@hasna/connectors 1.3.2 → 1.3.3

package/bin/serve.js

@@ -1,16 +1,795 @@
 #!/usr/bin/env bun
 // @bun
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
+// src/db/database.ts
+var exports_database = {};
+__export(exports_database, {
+  shortUuid: () => shortUuid,
+  now: () => now,
+  getDatabase: () => getDatabase,
+  closeDatabase: () => closeDatabase
+});
+import { Database } from "bun:sqlite";
+import { join } from "path";
+import { homedir } from "os";
+import { mkdirSync } from "fs";
+function getDatabase(path) {
+  if (_db)
+    return _db;
+  const dbPath = path ?? DB_PATH;
+  mkdirSync(join(dbPath, ".."), { recursive: true });
+  _db = new Database(dbPath);
+  _db.run("PRAGMA journal_mode = WAL");
+  migrate(_db);
+  return _db;
+}
+function closeDatabase() {
+  _db?.close();
+  _db = null;
+}
+function now() {
+  return new Date().toISOString();
+}
+function shortUuid() {
+  return crypto.randomUUID().slice(0, 8);
+}
+function migrate(db) {
+  db.run(`
+    CREATE TABLE IF NOT EXISTS agents (
+      id TEXT PRIMARY KEY,
+      name TEXT UNIQUE NOT NULL,
+      session_id TEXT,
+      role TEXT NOT NULL DEFAULT 'agent',
+      last_seen_at TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    )
+  `);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS resource_locks (
+      id TEXT PRIMARY KEY,
+      resource_type TEXT NOT NULL CHECK(resource_type IN ('connector', 'agent', 'profile', 'token')),
+      resource_id TEXT NOT NULL,
+      agent_id TEXT NOT NULL,
+      lock_type TEXT NOT NULL DEFAULT 'exclusive' CHECK(lock_type IN ('advisory', 'exclusive')),
+      locked_at TEXT NOT NULL DEFAULT (datetime('now')),
+      expires_at TEXT NOT NULL
+    )
+  `);
+  db.run(`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_resource_locks_exclusive
+      ON resource_locks(resource_type, resource_id)
+      WHERE lock_type = 'exclusive'
+  `);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_resource_locks_agent ON resource_locks(agent_id)`);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_resource_locks_expires ON resource_locks(expires_at)`);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_rate_usage (
+      agent_id TEXT NOT NULL,
+      connector TEXT NOT NULL,
+      window_start TEXT NOT NULL,
+      call_count INTEGER NOT NULL DEFAULT 0,
+      PRIMARY KEY (agent_id, connector, window_start)
+    )
+  `);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_rate_usage_window ON connector_rate_usage(connector, window_start)`);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_jobs (
+      id TEXT PRIMARY KEY,
+      name TEXT UNIQUE NOT NULL,
+      connector TEXT NOT NULL,
+      command TEXT NOT NULL,
+      args TEXT NOT NULL DEFAULT '[]',
+      cron TEXT NOT NULL,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      strip INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL,
+      last_run_at TEXT
+    )
+  `);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_jobs_enabled ON connector_jobs(enabled)`);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_job_runs (
+      id TEXT PRIMARY KEY,
+      job_id TEXT NOT NULL REFERENCES connector_jobs(id) ON DELETE CASCADE,
+      started_at TEXT NOT NULL,
+      finished_at TEXT,
+      exit_code INTEGER,
+      raw_output TEXT,
+      stripped_output TEXT
+    )
+  `);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_job_runs_job ON connector_job_runs(job_id, started_at DESC)`);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_workflows (
+      id TEXT PRIMARY KEY,
+      name TEXT UNIQUE NOT NULL,
+      steps TEXT NOT NULL DEFAULT '[]',
+      enabled INTEGER NOT NULL DEFAULT 1,
+      created_at TEXT NOT NULL
+    )
+  `);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_usage (
+      id TEXT PRIMARY KEY,
+      connector TEXT NOT NULL,
+      action TEXT NOT NULL,
+      agent_id TEXT,
+      timestamp TEXT NOT NULL
+    )
+  `);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_usage_connector ON connector_usage(connector, timestamp DESC)`);
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_promotions (
+      connector TEXT UNIQUE NOT NULL,
+      promoted_at TEXT NOT NULL
+    )
+  `);
+}
+var DB_DIR, DB_PATH, _db = null;
+var init_database = __esm(() => {
+  DB_DIR = join(homedir(), ".connectors");
+  DB_PATH = join(DB_DIR, "connectors.db");
+});
+
+// src/lib/llm.ts
+import { existsSync, readFileSync, writeFileSync, mkdirSync as mkdirSync2 } from "fs";
+import { join as join2 } from "path";
+import { homedir as homedir2 } from "os";
+function getLlmConfigPath() {
+  return join2(homedir2(), ".connectors", "llm.json");
+}
+function getLlmConfig() {
+  const path = getLlmConfigPath();
+  if (!existsSync(path))
+    return null;
+  try {
+    return JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function saveLlmConfig(config) {
+  const dir = join2(homedir2(), ".connectors");
+  mkdirSync2(dir, { recursive: true });
+  writeFileSync(getLlmConfigPath(), JSON.stringify(config, null, 2));
+}
+function maskKey(key) {
+  if (key.length <= 8)
+    return "***";
+  return key.slice(0, 8) + "***";
+}
+
+class LLMClient {
+  config;
+  constructor(config) {
+    this.config = config;
+  }
+  static fromConfig() {
+    const config = getLlmConfig();
+    if (!config)
+      return null;
+    return new LLMClient(config);
+  }
+  async complete(prompt, content) {
+    const start = Date.now();
+    const { provider, model, api_key } = this.config;
+    if (provider === "anthropic") {
+      return this._anthropicComplete(prompt, content, start);
+    }
+    const baseUrl = PROVIDER_BASE_URLS[provider];
+    const response = await fetch(`${baseUrl}/chat/completions`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${api_key}`
+      },
+      body: JSON.stringify({
+        model,
+        messages: [
+          { role: "system", content: prompt },
+          { role: "user", content }
+        ],
+        temperature: 0,
+        max_tokens: 4096
+      })
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`LLM request failed (${provider} ${response.status}): ${error}`);
+    }
+    const data = await response.json();
+    return {
+      content: data.choices[0].message.content,
+      provider,
+      model,
+      latency_ms: Date.now() - start
+    };
+  }
+  async _anthropicComplete(prompt, content, start) {
+    const { model, api_key } = this.config;
+    const response = await fetch("https://api.anthropic.com/v1/messages", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "x-api-key": api_key,
+        "anthropic-version": "2023-06-01"
+      },
+      body: JSON.stringify({
+        model,
+        system: prompt,
+        messages: [{ role: "user", content }],
+        max_tokens: 4096
+      })
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`LLM request failed (anthropic ${response.status}): ${error}`);
+    }
+    const data = await response.json();
+    return {
+      content: data.content[0].text,
+      provider: "anthropic",
+      model,
+      latency_ms: Date.now() - start
+    };
+  }
+}
+var PROVIDER_BASE_URLS;
+var init_llm = __esm(() => {
+  PROVIDER_BASE_URLS = {
+    cerebras: "https://api.cerebras.ai/v1",
+    groq: "https://api.groq.com/openai/v1",
+    openai: "https://api.openai.com/v1"
+  };
+});
+
+// src/lib/strip.ts
+async function maybeStrip(output, _type = "json") {
+  const config = getLlmConfig();
+  if (!config?.strip)
+    return output;
+  if (!output || output.trim().length === 0)
+    return output;
+  const client = LLMClient.fromConfig();
+  if (!client)
+    return output;
+  try {
+    const result = await client.complete(STRIP_PROMPT, output);
+    return result.content.trim();
+  } catch {
+    return output;
+  }
+}
+var STRIP_PROMPT = `You are a data extraction assistant. Your job is to take raw API output and return ONLY the essential, structured data.
