@tangle-network/agent-integrations 0.53.29 → 0.53.30

package/dist/{chunk-ARONCYSG.js → chunk-5LDZLVKP.js}

@@ -181,6 +181,7 @@ __export(adapters_exports, {
   copperConnector: () => copperConnector,
   copyAiConnector: () => copyAiConnector,
   couchbaseConnector: () => couchbaseConnector,
+  createKafkaConnector: () => createKafkaConnector,
   createSftpConnector: () => createSftpConnector,
   createTangleIdentityClient: () => createTangleIdentityClient,
   crispConnector: () => crispConnector,
@@ -352,6 +353,7 @@ __export(adapters_exports, {
   jotformConnector: () => jotformConnector,
   justInvoiceConnector: () => justInvoiceConnector,
   justcallConnector: () => justcallConnector,
+  kafkaConnector: () => kafkaConnector,
   kallabotAiConnector: () => kallabotAiConnector,
   kapsoConnector: () => kapsoConnector,
   kimaiConnector: () => kimaiConnector,
@@ -498,6 +500,7 @@ __export(adapters_exports, {
   predictLeadsConnector: () => predictLeadsConnector,
   productboardConnector: () => productboardConnector,
   proxycurlConnector: () => proxycurlConnector,
+  publicKafkaSocketFactory: () => publicKafkaSocketFactory,
   pushbulletConnector: () => pushbulletConnector,
   pushoverConnector: () => pushoverConnector,
   qawafelConnector: () => qawafelConnector,
@@ -33157,6 +33160,548 @@ var justcallConnector = declarativeRestConnector({
   ]
 });
 
+// src/connectors/adapters/kafka.ts
+import { isIP as isIP2 } from "net";
+import tls from "tls";
+import {
+  Kafka,
+  logLevel
+} from "kafkajs";
+
+// src/connectors/adapters/public-network.ts
+import { lookup } from "dns/promises";
+import ipaddr from "ipaddr.js";
+function isPublicNetworkAddress(value) {
+  if (!ipaddr.isValid(value)) return false;
+  let address = ipaddr.parse(value);
+  if (address.kind() === "ipv6" && address.isIPv4MappedAddress()) {
+    address = address.toIPv4Address();
+  }
+  return address.range() === "unicast";
+}
+async function resolvePublicHostAddresses(host) {
+  const addresses = ipaddr.isValid(host) ? [host] : (await lookup(host, { all: true, verbatim: true })).map((entry) => entry.address);
+  if (addresses.length === 0 || addresses.some((address) => !isPublicNetworkAddress(address))) {
+    throw new Error("host is not a public network target");
+  }
+  return addresses;
+}
+var publicDnsLookup = (hostname, options, callback) => {
+  const normalizedOptions = typeof options === "number" ? { family: options } : options;
+  lookup(hostname, { ...normalizedOptions, all: true, verbatim: true }).then((entries) => {
+    if (entries.length === 0 || entries.some((entry) => !isPublicNetworkAddress(entry.address))) {
+      callback(new Error("host is not a public network target"), "", 0);
+      return;
+    }
+    if (normalizedOptions?.all) {
+      callback(null, entries, void 0);
+      return;
+    }
+    callback(null, entries[0].address, entries[0].family);
+  }).catch((error) => callback(error instanceof Error ? error : new Error("DNS lookup failed"), "", 0));
+};
+
+// src/connectors/adapters/kafka.ts
+var MAX_TOPICS = 100;
+var MAX_MESSAGES = 100;
+var MAX_MESSAGE_BYTES2 = 1024 * 1024;
+var MAX_BATCH_BYTES2 = MAX_FILE_BYTES;
+var MAX_HEADERS = 64;
+var MAX_POLL_MS = 3e4;
+function createKafkaConnector(options = {}) {
+  const createClient = options.createClient ?? ((config) => new Kafka(config));
+  return {
+    manifest: {
+      kind: "kafka",
+      displayName: "Apache Kafka",
+      description: "Discover topics and groups, inspect offsets, produce records, and run bounded approved consumers over TLS.",
+      auth: {
+        kind: "api-key",
+        hint: "JSON with brokers and optional SASL or mutual-TLS credentials. TLS is mandatory and broker addresses must resolve publicly."
