@open-everywhere/core 0.1.0

package/dist/agent/access/connector-content-origin-state.js

@@ -0,0 +1,73 @@
+// Carries each connection's DECLARED content origin from the access resolve to the model-call seam, which has no ctx of its own. Keyed per CONNECTION and then per tool, so one bundle's vouch can never decide another bundle's connector. Fail-closed everywhere: an unstamped session, a context-less caller or an undeclared connector all answer `undefined`, which can never produce a `trusted` verdict config did not write.
+import { defineState } from "eve/context";
+import { contentOriginForTool } from "./bundle.js";
+const connectorContentOriginSlot = defineState("open-everywhere.connector-content-origin", () => ({}));
+/** Record the declared connector content origins for the wake in flight, stamped from the same resolve that audits the grant set so the two cannot disagree. CLEAR-FIRST: pass `{}` before anything can throw, so a failed resolve inherits no declaration. Fail-soft outside an eve context. */
+export function setConnectorContentOrigin(declared) {
+    try {
+        connectorContentOriginSlot.update(() => declared);
+    }
+    catch {
+        /* no eve context — nothing to stamp; every read below then answers `undefined` (fail-closed) */
+    }
+}
+/** The whole stamped map for the wake in flight; `{}` for every context-less caller. */
+function currentConnectorContentOrigin() {
+    try {
+        return connectorContentOriginSlot.get();
+    }
+    catch {
+        return {};
+    }
+}
+/** What THIS connection's grant declared, as written (scalar or per-tool), or `undefined`. `undefined` means the operator has not declared, never that they declared external. */
+export function declaredContentOriginForConnection(connection) {
+    return currentConnectorContentOrigin()[connection];
+}
+/** The declared content origin for a qualified connector tool name (`<connection>__<tool>`). Match the LONGEST declared connection prefix, never the first `__` — a slug may itself contain one — then consult only that connection's own `except` map; `connection_search` never matches by NAME, because its result aggregates several connections — `declaredContentOriginForConnectionSearch` reads the result instead. */
+export function declaredContentOriginForToolName(toolName) {
+    const declared = currentConnectorContentOrigin();
+    let best;
+    for (const name of Object.keys(declared)) {
+        if (!toolName.startsWith(`${name}__`))
+            continue;
+        if (best === undefined || name.length > best.length)
+            best = name;
+    }
+    if (best === undefined)
+        return undefined;
+    return contentOriginForTool(declared[best], toolName.slice(best.length + 2));
+}
+/**
+ * The declared content origin for one `connection_search` RESULT. The name cannot answer, because one result aggregates several connections, so each row answers with its OWN connection's declaration for the tool it describes, and the result is only as trusted as its least-trusted row: `internal` when every discovered-tool row resolves `internal`, `external` when a row resolves `external`, otherwise `undefined`.
+ * Fail-closed: a result this cannot decompose, a row that names no connection, a connection that declared nothing and a result with no discovered tool all answer `undefined`, which the table reads as the ruled default. An eve-authored status row (`error` / `needsAuthorization`, no tool) adds nothing, as it does not taint on its own.
+ */
+export function declaredContentOriginForConnectionSearch(output) {
+    if (!Array.isArray(output) || output.length === 0)
+        return undefined;
+    let sawTool = false;
+    let sawExternal = false;
+    for (const el of output) {
+        if (el === null || typeof el !== "object")
+            return undefined;
+        const row = el;
+        const isToolRow = "tool" in row || "qualifiedName" in row;
+        if (!isToolRow) {
+            if (typeof row.error === "string" || row.needsAuthorization === true)
+                continue;
+            return undefined;
+        }
+        if (typeof row.connection !== "string" || typeof row.tool !== "string")
+            return undefined;
+        const spec = declaredContentOriginForConnection(row.connection);
+        if (spec === undefined)
+            return undefined;
+        sawTool = true;
+        if (contentOriginForTool(spec, row.tool) === "external")
+            sawExternal = true;
+    }
+    if (!sawTool)
+        return undefined;
+    return sawExternal ? "external" : "internal";
+}
+//# sourceMappingURL=connector-content-origin-state.js.map

package/dist/agent/access/connector-content-origin-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-content-origin-state.js","sourceRoot":"","sources":["../../../agent/access/connector-content-origin-state.ts"],"names":[],"mappings":"AAAA,qaAAqa;AAEra,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAgE,MAAM,aAAa,CAAC;AAOjH,MAAM,0BAA0B,GAAG,WAAW,CAA4B,0CAA0C,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAElI,iSAAiS;AACjS,MAAM,UAAU,yBAAyB,CAAC,QAAmC;IAC3E,IAAI,CAAC;QACH,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,gGAAgG;IAClG,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAS,6BAA6B;IACpC,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,GAAG,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kLAAkL;AAClL,MAAM,UAAU,kCAAkC,CAAC,UAAkB;IACnE,OAAO,6BAA6B,EAAE,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,+ZAA+Z;AAC/Z,MAAM,UAAU,gCAAgC,CAAC,QAAgB;IAC/D,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAC;IACjD,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC;YAAE,SAAS;QAChD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;YAAE,IAAI,GAAG,IAAI,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CAAC,MAAe;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,GAAG,GAAG,EAA6B,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,GAAG,IAAI,eAAe,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,kBAAkB,KAAK,IAAI;gBAAE,SAAS;YAC/E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzF,MAAM,IAAI,GAAG,kCAAkC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU;YAAE,WAAW,GAAG,IAAI,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/C,CAAC"}

package/dist/agent/access/connector-credentials.d.ts

@@ -0,0 +1,186 @@
+import { type CredentialEndpointRules } from "./credential-endpoints.js";
+export type ConnectorCredentialType = "api-key" | "service-oauth" | "user-oauth";
+/** The universe a credential TYPE implies, ignoring the grant family. Prefer {@link principalOfCredential}; this is safe only on install-family credentials, where the two agree by construction. */
+export declare function principalOf(type: ConnectorCredentialType): "app" | "user";
+/** The acting-identity family, orthogonal to {@link ConnectorCredentialType}: "install" is the app/bot credential, the default and the only family any connector uses today; "human-acting" is a separately-minted token that acts as a specific human, with its own lifecycle. */
+export type CredentialGrantFamily = "install" | "human-acting";
+/**
+ * The three refresh postures observed across OE's connectors: "manual-rotation" (no renewal — rotate by hand at the vendor), "re-mint" (a fixed TTL with no refresh token), "refresh-token" (the OAuth refresh dance).
