@drawbridge/drawbridge-utils 0.0.174 → 0.0.175

package/dist/connections/index.d.cts

@@ -810,7 +810,7 @@ const accessToken = async ({
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests through dist.
-var icon$4 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$7 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#FFD967"/>
 <path d="M239.369 127.404C260.863 122.013 284.964 132.569 295.576 152.039C321.796 201.286 347.928 250.567 374.131 299.825C380.149 311.989 381.244 326.564 376.733 339.41C371.446 355.097 358.039 367.69 342.107 372.089C326.274 376.67 308.351 372.871 295.741 362.255C288.865 356.892 284.161 349.359 280.354 341.629C261.869 306.95 243.478 272.217 225.071 237.501C214.409 218.614 187.221 212.656 169.622 225.315C168.104 227.309 164.159 226.857 164.72 223.796C176.911 202.569 189.361 181.497 201.662 160.331C205.183 154.428 208.214 148.129 212.967 143.091C219.844 135.272 229.263 129.782 239.374 127.404" fill="#1E1C1C"/>
 <path d="M166.04 261.805C180.228 259.107 195.528 261.893 207.581 269.971C218.512 277.079 226.908 288.136 230.604 300.657C234.835 314.103 233.614 329.124 227.485 341.788C220.097 356.875 205.782 368.543 189.317 372.089C173.957 375.652 157.089 372.386 144.304 363.103C132.971 355.295 124.912 342.989 121.891 329.581C118.943 316.636 120.725 302.656 127.002 290.938C134.699 275.951 149.503 264.933 166.046 261.811" fill="#1E1C1C"/>
@@ -1469,27 +1469,7 @@ var attentive = {
 		webhook : false
 
 	},
-	icon: icon$4,
-	// DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-	// what an admin types on the provider screen, and the only declaration of it.
-	// It lives beside `requires`, which names the same variables: the manifest
-	// says what it needs and this says how someone supplies it, so a credential
-	// cannot be required by a vendor that offers nowhere to enter it.
-	//
-	// `redact` marks a secret — never returned by the api, and blank on save means
-	// keep the stored value. `required` drives the live check.
-	provider : {
-		vendors : {
-			attentive : {
-				fields : [
-					{ input : 'text', key : 'clientId', credential : 'ATTENTIVE_OAUTH_CLIENT_ID', label : 'Client ID', message : 'From our app\'s registration in the Attentive developer portal.', required : true },
-					{ input : 'password', key : 'clientSecret', credential : 'ATTENTIVE_OAUTH_CLIENT_SECRET', label : 'Client secret', message : 'Beside the Client ID in the Attentive developer portal.', redact : true, required : true }
-				],
-				icon: icon$4,
-				name : 'Attentive'
-			}
-		}
-	},
+	icon: icon$7,
 	requires : [
 		'ATTENTIVE_OAUTH_CLIENT_ID',
 		'ATTENTIVE_OAUTH_CLIENT_SECRET'
@@ -1593,6 +1573,11 @@ var attentive = {
 			}
 		]
 	),
+	// THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+	// lib/connections/vendors/, and named here by whoever uses it — the block that
+	// used to sit here declared them inline, so two manifests naming one vendor had
+	// to be reconciled at import by mergeVendors().
+	vendors : [ 'attentive' ],
 	title : 'Attentive',
 
 	// ATTENTIVE'S SEGMENTS INDEX. There is no documented per-segment url, and the
@@ -2069,7 +2054,7 @@ const contacts = {
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$3 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$6 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#0D1314"/>
 <g clip-path="url(#clip0_2115_2832)">
 <path d="M153.198 142.241L183.69 196.065V303.852L153 357.676L184.82 375.028L220.116 313.163V186.865L185.046 125L153.198 142.241Z" fill="#BAEC5F"/>
@@ -2090,7 +2075,7 @@ var icon$3 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xm
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var hubspotIcon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$5 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#FF7A59"/>
 <circle cx="290" cy="290" r="78" stroke="white" stroke-width="30"/>
 <circle cx="290" cy="290" r="18" fill="white"/>
@@ -2108,7 +2093,7 @@ var hubspotIcon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="non
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var sendgridIcon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$4 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#F1FAFF"/>
 <g clip-path="url(#clip0_1011_2743)">
 <path d="M366.676 134.534V289.172H289.203V366.487H134.258L134.258 289.171L134.256 289.172V211.851H211.729V134.534H366.676Z" fill="#9DD6E3"/>
@@ -2131,7 +2116,7 @@ var sendgridIcon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="no
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var twilioIcon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$3 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#F22F46"/>
 <path d="M250 134.954C186.341 134.954 134.954 186.341 134.954 250C134.954 313.659 186.341 365.047 250 365.047C313.659 365.047 365.047 313.659 365.047 250C365.047 186.341 313.659 134.954 250 134.954ZM250 334.368C203.215 334.368 165.633 296.786 165.633 250C165.633 203.215 203.215 165.633 250 165.633C296.786 165.633 334.368 203.215 334.368 250C334.368 296.786 296.786 334.368 250 334.368ZM302.155 221.622C302.155 234.661 291.417 245.399 278.378 245.399C265.34 245.399 254.602 234.661 254.602 221.622C254.602 208.584 265.34 197.846 278.378 197.846C291.417 197.846 302.155 208.584 302.155 221.622ZM302.155 278.378C302.155 291.417 291.417 302.155 278.378 302.155C265.34 302.155 254.602 291.417 254.602 278.378C254.602 265.34 265.34 254.602 278.378 254.602C291.417 254.602 302.155 265.34 302.155 278.378ZM245.399 278.378C245.399 291.417 234.661 302.155 221.622 302.155C208.584 302.155 197.846 291.417 197.846 278.378C197.846 265.34 208.584 254.602 221.622 254.602C234.661 254.602 245.399 265.34 245.399 278.378ZM245.399 221.622C245.399 234.661 234.661 245.399 221.622 245.399C208.584 245.399 197.846 234.661 197.846 221.622C197.846 208.584 208.584 197.846 221.622 197.846C234.661 197.846 245.399 208.584 245.399 221.622Z" fill="white"/>
 </svg>`;
@@ -3183,7 +3168,7 @@ var drawbridge = {
 		},
 		webhook : false
 	},
-	icon: icon$3,
+	icon: icon$6,
 
