@drawbridge/drawbridge-utils 0.0.173 → 0.0.175

package/dist/providers.cjs

@@ -509,7 +509,7 @@ var detectCountry = (value) => {
   }
 };
 
-// lib/connections/segment-rows.js
+// lib/connections/segment.js
 var import_node_crypto2 = require("crypto");
 var row = ({ connection: connection2, data: data2, manifest, row: described }) => {
   var _a, _b;
@@ -602,7 +602,7 @@ var driftEnqueues = async ({ applied, read, segment, workflow }) => {
   }];
 };
 
-// lib/connections/providers/attentive.js
+// lib/connections/manifests/attentive.js
 var api = async (path, { fetcher = fetch, method = "GET", payload, token }) => {
   const response = await fetcher("https://api.attentivemobile.com" + path, {
     ...payload && { body: JSON.stringify(payload) },
@@ -941,26 +941,6 @@ var attentive_default2 = {
     webhook: false
   },
   icon: attentive_default,
-  // DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-  // what an admin types on the provider screen, and the only declaration of it.
-  // It lives beside `requires`, which names the same variables: the manifest
-  // says what it needs and this says how someone supplies it, so a credential
-  // cannot be required by a vendor that offers nowhere to enter it.
-  //
-  // `redact` marks a secret — never returned by the api, and blank on save means
-  // keep the stored value. `required` drives the live check.
-  provider: {
-    vendors: {
-      attentive: {
-        fields: [
-          { input: "text", key: "clientId", credential: "ATTENTIVE_OAUTH_CLIENT_ID", label: "Client ID", message: "From our app's registration in the Attentive developer portal.", required: true },
-          { input: "password", key: "clientSecret", credential: "ATTENTIVE_OAUTH_CLIENT_SECRET", label: "Client secret", message: "Beside the Client ID in the Attentive developer portal.", redact: true, required: true }
-        ],
-        icon: attentive_default,
-        name: "Attentive"
-      }
-    }
-  },
   requires: [
     "ATTENTIVE_OAUTH_CLIENT_ID",
     "ATTENTIVE_OAUTH_CLIENT_SECRET"
@@ -1051,6 +1031,11 @@ var attentive_default2 = {
       }
     ];
   },
+  // THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+  // lib/connections/vendors/, and named here by whoever uses it — the block that
+  // used to sit here declared them inline, so two manifests naming one vendor had
+  // to be reconciled at import by mergeVendors().
+  vendors: ["attentive"],
   title: "Attentive",
   // ATTENTIVE'S SEGMENTS INDEX. There is no documented per-segment url, and the
   // only identifier we hold is the API's externalId, which their UI may not
@@ -1068,7 +1053,7 @@ var attentive_default2 = {
   }
 };
 
-// lib/connections/providers/drawbridge.js
+// lib/connections/manifests/drawbridge.js
 var import_node_crypto4 = require("crypto");
 
 // lib/connections/inbound.js
@@ -2005,7 +1990,7 @@ var MINIMUM_ACTION_CENTS = Math.round(
   sending.sms.segmentCostCents / channels.sms.actionsPerSegment * MARKUP * 1e3
 ) / 1e3;
 
-// lib/connections/providers/drawbridge.js
+// lib/connections/manifests/drawbridge.js
 var STOP_KEYWORDS = ["STOP", "STOPALL", "UNSUBSCRIBE", "CANCEL", "END", "QUIT"];
 var START_KEYWORDS = ["START", "UNSTOP", "YES"];
 var sendgridInbound = {
@@ -2702,70 +2687,6 @@ var drawbridge_default2 = {
   },
   // PRIVATE: never in the catalog, always available to the builder.
   private: true,
-  // THE PLATFORM'S OWN SENDING CREDENTIALS — SendGrid, Twilio, and the internal
-  // HubSpot portal. No merchant ever sees these; they are what an admin types on
-  // the provider screen so that Drawbridge itself can send.
-  //
-  // They belong on THIS manifest because this is the connection that sends: the
-  // email, sms and segment hooks below are the only things that spend them, and
-  // a private connection is still where a vendor fact lives. They are THREE
-  // VENDORS, not one, and each is its own row and its own admin card — so
-  // SendGrid reads live on a deployment that never configured Twilio, instead
-  // of one card for all three that could only ever be as live as its weakest.
-  //
-  // UNLIKE every public vendor, none of these appear in `requires` — see the
-  // comment there. Availability and configuration are different questions, and a
-  // missing CRM token must not take every base workflow step away.
-  //
-  // ponytail: the field keys keep the names they had on the shared row
-  // (smsSid, hubspotToken) so the readers destructuring vendorSettings() did
-  // not move. Rename them to sid/token when those readers are next touched.
-  provider: {
-    vendors: {
-      sendgrid: {
-        fields: [
-          { input: "email", key: "accountSender", credential: "SENDGRID_FROM_ADDRESS", label: "Account sender", message: "Verification codes and security alerts send from here.", required: true },
-          { input: "password", key: "apiKey", credential: "SENDGRID_API_KEY", label: "SendGrid API key", message: "SendGrid dashboard, Settings, API Keys \u2014 full access for sends.", redact: true, required: true },
-          // Optional: SENDGRID_SEND_FROM_ADDRESS is not boot-required in sync
-          // either. Unset, it degrades to the account sender rather than
-          // refusing to start.
-          // NOT redacted, because it is a PUBLIC key. Marking it secret would
-          // be theatre, and it would stop an operator reading back the value
-          // they need to compare against the SendGrid console.
-          //
-          // Optional: absent, the event webhook answers 500 on verify rather
-          // than accepting unverified deliveries, and nothing else notices.
-          { input: "text", key: "eventKey", credential: "SENDGRID_EVENT_WEBHOOK_KEY", label: "Event webhook key", message: "SendGrid, Settings, Mail Settings, Event Webhook \u2014 the verification key shown once signature verification is enabled. Public, not a secret." },
-          { input: "email", key: "leadSender", credential: "SENDGRID_SEND_FROM_ADDRESS", label: "Lead sender", message: "The default for lead-facing mail when a merchant has not verified their own domain." }
-        ],
-        icon: sendgrid_default,
-        name: "SendGrid"
-      },
-      // Missing, SMS is LOCKED DOWN rather than broken: every send path
-      // refuses cleanly (queue/notification.js cancels, the otc stream skips
-      // and logs), the number-purchase routes deny, and identityDefaults.sms
-      // hides the org's SMS settings entirely. The card reads not live, which
-      // is the truth about Twilio and says nothing about email.
-      twilio: {
-        fields: [
-          { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", message: "Without Twilio credentials, SMS is disabled across the platform.", required: true },
-          { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", message: "Twilio console home \u2014 the AC\u2026 identifier on the account dashboard.", redact: true, required: true },
-          { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", message: "Beside the account SID on the Twilio console dashboard.", redact: true, required: true }
-        ],
-        icon: twilio_default,
-        name: "Twilio"
-      },
-      // The CRM sync is best-effort internal tooling and no-ops without a
-      // token. Not live here costs nothing a merchant can see.
-      hubspot: {
-        fields: [
-          { input: "password", key: "hubspotToken", credential: "HUBSPOT_ACCESS_TOKEN", label: "HubSpot access token", message: "Drawbridge's own CRM portal. Internal \u2014 no merchant sees this.", redact: true, required: true }
-        ],
-        icon: hubspot_default,
-        name: "HubSpot"
-      }
-    }
-  },
   // NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
   //
   // `requires` gates AVAILABILITY: a name in it that is unset removes the whole
@@ -2964,6 +2885,16 @@ var drawbridge_default2 = {
     }
   },
   tasks: () => [],
+  // THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+  // lib/connections/vendors/, and named here by whoever uses it — the block that
+  // used to sit here declared them inline, so two manifests naming one vendor had
+  // to be reconciled at import by mergeVendors().
+  //
+  // THREE, and they have nothing to do with each other: drawbridge is the
+  // platform's own sender and spends SendGrid for email, Twilio for SMS and
+  // HubSpot for CRM. They were bundled under one manifest only because one
+  // connection happens to use all three.
+  vendors: ["sendgrid", "twilio", "hubspot"],
   title: "Drawbridge"
 };
 
