@jskit-ai/connectors-catalog 0.2.11 → 0.2.13

package/src/shared/ai.js

@@ -1,73 +1,22 @@
-import { createSchema } from "json-rest-schema";
+import framework from "./ai-framework-models.json" with { type: "json" };
+import { aiAccessLabels, aiDefinition, byAccessThenKey, catalogueProvider, configurableProviders } from "./ai-definition.js";
 import snapshot from "./ai-models.json" with { type: "json" };
 
-// Message keys; render them with the app's text helper (useJskitText().text).
-const aiAccessLabels = Object.freeze({
-  "free-no-setup": "jskit.connectors.ai.access.freeNoSetup",
-  "free-with-connection": "jskit.connectors.ai.access.freeWithConnection",
-  paid: "jskit.connectors.ai.access.paid",
-  unknown: "jskit.connectors.ai.access.unknown"
-});
-const selectedModelHints = Object.freeze({
-  "free-no-setup": "jskit.connectors.ai.fields.model.selectedHint.freeNoSetup",
-  "free-with-connection": "jskit.connectors.ai.fields.model.selectedHint.freeWithConnection",
-  paid: "jskit.connectors.ai.fields.model.selectedHint.paid",
-  unknown: "jskit.connectors.ai.fields.model.selectedHint.unknown"
-});
-// These direct API-key routes need no coding subscription or cloud identity
-// exchange. Other upstream entries remain available as framework metadata.
-const directProviders = new Set(["opencode", "zai", "openai", "anthropic", "deepseek", "google", "openrouter",
-  "groq", "mistral", "xai", "cerebras", "togetherai", "perplexity"]);
-const aiCatalogue = Object.freeze({ ...snapshot, providers: Object.freeze(snapshot.providers.map((provider) => Object.freeze({
-  ...provider, connection: directProviders.has(provider.id) ? "api-key" : "framework",
-  models: Object.freeze(provider.models.map((model) => Object.freeze({ ...model, key: `${provider.id}/${model.id}`, providerId: provider.id })))
-}))) });
-const catalogueDateFormat = Object.freeze({ day: "numeric", month: "long", year: "numeric", timeZone: "UTC" });
+// The whole model catalogue: the configurable providers and the framework-metadata ones (other upstream entries,
+// not configurable), in provider id order.
+const aiCatalogue = Object.freeze({ ...snapshot, providers: Object.freeze([...configurableProviders,
+  ...framework.providers.map((provider) => catalogueProvider(provider, "framework"))]
+  .sort((a, b) => (a.id < b.id ? -1 : 1))) });
 const models = new Map(aiCatalogue.providers.flatMap((provider) => provider.models.map((model) => [model.key, model])));
 
 function getAiModel(key) { return models.get(key); }
 
 function listAiModels({ providerId, access, includeDeprecated = false, configurableOnly = false } = {}) {
-  const order = ["free-no-setup", "free-with-connection", "paid", "unknown"];
   return aiCatalogue.providers.filter((provider) => (!providerId || provider.id === providerId) &&
     (!configurableOnly || provider.connection === "api-key"))
     .flatMap((provider) => provider.models).filter((model) =>
       (includeDeprecated || model.status !== "deprecated") && (!access || model.access === access))
-    .sort((a, b) => order.indexOf(a.access) - order.indexOf(b.access) || a.key.localeCompare(b.key));
+    .sort(byAccessThenKey);
 }
 
