@xyne/workflow-sdk 3.2.37 → 3.2.39

package/dist/connectors/core/base-connector.js

@@ -0,0 +1,8 @@
+export class BaseConnector {
+    /**
+     * Icon name for the connector's palette entry — `"git-branch"`. The builder
+     * lists connectors before their steps and triggers, so each needs its own mark.
+     */
+    icon;
+}
+//# sourceMappingURL=base-connector.js.map

package/dist/connectors/core/base-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-connector.js","sourceRoot":"","sources":["../../../src/connectors/core/base-connector.ts"],"names":[],"mappings":"AAWA,MAAM,OAAgB,aAAa;IAiBjC;;;OAGG;IACM,IAAI,CAAU;CA6BxB"}

package/dist/connectors/core/connector-registry.d.ts

@@ -0,0 +1,130 @@
+/**
+ * ConnectorRegistry — the single place components become known to the system.
+ *
+ * ─── What it replaces ───
+ *
+ * A host used to assemble four separate things by hand: `StepRegistry`,
+ * `TriggerRegistry`, `ServiceRegistry`, and a fixed central credential union.
+ * Nothing tied them together, so a step could register while the service it
+ * needed did not, and a credential could exist that no component could name —
+ * failing mid-execution. Those three registries are gone; this is the one.
+ *
+ * A host registers ONE complete connector and gets all of it at once:
+ *
+ *     connectors.register(new GmailConnector());
+ *
+ * There is deliberately no `registerStep`, `registerTrigger`, or
+ * `registerCredential`. If those existed, a component could enter the system
+ * without an owning connector — and every check below depends on knowing the
+ * owner.
+ */
+import type { BaseConnector, AnyStep, AnyTrigger } from './base-connector.js';
+import type { StepSummary, StepDescriptor } from '../../steps/step-descriptor.js';
+import type { TriggerSummary, TriggerDescriptor } from '../../triggers/trigger-descriptor.js';
+import type { CredentialDefinition } from './credentials.js';
+import type { ConnectorCredentialTypes } from '../../common/credentials.js';
+/** A step plus the identity of the connector that provides it. */
+export interface RegisteredStep {
+    readonly connectorId: string;
+    readonly connectorName: string;
+    readonly step: AnyStep;
+}
+/** A trigger plus the identity of the connector that provides it. */
+export interface RegisteredTrigger {
+    readonly connectorId: string;
+    readonly connectorName: string;
+    readonly trigger: AnyTrigger;
+}
+/** A credential definition plus the identity of the connector that declares it. */
+export interface RegisteredCredential {
+    readonly connectorId: string;
+    readonly connectorName: string;
+    readonly definition: CredentialDefinition;
+}
+/**
+ * A connector was rejected at registration.
+ *
+ * Carries EVERY problem found, not just the first. Registration happens at
+ * boot, so a developer fixing a new connector otherwise plays whack-a-mole:
+ * restart, see one error, fix, restart. One throw listing all four mistakes
+ * turns that into a single edit.
+ */
+export declare class ConnectorRegistrationError extends Error {
+    readonly connectorId: string;
+    readonly problems: readonly string[];
+    constructor(connectorId: string, problems: readonly string[]);
+}
+/** A lookup named something that was never registered. */
+export declare class UnknownComponentError extends Error {
+    readonly kind: 'connector' | 'step' | 'trigger' | 'credential';
+    readonly id: string;
+    constructor(kind: 'connector' | 'step' | 'trigger' | 'credential', id: string);
+}
+export declare class ConnectorRegistry {
+    private readonly connectorsById;
+    private readonly stepsByType;
+    private readonly triggersByType;
+    private readonly credentialsByType;
+    constructor();
+    /**
+     * Register a complete connector, or reject it entirely.
+     *
+     * @throws {ConnectorRegistrationError} listing every problem found.
+     */
+    register(connector: BaseConnector): void;
+    /** @throws {UnknownComponentError} when no such connector is registered. */
+    getConnector(connectorId: string): BaseConnector;
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getStep(stepType: string): AnyStep;
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getTrigger(triggerType: string): AnyTrigger;
+    /**
+     * Non-throwing lookups, for callers deciding IF a component exists rather
+     * than assuming it does — validating a saved workflow against the connectors
+     * this deployment actually registered, for instance.
