@oomol-lab/open-flow 0.1.0-beta.57 → 0.1.0-beta.59

package/dist/browser/workbench.css

@@ -4172,6 +4172,60 @@ html[data-overlayscrollbars-viewport~=scrollbarHidden] > body::-webkit-scrollbar
     background-color: #0000;
   }
 
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:h-auto:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    height: auto;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:flex-none:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    flex: none;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:rounded-\[6px\]:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    border-radius: 6px;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:border-0:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    border-style: var(--tw-border-style);
+    border-width: 0;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:px-3:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    padding-inline: calc(var(--spacing) * 3);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:py-2:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    padding-block: calc(var(--spacing) * 2);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:text-\[13px\]:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    font-size: 13px;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:font-normal:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    --tw-font-weight: var(--font-weight-normal);
+    font-weight: var(--font-weight-normal);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:text-muted-foreground:is(:where(.group\/tabs-list)[data-variant="navigation"] *) {
+    color: var(--ui-muted-foreground);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:group-data-\[size\=sm\]\/tabs-list\:rounded-\[4px\]:is(:where(.group\/tabs-list)[data-variant="navigation"] *):is(:where(.group\/tabs-list)[data-size="sm"] *) {
+    border-radius: 4px;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:group-data-\[size\=sm\]\/tabs-list\:px-2:is(:where(.group\/tabs-list)[data-variant="navigation"] *):is(:where(.group\/tabs-list)[data-size="sm"] *) {
+    padding-inline: calc(var(--spacing) * 2);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:group-data-\[size\=sm\]\/tabs-list\:py-1:is(:where(.group\/tabs-list)[data-variant="navigation"] *):is(:where(.group\/tabs-list)[data-size="sm"] *) {
+    padding-block: var(--spacing);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:group-data-\[size\=sm\]\/tabs-list\:text-\[12px\]:is(:where(.group\/tabs-list)[data-variant="navigation"] *):is(:where(.group\/tabs-list)[data-size="sm"] *) {
+    font-size: 12px;
+  }
+
   :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .peer-disabled\:cursor-not-allowed:is(:where(.peer):disabled ~ *) {
     cursor: not-allowed;
   }
@@ -4492,6 +4546,14 @@ html[data-overlayscrollbars-viewport~=scrollbarHidden] > body::-webkit-scrollbar
       box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
     }
 
+    :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:hover\:bg-muted:is(:where(.group\/tabs-list)[data-variant="navigation"] *):hover {
+      background-color: var(--ui-muted);
+    }
+
+    :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:hover\:text-foreground:is(:where(.group\/tabs-list)[data-variant="navigation"] *):hover {
+      color: var(--ui-foreground);
+    }
+
     :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .hover\:placeholder\:opacity-50:hover::placeholder {
       opacity: .5;
     }
@@ -5035,6 +5097,19 @@ html[data-overlayscrollbars-viewport~=scrollbarHidden] > body::-webkit-scrollbar
     box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
   }
 
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:data-active\:bg-muted:is(:where(.group\/tabs-list)[data-variant="navigation"] *)[data-active] {
+    background-color: var(--ui-muted);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:data-active\:font-semibold:is(:where(.group\/tabs-list)[data-variant="navigation"] *)[data-active] {
+    --tw-font-weight: var(--font-weight-semibold);
+    font-weight: var(--font-weight-semibold);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=navigation\]\/tabs-list\:data-active\:text-foreground:is(:where(.group\/tabs-list)[data-variant="navigation"] *)[data-active] {
+    color: var(--ui-foreground);
+  }
+
   :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[variant\=line\]\/tabs-list\:data-active\:after\:opacity-100:is(:where(.group\/tabs-list)[data-variant="line"] *)[data-active]:after {
     content: var(--tw-content);
     opacity: 1;
@@ -5577,6 +5652,14 @@ html[data-overlayscrollbars-viewport~=scrollbarHidden] > body::-webkit-scrollbar
     border-radius: 0;
   }
 
