@backstage/backend-app-api 1.7.3-next.0 → 1.7.3-next.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @backstage/backend-app-api
 
+## 1.7.3-next.1
+
+### Patch Changes
+
+- 03133fc: Hardened backend startup against malformed installed backend features, with contextual input errors and configured boot-failure handling when invalid registrations can be attributed to a plugin or module.
+- Updated dependencies
+  - @backstage/connections@0.3.0-next.2
+
 ## 1.7.3-next.0
 
 ### Patch Changes

package/dist/backend-internal/src/wiring/helpers.cjs.js

@@ -4,13 +4,20 @@ function isPromise(value) {
   return typeof value === "object" && value !== null && "then" in value && typeof value.then === "function";
 }
 function unwrapFeature(feature) {
-  if ("$$type" in feature) {
-    return feature;
+  let current = feature;
+  for (let i = 0; i < 2; i++) {
+    if (current !== null && (typeof current === "object" || typeof current === "function")) {
+      if ("$$type" in current) {
+        return current;
+      }
+      if ("default" in current) {
+        current = current.default;
+        continue;
+      }
+    }
+    break;
   }
-  if ("default" in feature) {
-    return feature.default;
-  }
-  return feature;
+  return current;
 }
 
 exports.isPromise = isPromise;

package/dist/backend-internal/src/wiring/helpers.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.cjs.js","sources":["../../../../../backend-internal/src/wiring/helpers.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { BackendFeature } from '@backstage/backend-plugin-api';\n\n/** @internal */\nexport function isPromise<T>(value: unknown | Promise<T>): value is Promise<T> {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'then' in value &&\n    typeof value.then === 'function'\n  );\n}\n\n/**\n * Unwraps a backend feature from a possibly double-nested default export.\n * This is a workaround where default exports get transpiled to\n * `exports['default'] = ...` in CommonJS modules, which in turn results\n * in a double `{ default: { default: ... } }` nesting when importing\n * using a dynamic import.\n *\n * @internal\n */\nexport function unwrapFeature(\n  feature: BackendFeature | { default: BackendFeature },\n): BackendFeature {\n  if ('$$type' in feature) {\n    return feature;\n  }\n\n  if ('default' in feature) {\n    return feature.default;\n  }\n\n  return feature;\n}\n"],"names":[],"mappings":";;AAmBO,SAAS,UAAa,KAAA,EAAkD;AAC7E,EAAA,OACE,OAAO,UAAU,QAAA,IACjB,KAAA,KAAU,QACV,MAAA,IAAU,KAAA,IACV,OAAO,KAAA,CAAM,IAAA,KAAS,UAAA;AAE1B;AAWO,SAAS,cACd,OAAA,EACgB;AAChB,EAAA,IAAI,YAAY,OAAA,EAAS;AACvB,IAAA,OAAO,OAAA;AAAA,EACT;AAEA,EAAA,IAAI,aAAa,OAAA,EAAS;AACxB,IAAA,OAAO,OAAA,CAAQ,OAAA;AAAA,EACjB;AAEA,EAAA,OAAO,OAAA;AACT;;;;;"}
+{"version":3,"file":"helpers.cjs.js","sources":["../../../../../backend-internal/src/wiring/helpers.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { BackendFeature } from '@backstage/backend-plugin-api';\n\n/** @internal */\nexport function isPromise<T>(value: unknown | Promise<T>): value is Promise<T> {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'then' in value &&\n    typeof value.then === 'function'\n  );\n}\n\n/**\n * Unwraps a backend feature from a possibly double-nested default export.\n * This is a workaround where default exports get transpiled to\n * `exports['default'] = ...` in CommonJS modules, which in turn results\n * in a double `{ default: { default: ... } }` nesting when importing\n * using a dynamic import.\n *\n * @internal\n */\nexport function unwrapFeature(\n  feature: BackendFeature | { default: BackendFeature },\n): BackendFeature {\n  let current: unknown = feature;\n  for (let i = 0; i < 2; i++) {\n    if (\n      current !== null &&\n      (typeof current === 'object' || typeof current === 'function')\n    ) {\n      if ('$$type' in current) {\n        return current as BackendFeature;\n      }\n      if ('default' in current) {\n        current = current.default;\n        continue;\n      }\n    }\n    break;\n  }\n\n  return current as BackendFeature;\n}\n"],"names":[],"mappings":";;AAmBO,SAAS,UAAa,KAAA,EAAkD;AAC7E,EAAA,OACE,OAAO,UAAU,QAAA,IACjB,KAAA,KAAU,QACV,MAAA,IAAU,KAAA,IACV,OAAO,KAAA,CAAM,IAAA,KAAS,UAAA;AAE1B;AAWO,SAAS,cACd,OAAA,EACgB;AAChB,EAAA,IAAI,OAAA,GAAmB,OAAA;AACvB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,IACE,YAAY,IAAA,KACX,OAAO,YAAY,QAAA,IAAY,OAAO,YAAY,UAAA,CAAA,EACnD;AACA,MAAA,IAAI,YAAY,OAAA,EAAS;AACvB,QAAA,OAAO,OAAA;AAAA,MACT;AACA,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,OAAA,GAAU,OAAA,CAAQ,OAAA;AAClB,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;;;;;"}

package/dist/connections-node/src/DefaultConnectionsService.cjs.js

@@ -1,6 +1,7 @@
 'use strict';
 
 var lookup = require('./lookup.cjs.js');
+var lookupStrategies = require('./lookupStrategies.cjs.js');
 var errors = require('@backstage/errors');
 var v4 = require('zod/v4');
 var getLegacyIntegrations = require('./getLegacyIntegrations.cjs.js');
@@ -19,6 +20,16 @@ function describeError(error) {
   }
   return e.message;
 }
+function getLookupStrategy(name) {
+  return lookupStrategies.lookupStrategies[name];
+}
+function connectionIdentityOf(strategy, connection) {
+  if (!strategy.identityField) {
+    return void 0;
+  }
+  const value = connection[strategy.identityField];
+  return typeof value === "string" ? value : void 0;
+}
 class PluginConnectionsService {
   logger;
   connections;
@@ -30,40 +41,40 @@ class PluginConnectionsService {
     const result = await this.findOptional(options);
     if (!result) {
       throw new errors.NotFoundError(
-        `Connection not found for type "${options.type}" matching url "${options.url}"`
+        `Connection not found for type "${options.type}"`
       );
     }
     return result;
   }
   async findOptional({
     type,
-    url,
+    query,
     authMethods
   }) {
+    const connectionType = lookup.getConnectionType(type);
+    const strategy = getLookupStrategy(connectionType.lookupStrategy);
+    const identity = strategy.identityFromQuery(query);
     this.logger.debug(
-      `Finding connection of type "${type}" matching url "${url}"`
+      `Finding connection of type "${type}"${identity ? ` matching ${strategy.identityField} "${identity}"` : ""}`
     );
-    let host;
-    try {
-      host = new URL(url).host;
-    } catch {
-      throw new errors.InputError(
-        `Invalid url "${url}" passed to ConnectionsService.find`
+    let connection;
+    if (identity !== void 0) {
+      connection = this.connections.find(
+        (c) => c.type === type && connectionIdentityOf(strategy, c) === identity
       );
+    } else {
+      connection = this.connections.find((c) => c.type === type);
     }
-    const connection = this.connections.find(
-      (c) => c.type === type && c.host === host
-    );
     if (!connection) {
       return void 0;
     }
     if (connection.auth.length === 0) {
       throw new errors.NotAllowedError(
-        `Connection of type "${type}" for host "${host}" has no auth method available to this plugin`
+        `Connection of type "${type}"${identity ? ` for ${strategy.identityField} "${identity}"` : ""} has no auth method available to this plugin`
       );
     }
-    const matchAuth = lookup.getConnectionType(type).matchAuth;
-    const selected = matchAuth ? matchAuth(connection.auth, url) : connection.auth[0];
+    const matchAuth = connectionType.matchAuth;
+    const selected = matchAuth ? matchAuth(connection.auth, query) : connection.auth[0];
     if (!selected) {
       return void 0;
     }
@@ -72,6 +83,9 @@ class PluginConnectionsService {
         `Connection not found for type "${type}" with auth method "${selected.method}"`
       );
     }
+    this.logger.debug(
+      `Selected connection of type "${type}"${identity ? ` for ${strategy.identityField} "${identity}"` : ""} using auth method "${selected.method}"`
+    );
     return {
       ...connection,
       auth: selected
@@ -102,6 +116,9 @@ class DefaultConnectionsService {
     const fromConfig = this.#validateConfig(
       rawConnections ?? []
     );
+    this.logger.debug(
+      `Connections configuration resolved ${legacy.length} connection${legacy.length === 1 ? "" : "s"} from legacy integrations and ${fromConfig.length} explicit connection${fromConfig.length === 1 ? "" : "s"}`
+    );
     if (legacy.length === 0 && fromConfig.length === 0) {
       return;
     }
@@ -110,11 +127,13 @@ class DefaultConnectionsService {
     );
     const seen = /* @__PURE__ */ new Set();
     for (const c of this.connections) {
-      const host = c.host;
-      const key = `${c.type} ${host}`;
+      const connectionType = lookup.getConnectionType(c.type);
+      const strategy = getLookupStrategy(connectionType.lookupStrategy);
+      const identity = connectionIdentityOf(strategy, c);
+      const key = `${c.type} ${identity ?? ""}`;
       if (seen.has(key)) {
         throw new errors.InputError(
-          `Duplicate connection of type "${c.type}" for host "${host}"`
+          identity !== void 0 ? `Duplicate connection of type "${c.type}" for ${strategy.identityField} "${identity}"` : `Duplicate connection of type "${c.type}"`
         );
       }
       seen.add(key);
@@ -164,15 +183,44 @@ ${describeError(
     if (!lookup.isConnectionTypeKey(connection.type)) {
       throw new errors.InputError(`Unrecognised connection type ${connection.type}`);
     }
-    const parsed = lookup.getConnectionType(connection.type).configSchema.parse(
-      connection
-    );
-    if (parsed.auth.length === 0) {
+    const connectionType = lookup.getConnectionType(connection.type);
+    const rawAuth = connection.auth;
+    if (!Array.isArray(rawAuth) || rawAuth.length === 0) {
       throw new errors.InputError(
         `Connection of type "${connection.type}" must configure at least one auth method`
       );
     }
-    return parsed;
+    const auth = rawAuth.map((entry) => {
+      if (typeof entry.method !== "string") {
+        throw new errors.InputError(
+          `Auth entry for connection type "${connection.type}" is missing a "method" field`
+        );
+      }
+      const authMethod = connectionType.authMethods.find(
+        (am) => am.method === entry.method
+      );
+      if (!authMethod) {
+        throw new errors.InputError(
+          `Unknown auth method "${entry.method}" for connection type "${connection.type}"`
+        );
+      }
+      const { method, title: title2, match: match2, ...rest } = entry;
+      return {
+        ...authMethod.configSchema.parse(rest),
+        method,
+        title: title2,
+        match: match2
+      };
+    });
+    const { type, auth: _, title, match, ...configFields } = connection;
+    const parsed = connectionType.configSchema.parse(configFields);
+    return {
+      ...parsed,
+      type: connection.type,
+      title,
+      match,
+      auth
+    };
   }
   #assignDefaultTitles() {
     const typeCounts = /* @__PURE__ */ new Map();
@@ -183,9 +231,13 @@ ${describeError(
     for (const c of this.connections) {
       if (!c.title) {
         const type = c.type;
-        const displayName = lookup.getConnectionType(type).title;
-        const host = c.host;
-        c.title = typeCounts.get(type) > 1 ? `${displayName} (${host})` : displayName;
+        const connectionType = lookup.getConnectionType(type);
+        const displayName = connectionType.title;
+        const identity = connectionIdentityOf(
+          getLookupStrategy(connectionType.lookupStrategy),
+          c
+        );
+        c.title = typeCounts.get(type) > 1 && identity ? `${displayName} (${identity})` : displayName;
       }
     }
   }

