node-autotask 0.8.0 → 0.8.1

package/ARCHITECTURE.md

@@ -215,20 +215,59 @@ import { CAPABILITY_REGISTRY, CAPABILITIES_PLAN_HASH } from 'node-autotask/capab
 ```
 
 ### Package export map (in `package.json` `exports`)
+
+The declared subpaths are **public API**: `.`, `./capabilities`, `./pool`,
+`./operations`, `./untrusted`, `./resources`, `./types`, and `./package.json`.
+Renaming or removing one is a **major version** — a consuming server pins an
+exact SDK version, so a silent break lands on a published server.
+
 ```jsonc
 "exports": {
-  ".": { "import": { "types": "./dist/index.d.ts", "default": "./dist/index.js" },
-         "require": { "types": "./dist/index.d.cts", "default": "./dist/index.cjs" } },
-  "./capabilities": { "import": { "types": "./dist/capabilities.d.ts", "default": "./dist/capabilities.js" },
-                      "require": { "types": "./dist/capabilities.d.cts", "default": "./dist/capabilities.cjs" } },
-  "./operations": { "import": { "types": "./dist/operations/index.d.ts", "default": "./dist/operations/index.js" },
-                    "require": { "types": "./dist/operations/index.d.cts", "default": "./dist/operations/index.cjs" } },
-  "./package.json": "./package.json"
+  ".":               { "import": { "types": "./dist/index.d.ts", "default": "./dist/index.js" },
+                       "require": { "types": "./dist/index.d.cts", "default": "./dist/index.cjs" } },
+  "./capabilities":  { "import": { "types": "./dist/capabilities.d.ts", "default": "./dist/capabilities.js" },
+                       "require": { "types": "./dist/capabilities.d.cts", "default": "./dist/capabilities.cjs" } },
+  "./pool":          { "import": { "types": "./dist/pool.d.ts", "default": "./dist/pool.js" },
+                       "require": { "types": "./dist/pool.d.cts", "default": "./dist/pool.cjs" } },
+  "./operations":    { "import": { "types": "./dist/operations/index.d.ts", "default": "./dist/operations/index.js" },
+                       "require": { "types": "./dist/operations/index.d.cts", "default": "./dist/operations/index.cjs" } },
+  "./untrusted":     { "import": { "types": "./dist/untrusted.d.ts", "default": "./dist/untrusted.js" },
+                       "require": { "types": "./dist/untrusted.d.cts", "default": "./dist/untrusted.cjs" } },
+  "./resources":     { "import": { "types": "./dist/resources/index.d.ts", "default": "./dist/resources/index.js" },
+                       "require": { "types": "./dist/resources/index.d.cts", "default": "./dist/resources/index.cjs" } },
+  "./types":         { "import": { "types": "./dist/types/index.d.ts", "default": "./dist/types/index.js" },
+                       "require": { "types": "./dist/types/index.d.cts", "default": "./dist/types/index.cjs" } },
+  "./package.json":  "./package.json"
 }
 ```
-tsup `entry`: `['src/index.ts', 'src/capabilities.ts', 'src/operations/index.ts']`
-(the exporter stage verifies the emitted file layout). The primary barrel always
-re-exports everything; deep imports are for consumers who want to keep bundles small.
+tsup `entry`: `['src/index.ts', 'src/capabilities.ts', 'src/pool.ts', 'src/operations/index.ts', 'src/resources/index.ts', 'src/types/index.ts', 'src/untrusted.ts']`
+— **every entry has a matching `exports` key, and the `npm run public-surface` gate enforces the pairing**
+(a compiled module with no `exports` key is unreachable bytes; `src/credentials.ts` and
+`src/credential-shape.ts` are therefore NOT entries — both are internal and are reached through the
+root subpath, which re-exports all their symbols). The primary barrel always re-exports everything;
+deep imports are for consumers who want to keep bundles small.
+
+### Catalog delivery to the MCP server — recorded DEVIATION (mcp-server-surface section 3)
+
+The normative family reference (`api-node-squad/references/mcp-server-surface.md` section 3) says the
+generated tool catalog is shipped **twice**: a compiled module behind a `./mcp` subpath (typed rows,
+`CORE_TOOLS`, effect-split dispatch) **and** the root JSON artifact. **This package ships the JSON
+shape only — deliberately.** Do not "fix" this without reading the reason:
+
+- **Consumer**: `iit-mcp-autotask` reads the catalog as **data** at boot. It resolves the JSONs with
+  `createRequire(import.meta.url)` + `dirname(require.resolve('node-autotask/package.json'))` and
+  imports `CAPABILITIES` + `CAPABILITY_PLAN_HASHES` from `node-autotask/capabilities`, then asserts
+  the plan hash before serving. The JSONs are deliberately **not** behind `exports`; data artifacts
+  resolve fine from an installed tarball, they just need a documented path (the one above).
