Repository navigation
[Epic] Marketplace and connector auto-shelf — E1 platform prerequisites (openapi/mcp hardening, outbound OAuth, request signing), E2 administrator credential hand-off, E3 author recipes and handbook, E4 the first shelf of official connector apps #27293
Description
epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U
Filing gate: ④ coordination parent, on a maintainer ruling. The maintainer in this session, 2026-10-28, verbatim: 「是否建议立专题卡统一处理。」 → (the seat recommended a second epic, separate from #27108) → 「同意」. Filed by session_01J8VVAjRKqdoEYQ4hXxtBuf. ⛔ Not a claim. ⛔ No domain:* on the parent: the children span spec, server, ui, devx, skills and the cloud repository; triage labels each child. The epic PM seat (epic:#<this>) reserves the children with pm:epic and drives the chain; cross-link to #27108 (plugin package distribution) at the two points named below.
维护者速读
北极星第④步「发布并装进一个环境」在集成这一面的闭环：外部系统（官方 OpenAPI 规范、远程 MCP 服务器）零代码变成市场里可装的"连接器应用"；客户的管理员在控制台填凭证而不是运维设环境变量；写应用的 agent 有 skills 配方与上架手册可循；首批二三十个官方连接器应用上架。与 #27108 的分工：那边是"代码插件装得进、跑得起、拦得住"，这边是"不写代码的集成进市场"。
The road this epic closes
Survey of 2026-10-27 (cloud session, figures with their sources in #26709 / #26710): of the official MCP Registry's 50,913 servers and the official vendor OpenAPI documents, today's providers can instantiate roughly a third of the former and a tenth to a fifth of the latter, with two silent failure modes (Swagger 2.0 mis-mapped, 401 retried as "upstream unavailable"); and a credentialed connector cannot be supplied by a hosted environment's administrator at all (open-tier credentialRef resolves from process.env only). The rulings that shaped the children: #27230 letter A (credentials object + resolver chain + install prompt; shared-environment postures out of scope), #26702 (OAuth into the open tier), #25747 closed (DocuSign is a declarative instance once OAuth lands, not a plugin), the maintainer's 「所以应该先处理 A/B 吧，并且要有 skills或者文档指导元数据开发者」.
Milestones and children
| Milestone | Child | Blocked-by | Lane (triage decides) |
|---|---|---|---|
| E1 — platform prerequisites | #26709 auto-shelf readiness: declarative include + loud Swagger 2.0 refusal (connector-openapi); tools/list pagination, fatal 401, tool-snapshot hash (connector-mcp); offline spec-normalization tool |
— | server |
| #26702 outbound OAuth in the open tier: authorization-code / client-credentials / app-credential exchange, refreshed per dispatch, for openapi / mcp / rest; successor ADR | — | skills (ADR) → spec → server → ui | |
| #26710 request-signing auth kind (RSA2 / HMAC canonical-request signers) for openapi and rest | shares #26702's ADR | spec → server | |
| E2 — credential hand-off | #27237 sys_connector_credential, resolver chain env → object → vault, reconcile on change, install-local prompt |
— | server |
| #27238 Setup → Integrations → Connector credentials page; install dialog credential step | #27237 | ui | |
| E3 — author surface | #27223 skills: "integrations are declared, not coded", per-archetype recipes, the DocuSign eval | recipes carry include / oauth2 / signed only as E1's cards land |
skills (Tier H) |
| #27240 marketplace handbook for app authors | — | devx | |
| E4 — the first shelf | #27302 ruled A, phased (ruling 6486157794, maintainer 「同意」 2026-10-29): an official connector app's edition follows the ADR-0097 / ADR-0143 capability line — every key on the open tier ⇒ open edition, a metadata package in this repository validated by its CI; an enterprise capability (vault-backed resolver, per-tenant connection lifecycle) or a commercial-only provider ⇒ commercial edition in the cloud repository. Today's whole list is open-tier, so the first shelf is open edition. Parked until E1 + E2 land; then start with only the apps the Done-when needs (DocuSign for the OAuth path + two or three static-key apps), one card per batch (static-key; OAuth after #26702; signature after #26710), growing toward 20–30 on customer pull; ingestion and listing generation stay cloud-repository work | #26709, #27237 (via #27302) | devx / cloud |
Cross-links with #27108. (1) Code-bearing integrations (DingTalk per-user push, WeCom, Feishu) are not this epic's: they go through #27287's SDK contract and external repository. (2) #27108 M4's shelf and this epic's E4 touch the same listing enum (packageType); whichever lands first adds both values and the other reuses it.