@@ -2981,7 +2912,7 @@ var missingScopes = ({ granted, required }) => {
   return list(required).filter((scope) => !held.has(scope));
 };
 
-// lib/connections/providers/klaviyo.js
+// lib/connections/manifests/klaviyo.js
 var api2 = async (path, { fetcher = fetch, method = "GET", payload, token }) => {
   const response = await fetcher("https://a.klaviyo.com/api" + path, {
     ...payload && { body: JSON.stringify(payload) },
@@ -3595,24 +3526,6 @@ var klaviyo_default2 = {
     webhook: false
   },
   icon: klaviyo_default,
-  // DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-  // what an admin types on the provider screen. Declared here rather than in a
-  // table in lib/providers.js, so a vendor's credentials sit beside the
-  // `requires` that names the same variables. Keyed by the VENDOR that holds
-  // them — here the vendor and the connection are the same thing, which is not
-  // true of every manifest.
-  provider: {
-    vendors: {
-      klaviyo: {
-        fields: [
-          { input: "text", key: "clientId", credential: "KLAVIYO_OAUTH_CLIENT_ID", label: "Client ID", message: "From our app in the Klaviyo developer portal (developers.klaviyo.com).", required: true },
-          { input: "password", key: "clientSecret", credential: "KLAVIYO_OAUTH_CLIENT_SECRET", label: "Client secret", message: "Beside the Client ID on the Klaviyo app.", redact: true, required: true }
-        ],
-        icon: klaviyo_default,
-        name: "Klaviyo"
-      }
-    }
-  },
   requires: [
     "KLAVIYO_OAUTH_CLIENT_ID",
     "KLAVIYO_OAUTH_CLIENT_SECRET"
@@ -3751,6 +3664,11 @@ var klaviyo_default2 = {
       }]
     ];
   },
+  // THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+  // lib/connections/vendors/, and named here by whoever uses it — the block that
+  // used to sit here declared them inline, so two manifests naming one vendor had
+  // to be reconciled at import by mergeVendors().
+  vendors: ["klaviyo"],
   title: "Klaviyo",
   // KLAVIYO PUBLISHES NO DASHBOARD URLS in its API reference. What is on record
   // is its own help centre on a list: "you can find a list's ID in the URL in
@@ -3764,7 +3682,7 @@ var klaviyo_default2 = {
   }
 };
 
-// lib/connections/providers/mailchimp.js
+// lib/connections/manifests/mailchimp.js
 var import_node_crypto5 = require("crypto");
 
