@particle-academy/google-sheets-ui 0.1.0 → 0.3.0

package/CHANGELOG.md

@@ -8,6 +8,65 @@ The four packages share one version, because they are generated from one
 `provider/` definition and a version that meant something different in each
 would be a version nobody could reason about.
 
+## [0.3.0] — 2026-08-24
+
+### Added
+
+- **The README now says how to SET THIS CONNECTOR UP**, in the package itself.
+
+Until now it explained what the four packages are, what they cost and why the
+repo is generated — and said nothing about credentials, scopes, sandboxes or
+operations. Somebody who installed it could not learn from it which credentials
+a connection needs, where a human GETS them, which scopes to request, or what
+the connector can actually do. All of that was already in the definition; the
+one document a consumer reads was the one that omitted everything actionable.
+
+The new **Setting it up** section carries:
+
+- every credential, with the text saying where the value comes from, whether it
+  is **per installation** or **per connected account**, and whether it is secret;
+- the OAuth authorize and token URLs and the exact scopes, verbatim;
+- the access-token lifetime, and where refresh tokens ROTATE, the two things a
+  host must not do — retry a failed refresh, or refresh concurrently — because a
+  replay revokes the entire grant and nothing in the failure says why;
+- the estate in this provider's own terms, including the cases where a
+  successful-looking run reaches nobody, or reaches the real one;
+- every action and trigger with its method, path, inputs, and whether it is safe
+  to replay;
+- a trigger's provider-side setup, which nobody can derive from anything else.
+
+It is **generated from `provider/manifest.json`**, so it cannot drift from what
+the packages do — which is the point at a few hundred providers, where a
+hand-written setup section is a few hundred documents going quietly stale.
+
+No code changed. This release exists because a registry and an installing agent
+read the PUBLISHED artifact, and the artifact carried the old README.
+
+## [0.2.0] — 2026-08-24
+
+### Changed
+
+- **`@particle-academy/google-sheets-ui` is now an OPTIONAL PEER dependency of `@particle-academy/google-sheets-js`, not a hard one.**
+
+`./flow` needs it; nothing else does. It was a hard dependency, and because
+`@particle-academy/google-sheets-ui` itself peer-depends on `fancy-flow` — which npm 7+ installs
+automatically — `npm install @particle-academy/google-sheets-js` pulled the **entire flow engine**
+onto disk for a consumer who only wanted to call the API. Roughly **18 MB
+became 874 KB**, and the package works exactly as before:
+
+```js
+import { googleSheets… } from "@particle-academy/google-sheets-js";
+// an injected transport, no flow engine anywhere
+```
+
+**This is breaking if you use `@particle-academy/google-sheets-js/flow`.** Add `@particle-academy/google-sheets-ui` to your own
+dependencies — it was always being installed for you, and now it is declared.
+Everything importing only the main entry point is unaffected.
+
+The fix is on this edge rather than on `@particle-academy/google-sheets-ui` → `fancy-flow`: the ui package
+genuinely requires fancy-flow, since it calls `defineConnectorKind`, and marking
+that peer optional would be a lie about what it needs.
+
 ## [0.1.0] — 2026-08-23
 
 First release. Provider eight, and the first Google connector.
@@ -72,3 +131,5 @@ which is why `refreshToken` is required rather than optional — and Google only
 issues one when the consent request asked for offline access.
 
 [0.1.0]: https://github.com/Fancy-Friends/google-sheets/releases/tag/v0.1.0
+[0.2.0]: https://github.com/Fancy-Friends/google-sheets/releases/tag/v0.2.0
+[0.3.0]: https://github.com/Fancy-Friends/google-sheets/releases/tag/v0.3.0

package/README.md

@@ -27,6 +27,58 @@ dependencies.
 subject to the kit's full approval bar, and one per provider is hundreds of
 dependencies nobody is tracking.
 