+
+Rules:
+- Return valid JSON only (no markdown, no explanation)
+- Remove pagination metadata, rate limit headers, empty fields, null values
+- Keep all meaningful data fields
+- If the input is already minimal, return it unchanged
+- If input is not JSON, extract key facts as a JSON object
+- Never truncate actual data values`;
+var init_strip = __esm(() => {
+  init_llm();
+});
+
+// src/db/jobs.ts
+function rowToJob(row) {
+  return {
+    ...row,
+    args: JSON.parse(row.args || "[]"),
+    enabled: row.enabled === 1,
+    strip: row.strip === 1
+  };
+}
+function createJob(input, db) {
+  const d = db ?? getDatabase();
+  const id = shortUuid();
+  const ts = now();
+  d.run("INSERT INTO connector_jobs (id, name, connector, command, args, cron, enabled, strip, created_at) VALUES (?, ?, ?, ?, ?, ?, 1, ?, ?)", [id, input.name, input.connector, input.command, JSON.stringify(input.args ?? []), input.cron, input.strip ? 1 : 0, ts]);
+  return getJob(id, d);
+}
+function getJob(id, db) {
+  const d = db ?? getDatabase();
+  const row = d.query("SELECT * FROM connector_jobs WHERE id = ?").get(id);
+  return row ? rowToJob(row) : null;
+}
+function getJobByName(name, db) {
+  const d = db ?? getDatabase();
+  const row = d.query("SELECT * FROM connector_jobs WHERE name = ?").get(name);
+  return row ? rowToJob(row) : null;
+}
+function listJobs(db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM connector_jobs ORDER BY name").all().map(rowToJob);
+}
+function listEnabledJobs(db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM connector_jobs WHERE enabled = 1").all().map(rowToJob);
+}
+function updateJob(id, input, db) {
+  const d = db ?? getDatabase();
+  const sets = [];
+  const params = [];
+  if (input.name !== undefined) {
+    sets.push("name = ?");
+    params.push(input.name);
+  }
+  if (input.connector !== undefined) {
+    sets.push("connector = ?");
+    params.push(input.connector);
+  }
+  if (input.command !== undefined) {
+    sets.push("command = ?");
+    params.push(input.command);
+  }
+  if (input.args !== undefined) {
+    sets.push("args = ?");
+    params.push(JSON.stringify(input.args));
+  }
+  if (input.cron !== undefined) {
+    sets.push("cron = ?");
+    params.push(input.cron);
+  }
+  if (input.enabled !== undefined) {
+    sets.push("enabled = ?");
+    params.push(input.enabled ? 1 : 0);
+  }
+  if (input.strip !== undefined) {
+    sets.push("strip = ?");
+    params.push(input.strip ? 1 : 0);
+  }
+  if (sets.length === 0)
+    return getJob(id, d);
+  params.push(id);
+  d.run(`UPDATE connector_jobs SET ${sets.join(", ")} WHERE id = ?`, params);
+  return getJob(id, d);
+}
+function deleteJob(id, db) {
+  const d = db ?? getDatabase();
+  return d.run("DELETE FROM connector_jobs WHERE id = ?", [id]).changes > 0;
+}
+function touchJobLastRun(id, db) {
+  const d = db ?? getDatabase();
+  d.run("UPDATE connector_jobs SET last_run_at = ? WHERE id = ?", [now(), id]);
+}
+function createJobRun(jobId, db) {
+  const d = db ?? getDatabase();
+  const id = shortUuid();
+  const ts = now();
+  d.run("INSERT INTO connector_job_runs (id, job_id, started_at) VALUES (?, ?, ?)", [id, jobId, ts]);
+  return { id, job_id: jobId, started_at: ts, finished_at: null, exit_code: null, raw_output: null, stripped_output: null };
+}
+function finishJobRun(id, result, db) {
+  const d = db ?? getDatabase();
+  d.run("UPDATE connector_job_runs SET finished_at = ?, exit_code = ?, raw_output = ?, stripped_output = ? WHERE id = ?", [now(), result.exit_code, result.raw_output, result.stripped_output ?? null, id]);
+}
+function listJobRuns(jobId, limit = 20, db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM connector_job_runs WHERE job_id = ? ORDER BY started_at DESC LIMIT ?").all(jobId, limit);
+}
+var init_jobs = __esm(() => {
+  init_database();
+});
+
+// src/lib/scheduler.ts
+var exports_scheduler = {};
+__export(exports_scheduler, {
+  triggerJob: () => triggerJob,
+  stopScheduler: () => stopScheduler,
+  startScheduler: () => startScheduler
+});
+import { spawn } from "child_process";
+function cronMatches(cron, d) {
+  const parts = cron.trim().split(/\s+/);
+  if (parts.length !== 5)
+    return false;
+  const [min, hour, dom, mon, dow] = parts;
+  function matches(field, value, min_v, max_v) {
+    if (field === "*")
+      return true;
+    if (field.startsWith("*/")) {
+      const step = parseInt(field.slice(2));
+      return value % step === 0;
+    }
+    if (field.includes("-")) {
+      const [a, b] = field.split("-").map(Number);
+      return value >= a && value <= b;
+    }
+    if (field.includes(",")) {
+      return field.split(",").map(Number).includes(value);
+    }
+    return parseInt(field) === value;
+  }
+  return matches(min, d.getMinutes(), 0, 59) && matches(hour, d.getHours(), 0, 23) && matches(dom, d.getDate(), 1, 31) && matches(mon, d.getMonth() + 1, 1, 12) && matches(dow, d.getDay(), 0, 6);
+}
+async function runConnectorCommand(connector, command, args) {
+  return new Promise((resolve) => {
+    const cmdArgs = [connector, command, ...args, "--format", "json"];
+    const proc = spawn("connectors", ["run", ...cmdArgs], { shell: false });
+    let output = "";
+    proc.stdout.on("data", (d) => {
+      output += d.toString();
+    });
+    proc.stderr.on("data", (d) => {
+      output += d.toString();
+    });
+    proc.on("close", (code) => resolve({ exitCode: code ?? 1, output }));
+    proc.on("error", () => resolve({ exitCode: 1, output: `Failed to spawn connectors run` }));
+    setTimeout(() => {
+      proc.kill();
+      resolve({ exitCode: 124, output: output + `
+[timeout]` });
+    }, 60000);
+  });
+}
+async function executeJob(job, db) {
+  const run = createJobRun(job.id, db);
+  try {
+    const { exitCode, output } = await runConnectorCommand(job.connector, job.command, job.args);
+    const stripped = job.strip ? await maybeStrip(output) : undefined;
+    finishJobRun(run.id, { exit_code: exitCode, raw_output: output, stripped_output: stripped }, db);
+    touchJobLastRun(job.id, db);
+  } catch (e) {
+    finishJobRun(run.id, { exit_code: 1, raw_output: String(e) }, db);
+  }
+}
+function startScheduler(db) {
+  if (_interval)
+    return;
+  _interval = setInterval(async () => {
+    const now3 = new Date;
+    const currentMinute = now3.getMinutes() + now3.getHours() * 60;
+    if (currentMinute === _lastCheckedMinute)
+      return;
+    _lastCheckedMinute = currentMinute;
+    const jobs = listEnabledJobs(db);
+    for (const job of jobs) {
+      if (cronMatches(job.cron, now3)) {
+        executeJob(job, db).catch(() => {});
+      }
+    }
+  }, 30000);
+}
+function stopScheduler() {
+  if (_interval) {
+    clearInterval(_interval);
+    _interval = null;
+    _lastCheckedMinute = -1;
+  }
+}
+async function triggerJob(job, db) {
+  const run = createJobRun(job.id, db);
+  const { exitCode, output } = await runConnectorCommand(job.connector, job.command, job.args);
+  const stripped = job.strip ? await maybeStrip(output) : undefined;
+  finishJobRun(run.id, { exit_code: exitCode, raw_output: output, stripped_output: stripped }, db);
+  touchJobLastRun(job.id, db);
+  return { run_id: run.id, exit_code: exitCode, output: stripped ?? output };
+}
+var _interval = null, _lastCheckedMinute = -1;
+var init_scheduler = __esm(() => {
+  init_jobs();
+  init_strip();
+});
+
+// src/db/usage.ts
+var exports_usage = {};
+__export(exports_usage, {
+  logUsage: () => logUsage,
+  getUsageStats: () => getUsageStats,
+  getUsageMap: () => getUsageMap,
+  getTopConnectors: () => getTopConnectors,
+  cleanOldUsage: () => cleanOldUsage
+});
+function logUsage(connector, action, agentId, db) {
+  const d = db ?? getDatabase();
+  d.run("INSERT INTO connector_usage (id, connector, action, agent_id, timestamp) VALUES (?, ?, ?, ?, ?)", [shortUuid(), connector, action, agentId ?? null, now()]);
+}
+function getUsageStats(connector, db) {
+  const d = db ?? getDatabase();
+  const total = d.query("SELECT COUNT(*) as c FROM connector_usage WHERE connector = ?").get(connector).c;
+  const d7 = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString();
+  const last7d = d.query("SELECT COUNT(*) as c FROM connector_usage WHERE connector = ? AND timestamp > ?").get(connector, d7).c;
