@squadbase/vite-server 0.1.17 → 0.1.19-dev.a00d9c3

package/dist/connectors/x.js

@@ -0,0 +1,951 @@
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
+};
+
+// ../connectors/src/parameter-definition.ts
+var ParameterDefinition;
+var init_parameter_definition = __esm({
+  "../connectors/src/parameter-definition.ts"() {
+    "use strict";
+    ParameterDefinition = class {
+      slug;
+      name;
+      description;
+      envVarBaseKey;
+      type;
+      secret;
+      required;
+      isDeprecated;
+      constructor(config) {
+        this.slug = config.slug;
+        this.name = config.name;
+        this.description = config.description;
+        this.envVarBaseKey = config.envVarBaseKey;
+        this.type = config.type;
+        this.secret = config.secret;
+        this.required = config.required;
+        this.isDeprecated = config.isDeprecated ?? false;
+      }
+      /**
+       * Get the parameter value from a ConnectorConnectionObject.
+       */
+      getValue(connection2) {
+        const param = connection2.parameters.find(
+          (p) => p.parameterSlug === this.slug
+        );
+        if (!param || param.value == null) {
+          throw new Error(
+            `Parameter "${this.slug}" not found or has no value in connection "${connection2.id}"`
+          );
+        }
+        return param.value;
+      }
+      /**
+       * Try to get the parameter value. Returns undefined if not found (for optional params).
+       */
+      tryGetValue(connection2) {
+        const param = connection2.parameters.find(
+          (p) => p.parameterSlug === this.slug
+        );
+        if (!param || param.value == null) return void 0;
+        return param.value;
+      }
+    };
+  }
+});
+
+// ../connectors/src/connectors/x/parameters.ts
+init_parameter_definition();
+var parameters = {
+  bearerToken: new ParameterDefinition({
+    slug: "bearer-token",
+    name: "X API Bearer Token",
+    description: "The X API Bearer Token for app-only authentication. Create it in the X Developer Console for your app.",
+    envVarBaseKey: "X_BEARER_TOKEN",
+    type: "text",
+    secret: true,
+    required: true
+  })
+};
+
+// ../connectors/src/connectors/x/sdk/index.ts
+var BASE_URL = "https://api.x.com";
+function createClient(params) {
+  const bearerToken = params[parameters.bearerToken.slug];
+  if (!bearerToken) {
+    throw new Error(
+      `x: missing required parameter: ${parameters.bearerToken.slug}`
+    );
+  }
+  function buildUrl(path2, query) {
+    if (/^https?:\/\//i.test(path2)) {
+      throw new Error("x: absolute URLs are not allowed");
+    }
+    const url = new URL(`${BASE_URL}${path2.startsWith("/") ? "" : "/"}${path2}`);
+    if (query) {
+      for (const [k, v] of Object.entries(query)) {
+        if (v !== void 0) url.searchParams.set(k, String(v));
+      }
+    }
+    return url.toString();
+  }
+  async function request(path2, init) {
+    const { query, headers: initHeaders, ...rest } = init ?? {};
+    const headers = new Headers(initHeaders);
+    headers.set("Authorization", `Bearer ${bearerToken}`);
+    headers.set("Accept", "application/json");
+    if (rest.body && !headers.has("Content-Type")) {
+      headers.set("Content-Type", "application/json");
+    }
+    return fetch(buildUrl(path2, query), { ...rest, headers });
+  }
+  async function json(path2, query) {
+    const res = await request(path2, { method: "GET", query });
+    const text = await res.text();
+    const data = text ? JSON.parse(text) : {};
+    if (!res.ok) {
+      throw new Error(`x: ${res.status} ${res.statusText}: ${text}`);
+    }
+    return data;
+  }
+  return {
+    request,
+    getUserByUsername(username, options) {
+      return json(
+        `/2/users/by/username/${encodeURIComponent(username)}`,
+        options?.query
+      );
+    },
+    getUser(id, options) {
+      return json(`/2/users/${encodeURIComponent(id)}`, options?.query);
+    },
+    getTweet(id, options) {
+      return json(`/2/tweets/${encodeURIComponent(id)}`, options?.query);
+    },
+    getUserTweets(userId, options) {
+      return json(
+        `/2/users/${encodeURIComponent(userId)}/tweets`,
+        options?.query
+      );
+    },
+    searchRecent(query, options) {
+      return json("/2/tweets/search/recent", {
+        query,
+        ...options?.query ?? {}
+      });
+    },
+    searchAll(query, options) {
+      return json("/2/tweets/search/all", {
+        query,
+        ...options?.query ?? {}
+      });
+    }
+  };
+}
+
+// ../connectors/src/connector-onboarding.ts
+var ConnectorOnboarding = class {
+  /** Phase 1: Connection setup instructions (optional — some connectors don't need this) */
+  connectionSetupInstructions;
+  /** Phase 2: Data overview instructions */
+  dataOverviewInstructions;
+  constructor(config) {
+    this.connectionSetupInstructions = config.connectionSetupInstructions;
+    this.dataOverviewInstructions = config.dataOverviewInstructions;
+  }
+  getConnectionSetupPrompt(language) {
+    return this.connectionSetupInstructions?.[language] ?? null;
+  }
+  getDataOverviewInstructions(language) {
+    return this.dataOverviewInstructions[language];
+  }
+};
+
+// ../connectors/src/connector-tool.ts
+var ConnectorTool = class {
+  name;
+  description;
+  inputSchema;
+  outputSchema;
+  _execute;
+  constructor(config) {
+    this.name = config.name;
+    this.description = config.description;
+    this.inputSchema = config.inputSchema;
+    this.outputSchema = config.outputSchema;
+    this._execute = config.execute;
+  }
+  createTool(connections, config) {
+    return {
+      description: this.description,
+      inputSchema: this.inputSchema,
+      outputSchema: this.outputSchema,
+      execute: (input) => this._execute(input, connections, config)
+    };
+  }
+};
+
+// ../connectors/src/connector-plugin.ts
+var ConnectorPlugin = class _ConnectorPlugin {
+  slug;
+  authType;
+  name;
+  description;
+  iconUrl;
+  parameters;
+  releaseFlag;
+  proxyPolicy;
+  experimentalAttributes;
+  categories;
+  onboarding;
+  systemPrompt;
+  tools;
+  query;
+  checkConnection;
+  /**
+   * SQPD-1212: Logic-based, rule-driven connection setup. Connectors that
+   * implement this expose a step-by-step exploration flow (database/schema/
+   * table/etc. discovery) that the dashboard backend drives via the
+   * `/connections/:connectionId/setup` endpoint. Implement by delegating to
+   * `runSetupFlow` from `setup-flow.ts`.