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .data-\[variant\=navigation\]\:p-0[data-variant="navigation"] {
+    padding: 0;
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .group-data-\[orientation\=horizontal\]\/tabs\:data-\[variant\=navigation\]\:h-auto:is(:where(.group\/tabs)[data-orientation="horizontal"] *)[data-variant="navigation"] {
+    height: auto;
+  }
+
   :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .data-\[variant\=outline\]\:bg-background[data-variant="outline"] {
     background-color: var(--ui-background);
   }
@@ -6011,6 +6094,14 @@ html[data-overlayscrollbars-viewport~=scrollbarHidden] > body::-webkit-scrollbar
     background-color: #0000;
   }
 
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .dark\:group-data-\[variant\=navigation\]\/tabs-list\:data-active\:bg-muted:where([data-theme="dark"], [data-theme="dark"] *):is(:where(.group\/tabs-list)[data-variant="navigation"] *)[data-active] {
+    background-color: var(--ui-muted);
+  }
+
+  :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .dark\:group-data-\[variant\=navigation\]\/tabs-list\:data-active\:text-foreground:where([data-theme="dark"], [data-theme="dark"] *):is(:where(.group\/tabs-list)[data-variant="navigation"] *)[data-active] {
+    color: var(--ui-foreground);
+  }
+
   :where(.open-flow-theme, .open-flow-workbench, .open-flow-canvas-root) .dark\:data-checked\:bg-primary-foreground:where([data-theme="dark"], [data-theme="dark"] *)[data-checked] {
     background-color: var(--ui-primary-foreground);
   }

