@zackbart/connecta 0.37.1 → 0.38.0

package/dist/providers/drive/tools.js

@@ -1,3 +1,5 @@
+import { asRecord, asArray, compact } from "../_shared/json.js";
+import { decodeBase64, decodeBase64url } from "../../bytes.js";
 // Google Drive named workflows, bounded projections and bound continuation on the provider kit.
 import { Effect, Option, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -83,15 +85,6 @@ const DETAIL_FIELDS = `${SUMMARY_FIELDS},description,createdTime,lastModifyingUs
 const PERMISSION_FIELDS = "id,type,role,emailAddress,domain,displayName,allowFileDiscovery,expirationTime,deleted,permissionDetails(inherited,inheritedFrom)";
 /** Every file request reaches shared drives as well as My Drive. */
 const ALL_DRIVES = { supportsAllDrives: true };
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }
@@ -260,8 +253,7 @@ function encodeCursor(ctx, resume) {
 const FINGERPRINT = /^[A-Za-z0-9_-]{16}$/;
 function decodeCursor(cursor) {
     try {
-        const base = cursor.replace(/-/g, "+").replace(/_/g, "/");
-        const json = new TextDecoder().decode(fromBase64(base + "=".repeat((4 - (base.length % 4)) % 4)));
+        const json = new TextDecoder().decode(decodeBase64url(cursor, true));
         const [token, skip, size, scope, page, last] = JSON.parse(json);
         const midPage = typeof page === "string" && FINGERPRINT.test(page) && typeof last === "string" && FINGERPRINT.test(last);
         if ((token === null || (typeof token === "string" && token !== "")) &&
@@ -471,19 +463,6 @@ function base64(bytes) {
     }
     return btoa(binary);
 }
-function fromBase64(value) {
-    let binary;
-    try {
-        binary = atob(value);
-    }
-    catch {
-        throw new ConnectorCallError("invalid_args", "contentBase64 is not valid base64.");
-    }
-    const bytes = new Uint8Array(binary.length);
-    for (let index = 0; index < binary.length; index += 1)
-        bytes[index] = binary.charCodeAt(index);
-    return bytes;
-}
 /**
  * Why the content tool returns no content for a file, as the note says it.
  * Only a well-formed id or media type is interpolated; anything else Drive
@@ -681,7 +660,7 @@ function media(args) {
         };
     }
     if (hasBinary) {
-        const bytes = fromBase64(args["contentBase64"]);
+        const bytes = contentBytes(args["contentBase64"]);
         if (bytes.length > BINARY_INLINE_BYTES) {
             throw new ConnectorCallError("invalid_args", `contentBase64 decodes to ${bytes.length} bytes, past this connection's ${BINARY_INLINE_BYTES}-byte upload cap.`);
         }
@@ -1288,3 +1267,11 @@ function decisionInputs(file, keys) {
         }
     }
 }
+function contentBytes(value) {
+    try {
+        return decodeBase64(value);
+    }
+    catch {
+        throw new ConnectorCallError("invalid_args", "contentBase64 is not valid base64.");
+    }
+}

package/dist/providers/forms/tools.js

@@ -1,3 +1,4 @@
+import { asRecord, asArray, compact } from "../_shared/json.js";
 // Forms projections and revision-checked workflows on the standard provider kit.
 import { Effect, Option, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -40,15 +41,6 @@ const MAX_REQUESTS = 100;
  * cursor included, is measured before it is returned.
  */
 const PAGE_RESERVE_BYTES = 4 * 1024;
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }

package/dist/providers/gmail/tools.js

@@ -1,3 +1,5 @@
+import { asRecord, asArray, compact } from "../_shared/json.js";
+import { decodeBase64url } from "../../bytes.js";
 // Curated Gmail workflows over real Effect declarations and the standard kit boundary.
 import { Effect, Option } from "effect";
 import { defined } from "../../connectors/api-connector.js";
@@ -31,15 +33,6 @@ const MAX_RECIPIENTS = 100;
 const MAX_ATTACHMENT_BYTES = 1024 * 1024;
 /** Same direct-call ceiling and minimum result budget as Drive content reads. */
 const MAX_ATTACHMENT_RESULT_BYTES = 4 * 1024 * 1024;
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }
@@ -83,15 +76,6 @@ function htmlToText(ctx, html) {
         .replace(/\n{3,}/g, "\n\n")
         .trim();
 }
-function base64UrlBytes(data) {
-    const base64 = data.replace(/-/g, "+").replace(/_/g, "/");
-    const binary = atob(base64 + "=".repeat((4 - (base64.length % 4)) % 4));
-    const bytes = new Uint8Array(binary.length);
-    for (let index = 0; index < binary.length; index += 1) {
-        bytes[index] = binary.charCodeAt(index);
-    }
-    return bytes;
-}
 function charsetOf(ctx, part) {
     const type = header(part, "Content-Type") ?? "";
     if (redactBeforeCut(ctx, type) !== type)
@@ -113,7 +97,7 @@ function charsetOf(ctx, part) {
 function decodeIn(ctx, part, data) {
     let bytes;
     try {
-        bytes = base64UrlBytes(data);
+        bytes = decodeBase64url(data, true);
     }
     catch {
         return { text: "" };
@@ -346,7 +330,7 @@ function attachmentBytes(client, ctx, messageId, part) {
             validateSize(provenance.originalLength);
         let bytes;
         try {
-            bytes = base64UrlBytes(data);
+            bytes = decodeBase64url(data, true);
         }
         catch {
             throw new ConnectorCallError("connector_call_failed", "Gmail returned invalid base64url attachment data.", {
@@ -605,7 +589,7 @@ function openCursor(cursor, tool, call) {
         return undefined;
     let claims;
     try {
-        const parsed = JSON.parse(new TextDecoder().decode(base64UrlBytes(String(cursor))));
+        const parsed = JSON.parse(new TextDecoder().decode(decodeBase64url(String(cursor), true)));
         if (parsed && typeof parsed === "object" && parsed.v === 1)
             claims = parsed;
     }

package/dist/providers/overflow/api.js

@@ -1,3 +1,4 @@
+import { asRecord } from "../_shared/json.js";
 // Overflow v3: reviewed vendor declarations, derived operation index and paging contracts.
 // Public input: staging OpenAPI 3.0; exact retrieval and known upstream drift are in evidence/review.md.
 import { Effect, Schema } from "effect";
@@ -1003,6 +1004,3 @@ export const probe = {
         return `Overflow ${options.environment} accepted the client id and API key.${where}`;
     },
 };
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}

package/dist/providers/overflow/index.js

@@ -1,3 +1,4 @@
+import { readOnlyNotice } from "../_shared/guide.js";
 import { skill } from "./skill.generated.js";
 import { keys, optionsOf } from "../../config-schema.js";
 import { PROVIDER_COMMON } from "../../connectors/option-shapes.js";
@@ -81,7 +82,7 @@ export const overflow = defineApiProvider({
                 : "Overflow staging: a sandbox with separate credentials and data.",
             `Nonprofit purpose: ${options.purpose}`,
             "Named reads minimize contact data; get_donor is the full-contact lookup. Webhook signing secrets are always removed.",
-            ...(options.readOnly ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly),
             ...(options.defaultPageSize !== undefined
                 ? [`Paged lists return ${options.defaultPageSize} items by default on this connection.`]
                 : []),