+      },
+      defaultConsistencyModel: "advisory",
+      category: "webhook",
+      rateLimit: { requests: 120, windowMs: 6e4, scope: "data-source" },
+      capabilities: [
+        readCapability5("kafka.topics.list", "List Kafka topics visible to the connection.", emptySchema()),
+        readCapability5("kafka.topics.describe", "Read partition and replica metadata for selected topics.", {
+          type: "object",
+          properties: { topics: topicArraySchema() },
+          required: ["topics"],
+          additionalProperties: false
+        }),
+        readCapability5("kafka.offsets.list", "Read low, high, and current offsets for one topic.", topicSchema()),
+        readCapability5("kafka.groups.list", "List consumer groups visible to the connection.", emptySchema()),
+        readCapability5("kafka.group.offsets", "Read committed offsets for a consumer group.", {
+          type: "object",
+          properties: {
+            groupId: { type: "string", minLength: 1, maxLength: 255 },
+            topics: topicArraySchema()
+          },
+          required: ["groupId"],
+          additionalProperties: false
+        }),
+        mutationCapability5("kafka.messages.produce", "Produce one or more records with all acknowledgements enabled.", {
+          type: "object",
+          properties: {
+            topic: topicNameSchema(),
+            encoding: { type: "string", enum: ["utf8", "base64"], default: "utf8" },
+            messages: {
+              type: "array",
+              minItems: 1,
+              maxItems: MAX_MESSAGES,
+              items: {
+                type: "object",
+                properties: {
+                  value: { type: "string" },
+                  key: { type: "string" },
+                  partition: { type: "integer", minimum: 0 },
+                  headers: { type: "object", additionalProperties: { type: "string" }, maxProperties: MAX_HEADERS }
+                },
+                required: ["value"],
+                additionalProperties: false
+              }
+            }
+          },
+          required: ["topic", "messages"],
+          additionalProperties: false
+        }),
+        mutationCapability5("kafka.messages.consume", "Join a consumer group and return a bounded batch without automatically committing offsets.", {
+          type: "object",
+          properties: {
+            topic: topicNameSchema(),
+            groupId: { type: "string", minLength: 1, maxLength: 255 },
+            encoding: { type: "string", enum: ["utf8", "base64"], default: "utf8" },
+            fromBeginning: { type: "boolean", default: false },
+            limit: { type: "integer", minimum: 1, maximum: MAX_MESSAGES, default: 25 },
+            timeoutMs: { type: "integer", minimum: 250, maximum: MAX_POLL_MS, default: 5e3 }
+          },
+          required: ["topic", "groupId"],
+          additionalProperties: false
+        }),
+        mutationCapability5("kafka.offsets.commit", "Commit explicit next offsets for a consumer group.", {
+          type: "object",
+          properties: {
+            groupId: { type: "string", minLength: 1, maxLength: 255 },
+            offsets: {
+              type: "array",
+              minItems: 1,
+              maxItems: MAX_MESSAGES,
+              items: {
+                type: "object",
+                properties: {
+                  topic: topicNameSchema(),
+                  partition: { type: "integer", minimum: 0 },
+                  offset: { type: "string", pattern: "^[0-9]+$" },
+                  metadata: { type: "string", maxLength: 4096 }
+                },
+                required: ["topic", "partition", "offset"],
+                additionalProperties: false
+              }
+            }
+          },
+          required: ["groupId", "offsets"],
+          additionalProperties: false
+        }),
+        mutationCapability5("kafka.topics.create", "Create one Kafka topic with explicit partition and replication counts.", {
+          type: "object",
+          properties: {
+            topic: topicNameSchema(),
+            partitions: { type: "integer", minimum: 1, maximum: 100, default: 1 },
+            replicationFactor: { type: "integer", minimum: 1, maximum: 10, default: 1 }
+          },
+          required: ["topic"],
+          additionalProperties: false
