@adminide-stack/form-builder-core 5.1.8-alpha.15 → 5.1.8-alpha.154

package/LICENSE

@@ -1,30 +1,71 @@
-PROPRIETARY SOFTWARE LICENSE
+PROPRIETARY SOFTWARE LICENSE AGREEMENT
 
-Copyright (c) 2025 CDMBase. All Rights Reserved.
+Copyright (c) 2026 CDEBase Inc. All Rights Reserved.
 
-This software and associated documentation files (the "Software") are the 
-proprietary and confidential property of CDMBase.
+NOTICE TO USER: THIS IS A CONTRACT. BY INSTALLING, COPYING, OR OTHERWISE
+USING THE SOFTWARE, YOU AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE.
+IF YOU DO NOT AGREE TO THE TERMS OF THIS LICENSE, DO NOT INSTALL, COPY,
+OR USE THE SOFTWARE.
 
-ALL RIGHTS RESERVED.
+NO LICENSE GRANTED
+   No license, express or implied, is granted to any person or entity.
+   All rights are reserved by CDEBase Inc. Any use of this software
+   without prior written authorization from CDEBase Inc. is strictly
+   prohibited.
 
-No part of this Software may be reproduced, distributed, transmitted, 
-displayed, published, or broadcast in any form or by any means, electronic, 
-mechanical, photocopying, recording, or otherwise, without the prior written 
-permission of CDMBase.
+RESTRICTIONS
+   You may NOT:
+   a) Copy, modify, adapt, translate, reverse engineer, decompile, or
+      disassemble the software or create derivative works based on it
+   b) Distribute, sublicense, lease, rent, loan, or otherwise transfer
+      the software to any third party
+   c) Remove or alter any proprietary notices, labels, or marks on the
+      software
+   d) Use the software to develop competing products or services
+   e) Publicly disclose any benchmarking or performance results
+   f) Use the software in any manner that violates applicable laws or
+      regulations
+   g) Access, view, or use any portion of the source code without
+      explicit prior written consent from CDEBase Inc.
 
-The Software is provided to authorized users only under separate written 
-agreement and may not be used, copied, modified, merged, published, distributed, 
-sublicensed, and/or sold without express written permission from CDMBase.
+OWNERSHIP
+   This software is the exclusive proprietary property of CDEBase Inc.
+   and is protected by copyright laws and international treaty provisions.
+   CDEBase Inc. retains all rights, title, and interest in and to the
+   software, including all copyrights, patents, trade secrets, trademarks,
+   and other intellectual property rights. No rights are transferred or
+   conveyed by possession or access to this software.
 
-UNAUTHORIZED USE, REPRODUCTION, OR DISTRIBUTION OF THIS SOFTWARE, OR ANY 
-PORTION OF IT, MAY RESULT IN SEVERE CIVIL AND CRIMINAL PENALTIES, AND WILL 
-BE PROSECUTED TO THE MAXIMUM EXTENT POSSIBLE UNDER LAW.
+CONFIDENTIALITY
+   The software contains trade secrets and proprietary information of
+   CDEBase Inc. You agree to maintain strict confidentiality of the
+   software and not disclose it, in whole or in part, to any third party
+   without prior written consent of CDEBase Inc. This obligation survives
+   termination of any agreement with CDEBase Inc.
 
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 
-CDMBase BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN 
-ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION 
-WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+TERMINATION
+   Any unauthorized use automatically and immediately terminates all
+   permissions. CDEBase Inc. may seek all available legal and equitable
+   remedies, including injunctive relief, for any unauthorized use or
+   disclosure.
 
-For licensing inquiries, please contact: legal@cdmbase.com
+WARRANTY DISCLAIMER
+   THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS
+   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND
+   NONINFRINGEMENT.
+
+LIMITATION OF LIABILITY
+   IN NO EVENT SHALL CDEBASE INC. BE LIABLE FOR ANY SPECIAL, INCIDENTAL,
+   INDIRECT, OR CONSEQUENTIAL DAMAGES WHATSOEVER ARISING OUT OF THE USE
+   OF OR INABILITY TO USE THE SOFTWARE.
+
+GOVERNING LAW
+   This agreement shall be governed by and construed in accordance with
+   the laws of the jurisdiction in which CDEBase Inc. is registered,
+   without regard to its conflict of law provisions.
+
+For licensing inquiries, contact: legal@cdebase.com
+
+CDEBase Inc.
+All Rights Reserved.

package/lib/config/cdnConfig.d.ts

@@ -1,13 +1,17 @@
 /**
- * CDN / asset-URL configuration.
+ * CDN / asset-URL configuration for connector artwork.
  *
  * Connector configs store only the *path* portion
  * (e.g. `_side/thirdparty/logos/gmail.svg`); call `iurl(path)` to get the
  * full URL at runtime.
  *
- * The CDN base is read from `AWS_CDN_URL` env var via `setCdnBase()`.
- * Browser packages call `setCdnBase(config.AWS_CDN_URL)` at init time.
+ * Logos are served from the `cde-extensions` bucket (the same CDN that fronts
+ * the connector registry and pods), *not* from the tenant upload bucket that
+ * `AWS_CDN_URL` points at. Override with the `EXTENSION_CDN_URL` env var via
+ * `setCdnBase()`; browser packages do that at init time.
  */
+/** `cde-extensions` bucket CDN — the default home for connector artwork. */
+export declare const DEFAULT_EXTENSION_CDN_BASE = "https://cdn.yantra.app";
 /** Set the CDN base URL (typically called once from env-config). */
 export declare function setCdnBase(base: string): void;
 /** Get the current CDN base URL. */

package/lib/config/cdnConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdnConfig.d.ts","sourceRoot":"","sources":["../../src/config/cdnConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG7C;AAED,oCAAoC;AACpC,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,0DAA0D;AAC1D,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOzC"}
+{"version":3,"file":"cdnConfig.d.ts","sourceRoot":"","sources":["../../src/config/cdnConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAInE,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAS7C;AAED,oCAAoC;AACpC,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,0DAA0D;AAC1D,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOzC"}

package/lib/config/cdnConfig.js

@@ -1,18 +1,28 @@
 /**
- * CDN / asset-URL configuration.
+ * CDN / asset-URL configuration for connector artwork.
  *
  * Connector configs store only the *path* portion
  * (e.g. `_side/thirdparty/logos/gmail.svg`); call `iurl(path)` to get the
  * full URL at runtime.
  *
- * The CDN base is read from `AWS_CDN_URL` env var via `setCdnBase()`.
- * Browser packages call `setCdnBase(config.AWS_CDN_URL)` at init time.
+ * Logos are served from the `cde-extensions` bucket (the same CDN that fronts
+ * the connector registry and pods), *not* from the tenant upload bucket that
+ * `AWS_CDN_URL` points at. Override with the `EXTENSION_CDN_URL` env var via
+ * `setCdnBase()`; browser packages do that at init time.
  */
-let _cdnBase = '';
+/** `cde-extensions` bucket CDN — the default home for connector artwork. */
+const DEFAULT_EXTENSION_CDN_BASE = 'https://cdn.yantra.app';
+let _cdnBase = DEFAULT_EXTENSION_CDN_BASE;
 /** Set the CDN base URL (typically called once from env-config). */
 function setCdnBase(base) {
-  // Strip trailing slash for consistency.
-  _cdnBase = base.endsWith('/') ? base.slice(0, -1) : base;
+  // Strip trailing slash for consistency. Empty/blank resets to the default
+  // so an unset env var can never degrade logos to host-relative 404s.
+  const trimmed = (base || '').trim();
+  if (!trimmed) {
+    _cdnBase = DEFAULT_EXTENSION_CDN_BASE;
+    return;
+  }
+  _cdnBase = trimmed.endsWith('/') ? trimmed.slice(0, -1) : trimmed;
 }
 /** Get the current CDN base URL. */
 function getCdnBase() {
@@ -26,4 +36,4 @@ function iurl(path) {
   // Strip leading slash so we don't end up with a double-slash.
   const clean = path.startsWith('/') ? path.slice(1) : path;
   return _cdnBase ? `${_cdnBase}/${clean}` : clean;
-}export{getCdnBase,iurl,setCdnBase};//# sourceMappingURL=cdnConfig.js.map
+}export{DEFAULT_EXTENSION_CDN_BASE,getCdnBase,iurl,setCdnBase};//# sourceMappingURL=cdnConfig.js.map

package/lib/config/cdnConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"cdnConfig.js","sources":["../../src/config/cdnConfig.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;;;;;;;;;AASG;AAIH,IAAA,QAAA,GAAA,EAAA;AACA;AAKA,SAAA,UAAA,CAAA,IAAA,EAAA;AACA;AAIA,EAAA,QAAA,GAAA,IAAA,CAAA,QAAA,CAAA,GAAA,CAAA,GAAA,IAAA,CAAA,KAAA,CAAA,CAAA,EAAA,EAAA,CAAA,GAAA,IAA0D;AAC1D;;;;;;;;;;;;;"}
+{"version":3,"file":"cdnConfig.js","sources":["../../src/config/cdnConfig.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;;;;;;;;;;;AAWG;AAEH;AACA,MAAA,0BAAa,GAAA;AAIb,IAAA,QAAA,GAAA,0BAAA;AACA;AAWA,SAAA,UAAA,CAAA,IAAA,EAAA;AACA;AAIA;AACA,EAAA,MAAA,OAAA,GAAA,CAAA,IAAA,MAAqB,EAAA,IAAM,EAAA;;;;;;;;;;;;;;;;;;;"}

package/lib/index.d.ts

@@ -10,4 +10,5 @@ export * from './utils/connectorFieldTokenResolver';
 export * from './utils/deepMergeFormSteps';
 export * from './utils/json';
 export * from './utils/schemaHelpers';
+export * from './utils/integrationCommands';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAC9F,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAC9F,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC"}

