@forumone/throughline 0.0.0 → 1.0.0-next.0

package/dist/integrations/admin/sync-client.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Client-side helpers behind the admin's Sync now button. No JSX here, so the
+ * request handling and the message formatting can be unit tested without a
+ * form, a document or a browser.
+ */
+export type SyncStatusValue = 'never-run' | 'success' | 'partial' | 'failed';
+export interface TriggerSyncBody {
+    ok?: boolean;
+    triggered?: {
+        instanceId: string;
+        instanceName: string;
+        type: string;
+    };
+    /** The instance's `lastSyncAt` *before* the run. The baseline to poll against. */
+    lastSyncAt?: string | null;
+    message?: string;
+    error?: string;
+    code?: string;
+}
+export interface TriggerSyncArgs {
+    serverURL: string;
+    apiRoute: string;
+    collectionSlug: string;
+    id: number | string;
+    reason?: string;
+}
+export type TriggerSyncResult = {
+    ok: true;
+    body: TriggerSyncBody;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * POSTs to the collection's sync endpoint using the browser's session cookie.
+ *
+ * Every refusal — not found, disabled, Inngest unreachable — comes back as a
+ * non-2xx with a message, so all of them land in `ok: false` and get shown.
+ * A button that appears to work when nothing was queued is the failure this
+ * exists to avoid.
+ */
+export declare function triggerSync(args: TriggerSyncArgs): Promise<TriggerSyncResult>;
+export interface SyncStatus {
+    lastSyncAt: string | null;
+    lastSyncStatus: SyncStatusValue | null;
+    lastError: string | null;
+}
+export interface FetchSyncStatusArgs {
+    serverURL: string;
+    apiRoute: string;
+    collectionSlug: string;
+    id: number | string;
+    signal?: AbortSignal;
+}
+/**
+ * Reads the three status fields off the instance. Returns null on any failure,
+ * because this is called on a timer and a single missed poll is not something
+ * to tell anyone about — the caller keeps waiting.
+ */
+export declare function fetchSyncStatus(args: FetchSyncStatusArgs): Promise<null | SyncStatus>;
+/**
+ * True once the instance has recorded a run that started after the trigger.
+ *
+ * Compared against the `lastSyncAt` the endpoint returned rather than against
+ * whatever the page last rendered: the sidebar can be minutes stale, and a
+ * document opened during a cron run would otherwise report that run's result
+ * as this one's.
+ */
+export declare function syncHasFinished(baseline: null | string, current: null | SyncStatus): boolean;
+export interface SyncOutcome {
+    severity: 'error' | 'success' | 'warning';
+    title: string;
+    description?: string;
+}
+/**
+ * How a finished run reads. `partial` is deliberately a warning rather than a
+ * success: some of what was asked for did not happen, and the whole reason
+ * somebody pressed this button is to find out whether their change landed.
+ */
+export declare function describeSyncOutcome(status: SyncStatus, instanceName?: string): SyncOutcome;
+/** `2026-08-29T14:03:00.000Z` as something an operator reads at a glance. */
+export declare function formatSyncTime(value: null | string): string;
+//# sourceMappingURL=sync-client.d.ts.map

package/dist/integrations/admin/sync-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-client.d.ts","sourceRoot":"","sources":["../../../src/integrations/admin/sync-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE5E,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACtE,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,EAAE,EAAE,MAAM,GAAG,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpG;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2BnF;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,cAAc,EAAE,eAAe,GAAG,IAAI,CAAA;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,EAAE,EAAE,MAAM,GAAG,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,CAkB3F;AAMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAI5F;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAA;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,WAAW,CAwB1F;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAK3D"}

