@zackbart/connecta 0.37.1 → 0.38.0

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 All notable changes to this package are documented here.
 
+## 0.38.0 — 2026-10-28
+
+0.38.0 is a minor release that retires the old storage and OAuth layout migrations, adds a configurable program return cap, makes in-program skill calls more forgiving, and moves the Eve helper to Eve 0.86.
+
+Breaking: the pre-layout-3 OAuth grant converter, the Workers KV → D1 copy APIs and script, and the Node JSON-state import API and `connecta migrate-state` command are removed. A deployment still holding old state must first upgrade through 0.37.1, run `copyKvToD1` or `migrate-state` as needed, and open every OAuth grant once on that version before moving to 0.38.0; otherwise old OAuth grants need fresh consent and old KV or JSON state is not imported. Retired pause, identity, grant and trust options still fail construction, now as ordinary unknown options without migration hints. `documentation/migration-retired-layouts.md` covers verification and recovery. Deployments that already run on 0.37.x layouts need no change.
+
+`execute.maxResultChars` sets how many serialized characters an `execute_code` program may return before Connecta pages it. The default stays 24,000, and paging notices now ask for pages sized to the configured cap. Programs can call `connecta.skill({ name })` and `connecta.skills(...)` as well as `connecta.skill(name)`, and the `execute_code` description states each host-call deadline truthfully when call and host-call timeouts differ.
+
+Also breaking: `@zackbart/connecta-eve` now requires Eve `>=0.86.0 <0.87.0`, so Eve 0.84 apps upgrade Eve to 0.86.0 together with the helper. Eve 0.86.0 still pins undici 8.10.2, so pnpm apps rekey their override to `"eve@0.86.0>undici": "8.12.3"`; npm apps keep the same override. The rest of the release is contributor-facing: refreshed development dependencies, a slimmer test suite, consolidated internals and trimmed documentation, with no runtime behavior change.
+
+### Added
+
+- Add `execute.maxResultChars`, the serialized characters an `execute_code` program may return before Connecta stashes the return behind a paging notice. The default stays 24,000; values from 4,000 to 1,000,000 are accepted, and anything else fails at construction. Emitted text shares the configured cap, and the paging notices that `execute_code` and direct calls return ask for pages sized to it instead of a fixed 3,829 bytes, never more than the stashed call's `maxResultBytes` or the 32 KiB bridge ceiling. A connector whose cap is below 3,829 bytes now gets a notice asking for the page size it actually serves. `describeConfig()` and the operator settings report it. Stash pages still obey each call's `maxResultBytes`. Connecta has no response-size limit, so keep the cap below what every client accepts: Claude Code passes at most 50,000 characters of text.
+
+### Changed
+
+- Accept the shapes models copy from the top-level `skills` tool into programs. `connecta.skill({ name })` now works like `connecta.skill(name)`, and `connecta.skills` is an undeclared alias of `connecta.skill` with the same host-call accounting, so neither costs a failed run. Any other argument fails `invalid_args` naming `connecta.skill("usage")`. The `execute_code` description, the server instructions, the usage guide and the program-error hint now show the in-program form `connecta.skill("usage")` and call the top-level one the skills tool, instead of giving `skills({ name: "usage" })` beside the guest API.
+- Consolidate internal helpers and remove unused code without changing runtime behavior.
+- Trim historical narration and duplicate procedures from documentation, correct contributor evidence references, and remove unreferenced eval baselines.
+- Refresh development dependencies: TypeScript 6.0, Vitest 5 with Vite 8.3, `@cloudflare/vitest-plugin` 1.4 (renamed from `@cloudflare/vitest-pool-workers`) with Wrangler 4.151, Playwright 1.64, and current oxlint, oxfmt, knip, esbuild, tsx, React and Radix releases, in core and the Eve helper. Published dependency and peer ranges are unchanged, and deployments need no change.
+- **Breaking:** `@zackbart/connecta-eve` now requires Eve 0.86 (`>=0.86.0 <0.87.0`) and is tested against Eve 0.86.0; Eve 0.84 apps must upgrade Eve to 0.86.0 together with the helper. Eve 0.86.0 still pins undici 8.10.2, so pnpm apps rekey their override to `"eve@0.86.0>undici": "8.12.3"`; npm apps keep the same override.
+- Contributor test suite slimmed: about 100 regression, lifetime, parity and meta-guard suites are removed, and workerd now runs only the suites that need real Workers bindings or isolates. No runtime behavior changes.
+
+### Fixed
+
+- The `execute_code` description no longer overstates the deadline of `connecta.result`, `connecta.skill` and `connecta.read`. When `calls.defaultTimeoutMs` differs from `execute.hostCallTimeoutMs`, it states both, for example `Limits: 20 host calls, 10 writes, 25s/call (15s result/skill/read).`, instead of advertising the call default for every host call. Enforcement is unchanged; deployments without `calls.defaultTimeoutMs` see the same `15s/host call` text as before.
+
+### Removed
+
+- **Breaking:** Remove the pre-layout-3 OAuth grant converter and cleanup, Workers KV → D1 copy APIs/types/script, and Node JSON-state import API and `connecta migrate-state` command. Retired pause, identity, grant, and trust options still fail construction as ordinary unknown options, without migration hints. Before upgrading, deployments with old state must upgrade through 0.37.1, run `copyKvToD1` or `migrate-state` as needed, and open every OAuth grant once on that version. Old OAuth grants otherwise require fresh consent; old KV/JSON state is not imported. Follow `documentation/migration-retired-layouts.md` for verification and recovery.
+
 ## 0.37.1 — 2026-10-28
 