package/lib/index.js

@@ -1 +1 @@
-export{getCdnBase,iurl,setCdnBase}from'./config/cdnConfig.js';export{CONNECTOR_CATALOG_SAMPLE_CHUNK_SIZE,CONNECTOR_CATALOG_SAMPLE_ENTRIES,CONNECTOR_CATALOG_SAMPLE_ENTRY_BY_SCHEMA_ID}from'./config/connectorSampleOptions.generated.js';export{CONNECTOR_CATEGORIES}from'./config/configTypes.js';export{generateFunctionCode,generateHandlerBody,generateHandlerBodyWithReturn,generateStepFromFunction,generateStepFunctionsFromDB,wrapStepsInInngestFunction}from'./inngest/generateFunctionCode.js';export{getAvailableDefinitions,installLibraryForAutocomplete,setupMonacoAutocomplete,setupStepAutocomplete,updateAutocompleteConfig}from'./inngest/monacoAutocompleteIntegration.js';export{cleanStepCode,extractFunctionBody,extractStepVarName,generateFromExtractedFunctions}from'./inngest/stepGenerator.js';export{buildMetadataSchema,buildProviderConfig,buildProviderSeedFromConfig,buildProviderWithRefs,createOAuthSeedGenerator}from'./utils/authMetaDataSchema.js';export{resolveConnectorFieldTokensInString,resolveConnectorFieldTokensInValue}from'./utils/connectorFieldTokenResolver.js';export{deepMergeElements,deepMergeFormSteps}from'./utils/deepMergeFormSteps.js';export{flatten,unflatten}from'./utils/json.js';export{DatabaseType,FORM_METADATA_NODE_TYPE,FormType,SCHEMA_ID_OPTIONS,flattenSchemaWithUiContext,flattenSchemas,flattenUiSchema,isContributionSchemaId,parseSampleNodes}from'./utils/schemaHelpers.js';//# sourceMappingURL=index.js.map
+export{DEFAULT_EXTENSION_CDN_BASE,getCdnBase,iurl,setCdnBase}from'./config/cdnConfig.js';export{CONNECTOR_CATALOG_SAMPLE_CHUNK_SIZE,CONNECTOR_CATALOG_SAMPLE_ENTRIES,CONNECTOR_CATALOG_SAMPLE_ENTRY_BY_SCHEMA_ID}from'./config/connectorSampleOptions.generated.js';export{CONNECTOR_CATEGORIES}from'./config/configTypes.js';export{generateFunctionCode,generateHandlerBody,generateHandlerBodyWithReturn,generateStepFromFunction,generateStepFunctionsFromDB,wrapStepsInInngestFunction}from'./inngest/generateFunctionCode.js';export{getAvailableDefinitions,installLibraryForAutocomplete,setupMonacoAutocomplete,setupStepAutocomplete,updateAutocompleteConfig}from'./inngest/monacoAutocompleteIntegration.js';export{cleanStepCode,extractFunctionBody,extractStepVarName,generateFromExtractedFunctions}from'./inngest/stepGenerator.js';export{buildCredentialOAuthConfigKey,buildCredentialOAuthTokenVaultKeys,buildCredentialScopedSecretKey,buildMetadataSchema,buildNamespaceCredentialOAuthTokenVaultKeys,buildOAuthInstanceTokenVaultKeys,buildProviderConfig,buildProviderCredentialOAuthTokenVaultKeys,buildProviderSeedFromConfig,buildProviderWithRefs,createOAuthSeedGenerator,credentialIdFromOAuthConfigKey,credentialIdFromScopedSecretKey,isCredentialAccountConfigKey,isCredentialScopedSecretKey,namespaceFromOAuthConfigKey,stripCredentialAccountConfigKey,stripCredentialScopedSecretKey,toVaultPrefix}from'./utils/authMetaDataSchema.js';export{resolveConnectorFieldTokensInString,resolveConnectorFieldTokensInValue}from'./utils/connectorFieldTokenResolver.js';export{deepMergeElements,deepMergeFormSteps}from'./utils/deepMergeFormSteps.js';export{flatten,unflatten}from'./utils/json.js';export{DatabaseType,FORM_METADATA_NODE_TYPE,FormType,SCHEMA_ID_OPTIONS,flattenSchemaWithUiContext,flattenSchemas,flattenUiSchema,isContributionSchemaId,parseSampleNodes}from'./utils/schemaHelpers.js';export{buildCommandsFromActions,buildIntegrationConfigurationContribution,buildMenusFromCommands,buildParamBindings,extractTemplateUserFields,extractUserFieldsFromStepperFormMetadata,parseInputTemplate,resolveInputTemplate}from'./utils/integrationCommands.js';//# sourceMappingURL=index.js.map

package/lib/utils/authMetaDataSchema.d.ts

@@ -1,7 +1,7 @@
 import { ConnectorType } from 'common';
 import { ConnectorCategoryTuple, ConnectorConfig, CustomButtonConfig, FormFieldConfig, FormResourceConfig, MCPProviderConfig } from '../config/configTypes';
 type SampleFormGenerator = (title?: string, formIcon?: string, formExtensionId?: string) => any[];
-interface ProviderTemplateSeed {
+export interface ProviderTemplateSeed {
     key: string;
     providerId: string;
     title: string;
@@ -179,7 +179,96 @@ export declare const buildProviderConfig: (providerConfig: CustomProviderConfigI
     }[];
 };
 export declare function buildProviderSeedFromConfig(provider: ConnectorConfig | MCPProviderConfig, connectorType: ConnectorType): ProviderTemplateSeed;
-export declare function createOAuthSeedGenerator(seeds: ProviderTemplateSeed[]): SampleFormGenerator;
+/**
+ * Normalize a provider id or form namespace into a vault secret key prefix.
+ * e.g. `gmail-app-hk7zf7w9` → `GMAIL_APP_HK7ZF7W9`
+ */
+export declare const toVaultPrefix: (value: string) => string;
+/**
+ * Per-form-instance vault keys for non-account-specific secrets (e.g. API key fields).
+ *
+ * Do NOT use these for OAuth access/refresh tokens when multiple accounts can share
+ * one published form — connecting account B would overwrite account A's vault entry.
+ * Access/refresh live under per-credential `configKey.accounts.{id}.*` and durable
+ * `CRED_<id>_*` vault keys via syncOAuthTokensToCredentialVault.
+ *
+ * Client id/secret stay provider-scoped (shared OAuth app credentials).
+ */
+export declare const buildOAuthInstanceTokenVaultKeys: (namespace: string) => {
+    /** @deprecated Do not wire access tokens to this shared key — use CRED_* instead. */
+    readonly accessToken: `${string}_ACCESS_TOKEN`;
+    /** @deprecated Do not wire refresh tokens to this shared key — use CRED_* instead. */
+    readonly refreshToken: `${string}_REFRESH_TOKEN`;
+    readonly apiKey: `${string}_API_KEY`;
+};
+/**
+ * Credential-scoped vault key: `{BASE_KEY}_{credentialId}`.
+ *
+ * This is the platform's own convention — `preferences-service` resolves a
+ * `format: 'secret'` config key to `${defaultValueSource.secretKey}_${credentialId}`
+ * on both read and write whenever the node context carries a `credentialId`.
+ * API-key connectors reuse the exact same shape so several credentials for one
+ * provider can coexist in a project/env instead of overwriting each other's
+ * shared `PROVIDER_API_KEY` entry (the same isolation OAuth gets from its
+ * per-account configKey).
+ *
+ * Idempotent when `baseSecretKey` is already scoped to the same credential.
+ */
+export declare const buildCredentialScopedSecretKey: (baseSecretKey: string, credentialId: string) => string;
+/** True when a vault key already carries a `_{credentialId}` suffix. */
+export declare const isCredentialScopedSecretKey: (secretKey: string) => boolean;
+/** Strip `_{credentialId}` to recover the catalog/base vault key. */
+export declare const stripCredentialScopedSecretKey: (secretKey: string) => string;
+/** credentialId embedded in a scoped vault key, if any. */
+export declare const credentialIdFromScopedSecretKey: (secretKey: string) => string | null;
+/**
+ * Durable per-credential token vault keys. Used after OAuth connect so each
+ * FormBuilderCredential keeps its own token pair even when several credentials
+ * share the same published template/configKey staging path.
+ */
+export declare const buildCredentialOAuthTokenVaultKeys: (credentialId: string) => {
+    readonly accessToken: `${string}_ACCESS_TOKEN`;
+    readonly refreshToken: `${string}_REFRESH_TOKEN`;
+};
+/**
+ * Provider-scoped per-credential OAuth vault keys (e.g. OAuth callback writes
+ * `GOOGLE_GMAIL_ACCESS_TOKEN_{credentialId}` to Personal Vault).
+ */
+export declare const buildProviderCredentialOAuthTokenVaultKeys: (providerId: string, credentialId: string) => {
+    readonly accessToken: `${string}_ACCESS_TOKEN_${string}`;
+    readonly refreshToken: `${string}_REFRESH_TOKEN_${string}`;
+};
+/**
+ * Namespace-scoped per-credential OAuth vault keys (`google_gmail-app` → `GOOGLE_GMAIL_APP_*_{id}`).
+ */
+export declare const buildNamespaceCredentialOAuthTokenVaultKeys: (namespace: string, credentialId: string) => {
+    readonly accessToken: `${string}_ACCESS_TOKEN_${string}`;
+    readonly refreshToken: `${string}_REFRESH_TOKEN_${string}`;
+};
+/** True when configKey is already scoped to a FormBuilder credential account. */
+export declare const isCredentialAccountConfigKey: (configKey: string) => boolean;
+/** Strip `.accounts.{credentialId}` to recover the published template configKey. */
+export declare const stripCredentialAccountConfigKey: (configKey: string) => string;
+/** credentialId embedded in an account-scoped configKey, if any. */
+export declare const credentialIdFromOAuthConfigKey: (configKey: string) => string | null;
+/**
+ * Build the per-credential OAuth configKey used for connect / refresh / disconnect.
+ * Idempotent when `baseConfigKey` is already account-scoped for the same id.
+ */
+export declare const buildCredentialOAuthConfigKey: (baseConfigKey: string, credentialId: string) => string;
+/** Extract the form namespace from an oauthConnector configKey path. */
+export declare const namespaceFromOAuthConfigKey: (configKey: string) => string | null;
+export interface SeedGeneratorOptions {
+    /**
+     * Exact namespace (== formId) per seed, aligned by index. Pass a published template's
+     * key to regenerate a form that is identity-compatible with it - same formId and the
+     * same `integrationSettings.settings.<type>.<ns>.oauthConnector` configuration keys -
+     * so stored credentials and OAuth writes keep resolving. Omitted entries fall back to
+     * the random-suffix default (new-form behavior).
+     */
+    namespaces?: Array<string | undefined>;
+}
+export declare function createOAuthSeedGenerator(seeds: ProviderTemplateSeed[], options?: SeedGeneratorOptions): SampleFormGenerator;
 export declare const buildProviderWithRefs: (provider: any, sampleNodes: any[]) => any;
 export declare const buildMetadataSchema: (sampleNodes: any[]) => ({
     schemaId: string;