package/dist/connections-node/src/DefaultConnectionsService.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"DefaultConnectionsService.cjs.js","sources":["../../../../connections-node/src/DefaultConnectionsService.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  LoggerService,\n  RootConfigService,\n} from '@backstage/backend-plugin-api';\nimport type {\n  Connection,\n  ConnectionAuthMethodKey,\n  ConnectionsService,\n  ConnectionTypeKey,\n} from '@backstage/connections';\nimport { getConnectionType, isConnectionTypeKey } from './lookup';\nimport type { RootConnection } from './types';\nimport { JsonObject } from '@backstage/types';\nimport {\n  InputError,\n  NotAllowedError,\n  NotFoundError,\n  toError,\n} from '@backstage/errors';\nimport { z } from 'zod/v4';\nimport { getLegacyIntegrations } from './getLegacyIntegrations';\nimport { combineConnectionSources } from './combineConnectionSources';\n\nfunction describeError(error: unknown): string {\n  const e = toError(error);\n  if (e.name === 'ZodError') {\n    return z.prettifyError(e as unknown as z.ZodError);\n  }\n  if (e.cause !== undefined) {\n    const cause = toError(e.cause);\n    if (cause.name === 'ZodError') {\n      return z.prettifyError(cause as unknown as z.ZodError);\n    }\n  }\n  return e.message;\n}\n\nclass PluginConnectionsService implements ConnectionsService {\n  private readonly logger: LoggerService;\n  private readonly connections: Connection[];\n\n  constructor(logger: LoggerService, connections: Connection[]) {\n    this.logger = logger;\n    this.connections = connections;\n  }\n\n  async find<\n    TType extends ConnectionTypeKey,\n    TAuthMethod extends ConnectionAuthMethodKey<TType>,\n  >(options: {\n    type: TType;\n    url: string;\n    authMethods: readonly [TAuthMethod, ...TAuthMethod[]];\n  }): Promise<Connection<TType, TAuthMethod>> {\n    const result = await this.findOptional(options);\n    if (!result) {\n      throw new NotFoundError(\n        `Connection not found for type \"${options.type}\" matching url \"${options.url}\"`,\n      );\n    }\n    return result;\n  }\n\n  async findOptional<\n    TType extends ConnectionTypeKey,\n    TAuthMethod extends ConnectionAuthMethodKey<TType>,\n  >({\n    type,\n    url,\n    authMethods,\n  }: {\n    type: TType;\n    url: string;\n    authMethods: readonly [TAuthMethod, ...TAuthMethod[]];\n  }): Promise<Connection<TType, TAuthMethod> | undefined> {\n    this.logger.debug(\n      `Finding connection of type \"${type}\" matching url \"${url}\"`,\n    );\n    let host: string;\n    try {\n      host = new URL(url).host;\n    } catch {\n      throw new InputError(\n        `Invalid url \"${url}\" passed to ConnectionsService.find`,\n      );\n    }\n\n    const connection = this.connections.find(\n      c => c.type === type && (c as { host?: unknown }).host === host,\n    ) as Connection<TType> | undefined;\n\n    if (!connection) {\n      return undefined;\n    }\n\n    if (connection.auth.length === 0) {\n      throw new NotAllowedError(\n        `Connection of type \"${type}\" for host \"${host}\" has no auth method available to this plugin`,\n      );\n    }\n\n    const matchAuth = getConnectionType(type).matchAuth as\n      | ((authMethods: any[], query: string) => any | undefined)\n      | undefined;\n\n    // We take the host-matched connection and check to see if there's an auth method better suited to the current url\n    // e.g. org selection\n    const selected = matchAuth\n      ? matchAuth(connection.auth, url)\n      : connection.auth[0];\n\n    if (!selected) {\n      return undefined;\n    }\n\n    // Now we compare user requested auth methods with what the connection can provide\n    if (!(authMethods as readonly string[]).includes(selected.method)) {\n      throw new NotAllowedError(\n        `Connection not found for type \"${type}\" with auth method \"${selected.method}\"`,\n      );\n    }\n\n    return {\n      ...connection,\n      auth: selected,\n    } as Connection<TType, TAuthMethod>;\n  }\n}\n\n/** @public */\nexport class DefaultConnectionsService {\n  private readonly logger: LoggerService;\n  private readonly connections: RootConnection[];\n  private readonly config: RootConfigService;\n\n  private constructor(logger: LoggerService, config: RootConfigService) {\n    this.logger = logger;\n    this.config = config;\n    this.connections = [];\n    this.#registerConnectionsFromConfig();\n  }\n\n  static create(options: {\n    logger: LoggerService;\n    config: RootConfigService;\n  }): DefaultConnectionsService {\n    return new DefaultConnectionsService(options.logger, options.config);\n  }\n\n  #registerConnectionsFromConfig(): void {\n    const legacy = this.#validateLegacy(getLegacyIntegrations(this.config));\n\n    const rawConnections = this.config.getOptional('connections');\n    if (rawConnections !== undefined && !Array.isArray(rawConnections)) {\n      throw new InputError(\n        'Expected \"connections\" config to be an array of connection objects',\n      );\n    }\n\n    const fromConfig = this.#validateConfig(\n      (rawConnections as JsonObject[] | undefined) ?? [],\n    );\n\n    if (legacy.length === 0 && fromConfig.length === 0) {\n      return;\n    }\n\n    this.connections.push(\n      ...combineConnectionSources(legacy, fromConfig, this.logger),\n    );\n\n    const seen = new Set<string>();\n    for (const c of this.connections) {\n      const host = (c as unknown as { host: string }).host;\n      const key = `${c.type} ${host}`;\n      if (seen.has(key)) {\n        throw new InputError(\n          `Duplicate connection of type \"${c.type}\" for host \"${host}\"`,\n        );\n      }\n      seen.add(key);\n    }\n\n    this.#assignDefaultTitles();\n    this.#assignDefaultAuthTitles();\n\n    this.logger.info(\n      `Loaded ${this.connections.length} connection${\n        this.connections.length === 1 ? '' : 's'\n      } from configuration`,\n    );\n  }\n\n  #validateConfig(raw: JsonObject[]): RootConnection[] {\n    return raw.map(v => {\n      try {\n        return this.#validateConnection(v);\n      } catch (e) {\n        const type = typeof v.type === 'string' ? v.type : 'unknown';\n        throw new InputError(\n          `Invalid connection of type \"${type}\" in connections config:\\n${describeError(\n            e,\n          )}`,\n        );\n      }\n    });\n  }\n\n  #validateLegacy(raw: JsonObject[]): RootConnection[] {\n    const result: RootConnection[] = [];\n    for (const v of raw) {\n      try {\n        result.push(this.#validateConnection(v));\n      } catch (e) {\n        const type = typeof v.type === 'string' ? v.type : 'unknown';\n        this.logger.error(\n          `Failed to validate connection of type \"${type}\":\\n${describeError(\n            e,\n          )}`,\n        );\n      }\n    }\n    return result;\n  }\n\n  #validateConnection(connection: JsonObject): RootConnection {\n    if (typeof connection.type !== 'string') {\n      throw new InputError(`Unrecognised connection type ${connection.type}`);\n    }\n\n    if (!isConnectionTypeKey(connection.type)) {\n      throw new InputError(`Unrecognised connection type ${connection.type}`);\n    }\n\n    const parsed = getConnectionType(connection.type).configSchema.parse(\n      connection,\n    );\n    if (parsed.auth.length === 0) {\n      throw new InputError(\n        `Connection of type \"${connection.type}\" must configure at least one auth method`,\n      );\n    }\n    return parsed;\n  }\n\n  #assignDefaultTitles(): void {\n    const typeCounts = new Map<string, number>();\n    for (const c of this.connections) {\n      const type = c.type as ConnectionTypeKey;\n      typeCounts.set(type, (typeCounts.get(type) ?? 0) + 1);\n    }\n    for (const c of this.connections) {\n      if (!c.title) {\n        const type = c.type as ConnectionTypeKey;\n        const displayName = getConnectionType(type).title;\n        const host = (c as unknown as { host: string }).host;\n        (c as { title?: string }).title =\n          typeCounts.get(type)! > 1 ? `${displayName} (${host})` : displayName;\n      }\n    }\n  }\n\n  #assignDefaultAuthTitles(): void {\n    for (const c of this.connections) {\n      const type = c.type as ConnectionTypeKey;\n      const connectionType = getConnectionType(type);\n      for (const auth of c.auth) {\n        const authMethod = connectionType.authMethods.find(\n          am => am.method === auth.method,\n        );\n        // The config schema only allows methods declared by the connection\n        // type, so failing to find one means that invariant has been broken.