 0.37.1 is a patch release of fixes and request-path performance work. It needs no configuration change, and deployments on 0.37.0 can upgrade in place. One type change is additive: connector status gains a `per_caller` state, so code that switches exhaustively over status states must handle it.

package/README.md

@@ -91,8 +91,8 @@ on Node, in Docker, or on Cloudflare Workers. The
 | [Safety and trust](./guides/safety-and-trust.md)    | Uncertain changes, secrets, read-only access, and your responsibilities. |
 | [Operator documentation](./documentation/README.md) | Setup, feature availability, upgrades, and exact contracts.              |
 
-<a id="existing-client-tokens"></a>
-
 Upgrading? Follow the [upgrade guide](./documentation/deploying.md#upgrade-an-existing-deployment).
+Pre-0.29 storage and OAuth layouts must first migrate on 0.37.1; see the
+[required bridge upgrade](./documentation/migration-retired-layouts.md).
 Breaking changes are expected before 1.0. See the [changelog](./CHANGELOG.md)
 and [security policy](./SECURITY.md).

package/bin/connecta.mjs

@@ -4,7 +4,7 @@ import { copyFile, cp, lstat, mkdtemp, readFile, rename, rm, symlink, writeFile
 import { CONNECTA_VERSION } from "./version.mjs";
 import { META_TOOL_NAMES } from "./meta-tool-names.mjs";
 import { basename, dirname, join, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import { fileURLToPath } from "node:url";
 
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 const [command, ...args] = process.argv.slice(2);
@@ -19,7 +19,6 @@ function shellCd(path) {
 function usage() {
   console.log(`Usage:
   connecta init [directory]
-  connecta migrate-state <state.json> <connecta.sqlite>
   CONNECTA_TOKEN=<bearer> connecta doctor [--config] [--url http://localhost:8787] [--pool <name>]
   CF_ACCESS_CLIENT_ID=<id> CF_ACCESS_CLIENT_SECRET=<secret> connecta doctor --url https://worker.example`);
 }
@@ -307,46 +306,9 @@ async function doctor() {
   );
 }
 
-/**
- * One-shot copy of a 0.28 `fileStorage` JSON state file into the SQLite
- * database 0.29 stores everything in. Stop the old deployment first; the file
- * is read, never changed.
- */
-async function migrateState() {
-  if (args.length !== 2 || args.some((arg) => arg.startsWith("--"))) {
-    usage();
-    process.exitCode = 1;
-    return;
-  }
-  const [statePath, databasePath] = args.map((arg) => resolve(process.cwd(), arg));
-  const { importStateFile, openSqlite } = await import(pathToFileURL(join(packageRoot, "dist", "sqlite.js")).href);
-  let database;
-  try {
-    database = openSqlite(databasePath);
-  } catch {
-    throw new Error("State migration failed: could not open the SQLite database");
-  }
-  let closeFailed = false;
-  try {
-    const result = importStateFile(database, statePath);
-    console.log(
-      `Imported ${result.imported} entries from ${statePath} into ${databasePath}` +
-        ` (${result.kept} already present, ${result.expired} expired).`,
-    );
-  } finally {
-    try {
-      database.close();
-    } catch {
-      closeFailed = true;
-    }
-  }
-  if (closeFailed) throw new Error("State migration failed: could not close the SQLite database");
-}
-
 try {
   if (command === "init") await init();
   else if (command === "doctor") await doctor();
-  else if (command === "migrate-state") await migrateState();
   else {
     usage();
     process.exitCode = command === "--help" || command === "-h" ? 0 : 1;