package/lib/utils/authMetaDataSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authMetaDataSchema.d.ts","sourceRoot":"","sources":["../../src/utils/authMetaDataSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAyD,MAAM,QAAQ,CAAC;AAClH,OAAO,EAEH,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACpB,MAAM,uBAAuB,CAAC;AAI/B,KAAK,mBAAmB,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;AAElG,UAAU,oBAAoB;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,UAAU,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE;QACX,IAAI,EAAE,OAAO,GAAG,aAAa,CAAC;QAC9B,UAAU,EAAE,SAAS,GAAG,cAAc,GAAG,iBAAiB,CAAC;QAC3D,SAAS,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,cAAc,GAAG,iBAAiB,CAAC;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IACzC,uBAAuB,EAAE,OAAO,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAkED,eAAO,MAAM,mBAAmB,GAAI,gBAAgB,yBAAyB,EAAE,eAAe,KAAK,GAAG,KAAK;;;;;;;cA9ExF,MAAM;gBAAU;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE;;;;;;;;;;;cAoD3B,GAAG;;;;;;;;kBAjFjB,OAAO,GAAG,aAAa;wBACjB,SAAS,GAAG,cAAc,GAAG,iBAAiB;uBAC/C,MAAM;;kBA+FW,GAAG;;mBAhDgB,MAAM;mBAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;cApBzD,MAAM;gBAAU;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE;;;;;;;;;;;cAoD3B,GAAG;;;;;;;;kBAjFjB,OAAO,GAAG,aAAa;wBACjB,SAAS,GAAG,cAAc,GAAG,iBAAiB;uBAC/C,MAAM;;kBA+FW,GAAG;;mBAhDgB,MAAM;mBAAS,MAAM;;;;;;;;;CA+F3E,CAAC;AA+CF,wBAAgB,2BAA2B,CACvC,QAAQ,EAAE,eAAe,GAAG,iBAAiB,EAC7C,aAAa,EAAE,aAAa,GAC7B,oBAAoB,CAKtB;AAy8CD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,mBAAmB,CAG3F;AAqBD,eAAO,MAAM,qBAAqB,GAAI,UAAU,GAAG,EAAE,aAAa,GAAG,EAAE,QAsBtE,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,aAAa,GAAG,EAAE;;;;;;;;;;;;;IAqBrD,CAAC"}
+{"version":3,"file":"authMetaDataSchema.d.ts","sourceRoot":"","sources":["../../src/utils/authMetaDataSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAyD,MAAM,QAAQ,CAAC;AAClH,OAAO,EAEH,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACpB,MAAM,uBAAuB,CAAC;AAI/B,KAAK,mBAAmB,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;AAElG,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,UAAU,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE;QACX,IAAI,EAAE,OAAO,GAAG,aAAa,CAAC;QAC9B,UAAU,EAAE,SAAS,GAAG,cAAc,GAAG,iBAAiB,CAAC;QAC3D,SAAS,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,cAAc,GAAG,iBAAiB,CAAC;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IACzC,uBAAuB,EAAE,OAAO,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAkED,eAAO,MAAM,mBAAmB,GAAI,gBAAgB,yBAAyB,EAAE,eAAe,KAAK,GAAG,KAAK;;;;;;;cA9ExF,MAAM;gBAAU;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE;;;;;;;;;;;cAoD3B,GAAG;;;;;;;;kBAjFjB,OAAO,GAAG,aAAa;wBACjB,SAAS,GAAG,cAAc,GAAG,iBAAiB;uBAC/C,MAAM;;kBA+FW,GAAG;;mBAhDgB,MAAM;mBAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;cApBzD,MAAM;gBAAU;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE;;;;;;;;;;;cAoD3B,GAAG;;;;;;;;kBAjFjB,OAAO,GAAG,aAAa;wBACjB,SAAS,GAAG,cAAc,GAAG,iBAAiB;uBAC/C,MAAM;;kBA+FW,GAAG;;mBAhDgB,MAAM;mBAAS,MAAM;;;;;;;;;CA+F3E,CAAC;AA+CF,wBAAgB,2BAA2B,CACvC,QAAQ,EAAE,eAAe,GAAG,iBAAiB,EAC7C,aAAa,EAAE,aAAa,GAC7B,oBAAoB,CAKtB;AA2HD;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,MAA2D,CAAC;AAE1G;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,GAAI,WAAW,MAAM;IAG1D,qFAAqF;;IAErF,sFAAsF;;;CAI7F,CAAC;AAKF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,8BAA8B,GAAI,eAAe,MAAM,EAAE,cAAc,MAAM,KAAG,MAM5F,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,2BAA2B,GAAI,WAAW,MAAM,KAAG,OACP,CAAC;AAE1D,qEAAqE;AACrE,eAAO,MAAM,8BAA8B,GAAI,WAAW,MAAM,KAAG,MACD,CAAC;AAEnE,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B,GAAI,WAAW,MAAM,KAAG,MAAM,GAAG,IACP,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,GAAI,cAAc,MAAM;;;CAMtE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,0CAA0C,GAAI,YAAY,MAAM,EAAE,cAAc,MAAM;;;CAMlG,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2CAA2C,GAAI,WAAW,MAAM,EAAE,cAAc,MAAM;;;CAMlG,CAAC;AAaF,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,GAAI,WAAW,MAAM,KAAG,OACP,CAAC;AAE3D,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,GAAI,WAAW,MAAM,KAAG,MACD,CAAC;AAEpE,oEAAoE;AACpE,eAAO,MAAM,8BAA8B,GAAI,WAAW,MAAM,KAAG,MAAM,GAAG,IAG3E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GAAI,eAAe,MAAM,EAAE,cAAc,MAAM,KAAG,MAM3F,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,2BAA2B,GAAI,WAAW,MAAM,KAAG,MAAM,GAAG,IAIxE,CAAC;AAu1CF,MAAM,WAAW,oBAAoB;IACjC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED,wBAAgB,wBAAwB,CACpC,KAAK,EAAE,oBAAoB,EAAE,EAC7B,OAAO,GAAE,oBAAyB,GACnC,mBAAmB,CAGrB;AAqBD,eAAO,MAAM,qBAAqB,GAAI,UAAU,GAAG,EAAE,aAAa,GAAG,EAAE,QAsBtE,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,aAAa,GAAG,EAAE;;;;;;;;;;;;;IAqBrD,CAAC"}

