@zackbart/connecta 0.37.1 → 0.39.0

package/dist/providers/github/tools.js

@@ -3,7 +3,7 @@ import { api } from "../../connectors/api.js";
 import { deriveContext } from "../../derived-context.js";
 import { ConnectorCallError } from "../../errors.js";
 import { Refusal } from "../../http/errors.js";
-import { fieldsInput, fieldsProblem, selectFields } from "../../http/fields.js";
+import { fieldsContract, selectFields } from "../../http/fields.js";
 import { hatch } from "../../http/hatch.js";
 import { githubPage } from "../../http/hatch-paging.js";
 import { Integer, isMinChars } from "../../http/json-schema.js";
@@ -44,10 +44,9 @@ const common = {
         default: 30,
     })),
     cursor: Schema.optionalKey(text("Opaque page.nextCursor from this same search or scope listing.")),
-    fields: Schema.optionalKey(fieldsInput("Dot paths into each item; only narrows already-safe data.")),
 };
-const scopeNames = new Set(["org", "repo", "owner", "id", "full_name", "access", "workflows"]);
-const searchNames = new Set(["scope", "repository", "item"]);
+const SCOPE_FIELDS = fieldsContract("item", ScopeRow, "It only narrows already-safe data.");
+const SEARCH_FIELDS = fieldsContract("item", SearchRow, "Vendor fields are under item, e.g. item.title; it only narrows already-safe data.", "an item (vendor fields are under item)");
 const contextOf = Effect.gen(function* () {
     const op = yield* Effect.serviceOption(Operation);
     if (Option.isNone(op) || !op.value)
@@ -74,6 +73,36 @@ function selectors(input, policy) {
         return { repo: `${t.owner}/${t.repo}`, access: grant.access };
     });
 }
+const SEARCH_TERMS = /^[a-z0-9_. -]{1,128}$/i;
+const BOOLEAN_TERMS = /\b(?:OR|NOT|AND)\b/i;
+/**
+ * Record every selector problem by shape alone: a refusal never repeats a
+ * submitted org or repository, and list_scopes names the configured grants.
+ */
+function selectorIssues(problems, input, policy) {
+    input?.forEach((item, index) => {
+        const value = row(item), at = `/scopes/${index}`;
+        if ((value.org === undefined) === (value.repo === undefined))
+            return problems.add(at, 'exactly one key: {"org": "<org>"} for an org-wide grant or {"repo": "<owner>/<repo>"}', value.org === undefined ? "neither org nor repo" : "both org and repo");
+        let admitted = false;
+        try {
+            if (value.org !== undefined)
+                admitted = policy.scopes.some((scope) => scope.org === policy.owner(value.org));
+            else {
+                const parts = typeof value.repo === "string" ? value.repo.split("/") : [];
+                admitted = !!policy.scope(target(parts[0], parts.length === 2 ? parts[1] : undefined));
+            }
+        }
+        catch (error) {
+            if (!(error instanceof ConnectorCallError))
+                throw error;
+        }
+        if (!admitted)
+            problems.add(`${at}/${value.org !== undefined ? "org" : "repo"}`, value.org !== undefined
+                ? "an organization configured for org-wide access; list_scopes names them"
+                : '"<owner>/<repo>" of a configured repository or one in a configured org; list_scopes names them');
+    });
+}
 function searchPartitions(scopes) {
     const orgs = new Set(scopes.flatMap((scope) => (scope.org ? [scope.org] : [])));
     const repos = new Map();
@@ -232,18 +261,30 @@ export function restConnector(id, auth, policy) {
             throw new ConnectorCallError("invalid_args", `This cursor was issued with limit ${position.limit}; repeat limit ${position.limit} or start a new listing.`);
         return position;
     };
-    const namesCheck = (fields, names) => checked(() => {
-        const bad = fieldsProblem(fields, names, "an item");
-        if (bad)
-            throw bad;
-    });
     const scopesTool = read(connection, {
         name: "list_scopes",
         description: "List configured GitHub grants locally, or verified reachable repositories for one configured owner. Without owner this reads configuration without network access.",
-        input: Schema.Struct({ owner: Schema.optionalKey(text("Configured owner; omit for local grants.")), ...common }),
+        input: Schema.Struct({
+            owner: Schema.optionalKey(text("Configured owner; omit for local grants.")),
+            ...common,
+            fields: Schema.optionalKey(SCOPE_FIELDS.input),
+        }),
         output: Schema.Struct({ items: Schema.Array(ScopeRow), page: StandardPage }),
+        check: (args, problems) => {
+            SCOPE_FIELDS.issues(problems, args.fields);
+            if (args.owner === undefined)
+                return;
+            try {
+                policy.owner(args.owner);
+            }
+            catch (error) {
+                if (!(error instanceof ConnectorCallError))
+                    throw error;
+                // Without owner, the listing reads the configured grants locally.
+                problems.add("/owner", "a configured owner; omit owner to list the configured grants");
+            }
+        },
         run: (args) => Effect.gen(function* () {
-            yield* namesCheck(args.fields, scopeNames);
             const limit = args.limit ?? 30, normalized = { ...args, limit };
             const raw = yield* decode("list_scopes", normalized);
             const position = yield* checked(() => parse(raw, limit));
@@ -309,15 +350,18 @@ export function restConnector(id, auth, policy) {
                 .check(Schema.isMinLength(1), Schema.isMaxLength(100))
                 .annotate({ description: "Optional subset of the configured scopes." })),
             ...common,
+            fields: Schema.optionalKey(SEARCH_FIELDS.input),
         }),
         output: Schema.Struct({ items: Schema.Array(SearchRow), page: StandardPage, incomplete_results: Schema.Boolean }),
+        check: (args, problems) => {
+            // Rows wrap the vendor's record under item, so a vendor field is item.<field>.
+            SEARCH_FIELDS.issues(problems, args.fields);
+            if (!SEARCH_TERMS.test(args.terms) || BOOLEAN_TERMS.test(args.terms))
+                problems.add("/terms", "literal words of letters, digits, spaces, _ . or -, at most 128 characters, without qualifiers such as is:open or label:x and without OR, AND or NOT; kind and scopes select the rest");
+            selectorIssues(problems, args.scopes, policy);
+        },
         run: (args) => Effect.gen(function* () {
-            yield* namesCheck(args.fields, searchNames);
-            const selected = yield* checked(() => {
-                if (!/^[a-z0-9_. -]{1,128}$/i.test(args.terms) || /\b(?:OR|NOT|AND)\b/i.test(args.terms))
-                    throw new ConnectorCallError("invalid_args", "Search terms must be literal words, without qualifiers or Boolean operators.");
-                return args.scopes === undefined ? policy.scopes : selectors(args.scopes, policy);
-            });
+            const selected = yield* checked(() => args.scopes === undefined ? policy.scopes : selectors(args.scopes, policy));
             const partitions = yield* checked(() => searchPartitions(selected)), limit = args.limit ?? 30, normalized = { ...args, limit };
             const raw = yield* decode("search_scoped", normalized), at = yield* checked(() => parse(raw, limit));
             const partitionIndex = at.partition ?? 0, page = at.page ?? 1;

