@zackbart/connecta 0.35.0 → 0.36.0

package/documentation/auth.md

@@ -448,7 +448,7 @@ export default defineMcpClientConnection({
   url: "https://connecta.example.com/agent/assistant",
   description: "Use the assistant's shared CRM and ticket tools.",
   auth: {
-    credentialOwner: "app",
+    principalType: "app",
     getToken: async () => ({ token: await getVercelOidcToken() }),
   },
 });
@@ -1390,8 +1390,10 @@ leaves the local grant removed. The management route returns HTTP 200 with
 code. Revoke the old grant in the provider's console if removal there matters.
 With no advertised endpoint, Disconnect makes no request. Repeating Disconnect
 never retries revocation, because the removed grant is no longer available.
-Restart makes no revocation request. Static `api()` OAuth has no discovered
-revocation endpoint and continues to remove authorization locally.
+Restart makes no revocation request. Static `api()` OAuth uses the same
+removal and revocation flow when deployment configuration supplies
+`revocationEndpoint`; without it, removal remains local. The configured
+client secret is used in memory and is never saved with the grant.
 
 ## Refresh failures
 
@@ -1406,11 +1408,11 @@ Copy these durable records during storage migration.
 
 Each fingerprint record names its dispatch epoch, holder, and resolution state:
 
-| State         | Send gate                                                                                                                                                                                                   |
-| ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `outstanding` | Dispatched without a definitive outcome yet. Refuse the fingerprint in every epoch.                                                                                                                         |
-| `ambiguous`   | The sent request's outcome is unknowable. Refuse the fingerprint in every epoch, including when re-consent returns it again.                                                                                |
-| `resolved`    | The tokens were committed or a definitive failure was recorded. Refuse another send in the same epoch. A later epoch may send once only when its code exchange completed after the resolution was recorded. |
+| State         | Send gate                                                                                                                                                                                                                                                     |
+| ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `outstanding` | Dispatched without a definitive outcome yet. Refuse the fingerprint in every epoch.                                                                                                                                                                           |
+| `ambiguous`   | The sent request's outcome is unknowable. Refuse the fingerprint in every epoch, including when re-consent returns it again.                                                                                                                                  |
+| `resolved`    | The tokens were committed or a definitive failure was recorded. A completed lease whose token digest matches the current grant may start the next generation in the same epoch. A later epoch needs a code exchange that observed this exact resolved record. |
 
 Resolution writes use CAS against the exact outstanding record and record a
 `resolvedAt` timestamp with a resolved outcome. When accepting a code response,
@@ -1423,6 +1425,14 @@ outstanding dispatch. An earlier consent cannot become eligible merely because
 the pending refresh later resolves. Competing epochs cannot both replace the
 same record, and a late answer cannot turn an ambiguous record into resolved.
 
+For vendors that return unchanged refresh-token bytes, a successful token
+commit and its matching completed lease authorize the next refresh generation
+in that epoch. It must replace the exact resolved fingerprint by CAS before
+sending. Outstanding, ambiguous and failed attempts never authorize reuse;
+concurrent callers with an older access token adopt the committed result.
+An unsent successor retains the prior successful proof during cleanup, so a
+transient storage failure before dispatch can be retried without losing the grant.
+
 An ambiguous token stays blocked even if re-consent returns identical bytes.
 Recovery requires re-consent that yields a different refresh token, or
 revocation at the provider. Restart never deletes spent records or moves old
@@ -2400,6 +2410,13 @@ need `consumeAuthError` to accept error callbacks, sharing `finishAuth`'s atomic
 consent claim. Reissue
 pending consent links after upgrading; callbacks without a saved initiating user cannot complete.
 
+Custom connectors may implement `verifyCallbackParameters(params, ctx)` for
+provider-specific callback assertions. The route calls it after successful
+state verification and before issuer validation, handoff consumption, error
+handling, or code exchange. Returning false or throwing produces the generic
+invalid-callback refusal. Apply the same assertions inside `finishAuth` when
+supporting direct programmatic completion.
+
 `compareAndSet` atomically claims link nonces, callback handoffs, and consents, with one concurrent winner,
 so each completes once.
 [Meta-tools](./meta-tools.md#authorization-recovery) describes recovery.
@@ -2506,15 +2523,28 @@ api("church", {
 No discovery or registration occurs; all URLs are configuration, so the
 [advertised-URL rule](#urls-a-downstream-advertises) does not apply.
 
