@drawbridge/drawbridge-utils 0.0.177 → 0.0.178

package/dist/{index-B546oDNo.d.ts → index-DOYCXtd7.d.ts}

@@ -935,6 +935,16 @@ const TRIGGERS = Object.freeze({
 	'range.ended' : Object.freeze({ event : 'range.ended', type : 'range' }),
 	'range.started' : Object.freeze({ event : 'range.started', type : 'range' }),
 	'schedule.day' : Object.freeze({ event : 'day', type : 'schedule' }),
+	// THE THREE SHOPIFY TRIGGERS, which were never in this vocabulary because the
+	// four workflows they fire were hand-written in drawbridge-sync's register job
+	// rather than provisioned from the manifest. `webhook` is a fourth trigger
+	// TYPE, and it is the honest name: these fire when the vendor calls us, which
+	// is neither an event Drawbridge raised nor a schedule it keeps.
+	'shopify.order.create' : Object.freeze({ event : 'shopify.order.create', type : 'webhook' }),
+	'shopify.product.update' : Object.freeze({ event : 'shopify.product.update', type : 'webhook' }),
+	// The token audit, dispatched programmatically by the register job when a
+	// store's grant is exchanged or rotated.
+	'shopify.token' : Object.freeze({ event : 'shopify.token', type : 'event' }),
 	'schedule.month' : Object.freeze({ event : 'month', type : 'schedule' }),
 	'schedule.week' : Object.freeze({ event : 'week', type : 'schedule' }),
 	'segment.contact.add' : Object.freeze({ event : 'segment.contact.add', type : 'event' }),
@@ -1050,7 +1060,7 @@ const HOOK_NAMES = Object.freeze( names( HOOKS ) );
 // matched on it. A fifth outcome that no producer produces and no consumer reads
 // is a branch somebody writes one day for a case that cannot happen.
 //
-// Not to be confused with STATUSES.disconnected below, which is a CONNECTION's
+// Not to be confused with a CONNECTION's own status, which is
 // state and stays until a count says it can go.
 const OUTCOMES = Object.freeze({
 	answered : 'answered',
@@ -1076,7 +1086,13 @@ const OUTCOMES = Object.freeze({
 // NO `incomplete`. That is an ORGANIZATION status meaning outstanding invoices,
 // and reusing the word for a connection would leave nobody able to say which
 // object a status referred to.
-const STATUSES = Object.freeze([ 'active', 'disconnected', 'error', 'pending' ]);
+//
+// NO `disconnected` EITHER, as of 2026-09-13. Nothing wrote it — drawbridge-api
+// DELETES a connection on disconnect — and its removal was gated on a count
+// rather than on the reading, because a value a live document still holds cannot
+// leave a strict validator without rejecting that document on its next write.
+// Counted read-only on both clusters the day it went: 0 on dev, 0 on prod.
+const STATUSES = Object.freeze([ 'active', 'error', 'pending' ]);
 
 // HOW A VENDOR IS CONNECTED — SAID BY THE SHAPE, not by an enum beside it.
 //
@@ -1296,18 +1312,16 @@ const bearing = ( entry ) => ERROR_SOURCES[ entry?.source ] !== false;
 // checked status alone, so saving a workflow flipped it active against a
 // connection sync immediately re-errored.
 //
-// TERMINAL STATES ARE NOT REASSESSED. `disconnected` is a merchant's decision,
-// and a passing health check proves a credential works — never that somebody
-// wants the connection. (Nothing writes it today: the api DELETES a connection on
-// disconnect. It stays in the vocabulary, and stays honoured here, until a count
-// on both clusters says it can leave.)
-const assess = ({ errors = [], status = null } = {}) => {
-
-	if( status === 'disconnected' ) return status;
-
-	return ( errors || [] ).some( bearing ) ? 'error' : 'active';
-
-};
+// NO TERMINAL STATE TO HONOUR ANY MORE. This used to return `disconnected`
+// untouched, on the reasoning that a passing health check proves a credential
+// works and never that somebody wants the connection. True — but nothing ever
+// wrote that status, because drawbridge-api deletes a connection on disconnect,
+// and it left the vocabulary once a count on both clusters read zero.
+//
+// So every status this can see is derived, and it derives all of them.
+const assess = ({ errors = [] } = {}) => (
+	( errors || [] ).some( bearing ) ? 'error' : 'active'
+);
 
 // WHAT SURVIVES A PASS THAT PROVED SOMETHING. A health run proves the credential,
 // so it may clear `oauth` and whatever else it judged — and must leave every
@@ -1643,6 +1657,54 @@ const systemSteps = ( node, path = [] ) => Object.entries( node || {} ).flatMap(
 	}
 );
 
+// THE WORKFLOWS A MANIFEST DECLARES, as data and without writing any of them.
+//
+// SHARED WITH THE MIGRATION THAT REPORTS WHAT IS MISSING. drawbridge-api's
+// provisionSystemWorkflows had its own copy of this walk so a dry run could say
+// what it WOULD create without creating it — and the copy fell behind the moment
+// a workflow could carry several steps: it keyed titles off each step's own
+// `key`, so a grouped pair looked like two workflows named after steps rather
+// than one named after the grouping. Two walks over the same manifests is
+// exactly the drift this package exists to remove, so there is one.
+//
+// ONE ROW PER TITLE, and several steps may share one. A step that declares
+// `workflow` takes its title, its trigger and its position from there; every
+// other step is a workflow of one, titled by its own key.
+//
+// NO TRIGGER IS A DECISION, and it is honoured here: a system step with neither
+// its own trigger nor a workflow carrying one is declared so a stray dispatch
+// lands on a real queue, and provisioning a row for it would put something in
+// the merchant's list that never runs.
+//
+// SORTED BY DECLARED ORDER, because a workflow of several runs them in sequence
+// and the tree walk is alphabetical, which is not meaningful.
+const systemWorkflows = ( manifest ) => {
+
+	const grouped = new Map();
+
+	for( const [ type, declared ] of systemSteps( manifest?.steps ) ){
+
+		const trigger = declared.workflow?.trigger || declared.trigger;
+
+		if( ! trigger?.event || ! trigger?.type ) continue;
+
+		const title = declared.workflow?.key || declared.key;
+
+		if( ! title ) continue;
+
+		if( ! grouped.has( title ) ) grouped.set( title, { steps : [], title, trigger });
+
+		grouped.get( title ).steps.push({ order : declared.workflow?.order ?? 0, type });
+
+	}
+
+	return [ ...grouped.values() ].map( ( workflow ) => ({
+		...workflow,
+		steps : workflow.steps.slice().sort( ( a, b ) => a.order - b.order )
+	}) );
+
+};
+
 // THE WORKFLOWS A CONNECTION OWNS, provisioned from the manifest rather than
 // from a branch per step type. A vendor that declares a new system step with a
 // trigger gets its workflow with no edit here, which is the whole point of the
@@ -1661,8 +1723,13 @@ const systemSteps = ( node, path = [] ) => Object.entries( node || {} ).flatMap(
 // { connection, system, title } where system is true refuses every create but
 // the first, and the catch below is what lets a loser carry on.
 //
-// Shopify is excluded: its register job creates the same workflow with three
-// siblings, and racing it here would write a duplicate.
+// SHOPIFY IS NO LONGER EXCLUDED. It was, because its register job hand-wrote the
+// same four workflows and racing it here would write duplicates — and the reason
+// that spec could not simply be deleted is that one of its four, "Shopify Token
+// Activity", carries TWO steps, which a declaration had no way to express. It
+// does now: a step may declare `workflow`, naming the title, the trigger and its
+// order, and the grouping below provisions one row for all the steps that share
+// a key. The hand-written spec is gone with it.
 //
 // `connections` is a parameter whose default is the real registry. The seam is
 // there so this module's behaviour can be tested against a manifest shape — a
@@ -1671,7 +1738,7 @@ const systemSteps = ( node, path = [] ) => Object.entries( node || {} ).flatMap(
 // to be installed. Production callers pass nothing and get the real thing.
 const ensureSystemWorkflows = async ({ connections : registry = connections, controller, doc }) => {
 
