@revenexx/studio-integrations 1.4.0 → 2.0.0

package/dist/runtime/components/Integrations/WorkflowEditor.vue

@@ -51,8 +51,7 @@ import { toast } from "vue-sonner";
 import WorkflowEdgeView from "./WorkflowEdgeView.vue";
 import { layoutWorkflowNodes } from "./workflowLayout";
 import { defaultsFor } from "../../utils/configDefaults";
-import { nodeDisplayLabel } from "../../utils/validationFindings";
-import { TRIGGER_TEMPLATES, findManifest, newestExecutableVersion } from "../../data/integrationNodeCatalog";
+import { TRIGGER_TEMPLATES, findManifest } from "../../data/integrationNodeCatalog";
 import { isTerminalManifest, portsForNode } from "../../data/nodeInputData";
 import { computeLoopBodies, iteratorNodeIds, nodeLoopData } from "../../data/loopBody";
 import { inputHandleId, outputHandleId, portFromHandleId } from "../../data/handleId";
@@ -865,17 +864,7 @@ function revealNode(id) {
     selectedId.value = id;
   }
 }
-function showNodeOnCanvas(id) {
-  const folded = collapsedGroupOf().get(id);
-  if (folded) patchGroup(folded.id, { collapsed: false });
-  if (blob.value.nodes.some((n) => n.id === id)) {
-    markBorn(id);
-    syncFromBlob();
-  }
-  if (paneReady.value) centerOnNode(id);
-  else pendingReveal.value = id;
-}
-defineExpose({ revealNode, showNodeOnCanvas, attachErrorStop });
+defineExpose({ revealNode });
 const selectedUpstreamOutputs = computed(() => {
   const id = selectedId.value;
   if (!id) return [];
@@ -1108,45 +1097,6 @@ function spliceIntoEdge(edgeId, payload) {
   syncFromBlob();
   push();
 }
-const STOP_AND_ERROR_SLUG = "revenexx:stop-and-error";
-function attachErrorStop(sourceNodeId, port) {
-  const source = blob.value.nodes.find((n) => n.id === sourceNodeId);
-  const version = newestExecutableVersion(STOP_AND_ERROR_SLUG);
-  const manifest = version ? findManifest(STOP_AND_ERROR_SLUG, version) : null;
-  if (!source || !manifest) return;
-  const at = nodePosition(sourceNodeId);
-  const id = `n-${Date.now()}`;
-  blob.value.nodes.push({
-    id,
-    nodeSlug: manifest.slug,
-    nodeVersion: manifest.version,
-    config: {
-      ...defaultsFor(manifest.config ?? []),
-      // The template convention verbatim: name the step that failed, then quote
-      // its own message, so the run record says what went wrong rather than only
-      // that something did. `errorCode` keeps the node's own default.
-      message: t("integration.editor.errorPath.message", {
-        label: nodeDisplayLabel(source),
-        nodeId: source.id,
-        port
-      })
-    },
-    // Below the source and on the grid, the way the templates place theirs.
-    // `freeSpotNear` keeps two of them off each other.
-    position: freeSpotNear({ x: at.x, y: at.y + 180 })
-  });
-  blob.value.edges.push({
-    id: `e-${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`,
-    from: { nodeId: sourceNodeId, output: port },
-    to: { nodeId: id, input: void 0 }
-  });
-  markBorn(id);
-  syncFromBlob();
-  if (paneReady.value) centerOnNode(id);
-  else pendingReveal.value = id;
-  push();
-  toast.info(t("integration.editor.errorPath.toast.added", { label: nodeDisplayLabel(source) }));
-}
 function nodeDims(id) {
   const d = flow.findNode(id)?.dimensions;
   return d && d.width > 0 ? d : { width: 220, height: 64 };

