@synap-core/workspace-templates 0.12.0 → 0.24.0

package/capabilities/postiz.capability.json

@@ -0,0 +1,467 @@
+{
+  "apiVersion": "synap/v1",
+  "kind": "capability",
+  "meta": {
+    "slug": "postiz",
+    "name": "Post to social networks",
+    "description": "Drafts, schedules, or publishes a post through your Postiz account. You approve every send. The social accounts stay in Postiz. Needs a Postiz API key.",
+    "tags": [
+      "capability",
+      "publish_post"
+    ],
+    "isPublic": true,
+    "syncByDefault": true
+  },
+  "spec": {
+    "key": "postiz",
+    "name": "Post to social networks",
+    "description": "List the user's Postiz channels and posts, and draft, schedule or publish posts with media through their Postiz (cloud or self-hosted). Tokens stay in Postiz.",
+    "params": [
+      {
+        "name": "postizApiKey",
+        "label": "Postiz API key",
+        "type": "text",
+        "required": true,
+        "description": "API key from the user's Postiz (Settings → API Keys). Sent as the Authorization header value. Stored server-encrypted in the vault; never persisted in the template."
+      },
+      {
+        "name": "postizBaseUrl",
+        "label": "Postiz API origin",
+        "type": "text",
+        "required": false,
+        "default": "https://api.postiz.com",
+        "description": "Where your Postiz public API lives, without /public/v1. Postiz Cloud: https://api.postiz.com (the default). Self-hosted: your Postiz address followed by /api, e.g. https://postiz.example.com/api, because a self-hosted Postiz serves its public API at /api/public/v1. Not a shared Synap broker. Docs: https://docs.postiz.com/public-api/introduction"
+      }
+    ],
+    "vault": [
+      {
+        "ref": "postizApiKeySecret",
+        "name": "{{name}} Postiz API key",
+        "value": "{{postizApiKey}}",
+        "type": "api_key",
+        "description": "Postiz API key for the postiz connector. The applier remaps this template-local ref to vault://<id>."
+      }
+    ],
+    "tools": [
+      {
+        "name": "postiz",
+        "kind": "api",
+        "description": "Authenticated HTTP access to the user's Postiz public API. baseUrl is {{postizBaseUrl}}. Authorization is the raw API key with an empty prefix — Postiz does not use the Bearer scheme (https://docs.postiz.com/public-api/introduction). credentialRef is remapped to vault://<id> at apply.",
+        "credentialRef": "postizApiKeySecret",
+        "executor": "is-agent",
+        "config": {
+          "baseUrl": "{{postizBaseUrl}}",
+          "auth": {
+            "in": "header",
+            "name": "Authorization",
+            "prefix": ""
+          }
+        }
+      }
+    ],
+    "skills": [
+      {
+        "name": "postiz_draft",
+        "intent": "publish_post",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Creates a Postiz draft (type \"draft\") on one connected channel. Write: POST /public/v1/posts. Does not publish. Body matches https://docs.postiz.com/public-api/posts/create — type, date, shortLink, tags, and posts[{integration.id, value[].content, settings.__type}]. Args: { content: string, integrationId: string, provider: string (settings.__type, e.g. x or linkedin), date?: ISO-8601 (defaults to now; drafts ignore publish time) }. Text only, and only for a channel whose Postiz settings need nothing but the provider (LinkedIn, Facebook, Threads, Bluesky, Mastodon, Telegram…). With media, or on X, Instagram, YouTube, TikTok, Pinterest, Reddit and the other channels whose settings require more, use postiz_schedule_post.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 60,
+        "metadata": {
+          "verbType": "write"
+        },
+        "parameters": {
+          "content": "string",
+          "integrationId": "string",
+          "provider": "string",
+          "date": "string?"
