@iveri/contracts 0.31.0 → 0.33.0

package/dist/cjs/api/conduit/connection-verification-verdict.enum.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The outcome of checking whether a connection's credentials still work.
+ *
+ * **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
+ * operator asks after replacing a client secret is "did that work", and for three of the five
+ * {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
+ * different and separately fixable reason. Collapsing those into `false` would report a correctly
+ * configured connection as broken; collapsing them into `true` would report an untested one as
+ * proven.
+ *
+ * A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
+ * and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
+ * {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
+ * remaining three are "nothing to check" or "checked as far as this auth type allows".
+ */
+export declare enum ConnectionVerificationVerdict {
+    /**
+     * A token was minted just now, so the credentials are good as of this moment.
+     *
+     * Only an OAuth grant can reach this: it is the one case where the provider itself tells us
+     * whether the secret is right, without us having to send a message somebody would receive.
+     */
+    VERIFIED = "verified",
+    /**
+     * A cached access token is still usable, so nothing was asked of the provider.
+     *
+     * This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
+     * says the credentials worked when the token was minted, not that they work now. A secret
+     * revoked at the provider five minutes ago still reports this until the token expires.
+     *
+     * It exists so that clicking verify repeatedly does not spend a refresh token each time —
+     * see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
+     * connection's credentials discards the cached token, so the first verify after a credential
+     * edit is never this.
+     */
+    VERIFIED_CACHED = "verified-cached",
+    /**
+     * The credential the manifest asks for is present, and its correctness is unknowable from
+     * here.
+     *
+     * A static secret is only ever checked by the provider when a real request carries it, so
+     * this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
+     * {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
+     * breaks after a credential edit — a cleared map, or a key renamed to something the manifest
+     * does not ask for — and this catches it.
+     */
+    CREDENTIAL_PRESENT = "credential-present",
+    /** The connector adds no credential to a request, so there is nothing to check. */
+    NOTHING_TO_VERIFY = "nothing-to-verify",
+    /**
+     * The provider refused the credentials.
+     *
+     * The one verdict that means the secret itself is wrong. Everything needed was present and
+     * the token endpoint said no.
+     */
+    INVALID_CREDENTIALS = "invalid-credentials",
+    /**
+     * The credential, or the manifest field naming it, is missing.
+     *
+     * Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
+     * was never contacted: a connection with no `clientSecret`, or a manifest with an
+     * `api-key-header` auth type and no `headerName`. The most common state immediately after a
+     * credential map is cleared.
+     */
+    MISCONFIGURED = "misconfigured",
+    /**
+     * The token endpoint could not be reached, or did not answer in time.
+     *
+     * Says nothing about the credentials. Worth its own verdict so an operator who has just
+     * replaced a secret is not told it is wrong when the provider is simply down.
+     */
+    PROVIDER_UNREACHABLE = "provider-unreachable"
+}
+//# sourceMappingURL=connection-verification-verdict.enum.d.ts.map

package/dist/cjs/api/conduit/connection-verification-verdict.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-verification-verdict.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,oBAAY,6BAA6B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IAErB;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IAEnC;;;;;;;;;OASG;IACH,kBAAkB,uBAAuB;IAEzC,mFAAmF;IACnF,iBAAiB,sBAAsB;IAEvC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAE3C;;;;;;;OAOG;IACH,aAAa,kBAAkB;IAE/B;;;;;OAKG;IACH,oBAAoB,yBAAyB;CAChD"}