package/bin/version.mjs

@@ -1,3 +1,3 @@
 // Generated from package.json by scripts/generate-version.mjs.
 // Workers-safe: no runtime filesystem read or deployment override.
-export const CONNECTA_VERSION = "0.37.1";
+export const CONNECTA_VERSION = "0.38.0";

package/dist/access-tokens.js

@@ -1,3 +1,4 @@
+import { sha256Hex } from "./bytes.js";
 import { withAuthenticationDeadline } from "./auth-admission.js";
 import { authorizationCredential, isMachineCredential } from "./inbound-credential.js";
 import { assertKnownOptions, ConfigError, optionsOf, readPlain } from "./config-schema.js";
@@ -137,11 +138,8 @@ function bytesToBase64Url(bytes) {
         binary += String.fromCharCode(byte);
     return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
 }
-function bytesToHex(bytes) {
-    return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
-}
 async function hashToken(token) {
-    return bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(token))));
+    return sha256Hex(token);
 }
 const REVISION_RE = /^[A-Za-z0-9_-]{22}$/u;
 /** Whether `value` has the shape of a slot revision. */

package/dist/agent-identity.js

@@ -1,4 +1,4 @@
-// Code-declared agents (#837): the names deployment code lists in `agents`,
+// Code-declared agents: the names deployment code lists in `agents`,
 // the identity an admitted agent carries, and the built-in providers trusted
 // to assert it. Pure, so core reads it without reaching credential modules.
 import { ConfigError } from "./config-schema.js";

package/dist/auth/clerk-sdk/generated.js

@@ -1833,4 +1833,5 @@ var Bc = new Set(["error", "warn", "info", "debug", "trace"]), Nt = { samplingRa
 };
 var ud = Mn(Z);
 function jc(t) { let e = { ...t }, r = he(e), s = qn({ options: e, apiClient: r }), n = new Jt({ publishableKey: e.publishableKey, secretKey: e.secretKey, samplingRate: .1, ...e.sdkMetadata ? { sdk: e.sdkMetadata.name, sdkVersion: e.sdkMetadata.version } : {}, ...e.telemetry || {} }); return { ...r, ...s, telemetry: n }; }
-export { jc as createClerkClient };
+const createClerkClient = jc;
+export { createClerkClient };