+        }),
+        mutationCapability5("kafka.topics.delete", "Delete one or more Kafka topics.", {
+          type: "object",
+          properties: { topics: topicArraySchema() },
+          required: ["topics"],
+          additionalProperties: false
+        })
+      ]
+    },
+    async executeRead({ source, capabilityName, args }) {
+      const client = createClient(readCredentials(source).config);
+      return withAdmin(client.admin(), async (admin) => {
+        let data4;
+        if (capabilityName === "kafka.topics.list") {
+          data4 = { topics: await admin.listTopics() };
+        } else if (capabilityName === "kafka.topics.describe") {
+          data4 = await admin.fetchTopicMetadata({ topics: readTopics(args.topics) });
+        } else if (capabilityName === "kafka.offsets.list") {
+          const topic = readTopic(args.topic);
+          data4 = { topic, partitions: await admin.fetchTopicOffsets(topic) };
+        } else if (capabilityName === "kafka.groups.list") {
+          data4 = await admin.listGroups();
+        } else if (capabilityName === "kafka.group.offsets") {
+          const groupId5 = readGroupId2(args.groupId);
+          const topics = args.topics === void 0 ? void 0 : readTopics(args.topics);
+          data4 = { groupId: groupId5, offsets: await admin.fetchOffsets({ groupId: groupId5, topics, resolveOffsets: true }) };
+        } else {
+          throw new Error(`Unknown Kafka read capability: ${capabilityName}`);
+        }
+        return { data: jsonSafe(data4), fetchedAt: Date.now() };
+      });
+    },
+    async executeMutation({ source, capabilityName, args }) {
+      const client = createClient(readCredentials(source).config);
+      let data4;
+      if (capabilityName === "kafka.messages.produce") {
+        data4 = await produce(client.producer({ idempotent: true, maxInFlightRequests: 1 }), args);
+      } else if (capabilityName === "kafka.messages.consume") {
+        data4 = await consume(client.consumer({
+          groupId: readGroupId2(args.groupId),
+          allowAutoTopicCreation: false,
+          maxBytes: MAX_BATCH_BYTES2,
+          maxBytesPerPartition: MAX_BATCH_BYTES2
+        }), args);
+      } else if (capabilityName === "kafka.offsets.commit") {
+        data4 = await commitOffsets(client.consumer({
+          groupId: readGroupId2(args.groupId),
+          allowAutoTopicCreation: false
+        }), args);
+      } else if (capabilityName === "kafka.topics.create") {
+        data4 = await withAdmin(client.admin(), async (admin) => ({
+          created: await admin.createTopics({
+            waitForLeaders: true,
+            topics: [{
+              topic: readTopic(args.topic),
+              numPartitions: readBoundedInteger(args.partitions, 1, 1, 100, "partitions"),
+              replicationFactor: readBoundedInteger(args.replicationFactor, 1, 1, 10, "replicationFactor")
+            }]
+          })
+        }));
+      } else if (capabilityName === "kafka.topics.delete") {
+        const topics = readTopics(args.topics);
+        data4 = await withAdmin(client.admin(), async (admin) => {
+          await admin.deleteTopics({ topics });
+          return { topics };
+        });
+      } else {
+        throw new Error(`Unknown Kafka mutation capability: ${capabilityName}`);
+      }
+      return {
+        status: "committed",
+        data: jsonSafe(data4),
+        committedAt: Date.now(),
+        idempotentReplay: false
+      };
+    },
+    async test(source) {
+      try {
+        const admin = createClient(readCredentials(source).config).admin();
+        await withAdmin(admin, (connected) => connected.listTopics());
+        return { ok: true };
+      } catch (error) {
+        return { ok: false, reason: error instanceof Error ? error.message : "Kafka connection test failed" };
+      }
+    }
+  };
+}
+var kafkaConnector = createKafkaConnector();
+var publicKafkaSocketFactory = ({ host, port, ssl, onConnect }) => {
+  validateBrokerHost(host);
+  if (isIP2(host) !== 0 && !isPublicNetworkAddress(host)) {
+    throw new Error("Kafka broker is not a public network target");
+  }
+  const socket = tls.connect({
+    ...ssl,
+    host,
+    port,
+    servername: isIP2(host) === 0 ? host : void 0,
+    lookup: publicDnsLookup
+  }, onConnect);
+  socket.setKeepAlive(true, 6e4);