package/dist/runtime/components/Integrations/WorkflowEditor.vue.d.ts

@@ -42,42 +42,8 @@ type __VLS_Props = {
  * id that is on the canvas is in the blob by construction.
  */
 declare function revealNode(id: string): void;
-/**
- * Point at a node without opening it — for a reader who has to look at the
- * card's *surroundings* rather than at its settings.
- *
- * The deliberate difference from {@link revealNode} is the missing selection,
- * and with it the missing settings lightbox. That is the whole reason there are
- * two functions: the validation banner sends someone to a field at fault, and
- * the dialog is where that field is. The error-path advice sends them to a port
- * with nothing on it, and the question they have to answer — where should this
- * failure go? — is answered by the graph around the card, which a dialog over
- * the canvas covers up.
- *
- * Marked with the same pulse a newly created card gets, because the job is the
- * same one: say which of thirty cards is the one meant.
- */
-declare function showNodeOnCanvas(id: string): void;
-/**
- * Hang a Stop-and-Error step off a node's error output and wire it up
- * (specs/workflow-advice.md AC-3).
- *
- * The advice strip can tell an author their error output leads nowhere; on its
- * own that is a reprimand without a remedy, because the repair — drop a node,
- * pick the right one, connect it, write an expression quoting the failing step's
- * message — is four steps of tedium they have to already know. Every template we
- * ship does exactly this, twenty-five times over, so the shape is settled and
- * worth one click.
- *
- * Leaves the result unsaved and unopened, like every other insertion here: the
- * new step is highlighted and the author decides whether to keep it. Deleting it
- * is the undo, because this editor has no undo stack to hook into.
- */
-declare function attachErrorStop(sourceNodeId: string, port: string): void;
 declare const _default: import("vue").DefineComponent<__VLS_Props, {
     revealNode: typeof revealNode;
-    showNodeOnCanvas: typeof showNodeOnCanvas;
-    attachErrorStop: typeof attachErrorStop;
 }, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
     run: () => any;
     toggleActive: () => any;