package/dist/providers/gmail/lib/schemas.js

@@ -1,8 +1,9 @@
 // Real Effect declarations for Gmail's curated surface. MIME interpretation stays in tools.ts.
+import { routeDescription } from "../../../agent-routes.js";
 import { Schema } from "effect";
 import { Integer, isMinChars, isMaxChars } from "../../../http/json-schema.js";
 import { StandardPage } from "../../../http/paging.js";
-import { fieldsInput } from "../../../http/fields.js";
+import { fieldsContract } from "../../../http/fields.js";
 const optional = Schema.optionalKey;
 const pattern = (regex) => Schema.makeFilter((value) => regex.test(value), { toJsonSchema: () => ({ pattern: regex.source }) });
 const string = (description, max, min = 0) => Schema.String.check(isMinChars(min), isMaxChars(max)).annotate({ description });
@@ -29,54 +30,6 @@ const compose = {
     htmlBody: optional(string("Optional HTML alternative to the plain-text body.", 500000)),
     replyToMessageId: optional(id("Message to reply to; sets its thread and guarded In-Reply-To/References.")),
 };
-const resultFields = optional(fieldsInput("Dot paths to keep in the result. It only narrows the result."));
-const itemFields = optional(fieldsInput("Dot paths to keep in each item. It only narrows the projection."));
-export const inputs = {
-    search_threads: Schema.Struct({
-        query,
-        includeSpamTrash: optional(Schema.Boolean),
-        limit,
-        cursor,
-        fields: itemFields,
-    }),
-    get_thread: Schema.Struct({
-        threadId: id("Thread id from search_threads or a message."),
-        maxBodyChars: bodyChars(3000),
-        cursor,
-        fields: resultFields,
-    }),
-    get_message: Schema.Struct({
-        messageId: id("Message id from a thread or draft."),
-        maxBodyChars: bodyChars(12000),
-        fields: resultFields,
-    }),
-    get_attachment: Schema.Struct({
-        fields: resultFields,
-        messageId: id("Message carrying the attachment."),
-        partId: optional(string("Immutable partId from the attachment listing, including an empty root id. Takes precedence over attachmentId.", 256)),
-        attachmentId: optional(string("Alternative rotating attachmentId from a fresh listing; prefer partId.", 2048, 1).check(pattern(/^[A-Za-z0-9_-]+$/))),
-        maxChars: optional(Integer.check(Schema.isBetween({ minimum: 1, maximum: 100000 })).annotate({
-            default: 12000,
-            description: "Text code points kept; ignored for binaries.",
-        })),
-        maxBytes: optional(Integer.check(Schema.isBetween({ minimum: 65536, maximum: 4194304 })).annotate({
-            default: 196608,
-            description: "Whole-result byte budget. Raise only for a direct call_tool; execute_code cannot receive large results.",
-        })),
-    }),
-    list_labels: Schema.Struct({ fields: itemFields }),
-    list_drafts: Schema.Struct({ query, limit, cursor, fields: itemFields }),
-    get_draft: Schema.Struct({
-        fields: resultFields,
-        draftId: id("Stable draft id from list_drafts or create_draft."),
-        maxBodyChars: bodyChars(12000),
-    }),
-    create_draft: Schema.Struct(compose),
-    update_draft: Schema.Struct({
-        draftId: id("Draft to replace; attachments and inline images are refused."),
-        ...compose,
-    }),
-};
 const loose = (fields) => Schema.Struct(Object.fromEntries(Object.entries(fields).map(([key, value]) => [key, optional(value)])));
 const truncated = optional(Schema.Array(Schema.String));
 const Attachment = loose({
@@ -107,7 +60,7 @@ const messageFields = {
 };
 const Message = loose(messageFields);
 const { id: _id, ...draftFields } = messageFields;
-export const rows = {
+const rows = {
     search_threads: loose({
         id: Schema.String,
         subject: Schema.String,
@@ -174,3 +127,60 @@ export const outputs = {
     create_draft: Saved,
     update_draft: Saved,
 };
+/** Each read's `fields`, anchored at its result or, for a list, each item. */
+export const fieldContracts = {
+    search_threads: fieldsContract("item", rows.search_threads),
+    list_labels: fieldsContract("item", rows.list_labels),
+    list_drafts: fieldsContract("item", rows.list_drafts),
+    get_thread: fieldsContract("result", outputs.get_thread),
+    get_message: fieldsContract("result", outputs.get_message),
+    get_draft: fieldsContract("result", outputs.get_draft),
+    get_attachment: fieldsContract("result", outputs.get_attachment),
+};
+const fields = (name) => optional(fieldContracts[name].input);
+export const inputs = {
+    search_threads: Schema.Struct({
+        query,
+        includeSpamTrash: optional(Schema.Boolean),
+        limit,
+        cursor,
+        fields: fields("search_threads"),
+    }),
+    get_thread: Schema.Struct({
+        threadId: id("Thread id from search_threads or a message."),
+        maxBodyChars: bodyChars(3000),
+        cursor,
+        fields: fields("get_thread"),
+    }),
+    get_message: Schema.Struct({
+        messageId: id("Message id from a thread or draft."),
+        maxBodyChars: bodyChars(12000),
+        fields: fields("get_message"),
+    }),
+    get_attachment: Schema.Struct({
+        fields: fields("get_attachment"),
+        messageId: id("Message carrying the attachment."),
+        partId: optional(string("Immutable partId from the attachment listing, including an empty root id. Takes precedence over attachmentId.", 256)),
+        attachmentId: optional(string("Alternative rotating attachmentId from a fresh listing; prefer partId.", 2048, 1).check(pattern(/^[A-Za-z0-9_-]+$/))),
+        maxChars: optional(Integer.check(Schema.isBetween({ minimum: 1, maximum: 100000 })).annotate({
+            default: 12000,
+            description: "Text code points kept; ignored for binaries.",
+        })),
+        maxBytes: optional(Integer.check(Schema.isBetween({ minimum: 65536, maximum: 4194304 })).annotate({
+            default: 196608,
+            description: routeDescription((phrases) => `Whole-result byte budget. Raise only ${phrases.forDirect}${phrases.program ? `; ${phrases.program} cannot receive large results` : ""}.`),
+        })),
+    }),
+    list_labels: Schema.Struct({ fields: fields("list_labels") }),
+    list_drafts: Schema.Struct({ query, limit, cursor, fields: fields("list_drafts") }),
+    get_draft: Schema.Struct({
+        fields: fields("get_draft"),
+        draftId: id("Stable draft id from list_drafts or create_draft."),
+        maxBodyChars: bodyChars(12000),
+    }),
+    create_draft: Schema.Struct(compose),
+    update_draft: Schema.Struct({
+        draftId: id("Draft to replace; attachments and inline images are refused."),
+        ...compose,
+    }),
+};