+  const d1 = new Date(Date.now() - 24 * 60 * 60 * 1000).toISOString();
+  const last24h = d.query("SELECT COUNT(*) as c FROM connector_usage WHERE connector = ? AND timestamp > ?").get(connector, d1).c;
+  return { connector, total, last7d, last24h };
+}
+function getTopConnectors(limit = 10, days = 7, db) {
+  const d = db ?? getDatabase();
+  const since = new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
+  return d.query("SELECT connector, COUNT(*) as count FROM connector_usage WHERE timestamp > ? GROUP BY connector ORDER BY count DESC LIMIT ?").all(since, limit);
+}
+function getUsageMap(days = 7, db) {
+  const top = getTopConnectors(100, days, db);
+  return new Map(top.map((t) => [t.connector, t.count]));
+}
+function cleanOldUsage(days = 30, db) {
+  const d = db ?? getDatabase();
+  const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
+  return d.run("DELETE FROM connector_usage WHERE timestamp < ?", [cutoff]).changes;
+}
+var init_usage = __esm(() => {
+  init_database();
+});
+
+// src/db/promotions.ts
+var exports_promotions = {};
+__export(exports_promotions, {
+  promoteConnector: () => promoteConnector,
+  isPromoted: () => isPromoted,
+  getPromotedConnectors: () => getPromotedConnectors,
+  demoteConnector: () => demoteConnector
+});
+function promoteConnector(name, db) {
+  const d = db ?? getDatabase();
+  d.run("INSERT OR REPLACE INTO connector_promotions (connector, promoted_at) VALUES (?, ?)", [name, now()]);
+}
+function demoteConnector(name, db) {
+  const d = db ?? getDatabase();
+  return d.run("DELETE FROM connector_promotions WHERE connector = ?", [name]).changes > 0;
+}
+function getPromotedConnectors(db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT connector FROM connector_promotions ORDER BY promoted_at DESC").all().map((r) => r.connector);
+}
+function isPromoted(name, db) {
+  const d = db ?? getDatabase();
+  const row = d.query("SELECT 1 FROM connector_promotions WHERE connector = ?").get(name);
+  return !!row;
+}
+var init_promotions = __esm(() => {
+  init_database();
+});
+
+// src/server/serve.ts
+import { existsSync as existsSync6, readdirSync as readdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync4, mkdirSync as mkdirSync6 } from "fs";
+
+// src/db/agents.ts
+init_database();
+var AGENT_ACTIVE_WINDOW_MS = 30 * 60 * 1000;
+function shortUuid2() {
+  return crypto.randomUUID().slice(0, 8);
+}
+function isAgentConflict(result) {
+  return result.conflict === true;
+}
+function registerAgent(input, db) {
+  const d = db ?? getDatabase();
+  const normalizedName = input.name.trim().toLowerCase();
+  const existing = getAgentByName(normalizedName, d);
+  if (existing) {
+    const lastSeenMs = new Date(existing.last_seen_at).getTime();
+    const isActive = Date.now() - lastSeenMs < AGENT_ACTIVE_WINDOW_MS;
+    const sameSession = input.session_id && existing.session_id && input.session_id === existing.session_id;
+    const differentSession = input.session_id && existing.session_id && input.session_id !== existing.session_id;
+    if (isActive && differentSession) {
+      const minutesAgo = Math.round((Date.now() - lastSeenMs) / 60000);
+      return {
+        conflict: true,
+        existing_id: existing.id,
+        existing_name: existing.name,
+        last_seen_at: existing.last_seen_at,
+        session_hint: existing.session_id ? existing.session_id.slice(0, 8) : null,
+        working_dir: null,
+        message: `Agent "${normalizedName}" is already active (last seen ${minutesAgo}m ago). Pass session_id="${existing.session_id}" to reclaim it, or choose a different name.`
+      };
+    }
+    const updates = ["last_seen_at = ?"];
+    const params = [now()];
+    if (input.session_id && !sameSession) {
+      updates.push("session_id = ?");
+      params.push(input.session_id);
+    }
+    params.push(existing.id);
+    d.run(`UPDATE agents SET ${updates.join(", ")} WHERE id = ?`, params);
+    return getAgent(existing.id, d);
+  }
+  const id = shortUuid2();
+  const ts = now();
+  d.run(`INSERT INTO agents (id, name, session_id, role, last_seen_at, created_at)
+     VALUES (?, ?, ?, ?, ?, ?)`, [id, normalizedName, input.session_id ?? null, input.role ?? "agent", ts, ts]);
+  return getAgent(id, d);
+}
+function getAgent(id, db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM agents WHERE id = ?").get(id);
+}
+function getAgentByName(name, db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM agents WHERE LOWER(name) = ?").get(name.trim().toLowerCase());
+}
+function listAgents(db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM agents ORDER BY name").all();
+}
+function deleteAgent(id, db) {
+  const d = db ?? getDatabase();
+  return d.run("DELETE FROM agents WHERE id = ?", [id]).changes > 0;
+}
+
+// src/db/rate.ts
+init_database();
+var AGENT_ACTIVE_WINDOW_MS2 = 30 * 60 * 1000;
+var WINDOW_SECONDS = 60;
+function ensureRateTable(db) {
+  db.run(`
+    CREATE TABLE IF NOT EXISTS connector_rate_usage (
+      agent_id TEXT NOT NULL,
+      connector TEXT NOT NULL,
+      window_start TEXT NOT NULL,
+      call_count INTEGER NOT NULL DEFAULT 0,
+      PRIMARY KEY (agent_id, connector, window_start)
+    )
+  `);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_rate_usage_window ON connector_rate_usage(connector, window_start)`);
+}
+function countActiveAgents(db) {
+  const cutoff = new Date(Date.now() - AGENT_ACTIVE_WINDOW_MS2).toISOString();
+  const row = db.query("SELECT COUNT(*) as count FROM agents WHERE last_seen_at > ?").get(cutoff);
+  return Math.max(1, row?.count ?? 1);
+}
+function currentWindowStart() {
+  const now3 = Date.now();
+  const windowMs = WINDOW_SECONDS * 1000;
+  return new Date(Math.floor(now3 / windowMs) * windowMs).toISOString();
+}
+function checkRateBudget(agentId, connector, connectorLimit, consume = true, db) {
+  const d = db ?? getDatabase();
+  ensureRateTable(d);
+  const activeAgents = countActiveAgents(d);
+  const budget = Math.max(1, Math.floor(connectorLimit / activeAgents));
+  const windowStart = currentWindowStart();
+  const windowMs = WINDOW_SECONDS * 1000;
+  const windowEnd = new Date(Math.floor(Date.now() / windowMs) * windowMs + windowMs);
+  const windowResetsIn = windowEnd.getTime() - Date.now();
+  const row = d.query("SELECT call_count FROM connector_rate_usage WHERE agent_id = ? AND connector = ? AND window_start = ?").get(agentId, connector, windowStart);
+  const used = row?.call_count ?? 0;
+  if (used >= budget) {
+    return {
+      exceeded: true,
+      connector,
+      agent_id: agentId,
+      budget,
+      used,
+      active_agents: activeAgents,
+      window_resets_in_ms: windowResetsIn,
+      message: `Rate budget exceeded for "${connector}" (${used}/${budget} calls used, ${activeAgents} active agent${activeAgents === 1 ? "" : "s"} sharing limit of ${connectorLimit}/min). Resets in ${Math.ceil(windowResetsIn / 1000)}s.`
+    };
+  }
+  if (consume) {
+    d.run(`INSERT INTO connector_rate_usage (agent_id, connector, window_start, call_count)
+       VALUES (?, ?, ?, 1)
+       ON CONFLICT(agent_id, connector, window_start) DO UPDATE SET call_count = call_count + 1`, [agentId, connector, windowStart]);
+  }
+  return {
+    connector,
+    agent_id: agentId,
+    limit: connectorLimit,
+    active_agents: activeAgents,
+    budget,
+    used: consume ? used + 1 : used,
+    remaining: consume ? budget - used - 1 : budget - used,
+    window_start: windowStart,
+    window_resets_in_ms: windowResetsIn
+  };
+}
+function getRateBudget(agentId, connector, connectorLimit, db) {
+  return checkRateBudget(agentId, connector, connectorLimit, false, db);
+}
+
+// src/server/serve.ts
+init_strip();
+init_llm();
+init_jobs();
+
+// src/db/workflows.ts
+init_database();
+function rowToWorkflow(row) {
+  return {
+    ...row,
+    steps: JSON.parse(row.steps || "[]"),
+    enabled: row.enabled === 1
+  };
+}
+function createWorkflow(input, db) {
+  const d = db ?? getDatabase();
+  const id = shortUuid();
+  d.run("INSERT INTO connector_workflows (id, name, steps, enabled, created_at) VALUES (?, ?, ?, 1, ?)", [id, input.name, JSON.stringify(input.steps), now()]);
+  return getWorkflow(id, d);
+}
+function getWorkflow(id, db) {