-const modelItems = Object.freeze(listAiModels({ configurableOnly: true }).map((model) => Object.freeze({
-  value: model.key, title: `${model.name} (${model.providerId})`, props: { subtitle: aiAccessLabels[model.access] }
-})));
-const aiDefinition = Object.freeze({
-  id: "ai", name: "AI", description: "jskit.connectors.ai.description",
-  accountModes: ["shared", "per-user"], authenticationMethods: ["api-key", "none"], scopes: [],
-  authenticationMethodsForSettings: (settings = {}) => getAiModel(settings.model)?.access === "free-no-setup"
-    ? ["none", "api-key"] : ["api-key"],
-  authenticationLabels: { none: "jskit.connectors.ai.authenticationLabels.none", "api-key": "jskit.connectors.ai.authenticationLabels.apiKey" },
-  authenticationHint: "jskit.connectors.ai.authenticationHint",
-  settingsSchema: createSchema({ model: { type: "string", required: true,
-    enum: modelItems.map((item) => item.value) } }),
-  settingsFields: [{ name: "model", label: "jskit.connectors.ai.fields.model.label", searchable: true, items: modelItems,
-    credentialScope: (key) => getAiModel(key)?.providerId,
-    // The catalogue date is display text: formatDate (useJskitText's) uses the app's active
-    // locale; without an app language it keeps its fixed English form.
-    hint: (settings = {}, { formatDate } = {}) => {
-      const model = getAiModel(settings.model);
-      const date = formatDate ? formatDate(snapshot.extractedAt, catalogueDateFormat)
-        : new Date(snapshot.extractedAt).toLocaleDateString("en-GB", catalogueDateFormat);
-      return model ? { key: selectedModelHints[model.access], params: { model: model.name, date } }
-        : { key: "jskit.connectors.ai.fields.model.hint", params: { date } };
-    } }],
-  apiKeyReferenceHint: "jskit.connectors.ai.apiKeyReferenceHint",
-  setup: {
-    url: "https://opencode.ai/docs/zen/",
-    steps: [
-      "Choose a provider and model; no model is preselected. Create a regular API key in that provider's dashboard. Z.AI's GLM-4.7-Flash uses a regular Z.AI key; its Coding Plan is a different product.",
-      "For a shared account, store the administrator's key in Env. For individual accounts, your application must provide private key entry, storage and disconnect controls for each authenticated user.",
-      "Saving selects configuration; it does not verify a provider account or install an AI library into your application. Follow the AI connection guide for the selected framework."
-    ]
-  }
-});
-
 export { aiCatalogue, aiAccessLabels, aiDefinition, getAiModel, listAiModels };

package/src/shared/definitions.js

@@ -1,5 +1,5 @@
-import { aiDefinition } from "./ai.js";
-export { aiDefinition } from "./ai.js";
+import { aiDefinition } from "./ai-definition.js";
+export { aiDefinition } from "./ai-definition.js";
 import { wizDefinition } from "./wiz.js";
 export { wizDefinition } from "./wiz.js";
 import { shopifyDefinition } from "./shopify.js";

package/test/ai.test.js

@@ -25,6 +25,22 @@ test("AI retains the attributed snapshot with reviewed current identities and ex
   assert.equal(aiCatalogue.providers.find((provider) => provider.id === "amazon-bedrock").connection, "framework");
 });
 
+test("the AI definition answers every configurable model as the whole catalogue does", () => {
+  const field = aiDefinition.settingsFields[0];
+  assert.deepEqual(field.items.map((item) => item.value), listAiModels({ configurableOnly: true }).map((model) => model.key));
+  assert.deepEqual(aiDefinition.settingsSchema.getFieldDefinitions().model.enum, field.items.map((item) => item.value));
+  const configurable = listAiModels({ configurableOnly: true, includeDeprecated: true });
+  assert.equal(new Set(configurable.map((model) => model.providerId)).size, 13);
+  for (const model of configurable) {
+    assert.equal(field.credentialScope(model.key), model.providerId);
+    assert.deepEqual(aiDefinition.authenticationMethodsForSettings({ model: model.key }),
+      model.access === "free-no-setup" ? ["none", "api-key"] : ["api-key"]);
+    assert.equal(field.hint({ model: model.key }).params.model, model.name);
+  }
+  assert.deepEqual(aiCatalogue.providers.map((provider) => provider.id),
+    aiCatalogue.providers.map((provider) => provider.id).sort());
+});
+
 test("DeepSeek retains provider-supported saved aliases and exact current model limits", async () => {
   const current = "deepseek/deepseek-flash";
   assert.equal(getAiModel(current).name, "DeepSeek V4.1 Flash");