+   */
+  setup;
+  /**
+   * 統一 introspection。SQL DB の `information_schema` / `SHOW` / `DESCRIBE` や SaaS の
+   * メタデータ API といった取得経路の差を吸収し、tables / columns / PK / FK を共通型
+   * {@link IntrospectedSchema} へ正規化して返す。取得経路は {@link IntrospectContext} で
+   * 抽象化され、SQL DB は `ctx.query`、SaaS は `ctx.proxyFetch` + `ctx.params` を使う。
+   * `ctx.profile === true` のときは L2 プロファイル（行数・NULL 率等）も best-effort で埋める。
+   * coding-agent の `DataContextIndex` がデータ地図を構築する際に使う。
+   */
+  introspect;
+  /**
+   * Opt-out of the default "verify before save" behavior on connection
+   * creation. The backend invokes `checkConnection` synchronously while
+   * creating the connection and aborts (no row inserted) if it fails — this
+   * flag disables that for connectors where the check cannot succeed pre-save:
+   *
+   *   - `squadbase-db` populates `connection-url` only after Neon provisioning
+   *   - OAuth connectors require an OAuth-aware proxyFetch keyed by the
+   *     connectionId, which doesn't exist until the row is saved
+   *
+   * Exceptions are the explicit position; new credential-input connectors get
+   * the default verify-on-create behavior without opt-in.
+   */
+  skipConnectionCheckOnCreate;
+  /**
+   * 決定論的な「立ち上げ survey」レシピ（ルールベース prewarm 基盤）。実装した connector は、LLM を使わずに
+   * read-only で自分を survey する probe 列（テーブル/列メタデータ → 小サンプル）を宣言する。coding-agent の
+   * recon driver がこれを読み、connector ツールの `execute` を直接呼んで結果を seed にする。未実装の connector は
+   * driver 側で safely skip される（その connection は listConnections のみ seed）。標準 `information_schema` を
+   * 持つ SQL connector は `makeStandardSqlSurveyProbes` を使える。**probe は必ず read-only**。
+   */
+  surveyProbes;
+  constructor(config) {
+    this.slug = config.slug;
+    this.authType = config.authType;
+    this.name = config.name;
+    this.description = config.description;
+    this.iconUrl = config.iconUrl;
+    this.parameters = config.parameters;
+    this.releaseFlag = config.releaseFlag;
+    this.proxyPolicy = config.proxyPolicy;
+    this.experimentalAttributes = config.experimentalAttributes;
+    this.categories = config.categories ?? [];
+    this.onboarding = config.onboarding;
+    this.systemPrompt = config.systemPrompt;
+    this.tools = config.tools;
+    this.query = config.query;
+    this.checkConnection = config.checkConnection;
+    this.setup = config.setup;
+    this.introspect = config.introspect;
+    this.skipConnectionCheckOnCreate = config.skipConnectionCheckOnCreate;
+    this.surveyProbes = config.surveyProbes;
+  }
+  get connectorKey() {
+    return _ConnectorPlugin.deriveKey(this.slug, this.authType);
+  }
+  /**
+   * Create tools for connections that belong to this connector.
+   * Filters connections by connectorKey internally.
+   * Returns tools keyed as `connector_${connectorKey}_${toolName}`.
