@zackbart/connecta 0.40.0 → 0.41.0

package/documentation/operator-ui.md

@@ -287,7 +287,7 @@ stack each row into a card.
 
 ### Activity
 
-Counts for the loaded history (calls, failed, tools, catalog changes), also
+Counts for the loaded history (calls, failed, tools, catalog changes, and opt-in operations), also
 in its accessible summary, and a strip of calls over time with failures in
 red when the calls span more than a minute.
 
@@ -304,7 +304,9 @@ red when the calls span more than a minute.
   row lists what was recorded: result, how it ran, classification, exact
   duration and size, caller, stable caller id, request id, client, and
   connecta version. Unrecorded fields are left out. Catalog changes are rows
-  with added, removed and changed counts.
+  with added, removed and changed counts. Opt-in operation rows use fixed names
+  (Search, Describe, Result page, Skill read, Program) and an Operation detail;
+  they do not count as calls, failed calls, friction, tools or last calls.
 - **Empty.** "No calls yet" with Refresh, or "No matches" with Clear filters.
 
 ### Navigation, gates and recovery
@@ -767,6 +769,53 @@ names, descriptions or schemas enter the event. Private catalog changes require
 a matching principal owner even when the connector uses shared auth. Empty credential declarations
 report `credential_required` before running a connector status or catalog probe.
 
+### Opt in to operation history
+
+Set `operations: true` on the existing activity module, for example
+`activity: activityHistory({ store, operations: true })`, where `store` is the
+configured platform activity store. The default is off: existing deployments
+emit no operation rows. Each admitted search, describe, result page, skill read
+and whole program adds one event through the existing detached sink. Workers
+attach its promise to `waitUntil`; Node does not await it in the response path.
+This adds storage writes and retention cleanup work for every operation.
+
+Rows use `kind: "operation"`, `source: "execute_code"`, and a fixed operation
+name. They contain duration, outcome, a checked error code, returned page
+byte count when already measured, and host-call counts for a program. No query, tool
+address supplied by a caller, skill name, result ID, code, arguments, result
+contents or raw error text enters the row. Custom history readers must exclude
+operation rows from call/friction counts. The public kind union adds
+`"operation"`; exhaustive consumers may need a new case even when their
+runtime configuration leaves recording off.
+
+Operation disclosure is deliberately conservative:
+
+- The existing maintainer permission and optional `readGate` still apply.
+- Scope means every connector visible to the admitted endpoint, rather than
+  just the connectors named by a particular argument. A single-connector scope
+  uses that connector ID; other scopes use a reserved operation ID internally.
+- Every connector in that scope must still be visible through a whole-connector
+  grant to both the reader and the recorded pool. Address-only grants do not
+  disclose operations. Removed pools/connectors or invalid scope metadata
+  withhold the entire row.
+- All human operations are owner-only. Scopes containing personal auth,
+  caller-bound auth or a dynamically discovered catalog are also owner-only,
+  since static configuration cannot prove the catalog public. Owner-only rows
+  require the recorded principal basis and an exact match to the reader's
+  admitted principal ID and namespace. An agent without a provable admitted
+  human owner has those rows withheld.
+- Shared machine operations over statically declared catalogs are visible to
+  maintainers only when the complete scope passes those checks. This policy
+  can withhold single-connector work performed on a mixed endpoint.
+
+Existing D1 and SQLite activity tables need no new columns. The existing
+kind-tagged metadata text slot stores the checked operation scope and counts;
+legacy tool and catalog-change rows keep their format. The timeline shows
+operations separately and excludes them from call totals, friction, tool
+counts, call strips and last-call overlays.
+
+### Activity actor labels
+
 Activity label resolvers receive an optional `AbortSignal`. Pass it to user-directory
 fetches and stop work when it aborts: the reader has left or the label lookup
 budget has expired. Clerk label lookups follow the same lifetime and discard

package/documentation/providers.md

@@ -275,12 +275,12 @@ discovery for your deployment's catalog.
 </details>
 
 <details>
-<summary>QuickBooks Online (10 tools)</summary>
+<summary>QuickBooks Online (11 tools)</summary>
 
 [Setup](#quickbooks-online). **API source:** Hand-authored endpoint contracts. No vendored OpenAPI document.
 
 - **Named reads:** `get_company_info`, `get_record`, `get_report`, `search_records`.
-- **Named writes:** `create_customer`, `create_invoice`, `update_customer`.
+- **Named writes:** `create_customer`, `create_invoice`, `update_customer`, `update_unsent_invoice`.
 - **API reads:** `quickbooks_api_details`, `quickbooks_api_read`, `quickbooks_api_search`.
 - **API writes:** None.
 
