@zackbart/connecta 0.35.0 → 0.36.0

package/dist/connectors/api-connector.d.ts

@@ -42,6 +42,10 @@ export interface ApiOAuthConfig {
     authorizationEndpoint: string;
     /** Where codes are exchanged and refresh tokens redeemed. Absolute https URL. */
     tokenEndpoint: string;
+    /** Trusted RFC 7009 endpoint; disconnect removes the local grant then attempts revocation once. */
+    revocationEndpoint?: string;
+    /** Revocation body encoding, default form. JSON omits the RFC 7009 token_type_hint. */
+    revocationRequestFormat?: "form" | "json";
     /** The client id the provider issued for this deployment. */
     clientId: string;
     /**
@@ -64,6 +68,15 @@ export interface ApiOAuthConfig {
      * `access_type`. The grant's own parameters cannot be overridden.
      */
     authorizationParams?: Record<string, string>;
+    /**
+     * Fixed provider callback parameters, such as a configured company id.
+     * After pending-state verification, each must occur exactly once with this
+     * exact value, before issuer validation or code exchange. OAuth response
+     * fields (code, state, iss, error, error_description, error_uri) are reserved.
+     * Names must be nonempty ASCII letters, digits, dots, underscores or hyphens;
+     * values must be nonempty strings. Values are never described or returned.
+     */
+    expectedCallbackParameters?: Readonly<Record<string, string>>;
     /**
      * Headers added to every token-endpoint request — the code exchange and
      * each refresh — for a provider whose token endpoint demands its own
@@ -199,6 +212,7 @@ export declare const API_OPTIONS: import("../config-schema.js").Field<unknown, u
         oauth: import("../config-schema.js").Field<unknown, unknown, true> & {
             readonly shape: {
                 authorizationParams: import("../config-schema.js").Field<Record<string, string>, Readonly<Record<string, string>> | undefined, true>;
+                expectedCallbackParameters: import("../config-schema.js").Field<Record<string, string>, Readonly<Record<string, string>> | undefined, true>;
                 tokenRequestHeaders: import("../config-schema.js").Field<Record<string, string>, Readonly<Record<string, string>> | undefined, true>;
                 scope: import("../config-schema.js").Field<unknown, unknown, true>;
                 authorizationEndpoint: import("../config-schema.js").Field<unknown, unknown, true>;
@@ -208,6 +222,8 @@ export declare const API_OPTIONS: import("../config-schema.js").Field<unknown, u
                 pkce: import("../config-schema.js").Field<unknown, unknown, true>;
                 clientId: import("../config-schema.js").Field<unknown, unknown, true>;
                 clientSecret: import("../config-schema.js").Field<unknown, unknown, true>;
+                revocationEndpoint: import("../config-schema.js").Field<unknown, unknown, true>;
+                revocationRequestFormat: import("../config-schema.js").Field<unknown, unknown, true>;
             };
         };
         tools: import("../config-schema.js").Field<unknown[], readonly unknown[] | undefined, true>;
@@ -233,6 +249,7 @@ export interface ApiOAuthHooks {
     }): Promise<ConnectorStatus>;
     disconnectAuth(ctx: ConnectorContext): Promise<void>;
     verifyState(state: string | null, ctx: ConnectorContext): Promise<boolean>;
+    verifyCallbackParameters(params: URLSearchParams, ctx: ConnectorContext): Promise<boolean>;
     verifyCallbackIssuer(issuer: string | null, ctx: ConnectorContext): Promise<boolean>;
     consumeAuthError(ctx: ConnectorContext): Promise<void>;
     /** Requires callbackParams with a nonempty state, including without PKCE. */