package/test/airtable.test.js

@@ -1,11 +1,10 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { airtableProvider } from "../src/server/airtable.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "records-app", subjectId: "workspace" };
 const baseId = "appFixture";
@@ -13,7 +12,7 @@ const tableId = "tblFixture";
 const recordId = "recFixture";
 
 test("Airtable discovers schema, changes tables/fields and completes a paged record lifecycle", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "airtable-repair-"));
+  const directory = await makeTestDirectory("airtable-repair-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   let fail = false;

package/test/algolia.test.js

@@ -1,12 +1,12 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
-import { tmpdir } from "node:os";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { algoliaProvider } from "../src/server/algolia.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "app-one", subjectId: "team-one" };
 const input = { context, integrationId: "search" };
@@ -14,7 +14,7 @@ const indices = { items: [{ name: "products", entries: 20 }], nbPages: 2 };
 const hits = { hits: [{ objectID: "product-1", name: "Phone" }], nbHits: 21, nbPages: 2, page: 0, hitsPerPage: 20 };
 
 async function fixture(t) {
-  const directory = await mkdtemp(path.join(tmpdir(), "algolia-connector-"));
+  const directory = await makeTestDirectory("algolia-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(7) }, activeKeyId: "current" });
   const requests = [];

package/test/amazon-redshift.test.js

@@ -1,13 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
-import { tmpdir } from "node:os";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration, getProviderSettingsSchema } from "../../connectors-core/src/shared/configuration.js";
 import { connectorDefinitions } from "../src/shared/definitions.js";
 import { amazonRedshiftProvider as provider } from "../src/server/amazon-redshift.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "reports", subjectId: "owner" };
 const input = { context, integrationId: "warehouse" };
@@ -16,7 +16,7 @@ const columns = [{ name: "id", typeName: "int8" }];
 const table = { name: "sales", schema: "public", type: "TABLE" };
 
 async function fixture(t, deploymentType = "serverless", databaseUser) {
-  const directory = await mkdtemp(path.join(tmpdir(), "redshift-connector-"));
+  const directory = await makeTestDirectory("redshift-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(6) }, activeKeyId: "current" });
   const requests = [], resolutions = [];

package/test/amplitude.test.js

@@ -1,12 +1,12 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { amplitudeProvider, registerAmplitudeClient } from "../src/server/amplitude.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "assistant-host", subjectId: "account-owner" };
 const input = { context, integrationId: "analytics" };
@@ -15,7 +15,7 @@ const scopes = ["mcp:read", "offline_access"];
 const discovery = { tools: [{ name: "get_amplitude_context", inputSchema: { type: "object", properties: { project_id: { type: "string" } } } }] };
 
 async function fixture(t, region = "us") {
-  const directory = await mkdtemp(path.join(tmpdir(), "amplitude-connector-"));
+  const directory = await makeTestDirectory("amplitude-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(3) }, activeKeyId: "current" });
   const origin = region === "eu" ? "https://mcp.eu.amplitude.com" : "https://mcp.amplitude.com";

package/test/apify.test.js

@@ -1,15 +1,14 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { apifyProvider } from "../src/server/apify.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "scraping-app", subjectId: "workspace" };
 test("Apify submits a bounded run, observes terminal states, aborts and retrieves paged storage results", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "apify-repair-"));
+  const directory = await makeTestDirectory("apify-repair-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   let runStatus = "RUNNING";

package/test/apollo-io.test.js

@@ -1,14 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { apolloIoProvider } from "../src/server/apollo-io.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 test("Apollo prospects, explicit enrichment and CRM changes run through the application-owned connection", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "apollo-repair-"));
+  const directory = await makeTestDirectory("apollo-repair-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   const state = { response: { accounts: [] }, status: 200, fail: false, deny: false, key: "fixture-apollo-key" };

package/test/asana.test.js

@@ -1,14 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { asanaProvider } from "../src/server/asana.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 test("Asana creates a private project, explicitly shares it, tracks tasks and preserves sparse changes", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "asana-repair-"));
+  const directory = await makeTestDirectory("asana-repair-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   const state = { status: 200, response: { data: [{ gid: "123" }] }, fail: false, deny: false, key: "asana-fixture" };

