@zackbart/connecta 0.35.0 → 0.36.1

package/documentation/providers.md

@@ -7,6 +7,361 @@ roster](./integrating.md#add-or-remove-a-connector) covers the general
 procedure and the providers not listed here. Agent guidance for each
 provider ships with its connection's usage guide, not here.
 
+## Granola
+
+```ts
+import { granola } from "@zackbart/connecta/providers/granola";
+
+const notes = granola("granola", { purpose: "Shared workspace meeting notes" });
+```
+
+Use a **workspace API key**, created by a Business or Enterprise workspace
+admin in Granola desktop Settings → Connectors → Workspace API keys → Create
+new key. Save it in this connection's credential slot through the operator UI;
+configure an encrypted vault as described in [shared credentials](./auth.md#connect-a-shared-credential).
+The shared, single-secret field is `value`. The provider fixes the origin to
+`https://public-api.granola.ai`, uses bearer authentication, and exposes reads
+only. It accepts `purpose`, optional `title`, `instructions`, and
+`maxResultBytes` and the common `readOnly` restriction. Even `readOnly: false`
+exposes only the five reviewed reads; it accepts no inline secret, origin override, personal auth
+scope, or option enabling writes.
+
+Workspace keys belong to the workspace, survive their creator leaving and do
+not expire; an admin can revoke them. They reach public notes and spaces with
+Granola API access enabled. For an existing space an admin uses Integrations →
+Granola API → Allow access with a workspace API key. Folders inherit the space
+setting. Workspace ownership does not grant unrelated private notes or the
+owner's private handwritten notes. Discover accessible IDs before filtering.
+Only notes with a generated summary and transcript are returned; a 404 does
+not prove absence. A successful credential test confirms accessible spaces,
+not the key's ownership type or access to every meeting. Granola enforces
+these permissions; Connecta cannot infer workspace versus personal key type
+from the secret. Do not substitute a personal API key or MCP OAuth token.
+
+The REST surface is `granola_api_search`, `granola_api_details`, and
+`granola_api_read`. Search discovers API operations, not meeting content.
+Reads cover `/v1/notes`, `/v1/notes/{note_id}`,
+`/v1/notes/{note_id}/transcript`, `/v1/folders`, and `/v1/spaces`. Use API IDs
+(`not_`, `fol_`, `spa_`), not UUIDs copied from web links. Date/folder/space
+filters and response `fields` narrowing follow the reviewed operation details.
+Audit, legal holds, webhook management and writes are refused, even if their
+contracts appear in operation discovery.
+
+Omit `query.cursor` on the first read. Continue with `page.nextCursor` as the
+top-level `cursor`, retaining the path and query filters. Continuations are
+bound to that request and are not raw Granola tokens. The vendor uses
+`query.page_size`: notes/folders/spaces default to 10 with maximum 30;
+transcripts default to 50 with maximum 100. Empty pages can have more data.
+No total count is inferred. HTTP 413 when using `include: "transcript"`
+requires a new note-detail read without include and paged transcript reads;
+the provider sends no hidden fallback requests. Photo download URLs grant
+unauthenticated access and are always withheld. Meeting text and sent
+credentials cross the same value-safety boundary before selection or paging.
+
+Granola documents 25 requests per 5-second burst and 5 requests/second
+sustained, shared across the workspace key's scope. The default per-runtime
+admission is 25 calls in a rolling 5-second window with concurrency 2. Other
+processes and integrations share the vendor allowance; the local counter
+cannot enforce a workspace-wide limit. A 429 returns `rate_limited` and
+Retry-After when supplied (otherwise a 5-second hint); calls are not retried
+automatically. Requests have a 30-second deadline and 4 MiB response ceiling.
+Oversized responses fail without presenting a partial success; inline result
+cuts retain the standard `truncated` paths.
+
+For hosted Granola MCP, use a distinct generic `remoteMcp()` connection to
+`https://mcp.granola.ai/mcp` with its user OAuth or enterprise-managed
+authorization. Granola MCP does not accept workspace API keys or service
+accounts. Its natural-language search is not a REST-provider capability.
+See [Granola's workspace-key guide](https://docs.granola.ai/help-center/sharing/integrations/granola-api#workspace-api-keys)
+and [API overview](https://docs.granola.ai/introduction).