package/dist/auth/downstream-oauth.js

@@ -1,3 +1,4 @@
+import { bytesToHex, sha256Hex } from "../bytes.js";
 import { UnauthorizedError } from "@modelcontextprotocol/client";
 import { Effect, Exit } from "effect";
 import { byteReadResponse } from "../byte-read-response.js";
@@ -8,12 +9,12 @@ import { keepErrorName } from "../redaction-identity.js";
 import { fromSignal, runEdge } from "../runtime/run.js";
 import { Settlement } from "../runtime/settlement.js";
 import { SentSecrets } from "../sent-secrets.js";
-import { OAUTH_FLOW_TTL_SECONDS, OAUTH_REFRESH_LEASE_SECONDS, oauthFlowKeys, oauthGrantKeys, oauthRefreshActiveKeys, oauthRefreshKeys, oauthRefreshSpentKeys, } from "../storage/keys.js";
+import { OAUTH_FLOW_TTL_SECONDS, OAUTH_REFRESH_LEASE_SECONDS, oauthFlowKeys, oauthGrantKeys, retiredOAuthKeys, oauthRefreshActiveKeys, oauthRefreshKeys, oauthRefreshSpentKeys, } from "../storage/keys.js";
 import { authenticateRemoteClient, downstreamClientMetadata, remoteClientAuthMethod, } from "./downstream-client-metadata.js";
 import { revokeDownstreamGrant } from "./downstream-revocation.js";
 import { authAwait, authCall, authCatch, authDetached, authFlow, authInvoke, authMethod, authOwnMethod, authProgram, authStorage, authThen, authValue, registerAuth, registerAuthMethod, } from "./native.js";
 import { isOAuthCredentialRequest, isRefreshTokenRequest, refreshResponseOutcome, sdkSafeTokenResponse, tokenGrantType, } from "./oauth-token-response.js";
-import { deleteV2Keys, discoveryIssuer, readV2Grant, } from "./oauth-v2-migration.js";
+import { discoveryIssuer } from "./oauth-grant.js";
 /** @internal Keep the SDK's cloned body reads inside the code exchange's request. */
 export function codeExchangeResponse(response, signal) {
     if (!response.body)
@@ -105,12 +106,11 @@ export class OAuthRequestNotSentError extends ConnectorCallError {
 function randomState() {
     const bytes = new Uint8Array(32);
     crypto.getRandomValues(bytes);
-    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+    return bytesToHex(bytes);
 }
 /** Lowercase hex SHA-256 of a consent's `state`: the name of its flow record. */
 export async function oauthStateDigest(state) {
-    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(state));
-    return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, "0")).join("");
+    return sha256Hex(state);
 }
 function storedRefreshSpent(raw) {
     const value = raw === null ? undefined : parsed(raw);
@@ -818,7 +818,7 @@ export class KvOAuthProvider {
         if (client)
             this.addClientAuthentication = (headers, params) => authenticateRemoteClient(client, headers, params);
     }
-    /** Stored facts only: no migration, sealing writes, refresh or discovery. */
+    /** Stored facts only: no sealing writes, refresh or discovery. */
     storedAuthorization(issuer) {
         return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "storedAuthorization", [issuer]));
     }
@@ -834,39 +834,6 @@ export class KvOAuthProvider {
     wait(work, signal = this.signal) {
         return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "wait", [work, signal]));
     }
-    /** Legacy helpers must fence their inner reads/deletes too, not just our join. */
-    preparationStorage(signal) {
-        if (!signal)
-            return this.storage;
-        const storage = this.storage;
-        return {
-            ...storage,
-            get: authMethod((key) => {
-                return authInvoke(this, "wait", [
-                    authMethod(() => {
-                        return authStorage(storage, "get", [key]);
-                    }),
-                    signal,
-                ]);
-            }),
-            list: authMethod((prefix) => {
-                return authInvoke(this, "wait", [
-                    authMethod(() => {
-                        return authStorage(storage, "list", [prefix]);
-                    }),
-                    signal,
-                ]);
-            }),
-            delete: authMethod((key) => {
-                return authInvoke(this, "wait", [
-                    authMethod(() => {
-                        return authStorage(storage, "delete", [key]);
-                    }),
-                    signal,
-                ]);
-            }),
-        };
-    }
     // --- the grant record ---------------------------------------------------
     /** The grant's additional authenticated data: record and epoch. */
     grantLabel(epoch) {
@@ -884,21 +851,13 @@ export class KvOAuthProvider {
         return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "openGrant", [raw, signal]));
     }
     /**
-     * The grant as stored now, migrating layout 2 on first sight. A plaintext
+     * The current grant record. A plaintext
      * body, written before the vault could seal, is sealed where it lies by
      * compare-and-set; a failure leaves it readable for the next write to seal.
      */
     readGrant(signal = this.signal) {
         return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "readGrant", [signal]));
     }
-    /** Layout 2 migration and its cleanup retain the reading operation's owner. */
-    migrate(signal) {
-        return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "migrate", [signal]));
-    }
-    /** Deletion is retried on every read, including reads after a reset. */
-    cleanupV2(raw, signal = this.signal) {
-        return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "cleanupV2", [raw, signal]));
-    }
     /** The grant a bound flow reads: a replaced epoch fails it. */
     boundGrant(signal = this.signal) {
         return runEdge(authOwnMethod(KvOAuthProvider.prototype, this, "boundGrant", [signal]));
@@ -928,7 +887,6 @@ export class KvOAuthProvider {
                 throw this.flowSuperseded();
             return {
                 epoch: `${ACTIVE_EPOCH_PREFIX}${crypto.randomUUID()}`,
-                ...(grant.cleanupPending ? { cleanupPending: true } : {}),
                 body,
             };
         }
@@ -1410,7 +1368,6 @@ export class KvOAuthProvider {
                 const stored = {
                     connectaOAuth: GRANT_VERSION,
                     epoch: grant.epoch,
-                    ...(grant.cleanupPending ? { cleanupPending: true } : {}),
                     ...(grant.flow !== undefined ? { flow: grant.flow } : {}),
                 };
                 if (Object.keys(grant.body).length > 0) {
@@ -1466,7 +1423,6 @@ export class KvOAuthProvider {
                 }
                 return {
                     epoch: stored.epoch,
-                    ...(stored.cleanupPending ? { cleanupPending: true } : {}),
                     ...(stored.flow !== undefined ? { flow: stored.flow } : {}),
                     body: grantBody(body),
                 };
@@ -1497,10 +1453,17 @@ export class KvOAuthProvider {
                     }),
                     signal,
                 ]));
-                if (raw === null)
-                    raw = (yield authInvoke(this, "migrate", [signal]));
-                if (raw !== null && storedGrant(raw)?.cleanupPending)