package/dist/cjs/api/conduit/connection-verification-verdict.enum.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectionVerificationVerdict = void 0;
+/**
+ * The outcome of checking whether a connection's credentials still work.
+ *
+ * **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
+ * operator asks after replacing a client secret is "did that work", and for three of the five
+ * {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
+ * different and separately fixable reason. Collapsing those into `false` would report a correctly
+ * configured connection as broken; collapsing them into `true` would report an untested one as
+ * proven.
+ *
+ * A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
+ * and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
+ * {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
+ * remaining three are "nothing to check" or "checked as far as this auth type allows".
+ */
+var ConnectionVerificationVerdict;
+(function (ConnectionVerificationVerdict) {
+    /**
+     * A token was minted just now, so the credentials are good as of this moment.
+     *
+     * Only an OAuth grant can reach this: it is the one case where the provider itself tells us
+     * whether the secret is right, without us having to send a message somebody would receive.
+     */
+    ConnectionVerificationVerdict["VERIFIED"] = "verified";
+    /**
+     * A cached access token is still usable, so nothing was asked of the provider.
+     *
+     * This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
+     * says the credentials worked when the token was minted, not that they work now. A secret
+     * revoked at the provider five minutes ago still reports this until the token expires.
+     *
+     * It exists so that clicking verify repeatedly does not spend a refresh token each time —
+     * see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
+     * connection's credentials discards the cached token, so the first verify after a credential
+     * edit is never this.
+     */
+    ConnectionVerificationVerdict["VERIFIED_CACHED"] = "verified-cached";
+    /**
+     * The credential the manifest asks for is present, and its correctness is unknowable from
+     * here.
+     *
+     * A static secret is only ever checked by the provider when a real request carries it, so
+     * this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
+     * {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
+     * breaks after a credential edit — a cleared map, or a key renamed to something the manifest
+     * does not ask for — and this catches it.
+     */
+    ConnectionVerificationVerdict["CREDENTIAL_PRESENT"] = "credential-present";
+    /** The connector adds no credential to a request, so there is nothing to check. */
+    ConnectionVerificationVerdict["NOTHING_TO_VERIFY"] = "nothing-to-verify";
+    /**
+     * The provider refused the credentials.
+     *
+     * The one verdict that means the secret itself is wrong. Everything needed was present and
+     * the token endpoint said no.
+     */
+    ConnectionVerificationVerdict["INVALID_CREDENTIALS"] = "invalid-credentials";
+    /**
+     * The credential, or the manifest field naming it, is missing.
+     *
+     * Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
+     * was never contacted: a connection with no `clientSecret`, or a manifest with an
+     * `api-key-header` auth type and no `headerName`. The most common state immediately after a
+     * credential map is cleared.
+     */
+    ConnectionVerificationVerdict["MISCONFIGURED"] = "misconfigured";
+    /**
+     * The token endpoint could not be reached, or did not answer in time.
+     *
+     * Says nothing about the credentials. Worth its own verdict so an operator who has just
+     * replaced a secret is not told it is wrong when the provider is simply down.
+     */
+    ConnectionVerificationVerdict["PROVIDER_UNREACHABLE"] = "provider-unreachable";
+})(ConnectionVerificationVerdict || (exports.ConnectionVerificationVerdict = ConnectionVerificationVerdict = {}));
+//# sourceMappingURL=connection-verification-verdict.enum.js.map

package/dist/cjs/api/conduit/connection-verification-verdict.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-verification-verdict.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;GAcG;AACH,IAAY,6BA+DX;AA/DD,WAAY,6BAA6B;IACrC;;;;;OAKG;IACH,sDAAqB,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,oEAAmC,CAAA;IAEnC;;;;;;;;;OASG;IACH,0EAAyC,CAAA;IAEzC,mFAAmF;IACnF,wEAAuC,CAAA;IAEvC;;;;;OAKG;IACH,4EAA2C,CAAA;IAE3C;;;;;;;OAOG;IACH,gEAA+B,CAAA;IAE/B;;;;;OAKG;IACH,8EAA6C,CAAA;AACjD,CAAC,EA/DW,6BAA6B,6CAA7B,6BAA6B,QA+DxC"}