 	// WHERE TWILIO PUTS THINGS on an inbound request, and WHICH credential
 	// verifies each channel. The route resolves the NAME to the stored value and
@@ -3214,70 +3199,6 @@ var drawbridge = {
 	},
 	// PRIVATE: never in the catalog, always available to the builder.
 	private : true,
-	// THE PLATFORM'S OWN SENDING CREDENTIALS — SendGrid, Twilio, and the internal
-	// HubSpot portal. No merchant ever sees these; they are what an admin types on
-	// the provider screen so that Drawbridge itself can send.
-	//
-	// They belong on THIS manifest because this is the connection that sends: the
-	// email, sms and segment hooks below are the only things that spend them, and
-	// a private connection is still where a vendor fact lives. They are THREE
-	// VENDORS, not one, and each is its own row and its own admin card — so
-	// SendGrid reads live on a deployment that never configured Twilio, instead
-	// of one card for all three that could only ever be as live as its weakest.
-	//
-	// UNLIKE every public vendor, none of these appear in `requires` — see the
-	// comment there. Availability and configuration are different questions, and a
-	// missing CRM token must not take every base workflow step away.
-	//
-	// ponytail: the field keys keep the names they had on the shared row
-	// (smsSid, hubspotToken) so the readers destructuring vendorSettings() did
-	// not move. Rename them to sid/token when those readers are next touched.
-	provider : {
-		vendors : {
-			sendgrid : {
-				fields : [
-					{ input : 'email', key : 'accountSender', credential : 'SENDGRID_FROM_ADDRESS', label : 'Account sender', message : 'Verification codes and security alerts send from here.', required : true },
-					{ input : 'password', key : 'apiKey', credential : 'SENDGRID_API_KEY', label : 'SendGrid API key', message : 'SendGrid dashboard, Settings, API Keys — full access for sends.', redact : true, required : true },
-					// Optional: SENDGRID_SEND_FROM_ADDRESS is not boot-required in sync
-					// either. Unset, it degrades to the account sender rather than
-					// refusing to start.
-					// NOT redacted, because it is a PUBLIC key. Marking it secret would
-					// be theatre, and it would stop an operator reading back the value
-					// they need to compare against the SendGrid console.
-					//
-					// Optional: absent, the event webhook answers 500 on verify rather
-					// than accepting unverified deliveries, and nothing else notices.
-					{ input : 'text', key : 'eventKey', credential : 'SENDGRID_EVENT_WEBHOOK_KEY', label : 'Event webhook key', message : 'SendGrid, Settings, Mail Settings, Event Webhook — the verification key shown once signature verification is enabled. Public, not a secret.' },
-					{ input : 'email', key : 'leadSender', credential : 'SENDGRID_SEND_FROM_ADDRESS', label : 'Lead sender', message : 'The default for lead-facing mail when a merchant has not verified their own domain.' }
-				],
-				icon : sendgridIcon,
-				name : 'SendGrid'
-			},
-			// Missing, SMS is LOCKED DOWN rather than broken: every send path
-			// refuses cleanly (queue/notification.js cancels, the otc stream skips
-			// and logs), the number-purchase routes deny, and identityDefaults.sms
-			// hides the org's SMS settings entirely. The card reads not live, which
-			// is the truth about Twilio and says nothing about email.
-			twilio : {
-				fields : [
-					{ input : 'text', key : 'smsFrom', credential : 'TWILIO_ACCOUNT_FROM', label : 'SMS number', message : 'Without Twilio credentials, SMS is disabled across the platform.', required : true },
-					{ input : 'password', key : 'smsSid', credential : 'TWILIO_ACCOUNT_SID', label : 'Twilio account SID', message : 'Twilio console home — the AC… identifier on the account dashboard.', redact : true, required : true },
-					{ input : 'password', key : 'smsToken', credential : 'TWILIO_AUTH_TOKEN', label : 'Twilio auth token', message : 'Beside the account SID on the Twilio console dashboard.', redact : true, required : true }
-				],
-				icon : twilioIcon,
-				name : 'Twilio'
-			},
-			// The CRM sync is best-effort internal tooling and no-ops without a
-			// token. Not live here costs nothing a merchant can see.
-			hubspot : {
-				fields : [
-					{ input : 'password', key : 'hubspotToken', credential : 'HUBSPOT_ACCESS_TOKEN', label : 'HubSpot access token', message : 'Drawbridge\'s own CRM portal. Internal — no merchant sees this.', redact : true, required : true }
-				],
-				icon : hubspotIcon,
-				name : 'HubSpot'
-			}
-		}
-	},
 	// NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
 	//
 	// `requires` gates AVAILABILITY: a name in it that is unset removes the whole
@@ -3488,6 +3409,16 @@ var drawbridge = {
 
 	},
 	tasks : () => [],
+	// THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+	// lib/connections/vendors/, and named here by whoever uses it — the block that
+	// used to sit here declared them inline, so two manifests naming one vendor had
+	// to be reconciled at import by mergeVendors().
+	//
+	// THREE, and they have nothing to do with each other: drawbridge is the
+	// platform's own sender and spends SendGrid for email, Twilio for SMS and
+	// HubSpot for CRM. They were bundled under one manifest only because one
+	// connection happens to use all three.
+	vendors : [ 'sendgrid', 'twilio', 'hubspot' ],
 	title : 'Drawbridge'
 };
 