package/dist/integrations/admin/sync-client.js

@@ -0,0 +1,121 @@
+/**
+ * Client-side helpers behind the admin's Sync now button. No JSX here, so the
+ * request handling and the message formatting can be unit tested without a
+ * form, a document or a browser.
+ */
+/**
+ * POSTs to the collection's sync endpoint using the browser's session cookie.
+ *
+ * Every refusal — not found, disabled, Inngest unreachable — comes back as a
+ * non-2xx with a message, so all of them land in `ok: false` and get shown.
+ * A button that appears to work when nothing was queued is the failure this
+ * exists to avoid.
+ */
+export async function triggerSync(args) {
+    const url = `${args.serverURL}${args.apiRoute}/${args.collectionSlug}/${args.id}/sync`;
+    let response;
+    try {
+        response = await fetch(url, {
+            method: 'POST',
+            credentials: 'include',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(args.reason ? { reason: args.reason } : {}),
+        });
+    }
+    catch {
+        return { ok: false, message: 'Could not reach the server to queue the sync.' };
+    }
+    let body;
+    try {
+        body = (await response.json());
+    }
+    catch {
+        return { ok: false, message: `The server returned ${response.status}.` };
+    }
+    if (!response.ok) {
+        return { ok: false, message: body.error ?? `The server returned ${response.status}.` };
+    }
+    return { ok: true, body };
+}
+/**
+ * Reads the three status fields off the instance. Returns null on any failure,
+ * because this is called on a timer and a single missed poll is not something
+ * to tell anyone about — the caller keeps waiting.
+ */
+export async function fetchSyncStatus(args) {
+    const url = `${args.serverURL}${args.apiRoute}/${args.collectionSlug}/${args.id}?depth=0`;
+    try {
+        const response = await fetch(url, {
+            credentials: 'include',
+            ...(args.signal ? { signal: args.signal } : {}),
+        });
+        if (!response.ok)
+            return null;
+        const doc = (await response.json());
+        return {
+            lastSyncAt: typeof doc['lastSyncAt'] === 'string' ? doc['lastSyncAt'] : null,
+            lastSyncStatus: isSyncStatusValue(doc['lastSyncStatus']) ? doc['lastSyncStatus'] : null,
+            lastError: typeof doc['lastError'] === 'string' ? doc['lastError'] : null,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function isSyncStatusValue(value) {
+    return value === 'never-run' || value === 'success' || value === 'partial' || value === 'failed';
+}
+/**
+ * True once the instance has recorded a run that started after the trigger.
+ *
+ * Compared against the `lastSyncAt` the endpoint returned rather than against
+ * whatever the page last rendered: the sidebar can be minutes stale, and a
+ * document opened during a cron run would otherwise report that run's result
+ * as this one's.
+ */
+export function syncHasFinished(baseline, current) {
+    if (!current)
+        return false;
+    if (current.lastSyncAt === null)
+        return false;
+    return current.lastSyncAt !== baseline;
+}
+/**
+ * How a finished run reads. `partial` is deliberately a warning rather than a
+ * success: some of what was asked for did not happen, and the whole reason
+ * somebody pressed this button is to find out whether their change landed.
+ */
+export function describeSyncOutcome(status, instanceName) {
+    const subject = instanceName ? `"${instanceName}"` : 'The integration';
+    const description = status.lastError ?? undefined;
+    switch (status.lastSyncStatus) {
+        case 'success':
+            return { severity: 'success', title: `${subject} synced.` };
+        case 'partial':
+            return {
+                severity: 'warning',
+                title: `${subject} synced, with problems.`,
+                ...(description ? { description } : {}),
+            };
+        case 'failed':
+            return {
+                severity: 'error',
+                title: `${subject} failed to sync.`,
+                ...(description ? { description } : {}),
+            };
+        default:
+            // A run finished — `lastSyncAt` moved — without leaving a status. Nothing
+            // to celebrate and nothing to blame; say what is known.
+            return { severity: 'warning', title: `${subject} ran, but reported no status.` };
+    }
+}
+/** `2026-08-29T14:03:00.000Z` as something an operator reads at a glance. */
+export function formatSyncTime(value) {
+    if (!value)
+        return 'Never';
+    const date = new Date(value);
+    if (Number.isNaN(date.getTime()))
+        return 'Unknown';
+    return date.toLocaleString();
+}
+//# sourceMappingURL=sync-client.js.map