-| Option or binding         | Contract                                                                                                                                                                                                                                                                            |
-| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Endpoints                 | Checked at construction: HTTPS, HTTP only on loopback, no credentials or fragment.                                                                                                                                                                                                  |
-| `pkce`                    | S256 by default; `false` omits challenge and verifier.                                                                                                                                                                                                                              |
-| `authorizationParams`     | Adds provider parameters; cannot restate the grant's own.                                                                                                                                                                                                                           |
-| `tokenRequestHeaders`     | Adds code-exchange and every refresh's headers; cannot set `Authorization`, `Content-Type`, `Content-Length`, `Cookie`, or `Host`.                                                                                                                                                  |
-| `tokenEndpointAuthMethod` | Defaults to `client_secret_basic` with a secret, `none` without; mismatched pairings refuse construction.                                                                                                                                                                           |
-| Issuer/resource           | No advertised issuer means no required RFC 9207 `iss` or sent RFC 8707 `resource`. The grant binds to the token endpoint; after it changes, old tokens are never sent and the next consent replaces them.                                                                           |
-| Client                    | One deployment-config identity, never written or sealed to storage; no owner vault slot. Store leaks contain no client secret; Disconnect deletes none and Restart carries none. Read from environment or Worker secrets; empty strings refuse construction without quoting values. |
+| Option or binding            | Contract                                                                                                                                                                                                                                                                                                                                                                                                                       |
+| ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| Endpoints                    | Checked at construction: HTTPS, HTTP only on loopback, no credentials or fragment.                                                                                                                                                                                                                                                                                                                                             |
+| `pkce`                       | S256 by default; `false` omits challenge and verifier.                                                                                                                                                                                                                                                                                                                                                                         |
+| `authorizationParams`        | Adds provider parameters; cannot restate the grant's own.                                                                                                                                                                                                                                                                                                                                                                      |
+| `expectedCallbackParameters` | Optional `Readonly<Record<string, string>>` of fixed provider response values. Each configured parameter must occur exactly once with its exact decoded value, after pending-state verification and before issuer validation, flow claims, code exchange, or grant persistence. Missing, duplicate, or mismatched values refuse without exchanging a code or returning parameter values. Omission preserves existing behavior. |
+| `revocationEndpoint`         | Optional trusted HTTPS revocation URL (loopback HTTP allowed), without credentials, query or fragment. Disconnect removes the local grant before one bounded attempt using the configured client. Failure reports `oauth_revocation_failed`; a repeated Disconnect never retries.                                                                                                                                              |
+| `revocationRequestFormat`    | `"form"` by default; `"json"` sends JSON without `token_type_hint`. Requires `revocationEndpoint` when set.                                                                                                                                                                                                                                                                                                                    |
+| `tokenRequestHeaders`        | Adds code-exchange and every refresh's headers; cannot set `Authorization`, `Content-Type`, `Content-Length`, `Cookie`, or `Host`.                                                                                                                                                                                                                                                                                             |
+| `tokenEndpointAuthMethod`    | Defaults to `client_secret_basic` with a secret, `none` without; mismatched pairings refuse construction.                                                                                                                                                                                                                                                                                                                      |
+| Issuer/resource              | No advertised issuer means no required RFC 9207 `iss` or sent RFC 8707 `resource`. The grant binds to the token endpoint; after it changes, old tokens are never sent and the next consent replaces them.                                                                                                                                                                                                                      |
+| Client                       | One deployment-config identity, never written or sealed to storage; no owner vault slot. Store leaks contain no client secret; Disconnect deletes none and Restart carries none. Read from environment or Worker secrets; empty strings refuse construction without quoting values.                                                                                                                                            |
+
+For a connector bound to a fixed company, set
+`expectedCallbackParameters: { realmId: "company_alice" }`. This checks all
+callbacks, including errors, and direct `finishAuth` calls. Names must be
+nonempty ASCII letters, digits, dots, underscores, or hyphens; values must be
+nonempty strings. The protocol fields `code`, `state`, `iss`, `error`,
+`error_description`, and `error_uri` are reserved. Malformed expectations throw
+at construction without quoting values. Unconfigured provider parameters are
+ignored. Expectations are deployment configuration, never grant metadata or
+dynamic company selection; they do not inspect or rebind an existing grant.
 
 Handlers never see the grant. `ctx.oauth.fetch(url, init)` sends the calling
 owner's access token as `Authorization: Bearer` with these rules:

package/documentation/integrating.md

@@ -328,7 +328,7 @@ check shared behavior. Provider-specific tests remain beside each provider.
 
