@zackbart/connecta 0.37.0 → 0.38.0

package/dist/operator-ui/model.d.ts

@@ -18,9 +18,10 @@ export interface UiTool extends Pick<OperatorTool, "name" | "address" | "descrip
  * (`oauth_required`, which also covers an expired or revoked grant — the
  * status seam cannot tell those apart), an operator-managed credential slot
  * (`credential_required`), or a secret that lives in deployment configuration
- * (`auth_required`).
+ * (`auth_required`). Principal forwarding instead reports `caller_refused`,
+ * which has no secret-repair prompt.
  */
-export type UiProblem = "connector_unavailable" | "oauth_required" | "credential_required" | "auth_required" | "credential_mismatch" | "catalog_failed";
+export type UiProblem = "connector_unavailable" | "oauth_required" | "credential_required" | "auth_required" | "caller_refused" | "credential_mismatch" | "catalog_failed";
 /** A stored credential that cannot be used, by cause. */
 export type UiCredentialProblem = "credential_mismatch" | "credential_unreadable";
 interface UiCredentialField {
@@ -57,6 +58,8 @@ interface UiCredential {
     notice?: string;
 }
 export interface UiConnector {
+    /** Opaque admitted viewer partition, present on HTTP detail responses. */
+    viewerKey?: string;
     /** Complete catalog and status from this detail request, when supported. */
     overlay?: OperatorConnectorOverlay;
     id: string;
@@ -99,6 +102,8 @@ export interface UiConnector {
 }
 export type CredentialManagementCapability = "available" | "requires_operator" | "vault_not_configured" | "no_slots";
 export interface UiData {
+    /** Opaque admitted viewer partition, present on HTTP summaries. */
+    viewerKey?: string;
     accessTokenManagement?: "available" | "requires_operator";
     serverInfo: Pick<ConnectaConfigDescription["server"], "name" | "version">;
     /** Version of the installed @zackbart/connecta package. */

package/dist/program-writes.js

@@ -1,8 +1,8 @@
+import { toolError } from "./tool-error.js";
 // Budget and outcome accounting for writes dispatched by programs on writable endpoints.
 // Await each dispatched write once; never conceal an unknown outcome.
 import { CONFIG_DEFAULTS } from "./config-defaults.js";
 import { Effect } from "effect";
-import { jsonResult } from "./meta-tools.js";
 import { classifyWriteOutcome } from "./write-outcome.js";
 /** Writes one program may send (`execute.maxWrites`), unless configured. */
 export const DEFAULT_MAX_WRITES = CONFIG_DEFAULTS.execute.maxWrites;
@@ -125,7 +125,7 @@ export class ProgramWrites {
             // the result, as a direct call reports it: its code and handoff, never
             // retryable, with the write's outcome unknown.
             const handoff = this.handoff;
-            return errorEnvelope({
+            return toolError({
                 code: handoff?.code ?? "write_outcome_unknown",
                 message: handoff
                     ? "A write this program sent failed authorization after it left, so whether it took effect is unknown, and that is the result rather than what the program returned. It will not be sent again. Check its target before doing anything that depends on it, and give nextAction to the operator to recover the connector. Argument echoes may be partial or absent; use the original arguments if reconciliation requires another call."
@@ -153,7 +153,7 @@ export class ProgramWrites {
 function withWrites(result, writes) {
     const structured = result.structuredContent;
     const error = structured?.error;
-    const annotated = errorEnvelope({
+    const annotated = toolError({
         ...(error !== null && typeof error === "object"
             ? error
             : {
@@ -171,8 +171,3 @@ function withWrites(result, writes) {
     }
     return annotated;
 }
-function errorEnvelope(error) {
-    const result = jsonResult({ error });
-    result.isError = true;
-    return result;
-}