package/dist/integrations/admin/sync-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-client.js","sourceRoot":"","sources":["../../../src/integrations/admin/sync-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,OAAO,CAAA;IAEtF,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,IAAqB,CAAA;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAA;IAC1E,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,uBAAuB,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAA;IACxF,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AAC3B,CAAC;AAgBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAyB;IAC7D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,UAAU,CAAA;IAEzF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,WAAW,EAAE,SAAS;YACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;QAC9D,OAAO;YACL,UAAU,EAAE,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5E,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;YACvF,SAAS,EAAE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;SAC1E,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAA;AAClG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB,EAAE,OAA0B;IACjF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAA;AACxC,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAkB,EAAE,YAAqB;IAC3E,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,IAAI,SAAS,CAAA;IAEjD,QAAQ,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9B,KAAK,SAAS;YACZ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,UAAU,EAAE,CAAA;QAC7D,KAAK,SAAS;YACZ,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,GAAG,OAAO,yBAAyB;gBAC1C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC,CAAA;QACH,KAAK,QAAQ;YACX,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,GAAG,OAAO,kBAAkB;gBACnC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC,CAAA;QACH;YACE,0EAA0E;YAC1E,wDAAwD;YACxD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,+BAA+B,EAAE,CAAA;IACpF,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,KAAoB;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAA;IAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IAClD,OAAO,IAAI,CAAC,cAAc,EAAE,CAAA;AAC9B,CAAC"}

package/dist/integrations/collection.d.ts

@@ -0,0 +1,26 @@
+import type { CollectionConfig, Endpoint } from 'payload';
+import { type PluginAdminOptions } from '../plugin-contract/admin.js';
+import type { IntegrationRegistry } from './registry.js';
+export interface CreateIntegrationsCollectionOptions {
+    slug?: string;
+    registry: IntegrationRegistry;
+    /** Collection endpoints to mount, e.g. the manual-sync trigger. */
+    endpoints?: Endpoint[];
+    /** Sidebar placement. Default: the `'Throughline'` group; `group: false` leaves it ungrouped. */
+    admin?: PluginAdminOptions;
+}
+/**
+ * Collection that persists per-instance integration configuration. Configuration
+ * is admin-only by design: prompt injection that gave Claude write access here
+ * would let an attacker re-target webhook URLs or rotate signing secrets.
+ *
+ * Editors can read instance status (used by the listing/status MCP tools);
+ * write operations are reserved for admins editing in the Payload UI. *Status*
+ * is the operative word: `config` carries its own admin-only field access, so
+ * an editor's read returns the row without the credentials in it.
+ *
+ * The one control on the document that is not a field is the sidebar's Sync
+ * now button, which POSTs to the `:id/sync` endpoint passed in `endpoints`.
+ */
+export declare function createIntegrationsCollection(options: CreateIntegrationsCollectionOptions): CollectionConfig;
+//# sourceMappingURL=collection.d.ts.map

package/dist/integrations/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../../src/integrations/collection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,QAAQ,EAAe,MAAM,SAAS,CAAA;AAC9E,OAAO,EAAE,KAAK,kBAAkB,EAAqB,MAAM,6BAA6B,CAAA;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AASxD,MAAM,WAAW,mCAAmC;IAClD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB,iGAAiG;IACjG,KAAK,CAAC,EAAE,kBAAkB,CAAA;CAC3B;AAsBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,gBAAgB,CAkKlB"}

