectedAccount}\`. Every call acts as this Connect account; the platform account's own objects are out of reach here.`
-        : "";
-    return `# Stripe usage
-
-Mode: ${mode}. Connector purpose: ${purpose}
-
-${copy.warning}${connect}${key}${shared}${key_limits}${copy.rate}${key_tail}
-${instructionsSection(instructions)}`;
-}
 const COMMON = keys("title", "authScope", "purpose", "instructions", "maxResultBytes", "readOnly");
 /** The closed options stripe() accepts, selected by `auth.type`; see `assertKnownOptions`. */
 const STRIPE_OPTIONS = variants(["auth", "type"], {
     // The never-typed keys stay out of the shape, so the walk refuses them by name.
-    oauth: optionsOf()({
-        ...COMMON,
-        auth: optionsOf()(keys("type")),
-    }).shape,
+    oauth: { ...COMMON, auth: optionsOf()(keys("type")) },
     apiKey: optionsOf()({
         ...COMMON,
         ...keys("mode", "connectedAccount"),
         auth: optionsOf()(keys("type")),
     }).shape,
-});
-function stripeOAuth(id, options, provider) {
-    return hostedOAuth(id, provider, {
-        url: STRIPE_MCP_ENDPOINT,
-        title: options.title ?? "Stripe",
-        description: `Stripe payments (live and sandbox accounts) — ${options.purpose}`,
-        callAdmission: STRIPE_ADMISSION.sandbox,
-        usageGuide: {
-            content: oauthUsageGuide(options.purpose, options.instructions),
-            // Explicit rather than derived: OAuth must lead with its account-scoped selector pair.
-            summary: "Live and sandbox Stripe accounts. List accounts; carry the returned stripe_context and livemode before acting.",
-        },
-    });
-}
-function stripeApiKey(id, options, provider) {
-    const mode = options.mode;
-    if (mode !== "production" && mode !== "sandbox") {
-        throw new Error(`stripe("${id}") requires mode "production" or "sandbox" with apiKey auth.`);
-    }
-    let connectedAccount;
-    if (options.connectedAccount !== undefined) {
-        connectedAccount = typeof options.connectedAccount === "string" ? options.connectedAccount.trim() : "";
-        if (!/^acct_[A-Za-z0-9]+$/.test(connectedAccount)) {
-            throw new Error(`stripe("${id}") connectedAccount must be a Stripe account id ("acct_...").`);
-        }
-    }
-    const copy = MODE_COPY[mode];
-    const live = mode === "production" ? "live" : "test";
-    const rest = stripeRest(mode, connectedAccount);
-    return apiConnector(id, {
-        ...provider.connectorOptions,
-        title: options.title ?? copy.title,
-        description: `Stripe payments (${copy.blurb}) — ${options.purpose}`,
-        credential: {
-            label: `Stripe ${live}-mode secret or restricted key`,
-            description: `A ${live}-mode secret (sk_${live}_…) or restricted (rk_${live}_…) key; prefer a restricted key with only the permissions this connector needs. It is sent only to api.stripe.com and files.stripe.com, stored encrypted, and never displayed.`,
-            placeholder: `rk_${live}_…`,
-        },
-        testCredential: rest.testCredential,
-        callAdmission: STRIPE_ADMISSION[mode],
-        usageGuide: {
-            content: keyUsageGuide(mode, options.purpose, connectedAccount, options.instructions),
-            // Explicit rather than derived: a key connector must lead with its one mode.
-            summary: mode === "production"
-                ? "PRODUCTION: real money. One live-mode key over REST; search operations, read details, then read or write."
-                : "Sandbox: test data only. One test-mode key over REST; search operations, read details, then read or write.",
-        },
-        tools: [...restTools(rest.vendor), ...rest.tools],
-    });
+}, undefined, ["oauth"]);
+function usageGuide(options) {
+    const copy = MODE_COPY[options.mode];
+    const account = connectedAccount(options);
+    return {
+        heading: "Stripe usage",
+        summary: options.mode === "production"
+            ? "PRODUCTION: real money. One configured live-mode key over REST; resolve ids before acting."
+            : "Sandbox: test data only. One configured test-mode key over REST; resolve ids before acting.",
+        context: [
+            `Mode: ${options.mode}. Connector purpose: ${options.purpose}`,
+            copy.warning,
+            "This connection's key is already configured and reaches exactly one Stripe account in this mode; there is no account selection or sign-in step.",
+            ...(account
+                ? [
+                    `Connected account: ${account}. Every call acts as this Connect account; the platform account's own objects are out of reach here.`,