 // lib/connections/icons/mailchimp.js
@@ -3774,7 +3692,7 @@ var mailchimp_default = `<svg width="500" height="500" viewBox="0 0 500 500" fil
 <path d="M360.476 284.243C360.35 283.835 359.618 281.204 358.647 278.052L356.621 272.648C360.575 266.696 360.645 261.405 360.124 258.393C359.531 254.519 357.693 250.944 354.89 248.205C351.766 244.94 345.363 241.563 336.385 239.044L331.671 237.736C331.643 237.524 331.418 226.619 331.235 221.933C331.08 218.555 330.798 213.264 329.152 208.058C327.182 200.993 323.791 194.858 319.527 190.876C331.277 178.717 338.594 165.307 338.58 153.81C338.538 131.703 311.379 124.976 277.902 138.851L270.824 141.863C270.795 141.835 258.004 129.283 257.821 129.128C219.63 95.8334 100.327 228.476 138.49 260.687L146.835 267.737C144.581 273.775 143.781 280.259 144.499 286.664C145.414 295.543 149.973 304.029 157.375 310.6C164.411 316.82 173.684 320.788 182.648 320.774C197.494 354.998 231.408 375.965 271.175 377.161C313.842 378.427 349.641 358.403 364.67 322.435C365.641 319.916 369.806 308.546 369.806 298.513C369.792 288.409 364.093 284.229 360.476 284.243ZM185.913 311.149C184.613 311.381 183.293 311.48 181.973 311.445C169.083 311.079 155.166 299.483 153.787 285.735C152.253 270.537 160.02 258.829 173.783 256.071C175.415 255.72 177.414 255.537 179.552 255.635C187.264 256.085 198.606 261.996 201.209 278.784C203.517 293.63 199.858 308.785 185.913 311.149ZM171.545 246.953C163.179 248.499 155.744 253.244 150.817 260.18C148.045 257.873 142.909 253.426 142.008 251.681C134.635 237.693 150.043 210.478 160.823 195.111C187.405 157.145 229.086 128.424 248.393 133.603C251.517 134.503 261.902 146.563 261.902 146.563C261.902 146.563 242.623 157.244 224.724 172.16C200.646 190.735 182.423 217.697 171.545 246.953ZM306.792 305.464C306.937 305.403 307.057 305.295 307.134 305.157C307.211 305.019 307.239 304.86 307.214 304.704C307.205 304.61 307.178 304.519 307.133 304.436C307.088 304.353 307.027 304.28 306.954 304.221C306.88 304.162 306.796 304.118 306.705 304.092C306.614 304.066 306.519 304.059 306.426 304.071C306.426 304.071 286.246 307.054 267.179 300.089C269.247 293.348 274.792 295.754 283.137 296.444C296.108 297.209 309.116 295.802 321.623 292.279C330.25 289.788 341.592 284.905 350.401 277.953C353.384 284.497 354.425 291.674 354.425 291.674C354.425 291.674 356.719 291.265 358.647 292.447C360.476 293.573 361.799 295.895 360.898 301.89C359.027 313.119 354.271 322.224 346.235 330.611C341.236 336.036 335.277 340.492 328.659 343.754C324.983 345.691 321.151 347.32 317.205 348.623C286.964 358.487 256.006 347.638 246.029 324.321C245.224 322.535 244.556 320.691 244.03 318.804C239.781 303.438 243.383 285.032 254.655 273.408C255.372 272.676 256.09 271.804 256.09 270.706C256.09 269.806 255.499 268.835 255.007 268.131C251.066 262.418 237.374 252.666 240.132 233.795C242.088 220.23 253.951 210.689 265.012 211.252L267.826 211.421C272.611 211.702 276.79 212.307 280.73 212.49C287.344 212.758 293.268 211.801 300.304 205.947C302.683 203.949 304.582 202.246 307.791 201.711C308.128 201.627 308.973 201.359 310.647 201.416C312.365 201.485 314.032 202.015 315.474 202.949C321.103 206.693 321.905 215.783 322.214 222.439C322.383 226.225 322.848 235.414 322.988 238.031C323.354 244.054 324.944 244.912 328.125 245.954C329.94 246.573 331.615 246.995 334.077 247.713C341.521 249.781 345.968 251.934 348.754 254.65C350.198 256.049 351.13 257.893 351.4 259.885C352.315 266.316 346.432 274.252 330.925 281.457C313.954 289.324 293.367 291.322 279.154 289.732L274.173 289.169C262.774 287.649 256.315 302.34 263.14 312.402C267.545 318.889 279.52 323.11 291.523 323.11C319.006 323.139 340.142 311.402 348.023 301.242L348.642 300.356C349.008 299.765 348.712 299.469 348.22 299.779C341.817 304.169 313.279 321.619 282.771 316.384C282.771 316.384 279.056 315.765 275.678 314.442C273.005 313.429 267.362 310.811 266.686 305.042C291.27 312.683 306.792 305.478 306.792 305.464ZM220.671 194.971C230.127 184.051 241.765 174.538 252.206 169.219C252.558 169.022 252.938 169.43 252.741 169.754C251.46 172 250.476 174.403 249.814 176.902C249.73 177.282 250.138 177.592 250.461 177.353C256.963 172.934 268.248 168.192 278.155 167.601C278.251 167.584 278.351 167.601 278.436 167.65C278.521 167.698 278.586 167.775 278.621 167.866C278.656 167.957 278.658 168.058 278.627 168.151C278.596 168.244 278.533 168.323 278.451 168.375C276.809 169.634 275.342 171.105 274.088 172.751C273.891 173.032 274.074 173.44 274.426 173.44C281.378 173.483 291.186 175.903 297.56 179.491C297.982 179.745 297.673 180.575 297.209 180.462C287.527 178.253 271.724 176.564 255.288 180.575C240.597 184.149 229.396 189.666 221.248 195.618C220.826 195.899 220.333 195.351 220.671 194.971Z" fill="#231E15"/>
 </svg>`;
 
-// lib/connections/providers/mailchimp.js
+// lib/connections/manifests/mailchimp.js
 var base = (dc) => {
   if (!dc) throw new Error("This Mailchimp connection has no data centre stored, so there is no host to call");
   return "https://" + dc + ".api.mailchimp.com/3.0";
@@ -4172,21 +4090,6 @@ var mailchimp_default2 = {
     webhook: false
   },
   icon: mailchimp_default,
-  // DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-  // what an admin types on the provider screen, beside the `requires` naming the
-  // same variables.
-  provider: {
-    vendors: {
-      mailchimp: {
-        fields: [
-          { input: "text", key: "clientId", credential: "MAILCHIMP_OAUTH_CLIENT_ID", label: "Client ID", message: "From our registered app \u2014 Mailchimp account, Extras, Registered apps.", required: true },
-          { input: "password", key: "clientSecret", credential: "MAILCHIMP_OAUTH_CLIENT_SECRET", label: "Client secret", message: "Beside the Client ID on the registered app.", redact: true, required: true }
-        ],
-        icon: mailchimp_default,
-        name: "Mailchimp"
-      }
-    }
-  },
   // The OAuth client this deployment registered. Without both, the vendor drops
   // out of availableConnections rather than offering a Connect button that
   // cannot complete.
@@ -4289,6 +4192,11 @@ var mailchimp_default2 = {
       }
     ];
   },
+  // THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+  // lib/connections/vendors/, and named here by whoever uses it — the block that
+  // used to sit here declared them inline, so two manifests naming one vendor had
+  // to be reconciled at import by mergeVendors().
+  vendors: ["mailchimp"],
   title: "Mailchimp",
   // THE MERCHANT'S OWN ADMIN. Mailchimp's list schema states the shape outright:
   // the web_id field is "The ID used in the Mailchimp web application. View this
@@ -4308,7 +4216,7 @@ var mailchimp_default2 = {
   }
 };
 
-// lib/connections/providers/shopify.js
+// lib/connections/manifests/shopify.js
 var import_node_crypto6 = require("crypto");
 var import_nanoid3 = require("nanoid");
 
@@ -4390,7 +4298,7 @@ var slugify = (value, nochars = false) => {
   );
 };
 
