@zackbart/connecta 0.36.0 → 0.36.1

package/CHANGELOG.md

@@ -2,6 +2,48 @@
 
 All notable changes to this package are documented here.
 
+## 0.36.1 — 2026-10-27
+
+Connecta 0.36.1 adds read-only Granola workspace API access and lets Eve agents select a pool before each model call. Pool changes keep guidance caches separate and prevent replay of parked calls against a different pool. Existing static-pool configuration and public provider tools keep their behavior.
+
+The contributor checks now center on real Node/Workers, browser, persistence and installed-package journeys. Every PR runs browser, audit, Eve and Docker package checks. This patch requires no deployment configuration migration. Granola operators supply a workspace key; Eve pool selectors are optional.
+
+QuickBooks invoice updates remain unavailable while their delivery contract is unresolved. The workload validation recipe is reproducible locally; live validation requires separate authorization and is not claimed by this release.
+
+### Added
+
+- Let the Eve helper choose a pool before each model call with an app-owned selector, fence parked calls after pool changes, and cache instructions and failure backoff per endpoint. Instruction requests also accept a custom client name.
+- Add a read-only Granola workspace API provider for meeting notes, details, paginated transcripts, folders and spaces, with encrypted shared credentials and the standard operation search/details/read surface.
+
+### Changed
+
+- Add a locally reproducible Eve 0.84 workload fixture with independently verified audience-exchange controls and retained server cancellation receipts, and clarify that custom-audience workload tokens are refused. Live validation still requires separate authorization for disposable resources. Verify the standard 2 GiB Fluid resource preset and require confirmed cleanup even when evidence persistence fails.
+- Replace invariant/spec test-title bookkeeping with executable evidence file
+  references and the existing stateful behavior journeys. Require installed-package,
+  generated-deployment and Docker smoke in the shared CI build job, with browser,
+  audit and real Eve compatibility on every PR. Remove the path classifier,
+  duplicate package workflow and completed migration's cross-commit exemption guard.
+  Keep focused runtime probes, provider contracts, build/declaration checks and the
+  single fail-closed `check` status.
+- Remove completed provider-migration exemptions, legacy generator fixtures and
+  unused internal list/guide adapters. Consolidate contributor provider and release
+  workflows around the current standard without changing public tools or guides.
+- Replace lower-layer operator, configuration and storage test mirrors with real browser, SQLite restart and deployed Node/Workers persistence journeys. Preserve focused SQL rollback, expiry, isolation, secrecy and cancellation probes.
+- Replace redundant auth, write, privacy and runtime test matrices with real HTTP/MCP identity, one-send recovery, secrecy and socket-cancellation journeys. Require prompt downstream closure and admission release after client cancellation, before the ordinary request deadline. Retain focused security and lifetime fault probes without changing runtime behavior or public APIs.
+- Clarify why QuickBooks invoice updates remain unavailable: sparse field preservation and request IDs do not establish email suppression for existing send-ready invoices. Record the authoritative contract gaps and a proposed unsent-only update for further review; no accounting write surface is added.
+- Replace the remaining catalog-wide provider failure sweep and redundant
+  provider/HTTP agreement checks with shared stateful outcomes and real HTTP
+  failure/recovery journeys. Retain vendor-specific privacy, MIME, ownership,
+  revision, physical-send and lifetime fault probes; remove five internal paging
+  helpers used only by the retired tests and private exports hidden by the old
+  source scan. Require successful, complete delivered reconciliation data for the
+  Tithe.ly cancellation journey; failed, empty, malformed and incomplete replies
+  cannot establish recovery. Public provider behavior is unchanged.
+
+### Fixed
+
+- Use permanently unreachable loopback port zero for native transport-failure probes so later test servers cannot answer them. Verify each platform's native connection error while preserving Node/Workers write-outcome, retry, reset and abort assertions.
+
 ## 0.36.0 — 2026-10-27
 
 Connecta 0.36.0 adds a maintained QuickBooks Online Accounting provider for one fixed sandbox or production company per connector. It offers company identity, bounded record searches, individual records and hierarchical financial reports, with contact details and payment credentials withheld. Deployments can opt into customer creation, sparse customer naming updates and unsent US service-invoice creation by setting `readOnly: false` on the connector. Writes need a stable request ID and are never replayed automatically; the API hatch stays read-only, and invoice updates remain unavailable. See [QuickBooks Online](https://github.com/zackbart/connecta/blob/v0.36.0/documentation/providers.md#quickbooks-online).

package/README.md

@@ -24,7 +24,7 @@ Connecta supplies the service credentials, so the agent doesn't need them.
 