+
+### Migrate a deployment-local Granola API adapter
+
+Replace the local `api("granola", …)` construction with
+`granola("granola", { purpose: "Shared workspace meeting notes" })`, retaining
+the same encrypted vault, encryption key, connector ID, shared owner and
+single-secret `value` field. The provider reuses that credential without
+copying it. Existing addresses `granola.granola_api_search`,
+`granola.granola_api_details`, and `granola.granola_api_read` remain stable.
+Keep existing pool references to `granola`. A differently named or personal
+credential field requires the operator to save a workspace key in the shared
+slot; do not read out or copy stored secrets through an agent.
+
+Compare local argument contracts before replacing the factory: the maintained
+search is operation discovery, details uses an indexed operation, and read
+uses a relative path and query. Replace raw `query.cursor` continuations with
+the bound top-level `cursor`, and start new pagination sequences after the
+upgrade. Responses use `{ status, data, page? }`. Remove local write tools or
+natural-language-search assumptions; do not keep duplicate factories with the
+same connector ID. If a local adapter used other tool names, update its
+callers explicitly. No data migration or downstream write is required.
+
+## API sources and tool inventory
+
+Maintained providers pair reviewed API contracts and indexes with Connecta's
+adapters and tools. Sources include upstream OpenAPI,
+Google Discovery conversions, reviewed HTML/documentation conversions and
+hand-authored endpoint contracts. Tithe.ly and Overflow use endpoint checks
+without vendored OpenAPI documents. `remoteMcp()` discovers live server tools
+instead.
+
+QuickBooks Online uses a restricted hand-authored Accounting API contract with
+manual vendor review; its read hatch cannot execute arbitrary query SQL.
+
+These generated reference catalogs separate named workflows from API tools
+and reads from writes. API search/details inspect indexed contracts, including
+refused operations. Raw read/write calls accept only reviewed operations within
+configured scope and safety rules. Gmail has no generic write tool.
+
+Addresses use your connector ID: Stripe configured as `billing` exposes
+`billing.stripe_api_read`. Configuration, credentials and read-only policy affect
+availability. Planning Center labels identify required products. Use live
+discovery for your deployment's catalog.
+
+<!-- provider-inventory:start -->
+
+<details>
+<summary>Breeze ChMS (15 tools)</summary>
+
+[Setup](#breeze-chms). **API source:** [Reviewed HTML/documentation conversion](https://app.breezechms.com/api).
+
+- **Named reads:** `get_account_summary`, `get_person`, `list_attendance`, `list_contributions`, `list_events`, `list_funds`, `list_people`, `list_profile_fields`, `list_tags`.
+- **Named writes:** `add_person`, `update_person`.
+- **API reads:** `breeze_api_details`, `breeze_api_read`, `breeze_api_search`.
+- **API writes:** `breeze_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/breeze).
+
+</details>
+
+<details>
+<summary>Church Community Builder (20 tools)</summary>
+
+[Setup](#church-community-builder). **API source:** [Upstream OpenAPI](https://docs.pushpay.io/chms-v2/openapi/chms-api-specs.json?download=1).
+
+- **Named reads:** `get_event_attendance`, `get_event`, `get_family`, `get_giving_metrics`, `get_group`, `get_individual`, `get_me`, `list_event_attendees`, `list_events`, `list_families`, `list_group_members`, `list_groups`, `list_individual_groups`, `list_individual_notes`, `list_individuals`, `search_records`.
+- **Named writes:** None.
+- **API reads:** `ccb_api_details`, `ccb_api_read`, `ccb_api_search`.
+- **API writes:** `ccb_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/ccb).
+
+</details>
+
+<details>
+<summary>Cloudflare (9 tools)</summary>
+
+[Setup](#cloudflare). **API source:** [Upstream OpenAPI](https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json). [Supplemental reviewed contract](https://developers.cloudflare.com/analytics/graphql-api/).
+
+- **Named reads:** `graphql_query`, `list_accounts`, `list_zones`, `verify_credential`.
+- **Named writes:** None.
+- **API reads:** `cloudflare_api_details`, `cloudflare_api_read`, `cloudflare_api_search`.
+- **API writes:** `cloudflare_api_upload`, `cloudflare_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/cloudflare).