-	if( ! doc?.id || doc.slug === 'shopify' ) return [];
+	if( ! doc?.id ) return [];
 
 	const manifest = registry[ doc.slug ];
 
@@ -1679,17 +1746,7 @@ const ensureSystemWorkflows = async ({ connections : registry = connections, con
 
 	const provisioned = [];
 
-	for( const [ type, declared ] of systemSteps( manifest.steps ) ){
-
-		// NO TRIGGER IS A DECISION. Shopify's token-audit steps are declared so a
-		// stray dispatch lands on a real queue, and are never fired — provisioning
-		// a workflow for them would put a row in the merchant's list for something
-		// that never runs.
-		if( ! declared.trigger?.event || ! declared.trigger?.type ) continue;
-
-		const title = declared.key;
-
-		if( ! title ) continue;
+	for( const { steps : members, title, trigger } of systemWorkflows( manifest ) ){
 
 		const existing = await controller.count({
 			collection : 'workflow',
@@ -1709,13 +1766,10 @@ const ensureSystemWorkflows = async ({ connections : registry = connections, con
 			connection : doc.id,
 			organization : doc.organization,
 			status : 'active',
-			steps : [ {
-				settings : {},
-				type
-			} ],
+			steps : members.map( ( { type } ) => ({ settings : {}, type }) ),
 			system : true,
 			title,
-			trigger : declared.trigger
+			trigger
 		};
 
 		let created;
@@ -1754,6 +1808,213 @@ const ensureSystemWorkflows = async ({ connections : registry = connections, con
 
 };
 
