feat(spec)!: retire the connector triggers array — the ConnectorTrigger shape nothing registered, polled or received (#20287) (#20587)

Part of #20287

Clause-②: no (narrowing). The tombstone refuses `triggers`, which parses
today. `@objectstack/spec` minor, with the BREAKING banner and the
ADR-0087 disposition the ruling sets.

Retires `connector.triggers` (the `ConnectorTrigger` array) under
ADR-0049, per the director's ruling on the card (letter B; ADR-0041
unchanged, no new ADR).

- `triggers` is a `retiredKey()` tombstone on `ConnectorBaseSchema`. Its
prescription names what works today: an `api` flow for an external event
and a `schedule` flow for a scheduled pull, each calling the connector's
action in a `connector_action` node.
- The provider-bound refusal on `triggers` is deleted: the tombstone
refuses every value first, so that rule could no longer be reached.
- `ConnectorTrigger` leaves whole. The D2 `connector-triggers-removed`
(step 18) carries `retiredAfter` 17.5.0, the label `main` carries after
the 17.5.0 cut. The D3 is `connector-triggers-retired`.
- The earlier `triggers[].interval` → `intervalSeconds` rename is
absorbed (`spec-property-retirement` §0).
- Ledger: the `triggers` rows collapse into one `dead` tombstone row.
Generated files are regenerated.
- `metadata-core`'s per-entry window pins now state the window rule over
the live registry, not a snapshot of its `retiredAfter` stamps. This
first post-cut stamp broke the snapshot.

#20287 stays open for its action half.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01Sfe5YjBLwB9J3y8fvm2xq1

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: objectstack-fleet[bot]

.changeset/20287-connector-triggers-retired.md

@@ -0,0 +1,79 @@
+---
+'@objectstack/spec': minor
+---
+
+feat(spec)!: retire the connector `triggers` array — the `ConnectorTrigger` shape nothing ever registered, polled or received (#20287)
+
+**BREAKING** — `connector.triggers` (the `ConnectorTrigger` array: `key`, `label`,
+`description`, `type: 'polling' | 'webhook'`, `intervalSeconds`) is removed from
+`ConnectorSchema` and `DeclarativeConnectorEntrySchema` — so from `defineConnector`,
+`stack.connectors[]`, the `PUT /api/v1/meta/connector/:name` door and
+`AutomationEngine.registerConnector` — and the `ConnectorTriggerSchema` /
+`ConnectorTrigger` exports leave `@objectstack/spec/integration` with it. ADR-0049
+enforce-or-remove, ruled RETIRE on the maintainer's criterion for a
+declared-but-unenforced family; ADR-0041 is unchanged: connector-event triggers stay
+in its third tier, as their own trigger package, promoted when real projects ask for
+them — and then in the mainstream shape (subscribe / unsubscribe lifecycle,
+signature verification, a dedupe cursor), which these five keys could not carry.
+
+Measured before removal: `registerConnector` walks a connector's `actions` only and
+stores the rest of the def unread; the engine's trigger registry holds FLOW trigger
+kinds (`record_change`, `time_relative`, `schedule`, `api`) and no connector trigger
+ever entered it; no polling loop read `intervalSeconds`; no receiver was driven by a
+`webhook` trigger; and no connector package, provider or example declared one. A
+declared trigger parsed clean and never started a flow.
+
+### FROM → TO
+
+| removed | what to write instead |
+| --- | --- |
+| `connector.triggers` with a `type: 'polling'` trigger (`intervalSeconds`, or the pre-rename `interval`) | delete the key, and write a `schedule` flow whose `connector_action` node calls the connector's action — at the cadence you meant, in seconds. |
+| `connector.triggers` with a `type: 'webhook'` trigger | delete the key, and write an `api` flow that the external sender calls, with a `connector_action` node calling the connector's action. It opens an inbound endpoint that never existed before: an `api` flow is refused without a per-flow secret and every call must carry its signature, so the sender must be able to sign. |
+| `ConnectorTriggerSchema`, `ConnectorTrigger` | no replacement — nothing parsed or constructed a connector trigger. |
+
+**The one-line fix: delete `triggers:` from every connector.**
+`os migrate meta --from 17` lists the mechanical edits for existing sources.
+
+⚠️ Runtime behaviour is deliberately **unchanged**: no connector trigger ever started
+anything. What changes is the answer an author gets — the key is refused at parse
+with a prescription naming the two shapes that work, and in `tsc` (its input type is
+`never`), instead of being saved with no effect.
+
+### The retirement kit
+
+- **Tombstone.** `triggers` is a `retiredKey()` tombstone on the private
+  `ConnectorBaseSchema` both published carriers wrap (the schema is not `.strict()`,
+  so a bare deletion would be a silent strip, ADR-0104).
+  `RETIRED_KEYS_BY_MAJOR[18]`: `integration/Connector:triggers` and
+  `integration/DeclarativeConnectorEntry:triggers`. The key had no default, so no
+  retired-default residue is owed.
+- **The provider-bound refusal is gone.** `DeclarativeConnectorEntrySchema` used to
+  refuse `triggers` on a provider-bound instance, reasoned "the provider derives them
+  from the upstream at boot" — untrue, since no provider ever derived a trigger. The
+  tombstone refuses every value on every carrier, so that rule became unreachable and
+  was deleted rather than re-reasoned; a provider-bound instance now meets the
+  retirement prescription.
+- **The def leaves whole** (`RETIRED_DEFS_BY_MAJOR[18]`: `integration/ConnectorTrigger`).
+- **D2 conversion `connector-triggers-removed`** (step 18, retired from the load path):
+  strips the array from `connectors[]` and from stored `sys_metadata` connector rows
+  (the rehydration seam replays it), one notice per connector, as a lossless delete.
+  A trigger is stripped, never turned into a flow.
+- **The chain.** In the same step, `connector-health-and-trigger-durations-unit-in-key`
+  renamed `triggers[].interval` to `intervalSeconds`. That trigger half is absorbed by
+  this removal, as its breaker half already was by the `health` removal, so with neither
+  half left the rename conversion is gone from the table and from step 18; an author
+  holding either spelling ends with no `triggers` at all. The retired-key row
+  `integration/ConnectorTrigger:interval` stays as the record.
+- **D3 entry `connector-triggers-retired`** carries the family's judgement: which
+  triggers should exist now as flows, the cadence in seconds, and whether an external
+  sender can sign the calls a signed `api` flow requires. The absorbed rename's own D3 entry
+  (`connector-resilience-durations-unit-in-key`) is gone with its
+  conversion.
+- **No deprecation window**, per the project's startup-stage posture.
+
+⚠️ **The out-of-repo consumer population is NOT MEASURED.** `@objectstack/spec` is
+published, so this is breaking for consumers no telemetry was consulted for.
+
+Clause-②: no (narrowing)
+
+<!-- adr-0087: registered connector-triggers-removed, connector-triggers-retired -->

