@particle-academy/google-drive-ui 0.1.0 → 0.3.0

package/CHANGELOG.md

@@ -4,6 +4,65 @@ All notable changes to `@particle-academy/google-drive-ui`,
 `@particle-academy/google-drive-js`, `particle-academy/google-drive-php` and
 `fancy-google-drive`.
 
+## [0.3.0] — 2026-08-24
+
+### Added
+
+- **The README now says how to SET THIS CONNECTOR UP**, in the package itself.
+
+Until now it explained what the four packages are, what they cost and why the
+repo is generated — and said nothing about credentials, scopes, sandboxes or
+operations. Somebody who installed it could not learn from it which credentials
+a connection needs, where a human GETS them, which scopes to request, or what
+the connector can actually do. All of that was already in the definition; the
+one document a consumer reads was the one that omitted everything actionable.
+
+The new **Setting it up** section carries:
+
+- every credential, with the text saying where the value comes from, whether it
+  is **per installation** or **per connected account**, and whether it is secret;
+- the OAuth authorize and token URLs and the exact scopes, verbatim;
+- the access-token lifetime, and where refresh tokens ROTATE, the two things a
+  host must not do — retry a failed refresh, or refresh concurrently — because a
+  replay revokes the entire grant and nothing in the failure says why;
+- the estate in this provider's own terms, including the cases where a
+  successful-looking run reaches nobody, or reaches the real one;
+- every action and trigger with its method, path, inputs, and whether it is safe
+  to replay;
+- a trigger's provider-side setup, which nobody can derive from anything else.
+
+It is **generated from `provider/manifest.json`**, so it cannot drift from what
+the packages do — which is the point at a few hundred providers, where a
+hand-written setup section is a few hundred documents going quietly stale.
+
+No code changed. This release exists because a registry and an installing agent
+read the PUBLISHED artifact, and the artifact carried the old README.
+
+## [0.2.0] — 2026-08-24
+
+### Changed
+
+- **`@particle-academy/google-drive-ui` is now an OPTIONAL PEER dependency of `@particle-academy/google-drive-js`, not a hard one.**
+
+`./flow` needs it; nothing else does. It was a hard dependency, and because
+`@particle-academy/google-drive-ui` itself peer-depends on `fancy-flow` — which npm 7+ installs
+automatically — `npm install @particle-academy/google-drive-js` pulled the **entire flow engine**
+onto disk for a consumer who only wanted to call the API. Roughly **18 MB
+became 874 KB**, and the package works exactly as before:
+
+```js
+import { googleDrive… } from "@particle-academy/google-drive-js";
+// an injected transport, no flow engine anywhere
+```
+
+**This is breaking if you use `@particle-academy/google-drive-js/flow`.** Add `@particle-academy/google-drive-ui` to your own
+dependencies — it was always being installed for you, and now it is declared.
+Everything importing only the main entry point is unaffected.
+
+The fix is on this edge rather than on `@particle-academy/google-drive-ui` → `fancy-flow`: the ui package
+genuinely requires fancy-flow, since it calls `defineConnectorKind`, and marking
+that peer optional would be a lie about what it needs.
+
 ## [0.1.0] — 2026-08-23
 
 First release.
@@ -22,3 +81,5 @@ Drive files. Google has no Drive sandbox and exposes no idempotency key, so live
 tests create real folders and retries can create duplicates.
 
 [0.1.0]: https://github.com/Fancy-Friends/google-drive/releases/tag/v0.1.0
+[0.2.0]: https://github.com/Fancy-Friends/google-drive/releases/tag/v0.2.0
+[0.3.0]: https://github.com/Fancy-Friends/google-drive/releases/tag/v0.3.0

package/README.md

@@ -27,6 +27,55 @@ dependencies.
 subject to the kit's full approval bar, and one per provider is hundreds of
 dependencies nobody is tracking.
 
