@jskit-ai/connectors-core 0.1.36 → 0.1.37

package/README.md

@@ -58,8 +58,10 @@ Import `parseIntegrationConfiguration`, `validateIntegrationConfiguration` and
 `integrationsSchema` from `@jskit-ai/connectors-core/shared/configuration`.
 `integrationsSchema.getFieldDefinitions()` exposes the field definitions for
 form inspection. Validate with `validateIntegrationConfiguration`, which also
-checks references, credential combinations and provider scopes. Custom reference
-validators do not currently provide transport JSON Schema export hooks.
+checks references, credential combinations and provider scopes. Use
+`integrationsSchema.toJsonSchema({ mode: "replace" })` to export the structural
+contract, including credential-reference constraints, for machine callers.
+The export does not replace the provider-specific semantic validation.
 References use a binding namespace such as `env:NAME` or `vault:path`;
 literal HTTP/HTTPS URLs are rejected in reference fields.
 Pass registered provider definitions in `{ providers }` for provider validation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/connectors-core",
-  "version": "0.1.36",
+  "version": "0.1.37",
   "description": "Portable integration configuration and server-side account connection runtime.",
   "type": "module",
   "scripts": {
@@ -53,9 +53,9 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/database-runtime": "0.1.219",
-    "@jskit-ai/http-runtime": "0.1.217",
-    "@jskit-ai/kernel": "0.1.219"
+    "@jskit-ai/database-runtime": "0.1.220",
+    "@jskit-ai/http-runtime": "0.1.218",
+    "@jskit-ai/kernel": "0.1.220"
   },
   "peerDependenciesMeta": {
     "@jskit-ai/database-runtime": {

package/src/shared/configuration.js

@@ -4,7 +4,7 @@ import { validateSchemaPayload } from "@jskit-ai/kernel/shared/validators";
 const name = { type: "string", required: true, minLength: 1, maxLength: 200 };
 const secretReference = {
   ...name,
-  validator: (value) => (/^[a-z][a-z0-9-]*:[^\s]+$/u.test(value) && !/^https?:/u.test(value)) || "Use a reference such as env:VARIABLE_NAME."
+  pattern: "^(?!https?:)[a-z][a-z0-9-]*:[^\\s]+$"
 };
 const authenticationSchema = createSchema({
   method: { ...name, enum: ["oauth2", "api-key", "service-account", "none"] },

package/test/connectionService.test.js

@@ -3,11 +3,12 @@ import { firecrawlProvider } from "../../connectors-catalog/src/server/firecrawl
 import { mailgunDefinition } from "../../connectors-catalog/src/shared/tokens.js";
 import assert from "node:assert/strict";
 import test from "node:test";
+import Fastify from "fastify";
 import { createCapabilityRuntime, defineProvider } from "@jskit-ai/kernel/shared/capabilities";
 import { createActionProvider } from "@jskit-ai/kernel/server/actions";
 import { googleCalendarProvider } from "../../connector-google-calendar/src/server/provider.js";
 import { createConnectionService, createConnectorsFeature, createEnvironmentReferenceResolver } from "../src/server/index.js";
-import { parseIntegrationConfiguration, validateIntegrationConfiguration } from "../src/shared/configuration.js";
+import { integrationsSchema, parseIntegrationConfiguration, validateIntegrationConfiguration } from "../src/shared/configuration.js";
 import { clickhouseProvider } from "../../connectors-catalog/src/server/clickhouse.js";
 
 const listScope = "https://www.googleapis.com/auth/calendar.calendarlist.readonly";
@@ -466,6 +467,27 @@ test("reference fields reject pasted web URLs while preserving environment and c
   }
 });
 
+test("the exported configuration contract enforces reference constraints for every credential field", async (t) => {
+  const app = Fastify({ ajv: { plugins: [(ajv) => ajv.addKeyword("x-json-rest-schema")] } });
+  t.after(() => app.close());
+  app.post("/configuration", { schema: { body: integrationsSchema.toJsonSchema({ mode: "replace" }) } }, async () => ({ ok: true }));
+  for (const field of ["secretRef", "clientSecretRef", "callbackUrlRef"]) {
+    for (const [value, valid] of [
+      ["env:KEY", true], ["vault:applications/key", true], ["vault://applications/key", true],
+      ["raw-key", false], ["https://example.test/key", false], ["http://localhost/key", false],
+      ["env:", false], ["env:two words", false], ["ENV:KEY", false], ["env:" + "a".repeat(197), false]
+    ]) {
+      const input = field === "secretRef" ? databaseConfiguration({ method: "api-key", secretRef: value }) : configuration();
+      if (field !== "secretRef") input.registrations.google[field] = value;
+      const check = () => validateIntegrationConfiguration(input, { providers: [googleCalendarProvider, clickhouseProvider] });
+      if (valid) assert.doesNotThrow(check, `${field}: ${value}`);
+      else assert.throws(check, { code: "integration_configuration_invalid" });
+      const response = await app.inject({ method: "POST", url: "/configuration", payload: input });
+      assert.equal(response.statusCode, valid ? 200 : 400, `${field}: ${value}`);
+    }
+  }
+});
+
 test("configuration rejects missing references and unknown scopes", () => {
   const input = configuration();
   input.integrations.calendar.authentication.registrationRef = "missing";