+  const d = db ?? getDatabase();
+  const row = d.query("SELECT * FROM connector_workflows WHERE id = ?").get(id);
+  return row ? rowToWorkflow(row) : null;
+}
+function getWorkflowByName(name, db) {
+  const d = db ?? getDatabase();
+  const row = d.query("SELECT * FROM connector_workflows WHERE name = ?").get(name);
+  return row ? rowToWorkflow(row) : null;
+}
+function listWorkflows(db) {
+  const d = db ?? getDatabase();
+  return d.query("SELECT * FROM connector_workflows ORDER BY name").all().map(rowToWorkflow);
+}
+function deleteWorkflow(id, db) {
+  const d = db ?? getDatabase();
+  return d.run("DELETE FROM connector_workflows WHERE id = ?", [id]).changes > 0;
+}
+
+// src/server/serve.ts
+init_scheduler();
+
+// src/lib/workflow-runner.ts
+init_strip();
+import { spawn as spawn2 } from "child_process";
+async function runStep(step, previousOutput) {
+  return new Promise((resolve) => {
+    const args = [...step.args ?? []];
+    if (previousOutput && previousOutput.trim()) {
+      args.push("--input", previousOutput.trim().slice(0, 4096));
+    }
+    const cmdArgs = ["run", step.connector, step.command, ...args, "--format", "json"];
+    const proc = spawn2("connectors", cmdArgs, { shell: false });
+    let output = "";
+    proc.stdout.on("data", (d) => {
+      output += d.toString();
+    });
+    proc.stderr.on("data", (d) => {
+      output += d.toString();
+    });
+    proc.on("close", (code) => resolve({ exitCode: code ?? 1, output }));
+    proc.on("error", () => resolve({ exitCode: 1, output: "Failed to spawn connectors" }));
+    setTimeout(() => {
+      proc.kill();
+      resolve({ exitCode: 124, output: output + `
+[timeout]` });
+    }, 60000);
+  });
+}
+async function runWorkflow(workflow) {
+  const results = [];
+  let previousOutput;
+  let success = true;
+  for (let i = 0;i < workflow.steps.length; i++) {
+    const step = workflow.steps[i];
+    const { exitCode, output } = await runStep(step, previousOutput);
+    const stripped = await maybeStrip(output);
+    results.push({ step: i + 1, connector: step.connector, command: step.command, exit_code: exitCode, output: stripped });
+    if (exitCode !== 0) {
+      success = false;
+      break;
+    }
+    previousOutput = stripped;
+  }
+  return {
+    workflow_id: workflow.id,
+    workflow_name: workflow.name,
+    steps: results,
+    success,
+    final_output: results[results.length - 1]?.output ?? ""
+  };
+}
+
 // src/server/serve.ts
-import { existsSync as existsSync4, readdirSync as readdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
-import { join as join4, dirname as dirname3, extname, basename } from "path";
+import { join as join7, dirname as dirname3, extname, basename } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir6 } from "os";
 
 // src/lib/registry.ts
-import { existsSync, readFileSync } from "fs";
-import { join, dirname } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { join as join3, dirname } from "path";
 import { fileURLToPath } from "url";
 var CONNECTORS = [
   {
@@ -4878,13 +5657,6 @@ var CONNECTORS = [
     category: "Business Tools",
     tags: ["e-signature", "contracts", "digital", "documents", "legal"]
   },
-  {
-    name: "yousign",
-    displayName: "Yousign",
-    description: "eIDAS-compliant electronic signature API for EU workflows",
-    category: "Business Tools",
-    tags: ["e-signature", "eidas", "contracts", "documents", "legal", "eu"]
-  },
   {
     name: "signl4",
     displayName: "SIGNL4",
@@ -5925,17 +6697,17 @@ function loadConnectorVersions() {
   versionsLoaded = true;
   const thisDir = dirname(fileURLToPath(import.meta.url));
   const candidates = [
-    join(thisDir, "..", "connectors"),
-    join(thisDir, "..", "..", "connectors")
+    join3(thisDir, "..", "connectors"),
+    join3(thisDir, "..", "..", "connectors")
   ];
-  const connectorsDir = candidates.find((d) => existsSync(d));
+  const connectorsDir = candidates.find((d) => existsSync2(d));
   if (!connectorsDir)
     return;
   for (const connector of CONNECTORS) {
     try {
-      const pkgPath = join(connectorsDir, `connect-${connector.name}`, "package.json");
-      if (existsSync(pkgPath)) {
-        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+      const pkgPath = join3(connectorsDir, `connect-${connector.name}`, "package.json");
+      if (existsSync2(pkgPath)) {
+        const pkg = JSON.parse(readFileSync2(pkgPath, "utf-8"));
         connector.version = pkg.version || "0.0.0";
       }
     } catch {}
@@ -5943,25 +6715,27 @@ function loadConnectorVersions() {
 }
 
 // src/lib/installer.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync, statSync } from "fs";
-import { join as join2, dirname as dirname2 } from "path";
+import { existsSync as existsSync3, cpSync, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2, readdirSync, statSync, rmSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4, dirname as dirname2 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var __dirname2 = dirname2(fileURLToPath2(import.meta.url));
 function resolveConnectorsDir() {
-  const fromBin = join2(__dirname2, "..", "connectors");
-  if (existsSync2(fromBin))
+  const fromBin = join4(__dirname2, "..", "connectors");
+  if (existsSync3(fromBin))
     return fromBin;
-  const fromSrc = join2(__dirname2, "..", "..", "connectors");
-  if (existsSync2(fromSrc))
+  const fromSrc = join4(__dirname2, "..", "..", "connectors");
+  if (existsSync3(fromSrc))
     return fromSrc;
   return fromBin;
 }
 var CONNECTORS_DIR = resolveConnectorsDir();
 function getConnectorPath(name) {
   const connectorName = name.startsWith("connect-") ? name : `connect-${name}`;
-  return join2(CONNECTORS_DIR, connectorName);
+  return join4(CONNECTORS_DIR, connectorName);
 }
 function installConnector(name, options = {}) {
+  const { targetDir = process.cwd(), overwrite = false } = options;
   if (!/^[a-z0-9-]+$/.test(name)) {
     return {
       connector: name,
@@ -5969,35 +6743,91 @@ function installConnector(name, options = {}) {
       error: `Invalid connector name '${name}'`
     };
   }
+  const connectorName = name.startsWith("connect-") ? name : `connect-${name}`;
   const sourcePath = getConnectorPath(name);
-  if (!existsSync2(sourcePath)) {
+  const destDir = join4(targetDir, ".connectors");
+  const destPath = join4(destDir, connectorName);
+  if (!existsSync3(sourcePath)) {
     return {
       connector: name,
       success: false,
       error: `Connector '${name}' not found`
     };
   }
-  return {
-    connector: name,
-    success: true,
-    path: sourcePath
-  };
+  if (existsSync3(destPath) && !overwrite) {
+    return {
+      connector: name,
+      success: false,
+      error: `Already installed. Use --overwrite to replace.`,
+      path: destPath
+    };
+  }
+  try {
+    if (!existsSync3(destDir)) {
+      mkdirSync3(destDir, { recursive: true });
+    }
+    cpSync(sourcePath, destPath, { recursive: true });
+    const homeCredDir = join4(homedir3(), ".connectors", connectorName);
+    if (existsSync3(homeCredDir)) {
+      const filesToCopy = ["credentials.json", "current_profile"];
+      for (const file of filesToCopy) {
+        const src = join4(homeCredDir, file);
+        if (existsSync3(src)) {
+          cpSync(src, join4(destPath, file));
+        }
+      }
+      const profilesDir = join4(homeCredDir, "profiles");
+      if (existsSync3(profilesDir)) {
+        cpSync(profilesDir, join4(destPath, "profiles"), { recursive: true });
+      }
+    }
+    updateConnectorsIndex(destDir);
+    return {
+      connector: name,
+      success: true,
+      path: destPath
+    };
+  } catch (error) {
+    return {
+      connector: name,
+      success: false,
+      error: error instanceof Error ? error.message : "Unknown error"
+    };
+  }
+}
+function updateConnectorsIndex(connectorsDir) {
+  const indexPath = join4(connectorsDir, "index.ts");
+  const connectors = readdirSync(connectorsDir).filter((f) => f.startsWith("connect-") && !f.includes("."));
+  const exports = connectors.map((c) => {
+    const name = c.replace("connect-", "");
+    return `export * as ${name} from './${c}/src/index.js';`;
+  }).join(`
+`);
+  const content = `/**
+ * Auto-generated index of installed connectors