@@ -1520,18 +1520,20 @@ Creation fixes EmailStatus to `NotSet` and IPN/online/card/ACH/PayPal/Affirm
 payment flags to false, accepts no email fields, and never calls a send endpoint.
 Intuit's documented autosend path requires company opt-in, enabled online
 payments and `NeedToSend` with BillEmail; the fixed creation body withholds
-those request conditions. Invoice updates remain unavailable because retaining
-an existing send-ready state is not established safe, and resetting that state
-would change existing payment settings. Deletes, voids, delivery, payment
-execution, batch and other accounting writes remain unavailable. The API hatch
-refuses POSTs even when named writes are enabled.
-
-Sparse field preservation, a current SyncToken and requestid do not establish
-that an invoice update cannot send email. For example, changing only DueDate
-on an invoice with NeedToSend and enabled card/ACH payments retains those
-settings; omitting email fields does not disable them. Do not reset delivery or
-payment settings to work around the unavailable update, or replace the invoice
-with a new one. No unsent-only update tool is currently exposed either.
+those request conditions.
+
+`update_unsent_invoice` changes only DocNumber. Supply caller-observed Id and
+SyncToken and an explicit docNumber. It reads the US company and invoice,
+requires USD, explicit NotSet, no DeliveryInfo and every IPN/online/card/ACH/
+PayPal/Affirm payment flag explicitly false. Unknown state, send-ready or
+delivered state and stale versions fail before POST; no newer version is
+substituted. The sparse body preserves omitted delivery/payment fields.
+No date edits are exposed. Applying autosend prerequisites to updates is an
+inference, not an update-specific Intuit no-email guarantee. NotSet and absent
+delivery information cannot prove there was never historical delivery.
+Do not reset state to qualify or replace an invoice to bypass a refusal.
+Deletes, voids, delivery, payment execution, batch and other accounting writes
+remain unavailable. The API hatch refuses POSTs even when named writes are enabled.
 
 Each write requires `requestId`, a stable identifier for the exact intent,
 unique across all requests/tools for this company: 1–50 ASCII letters, digits,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zackbart/connecta",
-  "version": "0.40.0",
+  "version": "0.41.0",
   "type": "module",
   "sideEffects": false,
   "description": "One MCP to rule them all — a single MCP endpoint aggregating many downstream connectors behind a code-first surface of six meta-tools.",
@@ -173,8 +173,8 @@
     "build:operator-ui": "node scripts/build-operator-ui.mjs",
     "check:operator-ui": "node scripts/build-operator-ui.mjs --check",
     "check:clerk-sdk": "node scripts/build-clerk-sdk.mjs --check",
-    "build": "pnpm run providers:generate && pnpm run clean && tsc -p tsconfig.build.json && node scripts/prune-declarations.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.operator-ui.json --noEmit",
+    "build": "node scripts/eval-runtime.mjs --build",
+    "typecheck": "node node_modules/typescript-native/bin/tsc -p tsconfig.json --noEmit && node node_modules/typescript-native/bin/tsc -p tsconfig.operator-ui.json --noEmit",
     "test": "vitest run",
     "test:browser:install": "playwright install chromium",
     "test:browser": "playwright test",
@@ -182,19 +182,20 @@
     "pretest:browser:snapshots": "pnpm run build:operator-ui",
     "test:node": "vitest run --config vitest.config.node.ts",
     "test:workers": "vitest run --project workers",
+    "check:node-shards": "node scripts/check-node-shards.mjs",
     "check:docs": "node scripts/check-doc-links.mjs",
     "check:lint": "oxlint -D correctness --report-unused-disable-directives .",
     "check:unused": "knip --include dependencies,unlisted,exports,nsExports,types,nsTypes",
-    "check:examples": "tsc -p tsconfig.template.node.json && tsc -p tsconfig.examples.worker.json",
+    "check:examples": "node node_modules/typescript/bin/tsc -p tsconfig.template.node.json && node node_modules/typescript/bin/tsc -p tsconfig.examples.worker.json",
     "check:security": "pnpm audit --prod --audit-level moderate",
     "check:package": "node scripts/check-package.mjs",
     "check:declarations": "node scripts/check-declarations.mjs --dist .",
     "check:bundle": "node scripts/bundle-size.mjs",
     "providers:check": "tsx scripts/drift-check.mjs --specs --manual",
-    "eval:selftest": "tsx eval/selftest.ts",
-    "eval:agent": "tsx eval/run-agent.ts",
-    "eval:smoke": "tsx eval/run-smoke.ts",
-    "eval:outcomes": "tsx eval/run-outcomes.ts",
+    "eval:selftest": "node --import tsx scripts/eval-runtime.mjs selftest",
+    "eval:agent": "node --import tsx scripts/eval-runtime.mjs run-agent",
+    "eval:smoke": "node --import tsx scripts/eval-runtime.mjs run-smoke",
+    "eval:outcomes": "node --import tsx scripts/eval-runtime.mjs run-outcomes",
     "preeval:outcomes": "node scripts/generate-version.mjs && pnpm run build:operator-ui",
     "eval:perf": "tsx eval/run-perf.ts",
     "eval:report": "tsx eval/report.ts",
@@ -279,6 +280,7 @@
     "react-dom": "^19.3.1",
     "tsx": "^4.23.15",
     "typescript": "^6.0.3",
+    "typescript-native": "npm:typescript@7.0.2",
     "undici": "6.29.1",
     "vite": "^8.3.4",
     "vitest": "^5.0.4",

package/templates/node/package.json

@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "@clerk/backend": "^3.12.0",
-    "@zackbart/connecta": "0.40.0",
+    "@zackbart/connecta": "0.41.0",
     "quickjs-emscripten": "0.32.0",
     "undici": "6.29.1"
   },