 Use [`@zackbart/connecta-eve`](https://github.com/zackbart/connecta/blob/main/packages/connecta-eve/README.md)
 in the Eve app for an app-owned connection and endpoint instructions refreshed
-at turn start. It requires Node 24 and Eve 0.83.x, and installs separately from
+once per turn. It requires Node 24 and Eve 0.84.x, and installs separately from
 Connecta. Follow its README for the two agent files, token environment variables,
 optional write approval and Vercel OIDC token source. Configure the server's
 [agent and pool membership](./auth.md#issue-rotate-or-revoke-an-agent-token)

package/documentation/meta-tools.md

@@ -1292,7 +1292,7 @@ window, a native `tools/list` carries a 300-second private cache hint, against
 an hour on meta endpoints. This hint does not guarantee that a host refreshes
 its cached annotations; the stale-approval race is accepted on writable pools.
 
-**Listing.** `tools/list` is one page with no cursor (Eve 0.83 reads only the
+**Listing.** `tools/list` is one page with no cursor (Eve 0.84 reads only the
 first page). A pool listing more than 1,000 tools fails `tools/list` with a
 JSON-RPC error asking the operator to narrow the pool; nothing is silently
 dropped. A connector whose catalog cannot load is left out of that listing

package/documentation/operator-ui.md

@@ -519,8 +519,9 @@ says the snapshot is for maintainers. It requires the UI module and the
 existing doctor authentication environment variables; it runs no diagnostic
 program, follows no redirects, and prints no raw HTTP failure body.
 
-The operator shell uses React, TanStack Router/Query/Table, Radix, cmdk and
-Tailwind v4. Hanken Grotesk, JetBrains Mono, CSS, JavaScript and dependency notices are hashed assets
+The operator shell uses React, TanStack Router, Radix and cmdk. Esbuild bundles
+the authored CSS with an explicit browser reset; it generates no utility classes.
+Hanken Grotesk, JetBrains Mono, CSS, JavaScript and dependency notices are hashed assets
 under `/ui/assets/*`, served identically with immutable cache headers on Node
 and Workers. HTML contains only mount points and escaped inert configuration;
 it remains uncached. Ahead of the stylesheet, every operator page (sign-in
@@ -537,7 +538,11 @@ private browsing: a read finds nothing stored and a write keeps nothing, so a
 bearer token is not remembered there. `generated.ts` is ignored and generated before build and
 test; `check:operator-ui` detects stale assets and shared page styles. The UI
 stays behind `./ui`, outside the root import graph. The identity-fenced store
-owns authenticated reads and existing mutations. An Access-only shell selects
+owns authenticated reads and existing mutations, with explicit identity and
+read-cycle AbortControllers, revision fences, and no query cache or automatic
+mutation replay. Browser-only view models ship inside the hashed bundle, with
+no duplicate standalone server modules. The shared contract owns the unchanged
+`OperatorPage` union exported from `@zackbart/connecta/ui`. An Access-only shell selects
 Access even when the HTML request has no trusted context; only authenticated
 API responses establish the session. A gated Access session offers Retry.
 Focus, visibility, and timer-driven recovery share one admission-read schedule
@@ -661,3 +666,11 @@ serve the authenticated shell and data. The browser lives in
 and [browser flows](https://github.com/zackbart/connecta/blob/main/test/browser/operator-ui.spec.ts)
 defend filtering and behavior. Use [Operator UI tests](./operator-tests.md)
 for the browser state matrix and Linux snapshot procedure.
+
+The browser flows also hold configuration and connector reads open across a
+bearer identity switch, observe cancellation of the old HTTP response, and
+require only the replacement viewer's data after navigation. A held OAuth poll
+must abort on navigation without sending its start again; the Access recovery
+flow checks explicit Retry and browser-history navigation without a document
+reload. The packed deployment journey compiles every `OperatorPage` through
+the public `@zackbart/connecta/ui` alias after declaration pruning.

package/documentation/providers.md

@@ -7,6 +7,258 @@ roster](./integrating.md#add-or-remove-a-connector) covers the general
 procedure and the providers not listed here. Agent guidance for each
 provider ships with its connection's usage guide, not here.
 