+   */
+  createTools(connections, config, opts) {
+    const myConnections = connections.filter(
+      (c) => _ConnectorPlugin.deriveKey(c.connector.slug, c.connector.authType) === this.connectorKey
+    );
+    const result = {};
+    for (const t of Object.values(this.tools)) {
+      const tool = t.createTool(myConnections, config);
+      const originalToModelOutput = tool.toModelOutput;
+      result[`connector_${this.connectorKey}_${t.name}`] = {
+        ...tool,
+        toModelOutput: async (options) => {
+          if (!originalToModelOutput) {
+            return opts.truncateOutput(options.output);
+          }
+          const modelOutput = await originalToModelOutput(options);
+          if (modelOutput.type === "text" || modelOutput.type === "json") {
+            return opts.truncateOutput(modelOutput.value);
+          }
+          return modelOutput;
+        }
+      };
+    }
+    return result;
+  }
+  static deriveKey(slug, authType) {
+    if (authType) return `${slug}-${authType}`;
+    const LEGACY_NULL_AUTH_TYPE_MAP = {
+      // user-password
+      postgresql: "user-password",
+      mysql: "user-password",
+      clickhouse: "user-password",
+      kintone: "user-password",
+      "squadbase-db": "user-password",
+      // service-account
+      snowflake: "service-account",
+      bigquery: "service-account",
+      "google-analytics": "service-account",
+      "google-calendar": "service-account",
+      "aws-athena": "service-account",
+      redshift: "service-account",
+      // api-key
+      databricks: "api-key",
+      dbt: "api-key",
+      airtable: "api-key",
+      openai: "api-key",
+      gemini: "api-key",
+      anthropic: "api-key",
+      "wix-store": "api-key"
+    };
+    const fallbackAuthType = LEGACY_NULL_AUTH_TYPE_MAP[slug];
+    if (fallbackAuthType) return `${slug}-${fallbackAuthType}`;
+    return slug;
+  }
+};
+
+// ../connectors/src/setup-flow.ts
+async function runSetupFlow(flow, params, ctx, config) {
+  const runtime = {
+    params,
+    language: ctx.language,
+    config
+  };
+  let state = flow.initialState();
+  let answerIdx = 0;
+  const pendingParameterUpdates = [];
+  for (const step of flow.steps) {
+    const ans = ctx.answers[answerIdx];
+    if (ans && ans.questionSlug === step.slug) {
+      state = step.applyAnswer(state, ans.answer);
+      if (step.toParameterUpdates) {
+        pendingParameterUpdates.push(...step.toParameterUpdates(state));
+      }
+      answerIdx += 1;
+      continue;
+    }
+    const resolvedAllowFreeText = step.allowFreeText !== void 0 ? step.allowFreeText : true;
+    if (step.type === "text") {
+      if (step.fetchOptions) {
+        const options2 = await step.fetchOptions(state, runtime);
+        if (options2.length === 0) {
+          continue;
+        }
+      }
+      return {
+        type: "nextQuestion",
+        questionSlug: step.slug,
+        question: step.question[ctx.language],
+        questionType: "text",
+        allowFreeText: resolvedAllowFreeText,
+        ...pendingParameterUpdates.length > 0 && {
+          parameterUpdates: pendingParameterUpdates
+        }
+      };
+    }
+    const options = step.fetchOptions ? await step.fetchOptions(state, runtime) : [];
+    if (options.length === 0) {
+      continue;
+    }
+    return {
+      type: "nextQuestion",
+      questionSlug: step.slug,
+      question: step.question[ctx.language],
+      questionType: step.type,
+      options,
+      allowFreeText: resolvedAllowFreeText,
+      ...pendingParameterUpdates.length > 0 && {
+        parameterUpdates: pendingParameterUpdates
+      }
+    };
+  }
+  const dataInvestigationResult = await flow.finalize(state, runtime);
+  return {
+    type: "fulfilled",
+    dataInvestigationResult,
+    ...pendingParameterUpdates.length > 0 && {
+      parameterUpdates: pendingParameterUpdates
+    }
+  };
+}
+
+// ../connectors/src/auth-types.ts
+var AUTH_TYPES = {
+  OAUTH: "oauth",
+  API_KEY: "api-key",
+  JWT: "jwt",
+  SERVICE_ACCOUNT: "service-account",
+  PAT: "pat",
+  USER_PASSWORD: "user-password"
+};
+
+// ../connectors/src/connectors/x/tools/request.ts
+import { z } from "zod";
+var BASE_URL2 = "https://api.x.com";
+var REQUEST_TIMEOUT_MS = 6e4;
+function readRateLimit(headers) {
+  const limit = headers.get("x-rate-limit-limit");
+  const remaining = headers.get("x-rate-limit-remaining");
+  const reset = headers.get("x-rate-limit-reset");
+  return {
+    limit: limit ? Number(limit) : void 0,
+    remaining: remaining ? Number(remaining) : void 0,
+    reset: reset ? Number(reset) : void 0
+  };
+}
+var inputSchema = z.object({
+  toolUseIntent: z.string().optional().describe(
+    "Brief description of what you intend to accomplish with this tool call"
+  ),
+  connectionId: z.string().describe("ID of the X connection to use"),
+  method: z.enum(["GET", "POST", "PUT", "DELETE"]).describe(
+    "HTTP method. Use GET for dashboard data reads. Use POST/PUT/DELETE only when the user explicitly asks for mutations supported by their X API access level."
+  ),
+  path: z.string().describe(
+    "API path appended to https://api.x.com. Use '/2/...' paths such as '/2/users/by/username/xdevelopers', '/2/users/{id}/tweets', or '/2/tweets/search/recent'. Absolute URLs are not allowed."
+  ),
+  queryParams: z.record(z.string(), z.string()).optional().describe(
+    "Query parameters to append to the request URL. Examples: tweet.fields=created_at,public_metrics, user.fields=created_at,public_metrics, max_results=10, query=from:xdevelopers. Keep max_results small for dashboard exploration."
+  ),
+  body: z.record(z.string(), z.unknown()).optional().describe("JSON request body for POST/PUT requests.")
+});
+var outputSchema = z.discriminatedUnion("success", [
+  z.object({
+    success: z.literal(true),
+    status: z.number(),
+    rateLimit: z.object({
+      limit: z.number().optional(),
+      remaining: z.number().optional(),
+      reset: z.number().optional()
+    }),
+    data: z.unknown()
+  }),
+  z.object({
+    success: z.literal(false),
+    status: z.number().optional(),
+    rateLimit: z.object({
+      limit: z.number().optional(),
+      remaining: z.number().optional(),
+      reset: z.number().optional()
+    }).optional(),
+    error: z.string()
+  })
+]);
+var requestTool = new ConnectorTool({
+  name: "request",
+  description: `Send authenticated requests to the X API (https://api.x.com).
+Use this tool for X API v2 reads such as looking up users, fetching posts, retrieving timelines, and performing recent search. Authentication is handled automatically with the connection's Bearer Token; never include Authorization headers yourself.