package/dist/runtime/i18n/messages/de.json

@@ -28,8 +28,8 @@
   "integration.audit.table.column.actor": "Akteur",
   "integration.audit.table.column.resource": "Ressource",
   "integration.audit.table.column.when": "Wann",
-  "integration.audit.toast.copyFailed": "Kopieren fehlgeschlagen",
   "integration.audit.toast.copied": "Kopiert",
+  "integration.audit.toast.copyFailed": "Kopieren fehlgeschlagen",
   "integration.canvas.badge.trigger": "Trigger",
   "integration.canvas.color.amber": "Bernstein",
   "integration.canvas.color.blue": "Blau",
@@ -170,6 +170,8 @@
   "integration.credentials.error.oauthConnect": "OAuth-Verbindung konnte nicht gestartet werden.",
   "integration.credentials.error.save": "Zugangsdaten konnten nicht gespeichert werden.",
   "integration.credentials.error.testFailed": "Verbindungstest fehlgeschlagen.",
+  "integration.credentials.list.action.connect": "Verbinden",
+  "integration.credentials.list.action.connect.aria": "{name} verbinden",
   "integration.credentials.list.action.delete.aria": "{name} löschen",
   "integration.credentials.list.action.new": "Zugangsdaten anlegen",
   "integration.credentials.list.action.reconnect": "Erneut verbinden",
@@ -244,6 +246,7 @@
   "integration.credentials.sftpImport.empty": "Keine aktiven Plattform-SFTP-Konten. Zuerst eines unter Integration Studio → SFTP anlegen.",
   "integration.credentials.sftpImport.error.importFailed": "Import fehlgeschlagen.",
   "integration.credentials.sftpImport.error.readPassword": "Das Kontopasswort konnte nicht gelesen werden.",
+  "integration.credentials.sftpImport.state.loadFailed": "Die Plattform-SFTP-Konten konnten nicht geladen werden: {message}",
   "integration.credentials.sftpImport.state.loading": "SFTP-Konten werden geladen…",
   "integration.credentials.sftpImport.title": "Plattform-SFTP-Konto importieren",
   "integration.credentials.shared.action.testConnection": "Verbindung testen",
@@ -377,13 +380,6 @@
   "integration.editor.dropGhost.label": "Loslassen zum Hinzufügen",
   "integration.editor.emptyState.hint": "Ziehen Sie einen Trigger und eine Aktion aus dem Panel links.",
   "integration.editor.emptyState.title": "Leere Arbeitsfläche",
-  "integration.editor.errorPath.action.stop": "Fehlerausgang stoppen lassen",
-  "integration.editor.errorPath.advice": "{n} Node leitet Fehler auf einen Ausgang, an dem nichts hängt — der Fehler wird dort nicht behandelt. | {n} Nodes leiten Fehler auf einen Ausgang, an dem nichts hängt — der Fehler wird dort nicht behandelt.",
-  "integration.editor.errorPath.ariaFix": "Ausgang „{port}“ von {label} auf Stop und Fehler legen",
-  "integration.editor.errorPath.ariaReveal": "{label} auf der Canvas zeigen — der Ausgang „{port}“ ist nicht verbunden",
-  "integration.editor.errorPath.message": "{label} fehlgeschlagen: ${{ nodes.{nodeId}.outputs.{port}.message }}",
-  "integration.editor.errorPath.more": "…und {n} weitere",
-  "integration.editor.errorPath.toast.added": "Stop und Fehler an {label} gehängt — noch nicht gespeichert.",
   "integration.editor.event.toast.noneReceived": "Noch kein {topic}-Event empfangen.",
   "integration.editor.executionMode.async.hint": "Runs werden immer in die Warteschlange gestellt; der Trigger antwortet sofort.",
   "integration.editor.executionMode.async.label": "Nur asynchron",
@@ -983,10 +979,8 @@
   "integration.runs.toast.action.requested": "{action} angefordert",
   "integration.runs.toast.action.started": "Run #{id} gestartet",
   "integration.runs.toast.terminate.confirm": "Run #{id} terminieren?",
-  "integration.schedules.cell.cronExpression.aria": "Cron-Ausdruck",
   "integration.schedules.cell.customSchedule": "Individueller Zeitplan",
   "integration.schedules.cell.noSchedule": "Kein Zeitplan festgelegt",
-  "integration.schedules.cell.whenItFires.aria": "Wann er ausgelöst wird",
   "integration.schedules.cron.dailyAt": "Täglich um {time}",
   "integration.schedules.cron.day.daily": "Täglich",
   "integration.schedules.cron.day.weekdays": "Wochentags",
@@ -1229,6 +1223,7 @@
   "integration.workflows.state.action.remove.hint": "Das Entfernen nimmt diesem Workflow den Zugriff. Die gespeicherten Einträge bleiben bestehen.",
   "integration.workflows.state.dialog.description": "Was sich dieser Workflow zwischen Läufen merken darf. Er erreicht ausschließlich die hier deklarierten Namespaces — alles andere wird beim Lauf abgewiesen.",
   "integration.workflows.state.dialog.title": "Zustands-Namespaces",
+  "integration.workflows.state.empty": "Dieser Workflow merkt sich noch nichts zwischen Läufen.",
   "integration.workflows.state.error.invalidName": "Kleinbuchstaben, Ziffern und . - _, beginnend mit einem Buchstaben — zum Beispiel article oder crm.customers.",
   "integration.workflows.state.error.nameExists": "Dieser Workflow deklariert diesen Namespace bereits.",
   "integration.workflows.state.field.newName.label": "Namespace deklarieren",
@@ -1246,7 +1241,6 @@
   "integration.workflows.state.role.mapping.hint": "Verknüpft je eine ID auf beiden Seiten, damit ein späterer Lauf weiß, ob er anlegen oder aktualisieren muss.",
   "integration.workflows.state.role.mapping.label": "Zuordnung",
   "integration.workflows.state.row.aria": "Zustands-Namespace {namespace}",
-  "integration.workflows.state.empty": "Dieser Workflow merkt sich noch nichts zwischen Läufen.",
   "integration.workflows.state.visibility.private.hint": "Nur dieser Workflow liest und schreibt ihn, und er wird mit dem Workflow gelöscht.",
   "integration.workflows.state.visibility.private.label": "Diesen Workflow",
   "integration.workflows.state.visibility.shared.hint": "Jeder Workflow dieses Mandanten liest und schreibt diese Einträge, und der Namespace bleibt bestehen, wenn dieser Workflow gelöscht wird.",

