runline 0.33.0 → 0.35.0

package/dist/plugins/shiftBwm/src/shared.js

@@ -1,24 +1,47 @@
+import { AuthError } from "runline";
 import * as t from "typebox";
-import { apiKey, SHIFT_API_URL, STRICT_OBJECT, shiftFetch, } from "../../_shared/shiftCloud.js";
-import { BusinessWorldModelClient, BwmClientError } from "./vendor/client.js";
+import { credentialBroker } from "../../_shared/credentialAdapter.js";
+import { errorIdentifier, failureMessage } from "../../_shared/credentials.js";
+import { SHIFT_API_URL, STRICT_OBJECT } from "../../_shared/shiftCloud.js";
+import { shiftCredential, shiftPath } from "../../_shared/shiftCredentials.js";
+import { BusinessWorldModelClient, BwmClientError, } from "./vendor/client.js";
 import { BWM_BUILT_IN_OBJECT_TYPES, BWM_LIST_MAX_LIMIT, } from "./vendor/contracts.js";
 import { BwmFilterOperator } from "./vendor/models.js";
 export { idSchema, STRICT_OBJECT, STRICT_UPDATE_OBJECT, } from "../../_shared/shiftCloud.js";
+export const shiftBwmCredential = shiftCredential();
 // ─── client ──────────────────────────────────────────────────────
+/**
+ * The vendored client's fetch, sent through the declared credential: the
+ * client names Shift API URLs, and each becomes a path beneath the Shift
+ * target. The client never holds the key.
+ */
+function brokeredFetch(ctx) {
+    return (input, init) => {
+        const url = new URL(input);
+        if (url.origin !== SHIFT_API_URL)
+            throw new AuthError("request_not_allowed");
+        return credentialBroker(ctx, shiftBwmCredential).request({
+            target: "api",
+            path: `${shiftPath(url.pathname)}${url.search}`,
+            method: (init?.method ?? "GET"),
+            headers: {
+                Accept: "application/json",
+                ...Object.fromEntries(init?.headers ?? []),
+            },
+            ...(init?.body !== undefined ? { body: init.body } : {}),
+        });
+    };
+}
 /**
  * One client per call. Cheap (prefix + fetch closure), and it lets a
  * create attach its own `Idempotency-Key` without leaking it into the
- * next request. Transport is the shared Shift one: redirects refused,
- * one deadline, bounded body.
+ * next request.
  */
 export function clientFor(ctx, extraHeaders = {}) {
     return new BusinessWorldModelClient({
         baseUrl: SHIFT_API_URL,
-        fetch: shiftFetch,
-        headers: {
-            authorization: `Bearer ${apiKey(ctx)}`,
-            ...extraHeaders,
-        },
+        fetch: brokeredFetch(ctx),
+        headers: extraHeaders,
     });
 }
 /** Client whose every mutation carries a fresh `Idempotency-Key`. */
@@ -29,17 +52,19 @@ export function idempotentClientFor(ctx) {
 /**
  * Only `message` survives the trip back to the agent's code, so the
  * fields the model needs to self-correct — `code` and `param` — are
- * folded into it. `param` names the offending request location
- * (`fields.tier`, `relationships.$owner`).
+ * folded into it, as for every Shift plugin. `param` names the offending
+ * request location (`fields.tier`, `relationships.$owner`). The service's
+ * free-text message can echo request data and is not returned.
  */
 export function describeError(err) {
     if (err instanceof BwmClientError) {
-        const where = err.param ? ` (param: ${err.param})` : "";
-        const error = new Error(`Shift Business World Model ${err.status} ${err.code}: ${err.message}${where}`);
+        const code = errorIdentifier(err.code);
+        const param = errorIdentifier(err.param);
+        const error = new Error(failureMessage("shiftBwm", err.status, { code, param }));
         error.status = err.status;
-        error.type = err.type;
-        error.code = err.code;
-        error.param = err.param;
+        error.type = errorIdentifier(err.type);
+        error.code = code;
+        error.param = param;
         return error;
     }
     return err instanceof Error ? err : new Error(String(err));