+
+</details>
+
+<details>
+<summary>Google Docs (10 tools)</summary>
+
+[Setup](#google-docs). **API source:** [Google Discovery conversion](https://docs.googleapis.com/$discovery/rest?version=v1).
+
+- **Named reads:** `get_document`.
+- **Named writes:** `append_text`, `batch_update_document`, `create_document`, `insert_text`, `replace_all_text`.
+- **API reads:** `docs_api_details`, `docs_api_read`, `docs_api_search`.
+- **API writes:** `docs_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/docs).
+
+</details>
+
+<details>
+<summary>Google Drive (21 tools)</summary>
+
+[Setup](#google-drive). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/drive/api/reference/rest/v3).
+
+- **Named reads:** `get_file_content`, `get_file`, `list_folder_items`, `list_permissions`, `list_shared_drives`, `search_files`.
+- **Named writes:** `copy_file`, `create_file`, `create_folder`, `delete_permission`, `move_file`, `restore_file`, `share_file`, `trash_file`, `update_file_content`, `update_file`, `update_permission`.
+- **API reads:** `drive_api_details`, `drive_api_read`, `drive_api_search`.
+- **API writes:** `drive_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/drive).
+
+</details>
+
+<details>
+<summary>Google Forms (10 tools)</summary>
+
+[Setup](#google-forms). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/forms/api/reference/rest).
+
+- **Named reads:** `get_form`, `get_response`, `list_responses`.
+- **Named writes:** `batch_update_form`, `create_form`, `update_form_info`.
+- **API reads:** `forms_api_details`, `forms_api_read`, `forms_api_search`.
+- **API writes:** `forms_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/forms).
+
+</details>
+
+<details>
+<summary>GitHub (7 tools)</summary>
+
+[Setup](#github). **API source:** [Upstream OpenAPI](https://raw.githubusercontent.com/github/rest-api-description/main/descriptions/api.github.com/api.github.com.json).
+
+- **Named reads:** `list_scopes`, `search_scoped`.
+- **Named writes:** `merge_pull_request`.
+- **API reads:** `github_api_details`, `github_api_read`, `github_api_search`.
+- **API writes:** `github_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/github).
+
+</details>
+
+<details>
+<summary>Gmail (12 tools)</summary>
+
+[Setup](#gmail). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/gmail/api/reference/rest).
+
+- **Named reads:** `get_attachment`, `get_draft`, `get_message`, `get_thread`, `list_drafts`, `list_labels`, `search_threads`.
+- **Named writes:** `create_draft`, `update_draft`.
+- **API reads:** `gmail_api_details`, `gmail_api_read`, `gmail_api_search`.
+- **API writes:** None.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/gmail).
+
+</details>
+
+<details>
+<summary>Granola (3 tools)</summary>
+
+[Setup](#granola). **API source:** [Upstream OpenAPI](https://docs.granola.ai/api-reference/openapi.json).
+
+- **Named reads:** None.
+- **Named writes:** None.
+- **API reads:** `granola_api_details`, `granola_api_read`, `granola_api_search`.
+- **API writes:** None.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/granola).
+
+</details>
+
+<details>
+<summary>Overflow (17 tools)</summary>
+
+[Setup](#overflow). **API source:** Hand-authored endpoint contracts; [upstream endpoint checks](https://server.stage.overflow.co/api/docs/openapi.json). No vendored OpenAPI document.
+
+- **Named reads:** `get_contribution`, `get_deposit_summary`, `get_deposit`, `get_donor`, `list_campaigns`, `list_chargebacks`, `list_contributions`, `list_deposits`, `list_donors`, `list_locations`, `list_payment_methods`, `list_refunds`, `list_subscriptions`.
+- **Named writes:** None.
+- **API reads:** `overflow_api_details`, `overflow_api_read`, `overflow_api_search`.
+- **API writes:** `overflow_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/overflow).