package/dist/provider-call.js

@@ -261,11 +261,4 @@ export function providerFetch(ctx, provider, auxiliary, send) {
 export function inLogicalCall(ctx) {
     return recordedService(ctx, LogicalLedger) !== undefined;
 }
-/**
- * Every resource request dispatched under `ctx`'s logical call, from any
- * ledger, nested ones included; undefined outside one.
- */
-export function logicalCallRequests(ctx) {
-    return ctx ? recordedService(ctx, LogicalLedger)?.sent : undefined;
-}
 export { recordProviderResponse, tracksEveryRequest, tracksRequests, delegatesEachCall, providerBoundary, refusedStatus, vendorRefusal, authorizationFailure, unauthorizedAnswer, renewedAfterUnauthorized, refusalRequest, knownProviderFailure, isKnownProviderFailure, forgetProviderFailure, explainedUnauthorizedVerdict, explainsUnauthorized, settledWrite, isSettledWrite, } from "./provider-call-facts.js";

package/dist/provider.d.ts

@@ -120,7 +120,7 @@ export interface ProviderGuideBlocks<O> {
     select(options: Readonly<O>): readonly string[];
 }
 /**
- * Facts the provider kit (decision 0010) declares for `providers:generate`:
+ * Facts the provider kit declares for `providers:generate`:
  * `drift.json`'s `generated.operations` and the guide's Conventions. Plain
  * data, never read at runtime. The kit's `defineApiProvider` sets them.
  */

package/dist/providers/_shared/google/kit.js

@@ -1,3 +1,4 @@
+import { asRecord, asArray } from "../json.js";
 // Google Workspace on the provider kit (decision 0010; C.7 step 1 under 0011).
 // Shared by every Workspace product; never its own export. `workspace.ts`
 // keeps shared options, connection parsing and subject resolution;
@@ -17,12 +18,6 @@ import { delegatedToken, forgetDelegatedToken } from "./service-account.js";
 import { subjectFor, workspaceConnection } from "./workspace.js";
 import { tagWorkspaceSubject } from "../../../workspace-subject.js";
 import { googleNamedOperation, requireGoogleIndex } from "./hatch.js";
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 function reasonsOf(tokens) {
     const error = asRecord(asRecord(tokens)["error"]);
     const reasons = new Set();

package/dist/providers/_shared/google/service-account.js

@@ -1,3 +1,4 @@
+import { asRecord } from "../json.js";
 /**
  * A Google service account acting as itself or for Workspace users through
  * domain-wide delegation: the key, signed JWT-bearer assertions and short-lived
@@ -266,9 +267,6 @@ const tokenTransport = guardedFetch({
     // The assertion in the body is the authentication; there is no header.
     authenticate: () => ({}),
 });
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
 /** The token endpoint's OAuth `error` codes this module names back. */
 const TOKEN_ERROR_CODES = new Set([
     "invalid_request",

package/dist/providers/_shared/google/workspace.d.ts

@@ -92,10 +92,10 @@ export declare const GOOGLE_WORKSPACE_OPTIONS: import("../../../config-schema.js
         };
         instructions: import("../../../config-schema.js").Field<unknown, unknown, true>;
         title: import("../../../config-schema.js").Field<unknown, unknown, true>;
+        baseUrl: import("../../../config-schema.js").Field<unknown, unknown, true>;
         purpose: import("../../../config-schema.js").Field<unknown, unknown, true>;
         maxResultBytes: import("../../../config-schema.js").Field<unknown, unknown, true>;
         readOnly: import("../../../config-schema.js").Field<unknown, unknown, true>;
-        baseUrl: import("../../../config-schema.js").Field<unknown, unknown, true>;
         subject: import("../../../config-schema.js").Field<unknown, unknown, true>;
     };
 };

package/dist/providers/_shared/guide.js

@@ -0,0 +1,3 @@
+export function readOnlyNotice(readOnly) {
+    return readOnly ? ["This connection is read-only: every write is refused."] : [];
+}

package/dist/providers/_shared/json.js

@@ -0,0 +1,12 @@
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function asRecord(value) {
+    return isRecord(value) ? value : {};
+}
+export function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+export function compact(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+}

