@zackbart/connecta 0.9.1 → 0.10.1

package/CHANGELOG.md

@@ -2,6 +2,134 @@
 
 All notable changes to this package are documented here.
 
+## 0.10.1 — 2026-07-30
+
+An inbound-auth escape hatch for MCP clients whose OAuth implementations do not
+interoperate cleanly with a Connecta deployment. Eligible Clerk operators can
+now issue named, revocable Bearer tokens from `/tokens`; each call is attributed
+to the token's immutable identity while activity history resolves the current
+friendly name. The secret is shown once, only a SHA-256 digest is stored, and a
+token can authenticate MCP without gaining operator privileges. **Deployments
+that do not set `accessTokens: {}` are unchanged.** Enabling it requires a
+storage adapter with `list(prefix)` and a Clerk auth provider so token lifecycle
+operations remain behind the human operator boundary.
+
+### Added
+
+- **Managed MCP access tokens.** `accessTokens: {}` adds a Clerk-only operator
+  ledger for creating, naming, renaming, and revoking `cta_…` Bearer tokens.
+  `maxActive` defaults to 100 and can be configured from 1 through 1,000.
+- **Token-attributed activity.** Calls authenticated by a managed token record
+  its immutable token ID and resolve the current friendly name when an eligible
+  operator reads activity. Revoked metadata remains as a tombstone so historical
+  attribution survives rotation.
+- **Enumerable storage.** `KVStorage.list(prefix)` is available for durable
+  metadata ledgers, with implementations in the built-in memory and file
+  adapters and the Cloudflare Workers KV example.
+
+### Fixed
+
+- **One-time secrets leave no reusable operator-UI state.** The plaintext token
+  disappears when it is dismissed, when the operator navigates away or signs
+  out, and before the document enters the browser back-forward cache. The create
+  form stays unavailable while a newly issued secret is waiting to be stored.
+
+## 0.10.0 — 2026-07-30
+
+**Code-first is what a model sees.** A deployment with an executor now serves
+seven meta-tools instead of ten: `list_connectors`, `describe_tools`, and
+`batch_call` are no longer top-level tools, and their behavior lives in
+`connecta.search`, `connecta.describe`, and `connecta.batch` inside a program.
+Nothing became unreachable and no policy machinery changed — writes still cross
+`call_destructive_tool`, and `call_tool` deliberately stays, because a single cold
+call is measurably cheaper direct than through a program. What breaks is a client
+that calls one of the three folded names against an executor-backed deployment:
+it gets an unknown-tool error. The always-loaded instructions, the `skills`
+guidance, and the routing sentences in `call_tool`, `search_tools`, `get_result`,
+and `execute_code` are rewritten for that surface, which measures 19.6% smaller
+serialized tool definitions (10,675B → 8,587B), correcting the exploration's ~32%
+estimate. **An executor-free deployment can ignore all of it**: it serves the same
+nine tools with the same descriptions and the same instructions as before, byte
+for byte. `surface: "classic"` alongside an executor restores the ten-tool shape.
+
+The default was flipped by owner decision for a single-operator deployment rather
+than by the repeated per-model eval that [`ethos.md`](./ethos.md) had gated it on;
+that row now records the decision and its reasoning, and
+[`eval/code-first-gate`](./eval/code-first-gate/README.md) remains as measurement
+with all three of its arms now real deployment shapes rather than harness
+simulations.
+
+The code-mode guest API is now specified rather than merely described:
+[`documentation/code-mode.md`](./documentation/code-mode.md) states what a
+program is promised — surface, addressing, error shapes, projection, retry,
+cancellation, limits, activity — with clause identifiers the tests cite, and
+names the QuickJS/Dynamic Worker divergences as documented exceptions instead of
+leaving them to be discovered. Both executors now run the same contract case
+table, the Workers arm against a real Dynamic Worker in workerd. Writing the
+clauses down turned up four places where the code did not quite match the
+behavior worth having; those are the changes below, all additive or corrective,
+and one of them (retryable policy refusals) reaches `call_tool` and `batch_call`
+as well as programs.
+
+### Changed
+
+- **The code-first surface is the default wherever an executor is configured.**
+  Seven tools: `execute_code`, `search_tools`, `call_tool`,
+  `call_destructive_tool`, `authorize_connector`, `get_result`, `skills`. Four
+  overlapping ways to reach one connector became two — `search_tools` then
+  `call_tool` for a single cold read, one `execute_code` run for everything wider.