+ * Do not edit manually - run 'connectors install' to update
+ */
+
+${exports}
+`;
+  writeFileSync2(indexPath, content);
 }
-function getInstalledConnectors() {
-  if (!existsSync2(CONNECTORS_DIR)) {
+function getInstalledConnectors(targetDir = process.cwd()) {
+  const connectorsDir = join4(targetDir, ".connectors");
+  if (!existsSync3(connectorsDir)) {
     return [];
   }
-  return readdirSync(CONNECTORS_DIR).filter((f) => {
-    const fullPath = join2(CONNECTORS_DIR, f);
+  return readdirSync(connectorsDir).filter((f) => {
+    const fullPath = join4(connectorsDir, f);
     return f.startsWith("connect-") && statSync(fullPath).isDirectory();
   }).map((f) => f.replace("connect-", ""));
 }
 function getConnectorDocs(name) {
   const connectorPath = getConnectorPath(name);
-  const claudeMdPath = join2(connectorPath, "CLAUDE.md");
-  if (!existsSync2(claudeMdPath))
+  const claudeMdPath = join4(connectorPath, "CLAUDE.md");
+  if (!existsSync3(claudeMdPath))
     return null;
-  const raw = readFileSync2(claudeMdPath, "utf-8");
+  const raw = readFileSync3(claudeMdPath, "utf-8");
   return {
     overview: extractSection(raw, "Project Overview"),
     auth: extractSection(raw, "Authentication"),
@@ -6034,15 +6864,92 @@ function parseEnvVarsTable(section) {
   }
   return vars;
 }
-function removeConnector(name) {
-  return false;
+function removeConnector(name, targetDir = process.cwd()) {
+  const connectorName = name.startsWith("connect-") ? name : `connect-${name}`;
+  const connectorsDir = join4(targetDir, ".connectors");
+  const connectorPath = join4(connectorsDir, connectorName);
+  if (!existsSync3(connectorPath)) {
+    return false;
+  }
+  rmSync(connectorPath, { recursive: true });
+  updateConnectorsIndex(connectorsDir);
+  return true;
 }
 
 // src/server/auth.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync, mkdirSync, readdirSync as readdirSync2, rmSync, statSync as statSync2 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3, mkdirSync as mkdirSync5, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync3 } from "fs";
 import { randomBytes } from "crypto";
-import { homedir } from "os";
-import { join as join3 } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join6 } from "path";
+
+// src/lib/lock.ts
+import { openSync, closeSync, unlinkSync, existsSync as existsSync4, statSync as statSync2 } from "fs";
+import { join as join5 } from "path";
+import { homedir as homedir4 } from "os";
+import { mkdirSync as mkdirSync4 } from "fs";
+var LOCK_TIMEOUT_MS = 5000;
+var LOCK_RETRY_MS = 100;
+var STALE_LOCK_MS = 30000;
+
+class LockTimeoutError extends Error {
+  connector;
+  constructor(connector) {
+    super(`Could not acquire write lock for connector "${connector}" within ${LOCK_TIMEOUT_MS}ms. Another agent may be writing. Try again shortly.`);
+    this.connector = connector;
+    this.name = "LockTimeoutError";
+  }
+}
+function lockPath(connector) {
+  const dir = join5(homedir4(), ".connectors", `connect-${connector}`);
+  mkdirSync4(dir, { recursive: true });
+  return join5(dir, ".write.lock");
+}
+function isStale(path) {
+  try {
+    const stat = statSync2(path);
+    return Date.now() - stat.mtimeMs > STALE_LOCK_MS;
+  } catch {
+    return false;
+  }
+}
+function tryAcquire(path) {
+  if (existsSync4(path) && isStale(path)) {
+    try {
+      unlinkSync(path);
+    } catch {}
+  }
+  try {
+    const fd = openSync(path, "wx");
+    closeSync(fd);
+    return true;
+  } catch (e) {
+    if (e.code === "EEXIST")
+      return false;
+    throw e;
+  }
+}
+function release(path) {
+  try {
+    unlinkSync(path);
+  } catch {}
+}
+async function withWriteLock(connector, fn) {
+  const path = lockPath(connector);
+  const deadline = Date.now() + LOCK_TIMEOUT_MS;
+  while (Date.now() < deadline) {
+    if (tryAcquire(path)) {
+      try {
+        return await fn();
+      } finally {
+        release(path);
+      }
+    }
+    await new Promise((resolve) => setTimeout(resolve, LOCK_RETRY_MS));
+  }
+  throw new LockTimeoutError(connector);
+}
+
+// src/server/auth.ts
 var FETCH_TIMEOUT = 1e4;
 var oauthStateStore = new Map;
 var GOOGLE_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
@@ -6098,14 +7005,14 @@ function getAuthType(name) {
 }
 function getConnectorConfigDir(name) {
   const connectorName = name.startsWith("connect-") ? name : `connect-${name}`;
-  return join3(homedir(), ".connectors", connectorName);
+  return join6(homedir5(), ".connectors", connectorName);
 }
 function getCurrentProfile(name) {
   const configDir = getConnectorConfigDir(name);
-  const currentProfileFile = join3(configDir, "current_profile");
-  if (existsSync3(currentProfileFile)) {
+  const currentProfileFile = join6(configDir, "current_profile");
+  if (existsSync5(currentProfileFile)) {
     try {
-      return readFileSync3(currentProfileFile, "utf-8").trim() || "default";
+      return readFileSync4(currentProfileFile, "utf-8").trim() || "default";
     } catch {
       return "default";
     }
@@ -6117,16 +7024,16 @@ function loadProfileConfig(name) {
   const profile = getCurrentProfile(name);
   let flatConfig = {};
   let dirConfig = {};
-  const profileFile = join3(configDir, "profiles", `${profile}.json`);
-  if (existsSync3(profileFile)) {
+  const profileFile = join6(configDir, "profiles", `${profile}.json`);
+  if (existsSync5(profileFile)) {
     try {
-      flatConfig = JSON.parse(readFileSync3(profileFile, "utf-8"));
+      flatConfig = JSON.parse(readFileSync4(profileFile, "utf-8"));
     } catch {}
   }
-  const profileDirConfig = join3(configDir, "profiles", profile, "config.json");
-  if (existsSync3(profileDirConfig)) {
+  const profileDirConfig = join6(configDir, "profiles", profile, "config.json");
+  if (existsSync5(profileDirConfig)) {
     try {
-      dirConfig = JSON.parse(readFileSync3(profileDirConfig, "utf-8"));
+      dirConfig = JSON.parse(readFileSync4(profileDirConfig, "utf-8"));
     } catch {}
   }
   if (Object.keys(flatConfig).length === 0 && Object.keys(dirConfig).length === 0) {
@@ -6137,14 +7044,24 @@ function loadProfileConfig(name) {
 function loadTokens(name) {
   const configDir = getConnectorConfigDir(name);
   const profile = getCurrentProfile(name);
-  const tokensFile = join3(configDir, "profiles", profile, "tokens.json");
-  if (existsSync3(tokensFile)) {
+  const tokensFile = join6(configDir, "profiles", profile, "tokens.json");
+  if (existsSync5(tokensFile)) {
     try {
-      return JSON.parse(readFileSync3(tokensFile, "utf-8"));
+      return JSON.parse(readFileSync4(tokensFile, "utf-8"));
     } catch {
       return null;
     }
   }
+  const profileConfig = loadProfileConfig(name);
+  if (profileConfig.refreshToken || profileConfig.accessToken) {
+    return {
+      accessToken: profileConfig.accessToken ?? "",
+      refreshToken: profileConfig.refreshToken,
+      expiresAt: profileConfig.expiresAt ?? 0,
+      tokenType: profileConfig.tokenType,
+      scope: profileConfig.scope
+    };
+  }
   return null;
 }
 function getAuthStatus(name) {
@@ -6185,48 +7102,51 @@ function getAuthStatus(name) {
     envVarTotalCount
   };
 }
-function saveApiKey(name, key, field) {
+async function saveApiKey(name, key, field) {
+  return withWriteLock(name, () => _saveApiKey(name, key, field));
+}
+function _saveApiKey(name, key, field) {
   const configDir = getConnectorConfigDir(name);
   const profile = getCurrentProfile(name);
   const keyField = field || guessKeyField(name);
   if (keyField === "clientId" || keyField === "clientSecret") {
-    const credentialsFile = join3(configDir, "credentials.json");
-    mkdirSync(configDir, { recursive: true });
+    const credentialsFile = join6(configDir, "credentials.json");
+    mkdirSync5(configDir, { recursive: true });
     let creds = {};
-    if (existsSync3(credentialsFile)) {
+    if (existsSync5(credentialsFile)) {
       try {
-        creds = JSON.parse(readFileSync3(credentialsFile, "utf-8"));
+        creds = JSON.parse(readFileSync4(credentialsFile, "utf-8"));
       } catch {}
     }
     creds[keyField] = key;
-    writeFileSync(credentialsFile, JSON.stringify(creds, null, 2));
+    writeFileSync3(credentialsFile, JSON.stringify(creds, null, 2));
     return;
   }
