refactor(providers): port providers to hosted runtime and delete tests

Author: hyrious

AGENTS.md

@@ -29,6 +29,7 @@
 ## Providers
 
 - Provider code normally lives in `src/providers/<service>/definition.ts`, `actions.ts`, `executors.ts`, and provider-local runtime helper files when needed.
+- When purely migrating a provider from the OOMOL-hosted connector, do not copy or add provider-local tests because the source repository already owns that regression coverage. Tests may be removed from this repository after an OSS-originated provider change is reverse-ported and covered in private. Keep open-source-only shared-infrastructure tests beside the shared module rather than inside a provider directory.
 - Prefer provider-local constants for official scopes, permissions, URLs, and API versions. Action `requiredScopes` should use provider-native scopes/capabilities, not private internal aliases.
 - Avoid repeated action-name wiring. Define action handlers once and derive executor maps through shared provider runtime helpers when an existing helper fits. Do not add provider-local action-name unions, tuple builders, or casts solely to prove the handler keys to TypeScript.
 - Do not import provider definitions from executor modules just to reuse metadata; inject catalog metadata from the server/loader side when needed.

src/core/json-schema.ts

@@ -163,8 +163,12 @@ export const jsonSchema = {
     return withOptions({ type: "string", pattern }, options);
   },
 
-  stringEnum(valuesOrDescription: string[] | string, optionsOrValues: JsonSchemaOptions | string[] = {}): JsonSchema {
-    const values = typeof valuesOrDescription === "string" ? (optionsOrValues as string[]) : valuesOrDescription;
+  stringEnum(
+    valuesOrDescription: readonly string[] | string,
+    optionsOrValues: JsonSchemaOptions | readonly string[] = {},
+  ): JsonSchema {
+    const values =
+      typeof valuesOrDescription === "string" ? (optionsOrValues as readonly string[]) : valuesOrDescription;
     const options =
       typeof valuesOrDescription === "string"
         ? { description: valuesOrDescription }

src/core/provider-definition.ts

@@ -4,16 +4,16 @@ import type { ActionDefinition, JsonSchema } from "./types.ts";
  * Input for defining one provider action without repeating provider-level
  * fields in every action object.
  */
-export type DefineProviderActionInput<TName extends string = string> = {
+export interface DefineProviderActionInput<TName extends string = string> {
   name: TName;
   description: string;
   inputSchema: JsonSchema;
   outputSchema: JsonSchema;
-  requiredScopes?: string[];
-  providerPermissions?: string[];
-  followUpActions?: string[];
+  requiredScopes?: readonly string[];
+  providerPermissions?: readonly string[];
+  followUpActions?: readonly string[];
   asyncLifecycle?: ActionDefinition["asyncLifecycle"];
-};
+}
 
 export type ProviderActionDefinition<TName extends string = string> = ActionDefinition & { name: TName };
 
@@ -32,11 +32,11 @@ export function defineProviderAction<TName extends string>(
     service,
     name: input.name,
     description: input.description,
-    requiredScopes: input.requiredScopes ?? [],
-    providerPermissions: input.providerPermissions ?? [],
+    requiredScopes: input.requiredScopes ? [...input.requiredScopes] : [],
+    providerPermissions: input.providerPermissions ? [...input.providerPermissions] : [],
     inputSchema: input.inputSchema,
     outputSchema: input.outputSchema,
-    followUpActions: input.followUpActions,
+    followUpActions: input.followUpActions ? [...input.followUpActions] : undefined,
     asyncLifecycle: input.asyncLifecycle,
   };
 }

src/providers/aliyun_oss/executors.ts

@@ -324,9 +324,9 @@ function createAliyunOssClient(input: AliyunClientOptions): AliyunOssClient {
   return new AliOss({
     accessKeyId: input.accessKeyId,
     accessKeySecret: input.accessKeySecret,
-    ...(input.securityToken ? { stsToken: input.securityToken } : {}),
+    stsToken: input.securityToken,
     endpoint: stripProtocol(normalizeEndpoint(input.endpoint)),
-    ...(input.bucket ? { bucket: input.bucket } : {}),
+    bucket: input.bucket,
     secure: true,
   }) as unknown as AliyunOssClient;
 }
@@ -681,11 +681,8 @@ function normalizeAliyunError(error: unknown, phase: "validate" | "execute"): Pr
 }
 
 function readAliyunErrorStatus(error: unknown): number | undefined {
-  if (!error || typeof error !== "object") {
-    return undefined;
-  }
-
-  const record = error as Record<string, unknown>;
+  const record = optionalRecord(error);
+  if (!record) return undefined;
   const status = record.status ?? record.statusCode ?? record.code;
   return typeof status === "number" ? status : undefined;
 }

src/providers/aliyun_oss/network-access.test.ts

@@ -86,13 +86,6 @@ const queryTimeProperties: Record<string, JsonSchema> = {
   query: s.string("An optional Simple Log Service search or analytic statement."),
 };
 
-export type AliyunSlsActionName =
-  | "list_projects"
-  | "list_projects_across_regions"
-  | "list_logstores"
-  | "query_logs"
-  | "get_histograms";
-
 export const aliyunSlsActions: ActionDefinition[] = [
   defineProviderAction(service, {
     name: "list_projects",