package/dist/plugins/shiftCrm/src/access.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { CRM_ACCESS_ROLE, CRM_BASE, enumSchema, idSchema, listParams, pathSegment, request, STRICT_OBJECT, withQuery, } from "./shared.js";
+import { CRM_ACCESS_ROLE, CRM_BASE, enumSchema, idSchema, pathSegment, request, STRICT_OBJECT, } from "./shared.js";
 export function registerAccessActions(rl) {
     rl.registerAction("access.me", {
         access: "read",
@@ -14,7 +14,7 @@ export function registerAccessActions(rl) {
         description: "List CRM access grants. Requires a CRM admin grant or admin:* permission.",
         inputSchema: t.Object({ includeRevoked: t.Optional(t.Boolean()) }, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/access`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/access`, { query: input });
             return body.grants;
         },
     });

package/dist/plugins/shiftCrm/src/accounts.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { CRM_BASE, createRecordFields, idSchema, listParams, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, updateRecordFields, withQuery, } from "./shared.js";
+import { CRM_BASE, createRecordFields, idSchema, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, updateRecordFields, } from "./shared.js";
 const accountListFields = {
     search: t.Optional(t.String({ minLength: 1, pattern: "\\S", description: "Name search" })),
     accountType: t.Optional(t.String({ minLength: 1, description: "Account type filter" })),
@@ -19,7 +19,7 @@ export function registerAccountActions(rl) {
         description: "List the first page of CRM accounts.",
         inputSchema: t.Object(accountListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/accounts`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/accounts`, { query: input });
             return body.accounts;
         },
     });
@@ -28,7 +28,7 @@ export function registerAccountActions(rl) {
         description: "List a cursor-paginated page of CRM accounts.",
         inputSchema: t.Object(accountListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            return request(ctx, withQuery(`${CRM_BASE}/accounts`, listParams(input)));
+            return request(ctx, `${CRM_BASE}/accounts`, { query: input });
         },
     });
     rl.registerAction("account.get", {

package/dist/plugins/shiftCrm/src/activities.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { assertTimeOrder, CRM_ACTIVITY_DIRECTION, CRM_ACTIVITY_STATUS, CRM_BASE, createRecordFields, enumSchema, idSchema, listParams, paginationFields, request, STRICT_OBJECT, timestampSchema, withQuery, } from "./shared.js";
+import { assertTimeOrder, CRM_ACTIVITY_DIRECTION, CRM_ACTIVITY_STATUS, CRM_BASE, createRecordFields, enumSchema, idSchema, paginationFields, request, STRICT_OBJECT, timestampSchema, } from "./shared.js";
 const activityListFields = {
     linkedRecordId: t.Optional(idSchema("Filter by linked CRM record ID")),
     status: t.Optional(enumSchema("Activity status", CRM_ACTIVITY_STATUS)),
@@ -11,7 +11,7 @@ export function registerActivityActions(rl) {
         description: "List the first page of CRM activities.",
         inputSchema: t.Object(activityListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/activities`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/activities`, { query: input });
             return body.activities;
         },
     });
@@ -20,7 +20,7 @@ export function registerActivityActions(rl) {
         description: "List a cursor-paginated page of CRM activities.",
         inputSchema: t.Object(activityListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            return request(ctx, withQuery(`${CRM_BASE}/activities`, listParams(input)));
+            return request(ctx, `${CRM_BASE}/activities`, { query: input });
         },
     });
     rl.registerAction("activity.log", {

package/dist/plugins/shiftCrm/src/credentials.js

@@ -0,0 +1,6 @@
+import { shiftClient } from "../../_shared/shiftCredentials.js";
+/**
+ * A user-subject Shift CRM API key, signed like every Shift key. The probe
+ * reads the key's own CRM access: a key without a grant is rejected there.
+ */
+export const { credential: shiftCrmCredential, request } = shiftClient("shiftCrm", { probe: "crm/access/me" });

