@particle-academy/youtube-ui 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -4,6 +4,31 @@ All notable changes to `@particle-academy/youtube-ui`,
 `@particle-academy/youtube-js`, `particle-academy/youtube-php` and
 `fancy-youtube`.
 
+## [0.4.0] — 2026-11-08
+
+### Added
+
+- **One Google consent grant, shared by every Google connector** (`oauth.grant:
+  "google"`), for an org-level Google connection: one OAuth client, one consent
+  and one refresh token per person, with each feature's scopes asked for when it
+  is first used. Declared in the manifest, the `-ui` package's OAuth constant,
+  the README and the registry index:
+  - `authorizeParams`: `access_type=offline` and `include_granted_scopes=true`.
+    A refresh token comes back only on the FIRST code exchange, so keep the stored
+    one when an exchange returns none.
+  - `revoke`: POST `https://oauth2.googleapis.com/revoke` with `token`, and
+    `scope: "grant"`. **Revoking removes the person's WHOLE Google grant, every
+    Google connector**, so a per-feature disconnect stops using that feature's
+    scopes locally and only a full Google disconnect revokes.
+  - `identity`: identify the account by the id_token's `sub` (request `openid`;
+    issuer `https://accounts.google.com` or `accounts.google.com`; audience is
+    the `clientId`), never by email, which Google says is neither unique nor
+    permanent.
+  `restrictedScopes` is empty: none of this connector's scopes is restricted.
+
+  Nothing a request sends has changed; this is what a host needs to run the
+  connection.
+
 ## [0.3.0] — 2026-11-08
 
 ### Added

package/README.md

@@ -55,6 +55,13 @@ YouTube uses OAuth2 (authorization_code). The package DECLARES the exchange; the
 - **Scopes** — `https://www.googleapis.com/auth/youtube.force-ssl`
 - **Access token lifetime** — 3600 seconds (1 hours). A host that never refreshes works all afternoon and is broken by morning.
 
+**One consent grant, shared** (`grant: "google"`). Every connector declaring the same grant can run on ONE OAuth client, with one consent and one refresh token per person.
+
+- **Authorize with** `access_type=offline`, `include_granted_scopes=true`. Ask for a feature's scopes when it is first used; the new token covers every scope granted before. A refresh token comes back only on the FIRST exchange, so keep the stored one when an exchange returns none.
+- **Revoke** — POST https://oauth2.googleapis.com/revoke with `token`. **It removes the WHOLE grant**: every connector sharing it, not only this one. A per-feature disconnect stops using that feature's scopes locally; only a full disconnect revokes.
+- **Identify the account by `sub`**: request `openid`, then verify the token response's id_token (issuer `https://accounts.google.com` or `accounts.google.com`, keys at https://www.googleapis.com/oauth2/v3/certs, audience = `clientId`). Never key a connection by email.
+- **No restricted scopes** in this connector.
+
 The refresh tokens do **not** rotate: the same one is reusable, so a refresh may safely be retried and may run concurrently. Stated rather than assumed, because the opposite — a provider that spends the token and revokes the grant on a replay — looks identical until it happens.
 
 ### The estate

package/dist/index.cjs

@@ -50,7 +50,28 @@ var YOUTUBE_OAUTH = {
   "accessTokenCredential": "accessToken",
   "refreshTokenCredential": "refreshToken",
   "refreshTokenRotates": false,
-  "accessTokenTtlSeconds": 3600
+  "accessTokenTtlSeconds": 3600,
+  "grant": "google",
+  "authorizeParams": {
+    "access_type": "offline",
+    "include_granted_scopes": "true"
+  },
+  "revoke": {
+    "url": "https://oauth2.googleapis.com/revoke",
+    "param": "token",
+    "scope": "grant"
+  },
+  "identity": {
+    "scope": "openid",
+    "claim": "sub",
+    "issuers": [
+      "https://accounts.google.com",
+      "accounts.google.com"
+    ],
+    "jwksUrl": "https://www.googleapis.com/oauth2/v3/certs",
+    "audienceCredential": "clientId"
+  },
+  "restrictedScopes": []
 };
 function youtubeMeta(role, operation, docs) {
   return { ...YOUTUBE_SERVICE, role, operation, docs };