content/docs/references/index.mdx

@@ -1,7 +1,7 @@
 ---
 title: Protocol reference — every schema by module
 navTitle: Protocol Reference
-description: Every schema published by @objectstack/spec — 1522 schemas across 14 protocol modules
+description: Every schema published by @objectstack/spec — 1521 schemas across 14 protocol modules
 ---
 
 {/* ⚠️  AUTO-GENERATED — DO NOT EDIT. Run build-docs.ts to regenerate. Hand-written docs live in the module folders under content/docs/. */}
@@ -25,7 +25,7 @@ counts are sums of the rows they head. Regenerate with
 | [Automation Protocol](/docs/references/automation) | 14 | 75 | Flows and their nodes, approvals, ETL pipelines, webhooks, state machines, execution records. |
 | [Data Protocol](/docs/references/data) | 29 | 175 | Objects, fields, queries, filters, datasources and drivers — the ObjectQL layer. |
 | [Identity Protocol](/docs/references/identity) | 5 | 27 | Users and accounts, organizations, positions, SCIM provisioning. |
-| [Integration Protocol](/docs/references/integration) | 1 | 17 | The single connector protocol (ADR-0097) — catalog descriptors and provider-bound instances. |
+| [Integration Protocol](/docs/references/integration) | 1 | 16 | The single connector protocol (ADR-0097) — catalog descriptors and provider-bound instances. |
 | [Kernel Protocol](/docs/references/kernel) | 30 | 157 | Plugin lifecycle and manifests, capabilities and security, metadata loading, service registry. |
 | [Marketplace Protocol](/docs/references/marketplace) | 4 | 30 | The package & marketplace format — package identity and versions, listing, publish, review, search, install, template manifests. |
 | [QA Protocol](/docs/references/qa) | 1 | 8 | Declarative test suites — scenarios, steps, actions and assertions. |
@@ -34,7 +34,7 @@ counts are sums of the rows they head. Regenerate with
 | [Studio Protocol](/docs/references/studio) | 3 | 35 | Studio designer metadata — the authoring surfaces for the protocols above. |
 | [System Protocol](/docs/references/system) | 34 | 275 | The runtime environment — logging, jobs, cache, metrics, notifications, i18n and compliance. |
 | [UI Protocol](/docs/references/ui) | 16 | 165 | Apps, pages, views, dashboards, reports, actions and themes — the ObjectUI layer. |
-| **Total** | **196** | **1522** | 14 protocol modules |
+| **Total** | **196** | **1521** | 14 protocol modules |
 
 ---
 
@@ -187,13 +187,13 @@ Users and accounts, organizations, positions, SCIM provisioning.
 
 ## Integration Protocol
 
-**Source:** `packages/spec/src/integration/` · **Import:** `@objectstack/spec/integration` · **1 page, 17 schemas**
+**Source:** `packages/spec/src/integration/` · **Import:** `@objectstack/spec/integration` · **1 page, 16 schemas**
 
 The single connector protocol (ADR-0097) — catalog descriptors and provider-bound instances.
 
 | File | Schemas |
 | :--- | :--- |
-| [`connector.zod.ts`](/docs/references/integration/connector) | `Connector`, `ConnectorAction`, `ConnectorActionEffect`, `ConnectorConflictResolution`, `ConnectorFieldMapping`, `ConnectorInstanceAPIKeyAuth`, `ConnectorInstanceAuth`, `ConnectorInstanceBasicAuth`, `ConnectorInstanceBearerAuth`, `ConnectorInstanceNoAuth`, `ConnectorRetryStrategy`, `ConnectorTrigger`, `ConnectorType`, `DataSyncConfig`, `DeclarativeConnectorEntry`, `RetryConfig`, `SyncStrategy` |
+| [`connector.zod.ts`](/docs/references/integration/connector) | `Connector`, `ConnectorAction`, `ConnectorActionEffect`, `ConnectorConflictResolution`, `ConnectorFieldMapping`, `ConnectorInstanceAPIKeyAuth`, `ConnectorInstanceAuth`, `ConnectorInstanceBasicAuth`, `ConnectorInstanceBearerAuth`, `ConnectorInstanceNoAuth`, `ConnectorRetryStrategy`, `ConnectorType`, `DataSyncConfig`, `DeclarativeConnectorEntry`, `RetryConfig`, `SyncStrategy` |
 
 ---