+## Setting it up
+
+Everything below is generated from `provider/manifest.json`, so it cannot disagree with what the packages do.
+
+### Credentials
+
+A Google Sheets connection holds 4 values.
+
+**Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
+
+| Field | Scope | Secret | Where it comes from |
+|---|---|---|---|
+| **OAuth client ID** | per installation | not secret | From Google Cloud Console -> APIs & Services -> Credentials. ONE value for the whole installation, not per connected account. |
+| **OAuth client secret** | per installation | **secret** | The client secret for the same OAuth app. One value for the whole installation. |
+| **Access token** | per connected account | **secret** | Per connected Google account, and it expires after ONE HOUR. The host refreshes it with the refresh token. |
+| **Refresh token** | per connected account | **secret** | Per connected Google account. Google issues one only when the consent request asks for offline access; without it the connection dies within the hour. |
+
+### Authorising
+
+Google Sheets uses OAuth2 (authorization_code). The package DECLARES the exchange; the HOST performs it — a consent screen needs a browser, a redirect URI and somewhere to persist the result, and all three belong to the host.
+
+- **Authorize URL** — https://accounts.google.com/o/oauth2/v2/auth
+- **Token URL** — https://oauth2.googleapis.com/token
+- **Scopes** — `https://www.googleapis.com/auth/spreadsheets`
+- **Access token lifetime** — 3600 seconds (1 hours). A host that never refreshes works all afternoon and is broken by morning.
+
+The refresh tokens do **not** rotate: the same one is reusable, so a refresh may safely be retried and may run concurrently. Stated rather than assumed, because the opposite — a provider that spends the token and revokes the grant on a replay — looks identical until it happens.
+
+### The estate
+
+**Google Sheets has no test estate, and somebody checked.** Everything this connector does is real. Use the faker to build against it.
+
+> Google has no sandbox for Sheets. A test spreadsheet is a real one in a real Drive, so every append is real -- point this at a scratch sheet, not a production one. The faker is the only way to develop against it without touching a document.
+
+## What it can do
+
+### Actions
+
+#### `row_append` — Google Sheets row
+
+Append a row to a Google Sheet.
+
+`POST /v4/spreadsheets/{spreadsheetId}/values/{range}:append` · **unsafe to replay** — a retried durable run does it TWICE
+
+| Input | Required | What it is |
+|---|---|---|
+| `spreadsheetId` | yes | The long id from the sheet's URL: docs.google.com/spreadsheets/d/THIS_PART/edit. |
+| `range` | yes | Where to append, in A1 notation. Google finds the last row of this range and writes below it. |
+| `values` | yes | The cells of the row, comma separated. Left to right from the start of the range. |
+| `valueInputOption` | no | USER_ENTERED parses the cells the way typing them would -- so =SUM(A1:A2) becomes a formula and 1/2/26 becomes a date. RAW stores exactly the characters given. |
+| `insertDataOption` | no | INSERT_ROWS pushes existing rows down. OVERWRITE writes into them. |
+
 ## Run it before you have credentials
 
 Every operation ships a **faker**, whether or not Google Sheets has a sandbox. Set a

package/dist/index.cjs

@@ -49,6 +49,7 @@ var GOOGLE_SHEETS_OAUTH = {
   ],
   "accessTokenCredential": "accessToken",
   "refreshTokenCredential": "refreshToken",
+  "refreshTokenRotates": false,
   "accessTokenTtlSeconds": 3600
 };
 function googleSheetsMeta(role, operation, docs) {