package/dist/plugins/shiftCrm/src/index.js

@@ -2,6 +2,7 @@ import * as t from "typebox";
 import { registerAccessActions } from "./access.js";
 import { registerAccountActions } from "./accounts.js";
 import { registerActivityActions } from "./activities.js";
+import { shiftCrmCredential } from "./credentials.js";
 import { registerImportActions } from "./imports.js";
 import { registerOpportunityActions, registerPipelineActions, } from "./opportunities.js";
 import { registerPersonActions } from "./people.js";
@@ -10,6 +11,7 @@ import { registerTaskActions } from "./tasks.js";
 export default function shiftCrm(rl) {
     rl.setName("shiftCrm");
     rl.setVersion("0.1.0");
+    rl.setCredential(shiftCrmCredential);
     rl.setConnectionSchema(t.Object({
         apiKey: t.String({
             description: "User-subject Shift CRM API key minted by an operator via `bun run crm:access key`. It authenticates as its bound user, whose active CRM access grant authorizes data access. Regular Shift cloud service API keys (SHIFT_LABS_API_KEY) cannot reach CRM data.",

package/dist/plugins/shiftCrm/src/opportunities.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { CRM_BASE, CRM_PIPELINE_OUTCOME, createRecordFields, enumSchema, idSchema, listParams, nullableTimestamp, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, updateRecordFields, withQuery, } from "./shared.js";
+import { CRM_BASE, CRM_PIPELINE_OUTCOME, createRecordFields, enumSchema, idSchema, nullableTimestamp, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, updateRecordFields, } from "./shared.js";
 const opportunityListFields = {
     accountId: t.Optional(idSchema("Filter by account record ID")),
     pipelineId: t.Optional(idSchema("Filter by pipeline ID")),
@@ -70,7 +70,7 @@ export function registerOpportunityActions(rl) {
         description: "List the first page of CRM opportunities.",
         inputSchema: t.Object(opportunityListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/opportunities`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/opportunities`, { query: input });
             return body.opportunities;
         },
     });
@@ -79,7 +79,7 @@ export function registerOpportunityActions(rl) {
         description: "List a cursor-paginated page of CRM opportunities.",
         inputSchema: t.Object(opportunityListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            return request(ctx, withQuery(`${CRM_BASE}/opportunities`, listParams(input)));
+            return request(ctx, `${CRM_BASE}/opportunities`, { query: input });
         },
     });
     rl.registerAction("opportunity.get", {

package/dist/plugins/shiftCrm/src/people.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { assertTimeOrder, CRM_BASE, CRM_IDENTITY_KIND, createRecordFields, enumSchema, idSchema, listParams, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, updateRecordFields, withQuery, } from "./shared.js";
+import { assertTimeOrder, CRM_BASE, CRM_IDENTITY_KIND, createRecordFields, enumSchema, idSchema, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, updateRecordFields, } from "./shared.js";
 const personListFields = {
     search: t.Optional(t.String({ minLength: 1, pattern: "\\S", description: "Name search" })),
     accountId: t.Optional(idSchema("Filter by affiliated account record ID")),
@@ -55,7 +55,7 @@ export function registerPersonActions(rl) {
         description: "List the first page of CRM people.",
         inputSchema: t.Object(personListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/people`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/people`, { query: input });
             return body.people;
         },
     });
@@ -64,7 +64,7 @@ export function registerPersonActions(rl) {
         description: "List a cursor-paginated page of CRM people.",
         inputSchema: t.Object(personListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            return request(ctx, withQuery(`${CRM_BASE}/people`, listParams(input)));
+            return request(ctx, `${CRM_BASE}/people`, { query: input });
         },
     });
     rl.registerAction("person.get", {

package/dist/plugins/shiftCrm/src/records.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { CRM_BASE, CRM_PROPERTY_DATA_TYPE, enumSchema, idSchema, listParams, pathSegment, recordTypeSchema, request, STRICT_OBJECT, withQuery, } from "./shared.js";
+import { CRM_BASE, CRM_PROPERTY_DATA_TYPE, enumSchema, idSchema, pathSegment, recordTypeSchema, request, STRICT_OBJECT, } from "./shared.js";
 export function registerRecordActions(rl) {
     rl.registerAction("record.changeEvents", {
         access: "read",
@@ -16,7 +16,7 @@ export function registerRecordActions(rl) {
         description: "List governed custom-property definitions, optionally for one record type.",
         inputSchema: t.Object({ recordType: t.Optional(recordTypeSchema()) }, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/property-definitions`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/property-definitions`, { query: input });
             return body.propertyDefinitions;
         },
     });