package/dist/providers/overflow/tools.js

@@ -1,3 +1,5 @@
+import { compact as compactDefined } from "../_shared/json.js";
+import { asRecord, asArray } from "../_shared/json.js";
 // Overflow's curated kit tools: standard pages, safe projections and narrowing fields.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -5,14 +7,8 @@ import { Refusal } from "../../http/errors.js";
 import { Integer, isMinChars } from "../../http/json-schema.js";
 import { read, list } from "../../http/tools.js";
 import * as api from "./api.js";
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+    return compactDefined(value);
 }
 /** A `{ id, name }` reference, or undefined when Overflow sent none. */
 function reference(value) {

package/dist/providers/planning-center/api.js

@@ -1,3 +1,4 @@
+import { asArray, asRecord } from "../_shared/json.js";
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
 import { Refusal } from "../../http/errors.js";
@@ -11,7 +12,7 @@ import { PlanningCenterIndex } from "./lib/discovery.js";
 import { PCO_REFUSALS } from "./lib/verdicts.js";
 import { TABLE } from "./safety.js";
 import { excludedApps, series } from "./lib/guide.js";
-import { asRecord, asArray, resources, attribute, pageOf } from "./lib/json-api.js";
+import { resources, attribute, pageOf } from "./lib/json-api.js";
 import { PLANNING_CENTER_API_BASE_URL, PLANNING_CENTER_APPS, PLANNING_CENTER_API_VERSIONS, DEFAULT_USER_AGENT, } from "./lib/constants.js";
 export { PLANNING_CENTER_API_BASE_URL, PLANNING_CENTER_APPS, PLANNING_CENTER_API_VERSIONS, MAX_PAGE_SIZE, DEFAULT_PAGE_SIZE, PLANNING_CENTER_MAX_RESPONSE_BYTES, PLANNING_CENTER_ADMISSION, } from "./lib/constants.js";
 export const CREDENTIAL = {

package/dist/providers/planning-center/lib/constants.d.ts

@@ -55,4 +55,4 @@ export declare const PLANNING_CENTER_MAX_RESPONSE_BYTES: number;
  */
 export declare const PLANNING_CENTER_ADMISSION: ConnectorCallAdmissionPolicy;
 /** Planning Center refuses a request without a descriptive one (HTTP 403). */
-export declare const DEFAULT_USER_AGENT = "connecta/0.37.1 (+https://github.com/zackbart/connecta)";
+export declare const DEFAULT_USER_AGENT = "connecta/0.38.0 (+https://github.com/zackbart/connecta)";

package/dist/providers/planning-center/lib/json-api.js

@@ -1,13 +1,5 @@
+import { asRecord, asArray, compact } from "../../_shared/json.js";
 import { ConnectorCallError } from "../../../errors.js";
-export function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-export function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-export function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function isResource(value) {
     const record = asRecord(value);
     return typeof record["id"] === "string" && typeof record["type"] === "string";

package/dist/providers/planning-center/tools.js

@@ -1,3 +1,4 @@
+import { asRecord, compact } from "../_shared/json.js";
 // Curated Planning Center workflows over the standard provider kit.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -6,7 +7,7 @@ import { Integer, isMinChars, emptyRequired } from "../../http/json-schema.js";
 import { read, write, list as standardList } from "../../http/tools.js";
 import { PLANNING_CENTER_APPS, MAX_PAGE_SIZE, planningCenterCall } from "./api.js";
 import { excludedApps } from "./lib/guide.js";
-import { asRecord, compact, resources, indexIncluded, relId, related, relatedMany, pick, attribute, writeDocument, pageOf, } from "./lib/json-api.js";
+import { resources, indexIncluded, relId, related, relatedMany, pick, attribute, writeDocument, pageOf, } from "./lib/json-api.js";
 const fail = (code, message, options) => Effect.fail(new Refusal({ error: new ConnectorCallError(code, message, options) }));
 const pattern = (source) => Schema.makeFilter((value) => typeof value !== "string" || new RegExp(source).test(value), {
     toJsonSchema: () => ({ pattern: source }),