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/service.ts","../src/kinds/row-append.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAmCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,qBAAA,GAAwB;AAAA,EACnC,OAAA,EAAS,eAAA;AAAA,EACT,YAAA,EAAc,eAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,yBAAA,GAA4B;AAAA,EACvC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAeO,IAAM,mBAAA,GAAsB;AAAA,EACjC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,uBAAA,EAAyB;AAC3B;AAGO,SAAS,gBAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,qBAAA,EAAuB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC3D;ACtFO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,2BAAA,GAA8B;AAEpC,IAAM,sBAAA,GAAyB,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,uFAAuF;AAUjK,IAAM,wBAAA,GAA0C;AAAA,EACrD;AAAA,IACE,MAAA,EAAQ,oBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,0BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,mBAAA,GAA0CA,+BAAoB,sBAAA,EAAwB;AAAA,EACjG,IAAA,EAAM,sBAAA;AAAA,EACN,OAAA,EAAS,CAAC,mBAAmB,CAAA;AAAA,EAC7B,KAAA,EAAO,mBAAA;AAAA,EACP,WAAA,EAAa,iCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,wBAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,eAAA;AAAA,MACP,OAAA,EAAS,gBAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,OAAA;AAAA,MACP,OAAA,EAAS,OAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW,YAAA;AAAA,MACX,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,QAAA;AAAA,MACP,OAAA,EAAS,YAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,6BAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,aAAA,EAAe,iKAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,cAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,KAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF,KACF;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW,aAAA;AAAA,MACX,aAAA,EAAe,oEAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,aAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,WAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF;AACF,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,sBAAA,EAAwB,QAAmC,cAAc;AACvF,CAAC;;;ACzGM,IAAM,mBAAA,GAA4C;AAAA,EACvD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's identity on the authoring surface, shared by every Google\n * Sheets node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google has no sandbox for Sheets. A test spreadsheet is a real one in a real\n * Drive, so every append is real -- point this at a scratch sheet, not a\n * production one. The faker is the only way to develop against it without\n * touching a document.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_SHEETS_SERVICE = {\n  service: \"google_sheets\",\n  serviceTitle: \"Google Sheets\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Sheets connection holds. */\nexport const GOOGLE_SHEETS_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console -> APIs & Services -> Credentials. ONE value for the whole installation, not per connected account.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account, and it expires after ONE HOUR. The host refreshes it with the refresh token.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account. Google issues one only when the consent request asks for offline access; without it the connection dies within the hour.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Sheets requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n */\nexport const GOOGLE_SHEETS_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/spreadsheets\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Sheets node's connector metadata from the operation it performs. */\nexport function googleSheetsMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_SHEETS_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/row-append.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/row-append.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets row — Append a row to a Google Sheet.\n *\n * https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleSheetsMeta } from \"../service.js\";\n\nexport const GOOGLE_SHEETS_ROW_KIND = \"@particle-academy/google_sheets_row\";\nexport const GOOGLE_SHEETS_ROW_OPERATION = \"row_append\";\n\nexport const GOOGLE_SHEETS_ROW_META = googleSheetsMeta(\"action\", \"append a row\", \"https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_SHEETS_ROW_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.spreadsheetId\",\n    \"type\": \"string\",\n    \"description\": \"The spreadsheet that was written to.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRange\",\n    \"type\": \"string\",\n    \"description\": \"The range Google actually wrote, in A1 notation. NOT the range that was asked for -- append finds the first empty row below it.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRows\",\n    \"type\": \"number\",\n    \"description\": \"How many rows were added.\"\n  },\n  {\n    \"path\": \"data.updates.updatedCells\",\n    \"type\": \"number\",\n    \"description\": \"How many cells were written.\"\n  }\n];\n\nexport const googleSheetsRowKind: NodeKindDefinition = defineConnectorKind(GOOGLE_SHEETS_ROW_META, {\n  name: GOOGLE_SHEETS_ROW_KIND,\n  aliases: [\"google_sheets_row\"],\n  label: \"Google Sheets row\",\n  description: \"Append a row to a Google Sheet.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_SHEETS_ROW_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"spreadsheetId\",\n      \"label\": \"Spreadsheet ID\",\n      \"required\": true,\n      \"description\": \"The long id from the sheet's URL: docs.google.com/spreadsheets/d/THIS_PART/edit.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"range\",\n      \"label\": \"Range\",\n      \"required\": true,\n      \"default\": \"Sheet1!A:Z\",\n      \"description\": \"Where to append, in A1 notation. Google finds the last row of this range and writes below it.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"values\",\n      \"label\": \"Row values\",\n      \"required\": true,\n      \"description\": \"The cells of the row, comma separated. Left to right from the start of the range.\"\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"valueInputOption\",\n      \"label\": \"How to interpret the values\",\n      \"default\": \"USER_ENTERED\",\n      \"description\": \"USER_ENTERED parses the cells the way typing them would -- so =SUM(A1:A2) becomes a formula and 1/2/26 becomes a date. RAW stores exactly the characters given.\",\n      \"options\": [\n        {\n          \"value\": \"USER_ENTERED\",\n          \"label\": \"As if typed (formulas and dates parsed)\"\n        },\n        {\n          \"value\": \"RAW\",\n          \"label\": \"Exactly as given\"\n        }\n      ]\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"insertDataOption\",\n      \"label\": \"When the range already has data below\",\n      \"default\": \"INSERT_ROWS\",\n      \"description\": \"INSERT_ROWS pushes existing rows down. OVERWRITE writes into them.\",\n      \"options\": [\n        {\n          \"value\": \"INSERT_ROWS\",\n          \"label\": \"Insert new rows\"\n        },\n        {\n          \"value\": \"OVERWRITE\",\n          \"label\": \"Overwrite what is there\"\n        }\n      ]\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_SHEETS_ROW_META, config as Record<string, unknown>, \"append a row\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/row-append.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleSheetsRowKind } from \"./kinds/row-append.js\";\n\n/** Every Google Sheets kind, for a host that registers the lot. */\nexport const GOOGLE_SHEETS_KINDS: NodeKindDefinition[] = [\n  googleSheetsRowKind,\n];\n"]}