package/dist/plugins/shiftCrm/src/shared.js

@@ -1,6 +1,7 @@
 import * as t from "typebox";
 import { cursorSchema, enumSchema, idSchema, timestampSchema, } from "../../_shared/shiftCloud.js";
-export { enumSchema, idSchema, listParams, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, withQuery, } from "../../_shared/shiftCloud.js";
+export { enumSchema, idSchema, pathSegment, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, } from "../../_shared/shiftCloud.js";
+export { request } from "./credentials.js";
 export const CRM_BASE = "/v1/crm";
 export const CRM_ACCESS_ROLE = ["user", "admin"];
 export const CRM_RECORD_TYPE = [

package/dist/plugins/shiftCrm/src/tasks.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { CRM_BASE, CRM_TASK_PRIORITY, CRM_TASK_STATUS, createRecordFields, enumSchema, idSchema, listParams, nullableTimestamp, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, updateRecordFields, withQuery, } from "./shared.js";
+import { CRM_BASE, CRM_TASK_PRIORITY, CRM_TASK_STATUS, createRecordFields, enumSchema, idSchema, nullableTimestamp, paginationFields, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, updateRecordFields, } from "./shared.js";
 const taskListFields = {
     linkedRecordId: t.Optional(idSchema("Filter by linked CRM record ID")),
     status: t.Optional(enumSchema("Task status", CRM_TASK_STATUS)),
@@ -12,7 +12,7 @@ export function registerTaskActions(rl) {
         description: "List the first page of CRM tasks.",
         inputSchema: t.Object(taskListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${CRM_BASE}/tasks`, listParams(input)));
+            const body = await request(ctx, `${CRM_BASE}/tasks`, { query: input });
             return body.tasks;
         },
     });
@@ -21,7 +21,7 @@ export function registerTaskActions(rl) {
         description: "List a cursor-paginated page of CRM tasks.",
         inputSchema: t.Object(taskListFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            return request(ctx, withQuery(`${CRM_BASE}/tasks`, listParams(input)));
+            return request(ctx, `${CRM_BASE}/tasks`, { query: input });
         },
     });
     rl.registerAction("task.get", {

package/dist/plugins/shiftObjects/src/credentials.js

@@ -0,0 +1,2 @@
+import { shiftClient } from "../../_shared/shiftCredentials.js";
+export const { credential: shiftObjectsCredential, request } = shiftClient("shiftObjects");

package/dist/plugins/shiftObjects/src/index.js

@@ -1,4 +1,5 @@
 import * as t from "typebox";
+import { shiftObjectsCredential } from "./credentials.js";
 import { registerObjectActions } from "./objects.js";
 /**
  * Shift Objects — the organization's durable object bucket in the
@@ -10,6 +11,7 @@ import { registerObjectActions } from "./objects.js";
 export default function shiftObjects(rl) {
     rl.setName("shiftObjects");
     rl.setVersion("0.1.0");
+    rl.setCredential(shiftObjectsCredential);
     rl.setConnectionSchema(t.Object({
         apiKey: t.String({
             description: "Shift Labs API key",