+## API sources and tool inventory
+
+Maintained providers pair reviewed API contracts and indexes with Connecta's
+adapters and tools. Sources include upstream OpenAPI,
+Google Discovery conversions, reviewed HTML/documentation conversions and
+hand-authored endpoint contracts. Tithe.ly and Overflow use endpoint checks
+without vendored OpenAPI documents. `remoteMcp()` discovers live server tools
+instead.
+
+QuickBooks Online uses a restricted hand-authored Accounting API contract with
+manual vendor review; its read hatch cannot execute arbitrary query SQL.
+
+These generated reference catalogs separate named workflows from API tools
+and reads from writes. API search/details inspect indexed contracts, including
+refused operations. Raw read/write calls accept only reviewed operations within
+configured scope and safety rules. Gmail has no generic write tool.
+
+Addresses use your connector ID: Stripe configured as `billing` exposes
+`billing.stripe_api_read`. Configuration, credentials and read-only policy affect
+availability. Planning Center labels identify required products. Use live
+discovery for your deployment's catalog.
+
+<!-- provider-inventory:start -->
+
+<details>
+<summary>Breeze ChMS (15 tools)</summary>
+
+[Setup](#breeze-chms). **API source:** [Reviewed HTML/documentation conversion](https://app.breezechms.com/api).
+
+- **Named reads:** `get_account_summary`, `get_person`, `list_attendance`, `list_contributions`, `list_events`, `list_funds`, `list_people`, `list_profile_fields`, `list_tags`.
+- **Named writes:** `add_person`, `update_person`.
+- **API reads:** `breeze_api_details`, `breeze_api_read`, `breeze_api_search`.
+- **API writes:** `breeze_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/breeze).
+
+</details>
+
+<details>
+<summary>Church Community Builder (20 tools)</summary>
+
+[Setup](#church-community-builder). **API source:** [Upstream OpenAPI](https://docs.pushpay.io/chms-v2/openapi/chms-api-specs.json?download=1).
+
+- **Named reads:** `get_event_attendance`, `get_event`, `get_family`, `get_giving_metrics`, `get_group`, `get_individual`, `get_me`, `list_event_attendees`, `list_events`, `list_families`, `list_group_members`, `list_groups`, `list_individual_groups`, `list_individual_notes`, `list_individuals`, `search_records`.
+- **Named writes:** None.
+- **API reads:** `ccb_api_details`, `ccb_api_read`, `ccb_api_search`.
+- **API writes:** `ccb_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/ccb).
+
+</details>
+
+<details>
+<summary>Cloudflare (9 tools)</summary>
+
+[Setup](#cloudflare). **API source:** [Upstream OpenAPI](https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json). [Supplemental reviewed contract](https://developers.cloudflare.com/analytics/graphql-api/).
+
+- **Named reads:** `graphql_query`, `list_accounts`, `list_zones`, `verify_credential`.
+- **Named writes:** None.
+- **API reads:** `cloudflare_api_details`, `cloudflare_api_read`, `cloudflare_api_search`.
+- **API writes:** `cloudflare_api_upload`, `cloudflare_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/cloudflare).
+
+</details>
+
+<details>
+<summary>Google Docs (10 tools)</summary>
+
+[Setup](#google-docs). **API source:** [Google Discovery conversion](https://docs.googleapis.com/$discovery/rest?version=v1).
+
+- **Named reads:** `get_document`.
+- **Named writes:** `append_text`, `batch_update_document`, `create_document`, `insert_text`, `replace_all_text`.
+- **API reads:** `docs_api_details`, `docs_api_read`, `docs_api_search`.
+- **API writes:** `docs_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/docs).
+
+</details>
+
+<details>
+<summary>Google Drive (21 tools)</summary>
+
+[Setup](#google-drive). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/drive/api/reference/rest/v3).
+
+- **Named reads:** `get_file_content`, `get_file`, `list_folder_items`, `list_permissions`, `list_shared_drives`, `search_files`.
+- **Named writes:** `copy_file`, `create_file`, `create_folder`, `delete_permission`, `move_file`, `restore_file`, `share_file`, `trash_file`, `update_file_content`, `update_file`, `update_permission`.
+- **API reads:** `drive_api_details`, `drive_api_read`, `drive_api_search`.
+- **API writes:** `drive_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/drive).
+
+</details>
+
+<details>
+<summary>Google Forms (10 tools)</summary>
+
+[Setup](#google-forms). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/forms/api/reference/rest).
+
+- **Named reads:** `get_form`, `get_response`, `list_responses`.
+- **Named writes:** `batch_update_form`, `create_form`, `update_form_info`.
+- **API reads:** `forms_api_details`, `forms_api_read`, `forms_api_search`.