package/dist/providers/_shared/rest/compact-index.js

@@ -23,7 +23,7 @@ function rowText(packed, row) {
     return `[[${parameters.join(",")}],${body}]`;
 }
 /** Recreate the exact old JSON string, for semantic identity/cursor binding. */
-export function expandIndexDetails(packed) {
+function expandIndexDetails(packed) {
     limit(packed.length);
     let length = packed.definitions.length + 13; // {"d":defs,"o":[]}
     limit(length);

package/dist/providers/_shared/rest/kit.js

@@ -1,12 +1,10 @@
+import { isRecord } from "../json.js";
 // Shared REST call shapes, pinned-schema conversion and indexed vendor declarations.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../../errors.js";
 import { Refusal } from "../../../http/errors.js";
 import { Integer, isMinChars, isMaxChars } from "../../../http/json-schema.js";
 import { vendor as declareVendor, get, head, post, put, patch, del, } from "../../../http/vendor.js";
-function isRecord(value) {
-    return !!value && typeof value === "object" && !Array.isArray(value);
-}
 function invalid(message) {
     throw new ConnectorCallError("invalid_args", message);
 }

package/dist/providers/_shared/rest/operation-index.js

@@ -1,3 +1,4 @@
+import { isRecord } from "../json.js";
 import { canonicalJson } from "../../../canonical-json.js";
 import { parseIndexDetails } from "./compact-index.js";
 // The pinned operation index a REST connector validates against before it
@@ -20,9 +21,6 @@ function words(text) {
         .split(/[^a-z0-9]+/)
         .filter(Boolean);
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function invalid(message, issues, repair) {
     throw new ConnectorCallError("invalid_args", message, {
         ...(issues ? { validation: { issues } } : {}),