package/dist/browser/workbench.js

@@ -1,4 +1,4 @@
-import { $ as RunStore, $t as EventSourcesPage, An as providerIconAppearance, At as followWorkbenchLink, B as CacheResource, Bn as invalidResponse, Cn as sampleErrorOutputs, Ct as setCodeActions, Dt as updateTriggerConfig, Et as setTriggerConnection, F as feishuResourceKind, Gn as controlErrorCode, Gt as InputGroupAddon, H as resourceData, Hn as record, I as supportsFeishuChatFilter, J as providerIcon, Jt as EmptyContent, Kt as InputGroupInput, L as combineSources, Lt as PopoverTitle, M as addNodeIntent, Mt as Popover, N as deriveAddNodeOptions, Nt as PopoverContent, On as connection, Ot as updateTriggerSchedule, Qt as EmptyTitle, Rt as PopoverTrigger, St as resetInputValues, Tn as isJsonObject, Tt as setInputSources, U as resourceValue, Un as string, Vn as jsonValue, W as designerGraph, Wn as ApiError, Wt as InputGroup, Xt as EmptyHeader, Yt as EmptyDescription, Zt as EmptyMedia, _ as updateValue, _n as randomId, _t as setComment, a as nameCreatedNodes, at as deriveInspectorDiagnostics, bn as decodeTriggerCatalog, bt as setNodePositions, c as updateCondition, d as updateNodeName, dt as connectionCatalog, f as updateNodeSettings, ft as canvasPresentationChange, g as updateTaskPorts, gn as WorkbenchClient, gt as restoreCanvasPresentation, h as updateTaskAdditionalInputs, hn as errorNotice, ht as removeComments, i as deleteSelection, it as Latest, jt as Switch, kn as connectorActionMetadata, kt as IdTooltip, l as updateNodeDescription, m as updateTask, mt as flowPresentation, nn as createI18n, nt as revisionView, o as setInputValue, ot as diagnosticItems, p as updateResolution, pt as commentIds, qn as IconThemeContext, qt as Empty, r as applyFlowChanges, rt as flowResourceReferences, s as setInputVariable, t as addNode, u as updateNodeIcon, ut as actionWithConnections, v as updateWebhook, vn as allConnectorConnectionsQuery, vt as setFlowViewport, wn as triggerOutputDefinitions, wt as setConnectorConnection, xt as repairNodeNames, yt as setNodeContentHidden, z as scopedValue, zn as inputValue } from "./flowChanges-fBiAeTzR.js";
+import { $ as RunStore, $t as EventSourcesPage, An as providerIconAppearance, At as followWorkbenchLink, B as CacheResource, Bn as invalidResponse, Cn as sampleErrorOutputs, Ct as setCodeActions, Dt as updateTriggerConfig, Et as setTriggerConnection, F as feishuResourceKind, Gn as controlErrorCode, Gt as InputGroupAddon, H as resourceData, Hn as record, I as supportsFeishuChatFilter, J as providerIcon, Jt as EmptyContent, Kt as InputGroupInput, L as combineSources, Lt as PopoverTitle, M as addNodeIntent, Mt as Popover, N as deriveAddNodeOptions, Nt as PopoverContent, On as connection, Ot as updateTriggerSchedule, Qt as EmptyTitle, Rt as PopoverTrigger, St as resetInputValues, Tn as isJsonObject, Tt as setInputSources, U as resourceValue, Un as string, Vn as jsonValue, W as designerGraph, Wn as ApiError, Wt as InputGroup, Xt as EmptyHeader, Yt as EmptyDescription, Zt as EmptyMedia, _ as updateValue, _n as randomId, _t as setComment, a as nameCreatedNodes, at as deriveInspectorDiagnostics, bn as decodeTriggerCatalog, bt as setNodePositions, c as updateCondition, d as updateNodeName, dt as connectionCatalog, f as updateNodeSettings, ft as canvasPresentationChange, g as updateTaskPorts, gn as WorkbenchClient, gt as restoreCanvasPresentation, h as updateTaskAdditionalInputs, hn as errorNotice, ht as removeComments, i as deleteSelection, it as Latest, jt as Switch, kn as connectorActionMetadata, kt as IdTooltip, l as updateNodeDescription, m as updateTask, mt as flowPresentation, nn as createI18n, nt as revisionView, o as setInputValue, ot as diagnosticItems, p as updateResolution, pt as commentIds, qn as IconThemeContext, qt as Empty, r as applyFlowChanges, rt as flowResourceReferences, s as setInputVariable, t as addNode, u as updateNodeIcon, ut as actionWithConnections, v as updateWebhook, vn as allConnectorConnectionsQuery, vt as setFlowViewport, wn as triggerOutputDefinitions, wt as setConnectorConnection, xt as repairNodeNames, yt as setNodeContentHidden, z as scopedValue, zn as inputValue } from "./flowChanges-DL0Njlg6.js";
 import { a as derive, i as compute, l as val } from "./dist-bO8nvHFH.js";
 import { a as toPlainObject, c as useLang, l as useTranslate, o as I18nProvider, u as useVal } from "./dist-BFmpkX4P.js";
 import { E as FieldLabel, H as applyFlowChanges$1, J as resourceNameIssue, Q as nodeInputMappings, S as Field, T as FieldGroup, V as FlowChangeError, Z as mapConditionSources, a as DialogDescription, at as dequal$1, bi as cn, c as DialogTitle, d as TooltipContent, i as DialogContent, n as Dialog, o as DialogFooter, or as Input, p as TooltipTrigger, r as DialogClose, s as DialogHeader, t as Icon, u as Tooltip, vi as Button, w as FieldError, x as Spinner } from "./icons-6oQ8Q9Wm.js";
@@ -6735,7 +6735,7 @@ var WorkbenchStore = class {
 };
 //#endregion
 //#region src/workbench/browser/runtime/openFlowWorkbench.tsx
-var FlowWorkspace = lazy(() => import("./flowWorkspace-MqcEfg7T.js"));
+var FlowWorkspace = lazy(() => import("./flowWorkspace-Cp5CcEGu.js"));
 function OpenFlowSessionGate({ action, description, error, onSubmit, onTokenChange, pending = false, title, token, tokenLabel }) {
 	const hasToken = token != null && tokenLabel != null && onTokenChange != null;
 	const tokenValue = token ?? "";

package/dist/common/control-requests.js

@@ -14062,7 +14062,7 @@ var schemas = {
 		comment: waitCommentSchema,
 		version
 	}),
-	putVariable: strictObject({ value: string().refine((value) => new TextEncoder().encode(value).byteLength <= 65536, "Environment variable value is too large.") }),
+	putVariable: strictObject({ value: string().refine((value) => new TextEncoder().encode(value).byteLength <= 65536, "Variable value is too large.") }),
 	queryConnectorAccessCandidates: strictObject({
 		providerIds: array(id.max(256)).min(1).refine((ids) => new Set(ids).size == ids.length, "Duplicate provider IDs."),
 		version