+// THE FACTS OF THE REGISTRY, AS MARKDOWN.
+//
+// `drawbridge-docs/reference/connection-hooks.md` carried a support matrix under
+// the footnote "Generated from the manifests in drawbridge-utils — if this table
+// and the package disagree, the package is right."
+//
+// IT WAS NOT GENERATED, AND THEY DISAGREED. Measured 2026-09-12, before this
+// existed: four columns against six manifests, seventeen rows against
+// thirty-one hook slots, and THREE OF THE THIRTEEN checkable rows were factually
+// wrong — auth.connect documented `yes` for two vendors that decline it,
+// auth.disconnect `yes` for three that decline it, auth.scopes `no` for Klaviyo,
+// which implements it. Plus twenty-seven references to a `catalog.*` domain that
+// had been called `resources.*` for two renames.
+//
+// So the facts are emitted from the registry and the doc includes them. THE
+// PROSE AROUND THEM STAYS HAND-WRITTEN: the reasoning about why
+// `resources.prices` is declined everywhere is worth a person's words. Only the
+// facts rot, so only the facts are generated.
+//
+// A test asserts that regenerating produces no diff — which is the check that
+// footnote always claimed and nobody ever ran.
+
+const MARKER = {
+	end : '<!-- /generated -->',
+	start : '<!-- generated: drawbridge-utils lib/connections/reference.js — do not edit by hand -->'
+};
+
+const slugs = () => Object.keys( connections ).sort();
+
+// Every hook slot, in the vocabulary's own order, as dotted names. HOOKS nests
+// arbitrarily deep — `notification.email.send`, `install.organizations.add` —
+// and the depth is part of the name.
+const slots = ( node = HOOKS, path = [] ) => Object.entries( node ).flatMap(
+	( [ key, value ] ) => (
+		Array.isArray( value )
+			? value.map( ( verb ) => [ ...path, key, verb ].join( '.' ) )
+			: slots( value, [ ...path, key ] )
+	)
+);
+
+const implemented$1 = ( hooks, name ) => {
+
+	const found = name.split( '.' ).reduce(
+		( node, key ) => ( node && typeof node === 'object' && Object.hasOwn( node, key ) ) ? node[ key ] : undefined,
+		hooks
+	);
+
+	if( typeof found === 'function' ) return 'yes';
+
+	// `{}` IS A THIRD ANSWER, not a yes: declared here, implemented in the repo
+	// holding the dependencies. Collapsing it into `yes` is how a doc tells a
+	// reader the package can do something it cannot.
+	if( found && typeof found === 'object' ) return 'elsewhere';
+
+	return 'no';
+
+};
+
+const table = ( header, rows ) => [
+	'| ' + header.join( ' | ' ) + ' |',
+	'|' + header.map( () => '---' ).join( '|' ) + '|',
+	...rows.map( ( row ) => '| ' + row.join( ' | ' ) + ' |' )
+].join( '\n' );
+
+const matrix = () => {
+
+	const columns = slugs();
+
+	return table(
+		[ 'Hook', ...columns ],
+		slots().map( ( name ) => [
+			'`' + name + '`',
+			...columns.map( ( slug ) => implemented$1( connections[ slug ].hooks, name ) )
+		] )
+	);
+
+};
+
+const vocabularies = () => {
+
+	const list = ( values ) => values.map( ( value ) => '`' + value + '`' ).join( ', ' );
+
+	return table(
+		[ 'Vocabulary', 'Values' ],
+		[
+			[ '`AUTH_KINDS`', list( AUTH_KINDS ) ],
+			[ '`GROUPS`', list( GROUPS ) ],
+			[ '`INPUTS`', list( INPUTS ) ],
+			[ '`STATUSES`', list( STATUSES ) ],
+			[ '`TRIGGERS`', list( Object.keys( TRIGGERS ).sort() ) ],
+			[ '`TRIGGER_TYPES`', list( TRIGGER_TYPES ) ]
+		]
+	);
+
+};
+
+// Every step in the registry, with the hook it calls and what fires it. A step
+// with NO hook is real and stays visible: Shopify's token-audit pair is declared
+// for routing and never dispatched.
+const steps = () => {
+
+	const rows = [];
+
+	const walk = ( node, path, slug ) => {
+
+		if( ! node || typeof node !== 'object' ) return;
+
+		for( const [ key, value ] of Object.entries( node ) ){
+
+			if( typeof value === 'function' ){
+
+				let declared;
+
+				try { declared = value({}); } catch { continue; }
+
+				if( ! declared?.type ) continue;
+
+				const fires = declared.workflow?.trigger || declared.trigger;
+
+				rows.push([
+					'`' + declared.type + '`',
+					slug,
+					declared.hook ? '`' + declared.hook + '`' : '—',
+					declared.queue,
+					declared.system ? 'system' : declared.withdrawn ? 'withdrawn' : 'builder',
+					fires ? '`' + fires.event + '` / `' + fires.type + '`' : ( declared.triggers || [] ).map( ( t ) => '`' + t + '`' ).join( ', ' ) || '—'
+				]);
+
+				continue;
+
+			}
+
+			walk( value, [ ...path, key ], slug );
+
+		}
+
+	};
+
+	for( const slug of slugs() ) walk( connections[ slug ].steps, [], slug );
+
+	return table( [ 'Step', 'Connection', 'Hook', 'Queue', 'Shape', 'Fired by' ], rows.sort( ( a, b ) => a[ 0 ].localeCompare( b[ 0 ] ) || a[ 1 ].localeCompare( b[ 1 ] ) ) );
+
+};
+
+// The workflows a connection is provisioned with, which is the other half of
+// "what runs on its own": a step is only reachable if something fires it.
+const workflows = () => table(
+	[ 'Workflow', 'Connection', 'Steps', 'Trigger' ],
+	slugs().flatMap( ( slug ) => systemWorkflows( connections[ slug ] ).map( ( workflow ) => [
+		workflow.title,
+		slug,
+		workflow.steps.map( ( step ) => '`' + step.type + '`' ).join( ' → ' ),
+		'`' + workflow.trigger.event + '` / `' + workflow.trigger.type + '`'
+	] ) )
+);
+
+const reference = () => [
+	MARKER.start,
+	'',
+	'### The support matrix',
+	'',
+	'`yes` is a body in this package. `elsewhere` is declared here and implemented in the repo holding the dependencies — a different fact from `no`, and collapsing the two is how a table tells a reader the package can do something it cannot.',
+	'',
+	matrix(),
+	'',
+	'### The closed vocabularies',
+	'',
+	vocabularies(),
+	'',
+	'### Every step',
+	'',
+	'A step with no hook is real: Shopify\'s token-audit pair is declared so a stray dispatch lands on a real queue, and is never fired.',
+	'',
+	steps(),
+	'',
+	'### The system workflows a connection is provisioned with',
+	'',
+	'Idempotent on (connection, system, title), so the TITLE is load-bearing — one that varied by account would provision a second workflow every time it changed.',
+	'',
+	workflows(),
+	'',
+	'### Counts',
+	'',
+	'- **' + slugs().length + '** connections',
+	'- **' + slots().length + '** hook slots',
+	'- **' + Object.keys( STEPS ).length + '** step types',
+	'- **' + Object.keys( TRIGGERS ).length + '** triggers',
+	'',
+	MARKER.end
+].join( '\n' );
+
+// Splice the generated block into a document, replacing whatever is between the
+// markers. Returns the document unchanged when it carries no markers, so a
+// caller can tell a doc that opted in from one that did not.
+const spliced = ( document ) => {
+
+	const from = document.indexOf( MARKER.start );
+	const to = document.indexOf( MARKER.end );
+
+	if( from < 0 || to < 0 ) return document;
+
+	return document.slice( 0, from ) + reference() + document.slice( to + MARKER.end.length );
+
+};
+
+const MARKERS = MARKER;
+
 // A LIVE ACCESS TOKEN, for any vendor that issues an expiring one.
 //
 // Written once here rather than per vendor, because every OAuth connection ends
@@ -2757,7 +3018,7 @@ var scaffold = {
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests through dist.
-var icon$7 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$8 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#FFD967"/>
 <path d="M239.369 127.404C260.863 122.013 284.964 132.569 295.576 152.039C321.796 201.286 347.928 250.567 374.131 299.825C380.149 311.989 381.244 326.564 376.733 339.41C371.446 355.097 358.039 367.69 342.107 372.089C326.274 376.67 308.351 372.871 295.741 362.255C288.865 356.892 284.161 349.359 280.354 341.629C261.869 306.95 243.478 272.217 225.071 237.501C214.409 218.614 187.221 212.656 169.622 225.315C168.104 227.309 164.159 226.857 164.72 223.796C176.911 202.569 189.361 181.497 201.662 160.331C205.183 154.428 208.214 148.129 212.967 143.091C219.844 135.272 229.263 129.782 239.374 127.404" fill="#1E1C1C"/>
 <path d="M166.04 261.805C180.228 259.107 195.528 261.893 207.581 269.971C218.512 277.079 226.908 288.136 230.604 300.657C234.835 314.103 233.614 329.124 227.485 341.788C220.097 356.875 205.782 368.543 189.317 372.089C173.957 375.652 157.089 372.386 144.304 363.103C132.971 355.295 124.912 342.989 121.891 329.581C118.943 316.636 120.725 302.656 127.002 290.938C134.699 275.951 149.503 264.933 166.046 261.811" fill="#1E1C1C"/>
@@ -3590,7 +3851,7 @@ var attentive = {
 		webhook : false
 
 	},
-	icon: icon$7,
+	icon: icon$8,
 	// DERIVED from the vendors this connection spends — every `credential` their
 	// files declare. It used to be typed out here as well, which made the same env
 	// names a three-copy fact (here, auth.oauth.client, and the vendor field).
@@ -4209,7 +4470,7 @@ const contacts = {
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$6 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$7 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#0D1314"/>
 <g clip-path="url(#clip0_2115_2832)">
 <path d="M153.198 142.241L183.69 196.065V303.852L153 357.676L184.82 375.028L220.116 313.163V186.865L185.046 125L153.198 142.241Z" fill="#BAEC5F"/>
@@ -4230,7 +4491,7 @@ var icon$6 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xm
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$5 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$6 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#FF7A59"/>
 <circle cx="290" cy="290" r="78" stroke="white" stroke-width="30"/>
 <circle cx="290" cy="290" r="18" fill="white"/>
@@ -4248,7 +4509,7 @@ var icon$5 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xm
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$4 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$5 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#F1FAFF"/>
 <g clip-path="url(#clip0_1011_2743)">
 <path d="M366.676 134.534V289.172H289.203V366.487H134.258L134.258 289.171L134.256 289.172V211.851H211.729V134.534H366.676Z" fill="#9DD6E3"/>
@@ -4271,7 +4532,7 @@ var icon$4 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xm
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$3 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$4 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#F22F46"/>
 <path d="M250 134.954C186.341 134.954 134.954 186.341 134.954 250C134.954 313.659 186.341 365.047 250 365.047C313.659 365.047 365.047 313.659 365.047 250C365.047 186.341 313.659 134.954 250 134.954ZM250 334.368C203.215 334.368 165.633 296.786 165.633 250C165.633 203.215 203.215 165.633 250 165.633C296.786 165.633 334.368 203.215 334.368 250C334.368 296.786 296.786 334.368 250 334.368ZM302.155 221.622C302.155 234.661 291.417 245.399 278.378 245.399C265.34 245.399 254.602 234.661 254.602 221.622C254.602 208.584 265.34 197.846 278.378 197.846C291.417 197.846 302.155 208.584 302.155 221.622ZM302.155 278.378C302.155 291.417 291.417 302.155 278.378 302.155C265.34 302.155 254.602 291.417 254.602 278.378C254.602 265.34 265.34 254.602 278.378 254.602C291.417 254.602 302.155 265.34 302.155 278.378ZM245.399 278.378C245.399 291.417 234.661 302.155 221.622 302.155C208.584 302.155 197.846 291.417 197.846 278.378C197.846 265.34 208.584 254.602 221.622 254.602C234.661 254.602 245.399 265.34 245.399 278.378ZM245.399 221.622C245.399 234.661 234.661 245.399 221.622 245.399C208.584 245.399 197.846 234.661 197.846 221.622C197.846 208.584 208.584 197.846 221.622 197.846C234.661 197.846 245.399 208.584 245.399 221.622Z" fill="white"/>
 </svg>`;
@@ -5416,7 +5677,7 @@ var drawbridge = {
 		},
 		webhook : false
 	},
-	icon: icon$6,
+	icon: icon$7,
 
