0.36.0

Connecta 0.36.0 adds a maintained QuickBooks Online Accounting provider for one fixed sandbox or production company per connector. It offers company identity, bounded record searches, individual records and hierarchical financial reports, with contact details and payment credentials withheld. Deployments can opt into customer creation, sparse customer naming updates and unsent US service-invoice creation by setting readOnly: false on the connector. Writes need a stable request ID and are never replayed automatically; the API hatch stays read-only, and invoice updates remain unavailable. See QuickBooks Online.

Static API OAuth gains two options used by QuickBooks and available to any api() connector: fixed callback parameters that must match before code exchange, and a trusted revocation endpoint with form or JSON framing. Connectors that don't configure them keep their behavior. Separately, the shared OAuth refresh coordinator now handles vendors that return unchanged refresh-token bytes after a successful refresh. This applies automatically to every OAuth connection, remote MCP included, with no setting.

@zackbart/connecta-eve now targets Eve 0.84 (>=0.84.0 <0.85.0), which is a breaking change for helper users. Upgrade the Eve app to 0.84.0 together with the helper, and retarget its undici override from eve@0.83.0>undici to eve@0.84.0>undici (Eve 0.84.0 still pins undici 8.10.2). The helper's two agent files need no edits. Endpoint instructions are now fetched once per turn through Eve's memo, and a cancelled turn no longer delays other sessions' fetches. See the package guide.

The operator UI build is smaller, with no change to pages or styles. The remaining entries are contributor-facing: retired characterization goldens and provider test mirrors in favor of outcome checks, archived historical evals, and a required outcome-eval CI job. Deployments without QuickBooks or Eve agents can upgrade without changes. No database conversion or token rotation is required.