package/dist/common/event-source-definition.d.ts

@@ -0,0 +1,39 @@
+import type { JsonValue } from '../browser/flow-change.js';
+export interface SourceConfiguration {
+    readonly identity: string;
+    readonly eventTypes: string[];
+    readonly config: Readonly<Record<string, JsonValue>>;
+    readonly secrets: Readonly<Record<string, JsonValue>>;
+    readonly state: Readonly<Record<string, JsonValue>>;
+}
+export interface SourceEvent {
+    readonly id: string;
+    readonly type: string;
+    readonly payload: Readonly<Record<string, JsonValue>>;
+}
+export interface SourceSubscription {
+    readonly key: string;
+    readonly config: Readonly<Record<string, JsonValue>>;
+}
+export interface EventSourceDefinition<Create, Update, View> {
+    readonly kind: string;
+    readonly provider: string;
+    readonly maximumBodyBytes: number;
+    readonly initialize: (input: Create, accountId: string | undefined) => SourceConfiguration;
+    readonly update: (source: SourceConfiguration, input: Update) => SourceConfiguration;
+    readonly view: (source: SourceConfiguration) => View;
+    readonly ready: (source: SourceConfiguration) => boolean;
+    readonly receive: (source: SourceConfiguration, bytes: Uint8Array, headers: Headers, now: number) => Promise<{
+        readonly response: Response;
+        readonly state: SourceConfiguration['state'];
+    } | {
+        readonly event: SourceEvent;
+    }>;
+    readonly matches: (config: Readonly<Record<string, JsonValue>>, event: SourceEvent) => boolean;
+    readonly resources: {
+        readonly triggerId: string;
+        readonly requests: (source: SourceConfiguration, provider: string, config: Readonly<Record<string, JsonValue>>) => readonly SourceSubscription[];
+    };
+}
+export declare class SourceIdentityError extends Error {
+}

package/dist/common/event-source-feishu.d.ts

@@ -0,0 +1,3 @@
+import type { CreateEventSource, EventSource, UpdateEventSource } from './event-sources.js';
+import type { EventSourceDefinition } from './event-source-definition.js';
+export declare const feishuApplication: EventSourceDefinition<CreateEventSource, UpdateEventSource, Pick<EventSource, 'appId' | 'manageSubscriptions' | 'verificationTokenConfigured' | 'encryptKeyConfigured' | 'verifiedAt'>>;

package/dist/common/event-source.d.ts

@@ -0,0 +1,6 @@
+import { feishuApplication } from './event-source-feishu.js';
+export type { EventSourceDefinition, SourceConfiguration, SourceEvent, SourceSubscription } from './event-source-definition.js';
+export { SourceIdentityError } from './event-source-definition.js';
+export { feishuApplication } from './event-source-feishu.js';
+declare const definitions: readonly (typeof feishuApplication)[];
+export declare function eventSourceDefinition(kind: string): (typeof definitions)[number];