-  const profileFile = join3(configDir, "profiles", `${profile}.json`);
-  const profileDir = join3(configDir, "profiles", profile);
-  if (existsSync3(profileFile)) {
+  const profileFile = join6(configDir, "profiles", `${profile}.json`);
+  const profileDir = join6(configDir, "profiles", profile);
+  if (existsSync5(profileFile)) {
     let config = {};
     try {
-      config = JSON.parse(readFileSync3(profileFile, "utf-8"));
+      config = JSON.parse(readFileSync4(profileFile, "utf-8"));
     } catch {}
     config[keyField] = key;
-    writeFileSync(profileFile, JSON.stringify(config, null, 2));
+    writeFileSync3(profileFile, JSON.stringify(config, null, 2));
     return;
   }
-  if (existsSync3(profileDir)) {
-    const configFile = join3(profileDir, "config.json");
+  if (existsSync5(profileDir)) {
+    const configFile = join6(profileDir, "config.json");
     let config = {};
-    if (existsSync3(configFile)) {
+    if (existsSync5(configFile)) {
       try {
-        config = JSON.parse(readFileSync3(configFile, "utf-8"));
+        config = JSON.parse(readFileSync4(configFile, "utf-8"));
       } catch {}
     }
     config[keyField] = key;
-    writeFileSync(configFile, JSON.stringify(config, null, 2));
+    writeFileSync3(configFile, JSON.stringify(config, null, 2));
     return;
   }
-  mkdirSync(profileDir, { recursive: true });
-  writeFileSync(join3(profileDir, "config.json"), JSON.stringify({ [keyField]: key }, null, 2));
+  mkdirSync5(profileDir, { recursive: true });
+  writeFileSync3(join6(profileDir, "config.json"), JSON.stringify({ [keyField]: key }, null, 2));
 }
 function guessKeyField(name) {
   const docs = getConnectorDocs(name);
@@ -6244,10 +7164,10 @@ function guessKeyField(name) {
 }
 function getOAuthConfig(name) {
   const configDir = getConnectorConfigDir(name);
-  const credentialsFile = join3(configDir, "credentials.json");
-  if (existsSync3(credentialsFile)) {
+  const credentialsFile = join6(configDir, "credentials.json");
+  if (existsSync5(credentialsFile)) {
     try {
-      const creds = JSON.parse(readFileSync3(credentialsFile, "utf-8"));
+      const creds = JSON.parse(readFileSync4(credentialsFile, "utf-8"));
       return { clientId: creds.clientId, clientSecret: creds.clientSecret };
     } catch {}
   }
@@ -6326,12 +7246,15 @@ async function exchangeOAuthCode(name, code, redirectUri) {
 function saveOAuthTokens(name, tokens) {
   const configDir = getConnectorConfigDir(name);
   const profile = getCurrentProfile(name);
-  const profileDir = join3(configDir, "profiles", profile);
-  mkdirSync(profileDir, { recursive: true });
-  const tokensFile = join3(profileDir, "tokens.json");
-  writeFileSync(tokensFile, JSON.stringify(tokens, null, 2), { mode: 384 });
+  const profileDir = join6(configDir, "profiles", profile);
+  mkdirSync5(profileDir, { recursive: true });
+  const tokensFile = join6(profileDir, "tokens.json");
+  writeFileSync3(tokensFile, JSON.stringify(tokens, null, 2), { mode: 384 });
 }
 async function refreshOAuthToken(name) {
+  return withWriteLock(name, () => _refreshOAuthToken(name));
+}
+async function _refreshOAuthToken(name) {
   const oauthConfig = getOAuthConfig(name);
   const currentTokens = loadTokens(name);
   if (!oauthConfig.clientId || !oauthConfig.clientSecret) {
@@ -6368,15 +7291,15 @@ async function refreshOAuthToken(name) {
 }
 function listProfiles(name) {
   const configDir = getConnectorConfigDir(name);
-  const profilesDir = join3(configDir, "profiles");
-  if (!existsSync3(profilesDir))
+  const profilesDir = join6(configDir, "profiles");
+  if (!existsSync5(profilesDir))
     return ["default"];
   const seen = new Set;
   try {
     const entries = readdirSync2(profilesDir);
     for (const entry of entries) {
-      const fullPath = join3(profilesDir, entry);
-      const stat = statSync2(fullPath);
+      const fullPath = join6(profilesDir, entry);
+      const stat = statSync3(fullPath);
       if (stat.isDirectory()) {
         seen.add(entry);
       } else if (entry.endsWith(".json")) {
@@ -6389,25 +7312,25 @@ function listProfiles(name) {
 }
 function switchProfile(name, profile) {
   const configDir = getConnectorConfigDir(name);
-  mkdirSync(configDir, { recursive: true });
-  writeFileSync(join3(configDir, "current_profile"), profile);
+  mkdirSync5(configDir, { recursive: true });
+  writeFileSync3(join6(configDir, "current_profile"), profile);
 }
 function deleteProfile(name, profile) {
   if (profile === "default")
     return false;
   const configDir = getConnectorConfigDir(name);
-  const profilesDir = join3(configDir, "profiles");
-  const profileFile = join3(profilesDir, `${profile}.json`);
-  if (existsSync3(profileFile)) {
-    rmSync(profileFile);
+  const profilesDir = join6(configDir, "profiles");
+  const profileFile = join6(profilesDir, `${profile}.json`);
+  if (existsSync5(profileFile)) {
+    rmSync2(profileFile);
     if (getCurrentProfile(name) === profile) {
       switchProfile(name, "default");
     }
     return true;
   }
-  const profileDir = join3(profilesDir, profile);
-  if (existsSync3(profileDir)) {
-    rmSync(profileDir, { recursive: true });
+  const profileDir = join6(profilesDir, profile);
+  if (existsSync5(profileDir)) {
+    rmSync2(profileDir, { recursive: true });
     if (getCurrentProfile(name) === profile) {
       switchProfile(name, "default");
     }
@@ -6429,20 +7352,20 @@ function resolveDashboardDir() {
   const candidates = [];
   try {
     const scriptDir = dirname3(fileURLToPath3(import.meta.url));
-    candidates.push(join4(scriptDir, "..", "dashboard", "dist"));
-    candidates.push(join4(scriptDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join7(scriptDir, "..", "dashboard", "dist"));
+    candidates.push(join7(scriptDir, "..", "..", "dashboard", "dist"));
   } catch {}
   if (process.argv[1]) {
     const mainDir = dirname3(process.argv[1]);
-    candidates.push(join4(mainDir, "..", "dashboard", "dist"));
-    candidates.push(join4(mainDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join7(mainDir, "..", "dashboard", "dist"));
+    candidates.push(join7(mainDir, "..", "..", "dashboard", "dist"));
   }
-  candidates.push(join4(process.cwd(), "dashboard", "dist"));
+  candidates.push(join7(process.cwd(), "dashboard", "dist"));
   for (const candidate of candidates) {
-    if (existsSync4(candidate))
+    if (existsSync6(candidate))
       return candidate;
   }
-  return join4(process.cwd(), "dashboard", "dist");
+  return join7(process.cwd(), "dashboard", "dist");
 }
 var MIME_TYPES = {
   ".html": "text/html; charset=utf-8",
@@ -6470,6 +7393,18 @@ function json(data, status = 200, port) {
     }
   });
 }
+async function jsonStripped(data, status = 200, port) {
+  const raw = JSON.stringify(data);
+  const body = await maybeStrip(raw);
+  return new Response(body, {
+    status,
+    headers: {
+      "Content-Type": "application/json",
+      "Access-Control-Allow-Origin": port ? `http://localhost:${port}` : "*",
+      ...SECURITY_HEADERS
+    }
+  });
+}
 function htmlResponse(content, status = 200) {
   return new Response(content, {
     status,
@@ -6532,7 +7467,7 @@ function oauthPage(type, title, message, hint, extra) {
   </body></html>`;
 }
 function serveStaticFile(filePath) {
-  if (!existsSync4(filePath))
+  if (!existsSync6(filePath))
     return null;
   const ext = extname(filePath);
   const contentType = MIME_TYPES[ext] || "application/octet-stream";
@@ -6556,7 +7491,7 @@ async function startServer(requestedPort, options) {
   const shouldOpen = options?.open ?? true;
   loadConnectorVersions();
   const dashboardDir = resolveDashboardDir();
-  const dashboardExists = existsSync4(dashboardDir);
+  const dashboardExists = existsSync6(dashboardDir);
   if (!dashboardExists) {
     console.error(`
 Dashboard not found at: ${dashboardDir}`);
@@ -6585,10 +7520,10 @@ Dashboard not found at: ${dashboardDir}`);
         const fields = fieldsParam ? new Set(fieldsParam.split(",").map((f) => f.trim())) : null;
         const data = getAllConnectorsWithAuth();
         if (compact) {
-          return json(data.map((c) => ({ name: c.name, category: c.category, installed: c.installed })), 200, port);
