connectors v1

Typed specification

Generated by the pinned ess generate --kind docs from ess. Structural validation establishes consistency; behaviour, storage and cross-record predicates remain implementation obligations.

The system as a graph

A command is accepted by the component that owns its context, emits the events one of its outcomes declares, and a dashed edge is a binding carrying an event into the next command. Design §9 begins one step earlier, at the actor who invokes the first command, and so does this graph: a solid edge out of an actor is a grant, and an actor drawn with no edge at all may invoke nothing — which is something the model says, not an arrow somebody forgot.

Bounded contexts

• approval_issuers (connectors.approval_issuers) — Local issuer identities and immutable signing-key versions with guarded publication. Two types, two entities, two views, seven commands, seven events, three errors and one actor.
• artifact_provenance (connectors.artifact_provenance) — Immutable shared source and bundle declarations; optional distribution publication is separate. Nine types, two entities, no views, no commands, no events, no errors and no actors.
• auth_access (connectors.auth_access) — Proposed access selection, acquisition declaration and exact permission-budget values; no runtime or persistent owner. 15 types, no entities, no views, no commands, no events, no errors and no actors.
• auth_bindings (connectors.auth_bindings) — Proposed host-private auth records and acknowledged lifecycle boundaries. Eight types, four entities, seven views, 17 commands, 17 events, eight errors and one actor.
• cli (connectors.cli) — Selected local CLI presentation values and the existing local configuration owner's durable runtime facts. 157 types, three entities, two views, seven commands, seven events, one error and one actor.
• clock (connectors.clock) — Explicitly trusted local clock configuration, bounded observations and owner anti-regression floors. Eight types, one entity, one view, two commands, two events, one error and one actor.
• connection_admission (connectors.connection_admission) — Proposed connection viability, request eligibility and host management target values; no runtime checker or persistent connection lifecycle. 13 types, no entities, no views, no commands, no events, no errors and no actors.
• credential_evidence (connectors.credential_evidence) — Proposed generation-bound evidence values and transient dispatch admission decisions. Eight types, two entities, two views, eight commands, eight events, three errors and one actor.
• credentials (connectors.credentials) — Host-private immutable credential snapshot identities shared by refresh and evidence. Three types, one entity, one view, one command, one event, no errors and one actor.
• declarations (connectors.declarations) 17 types, five entities, one view, three commands, three events, three errors and two actors.
• definitions_install (connectors.definitions_install) — What connectors definitions install reads and writes. Index is a connectors-definitions release's published index.json as this build reads it; Lock pins one installed release for one connectors configuration; CacheEntry is the read-only copy of that release's files, keyed by the SHA-256 of its index.json. Nine types, no entities, no views, no commands, no events, no errors and no actors.
• delegation (connectors.delegation) — One-hop approval subjects and immutable receiver receipts; private host approval binding, no delegated ingress runtime. 22 types, two entities, one view, one command, one event, no errors and one actor.
• discovery (connectors.discovery) — Discovery scope, publication, fixed route and immutable composition values; persistent collection ownership is in discovery_state. 23 types, no entities, no views, no commands, no events, no errors and no actors.
• discovery_state (connectors.discovery_state) — Host-owned scope epochs, bounded observation records and atomic publication selections; no provider Resource entity. Eight types, two entities, no views, 10 commands, six events, three errors and no actors.
• execution_audit (connectors.execution_audit) — Per-hop durable execution-audit anchor and one final observation; private host port, with dispatch integration and exporter pending. 13 types, one entity, one view, three commands, three events, eight errors and two actors.
• feed (connectors.feed) — Proposed provider-independent incremental reads of a connection's containers and their items; no runtime or persistent provider owner. 22 types, two entities, four views, seven commands, five events, five errors and two actors.
• idempotency (connectors.idempotency) — Proposed receiver-owned keyed mutation reservations and replay retention. Seven types, one entity, two views, four commands, four events, one error and one actor.
• local_approval_policy (connectors.local_approval_policy) — Proposed serialized local owner policy for approval issuance and write admission. Three types, one entity, one view, two commands, two events, five errors and one actor.
• mutations (connectors.mutations) — Host-owned mutation attempt ledger with a private local binding; not a public mutation API. 12 types, one entity, two views, six commands, six events, two errors and two actors.
• oauth2 (connectors.oauth2) — Provider-neutral OAuth 2.0 authorization servers a profile declares, and the access tokens the host issues to a local caller from a stored grant. Nine types, two entities, two views, two commands, two events, five errors and one actor.
• refresh (connectors.refresh) — Proposed host-owned durable authorization of one rotating refresh per credential generation. Nine types, one entity, one view, nine commands, nine events, four errors and no actors.
• service_wire (connectors.service_wire) — Public service envelope, observation and operation metadata values; the first v1alpha2 binding is served and read, no persisted entity. 22 types, no entities, no views, no commands, no events, no errors and no actors.
• sessions (connectors.sessions) — Proposed supervising session lifecycle; timed enforcement remains a binding obligation. 11 types, one entity, one view, eight commands, 10 events, one error and no actors.
• standing_approvals (connectors.standing_approvals) — Standing write grants an operator mounts for a served instance, and the hourly count of writes admitted under each. Three types, one entity, one view, three commands, three events, one error and one actor.
• tool_contracts (connectors.tool_contracts) — A tool-contract/1 document an instance's descriptor revision publishes for its admitted operations, with the profile authored beside the adapter, and the refusals of its publisher. 11 types, one entity, one view, one command, one event, five errors and one actor.
• transport (connectors.transport) — Bounded private transport values without credential or dispatch authority. Six types, no entities, no views, no commands, no events, no errors and no actors.
• websearch (connectors.websearch) — Proposed provider-independent web search, fetch and crawl values; no runtime or persistent provider owner. 14 types, no entities, no views, no commands, no events, no errors and no actors.