package/dist/common/event-source.js

@@ -0,0 +1,289 @@
+import { PermanentIntegrationError } from "./integration-trigger.js";
+//#region src/base/common/json.ts
+function hasJsonShape(root) {
+	if (root === null || typeof root == "boolean" || typeof root == "string") return true;
+	if (typeof root == "number") return Number.isFinite(root);
+	if (typeof root != "object") return false;
+	const ancestors = /* @__PURE__ */ new Set();
+	const pending = [];
+	let value = root;
+	traversal: while (true) {
+		let keys;
+		let arrayLength;
+		if (Array.isArray(value)) {
+			arrayLength = value.length;
+			keys = Reflect.ownKeys(value);
+			if (keys.length != arrayLength + 1) return false;
+		} else {
+			const prototype = Reflect.getPrototypeOf(value);
+			if (prototype != Object.prototype && prototype != null) return false;
+			keys = Reflect.ownKeys(value);
+			arrayLength = void 0;
+		}
+		ancestors.add(value);
+		let index = 0;
+		while (true) {
+			if (index >= keys.length) {
+				ancestors.delete(value);
+				const parent = pending.pop();
+				if (parent === void 0) return true;
+				value = parent.value;
+				keys = parent.keys;
+				arrayLength = parent.arrayLength;
+				index = parent.index;
+				continue;
+			}
+			const key = keys[index++];
+			if (arrayLength !== void 0) {
+				if (key == "length") continue;
+				if (typeof key != "string") return false;
+				const arrayIndex = Number(key);
+				if (!Number.isSafeInteger(arrayIndex) || arrayIndex < 0 || arrayIndex >= arrayLength || String(arrayIndex) != key) return false;
+			} else if (typeof key != "string") return false;
+			const descriptor = Reflect.getOwnPropertyDescriptor(value, key);
+			if (descriptor?.enumerable != true || !Object.hasOwn(descriptor, "value")) return false;
+			const child = descriptor.value;
+			if (child === null || typeof child == "boolean" || typeof child == "string") continue;
+			if (typeof child == "number") {
+				if (!Number.isFinite(child)) return false;
+				continue;
+			}
+			if (typeof child != "object" || ancestors.has(child)) return false;
+			pending.push({
+				value,
+				keys,
+				arrayLength,
+				index
+			});
+			value = child;
+			continue traversal;
+		}
+	}
+}
+function isJsonObject(value) {
+	try {
+		return value != null && typeof value == "object" && !Array.isArray(value) && hasJsonShape(value);
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/trigger/providers/feishu/events.ts
+var encoder = new TextEncoder();
+var decoder = new TextDecoder("utf-8", { fatal: true });
+async function receiveFeishuEvent(rawBody, headers, source, now) {
+	const envelope = JSON.parse(decoder.decode(rawBody));
+	if (!isJsonObject(envelope) || typeof envelope.encrypt != "string" || !/^[A-Za-z0-9+/]+={0,2}$/.test(envelope.encrypt)) throw new TypeError("An encrypted Feishu envelope is required.");
+	const bytes = Uint8Array.from(atob(envelope.encrypt), (character) => character.charCodeAt(0));
+	if (bytes.length < 32 || bytes.length % 16 != 0) throw new TypeError("Invalid encrypted Feishu envelope.");
+	const key = await crypto.subtle.importKey("raw", await crypto.subtle.digest("SHA-256", encoder.encode(source.encryptKey)), "AES-CBC", false, ["decrypt"]);
+	const value = JSON.parse(decoder.decode(await crypto.subtle.decrypt({
+		name: "AES-CBC",
+		iv: bytes.slice(0, 16)
+	}, key, bytes.slice(16))));
+	if (!isJsonObject(value)) throw new TypeError("Invalid Feishu event.");
+	const header = isJsonObject(value.header) ? value.header : void 0;
+	if (!sameSecret(header?.token ?? value.token, source.verificationToken)) throw new TypeError("Invalid Feishu verification token.");
+	if (value.type == "url_verification") {
+		if (typeof value.challenge != "string" || value.challenge.length == 0 || value.challenge.length > 1024) throw new TypeError("Invalid challenge.");
+		return { challenge: value.challenge };
+	}
+	const timestamp = headers.get("x-lark-request-timestamp") ?? "";
+	const nonce = headers.get("x-lark-request-nonce") ?? "";