+- **API writes:** `forms_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/forms).
+
+</details>
+
+<details>
+<summary>GitHub (7 tools)</summary>
+
+[Setup](#github). **API source:** [Upstream OpenAPI](https://raw.githubusercontent.com/github/rest-api-description/main/descriptions/api.github.com/api.github.com.json).
+
+- **Named reads:** `list_scopes`, `search_scoped`.
+- **Named writes:** `merge_pull_request`.
+- **API reads:** `github_api_details`, `github_api_read`, `github_api_search`.
+- **API writes:** `github_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/github).
+
+</details>
+
+<details>
+<summary>Gmail (12 tools)</summary>
+
+[Setup](#gmail). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/gmail/api/reference/rest).
+
+- **Named reads:** `get_attachment`, `get_draft`, `get_message`, `get_thread`, `list_drafts`, `list_labels`, `search_threads`.
+- **Named writes:** `create_draft`, `update_draft`.
+- **API reads:** `gmail_api_details`, `gmail_api_read`, `gmail_api_search`.
+- **API writes:** None.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/gmail).
+
+</details>
+
+<details>
+<summary>Overflow (17 tools)</summary>
+
+[Setup](#overflow). **API source:** Hand-authored endpoint contracts; [upstream endpoint checks](https://server.stage.overflow.co/api/docs/openapi.json). No vendored OpenAPI document.
+
+- **Named reads:** `get_contribution`, `get_deposit_summary`, `get_deposit`, `get_donor`, `list_campaigns`, `list_chargebacks`, `list_contributions`, `list_deposits`, `list_donors`, `list_locations`, `list_payment_methods`, `list_refunds`, `list_subscriptions`.
+- **Named writes:** None.
+- **API reads:** `overflow_api_details`, `overflow_api_read`, `overflow_api_search`.
+- **API writes:** `overflow_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/overflow).
+
+</details>
+
+<details>
+<summary>Planning Center (27 tools)</summary>
+
+[Setup](#planning-center). **API source:** Composed upstream OpenAPI contracts: [/people/v2](https://developer.planning.center/docs/#/people/2026-06-04), [/services/v2](https://developer.planning.center/docs/#/services/2018-11-01), [/groups/v2](https://developer.planning.center/docs/#/groups/2023-07-10), [/check-ins/v2](https://developer.planning.center/docs/#/check-ins/2025-05-28), [/calendar/v2](https://developer.planning.center/docs/#/calendar/2026-06-22), [/registrations/v2](https://developer.planning.center/docs/#/registrations/2025-05-01), [/giving/v2](https://developer.planning.center/docs/#/giving/2019-10-18), [/publishing/v2](https://developer.planning.center/docs/#/publishing/2024-03-25), [/webhooks/v2](https://developer.planning.center/docs/#/webhooks/2022-10-20), [/api/v2](https://developer.planning.center/docs/#/api/2026-09-24).
+
+- **Named reads:** `get_me`, `get_person`, `get_plan` (services enabled), `list_donations` (giving enabled), `list_funds` (giving enabled), `list_group_memberships` (groups enabled), `list_groups` (groups enabled), `list_person_field_data`, `list_person_notes`, `list_person_schedules` (services enabled), `list_plans` (services enabled), `list_service_types` (services enabled), `list_teams` (services enabled), `list_workflow_cards`, `list_workflows`, `search_people`.
+- **Named writes:** `add_group_member` (groups enabled), `add_person_note`, `add_workflow_card`, `apply_workflow_card_action`, `create_person`, `schedule_plan_person` (services enabled), `update_person`.
+- **API reads:** `pco_api_details`, `pco_api_read`, `pco_api_search`.
+- **API writes:** `pco_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/planning-center).
+
+</details>
+
+<details>
+<summary>QuickBooks Online (10 tools)</summary>
+
+[Setup](#quickbooks-online). **API source:** Hand-authored endpoint contracts. No vendored OpenAPI document.
+
+- **Named reads:** `get_company_info`, `get_record`, `get_report`, `search_records`.
+- **Named writes:** `create_customer`, `create_invoice`, `update_customer`.
+- **API reads:** `quickbooks_api_details`, `quickbooks_api_read`, `quickbooks_api_search`.
+- **API writes:** None.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/quickbooks).
+
+</details>
+
+<details>
+<summary>Google Sheets (13 tools)</summary>
+
+[Setup](#google-sheets). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/sheets/api/reference/rest).
+
+- **Named reads:** `get_spreadsheet`, `get_values`.
+- **Named writes:** `add_sheet`, `append_values`, `batch_update_spreadsheet`, `batch_update_values`, `clear_values`, `create_spreadsheet`, `update_values`.
+- **API reads:** `sheets_api_details`, `sheets_api_read`, `sheets_api_search`.
+- **API writes:** `sheets_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/sheets).