package/dist/runtime/i18n/messages/en.json

@@ -28,8 +28,8 @@
   "integration.audit.table.column.actor": "Actor",
   "integration.audit.table.column.resource": "Resource",
   "integration.audit.table.column.when": "When",
-  "integration.audit.toast.copyFailed": "Could not copy",
   "integration.audit.toast.copied": "Copied",
+  "integration.audit.toast.copyFailed": "Could not copy",
   "integration.canvas.badge.trigger": "Trigger",
   "integration.canvas.color.amber": "Amber",
   "integration.canvas.color.blue": "Blue",
@@ -170,6 +170,8 @@
   "integration.credentials.error.oauthConnect": "Could not start OAuth connect.",
   "integration.credentials.error.save": "Could not save credential.",
   "integration.credentials.error.testFailed": "Connection test failed.",
+  "integration.credentials.list.action.connect": "Connect",
+  "integration.credentials.list.action.connect.aria": "Connect {name}",
   "integration.credentials.list.action.delete.aria": "Delete {name}",
   "integration.credentials.list.action.new": "New credential",
   "integration.credentials.list.action.reconnect": "Reconnect",
@@ -244,6 +246,7 @@
   "integration.credentials.sftpImport.empty": "No active platform SFTP accounts. Create one under Integration Studio → SFTP first.",
   "integration.credentials.sftpImport.error.importFailed": "Import failed.",
   "integration.credentials.sftpImport.error.readPassword": "Could not read the account password.",
+  "integration.credentials.sftpImport.state.loadFailed": "The platform SFTP accounts could not be loaded: {message}",
   "integration.credentials.sftpImport.state.loading": "Loading the SFTP accounts…",
   "integration.credentials.sftpImport.title": "Import platform SFTP account",
   "integration.credentials.shared.action.testConnection": "Connect",
@@ -377,13 +380,6 @@
   "integration.editor.dropGhost.label": "Drop to add",
   "integration.editor.emptyState.hint": "Drag a trigger and an action from the panel on the left.",
   "integration.editor.emptyState.title": "Empty canvas",
-  "integration.editor.errorPath.action.stop": "Stop the run on error",
-  "integration.editor.errorPath.advice": "{n} node routes failures to an output with nothing attached — nothing handles the failure there. | {n} nodes route failures to an output with nothing attached — nothing handles the failure there.",
-  "integration.editor.errorPath.ariaFix": "Route {label}'s \"{port}\" output to Stop and Error",
-  "integration.editor.errorPath.ariaReveal": "Show {label} on the canvas — its \"{port}\" output is not connected",
-  "integration.editor.errorPath.message": "{label} failed: ${{ nodes.{nodeId}.outputs.{port}.message }}",
-  "integration.editor.errorPath.more": "…and {n} more",
-  "integration.editor.errorPath.toast.added": "Stop and Error attached to {label} — not saved yet.",
   "integration.editor.event.toast.noneReceived": "No {topic} event received yet.",
   "integration.editor.executionMode.async.hint": "Runs are always queued; the trigger returns immediately.",
   "integration.editor.executionMode.async.label": "Async only",
@@ -983,10 +979,8 @@
   "integration.runs.toast.action.requested": "{action} requested",
   "integration.runs.toast.action.started": "Started run #{id}",
   "integration.runs.toast.terminate.confirm": "Terminate run #{id}?",
-  "integration.schedules.cell.cronExpression.aria": "Cron expression",
   "integration.schedules.cell.customSchedule": "Custom schedule",
   "integration.schedules.cell.noSchedule": "No schedule set",
-  "integration.schedules.cell.whenItFires.aria": "When it fires",
   "integration.schedules.cron.dailyAt": "Daily at {time}",
   "integration.schedules.cron.day.daily": "Daily",
   "integration.schedules.cron.day.weekdays": "Weekdays",
@@ -1229,6 +1223,7 @@
   "integration.workflows.state.action.remove.hint": "Removing the declaration takes this workflow's access away. The stored entries stay where they are.",
   "integration.workflows.state.dialog.description": "What this workflow may remember between runs. It can only reach the namespaces declared here — anything else is refused when the workflow runs.",
   "integration.workflows.state.dialog.title": "State namespaces",
+  "integration.workflows.state.empty": "This workflow remembers nothing between runs yet.",
   "integration.workflows.state.error.invalidName": "Use lowercase letters, digits and . - _, starting with a letter — for example article or crm.customers.",
   "integration.workflows.state.error.nameExists": "This workflow already declares that namespace.",
   "integration.workflows.state.field.newName.label": "Declare a namespace",
@@ -1246,7 +1241,6 @@
   "integration.workflows.state.role.mapping.hint": "Correlates an id on each side, so a later run knows whether to create or update.",
   "integration.workflows.state.role.mapping.label": "Mapping",
   "integration.workflows.state.row.aria": "State namespace {namespace}",
-  "integration.workflows.state.empty": "This workflow remembers nothing between runs yet.",
   "integration.workflows.state.visibility.private.hint": "Only this workflow reads and writes it, and it is deleted along with the workflow.",
   "integration.workflows.state.visibility.private.label": "This workflow",
   "integration.workflows.state.visibility.shared.hint": "Every workflow in this tenant reads and writes these entries, and the namespace stays when this workflow is deleted.",