 	// WHERE TWILIO PUTS THINGS on an inbound request, and WHICH credential
 	// verifies each channel. The route resolves the NAME to the stored value and
@@ -5673,7 +5934,7 @@ var drawbridge = {
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$2 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$3 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#FF4B32"/>
 <path d="M365.047 327.038H134.954V172.964H365.047L316.856 250.001L365.047 327.038Z" fill="#232121"/>
 </svg>`;
@@ -6655,7 +6916,7 @@ var klaviyo = {
 		webhook : false
 
 	},
-	icon: icon$2,
+	icon: icon$3,
 	// DERIVED from the vendors this connection spends — every `credential` their
 	// files declare. It used to be typed out here as well, which made the same env
 	// names a three-copy fact (here, auth.oauth.client, and the vendor field).
@@ -6814,7 +7075,7 @@ var klaviyo = {
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon$1 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$2 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#FFE01B"/>
 <path d="M310.633 243.561C312.49 243.336 314.249 243.308 315.882 243.561C316.81 241.394 316.979 237.665 316.149 233.598C314.882 227.561 313.18 223.917 309.662 224.508C306.13 225.071 305.989 229.433 307.269 235.47C307.973 238.847 309.24 241.746 310.633 243.561ZM280.392 248.332C282.925 249.429 284.473 250.147 285.05 249.542C285.458 249.148 285.345 248.36 284.74 247.375C283.112 245.042 280.844 243.229 278.211 242.154C275.397 240.982 272.328 240.556 269.301 240.916C266.274 241.275 263.391 242.41 260.93 244.209C259.256 245.447 257.666 247.15 257.863 248.191C257.961 248.515 258.186 248.782 258.777 248.895C260.17 249.049 265.025 246.587 270.64 246.249C274.608 245.968 277.859 247.206 280.392 248.332ZM275.312 251.216C272.047 251.737 270.232 252.807 269.078 253.848C268.079 254.72 267.488 255.649 267.488 256.339L267.741 256.93L268.262 257.127C269.008 257.127 270.668 256.479 270.668 256.479C275.228 254.861 278.253 255.044 281.25 255.382C282.897 255.579 283.671 255.663 284.037 255.1C284.135 254.931 284.29 254.608 283.938 254.059C283.15 252.778 279.843 250.682 275.312 251.216ZM300.416 261.855C302.654 262.953 305.102 262.502 305.904 260.884C306.735 259.266 305.567 257.056 303.329 255.973C301.106 254.861 298.643 255.283 297.841 256.902C297.039 258.52 298.207 260.757 300.416 261.855ZM314.742 249.317C312.94 249.289 311.449 251.259 311.393 253.764C311.35 256.254 312.8 258.281 314.615 258.295C316.43 258.323 317.922 256.339 317.964 253.862C318.006 251.385 316.571 249.359 314.742 249.317ZM193.103 294.108C192.653 293.545 191.907 293.7 191.189 293.897C190.683 293.995 190.12 294.136 189.515 294.122C188.909 294.134 188.308 293.998 187.767 293.726C187.225 293.454 186.757 293.054 186.405 292.56C185.575 291.294 185.617 289.394 186.546 287.241L186.968 286.27C188.431 283.019 190.838 277.559 188.122 272.367C187.234 270.534 185.908 268.948 184.261 267.75C182.614 266.553 180.697 265.78 178.679 265.5C176.772 265.256 174.835 265.469 173.026 266.123C171.218 266.776 169.591 267.85 168.28 269.257C164.284 273.661 163.679 279.684 164.439 281.823C164.734 282.611 165.184 282.822 165.494 282.864C166.169 282.963 167.169 282.456 167.802 280.754L167.999 280.219C168.28 279.318 168.801 277.63 169.659 276.307C170.717 274.689 172.375 273.558 174.267 273.162C176.159 272.766 178.131 273.138 179.749 274.196C182.563 276.039 183.619 279.473 182.423 282.752C181.803 284.455 180.804 287.691 181.015 290.351C181.466 295.74 184.815 297.907 187.77 298.175C190.669 298.273 192.695 296.655 193.216 295.459C193.511 294.713 193.258 294.277 193.103 294.108Z" fill="#231E15"/>
 <path d="M360.476 284.243C360.35 283.835 359.618 281.204 358.647 278.052L356.621 272.648C360.575 266.696 360.645 261.405 360.124 258.393C359.531 254.519 357.693 250.944 354.89 248.205C351.766 244.94 345.363 241.563 336.385 239.044L331.671 237.736C331.643 237.524 331.418 226.619 331.235 221.933C331.08 218.555 330.798 213.264 329.152 208.058C327.182 200.993 323.791 194.858 319.527 190.876C331.277 178.717 338.594 165.307 338.58 153.81C338.538 131.703 311.379 124.976 277.902 138.851L270.824 141.863C270.795 141.835 258.004 129.283 257.821 129.128C219.63 95.8334 100.327 228.476 138.49 260.687L146.835 267.737C144.581 273.775 143.781 280.259 144.499 286.664C145.414 295.543 149.973 304.029 157.375 310.6C164.411 316.82 173.684 320.788 182.648 320.774C197.494 354.998 231.408 375.965 271.175 377.161C313.842 378.427 349.641 358.403 364.67 322.435C365.641 319.916 369.806 308.546 369.806 298.513C369.792 288.409 364.093 284.229 360.476 284.243ZM185.913 311.149C184.613 311.381 183.293 311.48 181.973 311.445C169.083 311.079 155.166 299.483 153.787 285.735C152.253 270.537 160.02 258.829 173.783 256.071C175.415 255.72 177.414 255.537 179.552 255.635C187.264 256.085 198.606 261.996 201.209 278.784C203.517 293.63 199.858 308.785 185.913 311.149ZM171.545 246.953C163.179 248.499 155.744 253.244 150.817 260.18C148.045 257.873 142.909 253.426 142.008 251.681C134.635 237.693 150.043 210.478 160.823 195.111C187.405 157.145 229.086 128.424 248.393 133.603C251.517 134.503 261.902 146.563 261.902 146.563C261.902 146.563 242.623 157.244 224.724 172.16C200.646 190.735 182.423 217.697 171.545 246.953ZM306.792 305.464C306.937 305.403 307.057 305.295 307.134 305.157C307.211 305.019 307.239 304.86 307.214 304.704C307.205 304.61 307.178 304.519 307.133 304.436C307.088 304.353 307.027 304.28 306.954 304.221C306.88 304.162 306.796 304.118 306.705 304.092C306.614 304.066 306.519 304.059 306.426 304.071C306.426 304.071 286.246 307.054 267.179 300.089C269.247 293.348 274.792 295.754 283.137 296.444C296.108 297.209 309.116 295.802 321.623 292.279C330.25 289.788 341.592 284.905 350.401 277.953C353.384 284.497 354.425 291.674 354.425 291.674C354.425 291.674 356.719 291.265 358.647 292.447C360.476 293.573 361.799 295.895 360.898 301.89C359.027 313.119 354.271 322.224 346.235 330.611C341.236 336.036 335.277 340.492 328.659 343.754C324.983 345.691 321.151 347.32 317.205 348.623C286.964 358.487 256.006 347.638 246.029 324.321C245.224 322.535 244.556 320.691 244.03 318.804C239.781 303.438 243.383 285.032 254.655 273.408C255.372 272.676 256.09 271.804 256.09 270.706C256.09 269.806 255.499 268.835 255.007 268.131C251.066 262.418 237.374 252.666 240.132 233.795C242.088 220.23 253.951 210.689 265.012 211.252L267.826 211.421C272.611 211.702 276.79 212.307 280.73 212.49C287.344 212.758 293.268 211.801 300.304 205.947C302.683 203.949 304.582 202.246 307.791 201.711C308.128 201.627 308.973 201.359 310.647 201.416C312.365 201.485 314.032 202.015 315.474 202.949C321.103 206.693 321.905 215.783 322.214 222.439C322.383 226.225 322.848 235.414 322.988 238.031C323.354 244.054 324.944 244.912 328.125 245.954C329.94 246.573 331.615 246.995 334.077 247.713C341.521 249.781 345.968 251.934 348.754 254.65C350.198 256.049 351.13 257.893 