package/dist/integrations/collection.js

@@ -0,0 +1,193 @@
+import { resolveAdminGroup } from '../plugin-contract/admin.js';
+import { DEFAULT_INTEGRATIONS_SLUG } from './options.js';
+/**
+ * Where Payload resolves the admin controls from. A package specifier, not a
+ * path, so the host's import map picks it up without any host-side file.
+ */
+const CLIENT_ENTRY = '@forumone/throughline/client';
+const adminOrEditor = ({ req }) => {
+    const roles = req.user?.['roles'] ?? [];
+    return roles.includes('admin') || roles.includes('editor');
+};
+const adminOnly = ({ req }) => {
+    const roles = req.user?.['roles'] ?? [];
+    return roles.includes('admin');
+};
+/**
+ * The same rule, at the field. `FieldAccess` is a different signature from
+ * `Access` — it may only answer a boolean, never a `where` query — so it cannot
+ * be the same function.
+ */
+const adminOnlyField = ({ req }) => {
+    const roles = req.user?.['roles'] ?? [];
+    return roles.includes('admin');
+};
+/**
+ * Collection that persists per-instance integration configuration. Configuration
+ * is admin-only by design: prompt injection that gave Claude write access here
+ * would let an attacker re-target webhook URLs or rotate signing secrets.
+ *
+ * Editors can read instance status (used by the listing/status MCP tools);
+ * write operations are reserved for admins editing in the Payload UI. *Status*
+ * is the operative word: `config` carries its own admin-only field access, so
+ * an editor's read returns the row without the credentials in it.
+ *
+ * The one control on the document that is not a field is the sidebar's Sync
+ * now button, which POSTs to the `:id/sync` endpoint passed in `endpoints`.
+ */
+export function createIntegrationsCollection(options) {
+    const slug = options.slug ?? DEFAULT_INTEGRATIONS_SLUG;
+    const { registry } = options;
+    return {
+        slug,
+        admin: {
+            ...resolveAdminGroup(options.admin),
+            useAsTitle: 'name',
+            defaultColumns: ['name', 'integrationType', 'enabled', 'lastSyncAt', 'lastSyncStatus'],
+            description: 'External-system connections. Edit only in the admin — Claude can trigger and observe but cannot configure.',
+        },
+        access: {
+            read: adminOrEditor,
+            create: adminOnly,
+            update: adminOnly,
+            delete: adminOnly,
+        },
+        fields: [
+            {
+                name: 'name',
+                type: 'text',
+                required: true,
+                admin: { description: 'Display name for this instance (e.g. "Mailchimp - Newsletter").' },
+            },
+            {
+                name: 'integrationType',
+                type: 'select',
+                required: true,
+                options: registry
+                    .list()
+                    .map((integration) => ({ label: integration.name, value: integration.id })),
+                admin: { description: 'The integration plugin this instance uses.' },
+            },
+            {
+                name: 'enabled',
+                type: 'checkbox',
+                defaultValue: false,
+                admin: {
+                    description: 'Disabled integrations receive no events and are hidden from Claude by default.',
+                },
+            },
+            {
+                name: 'config',
+                type: 'json',
+                /*
+                Admin-only at the field, because this is where the credentials are.
+        
+                Document read is admin *or* editor, and deliberately so — the reason an
+                editor opens this collection is to see whether last night's sync ran.
+                But a document read hands over the whole document, and `config` is one
+                JSON column holding whatever an integration needs to authenticate: a
+                HubSpot private app token, a signing secret, a webhook URL. The
+                docblock above has always said editors read instance *status*; without
+                this, that was a description of the intent rather than of the code.
+        
+                Nothing that needs the value loses it. Every reader of `config` goes
+                through the Local API — `loadInstances` here, and the host's sync and
+                form endpoints — which overrides access. The MCP tools project a fixed
+                field list that never included `config`. What changes is `GET /api/<slug>`
+                and the admin screen for a non-admin, which now show status and no
+                secrets.
+        
+                `create` and `update` as well, so the credential cannot be replaced by
+                somebody who could not read it. Redundant today, since the collection's
+                own create and update are already admin-only, and cheap insurance
+                against the day document write is widened for status edits.
+                */
+                access: {
+                    read: adminOnlyField,
+                    create: adminOnlyField,
+                    update: adminOnlyField,
+                },
+                admin: {
+                    description: 'Integration-specific settings, including credentials. Admin-only.',
+                },
+            },
+            {
+                /*
+                The only admin component this plugin ships. In the sidebar rather than
+                `beforeDocumentControls` because it belongs with the three fields it
+                moves — an operator watching for a sync to land is already reading
+                `lastSyncAt` — and because `beforeDocumentControls` also renders on the
+                create view, where there is no instance to sync.
+        
+                A `ui` field: no column, no value, nothing to save.
+                */
+                name: 'triggerSync',
+                type: 'ui',
+                label: 'Manual sync',
+                admin: {
+                    position: 'sidebar',
+                    components: {
+                        Field: {
+                            path: CLIENT_ENTRY,
+                            exportName: 'SyncButton',
+                            clientProps: { collectionSlug: slug },
+                        },
+                    },
+                },
+            },
+            {
+                name: 'lastSyncAt',
+                type: 'date',
+                admin: { readOnly: true, position: 'sidebar' },
+            },
+            {
+                name: 'lastSyncStatus',
+                type: 'select',
+                admin: { readOnly: true, position: 'sidebar' },
+                options: [
+                    { label: 'Never run', value: 'never-run' },
+                    { label: 'Success', value: 'success' },
+                    { label: 'Partial', value: 'partial' },
+                    { label: 'Failed', value: 'failed' },
+                ],
+                defaultValue: 'never-run',
+            },
+            {
+                name: 'lastError',
+                type: 'textarea',
+                admin: { readOnly: true },
+            },
+        ],
+        endpoints: options.endpoints ?? [],
+        indexes: [
+            { fields: ['integrationType', 'enabled'] },
+            { fields: ['lastSyncStatus'] },
+        ],
+        hooks: {
+            beforeChange: [
+                async ({ data, operation }) => {
+                    if (operation !== 'create' && operation !== 'update')
+                        return data;
+                    const incoming = data;
+                    const integrationType = incoming['integrationType'];
+                    if (typeof integrationType !== 'string')
+                        return data;
+                    const integration = registry.get(integrationType);
+                    if (!integration) {
+                        throw new Error(`Unknown integration type "${integrationType}". Known types: ${registry
+                            .list()
+                            .map((i) => i.id)
+                            .join(', ') || '(none registered)'}.`);
+                    }
+                    const config = (incoming['config'] ?? {});
+                    const validation = await integration.validateConfig(config);
+                    if (!validation.ok) {
+                        throw new Error(`Invalid config for ${integration.name}: ${validation.reason ?? 'no reason given'}`);
+                    }
+                    return data;
+                },
+            ],
+        },
+    };
+}
+//# sourceMappingURL=collection.js.map