package/dist/runtime/pages/integrations/credentials.vue

@@ -1,5 +1,5 @@
 <script setup>
-import { computed, onMounted, reactive, ref } from "vue";
+import { computed, nextTick, onMounted, reactive, ref } from "vue";
 import {
   RefreshCircle as Loader2,
   AddCircle as Plus,
@@ -31,8 +31,8 @@ import {
   SelectValue
 } from "@revenexx/studio";
 import { toast } from "../../utils/notify";
-import { apiFieldErrors, errorReason } from "../../utils/apiError";
-import { CREDENTIAL_STATES, credentialState, credentialStateLabel } from "../../utils/credentialState";
+import { apiRefusal, errorReason } from "../../utils/apiError";
+import { CREDENTIAL_STATES, credentialState, credentialStateLabel, providerStepWord } from "../../utils/credentialState";
 import { hasRevenexxSource } from "../../utils/revenexxCredentialSource";
 import { resolveLocalized } from "../../utils/localize";
 const t = useIntegrationsT();
@@ -51,6 +51,17 @@ function typeName(slug) {
 function isOAuthAuthcode(t2) {
   return t2?.auth_kind === "oauth2-authcode";
 }
+function providerStep(c) {
+  if (!isOAuthAuthcode(typeFor(c.credential_type_slug))) return null;
+  const state = credentialState(c).key;
+  const word = providerStepWord(state);
+  if (!word) return null;
+  return {
+    label: t(`integration.credentials.list.action.${word}`),
+    aria: t(`integration.credentials.list.action.${word}.aria`, { name: c.name }),
+    expired: state === "needs_reauth"
+  };
+}
 function formatDateTime(iso) {
   if (!iso) return "\u2014";
   try {
@@ -92,19 +103,36 @@ const form = reactive({ name: "", config: {} });
 const saving = ref(false);
 const testing = ref(false);
 const testResult = ref(null);
-const saveError = ref(null);
-const fieldErrors = ref({});
+const saveRefusal = ref(null);
 const sourceActive = ref(false);
 const isEdit = computed(() => editing.value !== null);
 function fieldsOf(t2) {
   return t2?.fields ?? [];
 }
+const drawnKeys = computed(() => [
+  "name",
+  ...sourceActive.value ? [] : fieldsOf(pickedType.value).map((f) => `config.${f.key}`)
+]);
+const refusal = computed(() => apiRefusal(saveRefusal.value, drawnKeys.value));
+const fieldErrors = computed(() => refusal.value.atFields);
+const summaryReasons = computed(() => {
+  if (!saveRefusal.value) return [];
+  if (refusal.value.unshown.length) return refusal.value.unshown.map((u) => u.message);
+  if (Object.keys(refusal.value.atFields).length) return [];
+  return [errorReason(saveRefusal.value, t("integration.credentials.error.save"))];
+});
 function configFieldAria(key) {
   return fieldErrors.value[`config.${key}`] ? { "aria-invalid": "true", "aria-describedby": `cred-field-${key}-error` } : {};
 }
+async function focusFirstRefusedField() {
+  await nextTick();
+  const key = drawnKeys.value.find((k) => k in fieldErrors.value);
+  if (!key) return;
+  const id = key === "name" ? "cred-name" : `cred-field-${key.slice("config.".length)}`;
+  document.getElementById(id)?.focus();
+}
 function clearRefusal() {
-  saveError.value = null;
-  fieldErrors.value = {};
+  saveRefusal.value = null;
 }
 function openCreate(t2) {
   editing.value = null;
@@ -176,9 +204,9 @@ async function submit() {
       }
     }
   } catch (e) {
-    fieldErrors.value = apiFieldErrors(e);
-    saveError.value = errorReason(e, t("integration.credentials.error.save"));
-    toast.error(saveError.value);
+    saveRefusal.value = e;
+    void focusFirstRefusedField();
+    toast.error(errorReason(e, t("integration.credentials.error.save")));
   } finally {
     saving.value = false;
   }
@@ -289,15 +317,16 @@ async function confirmDelete() {
         <template #cell-actions="{ row: c }">
           <div class="flex items-center justify-end gap-2 text-sm" @click.stop>
             <Button
-              v-if="c.status === 'needs_reauth' && isOAuthAuthcode(typeFor(c.credential_type_slug))"
+              v-if="providerStep(c)"
               variant="outline"
               size="sm"
-              class="h-7 text-amber-600"
+              class="h-7"
+              :class="providerStep(c).expired ? 'text-amber-600' : ''"
               :disabled="connecting === c.id"
-              :aria-label="t('integration.credentials.list.action.reconnect.aria', { name: c.name })"
+              :aria-label="providerStep(c).aria"
               @click="connect(c)"
             >
-              {{ t("integration.credentials.list.action.reconnect") }}
+              {{ providerStep(c).label }}
             </Button>
             <button type="button" class="flex size-7 items-center justify-center rounded text-foreground/40 hover:text-rose-600 hover:bg-rose-500/10" :title="t('integration.credentials.list.action.delete.aria', { name: c.name })" :aria-label="t('integration.credentials.list.action.delete.aria', { name: c.name })" @click="pendingDelete = c">
               <TrashBin :size="13" />
@@ -351,7 +380,10 @@ async function confirmDelete() {
           <IntegrationsCredentialRevenexxSource
             v-if="hasRevenexxSource(pickedType?.slug)"
             :type="pickedType"
-            @update:active="(v) => sourceActive = v"
+            @update:active="(v) => {
+  sourceActive = v;
+  clearRefusal();
+}"
             @apply="(c2) => Object.assign(form.config, c2)"
           />
 