 ## What you can connect
 
-Maintained connections: <!-- providers:start -->Breeze ChMS, Church Community Builder, Cloudflare, GitHub, Gmail, Google Docs, Google Drive, Google Forms, Google Sheets, Google Slides, Overflow, Planning Center, QuickBooks Online, Stripe, Tithe.ly, and Vercel<!-- providers:end -->.
+Maintained connections: <!-- providers:start -->Breeze ChMS, Church Community Builder, Cloudflare, GitHub, Gmail, Google Docs, Google Drive, Google Forms, Google Sheets, Google Slides, Granola, Overflow, Planning Center, QuickBooks Online, Stripe, Tithe.ly, and Vercel<!-- providers:end -->.
 
 Maintained API providers pair reviewed vendor contracts with tools built by
 Connecta. See the [API sources and tool inventory](./documentation/providers.md#api-sources-and-tool-inventory)

package/bin/version.mjs

@@ -1,3 +1,3 @@
 // Generated from package.json by scripts/generate-version.mjs.
 // Workers-safe: no runtime filesystem read or deployment override.
-export const CONNECTA_VERSION = "0.36.0";
+export const CONNECTA_VERSION = "0.36.1";

package/dist/http/hatch-paging.js

@@ -1,5 +1,5 @@
-// Internal opt-in adapters for the standard hatch. No maintained provider opts
-// in until its separate step-2 migration. Inputs have crossed connection safety.
+// Internal opt-in adapters for the standard hatch. Inputs have crossed
+// connection safety.
 import { ConnectorCallError } from "../errors.js";
 function record(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};