\n        if (!authMethod) {\n          throw new Error(\n            `Unknown auth method \"${auth.method}\" for connection type \"${type}\"`,\n          );\n        }\n        auth.title ??= authMethod.title;\n      }\n    }\n  }\n\n  #getConnectionsForPlugin(pluginId: string): Connection[] {\n    // Filter connections and hide auth methods based on these conditions:\n    // 1. Include Connections with no plugin matcher condition\n    // 2. Include Connections with a plugin matcher condition for this plugin\n    // 3. Include auth methods with no plugin matcher condition\n    // 4. Remove auth methods with a plugin matcher condition for other plugins\n    return this.connections.flatMap(({ match, auth, ...rest }) => {\n      if (match && !match.plugins.includes(pluginId)) {\n        return [];\n      }\n\n      const pluginMatched: Connection['auth'] = [];\n      const unmatched: Connection['auth'] = [];\n      for (const { match: authMatch, ...authRest } of auth) {\n        if (authMatch) {\n          if (!authMatch.plugins.includes(pluginId)) continue;\n          pluginMatched.push(authRest as Connection['auth'][number]);\n        } else {\n          unmatched.push(authRest as Connection['auth'][number]);\n        }\n      }\n\n      return [\n        { ...rest, auth: [...pluginMatched, ...unmatched] } as Connection,\n      ];\n    });\n  }\n\n  forPlugin(\n    pluginId: string,\n    options?: {\n      logger: LoggerService;\n    },\n  ): ConnectionsService {\n    const logger = options?.logger ?? this.logger;\n    return new PluginConnectionsService(\n      logger,\n      this.#getConnectionsForPlugin(pluginId),\n    );\n  }\n}\n"],"names":["toError","z","NotFoundError","InputError","NotAllowedError","getConnectionType","getLegacyIntegrations","combineConnectionSources","isConnectionTypeKey"],"mappings":";;;;;;;;AAsCA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,MAAM,CAAA,GAAIA,eAAQ,KAAK,CAAA;AACvB,EAAA,IAAI,CAAA,CAAE,SAAS,UAAA,EAAY;AACzB,IAAA,OAAOC,IAAA,CAAE,cAAc,CAA0B,CAAA;AAAA,EACnD;AACA,EAAA,IAAI,CAAA,CAAE,UAAU,MAAA,EAAW;AACzB,IAAA,MAAM,KAAA,GAAQD,cAAA,CAAQ,CAAA,CAAE,KAAK,CAAA;AAC7B,IAAA,IAAI,KAAA,CAAM,SAAS,UAAA,EAAY;AAC7B,MAAA,OAAOC,IAAA,CAAE,cAAc,KAA8B,CAAA;AAAA,IACvD;AAAA,EACF;AACA,EAAA,OAAO,CAAA,CAAE,OAAA;AACX;AAEA,MAAM,wBAAA,CAAuD;AAAA,EAC1C,MAAA;AAAA,EACA,WAAA;AAAA,EAEjB,WAAA,CAAY,QAAuB,WAAA,EAA2B;AAC5D,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,WAAA;AAAA,EACrB;AAAA,EAEA,MAAM,KAGJ,OAAA,EAI0C;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA;AAC9C,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAIC,oBAAA;AAAA,QACR,CAAA,+BAAA,EAAkC,OAAA,CAAQ,IAAI,CAAA,gBAAA,EAAmB,QAAQ,GAAG,CAAA,CAAA;AAAA,OAC9E;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAM,YAAA,CAGJ;AAAA,IACA,IAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF,EAIwD;AACtD,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,4BAAA,EAA+B,IAAI,CAAA,gBAAA,EAAmB,GAAG,CAAA,CAAA;AAAA,KAC3D;AACA,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,IAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAIC,iBAAA;AAAA,QACR,gBAAgB,GAAG,CAAA,mCAAA;AAAA,OACrB;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa,KAAK,WAAA,CAAY,IAAA;AAAA,MAClC,CAAA,CAAA,KAAK,CAAA,CAAE,IAAA,KAAS,IAAA,IAAS,EAAyB,IAAA,KAAS;AAAA,KAC7D;AAEA,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,UAAA,CAAW,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAChC,MAAA,MAAM,IAAIC,sBAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,IAAI,CAAA,YAAA,EAAe,IAAI,CAAA,6CAAA;AAAA,OAChD;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAYC,wBAAA,CAAkB,IAAI,CAAA,CAAE,SAAA;AAM1C,IAAA,MAAM,QAAA,GAAW,YACb,SAAA,CAAU,UAAA,CAAW,MAAM,GAAG,CAAA,GAC9B,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA;AAErB,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,OAAO,MAAA;AAAA,IACT;AAGA,IAAA,IAAI,CAAE,WAAA,CAAkC,QAAA,CAAS,QAAA,CAAS,MAAM,CAAA,EAAG;AACjE,MAAA,MAAM,IAAID,sBAAA;AAAA,QACR,CAAA,+BAAA,EAAkC,IAAI,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAA;AAAA,OAC9E;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,GAAG,UAAA;AAAA,MACH,IAAA,EAAM;AAAA,KACR;AAAA,EACF;AACF;AAGO,MAAM,yBAAA,CAA0B;AAAA,EACpB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,CAAY,QAAuB,MAAA,EAA2B;AACpE,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,cAAc,EAAC;AACpB,IAAA,IAAA,CAAK,8BAAA,EAA+B;AAAA,EACtC;AAAA,EAEA,OAAO,OAAO,OAAA,EAGgB;AAC5B,IAAA,OAAO,IAAI,yBAAA,CAA0B,OAAA,CAAQ,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAAA,EACrE;AAAA,EAEA,8BAAA,GAAuC;AACrC,IAAA,MAAM,SAAS,IAAA,CAAK,eAAA,CAAgBE,2CAAA,CAAsB,IAAA,CAAK,MAAM,CAAC,CAAA;AAEtE,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,MAAA,CAAO,WAAA,CAAY,aAAa,CAAA;AAC5D,IAAA,IAAI,mBAAmB,MAAA,IAAa,CAAC,KAAA,CAAM,OAAA,CAAQ,cAAc,CAAA,EAAG;AAClE,MAAA,MAAM,IAAIH,iBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,aAAa,IAAA,CAAK,eAAA;AAAA,MACrB,kBAA+C;AAAC,KACnD;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,IAAK,UAAA,CAAW,WAAW,CAAA,EAAG;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,WAAA,CAAY,IAAA;AAAA,MACf,GAAGI,iDAAA,CAAyB,MAAA,EAAQ,UAAA,EAAY,KAAK,MAAM;AAAA,KAC7D;AAEA,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,MAAM,OAAQ,CAAA,CAAkC,IAAA;AAChD,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,CAAA,CAAE,IAAI,IAAI,IAAI,CAAA,CAAA;AAC7B,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACjB,QAAA,MAAM,IAAIJ,iBAAA;AAAA,UACR,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,YAAA,EAAe,IAAI,CAAA,CAAA;AAAA,SAC5D;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AAAA,IACd;AAEA,IAAA,IAAA,CAAK,oBAAA,EAAqB;AAC1B,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAE9B,IAAA,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MACV,CAAA,OAAA,EAAU,IAAA,CAAK,WAAA,CAAY,MAAM,CAAA,WAAA,EAC/B,KAAK,WAAA,CAAY,MAAA,KAAW,CAAA,GAAI,EAAA,GAAK,GACvC,CAAA,mBAAA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,gBAAgB,GAAA,EAAqC;AACnD,IAAA,OAAO,GAAA,CAAI,IAAI,CAAA,CAAA,KAAK;AAClB,MAAA,IAAI;AACF,QAAA,OAAO,IAAA,CAAK,oBAAoB,CAAC,CAAA;AAAA,MACnC,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,GAAW,EAAE,IAAA,GAAO,SAAA;AACnD,QAAA,MAAM,IAAIA,iBAAA;AAAA,UACR,+BAA+B,IAAI,CAAA;AAAA,EAA6B,aAAA;AAAA,YAC9D;AAAA,WACD,CAAA;AAAA,SACH;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,gBAAgB,GAAA,EAAqC;AACnD,IAAA,MAAM,SAA2B,EAAC;AAClC,IAAA,KAAA,MAAW,KAAK,GAAA,EAAK;AACnB,MAAA,IAAI;AACF,QAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,mBAAA,CAAoB,CAAC,CAAC,CAAA;AAAA,MACzC,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,GAAW,EAAE,IAAA,GAAO,SAAA;AACnD,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,0CAA0C,IAAI,CAAA;AAAA,EAAO,aAAA;AAAA,YACnD;AAAA,WACD,CAAA;AAAA,SACH;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,oBAAoB,UAAA,EAAwC;AAC1D,IAAA,IAAI,OAAO,UAAA,CAAW,IAAA,KAAS,QAAA,EAAU;AACvC,MAAA,MAAM,IAAIA,iBAAA,CAAW,CAAA,6BAAA,EAAgC,UAAA,CAAW,IAAI,CAAA,CAAE,CAAA;AAAA,IACxE;AAEA,IAAA,IAAI,CAACK,0BAAA,CAAoB,UAAA,CAAW,IAAI,CAAA,EAAG;AACzC,MAAA,MAAM,IAAIL,iBAAA,CAAW,CAAA,6BAAA,EAAgC,UAAA,CAAW,IAAI,CAAA,CAAE,CAAA;AAAA,IACxE;AAEA,IAAA,MAAM,MAAA,GAASE,wBAAA,CAAkB,UAAA,CAAW,IAAI,EAAE,YAAA,CAAa,KAAA;AAAA,MAC7D;AAAA,KACF;AACA,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAIF,iBAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,WAAW,IAAI,CAAA,yCAAA;AAAA,OACxC;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,oBAAA,GAA6B;AAC3B,IAAA,MAAM,UAAA,uBAAiB,GAAA,EAAoB;AAC3C,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,MAAM,OAAO,CAAA,CAAE,IAAA;AACf,MAAA,UAAA,CAAW,IAAI,IAAA,EAAA,CAAO,UAAA,CAAW,IAAI,IAAI,CAAA,IAAK,KAAK,CAAC,CAAA;AAAA,IACtD;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,IAAI,CAAC,EAAE,KAAA,EAAO;AACZ,QAAA,MAAM,OAAO,CAAA,CAAE,IAAA;AACf,QAAA,MAAM,WAAA,GAAcE,wBAAA,CAAkB,IAAI,CAAA,CAAE,KAAA;AAC5C,QAAA,MAAM,OAAQ,CAAA,CAAkC,IAAA;AAChD,QAAC,CAAA,CAAyB,KAAA,GACxB,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,GAAK,CAAA,GAAI,CAAA,EAAG,WAAW,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA,CAAA,GAAM,WAAA;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,wBAAA,GAAiC;AAC/B,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,MAAM,OAAO,CAAA,CAAE,IAAA;AACf,MAAA,MAAM,cAAA,GAAiBA,yBAAkB,IAAI,CAAA;AAC7C,MAAA,KAAA,MAAW,IAAA,IAAQ,EAAE,IAAA,EAAM;AACzB,QAAA,MAAM,UAAA,GAAa,eAAe,WAAA,CAAY,IAAA;AAAA,UAC5C,CAAA,EAAA,KAAM,EAAA,CAAG,MAAA,KAAW,IAAA,CAAK;AAAA,SAC3B;AAGA,QAAA,IAAI,CAAC,UAAA,EAAY;AACf,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,qBAAA,EAAwB,IAAA,CAAK,MAAM,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAA;AAAA,WACnE;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAU,UAAA,CAAW,KAAA;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,yBAAyB,QAAA,EAAgC;AAMvD,IAAA,OAAO,IAAA,CAAK,YAAY,OAAA,CAAQ,CAAC,EAAE,KAAA,EAAO,IAAA,EAAM,GAAG,IAAA,EAAK,KAAM;AAC5D,MAAA,IAAI,SAAS,CAAC,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC9C,QAAA,OAAO,EAAC;AAAA,MACV;AAEA,MAAA,MAAM,gBAAoC,EAAC;AAC3C,MAAA,MAAM,YAAgC,EAAC;AACvC,MAAA,KAAA,MAAW,EAAE,KAAA,EAAO,SAAA,EAAW,GAAG,QAAA,MAAc,IAAA,EAAM;AACpD,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,IAAI,CAAC,SAAA,CAAU,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC3C,UAAA,aAAA,CAAc,KAAK,QAAsC,CAAA;AAAA,QAC3D,CAAA,MAAO;AACL,UAAA,SAAA,CAAU,KAAK,QAAsC,CAAA;AAAA,QACvD;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,EAAE,GAAG,IAAA,EAAM,IAAA,EAAM,CAAC,GAAG,aAAA,EAAe,GAAG,SAAS,CAAA;AAAE,OACpD;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,SAAA,CACE,UACA,OAAA,EAGoB;AACpB,IAAA,MAAM,MAAA,GAAS,OAAA,EAAS,MAAA,IAAU,IAAA,CAAK,MAAA;AACvC,IAAA,OAAO,IAAI,wBAAA;AAAA,MACT,MAAA;AAAA,MACA,IAAA,CAAK,yBAAyB,QAAQ;AAAA,KACxC;AAAA,EACF;AACF;;;;"}
+{"version":3,"file":"DefaultConnectionsService.cjs.js","sources":["../../../../connections-node/src/DefaultConnectionsService.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  LoggerService,\n  RootConfigService,\n} from '@backstage/backend-plugin-api';\nimport type {\n  Connection,\n  ConnectionAuthMethodKey,\n  ConnectionsService,\n  ConnectionTypeKey,\n  LookupConnectionType,\n  LookupStrategy,\n} from '@backstage/connections';\nimport { getConnectionType, isConnectionTypeKey } from './lookup';\nimport { lookupStrategies } from './lookupStrategies';\nimport type { RootConnection } from './types';\nimport { JsonObject } from '@backstage/types';\nimport {\n  InputError,\n  NotAllowedError,\n  NotFoundError,\n  toError,\n} from '@backstage/errors';\nimport { z } from 'zod/v4';\nimport { getLegacyIntegrations } from './getLegacyIntegrations';\nimport { combineConnectionSources } from './combineConnectionSources';\n\nfunction describeError(error: unknown): string {\n  const e = toError(error);\n  if (e.name === 'ZodError') {\n    return z.prettifyError(e as unknown as z.ZodError);\n  }\n  if (e.cause !== undefined) {\n    const cause = toError(e.cause);\n    if (cause.name === 'ZodError') {\n      return z.prettifyError(cause as unknown as z.ZodError);\n    }\n  }\n  return e.message;\n}\n\nfunction getLookupStrategy<K extends LookupStrategy>(\n  name: K,\n): (typeof lookupStrategies)[K] {\n  return lookupStrategies[name];\n}\n\n// The identity field name is only known at runtime, so the typed connection\n// object cannot be indexed directly; this helper contains the erased read.\nfunction connectionIdentityOf(\n  strategy: { identityField?: string },\n  connection: object,\n): string | undefined {\n  if (!strategy.identityField) {\n    return undefined;\n  }\n  const value = (connection as Record<string, unknown>)[strategy.identityField];\n  return typeof value === 'string' ? value : undefined;\n}\n\nclass PluginConnectionsService implements ConnectionsService {\n  private readonly logger: LoggerService;\n  private readonly connections: Connection[];\n\n  constructor(logger: LoggerService, connections: Connection[]) {\n    this.logger = logger;\n    this.connections = connections;\n  }\n\n  async find<\n    TType extends ConnectionTypeKey,\n    TAuthMethod extends ConnectionAuthMethodKey<TType>,\n  >(options: {\n    type: TType;\n    query: LookupConnectionType<TType>['query'];\n    authMethods: readonly [TAuthMethod, ...TAuthMethod[]];\n  }): Promise<Connection<TType, TAuthMethod>> {\n    const result = await this.findOptional(options);\n    if (!result) {\n      throw new NotFoundError(\n        `Connection not found for type \"${options.type}\"`,\n      );\n    }\n    return result;\n  }\n\n  async findOptional<\n    TType extends ConnectionTypeKey,\n    TAuthMethod extends ConnectionAuthMethodKey<TType>,\n  >({\n    type,\n    query,\n    authMethods,\n  }: {\n    type: TType;\n    query: LookupConnectionType<TType>['query'];\n    authMethods: readonly [TAuthMethod, ...TAuthMethod[]];\n  }): Promise<Connection<TType, TAuthMethod> | undefined> {\n    const connectionType = getConnectionType(type);\n    const strategy = getLookupStrategy(connectionType.lookupStrategy);\n    const identity = strategy.identityFromQuery(query);\n\n    this.logger.debug(\n      `Finding connection of type \"${type}\"${\n        identity ? ` matching ${strategy.identityField} \"${identity}\"` : ''\n      }`,\n    );\n\n    let connection: Connection<TType> | undefined;\n    if (identity !== undefined) {\n      connection = this.connections.find(\n        c => c.type === type && connectionIdentityOf(strategy, c) === identity,\n      ) as Connection<TType> | undefined;\n    } else {\n      connection = this.connections.find(c => c.type === type) as\n        | Connection<TType>\n        | undefined;\n    }\n\n    if (!connection) {\n      return undefined;\n    }\n\n    if (connection.auth.length === 0) {\n      throw new NotAllowedError(\n        `Connection of type \"${type}\"${\n          identity ? ` for ${strategy.identityField} \"${identity}\"` : ''\n        } has no auth method available to this plugin`,\n      );\n    }\n\n    const matchAuth = connectionType.matchAuth as\n      | ((authMethods: any[], query: any) => any | undefined)\n      | undefined;\n\n    const selected = matchAuth\n      ? matchAuth(connection.auth, query)\n      : connection.auth[0];\n\n    if (!selected) {\n      return undefined;\n    }\n\n    if (!(authMethods as readonly string[]).includes(selected.method)) {\n      throw new NotAllowedError(\n        `Connection not found for type \"${type}\" with auth method \"${selected.method}\"`,\n      );\n    }\n\n    this.logger.debug(\n      `Selected connection of type \"${type}\"${\n        identity ? ` for ${strategy.identityField} \"${identity}\"` : ''\n      } using auth method \"${selected.method}\"`,\n    );\n\n    return {\n      ...connection,\n      auth: selected,\n    } as Connection<TType, TAuthMethod>;\n  }\n}\n\n/** @public */\nexport class DefaultConnectionsService {\n  private readonly logger: LoggerService;\n  private readonly connections: RootConnection[];\n  private readonly config: RootConfigService;\n\n  private constructor(logger: LoggerService, config: RootConfigService) {\n    this.logger = logger;\n    this.config = config;\n    this.connections = [];\n    this.#registerConnectionsFromConfig();\n  }\n\n  static create(options: {\n    logger: LoggerService;\n    config: RootConfigService;\n  }): DefaultConnectionsService {\n    return new DefaultConnectionsService(options.logger, options.config);\n  }\n\n  #registerConnectionsFromConfig(): void {\n    const legacy = this.#validateLegacy(getLegacyIntegrations(this.config));\n\n    const rawConnections = this.config.getOptional('connections');\n    if (rawConnections !== undefined && !Array.isArray(rawConnections)) {\n      throw new InputError(\n        'Expected \"connections\" config to be an array of connection objects',\n      );\n    }\n\n    const fromConfig = this.#validateConfig(\n      (rawConnections as JsonObject[] | undefined) ?? [],\n    );\n\n    this.logger.debug(\n      `Connections configuration resolved ${legacy.length} connection${\n        legacy.length === 1 ? '' : 's'\n      } from legacy integrations and ${fromConfig.length} explicit connection${\n        fromConfig.length === 1 ? '' : 's'\n      }`,\n    );\n\n    if (legacy.length === 0 && fromConfig.length === 0) {\n      return;\n    }\n\n    this.connections.push(\n      ...combineConnectionSources(legacy, fromConfig, this.logger),\n    );\n\n    const seen = new Set<string>();\n    for (const c of this.connections) {\n      const connectionType = getConnectionType(c.type as ConnectionTypeKey);\n      const strategy = getLookupStrategy(connectionType.lookupStrategy);\n      const identity = connectionIdentityOf(strategy, c);\n      const key = `${c.type} ${identity ?? ''}`;\n      if (seen.has(key)) {\n        throw new InputError(\n          identity !