+  An executor-free deployment is unchanged.
+- **`ConnectaConfig.surface`** overrides what the executor implies. The reason to
+  set it is `"classic"` beside an executor, which is the ten-tool shape the eval
+  gate's incremental arm measures. `"code-first"` without an executor throws at
+  construction rather than advertise a program surface that does not exist, as
+  does any other value.
+- **The eval gate configures its arms instead of faking one.** `gate-server.ts`
+  no longer filters `tools/list` or rewrites connecta's descriptions: all three
+  arms are ordinary deployments, so the harness measures the product and the arms
+  are byte-for-byte identical in the transport layer.
+
+### Added
+
+- **Typed failures inside `connecta.batch`.** A failed call now reports
+  `{ address, ok: false, error, errorDetails }`, where `errorDetails` is the
+  same typed object `batch_call` returns (`code`, `retryable`, `retryAfterMs`,
+  and the `auth_required` recovery envelope). A thrown host error crosses the
+  sandbox bridge as a bare message in every executor, so this is the one channel
+  through which a program can tell a policy refusal from a transient failure
+  instead of cheerfully retrying the refusal. Programs reading `error` are
+  unaffected. An entry connecta could not even attempt — a malformed call object
+  — reports `batch_call_failed`, the code `batch_call` already uses for the same
+  situation.
+
+### Fixed
+
+- **A policy refusal can no longer look retryable.** `unknown_address`,
+  `unknown_tool`, `ambiguous_tool_alias`, and
+  `destructive_tool_requires_approval` now pin `retryable: false` instead of
+  deriving it from their own message text. Those messages embed the address the
+  caller asked for, and the heuristic that classifies connector errors matches
+  `503`, `429`, and `temporar`, so a connector named `svc-503` or
+  `temporary-export` turned a refusal that will never succeed into one an agent
+  was told to retry. This affects `call_tool` and `batch_call` too, not only
+  programs.
+- **An uncaught discovery-bound failure inside a program is typed.** A bad
+  `limit`, an oversized `addresses` list, or a discovery page over the
+  256,000-byte ceiling now reaches the model as `invalid_args` or
+  `result_too_large` with `retryable: false`, the same envelope a failed tool
+  call gets, instead of as untyped error prose.
+- **Bridge-limit errors name the address, not the plumbing.** A host call over
+  the QuickJS 256 KiB bound reported `connecta.__callNamespace` — the internal
+  dispatcher every shortcut namespace shares — where it now reports the
+  `connector.tool` address the program called.
+- **An oversized program result is truncated once.** The over-cap notice is now
+  sized so its *serialized* form fits the 24,000-character result cap.
+  Previously the QuickJS path truncated in the child and again in the parent, so
+  a very large result came back as a truncation envelope wrapped in a truncation
+  envelope whose `totalChars` reported the inner envelope's length rather than
+  the real size. Previews are somewhat shorter; `totalChars` is now the true
+  serialized size of what the program returned.
+
 ## 0.9.1 — 2026-07-29
 
 A code-mode routing release. Agents that needed an unknown address *and* a

package/README.md

@@ -2,104 +2,61 @@
 
 ![A monochrome clay Connecta hub joining many tools](./assets/connecta-clay-hero.png)
 
-One MCP endpoint in front of every integration you've deliberately chosen.
-Agents see a handful of meta-tools instead of hundreds of definitions, and each
-client is configured once instead of once per integration.
-
-## What connecta is
-
-An agent connected to N MCP servers pays for all N before it does anything:
-every server's full tool list lands in the context window at connect time, and
-every client is pointed at every server separately, each with its own auth.
-Connecta is one endpoint you deploy instead — a Cloudflare Worker or a Node
-process, same code either way — aggregating your connectors behind nine
-meta-tools. A connector is a remote MCP server connecta proxies or a plain
-HTTP API with hand-written tool definitions; both come out identical,
-addressed as `<connectorId>.<toolName>`.
-
-```
-                                        ┌── remoteMcp("notion")   → mcp.notion.com
-Claude / Cursor ── MCP ──▶  connecta ───┼── remoteMcp("linear")   → mcp.linear.app
-  sees 9 tools             /mcp         ├── api("resend")         → fetch(...)