package/dist/http/paging.js

@@ -1,29 +1,17 @@
 // Provider kit (decision 0010, B.4). Unreachable from src/index.ts.
 //
-// Paging is a strategy plus one cursor codec. A strategy turns "the next page
-// after this cursor" into a vendor request and reads back rows and the next
-// vendor cursor; tools take one page, and `allRows` walks every page as a
-// Stream for programs and the hatch. The codec is the only place a cursor is
-// minted: `plain` hands the vendor's cursor through; `bound` ties it to the tool and its
-// arguments so a cursor from another call is refused instead of silently
-// reading the wrong list.
-import { Effect, Option, Schema, Stream } from "effect";
+// List tools take one page at a time. Lookahead detects an extra row; bound
+// cursors authenticate the tool, arguments, connection and credential owner.
+import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../errors.js";
 import { Refusal } from "./errors.js";
-import { confinementBase } from "../http-policy.js";
 import { canonicalJson } from "../canonical-json.js";
 import { ContinuationBinding, ContinuationStorage } from "../runtime/call.js";
 import { continuationKeys } from "../storage/keys.js";
-/** The `page` object every list tool returns. */
-export const PageInfo = Schema.Struct({
-    hasMore: Schema.Boolean,
-    nextCursor: Schema.NullOr(Schema.String),
-});
 /**
  * The standard `page` (decision 0011 S2): `nextCursor` is present exactly
  * when `hasMore` is true and continuation is safe. A hatch adapter can report
  * more data without a cursor when its continuation cannot be confined.
- * Step-1 lists keep `PageInfo` until their step 2.
  */
 export const StandardPage = Schema.Struct({
     hasMore: Schema.Boolean,
@@ -55,79 +43,6 @@ export function lookahead(options) {
         return { rows, page: { hasMore, nextCursor: id } };
     });
 }
-/** Vendor-supplied continuation, read only after the connection made its data safe. */
-export function token(options) {
-    return Effect.flatMap(Effect.suspend(options.fetch), ({ rows, hasMore, nextCursor }) => {
-        if (hasMore && !nextCursor)
-            return badPage("The vendor reported another page without a next cursor.");
-        return Effect.succeed({ rows, page: { hasMore, nextCursor: hasMore ? nextCursor : null } });
-    });
-}
-/** Offset paging advances by the rows actually returned, with a total when supplied. */
-export function offset(options) {
-    return Effect.gen(function* () {
-        yield* position(options.offset, 0);
-        yield* position(options.limit, 1);
-        return yield* Effect.map(options.fetch(options.offset, options.limit), ({ rows, total }) => {
-            const next = options.offset + rows.length;
-            const hasMore = rows.length > 0 && (total === undefined ? rows.length >= options.limit : next < total);
-            return { rows, page: { hasMore, nextCursor: hasMore ? String(next) : null } };
-        });
-    });
-}
-/** Page numbers from a vendor's safe body or headers, with full-page fallback. */
-export function page(options) {
-    return Effect.gen(function* () {
-        yield* position(options.page, 1);
-        yield* position(options.limit, 1);
-        return yield* Effect.map(options.fetch(options.page, options.limit), ({ rows, hasMore, totalPages }) => {
-            const more = hasMore ?? (totalPages === undefined ? rows.length >= options.limit : options.page < totalPages);
-            return { rows, page: { hasMore: more, nextCursor: more ? String(options.page + 1) : null } };
-        });
-    });
-}
-/** Extract only a cursor from a next URL confined to this connection's origin and path. */
-export function link(options) {
-    const base = confinementBase("Paging", options.baseUrl);
-    const prefix = base.pathname.replace(/\/+$/, "");
-    if (!options.param)
-        throw new Error("Link paging needs a cursor parameter.");
-    return Effect.flatMap(Effect.suspend(options.fetch), ({ rows, next }) => {
-        if (!next)
-            return Effect.succeed({ rows, page: { hasMore: false, nextCursor: null } });
-        let url;
-        try {
-            url = new URL(next, base);
-        }
-        catch {
-            return badPage("The vendor returned an invalid next-page URL.");
-        }
-        if (url.origin !== base.origin ||
-            !`${url.pathname}/`.startsWith(`${prefix}/`) ||
-            url.username ||
-            url.password ||
-            url.hash)
-            return badPage("The vendor returned a next-page URL outside this connection.");
-        const cursors = url.searchParams.getAll(options.param);
-        if (cursors.length !== 1 || !cursors[0])
-            return badPage("The vendor returned no unique next-page cursor.");
-        return Effect.succeed({ rows, page: { hasMore: true, nextCursor: cursors[0] } });
-    });
-}
-function position(value, minimum) {
-    return Number.isSafeInteger(value) && value >= minimum
-        ? Effect.void
-        : Effect.fail(new Refusal({
-            error: new ConnectorCallError("invalid_args", "Paging positions and limits must be whole numbers within their bounds."),
-        }));
-}
-function badPage(message) {
-    return Effect.fail(new Refusal({ error: new ConnectorCallError("connector_call_failed", message, { retryable: false }) }));
-}
-/** Every row of every page, fetched as the stream is pulled. */
-export function allRows(fetchPage) {
-    return Stream.paginate(undefined, (cursor) => Effect.map(fetchPage(cursor), ({ rows, page }) => [rows, Option.fromNullishOr(page.hasMore ? page.nextCursor : null)]));
-}
 const STRAY_CURSOR = "This cursor belongs to a different call. Pass back the nextCursor from the previous page of this same call, with the same arguments.";
 /** Resolved, nonextractable keys only: no request promise is retained between calls. */
 const signingKeys = new WeakMap();

package/dist/http/provider.js

@@ -191,8 +191,7 @@ export function defineApiProvider(definition) {
             // The declared fact the Writes convention states must match what the write builders send.
             if (idempotencyKey !== undefined && [...builtTools, ...hatchTools].some(takesIdempotencyKey) !== idempotencyKey)
                 throw new Error(`${metadata.title} declares idempotencyKey: ${idempotencyKey}, but its write tools ${idempotencyKey ? "send no" : "send an"} idempotency key.`);
-            const usageGuide = guide(options);
-            const renderedGuide = "content" in usageGuide ? usageGuide : provider.usageGuide(usageGuide);
+            const renderedGuide = provider.usageGuide(guide(options));
             const connector = tracksEveryRequest(api(id, {
                 ...(defaultCallAdmission
                     ? {