+
+X rate limits are endpoint-specific and commonly reset on fixed windows. This tool returns x-rate-limit-limit, x-rate-limit-remaining, and x-rate-limit-reset when X sends them. Before making repeated calls or adding pagination, inspect these values and keep dashboard requests small. Do not use this tool for frequent polling; if a request returns 429, wait until the reset timestamp instead of retrying immediately.`,
+  inputSchema,
+  outputSchema,
+  async execute({ connectionId, method, path: path2, queryParams, body }, connections) {
+    const connection2 = connections.find((c) => c.id === connectionId);
+    if (!connection2) {
+      return {
+        success: false,
+        error: `Connection ${connectionId} not found`
+      };
+    }
+    console.log(`[connector-request] x/${connection2.name}: ${method} ${path2}`);
+    try {
+      if (/^https?:\/\//i.test(path2)) {
+        return {
+          success: false,
+          error: "Absolute URLs are not allowed. Pass a path such as /2/users/me."
+        };
+      }
+      const bearerToken = parameters.bearerToken.getValue(connection2);
+      const url = new URL(
+        `${BASE_URL2}${path2.startsWith("/") ? "" : "/"}${path2}`
+      );
+      if (queryParams) {
+        for (const [k, v] of Object.entries(queryParams)) {
+          url.searchParams.set(k, v);
+        }
+      }
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+      try {
+        const response = await fetch(url.toString(), {
+          method,
+          headers: {
+            Authorization: `Bearer ${bearerToken}`,
+            Accept: "application/json",
+            ...body ? { "Content-Type": "application/json" } : {}
+          },
+          body: body ? JSON.stringify(body) : void 0,
+          signal: controller.signal
+        });
+        const rateLimit = readRateLimit(response.headers);
+        const text = await response.text();
+        let data = text;
+        if (text.length > 0) {
+          try {
+            data = JSON.parse(text);
+          } catch {
+            data = text;
+          }
+        }
+        if (!response.ok) {
+          const error = typeof data === "object" && data != null ? JSON.stringify(data) : String(data || response.statusText);
+          return {
+            success: false,
+            status: response.status,
+            rateLimit,
+            error
+          };
+        }
+        return {
+          success: true,
+          status: response.status,
+          rateLimit,
+          data
+        };
+      } finally {
+        clearTimeout(timeout);
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      return { success: false, error: msg };
+    }
+  }
+});
+
+// ../connectors/src/connectors/x/setup.ts
+var requestToolName = `x-api-key_${requestTool.name}`;
+var xOnboarding = new ConnectorOnboarding({
+  connectionSetupInstructions: {
+    en: `Follow these steps to set up the X connection.
+
+1. Call \`${requestToolName}\` to verify the Bearer Token:
+   - \`method\`: \`"GET"\`
+   - \`path\`: \`"/2/users/by/username/xdevelopers"\`
+2. If an error is returned, ask the user to verify their Bearer Token (it must be a valid App-only Bearer Token with at least Basic access)
+
+#### Constraints
+- **Do NOT read post or user data beyond the single verification call above**
+- Write only 1 sentence between tool calls, then immediately call the next tool. Skip unnecessary explanations and proceed efficiently`,
+    ja: `\u4EE5\u4E0B\u306E\u624B\u9806\u3067X\u30B3\u30CD\u30AF\u30B7\u30E7\u30F3\u306E\u30BB\u30C3\u30C8\u30A2\u30C3\u30D7\u3092\u884C\u3063\u3066\u304F\u3060\u3055\u3044\u3002
+
+1. \`${requestToolName}\` \u3092\u547C\u3073\u51FA\u3057\u3066 Bearer Token \u3092\u691C\u8A3C\u3059\u308B:
+   - \`method\`: \`"GET"\`
+   - \`path\`: \`"/2/users/by/username/xdevelopers"\`
+2. \u30A8\u30E9\u30FC\u304C\u8FD4\u3055\u308C\u305F\u5834\u5408\u3001\u30E6\u30FC\u30B6\u30FC\u306B Bearer Token \u306E\u78BA\u8A8D\u3092\u4F9D\u983C\u3059\u308B\uFF08Basic \u30A2\u30AF\u30BB\u30B9\u4EE5\u4E0A\u306E\u6A29\u9650\u3092\u6301\u3064\u6709\u52B9\u306A App-only Bearer Token \u304C\u8A2D\u5B9A\u3055\u308C\u3066\u3044\u308B\u304B\u78BA\u8A8D\uFF09
+
+#### \u5236\u7D04
+- **\u4E0A\u8A18\u306E\u691C\u8A3C\u547C\u3073\u51FA\u3057 1 \u56DE\u3092\u8D85\u3048\u3066\u6295\u7A3F\u3084\u30E6\u30FC\u30B6\u30FC\u30C7\u30FC\u30BF\u3092\u8AAD\u307F\u53D6\u3089\u306A\u3044\u3053\u3068**
+- \u30C4\u30FC\u30EB\u9593\u306F 1 \u6587\u3060\u3051\u66F8\u3044\u3066\u5373\u6B21\u306E\u30C4\u30FC\u30EB\u547C\u3073\u51FA\u3057\u3002\u4E0D\u8981\u306A\u8AAC\u660E\u306F\u7701\u7565\u3057\u3001\u52B9\u7387\u7684\u306B\u9032\u3081\u308B`
+  },
+  dataOverviewInstructions: {
+    en: `1. Use connector_x-api-key_request with GET /2/users/by/username/{username} to inspect target accounts