package/lib/utils/authMetaDataSchema.js

@@ -226,7 +226,134 @@ function buildInngestNode() {
   };
 }
 const seedCategory = seed => seed.categories[0];
+/**
+ * uiLayout credential namespace bucket — collapses every connector category into
+ * one of three: app | llm | mcp. MCP by connectorType; LLM seeds carry connectorType
+ * 'app' but a `${id}:llm` key; everything else is an app connector.
+ */
+const seedCredentialNamespace = seed => seed.connectorType === 'mcp' ? 'mcp' : seed.key.endsWith(':llm') ? 'llm' : 'app';
+/**
+ * Normalize a provider id or form namespace into a vault secret key prefix.
+ * e.g. `gmail-app-hk7zf7w9` → `GMAIL_APP_HK7ZF7W9`
+ */
 const toVaultPrefix = value => value.replace(/[^a-zA-Z0-9]/g, '_').toUpperCase();
+/**
+ * Per-form-instance vault keys for non-account-specific secrets (e.g. API key fields).
+ *
+ * Do NOT use these for OAuth access/refresh tokens when multiple accounts can share
+ * one published form — connecting account B would overwrite account A's vault entry.
+ * Access/refresh live under per-credential `configKey.accounts.{id}.*` and durable
+ * `CRED_<id>_*` vault keys via syncOAuthTokensToCredentialVault.
+ *
+ * Client id/secret stay provider-scoped (shared OAuth app credentials).
+ */
+const buildOAuthInstanceTokenVaultKeys = namespace => {
+  const prefix = toVaultPrefix(namespace);
+  return {
+    /** @deprecated Do not wire access tokens to this shared key — use CRED_* instead. */
+    accessToken: `${prefix}_ACCESS_TOKEN`,
+    /** @deprecated Do not wire refresh tokens to this shared key — use CRED_* instead. */
+    refreshToken: `${prefix}_REFRESH_TOKEN`,
+    apiKey: `${prefix}_API_KEY`
+  };
+};
+/** `_{24-hex}` suffix appended to a base vault key to scope it to one credential. */
+const CREDENTIAL_SCOPED_SECRET_KEY_RE = /_([a-fA-F0-9]{24})$/;
+/**
+ * Credential-scoped vault key: `{BASE_KEY}_{credentialId}`.
+ *
+ * This is the platform's own convention — `preferences-service` resolves a
+ * `format: 'secret'` config key to `${defaultValueSource.secretKey}_${credentialId}`
+ * on both read and write whenever the node context carries a `credentialId`.
+ * API-key connectors reuse the exact same shape so several credentials for one
+ * provider can coexist in a project/env instead of overwriting each other's
+ * shared `PROVIDER_API_KEY` entry (the same isolation OAuth gets from its
+ * per-account configKey).
+ *
+ * Idempotent when `baseSecretKey` is already scoped to the same credential.
+ */
+const buildCredentialScopedSecretKey = (baseSecretKey, credentialId) => {
+  const base = stripCredentialScopedSecretKey(baseSecretKey || '');
+  if (!base || !credentialId) {
+    return base || '';
+  }
+  return `${base}_${credentialId}`;
+};
+/** True when a vault key already carries a `_{credentialId}` suffix. */
+const isCredentialScopedSecretKey = secretKey => CREDENTIAL_SCOPED_SECRET_KEY_RE.test(secretKey || '');
+/** Strip `_{credentialId}` to recover the catalog/base vault key. */
+const stripCredentialScopedSecretKey = secretKey => (secretKey || '').replace(CREDENTIAL_SCOPED_SECRET_KEY_RE, '');
+/** credentialId embedded in a scoped vault key, if any. */
+const credentialIdFromScopedSecretKey = secretKey => CREDENTIAL_SCOPED_SECRET_KEY_RE.exec(secretKey || '')?.[1] || null;
+/**
+ * Durable per-credential token vault keys. Used after OAuth connect so each
+ * FormBuilderCredential keeps its own token pair even when several credentials
+ * share the same published template/configKey staging path.
+ */
+const buildCredentialOAuthTokenVaultKeys = credentialId => {
+  const prefix = toVaultPrefix(`cred_${credentialId}`);
+  return {
+    accessToken: `${prefix}_ACCESS_TOKEN`,
+    refreshToken: `${prefix}_REFRESH_TOKEN`
+  };
+};
+/**
+ * Provider-scoped per-credential OAuth vault keys (e.g. OAuth callback writes
+ * `GOOGLE_GMAIL_ACCESS_TOKEN_{credentialId}` to Personal Vault).
+ */
+const buildProviderCredentialOAuthTokenVaultKeys = (providerId, credentialId) => {
+  const prefix = toVaultPrefix(providerId);
+  return {
+    accessToken: `${prefix}_ACCESS_TOKEN_${credentialId}`,
+    refreshToken: `${prefix}_REFRESH_TOKEN_${credentialId}`
+  };
+};
+/**
+ * Namespace-scoped per-credential OAuth vault keys (`google_gmail-app` → `GOOGLE_GMAIL_APP_*_{id}`).
+ */
+const buildNamespaceCredentialOAuthTokenVaultKeys = (namespace, credentialId) => {
+  const prefix = toVaultPrefix(namespace);
+  return {
+    accessToken: `${prefix}_ACCESS_TOKEN_${credentialId}`,
+    refreshToken: `${prefix}_REFRESH_TOKEN_${credentialId}`
+  };
+};
+/**
+ * Per-connected-account OAuth preferences path.
+ * Template: `….{namespace}.oauthConnector`
+ * Account:  `….{namespace}.oauthConnector.accounts.{credentialId}`
+ *
+ * OAuth app settings (client id/secret, scopes, endpoints) are seeded from the
+ * template path onto each account path so ApplicationConnectorOAuthService can
+ * use a single configKey without a shared token staging slot.
+ */
+const CREDENTIAL_ACCOUNT_CONFIG_KEY_RE = /\.accounts\.([a-fA-F0-9]{24})$/;
+/** True when configKey is already scoped to a FormBuilder credential account. */
+const isCredentialAccountConfigKey = configKey => CREDENTIAL_ACCOUNT_CONFIG_KEY_RE.test(configKey || '');
+/** Strip `.accounts.{credentialId}` to recover the published template configKey. */
+const stripCredentialAccountConfigKey = configKey => (configKey || '').replace(CREDENTIAL_ACCOUNT_CONFIG_KEY_RE, '');
+/** credentialId embedded in an account-scoped configKey, if any. */
+const credentialIdFromOAuthConfigKey = configKey => {
+  const match = CREDENTIAL_ACCOUNT_CONFIG_KEY_RE.exec(configKey || '');
+  return match?.[1] || null;
+};
+/**
+ * Build the per-credential OAuth configKey used for connect / refresh / disconnect.
+ * Idempotent when `baseConfigKey` is already account-scoped for the same id.
+ */
+const buildCredentialOAuthConfigKey = (baseConfigKey, credentialId) => {
+  const base = stripCredentialAccountConfigKey(baseConfigKey || '').replace(/\.+$/, '');
+  if (!base || !credentialId) {
+    return base || '';
+  }
+  return `${base}.accounts.${credentialId}`;
+};
+/** Extract the form namespace from an oauthConnector configKey path. */
+const namespaceFromOAuthConfigKey = configKey => {
+  const normalized = stripCredentialAccountConfigKey(configKey || '');
+  const match = /integrationSettings\.settings\.[^.]+\.([^.]+)\.oauthConnector(?:\.|$)/.exec(normalized);
+  return match?.[1] || null;
+};
 const seedAuthMethodDefault = seed => seed.authMethods.includes('oauth2') ? 'oauth' : seed.connectorType === 'mcp' ? 'mcp' : 'api_key';
 /**
  * Build a `genericType -> count` map for the given fields. Used by
@@ -264,7 +391,10 @@ const resolveFieldKey = (field, genericTypeCounts) => {
   return field.name;
 };
 function buildPreGeneratedFormSteps(seed, namespace) {
-  const vaultPrefix = toVaultPrefix(seed.providerId);
+  // Shared OAuth app credentials (one client id/secret per provider).
+  const providerVaultPrefix = toVaultPrefix(seed.providerId);
+  // Per-form-instance tokens — unique namespace prevents multi-account overwrite.
+  const instanceTokenKeys = buildOAuthInstanceTokenVaultKeys(namespace);
   const isApp = seed.connectorType === 'app';
   const isApiKeyOnly = seedIsApiKeyOnly(seed);
   const templateType = seedTemplateType(seed);
@@ -361,7 +491,7 @@ function buildPreGeneratedFormSteps(seed, namespace) {
       useBasicAuth: seed.useBasicAuth ?? false,
       connectorRedirectUri: '{{CLIENT_URL}}/{{CONNECTOR_ENDPOINT}}',
       // connectorAuthMethod — present only for non-oauth connectors (matches reference forms)
-      ...(!seed.authMethods.includes('oauth2') ? {
+      ...(seedAuthMethodDefault(seed) !== 'oauth' ? {
         connectorAuthMethod: seedAuthMethodDefault(seed)
       } : {}),
       ...(seed.fields.length > 0 ? {
@@ -401,7 +531,7 @@ function buildPreGeneratedFormSteps(seed, namespace) {
       defaultValueSource: {
         type: ContributeDefaultValueSourceType.Vault,
         secretType: 'OAUTH_CLIENT',
-        secretKey: `${vaultPrefix}_CLIENT_ID`,
+        secretKey: `${providerVaultPrefix}_CLIENT_ID`,
         ...(isApp ? {
           requiredReference: true
         } : {})
@@ -420,7 +550,7 @@ function buildPreGeneratedFormSteps(seed, namespace) {
       defaultValueSource: {
         type: ContributeDefaultValueSourceType.Vault,
         secretType: 'OAUTH_CLIENT',
-        secretKey: `${vaultPrefix}_CLIENT_SECRET`,
+        secretKey: `${providerVaultPrefix}_CLIENT_SECRET`,
         ...(isApp ? {
           requiredReference: true
         } : {})
@@ -439,7 +569,7 @@ function buildPreGeneratedFormSteps(seed, namespace) {
       defaultValueSource: {
         type: ContributeDefaultValueSourceType.Vault,
         secretType: 'API_KEY',
-        secretKey: `${vaultPrefix}_API_KEY`
+        secretKey: instanceTokenKeys.apiKey
       }
     }
   }, {
@@ -451,11 +581,16 @@ function buildPreGeneratedFormSteps(seed, namespace) {
     default: '',
     readOnly: true,
     scope: 1 /* ConfigurationScope.APPLICATION */,
+
+    // No shared vault secretKey by default — multi-account connects would overwrite.
+    // Staging still needs a vault route: writeSettings discards format:secret when
+    // defaultValueSource is missing. Instance keys are the temporary staging slot;
+    // completeOAuth / sync(force) copies them into CRED_<credentialId>_*.
     schemaExtensions: {
       defaultValueSource: {
         type: ContributeDefaultValueSourceType.Vault,
         secretType: 'OAUTH_CLIENT',
-        secretKey: `${vaultPrefix}_ACCESS_TOKEN`
+        secretKey: instanceTokenKeys.accessToken
       }
     }
   }, {
@@ -471,7 +606,7 @@ function buildPreGeneratedFormSteps(seed, namespace) {
       defaultValueSource: {
         type: ContributeDefaultValueSourceType.Vault,
         secretType: 'OAUTH_CLIENT',
-        secretKey: `${vaultPrefix}_REFRESH_TOKEN`
+        secretKey: instanceTokenKeys.refreshToken
       }
     }
   }, {
@@ -754,7 +889,7 @@ function buildPreGeneratedFormSteps(seed, namespace) {
       useBasicAuth: seed.useBasicAuth ?? false,
       connectorRedirectUri: '{{CLIENT_URL}}/{{CONNECTOR_ENDPOINT}}',
       // connectorAuthMethod — present only for non-oauth connectors (matches reference forms)
-      ...(!seed.authMethods.includes('oauth2') ? {
+      ...(seedAuthMethodDefault(seed) !== 'oauth' ? {
         connectorAuthMethod: seedAuthMethodDefault(seed)
       } : {}),
       ...(seed.fields.length > 0 ? {
@@ -776,25 +911,6 @@ function buildPreGeneratedFormSteps(seed, namespace) {
     }]
   }];
 }
-const buildCategoryKeyLookup = () => {
-  const lookup = new Map();
-  const prefix = 'uiLayout.credential.templates.';
-  const suffix = '.value';
-  for (const [key, value] of Object.entries(CONTRIBUTION_POINTS)) {
-    if (key.startsWith(prefix) && key.endsWith(suffix)) {
-      lookup.set(value, key.slice(prefix.length, -suffix.length));
-    }
-  }
-  return lookup;
-};
-const CATEGORY_KEY_LOOKUP = buildCategoryKeyLookup();
-const categoryToTemplateTypeKey = category => {
-  const key = CATEGORY_KEY_LOOKUP.get(category);
-  if (!key) {
-    throw new Error(`No contribution-point template type found for category "${category}"`);
-  }
-  return key;
-};
 function buildOAuthConfigurationContribution(seedsWithNamespaces) {
   const formProperties = {
     required: []
@@ -805,7 +921,8 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
     seed,
     namespace
   } of seedsWithNamespaces) {
-    const vaultPrefix = toVaultPrefix(seed.providerId);
+    const providerVaultPrefix = toVaultPrefix(seed.providerId);
+    const instanceTokenKeys = buildOAuthInstanceTokenVaultKeys(namespace);
     const isApp = seed.connectorType === 'app';
     const isApiKeyOnly = seedIsApiKeyOnly(seed);
     const templateType = seedTemplateType(seed);
@@ -867,7 +984,7 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
         defaultValueSource: {
           type: ContributeDefaultValueSourceType.Vault,
           secretType: 'OAUTH_CLIENT',
-          secretKey: `${vaultPrefix}_CLIENT_ID`,
+          secretKey: `${providerVaultPrefix}_CLIENT_ID`,
           ...(isApp ? {
             requiredReference: true
           } : {})
@@ -888,7 +1005,7 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
         defaultValueSource: {
           type: ContributeDefaultValueSourceType.Vault,
           secretType: 'OAUTH_CLIENT',
-          secretKey: `${vaultPrefix}_CLIENT_SECRET`,
+          secretKey: `${providerVaultPrefix}_CLIENT_SECRET`,
           ...(isApp ? {
             requiredReference: true
           } : {})
@@ -909,7 +1026,7 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
         defaultValueSource: {
           type: ContributeDefaultValueSourceType.Vault,
           secretType: 'API_KEY',
-          secretKey: `${vaultPrefix}_API_KEY`
+          secretKey: instanceTokenKeys.apiKey
         }
       }, {
         'ui:widget': !seed.authMethods.includes('oauth2') ? 'password' : 'hidden',
@@ -925,10 +1042,13 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
         readOnly: true,
         writeOnly: true,
         scope: 1 /* ConfigurationScope.APPLICATION */,
+
+        // Staging vault route required — writeSettings drops format:secret
+        // without defaultValueSource. Durable isolation is CRED_* via sync.
         defaultValueSource: {
           type: ContributeDefaultValueSourceType.Vault,
           secretType: 'OAUTH_CLIENT',
-          secretKey: `${vaultPrefix}_ACCESS_TOKEN`
+          secretKey: instanceTokenKeys.accessToken
         }
       }, {
         'ui:widget': 'hidden'
@@ -945,7 +1065,7 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
         defaultValueSource: {
           type: ContributeDefaultValueSourceType.Vault,
           secretType: 'OAUTH_CLIENT',
-          secretKey: `${vaultPrefix}_REFRESH_TOKEN`
+          secretKey: instanceTokenKeys.refreshToken
         }
       }, {
         'ui:widget': 'hidden'
@@ -1299,15 +1419,24 @@ function buildOAuthConfigurationContribution(seedsWithNamespaces) {
     properties: formUIProperties
   }];
 }
-function generateFromSeeds(seeds, title, formIcon, formExtensionId) {
+function generateFromSeeds(seeds, title, formIcon, formExtensionId, options = {}) {
   const allNodes = [];
   const mergedUiLayoutTemplates = {};
   const mergedUiLayoutUi = {};
   let uiLayoutFormMetadataNode = null;
   const seedsWithNamespaces = [];
   seeds.forEach((seed, idx) => {
-    const generatedFormId = `${sanitizeFieldKey(seed.providerId)}-${seed.connectorType}-${Math.random().toString(36).substring(2, 10)}`;
-    const providerTitle = `${seed.title} (${seed.connectorType.toUpperCase()})`;
+    // The namespace doubles as the formId AND flows into every configuration key
+    // (`integrationSettings.settings.<type>.<ns>.oauthConnector…`). An explicit
+    // namespace lets a caller regenerate the form for an ALREADY-PUBLISHED template
+    // so the output is identity-compatible with it (same formId, same config keys);
+    // the random default is only safe for brand-new forms.
+    const generatedFormId = options.namespaces?.[idx] || `${sanitizeFieldKey(seed.providerId)}-${seed.connectorType}-${Math.random().toString(36).substring(2, 10)}`;
+    // The connector's own title, with no `(APP)` marker appended. `connectorType` is
+    // `app` for every one of the 1166 catalog connectors, so the suffix carried no
+    // information - it just made every row in the credential picker read "… (APP)".
+    // The type is still contributed as `connectorType` for anything that needs it.
+    const providerTitle = seed.title;
     const namespace = generatedFormId;
     seedsWithNamespaces.push({
       seed,
@@ -1543,13 +1672,13 @@ function generateFromSeeds(seeds, title, formIcon, formExtensionId) {
   const credentialBasePath = CONTRIBUTION_POINTS['uiLayout.credential.path'];
   const prefixedTemplates = {};
   const prefixedUi = {};
-  // Build a namespace→category lookup from seeds using contribution-point template type keys
+  // Bucket each seed into one of three credential namespaces: app | llm | mcp
   const nsToCategoryMap = new Map();
   seedsWithNamespaces.forEach(({
     seed,
     namespace
   }) => {
-    nsToCategoryMap.set(namespace, categoryToTemplateTypeKey(seedCategory(seed)));
+    nsToCategoryMap.set(namespace, seedCredentialNamespace(seed));
   });
   Object.keys(mergedUiLayoutTemplates).forEach(key => {
     const categoryKey = nsToCategoryMap.get(key);
@@ -1587,8 +1716,8 @@ function generateFromSeeds(seeds, title, formIcon, formExtensionId) {
   if (!uiLayoutFormMetadataNode) return allNodes;
   return [...allNodes, uiLayoutFormMetadataNode, uiLayoutFormNode, uiLayoutFormUINode];
 }
-function createOAuthSeedGenerator(seeds) {
-  return (title = '', formIcon = '', formExtensionId = '') => generateFromSeeds(seeds, title, formIcon, formExtensionId);
+function createOAuthSeedGenerator(seeds, options = {}) {
+  return (title = '', formIcon = '', formExtensionId = '') => generateFromSeeds(seeds, title, formIcon, formExtensionId, options);
 }
 // create provider refs
 const findRefPath = node => {
@@ -1646,4 +1775,4 @@ const buildMetadataSchema = sampleNodes => {
     configurationNodes: entry.configurationNodes,
     contributes: {}
   }))];
-};export{buildMetadataSchema,buildProviderConfig,buildProviderSeedFromConfig,buildProviderWithRefs,createOAuthSeedGenerator};//# sourceMappingURL=authMetaDataSchema.js.map
+};export{buildCredentialOAuthConfigKey,buildCredentialOAuthTokenVaultKeys,buildCredentialScopedSecretKey,buildMetadataSchema,buildNamespaceCredentialOAuthTokenVaultKeys,buildOAuthInstanceTokenVaultKeys,buildProviderConfig,buildProviderCredentialOAuthTokenVaultKeys,buildProviderSeedFromConfig,buildProviderWithRefs,createOAuthSeedGenerator,credentialIdFromOAuthConfigKey,credentialIdFromScopedSecretKey,isCredentialAccountConfigKey,isCredentialScopedSecretKey,namespaceFromOAuthConfigKey,stripCredentialAccountConfigKey,stripCredentialScopedSecretKey,toVaultPrefix};//# sourceMappingURL=authMetaDataSchema.js.map