package/dist/http/tools.js

@@ -22,7 +22,7 @@ import { causeError, runEdge } from "../runtime/run.js";
 import { recordUnauthorized, Refusal, RequestRefused, toConnectorCallError, withheldDefect, } from "./errors.js";
 import { fieldsInput, fieldsProblem, selectFields } from "./fields.js";
 import { catalogSchema, Integer } from "./json-schema.js";
-import { boundCursor, Cursor, PageInfo, StandardPage } from "./paging.js";
+import { boundCursor, Cursor, StandardPage } from "./paging.js";
 import { Classification, Dispatches, IdempotencyKey, Recovery, ReadTool, WriteCapacity, writeRequestKey, fromConnectorContext, } from "./services.js";
 const inputs = new WeakMap();
 const keyed = new WeakSet();
@@ -118,28 +118,6 @@ export function get(connection, spec) {
 export function list(connection, spec) {
     if (spec.cursor !== undefined && spec.cursor !== "plain" && spec.cursor !== "bound")
         throw new Error('A list cursor must be "plain" or "bound".');
-    if (!("key" in spec))
-        return standardList(connection, spec);
-    if (!spec.key || spec.key === "page")
-        throw new Error("A list needs a row key distinct from page.");
-    return read(connection, {
-        ...spec,
-        output: Schema.Struct({ [spec.key]: Schema.Array(spec.row), page: PageInfo }),
-        run: (args) => Effect.gen(function* () {
-            const fields = args;
-            const supplied = typeof fields.cursor === "string" ? fields.cursor : undefined;
-            const cursor = supplied !== undefined && spec.cursor === "bound"
-                ? yield* boundCursor.decode(spec.name, fields, supplied)
-                : supplied;
-            const result = yield* spec.page(args, cursor);
-            const nextCursor = result.page.nextCursor !== null && spec.cursor === "bound"
-                ? yield* boundCursor.encode(spec.name, fields, result.page.nextCursor)
-                : result.page.nextCursor;
-            return { [spec.key]: result.rows, page: { ...result.page, nextCursor } };
-        }),
-    });
-}
-function standardList(connection, spec) {
     const { default: size, max } = spec.limit;
     if (spec.total !== undefined && spec.total !== true)
         throw new Error(`${spec.name} total must opt in with true for a vendor-stated exact count.`);

package/dist/program-writes.js

@@ -4,7 +4,6 @@ import { CONFIG_DEFAULTS } from "./config-defaults.js";
 import { Effect } from "effect";
 import { jsonResult } from "./meta-tools.js";
 import { classifyWriteOutcome } from "./write-outcome.js";
-export { classifyWriteOutcome } from "./write-outcome.js";
 /** Writes one program may send (`execute.maxWrites`), unless configured. */
 export const DEFAULT_MAX_WRITES = CONFIG_DEFAULTS.execute.maxWrites;
 /** What a dispatched write's outcome says about whether it landed. */

package/dist/providers/_shared/sensitive-fields.js

@@ -1,22 +1,6 @@
 // A provider's sensitive fields leave every result unless deployment code
 // returns them; no tool argument can. Shared by the providers whose raw rows
 // and hatches would otherwise reach what their projections drop.
-/** What `raw: true` and the hatches return, under the deployment's `sensitiveFields` choice. */
-export function unprojectedResults(sensitiveFields, names) {
-    if (sensitiveFields === "return")
-        return (body) => body;
-    const dropped = new Set(names);
-    const strip = (value) => {
-        if (Array.isArray(value))
-            return value.map(strip);
-        if (!value || typeof value !== "object")
-            return value;
-        return Object.fromEntries(Object.entries(value)
-            .filter(([name]) => !dropped.has(name))
-            .map(([name, entry]) => [name, strip(entry)]));
-    };
-    return (body) => strip(body);
-}
 /** Refuse anything but the two choices, at construction (INV-11). */
 export function sensitiveFieldsOption(provider, value) {
     if (value === undefined)

package/dist/providers/breeze/api.js

@@ -66,7 +66,7 @@ const PATH_PATTERN = /^(\/[a-z0-9_]+)+\/?$/;
  * which reads the calendar without a key, and its embed key. Neither hatch
  * returns them.
  */
-export function withoutCalendarFeeds(path, body) {
+function withoutCalendarFeeds(path, body) {
     if (path !== "/events/calendars/list")
         return body;
     const strip = (value) => {
@@ -80,7 +80,7 @@ export function withoutCalendarFeeds(path, body) {
     };
     return strip(body);
 }
-export function normalizedPath(raw) {
+function normalizedPath(raw) {
     const path = typeof raw === "string" ? raw : "";
     if (!PATH_PATTERN.test(path)) {
         throw new ConnectorCallError("invalid_args", "A Breeze path is relative to /api, begins with '/', and uses only lowercase letters, digits, underscores, and '/' — for example /tags/list_folders. No query string, host, or dot segments.");