+- **Why no `./mcp` subpath**: the reference server lives in a separate package
+  (`examples/mcp-*.ts` are runnable references, not the server), so no in-repo consumer imports typed
+  rows, `CORE_TOOLS` or a compiled dispatcher. Adding the subpath would be a **public-API addition**
+  with no consumer, and a second module instance of the same data. The JSON + `catalog:check`
+  rebuild-and-diff is the machine-readable mirror, and `verify:pack` proves it resolves from the
+  tarball.
+- **What must stay true** (re-check when the server starts importing typed rows): every registry
+  operation has a catalog row, the served text equals the manifest's, and `catalog:check` fails on a
+  hand-edit of either artifact.
 
 ---
 
@@ -898,9 +937,12 @@ export const NoopLogger: Logger = {};
   `plan:derive` (`scripts/derive-plan.mjs`), `capabilities:build`
   (`scripts/generate-capabilities.mjs`), `capabilities:check`
   (`scripts/check-capabilities.mjs`), `mcp:project`
-  (`scripts/project-mcp-tools.mjs`), `catalog:check`
-  (`scripts/build-tool-catalog.mjs --check`), `public-surface`, `live-smoke`,
+  (`scripts/project-mcp-tools.mjs`), `n8n:project` / `n8n:project:check`
+  (`scripts/project-n8n-mcp.mjs` — the secondary-consumer projection),
+  `catalog:check` (`scripts/build-tool-catalog.mjs --check`), `mcp:check-surface`,
+  `public-surface`, `verify:pack`, `live-smoke`,
   `live-coverage` (env-gated; dry without credentials).
+  `verify` runs the whole chain in the same order as `.github/workflows/ci.yml`.
 
 ---
 

package/N8N_MCP_MANIFEST.json

@@ -1,6 +1,6 @@
 {
   "schema": "node-autotask n8n consumer mcp projection v1",
-  "generatedAt": "2026-10-05T17:31:44.726Z",
+  "generatedAt": "2026-10-07T13:41:12.738Z",
   "generator": "scripts/project-n8n-mcp.mjs",
   "inputs": {
     "capabilities": "capabilities.json (the capability registry — the single source of truth)",
@@ -3604,6 +3604,6 @@
     "approvalGatedWrites": 2,
     "destructiveExcluded": 3
   },
-  "capabilitiesHash": "955b73ed37fc0290f4f9a3c917e2e7c8fce2029fe2b1f4290808d95a97ec8e9c",
+  "capabilitiesHash": "0d79153516c598a68d5353739f92be9f145e77f610edb5f5f092e96b7247822d",
   "curationHash": "e19117ce73e38d9aded3be7e7f077a4e185d2e10294622b76c17d67f63cf9e3b"
 }

package/N8N_MCP_MANIFEST.md

@@ -1,6 +1,6 @@
 # N8N MCP Manifest — node-autotask (consumer projection)
 
-<!-- GENERATED by scripts/project-n8n-mcp.mjs at 2026-10-05T17:31:44.726Z — do not hand-edit. -->
+<!-- GENERATED by scripts/project-n8n-mcp.mjs at 2026-10-07T13:41:12.738Z — do not hand-edit. -->
 
 The n8n CONSUMER projection of the capability registry: the canonical source for what the
 n8n-side MCP tools must expose. The SDK is canonical — this is a projection of it, never a
@@ -280,6 +280,6 @@ only via a recorded change to `n8n-mcp.curation.json`.