Components

A component is a unit of ownership, not a deployment. How many of each runs, and what each needs, is the topology.

feed-binding — Any adapter that binds datasource.feed/v1alpha1; a fixture binding realises it for conformance, its Provider commands seeding the source it reads. It owns connectors.feed. It accepts connectors.feed.AddContainer, connectors.feed.AddItem, connectors.feed.ListContainers, connectors.feed.ReadItems, connectors.feed.RemoveItem, connectors.feed.RestoreItem and connectors.feed.ReviseItem. It publishes connectors.feed.ContainerAdded, connectors.feed.ItemAdded, connectors.feed.ItemRemoved, connectors.feed.ItemRestored and connectors.feed.ItemRevised.

local-metadata-authority — Owns the local host decisions retained by the recorded metadata authority. It owns connectors.approval_issuers, connectors.auth_bindings, connectors.cli, connectors.clock, connectors.credential_evidence, connectors.credentials, connectors.declarations, connectors.delegation, connectors.execution_audit, connectors.idempotency, connectors.local_approval_policy, connectors.mutations, connectors.oauth2 and connectors.refresh. It accepts connectors.approval_issuers.AdvanceIssuerRevision, connectors.approval_issuers.BindIssuer, connectors.approval_issuers.ConfirmKeyDeletion, connectors.approval_issuers.PublishKey, connectors.approval_issuers.RetireKey, connectors.approval_issuers.RevokeKey, connectors.approval_issuers.StageKey, connectors.auth_bindings.AcknowledgeCustodyDeletion, connectors.auth_bindings.AcknowledgeCustodyWrite, connectors.auth_bindings.AllocateConnection, connectors.auth_bindings.BeginAcquisition, connectors.auth_bindings.CompleteAcquisition, connectors.auth_bindings.ConsumeAcquisition, connectors.auth_bindings.ExpireAcquisition, connectors.auth_bindings.FailAcquisition, connectors.auth_bindings.InvalidateCustodyVersion, connectors.auth_bindings.MarkConnectionStale, connectors.auth_bindings.PublishBinding, connectors.auth_bindings.RecordAcquisitionCandidate, connectors.auth_bindings.RecordConnectionCandidate, connectors.auth_bindings.RecordCustodyVersion, connectors.auth_bindings.RecordProfile, connectors.auth_bindings.RetireCustodyVersion, connectors.auth_bindings.RevokeConnection, connectors.cli.ExpireConnectionListCursor, connectors.cli.RaiseStoreWriter, connectors.cli.RecordConnectionListCursor, connectors.cli.RecordLocalRuntime, connectors.cli.RecordStoreWriter, connectors.cli.RememberLocalRuntimeBootstrap, connectors.cli.SetLocalRuntimeSuppression, connectors.clock.AdvanceLocalClockFloor, connectors.clock.RecordLocalClockFloor, connectors.credential_evidence.AdmitGeneration, connectors.credential_evidence.CaptureReadUse, connectors.credential_evidence.DispatchGeneration, connectors.credential_evidence.DispatchReadUse, connectors.credential_evidence.ExpireReadUse, connectors.credential_evidence.InspectGeneration, connectors.credential_evidence.RejectAdmission, connectors.credential_evidence.ReleaseReadUse, connectors.credentials.RecordCredentialGeneration, connectors.declarations.AdvanceRegistryEpoch, connectors.declarations.RecordServiceConfiguration, connectors.declarations.UpgradeServiceConfiguration, connectors.delegation.RecordApprovalRedemption, connectors.execution_audit.AcknowledgeAnchor, connectors.execution_audit.AppendFinalObservation, connectors.execution_audit.LinkAnchorAttempt, connectors.idempotency.ExpireResult, connectors.idempotency.QuarantineKey, connectors.idempotency.ReserveKey, connectors.idempotency.RetainResult, connectors.local_approval_policy.ConfigureLocalApprovalPolicy, connectors.local_approval_policy.ReviseLocalApprovalPolicy, connectors.mutations.AbortPrepared, connectors.mutations.OpenDispatch, connectors.mutations.PrepareAttempt, connectors.mutations.RecordCompletion, connectors.mutations.RecordRefusal, connectors.mutations.RecordUncertainty, connectors.oauth2.DeclareAuthorizationServer, connectors.oauth2.IssueAccessToken, connectors.refresh.AuthorizeExchange, connectors.refresh.DiscardCandidate, connectors.refresh.FenceReserved, connectors.refresh.PublishRefresh, connectors.refresh.QuarantineRefresh, connectors.refresh.RecoverStoredResponse, connectors.refresh.ReleaseRateLimited, connectors.refresh.ReserveRefresh and connectors.refresh.StoreResponse. It publishes no events.