package/dist/providers/_shared/rest/value-safety.js

@@ -1,4 +1,5 @@
-// Value safety for every REST vendor (decision 0005): no tool response,
+import { isRecord } from "../json.js";
+// Value safety for every REST vendor: no tool response,
 // success or error, returns a credential (API, service, or bypass tokens,
 // signing secrets, bearer URLs, private keys, temporary credentials, auth
 // headers, authorization verifiers) or a stored secret value (environment
@@ -34,7 +35,7 @@
 // Sent-secret redaction runs first, in the provider kit's parse pass, so a
 // rule that decides on a value can find the placeholder where the vendor
 // wrote what the rule matches. Every such decision input fails closed
-// (#703): an altered type discriminator applies every resource rule; an
+//: an altered type discriminator applies every resource rule; an
 // altered label or type makes a secret record or a header rule; an altered
 // URL scheme or parameter name withholds the whole URL or its value; an
 // altered key withholds its value; a placeholder that may stand for a
@@ -204,10 +205,7 @@ export function credentialName(name) {
     const normalized = normalizedName(name);
     return containsCredential(normalized) || CREDENTIAL_SUFFIX.test(normalized);
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/** A rule's test over one decision input; an input redaction altered passes it (#703). */
+/** A rule's test over one decision input; an input redaction altered passes it. */
 function decides(input, test) {
     return typeof input === "string" && (redactionAltered(input) || test(input));
 }
@@ -215,7 +213,7 @@ function decides(input, test) {
 const PLACEHOLDER_KEYS = new WeakSet();
 /**
  * Whether redaction altered one of a record's keys, so no key-based decision
- * about it can be read (#703). Parsed JSON keeps its keys; text the kit
+ * about it can be read. Parsed JSON keeps its keys; text the kit
  * redacted whole and a result hook parsed after it (NDJSON, log streams) can
  * carry the placeholder in one.
  */
@@ -226,7 +224,7 @@ function keysAltered(value) {
 const SCHEME_PREFIX = /^(?:[a-z][a-z0-9+.-]*(?::\/{0,2})?)?$/i;
 /**
  * Whether redaction altered the scheme a whole-string URL decision reads
- * (#703): the text is no longer URL-shaped, everything before its first
+ *: the text is no longer URL-shaped, everything before its first
  * placeholder could begin a URL, and more than placeholders follows it. A
  * URL a vendor sends holds no whitespace.
  */
@@ -434,7 +432,7 @@ function endsValue(text, at) {
 /**
  * Where a word at `start` holds a placeholder in place of a link's scheme
  * and host (`[redacted]/pkg?token=…`, `https:[redacted]…`), or `-1`:
- * redaction took the authority that makes text a link (#703). A Markdown
+ * redaction took the authority that makes text a link. A Markdown
  * label (`[redacted](…)`) is not one; its destination is read as a link.
  */
 function markerLed(text, start) {
@@ -524,7 +522,7 @@ function linkSpan(text, start, host, inline) {
 /**
  * Visit each destination once, respecting its CommonMark close and encoded
  * delimiters. Redaction (`failClosed`) also reads a link whose scheme and
- * host redaction took (#703); admission never does.
+ * host redaction took; admission never does.
  */
 function* linkSpans(text, failClosed = false) {
     const markers = failClosed && redactionAltered(text);
@@ -585,7 +583,7 @@ function credentialQuery(text) {
     const fragment = decoded.indexOf("#");
     if (fragment >= 0) {
         const words = decodeLinkText(decoded.slice(fragment + 1));
-        // A fragment redaction altered cannot be read (#703).
+        // A fragment redaction altered cannot be read.
         if (/token|secret|key|code|auth/i.test(words) || alteredFragment(words))
             return true;
     }
@@ -597,7 +595,7 @@ function credentialQuery(text) {
         const equals = pair.indexOf("=");
         at = end + 1;
         // A component redaction altered with no readable name (its name, or its `=`, taken) may be a
-        // credential parameter's value, however encoded (#703).
+        // credential parameter's value, however encoded.
         if (pair !== REDACTED && redactionAltered(equals < 0 ? pair : pair.slice(0, equals)))
             return true;
         if (equals < 0)
@@ -615,7 +613,7 @@ function withholdLinkQueries(text) {
     let out = "";
     let copied = 0;
     for (const { cut, open, end, start, host } of linkSpans(text, true)) {
-        // A parameter name redaction altered cannot be read, so the whole link goes (#703).
+        // A parameter name redaction altered cannot be read, so the whole link goes.
         const whole = alteredLink(text.slice(host, end));
         if (!whole && (cut < 0 || !credentialQuery(text.slice(cut, end))))
             continue;
@@ -640,7 +638,7 @@ function withholdLinkQueries(text) {
     }
     return copied === 0 ? text : out + text.slice(copied);
 }
-/** Whether redaction altered a parameter name in a link's own path, query, or fragment (#703). */
+/** Whether redaction altered a parameter name in a link's own path, query, or fragment. */
 function alteredLink(link) {
     return redactionAltered(link) && parameterNames(decodeLinkText(link)).some(redactionAltered);
 }
@@ -676,7 +674,7 @@ function withholdSigningParams(anchored) {
 }
 const NAME_CHAR = /[\w.%~;-]/;
 const NAME_ESCAPE = new RegExp(Array.from("abcdefghijklmnopqrstuvwxyz0123456789_.~-", signingName).join("|"), "iy");
-/** Where a parameter's value ends, reading placeholders and character references whole (#703). */
+/** Where a parameter's value ends, reading placeholders and character references whole. */
 function valueEnd(text, at, inferred) {
     while (at < text.length) {
         const reference = Math.max(characterReferenceEnd(text, at, inferred), bareReferenceEnd(text, at, inferred));
@@ -693,7 +691,7 @@ function valueEnd(text, at, inferred) {
 }
 /**
  * The next placeholder that may hide a signing parameter, at or after `from`,