package/dist/cjs/api/conduit/connection.type.d.ts

@@ -1,6 +1,8 @@
 import type { IsoDateTime } from '../../type/iso-date-time.type.js';
 import type { Nullable } from '../../type/nil.type.js';
 import type { UUID } from '../../type/uuid.type.js';
+import type { ConnectionVerificationVerdict } from './connection-verification-verdict.enum.js';
+import type { ConnectorAuthType } from './connector-auth-type.enum.js';
 /**
  * One tenant's configured instance of a connector: the credentials and the account details that
  * turn a manifest into something that can actually send.
@@ -97,4 +99,34 @@ export interface UpdateConnectionBody {
     variables?: Nullable<Record<string, string>>;
     isActive?: boolean;
 }
+/**
+ * `POST /api/v1/connections/:id/verify`.
+ *
+ * Takes no body. Everything the check needs is already on the connection and its connector's
+ * manifest, and a field a caller could send would be a field that changes what is verified —
+ * which is the opposite of the point.
+ */
+export interface ConnectionVerification {
+    verdict: ConnectionVerificationVerdict;
+    /**
+     * The auth type the verdict was reached under, so a client can explain it without fetching
+     * the connector.
+     *
+     * A reader needs this to say *why* a verdict is as weak as it is — "nothing to check" and
+     * "cannot be checked without sending something real" are different sentences, and which one
+     * applies is a property of the connector rather than of the connection.
+     */
+    authType: ConnectorAuthType;
+    /**
+     * What the provider or the configuration said, when there is something to pass on.
+     *
+     * **Never a credential, in whole or in part.** It carries a token endpoint's error code, a
+     * missing credential's name, or a timeout — the same things `lastAuthError` holds, and the
+     * same rule applies: no endpoint returns a credential value in any form, not masked, not
+     * truncated, not a length.
+     */
+    detail: Nullable<string>;
+    /** When the check ran. A client showing a stale verdict should say how stale. */
+    checkedAt: IsoDateTime;
+}
 //# sourceMappingURL=connection.type.d.ts.map

package/dist/cjs/api/conduit/connection.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}
+{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,6BAA6B,CAAC;IAEvC;;;;;;;OAOG;IACH,QAAQ,EAAE,iBAAiB,CAAC;IAE5B;;;;;;;OAOG;IACH,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB,iFAAiF;IACjF,SAAS,EAAE,WAAW,CAAC;CAC1B"}

package/dist/cjs/api/conduit/index.d.ts

@@ -1,4 +1,5 @@
 export * from './capture.type.js';
+export * from './connection-verification-verdict.enum.js';
 export * from './connection.type.js';
 export * from './connector-auth-type.enum.js';
 export * from './connector.type.js';

package/dist/cjs/api/conduit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}

package/dist/cjs/api/conduit/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./capture.type.js"), exports);
+__exportStar(require("./connection-verification-verdict.enum.js"), exports);
 __exportStar(require("./connection.type.js"), exports);
 __exportStar(require("./connector-auth-type.enum.js"), exports);
 __exportStar(require("./connector.type.js"), exports);

package/dist/cjs/api/conduit/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,uDAAqC;AACrC,gEAA8C;AAC9C,sDAAoC;AACpC,4DAA0C;AAC1C,qDAAmC;AACnC,wDAAsC;AACtC,4DAA0C;AAC1C,qDAAmC;AACnC,qDAAmC;AACnC,2DAAyC;AACzC,2DAAyC;AACzC,qDAAmC;AACnC,mDAAiC;AACjC,kDAAgC;AAChC,gEAA8C;AAC9C,+DAA6C;AAC7C,oEAAkD;AAClD,8DAA4C;AAC5C,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,4EAA0D;AAC1D,uDAAqC;AACrC,gEAA8C;AAC9C,sDAAoC;AACpC,4DAA0C;AAC1C,qDAAmC;AACnC,wDAAsC;AACtC,4DAA0C;AAC1C,qDAAmC;AACnC,qDAAmC;AACnC,2DAAyC;AACzC,2DAAyC;AACzC,qDAAmC;AACnC,mDAAiC;AACjC,kDAAgC;AAChC,gEAA8C;AAC9C,+DAA6C;AAC7C,oEAAkD;AAClD,8DAA4C;AAC5C,sDAAoC"}