+        },
+        "providerSpec": {
+          "tool": "postiz",
+          "method": "POST",
+          "pathTemplate": "/public/v1/posts",
+          "body": {
+            "type": "draft",
+            "date": "{{date}}",
+            "shortLink": false,
+            "tags": [],
+            "posts": [
+              {
+                "integration": {
+                  "id": "{{integrationId}}"
+                },
+                "value": [
+                  {
+                    "content": "{{content}}",
+                    "image": []
+                  }
+                ],
+                "settings": {
+                  "__type": "{{provider}}"
+                }
+              }
+            ]
+          },
+          "paramMapping": {
+            "content": {
+              "required": true
+            },
+            "integrationId": {
+              "required": true
+            },
+            "provider": {
+              "required": true
+            },
+            "date": {
+              "default": "@now"
+            }
+          },
+          "responseShape": {
+            "collectionPath": "",
+            "collectionAs": "posts",
+            "item": {
+              "postId": "postId",
+              "integration": "integration"
+            }
+          }
+        }
+      },
+      {
+        "name": "postiz_schedule",
+        "intent": "publish_post",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Schedules a Postiz post (type \"schedule\") on one connected channel. Write: POST /public/v1/posts. Body matches https://docs.postiz.com/public-api/posts/create. Args: { content: string, integrationId: string, provider: string (settings.__type), date: ISO-8601 publish time }. Text only, and only for a channel whose Postiz settings need nothing but the provider (LinkedIn, Facebook, Threads, Bluesky, Mastodon, Telegram…). With media, or on X, Instagram, YouTube, TikTok, Pinterest, Reddit and the other channels whose settings require more, use postiz_schedule_post.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 60,
+        "metadata": {
+          "verbType": "write"
+        },
+        "parameters": {
+          "content": "string",
+          "integrationId": "string",
+          "provider": "string",
+          "date": "string"
+        },
+        "inputMap": {
+          "params": {
+            "content": "$.text",
+            "date": "$.when",
+            "integrationId": "$account.id",
+            "provider": "$account.provider"
+          },
+          "accounts": {
+            "verb": "postiz_list_integrations",
+            "id": "id",
+            "label": "name",
+            "provider": "provider"
+          }
+        },
+        "providerSpec": {
+          "tool": "postiz",
+          "method": "POST",
+          "pathTemplate": "/public/v1/posts",
+          "body": {
+            "type": "schedule",
+            "date": "{{date}}",
+            "shortLink": false,
+            "tags": [],
+            "posts": [
+              {
+                "integration": {
+                  "id": "{{integrationId}}"
+                },
+                "value": [
+                  {
+                    "content": "{{content}}",
+                    "image": []
+                  }
+                ],
+                "settings": {
+                  "__type": "{{provider}}"
+                }
+              }
+            ]
+          },
+          "paramMapping": {
+            "content": {
+              "required": true
+            },
+            "integrationId": {
+              "required": true
+            },
+            "provider": {
+              "required": true
+            },
+            "date": {
+              "required": true
+            }
+          },
+          "responseShape": {
+            "collectionPath": "",
+            "collectionAs": "posts",
+            "item": {
+              "postId": "postId",
+              "integration": "integration"
+            }
+          }
+        }
+      },
+      {
+        "name": "postiz_publish",
+        "intent": "publish_post",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Publishes a Postiz post immediately (type \"now\"; the API has no type \"publish\"). Write: POST /public/v1/posts. Body matches https://docs.postiz.com/public-api/posts/create. Args: { content: string, integrationId: string, provider: string (settings.__type), date?: ISO-8601 (required by the API, ignored for type now, defaults to now) }. Text only, and only for a channel whose Postiz settings need nothing but the provider (LinkedIn, Facebook, Threads, Bluesky, Mastodon, Telegram…). With media, or on X, Instagram, YouTube, TikTok, Pinterest, Reddit and the other channels whose settings require more, use postiz_schedule_post.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 60,
+        "metadata": {
+          "verbType": "write"
+        },
+        "parameters": {
+          "content": "string",
+          "integrationId": "string",
+          "provider": "string",
+          "date": "string?"