package/dist/integrations/collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.js","sourceRoot":"","sources":["../../src/integrations/collection.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAExF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAExD;;;GAGG;AACH,MAAM,YAAY,GAAG,8BAA8B,CAAA;AAWnD,MAAM,aAAa,GAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IACxC,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;IACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC5D,CAAC,CAAA;AAED,MAAM,SAAS,GAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IACpC,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;IACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAgB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IAC9C,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;IACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4C;IAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAA;IACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAE5B,OAAO;QACL,IAAI;QACJ,KAAK,EAAE;YACL,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC;YACnC,UAAU,EAAE,MAAM;YAClB,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,CAAC;YACtF,WAAW,EACT,4GAA4G;SAC/G;QACD,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;SAClB;QACD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE,WAAW,EAAE,iEAAiE,EAAE;aAC1F;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,QAAQ;qBACd,IAAI,EAAE;qBACN,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7E,KAAK,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE;aACrE;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,UAAU;gBAChB,YAAY,EAAE,KAAK;gBACnB,KAAK,EAAE;oBACL,WAAW,EACT,gFAAgF;iBACnF;aACF;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ;;;;;;;;;;;;;;;;;;;;;;kBAsBE;gBACF,MAAM,EAAE;oBACN,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,cAAc;iBACvB;gBACD,KAAK,EAAE;oBACL,WAAW,EACT,mEAAmE;iBACtE;aACF;YACD;gBACE;;;;;;;;kBAQE;gBACF,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,aAAa;gBACpB,KAAK,EAAE;oBACL,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,YAAY;4BAClB,UAAU,EAAE,YAAY;4BACxB,WAAW,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;yBACtC;qBACF;iBACF;aACF;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;aAC/C;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC9C,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE;oBAC1C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;oBACtC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;oBACtC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;iBACrC;gBACD,YAAY,EAAE,WAAW;aAC1B;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;SACF;QACD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAClC,OAAO,EAAE;YACP,EAAE,MAAM,EAAE,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE;YAC1C,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE;SAC/B;QACD,KAAK,EAAE;YACL,YAAY,EAAE;gBACZ,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC5B,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAA;oBACjE,MAAM,QAAQ,GAAG,IAA+B,CAAA;oBAChD,MAAM,eAAe,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAA;oBACnD,IAAI,OAAO,eAAe,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAA;oBAEpD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;oBACjD,IAAI,CAAC,WAAW,EAAE,CAAC;wBACjB,MAAM,IAAI,KAAK,CACb,6BAA6B,eAAe,mBAAmB,QAAQ;6BACpE,IAAI,EAAE;6BACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BAChB,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,GAAG,CACxC,CAAA;oBACH,CAAC;oBAED,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;oBACpE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;oBAC3D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,IAAI,iBAAiB,EAAE,CACpF,CAAA;oBACH,CAAC;oBACD,OAAO,IAAI,CAAA;gBACb,CAAC;aACF;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/integrations/endpoints/sync.d.ts