- * and its value boundary when a name is recognized (#703). Redaction may have taken a signing name, its
+ * and its value boundary when a name is recognized. Redaction may have taken a signing name, its
  * `=`, and the start of its value, so a placeholder followed by any of a
  * value's base64 or base64url characters (`+`, `/`, `=`, `-`, `_` included)
  * or `%` escapes goes with them, however short. References count when they
@@ -956,7 +954,7 @@ function labelsOf(value) {
 }
 /**
  * Whether a record's label names a credential, so its value or args are one.
- * A label redaction altered, or keys that may hide one, does too (#703).
+ * A label redaction altered, or keys that may hide one, does too.
  */
 function credentialLabelled(value) {
     if (!isRecord(value))
@@ -966,17 +964,17 @@ function credentialLabelled(value) {
         (isRecord(target) && keysAltered(target)) ||
         labelsOf(value).some((label) => decides(label, credentialName)));
 }
-/** A record typed as a secret (`secret_text`); a type redaction altered may have been one (#703). */
+/** A record typed as a secret (`secret_text`); a type redaction altered may have been one. */
 function typedSecret(value) {
     return keysAltered(value) || decides(value["type"], (type) => /secret/i.test(type));
 }
-/** A list item typed as an environment variable; a type redaction altered may have been one (#703). */
+/** A list item typed as an environment variable; a type redaction altered may have been one. */
 function envTyped(value) {
     if (!isRecord(value))
         return false;
     return keysAltered(value) || decides(String(value["type"]), (type) => /env/i.test(type));
 }
-/** A header, cookie, or query rule (`request.headers`, `header`, `cookie`, `query`, …); likewise (#703). */
+/** A header, cookie, or query rule (`request.headers`, `header`, `cookie`, `query`, …); likewise. */
 function headerLike(value) {
     return isRecord(value) && (keysAltered(value) || decides(value["type"], (type) => /header|cookie|query/i.test(type)));
 }
@@ -989,7 +987,7 @@ function headerValues(value) {
     if (isRecord(value))
         return Object.fromEntries(Object.keys(value).map((name) => [name, REDACTED]));
     if (Array.isArray(value)) {
-        // A pair whose keys redaction altered may hold its value under any of them (#703).
+        // A pair whose keys redaction altered may hold its value under any of them.
         return value.map((item) => !isRecord(item)
             ? item
             : keysAltered(item)
@@ -1120,7 +1118,7 @@ function scrubEnv(value, depth) {
     if (depth > 32)
         return REDACTED;
     if (Array.isArray(value)) {
-        // A `NAME=value` string, or one whose name and `=` redaction may have taken (#703).
+        // A `NAME=value` string, or one whose name and `=` redaction may have taken.
         return value.map((item) => typeof item === "string" && (item.includes("=") || redactionAltered(item)) ? REDACTED : scrubEnv(item, depth + 1));
     }
     if (!isRecord(value))
@@ -1159,7 +1157,7 @@ function scrubValues(value, depth) {
     }
     return out;
 }
-/** Every rule's paths and withheld fields: the rule for an object whose type redaction altered (#703). */
+/** Every rule's paths and withheld fields: the rule for an object whose type redaction altered. */
 const ANY_RULE = new WeakMap();
 function anyRule(resources) {
     let rule = ANY_RULE.get(resources);
@@ -1172,7 +1170,7 @@ function anyRule(resources) {
 }
 /**
  * What a record's type discriminator selects. A type redaction altered, or
- * one an altered key may hide, selects every rule at once (#703).
+ * one an altered key may hide, selects every rule at once.
  */
 function typed(record, key, rules, any) {
     const type = record[key];
@@ -1247,7 +1245,7 @@ function heuristic(value, exempt) {
             if (!exempt.reviewedUrls)
                 return URL_SHAPE.test(current) ? sanitizeUrl(current) : current;
             // A placeholder's own brackets are not Markdown; a URL whose scheme redaction
-            // altered may still carry userinfo, so it is withheld whole (#703).
+            // altered may still carry userinfo, so it is withheld whole.
             const altered = redactionAltered(current);
             if (TEXT.test(altered ? current.replaceAll(REDACTED, "") : current))
                 return current;
@@ -1269,7 +1267,7 @@ function heuristic(value, exempt) {
             const normalized = normalizedName(key);
             const review = Object.hasOwn(exempt.fields, key) ? exempt.fields[key] : undefined;
             if (!placeholders && redactionAltered(key)) {
-                // A key redaction altered may have named a credential (#703).
+                // A key redaction altered may have named a credential.
                 out[key] = withheld(item);
             }
             else if (review?.verdict === "redact") {
@@ -1313,7 +1311,7 @@ function heuristic(value, exempt) {
                 typeof item === "string" &&
                 (URL_SHAPE.test(item) || alteredScheme(item))) {
                 // An external destination can carry its secret in the path; relative paths stay.
-                // One whose scheme redaction altered does not parse, so it is withheld (#703).
+                // One whose scheme redaction altered does not parse, so it is withheld.
                 out[key] = originOnly(item);
             }
             else if (typeof item === "string" && verbatim?.has(key)) {
@@ -1367,7 +1365,7 @@ export function valueSafety(table, index) {
                 }
                 const resources = table.embeddedUrls.resources;
                 if (resources) {
-                    // A type redaction altered takes every resource's reviewed text paths (#703).
+                    // A type redaction altered takes every resource's reviewed text paths.
                     const all = [...new Set(Object.values(resources.paths).flat())];
                     const any = () => all;
                     const scan = (value, depth) => {