+ * Deliberately NOT extrapolated beyond the observed set. OE implements only `re-mint` today, on the Linear connector.
+ */
+export type CredentialRefreshPosture = "manual-rotation" | "re-mint" | "refresh-token";
+/** A credential's own expiry/refresh rhythm, declared per credential because the install and human-acting grants on one connector routinely differ. DECLARATIVE: nothing schedules off it yet. */
+export interface CredentialLifecycle {
+    readonly refresh: CredentialRefreshPosture;
+    /** Vendor-documented lifetime, seconds. OMIT when the credential does not expire, or when the
+     *  vendor's TTL is genuinely unverified — an invented number is worse than an absent one. */
+    readonly ttlSeconds?: number;
+}
+/**
+ * Whether the VENDOR can issue a human-acting credential at all. Three states, and the last two must never collapse into one: field absent = UNDECLARED (a declaration may change it), `{supported:false, reason}` = VENDOR-INCAPABLE (no configuration ever changes it), `{supported:true, credentialTypes}` = AVAILABLE.
+ * `credentialTypes` must be a subset of the catalogue's `allows`. Read it with {@link humanActingSupport}.
+ */
+export interface HumanActingSupport {
+    readonly supported: boolean;
+    readonly credentialTypes?: readonly ConnectorCredentialType[];
+    /** `supported: false` — REQUIRED: the structural vendor reason (what was tried, why it can't work). */
+    readonly reason?: string;
+}
+/** The credential's grant family. Absent ⇒ `"install"` — the fail-closed default that keeps every
+ *  existing credential behaving exactly as it did before this axis existed. */
+export declare function grantFamilyOf(cred: {
+    readonly grantFamily?: CredentialGrantFamily;
+}): CredentialGrantFamily;
+export declare function isHumanActing(cred: {
+    readonly grantFamily?: CredentialGrantFamily;
+}): boolean;
+/** The universe a credential resolves in, honouring BOTH axes. A human-acting credential is user-principal whatever its type, which is what routes it into the DM-only universe gate and closes the "a human-acting static key stamped api-key reads as app-principal" hole. */
+export declare function principalOfCredential(cred: {
+    readonly type: ConnectorCredentialType;
+    readonly grantFamily?: CredentialGrantFamily;
+}): "app" | "user";
+/** The three human-acting states as a tag — see {@link HumanActingSupport}. `"undeclared"` and
+ *  `"vendor-incapable"` are deliberately DISTINCT: only the first can ever become `"supported"`. */
+export declare function humanActingSupport(cfg: {
+    readonly humanActing?: HumanActingSupport;
+}): "undeclared" | "vendor-incapable" | "supported";
+/**
+ * A credential's HOME reference — the ONE place its secret or token lives, as a discriminated bag: `kind` selects a registered {@link ExclusiveCredentialHome} and `config` is that home's own shape, validated by the descriptor at config load.
+ * A credential has EITHER a `home` bag OR the api-key broker stamp (`secretRef` + `broker`), never both; assertConnectorCredentialsValid enforces it.
+ */
+export interface CredentialHomeRef {
+    readonly kind: string;
+    readonly config: Readonly<Record<string, unknown>>;
+}
+/** Build the connector-plane OAuth home bag from an OAuth connector id. The `vercel-connect` kind is a HISTORICAL NAME and is vendor-neutral now; it is baked into config data, so renaming it would be a data migration. */
+export declare function vercelConnectorHome(connector: string): CredentialHomeRef;
+/** The credential's connector-plane OAuth connector id, or undefined when it is not OAuth-homed. The value is a generic OAuth-provider ref the own-rolled adapter resolves, nothing Vercel-specific. */
+export declare function vercelConnectorOf(cred: {
+    readonly home?: CredentialHomeRef;
+}): string | undefined;
+/** A credential configured against a connector. The secret is ALWAYS referenced, never inlined. */
+export interface ConnectorCredential {
+    /** Operator-chosen id, unique within the connector (e.g. "readonly", "team-rw"). */
+    readonly id: string;
+    readonly type: ConnectorCredentialType;
+    /**
+     * The ACTING-IDENTITY family, orthogonal to {@link type}. Absent ⇒ "install", so every credential authored before this axis resolves byte-identically.
+     * "human-acting" is user-principal whatever its {@link type} and is never offered through the connector card; the catalogue must declare {@link ConnectorCredentials.humanActing} support before one may be configured.
+     */
+    readonly grantFamily?: CredentialGrantFamily;
+    /** This credential's OWN expiry/refresh rhythm, declared per credential because the two families on one connector routinely differ. Declarative today; nothing schedules off it. Omit it rather than invent a TTL. */
+    readonly lifecycle?: CredentialLifecycle;
+    /** Static-secret ref for `api-key` (resolved via the broker). */
+    readonly secretRef?: string;
+    /**
+     * `api-key` only: the broker that HOMES `secretRef` ("env" | "db" | any registered name). MANDATORY on every api-key credential — the read pins to that broker, so nothing can silently re-point a secret whose ref exists in only one of them.
+     * There is NO default: an unstamped api-key ref reaching resolution FAILS CLOSED. Optional in the TYPE only because OAuth credentials never ride the broker.
+     */
+    readonly broker?: string;
+    /**
+     * `api-key` only: is this credential OFFERED for chat intake via the connector card? Default TRUE; `false` marks operator-env plumbing that must never be offered nor targeted by a "Set API key" intake.
+     * The offer and the host-side click re-derivation both select via {@link offerableCredential}, which SKIPS an `intake: false` credential — so even a FORGED click can only ever resolve the intake-able one.
+     */
+    readonly intake?: boolean;
+    /**
+     * The credential’s HOME bag, MUTUALLY EXCLUSIVE with the api-key broker stamp — a credential has exactly one home.