+## Setting it up
+
+Everything below is generated from `provider/manifest.json`, so it cannot disagree with what the packages do.
+
+### Credentials
+
+A Google Drive connection holds 4 values.
+
+**Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
+
+| Field | Scope | Secret | Where it comes from |
+|---|---|---|---|
+| **OAuth client ID** | per installation | not secret | From Google Cloud Console. One value for the whole installation. |
+| **OAuth client secret** | per installation | **secret** | The client secret for the same OAuth app. |
+| **Access token** | per connected account | **secret** | Per connected Google account; expires after one hour. |
+| **Refresh token** | per connected account | **secret** | Per connected Google account; the host uses it to refresh the access token. |
+
+### Authorising
+
+Google Drive uses OAuth2 (authorization_code). The package DECLARES the exchange; the HOST performs it — a consent screen needs a browser, a redirect URI and somewhere to persist the result, and all three belong to the host.
+
+- **Authorize URL** — https://accounts.google.com/o/oauth2/v2/auth
+- **Token URL** — https://oauth2.googleapis.com/token
+- **Scopes** — `https://www.googleapis.com/auth/drive.file`
+- **Access token lifetime** — 3600 seconds (1 hours). A host that never refreshes works all afternoon and is broken by morning.
+
+The refresh tokens do **not** rotate: the same one is reusable, so a refresh may safely be retried and may run concurrently. Stated rather than assumed, because the opposite — a provider that spends the token and revokes the grant on a replay — looks identical until it happens.
+
+### The estate
+
+**Google Drive has no test estate, and somebody checked.** Everything this connector does is real. Use the faker to build against it.
+
+> Google Drive has no sandbox. Every folder created in live mode is real; use the faker during development and delete live test folders afterward.
+
+## What it can do
+
+### Actions
+
+#### `folder_create` — Google Drive folder
+
+Create a folder in Google Drive.
+
+`POST /drive/v3/files` · **unsafe to replay** — a retried durable run does it TWICE
+
+| Input | Required | What it is |
+|---|---|---|
+| `name` | yes | The folder name. Drive does not require names to be unique within a parent. |
+| `parents` | no | Parent folder ids, comma separated. Leave empty to create the folder in My Drive. |
+
 ## Run it before you have credentials
 
 Every operation ships a **faker**, whether or not Google Drive has a sandbox. Set a

package/dist/index.cjs

@@ -49,6 +49,7 @@ var GOOGLE_DRIVE_OAUTH = {
   ],
   "accessTokenCredential": "accessToken",
   "refreshTokenCredential": "refreshToken",
+  "refreshTokenRotates": false,
   "accessTokenTtlSeconds": 3600
 };
 function googleDriveMeta(role, operation, docs) {