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/service.ts","../src/kinds/playlist-item-insert.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAgCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,eAAA,GAAkB;AAAA,EAC7B,OAAA,EAAS,SAAA;AAAA,EACT,YAAA,EAAc,SAAA;AAAA,EACd,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS;AACX;AA+BO,IAAM,mBAAA,GAAsB;AAAA,EACjC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAmBO,IAAM,aAAA,GAAgB;AAAA,EAC3B,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,WAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,eAAA,EAAiB,IAAA,EAAM,WAAW,IAAA,EAAK;AACrD;ACpHO,IAAM,0BAAA,GAA6B;AACnC,IAAM,+BAAA,GAAkC;AAExC,IAAM,0BAAA,GAA6B,WAAA,CAAY,QAAA,EAAU,2BAAA,EAA6B,oEAAoE;AAU1J,IAAM,4BAAA,GAA8C;AAAA,EACzD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,yBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,iCAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,uBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,uBAAA,GAA8CA,+BAAoB,0BAAA,EAA4B;AAAA,EACzG,IAAA,EAAM,0BAAA;AAAA,EACN,OAAA,EAAS,CAAC,uBAAuB,CAAA;AAAA,EACjC,KAAA,EAAO,uBAAA;AAAA,EACP,WAAA,EAAa,oCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,4BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,YAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,UAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,0BAAA,EAA4B,QAAmC,2BAA2B;AACxG,CAAC;;;ACpEM,IAAM,aAAA,GAAsC;AAAA,EACjD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's identity on the authoring surface, shared by every YouTube node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * YouTube has no sandbox. Every live-mode add changes a real playlist; use the\n * faker during development and remove live test items afterward.\n */\n\nimport type { ConnectorDomain, ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const YOUTUBE_SERVICE = {\n  service: \"youtube\",\n  serviceTitle: \"YouTube\",\n  domain: \"marketing\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/**\n * Every connector domain weaver knows, pinned against fancy-flow's union.\n *\n * A closed set copied into three codebases stays correct only while something\n * MAKES it: this line fails to compile the moment weaver carries a value\n * fancy-flow does not, including the values no provider uses yet.\n */\nconst WEAVER_DOMAINS: readonly ConnectorDomain[] = [\n  \"payments\",\n  \"commerce\",\n  \"messaging\",\n  \"email\",\n  \"crm\",\n  \"support\",\n  \"storage\",\n  \"calendar\",\n  \"productivity\",\n  \"database\",\n  \"devtools\",\n  \"analytics\",\n  \"marketing\",\n  \"ai\",\n  \"forms\",\n  \"hr\",\n  \"geo\"\n];\nvoid WEAVER_DOMAINS;\n\n/** The credentials a YouTube connection holds. */\nexport const YOUTUBE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange YouTube requires — DECLARED here, performed by the host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const YOUTUBE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/youtube.force-ssl\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a YouTube node's connector metadata from the operation it performs. */\nexport function youtubeMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...YOUTUBE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/playlist-item-insert.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/playlist-item-insert.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube playlist item — Add a video to a YouTube playlist.\n *\n * https://developers.google.com/youtube/v3/docs/playlistItems/insert\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { youtubeMeta } from \"../service.js\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_KIND = \"@particle-academy/youtube_playlist_item\";\nexport const YOUTUBE_PLAYLIST_ITEM_OPERATION = \"playlist_item_insert\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_META = youtubeMeta(\"action\", \"add a video to a playlist\", \"https://developers.google.com/youtube/v3/docs/playlistItems/insert\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const YOUTUBE_PLAYLIST_ITEM_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"YouTube's unique id for the new playlist item.\"\n  },\n  {\n    \"path\": \"data.kind\",\n    \"type\": \"string\",\n    \"description\": \"The fixed resource kind `youtube#playlistItem`.\"\n  },\n  {\n    \"path\": \"data.snippet.playlistId\",\n    \"type\": \"string\",\n    \"description\": \"The playlist containing the item.\"\n  },\n  {\n    \"path\": \"data.snippet.resourceId.videoId\",\n    \"type\": \"string\",\n    \"description\": \"The video added to the playlist.\"\n  },\n  {\n    \"path\": \"data.snippet.position\",\n    \"type\": \"number\",\n    \"description\": \"The item's zero-based position in the playlist.\"\n  }\n];\n\nexport const youtubePlaylistItemKind: NodeKindDefinition = defineConnectorKind(YOUTUBE_PLAYLIST_ITEM_META, {\n  name: YOUTUBE_PLAYLIST_ITEM_KIND,\n  aliases: [\"youtube_playlist_item\"],\n  label: \"YouTube playlist item\",\n  description: \"Add a video to a YouTube playlist.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: YOUTUBE_PLAYLIST_ITEM_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"playlistId\",\n      \"label\": \"Playlist ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the playlist to add the video to.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"videoId\",\n      \"label\": \"Video ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the video to add.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(YOUTUBE_PLAYLIST_ITEM_META, config as Record<string, unknown>, \"add a video to a playlist\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/playlist-item-insert.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { youtubePlaylistItemKind } from \"./kinds/playlist-item-insert.js\";\n\n/** Every YouTube kind, for a host that registers the lot. */\nexport const YOUTUBE_KINDS: NodeKindDefinition[] = [\n  youtubePlaylistItemKind,\n];\n"]}