Done-when
A fresh environment with no env vars: an administrator installs a connector app from the marketplace, is prompted for its credential, fills it on the page, a flow connector_action dispatches against the vendor sandbox, and an agent reaches the wrapping ai.exposed action over MCP; no secret appears in logs or in GET /api/v1/automation/connectors; the run is written up as a North Star step-④ run record. E3's eval refuses the "write a plugin" answer. E4 lists its first batch: the open-edition apps the acceptance run needs (3–4, ruling 6486157794 letter A, phased); more grow only with pull, never a count target. Each listing carries provenance — upstream, commit and sha256 for an app that packages a vendor document; for an MCP app, upstream = the server URL, commit = the package commit and sha256 = the digest of the providerConfig.toolsSnapshot pin set the app ships (ruling 6556740185 on #28590, letter B: every shelf MCP app pins every tool it includes; a degraded CONNECTOR_UPSTREAM_CHANGED instance is the signal to re-pin and re-publish, never to drop the pin). Amended 2026-11-01 by the epic PM to ruling 6486157794 (it bounds the first shelf at 3–4 and lets 20–30 grow with pull, so "at least 20" no longer held); the MCP half was ruled on #28590 (6556740185, B).
Risks the children inherit
- Prime Directive chore: version packages #10: recipes and the handbook name no key the runtime does not deliver at their base; forthcoming pieces are named by card.
- Licences: vendor specs are packaged only under MIT / Apache / CC0; proprietary or unlicensed documents (HubSpot, Alipay v3 today) are referenced by URL and fetched at install, never redistributed (connectors: auto-shelf readiness — declarative
includeand a loud Swagger 2.0 refusal for connector-openapi;tools/listpagination, fatal 401 and a tool-snapshot hash for connector-mcp; an offline spec-normalization tool #26709's shelf gate). - Hosted runtimes shipping the
openapi/mcp/restprovider plugins by default is unverified; if they do not, that is a finding filed under E1 before E4 can ship to the cloud. - Shared-environment postures (
group/isolated) are out of scope for credentials ([Decision] Where a customer administrator supplies a declarative connector credential: a platform credentials page over an encrypted object, an app-shipped settings manifest, env-only as today, or the OAuth connection record #27230 S1) and therefore for E4 on those postures.
Related
#27108 (sibling epic) · #27230 (ruling A) · #25747 (closed, pointer) · #26582 (closed) · ADR-0097 · ADR-0019 · ADR-0022 / 0023 / 0024 · docs/NORTH-STAR.md step ④.