@@ -4461,24 +4392,6 @@ var klaviyo = {
 
 	},
 	icon: icon$2,
-	// DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-	// what an admin types on the provider screen. Declared here rather than in a
-	// table in lib/providers.js, so a vendor's credentials sit beside the
-	// `requires` that names the same variables. Keyed by the VENDOR that holds
-	// them — here the vendor and the connection are the same thing, which is not
-	// true of every manifest.
-	provider : {
-		vendors : {
-			klaviyo : {
-				fields : [
-					{ input : 'text', key : 'clientId', credential : 'KLAVIYO_OAUTH_CLIENT_ID', label : 'Client ID', message : 'From our app in the Klaviyo developer portal (developers.klaviyo.com).', required : true },
-					{ input : 'password', key : 'clientSecret', credential : 'KLAVIYO_OAUTH_CLIENT_SECRET', label : 'Client secret', message : 'Beside the Client ID on the Klaviyo app.', redact : true, required : true }
-				],
-				icon: icon$2,
-				name : 'Klaviyo'
-			}
-		}
-	},
 	requires : [
 		'KLAVIYO_OAUTH_CLIENT_ID',
 		'KLAVIYO_OAUTH_CLIENT_SECRET'
@@ -4639,6 +4552,11 @@ var klaviyo = {
 
 	},
 
+	// THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+	// lib/connections/vendors/, and named here by whoever uses it — the block that
+	// used to sit here declared them inline, so two manifests naming one vendor had
+	// to be reconciled at import by mergeVendors().
+	vendors : [ 'klaviyo' ],
 	title : 'Klaviyo',
 
 	// KLAVIYO PUBLISHES NO DASHBOARD URLS in its API reference. What is on record
@@ -5374,21 +5292,6 @@ var mailchimp = {
 		webhook : false
 	},
 	icon: icon$1,
-	// DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-	// what an admin types on the provider screen, beside the `requires` naming the
-	// same variables.
-	provider : {
-		vendors : {
-			mailchimp : {
-				fields : [
-					{ input : 'text', key : 'clientId', credential : 'MAILCHIMP_OAUTH_CLIENT_ID', label : 'Client ID', message : 'From our registered app — Mailchimp account, Extras, Registered apps.', required : true },
-					{ input : 'password', key : 'clientSecret', credential : 'MAILCHIMP_OAUTH_CLIENT_SECRET', label : 'Client secret', message : 'Beside the Client ID on the registered app.', redact : true, required : true }
-				],
-				icon: icon$1,
-				name : 'Mailchimp'
-			}
-		}
-	},
 	// The OAuth client this deployment registered. Without both, the vendor drops
 	// out of availableConnections rather than offering a Connect button that
 	// cannot complete.
@@ -5505,6 +5408,11 @@ var mailchimp = {
 			}
 		]
 	),
+	// THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+	// lib/connections/vendors/, and named here by whoever uses it — the block that
+	// used to sit here declared them inline, so two manifests naming one vendor had
+	// to be reconciled at import by mergeVendors().
+	vendors : [ 'mailchimp' ],
 	title : 'Mailchimp',
 	// THE MERCHANT'S OWN ADMIN. Mailchimp's list schema states the shape outright:
 	// the web_id field is "The ID used in the Mailchimp web application. View this
@@ -7304,41 +7212,6 @@ var shopify = {
 	},
 	icon,
 	inbound,
-	// DRAWBRIDGE'S OWN CREDENTIALS for this vendor, as opposed to a merchant's —
-	// what an admin types on the provider screen. The four names below are exactly
-	// what `requires` gates on, which is the point of declaring them together: a
-	// name required by the manifest and enterable nowhere is a vendor that can
-	// never go live from the admin screen.
-	provider : {
-		vendors : {
-			shopify : {
-				fields : [
-					{ input : 'text', key : 'apiKey', credential : 'SHOPIFY_API_KEY', label : 'API key', message : 'The app\'s Client ID — Dev Dashboard, the app, Settings.', required : true },
-					{ input : 'password', key : 'apiSecret', credential : 'SHOPIFY_API_SECRET', label : 'API secret', message : 'The app\'s Client secret, beside the Client ID in the app\'s settings.', redact : true, required : true },
-					{ input : 'text', key : 'appHandle', credential : 'SHOPIFY_APP_HANDLE', label : 'App handle', message : 'The app\'s URL handle (for example drawbridge-development), from the app\'s configuration.', required : true },
-					{ input : 'text', key : 'listingUrl', credential : 'SHOPIFY_APP_LISTING_URL', label : 'App listing URL', message : 'Where "View on the Shopify App Store" sends merchants — the public listing, or the Dev Dashboard install link for the dev app.', required : true },
-					// The usage meter's event handle, when the plan config's meter ever
-					// changes: stored value overrides the built-in default
-					// (events.order.handle) at the mint point, and `format : 'slug'`
-					// normalizes it on save — a handle can carry no spaces or capitals,
-					// and classification against it is case-sensitive. Optional: empty
-					// means the default, and the sender still refuses any handle that
-					// disagrees with the transaction it minted.
-					{ format : 'slug', input : 'text', key : 'orderEventHandle', label : 'Order event handle', message : 'Must match the usage meter\'s Handle field on the plan exactly — lowercase and hyphens. Leave empty to use drawbridge-orders.', required : false, setting : true },
-					// The Partner API credential set — the ONE place meter billing is
-					// observable (CHARGE_USAGE accrual events). Org id and numeric app
-					// id come from the Partner Dashboard; the token from Settings →
-					// Partner API clients (Manage-apps permission). All optional: the
-					// accrual probe simply stays off until they exist.
-					{ input : 'text', key : 'partnerOrgId', label : 'Partner organization ID', message : 'The number in the Partner Dashboard URL — partners.shopify.com/<this number>/… — NOT the admin organization_id from the app listing link.', required : false, setting : true },
-					{ input : 'text', key : 'partnerAppId', label : 'Partner app ID (numeric)', message : 'The numeric id in the app\'s Partner Dashboard URL — not the Client ID.', required : false, setting : true },
-					{ input : 'password', key : 'partnerToken', label : 'Partner API token', message : 'Partner Dashboard, Settings, Partner API clients — create one with Manage apps and paste the prtapi_ token.', redact : true, required : false, setting : true }
-				],
-				icon,
-				name : 'Shopify'
-			}
-		}
-	},
 	// A pre-launch integration: it only surfaces once the App Store listing
 	// exists and the app is fully configured. Requiring all four means it can
 	// never render half-configured — and absence of any one excludes the
@@ -7557,6 +7430,13 @@ var shopify = {
 			: []
 		)
 	],
+	// THE VENDORS THIS CONNECTION SPENDS, by slug. Declared once in
+	// lib/connections/vendors/shopify.js, and named here by whoever uses it.
+	//
+	// SHOPIFY_API_SECRET is spent by drawbridge-shopify-app and drawbridge-webhooks
+	// too, which is the clearest case for why a vendor is not owned by whichever
+	// connection happened to declare it first.
+	vendors : [ 'shopify' ],
 	title : 'Shopify',
 	// THE VENDOR'S OWN ADMIN, one function per thing worth linking to. It lives
 	// here rather than at the top level so a second link (a product, an order)
@@ -7763,7 +7643,7 @@ var webhook = {
 	// Borrowed: this is the Drawbridge mark, because Webhooks has none of its own.
 	// It is the one card that reads wrong — our logo among vendor logos — and it
 	// wants a mark of its own when there is one.
-	icon: icon$3,
+	icon: icon$6,
 	// Gated on the encryption secret: without it the signing secret could not be
 	// stored safely, so the connection must not be offered at all.
 	requires : [ 'ENCRYPT_CONNECTION_SECRET' ],
@@ -7829,9 +7709,481 @@ var webhook = {
 			}
 		]
 	 ),
+	// THE VENDORS THIS CONNECTION SPENDS, by slug. Each is declared once in
+	// lib/connections/vendors/, and named here by whoever uses it — the block that
+	// used to sit here declared them inline, so two manifests naming one vendor had
+	// to be reconciled at import by mergeVendors().
+	//
+	// Empty: webhook has no third party behind it — nothing to authenticate
+	// against and nothing for an admin to type.
+	vendors : [],
 	title : 'Webhooks'
 };
 