+          return jsonStripped(data.map((c) => ({ name: c.name, category: c.category, installed: c.installed })), 200, port);
         }
         if (fields) {
-          return json(data.map((c) => {
+          return jsonStripped(data.map((c) => {
             const out = {};
             for (const f of fields) {
               if (f in c)
@@ -6597,7 +7532,7 @@ Dashboard not found at: ${dashboardDir}`);
             return out;
           }), 200, port);
         }
-        return json(data, 200, port);
+        return jsonStripped(data, 200, port);
       }
       const singleMatch = path.match(/^\/api\/connectors\/([^/]+)$/);
       if (singleMatch && method === "GET") {
@@ -6631,7 +7566,7 @@ Dashboard not found at: ${dashboardDir}`);
           const body = await req.json();
           if (!body.key)
             return json({ error: "Missing 'key' in request body" }, 400, port);
-          saveApiKey(name, body.key, body.field);
+          await saveApiKey(name, body.key, body.field);
           logActivity("key_saved", name, body.field ? `Field: ${body.field}` : undefined);
           return json({ success: true }, 200, port);
         } catch (e) {
@@ -6676,7 +7611,10 @@ Dashboard not found at: ${dashboardDir}`);
         if (!isValidConnectorName(name))
           return json({ error: "Invalid connector name" }, 400, port);
         try {
-          removeConnector(name);
+          const removed = removeConnector(name);
+          if (!removed) {
+            return json({ error: `Connector '${name}' is not installed` }, 404, port);
+          }
           logActivity("uninstalled", name);
           return json({ success: true, name }, 200, port);
         } catch (e) {
@@ -6702,6 +7640,167 @@ Dashboard not found at: ${dashboardDir}`);
       if (path === "/api/activity" && method === "GET") {
         return json(activityLog, 200, port);
       }
+      if (path === "/api/hot" && method === "GET") {
+        const { getTopConnectors: getTopConnectors2 } = await Promise.resolve().then(() => (init_usage(), exports_usage));
+        const { getPromotedConnectors: getPromotedConnectors2 } = await Promise.resolve().then(() => (init_promotions(), exports_promotions));
+        const limit = parseInt(url2.searchParams.get("limit") || "10", 10);
+        const days = parseInt(url2.searchParams.get("days") || "7", 10);
+        const db = getDatabase2();
+        const top = getTopConnectors2(limit, days, db);
+        const promoted = new Set(getPromotedConnectors2(db));
+        return json(top.map((t) => ({ ...t, promoted: promoted.has(t.connector) })), 200, port);
+      }
+      const promoteMatch = path.match(/^\/api\/connectors\/([^/]+)\/promote$/);
+      if (promoteMatch && method === "POST") {
+        const name = promoteMatch[1];
+        if (!getConnector(name))
+          return json({ error: "Connector not found" }, 404, port);
+        const { promoteConnector: promoteConnector2 } = await Promise.resolve().then(() => (init_promotions(), exports_promotions));
+        promoteConnector2(name, getDatabase2());
+        return json({ success: true, connector: name }, 200, port);
+      }
+      if (promoteMatch && method === "DELETE") {
+        const { demoteConnector: demoteConnector2 } = await Promise.resolve().then(() => (init_promotions(), exports_promotions));
+        const removed = demoteConnector2(promoteMatch[1], getDatabase2());
+        return json({ success: removed, connector: promoteMatch[1] }, 200, port);
+      }
+      if (path === "/api/llm" && method === "GET") {
+        const config = getLlmConfig();
+        if (!config)
+          return json({ configured: false }, 200, port);
+        return json({ configured: true, provider: config.provider, model: config.model, key: maskKey(config.api_key), strip: config.strip }, 200, port);
+      }
+      if (path === "/api/llm" && method === "POST") {
+        const body = await req.json().catch(() => ({}));
+        const validProviders = ["cerebras", "groq", "openai", "anthropic"];
+        const provider = body.provider;
+        if (!provider || !validProviders.includes(provider))
+          return json({ error: "provider must be one of: " + validProviders.join(", ") }, 400, port);
+        const api_key = body.api_key;
+        if (!api_key)
+          return json({ error: "api_key is required" }, 400, port);
+        const model = body.model || getLlmConfig()?.model || "qwen-3-32b";
+        const strip = typeof body.strip === "boolean" ? body.strip : getLlmConfig()?.strip ?? false;
+        saveLlmConfig({ provider, model, api_key, strip });
+        return json({ success: true, provider, model, strip }, 200, port);
+      }
+      if (path === "/api/llm/test" && method === "POST") {
+        const config = getLlmConfig();
+        if (!config)
+          return json({ error: "No LLM configured" }, 400, port);
+        try {
+          const client = new LLMClient(config);
+          const result = await client.complete('Respond with exactly: {"status":"ok"}', "ping");
+          return json({ success: true, provider: result.provider, model: result.model, latency_ms: result.latency_ms, response: result.content }, 200, port);
+        } catch (e) {
+          return json({ success: false, error: e instanceof Error ? e.message : String(e) }, 500, port);
+        }
+      }
+      if (path === "/api/jobs" && method === "GET") {
+        return json(listJobs(getDatabase2()), 200, port);
+      }
+      if (path === "/api/jobs" && method === "POST") {
+        const body = await req.json().catch(() => ({}));
+        if (!body.name || !body.connector || !body.command || !body.cron)
+          return json({ error: "name, connector, command, cron required" }, 400, port);
+        const job = createJob({ name: body.name, connector: body.connector, command: body.command, args: body.args ?? [], cron: body.cron, strip: !!body.strip }, getDatabase2());
+        return json(job, 201, port);
+      }
+      const jobMatch = path.match(/^\/api\/jobs\/([^/]+)$/);
+      if (jobMatch) {
+        const db = getDatabase2();
+        const job = getJobByName(jobMatch[1]) ?? getDatabase2().query("SELECT * FROM connector_jobs WHERE id = ?").get(jobMatch[1]);
+        if (!job && method !== "DELETE")
+          return json({ error: "Job not found" }, 404, port);
+        if (method === "GET")
+          return json(listJobRuns(job.id, 20, db), 200, port);
+        if (method === "DELETE") {
+          const j = getJobByName(jobMatch[1], db);
+          if (!j)
+            return json({ error: "Job not found" }, 404, port);
+          deleteJob(j.id, db);
+          return json({ success: true }, 200, port);
+        }
+        if (method === "PATCH") {
+          const body = await req.json().catch(() => ({}));
+          const j = getJobByName(jobMatch[1], db);
+          const updated = updateJob(j.id, { enabled: typeof body.enabled === "boolean" ? body.enabled : undefined, strip: typeof body.strip === "boolean" ? body.strip : undefined }, db);
+          return json(updated, 200, port);
+        }
+      }
+      const jobRunMatch = path.match(/^\/api\/jobs\/([^/]+)\/run$/);
+      if (jobRunMatch && method === "POST") {
+        const db = getDatabase2();
+        const job = getJobByName(jobRunMatch[1], db);
+        if (!job)
+          return json({ error: "Job not found" }, 404, port);
+        const result = await triggerJob(job, db);
+        return json(result, 200, port);
+      }
+      if (path === "/api/workflows" && method === "GET") {
+        return json(listWorkflows(getDatabase2()), 200, port);
+      }
+      if (path === "/api/workflows" && method === "POST") {
+        const body = await req.json().catch(() => ({}));
+        if (!body.name || !body.steps)
+          return json({ error: "name and steps required" }, 400, port);
+        const wf = createWorkflow({ name: body.name, steps: body.steps }, getDatabase2());
+        return json(wf, 201, port);
+      }
+      const wfMatch = path.match(/^\/api\/workflows\/([^/]+)$/);
+      if (wfMatch) {
+        const db = getDatabase2();
+        const wf = getWorkflowByName(wfMatch[1], db);
+        if (!wf)
+          return json({ error: "Workflow not found" }, 404, port);
+        if (method === "GET")
+          return json(wf, 200, port);