+	const signature = headers.get("x-lark-signature") ?? "";
+	if (!/^\d{10}$/.test(timestamp) || Math.abs(now - Number(timestamp) * 1e3) > 864e5 || nonce.length == 0 || nonce.length > 256) throw new TypeError("Invalid Feishu request identity.");
+	const prefix = encoder.encode(timestamp + nonce + source.encryptKey);
+	const signed = new Uint8Array(prefix.length + rawBody.length);
+	signed.set(prefix);
+	signed.set(rawBody, prefix.length);
+	const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", signed));
+	if (!sameSecret(signature, Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join(""))) throw new TypeError("Invalid Feishu signature.");
+	const body = value.event;
+	if (!isJsonObject(body)) throw new TypeError("Missing Feishu event body.");
+	if (value.schema != null && value.schema != "2.0") throw new TypeError("Unsupported Feishu event schema.");
+	const type = header?.event_type ?? body.type;
+	const appId = header?.app_id ?? body.app_id ?? value.app_id;
+	const tenantKey = header?.tenant_key ?? body.tenant_key ?? value.tenant_key;
+	let id = header?.event_id ?? value.uuid;
+	if (type == "im.message.receive_v1" && isJsonObject(body.message)) id = body.message.message_id;
+	if (typeof id != "string" || id.length == 0 || id.length > 256 || typeof type != "string" || !/^[a-z][a-z0-9_.]{0,127}$/.test(type)) throw new TypeError("Missing Feishu event identity.");
+	if (appId != source.appId) throw new TypeError("Feishu event source does not match.");
+	if (typeof tenantKey != "string" || tenantKey.length == 0 || tenantKey.length > 256) throw new TypeError("Invalid Feishu event tenant.");
+	if (type == "card.action.trigger" || type == "app_ticket") throw new TypeError("This callback is not an asynchronous business event.");
+	const { token: _token, ...business } = body;
+	const occurredAt = header?.create_time ?? value.ts;
+	return { event: {
+		id: `${type}:${id}`,
+		type,
+		appId: source.appId,
+		tenantKey,
+		occurredAt: typeof occurredAt == "string" ? occurredAt : null,
+		body: business
+	} };
+}
+function sameSecret(value, expected) {
+	if (typeof value != "string" || value.length != expected.length) return false;
+	let difference = 0;
+	for (let index = 0; index < expected.length; index += 1) difference |= value.charCodeAt(index) ^ expected.charCodeAt(index);
+	return difference == 0;
+}
+function matchesFeishuEvent(config, event) {
+	if (!Array.isArray(config.eventTypes) || !config.eventTypes.includes(event.type)) return false;
+	const chatIds = config.chatIds;
+	if (Array.isArray(chatIds) && chatIds.length > 0) {
+		const chatId = isJsonObject(event.body.message) ? event.body.message.chat_id : event.body.chat_id;
+		if (typeof chatId != "string" || !chatIds.includes(chatId)) return false;
+	}
+	const resource = config.resource;
+	if (isJsonObject(resource)) {
+		if ((resource.kind == "document" ? event.body.file_token : resource.kind == "calendar" ? event.body.calendar_id : event.body.approval_code) != resource.id) return false;
+	}
+	return true;
+}
+//#endregion
+//#region src/trigger/providers/feishu/config.ts
+function feishuResourceKind(events) {
+	if (events.length == 0) return;
+	if (events.every((event) => event.startsWith("drive.file."))) return "document";
+	if (events.every((event) => event == "calendar.calendar.event.changed_v4")) return "calendar";
+	if (events.every((event) => [
+		"approval_instance",
+		"approval_task",
+		"approval_cc",
+		"approval"
+	].includes(event))) return "approval";
+}
+//#endregion
+//#region src/trigger/providers/feishu/subscriptions.ts
+function feishuSubscriptions(config, provider) {
+	if (config.resource == null) return [];
+	if (!isJsonObject(config.resource)) throw new PermanentIntegrationError("Invalid Feishu resource.");
+	const { kind, id, documentType } = config.resource;
+	if (typeof id != "string" || id.length == 0 || kind != feishuResourceKind(config.eventTypes)) throw new PermanentIntegrationError("Invalid resource subscription.");