351.4 259.885C352.315 266.316 346.432 274.252 330.925 281.457C313.954 289.324 293.367 291.322 279.154 289.732L274.173 289.169C262.774 287.649 256.315 302.34 263.14 312.402C267.545 318.889 279.52 323.11 291.523 323.11C319.006 323.139 340.142 311.402 348.023 301.242L348.642 300.356C349.008 299.765 348.712 299.469 348.22 299.779C341.817 304.169 313.279 321.619 282.771 316.384C282.771 316.384 279.056 315.765 275.678 314.442C273.005 313.429 267.362 310.811 266.686 305.042C291.27 312.683 306.792 305.478 306.792 305.464ZM220.671 194.971C230.127 184.051 241.765 174.538 252.206 169.219C252.558 169.022 252.938 169.43 252.741 169.754C251.46 172 250.476 174.403 249.814 176.902C249.73 177.282 250.138 177.592 250.461 177.353C256.963 172.934 268.248 168.192 278.155 167.601C278.251 167.584 278.351 167.601 278.436 167.65C278.521 167.698 278.586 167.775 278.621 167.866C278.656 167.957 278.658 168.058 278.627 168.151C278.596 168.244 278.533 168.323 278.451 168.375C276.809 169.634 275.342 171.105 274.088 172.751C273.891 173.032 274.074 173.44 274.426 173.44C281.378 173.483 291.186 175.903 297.56 179.491C297.982 179.745 297.673 180.575 297.209 180.462C287.527 178.253 271.724 176.564 255.288 180.575C240.597 184.149 229.396 189.666 221.248 195.618C220.826 195.899 220.333 195.351 220.671 194.971Z" fill="#231E15"/>
@@ -7684,7 +7945,7 @@ var mailchimp = {
 		// Drawbridge posts to a merchant's own endpoint, never through a vendor.
 		webhook : false
 	},
-	icon: icon$1,
+	icon: icon$2,
 	// The OAuth client this deployment registered. Without both, the vendor drops
 	// out of availableConnections rather than offering a Connect button that
 	// cannot complete.
@@ -7844,7 +8105,7 @@ var mailchimp = {
 // A .js wrapper around otherwise untouched SVG so `node --test` can run against
 // lib/ directly. A bare .svg import would need a bundler loader and force the
 // tests onto dist/, which is a worse trade than one line of wrapper.
-var icon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+var icon$1 = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
 <rect width="500" height="500" fill="#95C049"/>
 <path d="M292.997 147.633C292.997 147.633 289.98 148.495 285.023 150.004C284.161 147.202 282.868 143.969 281.144 140.521C275.54 129.744 267.134 123.925 257.22 123.925C256.574 123.925 255.927 123.925 255.065 124.141C254.849 123.71 254.418 123.494 254.203 123.063C249.892 118.322 244.289 116.166 237.607 116.382C224.676 116.813 211.744 126.081 201.399 142.676C194.071 154.314 188.468 168.97 186.959 180.393C172.088 184.919 161.743 188.152 161.527 188.367C153.984 190.738 153.768 190.954 152.906 198.066C151.613 203.454 132 355.4 132 355.4L294.937 383.633V147.202C294.075 147.418 293.429 147.418 292.997 147.633ZM255.281 159.271C246.66 161.858 237.176 164.875 227.909 167.677C230.495 157.547 235.668 147.418 241.702 140.736C244.073 138.365 247.306 135.564 250.97 133.839C254.634 141.598 255.496 152.159 255.281 159.271ZM237.823 125.003C240.84 125.003 243.427 125.649 245.582 126.943C242.133 128.667 238.685 131.469 235.452 134.702C227.262 143.538 221.012 157.332 218.426 170.479C210.667 172.85 202.908 175.22 195.796 177.376C200.322 156.901 217.779 125.649 237.823 125.003ZM212.607 243.542C213.469 257.335 249.892 260.353 252.048 292.897C253.556 318.545 238.47 336.002 216.701 337.295C190.407 339.02 175.967 323.502 175.967 323.502L181.571 299.794C181.571 299.794 196.011 310.786 207.649 309.924C215.193 309.493 217.995 303.242 217.779 298.932C216.701 280.828 186.959 281.905 185.019 252.163C183.295 227.377 199.675 202.161 235.883 199.79C249.892 198.928 257.005 202.377 257.005 202.377L248.815 233.412C248.815 233.412 239.547 229.102 228.555 229.964C212.607 231.041 212.391 241.171 212.607 243.542ZM263.902 156.685C263.902 150.219 263.039 140.952 260.022 133.193C269.936 135.133 274.678 146.124 276.833 152.806C272.954 153.883 268.643 155.176 263.902 156.685Z" fill="white"/>
 <path d="M300.325 382.771L368 365.96C368 365.96 338.904 169.185 338.689 167.892C338.473 166.599 337.396 165.737 336.318 165.737C335.24 165.737 316.274 165.306 316.274 165.306C316.274 165.306 304.636 154.099 300.325 149.788V382.771Z" fill="white"/>
@@ -9586,6 +9847,12 @@ var shopify = {
 							orderId : String( orderId ),
 							rate,
 							shopId : connection.source.id,
+							// WHICH VENDOR IS BEING CHARGED, so the sender does not have
+							// to assume. queue/usage.js named the slug itself and
+							// defaults to it for anything already queued when this
+							// shipped — an app-store vendor billing through its own meter
+							// enqueues the same job with its own slug.
+							slug : connection.slug,
 							// The App Events API returns no event id, so one is generated
 							// here — the event handle plus the order id — and sent as the
 							// event's `reference`. queue/usage.js stamps the same id onto
@@ -11185,7 +11452,7 @@ var shopify = {
 		// Drawbridge posts to a merchant's own endpoint, never through a vendor.
 		webhook : false
 	},
-	icon,
+	icon: icon$1,
 	// A pre-launch integration: it only surfaces once the App Store listing
 	// exists and the app is fully configured. Requiring all four means it can
 	// never render half-configured — and absence of any one excludes the
@@ -11300,6 +11567,13 @@ var shopify = {
 					key : 'Shopify Order Tracking',
 					queue : 'connection',
 					system : true,
+					// THE TRIGGER THE REGISTER JOB HAND-WROTE. It is byte-identical to
+					// the one on every stored workflow, because these documents exist on
+					// prod with thousands of runs behind them and provisioning is
+					// idempotent on (connection, system, title) — a different trigger
+					// here would not be picked up by the existing rows anyway, and a
+					// different TITLE would provision a second workflow for every store.
+					trigger : { event : 'shopify.order.create', type : 'webhook' },
 					type : 'step.commerce.order.record'
 				})
 			},
@@ -11311,6 +11585,15 @@ var shopify = {
 					key : 'Shopify Product Sync',
 					queue : 'connection',
 					system : true,
+					// `shopify.product.update`, NOT `product.insert`. The plan named the
+					// latter, and it is the right long-term answer — a Drawbridge product
+					// row appearing should pull the vendor's copy, rather than
+					// stream/product.js branching on the slug and enqueueing a
+					// vendor-named queue. But a workflow carries ONE trigger, this one is
+					// stored on prod against the webhook, and changing a live workflow's
+					// trigger is a data migration. So the declaration matches what exists
+					// and `product.insert` stays a separate, migration-gated change.
+					trigger : { event : 'shopify.product.update', type : 'webhook' },
 					type : 'step.commerce.product.sync'
 				})
 			}
@@ -11336,26 +11619,37 @@ var shopify = {
 				})
 			},
 