+2. Use GET /2/users/{id}/tweets with a small max_results value to sample recent posts
+3. Use GET /2/tweets/search/recent only when keyword search is required
+4. Always check rateLimit.remaining and rateLimit.reset in tool results before issuing additional calls`,
+    ja: `1. connector_x-api-key_request \u3067 GET /2/users/by/username/{username} \u3092\u547C\u3073\u51FA\u3057\u3001\u5BFE\u8C61\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u78BA\u8A8D\u3057\u307E\u3059
+2. GET /2/users/{id}/tweets \u3092\u5C0F\u3055\u306A max_results \u3067\u547C\u3073\u51FA\u3057\u3001\u6700\u8FD1\u306E\u6295\u7A3F\u3092\u30B5\u30F3\u30D7\u30EA\u30F3\u30B0\u3057\u307E\u3059
+3. \u30AD\u30FC\u30EF\u30FC\u30C9\u691C\u7D22\u304C\u5FC5\u8981\u306A\u5834\u5408\u306E\u307F GET /2/tweets/search/recent \u3092\u4F7F\u7528\u3057\u307E\u3059
+4. \u8FFD\u52A0\u306E\u547C\u3073\u51FA\u3057\u524D\u306B\u3001\u30C4\u30FC\u30EB\u7D50\u679C\u306E rateLimit.remaining \u3068 rateLimit.reset \u3092\u5FC5\u305A\u78BA\u8A8D\u3057\u307E\u3059`
+  }
+});
+
+// ../connectors/src/connectors/x/setup-flow.ts
+var xSetupFlow = {
+  initialState: () => ({}),
+  steps: [],
+  async finalize(_state, rt) {
+    const sections = rt.language === "ja" ? [
+      "## X",
+      "",
+      "- \u63A5\u7D9A\u306F Bearer Token \u3067\u8A8D\u8A3C\u3055\u308C\u307E\u3059\u3002",
+      "- \u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9\u5B9F\u88C5\u3067\u306F\u3001\u540C\u3058\u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8\u3078\u306E\u77ED\u5468\u671F\u30DD\u30FC\u30EA\u30F3\u30B0\u3084\u5927\u91CF\u30DA\u30FC\u30B8\u30CD\u30FC\u30B7\u30E7\u30F3\u3092\u907F\u3051\u3066\u304F\u3060\u3055\u3044\u3002",
+      "- X API \u306E rate limit \u306F\u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8\u5358\u4F4D\u3067\u7BA1\u7406\u3055\u308C\u307E\u3059\u3002\u30EC\u30B9\u30DD\u30F3\u30B9\u30D8\u30C3\u30C0\u30FC\u306E `x-rate-limit-remaining` \u3068 `x-rate-limit-reset` \u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+      "- 429 \u304C\u8FD4\u3063\u305F\u5834\u5408\u306F\u3001reset \u6642\u523B\u307E\u3067\u518D\u8A66\u884C\u3092\u6B62\u3081\u3066\u304F\u3060\u3055\u3044\u3002"
+    ] : [
+      "## X",
+      "",
+      "- The connection authenticates with a Bearer Token.",
+      "- When building dashboards, avoid frequent polling and large pagination against the same endpoint.",
+      "- X API rate limits are endpoint-specific. Check the `x-rate-limit-remaining` and `x-rate-limit-reset` response headers.",
+      "- If a request returns 429, stop retrying until the reset time."
+    ];
+    return sections.join("\n");
+  }
+};
+
+// ../connectors/src/connectors/x/index.ts
+var tools = { request: requestTool };
+var xConnector = new ConnectorPlugin({
+  slug: "x",
+  authType: AUTH_TYPES.API_KEY,
+  name: "X",
+  description: "Connect to X API v2 for posts, users, search, timelines, trends, and related social media data using a user-provided Bearer Token.",
+  iconUrl: "https://cdn.simpleicons.org/x/000000",
+  parameters,
+  releaseFlag: { dev1: true, dev2: true, prod: true },
+  categories: ["social_media"],
+  onboarding: xOnboarding,
+  systemPrompt: {
+    en: `### Tools
+
+- \`connector_x-api-key_request\`: Send authenticated requests to X API v2. Use it for reading users, posts, timelines, and recent search. Authentication is handled automatically with the connection's Bearer Token. The tool returns rate limit headers when available; inspect \`rateLimit.remaining\` and \`rateLimit.reset\` before making repeated calls.
+
+### Business Logic
+
+The business logic type for this connector is "typescript". Use the connector SDK in your handler. Do NOT read credentials from environment variables.
+
+SDK methods (client created via \`connection(connectionId)\`):
+- \`client.request(path, init?)\` \u2014 low-level authenticated fetch against \`https://api.x.com\`
+- \`client.getUserByUsername(username, options?)\` \u2014 get an X user by username
+- \`client.getUser(id, options?)\` \u2014 get an X user by ID
+- \`client.getTweet(id, options?)\` \u2014 get a post by ID
+- \`client.getUserTweets(userId, options?)\` \u2014 get recent posts for a user
+- \`client.searchRecent(query, options?)\` \u2014 search recent posts
+- \`client.searchAll(query, options?)\` \u2014 search the full archive when the connected X API access tier supports it
+
+When building dashboards, keep API calls small and cache or reuse responses in your own handler where possible. Avoid short-interval polling, avoid fetching many pages during rendering, and avoid repeated recent-search calls for the same query. If X returns HTTP 429, do not retry immediately; wait until the \`x-rate-limit-reset\` timestamp.