+     * `service-oauth` / `user-oauth` REQUIRE one; an api-key uses the broker stamp by default, or may be homed at a registered vendor kind.
+     */
+    readonly home?: CredentialHomeRef;
+    /**
+     * `service-oauth` only: the Vercel dashboard page where a TEAM MEMBER establishes or renews the org grant. Connect's hosted authorization flow rejects app subjects (live-proven 2026-07-20), so for a credential homed at CONNECT this link — not startAuthorization — is how a service-level grant is completed.
+     * Not capability-bearing (the page needs Vercel team auth), but still delivered to the requester rather than broadcast.
+     * 🔴 THIS FIELD IS THE ROUTE SELECTOR (OPE-1914, connections/connector-card.ts). Declared ⇒ the org click hands over this link. Absent, on a credential with an OAuth `home` ⇒ the org click calls `startAuthorization` for `{type:"app"}` and mints a real authorization URL. Omitting it is therefore never inert.
+     */
+    readonly dashboardUrl?: string;
+    /**
+     * OPTIONAL endpoint narrowing for the CONNECTOR plane — which hosts, path prefixes and methods this credential may be attached to. Absent ⇒ unnarrowed. It must be enforced in-process, because the connector plane's request never reaches the sandbox firewall.
+     * 🔴 It defends against a WRONG-CREDENTIAL BUG, not a hostile agent: with a rule attached, a mis-threaded credential id becomes a blocked request instead of a leaked key. Hosts are never wildcardable.
+     */
+    readonly endpoints?: CredentialEndpointRules;
+}
+export interface ConnectorCredentials {
+    /** The connector this catalogue configures — the eve connection slug (agent/connections/<slug>.ts),
+     *  and the exact string a bundle grant's `name` carries. One catalogue per connector. */
+    readonly connector: string;
+    /** Credential types the connection accepts (the allowlist). e.g. an MCP server that is
+     *  OAuth-only declares `["service-oauth", "user-oauth"]`. */
+    readonly allows: readonly ConnectorCredentialType[];
+    readonly credentials: readonly ConnectorCredential[];
+    /** Whether this VENDOR can issue a human-acting credential at all. Absent is the FAIL-CLOSED default: no `grantFamily: "human-acting"` credential may be configured until a catalogue declares support. Read with {@link humanActingSupport}. */
+    readonly humanActing?: HumanActingSupport;
+    /** Optional agent-facing skill — the vendor's reference/router, and the single surface the agent talks to when a vendor spans both MCP and REST. Declarative; the logic is in the skill. */
+    readonly skill?: string;
+    readonly description?: string;
+}
+/** The per-surface result of expanding one (connector, credential) grant: what the connection's
+ *  getToken needs to authorize this surface. Keyed by connector slug in EffectiveAccess. */
+export interface ResolvedConnectorCredential {
+    readonly connector: string;
+    readonly credential: string;
+    readonly type: ConnectorCredentialType;
+    /** The ACTING-IDENTITY family the binding carries ({@link CredentialGrantFamily}). ALWAYS
+     *  present — `"install"` for every credential authored without the axis, so a consumer never has
+     *  to treat "absent" as a third state. `"human-acting"` implies `principal: "user"`. */
+    readonly grantFamily: CredentialGrantFamily;
+    readonly principal: "app" | "user";
+    readonly secretRef?: string;
+    /** The credential's HOME broker (see ConnectorCredential.broker) — carried through so the connector
+     *  plane resolves an `api-key` secret via `getSecretVia(broker, secretRef)`. Absent only for OAuth
+     *  credentials (no broker); an api-key binding always carries its mandatory stamp. No default. */
+    readonly broker?: string;
+    /** The credential HOME bag carried through to the connector plane, which resolves an OAuth mint or a registered vendor home from it. Absent for broker-stamped api-key credentials, which carry `broker` + `secretRef` instead. */
+    readonly home?: CredentialHomeRef;
+    /** The credential's ENDPOINT RULES, carried through so a host-side path holding this binding can fence its own request with `guardCredentialFetch`. Absent ⇒ the credential declares no narrowing. */
+    readonly endpoints?: CredentialEndpointRules;
+    /**
+     * This user-principal binding resolved on a NON-DM surface through the MEMBER PLANE. Present ⇒ `true`; ABSENT on every other binding, so nothing has to read a `false`.
+     * 🔴 IT IS A PROVENANCE STAMP, NOT AN ADMISSION: every per-turn control still runs at the mint site (access/member-plane.ts `memberPlaneVerdict`), and a consumer that mints on this stamp alone has skipped all of them.
+     */
+    readonly memberPlane?: true;
+}
+export declare function defineConnectorCredentials(c: ConnectorCredentials): ConnectorCredentials;
+/** An exclusive credential home descriptor — how assertConnectorCredentialsValid recognises, type-checks, and
+ *  shape-checks one `home` KIND. Its config bag is mutually exclusive with the api-key broker stamp
+ *  (assertConnectorCredentialsValid enforces that uniformly for every home, so the descriptor need not). */
+export interface ExclusiveCredentialHome {
+    readonly name: string;
+    /** Which credential TYPES may be homed here — vercel-connect admits the OAuth types only. */
+    readonly validFor: readonly ConnectorCredentialType[];
+    /** Validate the home's OWN config bag is well-formed (e.g. non-empty address parts / connector id).
+     *  Throw a clear, `where`-scoped Error on any malformed field. */
+    validateConfig(config: Readonly<Record<string, unknown>>, where: string): void;
+}
+/** Register an exclusive credential home KIND. Idempotent overwrite (last wins), mirroring registerBroker.
+ *  A vendor adapter registers its home this way — assertConnectorCredentialsValid needs no edit. */
+export declare function registerExclusiveCredentialHome(home: ExclusiveCredentialHome): void;
+/** Test seam: forget all registered exclusive homes, then restore the core (vercel-connect). */
+export declare function resetExclusiveCredentialHomes(): void;
+/** Validate the catalogue set fails loud at config load (mirrors assertSilosValid). */
+export declare function assertConnectorCredentialsValid(catalogues: readonly ConnectorCredentials[]): void;
+/**
+ * Expand ONE connector grant into a resolved binding, with the validity rules applied. Pure; warnings (no catalogue, unknown credential, allowlist or universe violation) are RETURNED, never thrown — a bad grant contributes nothing.