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/service.ts","../src/kinds/folder-create.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAiCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,oBAAA,GAAuB;AAAA,EAClC,OAAA,EAAS,cAAA;AAAA,EACT,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,wBAAA,GAA2B;AAAA,EACtC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAeO,IAAM,kBAAA,GAAqB;AAAA,EAChC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,uBAAA,EAAyB;AAC3B;AAGO,SAAS,eAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,oBAAA,EAAsB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC1D;ACpFO,IAAM,wBAAA,GAA2B;AACjC,IAAM,6BAAA,GAAgC;AAEtC,IAAM,wBAAA,GAA2B,eAAA,CAAgB,QAAA,EAAU,iBAAA,EAAmB,kFAAkF;AAUhK,IAAM,0BAAA,GAA4C;AAAA,EACvD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,eAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,cAAA;AAAA,IACR,MAAA,EAAQ,OAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,qBAAA,GAA4CA,+BAAoB,wBAAA,EAA0B;AAAA,EACrG,IAAA,EAAM,wBAAA;AAAA,EACN,OAAA,EAAS,CAAC,qBAAqB,CAAA;AAAA,EAC/B,KAAA,EAAO,qBAAA;AAAA,EACP,WAAA,EAAa,kCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,0BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,MAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,mBAAA;AAAA,MACT,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,wBAAA,EAA0B,QAAmC,iBAAiB;AAC5F,CAAC;;;AC9DM,IAAM,kBAAA,GAA2C;AAAA,EACtD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's identity on the authoring surface, shared by every Google\n * Drive node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google Drive has no sandbox. Every folder created in live mode is real; use\n * the faker during development and delete live test folders afterward.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_DRIVE_SERVICE = {\n  service: \"google_drive\",\n  serviceTitle: \"Google Drive\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Drive connection holds. */\nexport const GOOGLE_DRIVE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Drive requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n */\nexport const GOOGLE_DRIVE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/drive.file\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Drive node's connector metadata from the operation it performs. */\nexport function googleDriveMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_DRIVE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/folder-create.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/folder-create.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive folder — Create a folder in Google Drive.\n *\n * https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleDriveMeta } from \"../service.js\";\n\nexport const GOOGLE_DRIVE_FOLDER_KIND = \"@particle-academy/google_drive_folder\";\nexport const GOOGLE_DRIVE_FOLDER_OPERATION = \"folder_create\";\n\nexport const GOOGLE_DRIVE_FOLDER_META = googleDriveMeta(\"action\", \"create a folder\", \"https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_DRIVE_FOLDER_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"The created folder's id.\"\n  },\n  {\n    \"path\": \"data.name\",\n    \"type\": \"string\",\n    \"description\": \"The folder name Google stored.\"\n  },\n  {\n    \"path\": \"data.mimeType\",\n    \"type\": \"string\",\n    \"description\": \"The fixed Google Drive folder MIME type.\"\n  },\n  {\n    \"path\": \"data.parents\",\n    \"type\": \"array\",\n    \"description\": \"The parent folder id array returned by Drive.\"\n  }\n];\n\nexport const googleDriveFolderKind: NodeKindDefinition = defineConnectorKind(GOOGLE_DRIVE_FOLDER_META, {\n  name: GOOGLE_DRIVE_FOLDER_KIND,\n  aliases: [\"google_drive_folder\"],\n  label: \"Google Drive folder\",\n  description: \"Create a folder in Google Drive.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_DRIVE_FOLDER_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"name\",\n      \"label\": \"Folder name\",\n      \"required\": true,\n      \"description\": \"The folder name. Drive does not require names to be unique within a parent.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"parents\",\n      \"label\": \"Parent folder IDs\",\n      \"description\": \"Parent folder ids, comma separated. Leave empty to create the folder in My Drive.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_DRIVE_FOLDER_META, config as Record<string, unknown>, \"create a folder\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/folder-create.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleDriveFolderKind } from \"./kinds/folder-create.js\";\n\n/** Every Google Drive kind, for a host that registers the lot. */\nexport const GOOGLE_DRIVE_KINDS: NodeKindDefinition[] = [\n  googleDriveFolderKind,\n];\n"]}
+{"version":3,"sources":["../src/service.ts","../src/kinds/folder-create.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAiCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,oBAAA,GAAuB;AAAA,EAClC,OAAA,EAAS,cAAA;AAAA,EACT,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,wBAAA,GAA2B;AAAA,EACtC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAoBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,eAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,oBAAA,EAAsB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC1D;AC1FO,IAAM,wBAAA,GAA2B;AACjC,IAAM,6BAAA,GAAgC;AAEtC,IAAM,wBAAA,GAA2B,eAAA,CAAgB,QAAA,EAAU,iBAAA,EAAmB,kFAAkF;AAUhK,IAAM,0BAAA,GAA4C;AAAA,EACvD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,eAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,cAAA;AAAA,IACR,MAAA,EAAQ,OAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,qBAAA,GAA4CA,+BAAoB,wBAAA,EAA0B;AAAA,EACrG,IAAA,EAAM,wBAAA;AAAA,EACN,OAAA,EAAS,CAAC,qBAAqB,CAAA;AAAA,EAC/B,KAAA,EAAO,qBAAA;AAAA,EACP,WAAA,EAAa,kCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,0BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,MAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,mBAAA;AAAA,MACT,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,wBAAA,EAA0B,QAAmC,iBAAiB;AAC5F,CAAC;;;AC9DM,IAAM,kBAAA,GAA2C;AAAA,EACtD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's identity on the authoring surface, shared by every Google\n * Drive node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google Drive has no sandbox. Every folder created in live mode is real; use\n * the faker during development and delete live test folders afterward.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_DRIVE_SERVICE = {\n  service: \"google_drive\",\n  serviceTitle: \"Google Drive\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Drive connection holds. */\nexport const GOOGLE_DRIVE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Drive requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const GOOGLE_DRIVE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/drive.file\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Drive node's connector metadata from the operation it performs. */\nexport function googleDriveMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_DRIVE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/folder-create.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/folder-create.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive folder — Create a folder in Google Drive.\n *\n * https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleDriveMeta } from \"../service.js\";\n\nexport const GOOGLE_DRIVE_FOLDER_KIND = \"@particle-academy/google_drive_folder\";\nexport const GOOGLE_DRIVE_FOLDER_OPERATION = \"folder_create\";\n\nexport const GOOGLE_DRIVE_FOLDER_META = googleDriveMeta(\"action\", \"create a folder\", \"https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_DRIVE_FOLDER_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"The created folder's id.\"\n  },\n  {\n    \"path\": \"data.name\",\n    \"type\": \"string\",\n    \"description\": \"The folder name Google stored.\"\n  },\n  {\n    \"path\": \"data.mimeType\",\n    \"type\": \"string\",\n    \"description\": \"The fixed Google Drive folder MIME type.\"\n  },\n  {\n    \"path\": \"data.parents\",\n    \"type\": \"array\",\n    \"description\": \"The parent folder id array returned by Drive.\"\n  }\n];\n\nexport const googleDriveFolderKind: NodeKindDefinition = defineConnectorKind(GOOGLE_DRIVE_FOLDER_META, {\n  name: GOOGLE_DRIVE_FOLDER_KIND,\n  aliases: [\"google_drive_folder\"],\n  label: \"Google Drive folder\",\n  description: \"Create a folder in Google Drive.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_DRIVE_FOLDER_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"name\",\n      \"label\": \"Folder name\",\n      \"required\": true,\n      \"description\": \"The folder name. Drive does not require names to be unique within a parent.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"parents\",\n      \"label\": \"Parent folder IDs\",\n      \"description\": \"Parent folder ids, comma separated. Leave empty to create the folder in My Drive.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_DRIVE_FOLDER_META, config as Record<string, unknown>, \"create a folder\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/folder-create.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleDriveFolderKind } from \"./kinds/folder-create.js\";\n\n/** Every Google Drive kind, for a host that registers the lot. */\nexport const GOOGLE_DRIVE_KINDS: NodeKindDefinition[] = [\n  googleDriveFolderKind,\n];\n"]}