+
+\`\`\`ts
+import type { Context } from "hono";
+import { connection } from "@squadbase/vite-server/connectors/x";
+
+const x = connection("<connectionId>");
+
+export default async function handler(c: Context) {
+  const { username = "xdevelopers", maxResults = 10 } = await c.req.json<{
+    username?: string;
+    maxResults?: number;
+  }>();
+
+  const user = await x.getUserByUsername(username, {
+    query: { "user.fields": "created_at,description,public_metrics" },
+  });
+  const userId = (user.data as { id: string }).id;
+  const tweets = await x.getUserTweets(userId, {
+    query: {
+      max_results: Math.min(maxResults, 25),
+      "tweet.fields": "created_at,public_metrics",
+    },
+  });
+
+  return c.json({ user: user.data, tweets: tweets.data ?? [] });
+}
+\`\`\`
+
+### X API Reference
+
+- Base URL: \`https://api.x.com\`
+- Authentication: Bearer Token (handled automatically)
+- Rate limits: endpoint-specific; response headers may include \`x-rate-limit-limit\`, \`x-rate-limit-remaining\`, and \`x-rate-limit-reset\`
+
+#### Common Endpoints
+- GET \`/2/users/by/username/{username}\` \u2014 Look up a user by username
+- GET \`/2/users/{id}\` \u2014 Look up a user by ID
+- GET \`/2/users/{id}/tweets\` \u2014 Get a user's recent posts
+- GET \`/2/tweets/{id}\` \u2014 Look up a post by ID
+- GET \`/2/tweets/search/recent\` \u2014 Search recent posts
+- GET \`/2/tweets/search/all\` \u2014 Search the full archive (requires X API access that includes full-archive search)
+- GET \`/2/tweets/counts/recent\` \u2014 Count recent posts matching a query
+
+#### Tips
+- Request only fields you need with \`tweet.fields\`, \`user.fields\`, and \`expansions\`
+- Use small \`max_results\` values while exploring; dashboards rarely need hundreds of posts per render
+- Prefer counts endpoints for trend charts when the user needs aggregate volume instead of individual posts`,
+    ja: `### \u30C4\u30FC\u30EB
+
+- \`connector_x-api-key_request\`: X API v2 \u306B\u8A8D\u8A3C\u6E08\u307F\u30EA\u30AF\u30A8\u30B9\u30C8\u3092\u9001\u4FE1\u3057\u307E\u3059\u3002\u30E6\u30FC\u30B6\u30FC\u3001\u6295\u7A3F\u3001\u30BF\u30A4\u30E0\u30E9\u30A4\u30F3\u3001recent search \u306E\u8AAD\u307F\u53D6\u308A\u306B\u4F7F\u7528\u3057\u307E\u3059\u3002\u8A8D\u8A3C\u306F\u63A5\u7D9A\u306E Bearer Token \u3067\u81EA\u52D5\u7684\u306B\u884C\u308F\u308C\u307E\u3059\u3002\u5229\u7528\u53EF\u80FD\u306A\u5834\u5408\u306F rate limit \u30D8\u30C3\u30C0\u30FC\u3082\u8FD4\u3059\u305F\u3081\u3001\u7E70\u308A\u8FD4\u3057\u547C\u3073\u51FA\u3059\u524D\u306B \`rateLimit.remaining\` \u3068 \`rateLimit.reset\` \u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002
+
+### Business Logic
+
+\u3053\u306E\u30B3\u30CD\u30AF\u30BF\u306E\u30D3\u30B8\u30CD\u30B9\u30ED\u30B8\u30C3\u30AF\u30BF\u30A4\u30D7\u306F "typescript" \u3067\u3059\u3002\u30CF\u30F3\u30C9\u30E9\u5185\u3067\u306F\u30B3\u30CD\u30AF\u30BFSDK\u3092\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u74B0\u5883\u5909\u6570\u304B\u3089\u8A8D\u8A3C\u60C5\u5831\u3092\u8AAD\u307F\u53D6\u3089\u306A\u3044\u3067\u304F\u3060\u3055\u3044\u3002
+
+SDK\u30E1\u30BD\u30C3\u30C9 (\`connection(connectionId)\` \u3067\u4F5C\u6210\u3057\u305F\u30AF\u30E9\u30A4\u30A2\u30F3\u30C8):
+- \`client.request(path, init?)\` \u2014 \`https://api.x.com\` \u306B\u5BFE\u3059\u308B\u4F4E\u30EC\u30D9\u30EB\u306E\u8A8D\u8A3C\u4ED8\u304Dfetch
+- \`client.getUserByUsername(username, options?)\` \u2014 username \u3067 X \u30E6\u30FC\u30B6\u30FC\u3092\u53D6\u5F97
+- \`client.getUser(id, options?)\` \u2014 ID \u3067 X \u30E6\u30FC\u30B6\u30FC\u3092\u53D6\u5F97
+- \`client.getTweet(id, options?)\` \u2014 ID \u3067\u6295\u7A3F\u3092\u53D6\u5F97
+- \`client.getUserTweets(userId, options?)\` \u2014 \u30E6\u30FC\u30B6\u30FC\u306E\u6700\u8FD1\u306E\u6295\u7A3F\u3092\u53D6\u5F97
+- \`client.searchRecent(query, options?)\` \u2014 \u6700\u8FD1\u306E\u6295\u7A3F\u3092\u691C\u7D22
+- \`client.searchAll(query, options?)\` \u2014 \u63A5\u7D9A\u4E2D\u306E X API access tier \u304C\u5BFE\u5FDC\u3057\u3066\u3044\u308B\u5834\u5408\u306B full archive \u3092\u691C\u7D22
+
+\u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9\u3092\u4F5C\u308B\u6642\u306F API \u547C\u3073\u51FA\u3057\u3092\u5C0F\u3055\u304F\u3057\u3001\u53EF\u80FD\u3067\u3042\u308C\u3070\u30CF\u30F3\u30C9\u30E9\u5185\u3067\u30EC\u30B9\u30DD\u30F3\u30B9\u3092\u518D\u5229\u7528\u30FB\u30AD\u30E3\u30C3\u30B7\u30E5\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u77ED\u5468\u671F\u30DD\u30FC\u30EA\u30F3\u30B0\u3001\u30EC\u30F3\u30C0\u30EA\u30F3\u30B0\u3054\u3068\u306E\u5927\u91CF\u30DA\u30FC\u30B8\u30CD\u30FC\u30B7\u30E7\u30F3\u3001\u540C\u3058\u30AF\u30A8\u30EA\u3067\u306E recent search \u9023\u6253\u306F\u907F\u3051\u3066\u304F\u3060\u3055\u3044\u3002X \u304C HTTP 429 \u3092\u8FD4\u3057\u305F\u5834\u5408\u306F\u5373\u6642\u30EA\u30C8\u30E9\u30A4\u305B\u305A\u3001\`x-rate-limit-reset\` \u306E\u6642\u523B\u307E\u3067\u5F85\u3063\u3066\u304F\u3060\u3055\u3044\u3002
+
+\`\`\`ts
+import type { Context } from "hono";
+import { connection } from "@squadbase/vite-server/connectors/x";
+
+const x = connection("<connectionId>");
+
+export default async function handler(c: Context) {
+  const { username = "xdevelopers", maxResults = 10 } = await c.req.json<{