-                                        └── api("internal")       → fetch(...)
-```
-
-The agent discovers instead of preloading: `search_tools` ranks matches and can
-return their compact schemas in the same response, while `describe_tools`
-expands only schemas that remain unclear. `call_tool` / `batch_call` /
-`call_destructive_tool` invoke them, and `list_connectors`,
-`authorize_connector`, `get_result`, and `skills` round out the nine. An
-optional tenth, `execute_code`, runs model-written JavaScript in a sandbox with
-no network, filesystem, or environment access — only the read-only tools in
-scope. Context holds nine definitions whether ten tools sit behind them or a
-thousand.
-
-Three properties are load-bearing enough to name here; the rest live in the
-[ethos](./ethos.md). **Read-only is fail-closed**: anything not explicitly
-annotated read-only crosses `call_destructive_tool`, which is annotated so the
-MCP host can ask a human. **Credentials stay server-side**: an encrypted
-vault, rotated from an operator page, and no surface ever returns a secret.
-**Config is code**: adding a connector is an edit and a deploy you can review
-in a pull request.
-
-## Getting started
-
-Node deployments require Node.js 20.9 or newer.
-
-```sh
-npm install @zackbart/connecta
+One place for AI agents to connect to the tools you choose.
+
+Connecta gives an agent a single MCP endpoint instead of making it connect to
+every service separately. You decide which integrations are available and
+Connecta holds their credentials, and the agent mostly works by writing
+ordinary JavaScript that Connecta runs in a sandbox next to them — with a few
+explicit tools for the jobs a program is the wrong shape for, destructive calls
+among them.
+
+```mermaid
+flowchart LR
+    Agent["AI agent"]
+    Integrations["The integrations you chose"]
+
+    subgraph Connecta["Connecta: one MCP endpoint; credentials stay here"]
+        Sandbox["execute_code<br/>server-side sandbox"]
+        Explicit["Explicit tools<br/>destructive calls, search, auth"]
+    end
+
+    Agent -->|"writes a program"| Sandbox
+    Agent -->|"one deliberate call"| Explicit
+    Sandbox --> Integrations
+    Explicit --> Integrations
 ```
 
-A minimal server with one hand-written connector:
-
-```ts
-import { api, bearerToken, createConnecta } from "@zackbart/connecta";
-import { fileStorage, listen } from "@zackbart/connecta/node";
+## Why Connecta
 
-const connecta = createConnecta({
-  storage: fileStorage("./.connecta-state.json"), // or memoryStorage()
-  auth: bearerToken(process.env.CONNECTA_TOKEN ?? "dev-token"),
-  connectors: [
-    api("time", {
-      description: "Time — current timestamp",
-      tools: [
-        {
-          name: "get_now",
-          description: "Return the current time as an ISO 8601 timestamp.",
-          inputSchema: { type: "object", properties: {} },
-          annotations: { readOnlyHint: true },
-          handler: async () => ({ now: new Date().toISOString() }),
-        },
-      ],
-    }),
-  ],
-});
+- **One connection.** Configure clients once, even as integrations change.
+- **Seven tools, not seven hundred.** A program can search the catalog, chain
+  calls, and trim the results before the agent ever sees them — so nothing has
+  to be loaded up front.
+- **Safer access.** Credentials stay server-side — the program never sees them
+  — and consequential actions remain explicit and individual.
+- **Named client access.** A Clerk operator can issue and revoke one-time,
+  hashed Bearer tokens for MCP clients that support header authentication.
+- **Your deployment.** Connecta runs on Node, Docker, or Cloudflare Workers,
+  with configuration you can review and version.
 
-listen(connecta, 8787); // MCP at /mcp; Connections at http://localhost:8787/
-```
+## Start here
 
-Point an MCP client at `http://localhost:8787/mcp` with an
-`Authorization: Bearer` header and `time.get_now` is discoverable through
-`search_tools`.
+- [Node example](./examples/node/)
+- [Docker example](./examples/docker/)
+- [Cloudflare Worker example](./examples/worker/)
+- [Documentation](./documentation/)
 
-Runnable deployments live in
-[`examples/`](https://github.com/zackbart/connecta/tree/main/examples): a
-free-tier-compatible Cloudflare Worker with KV and D1 adapters, a Node server
-extending the one above, and a single-service Docker compose stack.