package/dist/providers/ccb/api.js

@@ -238,7 +238,7 @@ export const CCB_INDEX = new OperationIndex({
 export const getMe = get("getMe", "/me", { success: Schema.Unknown });
 export const CcbApi = indexedVendor("CCB", CCB_INDEX, [getMe]);
 const safety = valueSafety(CCB_VALUE_SAFETY, () => CCB_INDEX);
-export const CCB_PAGE_HEADERS = ["x-page", "x-next-page", "x-total-pages", "x-total"];
+const CCB_PAGE_HEADERS = ["x-page", "x-next-page", "x-total-pages", "x-total"];
 export function ccbPageInfo(headers, page, size, rows) {
     const number = (name) => {
         const raw = headers[name];

package/dist/providers/cloudflare/api.js

@@ -157,7 +157,7 @@ export const UPLOADS = [
  * pin, zone creation must name a pinned account, and the rest is public data.
  * Every other unscoped operation is refused under a pin (default deny).
  */
-export const PIN_SAFE_UNSCOPED = new Set([
+const PIN_SAFE_UNSCOPED = new Set([
     "GET /user",
     "GET /user/tokens/verify",
     "GET /accounts",
@@ -177,7 +177,7 @@ export const PIN_SAFE_UNSCOPED = new Set([
     "POST /graphql",
 ]);
 /** Why each family of unscoped operations is refused under a pin; `test` checks every one is covered. */
-export const PIN_REFUSED_UNSCOPED = {
+const PIN_REFUSED_UNSCOPED = {
     accounts: "creates or moves accounts outside the pin",
     analytics: "queries datasets across every account; use POST /accounts/{account_tag}/analytics/sql",
     api: "is an internal health route",
@@ -445,18 +445,18 @@ export const cloudflareIndex = new CloudflareIndex(cloudflareDiscovery(openapi),
     title: "Cloudflare",
     slashParams: SLASH_PARAMS,
 });
-export const getUser = get("getUser", "/user", { success: Schema.Unknown });
-export const verifyToken = get("verifyToken", "/user/tokens/verify", { success: Schema.Unknown });
-export const verifyAccountToken = get("verifyAccountToken", "/accounts/:account_id/tokens/verify", {
+const getUser = get("getUser", "/user", { success: Schema.Unknown });
+const verifyToken = get("verifyToken", "/user/tokens/verify", { success: Schema.Unknown });
+const verifyAccountToken = get("verifyAccountToken", "/accounts/:account_id/tokens/verify", {
     params: { account_id: Schema.String },
     success: Schema.Unknown,
 });
 const PageQuery = { page: Schema.optionalKey(Integer), per_page: Schema.optionalKey(Integer) };
-export const listAccounts = get("listAccounts", "/accounts", {
+const listAccounts = get("listAccounts", "/accounts", {
     query: { ...PageQuery, name: Schema.optionalKey(Schema.String) },
     success: Schema.Unknown,
 });
-export const listZones = get("listZones", "/zones", {
+const listZones = get("listZones", "/zones", {
     query: {
         ...PageQuery,
         name: Schema.optionalKey(Schema.String),
@@ -465,7 +465,7 @@ export const listZones = get("listZones", "/zones", {
     },
     success: Schema.Unknown,
 });
-export const graphqlQuery = post("graphqlQuery", "/graphql", {
+const graphqlQuery = post("graphqlQuery", "/graphql", {
     payload: Schema.Struct({
         query: Schema.String,
         variables: Schema.optionalKey(Schema.Record(Schema.String, Schema.Unknown)),

package/dist/providers/cloudflare/lib/config.d.ts

@@ -1,7 +1,7 @@
 /** Cloudflare's v4 REST base. Override only for a proxy or a test double. */
 export declare const CLOUDFLARE_API_BASE = "https://api.cloudflare.com/client/v4";
 /** The two key schemes Cloudflare's v4 API accepts. */
-export type CloudflareKeyAuth = "apiToken" | "globalApiKey";
+type CloudflareKeyAuth = "apiToken" | "globalApiKey";
 /** Accounts and zones a connector may touch; everything else is refused. */
 export interface CloudflarePin {
     accountIds?: readonly string[];
@@ -14,3 +14,4 @@ export interface CloudflareRestOptions {
     zoneId: string | undefined;
     pin: CloudflarePin | undefined;
 }
+export {};

