Connectors

External systems the platform can reach

Each connector is a manifest that declares its kind, production scopes, and (for data systems) which fields are explicitly forbidden. The mocked connectors still enforce their scope rules, so code paths that would read a forbidden field throw in dev just like they would in production.

Gmail (guardian delivery)

gmail

mocked

Sends drafted parent communications through Gmail on behalf of the invoking teacher. MOCKED in the current deployment — the UI shows the draft but doesn't actually send. Real OAuth scopes listed below for when this is turned on.

kind: OAuth 2.0
owner: naledi
version: v0.1
last used: —

production scopes

https://www.googleapis.com/auth/gmail.compose
https://www.googleapis.com/auth/gmail.send

Teacher Handbook (static)

handbook

real

Synthetic Uncommon Schools teacher handbook, loaded from ../../handbook/*.md at server start. In production this would be a pgvector index rebuilt nightly from the Uncommon wiki via dbt.

kind: static markdown
owner: naledi
version: v0.1
last used: —

Student Information System

sis

mocked

Reads student records from the SIS. MOCKED in the current deployment. Production would hit a dbt-materialized read replica via a scoped service account. Writes are never allowed from this platform.

kind: internal API
owner: naledi
version: v0.1
last used: —

scopes allowed

students.first_name
students.grade
students.homeroom
attendance.last_30_days
guardians.preferred_name
guardians.preferred_language

scopes forbidden

students.last_name
students.ssn
students.address
students.medical
students.counselor_notes
students.iep_504_details