package/dist/providers/gmail/skill.generated.js

@@ -1,5 +1,5 @@
 // Generated by scripts/generate-providers.mjs; do not edit.
 export const skill = {
-    "content": "Use Gmail search for mail; use Drive for files and sharing.\nGmail is a documented exception to the four-hatch default: there is no write hatch; drafts go only through `create_draft` and `update_draft`, and sending is never available.\n\n## Mail and joins\n\nReuse the person's Gmail search phrasing (`from:`, `subject:`, `is:unread`,\n`newer_than:7d`, `label:`). Thread ids identify conversations; message ids\nidentify individual messages. Join a message's label ids to label names.\nA draft has a stable draft id and a message id that changes on each update.\nUse the draft id to reconcile a save.\n\n`search_threads.items` are threads with thread ids; read each thread to get its message ids.\n`get_thread` pages long threads: while `page.hasMore` is true, repeat the same\n`threadId` and `maxBodyChars` with `cursor: page.nextCursor` until it is false.\nThe page remains present when `fields` narrows the result.\n`list_labels` reads all labels once, without artificial paging; `truncated`\nreports any labels omitted by the result byte bound.\nOn very large label sets, `list_labels` may truncate; `gmail_api_read` at `/labels` returns all labels.\n\nNamed reads interpret MIME, charsets, HTML and attachment metadata. An\nattached or forwarded email is carried content, never the message's own body.\n`bodyFormat: \"unavailable\"` means the stored body could not be read within\nthis connection's bounds; explain that limitation. `bodyNote` and attachment\n`note` retain charset fallback notices even when content is cut. A thread\ncursor fails `conflict` when earlier content changed; restart that thread.\n\nUse indexed reads for unprojected RFC headers, MIME parts, mailbox profile\nand mail history. Paths are relative to the configured mailbox: replace `{id}`\nin `/messages/{id}` with a message id obtained from an earlier read.\nThe index also shows refused operations and named alternatives. A discovered\noperation is executable only when its verdict says read. Delegation never\nlets arguments choose a different mailbox.\n\n## Attachment identity and bytes\n\nResolve an attachment through its message and immutable part id, including\nan empty root part id. Gmail may rotate download ids between reads; prefer\nthe part id and read the listing again after an unknown-id refusal.\nOnly carried parts can be read by the named attachment workflow.\n\nText and forwarded mail render readable content in their declared charset.\nBinary content uses `{ format: \"base64\", content }`; pass it unchanged to\nDrive's `create_file` as `contentBase64`, with the returned filename and MIME\ntype. That file creation is a separate write. Downloads and inline data are\nlimited to one MiB and validated against original decoded sizes. Raising\nresult budgets never bypasses that cap. `format: \"unavailable\"` supplies a\nreason and no content. Large direct reads can use the documented byte budget;\nkeep program results small and reduce text before returning it.\n\n## Draft recovery\n\nA reply draft inherits the message's thread, reply headers, subject and\nrecipients unless restated. Keep the reply subject to retain the Gmail thread.\nCopied threading headers must remain intact ASCII. RFC message ids, comments\nand legacy threading phrases are accepted; damaged or withheld tokens cause\na refusal before any draft write.\n\nUpdating a draft replaces its full body. The guarded workflow preserves\nsender, recipients, Reply-To, subject and threading headers, and refuses\nattachments or inline images because replacement would discard them. Edit\nsuch a draft in Gmail or save a separate new draft. After an uncertain save,\nread the stable draft id and inspect its body before deciding whether another\nwrite is needed. A saved draft remains in Gmail for the person to review.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `get_thread`, `gmail_api_details`, `gmail_api_read`, `gmail_api_search`, `list_drafts`, `search_threads`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. Keep the original method, path, filters, page size, fields and headers. Paged `list_*` and `search_*` reads take `limit` (default 10, at most 25). The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `gmail_api_search` finds this API's operations and reads no account data, `gmail_api_details` shows one operation's contract, and `gmail_api_read` calls a reviewed read. An operation without a reviewed verdict is refused. 68 operations are refused by design; use `gmail_api_details` with the method and path to inspect the original operation summary and its separate refusal. Use details for refused methods outside the read/write call schemas; those methods remain unavailable.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. `not_found` means the record does not exist; this API tells absence from a permission gap. `conflict` means: A thread changed before its content cursor.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