+
+</details>
+
+<details>
+<summary>Planning Center (27 tools)</summary>
+
+[Setup](#planning-center). **API source:** Composed upstream OpenAPI contracts: [/people/v2](https://developer.planning.center/docs/#/people/2026-06-04), [/services/v2](https://developer.planning.center/docs/#/services/2018-11-01), [/groups/v2](https://developer.planning.center/docs/#/groups/2023-07-10), [/check-ins/v2](https://developer.planning.center/docs/#/check-ins/2025-05-28), [/calendar/v2](https://developer.planning.center/docs/#/calendar/2026-06-22), [/registrations/v2](https://developer.planning.center/docs/#/registrations/2025-05-01), [/giving/v2](https://developer.planning.center/docs/#/giving/2019-10-18), [/publishing/v2](https://developer.planning.center/docs/#/publishing/2024-03-25), [/webhooks/v2](https://developer.planning.center/docs/#/webhooks/2022-10-20), [/api/v2](https://developer.planning.center/docs/#/api/2026-09-24).
+
+- **Named reads:** `get_me`, `get_person`, `get_plan` (services enabled), `list_donations` (giving enabled), `list_funds` (giving enabled), `list_group_memberships` (groups enabled), `list_groups` (groups enabled), `list_person_field_data`, `list_person_notes`, `list_person_schedules` (services enabled), `list_plans` (services enabled), `list_service_types` (services enabled), `list_teams` (services enabled), `list_workflow_cards`, `list_workflows`, `search_people`.
+- **Named writes:** `add_group_member` (groups enabled), `add_person_note`, `add_workflow_card`, `apply_workflow_card_action`, `create_person`, `schedule_plan_person` (services enabled), `update_person`.
+- **API reads:** `pco_api_details`, `pco_api_read`, `pco_api_search`.
+- **API writes:** `pco_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/planning-center).
+
+</details>
+
+<details>
+<summary>QuickBooks Online (10 tools)</summary>
+
+[Setup](#quickbooks-online). **API source:** Hand-authored endpoint contracts. No vendored OpenAPI document.
+
+- **Named reads:** `get_company_info`, `get_record`, `get_report`, `search_records`.
+- **Named writes:** `create_customer`, `create_invoice`, `update_customer`.
+- **API reads:** `quickbooks_api_details`, `quickbooks_api_read`, `quickbooks_api_search`.
+- **API writes:** None.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/quickbooks).
+
+</details>
+
+<details>
+<summary>Google Sheets (13 tools)</summary>
+
+[Setup](#google-sheets). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/sheets/api/reference/rest).
+
+- **Named reads:** `get_spreadsheet`, `get_values`.
+- **Named writes:** `add_sheet`, `append_values`, `batch_update_spreadsheet`, `batch_update_values`, `clear_values`, `create_spreadsheet`, `update_values`.
+- **API reads:** `sheets_api_details`, `sheets_api_read`, `sheets_api_search`.
+- **API writes:** `sheets_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/sheets).
+
+</details>
+
+<details>
+<summary>Google Slides (19 tools)</summary>
+
+[Setup](#google-slides). **API source:** [Google Discovery conversion](https://developers.google.com/workspace/slides/api/reference/rest).
+
+- **Named reads:** `get_page`, `get_presentation`, `get_slide_thumbnail`, `list_comments`, `list_layouts`.
+- **Named writes:** `batch_update_presentation`, `create_comment_reply`, `create_comment`, `create_presentation`, `create_slide`, `delete_comment_reply`, `delete_comment`, `replace_all_text`, `update_comment_post`, `update_comment_thread`.
+- **API reads:** `slides_api_details`, `slides_api_read`, `slides_api_search`.
+- **API writes:** `slides_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/slides).
+
+</details>
+
+<details>
+<summary>Stripe (6 tools)</summary>
+
+[Setup](#stripe). **API source:** [Upstream OpenAPI](https://raw.githubusercontent.com/stripe/openapi/master/latest/openapi.spec3.json).
+
+- **Named reads:** `get_balance_summary`, `get_stripe_account_info`.
+- **Named writes:** None.
+- **API reads:** `stripe_api_details`, `stripe_api_read`, `stripe_api_search`.
+- **API writes:** `stripe_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/stripe).
+
+</details>
+
+<details>
+<summary>Tithe.ly (11 tools)</summary>
+
+[Setup](#tithely). **API source:** Hand-authored endpoint contracts; [upstream endpoint checks](https://docs.tithe.ly/reference/). No vendored OpenAPI document.
+
+- **Named reads:** `get_charge`, `get_recurring_charge`, `list_accounts`, `list_charges`, `list_organizations`, `list_payment_methods`, `list_recurring_charges`.
+- **Named writes:** None.