-Heavyweight extras are optional peers behind subpaths (`/auth/clerk`,
-`/quickjs`), and connecta ships no service-specific connectors — endpoint,
-credential, and tool choices stay in your project.
+Configuring a sandbox — a Dynamic Worker on Cloudflare, QuickJS on Node — is
+what selects the code-first surface, and it is the assumed posture. A
+deployment without one keeps the earlier nine-tool, call-by-call interface,
+which stays supported.
 
-A candid note on maturity: connecta is built for its author's deployments
-first and published openly. Breaking changes are cheap and the version number
-signals change, not stability — the [ethos](./ethos.md) says so on purpose.
+## Project status
 
-## Learn more
+Connecta is built for its author's deployments first and is still evolving.
+Breaking changes are expected before 1.0.
 
-- **[ethos.md](./ethos.md)** — what this is, what it refuses to be, the
-  decisions table, and the invariants. Read it before proposing anything.
-- **[documentation/](./documentation/)** — per-subsystem guides (currently
-  stubs; the prior manual lives in git history).
-- **[CHANGELOG](./CHANGELOG.md)** — what changed in each release.
-- **[SECURITY](./SECURITY.md)** — supported versions and how to report a
-  vulnerability.
+Read the [ethos](./ethos.md) for the product's principles, the
+[changelog](./CHANGELOG.md) for releases, and [security policy](./SECURITY.md)
+for vulnerability reporting.

package/dist/access-tokens.d.ts

@@ -0,0 +1,32 @@
+import type { InboundAuth, KVStorage } from "./types.js";
+export interface AccessTokenMetadata {
+    id: string;
+    name: string;
+    tokenPrefix: string;
+    createdAt: string;
+    revokedAt?: string;
+}
+export interface CreatedAccessToken {
+    token: string;
+    accessToken: AccessTokenMetadata;
+}
+/**
+ * Deployment-scoped personal access tokens. Secret material is never
+ * recoverable: authentication indexes a SHA-256 digest of a random 256-bit
+ * token, while separately enumerable metadata powers operator management.
+ */
+export declare class AccessTokenManager {
+    private readonly storage;
+    readonly auth: InboundAuth;
+    private readonly maxActive;
+    constructor(storage: KVStorage, options?: {
+        maxActive?: number;
+    });
+    private read;
+    list(): Promise<AccessTokenMetadata[]>;
+    create(name: unknown, createdBy: string): Promise<CreatedAccessToken>;
+    rename(id: string, name: unknown): Promise<AccessTokenMetadata | null>;
+    revoke(id: string, revokedBy: string): Promise<AccessTokenMetadata | null>;
+    private authorize;
+}
+//# sourceMappingURL=access-tokens.d.ts.map

package/dist/access-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-tokens.d.ts","sourceRoot":"","sources":["../src/access-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA6BrE,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAyGD;;;;GAIG;AACH,qBAAa,kBAAkB;IAK3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGhB,OAAO,EAAE,SAAS,EACnC,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;YAgCxB,IAAI;IAKZ,IAAI,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;IActC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoCrE,MAAM,CACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAQhC,MAAM,CACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAexB,SAAS;CAgBxB"}

package/dist/access-tokens.js

@@ -0,0 +1,225 @@
+const TOKEN_PREFIX = "cta_";
+const TOKEN_BYTES = 32;
+const TOKEN_VALUE_RE = /^cta_[A-Za-z0-9_-]{43}$/;
+const RECORD_PREFIX = "access-token:v1:record:";
+const LOOKUP_PREFIX = "access-token:v1:lookup:";
+const MAX_NAME_CHARACTERS = 80;
+const DEFAULT_MAX_ACTIVE = 100;
+const MAX_CONFIGURED_ACTIVE = 1_000;
+const encoder = new TextEncoder();
+function recordKey(id) {
+    return `${RECORD_PREFIX}${id}`;
+}
+function lookupKey(hash) {
+    return `${LOOKUP_PREFIX}${hash}`;
+}
+function bytesToBase64Url(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary)
+        .replaceAll("+", "-")
+        .replaceAll("/", "_")
+        .replace(/=+$/u, "");
+}
+function bytesToHex(bytes) {
+    return [...bytes]
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+async function hashToken(token) {
+    return bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(token))));
+}
+function normalizeName(value) {
+    if (typeof value !== "string") {
+        throw new Error("Token name must be a string");
+    }
+    const compact = value.replace(/\s+/gu, " ").trim();
+    if (!compact)
+        throw new Error("Token name cannot be empty");
+    if (Array.from(compact).length > MAX_NAME_CHARACTERS) {
+        throw new Error(`Token name cannot exceed ${MAX_NAME_CHARACTERS} characters`);
+    }
+    return compact;
+}
+function parseRecord(raw) {
+    try {
+        const value = JSON.parse(raw);