== undefined\n            ? `Duplicate connection of type \"${c.type}\" for ${strategy.identityField} \"${identity}\"`\n            : `Duplicate connection of type \"${c.type}\"`,\n        );\n      }\n      seen.add(key);\n    }\n\n    this.#assignDefaultTitles();\n    this.#assignDefaultAuthTitles();\n\n    this.logger.info(\n      `Loaded ${this.connections.length} connection${\n        this.connections.length === 1 ? '' : 's'\n      } from configuration`,\n    );\n  }\n\n  #validateConfig(raw: JsonObject[]): RootConnection[] {\n    return raw.map(v => {\n      try {\n        return this.#validateConnection(v);\n      } catch (e) {\n        const type = typeof v.type === 'string' ? v.type : 'unknown';\n        throw new InputError(\n          `Invalid connection of type \"${type}\" in connections config:\\n${describeError(\n            e,\n          )}`,\n        );\n      }\n    });\n  }\n\n  #validateLegacy(raw: JsonObject[]): RootConnection[] {\n    const result: RootConnection[] = [];\n    for (const v of raw) {\n      try {\n        result.push(this.#validateConnection(v));\n      } catch (e) {\n        const type = typeof v.type === 'string' ? v.type : 'unknown';\n        this.logger.error(\n          `Failed to validate connection of type \"${type}\":\\n${describeError(\n            e,\n          )}`,\n        );\n      }\n    }\n    return result;\n  }\n\n  #validateConnection(connection: JsonObject): RootConnection {\n    if (typeof connection.type !== 'string') {\n      throw new InputError(`Unrecognised connection type ${connection.type}`);\n    }\n\n    if (!isConnectionTypeKey(connection.type)) {\n      throw new InputError(`Unrecognised connection type ${connection.type}`);\n    }\n\n    const connectionType = getConnectionType(connection.type);\n\n    const rawAuth = connection.auth;\n    if (!Array.isArray(rawAuth) || rawAuth.length === 0) {\n      throw new InputError(\n        `Connection of type \"${connection.type}\" must configure at least one auth method`,\n      );\n    }\n\n    const auth = (rawAuth as JsonObject[]).map(entry => {\n      if (typeof entry.method !== 'string') {\n        throw new InputError(\n          `Auth entry for connection type \"${connection.type}\" is missing a \"method\" field`,\n        );\n      }\n      const authMethod = connectionType.authMethods.find(\n        am => am.method === entry.method,\n      );\n      if (!authMethod) {\n        throw new InputError(\n          `Unknown auth method \"${entry.method}\" for connection type \"${connection.type}\"`,\n        );\n      }\n      const { method, title, match, ...rest } = entry;\n      return {\n        ...authMethod.configSchema.parse(rest),\n        method,\n        title: title as string | undefined,\n        match: match as { plugins: string[] } | undefined,\n      } as RootConnection['auth'][number];\n    });\n\n    const { type, auth: _, title, match, ...configFields } = connection;\n    const parsed = connectionType.configSchema.parse(configFields);\n\n    return {\n      ...parsed,\n      type: connection.type,\n      title: title as string | undefined,\n      match: match as { plugins: string[] } | undefined,\n      auth,\n    } as RootConnection;\n  }\n\n  #assignDefaultTitles(): void {\n    const typeCounts = new Map<string, number>();\n    for (const c of this.connections) {\n      const type = c.type as ConnectionTypeKey;\n      typeCounts.set(type, (typeCounts.get(type) ?? 0) + 1);\n    }\n    for (const c of this.connections) {\n      if (!c.title) {\n        const type = c.type as ConnectionTypeKey;\n        const connectionType = getConnectionType(type);\n        const displayName = connectionType.title;\n        const identity = connectionIdentityOf(\n          getLookupStrategy(connectionType.lookupStrategy),\n          c,\n        );\n        (c as { title?: string }).title =\n          typeCounts.get(type)! > 1 && identity\n            ? `${displayName} (${identity})`\n            : displayName;\n      }\n    }\n  }\n\n  #assignDefaultAuthTitles(): void {\n    for (const c of this.connections) {\n      const type = c.type as ConnectionTypeKey;\n      const connectionType = getConnectionType(type);\n      for (const auth of c.auth) {\n        const authMethod = connectionType.authMethods.find(\n          am => am.method === auth.method,\n        );\n        // The config schema only allows methods declared by the connection\n        // type, so failing to find one means that invariant has been broken.\n        if (!authMethod) {\n          throw new Error(\n            `Unknown auth method \"${auth.method}\" for connection type \"${type}\"`,\n          );\n        }\n        auth.title ??= authMethod.title;\n      }\n    }\n  }\n\n  #getConnectionsForPlugin(pluginId: string): Connection[] {\n    // Filter connections and hide auth methods based on these conditions:\n    // 1. Include Connections with no plugin matcher condition\n    // 2. Include Connections with a plugin matcher condition for this plugin\n    // 3. Include auth methods with no plugin matcher condition\n    // 4. Remove auth methods with a plugin matcher condition for other plugins\n    return this.connections.flatMap(({ match, auth, ...rest }) => {\n      if (match && !match.plugins.includes(pluginId)) {\n        return [];\n      }\n\n      const pluginMatched: Connection['auth'] = [];\n      const unmatched: Connection['auth'] = [];\n      for (const { match: authMatch, ...authRest } of auth) {\n        if (authMatch) {\n          if (!authMatch.plugins.includes(pluginId)) continue;\n          pluginMatched.push(authRest as Connection['auth'][number]);\n        } else {\n          unmatched.push(authRest as Connection['auth'][number]);\n        }\n      }\n\n      return [\n        { ...rest, auth: [...pluginMatched, ...unmatched] } as Connection,\n      ];\n    });\n  }\n\n  forPlugin(\n    pluginId: string,\n    options?: {\n      logger: LoggerService;\n    },\n  ): ConnectionsService {\n    const logger = options?.logger ?? this.logger;\n    return new PluginConnectionsService(\n      logger,\n      this.#getConnectionsForPlugin(pluginId),\n    );\n  }\n}\n"],"names":["toError","z","lookupStrategies","NotFoundError","getConnectionType","NotAllowedError","getLegacyIntegrations","InputError","combineConnectionSources","isConnectionTypeKey","title","match"],"mappings":";;;;;;;;;AAyCA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,MAAM,CAAA,GAAIA,eAAQ,KAAK,CAAA;AACvB,EAAA,IAAI,CAAA,CAAE,SAAS,UAAA,EAAY;AACzB,IAAA,OAAOC,IAAA,CAAE,cAAc,CAA0B,CAAA;AAAA,EACnD;AACA,EAAA,IAAI,CAAA,CAAE,UAAU,MAAA,EAAW;AACzB,IAAA,MAAM,KAAA,GAAQD,cAAA,CAAQ,CAAA,CAAE,KAAK,CAAA;AAC7B,IAAA,IAAI,KAAA,CAAM,SAAS,UAAA,EAAY;AAC7B,MAAA,OAAOC,IAAA,CAAE,cAAc,KAA8B,CAAA;AAAA,IACvD;AAAA,EACF;AACA,EAAA,OAAO,CAAA,CAAE,OAAA;AACX;AAEA,SAAS,kBACP,IAAA,EAC8B;AAC9B,EAAA,OAAOC,kCAAiB,IAAI,CAAA;AAC9B;AAIA,SAAS,oBAAA,CACP,UACA,UAAA,EACoB;AACpB,EAAA,IAAI,CAAC,SAAS,aAAA,EAAe;AAC3B,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,KAAA,GAAS,UAAA,CAAuC,QAAA,CAAS,aAAa,CAAA;AAC5E,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,MAAA;AAC7C;AAEA,MAAM,wBAAA,CAAuD;AAAA,EAC1C,MAAA;AAAA,EACA,WAAA;AAAA,EAEjB,WAAA,CAAY,QAAuB,WAAA,EAA2B;AAC5D,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,WAAA;AAAA,EACrB;AAAA,EAEA,MAAM,KAGJ,OAAA,EAI0C;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA;AAC9C,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAIC,oBAAA;AAAA,QACR,CAAA,+BAAA,EAAkC,QAAQ,IAAI,CAAA,CAAA;AAAA,OAChD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAM,YAAA,CAGJ;AAAA,IACA,IAAA;AAAA,IACA,KAAA;AAAA,IACA;AAAA,GACF,EAIwD;AACtD,IAAA,MAAM,cAAA,GAAiBC,yBAAkB,IAAI,CAAA;AAC7C,IAAA,MAAM,QAAA,GAAW,iBAAA,CAAkB,cAAA,CAAe,cAAc,CAAA;AAChE,IAAA,MAAM,QAAA,GAAW,QAAA,CAAS,iBAAA,CAAkB,KAAK,CAAA;AAEjD,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,4BAAA,EAA+B,IAAI,CAAA,CAAA,EACjC,QAAA,GAAW,CAAA,UAAA,EAAa,SAAS,aAAa,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAA,CAAA,GAAM,EACnE,CAAA;AAAA,KACF;AAEA,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,UAAA,GAAa,KAAK,WAAA,CAAY,IAAA;AAAA,QAC5B,OAAK,CAAA,CAAE,IAAA,KAAS,QAAQ,oBAAA,CAAqB,QAAA,EAAU,CAAC,CAAA,KAAM;