agent-radar
2ed3415fb7
Publish Claude Code Binaries / Stage and publish binaries (push) Canceled after 0s
Publish Tutti App Runtime / Build darwin-arm64 (push) Canceled after 0s
Publish Tutti App Runtime / Build darwin-amd64 (push) Canceled after 0s
Publish Tutti App Runtime / Build linux-amd64 (push) Canceled after 0s
Publish Tutti App Runtime / Build windows-amd64 (push) Canceled after 0s
Sync Tutti Agent Skills / sync (push) Canceled after 0s
Windows Agent Adapters / Test Windows agent adapters (push) Canceled after 0s
Windows Daemon Adapters / Test Windows daemon adapters (push) Canceled after 0s
Publish Tutti App Runtime / Publish runtime catalog (push) Canceled after 0s
Connector Contracts
@tutti-os/connector-contracts publishes host-neutral, versioned Connector
wire contracts and OpenAPI resources. It exposes no root barrel.
Public entries:
-
@tutti-os/connector-contracts/authorization/v1 -
@tutti-os/connector-contracts/openapi/connector-market.v1.yaml -
The protocol contains data only and has no React or transport dependency.
-
All untrusted payloads must pass the exported Valibot parsers before use.
-
Runtime credential routing remains outside this package.
V1 includes:
- strict
AuthorizationViewEnvelopeV1andAuthorizationEventEnvelopeV1contracts; - form, external-link, device-code, QR-code, progress, and result views;
- text, secret, number, select, boolean, and opaque local-file fields;
- view-aware event validation, including stale-view and unknown-field rejection;
- a narrow declarative
native_secretinteraction whose submission field must reference its only secret field; - symmetric localized initial views under
initialView.locales, with an explicitinitialView.defaultLocalefallback.
The declarative interaction is configuration, not executable Connector code.
The host adapter owns runtime viewId generation and calls the existing trusted
authorization backend after validation.