-// lib/connections/providers/shopify.js
+// lib/connections/manifests/shopify.js
 var toLine = ({
   price,
   product_id: productId,
@@ -4881,8 +4789,10 @@ var shopify_default2 = {
         } : null;
         const source = (connection2 == null ? void 0 : connection2.source) ? { domain: connection2.source.domain, id: connection2.source.id } : void 0;
         const createsOrder = !backfill && (isConversion || Boolean(discount));
-        const orderDocId = (existingOrder == null ? void 0 : existingOrder.id) || (createsOrder ? mintId() : null);
-        const redemptionDocId = discount ? mintId() : null;
+        const mintedOrder = !(existingOrder == null ? void 0 : existingOrder.id) && createsOrder ? mintId() : null;
+        const orderDocId = (existingOrder == null ? void 0 : existingOrder.id) || (mintedOrder == null ? void 0 : mintedOrder.id) || null;
+        const mintedRedemption = discount ? mintId() : null;
+        const redemptionDocId = (mintedRedemption == null ? void 0 : mintedRedemption.id) || null;
         const writes = [];
         if (createsOrder) {
           writes.push({
@@ -4896,6 +4806,7 @@ var shopify_default2 = {
               discount,
               fee,
               gross,
+              _id: mintedOrder == null ? void 0 : mintedOrder._id,
               id: orderDocId,
               lead: leadId,
               lines,
@@ -4955,6 +4866,7 @@ var shopify_default2 = {
               customer,
               discount,
               gross,
+              _id: mintedRedemption == null ? void 0 : mintedRedemption._id,
               id: redemptionDocId,
               lead: leadId,
               order: orderDocId,
@@ -5075,7 +4987,8 @@ var shopify_default2 = {
           "source.domain": connection2.shop
         };
         const existing = (read == null ? void 0 : read.get) ? await read.get({ collection: "product", query }) : null;
-        const productId = (existing == null ? void 0 : existing.id) || mintId();
+        const mintedProduct = (existing == null ? void 0 : existing.id) ? null : mintId();
+        const productId = (existing == null ? void 0 : existing.id) || mintedProduct.id;
         return {
           enqueues: [{
             data: { product: productId, providerId, shop: connection2.shop },
@@ -5097,6 +5010,7 @@ var shopify_default2 = {
             data: {
               $addToSet: { connections: connection2.id },
               $setOnInsert: {
+                ...mintedProduct && { _id: mintedProduct._id },
                 id: productId,
                 provider: { id: providerId, slug: "shopify" },
                 "source.id": connection2.id,
@@ -5513,41 +5427,6 @@ var shopify_default2 = {
   },
   icon: shopify_default,
   inbound,
-  // DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-  // what an admin types on the provider screen. The four names below are exactly
-  // what `requires` gates on, which is the point of declaring them together: a
-  // name required by the manifest and enterable nowhere is a vendor that can
-  // never go live from the admin screen.
-  provider: {
-    vendors: {
-      shopify: {
-        fields: [
-          { input: "text", key: "apiKey", credential: "SHOPIFY_API_KEY", label: "API key", message: "The app's Client ID \u2014 Dev Dashboard, the app, Settings.", required: true },
-          { input: "password", key: "apiSecret", credential: "SHOPIFY_API_SECRET", label: "API secret", message: "The app's Client secret, beside the Client ID in the app's settings.", redact: true, required: true },
-          { input: "text", key: "appHandle", credential: "SHOPIFY_APP_HANDLE", label: "App handle", message: "The app's URL handle (for example drawbridge-development), from the app's configuration.", required: true },
-          { input: "text", key: "listingUrl", credential: "SHOPIFY_APP_LISTING_URL", label: "App listing URL", message: 'Where "View on the Shopify App Store" sends merchants \u2014 the public listing, or the Dev Dashboard install link for the dev app.', required: true },
-          // The usage meter's event handle, when the plan config's meter ever
-          // changes: stored value overrides the built-in default
-          // (events.order.handle) at the mint point, and `format : 'slug'`
-          // normalizes it on save — a handle can carry no spaces or capitals,
-          // and classification against it is case-sensitive. Optional: empty
-          // means the default, and the sender still refuses any handle that
-          // disagrees with the transaction it minted.
-          { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", message: "Must match the usage meter's Handle field on the plan exactly \u2014 lowercase and hyphens. Leave empty to use drawbridge-orders.", required: false, setting: true },
-          // The Partner API credential set — the ONE place meter billing is
-          // observable (CHARGE_USAGE accrual events). Org id and numeric app
-          // id come from the Partner Dashboard; the token from Settings →
-          // Partner API clients (Manage-apps permission). All optional: the
-          // accrual probe simply stays off until they exist.
-          { input: "text", key: "partnerOrgId", label: "Partner organization ID", message: "The number in the Partner Dashboard URL \u2014 partners.shopify.com/<this number>/\u2026 \u2014 NOT the admin organization_id from the app listing link.", required: false, setting: true },
-          { input: "text", key: "partnerAppId", label: "Partner app ID (numeric)", message: "The numeric id in the app's Partner Dashboard URL \u2014 not the Client ID.", required: false, setting: true },
-          { input: "password", key: "partnerToken", label: "Partner API token", message: "Partner Dashboard, Settings, Partner API clients \u2014 create one with Manage apps and paste the prtapi_ token.", redact: true, required: false, setting: true }
-        ],
-        icon: shopify_default,
-        name: "Shopify"
-      }
-    }
-  },
   // A pre-launch integration: it only surfaces once the App Store listing
   // exists and the app is fully configured. Requiring all four means it can
   // never render half-configured — and absence of any one excludes the
@@ -5751,6 +5630,13 @@ var shopify_default2 = {
       ] : []
     ];
   },
+  // THE VENDORS THIS CONNECTION SPENDS, by slug. Declared once in
+  // lib/connections/vendors/shopify.js, and named here by whoever uses it.
+  //
+  // SHOPIFY_API_SECRET is spent by drawbridge-shopify-app and drawbridge-webhooks
+  // too, which is the clearest case for why a vendor is not owned by whichever
+  // connection happened to declare it first.
+  vendors: ["shopify"],
   title: "Shopify",
   // THE VENDOR'S OWN ADMIN, one function per thing worth linking to. It lives
   // here rather than at the top level so a second link (a product, an order)
@@ -5777,7 +5663,7 @@ var shopify_default2 = {
   }
 };
 