package/dist/providers/sheets/tools.js

@@ -1,3 +1,4 @@
+import { asRecord, asArray, compact } from "../_shared/json.js";
 // Google Sheets named projections, bounded cell reads and guarded writes.
 import { Effect, Option, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -38,15 +39,6 @@ const MAX_CELL_CHARS = 50_000;
 const MAX_WRITE_CELLS = 50_000;
 /** Named ranges a metadata read lists before reporting a size cut. */
 const MAX_NAMED_RANGES = 200;
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }

package/dist/providers/slides/tools.js

@@ -1,3 +1,5 @@
+import { asRecord, asArray, compact } from "../_shared/json.js";
+import { decodeBase64url } from "../../bytes.js";
 // Google Slides named workflows on real kit schemas, with bound content continuation.
 import { Effect, Option, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -52,7 +54,7 @@ const MAX_ECHO_CHARS = 100;
 /**
  * The comment kinds of Slides' Request. A batch carrying any of them has
  * comment changes Slides saves apart from the deck's, and only `ALL_SAVED`
- * says they all landed (#696).
+ * says they all landed.
  */
 /** The comment save states that say every comment change in a batch landed, or none was asked for. */
 const COMMENTS_SETTLED = new Set(["NO_UPDATES_REQUESTED", "ALL_SAVED"]);
@@ -121,15 +123,6 @@ const COMMENT_DECK_FIELDS = "presentationId,revisionId,commentsViewMode,comments
     "slides(objectId,commentAnchors,slideProperties(notesPage(objectId,commentAnchors)))," +
     "layouts(objectId,commentAnchors),masters(objectId,commentAnchors),notesMaster(objectId,commentAnchors)";
 const COMMENT_PAGE_FIELDS = "objectId,revisionId,commentsViewMode,comments,commentAnchors";
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }
@@ -226,9 +219,7 @@ function decodeCursor(value, expected) {
     const refuse = (why) => new ConnectorCallError("invalid_args", `${why} Omit cursor to start from the beginning.`);
     let cursor;
     try {
-        const base64 = String(value).replace(/-/g, "+").replace(/_/g, "/");
-        const binary = atob(base64 + "=".repeat((4 - (base64.length % 4)) % 4));
-        cursor = JSON.parse(new TextDecoder().decode(Uint8Array.from(binary, (character) => character.charCodeAt(0))));
+        cursor = JSON.parse(new TextDecoder().decode(decodeBase64url(String(value), true)));
     }
     catch {
         throw refuse("cursor is not one this connection issued; pass page.nextCursor back unchanged.");

package/dist/providers/stripe/index.js

@@ -1,3 +1,4 @@
+import { readOnlyNotice } from "../_shared/guide.js";
 import { keys, optionsOf, variants } from "../../config-schema.js";
 import { defineApiProvider } from "../../http/provider.js";
 import { authenticate, connectedAccount, MAX_RESPONSE_BYTES, READ_CAP_MS, MODE_COPY, probe, safety, stripeErrors, StripeApi, stripeIndex, stripeBinding, STRIPE_PAGES, STRIPE_VERDICTS, } from "./api.js";
@@ -63,7 +64,7 @@ function usageGuide(options) {
                     `Connected account: ${account}. Every call acts as this Connect account; the platform account's own objects are out of reach here.`,
                 ]
                 : []),
-            ...(options.readOnly === true ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly === true),
         ],
         required: true,
     };

package/dist/providers/stripe/safety.js

@@ -1,4 +1,4 @@
-// Stripe's reviewed value-safety table (#801), on the shared mechanism in
+// Stripe's reviewed value-safety table, on the shared mechanism in
 // `../_shared/rest/value-safety.ts`: every operation the detector flags in the
 // pinned spec (`evidence/value-safety.json`) has one verdict here, and
 // `provider.safety.node.test.ts` runs the shared harness over it.
@@ -48,7 +48,7 @@
 // - Issuing card numbers and CVCs come back only as expansions, which the
 //   connector refuses on every Issuing path (`api.ts`); the card operations
 //   also redact both fields.
-// Embedded URL verdict (#812): reviewed paths + global signing parameters.
+// Embedded URL verdict: reviewed paths + global signing parameters.
 // Evidence: digest-verified Stripe v2555, components/schemas/charge's
 // failure_message ("Message to user further explaining reason for charge
 // failure") and charge_outcome.seller_message (Stripe's human-readable