+{"version":3,"sources":["../src/service.ts","../src/kinds/row-append.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAmCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,qBAAA,GAAwB;AAAA,EACnC,OAAA,EAAS,eAAA;AAAA,EACT,YAAA,EAAc,eAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,yBAAA,GAA4B;AAAA,EACvC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAoBO,IAAM,mBAAA,GAAsB;AAAA,EACjC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,gBAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,qBAAA,EAAuB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC3D;AC5FO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,2BAAA,GAA8B;AAEpC,IAAM,sBAAA,GAAyB,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,uFAAuF;AAUjK,IAAM,wBAAA,GAA0C;AAAA,EACrD;AAAA,IACE,MAAA,EAAQ,oBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,0BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,mBAAA,GAA0CA,+BAAoB,sBAAA,EAAwB;AAAA,EACjG,IAAA,EAAM,sBAAA;AAAA,EACN,OAAA,EAAS,CAAC,mBAAmB,CAAA;AAAA,EAC7B,KAAA,EAAO,mBAAA;AAAA,EACP,WAAA,EAAa,iCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,wBAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,eAAA;AAAA,MACP,OAAA,EAAS,gBAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,OAAA;AAAA,MACP,OAAA,EAAS,OAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW,YAAA;AAAA,MACX,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,QAAA;AAAA,MACP,OAAA,EAAS,YAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,6BAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,aAAA,EAAe,iKAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,cAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,KAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF,KACF;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW,aAAA;AAAA,MACX,aAAA,EAAe,oEAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,aAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,WAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF;AACF,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,sBAAA,EAAwB,QAAmC,cAAc;AACvF,CAAC;;;ACzGM,IAAM,mBAAA,GAA4C;AAAA,EACvD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's identity on the authoring surface, shared by every Google\n * Sheets node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google has no sandbox for Sheets. A test spreadsheet is a real one in a real\n * Drive, so every append is real -- point this at a scratch sheet, not a\n * production one. The faker is the only way to develop against it without\n * touching a document.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_SHEETS_SERVICE = {\n  service: \"google_sheets\",\n  serviceTitle: \"Google Sheets\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Sheets connection holds. */\nexport const GOOGLE_SHEETS_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console -> APIs & Services -> Credentials. ONE value for the whole installation, not per connected account.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account, and it expires after ONE HOUR. The host refreshes it with the refresh token.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account. Google issues one only when the consent request asks for offline access; without it the connection dies within the hour.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Sheets requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const GOOGLE_SHEETS_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/spreadsheets\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Sheets node's connector metadata from the operation it performs. */\nexport function googleSheetsMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_SHEETS_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/row-append.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/row-append.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets row — Append a row to a Google Sheet.\n *\n * https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleSheetsMeta } from \"../service.js\";\n\nexport const GOOGLE_SHEETS_ROW_KIND = \"@particle-academy/google_sheets_row\";\nexport const GOOGLE_SHEETS_ROW_OPERATION = \"row_append\";\n\nexport const GOOGLE_SHEETS_ROW_META = googleSheetsMeta(\"action\", \"append a row\", \"https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_SHEETS_ROW_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.spreadsheetId\",\n    \"type\": \"string\",\n    \"description\": \"The spreadsheet that was written to.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRange\",\n    \"type\": \"string\",\n    \"description\": \"The range Google actually wrote, in A1 notation. NOT the range that was asked for -- append finds the first empty row below it.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRows\",\n    \"type\": \"number\",\n    \"description\": \"How many rows were added.\"\n  },\n  {\n    \"path\": \"data.updates.updatedCells\",\n    \"type\": \"number\",\n    \"description\": \"How many cells were written.\"\n  }\n];\n\nexport const googleSheetsRowKind: NodeKindDefinition = defineConnectorKind(GOOGLE_SHEETS_ROW_META, {\n  name: GOOGLE_SHEETS_ROW_KIND,\n  aliases: [\"google_sheets_row\"],\n  label: \"Google Sheets row\",\n  description: \"Append a row to a Google Sheet.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_SHEETS_ROW_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"spreadsheetId\",\n      \"label\": \"Spreadsheet ID\",\n      \"required\": true,\n      \"description\": \"The long id from the sheet's URL: docs.google.com/spreadsheets/d/THIS_PART/edit.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"range\",\n      \"label\": \"Range\",\n      \"required\": true,\n      \"default\": \"Sheet1!A:Z\",\n      \"description\": \"Where to append, in A1 notation. Google finds the last row of this range and writes below it.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"values\",\n      \"label\": \"Row values\",\n      \"required\": true,\n      \"description\": \"The cells of the row, comma separated. Left to right from the start of the range.\"\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"valueInputOption\",\n      \"label\": \"How to interpret the values\",\n      \"default\": \"USER_ENTERED\",\n      \"description\": \"USER_ENTERED parses the cells the way typing them would -- so =SUM(A1:A2) becomes a formula and 1/2/26 becomes a date. RAW stores exactly the characters given.\",\n      \"options\": [\n        {\n          \"value\": \"USER_ENTERED\",\n          \"label\": \"As if typed (formulas and dates parsed)\"\n        },\n        {\n          \"value\": \"RAW\",\n          \"label\": \"Exactly as given\"\n        }\n      ]\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"insertDataOption\",\n      \"label\": \"When the range already has data below\",\n      \"default\": \"INSERT_ROWS\",\n      \"description\": \"INSERT_ROWS pushes existing rows down. OVERWRITE writes into them.\",\n      \"options\": [\n        {\n          \"value\": \"INSERT_ROWS\",\n          \"label\": \"Insert new rows\"\n        },\n        {\n          \"value\": \"OVERWRITE\",\n          \"label\": \"Overwrite what is there\"\n        }\n      ]\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_SHEETS_ROW_META, config as Record<string, unknown>, \"append a row\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/row-append.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleSheetsRowKind } from \"./kinds/row-append.js\";\n\n/** Every Google Sheets kind, for a host that registers the lot. */\nexport const GOOGLE_SHEETS_KINDS: NodeKindDefinition[] = [\n  googleSheetsRowKind,\n];\n"]}