+        },
+        "inputMap": {
+          "params": {
+            "content": "$.text",
+            "integrationId": "$account.id",
+            "provider": "$account.provider"
+          },
+          "accounts": {
+            "verb": "postiz_list_integrations",
+            "id": "id",
+            "label": "name",
+            "provider": "provider"
+          }
+        },
+        "providerSpec": {
+          "tool": "postiz",
+          "method": "POST",
+          "pathTemplate": "/public/v1/posts",
+          "body": {
+            "type": "now",
+            "date": "{{date}}",
+            "shortLink": false,
+            "tags": [],
+            "posts": [
+              {
+                "integration": {
+                  "id": "{{integrationId}}"
+                },
+                "value": [
+                  {
+                    "content": "{{content}}",
+                    "image": []
+                  }
+                ],
+                "settings": {
+                  "__type": "{{provider}}"
+                }
+              }
+            ]
+          },
+          "paramMapping": {
+            "content": {
+              "required": true
+            },
+            "integrationId": {
+              "required": true
+            },
+            "provider": {
+              "required": true
+            },
+            "date": {
+              "default": "@now"
+            }
+          },
+          "responseShape": {
+            "collectionPath": "",
+            "collectionAs": "posts",
+            "item": {
+              "postId": "postId",
+              "integration": "integration"
+            }
+          }
+        }
+      },
+      {
+        "name": "postiz_list_integrations",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the social channels connected in Postiz: id (the integrationId every post needs), name, provider (the identifier a post's settings use: x, linkedin, instagram, …), profile handle, picture, disabled, and the Postiz customer it belongs to. Read-only. GET /public/v1/integrations. Store id and provider on the matching Synap platform as postiz-integration-id and postiz-provider. Args: none.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "metadata": {
+          "readOnly": true
+        },
+        "parameters": {},
+        "providerSpec": {
+          "tool": "postiz",
+          "method": "GET",
+          "pathTemplate": "/public/v1/integrations",
+          "responseShape": {
+            "collectionPath": "",
+            "collectionAs": "channels",
+            "item": {
+              "id": "id",
+              "name": "name",
+              "provider": "identifier",
+              "profile": "profile",
+              "picture": "picture",
+              "disabled": "disabled",
+              "customerId": "customer.id",
+              "customerName": "customer.name"
+            }
+          }
+        }
+      },
+      {
+        "name": "postiz_list_posts",
+        "intent": "list_records",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Lists the Postiz posts in a date range: id, content, publishDate, state (QUEUE, PUBLISHED, ERROR, DRAFT), releaseURL once live, the platform's error when it failed, and the channel (integrationId, provider, channelName). Read-only. GET /public/v1/posts. Args: { endDate: ISO-8601, startDate?: ISO-8601 (defaults to now), customer?: Postiz customer id }.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 30,
+        "metadata": {
+          "readOnly": true
+        },
+        "parameters": {
+          "startDate": "string?",
+          "endDate": "string",
+          "customer": "string?"
+        },
+        "providerSpec": {
+          "tool": "postiz",
+          "method": "GET",
+          "pathTemplate": "/public/v1/posts",
+          "query": {
+            "startDate": "{{startDate}}",
+            "endDate": "{{endDate}}",
+            "customer": "{{customer}}"
+          },
+          "paramMapping": {
+            "startDate": {
+              "default": "@now"
+            },
+            "endDate": {
+              "required": true
+            }
+          },
+          "responseShape": {
+            "collectionPath": "posts",
+            "collectionAs": "posts",
+            "item": {
+              "id": "id",
+              "content": "content",
+              "publishDate": "publishDate",
+              "state": "state",
+              "releaseURL": "releaseURL",
+              "error": "error",
+              "integrationId": "integration.id",
+              "provider": "integration.providerIdentifier",
+              "channelName": "integration.name"
+            }
+          }
+        }
+      },
+      {
+        "name": "postiz_upload_from_url",
+        "intent": "manage_file",
+        "kind": "declarative",
+        "scope": "pod",