package/dist/cjs/api/mobility/mobility-dispatch.type.d.ts

@@ -1,4 +1,5 @@
 import type { IsoDateTime } from '../../type/iso-date-time.type.js';
+import type { Nullable } from '../../type/nil.type.js';
 import type { UUID } from '../../type/uuid.type.js';
 import type { MobilityDispatchStatus } from './mobility-dispatch-status.enum.js';
 import type { MobilityServiceType } from './mobility-service-type.enum.js';
@@ -13,15 +14,36 @@ export interface MobilityDispatch {
     serviceType: MobilityServiceType;
     subjectId: UUID;
     status: MobilityDispatchStatus;
-    pickupLatitude: number;
-    pickupLongitude: number;
+    /**
+     * `null` once the dispatch is past Mobility's location retention window.
+     *
+     * **Nullable because it is redacted, not because it is optional** —
+     * `CreateMobilityDispatchBody` below still requires both, and a dispatch cannot exist without
+     * them. Mobility strips them from a terminal dispatch and keeps the row, because the
+     * assignment hanging off it is a worker's evidence of a job they did.
+     *
+     * This is the half of the products' own retention promise that lives here: Taxi and Delivery
+     * expire a ride's and a job's coordinates, and **the pickup survived in this table keyed by
+     * the same `subjectId`** until this window existed. A reader that holds this value past a
+     * product's window is holding what that product has already deleted.
+     *
+     * Both move together, so a consumer that can render one can render both.
+     */
+    pickupLatitude: Nullable<number>;
+    pickupLongitude: Nullable<number>;
     expiresAt: IsoDateTime;
     /** Version of the dispatch state machine, not a worker or location version. */
     version: number;
     createdAt: IsoDateTime;
     updatedAt: IsoDateTime;
 }
-/** `POST /api/v1/dispatches`; retry safety is supplied by the `Idempotency-Key` header. */
+/**
+ * `POST /api/v1/dispatches`; retry safety is supplied by the `Idempotency-Key` header.
+ *
+ * The two coordinates are **required here and nullable on `MobilityDispatch`**, deliberately: the
+ * request and the response are the same fields with opposite nullability, and widening this one so
+ * the two could share a type would let a caller submit a dispatch with nowhere to search from.
+ */
 export interface CreateMobilityDispatchBody {
     serviceType: MobilityServiceType;
     subjectId: UUID;

package/dist/cjs/api/mobility/mobility-dispatch.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mobility-dispatch.type.d.ts","sourceRoot":"","sources":["../../../../src/api/mobility/mobility-dispatch.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,WAAW,CAAC;IACvB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,2FAA2F;AAC3F,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;CACxB"}
+{"version":3,"file":"mobility-dispatch.type.d.ts","sourceRoot":"","sources":["../../../../src/api/mobility/mobility-dispatch.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;;;;;;OAcG;IACH,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,SAAS,EAAE,WAAW,CAAC;IACvB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;CACxB"}

package/dist/esm/api/conduit/connection-verification-verdict.enum.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The outcome of checking whether a connection's credentials still work.
+ *
+ * **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
+ * operator asks after replacing a client secret is "did that work", and for three of the five
+ * {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
+ * different and separately fixable reason. Collapsing those into `false` would report a correctly
+ * configured connection as broken; collapsing them into `true` would report an untested one as
+ * proven.
+ *
+ * A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
+ * and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
+ * {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
+ * remaining three are "nothing to check" or "checked as far as this auth type allows".
+ */
+export declare enum ConnectionVerificationVerdict {
+    /**
+     * A token was minted just now, so the credentials are good as of this moment.
+     *
+     * Only an OAuth grant can reach this: it is the one case where the provider itself tells us
+     * whether the secret is right, without us having to send a message somebody would receive.
+     */
+    VERIFIED = "verified",
+    /**
+     * A cached access token is still usable, so nothing was asked of the provider.
+     *
+     * This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
+     * says the credentials worked when the token was minted, not that they work now. A secret
+     * revoked at the provider five minutes ago still reports this until the token expires.
+     *
+     * It exists so that clicking verify repeatedly does not spend a refresh token each time —
+     * see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
+     * connection's credentials discards the cached token, so the first verify after a credential
+     * edit is never this.
+     */
+    VERIFIED_CACHED = "verified-cached",
+    /**
+     * The credential the manifest asks for is present, and its correctness is unknowable from
+     * here.
+     *
+     * A static secret is only ever checked by the provider when a real request carries it, so
+     * this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
+     * {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
+     * breaks after a credential edit — a cleared map, or a key renamed to something the manifest
+     * does not ask for — and this catches it.
+     */
+    CREDENTIAL_PRESENT = "credential-present",
+    /** The connector adds no credential to a request, so there is nothing to check. */
+    NOTHING_TO_VERIFY = "nothing-to-verify",
+    /**
+     * The provider refused the credentials.
+     *
+     * The one verdict that means the secret itself is wrong. Everything needed was present and
+     * the token endpoint said no.
+     */
+    INVALID_CREDENTIALS = "invalid-credentials",
+    /**
+     * The credential, or the manifest field naming it, is missing.
+     *
+     * Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
+     * was never contacted: a connection with no `clientSecret`, or a manifest with an
+     * `api-key-header` auth type and no `headerName`. The most common state immediately after a
+     * credential map is cleared.
+     */
+    MISCONFIGURED = "misconfigured",
+    /**
+     * The token endpoint could not be reached, or did not answer in time.
+     *
+     * Says nothing about the credentials. Worth its own verdict so an operator who has just
+     * replaced a secret is not told it is wrong when the provider is simply down.
+     */
+    PROVIDER_UNREACHABLE = "provider-unreachable"
+}
+//# sourceMappingURL=connection-verification-verdict.enum.d.ts.map

