@listen-fire/attio 0.12.0 → 0.12.1

package/README.md

@@ -0,0 +1,32 @@
+# @lf/attio
+
+Attio as a module: records, lists, files and webhooks. A connection uses one of
+two credentials, and `lf credential add` asks for the name of the one you want.
+
+## Connect with an access token
+
+The simplest way in, and the one for a service account. Create a token in Attio
+(Workspace settings, Developers, Access tokens) with read-write access to records
+and webhooks, then:
+
+```
+lf connect @lf/attio                       # answers the OAuth app questions; leave them empty if you only use tokens
+lf credential add --module attio henry_attio --credential attio_token
+#   Access token: <the token>      Base URL: <enter, unless you proxy Attio>
+```
+
+The credential `attio_token` holds `accessToken` and an optional `baseUrl`. The token
+is entered once and never refreshed.
+
+## Connect with OAuth
+
+For a user who signs in through Attio's authorize page, with your own OAuth app
+(client id and secret, the redirect URI `lf connect` prints):
+
+```
+lf connect @lf/attio
+lf credential add --module attio henry_attio --credential attio
+```
+
+Either way the movement says `connect attio using henry_attio`; Attio receives the
+same bearer header from both.

package/dist/index.d.ts

@@ -7,7 +7,7 @@ export declare const attioModule: {
     kind: "adapter";
     name: string;
     manifest: import("@listen-fire/engine-contracts").AdapterManifest;
-    credentials: {
+    credentials: ({
         name: string;
         kind: "oauth2";
         oauth2: {
@@ -24,7 +24,22 @@ export declare const attioModule: {
             secret: false;
             optional: true;
         }[];
-    }[];
+    } | {
+        name: string;
+        kind: "static";
+        fields: ({
+            name: string;
+            label: string;
+            secret?: undefined;
+            optional?: undefined;
+        } | {
+            name: string;
+            label: string;
+            secret: false;
+            optional: true;
+        })[];
+        oauth2?: undefined;
+    })[];
     inbound: {
         providerKey: string;
         scheme: "attio";

package/dist/index.js

@@ -1,7 +1,9 @@
 "use strict";
 // `@lf/attio`: Attio as a module. The host hands it the install's OAuth
 // credential (the protocol's access token, optionally a base URL), a fetch and
-// its files; the module builds one client per token, so a workspace's cached
+// its files. A connection holds one of two credentials: an OAuth sign-in
+// (`attio`) or a static access token the user created in Attio
+// (`attio_token`); both reach the client as the same bearer token; the module builds one client per token, so a workspace's cached
 // attributes are shared by every install on that token. Attio's tokens do not
 // expire. `ctx.config.baseUrlOverride` (the dev loop's fake) wins over the
 // credential's own base URL. Deliveries are signed with the secret Attio
@@ -33,7 +35,7 @@ const oauth_1 = require("./oauth");
 function attioClientFrom(ctx) {
     return async () => {
         const fields = await ctx.credential.fields();
-        const token = fields.access_token;
+        const token = fields.access_token ?? fields.accessToken;
         if (token === undefined || token === '') {
             throw new Error('Attio: the connected credential holds no access token. Connect Attio again.');
         }
@@ -57,6 +59,17 @@ exports.attioModule = (0, module_kit_1.defineModule)({
                 { name: 'apiTokenId', label: 'API token id', secret: false, optional: true },
             ],
         },
+        // An access token made in Attio (Workspace settings, Developers), entered
+        // once and never refreshed. The field names are the contract with the
+        // platform's connect page.
+        {
+            name: 'attio_token',
+            kind: 'static',
+            fields: [
+                { name: 'accessToken', label: 'Access token' },
+                { name: 'baseUrl', label: 'Base URL', secret: false, optional: true },
+            ],
+        },
     ],
     // Today's provider key and header chain, so every registered webhook URL and
     // every valid signature keeps working.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@listen-fire/attio",
   "license": "Apache-2.0",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "description": "Attio (objects, records, lists, notes, tasks, comments, files) as a module: read, written, and signed webhooks. Loaded in process by the platform, served by serve-module everywhere else.",
   "engines": {
     "node": ">=22.23.4 <23"
@@ -13,10 +13,10 @@
     "exponential-backoff": "3.1.1",
     "lru-cache": "10.4.3",
     "zod": "4.1.12",
-    "@listen-fire/engine": "^0.12.0",
-    "@listen-fire/engine-contracts": "^0.12.0",
-    "@listen-fire/module-kit": "^0.12.0",
-    "@listen-fire/movement-lang": "^0.12.0"
+    "@listen-fire/engine-contracts": "^0.12.1",
+    "@listen-fire/engine": "^0.12.1",
+    "@listen-fire/module-kit": "^0.12.1",
+    "@listen-fire/movement-lang": "^0.12.1"
   },
   "devDependencies": {
     "@types/jest": "29.5.14",