+    "content": "Use Gmail search for mail; use Drive for files and sharing.\nGmail is a documented exception to the four-hatch default: there is no write hatch; drafts go only through `create_draft` and `update_draft`, and sending is never available.\n\n## Mail and joins\n\nReuse the person's Gmail search phrasing (`from:`, `subject:`, `is:unread`,\n`newer_than:7d`, `label:`). Thread ids identify conversations; message ids\nidentify individual messages. Join a message's label ids to label names.\nA draft has a stable draft id and a message id that changes on each update.\nUse the draft id to reconcile a save.\n\n`search_threads.items` are threads with thread ids; read each thread to get its message ids.\n`get_thread` pages long threads: while `page.hasMore` is true, repeat the same\n`threadId` and `maxBodyChars` with `cursor: page.nextCursor` until it is false.\nThe page remains present when `fields` narrows the result.\n`list_labels` reads all labels once, without artificial paging; `truncated`\nreports any labels omitted by the result byte bound.\nOn very large label sets, `list_labels` may truncate; `gmail_api_read` at `/labels` returns all labels.\n\nNamed reads interpret MIME, charsets, HTML and attachment metadata. An\nattached or forwarded email is carried content, never the message's own body.\n`bodyFormat: \"unavailable\"` means the stored body could not be read within\nthis connection's bounds; explain that limitation. `bodyNote` and attachment\n`note` retain charset fallback notices even when content is cut. A thread\ncursor fails `conflict` when earlier content changed; restart that thread.\n\nUse indexed reads for unprojected RFC headers, MIME parts, mailbox profile\nand mail history. Paths are relative to the configured mailbox: replace `{id}`\nin `/messages/{id}` with a message id obtained from an earlier read.\nThe index also shows refused operations and named alternatives. A discovered\noperation is executable only when its verdict says read. Delegation never\nlets arguments choose a different mailbox.\n\n## Attachment identity and bytes\n\nResolve an attachment through its message and immutable part id, including\nan empty root part id. Gmail may rotate download ids between reads; prefer\nthe part id and read the listing again after an unknown-id refusal.\nOnly carried parts can be read by the named attachment workflow.\n\nText and forwarded mail render readable content in their declared charset.\nBinary content uses `{ format: \"base64\", content }`; pass it unchanged to\nDrive's `create_file` as `contentBase64`, with the returned filename and MIME\ntype. That file creation is a separate write. Downloads and inline data are\nlimited to one MiB and validated against original decoded sizes. Raising\nresult budgets never bypasses that cap. `format: \"unavailable\"` supplies a\nreason and no content. Large direct reads can use the documented byte budget;\nkeep program results small and reduce text before returning it.\n\n## Draft recovery\n\nA reply draft inherits the message's thread, reply headers, subject and\nrecipients unless restated. Keep the reply subject to retain the Gmail thread.\nCopied threading headers must remain intact ASCII. RFC message ids, comments\nand legacy threading phrases are accepted; damaged or withheld tokens cause\na refusal before any draft write.\n\nUpdating a draft replaces its full body. The guarded workflow preserves\nsender, recipients, Reply-To, subject and threading headers, and refuses\nattachments or inline images because replacement would discard them. Edit\nsuch a draft in Gmail or save a separate new draft. After an uncertain save,\nread the stable draft id and inspect its body before deciding whether another\nwrite is needed. A saved draft remains in Gmail for the person to review.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `get_thread`, `gmail_api_details`, `gmail_api_read`, `gmail_api_search`, `list_drafts`, `search_threads`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. Keep the original method, path, filters, page size, fields and headers. Paged `list_*` and `search_*` reads take `limit` (default 10, at most 25). The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `gmail_api_search` finds this API's operations and reads no account data, `gmail_api_details` shows one operation's contract, and `gmail_api_read` calls a reviewed read. Details' `response.fields` promises selection only; `withheld` hints are incomplete, and absence never means safe or readable. An operation without a reviewed verdict is refused. 68 operations are refused by design; use `gmail_api_details` with the method and path to see each summary and refusal, even for methods outside the read/write schemas.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. `not_found` means the record does not exist; this API tells absence from a permission gap. `conflict` means: A thread changed before its content cursor.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
     "instructionsHeading": "Connection instructions"
 };