package/dist/esm/api/conduit/connection-verification-verdict.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-verification-verdict.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,oBAAY,6BAA6B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IAErB;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IAEnC;;;;;;;;;OASG;IACH,kBAAkB,uBAAuB;IAEzC,mFAAmF;IACnF,iBAAiB,sBAAsB;IAEvC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAE3C;;;;;;;OAOG;IACH,aAAa,kBAAkB;IAE/B;;;;;OAKG;IACH,oBAAoB,yBAAyB;CAChD"}

package/dist/esm/api/conduit/connection-verification-verdict.enum.js

@@ -0,0 +1,75 @@
+/**
+ * The outcome of checking whether a connection's credentials still work.
+ *
+ * **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
+ * operator asks after replacing a client secret is "did that work", and for three of the five
+ * {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
+ * different and separately fixable reason. Collapsing those into `false` would report a correctly
+ * configured connection as broken; collapsing them into `true` would report an untested one as
+ * proven.
+ *
+ * A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
+ * and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
+ * {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
+ * remaining three are "nothing to check" or "checked as far as this auth type allows".
+ */
+export var ConnectionVerificationVerdict;
+(function (ConnectionVerificationVerdict) {
+    /**
+     * A token was minted just now, so the credentials are good as of this moment.
+     *
+     * Only an OAuth grant can reach this: it is the one case where the provider itself tells us
+     * whether the secret is right, without us having to send a message somebody would receive.
+     */
+    ConnectionVerificationVerdict["VERIFIED"] = "verified";
+    /**
+     * A cached access token is still usable, so nothing was asked of the provider.
+     *
+     * This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
+     * says the credentials worked when the token was minted, not that they work now. A secret
+     * revoked at the provider five minutes ago still reports this until the token expires.
+     *
+     * It exists so that clicking verify repeatedly does not spend a refresh token each time —
+     * see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
+     * connection's credentials discards the cached token, so the first verify after a credential
+     * edit is never this.
+     */
+    ConnectionVerificationVerdict["VERIFIED_CACHED"] = "verified-cached";
+    /**
+     * The credential the manifest asks for is present, and its correctness is unknowable from
+     * here.
+     *
+     * A static secret is only ever checked by the provider when a real request carries it, so
+     * this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
+     * {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
+     * breaks after a credential edit — a cleared map, or a key renamed to something the manifest
+     * does not ask for — and this catches it.
+     */
+    ConnectionVerificationVerdict["CREDENTIAL_PRESENT"] = "credential-present";
+    /** The connector adds no credential to a request, so there is nothing to check. */
+    ConnectionVerificationVerdict["NOTHING_TO_VERIFY"] = "nothing-to-verify";
+    /**
+     * The provider refused the credentials.
+     *
+     * The one verdict that means the secret itself is wrong. Everything needed was present and
+     * the token endpoint said no.
+     */
+    ConnectionVerificationVerdict["INVALID_CREDENTIALS"] = "invalid-credentials";
+    /**
+     * The credential, or the manifest field naming it, is missing.
+     *
+     * Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
+     * was never contacted: a connection with no `clientSecret`, or a manifest with an
+     * `api-key-header` auth type and no `headerName`. The most common state immediately after a
+     * credential map is cleared.
+     */
+    ConnectionVerificationVerdict["MISCONFIGURED"] = "misconfigured";
+    /**
+     * The token endpoint could not be reached, or did not answer in time.
+     *
+     * Says nothing about the credentials. Worth its own verdict so an operator who has just
+     * replaced a secret is not told it is wrong when the provider is simply down.
+     */
+    ConnectionVerificationVerdict["PROVIDER_UNREACHABLE"] = "provider-unreachable";
+})(ConnectionVerificationVerdict || (ConnectionVerificationVerdict = {}));
+//# sourceMappingURL=connection-verification-verdict.enum.js.map