package/dist/providers/docs/api.js

@@ -12,7 +12,7 @@ export const DOCS = {
     notFound: "ambiguous",
 };
 const DocumentId = { documentId: Schema.String };
-export const getDocument = get("getDocument", "/documents/:documentId", {
+const getDocument = get("getDocument", "/documents/:documentId", {
     params: DocumentId,
     query: {
         includeTabsContent: Schema.optionalKey(Schema.String),

package/dist/providers/drive/api.js

@@ -18,7 +18,7 @@ export const DRIVE = {
 };
 const FileId = { fileId: Schema.String };
 const PermissionId = { ...FileId, permissionId: Schema.String };
-export const getFile = get("getFile", "/files/:fileId", { params: FileId, success: Schema.Unknown });
+const getFile = get("getFile", "/files/:fileId", { params: FileId, success: Schema.Unknown });
 const OPERATIONS = [
     get("listFiles", "/files", { success: Schema.Unknown }),
     post("createFile", "/files", { payload: Schema.Unknown, success: Schema.Unknown }),

package/dist/providers/drive/lib/hatch.js

@@ -8,7 +8,7 @@ export const driveIndex = new OperationIndex(openapi, {
     title: "Google Drive",
     pathMatching: "uri-template",
 });
-export const DRIVE_REFUSALS = {
+const DRIVE_REFUSALS = {
     "GET /apps": "This operation has not been admitted to the narrow Drive execution allowlist; use the named file and permission workflows.",
     "GET /apps/{appId}": "This operation has not been admitted to the narrow Drive execution allowlist; use the named file and permission workflows.",
     "GET /changes": "This operation has not been admitted to the narrow Drive execution allowlist; use the named file and permission workflows.",

package/dist/providers/drive/tools.js

@@ -1138,7 +1138,7 @@ function guarded(tool) {
         }),
     };
 }
-export function buildTool(connection, tool) {
+function buildTool(connection, tool) {
     const isRead = tool.annotations.readOnlyHint;
     const isList = ["search_files", "list_folder_items", "list_permissions", "list_shared_drives"].includes(tool.name);
     const output = asRecord(catalogSchema(tool.contract.output, "output"));

package/dist/providers/forms/api.js

@@ -17,7 +17,7 @@ export const FORMS = {
     notFound: "ambiguous",
 };
 const FormId = { formId: Schema.String };
-export const getForm = get("getForm", "/forms/:formId", { params: FormId, success: Schema.Unknown });
+const getForm = get("getForm", "/forms/:formId", { params: FormId, success: Schema.Unknown });
 const OPERATIONS = [
     getForm,
     post("createForm", "/forms", {

package/dist/providers/forms/lib/hatch.js

@@ -15,7 +15,7 @@ export const FORMS_REQUEST_KINDS = [
     "updateFormInfo",
     "updateSettings",
 ];
-export const FORMS_REFUSALS = {
+const FORMS_REFUSALS = {
     "POST /forms/{formId}:setPublishSettings": "Publishing and response availability changes require separate product authorization; the owner can change them in Forms.",
     "POST /forms/{formId}/watches": "Watch registration creates persistent Pub/Sub delivery and requires separate product authorization.",
     "GET /forms/{formId}/watches": "Watch administration is outside this connection; manage watches through the approved operator workflow.",

package/dist/providers/forms/tools.js

@@ -16,7 +16,7 @@ import { googleBatchGuard } from "../_shared/google/hatch.js";
 const MAX_PAGE_SIZE = 100;
 const DEFAULT_PAGE_SIZE = 25;
 /** A listed answer is cut here; get_response returns it whole. */
-export const LIST_ANSWER_CHARS = 2_000;
+const LIST_ANSWER_CHARS = 2_000;
 /** A form or item title or description is cut here in get_form's projection. */
 const DESCRIPTION_CHARS = 2_000;
 /** ...and bounded here in bytes, so escaped control characters cannot grow it. */

package/dist/providers/github/api.js

@@ -13,7 +13,7 @@ import { resultSafety } from "../../http/safety.js";
 import { connect, get, operations } from "../../http/vendor.js";
 const repository = { owner: Schema.String, repo: Schema.String };
 const success = Schema.Unknown;
-export const GitHubApi = indexedVendor("GitHub", githubIndex, [
+const GitHubApi = indexedVendor("GitHub", githubIndex, [
     get("repository", "/repos/:owner/:repo", { params: repository, success }),
 ]);
 function rateLimited(status, retry, remaining) {