package/dist/providers/breeze/api.js

@@ -1,3 +1,4 @@
+import { asRecord } from "../_shared/json.js";
 // Breeze's reviewed GET-only vendor. HTTP methods do not establish safety: see tools.ts.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError, resendAdvice } from "../../errors.js";
@@ -9,12 +10,6 @@ import { openapi } from "./openapi.generated.js";
 export const DEFAULT_PAGE_SIZE = 100;
 export const MAX_PAGE_SIZE = 1000;
 export const BREEZE_MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
-export function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-export function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 // --- The read hatch's allowlist ----------------------------------------------
 /** Reviewed observational endpoints and their documented query names. GET alone establishes nothing. */
 export const READ_ENDPOINTS = new Map([
@@ -551,7 +546,7 @@ function shortText(value, secrets) {
         return value.trim() || undefined;
     if (value === undefined || value === null)
         return undefined;
-    // The kit redacted the answer's values and kept its keys (#703); serialized, a key is text
+    // The kit redacted the answer's values and kept its keys; serialized, a key is text
     // the cut below could split, so the whole text is checked before it is cut.
     const text = secrets.redact(JSON.stringify(value));
     return text.length > 300 ? `${text.slice(0, 300)}…` : text;

package/dist/providers/breeze/index.js

@@ -1,8 +1,10 @@
+import { readOnlyNotice } from "../_shared/guide.js";
+import { asRecord } from "../_shared/json.js";
 import { skill } from "./skill.generated.js";
 import { keys, optionsOf } from "../../config-schema.js";
 import { PROVIDER_COMMON } from "../../connectors/option-shapes.js";
 import { defineApiProvider } from "../../http/provider.js";
-import { accountSummary, admit, asRecord, authenticate, BreezeApi, breezeSafety, BREEZE_MAX_RESPONSE_BYTES, BREEZE_INDEX, BREEZE_VERDICTS, BREEZE_NAMED, breezePeoplePage, DEFAULT_PAGE_SIZE, MAX_PAGE_SIZE, errors, result, } from "./api.js";
+import { accountSummary, admit, authenticate, BreezeApi, breezeSafety, BREEZE_MAX_RESPONSE_BYTES, BREEZE_INDEX, BREEZE_VERDICTS, BREEZE_NAMED, breezePeoplePage, DEFAULT_PAGE_SIZE, MAX_PAGE_SIZE, errors, result, } from "./api.js";
 import { breezeTools } from "./tools.js";
 export const BREEZE_HOST_SUFFIX = ".breezechms.com";
 const SUBDOMAIN_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
@@ -68,7 +70,7 @@ export const breeze = defineApiProvider({
             `Church database: ${normalizeSubdomain(options.subdomain)}${BREEZE_HOST_SUFFIX}.`,
             `Church purpose: ${options.purpose}`,
             "Calendar feed addresses and embed keys are always removed; profile details follow the requested vendor detail level.",
-            ...(options.readOnly ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly),
             ...(options.defaultPageSize !== undefined
                 ? [`Paged lists return ${options.defaultPageSize} items by default on this connection.`]
                 : []),