package/dist/esm/api/conduit/connection-verification-verdict.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-verification-verdict.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,6BA+DX;AA/DD,WAAY,6BAA6B;IACrC;;;;;OAKG;IACH,sDAAqB,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,oEAAmC,CAAA;IAEnC;;;;;;;;;OASG;IACH,0EAAyC,CAAA;IAEzC,mFAAmF;IACnF,wEAAuC,CAAA;IAEvC;;;;;OAKG;IACH,4EAA2C,CAAA;IAE3C;;;;;;;OAOG;IACH,gEAA+B,CAAA;IAE/B;;;;;OAKG;IACH,8EAA6C,CAAA;AACjD,CAAC,EA/DW,6BAA6B,KAA7B,6BAA6B,QA+DxC"}

package/dist/esm/api/conduit/connection.type.d.ts

@@ -1,6 +1,8 @@
 import type { IsoDateTime } from '../../type/iso-date-time.type.js';
 import type { Nullable } from '../../type/nil.type.js';
 import type { UUID } from '../../type/uuid.type.js';
+import type { ConnectionVerificationVerdict } from './connection-verification-verdict.enum.js';
+import type { ConnectorAuthType } from './connector-auth-type.enum.js';
 /**
  * One tenant's configured instance of a connector: the credentials and the account details that
  * turn a manifest into something that can actually send.
@@ -97,4 +99,34 @@ export interface UpdateConnectionBody {
     variables?: Nullable<Record<string, string>>;
     isActive?: boolean;
 }
+/**
+ * `POST /api/v1/connections/:id/verify`.
+ *
+ * Takes no body. Everything the check needs is already on the connection and its connector's
+ * manifest, and a field a caller could send would be a field that changes what is verified —
+ * which is the opposite of the point.
+ */
+export interface ConnectionVerification {
+    verdict: ConnectionVerificationVerdict;
+    /**
+     * The auth type the verdict was reached under, so a client can explain it without fetching
+     * the connector.
+     *
+     * A reader needs this to say *why* a verdict is as weak as it is — "nothing to check" and
+     * "cannot be checked without sending something real" are different sentences, and which one
+     * applies is a property of the connector rather than of the connection.
+     */
+    authType: ConnectorAuthType;
+    /**
+     * What the provider or the configuration said, when there is something to pass on.
+     *
+     * **Never a credential, in whole or in part.** It carries a token endpoint's error code, a
+     * missing credential's name, or a timeout — the same things `lastAuthError` holds, and the
+     * same rule applies: no endpoint returns a credential value in any form, not masked, not
+     * truncated, not a length.
+     */
+    detail: Nullable<string>;
+    /** When the check ran. A client showing a stale verdict should say how stale. */
+    checkedAt: IsoDateTime;
+}
 //# sourceMappingURL=connection.type.d.ts.map