@@ -438,14 +470,16 @@ async function confirmDelete() {
 
         </div>
 
-        <!-- The save was refused. Outside the scrolling form on purpose: the Save
-             button sits in the footer below, so a summary at the end of a form that
-             scrolls — five fields already do — would be a refusal rendered under the
-             fold, which is the defect this whole change is about. Stated here as well
-             as at the field it belongs to, so a refusal with no field — a conflict, a
-             gateway error — is not silent either. -->
-        <div v-if="saveError && pickedType" role="alert" class="rounded-md bg-rose-500/10 px-3 py-2 text-sm text-rose-700">
-          {{ saveError }}
+        <!-- The save was refused for something no field shows. Outside the scrolling
+             form on purpose: the Save button sits in the footer below, so a summary at
+             the end of a form that scrolls — five fields already do — would be a
+             refusal rendered under the fold. What is marked at a field is not repeated
+             here; what has no field to be marked at — a service-side field, a conflict,
+             a gateway error — would otherwise be silent. -->
+        <div v-if="summaryReasons.length && pickedType" role="alert" class="space-y-1 rounded-md bg-rose-500/10 px-3 py-2 text-sm text-rose-700">
+          <!-- Keyed by position: two undrawn keys can be refused with the same
+               sentence, and a duplicate key is how one of them goes unrendered. -->
+          <p v-for="(reason, i) in summaryReasons" :key="i">{{ reason }}</p>
         </div>
 
         <DialogFooter v-if="pickedType" class="sm:justify-between">

package/dist/runtime/pages/integrations/schedules.vue

@@ -147,16 +147,16 @@ const columns = computed(() => [
                  at several named times is a long sentence, and half of one is
                  the wrong half. Its title is the expression, so there is no
                  tooltip left to carry the rest of the words. -->
-            <div v-if="describeCron(e.cron)" :aria-label="t('integration.schedules.cell.whenItFires.aria')" :title="e.cron ?? void 0" class="text-sm leading-snug">
+            <div v-if="describeCron(e.cron)" :title="e.cron ?? void 0" class="text-sm leading-snug">
               {{ describeCron(e.cron) }}
             </div>
             <template v-else-if="e.cron">
-              <div :aria-label="t('integration.schedules.cell.whenItFires.aria')" class="text-sm truncate">
+              <div class="text-sm truncate">
                 {{ t("integration.schedules.cell.customSchedule") }}
               </div>
-              <code :aria-label="t('integration.schedules.cell.cronExpression.aria')" class="block font-mono text-xs text-muted-foreground truncate">{{ e.cron }}</code>
+              <code class="block font-mono text-xs text-muted-foreground truncate">{{ e.cron }}</code>
             </template>
-            <div v-else :aria-label="t('integration.schedules.cell.whenItFires.aria')" class="text-sm text-muted-foreground truncate">
+            <div v-else class="text-sm text-muted-foreground truncate">
               {{ t("integration.schedules.cell.noSchedule") }}
             </div>
           </div>
@@ -170,12 +170,13 @@ const columns = computed(() => [
         </template>
 