package/dist/index.d.cts

@@ -80,6 +80,11 @@ declare const GOOGLE_SHEETS_CREDENTIALS: readonly [{
  * The access token lasts 3600 seconds. A host that never refreshes will work
  * all afternoon and be broken by morning, which is why the lifetime is stated
  * rather than left to be discovered.
+ *
+ * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may
+ * safely be retried and may run concurrently. That is stated rather than
+ * assumed because the opposite — a provider that spends the token and revokes
+ * the grant on a replay — looks identical until it happens.
  */
 declare const GOOGLE_SHEETS_OAUTH: {
     readonly flow: "authorization_code";
@@ -88,6 +93,7 @@ declare const GOOGLE_SHEETS_OAUTH: {
     readonly scopes: readonly ["https://www.googleapis.com/auth/spreadsheets"];
     readonly accessTokenCredential: "accessToken";
     readonly refreshTokenCredential: "refreshToken";
+    readonly refreshTokenRotates: false;
     readonly accessTokenTtlSeconds: 3600;
 };
 /** Build a Google Sheets node's connector metadata from the operation it performs. */

package/dist/index.d.ts

@@ -80,6 +80,11 @@ declare const GOOGLE_SHEETS_CREDENTIALS: readonly [{
  * The access token lasts 3600 seconds. A host that never refreshes will work
  * all afternoon and be broken by morning, which is why the lifetime is stated
  * rather than left to be discovered.
+ *
+ * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may
+ * safely be retried and may run concurrently. That is stated rather than
+ * assumed because the opposite — a provider that spends the token and revokes
+ * the grant on a replay — looks identical until it happens.
  */
 declare const GOOGLE_SHEETS_OAUTH: {
     readonly flow: "authorization_code";
@@ -88,6 +93,7 @@ declare const GOOGLE_SHEETS_OAUTH: {
     readonly scopes: readonly ["https://www.googleapis.com/auth/spreadsheets"];
     readonly accessTokenCredential: "accessToken";
     readonly refreshTokenCredential: "refreshToken";
+    readonly refreshTokenRotates: false;
     readonly accessTokenTtlSeconds: 3600;
 };
 /** Build a Google Sheets node's connector metadata from the operation it performs. */