AAAA,OAChE;AAAA,IACF,CAAA,MAAO;AACL,MAAA,UAAA,GAAa,KAAK,WAAA,CAAY,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,IAAI,CAAA;AAAA,IAGzD;AAEA,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,UAAA,CAAW,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAChC,MAAA,MAAM,IAAIC,sBAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,IAAI,CAAA,CAAA,EACzB,QAAA,GAAW,CAAA,KAAA,EAAQ,SAAS,aAAa,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAA,CAAA,GAAM,EAC9D,CAAA,4CAAA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,YAAY,cAAA,CAAe,SAAA;AAIjC,IAAA,MAAM,QAAA,GAAW,YACb,SAAA,CAAU,UAAA,CAAW,MAAM,KAAK,CAAA,GAChC,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA;AAErB,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,CAAE,WAAA,CAAkC,QAAA,CAAS,QAAA,CAAS,MAAM,CAAA,EAAG;AACjE,MAAA,MAAM,IAAIA,sBAAA;AAAA,QACR,CAAA,+BAAA,EAAkC,IAAI,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAA;AAAA,OAC9E;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,6BAAA,EAAgC,IAAI,CAAA,CAAA,EAClC,QAAA,GAAW,CAAA,KAAA,EAAQ,QAAA,CAAS,aAAa,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAA,CAAA,GAAM,EAC9D,CAAA,oBAAA,EAAuB,SAAS,MAAM,CAAA,CAAA;AAAA,KACxC;AAEA,IAAA,OAAO;AAAA,MACL,GAAG,UAAA;AAAA,MACH,IAAA,EAAM;AAAA,KACR;AAAA,EACF;AACF;AAGO,MAAM,yBAAA,CAA0B;AAAA,EACpB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,CAAY,QAAuB,MAAA,EAA2B;AACpE,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,cAAc,EAAC;AACpB,IAAA,IAAA,CAAK,8BAAA,EAA+B;AAAA,EACtC;AAAA,EAEA,OAAO,OAAO,OAAA,EAGgB;AAC5B,IAAA,OAAO,IAAI,yBAAA,CAA0B,OAAA,CAAQ,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAAA,EACrE;AAAA,EAEA,8BAAA,GAAuC;AACrC,IAAA,MAAM,SAAS,IAAA,CAAK,eAAA,CAAgBC,2CAAA,CAAsB,IAAA,CAAK,MAAM,CAAC,CAAA;AAEtE,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,MAAA,CAAO,WAAA,CAAY,aAAa,CAAA;AAC5D,IAAA,IAAI,mBAAmB,MAAA,IAAa,CAAC,KAAA,CAAM,OAAA,CAAQ,cAAc,CAAA,EAAG;AAClE,MAAA,MAAM,IAAIC,iBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,aAAa,IAAA,CAAK,eAAA;AAAA,MACrB,kBAA+C;AAAC,KACnD;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,sCAAsC,MAAA,CAAO,MAAM,CAAA,WAAA,EACjD,MAAA,CAAO,WAAW,CAAA,GAAI,EAAA,GAAK,GAC7B,CAAA,8BAAA,EAAiC,WAAW,MAAM,CAAA,oBAAA,EAChD,WAAW,MAAA,KAAW,CAAA,GAAI,KAAK,GACjC,CAAA;AAAA,KACF;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,IAAK,UAAA,CAAW,WAAW,CAAA,EAAG;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,WAAA,CAAY,IAAA;AAAA,MACf,GAAGC,iDAAA,CAAyB,MAAA,EAAQ,UAAA,EAAY,KAAK,MAAM;AAAA,KAC7D;AAEA,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,MAAM,cAAA,GAAiBJ,wBAAA,CAAkB,CAAA,CAAE,IAAyB,CAAA;AACpE,MAAA,MAAM,QAAA,GAAW,iBAAA,CAAkB,cAAA,CAAe,cAAc,CAAA;AAChE,MAAA,MAAM,QAAA,GAAW,oBAAA,CAAqB,QAAA,EAAU,CAAC,CAAA;AACjD,MAAA,MAAM,MAAM,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,YAAY,EAAE,CAAA,CAAA;AACvC,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACjB,QAAA,MAAM,IAAIG,iBAAA;AAAA,UACR,QAAA,KAAa,MAAA,GACT,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,MAAA,EAAS,QAAA,CAAS,aAAa,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAA,CAAA,GACnF,CAAA,8BAAA,EAAiC,EAAE,IAAI,CAAA,CAAA;AAAA,SAC7C;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AAAA,IACd;AAEA,IAAA,IAAA,CAAK,oBAAA,EAAqB;AAC1B,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAE9B,IAAA,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MACV,CAAA,OAAA,EAAU,IAAA,CAAK,WAAA,CAAY,MAAM,CAAA,WAAA,EAC/B,KAAK,WAAA,CAAY,MAAA,KAAW,CAAA,GAAI,EAAA,GAAK,GACvC,CAAA,mBAAA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,gBAAgB,GAAA,EAAqC;AACnD,IAAA,OAAO,GAAA,CAAI,IAAI,CAAA,CAAA,KAAK;AAClB,MAAA,IAAI;AACF,QAAA,OAAO,IAAA,CAAK,oBAAoB,CAAC,CAAA;AAAA,MACnC,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,GAAW,EAAE,IAAA,GAAO,SAAA;AACnD,QAAA,MAAM,IAAIA,iBAAA;AAAA,UACR,+BAA+B,IAAI,CAAA;AAAA,EAA6B,aAAA;AAAA,YAC9D;AAAA,WACD,CAAA;AAAA,SACH;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,gBAAgB,GAAA,EAAqC;AACnD,IAAA,MAAM,SAA2B,EAAC;AAClC,IAAA,KAAA,MAAW,KAAK,GAAA,EAAK;AACnB,MAAA,IAAI;AACF,QAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,mBAAA,CAAoB,CAAC,CAAC,CAAA;AAAA,MACzC,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,GAAW,EAAE,IAAA,GAAO,SAAA;AACnD,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,0CAA0C,IAAI,CAAA;AAAA,EAAO,aAAA;AAAA,YACnD;AAAA,WACD,CAAA;AAAA,SACH;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,oBAAoB,UAAA,EAAwC;AAC1D,IAAA,IAAI,OAAO,UAAA,CAAW,IAAA,KAAS,QAAA,EAAU;AACvC,MAAA,MAAM,IAAIA,iBAAA,CAAW,CAAA,6BAAA,EAAgC,UAAA,CAAW,IAAI,CAAA,CAAE,CAAA;AAAA,IACxE;AAEA,IAAA,IAAI,CAACE,0BAAA,CAAoB,UAAA,CAAW,IAAI,CAAA,EAAG;AACzC,MAAA,MAAM,IAAIF,iBAAA,CAAW,CAAA,6BAAA,EAAgC,UAAA,CAAW,IAAI,CAAA,CAAE,CAAA;AAAA,IACxE;AAEA,IAAA,MAAM,cAAA,GAAiBH,wBAAA,CAAkB,UAAA,CAAW,IAAI,CAAA;AAExD,IAAA,MAAM,UAAU,UAAA,CAAW,IAAA;AAC3B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,IAAK,OAAA,CAAQ,WAAW,CAAA,EAAG;AACnD,MAAA,MAAM,IAAIG,iBAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,WAAW,IAAI,CAAA,yCAAA;AAAA,OACxC;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAQ,OAAA,CAAyB,GAAA,CAAI,CAAA,KAAA,KAAS;AAClD,MAAA,IAAI,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AACpC,QAAA,MAAM,IAAIA,iBAAA;AAAA,UACR,CAAA,gCAAA,EAAmC,WAAW,IAAI,CAAA,6BAAA;AAAA,SACpD;AAAA,MACF;AACA,MAAA,MAAM,UAAA,GAAa,eAAe,WAAA,CAAY,IAAA;AAAA,QAC5C,CAAA,EAAA,KAAM,EAAA,CAAG,MAAA,KAAW,KAAA,CAAM;AAAA,OAC5B;AACA,MAAA,IAAI,CAAC,UAAA,EAAY;AACf,QAAA,MAAM,IAAIA,iBAAA;AAAA,UACR,CAAA,qBAAA,EAAwB,KAAA,CAAM,MAAM,CAAA,uBAAA,EAA0B,WAAW,IAAI,CAAA,CAAA;AAAA,SAC/E;AAAA,MACF;AACA,MAAA,MAAM,EAAE,QAAQ,KAAA,EAAAG,MAAAA,EAAO,OAAAC,MAAAA,EAAO,GAAG,MAAK,GAAI,KAAA;AAC1C,MAAA,OAAO;AAAA,QACL,GAAG,UAAA,CAAW,YAAA,CAAa,KAAA,CAAM,IAAI,CAAA;AAAA,QACrC,MAAA;AAAA,QACA,KAAA,EAAOD,MAAAA;AAAA,QACP,KAAA,EAAOC;AAAA,OACT;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,EAAE,MAAM,IAAA,EAAM,CAAA,EAAG,OAAO,KAAA,EAAO,GAAG,cAAa,GAAI,UAAA;AACzD,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,YAAA,CAAa,KAAA,CAAM,YAAY,CAAA;AAE7D,IAAA,OAAO;AAAA,MACL,GAAG,MAAA;AAAA,MACH,MAAM,UAAA,CAAW,IAAA;AAAA,MACjB,KAAA;AAAA,MACA,KAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,oBAAA,GAA6B;AAC3B,IAAA,MAAM,UAAA,uBAAiB,GAAA,EAAoB;AAC3C,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,MAAM,OAAO,CAAA,CAAE,IAAA;AACf,MAAA,UAAA,CAAW,IAAI,IAAA,EAAA,CAAO,UAAA,CAAW,IAAI,IAAI,CAAA,IAAK,KAAK,CAAC,CAAA;AAAA,IACtD;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,IAAI,CAAC,EAAE,KAAA,EAAO;AACZ,QAAA,MAAM,OAAO,CAAA,CAAE,IAAA;AACf,QAAA,MAAM,cAAA,GAAiBP,yBAAkB,IAAI,CAAA;AAC7C,QAAA,MAAM,cAAc,cAAA,CAAe,KAAA;AACnC,QAAA,MAAM,QAAA,GAAW,oBAAA;AAAA,UACf,iBAAA,CAAkB,eAAe,cAAc,CAAA;AAAA,UAC/C;AAAA,SACF;AACA,QAAC,CAAA,CAAyB,KAAA,GACxB,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,GAAK,CAAA,IAAK,QAAA,GACzB,CAAA,EAAG,WAAW,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAA,CAAA,GAC3B,WAAA;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEA,wBAAA,GAAiC;AAC/B,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,MAAM,OAAO,CAAA,CAAE,IAAA;AACf,MAAA,MAAM,cAAA,GAAiBA,yBAAkB,IAAI,CAAA;AAC7C,MAAA,KAAA,MAAW,IAAA,IAAQ,EAAE,IAAA,EAAM;AACzB,QAAA,MAAM,UAAA,GAAa,eAAe,WAAA,CAAY,IAAA;AAAA,UAC5C,CAAA,EAAA,KAAM,EAAA,CAAG,MAAA,KAAW,IAAA,CAAK;AAAA,SAC3B;AAGA,QAAA,IAAI,CAAC,UAAA,EAAY;AACf,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,qBAAA,EAAwB,IAAA,CAAK,MAAM,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAA;AAAA,WACnE;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAU,UAAA,CAAW,KAAA;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,yBAAyB,QAAA,EAAgC;AAMvD,IAAA,OAAO,IAAA,CAAK,YAAY,OAAA,CAAQ,CAAC,EAAE,KAAA,EAAO,IAAA,EAAM,GAAG,IAAA,EAAK,KAAM;AAC5D,MAAA,IAAI,SAAS,CAAC,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC9C,QAAA,OAAO,EAAC;AAAA,MACV;AAEA,MAAA,MAAM,gBAAoC,EAAC;AAC3C,MAAA,MAAM,YAAgC,EAAC;AACvC,MAAA,KAAA,MAAW,EAAE,KAAA,EAAO,SAAA,EAAW,GAAG,QAAA,MAAc,IAAA,EAAM;AACpD,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,IAAI,CAAC,SAAA,CAAU,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC3C,UAAA,aAAA,CAAc,KAAK,QAAsC,CAAA;AAAA,QAC3D,CAAA,MAAO;AACL,UAAA,SAAA,CAAU,KAAK,QAAsC,CAAA;AAAA,QACvD;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,EAAE,GAAG,IAAA,EAAM,IAAA,EAAM,CAAC,GAAG,aAAA,EAAe,GAAG,SAAS,CAAA;AAAE,OACpD;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,SAAA,CACE,UACA,OAAA,EAGoB;AACpB,IAAA,MAAM,MAAA,GAAS,OAAA,EAAS,MAAA,IAAU,IAAA,CAAK,MAAA;AACvC,IAAA,OAAO,IAAI,wBAAA;AAAA,MACT,MAAA;AAAA,MACA,IAAA,CAAK,yBAAyB,QAAQ;AAAA,KACxC;AAAA,EACF;AACF;;;;"}