package/dist/providers/tithely/api.js

@@ -1,4 +1,5 @@
-// Tithe.ly's giving API (v1) as a kit vendor (decision 0010): the operations,
+import { asRecord, asArray } from "../_shared/json.js";
+// Tithe.ly's giving API (v1) as a kit vendor: the operations,
 // what its statuses mean, its credential, its in-band refusal, the probe, and
 // the value-safety review. Facts from the per-operation reference at
 // https://docs.tithe.ly/reference/introduction, each marked where it is
@@ -509,12 +510,6 @@ export function tithelySafety(sensitiveFields) {
 }
 // --- Shared readers ------------------------------------------------------------------
 const failed = (error) => Effect.fail(new Refusal({ error }));
-export function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-export function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 export function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }

package/dist/providers/tithely/index.js

@@ -1,6 +1,7 @@
+import { readOnlyNotice } from "../_shared/guide.js";
 import { skill } from "./skill.generated.js";
 /**
- * Tithe.ly's giving API (v1) on the provider kit (decision 0010). No SDK
+ * Tithe.ly's giving API (v1) on the provider kit. No SDK
  * exists to depend on, and none would be welcome: this is a payments API, and
  * every tool was chosen and written, not generated (decision record 0001:
  * hand-authored tools). The vendor lives in `api.ts` and the tools in
@@ -67,7 +68,7 @@ function usageGuide(options) {
             sensitiveFields(options) === "return"
                 ? "This connection returns organizations' payout bank and legal-contact details through tithely_api_read; the named reads still omit them."
                 : "This connection withholds organizations' payout bank and legal-contact details from every result.",
-            ...(options.readOnly === true ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly === true),
             ...(options.defaultPageSize !== undefined
                 ? [`List tools return ${options.defaultPageSize} rows by default on this connection.`]
                 : []),

package/dist/providers/tithely/tools.js

@@ -1,8 +1,10 @@
-// Tithe.ly's curated tools on the provider kit (decision 0010) and their
+import { compact as compactDefined } from "../_shared/json.js";
+import { asArray, asRecord } from "../_shared/json.js";
+// Tithe.ly's curated tools on the provider kit and their
 // projections. Decision 0011's step 2: standard lists ({ items, page } with
 // limit, cursor and fields), fields on every named read, and no `raw`: what a
 // projection drops stays reachable through the standard hatch, which the kit
-// builds from `api.ts`'s index and verdicts (decision 0014). Each named read
+// builds from `api.ts`'s index and verdicts. Each named read
 // earns its place against the hatch with paging Tithe.ly cannot report
 // (lookahead), units (cents, ISO dates), joins (donor, organization and
 // payment method inline) or reconciliation of a known id after a write.
@@ -13,7 +15,7 @@ import { Refusal } from "../../http/errors.js";
 import { Integer } from "../../http/json-schema.js";
 import { lookahead } from "../../http/paging.js";
 import { get as getTool, list } from "../../http/tools.js";
-import { asArray, asRecord, entity, getCharge, getRecurring, listAccounts, listAllAccounts, listCharges, listOrganizations, listPaymentMethods, listRecurring, MAX_PAGE_SIZE, PAYOUT_CURRENCY, text, } from "./api.js";
+import { entity, getCharge, getRecurring, listAccounts, listAllAccounts, listCharges, listOrganizations, listPaymentMethods, listRecurring, MAX_PAGE_SIZE, PAYOUT_CURRENCY, text, } from "./api.js";
 // --- Schemas ---------------------------------------------------------------------
 const Id = Schema.String.check(Schema.isMinLength(1));
 const Text = Schema.optionalKey(Schema.String);
@@ -267,7 +269,7 @@ function seconds(value, name) {
     return Effect.succeed(Math.floor(parsed / 1000));
 }
 function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+    return compactDefined(value);
 }
 /** Integer cents from Tithe.ly's string-or-number amounts. */
 function cents(value) {
@@ -325,7 +327,7 @@ function projectOrganization(value) {
     return compact({
         organizationId: text(organization["organization_id"]),
         name: text(organization["name"]),
-        // The giving widget id embeds Tithe.ly's giving form; the step-2 eval showed agents need it (decision 0014).
+        // The giving widget id embeds Tithe.ly's giving form; the step-2 eval showed agents need it.
         widgetId: text(organization["widget_id"]),
         ownerAccountId: text(organization["account_id"]),
         website: text(organization["website"]),