+     *
+     * Without these, "is this step available?" has to be written as try/catch
+     * around `getStep()`, which is control flow by exception and swallows real
+     * errors as readily as missing ones.
+     */
+    findStep(stepType: string): RegisteredStep | undefined;
+    findTrigger(triggerType: string): RegisteredTrigger | undefined;
+    /** @throws {UnknownComponentError} when no registered connector declares it. */
+    getCredentialDefinition(credType: string): CredentialDefinition;
+    findCredentialDefinition(credType: string): CredentialDefinition | undefined;
+    hasConnector(connectorId: string): boolean;
+    hasStep(stepType: string): boolean;
+    hasTrigger(triggerType: string): boolean;
+    listConnectors(): readonly BaseConnector[];
+    /** Every step from every registered connector, each tagged with its owner. */
+    listSteps(): readonly RegisteredStep[];
+    listTriggers(): readonly RegisteredTrigger[];
+    listStepSummaries(): StepSummary[];
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getStepDescriptor(stepType: string): StepDescriptor;
+    listTriggerSummaries(): TriggerSummary[];
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getTriggerDescriptor(triggerType: string): TriggerDescriptor;
+    /**
+     * Every credential type, grouped by the connector that declares it, with the
+     * form fields its shape needs. What the vault's create flow renders from.
+     * Connectors that declare no credentials are omitted.
+     */
+    listCredentialTypes(): ConnectorCredentialTypes[];
+    /**
+     * Every reason this connector cannot be registered. Empty means valid.
+     *
+     * Pure: reads state, writes none. That is what makes atomic registration
+     * possible — the caller can know the verdict before touching a map.
+     */
+    private findProblems;
+    /**
+     * Validate the connector's credential declarations.
+     *
+     * @returns the types it declares — the authority for the component checks below.
+     */
+    private checkCredentials;
+    private checkSteps;
+    private checkTriggers;
+}
+//# sourceMappingURL=connector-registry.d.ts.map

package/dist/connectors/core/connector-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-registry.d.ts","sourceRoot":"","sources":["../../../src/connectors/core/connector-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAElF,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG7D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAI5E,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAMD;;;;;;;GAOG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEzB,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE;CAS7D;AAED,0DAA0D;AAC1D,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,EAAE,EAAE,EAAE,MAAM;CAS9E;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;IACjE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwC;IACvE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2C;;IAM7E;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IA0CxC,4EAA4E;IAC5E,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa;IAMhD,gFAAgF;IAChF,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAMlC,gFAAgF;IAChF,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU;IAM3C;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAItD,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI/D,gFAAgF;IAChF,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAM/D,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAI5E,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlC,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAMxC,cAAc,IAAI,SAAS,aAAa,EAAE;IAI1C,8EAA8E;IAC9E,SAAS,IAAI,SAAS,cAAc,EAAE;IAItC,YAAY,IAAI,SAAS,iBAAiB,EAAE;IAU5C,iBAAiB,IAAI,WAAW,EAAE;IAIlC,gFAAgF;IAChF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc;IAInD,oBAAoB,IAAI,cAAc,EAAE;IAIxC,gFAAgF;IAChF,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB;IAI5D;;;;OAIG;IACH,mBAAmB,IAAI,wBAAwB,EAAE;IAwBjD;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAuBpB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAsCxB,OAAO,CAAC,UAAU;IA8ClB,OAAO,CAAC,aAAa;CAqCtB"}

package/dist/connectors/core/connector-registry.js

@@ -0,0 +1,353 @@
+/**
+ * ConnectorRegistry — the single place components become known to the system.
+ *
+ * ─── What it replaces ───
+ *
+ * A host used to assemble four separate things by hand: `StepRegistry`,
+ * `TriggerRegistry`, `ServiceRegistry`, and a fixed central credential union.
+ * Nothing tied them together, so a step could register while the service it
+ * needed did not, and a credential could exist that no component could name —
+ * failing mid-execution. Those three registries are gone; this is the one.