package/dist/connections-node/src/lookupStrategies.cjs.js

@@ -0,0 +1,26 @@
+'use strict';
+
+var errors = require('@backstage/errors');
+
+const lookupStrategies = {
+  host: {
+    identityField: "host",
+    identityFromQuery(query) {
+      try {
+        return new URL(query.url).host;
+      } catch {
+        throw new errors.InputError(
+          `Invalid url "${query.url}" passed to ConnectionsService.find`
+        );
+      }
+    }
+  },
+  aws: {
+    identityFromQuery(_query) {
+      return void 0;
+    }
+  }
+};
+
+exports.lookupStrategies = lookupStrategies;
+//# sourceMappingURL=lookupStrategies.cjs.js.map

package/dist/connections-node/src/lookupStrategies.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookupStrategies.cjs.js","sources":["../../../../connections-node/src/lookupStrategies.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { InputError } from '@backstage/errors';\n\n/**\n * The definitions of all lookup strategies, keyed by the `lookupStrategy` of\n * each connection type. Each definition knows how to derive the identity to\n * match connections against from the query passed to `ConnectionsService.find`.\n *\n * @internal\n */\nexport const lookupStrategies = {\n  host: {\n    identityField: 'host' as const,\n    identityFromQuery(query: { url: string }): string | undefined {\n      try {\n        return new URL(query.url).host;\n      } catch {\n        throw new InputError(\n          `Invalid url \"${query.url}\" passed to ConnectionsService.find`,\n        );\n      }\n    },\n  },\n  aws: {\n    identityFromQuery(_query: {\n      accountId?: string;\n      arn?: string;\n    }): string | undefined {\n      return undefined;\n    },\n  },\n};\n"],"names":["InputError"],"mappings":";;;;AAwBO,MAAM,gBAAA,GAAmB;AAAA,EAC9B,IAAA,EAAM;AAAA,IACJ,aAAA,EAAe,MAAA;AAAA,IACf,kBAAkB,KAAA,EAA4C;AAC5D,MAAA,IAAI;AACF,QAAA,OAAO,IAAI,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,IAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACN,QAAA,MAAM,IAAIA,iBAAA;AAAA,UACR,CAAA,aAAA,EAAgB,MAAM,GAAG,CAAA,mCAAA;AAAA,SAC3B;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAAA,EACA,GAAA,EAAK;AAAA,IACH,kBAAkB,MAAA,EAGK;AACrB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA;AAEJ;;;;"}

package/dist/wiring/BackendInitializer.cjs.js

@@ -12,6 +12,7 @@ var service = require('../connections-node/src/service.cjs.js');
 require('../connections-node/src/lookup.cjs.js');
 require('zod/v4');
 var withDeclaredConnections = require('./withDeclaredConnections.cjs.js');
+var validateBackendFeature = require('./validateBackendFeature.cjs.js');
 var OpaqueExtensionPointFactoryMiddleware = require('../backend-internal/src/wiring/OpaqueExtensionPointFactoryMiddleware.cjs.js');
 var helpers = require('../backend-internal/src/wiring/helpers.cjs.js');
 