-                    raw = (yield authInvoke(this, "cleanupV2", [raw, signal]));
+                if (raw === null) {
+                    // Inspect names only: retired credentials are never opened or copied.
+                    const keys = (yield authInvoke(this, "wait", [
+                        authMethod(() => authStorage(this.storage, "list", [retiredOAuthKeys.scan])),
+                        signal,
+                    ]));
+                    if (keys.some((key) => retiredOAuthKeys.prefixes.some((prefix) => key.startsWith(prefix))))
+                        (this.sealer ?? console).warn(`[connecta] connector "${this.connectorId}" has an unsupported pre-layout-3 OAuth grant; ` +
+                            "treating it as absent. Connect again to authorize, or restore a backup and run the " +
+                            "OAuth migration on Connecta 0.37.1 before upgrading.");
+                }
                 const grant = (yield authInvoke(this, "openGrant", [raw, signal]));
                 if (raw !== null && this.sealer && storedGrant(raw)?.body !== undefined) {
                     const sealed = (yield authInvoke(this, "encodeGrant", [grant, signal]));
@@ -1515,99 +1478,6 @@ export class KvOAuthProvider {
                 return { raw, grant };
             }.bind(this));
         }, KvOAuthProvider.prototype.readGrant);
-        registerAuthMethod(KvOAuthProvider.prototype, "migrate", function (signal) {
-            return authFlow(function* () {
-                const sealer = this.sealer;
-                const found = (yield authInvoke(this, "wait", [
-                    authMethod(() => {
-                        return authCall(readV2Grant, [
-                            this.preparationStorage(signal),
-                            sealer && {
-                                ...sealer,
-                                open: authMethod((label, value) => {
-                                    return authInvoke(this, "wait", [
-                                        authMethod(() => {
-                                            return authInvoke(sealer, "open", [label, value]);
-                                        }),
-                                        signal,
-                                    ]);
-                                }),
-                            },
-                        ]);
-                    }),
-                    signal,
-                ]));
-                if (!found)
-                    return null;
-                const prefix = found.disconnected ? DISCONNECTED_EPOCH_PREFIX : ACTIVE_EPOCH_PREFIX;
-                const encoded = (yield authInvoke(this, "encodeGrant", [
-                    {
-                        epoch: `${prefix}${crypto.randomUUID()}`,
-                        body: found.body,
-                        cleanupPending: true,
-                    },
-                    signal,
-                ]));
-                let written;
-                try {
-                    written = (yield authInvoke(this, "wait", [
-                        authMethod(() => {
-                            return authStorage(this.storage, "compareAndSet", [GRANT, null, encoded]);
-                        }),
-                        signal,
-                    ]));
-                }
-                catch {
-                    if (signal?.aborted)
-                        throw aborted(signal);
-                    throw this.credentialWriteError();
-                }
-                return (yield written
-                    ? authValue(() => encoded)
-                    : authInvoke(this, "wait", [
-                        authMethod(() => {
-                            return authStorage(this.storage, "get", [GRANT]);
-                        }),
-                        signal,
-                    ]));
-            }.bind(this));
-        }, KvOAuthProvider.prototype.migrate);
-        registerAuthMethod(KvOAuthProvider.prototype, "cleanupV2", function (raw, signal) {
-            signal = signal === undefined ? this.signal : signal;
-            return authFlow(function* () {
-                try {
-                    if (!(yield authInvoke(this, "wait", [
-                        authMethod(() => {
-                            return authCall(deleteV2Keys, [this.preparationStorage(signal)]);
-                        }),
-                        signal,
-                    ])))
-                        return raw;
-                    const grant = (yield authInvoke(this, "openGrant", [raw, signal]));
-                    delete grant.cleanupPending;
-                    const cleared = (yield authInvoke(this, "encodeGrant", [grant, signal]));
-                    if ((yield authInvoke(this, "wait", [
-                        authMethod(() => {
-                            return authStorage(this.storage, "compareAndSet", [GRANT, raw, cleared]);
-                        }),
-                        signal,
-                    ])))
-                        return cleared;
-                    return (yield authInvoke(this, "wait", [
-                        authMethod(() => {
-                            return authStorage(this.storage, "get", [GRANT]);
-                        }),
-                        signal,
-                    ]));
-                }
-                catch {
-                    if (signal?.aborted)
-                        throw aborted(signal);
-                    // The durable marker survives both deletion and marker-clear failures.
-                    return raw;
-                }
-            }.bind(this));
-        }, KvOAuthProvider.prototype.cleanupV2);
         registerAuthMethod(KvOAuthProvider.prototype, "boundGrant", function (signal) {
             signal = signal === undefined ? this.signal : signal;
             return authFlow(function* () {
@@ -2763,10 +2633,7 @@ export class KvOAuthProvider {
                 for (let attempt = 0; attempt < MAX_GRANT_WRITES; attempt++) {
                     const { raw, grant } = (yield authInvoke(this, "readGrant", [null]));
                     const carried = preserveClient && !operatorDisconnected ? this.carriableClient(grant) : undefined;
-                    const encoded = (yield authInvoke(this, "encodeGrant", [
-                        { epoch, body: carried ?? {}, cleanupPending: true },
-                        null,
-                    ]));
+                    const encoded = (yield authInvoke(this, "encodeGrant", [{ epoch, body: carried ?? {} }, null]));
                     let written;
                     try {
                         written = (yield authStorage(this.storage, "compareAndSet", [GRANT, raw, encoded]));
@@ -2777,7 +2644,6 @@ export class KvOAuthProvider {
                     if (written) {
                         this.refreshCoordinator?.retire(grant.epoch);
                         try {
-                            (yield authInvoke(this, "cleanupV2", [encoded, null]));
                             (yield authInvoke(this, "sweepConsents", []));
                             (yield authInvoke(this, "sweepRefreshLeases", []));
                         }