package/dist/index.d.cts

@@ -78,6 +78,11 @@ declare const GOOGLE_DRIVE_CREDENTIALS: readonly [{
  * The access token lasts 3600 seconds. A host that never refreshes will work
  * all afternoon and be broken by morning, which is why the lifetime is stated
  * rather than left to be discovered.
+ *
+ * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may
+ * safely be retried and may run concurrently. That is stated rather than
+ * assumed because the opposite — a provider that spends the token and revokes
+ * the grant on a replay — looks identical until it happens.
  */
 declare const GOOGLE_DRIVE_OAUTH: {
     readonly flow: "authorization_code";
@@ -86,6 +91,7 @@ declare const GOOGLE_DRIVE_OAUTH: {
     readonly scopes: readonly ["https://www.googleapis.com/auth/drive.file"];
     readonly accessTokenCredential: "accessToken";
     readonly refreshTokenCredential: "refreshToken";
+    readonly refreshTokenRotates: false;
     readonly accessTokenTtlSeconds: 3600;
 };
 /** Build a Google Drive node's connector metadata from the operation it performs. */

package/dist/index.d.ts

@@ -78,6 +78,11 @@ declare const GOOGLE_DRIVE_CREDENTIALS: readonly [{
  * The access token lasts 3600 seconds. A host that never refreshes will work
  * all afternoon and be broken by morning, which is why the lifetime is stated
  * rather than left to be discovered.
+ *
+ * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may
+ * safely be retried and may run concurrently. That is stated rather than
+ * assumed because the opposite — a provider that spends the token and revokes
+ * the grant on a replay — looks identical until it happens.
  */
 declare const GOOGLE_DRIVE_OAUTH: {
     readonly flow: "authorization_code";
@@ -86,6 +91,7 @@ declare const GOOGLE_DRIVE_OAUTH: {
     readonly scopes: readonly ["https://www.googleapis.com/auth/drive.file"];
     readonly accessTokenCredential: "accessToken";
     readonly refreshTokenCredential: "refreshToken";
+    readonly refreshTokenRotates: false;
     readonly accessTokenTtlSeconds: 3600;
 };
 /** Build a Google Drive node's connector metadata from the operation it performs. */