+ * 🔴 A GRANT WITH NO USABLE CREDENTIAL GRANTS NOTHING, not the connector minus its identity: `resolved: null` is what leaves the connector out of `access.connectors` entirely.
+ */
+export declare function expandConnectorGrant(grant: {
+    readonly name: string;
+    readonly credential: string;
+}, cfg: ConnectorCredentials | undefined, opts: {
+    readonly dm: boolean;
+    /**
+     * THE MEMBER-PLANE GRANT SET — the `<connector>/<credentialId>` keys the caller's DOMAIN declared open to a member's own credential, precomputed by the caller so this function stays pure.
+     * 🔴 It widens the universe gate for NAMED PAIRS ONLY: every other user-principal credential is refused exactly as before, and it is not an admission — the mint site still runs `memberPlaneVerdict`. The arming flag is off in the shipped settings.
+     */
+    readonly memberPlane?: ReadonlySet<string>;
+}): {
+    resolved: ResolvedConnectorCredential | null;
+    warnings: readonly string[];
+};
+/** Register the app's catalogue list for core-side runtime lookup. Called once at boot from the same wiring point that hands core its config, with the SAME array, so there is no second source of truth. Idempotent overwrite. */
+export declare function setRegisteredConnectorCredentials(catalogues: readonly ConnectorCredentials[]): void;
+/** Test seam: forget the registered catalogues (mirror credentials.ts resetBrokers). An empty
+ *  registry means findConnectorCredential returns undefined — the "unconfigured" path. */
+export declare function resetRegisteredConnectorCredentials(): void;
+/** Look up ONE credential on a registered connector. Undefined when the connector has no catalogue or carries no such credential — the caller treats that as "unconfigured", exactly like an unset secret, and never as a silent fallback to another source. */
+export declare function findConnectorCredential(connector: string, credentialId: string): ConnectorCredential | undefined;
+//# sourceMappingURL=connector-credentials.d.ts.map

package/dist/agent/access/connector-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-credentials.d.ts","sourceRoot":"","sources":["../../../agent/access/connector-credentials.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGrG,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,eAAe,GAAG,YAAY,CAAC;AAEjF,qMAAqM;AACrM,wBAAgB,WAAW,CAAC,IAAI,EAAE,uBAAuB,GAAG,KAAK,GAAG,MAAM,CAEzE;AAKD,mRAAmR;AACnR,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,cAAc,CAAC;AAE/D;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,SAAS,GAAG,eAAe,CAAC;AAEvF,kMAAkM;AAClM,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C;iGAC6F;IAC7F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC9D,uGAAuG;IACvG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;+EAC+E;AAC/E,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;CAAE,GAAG,qBAAqB,CAE3G;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;CAAE,GAAG,OAAO,CAE7F;AAED,gRAAgR;AAChR,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;CAC9C,GAAG,KAAK,GAAG,MAAM,CAEjB;AAED;oGACoG;AACpG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAC3C,GAAG,YAAY,GAAG,kBAAkB,GAAG,WAAW,CAGlD;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAKD,6NAA6N;AAC7N,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAExE;AAED,wMAAwM;AACxM,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAIjG;AAED,mGAAmG;AACnG,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,sNAAsN;IACtN,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACnC;6FACyF;IACzF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;iEAC6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACrD,iPAAiP;IACjP,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,4LAA4L;IAC5L,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;4FAC4F;AAC5F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC;;4FAEwF;IACxF,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;sGAEkG;IAClG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mOAAmO;IACnO,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC,sMAAsM;IACtM,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;CAC7B;AAED,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAExF;AAED;;4GAE4G;AAC5G,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD;sEACkE;IAClE,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAChF;AAID;oGACoG;AACpG,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAEnF;AAED,gGAAgG;AAChG,wBAAgB,6BAA6B,IAAI,IAAI,CAGpD;AAmBD,uFAAuF;AACvF,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,GAAG,IAAI,CAyHjG;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAC7D,GAAG,EAAE,oBAAoB,GAAG,SAAS,EACrC,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5C,GACA;IAAE,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAgE/E;AAID,mOAAmO;AACnO,wBAAgB,iCAAiC,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,GAAG,IAAI,CAEnG;AAED;0FAC0F;AAC1F,wBAAgB,mCAAmC,IAAI,IAAI,CAE1D;AAED,gQAAgQ;AAChQ,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAGhH"}

package/dist/agent/access/connector-credentials.js

@@ -0,0 +1,258 @@
+// One connector's credential catalogue: the identities an operator configures against it, plus the allowlist of credential types that connection accepts. See docs/capabilities/connectors-and-providers.md.
+// There is one catalogue per connector, and every grant NAMES its credential — there is no default resolution, which is what lets the lint hard-fail a grant that names an unconfigured credential.