package/dist/providers/gmail/tools.js

@@ -1,3 +1,6 @@
+import { routePhrases } from "../../agent-routes.js";
+import { asRecord, asArray, compact } from "../_shared/json.js";
+import { decodeBase64url } from "../../bytes.js";
 // Curated Gmail workflows over real Effect declarations and the standard kit boundary.
 import { Effect, Option } from "effect";
 import { defined } from "../../connectors/api-connector.js";
@@ -9,10 +12,10 @@ import { encodeForAgent, redactBeforeCut, redactSentSecrets } from "../../sent-s
 import { errors, gmailBodyProvenance } from "./api.js";
 import { read, write } from "../../http/tools.js";
 import { boundCursor } from "../../http/paging.js";
-import { fieldsProblem, selectFields } from "../../http/fields.js";
+import { selectFields } from "../../http/fields.js";
 import { Operation } from "../../runtime/call.js";
 import { index } from "./lib/index.js";
-import { inputs, outputs, rows } from "./lib/schemas.js";
+import { fieldContracts, inputs, outputs } from "./lib/schemas.js";
 import { threadingIds } from "./lib/threading.js";
 /**
  * Each summary row costs one metadata read, so a page stays small. Gmail's
@@ -31,15 +34,6 @@ const MAX_RECIPIENTS = 100;
 const MAX_ATTACHMENT_BYTES = 1024 * 1024;
 /** Same direct-call ceiling and minimum result budget as Drive content reads. */
 const MAX_ATTACHMENT_RESULT_BYTES = 4 * 1024 * 1024;
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function text(value) {
     return typeof value === "string" && value !== "" ? value : undefined;
 }
@@ -83,15 +77,6 @@ function htmlToText(ctx, html) {
         .replace(/\n{3,}/g, "\n\n")
         .trim();
 }
-function base64UrlBytes(data) {
-    const base64 = data.replace(/-/g, "+").replace(/_/g, "/");
-    const binary = atob(base64 + "=".repeat((4 - (base64.length % 4)) % 4));
-    const bytes = new Uint8Array(binary.length);
-    for (let index = 0; index < binary.length; index += 1) {
-        bytes[index] = binary.charCodeAt(index);
-    }
-    return bytes;
-}
 function charsetOf(ctx, part) {
     const type = header(part, "Content-Type") ?? "";
     if (redactBeforeCut(ctx, type) !== type)
@@ -113,7 +98,7 @@ function charsetOf(ctx, part) {
 function decodeIn(ctx, part, data) {
     let bytes;
     try {
-        bytes = base64UrlBytes(data);
+        bytes = decodeBase64url(data, true);
     }
     catch {
         return { text: "" };
@@ -346,7 +331,7 @@ function attachmentBytes(client, ctx, messageId, part) {
             validateSize(provenance.originalLength);
         let bytes;
         try {
-            bytes = base64UrlBytes(data);
+            bytes = decodeBase64url(data, true);
         }
         catch {
             throw new ConnectorCallError("connector_call_failed", "Gmail returned invalid base64url attachment data.", {
@@ -408,7 +393,7 @@ function readAttachment(client, ctx, args) {
         const fitting = Math.floor(Math.max(0, maxBytes - jsonBytes(envelope)) / 4) * 3;
         const limit = isText ? MAX_ATTACHMENT_BYTES : Math.min(MAX_ATTACHMENT_BYTES, fitting);
         const tooLarge = () => unavailable(limit < MAX_ATTACHMENT_BYTES
-            ? `This binary attachment does not fit maxBytes (${maxBytes}), which holds ${limit} attachment bytes. Raise maxBytes, up to ${MAX_ATTACHMENT_RESULT_BYTES} for a direct call_tool only, to read up to ${MAX_ATTACHMENT_BYTES} bytes. No content is returned.`
+            ? `This binary attachment does not fit maxBytes (${maxBytes}), which holds ${limit} attachment bytes. Raise maxBytes, up to ${MAX_ATTACHMENT_RESULT_BYTES} ${routePhrases(ctx).directOnly}, to read up to ${MAX_ATTACHMENT_BYTES} bytes. No content is returned.`
             : `This attachment exceeds the ${MAX_ATTACHMENT_BYTES}-byte download and inline cap. No content is returned; open it in Gmail.`);
         // Declared size is checked before downloading, but actual bytes are checked
         // too: inconsistent metadata must never bypass the cap or whole-result budget.
@@ -459,7 +444,7 @@ function readAttachment(client, ctx, args) {
         if (decoded.length > maxChars || jsonBytes(decoded) > maxBytes)
             decoded = redactBeforeCut(ctx, decoded);
         const characters = Array.from(decoded);
-        const marker = (dropped) => `\n[… ${dropped} more characters truncated; raise maxChars or maxBytes for a direct call_tool, or open it in Gmail]`;
+        const marker = (dropped) => `\n[… ${dropped} more characters truncated; raise maxChars or maxBytes ${routePhrases(ctx).forDirect}, or open it in Gmail]`;
         const byChars = characters.length > maxChars
             ? characters.slice(0, maxChars).join("") + marker(characters.length - maxChars)
             : decoded;
@@ -605,7 +590,7 @@ function openCursor(cursor, tool, call) {
         return undefined;
     let claims;
     try {
-        const parsed = JSON.parse(new TextDecoder().decode(base64UrlBytes(String(cursor))));
+        const parsed = JSON.parse(new TextDecoder().decode(decodeBase64url(String(cursor), true)));
         if (parsed && typeof parsed === "object" && parsed.v === 1)
             claims = parsed;
     }
@@ -1406,7 +1391,8 @@ export function gmailTools({ connection }) {
                     return yield* Effect.die(new Error("Gmail needs its call context."));
                 const ctx = active.value;
                 const { fields, ...args } = supplied;
-                const problem = fieldsProblem(fields, new Set(Object.keys(isList ? rows[name].fields : outputs[name].fields)), isList ? "an item" : "the result");
+                const contract = fieldContracts[name];
+                const problem = contract?.problem(fields);
                 if (problem)
                     return yield* Effect.fail(new Refusal({ error: problem }));
                 if (args["cursor"] !== undefined)

package/dist/providers/granola/index.js

@@ -9,6 +9,8 @@ export const granola = defineApiProvider({
     readme: "Granola",
     options: optionsOf()(keys("purpose", "title", "instructions", "maxResultBytes", "readOnly")),
     skill,
+    // The guide and vendor call meeting records notes.
+    searchSynonyms: [["meeting", "note"]],
     bundle: {
         baselineGzip: 360040,
         note: "./providers/granola standalone measured 360,040 B gzip with Homebrew Node 22 on 2026-10-27. This includes the shared Effect provider kit, paid once per deployment; provider entries are reported, not capped, and standalone sizes are not additive.",