+                ]
+                : []),
+            ...(options.readOnly === true ? ["This connection is read-only: every write is refused."] : []),
+        ],
+        required: true,
+    };
 }
-/**
- * A maintained Stripe connection. `auth` selects the implementation: OAuth
- * reaches Stripe's hosted MCP server; an API key reaches Connecta's REST
- * connector to `api.stripe.com`.
- */
-export const stripe = defineProvider({
+export const stripe = defineApiProvider({
     name: "stripe",
     title: "Stripe",
-    kind: "dual",
     readme: "Stripe",
     bundle: {
-        "baselineGzip": 232089,
-        "maxGzip": 292089,
-        "note": "./providers/stripe remeasures at 232,089 B gzip (#801), from 170,771 B on main: auth now selects the implementation, so the entry carries the hosted MCP client and Connecta's REST connector (api(), the schema validator, guarded transport, the shared REST module) plus the pinned Stripe operation index (638 operations; request details to depth 2, without descriptions or enums over 50 values; 37,918 B gzip as source). Details were shrunk before the cap moved: the first full index measured 81 KB gzip. The cap uses the existing baseline + 60,000 B policy.",
+        baselineGzip: 379663,
+        note: "./providers/stripe measures 379,663 B gzip standalone in F3 (#703), Node 22 CI static at 9420933711af5e42bf9d134d1b73bed114a48fa0 (run 39997464724, Run pnpm run check:build). This entry includes the shared Effect provider kit, paid once per deployment; standalone provider sizes are not additive. Provider entries are reported, not capped (#899).",
     },
     skill,
     options: STRIPE_OPTIONS,
-    classify: STRIPE_CLASSIFICATION,
-    create: byAuth({ oauth: stripeOAuth, apiKey: stripeApiKey }),
+    vendor: StripeApi,
+    baseUrl: (options) => {
+        connectedAccount(options);
+        return STRIPE_API_BASE_URL;
+    },
+    displayTitle: (options) => MODE_COPY[options.mode].title,
+    description: (options) => `Stripe payments (${MODE_COPY[options.mode].blurb}) — ${options.purpose}`,
+    maxResponseBytes: MAX_RESPONSE_BYTES,
+    idempotencyKey: true,
+    timeoutMs: READ_CAP_MS,
+    headers: { "Stripe-Version": stripeIndex.version },
+    defaultCallAdmission: (options) => STRIPE_ADMISSION[options.mode],
+    credential: (options) => {
+        const live = options.mode === "production" ? "live" : "test";
+        return {
+            label: `Stripe ${live}-mode secret or restricted key`,
+            description: `A ${live}-mode secret (sk_${live}_…) or restricted (rk_${live}_…) key; prefer a restricted key with only the permissions this connector needs. It is sent only to api.stripe.com and files.stripe.com, stored encrypted, and never displayed.`,
+            placeholder: `rk_${live}_…`,
+        };
+    },
+    authenticate,
+    safety,
+    errors: stripeErrors,
+    probe,
+    guide: usageGuide,
+    hatch: {
+        name: "stripe",
+        title: "Stripe",
+        index: stripeIndex,
+        verdicts: STRIPE_VERDICTS,
+        named: { "GET /v1/account": "get_stripe_account_info", "GET /v1/balance": "get_balance_summary" },
+        pathExample: "/v1/customers/cus_123",
+        pages: STRIPE_PAGES,
+        pageCursor: "argument",
+        binding: stripeBinding,
+        idempotency: { header: "Idempotency-Key", methods: ["POST"] },
+        notes: () => ({
+            read: "Pass page.nextCursor as cursor; starting_after or ending_before record-id anchors are allowed only on the first request, without cursor. v1 parameters use bracketed form encoding; v2 bodies are JSON. Quote PDFs use the confined files origin.",
+            write: "POST sends an Idempotency-Key; DELETE sends none. v1 bodies are form-encoded, including nested fields; v2 bodies are JSON. Upload files in the Stripe Dashboard.",
+        }),
+    },
+    tools: stripeTools,
 });
-/** @deprecated Read `stripe.definition.classify` instead. Kept for existing imports. */
-export const STRIPE_VETTED_CATALOG = reviewedCatalog(stripe.definition.classify, 'defineProvider("stripe")');

package/dist/providers/stripe/lib/config.d.ts

@@ -0,0 +1,4 @@
+/** Which Stripe environment a secret or restricted key reaches. */
+export type StripeMode = "production" | "sandbox";
+/** Stripe's main REST origin. The PDF origin is confined separately. */
+export declare const STRIPE_API_BASE_URL = "https://api.stripe.com";

package/dist/providers/stripe/lib/config.js

@@ -0,0 +1,2 @@
+/** Stripe's main REST origin. The PDF origin is confined separately. */
+export const STRIPE_API_BASE_URL = "https://api.stripe.com";