+	if (kind == "document") {
+		if (typeof documentType != "string" || ![
+			"doc",
+			"docx",
+			"sheet",
+			"bitable",
+			"file",
+			"folder",
+			"slides"
+		].includes(documentType)) throw new PermanentIntegrationError("A supported document type is required.");
+		return config.eventTypes.map((eventType) => ({
+			key: JSON.stringify([
+				"document",
+				documentType,
+				id,
+				eventType
+			]),
+			config: {
+				...config,
+				eventTypes: [eventType]
+			}
+		}));
+	}
+	if (kind == "calendar" || kind == "approval" && provider == "feishu_app_bot") return [{
+		key: JSON.stringify([kind, id]),
+		config
+	}];
+	throw new PermanentIntegrationError("Unsupported Feishu resource subscription.");
+}
+//#endregion
+//#region src/event-source/common/definition.ts
+var SourceIdentityError = class extends Error {};
+//#endregion
+//#region src/event-source/common/feishu.ts
+var feishuApplication = {
+	kind: "feishu",
+	provider: "feishu_app_bot",
+	maximumBodyBytes: 65536,
+	initialize(input, accountId) {
+		if (accountId == null || !/^cli_[a-zA-Z0-9]+$/.test(accountId)) throw new SourceIdentityError("Connector must provide the verified application identity.");
+		return {
+			identity: accountId,
+			eventTypes: input.eventTypes,
+			config: { manageSubscriptions: input.manageSubscriptions },
+			secrets: {
+				verificationToken: input.verificationToken,
+				encryptKey: input.encryptKey
+			},
+			state: {}
+		};
+	},
+	update(source, input) {
+		const secrets = {
+			verificationToken: input.verificationToken ?? source.secrets.verificationToken,
+			encryptKey: input.encryptKey ?? source.secrets.encryptKey
+		};
+		const changed = secrets.verificationToken != source.secrets.verificationToken || secrets.encryptKey != source.secrets.encryptKey;
+		return {
+			identity: source.identity,
+			eventTypes: input.eventTypes,
+			config: source.config,
+			secrets,
+			state: changed ? {} : source.state
+		};
+	},
+	view(source) {
+		return {
+			appId: source.identity,
+			manageSubscriptions: source.config.manageSubscriptions === true,
+			verificationTokenConfigured: true,
+			encryptKeyConfigured: true,
+			verifiedAt: typeof source.state.verifiedAt == "number" ? new Date(source.state.verifiedAt).toISOString() : null
+		};
+	},
+	ready: (source) => typeof source.state.verifiedAt == "number",
+	async receive(source, bytes, headers, now) {
+		const received = await receiveFeishuEvent(bytes, headers, {
+			appId: source.identity,
+			verificationToken: source.secrets.verificationToken,
+			encryptKey: source.secrets.encryptKey
+		}, now);
+		if ("challenge" in received) return {
+			response: Response.json(received),
+			state: {
+				...source.state,
+				verifiedAt: now
+			}
+		};
+		const event = received.event;
+		return { event: {
+			id: event.id,
+			type: event.type,
+			payload: {
+				event: event.type,
+				deliveryId: event.id,
+				appId: event.appId,
+				tenantKey: event.tenantKey,
+				occurredAt: event.occurredAt,
+				body: event.body
+			}
+		} };
+	},
+	matches(config, event) {
+		return matchesFeishuEvent(config, {
+			type: event.type,
+			body: event.payload.body
+		});
+	},
+	resources: {
+		triggerId: "feishu_app_bot.on_event",
+		requests(source, provider, config) {
+			const subscriptions = feishuSubscriptions(config, provider);
+			if (subscriptions.length > 0 && source.config.manageSubscriptions !== true) throw new PermanentIntegrationError("This source does not manage resource subscriptions.");
+			return subscriptions;
+		}
+	}
+};
+//#endregion
+//#region src/event-source/common/index.ts
+var definitions = [feishuApplication];
+function eventSourceDefinition(kind) {
+	const definition = definitions.find((item) => item.kind == kind);
+	if (definition == null) throw new Error(`Unknown event source kind: ${kind}`);
+	return definition;
+}
+//#endregion
+export { SourceIdentityError, eventSourceDefinition, feishuApplication };