package/dist/providers/granola/skill.generated.js

@@ -1,5 +1,5 @@
 // Generated by scripts/generate-providers.mjs; do not edit.
 export const skill = {
-    "content": "## Accessible meeting records\n\nWorkspace keys reach public workspace notes and spaces explicitly enabled for\nGranola API access. Folder permissions inherit their space's setting. They do\nnot grant unrelated private notes. Only notes with a generated AI summary and\ntranscript appear; a missing result does not establish that a meeting never\nhappened. The owner's private handwritten notes are null for workspace keys.\n\nDiscover actual note, folder and space IDs. API IDs use not_, fol_ and spa_\nprefixes; a web-link UUID, title or human name is not an API ID. Notes can\nbelong to several folders and spaces; folder parent_folder_id describes the\nhierarchy and space_id joins a folder to its space. Folder filtering includes\ndescendant folders. Null space_id can also mean an inaccessible space.\n\nOperation search searches the API contract, not meeting content. The REST API\noffers date, folder and space filters, with no natural-language meeting search.\nFilter accessible notes and inspect their contents to answer a topic question;\ndisclose the period and scope examined.\n\n## Transcript interpretation\n\nInline transcripts are optional. If including one fails with HTTP 413\n(TRANSCRIPT_TOO_LARGE), read note details without include and retrieve the\nseparate transcript endpoint through its complete continuation sequence. No\npartial transcript proves a complete quotation or count. An empty page can\nstill have a continuation; follow the returned paging state.\n\nSpeaker source describes the audio input, not a person's identity. macOS may\ndistinguish microphone from speaker audio. iOS currently uses microphone and\nmay supply anonymous diarization labels; do not invent attendee attribution.\nPreserve start/end timestamps when quoting. Summaries are AI-generated, so\nconfirm important wording against the transcript. Return only the relevant\npassages and identifying meeting metadata.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `granola_api_details`, `granola_api_read`, `granola_api_search`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. Keep the original method, path, filters, page size, fields and headers. The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `granola_api_search` finds this API's operations and reads no account data, `granola_api_details` shows one operation's contract, and `granola_api_read` calls a reviewed read. An operation without a reviewed verdict is refused. 13 operations are refused by design; use `granola_api_details` with the method and path to inspect the original operation summary and its separate refusal. Use details for refused methods outside the read/write call schemas; those methods remain unavailable.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. An unknown id, or one these credentials cannot reach, fails as `connector_call_failed`; this API does not tell the two apart. It documents no conflict.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
+    "content": "## Accessible meeting records\n\nWorkspace keys reach public workspace notes and spaces explicitly enabled for\nGranola API access. Folder permissions inherit their space's setting. They do\nnot grant unrelated private notes. Only notes with a generated AI summary and\ntranscript appear; a missing result does not establish that a meeting never\nhappened. The owner's private handwritten notes are null for workspace keys.\n\nDiscover actual note, folder and space IDs. API IDs use not_, fol_ and spa_\nprefixes; a web-link UUID, title or human name is not an API ID. Notes can\nbelong to several folders and spaces; folder parent_folder_id describes the\nhierarchy and space_id joins a folder to its space. Folder filtering includes\ndescendant folders. Null space_id can also mean an inaccessible space.\n\nOperation search searches the API contract, not meeting content. The REST API\noffers date, folder and space filters, with no natural-language meeting search.\nFilter accessible notes and inspect their contents to answer a topic question;\ndisclose the period and scope examined.\n\n## Transcript interpretation\n\nInline transcripts are optional. If including one fails with HTTP 413\n(TRANSCRIPT_TOO_LARGE), read note details without include and retrieve the\nseparate transcript endpoint through its complete continuation sequence. No\npartial transcript proves a complete quotation or count. An empty page can\nstill have a continuation; follow the returned paging state.\n\nSpeaker source describes the audio input, not a person's identity. macOS may\ndistinguish microphone from speaker audio. iOS currently uses microphone and\nmay supply anonymous diarization labels; do not invent attendee attribution.\nPreserve start/end timestamps when quoting. Summaries are AI-generated, so\nconfirm important wording against the transcript. Return only the relevant\npassages and identifying meeting metadata.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `granola_api_details`, `granola_api_read`, `granola_api_search`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. Keep the original method, path, filters, page size, fields and headers. The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `granola_api_search` finds this API's operations and reads no account data, `granola_api_details` shows one operation's contract, and `granola_api_read` calls a reviewed read. Details' `response.fields` promises selection only; `withheld` hints are incomplete, and absence never means safe or readable. An operation without a reviewed verdict is refused. 13 operations are refused by design; use `granola_api_details` with the method and path to see each summary and refusal, even for methods outside the read/write schemas.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. An unknown id, or one these credentials cannot reach, fails as `connector_call_failed`; this API does not tell the two apart. It documents no conflict.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
     "instructionsHeading": "Workspace instructions"
 };

package/dist/providers/overflow/api.js

@@ -1,3 +1,6 @@
+import { Routes, routePhrases } from "../../agent-routes.js";
+import { pathWithholds } from "../_shared/rest/value-safety.js";
+import { asRecord } from "../_shared/json.js";
 // Overflow v3: reviewed vendor declarations, derived operation index and paging contracts.
 // Public input: staging OpenAPI 3.0; exact retrieval and known upstream drift are in evidence/review.md.
 import { Effect, Schema } from "effect";
@@ -900,11 +903,12 @@ function detailFor(payload, status) {
 /** Candidate keys are resolved afresh for each operation, never cached in a connection. */
 export const authenticate = Effect.gen(function* () {
     const values = yield* (yield* Credentials).values.pipe(Effect.mapError((error) => new Refusal({ error })));
+    const routes = yield* Routes;
     const clientId = values?.["clientId"]?.trim();
     const apiKey = values?.["apiKey"]?.trim();
     if (!clientId || !apiKey)
         return yield* Effect.fail(new Refusal({
-            error: new ConnectorCallError("auth_required", "No Overflow client id and API key are configured for this connector. Call authorize_connector for recovery options; an operator adds both fields in this connection in the operator UI."),
+            error: new ConnectorCallError("auth_required", `No Overflow client id and API key are configured for this connector. ${routePhrases(routes).authorizeFor("recovery options")}; an operator adds both fields in this connection in the operator UI.`),
         }));
     return { "x-client-id": clientId, "x-api-key": apiKey };
 });
@@ -986,6 +990,9 @@ export const safety = {
     reviewed: {
         resolve: (method, path) => ({ method, template: OVERFLOW_INDEX.resolve(method, path).op.path }),
         redact: (body, operation) => (operation.template.startsWith("/webhooks") ? withoutWebhookSecrets(body) : body),
+        withholds: (operation) => operation.template.startsWith("/webhooks")
+            ? pathWithholds({ names: (name) => WEBHOOK_SECRETS.test(name) })
+            : () => false,
         withholdsErrors: (operation) => operation.template.startsWith("/webhooks"),
     },
 };
@@ -1003,6 +1010,3 @@ export const probe = {
         return `Overflow ${options.environment} accepted the client id and API key.${where}`;
     },
 };
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}

package/dist/providers/overflow/index.js

@@ -1,3 +1,4 @@
+import { readOnlyNotice } from "../_shared/guide.js";
 import { skill } from "./skill.generated.js";
 import { keys, optionsOf } from "../../config-schema.js";
 import { PROVIDER_COMMON } from "../../connectors/option-shapes.js";
@@ -81,7 +82,7 @@ export const overflow = defineApiProvider({
                 : "Overflow staging: a sandbox with separate credentials and data.",
             `Nonprofit purpose: ${options.purpose}`,
             "Named reads minimize contact data; get_donor is the full-contact lookup. Webhook signing secrets are always removed.",
-            ...(options.readOnly ? ["This connection is read-only: every write is refused."] : []),
+            ...readOnlyNotice(options.readOnly),
             ...(options.defaultPageSize !== undefined
                 ? [`Paged lists return ${options.defaultPageSize} items by default on this connection.`]
                 : []),