+  return socket;
+};
+async function withAdmin(admin, run) {
+  try {
+    await admin.connect();
+    return await run(admin);
+  } finally {
+    await admin.disconnect().catch(() => void 0);
+  }
+}
+async function produce(producer, args) {
+  const topic = readTopic(args.topic);
+  const encoding = readEncoding(args.encoding);
+  const messages = readMessageInputs(args.messages).map((message) => ({
+    value: decodeMessageValue(message.value, encoding, "value"),
+    key: message.key === void 0 ? void 0 : decodeMessageValue(message.key, encoding, "key"),
+    partition: message.partition === void 0 ? void 0 : readBoundedInteger(message.partition, 0, 0, Number.MAX_SAFE_INTEGER, "partition"),
+    headers: readHeaders(message.headers)
+  }));
+  const batchBytes = messages.reduce((total, message) => total + message.value.byteLength + (message.key?.byteLength ?? 0) + headerBytes(message.headers), 0);
+  if (batchBytes > MAX_BATCH_BYTES2) throw new Error(`messages exceed the ${MAX_BATCH_BYTES2}-byte batch limit`);
+  try {
+    await producer.connect();
+    return { topic, records: await producer.send({ topic, messages, acks: -1, timeout: 3e4 }) };
+  } finally {
+    await producer.disconnect().catch(() => void 0);
+  }
+}
+async function consume(consumer, args) {
+  const topic = readTopic(args.topic);
+  const encoding = readEncoding(args.encoding);
+  const limit = readBoundedInteger(args.limit, 25, 1, MAX_MESSAGES, "limit");
+  const timeoutMs = readBoundedInteger(args.timeoutMs, 5e3, 250, MAX_POLL_MS, "timeoutMs");
+  const messages = [];
+  let batchBytes = 0;
+  let resolveDone = () => void 0;
+  let rejectDone = () => void 0;
+  const done = new Promise((resolve, reject) => {
+    resolveDone = resolve;
+    rejectDone = reject;
+  });
+  let timer;
+  try {
+    await consumer.connect();
+    await consumer.subscribe({ topics: [topic], fromBeginning: readBoolean(args.fromBeginning, false, "fromBeginning") });
+    const run = consumer.run({
+      autoCommit: false,
+      partitionsConsumedConcurrently: 1,
+      eachMessage: async ({ partition, message }) => {
+        if (messages.length >= limit) return;
+        const messageBytes = (message.key?.byteLength ?? 0) + (message.value?.byteLength ?? 0) + headerBytes(message.headers);
+        if (messageBytes > MAX_MESSAGE_BYTES2) throw new Error(`Kafka message exceeds the ${MAX_MESSAGE_BYTES2}-byte limit`);
+        batchBytes += messageBytes;
+        if (batchBytes > MAX_BATCH_BYTES2) throw new Error(`Kafka batch exceeds the ${MAX_BATCH_BYTES2}-byte limit`);
+        messages.push({
+          topic,
+          partition,
+          offset: message.offset,
+          timestamp: message.timestamp,
+          key: encodeMessageValue(message.key, encoding),
+          value: encodeMessageValue(message.value, encoding),
+          headers: Object.fromEntries(Object.entries(message.headers ?? {}).map(([key, value]) => [key, encodeHeader(value, encoding)]))
+        });
+        if (messages.length >= limit) resolveDone();
+      }
+    });
+    run.catch(rejectDone);
+    timer = setTimeout(resolveDone, timeoutMs);
+    await done;
+    await consumer.stop();
+    await run;
+    return { topic, messages, messageCount: messages.length, offsetsCommitted: false };
+  } finally {
+    if (timer) clearTimeout(timer);
+    await consumer.disconnect().catch(() => void 0);
+  }
+}
+async function commitOffsets(consumer, args) {
+  if (!Array.isArray(args.offsets) || args.offsets.length === 0 || args.offsets.length > MAX_MESSAGES) {
+    throw new Error(`offsets must contain 1 through ${MAX_MESSAGES} entries`);
+  }
+  const offsets = args.offsets.map((entry, index) => {
+    if (!isPlainRecord(entry)) throw new Error(`offsets[${index}] must be an object`);
+    const offset = readOptionalString(entry.offset, `offsets[${index}].offset`);
+    if (!offset || !/^[0-9]+$/.test(offset) || BigInt(offset) > 9223372036854775807n) {
+      throw new Error(`offsets[${index}].offset must be a signed 64-bit non-negative integer string`);
+    }
+    return {
+      topic: readTopic(entry.topic),
+      partition: readBoundedInteger(entry.partition, 0, 0, Number.MAX_SAFE_INTEGER, `offsets[${index}].partition`),
+      offset,
+      metadata: readOptionalString(entry.metadata, `offsets[${index}].metadata`)
+    };
+  });
+  try {