+{"version":3,"sources":["../src/service.ts","../src/kinds/playlist-item-insert.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAgCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,eAAA,GAAkB;AAAA,EAC7B,OAAA,EAAS,SAAA;AAAA,EACT,YAAA,EAAc,SAAA;AAAA,EACd,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS;AACX;AA+BO,IAAM,mBAAA,GAAsB;AAAA,EACjC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AA0BO,IAAM,aAAA,GAAgB;AAAA,EAC3B,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB,IAAA;AAAA,EACzB,OAAA,EAAS,QAAA;AAAA,EACT,iBAAA,EAAmB;AAAA,IACjB,aAAA,EAAe,SAAA;AAAA,IACf,wBAAA,EAA0B;AAAA,GAC5B;AAAA,EACA,QAAA,EAAU;AAAA,IACR,KAAA,EAAO,sCAAA;AAAA,IACP,OAAA,EAAS,OAAA;AAAA,IACT,OAAA,EAAS;AAAA,GACX;AAAA,EACA,UAAA,EAAY;AAAA,IACV,OAAA,EAAS,QAAA;AAAA,IACT,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW;AAAA,MACT,6BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,SAAA,EAAW,4CAAA;AAAA,IACX,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,oBAAoB;AACtB;AAGO,SAAS,WAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,eAAA,EAAiB,IAAA,EAAM,WAAW,IAAA,EAAK;AACrD;AChJO,IAAM,0BAAA,GAA6B;AACnC,IAAM,+BAAA,GAAkC;AAExC,IAAM,0BAAA,GAA6B,WAAA,CAAY,QAAA,EAAU,2BAAA,EAA6B,oEAAoE;AAU1J,IAAM,4BAAA,GAA8C;AAAA,EACzD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,yBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,iCAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,uBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,uBAAA,GAA8CA,+BAAoB,0BAAA,EAA4B;AAAA,EACzG,IAAA,EAAM,0BAAA;AAAA,EACN,OAAA,EAAS,CAAC,uBAAuB,CAAA;AAAA,EACjC,KAAA,EAAO,uBAAA;AAAA,EACP,WAAA,EAAa,oCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,4BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,YAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,UAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,0BAAA,EAA4B,QAAmC,2BAA2B;AACxG,CAAC;;;ACpEM,IAAM,aAAA,GAAsC;AAAA,EACjD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's identity on the authoring surface, shared by every YouTube node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * YouTube has no sandbox. Every live-mode add changes a real playlist; use the\n * faker during development and remove live test items afterward.\n */\n\nimport type { ConnectorDomain, ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const YOUTUBE_SERVICE = {\n  service: \"youtube\",\n  serviceTitle: \"YouTube\",\n  domain: \"marketing\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/**\n * Every connector domain weaver knows, pinned against fancy-flow's union.\n *\n * A closed set copied into three codebases stays correct only while something\n * MAKES it: this line fails to compile the moment weaver carries a value\n * fancy-flow does not, including the values no provider uses yet.\n */\nconst WEAVER_DOMAINS: readonly ConnectorDomain[] = [\n  \"payments\",\n  \"commerce\",\n  \"messaging\",\n  \"email\",\n  \"crm\",\n  \"support\",\n  \"storage\",\n  \"calendar\",\n  \"productivity\",\n  \"database\",\n  \"devtools\",\n  \"analytics\",\n  \"marketing\",\n  \"ai\",\n  \"forms\",\n  \"hr\",\n  \"geo\"\n];\nvoid WEAVER_DOMAINS;\n\n/** The credentials a YouTube connection holds. */\nexport const YOUTUBE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange YouTube requires — DECLARED here, performed by the host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n *\n * Its consent grant is SHARED with every connector declaring grant \"google\":\n * one OAuth client, one consent and one refresh token per person, scopes added\n * as features are first used (authorizeParams). Revoking removes the WHOLE\n * grant, so only a full disconnect revokes; a per-feature disconnect stops\n * using the scope locally. Identify the account by the id_token's sub, never\n * by email.\n */\nexport const YOUTUBE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/youtube.force-ssl\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600,\n  \"grant\": \"google\",\n  \"authorizeParams\": {\n    \"access_type\": \"offline\",\n    \"include_granted_scopes\": \"true\"\n  },\n  \"revoke\": {\n    \"url\": \"https://oauth2.googleapis.com/revoke\",\n    \"param\": \"token\",\n    \"scope\": \"grant\"\n  },\n  \"identity\": {\n    \"scope\": \"openid\",\n    \"claim\": \"sub\",\n    \"issuers\": [\n      \"https://accounts.google.com\",\n      \"accounts.google.com\"\n    ],\n    \"jwksUrl\": \"https://www.googleapis.com/oauth2/v3/certs\",\n    \"audienceCredential\": \"clientId\"\n  },\n  \"restrictedScopes\": []\n} as const;\n\n/** Build a YouTube node's connector metadata from the operation it performs. */\nexport function youtubeMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...YOUTUBE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/playlist-item-insert.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/playlist-item-insert.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube playlist item — Add a video to a YouTube playlist.\n *\n * https://developers.google.com/youtube/v3/docs/playlistItems/insert\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { youtubeMeta } from \"../service.js\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_KIND = \"@particle-academy/youtube_playlist_item\";\nexport const YOUTUBE_PLAYLIST_ITEM_OPERATION = \"playlist_item_insert\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_META = youtubeMeta(\"action\", \"add a video to a playlist\", \"https://developers.google.com/youtube/v3/docs/playlistItems/insert\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const YOUTUBE_PLAYLIST_ITEM_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"YouTube's unique id for the new playlist item.\"\n  },\n  {\n    \"path\": \"data.kind\",\n    \"type\": \"string\",\n    \"description\": \"The fixed resource kind `youtube#playlistItem`.\"\n  },\n  {\n    \"path\": \"data.snippet.playlistId\",\n    \"type\": \"string\",\n    \"description\": \"The playlist containing the item.\"\n  },\n  {\n    \"path\": \"data.snippet.resourceId.videoId\",\n    \"type\": \"string\",\n    \"description\": \"The video added to the playlist.\"\n  },\n  {\n    \"path\": \"data.snippet.position\",\n    \"type\": \"number\",\n    \"description\": \"The item's zero-based position in the playlist.\"\n  }\n];\n\nexport const youtubePlaylistItemKind: NodeKindDefinition = defineConnectorKind(YOUTUBE_PLAYLIST_ITEM_META, {\n  name: YOUTUBE_PLAYLIST_ITEM_KIND,\n  aliases: [\"youtube_playlist_item\"],\n  label: \"YouTube playlist item\",\n  description: \"Add a video to a YouTube playlist.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: YOUTUBE_PLAYLIST_ITEM_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"playlistId\",\n      \"label\": \"Playlist ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the playlist to add the video to.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"videoId\",\n      \"label\": \"Video ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the video to add.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(YOUTUBE_PLAYLIST_ITEM_META, config as Record<string, unknown>, \"add a video to a playlist\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/playlist-item-insert.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { youtubePlaylistItemKind } from \"./kinds/playlist-item-insert.js\";\n\n/** Every YouTube kind, for a host that registers the lot. */\nexport const YOUTUBE_KINDS: NodeKindDefinition[] = [\n  youtubePlaylistItemKind,\n];\n"]}