tool-contract-publisher — Publishes an instance's tool-contract/1 document from its descriptor revision and the tool profiles authored beside its adapter; refuses a document it cannot publish whole. It owns connectors.tool_contracts. It accepts connectors.tool_contracts.PublishToolContract. It publishes connectors.tool_contracts.ToolContractPublished.

The other pages

page	what is on it
approval_issuers	the connectors.approval_issuers vocabulary: its types, entities, views, commands, events, errors and actors
artifact_provenance	the connectors.artifact_provenance vocabulary: its types, entities, views, commands, events, errors and actors
auth_access	the connectors.auth_access vocabulary: its types, entities, views, commands, events, errors and actors
auth_bindings	the connectors.auth_bindings vocabulary: its types, entities, views, commands, events, errors and actors
cli	the connectors.cli vocabulary: its types, entities, views, commands, events, errors and actors
clock	the connectors.clock vocabulary: its types, entities, views, commands, events, errors and actors
connection_admission	the connectors.connection_admission vocabulary: its types, entities, views, commands, events, errors and actors
credential_evidence	the connectors.credential_evidence vocabulary: its types, entities, views, commands, events, errors and actors
credentials	the connectors.credentials vocabulary: its types, entities, views, commands, events, errors and actors
declarations	the connectors.declarations vocabulary: its types, entities, views, commands, events, errors and actors
definitions_install	the connectors.definitions_install vocabulary: its types, entities, views, commands, events, errors and actors
delegation	the connectors.delegation vocabulary: its types, entities, views, commands, events, errors and actors
discovery	the connectors.discovery vocabulary: its types, entities, views, commands, events, errors and actors
discovery_state	the connectors.discovery_state vocabulary: its types, entities, views, commands, events, errors and actors
execution_audit	the connectors.execution_audit vocabulary: its types, entities, views, commands, events, errors and actors
feed	the connectors.feed vocabulary: its types, entities, views, commands, events, errors and actors
idempotency	the connectors.idempotency vocabulary: its types, entities, views, commands, events, errors and actors
local_approval_policy	the connectors.local_approval_policy vocabulary: its types, entities, views, commands, events, errors and actors
mutations	the connectors.mutations vocabulary: its types, entities, views, commands, events, errors and actors
oauth2	the connectors.oauth2 vocabulary: its types, entities, views, commands, events, errors and actors
refresh	the connectors.refresh vocabulary: its types, entities, views, commands, events, errors and actors
service_wire	the connectors.service_wire vocabulary: its types, entities, views, commands, events, errors and actors
sessions	the connectors.sessions vocabulary: its types, entities, views, commands, events, errors and actors
standing_approvals	the connectors.standing_approvals vocabulary: its types, entities, views, commands, events, errors and actors
tool_contracts	the connectors.tool_contracts vocabulary: its types, entities, views, commands, events, errors and actors
transport	the connectors.transport vocabulary: its types, entities, views, commands, events, errors and actors
websearch	the connectors.websearch vocabulary: its types, entities, views, commands, events, errors and actors
Interactions	every binding, with what it guarantees and what happens when it fails
Type crossings	every conversion this system permits, and the reason someone gave for it
Topology	what each component needs in order to run

---

Generated from connectors v1 · model digest e1e1672d0af4753cb8f2da6c0b22a7f6ae8ce9f7abc168f86169babdf1325787 · contract digest cbce0c8be561de4d2219e841ef73ebdd9e72eac7e83c3cfc1355cac651001d13. Do not edit this file; change the specification and regenerate it with ess generate.