+// DRAWBRIDGE'S OWN CREDENTIALS FOR ATTENTIVE, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside attentive.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var attentiveVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'ATTENTIVE_OAUTH_CLIENT_ID',
+			input : 'text',
+			key : 'clientId',
+			label : 'Client ID',
+			message : 'From our app\'s registration in the Attentive developer portal.',
+			required : true
+		},
+		{
+			credential : 'ATTENTIVE_OAUTH_CLIENT_SECRET',
+			input : 'password',
+			key : 'clientSecret',
+			label : 'Client secret',
+			message : 'Beside the Client ID in the Attentive developer portal.',
+			redact : true,
+			required : true
+		}
+	],
+
+	// The same mark the connection carries. One vendor, one icon — mergeVendors
+	// used to throw when two manifests disagreed about this.
+	icon: icon$7,
+
+	name : 'Attentive',
+
+	slug : 'attentive',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://docs.attentive.com/reference/listsegments',
+		dashboard : 'https://docs.attentive.com/docs/segments',
+		scopes : 'https://docs.attentive.com/docs/authentication'
+	}
+
+};
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR HUBSPOT, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside drawbridge.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var hubspotVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'HUBSPOT_ACCESS_TOKEN',
+			input : 'password',
+			key : 'hubspotToken',
+			label : 'HubSpot access token',
+			message : 'Drawbridge\'s own CRM portal. Internal — no merchant sees this.',
+			redact : true,
+			required : true
+		}
+	],
+
+	// The vendor's own mark rather than the connection's: drawbridge fronts three
+	// vendors and none of them is Drawbridge.
+	icon: icon$5,
+
+	name : 'HubSpot',
+
+	slug : 'hubspot',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://developers.hubspot.com/docs/reference/api/crm/objects/contacts',
+		dashboard : 'https://knowledge.hubspot.com/contacts/create-contacts',
+		scopes : false
+	}
+
+};
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR KLAVIYO, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside klaviyo.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var klaviyoVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'KLAVIYO_OAUTH_CLIENT_ID',
+			input : 'text',
+			key : 'clientId',
+			label : 'Client ID',
+			message : 'From our app in the Klaviyo developer portal (developers.klaviyo.com).',
+			required : true
+		},
+		{
+			credential : 'KLAVIYO_OAUTH_CLIENT_SECRET',
+			input : 'password',
+			key : 'clientSecret',
+			label : 'Client secret',
+			message : 'Beside the Client ID on the Klaviyo app.',
+			redact : true,
+			required : true
+		}
+	],
+
+	// The same mark the connection carries. One vendor, one icon — mergeVendors
+	// used to throw when two manifests disagreed about this.
+	icon: icon$2,
+
+	name : 'Klaviyo',
+
+	slug : 'klaviyo',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://developers.klaviyo.com/en/reference/api_overview',
+		dashboard : 'https://help.klaviyo.com/hc/en-us/articles/115005078647',
+		scopes : 'https://developers.klaviyo.com/en/docs/authenticate_'
+	}
+
+};
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR MAILCHIMP, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside mailchimp.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var mailchimpVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'MAILCHIMP_OAUTH_CLIENT_ID',
+			input : 'text',
+			key : 'clientId',
+			label : 'Client ID',
+			message : 'From our registered app — Mailchimp account, Extras, Registered apps.',
+			required : true
+		},
+		{
+			credential : 'MAILCHIMP_OAUTH_CLIENT_SECRET',
+			input : 'password',
+			key : 'clientSecret',
+			label : 'Client secret',
+			message : 'Beside the Client ID on the registered app.',
+			redact : true,
+			required : true
+		}
+	],
+
+	// The same mark the connection carries. One vendor, one icon — mergeVendors
+	// used to throw when two manifests disagreed about this.
+	icon: icon$1,
+
+	name : 'Mailchimp',
+
+	slug : 'mailchimp',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://mailchimp.com/developer/marketing/guides/access-user-data-oauth-2/',
+		dashboard : 'https://mailchimp.com/help/manage-tags/',
+		scopes : false
+	}
+
+};
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR SENDGRID, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside drawbridge.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var sendgridVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'SENDGRID_FROM_ADDRESS',
+			input : 'email',
+			key : 'accountSender',
+			label : 'Account sender',
+			message : 'Verification codes and security alerts send from here.',
+			required : true
+		},
+		{
+			credential : 'SENDGRID_API_KEY',
+			input : 'password',
+			key : 'apiKey',
+			label : 'SendGrid API key',
+			message : 'SendGrid dashboard, Settings, API Keys — full access for sends.',
+			redact : true,
+			required : true
+		},
+		{
+			credential : 'SENDGRID_EVENT_WEBHOOK_KEY',
+			input : 'text',
+			key : 'eventKey',
+			label : 'Event webhook key',
+			message : 'SendGrid, Settings, Mail Settings, Event Webhook — the verification key shown once signature verification is enabled. Public, not a secret.'
+		},
+		{
+			credential : 'SENDGRID_SEND_FROM_ADDRESS',
+			input : 'email',
+			key : 'leadSender',
+			label : 'Lead sender',
+			message : 'The default for lead-facing mail when a merchant has not verified their own domain.'
+		}
+	],
+
+	// The vendor's own mark rather than the connection's: drawbridge fronts three
+	// vendors and none of them is Drawbridge.
+	icon: icon$4,
+
+	name : 'SendGrid',
+