+    await consumer.connect();
+    await consumer.commitOffsets(offsets);
+    return { groupId: readGroupId2(args.groupId), offsets };
+  } finally {
+    await consumer.disconnect().catch(() => void 0);
+  }
+}
+function readCredentials(source) {
+  let raw;
+  if (source.credentials.kind === "custom") raw = source.credentials.values;
+  else if (source.credentials.kind === "api-key") {
+    try {
+      raw = JSON.parse(source.credentials.apiKey);
+    } catch {
+      throw new Error("Kafka credential must be valid JSON");
+    }
+  } else {
+    throw new Error("Kafka requires a structured credential bundle");
+  }
+  if (!isPlainRecord(raw)) throw new Error("Kafka credential must be a JSON object");
+  const brokers = readBrokers(raw.brokers);
+  const clientId = readOptionalString(raw.clientId, "clientId") ?? "tangle-integration-hub";
+  if (!/^[A-Za-z0-9._-]{1,128}$/.test(clientId)) throw new Error("clientId contains unsupported characters");
+  const sasl = readSasl(raw);
+  const ca = readPemList(raw.tlsCa, "tlsCa");
+  const cert = readOptionalString(raw.tlsCert, "tlsCert");
+  const key = readOptionalString(raw.tlsKey, "tlsKey");
+  if (Boolean(cert) !== Boolean(key)) throw new Error("tlsCert and tlsKey must be supplied together");
+  return {
+    config: {
+      brokers,
+      clientId,
+      ssl: {
+        minVersion: "TLSv1.2",
+        rejectUnauthorized: true,
+        ca,
+        cert,
+        key,
+        passphrase: readOptionalString(raw.tlsPassphrase, "tlsPassphrase")
+      },
+      sasl,
+      socketFactory: publicKafkaSocketFactory,
+      connectionTimeout: 1e4,
+      authenticationTimeout: 1e4,
+      requestTimeout: 3e4,
+      enforceRequestTimeout: true,
+      retry: { retries: 3, maxRetryTime: 3e4 },
+      logLevel: logLevel.NOTHING
+    }
+  };
+}
+function readBrokers(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > 20) {
+    throw new Error("brokers must contain 1 through 20 host:port entries");
+  }
+  return value.map((entry, index) => {
+    if (typeof entry !== "string" || entry.length === 0) throw new Error(`brokers[${index}] must be a host:port string`);
+    let parsed;
+    try {
+      parsed = new URL(`tcp://${entry}`);
+    } catch {
+      throw new Error(`brokers[${index}] is not a valid host:port`);
+    }
+    const host = parsed.hostname.replace(/^\[|\]$/g, "");
+    if (!parsed.port || parsed.username || parsed.password || !["", "/"].includes(parsed.pathname)) {
+      throw new Error(`brokers[${index}] must contain only host and port`);
+    }
+    validateBrokerHost(host);
+    if (isIP2(host) !== 0 && !isPublicNetworkAddress(host)) throw new Error(`brokers[${index}] is not a public network target`);
+    const port = Number(parsed.port);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error(`brokers[${index}] port is invalid`);
+    return entry;
+  });
+}
+function validateBrokerHost(host) {
+  const normalized = host.toLowerCase();
+  if (host.length === 0 || host.length > 253 || normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local") || /[\s/@]/.test(host)) {
+    throw new Error("Kafka broker must be a public hostname or IP address");
+  }
+}
+function readSasl(raw) {
+  if (raw.saslMechanism === void 0 || raw.saslMechanism === null) return void 0;
+  if (!["plain", "scram-sha-256", "scram-sha-512"].includes(String(raw.saslMechanism))) {
+    throw new Error("saslMechanism must be plain, scram-sha-256, or scram-sha-512");
+  }
+  const username = readOptionalString(raw.saslUsername, "saslUsername");
+  const password = readOptionalString(raw.saslPassword, "saslPassword");
+  if (!username || !password) throw new Error("SASL requires saslUsername and saslPassword");
+  return { mechanism: raw.saslMechanism, username, password };
+}
+function readPemList(value, label) {
+  if (value === void 0 || value === null) return void 0;
+  const values = Array.isArray(value) ? value : [value];
+  if (values.length === 0 || values.some((entry) => typeof entry !== "string" || entry.length === 0)) {
+    throw new Error(`${label} must be a PEM string or non-empty array of PEM strings`);
+  }
+  return values;
+}
+function readTopics(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > MAX_TOPICS) {
+    throw new Error(`topics must contain 1 through ${MAX_TOPICS} names`);
+  }
+  const topics = value.map(readTopic);