package/test/ashby.test.js

@@ -1,16 +1,15 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { ashbyProvider } from "../src/server/ashby.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const id = "11111111-1111-4111-8111-111111111111";
 const stage = "22222222-2222-4222-8222-222222222222";
 test("Ashby syncs candidates/applications, updates a profile and explicitly advances a sourced application", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "ashby-repair-"));
+  const directory = await makeTestDirectory("ashby-repair-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   const state = { status: 200, response: { success: true, results: [], moreDataAvailable: false }, fail: false, deny: false };

package/test/atlassian.test.js

@@ -1,12 +1,12 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { atlassianProvider, registerAtlassianClient } from "../src/server/atlassian.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "assistant-host", subjectId: "account-owner" };
 const input = { context, integrationId: "work" };
@@ -19,7 +19,7 @@ const scopes = ["read:me", "read:jira:agent-interface", "offline_access"];
 const discovery = { tools: [{ name: "getJiraIssue", inputSchema: { type: "object", properties: { cloudId: { type: "string" } } } }] };
 
 async function fixture(t) {
-  const directory = await mkdtemp(path.join(tmpdir(), "atlassian-connector-"));
+  const directory = await makeTestDirectory("atlassian-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(3) }, activeKeyId: "current" });
   const state = { time: Date.now(), scopes, status: 200, list: discovery, call: { content: [{ type: "text", text: "Project work" }] } };

package/test/attention.test.js

@@ -1,14 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { attentionProvider } from "../src/server/attention.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 test("Attention preserves full call content and supports explicit coaching and organization workflows", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "attention-repair-"));
+  const directory = await makeTestDirectory("attention-repair-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   const state = { status: 200, response: { data: [] }, fail: false, deny: false };

package/test/aws.test.js

@@ -1,14 +1,14 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
-import { tmpdir } from "node:os";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { awsS3Provider } from "../src/server/aws-s3.js";
 import { awsAthenaProvider } from "../src/server/aws-athena.js";
 import { transferS3Object } from "../patterns/aws-storage-queries/example/s3-transfer.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "reports", subjectId: "owner" };
 const input = { context, integrationId: "aws" };
@@ -18,7 +18,7 @@ const query = { QueryExecution: { QueryExecutionId: "query-1", WorkGroup: "prima
 const results = { ResultSet: { ResultSetMetadata: { ColumnInfo: [{ Name: "id", Type: "bigint" }] }, Rows: [{ Data: [{ VarCharValue: "id" }] }, { Data: [{}] }] }, NextToken: "opaque +/=", UpdateCount: 0 };
 
 async function fixture(t, provider = awsS3Provider) {
-  const directory = await mkdtemp(path.join(tmpdir(), "aws-connector-"));
+  const directory = await makeTestDirectory("aws-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(5) }, activeKeyId: "current" });
   const requests = [], resolutions = [];

package/test/brevo.test.js

@@ -1,14 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { brevoProvider } from "../src/server/brevo.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 test("Brevo explicitly sends messages and campaigns, manages contacts and retains DNS and delivery state", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "brevo-repair-")); t.after(() => rm(directory, { recursive: true, force: true }));
+  const directory = await makeTestDirectory("brevo-repair-"); t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = []; const state = { response: { contacts: [], count: 0 }, status: 200, deny: false, fail: false };
   const identity = { context: { applicationId: "booking-app", subjectId: "owner" }, integrationId: "messaging" };
   const service = createConnectionService({ configuration: { schemaVersion: 1, registrations: {}, integrations: {

package/test/calendly.test.js

@@ -1,14 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { calendlyProvider } from "../src/server/calendly.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 test("Calendly web OAuth uses Basic and PKCE, persists rotating refresh tokens and retains personal-token access", async (t) => {
-  const directory = await mkdtemp(path.join(tmpdir(), "calendly-test-"));
+  const directory = await makeTestDirectory("calendly-test-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const callback = "https://example.test/integrations/calendly/callback";
   const context = { applicationId: "app", subjectId: "owner" };
@@ -88,7 +87,7 @@ test("Calendly web OAuth uses Basic and PKCE, persists rotating refresh tokens a
 });
 