package/dist/providers/breeze/tools.js

@@ -1,3 +1,5 @@
+import { asArray, asRecord } from "../_shared/json.js";
+import { compact } from "../_shared/json.js";
 // Breeze's curated surface: projections and profile encoders earn named tools; the standard hatch supplies coverage.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -6,12 +8,9 @@ import { Integer, isMinChars, isMaxChars } from "../../http/json-schema.js";
 import { RequestSecrets, Classification } from "../../http/services.js";
 import { fieldsInput, fieldsProblem, selectFields } from "../../http/fields.js";
 import { read, list, write as writeTool } from "../../http/tools.js";
-import { asArray, asRecord, READ_ENDPOINTS } from "./api.js";
+import { READ_ENDPOINTS } from "./api.js";
 const DEFAULT_EVENT_LIMIT = 100;
 const ObjectValue = Schema.Record(Schema.String, Schema.Unknown);
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function timestamp(value) {
     if (value === undefined)
         return undefined;

package/dist/providers/ccb/api.js

@@ -1,3 +1,4 @@
+import { asRecord, asArray } from "../_shared/json.js";
 import { CCB_MEDIA_TYPE, CCB_ENVIRONMENTS, CCB_READ_SCOPES, CCB_WRITE_SCOPES, CCB_SENSITIVE_FIELDS, } from "./lib/constants.js";
 // Pushpay ChMS v2 JSON contracts, OAuth, status meanings, admission and privacy.
 // The legacy per-church XML API is outside this provider's scope.
@@ -56,12 +57,6 @@ export const CCB_ADMISSION = {
         },
     ],
 };
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 // ---------------------------------------------------------------------------
 // Admission partitions
 // ---------------------------------------------------------------------------

package/dist/providers/ccb/index.js

@@ -1,3 +1,4 @@
+import { readOnlyNotice } from "../_shared/guide.js";
 import { CCB_ENVIRONMENTS, CCB_MEDIA_TYPE } from "./lib/constants.js";
 import { skill } from "./skill.generated.js";
 import { keys, optionsOf } from "../../config-schema.js";
@@ -70,7 +71,7 @@ export const ccb = defineApiProvider({
             ...(!writable(options)
                 ? ["Configured scopes permit only reads: ccb_api_write is omitted and writes are refused."]
                 : []),
-            ...(options.readOnly ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly),
             ...(options.defaultPerPage !== undefined
                 ? [`Named lists default to ${options.defaultPerPage} rows on this connection.`]
                 : []),

package/dist/providers/ccb/tools.js

@@ -1,3 +1,4 @@
+import { asRecord, asArray } from "../_shared/json.js";
 // CCB v2 curated projections, bound numbered pages and reviewed POST data search.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -7,12 +8,6 @@ import { Refusal } from "../../http/errors.js";
 import { Integer, isMinChars, isMaxChars } from "../../http/json-schema.js";
 import { read, list } from "../../http/tools.js";
 import { callCcb, DEFAULT_PER_PAGE, SEARCH_DOMAINS, CCB_INDEX, ccbPageInfo, } from "./api.js";
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 function compact(value) {
     return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined && entry !== null));
 }