package/dist/plugins/shiftObjects/src/objects.js

@@ -1,8 +1,9 @@
 import { writeFile } from "node:fs/promises";
 import { basename } from "node:path";
 import * as t from "typebox";
-import { enumSchema, listParams, pathSegment, request, STRICT_OBJECT, withQuery, } from "../../_shared/shiftCloud.js";
+import { enumSchema, pathSegment, STRICT_OBJECT, } from "../../_shared/shiftCloud.js";
 import { GENERAL_MEDIA_TYPES, mediaTypeFromPath, putThroughGrant, SIGNED_UPLOAD_MAX_BYTES, statUploadFile, } from "../../_shared/shiftUpload.js";
+import { request } from "./credentials.js";
 const OBJECTS_BASE = "/v1/services/objects";
 export const OBJECT_STATUS = ["pending_upload", "ready", "archived"];
 export const OBJECT_LINK_TARGET = [
@@ -83,7 +84,7 @@ export function registerObjectActions(rl) {
                     metadata: fields.metadata,
                 }),
             });
-            await putThroughGrant(created.upload, fields.path, contentType, sizeBytes, "Object upload");
+            await putThroughGrant(created.upload, fields.path, contentType, "Object upload");
             return request(ctx, `${OBJECTS_BASE}/objects/${pathSegment(created.object.id)}/complete`, { method: "POST" });
         },
     });
@@ -97,7 +98,7 @@ export function registerObjectActions(rl) {
             ...provenanceFields,
         }, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery(`${OBJECTS_BASE}/objects`, listParams(input)));
+            const body = await request(ctx, `${OBJECTS_BASE}/objects`, { query: input });
             return body.objects;
         },
     });

package/dist/plugins/shiftOcr/src/credentials.js

@@ -0,0 +1,8 @@
+import { shiftClient } from "../../_shared/shiftCredentials.js";
+/**
+ * Extraction runs synchronously; a long multi-page PDF takes minutes, not
+ * seconds. The target declares that deadline so the transport holds the
+ * request open for the whole extraction.
+ */
+export const EXTRACT_TIMEOUT_MS = 5 * 60_000;
+export const { credential: shiftOcrCredential, request } = shiftClient("shiftOcr", { timeoutMs: EXTRACT_TIMEOUT_MS });

package/dist/plugins/shiftOcr/src/index.js

@@ -1,8 +1,9 @@
-import { readFile } from "node:fs/promises";
 import { basename, extname } from "node:path";
 import * as t from "typebox";
-import { request, STRICT_OBJECT } from "../../_shared/shiftCloud.js";
+import { readLocalFile } from "../../_shared/localFile.js";
+import { pathSegment, STRICT_OBJECT, } from "../../_shared/shiftCloud.js";
 import { putThroughGrant, SIGNED_UPLOAD_MAX_BYTES, statUploadFile, } from "../../_shared/shiftUpload.js";
+import { request, shiftOcrCredential } from "./credentials.js";
 /**
  * Shift OCR — text and structured-field extraction from images and
  * PDFs through the Shift cloud OCR service. The API key is the tenant
@@ -30,8 +31,6 @@ const DOCUMENT_TYPES = {
  * anything larger uploads to the object bucket instead.
  */
 const MAX_INLINE_BYTES = 20 * 1024 * 1024;
-/** Extraction runs synchronously; a long multi-page PDF takes minutes, not seconds. */
-const EXTRACT_TIMEOUT_MS = 5 * 60_000;
 async function documentFromPath(ctx, path) {
     const extension = extname(path).slice(1).toLowerCase();
     const imageType = IMAGE_TYPES[extension];
@@ -45,7 +44,12 @@ async function documentFromPath(ctx, path) {
     const mediaType = (imageType ?? documentType);
     const sizeBytes = await statUploadFile(path, SIGNED_UPLOAD_MAX_BYTES);
     if (sizeBytes <= MAX_INLINE_BYTES) {
-        const url = `data:${mediaType};base64,${(await readFile(path)).toString("base64")}`;
+        const bytes = await readLocalFile(path, {
+            subject: "File",
+            maxBytes: MAX_INLINE_BYTES,
+            oversize: "File grew past the inline limit while reading; retry",
+        });
+        const url = `data:${mediaType};base64,${bytes.toString("base64")}`;
         return imageType
             ? { type: "image", url }
             : { type: "document", url, name: basename(path) };
@@ -60,8 +64,8 @@ async function documentFromPath(ctx, path) {
             filename: basename(path),
         }),
     });
-    await putThroughGrant(created.upload, path, mediaType, sizeBytes);
-    await request(ctx, `/v1/services/objects/objects/${created.object.id}/complete`, { method: "POST" });
+    await putThroughGrant(created.upload, path, mediaType);
+    await request(ctx, `/v1/services/objects/objects/${pathSegment(created.object.id)}/complete`, { method: "POST" });
     return { type: "object", objectId: created.object.id };
 }
 function documentFromUrl(url, kind) {
@@ -81,6 +85,7 @@ function documentFromUrl(url, kind) {
 export default function shiftOcr(rl) {
     rl.setName("shiftOcr");
     rl.setVersion("0.1.0");
+    rl.setCredential(shiftOcrCredential);
     rl.setConnectionSchema(t.Object({
         // Same Shift Labs API key as the shiftLabs plugin; the cloud
         // derives the organization from it, so no org ID is needed.
@@ -160,6 +165,7 @@ export default function shiftOcr(rl) {
                 : fields.path
                     ? await documentFromPath(ctx, fields.path)
                     : documentFromUrl(fields.url, fields.kind);
+            // The target's declared EXTRACT_TIMEOUT_MS covers the synchronous run.
             return await request(ctx, "/v1/services/ocr/extract", {
                 method: "POST",
                 body: JSON.stringify({
@@ -177,7 +183,7 @@ export default function shiftOcr(rl) {
                         }
                         : {}),
                 }),
-            }, EXTRACT_TIMEOUT_MS);
+            });
         },
     });
     rl.registerAction("ocr.providers", {