 test("Calendly scheduling retains booking details, scopes, pagination and explicit write outcomes", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "calendly-scheduling-")); t.after(() => rm(directory, { recursive: true, force: true }));
+  const directory = await makeTestDirectory("calendly-scheduling-"); t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = []; const state = { response: { resource: { uri: "https://api.calendly.com/users/u", name: "Owner" } }, status: 200, fail: false, deny: false };
   const identity = { context: { applicationId: "booking", subjectId: "owner" }, integrationId: "calendar" };
   const service = createConnectionService({ configuration: { schemaVersion: 1, registrations: {}, integrations: {

package/test/canva.test.js

@@ -1,7 +1,6 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
@@ -9,6 +8,7 @@ import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/
 import { canvaProvider } from "../src/server/canva.js";
 
 import { createCanvaClientMetadata } from "../src/shared/canva.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "assistant-host", subjectId: "account-owner" };
 const input = { context, integrationId: "work" };
@@ -21,7 +21,7 @@ const scopes = ["profile:read", "design:meta:read"];
 const discovery = { tools: [{ name: "get-design", inputSchema: { type: "object", properties: { design_id: { type: "string" } } } }] };
 
 async function fixture(t, selectedScopes = scopes) {
-  const directory = await mkdtemp(path.join(tmpdir(), "canva-connector-"));
+  const directory = await makeTestDirectory("canva-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(3) }, activeKeyId: "current" });
   const state = { time: Date.now(), scopes: selectedScopes, status: 200, list: discovery, call: { content: [{ type: "text", text: "Project work" }] } };

package/test/chargebee.test.js

@@ -1,19 +1,19 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
-import { tmpdir } from "node:os";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { chargebeeProvider } from "../src/server/chargebee.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "billing-app", subjectId: "finance-team" };
 const input = { context, integrationId: "billing" };
 const customers = { list: [{ customer: { id: "customer-1", object: "customer", first_name: "Alex" } }] };
 
 async function fixture(t) {
-  const directory = await mkdtemp(path.join(tmpdir(), "chargebee-connector-"));
+  const directory = await makeTestDirectory("chargebee-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(6) }, activeKeyId: "current" });
   const requests = [];

package/test/clickhouse.test.js

@@ -1,19 +1,19 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
-import { tmpdir } from "node:os";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { clickhouseProvider } from "../src/server/clickhouse.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "analytics-app", subjectId: "owner" };
 const input = { context, integrationId: "warehouse" };
 const checked = { meta: [{ name: "ok", type: "UInt8" }, { name: "user", type: "String" }], data: [{ ok: 1, user: "reader" }], rows: 1 };
 
 async function fixture(t, authentication = { method: "api-key", secretRef: "env:CLICKHOUSE_PASSWORD" }) {
-  const directory = await mkdtemp(path.join(tmpdir(), "clickhouse-connector-"));
+  const directory = await makeTestDirectory("clickhouse-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(5) }, activeKeyId: "current" });
   const requests = [];

package/test/confidence.test.js

@@ -1,12 +1,12 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
-import { tmpdir } from "node:os";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { confidenceFlagsProvider, confidenceExpProvider, registerConfidenceClient } from "../src/server/confidence.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const scopes = ["openid", "profile", "email", "offline_access"];
 const context = { applicationId: "assistant", subjectId: "owner" };
@@ -18,7 +18,7 @@ const specs = [
   { provider: confidenceExpProvider, path: "experiments", name: "get_experiment", arguments: { name: "workflows/abtest/instances/approved" } }
 ];
 async function fixture(t, spec) {
-  const directory = await mkdtemp(path.join(tmpdir(), "confidence-connector-"));
+  const directory = await makeTestDirectory("confidence-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   const state = { time: Date.now(), scopes, status: 200,