package/dist/auth/downstream-revocation.js

@@ -4,7 +4,7 @@ import { fromSignal, runEdge } from "../runtime/run.js";
 import { classifyHost } from "../url-safety.js";
 import { authenticateRemoteClient, remoteClientAuthMethod, } from "./downstream-client-metadata.js";
 import { authCall, authFlow, authProgram, registerAuth } from "./native.js";
-import { discoveryIssuer } from "./oauth-v2-migration.js";
+import { discoveryIssuer } from "./oauth-grant.js";
 /** Local removal succeeded; provider-side removal needs the operator's attention. */
 export class OAuthRevocationError extends ConnectorCallError {
     constructor() {

package/dist/auth/oauth-grant.js

@@ -0,0 +1,11 @@
+function plainObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/** The issuer a discovery record names, as the SDK derives it. */
+export function discoveryIssuer(state) {
+    if (!plainObject(state) || typeof state.authorizationServerUrl !== "string")
+        return undefined;
+    const metadata = state.authorizationServerMetadata;
+    const issuer = plainObject(metadata) && typeof metadata.issuer === "string" ? metadata.issuer : state.authorizationServerUrl;
+    return issuer === "" ? undefined : issuer;
+}

package/dist/auth/oauth-token-response.js

@@ -3,7 +3,7 @@ import { authCall, authFlow, authInvoke, authProgram, registerAuth } from "./nat
 // The token endpoint's answers as downstream OAuth classifies them and the SDK
 // gets to parse them: a refresh's re-consent verdict, and every failure
 // rebuilt from its OAuth `error` code alone, so nothing else a token endpoint
-// wrote reaches the SDK's console output (#695).
+// wrote reaches the SDK's console output.
 /** The `grant_type` of a token request, or undefined for any other request. */
 export function tokenGrantType(init) {
     if ((init?.method ?? "GET").toUpperCase() !== "POST")