package/dist/providers/vercel/api.js

@@ -1,3 +1,4 @@
+import { isRecord } from "../_shared/json.js";
 // Vercel's pinned contract, authentication, failures and value-safety boundary.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -24,9 +25,6 @@ const READ_POSTS = [
     ["POST", "/v1/registrar/domains/search", "Searches domain availability and pricing; buys nothing."],
     ["POST", "/v8/artifacts", "Reads Remote Cache metadata for a list of artifact hashes; uploads nothing."],
 ];
-export function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 export function record(value) {
     return isRecord(value) ? value : {};
 }
@@ -36,9 +34,6 @@ export function text(value) {
 export function invalid(message) {
     throw new ConnectorCallError("invalid_args", message);
 }
-export function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function truthy(value) {
     return value === true || value === 1 || (typeof value === "string" && /^(?:1|true)$/i.test(value.trim()));
 }

package/dist/providers/vercel/lib/pin.js

@@ -4,7 +4,7 @@ import { ConnectorCallError } from "../../../errors.js";
 import { Refusal } from "../../../http/errors.js";
 import { Budget } from "../../../http/services.js";
 import { checked } from "../../_shared/rest/kit.js";
-export const MAX_PIN_LOOKUPS = 8;
+const MAX_PIN_LOOKUPS = 8;
 export const PIN_WRITE_STEPS = Object.freeze({
     write: "once",
     lookup1: "once",

package/dist/providers/vercel/safety.js

@@ -214,7 +214,7 @@ const absent = {
 //
 // Residual risk: a secret a person typed into a free-text
 // name, description, log line, or identifier is out of scope.
-// Embedded URL verdict (#812): reviewed paths + global signing parameters.
+// Embedded URL verdict: reviewed paths + global signing parameters.
 // Evidence: pinned index/candidates sha256:5a702fd2dc76 identify deployment
 // reads/creation/listing, build events and runtime logs; the operation/path
 // list below scans errorMessage, deployments.errorMessage, payload.text/text

package/dist/providers/vercel/tools.js

@@ -1,3 +1,4 @@
+import { compact, isRecord } from "../_shared/json.js";
 // Curated Vercel metadata and bounded logs through kit-owned call services.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -9,7 +10,7 @@ import { schema, typedParams } from "../_shared/rest/kit.js";
 import { refuseWithheldUpload } from "../_shared/rest/value-safety.js";
 import { rowStop } from "./lib/logs.js";
 import { checked } from "../_shared/rest/kit.js";
-import { admit, compact, defaultTeam, isRecord, invalid, named, queryOf, queryPairs, record, reviewedCode, restCall, text, vercelIndex, refuse, checkServer, } from "./api.js";
+import { admit, defaultTeam, invalid, named, queryOf, queryPairs, record, reviewedCode, restCall, text, vercelIndex, refuse, checkServer, } from "./api.js";
 import { pinOptions, readPinnedTeam, PIN_WRITE_STEPS } from "./lib/pin.js";
 const MAX_LOG_BYTES = 1024 * 1024;
 const MAX_LOG_TEXT = 4_000;