+	slug : 'sendgrid',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://www.twilio.com/docs/sendgrid/api-reference/mail-send/mail-send',
+		dashboard : 'https://www.twilio.com/docs/sendgrid/ui/analytics-and-reporting/email-activity-feed',
+		scopes : false
+	}
+
+};
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR SHOPIFY, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside shopify.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var shopifyVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'SHOPIFY_API_KEY',
+			input : 'text',
+			key : 'apiKey',
+			label : 'API key',
+			message : 'The app\'s Client ID — Dev Dashboard, the app, Settings.',
+			required : true
+		},
+		{
+			credential : 'SHOPIFY_API_SECRET',
+			input : 'password',
+			key : 'apiSecret',
+			label : 'API secret',
+			message : 'The app\'s Client secret, beside the Client ID in the app\'s settings.',
+			redact : true,
+			required : true
+		},
+		{
+			credential : 'SHOPIFY_APP_HANDLE',
+			input : 'text',
+			key : 'appHandle',
+			label : 'App handle',
+			message : 'The app\'s URL handle (for example drawbridge-development), from the app\'s configuration.',
+			required : true
+		},
+		{
+			credential : 'SHOPIFY_APP_LISTING_URL',
+			input : 'text',
+			key : 'listingUrl',
+			label : 'App listing URL',
+			message : 'Where "View on the Shopify App Store" sends merchants — the public listing, or the Dev Dashboard install link for the dev app.',
+			required : true
+		},
+		{
+			format : 'slug',
+			input : 'text',
+			key : 'orderEventHandle',
+			label : 'Order event handle',
+			message : 'Must match the usage meter\'s Handle field on the plan exactly — lowercase and hyphens. Leave empty to use drawbridge-orders.',
+			required : false,
+			setting : true
+		},
+		{
+			input : 'text',
+			key : 'partnerOrgId',
+			label : 'Partner organization ID',
+			message : 'The number in the Partner Dashboard URL — partners.shopify.com/<this number>/… — NOT the admin organization_id from the app listing link.',
+			required : false,
+			setting : true
+		},
+		{
+			input : 'text',
+			key : 'partnerAppId',
+			label : 'Partner app ID (numeric)',
+			message : 'The numeric id in the app\'s Partner Dashboard URL — not the Client ID.',
+			required : false,
+			setting : true
+		},
+		{
+			input : 'password',
+			key : 'partnerToken',
+			label : 'Partner API token',
+			message : 'Partner Dashboard, Settings, Partner API clients — create one with Manage apps and paste the prtapi_ token.',
+			redact : true,
+			required : false,
+			setting : true
+		}
+	],
+
+	// The same mark the connection carries. One vendor, one icon — mergeVendors
+	// used to throw when two manifests disagreed about this.
+	icon,
+
+	name : 'Shopify',
+
+	slug : 'shopify',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://shopify.dev/docs/api/admin-graphql',
+		dashboard : 'https://help.shopify.com/en/manual/apps',
+		scopes : 'https://shopify.dev/docs/api/usage/access-scopes'
+	}
+
+};
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR TWILIO, and where the facts about it came
+// from. One file per vendor, because a vendor is NOT a connection: it is the row
+// in the `provider` collection holding our keys for it, and a connection names
+// the ones it spends.
+//
+// This lived inside drawbridge.js until 2026-09-13, for a reason that no longer
+// holds — "so a vendor's credentials sit beside the `requires` that names the same
+// variables". `requires` derives from the `credential` keys below now, so the
+// proximity bought nothing, and the nesting cost mergeVendors(): 66 lines and four
+// throw-guards whose only job was reconciling two manifests that described one
+// vendor differently. Declared once, none of that can happen.
+var twilioVendor = {
+
+	// WHAT AN ADMIN TYPES on the provider screen. `credential` names the env var a
+	// field falls back to, and is the only place that name is written now — it used
+	// to appear three times per manifest.
+	fields : [
+		{
+			credential : 'TWILIO_ACCOUNT_FROM',
+			input : 'text',
+			key : 'smsFrom',
+			label : 'SMS number',
+			message : 'Without Twilio credentials, SMS is disabled across the platform.',
+			required : true
+		},
+		{
+			credential : 'TWILIO_ACCOUNT_SID',
+			input : 'password',
+			key : 'smsSid',
+			label : 'Twilio account SID',
+			message : 'Twilio console home — the AC… identifier on the account dashboard.',
+			redact : true,
+			required : true
+		},
+		{
+			credential : 'TWILIO_AUTH_TOKEN',
+			input : 'password',
+			key : 'smsToken',
+			label : 'Twilio auth token',
+			message : 'Beside the account SID on the Twilio console dashboard.',
+			redact : true,
+			required : true
+		}
+	],
+
+	// The vendor's own mark rather than the connection's: drawbridge fronts three
+	// vendors and none of them is Drawbridge.
+	icon: icon$3,
+
+	name : 'Twilio',
+
+	slug : 'twilio',
+
+	// WHERE THE FACTS CAME FROM. Was review.api / .dashboard / .scopes on the
+	// manifest. They are per-vendor documentation, which is exactly why drawbridge
+	// answered two of them with an object keyed by vendor while the other four
+	// answered with a string — two incompatible shapes for one key, and the shape
+	// was saying where the data belonged.
+	urls : {
+		api : 'https://www.twilio.com/docs/messaging/api/message-resource',
+		dashboard : 'https://www.twilio.com/docs/messaging/guides/debugging-tools',
+		scopes : false
+	}
+
+};
+
 // Every connection, one file each, and this is the whole registry.
 //
 // It lives in utils rather than in the api because BOTH sides need it and they
@@ -7909,6 +8261,81 @@ const checkIcon = ( owner, icon ) => {
 