package/dist/index.js

@@ -47,6 +47,7 @@ var GOOGLE_DRIVE_OAUTH = {
   ],
   "accessTokenCredential": "accessToken",
   "refreshTokenCredential": "refreshToken",
+  "refreshTokenRotates": false,
   "accessTokenTtlSeconds": 3600
 };
 function googleDriveMeta(role, operation, docs) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/service.ts","../src/kinds/folder-create.ts","../src/index.ts"],"names":[],"mappings":";;;AAiCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,oBAAA,GAAuB;AAAA,EAClC,OAAA,EAAS,cAAA;AAAA,EACT,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,wBAAA,GAA2B;AAAA,EACtC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAeO,IAAM,kBAAA,GAAqB;AAAA,EAChC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,uBAAA,EAAyB;AAC3B;AAGO,SAAS,eAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,oBAAA,EAAsB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC1D;ACpFO,IAAM,wBAAA,GAA2B;AACjC,IAAM,6BAAA,GAAgC;AAEtC,IAAM,wBAAA,GAA2B,eAAA,CAAgB,QAAA,EAAU,iBAAA,EAAmB,kFAAkF;AAUhK,IAAM,0BAAA,GAA4C;AAAA,EACvD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,eAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,cAAA;AAAA,IACR,MAAA,EAAQ,OAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,qBAAA,GAA4C,oBAAoB,wBAAA,EAA0B;AAAA,EACrG,IAAA,EAAM,wBAAA;AAAA,EACN,OAAA,EAAS,CAAC,qBAAqB,CAAA;AAAA,EAC/B,KAAA,EAAO,qBAAA;AAAA,EACP,WAAA,EAAa,kCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,0BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,MAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,mBAAA;AAAA,MACT,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,wBAAA,EAA0B,QAAmC,iBAAiB;AAC5F,CAAC;;;AC9DM,IAAM,kBAAA,GAA2C;AAAA,EACtD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's identity on the authoring surface, shared by every Google\n * Drive node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google Drive has no sandbox. Every folder created in live mode is real; use\n * the faker during development and delete live test folders afterward.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_DRIVE_SERVICE = {\n  service: \"google_drive\",\n  serviceTitle: \"Google Drive\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Drive connection holds. */\nexport const GOOGLE_DRIVE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Drive requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n */\nexport const GOOGLE_DRIVE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/drive.file\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Drive node's connector metadata from the operation it performs. */\nexport function googleDriveMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_DRIVE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/folder-create.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/folder-create.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive folder — Create a folder in Google Drive.\n *\n * https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleDriveMeta } from \"../service.js\";\n\nexport const GOOGLE_DRIVE_FOLDER_KIND = \"@particle-academy/google_drive_folder\";\nexport const GOOGLE_DRIVE_FOLDER_OPERATION = \"folder_create\";\n\nexport const GOOGLE_DRIVE_FOLDER_META = googleDriveMeta(\"action\", \"create a folder\", \"https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_DRIVE_FOLDER_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"The created folder's id.\"\n  },\n  {\n    \"path\": \"data.name\",\n    \"type\": \"string\",\n    \"description\": \"The folder name Google stored.\"\n  },\n  {\n    \"path\": \"data.mimeType\",\n    \"type\": \"string\",\n    \"description\": \"The fixed Google Drive folder MIME type.\"\n  },\n  {\n    \"path\": \"data.parents\",\n    \"type\": \"array\",\n    \"description\": \"The parent folder id array returned by Drive.\"\n  }\n];\n\nexport const googleDriveFolderKind: NodeKindDefinition = defineConnectorKind(GOOGLE_DRIVE_FOLDER_META, {\n  name: GOOGLE_DRIVE_FOLDER_KIND,\n  aliases: [\"google_drive_folder\"],\n  label: \"Google Drive folder\",\n  description: \"Create a folder in Google Drive.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_DRIVE_FOLDER_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"name\",\n      \"label\": \"Folder name\",\n      \"required\": true,\n      \"description\": \"The folder name. Drive does not require names to be unique within a parent.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"parents\",\n      \"label\": \"Parent folder IDs\",\n      \"description\": \"Parent folder ids, comma separated. Leave empty to create the folder in My Drive.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_DRIVE_FOLDER_META, config as Record<string, unknown>, \"create a folder\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/folder-create.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleDriveFolderKind } from \"./kinds/folder-create.js\";\n\n/** Every Google Drive kind, for a host that registers the lot. */\nexport const GOOGLE_DRIVE_KINDS: NodeKindDefinition[] = [\n  googleDriveFolderKind,\n];\n"]}