package/dist/index.js

@@ -47,6 +47,7 @@ var GOOGLE_SHEETS_OAUTH = {
   ],
   "accessTokenCredential": "accessToken",
   "refreshTokenCredential": "refreshToken",
+  "refreshTokenRotates": false,
   "accessTokenTtlSeconds": 3600
 };
 function googleSheetsMeta(role, operation, docs) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/service.ts","../src/kinds/row-append.ts","../src/index.ts"],"names":[],"mappings":";;;AAmCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,qBAAA,GAAwB;AAAA,EACnC,OAAA,EAAS,eAAA;AAAA,EACT,YAAA,EAAc,eAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,yBAAA,GAA4B;AAAA,EACvC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAeO,IAAM,mBAAA,GAAsB;AAAA,EACjC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,uBAAA,EAAyB;AAC3B;AAGO,SAAS,gBAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,qBAAA,EAAuB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC3D;ACtFO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,2BAAA,GAA8B;AAEpC,IAAM,sBAAA,GAAyB,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,uFAAuF;AAUjK,IAAM,wBAAA,GAA0C;AAAA,EACrD;AAAA,IACE,MAAA,EAAQ,oBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,0BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,mBAAA,GAA0C,oBAAoB,sBAAA,EAAwB;AAAA,EACjG,IAAA,EAAM,sBAAA;AAAA,EACN,OAAA,EAAS,CAAC,mBAAmB,CAAA;AAAA,EAC7B,KAAA,EAAO,mBAAA;AAAA,EACP,WAAA,EAAa,iCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,wBAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,eAAA;AAAA,MACP,OAAA,EAAS,gBAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,OAAA;AAAA,MACP,OAAA,EAAS,OAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW,YAAA;AAAA,MACX,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,QAAA;AAAA,MACP,OAAA,EAAS,YAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,6BAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,aAAA,EAAe,iKAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,cAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,KAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF,KACF;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW,aAAA;AAAA,MACX,aAAA,EAAe,oEAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,aAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,WAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF;AACF,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,sBAAA,EAAwB,QAAmC,cAAc;AACvF,CAAC;;;ACzGM,IAAM,mBAAA,GAA4C;AAAA,EACvD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's identity on the authoring surface, shared by every Google\n * Sheets node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google has no sandbox for Sheets. A test spreadsheet is a real one in a real\n * Drive, so every append is real -- point this at a scratch sheet, not a\n * production one. The faker is the only way to develop against it without\n * touching a document.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_SHEETS_SERVICE = {\n  service: \"google_sheets\",\n  serviceTitle: \"Google Sheets\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Sheets connection holds. */\nexport const GOOGLE_SHEETS_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console -> APIs & Services -> Credentials. ONE value for the whole installation, not per connected account.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account, and it expires after ONE HOUR. The host refreshes it with the refresh token.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account. Google issues one only when the consent request asks for offline access; without it the connection dies within the hour.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Sheets requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n */\nexport const GOOGLE_SHEETS_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/spreadsheets\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Sheets node's connector metadata from the operation it performs. */\nexport function googleSheetsMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_SHEETS_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/row-append.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/row-append.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets row — Append a row to a Google Sheet.\n *\n * https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleSheetsMeta } from \"../service.js\";\n\nexport const GOOGLE_SHEETS_ROW_KIND = \"@particle-academy/google_sheets_row\";\nexport const GOOGLE_SHEETS_ROW_OPERATION = \"row_append\";\n\nexport const GOOGLE_SHEETS_ROW_META = googleSheetsMeta(\"action\", \"append a row\", \"https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_SHEETS_ROW_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.spreadsheetId\",\n    \"type\": \"string\",\n    \"description\": \"The spreadsheet that was written to.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRange\",\n    \"type\": \"string\",\n    \"description\": \"The range Google actually wrote, in A1 notation. NOT the range that was asked for -- append finds the first empty row below it.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRows\",\n    \"type\": \"number\",\n    \"description\": \"How many rows were added.\"\n  },\n  {\n    \"path\": \"data.updates.updatedCells\",\n    \"type\": \"number\",\n    \"description\": \"How many cells were written.\"\n  }\n];\n\nexport const googleSheetsRowKind: NodeKindDefinition = defineConnectorKind(GOOGLE_SHEETS_ROW_META, {\n  name: GOOGLE_SHEETS_ROW_KIND,\n  aliases: [\"google_sheets_row\"],\n  label: \"Google Sheets row\",\n  description: \"Append a row to a Google Sheet.