+ *
+ * A host registers ONE complete connector and gets all of it at once:
+ *
+ *     connectors.register(new GmailConnector());
+ *
+ * There is deliberately no `registerStep`, `registerTrigger`, or
+ * `registerCredential`. If those existed, a component could enter the system
+ * without an owning connector — and every check below depends on knowing the
+ * owner.
+ */
+import { BuiltinConnector } from '../builtin/builtin-connector.js';
+import { buildStepSummary, buildStepDescriptor } from '../../steps/step-descriptor.js';
+import { buildTriggerSummary, buildTriggerDescriptor } from '../../triggers/trigger-descriptor.js';
+import { CREDENTIAL_TYPE_PATTERN } from './credentials.js';
+import { CREDENTIAL_AUTH_REGISTRY } from '../../common/credentials.js';
+// ─── Errors ───
+/**
+ * A connector was rejected at registration.
+ *
+ * Carries EVERY problem found, not just the first. Registration happens at
+ * boot, so a developer fixing a new connector otherwise plays whack-a-mole:
+ * restart, see one error, fix, restart. One throw listing all four mistakes
+ * turns that into a single edit.
+ */
+export class ConnectorRegistrationError extends Error {
+    connectorId;
+    problems;
+    constructor(connectorId, problems) {
+        super(`ConnectorRegistry: cannot register connector "${connectorId}":\n` +
+            problems.map((problem) => `  - ${problem}`).join('\n'));
+        this.name = 'ConnectorRegistrationError';
+        this.connectorId = connectorId;
+        this.problems = problems;
+    }
+}
+/** A lookup named something that was never registered. */
+export class UnknownComponentError extends Error {
+    kind;
+    id;
+    constructor(kind, id) {
+        super(`ConnectorRegistry: unknown ${kind} "${id}". ` +
+            `Is its connector registered at boot?`);
+        this.name = 'UnknownComponentError';
+        this.kind = kind;
+        this.id = id;
+    }
+}
+// ─── Registry ───
+export class ConnectorRegistry {
+    connectorsById = new Map();
+    stepsByType = new Map();
+    triggersByType = new Map();
+    credentialsByType = new Map();
+    constructor() {
+        this.register(new BuiltinConnector());
+    }
+    /**
+     * Register a complete connector, or reject it entirely.
+     *
+     * @throws {ConnectorRegistrationError} listing every problem found.
+     */
+    register(connector) {
+        const problems = this.findProblems(connector);
+        if (problems.length > 0) {
+            throw new ConnectorRegistrationError(connector.id, problems);
+        }
+        // Commit. Only reached when the connector is wholly valid, so no partial
+        // write is possible — this is the atomicity guarantee, and it is why
+        // validation cannot be interleaved with insertion.
+        this.connectorsById.set(connector.id, connector);
+        for (const definition of connector.credentials) {
+            this.credentialsByType.set(definition.credType, {
+                connectorId: connector.id,
+                connectorName: connector.name,
+                definition,
+            });
+        }
+        for (const step of connector.steps) {
+            // Stamp WHO owns it, so the palette can group by connector. The step
+            // itself never sets these — its owner does, here, at registration.
+            stampOwner(step, connector);
+            this.stepsByType.set(step.type, {
+                connectorId: connector.id,
+                connectorName: connector.name,
+                step,
+            });
+        }
+        for (const trigger of connector.triggers) {
+            stampOwner(trigger, connector);
+            this.triggersByType.set(trigger.type, {
+                connectorId: connector.id,
+                connectorName: connector.name,
+                trigger,
+            });
+        }
+    }
+    // ─── Lookups ───
+    /** @throws {UnknownComponentError} when no such connector is registered. */
+    getConnector(connectorId) {
+        const connector = this.connectorsById.get(connectorId);
+        if (!connector)
+            throw new UnknownComponentError('connector', connectorId);
+        return connector;
+    }
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getStep(stepType) {
+        const registered = this.stepsByType.get(stepType);
+        if (!registered)
+            throw new UnknownComponentError('step', stepType);
+        return registered.step;
+    }
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getTrigger(triggerType) {
+        const registered = this.triggersByType.get(triggerType);
+        if (!registered)
+            throw new UnknownComponentError('trigger', triggerType);
+        return registered.trigger;
+    }
+    /**
+     * Non-throwing lookups, for callers deciding IF a component exists rather
+     * than assuming it does — validating a saved workflow against the connectors
+     * this deployment actually registered, for instance.