 
 ## Meta
 
-- generatedAt: 2026-10-05T17:31:44.726Z
-- capabilitiesHash: 955b73ed37fc0290f4f9a3c917e2e7c8fce2029fe2b1f4290808d95a97ec8e9c
+- generatedAt: 2026-10-07T13:41:12.738Z
+- capabilitiesHash: 0d79153516c598a68d5353739f92be9f145e77f610edb5f5f092e96b7247822d
 - curationHash: e19117ce73e38d9aded3be7e7f077a4e185d2e10294622b76c17d67f63cf9e3b

package/README.md

@@ -211,6 +211,10 @@ import { searchAcrossResources, resolveAny, invoke } from 'node-autotask/operati
 import { CAPABILITIES, CAPABILITY_GROUPS, CAPABILITY_PLAN_HASHES } from 'node-autotask/capabilities';
 
 // Untrusted-content markers (zero-import projection helper — issue #1)
+// The <untrusted_content> wrapper is a PROJECTION-LAYER, CLIENT-SIDE convention:
+// it is text inside the tool result, so the model treats it as data. There is no
+// wire-level "untrusted content" MIME type or content type, and no host sees the
+// marker as a signal — only the result text carries it.
 import { markUntrusted, stripUntrustedDeep } from 'node-autotask/untrusted';
 
 // Bounded LRU pool of clients, keyed by a sha256 digest of the credential
@@ -463,13 +467,15 @@ node-parity paths the vendored swagger lacks, all UNVERIFIED-live this run), and
 | `npm run plan:derive` | `scripts/derive-plan.mjs` — derive the plan's derivable columns (endpoint, envelope, errors, …) |
 | `npm run capabilities:build` | `scripts/generate-capabilities.mjs` — regenerate the registry (src/capabilities.ts + capabilities.json) |
 | `npm run capabilities:check` | `scripts/check-capabilities.mjs` — the batch gate (missing/incomplete/stale records → exit 1) |
-| `npm run public-surface` | `scripts/public-surface.mjs` — capture (`--write`) / verify the public API surface baseline; default mode fails on unannounced removals |
+| `npm run public-surface` | `scripts/public-surface.mjs` — capture (`--write`) / verify the public API surface baseline; default mode fails on unannounced removals, **and** checks the BUILT surface: every tsup entry has a matching `exports` key (and vice versa), every declared target was emitted and loads (ESM+CJS), and no runtime dependency leaks into `dist` |
 | `npm run live-smoke` | `scripts/live-smoke.mjs` — read-only live smoke: 5 vendor probes (5-6 wire calls worst case: 4 GET + 1 bounded query that may walk a 2nd, empty page) + a zero-network shape guard; `--dry` prints the plan with no calls (DRY-RUN-ONLY verdict, exit 0); live via `AUTOTASK_*` env — missing/partial credentials hard-fail exit 2 |
 | `npm run live-coverage` | `scripts/live-coverage.mjs` — the live coverage sweep over all 1172 registry ops (`--dry`: full call plan, no calls; live: bounded reads for real, mutations `dryRun: true` only — zero mutating requests, every governor-gated row (the 54 delete dry-runs included) routed through invoke with `confirm`; budget <= 1119 plan-honest / <= 1270 wire-honest worst case) |
 | `npm run mcp:project` | `scripts/project-mcp-tools.mjs` — mechanical MCP projection → `MCP_TOOL_MANIFEST.md` (`:check` verifies) |
+| `npm run n8n:project` / `n8n:project:check` | `scripts/project-n8n-mcp.mjs` — the n8n consumer projection from the SAME registry → `N8N_MCP_MANIFEST.json`/`.md` (`--check` rebuilds and diffs; the gate is wired into `verify`) |
 | `npm run catalog:build` / `catalog:check` | `scripts/build-tool-catalog.mjs` — the catalog meta-tool row data → `MCP_TOOL_CATALOG.json` + mechanical CORE profile (`--check` verifies drift) |
-| `npm run mcp:check-surface` | `scripts/check-mcp-surface.mjs` — scripted MCP client check of the reference servers (initialize + `tools/list` = the 15-tool core surface, descriptions verbatim vs the manifest, and wire-level `tools/call` DRY probes of the mode-tool / confirm-gate / unknown-op refusals with an offline network-trap proof that DRY mode issues zero outbound requests; stdio + Streamable HTTP, incl. the SIGTERM clean-shutdown leg) |