-// lib/connections/providers/webhook.js
+// lib/connections/manifests/webhook.js
 var import_node_crypto7 = __toESM(require("crypto"), 1);
 
 // lib/safe-http.js
@@ -5922,7 +5808,7 @@ var safeRequest = async ({
   }
 };
 
-// lib/connections/providers/webhook.js
+// lib/connections/manifests/webhook.js
 var RESPONSE_LIMIT = 64 * 1024;
 var signature = ({ body, settings }) => {
   var _a;
@@ -6112,9 +5998,369 @@ var webhook_default = {
       title: "Webhook signing"
     }
   ],
+  // THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+  // lib/connections/vendors/, and named here by whoever uses it — the block that
+  // used to sit here declared them inline, so two manifests naming one vendor had
+  // to be reconciled at import by mergeVendors().
+  //
+  // Empty: webhook has no third party behind it — nothing to authenticate
+  // against and nothing for an admin to type.
+  vendors: [],
   title: "Webhooks"
 };
 
+// lib/connections/vendors/attentive.js
+var attentive_default3 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "ATTENTIVE_OAUTH_CLIENT_ID",
+      input: "text",
+      key: "clientId",
+      label: "Client ID",
+      message: "From our app's registration in the Attentive developer portal.",
+      required: true
+    },
+    {
+      credential: "ATTENTIVE_OAUTH_CLIENT_SECRET",
+      input: "password",
+      key: "clientSecret",
+      label: "Client secret",
+      message: "Beside the Client ID in the Attentive developer portal.",
+      redact: true,
+      required: true
+    }
+  ],
+  // The same mark the connection carries. One vendor, one icon — mergeVendors
+  // used to throw when two manifests disagreed about this.
+  icon: attentive_default,
+  name: "Attentive",
+  slug: "attentive",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://docs.attentive.com/reference/listsegments",
+    dashboard: "https://docs.attentive.com/docs/segments",
+    scopes: "https://docs.attentive.com/docs/authentication"
+  }
+};
+
+// lib/connections/vendors/hubspot.js
+var hubspot_default2 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "HUBSPOT_ACCESS_TOKEN",
+      input: "password",
+      key: "hubspotToken",
+      label: "HubSpot access token",
+      message: "Drawbridge's own CRM portal. Internal \u2014 no merchant sees this.",
+      redact: true,
+      required: true
+    }
+  ],
+  // The vendor's own mark rather than the connection's: drawbridge fronts three
+  // vendors and none of them is Drawbridge.
+  icon: hubspot_default,
+  name: "HubSpot",
+  slug: "hubspot",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://developers.hubspot.com/docs/reference/api/crm/objects/contacts",
+    dashboard: "https://knowledge.hubspot.com/contacts/create-contacts",
+    scopes: false
+  }
+};
+
+// lib/connections/vendors/klaviyo.js
+var klaviyo_default3 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "KLAVIYO_OAUTH_CLIENT_ID",
+      input: "text",
+      key: "clientId",
+      label: "Client ID",
+      message: "From our app in the Klaviyo developer portal (developers.klaviyo.com).",
+      required: true
+    },
+    {
+      credential: "KLAVIYO_OAUTH_CLIENT_SECRET",
+      input: "password",
+      key: "clientSecret",
+      label: "Client secret",
+      message: "Beside the Client ID on the Klaviyo app.",
+      redact: true,
+      required: true
+    }
+  ],
+  // The same mark the connection carries. One vendor, one icon — mergeVendors
+  // used to throw when two manifests disagreed about this.
+  icon: klaviyo_default,
+  name: "Klaviyo",
+  slug: "klaviyo",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://developers.klaviyo.com/en/reference/api_overview",
+    dashboard: "https://help.klaviyo.com/hc/en-us/articles/115005078647",
+    scopes: "https://developers.klaviyo.com/en/docs/authenticate_"
+  }
+};
+
+// lib/connections/vendors/mailchimp.js
+var mailchimp_default3 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "MAILCHIMP_OAUTH_CLIENT_ID",
+      input: "text",
+      key: "clientId",
+      label: "Client ID",
+      message: "From our registered app \u2014 Mailchimp account, Extras, Registered apps.",
+      required: true
+    },
+    {
+      credential: "MAILCHIMP_OAUTH_CLIENT_SECRET",
+      input: "password",
+      key: "clientSecret",
+      label: "Client secret",
+      message: "Beside the Client ID on the registered app.",
+      redact: true,
+      required: true
+    }
+  ],
+  // The same mark the connection carries. One vendor, one icon — mergeVendors
+  // used to throw when two manifests disagreed about this.
+  icon: mailchimp_default,
+  name: "Mailchimp",
+  slug: "mailchimp",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://mailchimp.com/developer/marketing/guides/access-user-data-oauth-2/",
+    dashboard: "https://mailchimp.com/help/manage-tags/",
+    scopes: false
+  }
+};
+
+// lib/connections/vendors/sendgrid.js
+var sendgrid_default2 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "SENDGRID_FROM_ADDRESS",
+      input: "email",
+      key: "accountSender",
+      label: "Account sender",
+      message: "Verification codes and security alerts send from here.",
+      required: true
+    },
+    {
+      credential: "SENDGRID_API_KEY",
+      input: "password",
+      key: "apiKey",
+      label: "SendGrid API key",
+      message: "SendGrid dashboard, Settings, API Keys \u2014 full access for sends.",
+      redact: true,
+      required: true
+    },
+    {
+      credential: "SENDGRID_EVENT_WEBHOOK_KEY",
+      input: "text",
+      key: "eventKey",
+      label: "Event webhook key",
+      message: "SendGrid, Settings, Mail Settings, Event Webhook \u2014 the verification key shown once signature verification is enabled. Public, not a secret."
+    },
+    {
+      credential: "SENDGRID_SEND_FROM_ADDRESS",
+      input: "email",
+      key: "leadSender",
+      label: "Lead sender",
+      message: "The default for lead-facing mail when a merchant has not verified their own domain."
+    }
+  ],
+  // The vendor's own mark rather than the connection's: drawbridge fronts three