+- **API reads:** `tithely_api_details`, `tithely_api_read`, `tithely_api_search`.
+- **API writes:** `tithely_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/tithely).
+
+</details>
+
+<details>
+<summary>Vercel (11 tools)</summary>
+
+[Setup](#vercel). **API source:** [Upstream OpenAPI](https://openapi.vercel.sh/).
+
+- **Named reads:** `get_deployment_build_logs`, `get_runtime_logs`, `list_project_env_vars`, `list_teams`.
+- **Named writes:** `update_project_env_var`, `upsert_project_env_var`.
+- **API reads:** `vercel_api_details`, `vercel_api_read`, `vercel_api_search`.
+- **API writes:** `vercel_api_upload`, `vercel_api_write`.
+
+**Contributor evidence (optional):** [contracts, adapters and review](https://github.com/zackbart/connecta/tree/main/src/providers/vercel).
+
+</details>
+
+<!-- provider-inventory:end -->
+
+## API operation discovery and boundaries
+
 Standard API operation search accepts resource nouns, actions and conversational
 phrasing. A leading create/add/update/edit/make/set/apply/change/rename/send/delete/remove/cancel/stop
 with an object prefers reviewed writes and keeps later read words as nouns, as in
@@ -963,3 +1318,140 @@ body and `result.page` carries continuation. Resource keys, decryption JWTs and
 private download destinations remain withheld on named and hatch responses.
 A 404 does not prove absence. Auxiliary lookup failures send no move; an actual
 write failure can have an unknown outcome and requires a read before repetition.
+
+## QuickBooks Online
+
+Available from 0.36.0. Use the deployment's own Intuit app and configure one
+fixed QuickBooks Online company per connector. Multiple companies need separate
+connector IDs and separate consent; tool arguments cannot select another
+company or environment.
+
+```ts
+import { quickbooks } from "@zackbart/connecta/providers/quickbooks";
+
+const accounting = quickbooks("accounting", {
+  purpose: "Company accounting reports and invoice reconciliation",
+  realmId: process.env.QUICKBOOKS_REALM_ID!,
+  environment: "sandbox",
+  clientId: process.env.QUICKBOOKS_CLIENT_ID!,
+  clientSecret: process.env.QUICKBOOKS_CLIENT_SECRET!,
+});
+```
+
+Create an Intuit QuickBooks Online app, enable the Accounting API and obtain
+the client ID and secret for the selected environment. Sandbox and production
+credentials are separate. Register
+`<publicUrl>/oauth/callback/accounting` as an exact redirect URI. Set the
+numeric company/realm ID in deployment configuration, then connect through
+the operator UI or `authorize_connector`. After valid OAuth state, the callback
+must contain exactly one `realmId` equal to the configured value before any
+code exchange. Selecting another company fails authorization. Store app
+credentials in deployment secrets; token import and endpoint overrides are
+not supported.
+
+OAuth defaults to one shared grant; `authScope: "personal"` instead gives each
+owner a grant for the same fixed company. The requested
+`com.intuit.quickbooks.accounting` scope permits both reads and writes at Intuit.
+This provider defaults to `readOnly: true`. Set `readOnly: false` explicitly in
+deployment code to enable the three bounded named writes below. Connector,
+endpoint and pool read-only policy still refuses writes before validation or
+dispatch. It reuses sealed grants, coordinated refresh,
+rotation and revocation. Access tokens last one hour; refresh authorization
+requires use within 100 days and expires absolutely after five years. Reconnect
+when Intuit requires consent again. Do not assume refresh extends the absolute
+window or infer expiry from provider-specific fields.
+
+`get_company_info`, `search_records`, `get_record` and `get_report` are the
+named reads. The reviewed record families are customers, vendors, accounts,
+items, invoices, bills, received accounting payments and bill payments.
+`search_records` accepts at most eight structured AND filters and returns up to
+100 rows per page (25 by default; configurable with `defaultPageSize`). Its
+signed continuation binds the original arguments, company, environment,
+connector and credential owner. Continue with unchanged arguments and cursor.
+Search is not a snapshot; concurrent accounting changes can alter later pages.