package/dist/index.d.cts

@@ -81,6 +81,13 @@ declare const YOUTUBE_CREDENTIALS: readonly [{
  * safely be retried and may run concurrently. That is stated rather than
  * assumed because the opposite — a provider that spends the token and revokes
  * the grant on a replay — looks identical until it happens.
+ *
+ * Its consent grant is SHARED with every connector declaring grant "google":
+ * one OAuth client, one consent and one refresh token per person, scopes added
+ * as features are first used (authorizeParams). Revoking removes the WHOLE
+ * grant, so only a full disconnect revokes; a per-feature disconnect stops
+ * using the scope locally. Identify the account by the id_token's sub, never
+ * by email.
  */
 declare const YOUTUBE_OAUTH: {
     readonly flow: "authorization_code";
@@ -91,6 +98,24 @@ declare const YOUTUBE_OAUTH: {
     readonly refreshTokenCredential: "refreshToken";
     readonly refreshTokenRotates: false;
     readonly accessTokenTtlSeconds: 3600;
+    readonly grant: "google";
+    readonly authorizeParams: {
+        readonly access_type: "offline";
+        readonly include_granted_scopes: "true";
+    };
+    readonly revoke: {
+        readonly url: "https://oauth2.googleapis.com/revoke";
+        readonly param: "token";
+        readonly scope: "grant";
+    };
+    readonly identity: {
+        readonly scope: "openid";
+        readonly claim: "sub";
+        readonly issuers: readonly ["https://accounts.google.com", "accounts.google.com"];
+        readonly jwksUrl: "https://www.googleapis.com/oauth2/v3/certs";
+        readonly audienceCredential: "clientId";
+    };
+    readonly restrictedScopes: readonly [];
 };
 /** Build a YouTube node's connector metadata from the operation it performs. */
 declare function youtubeMeta(role: ConnectorMeta["role"], operation: string, docs: string): ConnectorMeta;