+import { credentialEndpointProblems } from "./credential-endpoints.js";
+/** The universe a credential TYPE implies, ignoring the grant family. Prefer {@link principalOfCredential}; this is safe only on install-family credentials, where the two agree by construction. */
+export function principalOf(type) {
+    return type === "user-oauth" ? "user" : "app";
+}
+/** The credential's grant family. Absent ⇒ `"install"` — the fail-closed default that keeps every
+ *  existing credential behaving exactly as it did before this axis existed. */
+export function grantFamilyOf(cred) {
+    return cred.grantFamily ?? "install";
+}
+export function isHumanActing(cred) {
+    return grantFamilyOf(cred) === "human-acting";
+}
+/** The universe a credential resolves in, honouring BOTH axes. A human-acting credential is user-principal whatever its type, which is what routes it into the DM-only universe gate and closes the "a human-acting static key stamped api-key reads as app-principal" hole. */
+export function principalOfCredential(cred) {
+    return isHumanActing(cred) ? "user" : principalOf(cred.type);
+}
+/** The three human-acting states as a tag — see {@link HumanActingSupport}. `"undeclared"` and
+ *  `"vendor-incapable"` are deliberately DISTINCT: only the first can ever become `"supported"`. */
+export function humanActingSupport(cfg) {
+    if (!cfg.humanActing)
+        return "undeclared";
+    return cfg.humanActing.supported ? "supported" : "vendor-incapable";
+}
+/** The core home kind (also the registry key). A vendor adds its own kind by registration only. */
+const VERCEL_CONNECT_HOME_KIND = "vercel-connect";
+/** Build the connector-plane OAuth home bag from an OAuth connector id. The `vercel-connect` kind is a HISTORICAL NAME and is vendor-neutral now; it is baked into config data, so renaming it would be a data migration. */
+export function vercelConnectorHome(connector) {
+    return { kind: VERCEL_CONNECT_HOME_KIND, config: { connector } };
+}
+/** The credential's connector-plane OAuth connector id, or undefined when it is not OAuth-homed. The value is a generic OAuth-provider ref the own-rolled adapter resolves, nothing Vercel-specific. */
+export function vercelConnectorOf(cred) {
+    if (cred.home?.kind !== VERCEL_CONNECT_HOME_KIND)
+        return undefined;
+    const c = cred.home.config.connector;
+    return typeof c === "string" ? c : undefined;
+}
+export function defineConnectorCredentials(c) {
+    return c;
+}
+const EXCLUSIVE_HOMES = new Map();
+/** Register an exclusive credential home KIND. Idempotent overwrite (last wins), mirroring registerBroker.
+ *  A vendor adapter registers its home this way — assertConnectorCredentialsValid needs no edit. */
+export function registerExclusiveCredentialHome(home) {
+    EXCLUSIVE_HOMES.set(home.name, home);
+}
+/** Test seam: forget all registered exclusive homes, then restore the core (vercel-connect). */
+export function resetExclusiveCredentialHomes() {
+    EXCLUSIVE_HOMES.clear();
+    registerCoreExclusiveHomes();
+}
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function registerCoreExclusiveHomes() {
+    registerExclusiveCredentialHome({
+        name: VERCEL_CONNECT_HOME_KIND,
+        validFor: ["service-oauth", "user-oauth"],
+        validateConfig: (config, where) => {
+            if (!isRecord(config) || typeof config.connector !== "string" || !config.connector) {
+                throw new Error(`${where}: vercel-connect home needs a non-empty { connector }`);
+            }
+        },
+    });
+}
+registerCoreExclusiveHomes();
+/** Validate the catalogue set fails loud at config load (mirrors assertSilosValid). */
+export function assertConnectorCredentialsValid(catalogues) {
+    const seen = new Set();
+    for (const p of catalogues) {
+        if (!p.connector)
+            throw new Error("connector credentials: missing connector slug");
+        if (seen.has(p.connector)) {
+            throw new Error(`connector "${p.connector}": a second credential catalogue names the same connector — one catalogue per connector, so merge the credential lists`);
+        }
+        seen.add(p.connector);
+        if (!p.allows.length)
+            throw new Error(`connector "${p.connector}": empty credential allowlist`);
+        // HUMAN-ACTING capability declaration (OPE-125). Validated per CATALOGUE before its credentials,
+        // so a credential-level error can always name a well-formed declaration.
+        if (p.humanActing) {
+            const ha = p.humanActing;
+            if (ha.supported) {
+                if (!ha.credentialTypes?.length) {
+                    throw new Error(`connector "${p.connector}": humanActing.supported requires a non-empty credentialTypes — name which credential type(s) carry the human-acting grant for this vendor (it is a SEPARATE mint from the install credential, so it has its own type)`);
+                }
+                for (const t of ha.credentialTypes) {
+                    if (!p.allows.includes(t)) {
+                        throw new Error(`connector "${p.connector}": humanActing.credentialTypes lists "${t}", which is not in the connection's allowlist (${p.allows.join(", ")}) — a human-acting grant still has to be a type the connection accepts`);
+                    }
+                }
+                if (new Set(ha.credentialTypes).size !== ha.credentialTypes.length) {
+                    throw new Error(`connector "${p.connector}": humanActing.credentialTypes has duplicates`);
+                }
+            }
+            else {
+                if (!ha.reason) {
+                    throw new Error(`connector "${p.connector}": humanActing.supported:false requires a \`reason\` — record the STRUCTURAL vendor fact (e.g. "no scope combination lets an app post chat as a human"), so "the vendor cannot do this" never reads as "nobody configured it"`);
+                }
+                if (ha.credentialTypes) {
+                    throw new Error(`connector "${p.connector}": humanActing.supported:false must NOT list credentialTypes — the vendor cannot issue a human-acting credential of any type`);
+                }
+            }
+        }
+        const credIds = new Set();
+        for (const c of p.credentials) {
+            if (credIds.has(c.id))
+                throw new Error(`connector "${p.connector}": duplicate credential id "${c.id}"`);
+            credIds.add(c.id);
+            const where = `connector "${p.connector}" credential "${c.id}"`;
+            if (c.home) {
+                const h = EXCLUSIVE_HOMES.get(c.home.kind);
+                if (!h) {
+                    throw new Error(`${where}: unknown credential home kind "${c.home.kind}" — no ExclusiveCredentialHome is registered for it (register one; a new home vendor is registration-only)`);
+                }
+                if (!h.validFor.includes(c.type)) {
+                    throw new Error(`${where}: a ${c.type} credential cannot be homed at "${h.name}" (valid for: ${h.validFor.join(", ")})`);
+                }
+                h.validateConfig(c.home.config, where);
+                if (c.secretRef)
+                    throw new Error(`${where}: a ${h.name}-homed credential must NOT carry a secretRef — its secret lives at the ${h.name} home, not on a broker (one home; mutual exclusivity)`);
+                if (c.broker)
+                    throw new Error(`${where}: a ${h.name}-homed credential must NOT carry a broker — the home is the connector-plane transport, not a token-vending broker (mutual exclusivity)`);
+            }
+            else {
+                if (c.type === "api-key" && !c.secretRef)
+                    throw new Error(`${where}: api-key needs a secretRef`);
+                if (c.type === "api-key" && !c.broker) {
+                    throw new Error(`${where}: api-key needs an explicit broker stamp ("env" | "db" | ...) — a credential has exactly one home; unstamped-follows-selection is not allowed`);
+                }
+                if (c.type === "service-oauth" || c.type === "user-oauth") {
+                    throw new Error(`${where}: ${c.type} needs a home — a vercel-connect connector (vercelConnectorHome) or a registered exclusive vendor home`);
+                }
+            }
+            // `intake: false` is meaningless on an OAuth type (they have their own offer path), so it is refused there — a mis-stamped OAuth credential would otherwise silently do nothing.