+  if (new Set(topics).size !== topics.length) throw new Error("topics must not contain duplicates");
+  return topics;
+}
+function readTopic(value) {
+  if (typeof value !== "string" || !/^[A-Za-z0-9._-]{1,249}$/.test(value) || value === "." || value === "..") {
+    throw new Error("topic must be 1 through 249 Kafka-safe characters");
+  }
+  return value;
+}
+function readGroupId2(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 255 || /[\u0000-\u001f]/.test(value)) {
+    throw new Error("groupId must be 1 through 255 printable characters");
+  }
+  return value;
+}
+function readEncoding(value) {
+  if (value === void 0 || value === null || value === "utf8") return "utf8";
+  if (value === "base64") return "base64";
+  throw new Error("encoding must be utf8 or base64");
+}
+function readMessageInputs(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > MAX_MESSAGES) {
+    throw new Error(`messages must contain 1 through ${MAX_MESSAGES} entries`);
+  }
+  return value.map((entry, index) => {
+    if (!isPlainRecord(entry)) throw new Error(`messages[${index}] must be an object`);
+    return entry;
+  });
+}
+function decodeMessageValue(value, encoding, label) {
+  if (typeof value !== "string") throw new Error(`${label} must be a string`);
+  if (encoding === "base64" && (value.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value))) {
+    throw new Error(`${label} must be canonical base64`);
+  }
+  const decoded = Buffer.from(value, encoding);
+  if (decoded.byteLength > MAX_MESSAGE_BYTES2) throw new Error(`${label} exceeds the ${MAX_MESSAGE_BYTES2}-byte limit`);
+  return decoded;
+}
+function encodeMessageValue(value, encoding) {
+  return value ? value.toString(encoding) : null;
+}
+function encodeHeader(value, encoding) {
+  if (value === void 0) return void 0;
+  if (Array.isArray(value)) return value.map((entry) => Buffer.isBuffer(entry) ? entry.toString(encoding) : entry);
+  return Buffer.isBuffer(value) ? value.toString(encoding) : value;
+}
+function readHeaders(value) {
+  if (value === void 0 || value === null) return void 0;
+  if (!isPlainRecord(value) || Object.keys(value).length > MAX_HEADERS) throw new Error(`headers must have at most ${MAX_HEADERS} string fields`);
+  const headers = Object.fromEntries(Object.entries(value).map(([key, entry]) => {
+    if (typeof entry !== "string") throw new Error(`header ${key} must be a string`);
+    return [key, entry];
+  }));
+  if (headerBytes(headers) > MAX_MESSAGE_BYTES2) throw new Error(`headers exceed the ${MAX_MESSAGE_BYTES2}-byte limit`);
+  return headers;
+}
+function headerBytes(headers) {
+  if (!headers) return 0;
+  return Object.entries(headers).reduce((total, [key, value]) => {
+    const values = Array.isArray(value) ? value : [value];
+    return total + Buffer.byteLength(key, "utf8") + values.reduce((sum, entry) => {
+      if (Buffer.isBuffer(entry)) return sum + entry.byteLength;
+      if (typeof entry === "string") return sum + Buffer.byteLength(entry, "utf8");
+      return sum;
+    }, 0);
+  }, 0);
+}
+function emptySchema() {
+  return { type: "object", properties: {}, additionalProperties: false };
+}
+function topicSchema() {
+  return {
+    type: "object",
+    properties: { topic: topicNameSchema() },
+    required: ["topic"],
+    additionalProperties: false
+  };
+}
+function topicArraySchema() {
+  return { type: "array", minItems: 1, maxItems: MAX_TOPICS, items: topicNameSchema() };
+}
+function topicNameSchema() {
+  return { type: "string", minLength: 1, maxLength: 249, pattern: "^[A-Za-z0-9._-]+$" };
+}
+function readCapability5(name, description, parameters) {
+  return { name, class: "read", description, parameters };
+}
+function mutationCapability5(name, description, parameters) {
+  return { name, class: "mutation", description, parameters, cas: "none", externalEffect: true };
+}
+
 // src/connectors/adapters/lead-connector.ts
 var leadConnectorConnector = declarativeRestConnector({
   kind: "lead-connector",
@@ -44720,16 +45265,14 @@ var salesforceConnector = declarativeRestConnector({
 });
 
 // src/connectors/adapters/sftp.ts
-import { lookup } from "dns/promises";
 import { timingSafeEqual as timingSafeEqual4 } from "crypto";
 import { posix } from "path";
-import ipaddr from "ipaddr.js";
 import SftpClient from "ssh2-sftp-client";
 var MAX_LIST_ENTRIES = 1e3;