+
+</details>
+
+<details>
+<summary>Google Slides (19 tools)</summary>
+
+[Setup](#google-slides). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/slides/api/reference/rest).
+
+- **Named reads:** `get_page`, `get_presentation`, `get_slide_thumbnail`, `list_comments`, `list_layouts`.
+- **Named writes:** `batch_update_presentation`, `create_comment_reply`, `create_comment`, `create_presentation`, `create_slide`, `delete_comment_reply`, `delete_comment`, `replace_all_text`, `update_comment_post`, `update_comment_thread`.
+- **API reads:** `slides_api_details`, `slides_api_read`, `slides_api_search`.
+- **API writes:** `slides_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/slides).
+
+</details>
+
+<details>
+<summary>Stripe (6 tools)</summary>
+
+[Setup](#stripe). **API source:** [Upstream OpenAPI](https://raw.githubusercontent.com/stripe/openapi/master/latest/openapi.spec3.json).
+
+- **Named reads:** `get_balance_summary`, `get_stripe_account_info`.
+- **Named writes:** None.
+- **API reads:** `stripe_api_details`, `stripe_api_read`, `stripe_api_search`.
+- **API writes:** `stripe_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/stripe).
+
+</details>
+
+<details>
+<summary>Tithe.ly (11 tools)</summary>
+
+[Setup](#tithely). **API source:** Hand-authored endpoint contracts; [upstream endpoint checks](https://docs.tithe.ly/reference/). No vendored OpenAPI document.
+
+- **Named reads:** `get_charge`, `get_recurring_charge`, `list_accounts`, `list_charges`, `list_organizations`, `list_payment_methods`, `list_recurring_charges`.
+- **Named writes:** None.
+- **API reads:** `tithely_api_details`, `tithely_api_read`, `tithely_api_search`.
+- **API writes:** `tithely_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/tithely).
+
+</details>
+
+<details>
+<summary>Vercel (11 tools)</summary>
+
+[Setup](#vercel). **API source:** [Upstream OpenAPI](https://openapi.vercel.sh/).
+
+- **Named reads:** `get_deployment_build_logs`, `get_runtime_logs`, `list_project_env_vars`, `list_teams`.
+- **Named writes:** `update_project_env_var`, `upsert_project_env_var`.
+- **API reads:** `vercel_api_details`, `vercel_api_read`, `vercel_api_search`.
+- **API writes:** `vercel_api_upload`, `vercel_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/vercel).
+
+</details>
+
+<!-- provider-inventory:end -->
+
+## API operation discovery and boundaries
+
 Standard API operation search accepts resource nouns, actions and conversational
 phrasing. A leading create/add/update/edit/make/set/apply/change/rename/send/delete/remove/cancel/stop
 with an object prefers reviewed writes and keeps later read words as nouns, as in
@@ -963,3 +1215,133 @@ body and `result.page` carries continuation. Resource keys, decryption JWTs and
 private download destinations remain withheld on named and hatch responses.
 A 404 does not prove absence. Auxiliary lookup failures send no move; an actual
 write failure can have an unknown outcome and requires a read before repetition.
+
+## QuickBooks Online
+
+Available from 0.36.0. Use the deployment's own Intuit app and configure one
+fixed QuickBooks Online company per connector. Multiple companies need separate
+connector IDs and separate consent; tool arguments cannot select another
+company or environment.
+
+```ts
+import { quickbooks } from "@zackbart/connecta/providers/quickbooks";
+
+const accounting = quickbooks("accounting", {
+  purpose: "Company accounting reports and invoice reconciliation",
+  realmId: process.env.QUICKBOOKS_REALM_ID!,
+  environment: "sandbox",
+  clientId: process.env.QUICKBOOKS_CLIENT_ID!,
+  clientSecret: process.env.QUICKBOOKS_CLIENT_SECRET!,
+});
+```
+
+Create an Intuit QuickBooks Online app, enable the Accounting API and obtain
+the client ID and secret for the selected environment. Sandbox and production
+credentials are separate. Register
+`<publicUrl>/oauth/callback/accounting` as an exact redirect URI. Set the
+numeric company/realm ID in deployment configuration, then connect through
+the operator UI or `authorize_connector`. After valid OAuth state, the callback
+must contain exactly one `realmId` equal to the configured value before any
+code exchange. Selecting another company fails authorization. Store app
+credentials in deployment secrets; token import and endpoint overrides are
+not supported.
+
+OAuth defaults to one shared grant; `authScope: "personal"` instead gives each
+owner a grant for the same fixed company. The requested
+`com.intuit.quickbooks.accounting` scope permits both reads and writes at Intuit.
+This provider defaults to `readOnly: true`. Set `readOnly: false` explicitly in
+deployment code to enable the three bounded named writes below. Connector,