         <!--
-          The two time cells carry the name their column header states, so each is
-          addressable by what it is rather than by how it is typeset. It is not the
-          accessible name a screen reader hears — the cell is a plain span, and
-          ARIA prohibits naming a generic element — that needs row and cell
-          semantics in the shared table (PO-233, and a gap in
-          `specs/accessibility.md`).
+          Neither time cell carries a name of its own, and that is the fix rather
+          than an omission. Since studio-shared 0.3.2 the cell is a `role="cell"`
+          under a `columnheader`, so a screen reader reads "Next run, in 5h" from
+          the table itself. A name written here would be read *instead of* the
+          value — the row announced "Next run" where the time should be — so the
+          labels these cells used to carry to be addressable by a test were
+          removed with the semantics that replaced them (PO-233).
         -->
         <!--
           The instant the platform holds, shown as a distance from now, with the
@@ -187,7 +188,6 @@ const columns = computed(() => [
         -->
         <template #cell-nextRun="{ row: e }">
           <span
-            :aria-label="t('integration.schedules.table.column.nextRun')"
             :title="e.nextRunLocal ?? void 0"
             class="text-sm tabular-nums"
           >{{ formatRelative(e.nextRunAt, e.timezone) }}</span>
@@ -202,7 +202,6 @@ const columns = computed(() => [
         -->
         <template #cell-lastRun="{ row: e }">
           <span
-            :aria-label="t('integration.schedules.table.column.lastRun')"
             :title="e.lastRunAt ?? void 0"
             class="text-sm tabular-nums text-muted-foreground"
           >{{ lastRunText(e) }}</span>

package/dist/runtime/pages/integrations/workflows/[id].vue

@@ -46,8 +46,6 @@ import { BUILD_SETTLE_POLL_MS, BUILD_SETTLE_TIMEOUT_MS, createBuildSettle, isBui
 import { splitRunOutputs } from "../../../utils/runOutputs";
 import { isTerminalRun, unwrapRun } from "../../../utils/runEnvelope";
 import { findingsSummary, groupFindingsByNode, nodeDisplayLabel } from "../../../utils/validationFindings";
-import { unwiredErrorPorts } from "../../../utils/errorPathAdvice";
-import { newestExecutableVersion } from "../../../data/integrationNodeCatalog";
 import { payloadFieldsFromBlob } from "../../../data/payloadForm";
 import WorkflowIconView from "../../../components/Integrations/WorkflowIconView.vue";
 const t = useIntegrationsT();
@@ -110,27 +108,6 @@ async function revealNode(nodeId) {
   await nextTick();
   editorRef.value?.revealNode(nodeId);
 }
-const errorPathAdvice = computed(() => {
-  const blob = shownBlob.value;
-  if (!blob) return [];
-  const byId = new Map(blob.nodes.map((n) => [n.id, n]));
-  return unwiredErrorPorts(blob).flatMap((a) => {
-    const node = byId.get(a.nodeId);
-    return node ? [{ ...a, label: nodeDisplayLabel(node) }] : [];
-  });
-});
-const adviceExpanded = ref(false);
-const canAttachErrorStop = computed(() => newestExecutableVersion("revenexx:stop-and-error") !== null);
-async function showNodeOnCanvas(nodeId) {
-  tab.value = "editor";
-  await nextTick();
-  editorRef.value?.showNodeOnCanvas(nodeId);
-}
-async function attachErrorStop(nodeId, port) {
-  tab.value = "editor";
-  await nextTick();
-  editorRef.value?.attachErrorStop(nodeId, port);
-}
 const { load: loadNodeCatalog } = useIntegrationsNodes();
 onMounted(() => {
   void loadNodeCatalog();
@@ -200,7 +177,6 @@ watch(id, async () => {
   if (!w) await leaveTo("/integrations/workflows");
   draft.value = null;
   warningsExpanded.value = false;
-  adviceExpanded.value = false;
   if (tab.value === "runs") void loadRuns(1);
   settleBuildStatus();
 }, { immediate: true });
@@ -1017,62 +993,6 @@ function formatDateTime(iso) {
         </ul>
       </div>
 