+        "description": "Stores one file in the Postiz media library from a link Postiz downloads itself (an https URL, e.g. a signed link to a pod file). Returns { id, path, name }: a post's media is [{id, path}]. Writes to Postiz but publishes nothing. POST /public/v1/upload-from-url. postiz_schedule_post already uploads its mediaUrls; use this to stage a file on its own. Args: { url: string }.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 120,
+        "metadata": {
+          "verbType": "write"
+        },
+        "parameters": {
+          "url": "string"
+        },
+        "providerSpec": {
+          "tool": "postiz",
+          "method": "POST",
+          "pathTemplate": "/public/v1/upload-from-url",
+          "body": {
+            "url": "{{url}}"
+          },
+          "paramMapping": {
+            "url": {
+              "required": true
+            }
+          },
+          "responseShape": {
+            "scalar": {
+              "id": "id",
+              "path": "path",
+              "name": "name"
+            }
+          }
+        }
+      },
+      {
+        "name": "postiz_schedule_post",
+        "intent": "publish_post",
+        "kind": "code",
+        "scope": "pod",
+        "description": "Queues one post on one Postiz channel, with media. Uploads each mediaUrls link to Postiz (POST /public/v1/upload-from-url), then creates the post (POST /public/v1/posts) with its media as image:[{id, path}]. type draft saves it in Postiz without sending, schedule sends it at date, now sends it at once. Publishes, so an agent's run is always a proposal a person approves. Returns { postId, integrationId, provider, type, date, media, postEntityId }: with postEntityId set, the pod records postId on that post as postiz-post-id once the run succeeds (metadata.writeBack). Args: { content: string, integrationId: string and provider: string (a channel's id and provider from postiz_list_integrations, or the post's account: postiz-integration-id and postiz-provider), type?: draft | schedule | now (default schedule), date?: ISO-8601 (required to schedule), mediaUrls?: string[] (https links Postiz can download, in order), settings?: object (provider settings, e.g. YouTube title and type; X and Instagram get defaults), postEntityId?: string (the Synap post, echoed back) }.",
+        "requires": [
+          "postiz"
+        ],
+        "executionMode": "sync",
+        "timeoutSeconds": 300,
+        "metadata": {
+          "verbType": "write",
+          "writeBack": {
+            "entityParam": "postEntityId",
+            "kind": "post",
+            "properties": {
+              "postiz-post-id": "postId"
+            }
+          }
+        },
+        "parameters": {
+          "content": "string",
+          "integrationId": "string",
+          "provider": "string",
+          "type": "string?",
+          "date": "string?",
+          "mediaUrls": "array?",
+          "settings": "object?",
+          "postEntityId": "string?"
+        },
+        "code": "// Executor wraps this body as (async (args, context) => { <code> }); use args\n// directly and `return`. Every call goes to the postiz tool (the user's Postiz\n// public API; the raw API key is the Authorization header). Code, not a\n// declarative verb: the create-post body nests arrays (posts[].value[].image[])\n// and a per-provider settings object, which string interpolation cannot build.\nconst postiz = async (method, path, body) => {\n  const res = await callProvider('postiz', method, path, body);\n  if (res && res.proposed === true) return { proposed: true, proposalId: res.proposalId || null };\n  return res ? res.body : null;\n};\nconst str = (v) => String(v ?? '').trim();\nconst content = str(args?.content);\nconst integrationId = str(args?.integrationId);\nconst provider = str(args?.provider);\nif (!content) throw new Error('content is required: the text of the post');\nif (!integrationId) throw new Error('integrationId is required: a channel id from postiz_list_integrations');\nif (!provider) throw new Error('provider is required: the channel identifier from postiz_list_integrations (x, linkedin, instagram, ...)');\nconst type = str(args?.type) || 'schedule';\nif (!['draft', 'schedule', 'now'].includes(type)) throw new Error('type must be draft, schedule or now');\nlet date = str(args?.date);\nif (type === 'schedule' && !date) throw new Error('date is required to schedule: an ISO-8601 time, e.g. 2026-11-02T09:00:00.000Z');\nif (!date) date = new Date().toISOString();\nif (Number.isNaN(Date.parse(date))) throw new Error(`date is not an ISO-8601 time: ${date}`);\ndate = new Date(date).toISOString();\nconst rawUrls = Array.isArray(args?.mediaUrls) ? args.mediaUrls : args?.mediaUrls ? [args.mediaUrls] : [];\nconst mediaUrls = rawUrls.map(str).filter(Boolean);\nfor (const url of mediaUrls) {\n  if (!/^https:\\/\\//i.test(url)) throw new Error(`mediaUrls must be https links Postiz can download: ${url}`);\n}\n// settings.