+endpoint and pool read-only policy still refuses writes before validation or
+dispatch. It reuses sealed grants, coordinated refresh,
+rotation and revocation. Access tokens last one hour; refresh authorization
+requires use within 100 days and expires absolutely after five years. Reconnect
+when Intuit requires consent again. Do not assume refresh extends the absolute
+window or infer expiry from provider-specific fields.
+
+`get_company_info`, `search_records`, `get_record` and `get_report` are the
+named reads. The reviewed record families are customers, vendors, accounts,
+items, invoices, bills, received accounting payments and bill payments.
+`search_records` accepts at most eight structured AND filters and returns up to
+100 rows per page (25 by default; configurable with `defaultPageSize`). Its
+signed continuation binds the original arguments, company, environment,
+connector and credential owner. Continue with unchanged arguments and cursor.
+Search is not a snapshot; concurrent accounting changes can alter later pages.
+
+Reports are allowlisted to ProfitAndLoss, BalanceSheet, CashFlow,
+AgedReceivables and AgedPayables. P&L and Cash Flow accept `start_date`; all
+accept `end_date` (translated to `report_date` with `aging_method: "Report_Date"`
+for AR/AP aging). P&L and Balance Sheet accept `accounting_method` (`Cash` or
+`Accrual`). No verified currency override is exposed; inspect the returned
+Header.Currency and never combine unlike currencies. Unsupported combinations fail before
+dispatch. Report Header, Columns and nested Rows retain section identity,
+column metadata and empty amount strings. Check the returned period, basis
+and currency; an empty amount is never converted to zero. Responses use the
+modernized report service in effect since August 31, 2026. Requests explicitly
+use the supported minor-version floor 75.
+
+`quickbooks_api_search` and `quickbooks_api_details` inspect reviewed
+operations. `quickbooks_api_read` reaches only indexed record/company/report
+GETs inside this company's configured host and path. `/query` is refused;
+use the named structured search. Unreviewed entities, arbitrary SQL, URL,
+realm, scope and token overrides and arbitrary writes are unavailable. Desktop,
+Payments and Payroll APIs are outside this provider.
+
+With `readOnly: false`, `create_customer` accepts only DisplayName and optional
+CompanyName. `update_customer` requires caller-observed Id and SyncToken and
+uses `sparse: true` for those naming fields; a stale version fails without a
+version fetch or overwrite. DisplayName must be unique across customers,
+vendors and employees.
+
+`create_invoice` creates a real accounting transaction, never a draft, only
+for a verified US company and a customer using USD. The reviewed autosend
+contract is US-specific; the initial money contract uses two-decimal USD
+units. It requires an observed active customer, currency USD, an explicit positive
+exchange rate, transaction/due dates, DocNumber and 1–20 active Service-item
+lines. Amounts are positive decimal-unit strings with exactly two fractional
+digits, at most 999999999.99 per line. Every line explicitly supplies one unit
+and its price. Preflight reads verify the fixed company Country is US, then
+recheck the customer currency and item type and activity; they are not an atomic snapshot. No default prices, dates or rates,
+and no implicit customer/item creation, are used. QuickBooks computes taxes and
+totals, and locale/company rules may reject the narrow request. Inspect the
+returned CurrencyRef, ExchangeRate and totals.
+Each request after the first charges the same call-admission budget before
+dispatch. Returned references, dates, rate and service prices must match the
+admitted intent; contradictions produce an unknown, non-retryable outcome.
+
+Creation fixes EmailStatus to `NotSet` and IPN/online/card/ACH/PayPal/Affirm
+payment flags to false, accepts no email fields, and never calls a send endpoint.
+Intuit's documented autosend path requires company opt-in, enabled online
+payments and `NeedToSend` with BillEmail; the fixed creation body withholds
+those request conditions. Invoice updates remain unavailable because retaining
+an existing send-ready state is not established safe, and resetting that state
+would change existing payment settings. Deletes, voids, delivery, payment
+execution, batch and other accounting writes remain unavailable. The API hatch
+refuses POSTs even when named writes are enabled.
+
+Each write requires `requestId`, a stable identifier for the exact intent,
+unique across all requests/tools for this company: 1–50 ASCII letters, digits,