 var MAX_PATH_LENGTH = 1024;
 function createSftpConnector(options = {}) {
   const createClient = options.createClient ?? (() => new SftpClient());
-  const lookupHost = options.lookupHost ?? resolvePublicAddresses;
+  const lookupHost = options.lookupHost ?? resolvePublicHostAddresses;
   return {
     manifest: {
       kind: "sftp",
@@ -44828,7 +45371,7 @@ function createSftpConnector(options = {}) {
       ]
     },
     async executeRead({ source, capabilityName, args }) {
-      const credentials = readCredentials(source);
+      const credentials = readCredentials2(source);
       if (capabilityName === "sftp.list") {
         const path = resolveRemotePath(credentials.rootPath, args.path ?? "/");
         const limit = readBoundedInteger(args.limit, MAX_LIST_ENTRIES, 1, MAX_LIST_ENTRIES, "limit");
@@ -44861,7 +45404,7 @@ function createSftpConnector(options = {}) {
       throw new Error(`Unknown SFTP read capability: ${capabilityName}`);
     },
     async executeMutation({ source, capabilityName, args }) {
-      const credentials = readCredentials(source);
+      const credentials = readCredentials2(source);
       const prepared = prepareMutation(capabilityName, args, credentials.rootPath);
       return withSftp(credentials, createClient, lookupHost, async (client) => {
         let data4;
@@ -44895,7 +45438,7 @@ function createSftpConnector(options = {}) {
     },
     async test(source) {
       try {
-        const credentials = readCredentials(source);
+        const credentials = readCredentials2(source);
         await withSftp(credentials, createClient, lookupHost, (client) => client.cwd());
         return { ok: true };
       } catch (error) {
@@ -44963,7 +45506,7 @@ async function withSftp(credentials, createClient, lookupHost, run) {
     await client.end().catch(() => false);
   }
 }
-function readCredentials(source) {
+function readCredentials2(source) {
   let raw;
   if (source.credentials.kind === "custom") raw = source.credentials.values;
   else if (source.credentials.kind === "api-key") {
@@ -45004,21 +45547,6 @@ function validateHostname(host) {
     throw new Error("SFTP host must be a public hostname or IP address without a scheme");
   }
 }
-async function resolvePublicAddresses(host) {
-  const addresses = ipaddr.isValid(host) ? [host] : (await lookup(host, { all: true, verbatim: true })).map((entry) => entry.address);
-  if (addresses.length === 0 || addresses.some((address) => !isPublicAddress(address))) {
-    throw new Error("SFTP host is not a public network target");
-  }
-  return addresses;
-}
-function isPublicAddress(value) {
-  if (!ipaddr.isValid(value)) return false;
-  let address = ipaddr.parse(value);
-  if (address.kind() === "ipv6" && address.isIPv4MappedAddress()) {
-    address = address.toIPv4Address();
-  }
-  return address.range() === "unicast";
-}
 function parseFingerprint(value) {
   if (/^[a-fA-F0-9]{64}$/.test(value)) return Buffer.from(value, "hex");
   const match = /^SHA256:([A-Za-z0-9+/]{43}=?)$/.exec(value);
@@ -54681,17 +55209,17 @@ var zohoBookingsConnector = {
     category: "calendar",
     defaultConsistencyModel: "authoritative",
     capabilities: [
-      readCapability5("workspaces.list", "List Zoho Bookings workspaces.", {}),
-      readCapability5("services.list", "List services, optionally within one workspace.", {
+      readCapability6("workspaces.list", "List Zoho Bookings workspaces.", {}),
+      readCapability6("services.list", "List services, optionally within one workspace.", {
         workspace_id: { type: "string" }
       }),
-      readCapability5("resources.list", "List bookable resources, optionally for one service.", {
+      readCapability6("resources.list", "List bookable resources, optionally for one service.", {
         service_id: { type: "string" }
       }),
-      readCapability5("staff.list", "List staff, optionally for one service.", {
+      readCapability6("staff.list", "List staff, optionally for one service.", {
         service_id: { type: "string" }
       }),
-      readCapability5("appointments.list", "List appointments from a required start time.", {
+      readCapability6("appointments.list", "List appointments from a required start time.", {
         from_time: {
           type: "string",
           description: "Zoho timestamp in dd-MMM-yyyy HH:mm:ss format."