 };
 
+// KEYED BY SLUG, from the files themselves. This was mergeVendors( connections ) —
+// 66 lines walking every manifest's provider.vendors and reconciling them, with
+// four throw-guards for two manifests naming one vendor differently, differing on
+// its icon, declaring one of its fields two ways, or claiming the same credential.
+// None of those can happen when a vendor is declared once, so all of it is gone.
+const vendors = Object.freeze( Object.fromEntries(
+	[ attentiveVendor, hubspotVendor, klaviyoVendor, mailchimpVendor, sendgridVendor, shopifyVendor, twilioVendor ]
+		.map( ( vendor ) => [ vendor.slug, vendor ] )
+) );
+
+// WHAT A VENDOR MUST DECLARE. Thrown at import, the same way build() refuses a
+// manifest — exported so the refusal itself is testable rather than only
+// observable by breaking a real vendor file.
+//
+// This ran inside build() over each manifest's provider.vendors until 2026-09-13,
+// which meant a vendor declared by two manifests was validated twice and could
+// disagree with itself between them. Declared once, checked once.
+//
+// A field is checked harder than a merchant field: it must be editable — an admin
+// cannot type into a read-only descriptor, and a credential nobody can enter is a
+// vendor that can never go live — and a `password` MUST be redacted. That last one
+// is a SECURITY BOUNDARY rather than tidiness: providerFields is what the api's
+// redaction derives from, so a password field that forgot `redact : true` is a
+// platform secret handed back over the wire to every admin screen that asks.
+const buildVendor = ( vendor ) => {
+
+	if( ! vendor?.slug ) throw new Error( 'A vendor needs a slug' );
+
+	if( ! vendor.name ) throw new Error( 'vendor ' + vendor.slug + ' has no name' );
+
+	// The admin card shows the vendor's own mark, which is not always the
+	// connection's — SendGrid's card is not the Drawbridge logo.
+	checkIcon( 'vendor ' + vendor.slug, vendor.icon );
+
+	if( ! Array.isArray( vendor.fields ) || ! vendor.fields.length ){
+
+		throw new Error( 'vendor ' + vendor.slug + ' has no fields — a vendor nothing is typed into holds nothing' );
+
+	}
+
+	for( const field of vendor.fields ){
+
+		if( ! field?.key || ! field?.label ){
+
+			throw new Error( 'vendor ' + vendor.slug + ' declares a field with no key or label' );
+
+		}
+
+		if( ! INPUTS.includes( field.input ) ){
+
+			throw new Error( vendor.slug + '.' + field.key + ' needs an input the admin form can render — one of ' + INPUTS.join( ', ' ) );
+
+		}
+
+		if( field.input === 'password' && ! field.redact ){
+
+			throw new Error( vendor.slug + '.' + field.key + ' is a password and must declare redact : true — the api would hand the value back' );
+
+		}
+
+	}
+
+	return Object.freeze( vendor );
+
+};
+
+for( const [ slug, vendor ] of Object.entries( vendors ) ){
+
+	if( vendor.slug !== slug ) throw new Error( 'vendor file ' + slug + ' declares slug ' + vendor.slug );
+
+	buildVendor( vendor );
+
+}
+
+
 // WHAT A CONNECTION MUST DECLARE. Thrown at import rather than discovered by a
 // merchant looking at a broken card, or by a workflow that accepted a step it
 // could never run.
@@ -8008,75 +8435,44 @@ const build = ( manifest ) => {
 