@@ -74,9 +75,8 @@ function collectCallerConnectionRegistrations(registrations) {
   }
   return byCaller;
 }
-function createRootInstanceMetadataServiceFactory(rawRegistrations) {
+function createRootInstanceMetadataServiceFactory(registrations) {
   const installedPlugins = /* @__PURE__ */ new Map();
-  const registrations = rawRegistrations.filter((registration) => registration.featureType === "registrations").flatMap((registration) => registration.getRegistrations());
   const plugins = registrations.filter(
     (registration) => registration.type === "plugin" || registration.type === "plugin-v1.1"
   );
@@ -119,6 +119,7 @@ class BackendInitializer {
   #startPromise;
   #stopPromise;
   #registrations = new Array();
+  #allRegistrations = new Array();
   #extensionPoints = /* @__PURE__ */ new Map();
   #serviceRegistry;
   #registeredFeatures = new Array();
@@ -212,19 +213,24 @@ class BackendInitializer {
     if (this.#startPromise) {
       throw new Error("feature can not be added after the backend has started");
     }
-    this.#registeredFeatures.push(Promise.resolve(feature));
+    this.#registeredFeatures.push({
+      feature: Promise.resolve(feature),
+      source: `features[${this.#registeredFeatures.length}]`
+    });
   }
-  #addFeature(feature) {
-    if (isServiceFactory(feature)) {
-      this.#serviceRegistry.add(feature);
-    } else if (isBackendFeatureLoader(feature)) {
-      this.#registeredFeatureLoaders.push(feature);
-    } else if (isBackendRegistrations(feature)) {
-      this.#registrations.push(feature);
+  #addFeature(feature, source) {
+    if (feature.type === "service") {
+      this.#serviceRegistry.add(feature.feature, source);
+    } else if (feature.type === "loader") {
+      this.#registeredFeatureLoaders.push({
+        feature: feature.feature,
+        source
+      });
     } else {
-      throw new Error(
-        `Failed to add feature, invalid feature ${JSON.stringify(feature)}`
-      );
+      this.#registrations.push({
+        feature: feature.feature,
+        source
+      });
     }
   }
   async start() {
@@ -240,12 +246,17 @@ class BackendInitializer {
   }
   async #doStart() {
     this.#serviceRegistry.checkForCircularDeps();
-    for (const feature of this.#registeredFeatures) {
-      this.#addFeature(await feature);
+    for (const { feature, source: fallbackSource } of this.#registeredFeatures) {
+      const resolvedFeature = await feature;
+      const source = validateBackendFeature.describeBackendFeature(resolvedFeature) ?? fallbackSource;
+      this.#addFeature(validateBackendFeature.validateBackendFeature(resolvedFeature, source), source);
     }
     await this.#applyBackendFeatureLoaders(this.#registeredFeatureLoaders);
+    this.#allRegistrations = this.#registrations.flatMap(
+      ({ feature, source }) => validateBackendFeature.validateBackendRegistrations(feature, source)
+    );
     this.#serviceRegistry.add(
-      createRootInstanceMetadataServiceFactory(this.#registrations)
+      createRootInstanceMetadataServiceFactory(this.#allRegistrations)
     );
     if (process.env.NODE_ENV !== "test") {
       const rootLogger2 = await this.#serviceRegistry.get(
@@ -270,9 +281,7 @@ class BackendInitializer {
       backendPluginApi.coreServices.rootLogger,
       "root"
     );
-    const allRegistrations = this.#registrations.flatMap(
-      (f) => f.getRegistrations()
-    );
+    const allRegistrations = this.#allRegistrations;
     this.#callerConnectionRegistrations = collectCallerConnectionRegistrations(allRegistrations);
     const allPluginIds = [
       ...new Set(
@@ -368,8 +377,11 @@ class BackendInitializer {
     const pluginInits = /* @__PURE__ */ new Map();
     const moduleInits = /* @__PURE__ */ new Map();
     for (const r of allRegistrations) {
+      const pluginId = "pluginId" in r && typeof r.pluginId === "string" ? r.pluginId : void 0;
+      const moduleId = "moduleId" in r && typeof r.moduleId === "string" ? r.moduleId : void 0;
       const addedExtensionPointIds = [];
       try {
+        validateBackendFeature.validateBackendRegistration(r);
         const provides = /* @__PURE__ */ new Set();
         if (r.type === "plugin" || r.type === "module") {
           for (const [extRef, extImpl] of r.extensionPoints) {
@@ -433,12 +445,12 @@ class BackendInitializer {
         for (const id of addedExtensionPointIds) {
           this.#extensionPoints.delete(id);
         }
-        if ("pluginId" in r && "moduleId" in r) {
-          resultCollector.onPluginModuleResult(r.pluginId, r.moduleId, err);
-        } else if ("pluginId" in r) {
-          pluginInits.delete(r.pluginId);
-          moduleInits.delete(r.pluginId);
-          resultCollector.onPluginResult(r.pluginId, err);
+        if (pluginId !== void 0 && moduleId !== void 0) {
+          resultCollector.onPluginModuleResult(pluginId, moduleId, err);
+        } else if (pluginId !== void 0) {
+          pluginInits.delete(pluginId);
+          moduleInits.delete(pluginId);
+          resultCollector.onPluginResult(pluginId, err);
         } else {
           throw err;
         }
@@ -465,11 +477,9 @@ class BackendInitializer {
     const rootLifecycleService = await this.#getRootLifecycleImpl();
     await rootLifecycleService.beforeShutdown();
     const allPlugins = /* @__PURE__ */ new Set();
-    for (const feature of this.#registrations) {
-      for (const r of feature.getRegistrations()) {
-        if (r.type === "plugin" || r.type === "plugin-v1.1") {
-          allPlugins.add(r.pluginId);
-        }
+    for (const registration of this.#allRegistrations) {
+      if (registration.type === "plugin" || registration.type === "plugin-v1.1") {
+        allPlugins.add(registration.pluginId);
       }
     }
     await Promise.allSettled(
@@ -513,10 +523,19 @@ class BackendInitializer {
   }
   async #applyBackendFeatureLoaders(loaders) {
     const servicesAddedByLoaders = /* @__PURE__ */ new Map();
-    for (const loader of loaders) {
+    for (const installedLoader of loaders) {
+      const { feature: loader, source: loaderSource } = installedLoader;
+      if (loader.deps !== void 0) {
+        validateBackendFeature.assertObject(
+          loader.deps,
+          `${loaderSource}.deps`,
+          "a dependency object"
+        );
+      }
       const deps = /* @__PURE__ */ new Map();
       const missingRefs = /* @__PURE__ */ new Set();
       for (const [name, ref] of Object.entries(loader.deps ?? {})) {
+        validateBackendFeature.validateServiceRef(ref, `${loaderSource}.deps.${name}`);
         if (ref.scope !== "root") {
           throw new Error(
             `Feature loaders can only depend on root scoped services, but '${name}' is scoped to '${ref.scope}'. Offending loader is ${loader.description}`
@@ -538,35 +557,64 @@ class BackendInitializer {
           `No service available for the following ref(s): ${missing}, depended on by feature loader ${loader.description}`
         );
       }
-      const result = await loader.loader(Object.fromEntries(deps)).then((features) => features.map(helpers.unwrapFeature)).catch((error) => {
+      let result;
+      try {
+        result = await loader.loader(Object.fromEntries(deps));
+      } catch (error) {
         throw new errors.ForwardedError(
           `Feature loader ${loader.description} failed`,
           error
         );
+      }
+      if (!Array.isArray(result)) {
+        validateBackendFeature.throwInvalidBackendFeature(
+          `${loaderSource} -> loader output`,
+          "an array of backend features",
+          result
+        );
+      }
+      const loadedFeatures = result.map((feature, index) => {
+        const fallbackSource = `${loaderSource} -> loader output[${index}]`;
+        const unwrappedFeature = helpers.unwrapFeature(
+          feature
+        );
+        const description = validateBackendFeature.describeBackendFeature(unwrappedFeature);
+        const source = description ? `${description} (returned by ${loaderSource}, output[${index}])` : fallbackSource;
+        return {
+          feature: validateBackendFeature.validateBackendFeature(unwrappedFeature, source),
+          source
+        };
       });
       let didAddServiceFactory = false;
       const newLoaders = new Array();
-      for await (const feature of result) {
-        if (isBackendFeatureLoader(feature)) {
-          newLoaders.push(feature);
-        } else {
-          if (isServiceFactory(feature) && !feature.service.multiton) {
+      for (const loadedFeature of loadedFeatures) {
+        const { feature, source } = loadedFeature;
+        if (feature.type === "loader") {
+          newLoaders.push({ feature: feature.feature, source });
+        } else if (feature.type === "service") {
+          validateBackendFeature.validateServiceRef(feature.feature.service, `${source}.service`);
+          if (!feature.feature.service.multiton) {
             const conflictingLoader = servicesAddedByLoaders.get(
-              feature.service.id
+              feature.feature.service.id
             );
             if (conflictingLoader) {
               throw new Error(
-                `Duplicate service implementations provided for ${feature.service.id} by both feature loader ${loader.description} and feature loader ${conflictingLoader.description}`
+                `Duplicate service implementations provided for ${feature.feature.service.id} by both feature loader ${loader.description} and feature loader ${conflictingLoader.feature.description}`
               );
             }
-            if (!this.#serviceRegistry.hasBeenAdded(feature.service)) {
+            if (!this.#serviceRegistry.hasBeenAdded(feature.feature.service)) {
               didAddServiceFactory = true;
-              servicesAddedByLoaders.set(feature.service.id, loader);
-              this.#addFeature(feature);
+              servicesAddedByLoaders.set(
+                feature.feature.service.id,
+                installedLoader
+              );
+              this.#addFeature(feature, source);
             }
           } else {
-            this.#addFeature(feature);
+            this.#addFeature(feature, source);
           }
+        } else {
+          this.#addFeature(feature, source);
         }
       }
       if (didAddServiceFactory) {
@@ -578,35 +626,6 @@ class BackendInitializer {
     }
   }
 }
-function toInternalBackendFeature(feature) {
-  if (feature.$$type !== "@backstage/BackendFeature") {
-    throw new Error(`Invalid BackendFeature, bad type '${feature.$$type}'`);
-  }
-  const internal = feature;
-  if (internal.version !== "v1") {
-    throw new Error(
-      `Invalid BackendFeature, bad version '${internal.version}'`
-    );
-  }
-  return internal;
-}
-function isServiceFactory(feature) {
-  const internal = toInternalBackendFeature(feature);
-  if (internal.featureType === "service") {
-    return true;
-  }
-  return "service" in internal;
-}
-function isBackendRegistrations(feature) {
-  const internal = toInternalBackendFeature(feature);
-  if (internal.featureType === "registrations") {
-    return true;
-  }
-  return "getRegistrations" in internal;
-}
-function isBackendFeatureLoader(feature) {
-  return toInternalBackendFeature(feature).featureType === "loader";
-}
 
 exports.BackendInitializer = BackendInitializer;
 //# sourceMappingURL=BackendInitializer.cjs.js.map