+        if (value.version !== 1 ||
+            typeof value.id !== "string" ||
+            !/^[0-9a-f-]{36}$/u.test(value.id) ||
+            typeof value.name !== "string" ||
+            typeof value.tokenHash !== "string" ||
+            !/^[0-9a-f]{64}$/u.test(value.tokenHash) ||
+            typeof value.tokenPrefix !== "string" ||
+            typeof value.createdAt !== "string" ||
+            typeof value.createdBy !== "string" ||
+            (value.revokedAt !== undefined &&
+                typeof value.revokedAt !== "string") ||
+            (value.revokedBy !== undefined &&
+                typeof value.revokedBy !== "string")) {
+            throw new Error("invalid token record");
+        }
+        return value;
+    }
+    catch {
+        throw new Error("Stored access token metadata is invalid or corrupted");
+    }
+}
+function parseLookup(raw) {
+    try {
+        const value = JSON.parse(raw);
+        return value.version === 1 && typeof value.id === "string"
+            ? { version: 1, id: value.id }
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function metadata(record) {
+    return {
+        id: record.id,
+        name: record.name,
+        tokenPrefix: record.tokenPrefix,
+        createdAt: record.createdAt,
+        ...(record.revokedAt ? { revokedAt: record.revokedAt } : {}),
+    };
+}
+function unauthorized() {
+    return {
+        ok: false,
+        response: new Response(JSON.stringify({ error: "unauthorized" }), {
+            status: 401,
+            headers: {
+                "Content-Type": "application/json",
+                "WWW-Authenticate": "Bearer",
+            },
+        }),
+    };
+}
+/**
+ * Deployment-scoped personal access tokens. Secret material is never
+ * recoverable: authentication indexes a SHA-256 digest of a random 256-bit
+ * token, while separately enumerable metadata powers operator management.
+ */
+export class AccessTokenManager {
+    storage;
+    auth;
+    maxActive;
+    constructor(storage, options = {}) {
+        this.storage = storage;
+        if (!storage.list) {
+            throw new Error("accessTokens requires a storage adapter that implements list(prefix)");
+        }
+        const maxActive = options.maxActive ?? DEFAULT_MAX_ACTIVE;
+        if (!Number.isInteger(maxActive) ||
+            maxActive < 1 ||
+            maxActive > MAX_CONFIGURED_ACTIVE) {
+            throw new Error(`accessTokens.maxActive must be a whole number from 1 to ${MAX_CONFIGURED_ACTIVE}`);
+        }
+        this.maxActive = maxActive;
+        this.auth = {
+            kind: "access_token",
+            activityActorNamespace: "connecta:access-tokens:v1",
+            activityActorLabel: async (id) => {
+                try {
+                    return (await this.read(id))?.name;
+                }
+                catch {
+                    return undefined;
+                }
+            },
+            authorize: (request) => this.authorize(request),
+        };
+    }
+    async read(id) {
+        const raw = await this.storage.get(recordKey(id));
+        return raw ? parseRecord(raw) : null;
+    }
+    async list() {
+        const keys = await this.storage.list(RECORD_PREFIX);
+        const records = await Promise.all(keys.map(async (key) => {
+            const raw = await this.storage.get(key);
+            return raw ? parseRecord(raw) : null;
+        }));
+        return records
+            .filter((record) => Boolean(record))
+            .sort((a, b) => b.createdAt.localeCompare(a.createdAt))
+            .map(metadata);
+    }
+    async create(name, createdBy) {
+        const normalizedName = normalizeName(name);
+        const active = (await this.list()).filter((token) => !token.revokedAt);
+        if (active.length >= this.maxActive) {
+            throw new Error(`This deployment already has the maximum of ${this.maxActive} active access tokens`);
+        }
+        const secretBytes = crypto.getRandomValues(new Uint8Array(TOKEN_BYTES));
+        const token = TOKEN_PREFIX + bytesToBase64Url(secretBytes);
+        const hash = await hashToken(token);
+        if (await this.storage.get(lookupKey(hash))) {
+            throw new Error("Access token collision; create another token");
+        }
+        const record = {
+            version: 1,
+            id: crypto.randomUUID(),
+            name: normalizedName,
+            tokenHash: hash,
+            tokenPrefix: token.slice(0, 12),
+            createdAt: new Date().toISOString(),
+            createdBy,
+        };
+        await this.storage.set(recordKey(record.id), JSON.stringify(record));
+        try {
+            await this.storage.set(lookupKey(hash), JSON.stringify({ version: 1, id: record.id }));
+        }