+  // vendors and none of them is Drawbridge.
+  icon: sendgrid_default,
+  name: "SendGrid",
+  slug: "sendgrid",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://www.twilio.com/docs/sendgrid/api-reference/mail-send/mail-send",
+    dashboard: "https://www.twilio.com/docs/sendgrid/ui/analytics-and-reporting/email-activity-feed",
+    scopes: false
+  }
+};
+
+// lib/connections/vendors/shopify.js
+var shopify_default3 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "SHOPIFY_API_KEY",
+      input: "text",
+      key: "apiKey",
+      label: "API key",
+      message: "The app's Client ID \u2014 Dev Dashboard, the app, Settings.",
+      required: true
+    },
+    {
+      credential: "SHOPIFY_API_SECRET",
+      input: "password",
+      key: "apiSecret",
+      label: "API secret",
+      message: "The app's Client secret, beside the Client ID in the app's settings.",
+      redact: true,
+      required: true
+    },
+    {
+      credential: "SHOPIFY_APP_HANDLE",
+      input: "text",
+      key: "appHandle",
+      label: "App handle",
+      message: "The app's URL handle (for example drawbridge-development), from the app's configuration.",
+      required: true
+    },
+    {
+      credential: "SHOPIFY_APP_LISTING_URL",
+      input: "text",
+      key: "listingUrl",
+      label: "App listing URL",
+      message: 'Where "View on the Shopify App Store" sends merchants \u2014 the public listing, or the Dev Dashboard install link for the dev app.',
+      required: true
+    },
+    {
+      format: "slug",
+      input: "text",
+      key: "orderEventHandle",
+      label: "Order event handle",
+      message: "Must match the usage meter's Handle field on the plan exactly \u2014 lowercase and hyphens. Leave empty to use drawbridge-orders.",
+      required: false,
+      setting: true
+    },
+    {
+      input: "text",
+      key: "partnerOrgId",
+      label: "Partner organization ID",
+      message: "The number in the Partner Dashboard URL \u2014 partners.shopify.com/<this number>/\u2026 \u2014 NOT the admin organization_id from the app listing link.",
+      required: false,
+      setting: true
+    },
+    {
+      input: "text",
+      key: "partnerAppId",
+      label: "Partner app ID (numeric)",
+      message: "The numeric id in the app's Partner Dashboard URL \u2014 not the Client ID.",
+      required: false,
+      setting: true
+    },
+    {
+      input: "password",
+      key: "partnerToken",
+      label: "Partner API token",
+      message: "Partner Dashboard, Settings, Partner API clients \u2014 create one with Manage apps and paste the prtapi_ token.",
+      redact: true,
+      required: false,
+      setting: true
+    }
+  ],
+  // The same mark the connection carries. One vendor, one icon — mergeVendors
+  // used to throw when two manifests disagreed about this.
+  icon: shopify_default,
+  name: "Shopify",
+  slug: "shopify",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://shopify.dev/docs/api/admin-graphql",
+    dashboard: "https://help.shopify.com/en/manual/apps",
+    scopes: "https://shopify.dev/docs/api/usage/access-scopes"
+  }
+};
+
+// lib/connections/vendors/twilio.js
+var twilio_default2 = {
+  // WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+  // field falls back to, and is the only place that name is written now — it used
+  // to appear three times per manifest.
+  fields: [
+    {
+      credential: "TWILIO_ACCOUNT_FROM",
+      input: "text",
+      key: "smsFrom",
+      label: "SMS number",
+      message: "Without Twilio credentials, SMS is disabled across the platform.",
+      required: true
+    },
+    {
+      credential: "TWILIO_ACCOUNT_SID",
+      input: "password",
+      key: "smsSid",
+      label: "Twilio account SID",
+      message: "Twilio console home \u2014 the AC\u2026 identifier on the account dashboard.",
+      redact: true,
+      required: true
+    },
+    {
+      credential: "TWILIO_AUTH_TOKEN",
+      input: "password",
+      key: "smsToken",
+      label: "Twilio auth token",
+      message: "Beside the account SID on the Twilio console dashboard.",
+      redact: true,
+      required: true
+    }
+  ],
+  // The vendor's own mark rather than the connection's: drawbridge fronts three
+  // vendors and none of them is Drawbridge.
+  icon: twilio_default,
+  name: "Twilio",
+  slug: "twilio",
+  // WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+  // manifest. They are per-vendor documentation, which is exactly why drawbridge
+  // answered two of them with an object keyed by vendor while the other four
+  // answered with a string — two incompatible shapes for one key, and the shape
+  // was saying where the data belonged.
+  urls: {
+    api: "https://www.twilio.com/docs/messaging/api/message-resource",
+    dashboard: "https://www.twilio.com/docs/messaging/guides/debugging-tools",
+    scopes: false
+  }
+};
+
 // lib/connections/index.js
 var QUEUES = ["connection", "notification", "segment", "webhook"];
 var implemented = (hooks, path) => {
@@ -6135,8 +6381,35 @@ var checkIcon = (owner, icon) => {
     throw new Error(owner + " icon wraps a raster \u2014 re-export it as vector shapes");
   }
 };
+var vendors = Object.freeze(Object.fromEntries(
+  [attentive_default3, hubspot_default2, klaviyo_default3, mailchimp_default3, sendgrid_default2, shopify_default3, twilio_default2].map((vendor) => [vendor.slug, vendor])
+));
+var buildVendor = (vendor) => {
+  if (!(vendor == null ? void 0 : vendor.slug)) throw new Error("A vendor needs a slug");
+  if (!vendor.name) throw new Error("vendor " + vendor.slug + " has no name");
+  checkIcon("vendor " + vendor.slug, vendor.icon);
+  if (!Array.isArray(vendor.fields) || !vendor.fields.length) {
+    throw new Error("vendor " + vendor.slug + " has no fields \u2014 a vendor nothing is typed into holds nothing");
+  }
+  for (const field2 of vendor.fields) {
+    if (!(field2 == null ? void 0 : field2.key) || !(field2 == null ? void 0 : field2.label)) {
+      throw new Error("vendor " + vendor.slug + " declares a field with no key or label");
+    }