package/dist/connectors/api-connector.js

@@ -57,8 +57,9 @@ export const API_OPTIONS = optionsOf()({
     usageGuide: USAGE_GUIDE,
     credential: CREDENTIAL,
     oauth: optionsOf()({
-        ...keys("authorizationEndpoint", "tokenEndpoint", "clientId", "clientSecret", "tokenEndpointAuthMethod", "scope", "pkce", "apiOrigins"),
+        ...keys("authorizationEndpoint", "tokenEndpoint", "clientId", "clientSecret", "tokenEndpointAuthMethod", "scope", "pkce", "apiOrigins", "revocationEndpoint", "revocationRequestFormat"),
         authorizationParams: strings(),
+        expectedCallbackParameters: strings(),
         tokenRequestHeaders: strings(),
     }),
     // A tool's annotations stay open: MCP lets a tool carry hints Connecta
@@ -158,6 +159,7 @@ export function apiConnector(id, opts, oauth) {
                 // Callback work belongs to its request, including the route's
                 // uninterruptible exchange, rather than any resource call.
                 verifyState: (state, ctx) => settleOnClose(ctx, () => oauth.verifyState(state, ctx), true),
+                verifyCallbackParameters: (params, ctx) => settleOnClose(ctx, () => oauth.verifyCallbackParameters(params, ctx), true),
                 verifyCallbackIssuer: (issuer, ctx) => settleOnClose(ctx, () => oauth.verifyCallbackIssuer(issuer, ctx), true),
                 consumeAuthError: (ctx) => settleOnClose(ctx, () => oauth.consumeAuthError(ctx), true),
                 finishAuth: (code, ctx, callbackParams) => settleOnClose(ctx, () => oauth.finishAuth(code, ctx, callbackParams), true),

package/dist/http/client.js

@@ -324,7 +324,7 @@ function bodyInit(request) {
             return { body: body.body };
         case "Uint8Array":
             // The retained text when there is one, so the wire carries exactly the
-            // string guarded-fetch sent and goldens record the same body.
+            // string guarded-fetch sent.
             return { body: (body.text ?? body.body) };
         case "FormData":
             return { body: body.formData };

package/dist/http/paging.js

@@ -4,8 +4,7 @@
 // after this cursor" into a vendor request and reads back rows and the next
 // vendor cursor; tools take one page, and `allRows` walks every page as a
 // Stream for programs and the hatch. The codec is the only place a cursor is
-// minted: `plain` hands the vendor's cursor through (what shipped providers
-// promise today, so goldens hold), `bound` ties it to the tool and its
+// minted: `plain` hands the vendor's cursor through; `bound` ties it to the tool and its
 // arguments so a cursor from another call is refused instead of silently
 // reading the wrong list.
 import { Effect, Option, Schema, Stream } from "effect";

package/dist/http/services.js

@@ -6,7 +6,7 @@ import { fromSignal } from "../runtime/run.js";
 import { callFromContext, ContinuationBinding, ContinuationStorage, openCall as openCoreCall, serviceFor, Signal, } from "../runtime/call.js";
 import { RequestRefused, ResendRefused } from "./errors.js";
 export { writeRequestKey } from "./write-request.js";
-export { Caller, Credentials, Secrets, RequestSecrets, Budget, Recovery, Signal, Classification, Ledger, openRequest, operationView, deriveView, viewCaller, callView, chargeView, } from "../runtime/call.js";
+export { Caller, Credentials, Secrets, RequestSecrets, Budget, Recovery, Signal, Classification, Ledger, } from "../runtime/call.js";
 /** Permanent write reservations plus resource dispatches, in reservation order. */
 export class Dispatches extends Context.Service()("connecta/http/Dispatches") {
 }

package/dist/http/tools.js

@@ -264,10 +264,6 @@ export function write(connection, spec) {
         ...(spec.idempotent === undefined ? {} : { idempotentHint: spec.idempotent }),
     }, spec.idempotency);
 }
-/** Money, mail, and refunds are always destructive and never idempotent hints. */
-export function action(connection, spec) {
-    return build(connection, spec, "write", { readOnlyHint: false, destructiveHint: true, idempotentHint: false });
-}
 /**
  * A key the transport may send: not blank, and only characters an HTTP
  * header carries. The REST layer refuses the same keys before dispatch.

package/dist/operator-ui/contract.d.ts

@@ -2,6 +2,7 @@ import type { ActivityOutcome } from "../activity.js";
 import type { ConnectaConfigDescription } from "../describe-config.js";
 import type { ConnectorStatus, ConnectorToolDescription } from "../types.js";
 import type { UiProblem } from "./model.js";
+export type OperatorPage = "overview" | "endpoints" | "settings" | "connector" | "tokens" | "connections" | "activity";
 /** The registry's final verdict, independent of whether the viewer's endpoint is read-only. */
 export interface OperatorTool extends ConnectorToolDescription {
     address: string;