+        if (method === "DELETE") {
+          deleteWorkflow(wf.id, db);
+          return json({ success: true }, 200, port);
+        }
+      }
+      const wfRunMatch = path.match(/^\/api\/workflows\/([^/]+)\/run$/);
+      if (wfRunMatch && method === "POST") {
+        const wf = getWorkflowByName(wfRunMatch[1], getDatabase2());
+        if (!wf)
+          return json({ error: "Workflow not found" }, 404, port);
+        const result = await runWorkflow(wf);
+        return json(result, 200, port);
+      }
+      if (path === "/api/agents" && method === "GET") {
+        return json(listAgents(), 200, port);
+      }
+      if (path === "/api/agents/register" && method === "POST") {
+        const body = await req.json().catch(() => ({}));
+        const name = typeof body.name === "string" ? body.name : null;
+        if (!name)
+          return json({ error: "name is required" }, 400, port);
+        const result = registerAgent({
+          name,
+          session_id: typeof body.session_id === "string" ? body.session_id : undefined,
+          role: typeof body.role === "string" ? body.role : undefined
+        });
+        if (isAgentConflict(result))
+          return json(result, 409, port);
+        return json(result, 200, port);
+      }
+      if (path.startsWith("/api/agents/") && method === "DELETE") {
+        const agentName = path.slice("/api/agents/".length);
+        const agent = getAgentByName(agentName);
+        if (!agent)
+          return json({ error: "Agent not found" }, 404, port);
+        deleteAgent(agent.id);
+        return json({ success: true }, 200, port);
+      }
+      const rateMatch = path.match(/^\/api\/rate\/([^/]+)\/([^/]+)$/);
+      if (rateMatch && method === "GET") {
+        const [, agentId, connector] = rateMatch;
+        const limit = parseInt(url2.searchParams.get("limit") || "60", 10);
+        const consume = url2.searchParams.get("consume") === "true";
+        const result = consume ? checkRateBudget(agentId, connector, limit) : getRateBudget(agentId, connector, limit);
+        return json(result, 200, port);
+      }
       const profilesMatch = path.match(/^\/api\/connectors\/([^/]+)\/profiles$/);
       if (profilesMatch && method === "GET") {
         const name = profilesMatch[1];
@@ -6709,12 +7808,12 @@ Dashboard not found at: ${dashboardDir}`);
           return json({ error: "Invalid connector name" }, 400, port);
         try {
           const profiles = listProfiles(name);
-          const configDir = join4(homedir2(), ".connectors", name.startsWith("connect-") ? name : `connect-${name}`);
-          const currentProfileFile = join4(configDir, "current_profile");
+          const configDir = join7(homedir6(), ".connectors", name.startsWith("connect-") ? name : `connect-${name}`);
+          const currentProfileFile = join7(configDir, "current_profile");
           let current = "default";
-          if (existsSync4(currentProfileFile)) {
+          if (existsSync6(currentProfileFile)) {
             try {
-              current = readFileSync4(currentProfileFile, "utf-8").trim() || "default";
+              current = readFileSync5(currentProfileFile, "utf-8").trim() || "default";
             } catch {}
           }
           return json({ current, profiles }, 200, port);
@@ -6761,16 +7860,16 @@ Dashboard not found at: ${dashboardDir}`);
       }
       if (path === "/api/export" && method === "GET") {
         try {
-          const connectDir = join4(homedir2(), ".connectors");
+          const connectDir = join7(homedir6(), ".connectors");
           const result = {};
-          if (existsSync4(connectDir)) {
+          if (existsSync6(connectDir)) {
             const entries = readdirSync3(connectDir, { withFileTypes: true });
             for (const entry of entries) {
               if (!entry.isDirectory() || !entry.name.startsWith("connect-"))
                 continue;
               const connectorName = entry.name.replace(/^connect-/, "");
-              const profilesDir = join4(connectDir, entry.name, "profiles");
-              if (!existsSync4(profilesDir))
+              const profilesDir = join7(connectDir, entry.name, "profiles");
+              if (!existsSync6(profilesDir))
                 continue;
               const profiles = {};
               const profileEntries = readdirSync3(profilesDir, { withFileTypes: true });
@@ -6778,15 +7877,15 @@ Dashboard not found at: ${dashboardDir}`);
                 if (pEntry.isFile() && pEntry.name.endsWith(".json")) {
                   const profileName = basename(pEntry.name, ".json");
                   try {
-                    const config = JSON.parse(readFileSync4(join4(profilesDir, pEntry.name), "utf-8"));
+                    const config = JSON.parse(readFileSync5(join7(profilesDir, pEntry.name), "utf-8"));
                     profiles[profileName] = config;
                   } catch {}
                 }
                 if (pEntry.isDirectory()) {
-                  const configPath = join4(profilesDir, pEntry.name, "config.json");
-                  if (existsSync4(configPath)) {
+                  const configPath = join7(profilesDir, pEntry.name, "config.json");
+                  if (existsSync6(configPath)) {
                     try {
-                      const config = JSON.parse(readFileSync4(configPath, "utf-8"));
+                      const config = JSON.parse(readFileSync5(configPath, "utf-8"));
                       profiles[pEntry.name] = config;
                     } catch {}
                   }
@@ -6821,20 +7920,20 @@ Dashboard not found at: ${dashboardDir}`);
             return json({ error: "Invalid import format: missing 'connectors' object" }, 400, port);
           }
           let imported = 0;
-          const connectDir = join4(homedir2(), ".connectors");
+          const connectDir = join7(homedir6(), ".connectors");
           for (const [connectorName, data] of Object.entries(body.connectors)) {
             if (!isValidConnectorName(connectorName))
               continue;
             if (!data.profiles || typeof data.profiles !== "object")
               continue;
-            const connectorDir = join4(connectDir, `connect-${connectorName}`);
-            const profilesDir = join4(connectorDir, "profiles");
+            const connectorDir = join7(connectDir, `connect-${connectorName}`);
+            const profilesDir = join7(connectorDir, "profiles");
             for (const [profileName, config] of Object.entries(data.profiles)) {
               if (!config || typeof config !== "object")
                 continue;
-              mkdirSync2(profilesDir, { recursive: true });
-              const profileFile = join4(profilesDir, `${profileName}.json`);
-              writeFileSync2(profileFile, JSON.stringify(config, null, 2));
+              mkdirSync6(profilesDir, { recursive: true });
+              const profileFile = join7(profilesDir, `${profileName}.json`);
+              writeFileSync4(profileFile, JSON.stringify(config, null, 2));
               imported++;
             }
           }
@@ -6889,12 +7988,12 @@ Dashboard not found at: ${dashboardDir}`);
       }
       if (dashboardExists && (method === "GET" || method === "HEAD")) {
         if (path !== "/") {
-          const filePath = join4(dashboardDir, path);
+          const filePath = join7(dashboardDir, path);
           const res2 = serveStaticFile(filePath);
           if (res2)
             return res2;
         }
-        const indexPath = join4(dashboardDir, "index.html");
+        const indexPath = join7(dashboardDir, "index.html");
         const res = serveStaticFile(indexPath);
         if (res)
           return res;
@@ -6908,6 +8007,9 @@ Dashboard not found at: ${dashboardDir}`);
   };
   process.on("SIGINT", shutdown);
   process.on("SIGTERM", shutdown);
+  const { startScheduler: startScheduler2 } = await Promise.resolve().then(() => (init_scheduler(), exports_scheduler));
+  const { getDatabase: getDatabase2 } = await Promise.resolve().then(() => (init_database(), exports_database));
+  startScheduler2(getDatabase2());
   const url = `http://localhost:${port}`;
   console.log(`Connectors Dashboard running at ${url}`);
   if (shouldOpen) {