+     *
+     * Without these, "is this step available?" has to be written as try/catch
+     * around `getStep()`, which is control flow by exception and swallows real
+     * errors as readily as missing ones.
+     */
+    findStep(stepType) {
+        return this.stepsByType.get(stepType);
+    }
+    findTrigger(triggerType) {
+        return this.triggersByType.get(triggerType);
+    }
+    /** @throws {UnknownComponentError} when no registered connector declares it. */
+    getCredentialDefinition(credType) {
+        const registered = this.credentialsByType.get(credType);
+        if (!registered)
+            throw new UnknownComponentError('credential', credType);
+        return registered.definition;
+    }
+    findCredentialDefinition(credType) {
+        return this.credentialsByType.get(credType)?.definition;
+    }
+    hasConnector(connectorId) {
+        return this.connectorsById.has(connectorId);
+    }
+    hasStep(stepType) {
+        return this.stepsByType.has(stepType);
+    }
+    hasTrigger(triggerType) {
+        return this.triggersByType.has(triggerType);
+    }
+    // ─── Listings ───
+    listConnectors() {
+        return Array.from(this.connectorsById.values());
+    }
+    /** Every step from every registered connector, each tagged with its owner. */
+    listSteps() {
+        return Array.from(this.stepsByType.values());
+    }
+    listTriggers() {
+        return Array.from(this.triggersByType.values());
+    }
+    // ─── Catalogue (what the builder's palette and detail endpoints read) ───
+    //
+    // These answer the questions `StepRegistry` / `TriggerRegistry` used to. They
+    // are here rather than in a fourth registry because a component cannot be
+    // described without knowing its owner, and this is the only object that does.
+    listStepSummaries() {
+        return this.listSteps().map((r) => buildStepSummary(r.step));
+    }
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getStepDescriptor(stepType) {
+        return buildStepDescriptor(this.getStep(stepType));
+    }
+    listTriggerSummaries() {
+        return this.listTriggers().map((r) => buildTriggerSummary(r.trigger));
+    }
+    /** @throws {UnknownComponentError} when no registered connector provides it. */
+    getTriggerDescriptor(triggerType) {
+        return buildTriggerDescriptor(this.getTrigger(triggerType));
+    }
+    /**
+     * Every credential type, grouped by the connector that declares it, with the
+     * form fields its shape needs. What the vault's create flow renders from.
+     * Connectors that declare no credentials are omitted.
+     */
+    listCredentialTypes() {
+        return this.listConnectors()
+            .filter((connector) => connector.credentials.length > 0)
+            .map((connector) => ({
+            connectorId: connector.id,
+            connectorName: connector.name,
+            credentials: connector.credentials.map((definition) => ({
+                credType: definition.credType,
+                label: definition.label,
+                ...(definition.description !== undefined
+                    ? { description: definition.description }
+                    : {}),
+                authType: definition.authType,
+                fields: CREDENTIAL_AUTH_REGISTRY.find((entry) => entry.type === definition.authType)
+                    ?.fields ?? [],
+            })),
+        }));
+    }
+    // ─── Validation ───
+    /**
+     * Every reason this connector cannot be registered. Empty means valid.
+     *
+     * Pure: reads state, writes none. That is what makes atomic registration
+     * possible — the caller can know the verdict before touching a map.
+     */
+    findProblems(connector) {
+        const problems = [];
+        if (!connector.id) {
+            problems.push('connector id must not be empty');
+        }
+        if (this.connectorsById.has(connector.id)) {
+            problems.push(`connector id "${connector.id}" is already registered. ` +
+                `Registering the same connector twice is usually a duplicated ` +
+                `host wiring line.`);
+        }
+        const declared = this.checkCredentials(connector, problems);
+        this.checkSteps(connector, declared, problems);
+        this.checkTriggers(connector, declared, problems);
+        return problems;
+    }
+    /**
+     * Validate the connector's credential declarations.
+     *
+     * @returns the types it declares — the authority for the component checks below.