package/dist/esm/api/conduit/connection.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}
+{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,6BAA6B,CAAC;IAEvC;;;;;;;OAOG;IACH,QAAQ,EAAE,iBAAiB,CAAC;IAE5B;;;;;;;OAOG;IACH,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB,iFAAiF;IACjF,SAAS,EAAE,WAAW,CAAC;CAC1B"}

package/dist/esm/api/conduit/index.d.ts

@@ -1,4 +1,5 @@
 export * from './capture.type.js';
+export * from './connection-verification-verdict.enum.js';
 export * from './connection.type.js';
 export * from './connector-auth-type.enum.js';
 export * from './connector.type.js';

package/dist/esm/api/conduit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}

package/dist/esm/api/conduit/index.js

@@ -1,4 +1,5 @@
 export * from './capture.type.js';
+export * from './connection-verification-verdict.enum.js';
 export * from './connection.type.js';
 export * from './connector-auth-type.enum.js';
 export * from './connector.type.js';

package/dist/esm/api/conduit/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}

package/dist/esm/api/mobility/mobility-dispatch.type.d.ts

@@ -1,4 +1,5 @@
 import type { IsoDateTime } from '../../type/iso-date-time.type.js';
+import type { Nullable } from '../../type/nil.type.js';
 import type { UUID } from '../../type/uuid.type.js';
 import type { MobilityDispatchStatus } from './mobility-dispatch-status.enum.js';
 import type { MobilityServiceType } from './mobility-service-type.enum.js';
@@ -13,15 +14,36 @@ export interface MobilityDispatch {
     serviceType: MobilityServiceType;
     subjectId: UUID;
     status: MobilityDispatchStatus;
-    pickupLatitude: number;
-    pickupLongitude: number;
+    /**
+     * `null` once the dispatch is past Mobility's location retention window.
+     *
+     * **Nullable because it is redacted, not because it is optional** —
+     * `CreateMobilityDispatchBody` below still requires both, and a dispatch cannot exist without
+     * them. Mobility strips them from a terminal dispatch and keeps the row, because the
+     * assignment hanging off it is a worker's evidence of a job they did.
+     *
+     * This is the half of the products' own retention promise that lives here: Taxi and Delivery
+     * expire a ride's and a job's coordinates, and **the pickup survived in this table keyed by
+     * the same `subjectId`** until this window existed. A reader that holds this value past a
+     * product's window is holding what that product has already deleted.
+     *
+     * Both move together, so a consumer that can render one can render both.
+     */
+    pickupLatitude: Nullable<number>;
+    pickupLongitude: Nullable<number>;
     expiresAt: IsoDateTime;
     /** Version of the dispatch state machine, not a worker or location version. */
     version: number;
     createdAt: IsoDateTime;
     updatedAt: IsoDateTime;
 }
-/** `POST /api/v1/dispatches`; retry safety is supplied by the `Idempotency-Key` header. */
+/**
+ * `POST /api/v1/dispatches`; retry safety is supplied by the `Idempotency-Key` header.
+ *
+ * The two coordinates are **required here and nullable on `MobilityDispatch`**, deliberately: the
+ * request and the response are the same fields with opposite nullability, and widening this one so
+ * the two could share a type would let a caller submit a dispatch with nowhere to search from.
+ */
 export interface CreateMobilityDispatchBody {
     serviceType: MobilityServiceType;
     subjectId: UUID;

package/dist/esm/api/mobility/mobility-dispatch.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mobility-dispatch.type.d.ts","sourceRoot":"","sources":["../../../../src/api/mobility/mobility-dispatch.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,WAAW,CAAC;IACvB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,2FAA2F;AAC3F,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;CACxB"}
+{"version":3,"file":"mobility-dispatch.type.d.ts","sourceRoot":"","sources":["../../../../src/api/mobility/mobility-dispatch.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;;;;;;OAcG;IACH,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,SAAS,EAAE,WAAW,CAAC;IACvB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;CACxB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iveri/contracts",
-  "version": "0.31.0",
+  "version": "0.33.0",
   "description": "Wire contracts shared by every Iveri backend and frontend. Zero runtime dependencies.",
   "license": "MIT",
   "repository": {