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_SHEETS_ROW_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"spreadsheetId\",\n      \"label\": \"Spreadsheet ID\",\n      \"required\": true,\n      \"description\": \"The long id from the sheet's URL: docs.google.com/spreadsheets/d/THIS_PART/edit.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"range\",\n      \"label\": \"Range\",\n      \"required\": true,\n      \"default\": \"Sheet1!A:Z\",\n      \"description\": \"Where to append, in A1 notation. Google finds the last row of this range and writes below it.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"values\",\n      \"label\": \"Row values\",\n      \"required\": true,\n      \"description\": \"The cells of the row, comma separated. Left to right from the start of the range.\"\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"valueInputOption\",\n      \"label\": \"How to interpret the values\",\n      \"default\": \"USER_ENTERED\",\n      \"description\": \"USER_ENTERED parses the cells the way typing them would -- so =SUM(A1:A2) becomes a formula and 1/2/26 becomes a date. RAW stores exactly the characters given.\",\n      \"options\": [\n        {\n          \"value\": \"USER_ENTERED\",\n          \"label\": \"As if typed (formulas and dates parsed)\"\n        },\n        {\n          \"value\": \"RAW\",\n          \"label\": \"Exactly as given\"\n        }\n      ]\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"insertDataOption\",\n      \"label\": \"When the range already has data below\",\n      \"default\": \"INSERT_ROWS\",\n      \"description\": \"INSERT_ROWS pushes existing rows down. OVERWRITE writes into them.\",\n      \"options\": [\n        {\n          \"value\": \"INSERT_ROWS\",\n          \"label\": \"Insert new rows\"\n        },\n        {\n          \"value\": \"OVERWRITE\",\n          \"label\": \"Overwrite what is there\"\n        }\n      ]\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_SHEETS_ROW_META, config as Record<string, unknown>, \"append a row\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/row-append.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleSheetsRowKind } from \"./kinds/row-append.js\";\n\n/** Every Google Sheets kind, for a host that registers the lot. */\nexport const GOOGLE_SHEETS_KINDS: NodeKindDefinition[] = [\n  googleSheetsRowKind,\n];\n"]}
+{"version":3,"sources":["../src/service.ts","../src/kinds/row-append.ts","../src/index.ts"],"names":[],"mappings":";;;AAmCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,qBAAA,GAAwB;AAAA,EACnC,OAAA,EAAS,eAAA;AAAA,EACT,YAAA,EAAc,eAAA;AAAA,EACd,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,yBAAA,GAA4B;AAAA,EACvC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAoBO,IAAM,mBAAA,GAAsB;AAAA,EACjC,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,gBAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,qBAAA,EAAuB,IAAA,EAAM,WAAW,IAAA,EAAK;AAC3D;AC5FO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,2BAAA,GAA8B;AAEpC,IAAM,sBAAA,GAAyB,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,uFAAuF;AAUjK,IAAM,wBAAA,GAA0C;AAAA,EACrD;AAAA,IACE,MAAA,EAAQ,oBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,0BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,2BAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,mBAAA,GAA0C,oBAAoB,sBAAA,EAAwB;AAAA,EACjG,IAAA,EAAM,sBAAA;AAAA,EACN,OAAA,EAAS,CAAC,mBAAmB,CAAA;AAAA,EAC7B,KAAA,EAAO,mBAAA;AAAA,EACP,WAAA,EAAa,iCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,wBAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,eAAA;AAAA,MACP,OAAA,EAAS,gBAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,OAAA;AAAA,MACP,OAAA,EAAS,OAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW,YAAA;AAAA,MACX,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,QAAA;AAAA,MACP,OAAA,EAAS,YAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,6BAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,aAAA,EAAe,iKAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,cAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,KAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF,KACF;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,QAAA;AAAA,MACR,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW,aAAA;AAAA,MACX,aAAA,EAAe,oEAAA;AAAA,MACf,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,aAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAAA,QACA;AAAA,UACE,OAAA,EAAS,WAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX;AACF;AACF,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,sBAAA,EAAwB,QAAmC,cAAc;AACvF,CAAC;;;ACzGM,IAAM,mBAAA,GAA4C;AAAA,EACvD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's identity on the authoring surface, shared by every Google\n * Sheets node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Google has no sandbox for Sheets. A test spreadsheet is a real one in a real\n * Drive, so every append is real -- point this at a scratch sheet, not a\n * production one. The faker is the only way to develop against it without\n * touching a document.\n */\n\nimport type { ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_SHEETS_SERVICE = {\n  service: \"google_sheets\",\n  serviceTitle: \"Google Sheets\",\n  domain: \"productivity\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/** The credentials a Google Sheets connection holds. */\nexport const GOOGLE_SHEETS_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console -> APIs & Services -> Credentials. ONE value for the whole installation, not per connected account.