package/dist/plugins/shiftPages/src/index.js

@@ -1,5 +1,6 @@
 import * as t from "typebox";
 import { registerPageActions } from "./pages.js";
+import { shiftPagesCredential } from "./shared.js";
 /**
  * Shift Pages — hosted HTML pages in the Shift cloud: draft, publish,
  * archive, share with invited viewers, and resolve authenticated
@@ -9,6 +10,7 @@ import { registerPageActions } from "./pages.js";
 export default function shiftPages(rl) {
     rl.setName("shiftPages");
     rl.setVersion("0.1.0");
+    rl.setCredential(shiftPagesCredential);
     rl.setConnectionSchema(t.Object({
         apiKey: t.String({
             description: "Shift Labs API key",

package/dist/plugins/shiftPages/src/pages.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { enumSchema, idSchema, listParams, PAGE_STATUS, PAGE_TYPE, PAGE_VISIBILITY, pageRenderUrl, pathSegment, request, STRICT_OBJECT, timestampSchema, withQuery, } from "./shared.js";
+import { enumSchema, idSchema, PAGE_STATUS, PAGE_TYPE, PAGE_VISIBILITY, pageRenderUrl, pathSegment, request, STRICT_OBJECT, timestampSchema, } from "./shared.js";
 const PageSlug = t.String({
     minLength: 1,
     maxLength: 120,
@@ -26,7 +26,9 @@ export function registerPageActions(rl) {
             })),
         }, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery("/v1/pages", listParams(input)));
+            const body = await request(ctx, "/v1/pages", {
+                query: input,
+            });
             return body.pages;
         },
     });
@@ -48,7 +50,7 @@ export function registerPageActions(rl) {
             "deployment must belong to the API key's organization.",
         inputSchema: t.Object({ deploymentId: idSchema("Managed Vex deployment ID") }, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, withQuery("/v1/pages/vex-artifacts", listParams(input)));
+            const body = await request(ctx, "/v1/pages/vex-artifacts", { query: input });
             return body.artifacts;
         },
     });

package/dist/plugins/shiftPages/src/shared.js

@@ -1,5 +1,7 @@
 import { baseUrl, pathSegment } from "../../_shared/shiftCloud.js";
-export { enumSchema, idSchema, listParams, pathSegment, request, STRICT_OBJECT, timestampSchema, withQuery, } from "../../_shared/shiftCloud.js";
+import { shiftClient } from "../../_shared/shiftCredentials.js";
+export { enumSchema, idSchema, pathSegment, STRICT_OBJECT, timestampSchema, } from "../../_shared/shiftCloud.js";
+export const { credential: shiftPagesCredential, request } = shiftClient("shiftPages");
 export const PAGE_STATUS = ["draft", "published", "archived"];
 export const PAGE_TYPE = [
     "hosted_html",