+     */
+    checkCredentials(connector, problems) {
+        const declared = new Set();
+        for (const definition of connector.credentials) {
+            if (!CREDENTIAL_TYPE_PATTERN.test(definition.credType)) {
+                problems.push(`credential type "${definition.credType}" must be SCREAMING_SNAKE_CASE, ` +
+                    `e.g. "SLACK_BOT_TOKEN"`);
+            }
+            // Ownership: a definition borrowed from another connector would let this
+            // one claim a type that is not its own.
+            if (definition.connectorId !== connector.id) {
+                problems.push(`credential type "${definition.credType}" belongs to connector ` +
+                    `"${definition.connectorId}" but is declared by "${connector.id}"`);
+            }
+            if (declared.has(definition.credType)) {
+                problems.push(`credential type "${definition.credType}" is declared twice`);
+            }
+            declared.add(definition.credType);
+            // Global uniqueness. The type is what stored credentials carry, so two
+            // connectors answering to one type would make ownership ambiguous.
+            const existing = this.credentialsByType.get(definition.credType);
+            if (existing) {
+                problems.push(`credential type "${definition.credType}" is already declared by connector ` +
+                    `"${existing.connectorId}". Prefix types with the connector name.`);
+            }
+        }
+        return declared;
+    }
+    checkSteps(connector, declaredCredentialTypes, problems) {
+        const seen = new Set();
+        for (const step of connector.steps) {
+            if (!step.type) {
+                problems.push(`step "${step.name}" has an empty type id`);
+            }
+            if (seen.has(step.type)) {
+                problems.push(`step type "${step.type}" is declared twice`);
+            }
+            seen.add(step.type);
+            // A step may only accept credential types its OWN connector declares.
+            // This is what catches a step wired to a definition the connector forgot
+            // to list: without it the credential picker would render empty and the
+            // run would fail with "no credential configured", pointing at the user
+            // rather than at the wiring.
+            checkAcceptedCredentials(`step "${step.type}"`, step.credential, connector.id, declaredCredentialTypes, problems);
+            checkCredentialSlots(`step "${step.type}"`, step.credentialSlots, problems);
+            // Global uniqueness. Step type IDs are the key saved workflows store, so
+            // two implementations answering to one ID means dispatch silently picks
+            // whichever registered last. A boot failure is the only safe outcome.
+            const existing = this.stepsByType.get(step.type);
+            if (existing) {
+                problems.push(`step type "${step.type}" is already registered by connector ` +
+                    `"${existing.connectorId}". Namespace new components as ` +
+                    `"<connector-id>.<action>".`);
+            }
+        }
+    }
+    checkTriggers(connector, declaredCredentialTypes, problems) {
+        const seen = new Set();
+        for (const trigger of connector.triggers) {
+            if (!trigger.type) {
+                problems.push(`trigger "${trigger.name}" has an empty type id`);
+            }
+            if (seen.has(trigger.type)) {
+                problems.push(`trigger type "${trigger.type}" is declared twice`);
+            }
+            seen.add(trigger.type);
+            checkAcceptedCredentials(`trigger "${trigger.type}"`, trigger.credential, connector.id, declaredCredentialTypes, problems);
+            checkCredentialSlots(`trigger "${trigger.type}"`, trigger.credentialSlots, problems);
+            const existing = this.triggersByType.get(trigger.type);
+            if (existing) {
+                problems.push(`trigger type "${trigger.type}" is already registered by connector ` +
+                    `"${existing.connectorId}"`);
+            }
+        }
+    }
+}
+/**
+ * A component may only accept credential types its OWN connector declares.
+ *
+ * Without this, a component wired to a definition its connector forgot to list
+ * would render an empty credential picker and fail at run time with "no
+ * credential configured", pointing at the user rather than at the wiring.