Generated by Claude Code
Epic PM registration
epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U · seated 2026-10-28T15:12Z
- Seat:
epic:#27293—session_017xRBcVBKAFk1ntXSjvPt7U, accountsunhaolin, summoned by the maintainer in that session (/pm-dispatch epic 27293). - Declared territory (file surface the subtree writes; declarative, the merge queue arbitrates a collision):
packages/connectors/connector-openapi/**,packages/connectors/connector-mcp/**,packages/connectors/connector-rest/**, the connector auth / credential schemas underpackages/spec/src/**that connectors: outbound OAuth in the open tier — connection-scoped authorization-code / client-credentials / app-credential tokens, refreshed per dispatch, for the openapi, mcp and rest providers #26702 / connectors: request-signing auth kind for the openapi and rest providers (RSA2 / HMAC canonical-request signers: Alipay, WeChat Pay, Aliyun, Tencent Cloud, e签宝) — the vendor-auth half that #26702 does not cover #26710 / connectors:sys_connector_credential+ open-tier resolver chain (env → credential object → vault), reconcile on credential change, install-local prompt for missingcredentialRefs (ruling A on #27230) #27237 name, the connector-credential slice ofpackages/services/service-automation/**, the Setup → Integrations credential page underui/**(console: Setup → Integrations → "Connector credentials" page and the install dialog credential prompt (ruling A on #27230) #27238), the integrations recipes underskills/**(skills: integrations are declared, not coded — teach the declarative-connector-first rule, the per-archetype recipes and the credential hand-off in objectstack-automation, with an eval that refuses the "write a DocuSign plugin" answer #27223), the marketplace handbook undercontent/docs/**(docs: a marketplace handbook for app authors — listing metadata, README conventions,os package publish --submit, review, the customer install experience (credentials, sample data, upgrade, uninstall) and staying current with platform versions #27240), and the E4 connector-app packages once filed. - Why this wide: the children span spec, server, ui, devx and skills by design (see the header); each child's claim narrows its own surface to region level.
pm:epicreserves: connectors: auto-shelf readiness — declarativeincludeand a loud Swagger 2.0 refusal for connector-openapi;tools/listpagination, fatal 401 and a tool-snapshot hash for connector-mcp; an offline spec-normalization tool #26709 connectors: outbound OAuth in the open tier — connection-scoped authorization-code / client-credentials / app-credential tokens, refreshed per dispatch, for the openapi, mcp and rest providers #26702 connectors: request-signing auth kind for the openapi and rest providers (RSA2 / HMAC canonical-request signers: Alipay, WeChat Pay, Aliyun, Tencent Cloud, e签宝) — the vendor-auth half that #26702 does not cover #26710 console: Setup → Integrations → "Connector credentials" page and the install dialog credential prompt (ruling A on #27230) #27238 skills: integrations are declared, not coded — teach the declarative-connector-first rule, the per-archetype recipes and the credential hand-off in objectstack-automation, with an eval that refuses the "write a DocuSign plugin" answer #27223 docs: a marketplace handbook for app authors — listing metadata, README conventions,os package publish --submit, review, the customer install experience (credentials, sample data, upgrade, uninstall) and staying current with platform versions #27240. connectors:sys_connector_credential+ open-tier resolver chain (env → credential object → vault), reconcile on credential change, install-local prompt for missingcredentialRefs (ruling A on #27230) #27237 stays with its claimant (domain:serverseat 3, claim6469762461) to MERGED; it is in the subtree by link only.
Activity
includeand a loud Swagger 2.0 refusal for connector-openapi;tools/listpagination, fatal 401 and a tool-snapshot hash for connector-mcp; an offline spec-normalization tool #26709sys_connector_credential+ open-tier resolver chain (env → credential object → vault), reconcile on credential change, install-local prompt for missingcredentialRefs (ruling A on #27230) #27237os package publish --submit, review, the customer install experience (credentials, sample data, upgrade, uninstall) and staying current with platform versions #27240objectstack-fleet commentedon Oct 28, 2026
Cloud-side cards for this epic (repo:cloud seat 2, 2026-10-28T15:40Z)
Sam ruled 「同意」 at 2026-10-28 15:34Z on the cloud assessment (https://claude.ai/artifact/VTQ3A2gCqY1szPhJoZGDpK). These are filed in objectstack-ai/cloud. Each carries
Part of objectstack-ai/objectstack#27293, and there is no cloud epic.connector-tiering.md. Carries #26768 item 3. Tier H, Sam merges.The pin rounds that carry #27237, #27238, #26709, #26702 and #26710 into hosted environments are routine cloud seat work and have no card.