+    if (!INPUTS.includes(field2.input)) {
+      throw new Error(vendor.slug + "." + field2.key + " needs an input the admin form can render \u2014 one of " + INPUTS.join(", "));
+    }
+    if (field2.input === "password" && !field2.redact) {
+      throw new Error(vendor.slug + "." + field2.key + " is a password and must declare redact : true \u2014 the api would hand the value back");
+    }
+  }
+  return Object.freeze(vendor);
+};
+for (const [slug2, vendor] of Object.entries(vendors)) {
+  if (vendor.slug !== slug2) throw new Error("vendor file " + slug2 + " declares slug " + vendor.slug);
+  buildVendor(vendor);
+}
 var build = (manifest) => {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s;
   if (!(manifest == null ? void 0 : manifest.slug)) throw new Error("A connection needs a slug");
   if (!(manifest == null ? void 0 : manifest.title)) throw new Error(manifest.slug + " needs a title");
   if (!(manifest == null ? void 0 : manifest.private) && !(manifest == null ? void 0 : manifest.feature)) throw new Error(manifest.slug + " needs a plan feature key");
@@ -6166,53 +6439,42 @@ var build = (manifest) => {
       }
     }
   }
-  if ((_c = manifest.provider) == null ? void 0 : _c.fields) {
-    throw new Error(manifest.slug + " declares provider.fields \u2014 fields live under provider.vendors.<vendor> now, keyed by the vendor that holds them");
+  checkIcon(manifest.slug, manifest == null ? void 0 : manifest.icon);
+  if (!Array.isArray(manifest.vendors)) {
+    throw new Error(manifest.slug + " must declare vendors \u2014 an array of vendor slugs, empty when it spends none");
   }
   const declaredKeys = /* @__PURE__ */ new Set();
-  for (const [vendor, declared] of Object.entries(((_d = manifest.provider) == null ? void 0 : _d.vendors) || {})) {
-    if (!(declared == null ? void 0 : declared.name)) throw new Error(manifest.slug + " declares vendor " + vendor + " with no name");
-    checkIcon(manifest.slug + " vendor " + vendor, declared.icon);
-    if (!Array.isArray(declared.fields) || !declared.fields.length) {
-      throw new Error(manifest.slug + " declares vendor " + vendor + " with no fields \u2014 a vendor nothing is typed into holds nothing");
+  for (const slug2 of manifest.vendors) {
+    if (!Object.hasOwn(vendors, slug2)) {
+      throw new Error(manifest.slug + " spends vendor " + slug2 + ", which has no file in lib/connections/vendors");
     }
-    for (const field2 of declared.fields) {
-      if (!(field2 == null ? void 0 : field2.key) || !(field2 == null ? void 0 : field2.label)) {
-        throw new Error(manifest.slug + " declares a provider field with no key or label");
-      }
-      if (!INPUTS.includes(field2.input)) {
-        throw new Error(manifest.slug + ".provider." + field2.key + " needs an input the admin form can render \u2014 one of " + INPUTS.join(", "));
-      }
-      if (field2.input === "password" && !field2.redact) {
-        throw new Error(manifest.slug + ".provider." + field2.key + " is a password and must declare redact : true \u2014 the api would hand the value back");
-      }
+    for (const field2 of vendors[slug2].fields) {
       if (declaredKeys.has(field2.key)) {
-        throw new Error(manifest.slug + " declares " + field2.key + " under two vendors \u2014 vendorSettings() merges them and one would win");
+        throw new Error(manifest.slug + " spends " + field2.key + " under two vendors \u2014 vendorSettings() merges them and one would win");
       }
       declaredKeys.add(field2.key);
     }
   }
-  checkIcon(manifest.slug, manifest == null ? void 0 : manifest.icon);
   if (!GROUPS.includes(manifest == null ? void 0 : manifest.group)) {
     throw new Error(manifest.slug + " needs a group \u2014 one of " + GROUPS.join(", "));
   }
-  if ((_e = manifest == null ? void 0 : manifest.connect) == null ? void 0 : _e.type) {
+  if ((_c = manifest == null ? void 0 : manifest.connect) == null ? void 0 : _c.type) {
     throw new Error(manifest.slug + " declares connect.type \u2014 that is auth.type now");
   }
-  if (!AUTH_TYPES.includes((_f = manifest == null ? void 0 : manifest.auth) == null ? void 0 : _f.type)) {
+  if (!AUTH_TYPES.includes((_d = manifest == null ? void 0 : manifest.auth) == null ? void 0 : _d.type)) {
     throw new Error(manifest.slug + " needs auth.type \u2014 one of " + AUTH_TYPES.join(", "));
   }
   if (manifest.auth.type === "oauth") {
     for (const field2 of OAUTH_FIELDS) {
-      if (!((_g = manifest.auth.oauth) == null ? void 0 : _g[field2])) {
+      if (!((_e = manifest.auth.oauth) == null ? void 0 : _e[field2])) {
         throw new Error(manifest.slug + " is oauth and must declare auth.oauth." + field2);
       }
     }
-    if (typeof ((_i = (_h = manifest.hooks) == null ? void 0 : _h.auth) == null ? void 0 : _i.token) !== "function") {
+    if (typeof ((_g = (_f = manifest.hooks) == null ? void 0 : _f.auth) == null ? void 0 : _g.token) !== "function") {
       throw new Error(manifest.slug + " is oauth and must implement hooks.auth.token \u2014 point it at authToken() or wrap it");
     }
     for (const url of OAUTH_URLS) {
-      if (!((_k = (_j = manifest.auth.oauth) == null ? void 0 : _j.urls) == null ? void 0 : _k[url])) {
+      if (!((_i = (_h = manifest.auth.oauth) == null ? void 0 : _h.urls) == null ? void 0 : _i[url])) {
         throw new Error(manifest.slug + " is oauth and must declare auth.oauth.urls." + url);
       }
     }
@@ -6222,16 +6484,16 @@ var build = (manifest) => {
       );
     }
   }
-  if (implemented(manifest.hooks, "inbound.event") && typeof ((_m = (_l = manifest.hooks) == null ? void 0 : _l.inbound) == null ? void 0 : _m.event) !== "function" && !((_o = (_n = manifest.inbound) == null ? void 0 : _n.headers) == null ? void 0 : _o.event)) {
+  if (implemented(manifest.hooks, "inbound.event") && typeof ((_k = (_j = manifest.hooks) == null ? void 0 : _j.inbound) == null ? void 0 : _k.event) !== "function" && !((_m = (_l = manifest.inbound) == null ? void 0 : _l.headers) == null ? void 0 : _m.event)) {
     throw new Error(manifest.slug + " implements inbound.event but declares no inbound.headers.event");