__type is the provider. Postiz requires more for some providers\n// (openapi: X who_can_reply_post, Instagram post_type); those two get a\n// default, and whatever the caller passes in `settings` wins over it.\nconst DEFAULT_SETTINGS = {\n  x: { who_can_reply_post: 'everyone' },\n  instagram: { post_type: 'post' },\n  'instagram-standalone': { post_type: 'post' },\n};\nconst extra = args?.settings && typeof args.settings === 'object' && !Array.isArray(args.settings) ? args.settings : {};\nconst settings = { ...(DEFAULT_SETTINGS[provider] || {}), ...extra, __type: provider };\nconst image = [];\nfor (const url of mediaUrls) {\n  const up = await postiz('POST', '/public/v1/upload-from-url', { url });\n  if (up && up.proposed) return { proposed: true, proposalId: up.proposalId, step: 'upload', url };\n  if (!up || !up.id || !up.path) throw new Error(`Postiz did not store ${url}`);\n  image.push({ id: String(up.id), path: String(up.path) });\n}\nconst created = await postiz('POST', '/public/v1/posts', {\n  type,\n  date,\n  shortLink: false,\n  tags: [],\n  posts: [{ integration: { id: integrationId }, value: [{ content, image }], settings }],\n});\nif (created && created.proposed) return { proposed: true, proposalId: created.proposalId };\nconst first = Array.isArray(created) ? created[0] : null;\nconst postId = first && first.postId ? String(first.postId) : null;\nif (!postId) throw new Error('Postiz created no post: the response carried no postId');\nreturn { postId, integrationId, provider, type, date, media: image, postEntityId: str(args?.postEntityId) || null };\n"
+      }
+    ],
+    "provides": [
+      "publish_post",
+      "list_records",
+      "manage_file"
+    ]
+  },
+  "dependencies": []
+}

package/capabilities/proactive-digest.capability.json

@@ -0,0 +1,190 @@
+{
+  "apiVersion": "synap/v1",
+  "kind": "capability",
+  "meta": {
+    "slug": "proactive-digest",
+    "name": "Daily Workspace Digest",
+    "description": "Each morning, checks the workspace for open tasks and recent captures and, if there is anything to report, posts a short written digest to the workspace's feed channel.",
+    "tags": [
+      "capability"
+    ],
+    "isPublic": true,
+    "syncByDefault": true
+  },
+  "spec": {
+    "key": "proactive-digest",
+    "name": "Proactive Digest",
+    "description": "Config-first per-workspace daily digest: each morning, gather what needs attention in the workspace (open tasks, recent captures), and if there's anything, post an AI-written digest to the workspace's proactive feed channel. This REPLACES the dead feed-proactive-executor worker (packages/jobs/src/workers/feed-proactive-executor.ts had zero enqueuers after its proactive-scheduler was removed). It is per-workspace / one-owner, which fits the automation model directly (unlike a per-user fan-out). EXPRESSIBILITY: tasksDue + recentCaptures are expressed as `query` nodes; two of the original aggregator's five sources are NOT expressible as config today and are omitted — pendingProposals (proposals are not entities, so the `query` node cannot read them) and recentEntities-across-all-profiles + activitySummary counts (the `query` node requires a single profileSlug, so 'any recent entity' / COUNT(*) have no node). The AI merges the two available sources in-prompt (there is no array-concat/merge pipe).",
+    "params": [],
+    "vault": [],
+    "tools": [],
+    "skills": [],
+    "provides": [],
+    "playbooks": [],
+    "automations": [
+      {
+        "name": "Proactive Digest — Daily",
+        "description": "Every morning: query open tasks + recent captures, skip if both are empty, else AI-write a short digest and post it to the workspace's proactive feed. Seeded ACTIVE so the cron schedules (a draft never gets a nextRunAt).",
+        "triggerType": "cron",
+        "triggerConfig": {
+          "expression": "0 9 * * *"
+        },
+        "status": "active",
+        "metadata": {
+          "replaces": "feed-proactive-executor",
+          "kind": "proactive-digest"
+        },
+        "flowDefinition": {
+          "nodes": [
+            {
+              "id": "trigger",
+              "type": "trigger",
+              "position": {
+                "x": 0,
+                "y": 0
+              },
+              "data": {
+                "triggerType": "cron",
+                "label": "Every morning at 09:00",
+                "config": {
+                  "expression": "0 9 * * *"
+                }
+              }
+            },
+            {
+              "id": "query-tasks",
+              "type": "query",
+              "position": {
+                "x": -150,
+                "y": 120
+              },
+              "data": {
+                "label": "Open tasks",
+                "profileSlug": "task",
+                "filter": "",
+                "limit": 25,
+                "_note": "Ports the aggregator's tasksDue source. Due-date windowing is not expressed — the `query` filter is JSONB equality only (no range), so the AI reasons over the recent task set instead."