@@ -0,0 +1,27 @@
+import type { Endpoint } from 'payload';
+import type { Inngest } from 'inngest';
+export interface CreateSyncEndpointDeps {
+    collectionSlug: string;
+    inngest?: Inngest;
+    emit?: (event: {
+        name: string;
+        data: unknown;
+    }) => Promise<void>;
+}
+/** Default recorded on the event when the caller supplies no reason of its own. */
+export declare const ADMIN_TRIGGER_REASON = "Triggered from the admin.";
+/**
+ * `POST /api/<integrations>/:id/sync` — the admin's path to the same event
+ * `trigger_sync` fires.
+ *
+ * Authenticates off the Payload session cookie, so the person clicking the
+ * button needs no API key and the event records them rather than a service
+ * principal. The rules are `requestManualSync`'s, not this file's; all that
+ * lives here is the admin check and the mapping from a refusal to a status
+ * code.
+ *
+ * Admin-only, matching the MCP tool and the collection's own write access:
+ * triggering an integration makes it POST to an external system.
+ */
+export declare function createSyncEndpoint(deps: CreateSyncEndpointDeps): Endpoint;
+//# sourceMappingURL=sync.d.ts.map

package/dist/integrations/endpoints/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/integrations/endpoints/sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAGtC,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACjE;AAED,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,8BAA8B,CAAA;AAY/D;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,QAAQ,CAsEzE"}