+    username?: string;
+    maxResults?: number;
+  }>();
+
+  const user = await x.getUserByUsername(username, {
+    query: { "user.fields": "created_at,description,public_metrics" },
+  });
+  const userId = (user.data as { id: string }).id;
+  const tweets = await x.getUserTweets(userId, {
+    query: {
+      max_results: Math.min(maxResults, 25),
+      "tweet.fields": "created_at,public_metrics",
+    },
+  });
+
+  return c.json({ user: user.data, tweets: tweets.data ?? [] });
+}
+\`\`\`
+
+### X API \u30EA\u30D5\u30A1\u30EC\u30F3\u30B9
+
+- \u30D9\u30FC\u30B9URL: \`https://api.x.com\`
+- \u8A8D\u8A3C: Bearer Token\uFF08\u81EA\u52D5\u8A2D\u5B9A\uFF09
+- Rate limit: \u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8\u5358\u4F4D\u3002\u30EC\u30B9\u30DD\u30F3\u30B9\u30D8\u30C3\u30C0\u30FC\u306B \`x-rate-limit-limit\`, \`x-rate-limit-remaining\`, \`x-rate-limit-reset\` \u304C\u542B\u307E\u308C\u308B\u3053\u3068\u304C\u3042\u308A\u307E\u3059
+
+#### \u4E3B\u8981\u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8
+- GET \`/2/users/by/username/{username}\` \u2014 username \u3067\u30E6\u30FC\u30B6\u30FC\u3092\u53D6\u5F97
+- GET \`/2/users/{id}\` \u2014 ID \u3067\u30E6\u30FC\u30B6\u30FC\u3092\u53D6\u5F97
+- GET \`/2/users/{id}/tweets\` \u2014 \u30E6\u30FC\u30B6\u30FC\u306E\u6700\u8FD1\u306E\u6295\u7A3F\u3092\u53D6\u5F97
+- GET \`/2/tweets/{id}\` \u2014 ID \u3067\u6295\u7A3F\u3092\u53D6\u5F97
+- GET \`/2/tweets/search/recent\` \u2014 \u6700\u8FD1\u306E\u6295\u7A3F\u3092\u691C\u7D22
+- GET \`/2/tweets/search/all\` \u2014 full archive \u3092\u691C\u7D22\uFF08full-archive search \u3092\u542B\u3080 X API access \u304C\u5FC5\u8981\uFF09
+- GET \`/2/tweets/counts/recent\` \u2014 \u30AF\u30A8\u30EA\u306B\u4E00\u81F4\u3059\u308B\u6700\u8FD1\u306E\u6295\u7A3F\u6570\u3092\u96C6\u8A08
+
+#### \u30D2\u30F3\u30C8
+- \`tweet.fields\`, \`user.fields\`, \`expansions\` \u3067\u5FC5\u8981\u306A\u30D5\u30A3\u30FC\u30EB\u30C9\u3060\u3051\u3092\u53D6\u5F97\u3057\u3066\u304F\u3060\u3055\u3044
+- \u63A2\u7D22\u6642\u306E \`max_results\` \u306F\u5C0F\u3055\u304F\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u591A\u304F\u306E\u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9\u3067\u306F1\u56DE\u306E\u63CF\u753B\u306B\u6570\u767E\u4EF6\u306E\u6295\u7A3F\u306F\u4E0D\u8981\u3067\u3059
+- \u500B\u5225\u6295\u7A3F\u3067\u306F\u306A\u304F\u4EF6\u6570\u30C8\u30EC\u30F3\u30C9\u304C\u5FC5\u8981\u306A\u5834\u5408\u306F counts endpoint \u3092\u512A\u5148\u3057\u3066\u304F\u3060\u3055\u3044`
+  },
+  tools,
+  setup: (params, ctx, config) => runSetupFlow(xSetupFlow, params, ctx, config),
+  async checkConnection(params) {
+    const bearerToken = params[parameters.bearerToken.slug];
+    if (!bearerToken) {
+      return {
+        success: false,
+        error: `Missing required parameter: ${parameters.bearerToken.slug}`
+      };
+    }
+    try {
+      const res = await fetch(
+        "https://api.x.com/2/users/by/username/xdevelopers",
+        {
+          method: "GET",
+          headers: {
+            Authorization: `Bearer ${bearerToken}`,
+            Accept: "application/json"
+          }
+        }
+      );
+      if (!res.ok) {
+        const errorText = await res.text().catch(() => res.statusText);
+        return {
+          success: false,
+          error: `X API failed: HTTP ${res.status} ${errorText}`
+        };
+      }
+      return { success: true };
+    } catch (error) {
+      return {
+        success: false,
+        error: error instanceof Error ? error.message : String(error)
+      };
+    }
+  }
+});
+
+// src/connectors/create-connector-sdk.ts
+import { readFileSync } from "fs";
+import path from "path";
+
+// src/connector-client/env.ts
+function resolveEnvVar(entry, key, connectionId) {
+  const envVarName = entry.envVars[key];
+  if (!envVarName) {
+    throw new Error(`Connection "${connectionId}" is missing envVars mapping for key "${key}"`);
+  }
+  const value = process.env[envVarName];
+  if (!value) {
+    throw new Error(`Environment variable "${envVarName}" (for connection "${connectionId}", key "${key}") is not set`);
+  }
+  return value;
+}
+function resolveEnvVarOptional(entry, key) {
+  const envVarName = entry.envVars[key];
+  if (!envVarName) return void 0;
+  return process.env[envVarName] || void 0;
+}
+
+// src/connector-client/proxy-fetch.ts
+import { getContext } from "hono/context-storage";
+import { getCookie } from "hono/cookie";
+var APP_SESSION_COOKIE_NAME = "__Host-squadbase-session";
+var TABLEAU_SESSION_SENTINEL_URL = "squadbase://tableau-session/";
+function normalizeHeaders(input) {
+  const out = {};
+  if (!input) return out;
+  new Headers(input).forEach((value, key) => {
+    out[key] = value;
+  });
+  return out;
+}
+function extractInputUrl(input) {
+  if (typeof input === "string") return input;
+  if (input instanceof URL) return input.href;
+  return input.url;
+}
+function createSandboxProxyFetch(connectionId) {
+  return async (input, init) => {
+    const token = process.env.INTERNAL_SQUADBASE_OAUTH_MACHINE_CREDENTIAL;
+    const sandboxId = process.env.INTERNAL_SQUADBASE_SANDBOX_ID;
+    if (!token || !sandboxId) {
+      throw new Error(
+        "Connection proxy is not configured. Please check your deployment settings."