package/dist/providers/overflow/skill.generated.js

@@ -1,5 +1,5 @@
 // Generated by scripts/generate-providers.mjs; do not edit.
 export const skill = {
-    "content": "## Giving records and joins\n\nDonor ids join profiles, contributions, subscriptions and payment methods.\nCampaigns and subcampaigns allocate gifts; locations identify campuses.\nResolve names to ids before editing a donor or moving money. There is no funds\nendpoint: fund and sub-fund identifiers occur only in payment authorization.\nA donor profile owned by a donor account cannot be edited through this API;\nwhen reads work but its edit is denied, changing the credential does not fix it.\n\nTap groups contain devices and point to destinations. A tap is engagement,\nnot a gift; use contributions to establish giving.\n\n## Money and final status\n\nRead the unit per field. Values named `InCents` are cents, including deposits,\nrefunds, chargebacks and payment authorization. Subscription `amount` is\nin dollars. Contribution and saved-method charge `amount` have no stated unit\nin the public schema: establish it from a known gift before reporting a sum\nor authorizing a charge. Do not assume every numeric amount uses the same unit.\n\nA gift is final at `PAID_OUT` for `CASH`, `CONFIRMED` for manual cash or crypto,\n`CONTRIBUTION_RECEIVED` or `BILLED` for stock, and `CONTRIBUTION_RECEIVED` for\nDAF. A status bucket is coarser than those asset-specific states. Polling by\nupdated date finds later state changes; initiated date identifies when a donor gave.\n\n## Reconcile a deposit\n\nFind the bank payout, inspect its summary totals, then its line items.\nEach line item's `referenceId` names a contribution, refund or chargeback\naccording to its type; contributions can also carry a `depositId`.\nKeep gross, fee and net cent amounts separate and convert only for presentation.\nAn eligible cash gift under $1,000 is refunded with `POST /contributions/{contributionId}/initiate-refund`, which takes no body; its string acknowledgement means the refund started.\nA refund request starts processing; verify the gift or refund before claiming\nthat funds have reached the donor. Canceling a recurring gift stops future\npayments and does not refund earlier gifts.\n\n## Reduce donor and delivery data\n\nGiving history and donor contact details are personal data. Aggregate or join\ninside code and return names, email, phone and address only when the task needs\nthem. Lean contribution rows carry donor identity; the full donor lookup\ncarries contact details. Webhook delivery logs can include delivered donor\npayloads and the receiving server's response: select the status, response code\nand error needed for diagnosis instead of returning those payloads wholesale.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `list_campaigns`, `list_chargebacks`, `list_contributions`, `list_deposits`, `list_donors`, `list_locations`, `list_payment_methods`, `list_refunds`, `list_subscriptions`, `overflow_api_details`, `overflow_api_search`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. For `overflow_api_read`, put it in `query[page.param]` or `body[page.param]`, as `page.in` specifies. Keep the original method, path, filters, page size, fields and headers. Paged `list_*` and `search_*` reads take `limit` (default 25, at most 100). The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `overflow_api_search` finds this API's operations and reads no account data, `overflow_api_details` shows one operation's contract, and `overflow_api_read` calls a reviewed read. `overflow_api_write` calls a reviewed write; the host may ask the user to confirm it. An operation without a reviewed verdict is refused.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. `not_found` means the record does not exist; this API tells absence from a permission gap. It documents no conflict.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
+    "content": "## Giving records and joins\n\nDonor ids join profiles, contributions, subscriptions and payment methods.\nCampaigns and subcampaigns allocate gifts; locations identify campuses.\nResolve names to ids before editing a donor or moving money. There is no funds\nendpoint: fund and sub-fund identifiers occur only in payment authorization.\nA donor profile owned by a donor account cannot be edited through this API;\nwhen reads work but its edit is denied, changing the credential does not fix it.\n\nTap groups contain devices and point to destinations. A tap is engagement,\nnot a gift; use contributions to establish giving.\n\n## Money and final status\n\nRead the unit per field. Values named `InCents` are cents, including deposits,\nrefunds, chargebacks and payment authorization. Subscription `amount` is\nin dollars. Contribution and saved-method charge `amount` have no stated unit\nin the public schema: establish it from a known gift before reporting a sum\nor authorizing a charge. Do not assume every numeric amount uses the same unit.\n\nA gift is final at `PAID_OUT` for `CASH`, `CONFIRMED` for manual cash or crypto,\n`CONTRIBUTION_RECEIVED` or `BILLED` for stock, and `CONTRIBUTION_RECEIVED` for\nDAF. A status bucket is coarser than those asset-specific states. Polling by\nupdated date finds later state changes; initiated date identifies when a donor gave.\n\n## Reconcile a deposit\n\nFind the bank payout, inspect its summary totals, then its line items.\nEach line item's `referenceId` names a contribution, refund or chargeback\naccording to its type; contributions can also carry a `depositId`.\nKeep gross, fee and net cent amounts separate and convert only for presentation.\nAn eligible cash gift under $1,000 is refunded with `POST /contributions/{contributionId}/initiate-refund`, which takes no body; its string acknowledgement means the refund started.\nA refund request starts processing; verify the gift or refund before claiming\nthat funds have reached the donor. Canceling a recurring gift stops future\npayments and does not refund earlier gifts.\n\n## Reduce donor and delivery data\n\nGiving history and donor contact details are personal data. Aggregate or join\ninside code and return names, email, phone and address only when the task needs\nthem. Lean contribution rows carry donor identity; the full donor lookup\ncarries contact details. Webhook delivery logs can include delivered donor\npayloads and the receiving server's response: select the status, response code\nand error needed for diagnosis instead of returning those payloads wholesale.\n\n## Conventions\n\n- **Paging:** while `page.hasMore` is true, continue with `page.nextCursor` unchanged. For `list_campaigns`, `list_chargebacks`, `list_contributions`, `list_deposits`, `list_donors`, `list_locations`, `list_payment_methods`, `list_refunds`, `list_subscriptions`, `overflow_api_details`, `overflow_api_search`, pass it as the top-level `cursor`; omit raw paging anchors on continuations. For `overflow_api_read`, put it in `query[page.param]` or `body[page.param]`, as `page.in` specifies. Keep the original method, path, filters, page size, fields and headers. Paged `list_*` and `search_*` reads take `limit` (default 25, at most 100). The last page has no `nextCursor`. If `page.hasMore` is true without a cursor, the data is incomplete and continuation was withheld. When approaching execute_code's per-program call limit, return page.nextCursor before the call that would exceed it and continue in the next program; don't restart.\n- **Results:** `fields` narrows a read's result to the dot paths you name. `truncated` lists the dot paths a result cut for size; the ids that fetch what was cut stay in the result.\n- **Hatch:** `overflow_api_search` finds this API's operations and reads no account data, `overflow_api_details` shows one operation's contract, and `overflow_api_read` calls a reviewed read. Details' `response.fields` promises selection only; `withheld` hints are incomplete, and absence never means safe or readable. `overflow_api_write` calls a reviewed write; the host may ask the user to confirm it. An operation without a reviewed verdict is refused.\n- **Writes:** a write is sent once and never retried. When its outcome is unknown, read the target before repeating it. Writes take no idempotency key.\n- **Errors:** codes come from the vendor's statuses and error facts, never its prose. `not_found` means the record does not exist; this API tells absence from a permission gap. It documents no conflict.\n- **Withheld values:** a value withheld for safety reads `\"[redacted]\"`. Writes refuse whole marker values and withheld links; longer prose may mention the marker. Paths and queries refuse any containment.",
     "instructionsHeading": "Nonprofit instructions"
 };