+underscores or hyphens, beginning with a letter or digit. It is sent as Intuit's
+`requestid` query parameter with minorversion 75. The vendor recognizes repeated
+content and ID; no retention duration is established. This never permits
+Connecta to replay automatically: every dispatched write has one attempt,
+including 401, timeout, server failure and malformed success.
+
+Reconcile an unknown create through reads before another intent: customer
+DisplayName (including inactive matches when relevant), or invoice DocNumber
+plus CustomerRef and currency, dates, lines and computed amounts. DocNumber may
+repeat and is not proof by itself. Do not blindly create again with a new ID;
+report ambiguity. Reconcile unknown updates by the known record Id and version.
+The requestId supplies no lookup endpoint or permanent retention guarantee.
+
+All named and hatch responses apply the same closed privacy projection before
+`fields` narrows it. Public Id and SyncToken versions, accounting references,
+amounts and minimal display names remain; contact emails/phones/addresses,
+bank/card/tax identifiers, private notes, credentials and private URLs are
+withheld. No `sensitiveFields` or `raw` option widens these results. Reduce
+financial records to task-relevant aggregates before returning them to a user.
+`maxResultBytes`, `callAdmission` and the standard provider title/instructions
+options remain available. No default admission budget is declared: account for
+other integrations sharing the app when configuring one. Intuit documents
+500 requests per minute per company and 10 per second per company/app in both
+environments; after HTTP 429, wait at least 60 seconds. Local admission is per
+runtime and cannot coordinate other deployments' spending.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zackbart/connecta",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "type": "module",
   "sideEffects": false,
   "description": "One MCP to rule them all — a single MCP endpoint aggregating many downstream connectors behind a code-first surface of six meta-tools.",
@@ -115,6 +115,10 @@
       "types": "./dist/providers/planning-center/index.d.ts",
       "import": "./dist/providers/planning-center/index.js"
     },
+    "./providers/quickbooks": {
+      "types": "./dist/providers/quickbooks/index.d.ts",
+      "import": "./dist/providers/quickbooks/index.js"
+    },
     "./providers/sheets": {
       "types": "./dist/providers/sheets/index.d.ts",
       "import": "./dist/providers/sheets/index.js"
@@ -167,8 +171,6 @@
     "test:browser:install": "playwright install chromium",
     "test:browser": "playwright test",
     "test:browser:snapshots": "node scripts/update-operator-snapshots.mjs",
-    "goldens:update": "node scripts/update-goldens.mjs",
-    "pregoldens:update": "node scripts/generate-version.mjs && pnpm run build:operator-ui",
     "pretest:browser:snapshots": "pnpm run build:operator-ui",
     "test:node": "vitest run --config vitest.config.node.ts",
     "test:workers": "vitest run --project workers",
@@ -185,6 +187,8 @@
     "eval:selftest": "tsx eval/selftest.ts",
     "eval:agent": "tsx eval/run-agent.ts",
     "eval:smoke": "tsx eval/run-smoke.ts",
+    "eval:outcomes": "tsx eval/run-outcomes.ts",
+    "preeval:outcomes": "node scripts/generate-version.mjs && pnpm run build:operator-ui",
     "eval:perf": "tsx eval/run-perf.ts",
     "eval:report": "tsx eval/report.ts",
     "check:static": "node --test scripts/check-provider-exemptions.test.mjs && pnpm run format:check && pnpm run check:providers-generated && pnpm run check:docs && pnpm run check:changes && pnpm run check:operator-ui && pnpm run check:clerk-sdk && pnpm run check:lint && pnpm run check:unused && pnpm run typecheck",
@@ -252,11 +256,7 @@
     "@fontsource-variable/jetbrains-mono": "^5.3.0",
     "@playwright/test": "^1.62.0",
     "@radix-ui/react-dialog": "^1.2.0",
-    "@radix-ui/react-slot": "^1.4.0",
     "@radix-ui/react-tabs": "^1.1.22",
-    "@tailwindcss/node": "^4.3.3",
-    "@tailwindcss/oxide": "^4.3.3",
-    "@tanstack/react-query": "^5.104.1",
     "@tanstack/react-router": "^1.170.41",
     "@types/node": "^22.0.0",
     "@types/react": "^19.3.0",
@@ -270,7 +270,6 @@
     "quickjs-emscripten": "^0.32.0",
     "react": "^19.3.0",
     "react-dom": "^19.3.0",
-    "tailwindcss": "^4.3.3",
     "tsx": "^4.23.1",
     "typescript": "^5.9.3",
     "undici": "6.29.1",

package/templates/node/package.json

@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "@clerk/backend": "^3.12.0",
-    "@zackbart/connecta": "0.35.0",
+    "@zackbart/connecta": "0.36.0",
     "quickjs-emscripten": "0.32.0",
     "undici": "6.29.1"
   },