package/dist/index.d.ts

@@ -81,6 +81,13 @@ declare const YOUTUBE_CREDENTIALS: readonly [{
  * safely be retried and may run concurrently. That is stated rather than
  * assumed because the opposite — a provider that spends the token and revokes
  * the grant on a replay — looks identical until it happens.
+ *
+ * Its consent grant is SHARED with every connector declaring grant "google":
+ * one OAuth client, one consent and one refresh token per person, scopes added
+ * as features are first used (authorizeParams). Revoking removes the WHOLE
+ * grant, so only a full disconnect revokes; a per-feature disconnect stops
+ * using the scope locally. Identify the account by the id_token's sub, never
+ * by email.
  */
 declare const YOUTUBE_OAUTH: {
     readonly flow: "authorization_code";
@@ -91,6 +98,24 @@ declare const YOUTUBE_OAUTH: {
     readonly refreshTokenCredential: "refreshToken";
     readonly refreshTokenRotates: false;
     readonly accessTokenTtlSeconds: 3600;
+    readonly grant: "google";
+    readonly authorizeParams: {
+        readonly access_type: "offline";
+        readonly include_granted_scopes: "true";
+    };
+    readonly revoke: {
+        readonly url: "https://oauth2.googleapis.com/revoke";
+        readonly param: "token";
+        readonly scope: "grant";
+    };
+    readonly identity: {
+        readonly scope: "openid";
+        readonly claim: "sub";
+        readonly issuers: readonly ["https://accounts.google.com", "accounts.google.com"];
+        readonly jwksUrl: "https://www.googleapis.com/oauth2/v3/certs";
+        readonly audienceCredential: "clientId";
+    };
+    readonly restrictedScopes: readonly [];
 };
 /** Build a YouTube node's connector metadata from the operation it performs. */
 declare function youtubeMeta(role: ConnectorMeta["role"], operation: string, docs: string): ConnectorMeta;