package/dist/auth/vercel-agent.js

@@ -1,3 +1,4 @@
+import { decodeBase64url } from "../bytes.js";
 import { runEdge } from "../runtime/run.js";
 import { authCall, authCatch, authFetch, authFlow, authInvoke, authMethod, authProgram, registerAuth, } from "./native.js";
 import { AGENT_NAMESPACE, agentSubjectId, trustAgentProvider } from "../agent-identity.js";
@@ -14,7 +15,7 @@ const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false });
 function bytes(value) {
     if (!/^[A-Za-z0-9_-]+(?![\s\S])/.test(value))
         throw new Error("Invalid JWT encoding");
-    return Uint8Array.from(atob(value.replace(/-/g, "+").replace(/_/g, "/")), (char) => char.charCodeAt(0));
+    return decodeBase64url(value);
 }
 function record(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);

package/dist/auth-elicitation.js

@@ -1,3 +1,4 @@
+import { toolError } from "./tool-error.js";
 import { RequestScope, requestOwner } from "./runtime/request-scope.js";
 import { upwardStep } from "./upward.js";
 import { authAwait, authCall, authInvoke, authFlow, authMethod, registerAuthMethod, authOwnMethod, } from "./auth/native.js";
@@ -17,8 +18,7 @@ import { canonicalState as canonical, requestDigest as digest, stateObject as ob
 const INPUT_KEY = "connecta_auth";
 const MESSAGE = "Connect this service in your browser, then retry the request.";
 function failure(code, message) {
-    const structuredContent = { ok: false, error: { code, message, retryable: false } };
-    return { content: [{ type: "text", text: JSON.stringify(structuredContent) }], structuredContent, isError: true };
+    return toolError({ code, message, retryable: false }, { ok: false });
 }
 /** Request-local auth recovery at the MCP boundary, never inside a guest provider. */
 export class AuthElicitation {

package/dist/branding.d.ts

@@ -1,7 +1,7 @@
 import type { ConnectaBranding, ConnectaTheme, UiAuthConfig } from "./types.js";
 /** Connecta's default monochrome "C" mark. */
 export declare const CONNECTA_FAVICON_SVG = "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 32 32\">\n  <style>\n    .fg { fill: #000 }\n    @media (prefers-color-scheme: dark) { .fg { fill: #fff } }\n  </style>\n  <path class=\"fg\" d=\"M27 9.4A13 13 0 1 0 27 22.6l-4.4-2.5a8 8 0 1 1 0-8.2z\"/>\n</svg>";
-export interface ResolvedTheme {
+interface ResolvedTheme {
     accent?: string;
     radius?: string;
     fontFamily?: string;
@@ -28,26 +28,12 @@ interface ResolvedBranding {
     theme: ResolvedTheme;
 }
 export declare function resolveBranding(branding?: ConnectaBranding): ResolvedBranding;
-/**
- * Read a theme the way branding URLs are read: gate every field, drop what
- * fails, never throw. This runs during `createConnecta`, so a malformed value
- * has to fall back to the stylesheet default instead of refusing to serve the
- * page. `droppedThemeTokens` names the drops for the startup warning.
- */
-export declare function resolveTheme(theme?: ConnectaTheme): ResolvedTheme;
 /**
  * Names of the theme tokens the operator set that failed their gate. Same
  * contract as `droppedBrandingUrls`: rendering falls back silently, so this is
  * the only place an operator learns their value never reached the page.
  */
 export declare function droppedThemeTokens(theme?: ConnectaTheme): string[];
-/**
- * The resolved theme as a `:root` block, or "" when a deployment configured
- * nothing. It is emitted after the stylesheet so it overrides the defaults.
- * There is no escaping here: every value has already passed a gate above, and
- * anything that would need escaping is dropped rather than rewritten.
- */
-export declare function themeCss(theme: ResolvedTheme): string;
 /** Text or attribute value, escaped for any position in an HTML document. */
 export declare function escapeHtml(value: string): string;
 export interface PageLayout {