package/dist/providers/cloudflare/api.js

@@ -1,3 +1,4 @@
+import { decodeBase64 } from "../../bytes.js";
 // Cloudflare's pinned REST contracts, confinement, framing and failure semantics.
 import { responseMedia } from "../_shared/rest/response-media.js";
 import { EXCLUSIVE_PATH_IDS } from "./lib/path-bounds.js";
@@ -396,8 +397,7 @@ export class RawUpload {
 }
 export function bytesFromBase64(value, field) {
     try {
-        const binary = atob(value);
-        return Uint8Array.from(binary, (character) => character.charCodeAt(0));
+        return decodeBase64(value);
     }
     catch {
         return invalid(`${field} must be valid base64.`);

package/dist/providers/cloudflare/index.js

@@ -1,3 +1,4 @@
+import { readOnlyNotice } from "../_shared/guide.js";
 import { skill } from "./skill.generated.js";
 import { keys, optionsOf, variants } from "../../config-schema.js";
 import { CALL_ADMISSION } from "../../provider.js";
@@ -90,7 +91,7 @@ function usageGuide(options) {
                 : ["No additional deployment pin: the credential's vendor permissions define its reachable estate."]),
             ...(accountId ? [`Default account id: ${accountId}.`] : []),
             ...(zoneId ? [`Default zone id: ${zoneId}.`] : []),
-            ...(options.readOnly ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly),
         ],
         required: true,
     };

package/dist/providers/cloudflare/safety.js

@@ -1,4 +1,4 @@
-// Cloudflare's reviewed value-safety table (#801), on the shared mechanism in
+// Cloudflare's reviewed value-safety table, on the shared mechanism in
 // `../_shared/rest/value-safety.ts`: every operation the detector flags in
 // the pinned spec (`value-safety.candidates.json`) has one verdict here, and
 // `value-safety.node.test.ts` runs the shared harness over it.
@@ -16,7 +16,7 @@
 // Paths are dot paths into the data a tool returns (Cloudflare's `result`,
 // or the whole body when it is not an envelope); lists are traversed
 // implicitly and `*` matches every key of an object.
-// Embedded URL verdict (#812): reviewed paths + global signing parameters.
+// Embedded URL verdict: reviewed paths + global signing parameters.
 // Evidence: digest-verified schema revision 843eae2fbf4fe774ef9c91021dd34017ac9c970a:
 // builds_BuildLogsResponse.lines (timestamp/log-message tuples),
 // pages_deployment_log.data.line and workers-observability_query_results
@@ -869,7 +869,7 @@ const OPERATIONS = {
         key,
         safe(DESCRIBED_ONLY, "geo_restrictions", "policy_restrictions", "certificates.geo_restrictions"),
     ])),
-    // Round 3 (#801): candidates the consolidated detector surfaced (the union
+    // Round 3: candidates the consolidated detector surfaced (the union
     // of the two former detectors, with transfer, claim, invite, key, signing,
     // and webhook families).
     [`GET ${A}/abuse-reports/submitted/{report_id}`]: safe("An abuse report; the authorization statement is the reporter's text."),

package/dist/providers/docs/tools.js

@@ -1,3 +1,4 @@
+import { asRecord, asArray, compact } from "../_shared/json.js";
 // Google Docs named projections and bounded writes over the provider kit.
 import { Effect, Option } from "effect";
 import { canonicalJson } from "../../canonical-json.js";
@@ -28,15 +29,6 @@ const DEFAULT_MAX_CHARS = 20_000;
 const ELEMENT_PAGE_BYTES = 64 * 1024;
 /** Characters of each index row's text preview. */
 const PREVIEW_CHARS = 80;
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }
@@ -368,7 +360,7 @@ function batchPath(documentId) {
 function revisionAfter(reply, dropped) {
     return keptId(asRecord(reply["writeControl"])["requiredRevisionId"], "revisionId", "revisionId", dropped);
 }
-// No cause: what it would carry is a transport, stream, or parser error that can quote the reply (#695).
+// No cause: what it would carry is a transport, stream, or parser error that can quote the reply.
 function uncertain(message, ctx) {
     return providerCallFailure(ctx, { title: "Google Docs" }, new ConnectorCallError("connector_call_failed", message, { retryable: false }), {
         dispatched: true,