+            if (c.intake === false && c.type !== "api-key") {
+                throw new Error(`${where}: intake:false is only valid on an api-key credential (it marks operator-env plumbing that is never offered for intake)`);
+            }
+            // GRANT FAMILY (OPE-125). Fail closed: a human-acting credential exists only where the vendor
+            // is DECLARED capable of one. The two refusals below are deliberately DISTINCT — "undeclared"
+            // can become "supported" with a declaration; "vendor-incapable" never can.
+            if (isHumanActing(c)) {
+                const state = humanActingSupport(p);
+                if (state === "undeclared") {
+                    throw new Error(`${where}: grantFamily "human-acting" needs connector "${p.connector}" to DECLARE \`humanActing\` support first. It is undeclared — which is not the same as unsupported: research the vendor and declare either { supported: true, credentialTypes: [...] } or { supported: false, reason: "..." }.`);
+                }
+                if (state === "vendor-incapable") {
+                    throw new Error(`${where}: connector "${p.connector}" is declared STRUCTURALLY INCAPABLE of a human-acting credential — ${p.humanActing?.reason ?? "no reason recorded"}. This is a VENDOR limitation, not a configuration gap: no credential, scope, or broker change can grant it.`);
+                }
+                if (!p.humanActing?.credentialTypes?.includes(c.type)) {
+                    throw new Error(`${where}: a ${c.type} credential cannot carry connector "${p.connector}"'s human-acting grant (declared for: ${p.humanActing?.credentialTypes?.join(", ") ?? "none"}) — "act as a user" is a distinct mint with a distinct token shape, not a mode of any credential you happen to hold`);
+                }
+            }
+            // LIFECYCLE metadata — declarative, but validated so a malformed declaration fails at load
+            // rather than misleading a future minter.
+            if (c.lifecycle) {
+                const postures = ["manual-rotation", "re-mint", "refresh-token"];
+                if (!postures.includes(c.lifecycle.refresh)) {
+                    throw new Error(`${where}: lifecycle.refresh must be one of ${postures.join(" | ")}`);
+                }
+                const ttl = c.lifecycle.ttlSeconds;
+                if (ttl !== undefined && (!Number.isFinite(ttl) || ttl <= 0)) {
+                    throw new Error(`${where}: lifecycle.ttlSeconds must be a positive number of seconds (omit it when the credential does not expire, or when the vendor TTL is unverified)`);
+                }
+            }
+            // ENDPOINT RULES (OPE-505) — the connector plane's own host/path/method narrowing. A
+            // malformed rule must fail at config load, because a rule nobody can parse is a fence nobody
+            // has: a wildcard host, an empty host list, or a bogus method would all read as "narrowed" in
+            // review while admitting more than the author meant.
+            const endpointProblems = credentialEndpointProblems(c.endpoints, where);
+            if (endpointProblems.length > 0)
+                throw new Error(endpointProblems.join("\n"));
+        }
+    }
+}
+/**
+ * Expand ONE connector grant into a resolved binding, with the validity rules applied. Pure; warnings (no catalogue, unknown credential, allowlist or universe violation) are RETURNED, never thrown — a bad grant contributes nothing.
+ * 🔴 A GRANT WITH NO USABLE CREDENTIAL GRANTS NOTHING, not the connector minus its identity: `resolved: null` is what leaves the connector out of `access.connectors` entirely.
+ */
+export function expandConnectorGrant(grant, cfg, opts) {
+    if (!cfg) {
+        return {
+            resolved: null,
+            warnings: [
+                `grant names connector "${grant.name}", which has no credential catalogue in this deployment's config — ignored`,
+            ],
+        };
+    }
+    const cred = cfg.credentials.find((c) => c.id === grant.credential);
+    if (!cred) {
+        return {
+            resolved: null,
+            warnings: [`connector "${cfg.connector}": grant references unknown credential "${grant.credential}" — ignored`],
+        };
+    }
+    // Principal is derived from BOTH axes (OPE-125): the type, AND the acting-identity grant family.
+    // A human-acting credential is user-principal whatever its type — so the DM-only universe gate
+    // below covers it, and a human-acting static key stamped `api-key` can never resolve on a channel.
+    const principal = principalOfCredential(cred);
+    // The member plane is read BEFORE the universe gate and admits a NAMED pair only — this credential's `<connector>/<id>` key must be in the set the caller's domain declared. The per-turn controls run at the mint site (access/member-plane.ts); an empty or absent set means this branch is never taken.
+    const memberPlane = principal === "user" && !opts.dm && opts.memberPlane?.has(`${cfg.connector}/${cred.id}`) === true;
+    // Universe gate: a user-principal (personal) credential is the DM universe only.
+    if (principal === "user" && !opts.dm && !memberPlane) {
+        const why = isHumanActing(cred) ? `${cred.type}, human-acting grant` : cred.type;
+        return {
+            resolved: null,
+            warnings: [
+                `connector "${cfg.connector}": credential "${cred.id}" is user-principal (${why}) — ` +
+                    `personal credentials resolve only in DMs, never on a channel/domain binding, unless the ` +
+                    `domain declares this connector's member role (access/member-grant.ts). Ignored.`,
+            ],
+        };
+    }
+    if (!cfg.allows.includes(cred.type)) {
+        return {
+            resolved: null,
+            warnings: [
+                `connector "${cfg.connector}": credential "${cred.id}" (${cred.type}) is not in the connection's ` +
+                    `allowlist (${cfg.allows.join(", ")}) — ignored`,
+            ],
+        };
+    }
+    return {
+        resolved: {
+            connector: cfg.connector,
+            credential: cred.id,
+            type: cred.type,
+            grantFamily: grantFamilyOf(cred),
+            principal,
+            secretRef: cred.secretRef,
+            broker: cred.broker,
+            home: cred.home,
+            endpoints: cred.endpoints,
+            // POSITIVE-ONLY, like every other provenance stamp in this tree: present as `true` when the
+            // member plane admitted the binding, ABSENT otherwise — so an existing binding is byte-identical.