-| `npm run verify` | the full 9-step gate (typecheck, lint, build, `capabilities:check --ship`, `mcp:project:check`, `catalog:check`, `mcp:check-surface`, `public-surface`, `npm test`) — the CI mirror of the release gate |
+| `npm run mcp:check-surface` | `scripts/check-mcp-surface.mjs` — scripted MCP client check of the reference servers (initialize + `tools/list` = the 15-tool core surface, descriptions verbatim vs the manifest, and wire-level `tools/call` DRY probes of the mode-tool / confirm-gate / unknown-op refusals with an offline network-trap proof that DRY mode issues zero outbound requests; stdio + Streamable HTTP, incl. the SIGTERM clean-shutdown leg; plus a credential-leak scan of the shipped catalog/manifest/registry/overrides before anything is spawned) |
+| `npm run verify:pack` | `scripts/verify-pack.mjs` — pack the tarball, assert every `files[]` artifact is in it, install it offline into a throwaway project and import EVERY value subpath in ESM+CJS from the install, resolve the root JSON artifacts through the documented `createRequire` path, and assert the pinned plan hash |
+| `npm run verify` | the full 11-step gate (typecheck, lint, build, `capabilities:check --ship`, `mcp:project:check`, `n8n:project:check`, `catalog:check`, `mcp:check-surface`, `public-surface`, `verify:pack`, `npm test`) — the CI mirror of the release gate |
 | `npm run docs:render` | `scripts/render-docs.mjs` — regenerate the generated table blocks in `docs/API.md` + `docs/N8N-ADAPTER.md` |
 | `npx node-autotask doctor` (published package; `node bin/doctor.js doctor` from a checkout after `npm run build`) | `bin/doctor.js` — the read-only doctor preflight CLI (issue #2): config/zone/connectivity/five one-row entity reads/threshold, `--json` + `--timeout-ms`; exit 0 = no failures, 1 = a check failed, 2 = missing/invalid config; read-only, at most 8 requests, retries off (the SDK core is `runDoctor` in `docs/API.md` §13) |
 

package/dist/{chunk-C7U3ZRRK.js → chunk-2QLOK7PX.js}

@@ -1,62 +1,58 @@
 import {
+  AutotaskAbortError,
+  AutotaskConfigError,
+  AutotaskError,
+  AutotaskNetworkError,
+  AutotaskTimeoutError,
   BLIND_SURFACE_STAMPS,
+  CREDENTIAL_ENV_LOAD_ACTION,
+  CircuitBreakerError,
+  ConflictError,
   DEFAULT_PAGE_SIZE,
   DELETE_BOUNDARY_NOTES,
   EMPTY_REASON_STAMPS,
+  EmptyResponseError,
   MAX_PAGES,
   MAX_PAGE_SIZE,
+  NotFoundError,
   POINTER_NOTES,
+  QueryTooLongError,
+  REDACTED,
   RELATIONSHIP_MAP,
   RESPONSE_DRIFT_MARKERS,
+  RateLimitError,
+  ResolutionError,
+  ResponseRejectedError,
+  StaleObjectError,
+  UnexpectedContentTypeError,
   buildBreakerKey,
   buildTenantKey,
   clampPageSize,
   collectAll,
   cooldownDurationMs,
+  credentialShapeProblem,
   decideHostPolicy,
   defaultCircuitBreakerStore,
   defaultCooldownStore,
+  errorFromStatus,
+  formatVendorDetail,
+  isAutotaskError,
   isBreakerFailure,
+  isDeterministicVendor500,
   isRecord,
+  isRedactedFieldName,
   newCorrelationId,
   paginate,
   paginateItems,
   parseIdentifier,
+  parseVendorErrors,
   redactAuditBody,
+  redactResponseBody,
   totalPagesFor
-} from "./chunk-GNS47RBV.js";
+} from "./chunk-IUJJPWUX.js";
 import {
   CAPABILITIES
 } from "./chunk-LBNDOP4A.js";
-import {
-  AutotaskAbortError,
-  AutotaskConfigError,
-  AutotaskError,
-  AutotaskNetworkError,
-  AutotaskTimeoutError,
-  CircuitBreakerError,
-  ConflictError,
-  EmptyResponseError,
-  NotFoundError,
-  QueryTooLongError,
-  REDACTED,
-  RateLimitError,
-  ResolutionError,
-  ResponseRejectedError,
-  StaleObjectError,
-  UnexpectedContentTypeError,
-  errorFromStatus,
-  formatVendorDetail,
-  isAutotaskError,
-  isDeterministicVendor500,
-  isRedactedFieldName,
-  parseVendorErrors,
-  redactResponseBody
-} from "./chunk-FE225M76.js";
-import {
-  CREDENTIAL_ENV_LOAD_ACTION,
-  credentialShapeProblem
-} from "./chunk-QF4K3XTK.js";
 
 // src/auth.ts
 var AUTH_HEADERS = {
@@ -12746,4 +12742,4 @@ export {
   VersionResource,
   ZoneInformationResource
 };
-//# sourceMappingURL=chunk-C7U3ZRRK.js.map
+//# sourceMappingURL=chunk-2QLOK7PX.js.map