Epic: Integration Engine - External System Connectors

Vision

Enable customers to connect external systems and automatically sync data into OmniCore as Nouns/Verbs/Attributes.

Ontology Model

Connections as Nouns

External system connections are Nouns with connection:* attributes:

• connection:provider - connector type (godaddy, cloudflare, qualys, etc.)
• connection:account-id - external account identifier
• connection:credentials-ref - reference to encrypted credentials (never raw)
• connection:status - active, paused, error, revoked
• connection:sync-schedule - cron expression for automated sync
• connection:last-sync - timestamp of last successful sync

Syncs as Verbs

Sync operations are Verbs with verb:action=sync:

• verb:module - the connector that performed it
• sync:items-found - total items from external system
• sync:items-created - new nouns created
• sync:items-updated - existing nouns updated
• sync:duration-ms - execution time
• Verb connects to Connection noun (agent) and affected nouns (patient)

Service Accounts

Automated syncs need non-human actors:

• Add UserType enum: Human, ServiceAccount, ApiClient
• Service accounts are CreatedBy on automated Verbs
• Tenant-scoped, limited roles, API key auth

Implementation Phases

Phase 1: Core Infrastructure

• [ ] Connection noun schema and validation
• [ ] Service account support (UserType enum)
• [ ] Credential encryption/vault integration
• [ ] IConnector interface and registry

Phase 2: Sync Engine

• [ ] Sync verb creation and tracking
• [ ] Scheduled sync worker (uses existing VerbWorker pattern)
• [ ] Delta detection (new/updated/removed)
• [ ] Rate limiting per connection

Phase 3: Connector SDK

• [ ] Base connector class with common patterns
• [ ] OAuth flow support
• [ ] API key auth support
• [ ] Webhook receiver for push-based integrations

Phase 4: Built-in Connectors

• [ ] Registrars (GoDaddy, Cloudflare, Namecheap, Route53)
• [ ] Cloud Providers (AWS, Azure, GCP)
• [ ] Vulnerability Scanners (Qualys, Tenable, Nessus)
• [ ] ITSM (ServiceNow, Jira)

Related Issues

• Epic #514 (Module Marketplace) - connectors are sellable modules
• #403 (Subscription & Entitlements) - connector limits per tier

Success Metrics

• Time to add new connector < 1 day
• Sync reliability > 99.9%
• Customer self-service connection setup