Changelog
Provider operations now place each declaration axis in one namespace. Safety uses the required riskClass field, access uses connectionMode, and request examples use examples. Documentation locale keys, approval overrides, timeouts, error codes, and connection correlation parameters move to the operation root.
After the flat Provider SDK release is available, update the provider's SDK pin and migrate the whole repository in one change. Replace annotations.readOnly/destructive with an authored riskClass; do not copy the old implicit write fallback without reviewing the operation. Move toolRouter.connectionMode and connectionExternalRefParam to the operation root, and declare connectionMode on every operation of a credential-bearing provider. Move approval, timeoutMs, locale keys, normalization note keys, and errorCodes to the root. Replace inputExamples and docs.requestExample with examples entries that use scenarioKey and input. Remove annotations, toolRouter, docs, derivations, rateLimit, retryOnAuthRefresh, and toolRouter.name. Keep approval only when it intentionally differs from the riskClass-derived default. Do not partially migrate one provider repository.