   }
-  if (implemented(manifest.hooks, "inbound.verify") && !((_q = (_p = manifest.inbound) == null ? void 0 : _p.headers) == null ? void 0 : _q.signature)) {
+  if (implemented(manifest.hooks, "inbound.verify") && !((_o = (_n = manifest.inbound) == null ? void 0 : _n.headers) == null ? void 0 : _o.signature)) {
     throw new Error(manifest.slug + " implements inbound.verify but declares no inbound.headers.signature");
   }
   if (typeof (manifest == null ? void 0 : manifest.status) !== "function") {
     throw new Error(manifest.slug + " must declare status( data ) \u2014 return null to accept the connection's own status, or { message, status } to override it");
   }
-  if (!Array.isArray((_r = manifest == null ? void 0 : manifest.content) == null ? void 0 : _r.guide) || !manifest.content.guide.length) {
+  if (!Array.isArray((_p = manifest == null ? void 0 : manifest.content) == null ? void 0 : _p.guide) || !manifest.content.guide.length) {
     throw new Error(manifest.slug + " needs content.guide \u2014 an array of steps for its page");
   }
   if (typeof (manifest == null ? void 0 : manifest.status) !== "function") {
@@ -6243,8 +6505,8 @@ var build = (manifest) => {
   }
   for (const [domain, verbs] of Object.entries(HOOKS)) {
     for (const verb of verbs) {
-      const hook = (_t = (_s = manifest.hooks) == null ? void 0 : _s[domain]) == null ? void 0 : _t[verb];
-      if (((_u = manifest.hooks) == null ? void 0 : _u[domain]) === false) continue;
+      const hook = (_r = (_q = manifest.hooks) == null ? void 0 : _q[domain]) == null ? void 0 : _r[verb];
+      if (((_s = manifest.hooks) == null ? void 0 : _s[domain]) === false) continue;
       if (hook !== false && !implemented({ [domain]: { [verb]: hook } }, domain + "." + verb)) {
         throw new Error(manifest.slug + " must answer hooks." + domain + "." + verb + " \u2014 false, a function, or {} if another repo implements it");
       }
@@ -6289,44 +6551,6 @@ var connections = Object.freeze({
   shopify: build(shopify_default2),
   webhook: build(webhook_default)
 });
-var canonical = (field2) => JSON.stringify(Object.fromEntries(Object.entries(field2).sort()));
-var mergeVendors = (catalog) => {
-  var _a;
-  const merged = {};
-  const claimed = /* @__PURE__ */ new Map();
-  for (const [slug2, manifest] of Object.entries(catalog)) {
-    for (const [vendor, declared] of Object.entries(((_a = manifest.provider) == null ? void 0 : _a.vendors) || {})) {
-      const held = merged[vendor] || (merged[vendor] = { fields: [], icon: declared.icon, name: declared.name });
-      if (held.name !== declared.name) {
-        throw new Error(slug2 + " names vendor " + vendor + ' "' + declared.name + '" but another manifest names it "' + held.name + '"');
-      }
-      if (held.icon !== declared.icon) {
-        throw new Error(slug2 + " declares a different icon for vendor " + vendor + " than another manifest \u2014 one vendor, one mark");
-      }
-      for (const field2 of declared.fields) {
-        const existing = held.fields.find((entry) => entry.key === field2.key);
-        if (existing) {
-          if (canonical(existing) !== canonical(field2)) {
-            throw new Error(slug2 + " declares " + vendor + "." + field2.key + " differently from another manifest \u2014 a field two connections spend is declared identically in both");
-          }
-          continue;
-        }
-        if (field2.credential) {
-          const owner = claimed.get(field2.credential);
-          if (owner) {
-            throw new Error(field2.credential + " is claimed by both " + owner + " and " + vendor + "." + field2.key + " \u2014 one would silently overwrite the other");
-          }
-          claimed.set(field2.credential, vendor + "." + field2.key);
-        }
-        held.fields.push(field2);
-      }
-    }
-  }
-  return Object.freeze(Object.fromEntries(
-    Object.entries(merged).map(([vendor, held]) => [vendor, Object.freeze({ ...held, fields: Object.freeze(held.fields) })])
-  ));
-};
-var vendors = mergeVendors(connections);
 (() => {
   var _a;
   const routes = {};
@@ -6374,12 +6598,6 @@ var publicConnectionKeys = Object.freeze([
   // excerpt, guide, and any vendor redirect copy.
   "content",
   "createdAt",
-  // THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
-  // paused — kept, configured, and not run — as distinct from a vendor the
-  // platform switched off (which the api overlays as an error). Absent means
-  // on; the dashboard renders Paused from it and the sync gates refuse a paused
-  // connection the way they refuse a missing one.
-  "enabled",
   // The connection DOCUMENT's own errors array — scope-drift entries written by
   // drawbridge-sync. NOT the manifest's error copy, which is content.errors:
   // the document is spread OVER the resolved manifest downstream, so the two
@@ -6440,8 +6658,7 @@ var providerSettings = async ({ controller, includeDisabled = false, slug: slug2
 };
 var vendorEnabled = async ({ controller, vendor }) => (await providerRow({ controller, slug: vendor })).enabled;
 var vendorSettings = async ({ controller, slug: slug2 }) => {
-  var _a;
-  const declared = Object.hasOwn(connections, slug2) ? Object.keys(((_a = connections[slug2].provider) == null ? void 0 : _a.vendors) || {}) : [];
+  const declared = Object.hasOwn(connections, slug2) ? connections[slug2].vendors || [] : [];
   let merged = {};
   for (const vendor of declared) {
     merged = { ...merged, ...await providerSettings({ controller, slug: vendor }) };
@@ -6449,8 +6666,7 @@ var vendorSettings = async ({ controller, slug: slug2 }) => {
   return merged;
 };
 var vendorsEnabled = async ({ controller, slug: slug2 }) => {
-  var _a;
-  const declared = Object.hasOwn(connections, slug2) ? Object.keys(((_a = connections[slug2].provider) == null ? void 0 : _a.vendors) || {}) : [];
+  const declared = Object.hasOwn(connections, slug2) ? connections[slug2].vendors || [] : [];
   for (const vendor of declared) {
     if (!await vendorEnabled({ controller, vendor })) return false;
   }