+ */
+function checkAcceptedCredentials(subject, accepted, connectorId, declared, problems) {
+    for (const definition of accepted ?? []) {
+        if (declared.has(definition.credType))
+            continue;
+        problems.push(`${subject} accepts credential type "${definition.credType}", which ` +
+            `connector "${connectorId}" does not declare`);
+    }
+}
+/** Slot names are the config fields credentials are read from, so they must be unique. */
+function checkCredentialSlots(subject, slots, problems) {
+    const seen = new Set();
+    for (const slot of slots ?? []) {
+        if (!slot.name)
+            problems.push(`${subject} has a credential slot with an empty name`);
+        if (seen.has(slot.name)) {
+            problems.push(`${subject} declares credential slot "${slot.name}" twice`);
+        }
+        seen.add(slot.name);
+    }
+}
+/** Owner facts written onto a registered component, for the palette. */
+function stampOwner(target, connector) {
+    const bag = target;
+    bag.connectorId = connector.id;
+    bag.connectorName = connector.name;
+    if (connector.icon !== undefined)
+        bag.connectorIcon = connector.icon;
+}
+//# sourceMappingURL=connector-registry.js.map

package/dist/connectors/core/connector-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-registry.js","sourceRoot":"","sources":["../../../src/connectors/core/connector-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAEvF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AA4BvE,iBAAiB;AAEjB;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,WAAW,CAAS;IACpB,QAAQ,CAAoB;IAErC,YAAY,WAAmB,EAAE,QAA2B;QAC1D,KAAK,CACH,iDAAiD,WAAW,MAAM;YAChE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAkD;IACtD,EAAE,CAAS;IAEpB,YAAY,IAAqD,EAAE,EAAU;QAC3E,KAAK,CACH,8BAA8B,IAAI,KAAK,EAAE,KAAK;YAC5C,sCAAsC,CACzC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;CACF;AAED,mBAAmB;AAEnB,MAAM,OAAO,iBAAiB;IACX,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,iBAAiB,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE7E;QACE,IAAI,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,SAAwB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,0BAA0B,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAED,yEAAyE;QACzE,qEAAqE;QACrE,mDAAmD;QACnD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAEjD,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC9C,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,qEAAqE;YACrE,mEAAmE;YACnE,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC9B,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;gBACpC,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kBAAkB;IAElB,4EAA4E;IAC5E,YAAY,CAAC,WAAmB;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAC,QAAgB;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,gFAAgF;IAChF,UAAU,CAAC,WAAmB;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,gFAAgF;IAChF,uBAAuB,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,UAAU,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,wBAAwB,CAAC,QAAgB;QACvC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC1D,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,mBAAmB;IAEnB,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,8EAA8E;IAC9E,SAAS;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,YAAY;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,2EAA2E;IAC3E,EAAE;IACF,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAE9E,iBAAiB;QACf,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,gFAAgF;IAChF,iBAAiB,CAAC,QAAgB;QAChC,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,gFAAgF;IAChF,oBAAoB,CAAC,WAAmB;QACtC,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,cAAc,EAAE;aACzB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACnB,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,aAAa,EAAE,SAAS,CAAC,IAAI;YAC7B,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,GAAG,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;oBACzC,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EACJ,wBAAwB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC;oBAC1E,EAAE,MAAM,IAAI,EAAE;aACnB,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;IACR,CAAC;IAID,qBAAqB;IAErB;;;;;OAKG;IACK,YAAY,CAAC,SAAwB;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CACX,iBAAiB,SAAS,CAAC,EAAE,2BAA2B;gBACtD,+DAA+D;gBAC/D,mBAAmB,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAElD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAGD;;