-			// Audit-only. The "Shopify Token Activity" system workflow lists these
-			// for descriptive grouping, but its audit step docs are written manually
-			// at OAuth time — the workflow is never dispatched. Routing is declared
-			// defensively so that if it ever IS dispatched, the job lands on a real
-			// queue and the handler lookup misses cleanly instead of throwing
-			// "Unknown step type".
+			// THE ONE WORKFLOW THAT CARRIES TWO STEPS, and the shape the plan called
+			// the single genuinely new thing in it.
+			//
+			// Every other system step is its own workflow, titled by its own `key`.
+			// These two are "Shopify Token Activity", one row in the merchant's list
+			// with both steps in it — so they declare `workflow`, which names the
+			// title, the trigger and the ORDER, and the provisioner groups on it.
+			// Without that key the pair could only be provisioned by the hand-written
+			// spec in drawbridge-sync's register job, which is exactly why that spec
+			// outlived every other one.
+			//
+			// AUDIT-ONLY. The step documents are written manually at OAuth time and
+			// the workflow is never dispatched; `queue` is declared defensively so
+			// that if it ever IS, the job lands on a real queue and the handler lookup
+			// misses cleanly rather than throwing "Unknown step type".
 			token : {
 				exchange : () => ({
 					description : 'Records the token exchange that completed an install. Audit only — never dispatched.',
 					key : 'Shopify Token Exchange',
 					queue : 'connection',
 					system : true,
-					type : 'step.connection.token.exchange'
+					type : 'step.connection.token.exchange',
+					workflow : { key : 'Shopify Token Activity', order : 0, trigger : { event : 'shopify.token', type : 'event' } }
 				}),
 				refresh : () => ({
 					description : 'Records a token rotation. Audit only — never dispatched.',
 					key : 'Shopify Token Refresh',
 					queue : 'connection',
 					system : true,
-					type : 'step.connection.token.refresh'
+					type : 'step.connection.token.refresh',
+					workflow : { key : 'Shopify Token Activity', order : 1, trigger : { event : 'shopify.token', type : 'event' } }
 				})
 			}
 
@@ -11693,7 +11987,7 @@ var webhook = {
 	// Borrowed: this is the Drawbridge mark, because Webhooks has none of its own.
 	// It is the one card that reads wrong — our logo among vendor logos — and it
 	// wants a mark of its own when there is one.
-	icon: icon$6,
+	icon: icon$7,
 	// EXPLICIT, not derived, because the name is not a vendor's. There is no third
 	// party behind a webhook — connecting MINTS a secret — so this is one of
 	// Drawbridge's own keys, listed in PLATFORM_CREDENTIALS. Without it the signing
@@ -11742,7 +12036,7 @@ var webhook = {
 	// The connect prompt only where connecting is not already the card's whole
 	// story: a disconnected or errored document renders a Connect action itself,
 	// and a task repeating it talks over the button.
-	tasks : ( { settings, status } = {} ) => ( [ 'disconnected', 'error' ].includes( status )
+	tasks : ( { settings, status } = {} ) => ( status === 'error'
 		? []
 		: settings?.secret
 		? [
@@ -11831,7 +12125,7 @@ var attentiveVendor = {
 
 	// The same mark the connection carries. One vendor, one icon — mergeVendors
 	// used to throw when two manifests disagreed about this.
-	icon: icon$7,
+	icon: icon$8,
 
 	name : 'Attentive',
 
@@ -11850,6 +12144,112 @@ var attentiveVendor = {
 
 };
 