package/lib/utils/authMetaDataSchema.js.map

@@ -1 +1 @@
-{"version":3,"file":"authMetaDataSchema.js","sources":["../../src/utils/authMetaDataSchema.ts"],"sourcesContent":[null],"names":[],"mappings":"6NAeA,MAAA,WAAU,GAAA,GAAA,IAAA,GAAoB,CAAA,KAAA,CAAA,GAAA,CAAA,CAAA,GAAA,CAAA,CAAA,IAAA,CAAA,CAAA,IAAA,EAAA,CAAA,CAAA,MAAA,CAAA,OAAA,CAAA;MAC1B,eAAY,GAAA,GAAA,IAAA;MACZ,KAAA,CAAA,WAAmB,CAAA,EAAA,OAAA,GAAA;MACnB,GAAK,SAAS,IAAA,GAAA,KAAA,SAAA,EAAA,OAAA,EAAA;MACd,OAAA,GAAW,aAAS,EAAA,OAAA,EAAA;MACpB,CAAA,GAAM,CAAA,IAAE,EAAA,EAAM,OAAG,EAAA;MACjB;IACA,MAAA,MAAA,GAAA,IAAA,CAAA,KAAwB,CAAE,GAAA,CAAA;IAC1B,OAAO,KAAG,CAAA,OAAQ,CAAA,MAAA,CAAA,GAAA,MAAA,GAAA,EAAA;AAClB,EAAA,CAAA,CAAA,OAAA,CAAA,EAAA;IACA,OAAA,GAAA,CAAA,KAAgB,CAAC,IAAE,CAAA,CAAA,GAAO,CAAA,IAAA,IAAA,IAAA,CAAA,IAAA,EAAA,CAAA,CAAA,MAAA,CAAA,OAAA,CAAA,CAAA,GAAA,CAAA,IAAA,IAAA;MAC1B,MAAQ,CAAC,KAAE,EAAA,KAAO,CAAA,GAAA,IAAA,CAAA,KAAA,CAAA,GAAA,CAAA;MAClB,OAAA;QACA,KAAA,EAAA,CAAY,KAAG,IAAA,EAAQ,EAAA,IAAA,EAAA;QACvB,KAAS,EAAA,CAAA,KAAO,IAAA,KAAA,IAAA,EAAA,EAAA,IAAA;OAChB;IACA,CAAA,CAAA;;;MAGA,QAAA,GAAa,KAAE,IAAA,CAAA,KAAA,IAAA,EAAkB,EAAG,OAAA,CAAA,oBAAA,EAAA,OAAA,CAAA,CAAA,OAAA,CAAA,uBAAA,EAAA,OAAA,CAAA,CAAA,OAAA,CAAA,gBAAA,EAAA,GAAA,CAAA,CAAA,OAAA,CAAA,UAAA,EAAA,EAAA,CAAA,CAAA,WAAA,EAAA;MACpC,iBAAiB,GAAA,CAAA,MAAA,EAAA,UAAA,KAAA,MAAA,CAAA,GAAA,CAAA,KAAA,KAAA;MACjB,EAAA,KAAA,CAAA,IAAA;OACA,EAAA,KAAU,CAAA;AACb,EAAA,IAAA,EAAA,KAAA,CAAA,IAAA;AAED,EAAA,kBAAiB,CAAA,WAAA;oBACA,CAAA,WAAA;UACR,OAAQ,CAAC,QAAA;gBACF,KAAC,CAAA,YAAA,IAAA,EAAA;eACF,EAAE,MAAM,aAAC;UACpB,EAAA,KAAa,SAAO;cACV,OAAO,CAAC,QAAA,GAAA,KAAA,CAAA,YAAA,IAAA;IAClB,IAAA,EAAA,OAAY;IACZ,UAAA,EAAA,gBAAuB;AACvB,IAAA,SAAA,EAAA,KAAe,CAAA,SAAA,KAAA,UAAA,GAAA,CAAA,EAAA,QAAA,CAAA,UAAA,CAAA,CAAA,CAAA,EAAA,QAAA,CAAA,KAAA,CAAA,IAAA,CAAA,CAAA,CAAA,GAAA,QAAA,CAAA,KAAA,CAAA,IAAA,CAAA;AACX,GAAA,GAAA,IAAA;AACA,EAAA,QAAA,EAAA,KAAA,CAAU,QAAE;YACZ,EAAA,eAAkB,CAAA,KAAA,CAAA,UAAA,CAAA;UACpB,EAAA,KAAA,CAAA,QAAA;UACF,EAAQ,cAAU;aACT,EAAE,MAAM,WAAC,IAAA,SAAA;AAClB,EAAA,SAAA,EAAA,KAAY,CAAA,SAAY,IAAA,SAAA;cACd,OAAO,CAAA,YAAA,IAAA,SAAA;OACjB,EAAA,KAAU,CAAA,SAAS;;AAEX,MAAA,mBAAS,GAAA,CAAA,cAAA,EAAA,aAAA,KAAA;QACjB,IAAA,GAAW;IACX,EAAA,EAAA,cAAc,CAAA,EAAA;IACd,KAAA,EAAA,cAAkB,CAAA,KAAA;IAClB,WAAA,EAAY,cAAS,CAAA,WAAA;AACxB,IAAA,IAAA,EAAA,cAAA,CAAA,IAAA,IAAA;AAED,MAAM,oBAAW,CAAA,QAAA;MACX,qBAAS,CAAA,YAAA,GAAA;QACX,UAAc,cAAA,CAAA;OACd,GAAA;KACA;IACA,IAAA,EAAM,cAAS,CAAA,IAAA,IAAA,SAAA;IACf,KAAA,EAAA,cAAiB,CAAA,KAAA,IAAA,SAAA;IACjB,OAAA,EAAA,cAAqB,CAAA,OAAA;IACrB,MAAM,OAAO,CAAA,OAAA,CAAA,cAAA,CAAA,MAAA,CAAA,GAAA,cAAA,CAAA,MAAA,GAAA,WAAA,CAAA,cAAA,CAAA,MAAA,CAAA;IACb,aAAa,cAAC,CAAA,WAAA,CAAA,MAAA,GAAA,CAAA,GAAA,cAAA,CAAA,WAAA,GAAA,CAAA,SAAA,CAAA;IACd,0BAAiB,CAAA,UAAA,IAAA,CAAA,cAAA,CAAA,QAAA,CAAA;IACjB,MAAM,EAAE,iBAAO,CAAA,cAAA,CAAA,MAAA,EAAA,cAAA,CAAA,EAAA;AACf,GAAA;wBAAsB,KAAA,EAAA;AAAC,IAAA,OAAA;aAAU;iBAAkB,EAAA,cAAA,CAAA,WAAA,IAAA,SAAA;MAAG,MAAA,EAAA,cAAA,CAAA;AACtD,KAAA;AACA,EAAA;SACA;IACA,GAAA,IAAO;AACP,IAAA,WAAA,EAAA,cAAkB,CAAA,WAAqB;IACvC,yBAAyB,cAAA,CAAA,uBAAA;IACzB,OAAA,EAAQ,cAAS,CAAA,OAAA;IACjB,gCAAsB,CAAA,gBAAA;IACtB,gCAAsB,CAAA,gBAAA;IACtB,QAAQ,EAAE,cAAO,CAAA,QAAA;IACjB,aAAQ,EAAA,cAAqB,CAAC,aAAA;AACjC,IAAA,YAAA,EAAA,cAAA,CAAA;AAkED,GAAA;;;;;;;kBA9EmB;AAAgB,IAAA,WAAA,EAAA,CAAA,CAAA,WAAA,IAAA,EAAA;YAAE,CAAA,CAAA,MAAQ;AAAU,IAAA,WAAA,EAAA,CAAA,CAAA,WAAA,IAAA,EAAA;;;;;;;;;;;cAoD3B,MAAG,IAAA,EAAA;;;;;;;;AAjFjB,EAAA,GAAA,EAAA,CAAA,EAAA,CAAA,CAAA,EAAA,CAAA,IAAA,CAAA;;;;kBAiGsB,IAAG,EAAA;;sBAhDgB,EAAA;sBAAe;;;;;;;;;;;;;;;;;;;;;;6BApB7C,IAAA,IAAA,CAAA,SAAA,EAAA;AAAU,IAAA,MAAA,QAAA,GAAA,kCAAA,CAAA,gBAAA,EAAA;YAAE,EAAA,IAAA,CAAA;AAAkB,MAAA,QAAA,EAAA,CAAA,EAAA,QAAA,CAAA,eAAA,CAAA;;;;;;;;;;;gBAoD3B,CAAG,IAAA,KAAA,UAAA,IAAA,QAAA,CAAA,MAAA,CAAA,OAAA,EAAA;;;;;;;;AAjFjB,QAAA,UAAA,CAAA,CAAA,EAAA,EAAA,CAAO,SAAG,EAAA,CAAA,CAAA,MAAa,CAAA,CAAA,GAAA,CAAA,CAAA,KAAA;;uBAElB,YAAM,CAAA,CAAA,GAAA,CAAA,CAAA,IAAA,CAAA,MAAA;;kBA+FW,EAAA,EAAG,CAAA,aAAA,CAAA,CAAA,GAAA,CAAA,CAAA,IAAA,CAAA,OAAA;;oBAhDgB,EAAA,CAAA,YAAM,CAAA,CAAA,GAAA,CAAA,CAAA,WAAA;oBAAS,EAAA,CAAA,iBAAM,CAAA,CAAA,GAAA,CAAA,CAAA,gBAAA;;;;;;;;;MA+F1E,MAAA,CAAA,GAAA,QAAA,CAAA,MAAA,CAAA,OAAA;AA+CF,MAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAgB,CAAA,eAAA,CAAA;AAi9ChB,MAAA,UAAA,CAAA,CAAA,EAAA,EAAA,CAAA,MAAgB,CAAA,CAAA,GAAA,CAAA,CAAA,KAAA;AAwBhB,MAAA,UAAO,CAAA,CAAA,EAAA,EAAM,CAAA,gBAAA,CAAA,CAAA,GAAqB,CAAI,CAAA,eAAe;AAwBrD,MAAA,UAAO,CAAA,CAAA,EAAA,EAAM,CAAA,iBAAmB,CAAA,CAAA,GAAI,CAAA,CAAA,gBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"authMetaDataSchema.js","sources":["../../src/utils/authMetaDataSchema.ts"],"sourcesContent":[null],"names":[],"mappings":"6NAeA,MAAM,WAAW,GAAA,GAAA,IAAA,GAAA,CAAA,KAAA,CAAoB,GAAA,CAAA,CAAA,GAAA,CAAA,CAAA,IAAA,CAAA,CAAA,IAAA,EAAA,CAAA,CAAA,MAAA,CAAA,OAAA,CAAA;MACjC,eAAY,GAAA,GAAA,IAAA;MACZ,KAAA,CAAA,WAAmB,CAAA,EAAA,OAAA,GAAA;MACnB,GAAK,SAAS,IAAA,GAAA,KAAA,SAAA,EAAA,OAAA,EAAA;MACd,OAAA,GAAW,aAAS,EAAA,OAAA,EAAA;MACpB,CAAA,GAAM,CAAA,IAAE,EAAA,EAAM,OAAG,EAAA;MACjB;IACA,MAAA,MAAA,GAAA,IAAA,CAAA,KAAwB,CAAE,GAAA,CAAA;IAC1B,OAAO,KAAG,CAAA,OAAQ,CAAA,MAAA,CAAA,GAAA,MAAA,GAAA,EAAA;AAClB,EAAA,CAAA,CAAA,OAAA,CAAA,EAAA;IACA,OAAA,GAAA,CAAA,KAAgB,CAAC,IAAE,CAAA,CAAA,GAAO,CAAA,IAAA,IAAA,IAAA,CAAA,IAAA,EAAA,CAAA,CAAA,MAAA,CAAA,OAAA,CAAA,CAAA,GAAA,CAAA,IAAA,IAAA;MAC1B,MAAQ,CAAC,KAAE,EAAA,KAAO,CAAA,GAAA,IAAA,CAAA,KAAA,CAAA,GAAA,CAAA;MAClB,OAAA;QACA,KAAA,EAAA,CAAY,KAAG,IAAA,EAAQ,EAAA,IAAA,EAAA;QACvB,KAAS,EAAA,CAAA,KAAO,IAAA,KAAA,IAAA,EAAA,EAAA,IAAA;OAChB;IACA,CAAA,CAAA;;;MAGA,QAAA,GAAa,KAAE,IAAA,CAAA,KAAA,IAAA,EAAkB,EAAG,OAAA,CAAA,oBAAA,EAAA,OAAA,CAAA,CAAA,OAAA,CAAA,uBAAA,EAAA,OAAA,CAAA,CAAA,OAAA,CAAA,gBAAA,EAAA,GAAA,CAAA,CAAA,OAAA,CAAA,UAAA,EAAA,EAAA,CAAA,CAAA,WAAA,EAAA;MACpC,iBAAiB,GAAA,CAAA,MAAA,EAAA,UAAA,KAAA,MAAA,CAAA,GAAA,CAAA,KAAA,KAAA;MACjB,EAAA,KAAA,CAAA,IAAA;OACA,EAAA,KAAU,CAAA;AACb,EAAA,IAAA,EAAA,KAAA,CAAA,IAAA;AAED,EAAA,kBAAiB,CAAA,WAAA;oBACA,CAAA,WAAA;UACR,OAAQ,CAAC,QAAA;gBACF,KAAC,CAAA,YAAA,IAAA,EAAA;eACF,EAAE,MAAM,aAAC;UACpB,EAAA,KAAa,SAAO;cACV,OAAO,CAAC,QAAA,GAAA,KAAA,CAAA,YAAA,IAAA;IAClB,IAAA,EAAA,OAAY;IACZ,UAAA,EAAA,gBAAuB;AACvB,IAAA,SAAA,EAAA,KAAe,CAAA,SAAA,KAAA,UAAA,GAAA,CAAA,EAAA,QAAA,CAAA,UAAA,CAAA,CAAA,CAAA,EAAA,QAAA,CAAA,KAAA,CAAA,IAAA,CAAA,CAAA,CAAA,GAAA,QAAA,CAAA,KAAA,CAAA,IAAA,CAAA;AACX,GAAA,GAAA,IAAA;AACA,EAAA,QAAA,EAAA,KAAA,CAAU,QAAE;YACZ,EAAA,eAAkB,CAAA,KAAA,CAAA,UAAA,CAAA;UACpB,EAAA,KAAA,CAAA,QAAA;UACF,EAAQ,cAAU;aACT,EAAE,MAAM,WAAC,IAAA,SAAA;AAClB,EAAA,SAAA,EAAA,KAAY,CAAA,SAAY,IAAA,SAAA;cACd,OAAO,CAAA,YAAA,IAAA,SAAA;OACjB,EAAA,KAAU,CAAA,SAAS;;AAEX,MAAA,mBAAS,GAAA,CAAA,cAAA,EAAA,aAAA,KAAA;QACjB,IAAA,GAAW;IACX,EAAA,EAAA,cAAc,CAAA,EAAA;IACd,KAAA,EAAA,cAAkB,CAAA,KAAA;IAClB,WAAA,EAAY,cAAS,CAAA,WAAA;AACxB,IAAA,IAAA,EAAA,cAAA,CAAA,IAAA,IAAA;AAED,MAAM,oBAAW,CAAA,QAAA;MACX,qBAAS,CAAA,YAAA,GAAA;QACX,UAAc,cAAA,CAAA;OACd,GAAA;KACA;IACA,IAAA,EAAM,cAAS,CAAA,IAAA,IAAA,SAAA;IACf,KAAA,EAAA,cAAiB,CAAA,KAAA,IAAA,SAAA;IACjB,OAAA,EAAA,cAAqB,CAAA,OAAA;IACrB,MAAM,OAAO,CAAA,OAAA,CAAA,cAAA,CAAA,MAAA,CAAA,GAAA,cAAA,CAAA,MAAA,GAAA,WAAA,CAAA,cAAA,CAAA,MAAA,CAAA;IACb,aAAa,cAAC,CAAA,WAAA,CAAA,MAAA,GAAA,CAAA,GAAA,cAAA,CAAA,WAAA,GAAA,CAAA,SAAA,CAAA;IACd,0BAAiB,CAAA,UAAA,IAAA,CAAA,cAAA,CAAA,QAAA,CAAA;IACjB,MAAM,EAAE,iBAAO,CAAA,cAAA,CAAA,MAAA,EAAA,cAAA,CAAA,EAAA;AACf,GAAA;wBAAsB,KAAA,EAAA;AAAC,IAAA,OAAA;aAAU;iBAAkB,EAAA,cAAA,CAAA,WAAA,IAAA,SAAA;MAAG,MAAA,EAAA,cAAA,CAAA;AACtD,KAAA;AACA,EAAA;SACA;IACA,GAAA,IAAO;AACP,IAAA,WAAA,EAAA,cAAkB,CAAA,WAAqB;IACvC,yBAAyB,cAAA,CAAA,uBAAA;IACzB,OAAA,EAAQ,cAAS,CAAA,OAAA;IACjB,gCAAsB,CAAA,gBAAA;IACtB,gCAAsB,CAAA,gBAAA;IACtB,QAAQ,EAAE,cAAO,CAAA,QAAA;IACjB,aAAQ,EAAA,cAAqB,CAAC,aAAA;AACjC,IAAA,YAAA,EAAA,cAAA,CAAA;AAkED,GAAA;;;;;;;kBA9EmB;AAAgB,IAAA,WAAA,EAAA,CAAA,CAAA,WAAA,IAAA,EAAA;YAAE,CAAA,CAAA,MAAQ;AAAU,IAAA,WAAA,EAAA,CAAA,CAAA,WAAA,IAAA,EAAA;;;;;;;;;;;cAoD3B,MAAG,IAAA,EAAA;;;;;;;;AAjFjB,EAAA,GAAA,EAAA,CAAA,EAAA,CAAA,CAAA,EAAA,CAAA,IAAA,CAAA;;;;kBAiGsB,IAAG,EAAA;;sBAhDgB,EAAA;sBAAe;;;;;;;;;;;;;;;;;;;;;;6BApB7C,IAAA,IAAA,CAAA,SAAA,EAAA;AAAU,IAAA,MAAA,QAAA,GAAA,kCAAA,CAAA,gBAAA,EAAA;YAAE,EAAA,IAAA,CAAA;AAAkB,MAAA,QAAA,EAAA,CAAA,EAAA,QAAA,CAAA,eAAA,CAAA;;;;;;;;;;;gBAoD3B,CAAG,IAAA,KAAA,UAAA,IAAA,QAAA,CAAA,MAAA,CAAA,OAAA,EAAA;;;;;;;;AAjFjB,QAAA,UAAA,CAAA,CAAA,EAAA,EAAA,CAAO,SAAG,EAAA,CAAA,CAAA,MAAa,CAAA,CAAA,GAAA,CAAA,CAAA,KAAA;;uBAElB,YAAM,CAAA,CAAA,GAAA,CAAA,CAAA,IAAA,CAAA,MAAA;;kBA+FW,EAAA,EAAG,CAAA,aAAA,CAAA,CAAA,GAAA,CAAA,CAAA,IAAA,CAAA,OAAA;;oBAhDgB,EAAA,CAAA,YAAM,CAAA,CAAA,GAAA,CAAA,CAAA,WAAA;oBAAS,EAAA,CAAA,iBAAM,CAAA,CAAA,GAAA,CAAA,CAAA,gBAAA;;;;;;;;;MA+F1E,MAAA,CAAA,GAAA,QAAA,CAAA,MAAA,CAAA,OAAA;AA+CF,MAAA,MAAA,EAAA,GAAA,CAAA,EAAA,MAAgB,CAAA,eAAA,CAAA;AAmIhB,MAAA,UAAA,CAAA,CAAA,EAAA,EAAA,CAAA,MAAA,CAAA,CAAA,GAAA,CAAA,CAAA,KAAA;;;AAGG,MAAA,UAAA,CAAA,CAAA,EAAA,EAAA,CAAA,UAAA,CAAA,CAAA,GAAA,CAAA,CAAA,SAAA;AACH,IAAA;AAEA,EAAA;;;;;;;;;AASG,IAAA,IAAA,EAAA;AACH,GAAA;MAGQ,CAAA,aAAA,CAAA,OAAA,CAAA,CAAA,GAAA,EAAA,GAAA,KAAA;;IAEA,IAAA,CAAA,CAAA,EAAA,IAAA,CAAA,GAAA,CAAA,CAAA,GAAA,GAAA,CAAA,EAAA,IAAA,CAAA,IAAA,EAAA,IAAA,CAAA,MAAA,EAAA,CAAA,QAAA,CAAA,EAAA,CAAA,CAAA,SAAA,CAAA,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA;;;IAIN,IAAA,GAAA,CAAA,UAAA,EAAA,IAAA,CAAA,CAAA,EAAA,IAAA,CAAA,WAAA,CAAA,CAAA,GAAA,GAAA,CAAA,UAAA;AAKF,IAAA,IAAA,GAAA,CAAA,SAAA,EAAA,IAAA,CAAA,CAAA,EAAA,IAAA,CAAA,UAAA,CAAA,CAAA,GAAA,GAAA,CAAA,SAAA;;;;;;;;;;;;AAYG,IAAA,2CAAA,EAAA,KAAA;AACH,IAAA,gCAAa,EAAA,WAAA;AAQb,IAAA,wCAAA,EAAA,OAAA;AACA,IAAA,oCAAa,EAAA,IAAA;AAGb,IAAA,iCAAA,EAAA,QAAA;AACA,IAAA,4CAAa,EAAA;AAGb,IAAA,+CAAA,EAAA,EAAA;AACA,IAAA,gDAA4C,CAAA;AAG5C,IAAA,+CAAA,EAAA,IAAA;;;;AAIG,IAAA,+BAAA,EAAA;AACH,GAAA;;;;AAQA;;;AAGG;AACH,MAAA,uBAAa,GAAA,IAAA,IAAA,IAAA,CAAA,aAAA,KAA0C,gBAAgB,IAAA,CAAM,mBAAgB,CAAA,GAAM,KAAA,GAAA,KAAA;;;;AAQnG;;AAEG;AACH;;;;AAmBA;AACA;AAGA;AACA;AAGA;AACA,MAAA,4CAA+C,IAAA;AAK/C,EAAA,MAAA,MAAA,GAAA,aAAA,CAAA,SAAA,CAAA;;;AAGG,IAAA,WAAA,EAAA,CAAA,EAAA,MAAA,CAAA,aAAA,CAAA;AACH;AAQA,IAAA,YAAA,EAAA,CAAA,EAAA,MAAA,CAAA,cAAA,CAAA;AACA,IAAA,MAAA,EAAA,CAAA,EAAO,MAAM;AA21Cb,GAAA;AACI;;;;;;AAMG;;AAEN;AAED;AA2BA;AAwBA;;;;;;;;;;;;;AAqBE,MAAA,2BAAA,GAAA,SAAA,IAAA,+BAAA,CAAA,IAAA,CAAA,SAAA,IAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/lib/utils/integrationCommands.d.ts