+        catch (error) {
+            await this.storage.delete(recordKey(record.id)).catch(() => { });
+            throw error;
+        }
+        return { token, accessToken: metadata(record) };
+    }
+    async rename(id, name) {
+        const record = await this.read(id);
+        if (!record)
+            return null;
+        record.name = normalizeName(name);
+        await this.storage.set(recordKey(id), JSON.stringify(record));
+        return metadata(record);
+    }
+    async revoke(id, revokedBy) {
+        const record = await this.read(id);
+        if (!record)
+            return null;
+        if (!record.revokedAt) {
+            // Admission disappears first. A metadata-write failure may leave the UI
+            // calling the record active, but can never leave a token labelled
+            // revoked while its lookup still admits requests.
+            await this.storage.delete(lookupKey(record.tokenHash));
+            record.revokedAt = new Date().toISOString();
+            record.revokedBy = revokedBy;
+            await this.storage.set(recordKey(id), JSON.stringify(record));
+        }
+        return metadata(record);
+    }
+    async authorize(request) {
+        const header = request.headers.get("authorization") ?? "";
+        const match = /^Bearer\s+(.+)$/iu.exec(header);
+        const token = match?.[1];
+        if (!token || !TOKEN_VALUE_RE.test(token))
+            return unauthorized();
+        const hash = await hashToken(token);
+        const lookupRaw = await this.storage.get(lookupKey(hash));
+        if (!lookupRaw)
+            return unauthorized();
+        const lookup = parseLookup(lookupRaw);
+        if (!lookup)
+            return unauthorized();
+        const record = await this.read(lookup.id);
+        if (!record || record.revokedAt || record.tokenHash !== hash) {
+            return unauthorized();
+        }
+        return { ok: true, subjectId: record.id };
+    }
+}
+//# sourceMappingURL=access-tokens.js.map

package/dist/access-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-tokens.js","sourceRoot":"","sources":["../src/access-tokens.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAgClC,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,GAAG,aAAa,GAAG,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,GAAG,aAAa,GAAG,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACzC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC;SAChB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,CAAC,GAAG,KAAK,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa;IACpC,OAAO,UAAU,CACf,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,4BAA4B,mBAAmB,aAAa,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAC;QAC5D,IACE,KAAK,CAAC,OAAO,KAAK,CAAC;YACnB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YAC5B,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACxC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC5B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;YACtC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC5B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,KAA0B,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACtD,OAAO,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YACxD,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;YAC9B,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAyB;IACzC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;YAChE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,QAAQ;aAC7B;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAKV;IAJV,IAAI,CAAc;IACV,SAAS,CAAS;IAEnC,YACmB,OAAkB,EACnC,UAAkC,EAAE;QADnB,YAAO,GAAP,OAAO,CAAW;QAGnC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC1D,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;YAC5B,SAAS,GAAG,CAAC;YACb,SAAS,GAAG,qBAAqB,EACjC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2DAA2D,qBAAqB,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG;YACV,IAAI,EAAE,cAAc;YACpB,sBAAsB,EAAE,2BAA2B;YACnD,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC/B,IAAI,CAAC;oBACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAChD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,EAAU;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC,CAAC,CACH,CAAC;QACF,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,MAAM,EAA+B,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aACtD,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAa,EAAE,SAAiB;QAC3C,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,SAAS,uBAAuB,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,YAAY,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAsB;YAChC,OAAO,EAAE,CAAC;YACV,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;SACV,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,SAAS,CAAC,IAAI,CAAC,EACf,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAwB,CAAC,CACpE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,IAAa;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,SAAiB;QAEjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,wEAAwE;YACxE,kEAAkE;YAClE,kDAAkD;YAClD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAgB;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,YAAY,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7D,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAC5C,CAAC;CACF"}