package/dist/providers/github/lib/discovery.js

@@ -106,7 +106,7 @@ export const GITHUB_VERDICTS = {
     [MERGE]: "refuse",
     ...Object.fromEntries([...INTERNAL_READS].map((key) => [key, "refuse"])),
 };
-export const GITHUB_NAMED = {
+const GITHUB_NAMED = {
     [MERGE]: "merge_pull_request",
     "GET /installation/repositories": "list_scopes",
     "GET /search/repositories": "search_scoped",
@@ -114,7 +114,7 @@ export const GITHUB_NAMED = {
     "GET /search/code": "search_scoped",
 };
 const adapter = githubPage("https://api.github.com");
-export const GITHUB_PAGES = Object.fromEntries(githubIndex.ops
+const GITHUB_PAGES = Object.fromEntries(githubIndex.ops
     .filter((op) => {
     const key = `${op.method} ${op.path}`;
     return (READ_PERMISSIONS[key] && githubIndex.contract(op).parameters.some((p) => p.in === "query" && p.name === "page"));

package/dist/providers/gmail/api.js

@@ -22,7 +22,7 @@ const Page = {
     maxResults: Schema.optionalKey(Schema.String),
     pageToken: Schema.optionalKey(Schema.String),
 };
-export const listLabels = get("listLabels", "/labels", { success: Schema.Unknown });
+const listLabels = get("listLabels", "/labels", { success: Schema.Unknown });
 const OPERATIONS = [
     get("listThreads", "/threads", {
         query: { ...Page, includeSpamTrash: Schema.optionalKey(Schema.String) },