+// Bright Data's mark, drawn by hand rather than exported from a brand kit —
+// there was no export to hand. The eight-spoke burst on their blue is the
+// recognisable part; replace with the kit's own mark when one is available.
+//
+// A .js wrapper around otherwise untouched SVG so `node --test` can run against
+// lib/ directly. A bare .svg import would need a bundler loader and force the
+// tests onto dist/, which is a worse trade than one line of wrapper.
+var icon = `<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+<rect width="500" height="500" fill="#0F58FF"/>
+<circle cx="250" cy="250" r="52" fill="white"/>
+<rect x="234" y="70" width="32" height="96" rx="16" fill="white"/>
+<rect x="234" y="334" width="32" height="96" rx="16" fill="white"/>
+<rect x="70" y="234" width="96" height="32" rx="16" fill="white"/>
+<rect x="334" y="234" width="96" height="32" rx="16" fill="white"/>
+<rect x="117" y="140" width="32" height="96" rx="16" transform="rotate(-45 117 140)" fill="white"/>
+<rect x="304" y="327" width="32" height="96" rx="16" transform="rotate(-45 304 327)" fill="white"/>
+<rect x="360" y="117" width="32" height="96" rx="16" transform="rotate(45 360 117)" fill="white"/>
+<rect x="173" y="304" width="32" height="96" rx="16" transform="rotate(45 173 304)" fill="white"/>
+</svg>`;
+
+// DRAWBRIDGE'S OWN CREDENTIALS FOR BRIGHT DATA — the scrape path's rendering and
+// unblocking, spent on our account and never on a merchant's.
+//
+// A VENDOR WITH NO CONNECTION, and the second one after Stripe. Nobody links a
+// Bright Data account to Drawbridge; scraping is infrastructure that happens to
+// cost money, so there is no manifest, no hooks and nothing merchant-facing. It
+// is here because a vendor is the row in the `provider` collection holding our
+// keys for it — and until vendors became their own files, a vendor with no
+// connection could not hold credentials at all, because the admin screen's
+// vocabulary was derived from the connection registry.
+//
+// WHY IT MOVED OFF ENV, 2026-09-16. The unlocker key had an expiry nobody knew
+// about and Bright Data mailed a three-day warning to one person's inbox. Their
+// API offers no programmatic rotation — the docs are explicit that refreshing is
+// a human in the control panel and that "any request you will send with the old
+// key will fail to authenticate" the moment you do — so renewal is always going
+// to be a paste. The question was only where it gets pasted: three env vars
+// across two DigitalOcean app specs, each needing a redeploy, or one admin
+// screen with a 60-second memo. Darren, 2026-09-16, choosing the latter and an
+// unlimited-expiry key.
+//
+// `credential` NAMES THE ENV VAR EACH FIELD FALLS BACK TO, which is what makes
+// the move safe to ship before the row exists: old deployments keep reading env,
+// and the row takes over the moment it is filled.
+var brightdataVendor = {
+
+	fields : [
+		{
+			credential : 'BRIGHTDATA_BROWSER_URI',
+			input : 'password',
+			key : 'browserUri',
+			// A wss:// endpoint with the account's user and password in its
+			// authority, which is why it is a password field rather than a url one:
+			// the whole string is the credential.
+			label : 'Scraping Browser endpoint',
+			message : 'The wss:// Scraping Browser endpoint, carrying its own credentials. Used to render pages that need a real browser.',
+			redact : true,
+			required : true
+		},
+		{
+			credential : 'BRIGHTDATA_UNLOCKER_API_KEY',
+			input : 'password',
+			key : 'unlockerApiKey',
+			label : 'Web Unlocker API key',
+			// NO EXPIRY FIELD, and that is a decision rather than an omission. Bright
+			// Data offers an `Unlimited` expiry and recommends against it; Drawbridge
+			// takes the unlimited key deliberately, because there is no way to rotate
+			// this programmatically and a date nothing can act on is a date that only
+			// surfaces after it has already broken scraping. If a fixed expiry is ever
+			// taken instead, the field to add is a stored date and a warning ahead of
+			// it — not a rotation, which the vendor cannot support.
+			message : 'Bright Data account settings → API keys. Taken with an unlimited expiry: their API offers no way to rotate a key, so a dated one can only ever break scraping silently.',
+			redact : true,
+			required : true
+		},
+		{
+			credential : 'BRIGHTDATA_UNLOCKER_ZONE',
+			input : 'text',
+			key : 'unlockerZone',
+			label : 'Web Unlocker zone',
+			// Not secret — a zone is a label on the account, and it is shown rather
+			// than redacted so an operator can confirm which one is in use without
+			// clearing the field to read it.
+			message : 'The zone name the Unlocker requests run against.',
+			required : true
+		}
+	],
+
+	icon,
+
+	name : 'Bright Data',
+
+	slug : 'brightdata',
+
+	// WHERE THE FACTS CAME FROM, read 2026-09-16.
+	urls : {
+		api : 'https://docs.brightdata.com/api-reference/authentication',
+		dashboard : 'https://brightdata.com/cp/setting/users',
+		// Bright Data has no scope model — a key carries the account's own access —
+		// so there is nothing to link. `false` is the recorded answer rather than a
+		// missing key.
+		scopes : false
+	}
+
+};
+
 // DRAWBRIDGE'S OWN CREDENTIALS FOR HUBSPOT, and where the facts about it came
 // from. One file per vendor, because a vendor is NOT a connection: it is the row
 // in the `provider` collection holding our keys for it, and a connection names
@@ -11880,7 +12280,7 @@ var hubspotVendor = {
 
 	// The vendor's own mark rather than the connection's: drawbridge fronts three
 	// vendors and none of them is Drawbridge.
-	icon: icon$5,
+	icon: icon$6,
 
 	name : 'HubSpot',
 
@@ -11937,7 +12337,7 @@ var klaviyoVendor = {
 
 	// The same mark the connection carries. One vendor, one icon — mergeVendors
 	// used to throw when two manifests disagreed about this.
-	icon: icon$2,
+	icon: icon$3,
 
 	name : 'Klaviyo',
 
@@ -11994,7 +12394,7 @@ var mailchimpVendor = {
 
 	// The same mark the connection carries. One vendor, one icon — mergeVendors
 	// used to throw when two manifests disagreed about this.
-	icon: icon$1,
+	icon: icon$2,
 
 	name : 'Mailchimp',
 
@@ -12065,7 +12465,7 @@ var sendgridVendor = {
 
 	// The vendor's own mark rather than the connection's: drawbridge fronts three
 	// vendors and none of them is Drawbridge.
-	icon: icon$4,
+	icon: icon$5,
 
 	name : 'SendGrid',
 
@@ -12172,7 +12572,7 @@ var shopifyVendor = {
 
 	// The same mark the connection carries. One vendor, one icon — mergeVendors
 	// used to throw when two manifests disagreed about this.
-	icon,
+	icon: icon$1,
 
 	name : 'Shopify',
 
@@ -12238,7 +12638,7 @@ var twilioVendor = {
 
 	// The vendor's own mark rather than the connection's: drawbridge fronts three
 	// vendors and none of them is Drawbridge.
-	icon: icon$3,
+	icon: icon$4,
 
 	name : 'Twilio',
 
@@ -12418,7 +12818,7 @@ const checkIcon = ( owner, icon ) => {
 // its icon, declaring one of its fields two ways, or claiming the same credential.
 // None of those can happen when a vendor is declared once, so all of it is gone.
 const vendors = Object.freeze( Object.fromEntries(
-	[ attentiveVendor, hubspotVendor, klaviyoVendor, mailchimpVendor, sendgridVendor, shopifyVendor, twilioVendor ]
+	[ attentiveVendor, brightdataVendor, hubspotVendor, klaviyoVendor, mailchimpVendor, sendgridVendor, shopifyVendor, twilioVendor ]
 		.map( ( vendor ) => [ vendor.slug, vendor ] )
 ) );
 