+              }
+            },
+            {
+              "id": "query-captures",
+              "type": "query",
+              "position": {
+                "x": 150,
+                "y": 120
+              },
+              "data": {
+                "label": "Recent captures",
+                "profileSlug": "capture",
+                "filter": "",
+                "limit": 25
+              }
+            },
+            {
+              "id": "count",
+              "type": "compute",
+              "position": {
+                "x": 0,
+                "y": 240
+              },
+              "data": {
+                "label": "Total items found",
+                "operation": "add",
+                "left": "{{steps.query-tasks.output.count}}",
+                "right": "{{steps.query-captures.output.count}}"
+              }
+            },
+            {
+              "id": "guard",
+              "type": "condition",
+              "position": {
+                "x": 0,
+                "y": 360
+              },
+              "data": {
+                "label": "Anything to report?",
+                "expression": "steps.count.output.result > 0",
+                "_note": "Empty-guard: ports the worker's `hasContent` skip. compute `add` of the two counts + a numeric condition stands in for an OR across sources (a condition is a single comparison; the counts summed give a non-empty test)."
+              }
+            },
+            {
+              "id": "digest",
+              "type": "capability",
+              "position": {
+                "x": 0,
+                "y": 480
+              },
+              "data": {
+                "label": "AI-write the digest",
+                "verbId": "ai.generate",
+                "inputMapping": {
+                  "prompt": "You are writing a short daily workspace digest for the owner. Lead with what needs attention, group by theme, keep it skimmable, and omit noise. Open tasks (JSON): {{steps.query-tasks.output.entities}} . Recent captures (JSON): {{steps.query-captures.output.entities}} . Respond with STRICT JSON and nothing else: { \"digest\": \"<a short markdown digest>\" }.",
+                  "json": "true"
+                }
+              }
+            },
+            {
+              "id": "post",
+              "type": "output",
+              "position": {
+                "x": 0,
+                "y": 600
+              },
+              "data": {
+                "label": "Post to the workspace proactive feed",
+                "outputType": "channel_message",
+                "config": {
+                  "channelType": "proactive",
+                  "content": "{{steps.digest.output.digest}}",
+                  "metadata": {
+                    "automationMessage": true,
+                    "kind": "proactive-digest"
+                  }
+                }
+              }
+            }
+          ],
+          "edges": [
+            {
+              "id": "e-tasks",
+              "source": "trigger",
+              "target": "query-tasks"
+            },
+            {
+              "id": "e-captures",
+              "source": "trigger",
+              "target": "query-captures"
+            },
+            {
+              "id": "e-count-t",
+              "source": "query-tasks",
+              "target": "count"
+            },
+            {
+              "id": "e-count-c",
+              "source": "query-captures",
+              "target": "count"
+            },
+            {
+              "id": "e-guard",
+              "source": "count",
+              "target": "guard"
+            },
+            {
+              "id": "e-digest",
+              "source": "guard",
+              "target": "digest",
+              "sourceHandle": "yes"
+            },
+            {
+              "id": "e-post",
+              "source": "digest",
+              "target": "post"
+            }
+          ]
+        }
+      }
+    ]
+  },
+  "dependencies": []
+}