package/test/databricks.test.js

@@ -1,12 +1,12 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { getProviderScopes, parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { databricksProvider } from "../src/server/databricks.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "app-one", subjectId: "owner-one" };
 const args = { context, integrationId: "warehouse" };
@@ -14,7 +14,7 @@ const callback = "https://app.example.test/oauth/databricks/callback";
 const job = { job_id: 123, settings: { name: "Weekly inventory", tasks: [] } };
 
 async function fixture(t, grantType = "authorization_code", workspaceUrl = "https://dbc-abc123.cloud.databricks.com") {
-  const directory = await mkdtemp(path.join(tmpdir(), "databricks-connector-"));
+  const directory = await makeTestDirectory("databricks-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const machine = grantType === "client_credentials";
   const scopes = machine ? ["jobs"] : ["all-apis", "offline_access"];

package/test/dbt-semantic-layer.test.js

@@ -1,12 +1,12 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { parseIntegrationConfiguration } from "../../connectors-core/src/shared/configuration.js";
 import { dbtSemanticLayerProvider } from "../src/server/dbt-semantic-layer.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "metrics-app", subjectId: "analytics-team" };
 const input = { context, integrationId: "metrics" };
@@ -14,7 +14,7 @@ const environmentId = "9007199254740993";
 const metric = { name: "order_total", description: null, type: "SIMPLE" };
 const page = (items, values = {}) => ({ items, pageNum: 1, pageSize: 20, totalItems: items.length, totalPages: items.length ? 1 : 0, ...values });
 async function fixture(t, host = "semantic-layer.cloud.getdbt.com") {
-  const directory = await mkdtemp(path.join(tmpdir(), "dbt-connector-"));
+  const directory = await makeTestDirectory("dbt-connector-");
   t.after(() => rm(directory, { recursive: true, force: true }));
   const requests = [];
   const state = { key: "fixture-dbt-token", status: 200, response: undefined, hang: false, resolutions: 0 };

package/test/designMcp.test.js

@@ -1,7 +1,6 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
+import { readdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
@@ -10,6 +9,7 @@ import { figmaProvider, registerFigmaClient } from "../src/server/figma.js";
 import { miroProvider, registerMiroClient } from "../src/server/miro.js";
 import { sanityProvider, registerSanityClient } from "../src/server/sanity.js";
 import { sentryProvider, registerSentryClient } from "../src/server/sentry.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 const context = { applicationId: "assistant-host", subjectId: "account-owner" };
 const input = { context, integrationId: "design" };
@@ -37,7 +37,7 @@ const cases = [
 ];
 
 async function fixture(t, spec) {
-  const directory = await mkdtemp(path.join(tmpdir(), `${spec.provider.id}-connector-`));
+  const directory = await makeTestDirectory(`${spec.provider.id}-connector-`);
   t.after(() => rm(directory, { recursive: true, force: true }));
   const protection = createCredentialProtection({ keys: { current: new Uint8Array(32).fill(3) }, activeKeyId: "current" });
   const state = { time: Date.now(), scopes: spec.scopes, status: 200,

package/test/elevenlabs.test.js

@@ -1,14 +1,13 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
+import { rm } from "node:fs/promises";
 import { createConnectionService } from "../../connectors-core/src/server/index.js";
 import { createFileConnectionStore, createCredentialProtection } from "../../connectors-core/src/server/fileStorage.js";
 import { elevenlabsProvider } from "../src/server/elevenlabs.js";
+import { makeTestDirectory } from "../../../tooling/test-support/testDirectory.mjs";
 
 test("ElevenLabs returns playable audio and creates a consented voice clone with verification status", async t => {
-  const directory = await mkdtemp(path.join(tmpdir(), "elevenlabs-repair-")); t.after(() => rm(directory, { recursive: true, force: true }));
+  const directory = await makeTestDirectory("elevenlabs-repair-"); t.after(() => rm(directory, { recursive: true, force: true }));
   const context = { applicationId: "voice-app", subjectId: "workspace" }; const requests = [];
   let responseMode = "audio"; let status = 200; let deny = false; let fail = false;
   const service = createConnectionService({