package/dist/integrations/endpoints/sync.js

@@ -0,0 +1,90 @@
+import { requestManualSync } from '../sync/manual-sync.js';
+/** Default recorded on the event when the caller supplies no reason of its own. */
+export const ADMIN_TRIGGER_REASON = 'Triggered from the admin.';
+/** What each refusal means over HTTP. */
+const STATUS = {
+    'not-found': 404,
+    disabled: 409,
+    // The instance is fine; the queue is not. 502 rather than 500 says the
+    // failure is downstream, which is the difference between "retry" and
+    // "something here is broken".
+    'send-failed': 502,
+};
+/**
+ * `POST /api/<integrations>/:id/sync` — the admin's path to the same event
+ * `trigger_sync` fires.
+ *
+ * Authenticates off the Payload session cookie, so the person clicking the
+ * button needs no API key and the event records them rather than a service
+ * principal. The rules are `requestManualSync`'s, not this file's; all that
+ * lives here is the admin check and the mapping from a refusal to a status
+ * code.
+ *
+ * Admin-only, matching the MCP tool and the collection's own write access:
+ * triggering an integration makes it POST to an external system.
+ */
+export function createSyncEndpoint(deps) {
+    return {
+        path: '/:id/sync',
+        method: 'post',
+        handler: async (req) => {
+            if (!req.user) {
+                return json({ error: 'You must be logged in to trigger a sync.' }, 401);
+            }
+            const roles = req.user['roles'] ?? [];
+            if (!roles.includes('admin')) {
+                return json({ error: 'Only admins can manually trigger integrations.' }, 403);
+            }
+            const id = req.routeParams?.['id'];
+            if (typeof id !== 'string' && typeof id !== 'number') {
+                return json({ error: 'Expected an integration instance id in the path.' }, 400);
+            }
+            // The button sends no body at all, so an absent or unparseable one is
+            // not an error — only a body that is present and wrong.
+            let reason = null;
+            try {
+                const raw = (await req.json?.());
+                if (raw && typeof raw === 'object' && typeof raw.reason === 'string') {
+                    reason = raw.reason.trim() || null;
+                }
+            }
+            catch {
+                reason = null;
+            }
+            const result = await requestManualSync({
+                payload: req.payload,
+                collectionSlug: deps.collectionSlug,
+                ...(deps.inngest ? { inngest: deps.inngest } : {}),
+                ...(deps.emit ? { emit: deps.emit } : {}),
+            }, {
+                instanceId: String(id),
+                triggeredBy: req.user.id ?? null,
+                reason: reason ?? `${ADMIN_TRIGGER_REASON} (${req.user['email'] ?? req.user.id})`,
+            });
+            if (!result.ok) {
+                if (result.code === 'send-failed') {
+                    req.payload.logger.error(`[integrations] could not queue a manual sync for ${String(id)}: ${result.message}`);
+                }
+                return json({ error: result.message, code: result.code }, STATUS[result.code]);
+            }
+            return json({
+                ok: true,
+                triggered: {
+                    instanceId: result.instanceId,
+                    instanceName: result.instanceName,
+                    type: result.integrationType,
+                },
+                // What the caller polls against. The sync has not run yet.
+                lastSyncAt: result.lastSyncAt,
+                message: `Queued a sync for "${result.instanceName}". The status fields update when the run finishes.`,
+            }, 202);
+        },
+    };
+}
+function json(body, status) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+//# sourceMappingURL=sync.js.map

package/dist/integrations/endpoints/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../../src/integrations/endpoints/sync.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAA0B,MAAM,wBAAwB,CAAA;AAQlF,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAA;AAE/D,yCAAyC;AACzC,MAAM,MAAM,GAAsC;IAChD,WAAW,EAAE,GAAG;IAChB,QAAQ,EAAE,GAAG;IACb,uEAAuE;IACvE,qEAAqE;IACrE,8BAA8B;IAC9B,aAAa,EAAE,GAAG;CACnB,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,GAAmB,EAAqB,EAAE;YACxD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE,GAAG,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;YAC/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAAE,GAAG,CAAC,CAAA;YACjF,CAAC;YAED,sEAAsE;YACtE,wDAAwD;YACxD,IAAI,MAAM,GAAkB,IAAI,CAAA;YAChC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAqC,CAAA;gBACpE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACrE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;gBACpC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC;gBACE,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,EACD;gBACE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBACtB,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;gBAChC,MAAM,EAAE,MAAM,IAAI,GAAG,oBAAoB,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG;aAClF,CACF,CAAA;YAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACtB,oDAAoD,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CACpF,CAAA;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YAChF,CAAC;YAED,OAAO,IAAI,CACT;gBACE,EAAE,EAAE,IAAI;gBACR,SAAS,EAAE;oBACT,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,IAAI,EAAE,MAAM,CAAC,eAAe;iBAC7B;gBACD,2DAA2D;gBAC3D,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,sBAAsB,MAAM,CAAC,YAAY,oDAAoD;aACvG,EACD,GAAG,CACJ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,MAAc;IACzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC"}