package/dist/index.js

@@ -48,7 +48,28 @@ var YOUTUBE_OAUTH = {
   "accessTokenCredential": "accessToken",
   "refreshTokenCredential": "refreshToken",
   "refreshTokenRotates": false,
-  "accessTokenTtlSeconds": 3600
+  "accessTokenTtlSeconds": 3600,
+  "grant": "google",
+  "authorizeParams": {
+    "access_type": "offline",
+    "include_granted_scopes": "true"
+  },
+  "revoke": {
+    "url": "https://oauth2.googleapis.com/revoke",
+    "param": "token",
+    "scope": "grant"
+  },
+  "identity": {
+    "scope": "openid",
+    "claim": "sub",
+    "issuers": [
+      "https://accounts.google.com",
+      "accounts.google.com"
+    ],
+    "jwksUrl": "https://www.googleapis.com/oauth2/v3/certs",
+    "audienceCredential": "clientId"
+  },
+  "restrictedScopes": []
 };
 function youtubeMeta(role, operation, docs) {
   return { ...YOUTUBE_SERVICE, role, operation, docs };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/service.ts","../src/kinds/playlist-item-insert.ts","../src/index.ts"],"names":[],"mappings":";;;AAgCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,eAAA,GAAkB;AAAA,EAC7B,OAAA,EAAS,SAAA;AAAA,EACT,YAAA,EAAc,SAAA;AAAA,EACd,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS;AACX;AA+BO,IAAM,mBAAA,GAAsB;AAAA,EACjC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AAmBO,IAAM,aAAA,GAAgB;AAAA,EAC3B,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,WAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,eAAA,EAAiB,IAAA,EAAM,WAAW,IAAA,EAAK;AACrD;ACpHO,IAAM,0BAAA,GAA6B;AACnC,IAAM,+BAAA,GAAkC;AAExC,IAAM,0BAAA,GAA6B,WAAA,CAAY,QAAA,EAAU,2BAAA,EAA6B,oEAAoE;AAU1J,IAAM,4BAAA,GAA8C;AAAA,EACzD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,yBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,iCAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,uBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,uBAAA,GAA8C,oBAAoB,0BAAA,EAA4B;AAAA,EACzG,IAAA,EAAM,0BAAA;AAAA,EACN,OAAA,EAAS,CAAC,uBAAuB,CAAA;AAAA,EACjC,KAAA,EAAO,uBAAA;AAAA,EACP,WAAA,EAAa,oCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,4BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,YAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,UAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,0BAAA,EAA4B,QAAmC,2BAA2B;AACxG,CAAC;;;ACpEM,IAAM,aAAA,GAAsC;AAAA,EACjD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's identity on the authoring surface, shared by every YouTube node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * YouTube has no sandbox. Every live-mode add changes a real playlist; use the\n * faker during development and remove live test items afterward.\n */\n\nimport type { ConnectorDomain, ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const YOUTUBE_SERVICE = {\n  service: \"youtube\",\n  serviceTitle: \"YouTube\",\n  domain: \"marketing\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/**\n * Every connector domain weaver knows, pinned against fancy-flow's union.\n *\n * A closed set copied into three codebases stays correct only while something\n * MAKES it: this line fails to compile the moment weaver carries a value\n * fancy-flow does not, including the values no provider uses yet.\n */\nconst WEAVER_DOMAINS: readonly ConnectorDomain[] = [\n  \"payments\",\n  \"commerce\",\n  \"messaging\",\n  \"email\",\n  \"crm\",\n  \"support\",\n  \"storage\",\n  \"calendar\",\n  \"productivity\",\n  \"database\",\n  \"devtools\",\n  \"analytics\",\n  \"marketing\",\n  \"ai\",\n  \"forms\",\n  \"hr\",\n  \"geo\"\n];\nvoid WEAVER_DOMAINS;\n\n/** The credentials a YouTube connection holds. */\nexport const YOUTUBE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange YouTube requires — DECLARED here, performed by the host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const YOUTUBE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/youtube.force-ssl\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a YouTube node's connector metadata from the operation it performs. */\nexport function youtubeMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...YOUTUBE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/playlist-item-insert.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/playlist-item-insert.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube playlist item — Add a video to a YouTube playlist.\n *\n * https://developers.google.com/youtube/v3/docs/playlistItems/insert\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { youtubeMeta } from \"../service.js\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_KIND = \"@particle-academy/youtube_playlist_item\";\nexport const YOUTUBE_PLAYLIST_ITEM_OPERATION = \"playlist_item_insert\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_META = youtubeMeta(\"action\", \"add a video to a playlist\", \"https://developers.google.com/youtube/v3/docs/playlistItems/insert\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const YOUTUBE_PLAYLIST_ITEM_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"YouTube's unique id for the new playlist item.\"\n  },\n  {\n    \"path\": \"data.kind\",\n    \"type\": \"string\",\n    \"description\": \"The fixed resource kind `youtube#playlistItem`.