package/dist/common/feishu-events.d.ts

@@ -16,4 +16,4 @@ export declare function receiveFeishuEvent(rawBody: Uint8Array, headers: Headers
 } | {
     readonly event: FeishuEvent;
 }>;
-export declare function matchesFeishuEvent(config: Readonly<Record<string, JsonValue>>, event: FeishuEvent): boolean;
+export declare function matchesFeishuEvent(config: Readonly<Record<string, JsonValue>>, event: Pick<FeishuEvent, 'type' | 'body'>): boolean;

package/dist/common/flow-semantics.js

@@ -12052,8 +12052,8 @@ function checkSource(source, graph, document, targetInput, path, diagnostics) {
 	switch (source.kind) {
 		case "binding":
 			if (document.bindings[source.bindingId] == null) diagnostics.push(graphDiagnostic("graph.binding-missing", `Binding "${source.bindingId}" does not exist.`, path, { bindingId: source.bindingId }));
-			else if (document.bindings[source.bindingId].kind != "variable") diagnostics.push(graphDiagnostic("graph.binding-invalid", `Binding "${source.bindingId}" must be an environment variable.`, path, { bindingId: source.bindingId }));
-			else if (targetInput != null && !variableInputCompatible(targetInput.jsonSchema)) diagnostics.push(graphDiagnostic("graph.variable-incompatible", `Environment variable binding "${source.bindingId}" is not compatible with this input.`, path, { bindingId: source.bindingId }));
+			else if (document.bindings[source.bindingId].kind != "variable") diagnostics.push(graphDiagnostic("graph.binding-invalid", `Binding "${source.bindingId}" must be a variable.`, path, { bindingId: source.bindingId }));
+			else if (targetInput != null && !variableInputCompatible(targetInput.jsonSchema)) diagnostics.push(graphDiagnostic("graph.variable-incompatible", `Variable binding "${source.bindingId}" is not compatible with this input.`, path, { bindingId: source.bindingId }));
 			return;
 		case "node": {
 			const upstream = graph.nodes[source.nodeId];
@@ -12302,7 +12302,7 @@ function validateGraph(graph, document, path, diagnostics) {
 			}));
 			if (mapping.kind == "sources") {
 				const variableSources = mapping.sources.filter((source) => source.kind == "binding" && document.bindings[source.bindingId]?.kind == "variable");
-				if (variableSources.length > 0 && (variableSources.length != 1 || mapping.sources.length != 1)) diagnostics.push(graphDiagnostic("graph.variable-source-mixed", "An environment variable must be the only source for an input.", mappingPath));
+				if (variableSources.length > 0 && (variableSources.length != 1 || mapping.sources.length != 1)) diagnostics.push(graphDiagnostic("graph.variable-source-mixed", "A variable must be the only source for an input.", mappingPath));
 				for (const source of mapping.sources) checkSource(source, graph, document, inputPorts[handle], mappingPath, diagnostics);
 			}
 		}
@@ -12345,7 +12345,7 @@ function validateGraph(graph, document, path, diagnostics) {
 }
 function validateFlowGraph(revision) {
 	const diagnostics = [];
-	for (const [bindingId, binding] of Object.entries(revision.document.bindings)) if (binding.kind == "variable" && !validVariableName(binding.target)) diagnostics.push(graphDiagnostic("binding.variable-invalid", `Environment variable binding "${bindingId}" has an invalid target.`, `/document/bindings/${bindingId}/target`, { bindingId }));
+	for (const [bindingId, binding] of Object.entries(revision.document.bindings)) if (binding.kind == "variable" && !validVariableName(binding.target)) diagnostics.push(graphDiagnostic("binding.variable-invalid", `Variable binding "${bindingId}" has an invalid target.`, `/document/bindings/${bindingId}/target`, { bindingId }));
 	validateGraph(revision.document.graph, revision.document, "/document/graph", diagnostics);
 	return diagnostics;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oomol-lab/open-flow",
-  "version": "0.1.0-beta.57",
+  "version": "0.1.0-beta.59",
   "description": "TypeScript contracts and Browser runtime for Open Flow.",
   "license": "Apache-2.0",
   "repository": {
@@ -53,6 +53,10 @@
       "types": "./dist/common/cron-trigger.d.ts",
       "import": "./dist/common/cron-trigger.js"
     },
+    "./event-source": {
+      "types": "./dist/common/event-source.d.ts",
+      "import": "./dist/common/event-source.js"
+    },
     "./integration-trigger": {
       "types": "./dist/common/integration-trigger.d.ts",
       "import": "./dist/common/integration-trigger.js"