package/dist/redaction-marker.js

@@ -7,7 +7,7 @@ export const REDACTED = "[redacted]";
  * secrets from every value of a vendor body before result safety reads it, so a rule that decides
  * on a value (a type discriminator, a record's label or type, a URL's scheme or parameter names,
  * a Content-Type) can find the placeholder where the vendor wrote what the rule matches.
- * Such a decision takes its most protective outcome (#703).
+ * Such a decision takes its most protective outcome.
  */
 export function redactionAltered(value) {
     return typeof value === "string" && value.includes(REDACTED);
@@ -92,7 +92,7 @@ function credentialUnit(code) {
 }
 /**
  * The text right after the placeholder at `at` that may be the rest of a credential whose public
- * prefix redaction took (#703): up to the first unit `ends` accepts, reading later placeholders
+ * prefix redaction took: up to the first unit `ends` accepts, reading later placeholders
  * whole so none is split. Redaction can take `sk_live_`, `whsec_`, `Bearer `, or a signing
  * parameter's name and `=`, leaving what follows; with that prefix known, any remainder rebuilds
  * the credential, however short or encoded, so `readable` holds whenever it carries any base64 or

package/dist/registry.d.ts

@@ -240,7 +240,7 @@ export declare class Registry implements RegistryView {
      *
      * `chunks[n]` lands on `resultKeys.chunk(id, n)` inside `partition` — the
      * layout connecta.result reads back, so a page fetches only the chunks it covers
-     * instead of the whole stored result (issue #540). Chunking is a read-cost
+     * instead of the whole stored result. Chunking is a read-cost
      * decision, not a capacity one: however many keys an envelope occupies, it
      * is one stash entry charged its total ASCII length.
      *

package/dist/registry.js

@@ -1,3 +1,5 @@
+import { wrapViewCredentials } from "./runtime/call.js";
+import { sha256Hex } from "./bytes.js";
 import { catalogRevision } from "./catalog-revision.js";
 import { authCall, authInvoke } from "./auth/native.js";
 import { Clock, Duration, Effect, Random } from "effect";
@@ -23,7 +25,7 @@ import { causeError, runEdge } from "./runtime/run.js";
 import { Storage } from "./runtime/services.js";
 import { SharedRead } from "./runtime/shared-read.js";
 import { runOnPartition, storageCompareAndSet, storageDelete, storageGet, storageSet, storageList, } from "./runtime/storage.js";
-import { redactCatalog, sentSecretsFor, sentSecretsForRequest, trackCredentialReads } from "./sent-secrets.js";
+import { redactCatalog, sentSecretsFor, sentSecretsForRequest } from "./sent-secrets.js";
 import { GUIDE_SUMMARY_LENGTH, normalizeGuideSummary } from "./skills.js";
 import { jsonCodec, OAUTH_HANDOFF_TTL_SECONDS, oauthHandoffKeys, resultKeys, scopes, stashExpiryKeys, stashLedgerKeys, } from "./storage/keys.js";
 import { assertStaticToolNames, hasControlCharacters } from "./tool-name.js";
@@ -232,10 +234,6 @@ function swapStashLedger(plan) {
         }).pipe(Effect.catch(() => Effect.succeed({ status: "exhausted" })));
     });
 }
-async function sha256Hex(value) {
-    const bytes = new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(value)));
-    return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
-}
 /**
  * Holds the connector set, resolves addresses, and coalesces tool listings
  * within one request. Remote MCP clients own persisted response caching. Connector failures are isolated: a broken
@@ -518,7 +516,7 @@ export class Registry {
                 : {}),
         });
         sentSecretsFor(context);
-        trackCredentialReads(context);
+        wrapViewCredentials(context);
         attachOAuthPartition(context, this.oauthPartition);
         // Downstream OAuth state is sealed under the vault key, bound to this
         // connector and owner. The sealer rides beside the context, not on it.
@@ -581,7 +579,7 @@ export class Registry {
      *
      * `chunks[n]` lands on `resultKeys.chunk(id, n)` inside `partition` — the
      * layout connecta.result reads back, so a page fetches only the chunks it covers
-     * instead of the whole stored result (issue #540). Chunking is a read-cost
+     * instead of the whole stored result. Chunking is a read-cost
      * decision, not a capacity one: however many keys an envelope occupies, it
      * is one stash entry charged its total ASCII length.
      *