\"\n  },\n  {\n    \"path\": \"data.snippet.playlistId\",\n    \"type\": \"string\",\n    \"description\": \"The playlist containing the item.\"\n  },\n  {\n    \"path\": \"data.snippet.resourceId.videoId\",\n    \"type\": \"string\",\n    \"description\": \"The video added to the playlist.\"\n  },\n  {\n    \"path\": \"data.snippet.position\",\n    \"type\": \"number\",\n    \"description\": \"The item's zero-based position in the playlist.\"\n  }\n];\n\nexport const youtubePlaylistItemKind: NodeKindDefinition = defineConnectorKind(YOUTUBE_PLAYLIST_ITEM_META, {\n  name: YOUTUBE_PLAYLIST_ITEM_KIND,\n  aliases: [\"youtube_playlist_item\"],\n  label: \"YouTube playlist item\",\n  description: \"Add a video to a YouTube playlist.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: YOUTUBE_PLAYLIST_ITEM_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"playlistId\",\n      \"label\": \"Playlist ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the playlist to add the video to.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"videoId\",\n      \"label\": \"Video ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the video to add.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(YOUTUBE_PLAYLIST_ITEM_META, config as Record<string, unknown>, \"add a video to a playlist\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/playlist-item-insert.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { youtubePlaylistItemKind } from \"./kinds/playlist-item-insert.js\";\n\n/** Every YouTube kind, for a host that registers the lot. */\nexport const YOUTUBE_KINDS: NodeKindDefinition[] = [\n  youtubePlaylistItemKind,\n];\n"]}
+{"version":3,"sources":["../src/service.ts","../src/kinds/playlist-item-insert.ts","../src/index.ts"],"names":[],"mappings":";;;AAgCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,eAAA,GAAkB;AAAA,EAC7B,OAAA,EAAS,SAAA;AAAA,EACT,YAAA,EAAc,SAAA;AAAA,EACd,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS;AACX;AA+BO,IAAM,mBAAA,GAAsB;AAAA,EACjC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA;AAEZ;AA0BO,IAAM,aAAA,GAAgB;AAAA,EAC3B,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB,IAAA;AAAA,EACzB,OAAA,EAAS,QAAA;AAAA,EACT,iBAAA,EAAmB;AAAA,IACjB,aAAA,EAAe,SAAA;AAAA,IACf,wBAAA,EAA0B;AAAA,GAC5B;AAAA,EACA,QAAA,EAAU;AAAA,IACR,KAAA,EAAO,sCAAA;AAAA,IACP,OAAA,EAAS,OAAA;AAAA,IACT,OAAA,EAAS;AAAA,GACX;AAAA,EACA,UAAA,EAAY;AAAA,IACV,OAAA,EAAS,QAAA;AAAA,IACT,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW;AAAA,MACT,6BAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,SAAA,EAAW,4CAAA;AAAA,IACX,oBAAA,EAAsB;AAAA,GACxB;AAAA,EACA,oBAAoB;AACtB;AAGO,SAAS,WAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,eAAA,EAAiB,IAAA,EAAM,WAAW,IAAA,EAAK;AACrD;AChJO,IAAM,0BAAA,GAA6B;AACnC,IAAM,+BAAA,GAAkC;AAExC,IAAM,0BAAA,GAA6B,WAAA,CAAY,QAAA,EAAU,2BAAA,EAA6B,oEAAoE;AAU1J,IAAM,4BAAA,GAA8C;AAAA,EACzD;AAAA,IACE,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,WAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,yBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,iCAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA,GACjB;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,uBAAA;AAAA,IACR,MAAA,EAAQ,QAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,uBAAA,GAA8C,oBAAoB,0BAAA,EAA4B;AAAA,EACzG,IAAA,EAAM,0BAAA;AAAA,EACN,OAAA,EAAS,CAAC,uBAAuB,CAAA;AAAA,EACjC,KAAA,EAAO,uBAAA;AAAA,EACP,WAAA,EAAa,oCAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,kBAAA;AAAA,EACb,WAAA,EAAa,4BAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,YAAA;AAAA,MACP,OAAA,EAAS,aAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA,KACjB;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,SAAA;AAAA,MACP,OAAA,EAAS,UAAA;AAAA,MACT,UAAA,EAAY,IAAA;AAAA,MACZ,aAAA,EAAe;AAAA;AACjB,GACF;AAAA,EACA,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,0BAAA,EAA4B,QAAmC,2BAA2B;AACxG,CAAC;;;ACpEM,IAAM,aAAA,GAAsC;AAAA,EACjD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's identity on the authoring surface, shared by every YouTube node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * YouTube has no sandbox. Every live-mode add changes a real playlist; use the\n * faker during development and remove live test items afterward.\n */\n\nimport type { ConnectorDomain, ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const YOUTUBE_SERVICE = {\n  service: \"youtube\",\n  serviceTitle: \"YouTube\",\n  domain: \"marketing\",\n  sandbox: \"none\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/**\n * Every connector domain weaver knows, pinned against fancy-flow's union.\n *\n * A closed set copied into three codebases stays correct only while something\n * MAKES it: this line fails to compile the moment weaver carries a value\n * fancy-flow does not, including the values no provider uses yet.\n */\nconst WEAVER_DOMAINS: readonly ConnectorDomain[] = [\n  \"payments\",\n  \"commerce\",\n  \"messaging\",\n  \"email\",\n  \"crm\",\n  \"support\",\n  \"storage\",\n  \"calendar\",\n  \"productivity\",\n  \"database\",\n  \"devtools\",\n  \"analytics\",\n  \"marketing\",\n  \"ai\",\n  \"forms\",\n  \"hr\",\n  \"geo\"\n];\nvoid WEAVER_DOMAINS;\n\n/** The credentials a YouTube connection holds. */\nexport const YOUTUBE_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"From Google Cloud Console. One value for the whole installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The client secret for the same OAuth app.