package/dist/providers/overflow/tools.js

@@ -1,3 +1,5 @@
+import { compact as compactDefined } from "../_shared/json.js";
+import { asRecord, asArray } from "../_shared/json.js";
 // Overflow's curated kit tools: standard pages, safe projections and narrowing fields.
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
@@ -5,14 +7,8 @@ import { Refusal } from "../../http/errors.js";
 import { Integer, isMinChars } from "../../http/json-schema.js";
 import { read, list } from "../../http/tools.js";
 import * as api from "./api.js";
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
 function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+    return compactDefined(value);
 }
 /** A `{ id, name }` reference, or undefined when Overflow sent none. */
 function reference(value) {

package/dist/providers/planning-center/api.js

@@ -1,3 +1,5 @@
+import { Routes, routePhrases } from "../../agent-routes.js";
+import { asArray, asRecord } from "../_shared/json.js";
 import { Effect, Schema } from "effect";
 import { ConnectorCallError } from "../../errors.js";
 import { Refusal } from "../../http/errors.js";
@@ -11,7 +13,7 @@ import { PlanningCenterIndex } from "./lib/discovery.js";
 import { PCO_REFUSALS } from "./lib/verdicts.js";
 import { TABLE } from "./safety.js";
 import { excludedApps, series } from "./lib/guide.js";
-import { asRecord, asArray, resources, attribute, pageOf } from "./lib/json-api.js";
+import { resources, attribute, pageOf } from "./lib/json-api.js";
 import { PLANNING_CENTER_API_BASE_URL, PLANNING_CENTER_APPS, PLANNING_CENTER_API_VERSIONS, DEFAULT_USER_AGENT, } from "./lib/constants.js";
 export { PLANNING_CENTER_API_BASE_URL, PLANNING_CENTER_APPS, PLANNING_CENTER_API_VERSIONS, MAX_PAGE_SIZE, DEFAULT_PAGE_SIZE, PLANNING_CENTER_MAX_RESPONSE_BYTES, PLANNING_CENTER_ADMISSION, } from "./lib/constants.js";
 export const CREDENTIAL = {
@@ -37,10 +39,11 @@ export const CREDENTIAL = {
 const fail = (code, message, options) => Effect.fail(new Refusal({ error: new ConnectorCallError(code, message, options) }));
 export const authenticate = Effect.gen(function* () {
     const values = yield* (yield* Credentials).values.pipe(Effect.mapError((error) => new Refusal({ error })));
+    const routes = yield* Routes;
     const applicationId = values?.["applicationId"]?.trim();
     const secret = values?.["secret"]?.trim();
     if (!applicationId || !secret) {
-        return yield* fail("auth_required", "No Planning Center personal access token is configured for this connector; it needs both the Application ID and the Secret. Call authorize_connector for recovery options. When available, an operator can add the token in this connection in the operator UI.");
+        return yield* fail("auth_required", `No Planning Center personal access token is configured for this connector; it needs both the Application ID and the Secret. ${routePhrases(routes).authorizeFor("recovery options")}. When available, an operator can add the token in this connection in the operator UI.`);
     }
     // HTTP Basic is `id:secret` in Latin-1 base64. A colon in the id, or any
     // whitespace or non-ASCII character, is a pasting mistake no real token

package/dist/providers/planning-center/lib/constants.d.ts

@@ -55,4 +55,4 @@ export declare const PLANNING_CENTER_MAX_RESPONSE_BYTES: number;
  */
 export declare const PLANNING_CENTER_ADMISSION: ConnectorCallAdmissionPolicy;
 /** Planning Center refuses a request without a descriptive one (HTTP 403). */
-export declare const DEFAULT_USER_AGENT = "connecta/0.37.1 (+https://github.com/zackbart/connecta)";
+export declare const DEFAULT_USER_AGENT = "connecta/0.39.0 (+https://github.com/zackbart/connecta)";

package/dist/providers/planning-center/lib/json-api.js

@@ -1,13 +1,5 @@
+import { asRecord, asArray, compact } from "../../_shared/json.js";
 import { ConnectorCallError } from "../../../errors.js";
-export function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-export function asArray(value) {
-    return Array.isArray(value) ? value : [];
-}
-export function compact(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
-}
 function isResource(value) {
     const record = asRecord(value);
     return typeof record["id"] === "string" && typeof record["type"] === "string";