;;OAIG;IACK,gBAAgB,CACtB,SAAwB,EACxB,QAAkB;QAElB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CACX,oBAAoB,UAAU,CAAC,QAAQ,kCAAkC;oBACvE,wBAAwB,CAC3B,CAAC;YACJ,CAAC;YACD,yEAAyE;YACzE,wCAAwC;YACxC,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CACX,oBAAoB,UAAU,CAAC,QAAQ,yBAAyB;oBAC9D,IAAI,UAAU,CAAC,WAAW,yBAAyB,SAAS,CAAC,EAAE,GAAG,CACrE,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,QAAQ,qBAAqB,CAAC,CAAC;YAC9E,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAElC,uEAAuE;YACvE,mEAAmE;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CACX,oBAAoB,UAAU,CAAC,QAAQ,qCAAqC;oBAC1E,IAAI,QAAQ,CAAC,WAAW,0CAA0C,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU,CAChB,SAAwB,EACxB,uBAA4C,EAC5C,QAAkB;QAElB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpB,sEAAsE;YACtE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,6BAA6B;YAC7B,wBAAwB,CACtB,SAAS,IAAI,CAAC,IAAI,GAAG,EACrB,IAAI,CAAC,UAAU,EACf,SAAS,CAAC,EAAE,EACZ,uBAAuB,EACvB,QAAQ,CACT,CAAC;YACF,oBAAoB,CAAC,SAAS,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAE5E,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CACX,cAAc,IAAI,CAAC,IAAI,uCAAuC;oBAC5D,IAAI,QAAQ,CAAC,WAAW,iCAAiC;oBACzD,4BAA4B,CAC/B,CAAC;YACJ,CAAC;QAEH,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,SAAwB,EACxB,uBAA4C,EAC5C,QAAkB;QAElB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,IAAI,wBAAwB,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,IAAI,qBAAqB,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAEvB,wBAAwB,CACtB,YAAY,OAAO,CAAC,IAAI,GAAG,EAC3B,OAAO,CAAC,UAAU,EAClB,SAAS,CAAC,EAAE,EACZ,uBAAuB,EACvB,QAAQ,CACT,CAAC;YACF,oBAAoB,CAAC,YAAY,OAAO,CAAC,IAAI,GAAG,EAAE,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAErF,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CACX,iBAAiB,OAAO,CAAC,IAAI,uCAAuC;oBAClE,IAAI,QAAQ,CAAC,WAAW,GAAG,CAC9B,CAAC;YACJ,CAAC;QAEH,CAAC;IACH,CAAC;CAEF;AAGD;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,OAAe,EACf,QAAqD,EACrD,WAAmB,EACnB,QAA6B,EAC7B,QAAkB;IAElB,KAAK,MAAM,UAAU,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAChD,QAAQ,CAAC,IAAI,CACX,GAAG,OAAO,6BAA6B,UAAU,CAAC,QAAQ,WAAW;YACnE,cAAc,WAAW,oBAAoB,CAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,oBAAoB,CAC3B,OAAe,EACf,KAAuD,EACvD,QAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,2CAA2C,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,8BAA8B,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,MAA4B,EAAE,SAAwB;IACxE,MAAM,GAAG,GAAG,MAAkF,CAAC;IAC/F,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;IAC/B,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC;IACnC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC;AACvE,CAAC"}

package/dist/connectors/core/credentials.d.ts

@@ -0,0 +1,104 @@
+/**
+ * What a connector declares about its credentials, and what a component accepts.
+ *
+ * ─── Type and shape are different things ───
+ *
+ * A credential has a TYPE and a SHAPE.
+ *
+ * - The type, `credType`, is the connector's own enum value — `SLACK_BOT_TOKEN`,
+ *   `GITHUB_WEBHOOK_SECRET`. It says who owns the credential and what it is for,
+ *   and it is what compatibility is checked on: a Slack step lists only Slack
+ *   credentials, even though a Jira token has the same shape.
+ * - The shape, `authType`, is one of the framework's small fixed set
+ *   ({@link CredentialAuthType}). It decides how values are stored, which form
+ *   the vault renders, and how the value is applied to an outbound request.
+ *
+ * A definition binds one type to one shape, and a stored credential carries both.
+ *
+ * ─── Definitions are referenced, not retyped ───
+ *
+ * Components refer to the DEFINITION OBJECT rather than repeating the type as
+ * text, so a typo is a compile error rather than a boot error:
+ *
+ *     export const SLACK_BOT_TOKEN = defineCredential({
+ *       connectorId: 'slack', credType: 'SLACK_BOT_TOKEN',
+ *       label: 'Bot token', authType: CredentialAuthType.Bearer,
+ *     });
+ *
+ *     override readonly credential = [SLACK_BOT_TOKEN];   // not ['SLACK_BOT_TOKEN']
+ */
+import type { CredentialAuthType } from '../../common/credentials.js';
+import type { AnyStep } from './base-connector.js';
+/**
+ * The format a `credType` must follow: SCREAMING_SNAKE_CASE, the way the
+ * framework's other enums read. Checked by the registry at boot.
+ */
+export declare const CREDENTIAL_TYPE_PATTERN: RegExp;
+/**
+ * One credential type a connector offers. Build with {@link defineCredential}.