+
+Reports are allowlisted to ProfitAndLoss, BalanceSheet, CashFlow,
+AgedReceivables and AgedPayables. P&L and Cash Flow accept `start_date`; all
+accept `end_date` (translated to `report_date` with `aging_method: "Report_Date"`
+for AR/AP aging). P&L and Balance Sheet accept `accounting_method` (`Cash` or
+`Accrual`). No verified currency override is exposed; inspect the returned
+Header.Currency and never combine unlike currencies. Unsupported combinations fail before
+dispatch. Report Header, Columns and nested Rows retain section identity,
+column metadata and empty amount strings. Check the returned period, basis
+and currency; an empty amount is never converted to zero. Responses use the
+modernized report service in effect since August 31, 2026. Requests explicitly
+use the supported minor-version floor 75.
+
+`quickbooks_api_search` and `quickbooks_api_details` inspect reviewed
+operations. `quickbooks_api_read` reaches only indexed record/company/report
+GETs inside this company's configured host and path. `/query` is refused;
+use the named structured search. Unreviewed entities, arbitrary SQL, URL,
+realm, scope and token overrides and arbitrary writes are unavailable. Desktop,
+Payments and Payroll APIs are outside this provider.
+
+With `readOnly: false`, `create_customer` accepts only DisplayName and optional
+CompanyName. `update_customer` requires caller-observed Id and SyncToken and
+uses `sparse: true` for those naming fields; a stale version fails without a
+version fetch or overwrite. DisplayName must be unique across customers,
+vendors and employees.
+
+`create_invoice` creates a real accounting transaction, never a draft, only
+for a verified US company and a customer using USD. The reviewed autosend
+contract is US-specific; the initial money contract uses two-decimal USD
+units. It requires an observed active customer, currency USD, an explicit positive
+exchange rate, transaction/due dates, DocNumber and 1–20 active Service-item
+lines. Amounts are positive decimal-unit strings with exactly two fractional
+digits, at most 999999999.99 per line. Every line explicitly supplies one unit
+and its price. Preflight reads verify the fixed company Country is US, then
+recheck the customer currency and item type and activity; they are not an atomic snapshot. No default prices, dates or rates,
+and no implicit customer/item creation, are used. QuickBooks computes taxes and
+totals, and locale/company rules may reject the narrow request. Inspect the
+returned CurrencyRef, ExchangeRate and totals.
+Each request after the first charges the same call-admission budget before
+dispatch. Returned references, dates, rate and service prices must match the
+admitted intent; contradictions produce an unknown, non-retryable outcome.
+
+Creation fixes EmailStatus to `NotSet` and IPN/online/card/ACH/PayPal/Affirm
+payment flags to false, accepts no email fields, and never calls a send endpoint.
+Intuit's documented autosend path requires company opt-in, enabled online
+payments and `NeedToSend` with BillEmail; the fixed creation body withholds
+those request conditions. Invoice updates remain unavailable because retaining
+an existing send-ready state is not established safe, and resetting that state
+would change existing payment settings. Deletes, voids, delivery, payment
+execution, batch and other accounting writes remain unavailable. The API hatch
+refuses POSTs even when named writes are enabled.
+
+Sparse field preservation, a current SyncToken and requestid do not establish
+that an invoice update cannot send email. For example, changing only DueDate
+on an invoice with NeedToSend and enabled card/ACH payments retains those
+settings; omitting email fields does not disable them. Do not reset delivery or
+payment settings to work around the unavailable update, or replace the invoice
+with a new one. No unsent-only update tool is currently exposed either.
+
+Each write requires `requestId`, a stable identifier for the exact intent,
+unique across all requests/tools for this company: 1–50 ASCII letters, digits,
+underscores or hyphens, beginning with a letter or digit. It is sent as Intuit's
+`requestid` query parameter with minorversion 75. The vendor recognizes repeated
+content and ID; no retention duration is established. This never permits
+Connecta to replay automatically: every dispatched write has one attempt,
+including 401, timeout, server failure and malformed success.
+
+Reconcile an unknown create through reads before another intent: customer
+DisplayName (including inactive matches when relevant), or invoice DocNumber
+plus CustomerRef and currency, dates, lines and computed amounts. DocNumber may
+repeat and is not proof by itself. Do not blindly create again with a new ID;
+report ambiguity. Reconcile unknown updates by the known record Id and version.
+The requestId supplies no lookup endpoint or permanent retention guarantee.