@@ -0,0 +1,94 @@
+type JsonObject = Record<string, unknown>;
+export interface IntegrationCommandParameter {
+    name: string;
+    schema: {
+        type: string;
+        description?: string;
+        [key: string]: unknown;
+    };
+}
+export interface IntegrationCommandExecution {
+    type: 'workflow';
+    namespace: string;
+    workflowSlug: string;
+    version: string;
+    paramBindings: Record<string, string>;
+    /** Parsed JSON body template. When present, the runtime resolves it via resolveInputTemplate instead of building a flat body from paramBindings. */
+    inputTemplate?: unknown;
+}
+export interface IntegrationCommand {
+    command: string;
+    title: string;
+    category?: string;
+    description?: string;
+    parameters: IntegrationCommandParameter[];
+    execution: IntegrationCommandExecution;
+}
+export interface FieldBinding {
+    userField?: string;
+    workflowNodeId?: string;
+    paramName?: string;
+}
+export interface ActionBinding {
+    action?: string;
+    label?: string;
+    workflow?: JsonObject;
+    fieldBindings?: FieldBinding[];
+    /** Optional JSON body template authored by the publisher; {{$user.<field>}} placeholders are filled with end-user values at run time. */
+    inputTemplate?: string;
+}
+export interface UserFieldDef {
+    type?: string;
+    title?: string;
+    format?: string;
+    enum?: unknown[];
+}
+export interface BuildActionsOptions {
+    slug: string;
+    category?: string;
+    namespace?: string;
+    userFields?: Record<string, UserFieldDef>;
+}
+export type MetadataSchemaEntry = {
+    schemaId?: string;
+    [key: string]: unknown;
+};
+export declare function parseInputTemplate(raw?: string): unknown;
+/** Collects the user-field keys referenced as {{$user.<key>}} anywhere in a parsed template. */
+export declare function extractTemplateUserFields(node: unknown, refs?: Set<string>): string[];
+/**
+ * Fills {{$user.<key>}} placeholders with end-user values by walking the parsed template.
+ * A string that is exactly one placeholder is replaced with the raw typed value; placeholders
+ * embedded in a longer string are interpolated. Everything else (including workflow-native
+ * {{...}} expressions) passes through untouched.
+ *
+ * Values that the template never references are appended to the resolved root object so callers
+ * still receive them; template-authored keys always win over a same-named extra value.
+ */
+export declare function resolveInputTemplate(node: unknown, values: Record<string, unknown>): unknown;
+export declare function buildParamBindings(action: ActionBinding): Record<string, string>;
+export declare function buildCommandsFromActions(actions: ActionBinding[], opts: BuildActionsOptions): IntegrationCommand[];
+export interface IntegrationMenuEntry {
+    command: string;
+    label: string;
+    enabled: boolean;
+    order: number;
+}
+export interface IntegrationMenusContributes {
+    commandPalette: IntegrationMenuEntry[];
+}
+export declare function buildMenusFromCommands(commands: IntegrationCommand[]): IntegrationMenusContributes;
+export interface IntegrationConfigurationIdentity {
+    title?: string;
+    formId: string;
+    /** Identifies this template independently of formId — generated fresh if not supplied. */
+    formTemplateId?: string;
+    formExtensionId?: string;
+    description?: string;
+    projectType?: string;
+    tags?: string[];
+}
+export declare function buildIntegrationConfigurationContribution(userFields: Record<string, UserFieldDef>, slug: string, identity?: IntegrationConfigurationIdentity): Record<string, unknown>[];
+export declare function extractUserFieldsFromStepperFormMetadata(metadataSchema: MetadataSchemaEntry[], stepKey?: string): Record<string, UserFieldDef>;
+export {};
+//# sourceMappingURL=integrationCommands.d.ts.map

package/lib/utils/integrationCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrationCommands.d.ts","sourceRoot":"","sources":["../../src/utils/integrationCommands.ts"],"names":[],"mappings":"AAEA,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1C,MAAM,WAAW,2BAA2B;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,2BAA2B;IACxC,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,oJAAoJ;IACpJ,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,2BAA2B,EAAE,CAAC;IAC1C,SAAS,EAAE,2BAA2B,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,yIAAyI;IACzI,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAC7C;AAED,MAAM,MAAM,mBAAmB,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAiBhF,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAOxD;AAED,gGAAgG;AAChG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,cAAoB,GAAG,MAAM,EAAE,CAS3F;AAeD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAO5F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQhF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,EAAE,CA2ClH;AAED,MAAM,WAAW,oBAAoB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IACxC,cAAc,EAAE,oBAAoB,EAAE,CAAC;CAC1C;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,2BAA2B,CASlG;AAED,MAAM,WAAW,gCAAgC;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,yCAAyC,CACrD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,gCAAgC,GAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CA+E3B;AAED,wBAAgB,wCAAwC,CACpD,cAAc,EAAE,mBAAmB,EAAE,EACrC,OAAO,SAAe,GACvB,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAe9B"}

package/lib/utils/integrationCommands.js

@@ -0,0 +1,253 @@
+import {v4}from'uuid';function normalizeWorkflowSelection(workflow) {
+  if (!workflow) return {};
+  if (typeof workflow === 'string') {
+    try {
+      return JSON.parse(workflow);
+    } catch (e) {
+      return {};
+    }
+  }
+  return workflow;
+}
+const USER_REF = /\{\{\$user\.([\w.-]+)\}\}/g;
+const FULL_USER_REF = /^\{\{\$user\.([\w.-]+)\}\}$/;
+function parseInputTemplate(raw) {
+  if (!raw?.trim()) return undefined;
+  try {
+    return JSON.parse(raw);
+  } catch (e) {
+    return undefined;
+  }
+}
+/** Collects the user-field keys referenced as {{$user.<key>}} anywhere in a parsed template. */
+function extractTemplateUserFields(node, refs = new Set()) {
+  if (typeof node === 'string') {
+    for (const m of node.matchAll(USER_REF)) refs.add(m[1]);
+  } else if (Array.isArray(node)) {
+    node.forEach(item => extractTemplateUserFields(item, refs));
+  } else if (node && typeof node === 'object') {
+    Object.values(node).forEach(value => extractTemplateUserFields(value, refs));
+  }
+  return [...refs];
+}
+function fillTemplateNode(node, values) {
+  if (typeof node === 'string') {
+    const full = FULL_USER_REF.exec(node);
+    if (full) return values[full[1]];
+    return node.replace(USER_REF, (_, key) => String(values[key] ?? ''));
+  }
+  if (Array.isArray(node)) return node.map(item => fillTemplateNode(item, values));
+  if (node && typeof node === 'object') {
+    return Object.fromEntries(Object.entries(node).map(([key, value]) => [key, fillTemplateNode(value, values)]));
+  }
+  return node;
+}
+/**
+ * Fills {{$user.<key>}} placeholders with end-user values by walking the parsed template.
+ * A string that is exactly one placeholder is replaced with the raw typed value; placeholders
+ * embedded in a longer string are interpolated. Everything else (including workflow-native
+ * {{...}} expressions) passes through untouched.
+ *
+ * Values that the template never references are appended to the resolved root object so callers
+ * still receive them; template-authored keys always win over a same-named extra value.
+ */
+function resolveInputTemplate(node, values) {
+  const resolved = fillTemplateNode(node, values);
+  if (!resolved || typeof resolved !== 'object' || Array.isArray(resolved)) return resolved;
+  const referenced = new Set(extractTemplateUserFields(node));
+  const extras = Object.entries(values).filter(([key]) => !referenced.has(key) && !(key in resolved));
+  return extras.length ? {
+    ...resolved,
+    ...Object.fromEntries(extras)
+  } : resolved;
+}
+function buildParamBindings(action) {
+  const map = {};
+  (action.fieldBindings || []).forEach(binding => {
+    if (!binding.userField) return;
+    const paramKey = binding.paramName || binding.userField;
+    map[paramKey] = binding.userField;
+  });
+  return map;
+}
+function buildCommandsFromActions(actions, opts) {
+  return (actions || []).filter(action => !!action && !!action.action).map(action => {
+    const id = `${opts.slug}.${action.action}`;
+    const title = action.label || action.action;
+    const workflow = normalizeWorkflowSelection(action.workflow);
+    const inputTemplate = parseInputTemplate(action.inputTemplate);
+    // Template mode: parameters come from the {{$user.*}} refs, keyed by user field name.
+    const paramSources = inputTemplate ? extractTemplateUserFields(inputTemplate).map(field => ({
+      name: field,
+      userField: field
+    })) : (action.fieldBindings || []).filter(b => !!(b.paramName || b.userField)).map(b => ({
+      name: b.paramName || b.userField,
+      userField: b.userField
+    }));
+    const parameters = paramSources.map(({
+      name,
+      userField
+    }) => {
+      const source = userField && opts.userFields?.[userField] || {};
+      const schema = {
+        type: source.type || 'string'
+      };
+      if (source.title) schema.description = source.title;
+      if (source.format) schema.format = source.format;
+      if (Array.isArray(source.enum)) schema.enum = source.enum;
+      return {
+        name,
+        schema
+      };
+    });
+    const cmd = {
+      command: id,
+      title,
+      parameters,
+      execution: {
+        type: 'workflow',
+        namespace: opts.namespace || '',
+        workflowSlug: workflow.workflowSlug || '',
+        version: workflow.version || '',
+        paramBindings: inputTemplate ? Object.fromEntries(paramSources.map(({
+          name
+        }) => [name, name])) : buildParamBindings(action),
+        ...(inputTemplate !== undefined ? {
+          inputTemplate
+        } : {})
+      }
+    };
+    if (opts.category) cmd.category = opts.category;
+    return cmd;
+  });
+}
+function buildMenusFromCommands(commands) {
+  return {
+    commandPalette: commands.map((cmd, i) => ({
+      command: cmd.command,
+      label: cmd.title,
+      enabled: true,
+      order: i + 1
+    }))
+  };
+}
+function buildIntegrationConfigurationContribution(userFields, slug, identity) {
+  const formProperties = {
+    required: []
+  };
+  const formUIProperties = {};
+  const basePath = `integrationSettings.settings.integrationWorkflow.${slug}`;
+  const metaPaths = new Set();
+  const baseParts = basePath.split('.');
+  for (let i = 1; i <= baseParts.length; i++) {
+    metaPaths.add(baseParts.slice(0, i).join('.'));
+  }
+  Array.from(metaPaths).sort().forEach(path => {
+    const parts = path.split('.');
+    formProperties[`${path}.meta`] = {
+      title: parts[parts.length - 1],
+      description: '',
+      type: 'object',
+      position: 0
+    };
+    formProperties[`${path}.required`] = [];
+  });
+  if (identity) {
+    formProperties[`${basePath}.title`] = {
+      type: 'string',
+      title: 'title',
+      default: identity.title || ''
+    };
+    formProperties[`${basePath}.description`] = {
+      type: 'string',
+      title: 'description',
+      default: identity.description || ''
+    };
+    formProperties[`${basePath}.projectType`] = {
+      type: 'string',
+      title: 'projectType',
+      default: identity.projectType || 'Integration'
+    };
+    formProperties[`${basePath}.tags`] = {
+      type: 'array',
+      title: 'tags',
+      items: {
+        type: 'string'
+      },
+      uniqueItems: true,
+      default: identity.tags || ['integration']
+    };
+    formProperties[`${basePath}.formId`] = {
+      type: 'string',
+      title: 'formId',
+      default: identity.formId,
+      readOnly: true
+    };
+    formProperties[`${basePath}.formTemplateId`] = {
+      type: 'string',
+      title: 'formTemplateId',
+      default: identity.formTemplateId || v4(),
+      readOnly: true
+    };
+    formProperties[`${basePath}.formExtensionId`] = {
+      type: 'string',
+      title: 'formExtensionId',
+      default: identity.formExtensionId || '',
+      readOnly: true
+    };
+    formUIProperties[`${basePath}.formId`] = {
+      'ui:readonly': true
+    };
+    formUIProperties[`${basePath}.formTemplateId`] = {
+      'ui:readonly': true
+    };
+    formUIProperties[`${basePath}.formExtensionId`] = {
+      'ui:readonly': true
+    };
+  }
+  Object.entries(userFields).forEach(([key, def]) => {
+    formProperties[`${basePath}.${key}`] = {
+      type: def.type || 'string',
+      title: def.title || key,
+      ...(def.format ? {
+        format: def.format
+      } : {}),
+      ...(Array.isArray(def.enum) ? {
+        enum: def.enum
+      } : {})
+    };
+  });
+  return [{
+    type: 'form-metadata',
+    properties: {
+      schemaId: 'configuration'
+    }
+  }, {
+    type: 'form',
+    properties: formProperties
+  }, {
+    type: 'formUI',
+    properties: formUIProperties
+  }];
+}
+function extractUserFieldsFromStepperFormMetadata(metadataSchema, stepKey = 'userFields') {
+  const result = {};
+  const stepper = (metadataSchema || []).find(entry => entry?.schemaId === 'stepper-form');
+  const nodes = stepper?.configurationNodes || [];
+  const formNode = nodes.find(node => node?.type === 'form');
+  const props = formNode?.properties || {};
+  const prefix = `${stepKey}.`;
+  Object.keys(props).forEach(key => {
+    if (!key.startsWith(prefix)) return;
+    const rest = key.slice(prefix.length);
+    if (rest.includes('.')) return;
+    const def = props[key] || {};
+    result[rest] = {
+      type: def.type,
+      title: def.title,
+      format: def.format,
+      enum: def.enum
+    };
+  });
+  return result;
+}export{buildCommandsFromActions,buildIntegrationConfigurationContribution,buildMenusFromCommands,buildParamBindings,extractTemplateUserFields,extractUserFieldsFromStepperFormMetadata,parseInputTemplate,resolveInputTemplate};//# sourceMappingURL=integrationCommands.js.map