+{"version":3,"sources":["../src/service.ts","../src/kinds/folder-create.ts","../src/index.ts"],"names":[],"mappings":";;;AAiCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,oBAAA,GAAuB;AAAA,EAClC,OAAA,EAAS,cAAA;AAAA,EACT,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,wBAAA,GAA2B;AAAA,EACtC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAoBO,IAAM,kBAAA,GAAqB;AAAA,EAChC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,eAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,oBAAA,EAAsB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC1D;AC1FO,IAAM,wBAAA,GAA2B;AACjC,IAAM,6BAAA,GAAgC;AAEtC,IAAM,wBAAA,GAA2B,eAAA,CAAgB,QAAA,EAAU,iBAAA,EAAmB,kFAAkF;AAUhK,IAAM,0BAAA,GAA4C;AAAA,EACvD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,eAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,cAAA;AAAA,IACR,MAAA,EAAQ,OAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,qBAAA,GAA4C,oBAAoB,wBAAA,EAA0B;AAAA,EACrG,IAAA,EAAM,wBAAA;AAAA,EACN,OAAA,EAAS,CAAC,qBAAqB,CAAA;AAAA,EAC/B,KAAA,EAAO,qBAAA;AAAA,EACP,WAAA,EAAa,kCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,0BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,MAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,mBAAA;AAAA,MACT,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,wBAAA,EAA0B,QAAmC,iBAAiB;AAC5F,CAAC;;;AC9DM,IAAM,kBAAA,GAA2C;AAAA,EACtD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's identity on the authoring surface, shared by every Google\n * Drive node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google Drive has no sandbox. Every folder created in live mode is real; use\n * the faker during development and delete live test folders afterward.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_DRIVE_SERVICE = {\n  service: \"google_drive\",\n  serviceTitle: \"Google Drive\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Drive connection holds. */\nexport const GOOGLE_DRIVE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Drive requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const GOOGLE_DRIVE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/drive.file\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Drive node's connector metadata from the operation it performs. */\nexport function googleDriveMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_DRIVE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/folder-create.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/folder-create.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive folder — Create a folder in Google Drive.\n *\n * https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleDriveMeta } from \"../service.js\";\n\nexport const GOOGLE_DRIVE_FOLDER_KIND = \"@particle-academy/google_drive_folder\";\nexport const GOOGLE_DRIVE_FOLDER_OPERATION = \"folder_create\";\n\nexport const GOOGLE_DRIVE_FOLDER_META = googleDriveMeta(\"action\", \"create a folder\", \"https://developers.google.com/workspace/drive/api/reference/rest/v3/files/create\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_DRIVE_FOLDER_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"The created folder's id.\"\n  },\n  {\n    \"path\": \"data.name\",\n    \"type\": \"string\",\n    \"description\": \"The folder name Google stored.\"\n  },\n  {\n    \"path\": \"data.mimeType\",\n    \"type\": \"string\",\n    \"description\": \"The fixed Google Drive folder MIME type.\"\n  },\n  {\n    \"path\": \"data.parents\",\n    \"type\": \"array\",\n    \"description\": \"The parent folder id array returned by Drive.\"\n  }\n];\n\nexport const googleDriveFolderKind: NodeKindDefinition = defineConnectorKind(GOOGLE_DRIVE_FOLDER_META, {\n  name: GOOGLE_DRIVE_FOLDER_KIND,\n  aliases: [\"google_drive_folder\"],\n  label: \"Google Drive folder\",\n  description: \"Create a folder in Google Drive.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_DRIVE_FOLDER_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"name\",\n      \"label\": \"Folder name\",\n      \"required\": true,\n      \"description\": \"The folder name. Drive does not require names to be unique within a parent.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"parents\",\n      \"label\": \"Parent folder IDs\",\n      \"description\": \"Parent folder ids, comma separated. Leave empty to create the folder in My Drive.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_DRIVE_FOLDER_META, config as Record<string, unknown>, \"create a folder\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_drive\n */\n\n/**\n * Google Drive's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/folder-create.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleDriveFolderKind } from \"./kinds/folder-create.js\";\n\n/** Every Google Drive kind, for a host that registers the lot. */\nexport const GOOGLE_DRIVE_KINDS: NodeKindDefinition[] = [\n  googleDriveFolderKind,\n];\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/google-drive-ui",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Google Drive's authoring surface for fancy-flow — the node kinds, their config schemas and their declared output shapes. React on every host; carries no executor.",
   "repository": {
     "type": "git",