package/dist/plugins/shiftTranscription/src/index.js

@@ -1,4 +1,5 @@
 import * as t from "typebox";
+import { shiftTranscriptionCredential } from "./shared.js";
 import { registerTranscriptionActions } from "./transcription.js";
 /**
  * Shift Transcription — audio and video transcription through the
@@ -10,6 +11,7 @@ import { registerTranscriptionActions } from "./transcription.js";
 export default function shiftTranscription(rl) {
     rl.setName("shiftTranscription");
     rl.setVersion("0.2.0");
+    rl.setCredential(shiftTranscriptionCredential);
     rl.setConnectionSchema(t.Object({
         apiKey: t.String({
             description: "Shift Labs API key",

package/dist/plugins/shiftTranscription/src/shared.js

@@ -1,3 +1,13 @@
-export { enumSchema, pathSegment, request, SHIFT_REQUEST_TIMEOUT_MS, STRICT_OBJECT, } from "../../_shared/shiftCloud.js";
+import { shiftClient } from "../../_shared/shiftCredentials.js";
+export { enumSchema, pathSegment, STRICT_OBJECT, } from "../../_shared/shiftCloud.js";
+/** The longest server-held wait /await accepts: waitSeconds is capped at 120. */
+export const MAX_AWAIT_WAIT_MS = 120_000;
+/**
+ * The target's deadline: the /await endpoint holds the request open for up
+ * to MAX_AWAIT_WAIT_MS, so the transport allows that wait plus 60 s for the
+ * exchange itself. Every other transcription route answers well within it.
+ */
+export const AWAIT_DEADLINE_MS = MAX_AWAIT_WAIT_MS + 60_000;
+export const { credential: shiftTranscriptionCredential, request } = shiftClient("shiftTranscription", { timeoutMs: AWAIT_DEADLINE_MS });
 export const TRANSCRIPTION_LANGUAGE = ["auto", "en", "he"];
 export const TRANSCRIPT_FORMAT = ["txt", "srt", "vtt", "json"];

package/dist/plugins/shiftTranscription/src/transcription.js

@@ -1,6 +1,6 @@
 import * as t from "typebox";
 import { AUDIO_VIDEO_MEDIA_TYPES, putThroughGrant, requireMediaType, SIGNED_UPLOAD_MAX_BYTES, statUploadFile, } from "../../_shared/shiftUpload.js";
-import { enumSchema, pathSegment, request, SHIFT_REQUEST_TIMEOUT_MS, STRICT_OBJECT, TRANSCRIPT_FORMAT, TRANSCRIPTION_LANGUAGE, } from "./shared.js";
+import { enumSchema, pathSegment, request, STRICT_OBJECT, TRANSCRIPT_FORMAT, TRANSCRIPTION_LANGUAGE, } from "./shared.js";
 /** Transcript previews returned into the sandbox are capped, not truncated silently. */
 const MAX_TRANSCRIPT_BYTES = 2 * 1024 * 1024;
 const Id = t.String({ minLength: 1, pattern: "\\S" });
@@ -48,7 +48,7 @@ export function registerTranscriptionActions(rl) {
                     sizeBytes,
                 }),
             });
-            await putThroughGrant(created.upload, fields.path, contentType, sizeBytes, "Media upload");
+            await putThroughGrant(created.upload, fields.path, contentType, "Media upload");
             await request(ctx, `/v1/services/transcription/assets/${pathSegment(created.asset.id)}/complete`, { method: "POST" });
             const job = await request(ctx, "/v1/services/transcription/jobs", {
                 method: "POST",
@@ -63,9 +63,9 @@ export function registerTranscriptionActions(rl) {
             if (!fields.waitSeconds)
                 return job;
             const timeoutMs = Math.min(Math.max(fields.waitSeconds, 1), 120) * 1000;
-            // The server holds the request open for up to timeoutMs, so the
-            // client deadline is that wait plus the ordinary allowance.
-            return request(ctx, `/v1/services/transcription/jobs/${pathSegment(job.id)}/await?timeoutMs=${timeoutMs}`, { method: "POST" }, timeoutMs + SHIFT_REQUEST_TIMEOUT_MS);
+            // The server holds the request open for up to timeoutMs; the
+            // target's declared AWAIT_DEADLINE_MS covers that wait.
+            return request(ctx, `/v1/services/transcription/jobs/${pathSegment(job.id)}/await?timeoutMs=${timeoutMs}`, { method: "POST" });
         },
     });
     rl.registerAction("transcription.job.list", {