package/lib/utils/integrationCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrationCommands.js","sources":["../../src/utils/integrationCommands.ts"],"sourcesContent":[null],"names":[],"mappings":"sBAIA,mCAAiB,CAAA,QAA2B,EAAA;MACxC,CAAA,UAAa,OAAA,EAAA;AACb,EAAA,IAAA,OAAQ,QAAA,KAAA,QAAA,EAAA;QAAE;aAAc,IAAA,CAAA,KAAc,CAAA,QAAO,CAAA;AAAC,IAAA,CAAA,CAAA,OAAI,CAAE,EAAA;MAAmB,OAAA,EAAA;AAC1E,IAAA;AAED,EAAA;SACQ;;MAEJ,QAAA,GAAY,4BAAS;MACrB,aAAe,GAAC,6BAAA;AAChB,SAAA,kBAA8B,CAAA,GAAA,EAAM;MACpC,CAAA,GAAA,EAAA,IAAA,EAAA,EAAA,OAAA,SAAA;MACA;AACH,IAAA,OAAA,IAAA,CAAA,KAAA,CAAA,GAAA,CAAA;AAED,EAAA,CAAA,CAAA;IACI,OAAO,SAAS;;;;AAIhB,SAAY,yBAAA,CAAA,IAA8B,EAAA,IAAA,GAAA,IAAA,GAAA,EAAA,EAAA;MAC1C,OAAS;AACZ,IAAA,KAAA,MAAA,CAAA,IAAA,IAAA,CAAA,QAAA,CAAA,QAAA,CAAA,EAAA,IAAA,CAAA,GAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA;AAED,EAAA,CAAA,eAAiB,CAAA,OAAA,CAAA,IAAY,CAAA,EAAA;IACzB,IAAA,CAAA,OAAY,CAAA,IAAA,IAAO,yBAAA,CAAA,IAAA,EAAA,IAAA,CAAA,CAAA;SACnB,IAAA,IAAA,IAAiB,OAAO,IAAA,KAAA,QAAA,EAAA;IACxB,MAAA,CAAA,MAAY,CAAA,IAAM,CAAC,CAAA,OAAA,CAAA,KAAA,IAAA,yBAAA,CAAA,KAAA,EAAA,IAAA,CAAA,CAAA;AACtB,EAAA;AAED,EAAA,eAAiB,CAAA;;SAER,gBAAU,CAAA,IAAA,EAAA,MAAA,EAAA;MACf,OAAS,IAAE,KAAA,QAAW,EAAA;AACtB,IAAA,MAAA,IAAA,GAAa,aAAG,CAAA,IAAe,CAAA,IAAA,CAAA;IAC/B,IAAA,IAAA,EAAA,OAAA,MAAA,CAAA,IAAA,CAAA,CAAA,CAAA,CAAA;IACA,OAAA,IAAA,CAAA,OAAgB,CAAA,QAAO,EAAA,CAAA,CAAA,EAAA,GAAA,KAAA,MAAA,CAAA,MAAA,CAAA,GAAA,CAAA,IAAA,EAAA,CAAA,CAAA;AAC1B,EAAA;AAED,EAAA,IAAM,aAAW,CAAA,IAAA,CAAA,EAAA,OAAY,IAAA,CAAA,GAAA,CAAA,IAAA,IAAA,gBAAA,CAAA,IAAA,EAAA,MAAA,CAAA,CAAA;MACzB,IAAK,IAAE,OAAO,IAAA,KAAA,QAAA,EAAA;IACd,OAAM,MAAE,CAAM,WAAC,CAAA,MAAA,CAAA,OAAA,CAAA,IAAA,CAAA,CAAA,GAAA,CAAA,CAAA,CAAA,GAAA,EAAA,KAAA,CAAA,KAAA,CAAA,GAAA,EAAA,gBAAA,CAAA,KAAA,EAAA,MAAA,CAAA,CAAA,CAAA,CAAA;;AAEf,EAAA,OAAK,IAAE;AACV;AAED;;;;;AAKC;AAED;;AAAuD;AAAyB,SAAA,oBAAA,CAAA,IAAA,EAAA,MAAA,EAAA;AAiBhF,EAAA,MAAA,QAAA,GAAA,gBAAgB,CAAA,IAAA,EAAkB,OAAO;AASzC,EAAA,IAAA,CAAA,QAAA,IAAA,OAAA,QAAA,KAAA,QAAA,IAAA,KAAA,CAAA,OAAA,CAAA,QAAA,CAAA,EAAA,OAAA,QAAA;AACA,EAAA,MAAA,UAAA,GAAA,IAAgB,GAAA,CAAA,yBAA8B,CAAA,IAAE,CAAA,CAAA;AAwBhD,EAAA,MAAA,MAAA,GAAA,MAAA,CAAA,OAAA,CAAA,MAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,GAAA,CAAA,KAAA,CAAA,UAAA,CAAA,GAAA,CAAA,GAAA,CAAA,IAAA,EAAA,GAAA,IAAA,QAAA,CAAA,CAAA;;;;;;;;AAQG,EAAA,CAAA,MAAA,CAAA,aAAA,IAAA,EAAA,EAAA,OAAA,CAAA,OAAA,IAAA;AACH,IAAA,IAAA,CAAA,OAAA,CAAA;AASA,IAAA,MAAA,QAAA,GAAA,OAAgB,CAAA,SAAA,IAAkB,OAAO,CAAA,SAAE;AAU3C,IAAA,GAAA,CAAA,QAAA,CAAA,GAAA,OAAgB,CAAA,SAAA;AA6ChB,EAAA,CAAA,CAAA;SACI,GAAO;;AAEP,iCAAiB,CAAA,OAAA,EAAA,IAAA,EAAA;SACZ,CAAA,OAAQ,IAAC,EAAA,EAAA,MAAA,CAAA,MAAA,IAAA,CAAA,CAAA,MAAA,IAAA,CAAA,CAAA,MAAA,CAAA,MAAA,CAAA,CAAA,GAAA,CAAA,MAAA,IAAA;AACjB,IAAA,MAAA,EAAA,GAAA,CAAA,EAAA,IAAA,CAAA,IAAA,CAAA,CAAA,EAAA,MAAA,CAAA,MAAA,CAAA,CAAA;AAED,IAAA,cAAiB,MAAA,CAAA,KAAA,IAAA,MAAA,CAAA,MAA2B;IACxC,MAAA,QAAc,GAAE,0BAAuB,CAAA,MAAA,CAAA,QAAA,CAAA;AAC1C,IAAA,MAAA,aAAA,GAAA,kBAAA,CAAA,MAAA,CAAA,aAAA,CAAA;AAED;AAWA,IAAA,kBAAiB,GAAA,aAAA,GAAA,yBAAgC,CAAA,aAAA,CAAA,CAAA,GAAA,CAAA,KAAA,KAAA;MAC7C,IAAM,EAAE,KAAA;MACR;KACA,CAAA,CAAA,GAAA,CAAA,MAAA,CAAA,aAAA,IAAA,EAAA,EAAA,MAAA,CAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,SAAA,IAAA,CAAA,CAAA,SAAA,CAAA,CAAA,CAAA,GAAA,CAAA,CAAA,KAAA;MACA,IAAA,EAAA,CAAA,CAAA,SAAiB,IAAM,CAAC,CAAA,SAAA;MACxB,SAAA,EAAA,CAAA,CAAe;KACf,CAAA,CAAA;IACA,MAAA,UAAc,GAAA,YAAO,CAAA,GAAA,CAAA,CAAA;AACrB,MAAA,IAAK;AACR,MAAA;AAED,KAAA,KAAA;AAqFA,MAAA,MAAA,MAAA,GAAA,6CACI,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@adminide-stack/form-builder-core",
-    "version": "5.1.8-alpha.15",
+    "version": "5.1.8-alpha.154",
     "sideEffects": false,
     "type": "module",
     "main": "lib/index.js",
@@ -19,12 +19,11 @@
         "watch": "npm run build:lib:watch"
     },
     "devDependencies": {
-        "@adminide-stack/connector-catalog": "5.1.8-alpha.15",
-        "common": "5.1.8-alpha.15",
+        "common": "5.1.8-alpha.144",
         "typescript": "^5.4.0"
     },
     "publishConfig": {
         "access": "public"
     },
-    "gitHead": "62547a85879fc05c08ee58b17ec0dc1661f3c4e6"
+    "gitHead": "d23c9fa0b16d711de23a5389aeebd0bc326f496b"
 }