+            ...(memberPlane ? { memberPlane: true } : {}),
+        },
+        warnings: [],
+    };
+}
+let registeredConnectorCredentials = [];
+/** Register the app's catalogue list for core-side runtime lookup. Called once at boot from the same wiring point that hands core its config, with the SAME array, so there is no second source of truth. Idempotent overwrite. */
+export function setRegisteredConnectorCredentials(catalogues) {
+    registeredConnectorCredentials = catalogues;
+}
+/** Test seam: forget the registered catalogues (mirror credentials.ts resetBrokers). An empty
+ *  registry means findConnectorCredential returns undefined — the "unconfigured" path. */
+export function resetRegisteredConnectorCredentials() {
+    registeredConnectorCredentials = [];
+}
+/** Look up ONE credential on a registered connector. Undefined when the connector has no catalogue or carries no such credential — the caller treats that as "unconfigured", exactly like an unset secret, and never as a silent fallback to another source. */
+export function findConnectorCredential(connector, credentialId) {
+    const cfg = registeredConnectorCredentials.find((c) => c.connector === connector);
+    return cfg?.credentials.find((c) => c.id === credentialId);
+}
+//# sourceMappingURL=connector-credentials.js.map

package/dist/agent/access/connector-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-credentials.js","sourceRoot":"","sources":["../../../agent/access/connector-credentials.ts"],"names":[],"mappings":"AAAA,6MAA6M;AAC7M,oMAAoM;AAEpM,OAAO,EAAE,0BAA0B,EAAgC,MAAM,2BAA2B,CAAC;AAKrG,qMAAqM;AACrM,MAAM,UAAU,WAAW,CAAC,IAA6B;IACvD,OAAO,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC;AAiCD;+EAC+E;AAC/E,MAAM,UAAU,aAAa,CAAC,IAAsD;IAClF,OAAO,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAsD;IAClF,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC;AAChD,CAAC;AAED,gRAAgR;AAChR,MAAM,UAAU,qBAAqB,CAAC,IAGrC;IACC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,GAElC;IACC,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,YAAY,CAAC;IAC1C,OAAO,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACtE,CAAC;AAWD,mGAAmG;AACnG,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAElD,6NAA6N;AAC7N,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,wMAAwM;AACxM,MAAM,UAAU,iBAAiB,CAAC,IAA2C;IAC3E,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,wBAAwB;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IACrC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAsFD,MAAM,UAAU,0BAA0B,CAAC,CAAuB;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAcD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmC,CAAC;AAEnE;oGACoG;AACpG,MAAM,UAAU,+BAA+B,CAAC,IAA6B;IAC3E,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,6BAA6B;IAC3C,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,0BAA0B,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,0BAA0B;IACjC,+BAA+B,CAAC;QAC9B,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;QACzC,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uDAAuD,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AACD,0BAA0B,EAAE,CAAC;AAE7B,uFAAuF;AACvF,MAAM,UAAU,+BAA+B,CAAC,UAA2C;IACzF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,CAAC,SAAS,wHAAwH,CAClJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,SAAS,+BAA+B,CAAC,CAAC;QAEhG,iGAAiG;QACjG,yEAAyE;QACzE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC;YACzB,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBACjB,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,CAAC,SAAS,wNAAwN,CAClP,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,CAAC;oBACnC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,CAAC,SAAS,yCAAyC,CAAC,kDAAkD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE,CACjN,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;oBACnE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,SAAS,+CAA+C,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,CAAC,SAAS,+NAA+N,CACzP,CAAC;gBACJ,CAAC;gBACD,IAAI,EAAE,CAAC,eAAe,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,CAAC,SAAS,8HAA8H,CACxJ,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,SAAS,+BAA+B,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,SAAS,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC;YAEhE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,CAAC,EAAE,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC,IAAI,CAAC,IAAI,4GAA4G,CAAC,CAAC;gBACtL,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,IAAI,mCAAmC,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3H,CAAC;gBACD,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACvC,IAAI,CAAC,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,IAAI,0EAA0E,CAAC,CAAC,IAAI,uDAAuD,CAAC,CAAC;gBAC/L,IAAI,CAAC,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,IAAI,wIAAwI,CAAC,CAAC;YAC/L,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;gBACjG,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+IAA+I,CAAC,CAAC;gBAC3K,CAAC;gBACD,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,IAAI,wGAAwG,CAAC,CAAC;gBAC/I,CAAC;YACH,CAAC;YAED,iLAAiL;YACjL,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yHAAyH,CAAC,CAAC;YACrJ,CAAC;YAED,8FAA8F;YAC9F,8FAA8F;YAC9F,2EAA2E;YAC3E,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,iDAAiD,CAAC,CAAC,SAAS,iOAAiO,CACtS,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,gBAAgB,CAAC,CAAC,SAAS,uEAAuE,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,oBAAoB,8GAA8G,CACtQ,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,OAAO,CAAC,CAAC,IAAI,uCAAuC,CAAC,CAAC,SAAS,yCAAyC,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,qHAAqH,CAC1R,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,2FAA2F;YAC3F,0CAA0C;YAC1C,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAwC,CAAC,iBAAiB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;gBACtG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACxF,CAAC;gBACD,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;gBACnC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iJAAiJ,CAAC,CAAC;gBAC7K,CAAC;YACH,CAAC;YAED,qFAAqF;YACrF,6FAA6F;YAC7F,8FAA8F;YAC9F,qDAAqD;YACrD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA6D,EAC7D,GAAqC,EACrC,IAOC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE;gBACR,0BAA0B,KAAK,CAAC,IAAI,4EAA4E;aACjH;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC,cAAc,GAAG,CAAC,SAAS,2CAA2C,KAAK,CAAC,UAAU,aAAa,CAAC;SAChH,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,+FAA+F;IAC/F,mGAAmG;IACnG,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE9C,2SAA2S;IAC3S,MAAM,WAAW,GAAG,SAAS,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC;IAEtH,iFAAiF;IACjF,IAAI,SAAS,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACjF,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE;gBACR,cAAc,GAAG,CAAC,SAAS,kBAAkB,IAAI,CAAC,EAAE,wBAAwB,GAAG,MAAM;oBACnF,0FAA0F;oBAC1F,iFAAiF;aACpF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE;gBACR,cAAc,GAAG,CAAC,SAAS,kBAAkB,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,IAAI,+BAA+B;oBAChG,cAAc,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa;aACnD;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE;YACR,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC;YAChC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,4FAA4F;YAC5F,kGAAkG;YAClG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,IAAI,8BAA8B,GAAoC,EAAE,CAAC;AAEzE,mOAAmO;AACnO,MAAM,UAAU,iCAAiC,CAAC,UAA2C;IAC3F,8BAA8B,GAAG,UAAU,CAAC;AAC9C,CAAC;AAED;0FAC0F;AAC1F,MAAM,UAAU,mCAAmC;IACjD,8BAA8B,GAAG,EAAE,CAAC;AACtC,CAAC;AAED,gQAAgQ;AAChQ,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,YAAoB;IAC7E,MAAM,GAAG,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAClF,OAAO,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;AAC7D,CAAC"}

package/dist/agent/access/connector-disclosure.d.ts

@@ -0,0 +1,66 @@
+import { type BindableContext } from "../identity/binding.js";
+import { type AudienceFloor, type RoomRoster } from "./audience-floor.js";
+/** Why a connector disclosure was refused. `ok` is the allow verdict. */
+export type ConnectorDisclosureVerdict = {
+    readonly ok: true;
+}
+/** LEG 1 — the room's audience floor POSITIVELY resolved to guest, so org-internal connector data may not be disclosed to it. Today that means an externally-shared Slack channel, not an observed guest standing in the room. */
+ | {
+    readonly ok: false;
+    readonly reason: "audience-floor";
+    readonly floor: AudienceFloor;
+}
+/** LEG 2 — compliance mode is ON and the entitlement probe answered NO for this requestor. */
+ | {
+    readonly ok: false;
+    readonly reason: "requestor-unentitled";
+}
+/** LEG 2 — compliance mode is ON but no entitlement signal is available (no probe registered, the
+ *  probe couldn't answer or threw, or the turn has no verified requestor). Fail closed. */
+ | {
+    readonly ok: false;
+    readonly reason: "entitlement-unavailable";
+    readonly detail: string;
+};
+/** The facts {@link classifyConnectorDisclosure} judges — all resolved by the caller, so the
+ *  classifier is pure and matrix-testable (the classifyPaneVenue precedent). */
+export interface ConnectorDisclosureInput {
+    /** The room's audience floor (from the ONE primitive, access/audience-floor.ts). */
+    readonly floor: AudienceFloor;
+    /** The live roster the floor came from — read for its `resolved` bit (see the header's inert rule). */
+    readonly roster: RoomRoster;
+    /** Is the org's compliance mode ON (`requestorEntitlementChecks` on the `org` pseudo-domain)? */
+    readonly complianceMode: boolean;
+    /** Is THIS turn direct-addressed (a DM, or an addressed mention)? Leg 2 runs only when true —
+     *  an ambient turn has no requestor whose entitlement could be checked. */
+    readonly directAddressed: boolean;
+    /** The entitlement probe's answer for (requestor, connection): true/false, or undefined = no
+     *  signal available. Only consulted when compliance mode is ON and the turn is direct-addressed. */
+    readonly entitled?: boolean;
+    /** Why no entitlement signal was available (probe absent / threw / no verified requestor). */
+    readonly entitlementDetail?: string;
+    /** The op's tier when known. UNUSED today (the gate is connection-grain — see the header); present
+     *  so an op-grain call site can narrow leg 2 to reads without reshaping this classifier. */
+    readonly opTier?: "read" | "write" | "destructive";
+}
+/** Leg 1 runs first: a room that may not hear the connector at all is refused before anyone's personal entitlement is asked about. */
+export declare function classifyConnectorDisclosure(input: ConnectorDisclosureInput): ConnectorDisclosureVerdict;
+/** A read-only "may this principal see this connector's underlying resource?" probe. Return
+ *  `undefined` when the system of record cannot answer — that is NOT a yes (the caller fails closed). */
+export type ConnectorEntitlementProbe = (input: {
+    readonly connection: string;
+    readonly principalId: string;
+    readonly ctx: BindableContext;
+}) => Promise<boolean | undefined>;
+/** Register the deployment's entitlement probe (app boot; a later call REPLACES the previous). */
+export declare function registerConnectorEntitlementProbe(fn: ConnectorEntitlementProbe): void;
+/** Test seam: drop the registered probe so one test can't inherit another's. */
+export declare function _resetConnectorEntitlementProbeForTest(): void;
+/** Thrown when compliance mode refuses a connector call. Distinct from PaneRedirectError because there is nowhere to redirect TO: the requestor is not entitled to the data anywhere. */
+export declare class ConnectorEntitlementError extends Error {
+    readonly reason: "requestor-unentitled" | "entitlement-unavailable";
+    constructor(message: string, reason: "requestor-unentitled" | "entitlement-unavailable");
+}
+/** Call this from a connection's getToken AFTER the grant gate and the DM wall; that composition is the full credential gate. Compliance mode off with no observed guest returns silently and writes NOTHING, which is byte-identical to the path before this gate existed. */
+export declare function assertConnectorDisclosure(connection: string, ctx: BindableContext): Promise<void>;
+//# sourceMappingURL=connector-disclosure.d.ts.map