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account, and it expires after ONE HOUR. The host refreshes it with the refresh token.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected Google account. Google issues one only when the consent request asks for offline access; without it the connection dies within the hour.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Sheets requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const GOOGLE_SHEETS_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/spreadsheets\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Sheets node's connector metadata from the operation it performs. */\nexport function googleSheetsMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_SHEETS_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/row-append.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/row-append.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets row — Append a row to a Google Sheet.\n *\n * https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleSheetsMeta } from \"../service.js\";\n\nexport const GOOGLE_SHEETS_ROW_KIND = \"@particle-academy/google_sheets_row\";\nexport const GOOGLE_SHEETS_ROW_OPERATION = \"row_append\";\n\nexport const GOOGLE_SHEETS_ROW_META = googleSheetsMeta(\"action\", \"append a row\", \"https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets.values/append\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_SHEETS_ROW_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.spreadsheetId\",\n    \"type\": \"string\",\n    \"description\": \"The spreadsheet that was written to.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRange\",\n    \"type\": \"string\",\n    \"description\": \"The range Google actually wrote, in A1 notation. NOT the range that was asked for -- append finds the first empty row below it.\"\n  },\n  {\n    \"path\": \"data.updates.updatedRows\",\n    \"type\": \"number\",\n    \"description\": \"How many rows were added.\"\n  },\n  {\n    \"path\": \"data.updates.updatedCells\",\n    \"type\": \"number\",\n    \"description\": \"How many cells were written.\"\n  }\n];\n\nexport const googleSheetsRowKind: NodeKindDefinition = defineConnectorKind(GOOGLE_SHEETS_ROW_META, {\n  name: GOOGLE_SHEETS_ROW_KIND,\n  aliases: [\"google_sheets_row\"],\n  label: \"Google Sheets row\",\n  description: \"Append a row to a Google Sheet.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: GOOGLE_SHEETS_ROW_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"spreadsheetId\",\n      \"label\": \"Spreadsheet ID\",\n      \"required\": true,\n      \"description\": \"The long id from the sheet's URL: docs.google.com/spreadsheets/d/THIS_PART/edit.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"range\",\n      \"label\": \"Range\",\n      \"required\": true,\n      \"default\": \"Sheet1!A:Z\",\n      \"description\": \"Where to append, in A1 notation. Google finds the last row of this range and writes below it.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"values\",\n      \"label\": \"Row values\",\n      \"required\": true,\n      \"description\": \"The cells of the row, comma separated. Left to right from the start of the range.\"\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"valueInputOption\",\n      \"label\": \"How to interpret the values\",\n      \"default\": \"USER_ENTERED\",\n      \"description\": \"USER_ENTERED parses the cells the way typing them would -- so =SUM(A1:A2) becomes a formula and 1/2/26 becomes a date. RAW stores exactly the characters given.\",\n      \"options\": [\n        {\n          \"value\": \"USER_ENTERED\",\n          \"label\": \"As if typed (formulas and dates parsed)\"\n        },\n        {\n          \"value\": \"RAW\",\n          \"label\": \"Exactly as given\"\n        }\n      ]\n    },\n    {\n      \"type\": \"select\",\n      \"key\": \"insertDataOption\",\n      \"label\": \"When the range already has data below\",\n      \"default\": \"INSERT_ROWS\",\n      \"description\": \"INSERT_ROWS pushes existing rows down. OVERWRITE writes into them.\",\n      \"options\": [\n        {\n          \"value\": \"INSERT_ROWS\",\n          \"label\": \"Insert new rows\"\n        },\n        {\n          \"value\": \"OVERWRITE\",\n          \"label\": \"Overwrite what is there\"\n        }\n      ]\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_SHEETS_ROW_META, config as Record<string, unknown>, \"append a row\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_sheets\n */\n\n/**\n * Google Sheets's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/row-append.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleSheetsRowKind } from \"./kinds/row-append.js\";\n\n/** Every Google Sheets kind, for a host that registers the lot. */\nexport const GOOGLE_SHEETS_KINDS: NodeKindDefinition[] = [\n  googleSheetsRowKind,\n];\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/google-sheets-ui",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Google Sheets's authoring surface for fancy-flow — the node kinds, their config schemas and their declared output shapes. React on every host; carries no executor.",
   "repository": {
     "type": "git",