 	}
 
-	// DRAWBRIDGE'S OWN CREDENTIALS, declared under the VENDOR that holds them.
-	//
-	// A provider is a vendor Drawbridge has an account with; a connection is a
-	// thing a merchant turns on. They are not one-to-one in either direction:
-	// `drawbridge` spends SendGrid, Twilio and HubSpot, and a future Google row
-	// would be spent by analytics, geocoding and whatever comes after. So a
-	// manifest declares the fields IT spends, subkeyed by vendor, and mergeVendors
-	// below unions every manifest's declarations into one vendor each. Nobody
-	// owns a vendor — removing a manifest removes its fields and nothing else.
-	//
-	// A connection with no third party behind it — webhook — declares no block at
-	// all, which is what keeps it off the provider screen.
+	// THE ICON RIDES WITH THE MANIFEST, so a vendor cannot name an asset nobody
+	// added — which is what the old arrangement allowed, with the markup in one
+	// repo and the file in another.
+	checkIcon( manifest.slug, manifest?.icon );
+
+	// WHICH VENDORS THIS CONNECTION SPENDS, and they have to exist.
 	//
-	// Every field is checked harder than a merchant field: it must be editable
-	// (an admin cannot type into a read-only descriptor, and a credential nobody
-	// can enter is a vendor that can never go live), and a `password` MUST be
-	// redacted. That last one is a SECURITY BOUNDARY rather than tidiness —
-	// providerFields is what the api's redaction derives from, so a password field
-	// that forgot `redact : true` is a platform secret handed back over the wire
-	// to every admin screen that asks.
-	if( manifest.provider?.fields ){
+	// This used to be the whole vendor declaration, nested here — name, icon,
+	// fields and all — which is why mergeVendors() existed to reconcile two
+	// manifests describing one vendor. The vendors are their own files now and are
+	// checked above; a manifest names slugs.
+	if( ! Array.isArray( manifest.vendors ) ){
 
-		throw new Error( manifest.slug + ' declares provider.fields — fields live under provider.vendors.<vendor> now, keyed by the vendor that holds them' );
+		throw new Error( manifest.slug + ' must declare vendors — an array of vendor slugs, empty when it spends none' );
 
 	}
 
 	const declaredKeys = new Set();
 
-	for( const [ vendor, declared ] of Object.entries( manifest.provider?.vendors || {} ) ){
+	for( const slug of manifest.vendors ){
 
-		if( ! declared?.name ) throw new Error( manifest.slug + ' declares vendor ' + vendor + ' with no name' );
+		if( ! Object.hasOwn( vendors, slug ) ){
 
-		// The admin card shows the vendor's own mark, which is not always the
-		// connection's — SendGrid's card is not the Drawbridge logo.
-		checkIcon( manifest.slug + ' vendor ' + vendor, declared.icon );
-
-		if( ! Array.isArray( declared.fields ) || ! declared.fields.length ){
-
-			throw new Error( manifest.slug + ' declares vendor ' + vendor + ' with no fields — a vendor nothing is typed into holds nothing' );
+			throw new Error( manifest.slug + ' spends vendor ' + slug + ', which has no file in lib/connections/vendors' );
 
 		}
 
-		for( const field of declared.fields ){
-
-			if( ! field?.key || ! field?.label ){
-
-				throw new Error( manifest.slug + ' declares a provider field with no key or label' );
-
-			}
-
-			if( ! INPUTS.includes( field.input ) ){
-
-				throw new Error( manifest.slug + '.provider.' + field.key + ' needs an input the admin form can render — one of ' + INPUTS.join( ', ' ) );
-
-			}
-
-			if( field.input === 'password' && ! field.redact ){
-
-				throw new Error( manifest.slug + '.provider.' + field.key + ' is a password and must declare redact : true — the api would hand the value back' );
-
-			}
+		// ONE KEY PER CONNECTION across its vendors. vendorSettings() hands a
+		// connection every vendor's settings merged into one object, so two vendors
+		// on one manifest sharing a key would be one value silently winning over the
+		// other. Checked here rather than on the vendor, because it is a fact about
+		// the COMBINATION a connection spends: sendgrid and twilio are each fine, and
+		// only drawbridge naming both makes a shared key a problem.
+		for( const field of vendors[ slug ].fields ){
 
-			// ONE KEY PER CONNECTION across its vendors. vendorSettings() hands a
-			// connection every vendor's settings merged into one object, so two
-			// vendors on one manifest sharing a key would be one value silently
-			// winning over the other.
 			if( declaredKeys.has( field.key ) ){
 
-				throw new Error( manifest.slug + ' declares ' + field.key + ' under two vendors — vendorSettings() merges them and one would win' );
+				throw new Error( manifest.slug + ' spends ' + field.key + ' under two vendors — vendorSettings() merges them and one would win' );
 
 			}
 
@@ -8086,11 +8482,6 @@ const build = ( manifest ) => {
 
 	}
 
-	// THE ICON RIDES WITH THE MANIFEST, so a vendor cannot name an asset nobody
-	// added — which is what the old arrangement allowed, with the markup in one
-	// repo and the file in another.
-	checkIcon( manifest.slug, manifest?.icon );
-
 	// `group` does the actual grouping on the connections page, and `category`
 	// was a second word for the same fact — so it is gone rather than kept as an
 	// alias nobody could tell apart from this one.
@@ -8367,96 +8758,6 @@ const connections = Object.freeze({
 	webhook : build( webhook )
 });
 