+      );
+    }
+    const originalUrl = extractInputUrl(input);
+    const baseDomain = process.env["SQUADBASE_PREVIEW_BASE_DOMAIN"] ?? "preview.app.squadbase.dev";
+    if (originalUrl === TABLEAU_SESSION_SENTINEL_URL) {
+      const sessionUrl = `https://${sandboxId}.${baseDomain}/_sqcore/connections/${connectionId}/tableau-session`;
+      return fetch(sessionUrl, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${token}` }
+      });
+    }
+    const originalMethod = init?.method ?? "GET";
+    const originalBody = init?.body ? JSON.parse(init.body) : void 0;
+    const proxyUrl = `https://${sandboxId}.${baseDomain}/_sqcore/connections/${connectionId}/request`;
+    return fetch(proxyUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`
+      },
+      body: JSON.stringify({
+        url: originalUrl,
+        method: originalMethod,
+        headers: normalizeHeaders(init?.headers),
+        body: originalBody
+      })
+    });
+  };
+}
+function createDeployedAppProxyFetch(connectionId) {
+  const projectId = process.env["SQUADBASE_PROJECT_ID"];
+  if (!projectId) {
+    throw new Error(
+      "Connection proxy is not configured. Please check your deployment settings."
+    );
+  }
+  const baseDomain = process.env["SQUADBASE_APP_BASE_DOMAIN"] ?? "squadbase.app";
+  const proxyUrl = `https://${projectId}.${baseDomain}/_sqcore/connections/${connectionId}/request`;
+  const sessionUrl = `https://${projectId}.${baseDomain}/_sqcore/connections/${connectionId}/tableau-session`;
+  return async (input, init) => {
+    const originalUrl = extractInputUrl(input);
+    const c = getContext();
+    const appSession = getCookie(c, APP_SESSION_COOKIE_NAME);
+    if (!appSession) {
+      throw new Error(
+        "No authentication method available for connection proxy."
+      );
+    }
+    if (originalUrl === TABLEAU_SESSION_SENTINEL_URL) {
+      return fetch(sessionUrl, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${appSession}` }
+      });
+    }
+    const originalMethod = init?.method ?? "GET";
+    const originalBody = init?.body ? JSON.parse(init.body) : void 0;
+    return fetch(proxyUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${appSession}`
+      },
+      body: JSON.stringify({
+        url: originalUrl,
+        method: originalMethod,
+        headers: normalizeHeaders(init?.headers),
+        body: originalBody
+      })
+    });
+  };
+}
+function createProxyFetch(connectionId) {
+  if (process.env.INTERNAL_SQUADBASE_SANDBOX_ID) {
+    return createSandboxProxyFetch(connectionId);
+  }
+  return createDeployedAppProxyFetch(connectionId);
+}
+
+// src/connectors/create-connector-sdk.ts
+function loadConnectionsSync() {
+  const filePath = process.env.CONNECTIONS_PATH ?? path.join(process.cwd(), ".squadbase/connections.json");
+  try {
+    const raw = readFileSync(filePath, "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+}
+function createConnectorSdk(plugin, createClient2) {
+  return (connectionId) => {
+    const connections = loadConnectionsSync();
+    const entry = connections[connectionId];
+    if (!entry) {
+      throw new Error(
+        `Connection "${connectionId}" not found in .squadbase/connections.json`
+      );
+    }
+    if (entry.connector.slug !== plugin.slug) {
+      throw new Error(
+        `Connection "${connectionId}" is not a ${plugin.slug} connection (got "${entry.connector.slug}")`
+      );
+    }
+    const params = {};
+    for (const param of Object.values(plugin.parameters)) {
+      if (param.required) {
+        params[param.slug] = resolveEnvVar(entry, param.slug, connectionId);
+      } else {
+        const val = resolveEnvVarOptional(entry, param.slug);
+        if (val !== void 0) params[param.slug] = val;
+      }
+    }
+    return createClient2(params, createProxyFetch(connectionId));
+  };
+}
+
+// src/connectors/entries/x.ts
+var connection = createConnectorSdk(xConnector, createClient);
+export {
+  connection
+};