package/dist/catalog-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-service.d.ts","sourceRoot":"","sources":["../src/catalog-service.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACb,MAAM,eAAe,CAAC;AAUvB,OAAO,KAAK,EACV,SAAS,EAET,OAAO,EACR,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAIlD,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,kBAAkB;gBAAzC,IAAI,EAAE,cAAc,GAAG,kBAAkB,EAClD,OAAO,EAAE,MAAM;CAKlB;AAoCD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAazE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,UAAU,kBAAkB;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;KACtC,CAAC;CACH;AA4BD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAUN;;;;GAIG;AACH,qBAAa,cAAc;IAQvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAR1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;gBAG9C,QAAQ,EAAE,YAAY,EAC9B,OAAO,EAAE,MAAM,EACxB,OAAO,GAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACjB;IAQF,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBrB,OAAO,CAAC,gBAAgB;IAYlB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAkD7B;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EACtC,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAoEvB,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsH3D,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CA0EzE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB;;;;YAEnD,MAAM;gBACF,MAAM;sBACA,MAAM;gBACZ,MAAM;eACP,kBAAkB,CAAC,MAAM,CAAC,EAAE;;;;;;EA+BtC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB;;;;cAhgB9C,MAAM;iBACH,MAAM;sBACD,MAAM;sBACN,OAAO;uBACN,OAAO;oBACV,MAAM,EAAE;4BACA,MAAM,EAAE;qBACf,MAAM,EAAE;sBACP,OAAO,CAAC,aAAa,CAAC;;;;;;EAkgBvC"}
+{"version":3,"file":"catalog-service.d.ts","sourceRoot":"","sources":["../src/catalog-service.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACb,MAAM,eAAe,CAAC;AAUvB,OAAO,KAAK,EACV,SAAS,EAET,OAAO,EACR,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAIlD,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,kBAAkB;gBAAzC,IAAI,EAAE,cAAc,GAAG,kBAAkB,EAClD,OAAO,EAAE,MAAM;CAKlB;AAoCD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAazE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,UAAU,kBAAkB;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;KACtC,CAAC;CACH;AA4BD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAMN;;;;GAIG;AACH,qBAAa,cAAc;IAQvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAR1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;gBAG9C,QAAQ,EAAE,YAAY,EAC9B,OAAO,EAAE,MAAM,EACxB,OAAO,GAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACjB;IAQF,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBrB,OAAO,CAAC,gBAAgB;IAYlB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAkD7B;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EACtC,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAoEvB,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsH3D,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CA0EzE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB;;;;YAEnD,MAAM;gBACF,MAAM;sBACA,MAAM;gBACZ,MAAM;eACP,kBAAkB,CAAC,MAAM,CAAC,EAAE;;;;;;EA+BtC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB;;;;cA5f9C,MAAM;iBACH,MAAM;sBACD,MAAM;sBACN,OAAO;uBACN,OAAO;oBACV,MAAM,EAAE;4BACA,MAAM,EAAE;qBACf,MAAM,EAAE;sBACP,OAAO,CAAC,aAAa,CAAC;;;;;;EA8fvC"}

package/dist/catalog-service.js

@@ -1,6 +1,6 @@
 import { compactSchema, lexicalCorpusStatistics, lexicalSearchQuery, rankTools, schemaObjectKeys, summarizeDescription, } from "./catalog.js";
 import { mapSettledWithConcurrency, resolveDiscoveryConcurrency, } from "./concurrency.js";
-import { classifyCallError, messageLooksRetryable } from "./errors.js";
+import { classifyCallError, framingError } from "./errors.js";
 import { connectorGuide, connectorSkillName, } from "./skills.js";
 import { DEFAULT_PROBE_TIMEOUT_MS, normalizeTimeoutMs, withAbortableTimeout, } from "./timeout.js";
 export const DEFAULT_SEARCH_LIMIT = 8;
@@ -68,9 +68,6 @@ function schemaKeyMetadata(input, output) {
         ...(outputKeys ? { outputKeys: outputKeys.properties } : {}),
     };
 }
-function framingError(code, message) {
-    return { code, message, retryable: messageLooksRetryable(message) };
-}
 function renderSchema(schema, format) {
     return format === "json" ? schema : compactSchema(schema);
 }