package/dist/plugins/shiftWork/src/index.js

@@ -2,6 +2,7 @@ import * as t from "typebox";
 import { registerIssueViewActions } from "./issue-views.js";
 import { registerIssueActions } from "./issues.js";
 import { registerProjectActions } from "./projects.js";
+import { shiftWorkCredential } from "./shared.js";
 /**
  * Shift Work — the work-tracking domain of the Shift cloud: Projects,
  * Issues (with dependencies and comments), and saved Issue Views.
@@ -11,6 +12,7 @@ import { registerProjectActions } from "./projects.js";
 export default function shiftWork(rl) {
     rl.setName("shiftWork");
     rl.setVersion("0.1.0");
+    rl.setCredential(shiftWorkCredential);
     rl.setConnectionSchema(t.Object({
         apiKey: t.String({
             description: "Shift Labs API key",

package/dist/plugins/shiftWork/src/issue-views.js

@@ -1,5 +1,5 @@
 import * as t from "typebox";
-import { cursorSchema, enumSchema, ISSUE_PRIORITY, ISSUE_STATUS, ISSUE_VIEW_GROUP, ISSUE_VIEW_LAYOUT, ISSUE_VIEW_SORT, ISSUE_VIEW_VISIBILITY, idSchema, listParams, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, withQuery, } from "./shared.js";
+import { cursorSchema, enumSchema, ISSUE_PRIORITY, ISSUE_STATUS, ISSUE_VIEW_GROUP, ISSUE_VIEW_LAYOUT, ISSUE_VIEW_SORT, ISSUE_VIEW_VISIBILITY, idSchema, pathSegment, request, STRICT_OBJECT, STRICT_UPDATE_OBJECT, timestampSchema, } from "./shared.js";
 const viewFields = {
     name: t.String({
         minLength: 1,
@@ -38,7 +38,7 @@ export function registerIssueViewActions(rl) {
         description: "List the first page of personal and organization Issue Views.",
         inputSchema: t.Object(listFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            const body = await request(ctx, `/v1/issue-views?${listParams(input)}`);
+            const body = await request(ctx, "/v1/issue-views", { query: input });
             return body.views;
         },
     });
@@ -47,7 +47,7 @@ export function registerIssueViewActions(rl) {
         description: "List a cursor-paginated page of Issue Views.",
         inputSchema: t.Object(listFields, STRICT_OBJECT),
         async execute(input, ctx) {
-            return request(ctx, `/v1/issue-views?${listParams(input)}`);
+            return request(ctx, "/v1/issue-views", { query: input });
         },
     });
     rl.registerAction("issueView.get", {
@@ -69,7 +69,7 @@ export function registerIssueViewActions(rl) {
         }, STRICT_OBJECT),
         async execute(input, ctx) {
             const { id, ...pagination } = input;
-            const body = await request(ctx, withQuery(`/v1/issue-views/${pathSegment(id)}/issues`, listParams(pagination)));
+            const body = await request(ctx, `/v1/issue-views/${pathSegment(id)}/issues`, { query: pagination });
             return body.issues;
         },
     });
@@ -83,7 +83,7 @@ export function registerIssueViewActions(rl) {
         }, STRICT_OBJECT),
         async execute(input, ctx) {
             const { id, ...pagination } = input;
-            return request(ctx, withQuery(`/v1/issue-views/${pathSegment(id)}/issues`, listParams(pagination)));
+            return request(ctx, `/v1/issue-views/${pathSegment(id)}/issues`, { query: pagination });
         },
     });
     rl.registerAction("issueView.create", {