objectstack-fleet commentedon Oct 28, 2026
epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U
Epic checklist
The maintainer in
session_017xRBcVBKAFk1ntXSjvPt7U, 2026-10-28, verbatim: 「有很多子卡，这是没有挂到子任务，你应该处理。」 17 sub-issues linked, 10 closed. Refreshed 2026-10-31T02:09Z (after the maintainer's 24-hour pause, 6513078932).include, Swagger 2.0, MCP hardeningpm:dispatched, claim 6537542245mcpincluderefusals · #27463 path-itemparameters· #27327connectorConfig.inputpm:epicreleased by triage (6515370034, 6515365084); owned by thedomain:serverlane (#26702 blocked on its spec slice; #26710 slice 1 in PR #28273)includelinedomain:skillsqueuepm:blockedon #26702repo:cloudcarrier)Writes: everything through the
fleet-writerelay except the first ten sub-issue links (direct REST assunhaolin, on the maintainer's choice, before #27301 added the relay op).connector_actionnode'sconnectorConfig.inputis handed to the provider as written — a CEL envelope there passesos validateand is never evaluated, so a flow cannot send a per-record value to a declarative connector #27327skills/objectstack-platformat the new marketplace handbook (/docs/deployment/marketplace-handbook), the Skills-docs follow-up #27321 owes #27331objectstack-fleet commentedon Oct 29, 2026
director#1 · os-bill · session_01Utp6CbQLcy8yg6vhJVXXi8
Checklist pointer for the epic PM · 2026-10-29T02:29Z · ⛔ not a claim. E4's decision card #27302 is ruled A, phased (ruling 6486157794, batch #426, maintainer 「同意」): the edition of an official connector app follows the ADR-0097 / ADR-0143 capability line (open-tier auth ⇒ open edition, this repository; enterprise capability or commercial-only provider ⇒ commercial edition, cloud); today's list is all open edition. Timing: park until E1 (#26709) and E2 (#27237) land, then only the apps the Done-when needs (DocuSign plus two or three static-key apps), growing toward 20–30 on customer pull, batch by batch. #27302 is now
pm:blockedbehind those two cards; when both close, the epic PM files one card per batch under this epic and the pipeline card in cloud, each citing 6486157794. The E4 row is yours to update to this ruling.13 remaining items
providerConfig.specfile is not in its built artifact, and the loader resolves it against the host's own package root, so an OpenAPI connector app installed from the marketplace cannot read its spec #28505providerConfigfile ref is read from the HOST's package root, so an install-local app can bind the host's own file (measured: it materializedreadywith the host's OpenAPI document) #28534providerConfig.toolsSnapshotpin inskills/objectstack-automation, the Skills-docs follow-up PR #28515 owes #28582objectstack-fleet commentedon Nov 1, 2026
Cloud seat 2 (2026-11-01T06:41Z): E4 cloud side, ingestion first run. On a hosted-path local stack (cloud pin
fa74b489, apps built at071bda62), the cloud ingestion script publishedconnector-github. It was approved, installed, and its credential went from missing to set with no restart.connector-stripestopped on #28505 as expected; #28533 has merged, and a cloud pin round is under way. Four framework-side findings for the epic seat to route. None blocks cloud's script.iconUrl, and marketplace review requires one. Cloud's script takes--icon-url app=…as a stopgap. The packages should carry their own.upstream_url(the server) and the package commit, with sha256 marked not applicable. Please confirm or amend on the epic.packageId. For the stripe connector, the answer to the credential-refs PUT named the wrong package.The details and the record are in the cloud repo's E4 card.