package/dist/request-principal.js

@@ -1,4 +1,4 @@
-// The admitted principal a request-auth resolver may receive (#1103).
+// The admitted principal a request-auth resolver may receive.
 //
 // Only the caller core attached from the admitting authorization counts
 // (`callerOf`, see connector-caller.ts). No argument, program or header can

package/dist/request-state.js

@@ -1,3 +1,4 @@
+import { sha256Hex } from "./bytes.js";
 import { ProtocolError, INVALID_PARAMS } from "@modelcontextprotocol/server";
 export const REQUEST_STATE_TTL_MS = 10 * 60_000;
 export const MAX_INPUT_ROUNDS = 3;
@@ -16,6 +17,5 @@ export function canonicalState(value) {
         : item);
 }
 export async function requestDigest(tool, args) {
-    const bytes = new TextEncoder().encode(canonicalState({ tool, args }));
-    return Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)), (byte) => byte.toString(16).padStart(2, "0")).join("");
+    return sha256Hex(canonicalState({ tool, args }));
 }

package/dist/routes/access-tokens.js

@@ -67,7 +67,7 @@ export async function routeAccessTokens(context, manager) {
     const admin = await authorizeUiIdentity(request, baseUrl, opts.config.auth, "access token management", context.runtimeContext, opts.config.logger);
     if (!admin.ok)
         return admin.response;
-    // Interactive maintainers alone manage agent tokens (#837); anyone else
+    // Interactive maintainers alone manage agent tokens; anyone else
     // gets the same private 404 every operator route gives them.
     if (!managesAgentTokens(opts, admin) || !admin.identity.principal) {
         return privateJson({ error: "not found" }, { status: 404 });

package/dist/routes/activity-disclosure.js

@@ -6,7 +6,7 @@ function activityToolVisible(access, event) {
 }
 /**
  * One disclosure rule for the timeline and the UI's last-call overlay. Only
- * maintainers read activity (#837), and only after the optional
+ * maintainers read activity, and only after the optional
  * read gate. They may see other principals' shared-connector history,
  * including request IDs, client name/version, and actor kind/id/namespace, on
  * plain /mcp and in every declared pool, within the tools that pool declares.

package/dist/routes/connect.js

@@ -88,7 +88,7 @@ async function connect(context) {
     if (!authz.ok) {
         // Access sign-in is enforced at the edge. Clerk needs its own sign-in page.
         // The sign-in page returns to this link, which then sends a maintainer on
-        // to the operator UI. Pool members cannot use that UI yet (#837), so
+        // to the operator UI. Pool members cannot use that UI yet, so
         // signing in there would strand them.
         if (authz.response.status === 401 &&
             authorizationCredential(request).kind === "absent" &&
@@ -107,7 +107,7 @@ async function connect(context) {
     if (authz.principalKey !== handoff.principal || !mayManageConnector(opts, authz, connector)) {
         return refuse("Sign in as the user who requested this connection and has permission to manage it.");
     }
-    // The operator UI serves maintainers only until member views ship (#837).
+    // The operator UI serves maintainers only until member views ship.
     // A member's OAuth link starts here directly, as it does without a UI.
     const viaUi = Boolean(opts.config.ui) && admitsMaintainer(opts, authz);
     if (!connector.startAuth) {