+
+All named and hatch responses apply the same closed privacy projection before
+`fields` narrows it. Public Id and SyncToken versions, accounting references,
+amounts and minimal display names remain; contact emails/phones/addresses,
+bank/card/tax identifiers, private notes, credentials and private URLs are
+withheld. No `sensitiveFields` or `raw` option widens these results. Reduce
+financial records to task-relevant aggregates before returning them to a user.
+`maxResultBytes`, `callAdmission` and the standard provider title/instructions
+options remain available. No default admission budget is declared: account for
+other integrations sharing the app when configuring one. Intuit documents
+500 requests per minute per company and 10 per second per company/app in both
+environments; after HTTP 429, wait at least 60 seconds. Local admission is per
+runtime and cannot coordinate other deployments' spending.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zackbart/connecta",
-  "version": "0.35.0",
+  "version": "0.36.1",
   "type": "module",
   "sideEffects": false,
   "description": "One MCP to rule them all — a single MCP endpoint aggregating many downstream connectors behind a code-first surface of six meta-tools.",
@@ -107,6 +107,10 @@
       "types": "./dist/providers/gmail/index.d.ts",
       "import": "./dist/providers/gmail/index.js"
     },
+    "./providers/granola": {
+      "types": "./dist/providers/granola/index.d.ts",
+      "import": "./dist/providers/granola/index.js"
+    },
     "./providers/overflow": {
       "types": "./dist/providers/overflow/index.d.ts",
       "import": "./dist/providers/overflow/index.js"
@@ -115,6 +119,10 @@
       "types": "./dist/providers/planning-center/index.d.ts",
       "import": "./dist/providers/planning-center/index.js"
     },
+    "./providers/quickbooks": {
+      "types": "./dist/providers/quickbooks/index.d.ts",
+      "import": "./dist/providers/quickbooks/index.js"
+    },
     "./providers/sheets": {
       "types": "./dist/providers/sheets/index.d.ts",
       "import": "./dist/providers/sheets/index.js"
@@ -167,8 +175,6 @@
     "test:browser:install": "playwright install chromium",
     "test:browser": "playwright test",
     "test:browser:snapshots": "node scripts/update-operator-snapshots.mjs",
-    "goldens:update": "node scripts/update-goldens.mjs",
-    "pregoldens:update": "node scripts/generate-version.mjs && pnpm run build:operator-ui",
     "pretest:browser:snapshots": "pnpm run build:operator-ui",
     "test:node": "vitest run --config vitest.config.node.ts",
     "test:workers": "vitest run --project workers",
@@ -185,9 +191,11 @@
     "eval:selftest": "tsx eval/selftest.ts",
     "eval:agent": "tsx eval/run-agent.ts",
     "eval:smoke": "tsx eval/run-smoke.ts",
+    "eval:outcomes": "tsx eval/run-outcomes.ts",
+    "preeval:outcomes": "node scripts/generate-version.mjs && pnpm run build:operator-ui",
     "eval:perf": "tsx eval/run-perf.ts",
     "eval:report": "tsx eval/report.ts",
-    "check:static": "node --test scripts/check-provider-exemptions.test.mjs && pnpm run format:check && pnpm run check:providers-generated && pnpm run check:docs && pnpm run check:changes && pnpm run check:operator-ui && pnpm run check:clerk-sdk && pnpm run check:lint && pnpm run check:unused && pnpm run typecheck",
+    "check:static": "pnpm run format:check && pnpm run check:providers-generated && pnpm run check:docs && pnpm run check:changes && pnpm run check:operator-ui && pnpm run check:clerk-sdk && pnpm run check:lint && pnpm run check:unused && pnpm run typecheck",
     "check:build": "pnpm run build && pnpm run check:declarations && pnpm run check:bundle",
     "check:fast": "pnpm run check:static && vitest run --config vitest.config.node.ts --changed origin/main --passWithNoTests",
     "check": "pnpm run check:static && pnpm run test && pnpm run check:build",
@@ -252,11 +260,7 @@
     "@fontsource-variable/jetbrains-mono": "^5.3.0",
     "@playwright/test": "^1.62.0",
     "@radix-ui/react-dialog": "^1.2.0",
-    "@radix-ui/react-slot": "^1.4.0",
     "@radix-ui/react-tabs": "^1.1.22",
-    "@tailwindcss/node": "^4.3.3",
-    "@tailwindcss/oxide": "^4.3.3",
-    "@tanstack/react-query": "^5.104.1",
     "@tanstack/react-router": "^1.170.41",
     "@types/node": "^22.0.0",
     "@types/react": "^19.3.0",
@@ -270,7 +274,6 @@
     "quickjs-emscripten": "^0.32.0",
     "react": "^19.3.0",
     "react-dom": "^19.3.0",
-    "tailwindcss": "^4.3.3",
     "tsx": "^4.23.1",
     "typescript": "^5.9.3",
     "undici": "6.29.1",

package/templates/node/package.json

@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "@clerk/backend": "^3.12.0",
-    "@zackbart/connecta": "0.35.0",
+    "@zackbart/connecta": "0.36.1",
     "quickjs-emscripten": "0.32.0",
     "undici": "6.29.1"
   },

package/dist/operator-ui/agents.d.ts

@@ -1,75 +0,0 @@
-import type { OperatorAgent, OperatorUiContractV2 } from "./contract.js";
-import { type Notice, type RequestFailureFacts, type Tone } from "./view.js";
-/**
- * The Tokens page's rows, computed from the slot list and contract v2 alone.