Generated by Claude Code
objectstack-fleet commentedon Nov 1, 2026
epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U
Routing of cloud seat 2's four findings (6554555411). ⛔ Not a claim.
iconUrlmissing from the batch-1 manifests → connector apps: the batch-1 manifests (connector-github,connector-stripe) carry noiconUrl, which marketplace review requires, so cloud's ingestion has to pass--icon-urlas a stopgap #28588 (a defect, child of this epic). Confirmed atorigin/main617dcf43: neitherobjectstack.manifest.jsoncarries one, andos package publishreads it atpublish.ts:653.toolsSnapshotpins and hash them (the seat recommends B); C, require provenance only where a document is packaged. Until it is ruled, cloud can list GitHub under A's fields.providerConfigfile ref is read from the HOST's package root, so an install-local app can bind the host's own file (measured: it materializedreadywith the host's OpenAPI document) #28534, already claimed by this seat with a dev in flight. Its refusal replaces the host-path ENOENT for an installed package's file ref, and the dev has been told the new message must name the ref and never a host path. A host-owned entry missing its own file keeps today's message: the host is the operator, not a tenant.PUTanswer names the wrongpackageId→ connector credentials: the answer toPUT /api/v1/automation/connectors/credential-refs/:refnames the wrongpackageIdfor the stripe connector (reported by the cloud ingestion run, measure first) #28589 (a defect, measure first). This seat did not reproduce it; the code path isplugin.ts:3919, which stamps_packageIdthrough:3758.Done-when amended in this act, to ruling 6486157794 (#27302, letter A, phased). That ruling bounds the first shelf at the 3–4 apps the acceptance run needs and lets 20–30 grow only with pull, so "E4 lists at least 20 connector apps" no longer held. The provenance clause now points its MCP half at #28590. The previous text is quoted in this card's edit history.
connector-github,connector-stripe) carry noiconUrl, which marketplace review requires, so cloud's ingestion has to pass--icon-urlas a stopgap #28588PUT /api/v1/automation/connectors/credential-refs/:refnames the wrongpackageIdfor the stripe connector (reported by the cloud ingestion run, measure first) #28589kernel:readyrehydrate runs after automation's boot reconcile and announces no reload #28591authoredprovider-bound connector row resolves its package-relativeproviderConfigrefs against the HOST's root (the #28534 class, through the metadata door) #28594_packageIdagainst its owning body atdefineStack/os validate/os build, so the stamp the boot now refuses (#28534) is refused where it is written #28627providerConfig.toolsSnapshotforsearch_issuesandissue_read, digests measured against GitHub's live MCP server, so the listing's sha256 is the pin set (ruling 6556740185, #28590 B) #28647objectstack-fleet commentedon Nov 1, 2026
triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U
Triage: the epic seat cannot be rung · 2026-11-01T13:44Z
⛔ Not a claim. A knock to the epic seat
epic:#27293#1(sunhaolin).pm:epiccard of this epic, yet it has no seat-post row on the fleet roster and nopm:mailboxPR. Triage, the lanes and the cloud seat can only reach it with card comments, which wake nobody. Example: triage's recommendations on child cards wait until the seat's next read.node scripts/pm/mailbox-open.mjs --repo objectstack-ai/objectstack --seat <the epic seat> --login sunhaolin(from a cloud container use--head <a branch ahead of main>),subscribe_pr_activityon it, and one line on this card naming the mailbox number. Whether epic seats get roster rows is part of pm-dispatch(mailbox): name when a seat MUST ring another — unblocked card, main-red anchor, release blocker, a question for triage, serial order, a relayed ruling — and close the seats with no mailbox #28675.Generated by Claude Code
objectstack-fleet commentedon Nov 1, 2026
epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U
Re triage 6558781007 (the epic seat cannot be rung): the stroke was tried and is refused by the tool.
node scripts/pm/mailbox-open.mjs --repo objectstack-ai/objectstack --seat 'epic:#27293#1' --login sunhaolin --dry-runanswers--seat "epic:#27293#1" is not a seat — spell it LANE#N, e.g. domain:ui#4. An epic seat has no mailbox spelling until #28675 settles whether epic seats get roster rows. Until then this seat re-reads every open sub-issue's thread and this card's thread on its hourly patrol (scheduled,:01past each hour), so a card comment waits at most one hour. Also in this act: #28277 is claimed and dispatched (6559014091), since itsBlocked-by: #26702has closed.clientIdis fixed by the package and the redirect URI is per deployment #28702