-      <!-- Error-path advice (PO-443, specs/workflow-advice.md).
-           Slate, NOT amber: amber already means "fix this before it runs" twice
-           over in this editor (the reauth strip, the validation banner) and on
-           the node cards, so a third would leave the colour meaning nothing.
-           This blocks nothing — the activation control stays operable while it
-           shows, which is the point of it not being a finding.
-
-           Editor tab only, unlike the validation banner above: every line here
-           acts on the canvas — reveal a card, attach a step to it — so over the
-           run list or the history preview it offers moves to a canvas that is not
-           on screen, and its node names read as part of whatever is. That is not
-           hypothetical: it put a current node's name over a preview of an
-           archived revision (workflow-history.md AC-3). -->
-      <div
-        v-if="tab === 'editor' && !openRunId && errorPathAdvice.length"
-        class="border-b border-slate-500/20 bg-slate-500/5 px-4 py-2 text-sm text-slate-700"
-      >
-        <p class="font-medium">
-          {{ t("integration.editor.errorPath.advice", errorPathAdvice.length) }}
-        </p>
-        <ul
-          class="mt-1 space-y-0.5"
-          :class="adviceExpanded ? 'max-h-36 overflow-y-auto pr-1' : ''"
-        >
-          <li
-            v-for="a in adviceExpanded ? errorPathAdvice : errorPathAdvice.slice(0, WARN_COLLAPSED)"
-            :key="`${a.nodeId}-${a.port}`"
-            class="flex items-baseline gap-1.5"
-          >
-            <span class="select-none text-slate-400">•</span>
-            <button
-              type="button"
-              class="text-left font-medium underline decoration-transparent underline-offset-2 hover:decoration-slate-700"
-              :aria-label="t('integration.editor.errorPath.ariaReveal', { label: a.label, port: a.port })"
-              @click="showNodeOnCanvas(a.nodeId)"
-            >
-              {{ a.label }}
-            </button>
-            <button
-              v-if="canAttachErrorStop"
-              type="button"
-              class="text-slate-600 underline underline-offset-2 hover:text-slate-900"
-              :aria-label="t('integration.editor.errorPath.ariaFix', { label: a.label, port: a.port })"
-              @click="attachErrorStop(a.nodeId, a.port)"
-            >
-              {{ t("integration.editor.errorPath.action.stop") }}
-            </button>
-          </li>
-          <li v-if="!adviceExpanded && errorPathAdvice.length > WARN_COLLAPSED" class="pl-3">
-            <button type="button" class="text-slate-600 underline underline-offset-2 hover:text-slate-900" @click="adviceExpanded = true">
-              {{ t("integration.editor.errorPath.more", { n: errorPathAdvice.length - WARN_COLLAPSED }) }}
-            </button>
-          </li>
-        </ul>
-      </div>
-
       <!-- Only the FAILED build state banners (its message matters); the
            working states live as the header chip — and inside a run the
            workflow's build state is noise, so nothing shows at all. -->

package/dist/runtime/utils/apiError.d.ts

@@ -35,21 +35,48 @@ export declare function apiValidationIssues(err: unknown): {
     path: string;
     message: string;
 }[];
+/** One message the service keyed to a field, as it keyed it. */
+export interface RefusalMessage {
+    key: string;
+    message: string;
+}
+/**
+ * A refusal split by what the form on screen can show of it.
+ *
+ * `atFields` is what goes under an input, keyed the way the form draws it; `unshown`
+ * is everything left over — the reasons that have no input to stand at, in the order
+ * the service listed them.
+ */
+export interface Refusal {
+    atFields: Record<string, string>;
+    unshown: RefusalMessage[];
+}
 /**
- * Field-keyed validation messages from a rejection, as `{ field: message }`.
+ * A rejection split into the messages a form can show at a field and the messages it
+ * cannot, given the keys that form actually draws.
  *
  * The counterpart to `apiValidationIssues` above, for the ordinary case that has
  * nothing to do with the workflow blob: a form field the service refused, named the
  * way the form names it. Laravel answers a `422` with `errors` keyed by field and a
- * list of messages per key; the first message is the one a person reads, so that is
- * the one kept.
+ * list of messages per key; at a field the first message is the one a person reads,
+ * so that is the one kept.
+ *
+ * **`drawn` is the form's own list, in the order the form draws it** — the name, then
+ * the fields of the chosen type, and nothing while those are hidden behind another
+ * source. A key absent from it has no input to be shown at, whether because no form
+ * draws that field (`config` as a whole, a field the type never declared, a key that
+ * is not a field at all) or because this form is currently drawing something else.
+ * Both cases go to `unshown`, which is what the surface states below the form: a
+ * refusal nobody can see is the same as no answer at all (PO-275, PO-477).
+ *
+ * A container that is only at fault because one of its members is — `config` beside
+ * `config.authKey`, which the service reports as two — is dropped wherever the member
+ * is reported too: it says the same thing twice, and the member carries it either way.
  *
- * A form uses this to put the refusal where the operator is looking — "The name has
- * already been taken." under the Name field, rather than as a sentence somewhere
- * else about a field they then have to find (PO-275). Keys that address the blob are
- * left out: those belong to `apiValidationIssues`, which resolves them to nodes.
+ * Keys that address the blob are left out: those belong to `apiValidationIssues`,
+ * which resolves them to nodes. No credential surface can receive one.
  */
-export declare function apiFieldErrors(err: unknown): Record<string, string>;
+export declare function apiRefusal(err: unknown, drawn: readonly string[]): Refusal;
 /**
  * The reason a rejection gives, without the count of everything else it found.
  *