- * Agents are declared in code: a row's only controls are its token's issue,
- * rotate and revoke, so nothing here creates, renames or rebinds one.
- */
-/** One declared agent's token slot, as `GET /ui/access-tokens` returns it. */
-export type AgentSlot = ({
-    name: string;
-    state: "none";
-} | {
-    name: string;
-    state: "issued";
-    issuedAt: string;
-} | {
-    name: string;
-    state: "revoked";
-    revokedAt: string;
-}) & {
-    /**
-     * The route's opaque slot revision; it changes on every slot commit (P3b,
-     * #837). A slot read without one is unresolved and never acted on.
-     */
-    revision?: string;
-};
-/** Issue and rotate are the same request; the slot's state names it. */
-export type SlotAction = "issue" | "rotate" | "revoke";
-export interface AgentRow {
-    name: string;
-    /** Pools it belongs to, from `agents[].pools`; empty when the contract does not list it. */
-    pools: string[];
-    credentialTypes: OperatorAgent["credentialTypes"];
-    slot: AgentSlot | null;
-    /**
-     * Whether `slot` comes from the live slot list. Only a live slot can be
-     * acted on: one known only from the contract may be stale, so its controls
-     * are disabled until a refresh lists it.
-     */
-    live: boolean;
-    /** Why its controls are off, or null when they work. */
-    blocked: string | null;
-    /** Its latest activity row; null is "never" (or history that is off). */
-    lastSeenAt: string | null;
-    actions: SlotAction[];
-}
-export declare function slotActions(slot: Pick<AgentSlot, "state">): SlotAction[];
-/**
- * One agent's slot, resolved once for both what the row shows and what an
- * action may do. The live slot list is authoritative; the contract's copy is
- * shown only for an agent the list does not have, and is never acted on.
- */
-export declare function resolveSlot(contract: OperatorUiContractV2 | null, slots: AgentSlot[], name: string): {
-    slot: AgentSlot;
-    live: boolean;
-} | null;
-/**
- * One row per declared agent, in the slot list's order, then any agent only
- * the contract lists. The contract adds pools and last seen.
- */
-export declare function agentRows(contract: OperatorUiContractV2 | null, slots: AgentSlot[], unresolved?: readonly string[]): AgentRow[];
-export declare function slotBadge(slot: Pick<AgentSlot, "state"> | null): {
-    label: string;
-    tone: Tone;
-};
-/** When the slot last changed, issued or revoked (its badge says which); a dash when it never has. */
-export declare function slotSince(slot: AgentSlot | null, format: (value: string) => string): string;
-export declare function lastSeenLabel(lastSeenAt: string | null, format: (value: string) => string): string;
-/**
- * Why a token operation did not land, in fixed sentences keyed by status.
- * `outcome_unknown` (503) and `aborted` (499) are failures like any other and
- * are never retried for the operator: an unknown rotation returned no secret,
- * and only a new, deliberate rotation produces one.
- */
-export declare function tokenFailureNotice(action: SlotAction, name: string, facts: RequestFailureFacts, productName: string): Notice;