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; expires after one hour.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"Per connected YouTube account; the host uses it to refresh the access token.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange YouTube requires — DECLARED here, performed by the host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n *\n * Its consent grant is SHARED with every connector declaring grant \"google\":\n * one OAuth client, one consent and one refresh token per person, scopes added\n * as features are first used (authorizeParams). Revoking removes the WHOLE\n * grant, so only a full disconnect revokes; a per-feature disconnect stops\n * using the scope locally. Identify the account by the id_token's sub, never\n * by email.\n */\nexport const YOUTUBE_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/youtube.force-ssl\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600,\n  \"grant\": \"google\",\n  \"authorizeParams\": {\n    \"access_type\": \"offline\",\n    \"include_granted_scopes\": \"true\"\n  },\n  \"revoke\": {\n    \"url\": \"https://oauth2.googleapis.com/revoke\",\n    \"param\": \"token\",\n    \"scope\": \"grant\"\n  },\n  \"identity\": {\n    \"scope\": \"openid\",\n    \"claim\": \"sub\",\n    \"issuers\": [\n      \"https://accounts.google.com\",\n      \"accounts.google.com\"\n    ],\n    \"jwksUrl\": \"https://www.googleapis.com/oauth2/v3/certs\",\n    \"audienceCredential\": \"clientId\"\n  },\n  \"restrictedScopes\": []\n} as const;\n\n/** Build a YouTube node's connector metadata from the operation it performs. */\nexport function youtubeMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...YOUTUBE_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/playlist-item-insert.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/playlist-item-insert.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube playlist item — Add a video to a YouTube playlist.\n *\n * https://developers.google.com/youtube/v3/docs/playlistItems/insert\n *\n * `unsafe-to-replay`.\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { youtubeMeta } from \"../service.js\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_KIND = \"@particle-academy/youtube_playlist_item\";\nexport const YOUTUBE_PLAYLIST_ITEM_OPERATION = \"playlist_item_insert\";\n\nexport const YOUTUBE_PLAYLIST_ITEM_META = youtubeMeta(\"action\", \"add a video to a playlist\", \"https://developers.google.com/youtube/v3/docs/playlistItems/insert\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const YOUTUBE_PLAYLIST_ITEM_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.id\",\n    \"type\": \"string\",\n    \"description\": \"YouTube's unique id for the new playlist item.\"\n  },\n  {\n    \"path\": \"data.kind\",\n    \"type\": \"string\",\n    \"description\": \"The fixed resource kind `youtube#playlistItem`.\"\n  },\n  {\n    \"path\": \"data.snippet.playlistId\",\n    \"type\": \"string\",\n    \"description\": \"The playlist containing the item.\"\n  },\n  {\n    \"path\": \"data.snippet.resourceId.videoId\",\n    \"type\": \"string\",\n    \"description\": \"The video added to the playlist.\"\n  },\n  {\n    \"path\": \"data.snippet.position\",\n    \"type\": \"number\",\n    \"description\": \"The item's zero-based position in the playlist.\"\n  }\n];\n\nexport const youtubePlaylistItemKind: NodeKindDefinition = defineConnectorKind(YOUTUBE_PLAYLIST_ITEM_META, {\n  name: YOUTUBE_PLAYLIST_ITEM_KIND,\n  aliases: [\"youtube_playlist_item\"],\n  label: \"YouTube playlist item\",\n  description: \"Add a video to a YouTube playlist.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"unsafe-to-replay\",\n  outputShape: YOUTUBE_PLAYLIST_ITEM_OUTPUT,\n  configSchema: [\n    {\n      \"type\": \"text\",\n      \"key\": \"playlistId\",\n      \"label\": \"Playlist ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the playlist to add the video to.\"\n    },\n    {\n      \"type\": \"text\",\n      \"key\": \"videoId\",\n      \"label\": \"Video ID\",\n      \"required\": true,\n      \"description\": \"The YouTube id of the video to add.\"\n    }\n  ],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(YOUTUBE_PLAYLIST_ITEM_META, config as Record<string, unknown>, \"add a video to a playlist\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- youtube\n */\n\n/**\n * YouTube's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/playlist-item-insert.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { youtubePlaylistItemKind } from \"./kinds/playlist-item-insert.js\";\n\n/** Every YouTube kind, for a host that registers the lot. */\nexport const YOUTUBE_KINDS: NodeKindDefinition[] = [\n  youtubePlaylistItemKind,\n];\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/youtube-ui",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "YouTube's authoring surface for fancy-flow — the node kinds, their config schemas and their declared output shapes. React on every host; carries no executor.",
   "repository": {
     "type": "git",