package/dist/branding.js

@@ -71,7 +71,7 @@ const COLOR_SCHEMES = ["system", "light", "dark"];
  * has to fall back to the stylesheet default instead of refusing to serve the
  * page. `droppedThemeTokens` names the drops for the startup warning.
  */
-export function resolveTheme(theme) {
+function resolveTheme(theme) {
     const accent = trimmedString(theme?.accent);
     const fontFamily = trimmedString(theme?.fontFamily);
     const monoFamily = trimmedString(theme?.monoFamily);
@@ -175,7 +175,7 @@ function accentTokens(accent) {
  * There is no escaping here: every value has already passed a gate above, and
  * anything that would need escaping is dropped rather than rewritten.
  */
-export function themeCss(theme) {
+function themeCss(theme) {
     const derived = theme.accent ? accentTokens(theme.accent) : undefined;
     const declarations = [
         theme.accent ? `--accent:${theme.accent}` : "",

package/dist/bytes.js

@@ -0,0 +1,42 @@
+/** Lowercase hexadecimal, preserving each byte's leading zero. */
+export function bytesToHex(bytes) {
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+export async function sha256Hex(value) {
+    return bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value))));
+}
+/** UTF-8 byte count without allocating encoded bytes; stops once the limit is exceeded. */
+export function utf8Length(value, limit = Infinity) {
+    let bytes = 0;
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code < 0x80)
+            bytes++;
+        else if (code < 0x800)
+            bytes += 2;
+        else if (code >= 0xd800 &&
+            code <= 0xdbff &&
+            value.charCodeAt(i + 1) >= 0xdc00 &&
+            value.charCodeAt(i + 1) <= 0xdfff) {
+            bytes += 4;
+            i++;
+        }
+        else
+            bytes += 3;
+        if (bytes > limit)
+            return bytes;
+    }
+    return bytes;
+}
+export function decodeBase64(value) {
+    const binary = atob(value);
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index += 1)
+        bytes[index] = binary.charCodeAt(index);
+    return bytes;
+}
+/** Optional padding preserves callers that pad before handing input to atob. */
+export function decodeBase64url(value, pad = false) {
+    const base64 = value.replace(/-/g, "+").replace(/_/g, "/");
+    return decodeBase64(pad ? base64 + "=".repeat((4 - (base64.length % 4)) % 4) : base64);
+}

package/dist/call-admission-context.js

@@ -1,8 +1,5 @@
-import { Budget, callScopeKnown, chargeView, recordedService, setViewService } from "./runtime/call.js";
-import { chargeCallBudget } from "./runtime/call-admission.js";
-export function attachCallAdmission(ctx, permit) {
-    setViewService(ctx, Budget, { charge: chargeCallBudget(permit, ctx.signal) });
-}
+// The Promise view of the call's admission service; authority stays internal.
+import { Budget, callScopeKnown, chargeView, recordedService } from "./runtime/call.js";
 export function chargeConnectorCall(ctx) {
     return recordedService(ctx, Budget) || callScopeKnown(ctx) ? chargeView(ctx) : Promise.resolve();
 }

package/dist/call-recovery.js

@@ -43,6 +43,3 @@ export function recordRecovery(ctx, facts) {
         recordFor(ctx);
     serviceFor(ctx, Recovery)?.recordNow?.(facts);
 }
-export function recoveryFor(ctx) {
-    return ctx ? serviceFor(ctx, RecordedRecovery)?.facts : undefined;
-}

package/dist/catalog-fingerprint.js

@@ -1,7 +1,8 @@
+import { bytesToHex } from "./bytes.js";
 const encoder = new TextEncoder();
 async function fingerprintBytes(bytes) {
     const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new Uint8Array(bytes)));
-    const hex = [...digest].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+    const hex = bytesToHex(digest);
     return `sha256:${bytes.byteLength}:${hex}`;
 }
 /** Fingerprint an already serialized catalog without parsing/reserializing it. */
@@ -12,20 +13,3 @@ export async function fingerprintSerializedCatalog(serializedTools) {
         byteLength: bytes.byteLength,
     };
 }
-/**
- * Capture every persisted/discovered field in one deterministic snapshot.
- * Object key order is allowed to cause a conservative extra write; changing
- * any serialized field must change the digest.
- */
-export async function snapshotCatalog(tools) {
-    const serializedTools = JSON.stringify(tools);
-    if (serializedTools === undefined) {
-        throw new TypeError("Tool catalog is not JSON-serializable.");
-    }
-    const bytes = encoder.encode(serializedTools);
-    return {
-        tools,
-        fingerprint: await fingerprintBytes(bytes),
-        serializedBytes: bytes,
-    };
-}