+ *
+ * Generic over the OWNING CONNECTOR'S ID so the owner survives in the type:
+ * a definition owned by `acme` and one owned by `other` are different types,
+ * which is what lets {@link declareSteps} reject a step reaching for another
+ * connector's credential without running anything.
+ */
+export interface CredentialDefinition<TConnector extends string = string> {
+    /** The connector's enum value, e.g. `'SLACK_BOT_TOKEN'`. Globally unique. */
+    readonly credType: string;
+    /** The connector that owns it, for the registry's ownership check. */
+    readonly connectorId: TConnector;
+    /** Human label for the vault, e.g. `"Bot token"`. */
+    readonly label: string;
+    /** Where to find or how to choose the value. Shown when creating one. */
+    readonly description?: string;
+    /** The stored shape. Drives the vault's form and outbound application. */
+    readonly authType: CredentialAuthType;
+}
+/** Declare a credential type. Frozen, so every component holds the same object. */
+export declare function defineCredential<TConnector extends string>(input: {
+    connectorId: TConnector;
+    credType: string;
+    label: string;
+    description?: string;
+    authType: CredentialAuthType;
+}): CredentialDefinition<TConnector>;
+/**
+ * The credential types a component accepts — the definitions themselves.
+ *
+ * Empty means "authenticates nothing", which is most components. This says
+ * WHICH types are acceptable, not WHETHER one is needed: that stays with
+ * `credentialSlots`, because HTTP_REQUEST accepts several types while needing
+ * none.
+ */
+export type CredentialRequirement = readonly CredentialDefinition[];
+/** A component that authenticates nothing — a CODE step, a LOOP step. */
+export declare const NO_CREDENTIAL: CredentialRequirement;
+/** Can a stored credential of this type satisfy the requirement? */
+export declare function acceptsCredential(requirement: CredentialRequirement, credType: string): boolean;
+/**
+ * A step, narrowed to the credential types one connector offers.
+ *
+ * `AnyStep` erases each step's credential types, which is what lets a registry
+ * hold steps from every connector in one map — and also what stops the compiler
+ * from noticing a step reaching for a credential its connector never declared.
+ * This type puts that information back for the one moment it matters: when a
+ * connector lists the steps it owns.
+ */
+export type StepAccepting<TCredential extends CredentialDefinition> = Omit<AnyStep, 'credential'> & {
+    readonly credential?: readonly TCredential[];
+};
+/**
+ * Declare a connector's steps, checked against its credentials AT COMPILE TIME.
+ *
+ *     override readonly credentials = BUILTIN_CREDENTIALS;
+ *     override readonly steps = declareSteps(BUILTIN_CREDENTIALS, [
+ *       new HttpRequestStep(),   // accepts builtin types — fine
+ *       new ForeignStep(),       // accepts another connector's type — red squiggle
+ *     ]);
+ *
+ * The registry makes the same check at boot, because a step whose `credential`
+ * is typed as the wide `CredentialDefinition[]` has no literal types left to
+ * compare.
+ */
+export declare function declareSteps<TCredential extends CredentialDefinition>(_credentials: readonly TCredential[], steps: readonly StepAccepting<TCredential>[]): readonly AnyStep[];
+//# sourceMappingURL=credentials.d.ts.map

package/dist/connectors/core/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/connectors/core/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;GAGG;AACH,eAAO,MAAM,uBAAuB,QAAoC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB,CAAC,UAAU,SAAS,MAAM,GAAG,MAAM;IACtE,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,UAAU,SAAS,MAAM,EAAE,KAAK,EAAE;IACjE,WAAW,EAAE,UAAU,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,kBAAkB,CAAC;CAC9B,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAQnC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,oBAAoB,EAAE,CAAC;AAEpE,yEAAyE;AACzE,eAAO,MAAM,aAAa,EAAE,qBAA0B,CAAC;AAEvD,oEAAoE;AACpE,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,qBAAqB,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAET;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,CAAC,WAAW,SAAS,oBAAoB,IAChE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CAC9C,CAAC;AAEJ;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,WAAW,SAAS,oBAAoB,EACnE,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,KAAK,EAAE,SAAS,aAAa,CAAC,WAAW,CAAC,EAAE,GAC3C,SAAS,OAAO,EAAE,CAEpB"}