@@ -13301,17 +13701,42 @@ const build = ( manifest ) => {
 
 		}
 
-		if( declared.trigger ){
+		// A WORKFLOW GROUPING several steps into one row. Its trigger is checked
+		// against the same table as a step's own, because a typo here is the same
+		// silent failure: the workflow saves, reads active, and matches nothing.
+		if( declared.workflow ){
+
+			if( ! declared.workflow.key ){
+
+				throw new Error( manifest.slug + ' step ' + type + ' declares a workflow with no key — the title several steps share' );
+
+			}
+
+			if( typeof declared.workflow.order !== 'number' ){
+
+				throw new Error( manifest.slug + ' step ' + type + ' declares a workflow with no order — two steps in one row need a sequence' );
+
+			}
+
+			if( declared.trigger ){
+
+				throw new Error( manifest.slug + ' step ' + type + ' declares BOTH a trigger and a workflow — the workflow carries the trigger for every step in it' );
+
+			}
+
+		}
+
+		for( const candidate of [ declared.trigger, declared.workflow?.trigger ].filter( Boolean ) ){
 
 			const known = TRIGGERS[
-				Object.keys( TRIGGERS ).find( ( key ) => TRIGGERS[ key ].event === declared.trigger.event && TRIGGERS[ key ].type === declared.trigger.type )
+				Object.keys( TRIGGERS ).find( ( key ) => TRIGGERS[ key ].event === candidate.event && TRIGGERS[ key ].type === candidate.type )
 			];
 
 			if( ! known ){
 
 				throw new Error(
-					manifest.slug + ' step ' + type + ' declares trigger { event : ' + declared.trigger.event
-					+ ', type : ' + declared.trigger.type + ' }, which nothing dispatches'
+					manifest.slug + ' step ' + type + ' declares trigger { event : ' + candidate.event
+					+ ', type : ' + candidate.type + ' }, which nothing dispatches'
 				);
 
 			}
@@ -13463,6 +13888,16 @@ const connectionSteps = ( env = {} ) => Object.entries( availableConnections( en
 
 // Which vendors implement a given hook. The uniform surface makes this total —
 // every vendor appears in exactly one of the two lists, never neither.
+// DOES THIS VENDOR IMPLEMENT THIS HOOK? The same walk `hookSupport` and
+// `build()` use, exported because callers outside this package were asking it by
+// naming a slug — drawbridge-sync dispatched the post-connect register job on
+// `slug === 'shopify'`, with a comment explaining that no other vendor has one,
+// which is this function's answer written out by hand.
+//
+// TAKES THE HOOKS, not the manifest, so a caller holding a built manifest and a
+// caller holding a fixture ask the same way.
+const implementsHook = ( hooks, name ) => implemented( hooks, name );
+
 const hookSupport = ( name ) => ({
 	no : Object.keys( connections ).filter( ( slug ) => ! implemented( connections[ slug ].hooks, name ) ),
 	yes : Object.keys( connections ).filter( ( slug ) => implemented( connections[ slug ].hooks, name ) )
@@ -13806,4 +14241,4 @@ const resolveConnection = ( item, data, env = {} ) => {
 
 };
 
-export { stepRoutes as $, ANSWER_KEYS as A, ensureSystemWorkflows as B, hookSupport as C, isStale as D, ERROR_SOURCES as E, isStatus as F, GROUPS as G, HOOKS as H, INPUTS as I, mergeSettings as J, perform as K, projectConnection as L, publicConnectionKeys as M, publicSettingsBySlug as N, OAUTH_ENDPOINTS as O, PLATFORM_CREDENTIALS as P, reconcileConnectionScopes as Q, RETIRED as R, STATUSES as S, TRIGGERS as T, redactSettings as U, resolveConnection as V, WRITE_OPERATIONS as W, runHook as X, scopesMessage as Y, stepLabels as Z, stepQueues as _, AUTH_KINDS as a, surviving as a0, systemSteps as a1, tokenSettings as a2, vendors as a3, AUTH_TYPES as b, HOOK_CONFIG as c, HOOK_EFFECTS as d, HOOK_NAMES as e, HOOK_OPTIONS as f, HOOK_PROPS as g, HOOK_SLOT_PROPS as h, OAUTH_FIELDS as i, OUTCOMES as j, STEPS as k, STEP_TYPES as l, TRIGGER_TYPES as m, accessToken as n, answerOf as o, assess as p, availableConnections as q, build as r, buildVendor as s, catalogConnections as t, channels as u, connectFields as v, connectionSettings as w, connectionSteps as x, connections as y, effectsOf as z };
+export { scopesMessage as $, ANSWER_KEYS as A, ensureSystemWorkflows as B, hookSupport as C, implementsHook as D, ERROR_SOURCES as E, isStale as F, GROUPS as G, HOOKS as H, INPUTS as I, isStatus as J, mergeSettings as K, perform as L, MARKERS as M, projectConnection as N, OAUTH_ENDPOINTS as O, PLATFORM_CREDENTIALS as P, publicConnectionKeys as Q, RETIRED as R, STATUSES as S, TRIGGERS as T, publicSettingsBySlug as U, reconcileConnectionScopes as V, WRITE_OPERATIONS as W, redactSettings as X, reference as Y, resolveConnection as Z, runHook as _, AUTH_KINDS as a, spliced as a0, stepLabels as a1, stepQueues as a2, stepRoutes as a3, surviving as a4, systemSteps as a5, systemWorkflows as a6, tokenSettings as a7, vendors as a8, AUTH_TYPES as b, HOOK_CONFIG as c, HOOK_EFFECTS as d, HOOK_NAMES as e, HOOK_OPTIONS as f, HOOK_PROPS as g, HOOK_SLOT_PROPS as h, OAUTH_FIELDS as i, OUTCOMES as j, STEPS as k, STEP_TYPES as l, TRIGGER_TYPES as m, accessToken as n, answerOf as o, assess as p, availableConnections as q, build as r, buildVendor as s, catalogConnections as t, channels as u, connectFields as v, connectionSettings as w, connectionSteps as x, connections as y, effectsOf as z };