-// A field declaration, with its keys in a fixed order, so two manifests that
-// declare the same field can be compared as strings whatever order they wrote
-// the keys in.
-const canonical = ( field ) => JSON.stringify( Object.fromEntries( Object.entries( field ).sort() ) );
-
-// DRAWBRIDGE'S OWN VENDOR ACCOUNTS, one entry per vendor, unioned from every
-// manifest that spends one. This is what the provider screen lists and what
-// the `provider` collection is keyed by: one row per key here.
-//
-// Exported as a function over a catalog, and not only as the merged constant,
-// so the guards can be exercised against a catalog that breaks them — the real
-// one is built to pass.
-//
-// THREE GUARDS, and each one is a way two files could disagree about one fact:
-//   the vendor's name and icon   the same vendor drawn two ways is two cards
-//   a field two manifests both   the same key declared differently is a form
-//   declare                      that renders whichever manifest loaded last
-//   a credential name            the join between `requires` and a row — two
-//                                fields answering one name is one value silently
-//                                winning, which is exactly the drift a row per
-//                                vendor exists to end
-const mergeVendors = ( catalog ) => {
-
-	const merged = {};
-	const claimed = new Map();
-
-	for( const [ slug, manifest ] of Object.entries( catalog ) ){
-
-		for( const [ vendor, declared ] of Object.entries( manifest.provider?.vendors || {} ) ){
-
-			const held = merged[ vendor ] || ( merged[ vendor ] = { fields : [], icon : declared.icon, name : declared.name } );
-
-			if( held.name !== declared.name ){
-
-				throw new Error( slug + ' names vendor ' + vendor + ' "' + declared.name + '" but another manifest names it "' + held.name + '"' );
-
-			}
-
-			if( held.icon !== declared.icon ){
-
-				throw new Error( slug + ' declares a different icon for vendor ' + vendor + ' than another manifest — one vendor, one mark' );
-
-			}
-
-			for( const field of declared.fields ){
-
-				const existing = held.fields.find( ( entry ) => entry.key === field.key );
-
-				if( existing ){
-
-					if( canonical( existing ) !== canonical( field ) ){
-
-						throw new Error( slug + ' declares ' + vendor + '.' + field.key + ' differently from another manifest — a field two connections spend is declared identically in both' );
-
-					}
-
-					continue;
-
-				}
-
-				if( field.credential ){
-
-					const owner = claimed.get( field.credential );
-
-					if( owner ){
-
-						throw new Error( field.credential + ' is claimed by both ' + owner + ' and ' + vendor + '.' + field.key + ' — one would silently overwrite the other' );
-
-					}
-
-					claimed.set( field.credential, vendor + '.' + field.key );
-
-				}
-
-				held.fields.push( field );
-
-			}
-
-		}
-
-	}
-
-	return Object.freeze( Object.fromEntries(
-		Object.entries( merged ).map( ( [ vendor, held ] ) => [ vendor, Object.freeze({ ...held, fields : Object.freeze( held.fields ) }) ] )
-	) );
-
-};
-
-const vendors = mergeVendors( connections );
-
 // A STEP TYPE MAY BE SHARED, BUT NOT ITS QUEUE.
 //
 // A step type belongs to the CAPABILITY rather than to whoever implements it —
@@ -8512,6 +8813,8 @@ const availableConnections = ( env = {} ) => Object.fromEntries(
 	)
 );
 
+
+
 // WHAT A MERCHANT CAN SEE AND CONNECT. Everything available, minus the private
 // ones.
 //
@@ -8774,12 +9077,6 @@ const publicConnectionKeys = Object.freeze([
 	// excerpt, guide, and any vendor redirect copy.
 	'content',
 	'createdAt',
-	// THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
-	// paused — kept, configured, and not run — as distinct from a vendor the
-	// platform switched off (which the api overlays as an error). Absent means
-	// on; the dashboard renders Paused from it and the sync gates refuse a paused
-	// connection the way they refuse a missing one.
-	'enabled',
 	// The connection DOCUMENT's own errors array — scope-drift entries written by
 	// drawbridge-sync. NOT the manifest's error copy, which is content.errors:
 	// the document is spread OVER the resolved manifest downstream, so the two
@@ -8873,4 +9170,4 @@ const resolveConnection = ( item, data, env = {} ) => {
 
 };
 
-export { AUTH_TYPES, GROUPS, HOOKS, HOOK_EFFECTS, HOOK_NAMES, HOOK_OPTIONS, HOOK_PROPS, INPUTS, OAUTH_FIELDS, OUTCOMES, RETIRED, STATUSES, STEPS, STEP_TYPES, WRITE_OPERATIONS, accessToken, authToken, availableConnections, build, catalogConnections, connectFields, connectionSteps, connections, effectsOf, hookSupport, isStale, mergeSettings, mergeVendors, projectConnection, publicConnectionKeys, publicSettingsBySlug, redactSettings, resolveConnection, runHook, scopesMessage, stepLabels, stepQueues, stepRoutes, tokenSettings, vendors };
+export { AUTH_TYPES, GROUPS, HOOKS, HOOK_EFFECTS, HOOK_NAMES, HOOK_OPTIONS, HOOK_PROPS, INPUTS, OAUTH_FIELDS, OUTCOMES, RETIRED, STATUSES, STEPS, STEP_TYPES, WRITE_OPERATIONS, accessToken, authToken, availableConnections, build, buildVendor, catalogConnections, connectFields, connectionSteps, connections, effectsOf, hookSupport, isStale, mergeSettings, projectConnection, publicConnectionKeys, publicSettingsBySlug, redactSettings, resolveConnection, runHook, scopesMessage, stepLabels, stepQueues, stepRoutes, tokenSettings, vendors };