package/dist/integrations/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@forumone/throughline/integrations`: the integrations plugin and registry,
+ * the webhook integration, manual sync, their MCP tools, and the healthcheck
+ * job. Was `@forumone/throughline-integrations` in 0.x.
+ */
+export { createManifestReachableCheck, createPayloadReachableCheck, healthcheckJob, } from './jobs/healthcheck.js';
+export type { HealthcheckDefinition, HealthcheckOptions, HealthcheckResult, } from '../jobs/workflow-types.js';
+export { integrationsJobs, integrationsPlugin, getIntegrationRegistry, getIntegrationContext, } from './plugin.js';
+export { IntegrationRegistry } from './registry.js';
+export { DEFAULT_INTEGRATIONS_SLUG } from './options.js';
+export type { IntegrationsPluginOptions } from './options.js';
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './integrations/index.js';
+export type { WebhookConfig } from './integrations/index.js';
+export type { Integration, IntegrationCategory, IntegrationContext, IntegrationAuditEvent, IntegrationConfigValidation, IntegrationHealth, IntegrationInstance, IntegrationInstanceLoaded, IntegrationStatusUpdate, IntegrationSyncStatus, } from './types.js';
+export { problemReport, statusFromProblems, DEFAULT_PROBLEM_REPORT_LENGTH, } from './sync/problems.js';
+export type { ProblemReportOptions } from './sync/problems.js';
+export { requestManualSync, MANUAL_SYNC_EVENT } from './sync/manual-sync.js';
+export type { ManualSyncRefusal, RequestManualSyncArgs, RequestManualSyncDeps, RequestManualSyncResult, } from './sync/manual-sync.js';
+export { createSyncEndpoint, ADMIN_TRIGGER_REASON } from './endpoints/sync.js';
+export type { CreateSyncEndpointDeps } from './endpoints/sync.js';
+export { createListIntegrationsTool, createGetIntegrationStatusTool, createTriggerSyncTool, createTestIntegrationTool, createListIntegrationTypesTool, } from './tools/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/integrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,cAAc,GACf,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAE7D,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACpF,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAE5D,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAE9D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC9E,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,kBAAkB,CAAA"}

package/dist/integrations/index.js

@@ -0,0 +1,15 @@
+/**
+ * `@forumone/throughline/integrations`: the integrations plugin and registry,
+ * the webhook integration, manual sync, their MCP tools, and the healthcheck
+ * job. Was `@forumone/throughline-integrations` in 0.x.
+ */
+export { createManifestReachableCheck, createPayloadReachableCheck, healthcheckJob, } from './jobs/healthcheck.js';
+export { integrationsJobs, integrationsPlugin, getIntegrationRegistry, getIntegrationContext, } from './plugin.js';
+export { IntegrationRegistry } from './registry.js';
+export { DEFAULT_INTEGRATIONS_SLUG } from './options.js';
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './integrations/index.js';
+export { problemReport, statusFromProblems, DEFAULT_PROBLEM_REPORT_LENGTH, } from './sync/problems.js';
+export { requestManualSync, MANUAL_SYNC_EVENT } from './sync/manual-sync.js';
+export { createSyncEndpoint, ADMIN_TRIGGER_REASON } from './endpoints/sync.js';
+export { createListIntegrationsTool, createGetIntegrationStatusTool, createTriggerSyncTool, createTestIntegrationTool, createListIntegrationTypesTool, } from './tools/index.js';
+//# sourceMappingURL=index.js.map

package/dist/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,cAAc,GACf,MAAM,uBAAuB,CAAA;AAO9B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAGxD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAgBpF,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAQ5E,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAG9E,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,kBAAkB,CAAA"}

package/dist/integrations/integrations/index.d.ts

@@ -0,0 +1,3 @@
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './webhook/index.js';
+export type { WebhookConfig } from './webhook/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/integrations/integrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/integrations/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC/E,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/integrations/integrations/index.js

@@ -0,0 +1,2 @@
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './webhook/index.js';
+//# sourceMappingURL=index.js.map

package/dist/integrations/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/integrations/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA"}