package/dist/providers/granola/api.js

@@ -0,0 +1,155 @@
+import { Effect, Schema } from "effect";
+import { ConnectorCallError } from "../../errors.js";
+import { Refusal, StatusFailure } from "../../http/errors.js";
+import { Credentials } from "../../http/services.js";
+import { restSafety } from "../../http/safety.js";
+import { get } from "../../http/vendor.js";
+import { indexedVendor } from "../_shared/rest/kit.js";
+import { OperationIndex } from "../_shared/rest/operation-index.js";
+import { valueSafety } from "../_shared/rest/value-safety.js";
+import { openapi } from "./openapi.generated.js";
+import { GRANOLA_VALUE_SAFETY, READS } from "./safety.js";
+export const index = new OperationIndex(openapi, { vendor: "granola", title: "Granola" });
+export const verdicts = Object.fromEntries(index.ops.map((op) => [
+    `${op.method} ${op.path}`,
+    READS.has(`${op.method} ${op.path}`) ? "read" : "refuse",
+]));
+const listSpaces = get("listSpaces", "/v1/spaces", {
+    query: { page_size: Schema.optionalKey(Schema.Number) },
+    success: Schema.Unknown,
+});
+export const GranolaApi = indexedVendor("Granola", index, [listSpaces]);
+const reviewed = valueSafety(GRANOLA_VALUE_SAFETY, () => index);
+export const safety = () => ({
+    reviewed: restSafety(reviewed, index),
+    sensitiveFields: { names: [], choice: "drop" },
+});
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+const printableToken = (value) => /^[!-~]+$/.test(value);
+const page = {
+    param: "cursor",
+    in: "query",
+    decode(cursor) {
+        if (typeof cursor !== "string" ||
+            !cursor.trim() ||
+            [...cursor].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) ||
+            /^[a-z][a-z0-9+.-]*:/i.test(cursor))
+            throw new ConnectorCallError("invalid_args", "This cursor contains no valid Granola page token.");
+        return cursor;
+    },
+    next(data) {
+        const body = object(data);
+        if (body.hasMore === false && (body.cursor === null || body.cursor === undefined))
+            return null;
+        if (body.hasMore === true && typeof body.cursor === "string" && body.cursor.trim()) {
+            try {
+                return page.decode(body.cursor);
+            }
+            catch {
+                /* Fail closed on malformed vendor metadata. */
+            }
+        }
+        throw new ConnectorCallError("connector_call_failed", "Granola returned inconsistent paging metadata.", {
+            retryable: false,
+        });
+    },
+};
+export const pages = Object.fromEntries([...READS].filter((op) => op !== "GET /v1/notes/{note_id}").map((op) => [op, page]));
+/** The compact index preserves bounds/formats but omits vendor regex patterns. */
+export function binding({ connection }) {
+    return {
+        review: "Exact pinned note/folder/space identifier patterns before dispatch; standard JSON GET framing through Connection.sendPath.",
+        refuse(call) {
+            if (call.op.path.includes("{note_id}") && !/^\/v1\/notes\/not_[a-z0-9]{14}(?:\/transcript)?$/i.test(call.path))
+                return "Use a discovered Granola not_ API identifier with 14 alphanumeric characters, not a web-link UUID.";
+            for (const [key, prefix] of [
+                ["folder_id", "fol"],
+                ["space_id", "spa"],
+            ]) {
+                const value = call.query[key];
+                if (value !== undefined &&
+                    (typeof value !== "string" || !new RegExp(`^${prefix}_[a-z0-9]{14}$`, "i").test(value)))
+                    return `Use a discovered Granola ${prefix}_ API identifier for ${key}.`;
+            }
+            return undefined;
+        },
+        send: (call, options) => connection.sendPath({
+            method: call.method,
+            path: call.path,
+            template: call.op.path,
+            query: Object.entries(call.query).map(([key, value]) => [key, String(value)]),
+        }, options),
+    };
+}
+export const authenticate = Effect.gen(function* () {
+    const values = yield* (yield* Credentials).values.pipe(Effect.mapError((error) => new Refusal({ error })));
+    const key = values?.value?.trim();
+    if (!key || !printableToken(key))
+        return yield* Effect.fail(new Refusal({
+            error: new ConnectorCallError("auth_required", "An operator must configure a valid Granola workspace API key in this connection's credential slot."),
+        }));
+    return { Authorization: `Bearer ${key}` };
+});
+export const errors = {
+    provider: "Granola",
+    facts: () => ({}),
+    numericFacts: {
+        retryAfterMs: {
+            header: "retry-after",
+            format: "retry-after",
+            review: "HTTP Retry-After delay on rate-limited responses.",
+        },
+    },
+    meanings: { unknownId: "connector_call_failed", provesAbsence: false, conflicts: [] },
+    detail: ({ status }) => `Granola returned HTTP ${status}.`,
+    unreadable: "Granola returned an invalid JSON success body.",
+    statuses: {
+        401: () => ({
+            code: "auth_required",
+            words: (detail) => `${detail} The workspace API key is invalid or revoked; an operator must replace it.`,
+        }),
+        403: () => ({
+            code: "provider_permission_denied",
+            words: (detail) => `${detail} Check the workspace key's access and the space's Granola API integration.`,
+        }),
+        404: () => ({
+            code: "connector_call_failed",
+            words: (detail) => `${detail} The note is inaccessible, missing, or has no generated summary/transcript; this does not prove absence.`,
+        }),
+        413: () => ({
+            code: "connector_call_failed",
+            words: (detail) => `${detail} If include=transcript was requested, read /v1/notes/{note_id}/transcript in pages, then read note details without include. No automatic fallback or extra request was sent.`,
+        }),
+        429: ({ retryAfterMs }) => ({
+            code: "rate_limited",
+            retryAfterMs: retryAfterMs ?? 5_000,
+            words: (detail) => `${detail} The workspace shares a burst of 25 requests per 5 seconds and a sustained 5 requests/second. Wait before retrying.`,
+        }),
+    },
+};
+/** Validate framing, independently of optional response fields and the caller's field selection. */
+export const result = (body, answer) => {
+    const root = object(body);
+    const path = answer.operation.template;
+    const key = path === "/v1/notes"
+        ? "notes"
+        : path === "/v1/folders"
+            ? "folders"
+            : path === "/v1/spaces"
+                ? "spaces"
+                : path.endsWith("/transcript")
+                    ? "transcript"
+                    : undefined;
+    const valid = key
+        ? Array.isArray(root[key]) && typeof root.hasMore === "boolean"
+        : typeof root.id === "string" && /^not_[a-zA-Z0-9]{14}$/.test(root.id);
+    return valid
+        ? Effect.succeed(body)
+        : Effect.fail(new StatusFailure({ status: answer.status, headers: answer.headers, body: {}, operation: answer.operation }));
+};
+export const probe = {
+    operation: listSpaces,
+    request: { query: { page_size: 1 } },
+    check: (values) => !values.value?.trim() || !printableToken(values.value.trim()) ? "Enter a Granola workspace API key." : undefined,
+    describe: () => "Authenticated to the accessible Granola spaces. This does not prove access to every workspace note or verify the key's ownership type.",
+};