@@ -54701,17 +55229,17 @@ var zohoBookingsConnector = {
         staff_id: { type: "string" },
         status: { type: "string" }
       }, ["from_time"]),
-      readCapability5("appointments.get", "Read one appointment by booking id.", {
+      readCapability6("appointments.get", "Read one appointment by booking id.", {
         booking_id: { type: "string" }
       }, ["booking_id"]),
-      readCapability5("availability.fetch", "Fetch open time slots for a service and date.", {
+      readCapability6("availability.fetch", "Fetch open time slots for a service and date.", {
         service_id: { type: "string" },
         selected_date: { type: "string", description: "Date in YYYY-MM-DD format." },
         staff_id: { type: "string" },
         group_id: { type: "string" },
         resource_id: { type: "string" }
       }, ["service_id", "selected_date"]),
-      mutationCapability5("appointments.book", "Book an appointment for a customer.", {
+      mutationCapability6("appointments.book", "Book an appointment for a customer.", {
         service_id: { type: "string" },
         from_time: { type: "string", description: "Zoho timestamp in dd-MMM-yyyy HH:mm:ss format." },
         customer_details: {
@@ -54727,13 +55255,13 @@ var zohoBookingsConnector = {
         additional_fields: { type: "object" },
         payment_info: { type: "object" }
       }, ["service_id", "from_time", "customer_details"]),
-      mutationCapability5("appointments.reschedule", "Move an appointment to a new time, staff member, or group.", {
+      mutationCapability6("appointments.reschedule", "Move an appointment to a new time, staff member, or group.", {
         booking_id: { type: "string" },
         start_time: { type: "string", description: "Zoho timestamp in dd-MMM-yyyy HH:mm:ss format." },
         staff_id: { type: "string" },
         group_id: { type: "string" }
       }, ["booking_id"]),
-      mutationCapability5("appointments.cancel", "Cancel an appointment by booking id.", {
+      mutationCapability6("appointments.cancel", "Cancel an appointment by booking id.", {
         booking_id: { type: "string" }
       }, ["booking_id"])
     ]
@@ -54850,7 +55378,7 @@ var zohoBookingsConnector = {
     }
   }
 };
-function readCapability5(name, description, properties, required = []) {
+function readCapability6(name, description, properties, required = []) {
   return {
     name,
     class: "read",
@@ -54859,7 +55387,7 @@ function readCapability5(name, description, properties, required = []) {
     requiredScopes: ["zohobookings.data.READ"]
   };
 }
-function mutationCapability5(name, description, properties, required) {
+function mutationCapability6(name, description, properties, required) {
   return {
     name,
     class: "mutation",
@@ -63755,6 +64283,7 @@ var CONNECTOR_ADAPTER_FACTORIES = [
   defineFactoryAdapter(() => amazonSqsConnector, {}),
   defineFactoryAdapter(() => httpConnector, {}),
   defineFactoryAdapter(() => rssConnector, {}),
+  defineFactoryAdapter(() => kafkaConnector, {}),
   defineFactoryAdapter(() => csvFilesConnector, {}),
   defineFactoryAdapter(() => excelFilesConnector, {}),
   defineFactoryAdapter(() => parquetFilesConnector, {}),
@@ -69735,7 +70264,7 @@ var sanityConnector = declarativeRestConnector({
 var figmaConnector = declarativeRestConnector({
   kind: "figma",
   displayName: "Figma",
-  description: "Read Figma files, components, comments, and team projects; post comments back into the design source of truth.",
+  description: "Read Figma files, components, comments, and project metadata; post comments back into the design source of truth.",
   auth: {
     kind: "oauth2",
     authorizationUrl: "https://www.figma.com/oauth",
@@ -69748,7 +70277,7 @@ var figmaConnector = declarativeRestConnector({
       "file_dev_resources:read",
       "file_versions:read",
       "library_content:read",
-      "projects:read",
+      "project_metadata:read",
       "team_library_content:read",
       "webhooks:write"
     ],
@@ -69964,35 +70493,16 @@ var figmaConnector = declarativeRestConnector({
       requiredScopes: ["file_comments:read"]
     },
     {
-      name: "teams.projects.list",
-      class: "read",
-      description: "List projects inside a Figma team.",
-      parameters: {
-        type: "object",
-        properties: { team_id: { type: "string" } },
-        required: ["team_id"]
-      },
-      request: { method: "GET", path: "/v1/teams/{team_id}/projects" },
-      requiredScopes: ["projects:read"]
-    },
-    {
-      name: "projects.files.list",
+      name: "projects.metadata.get",
       class: "read",
-      description: "List Figma files inside a project.",
+      description: "Get metadata for a Figma project visible to the authenticated user.",
       parameters: {
         type: "object",
-        properties: {
-          project_id: { type: "string" },
-          branch_data: { type: "boolean" }
-        },
+        properties: { project_id: { type: "string" } },
         required: ["project_id"]
       },
-      request: {
-        method: "GET",
-        path: "/v1/projects/{project_id}/files",
-        query: { branch_data: "{branch_data}" }
-      },
-      requiredScopes: ["projects:read"]
+      request: { method: "GET", path: "/v1/projects/{project_id}/meta" },
+      requiredScopes: ["project_metadata:read"]
     },
     {
       name: "teams.components.list",
@@ -70159,7 +70669,7 @@ var figmaConnector = declarativeRestConnector({
 var figjamConnector = declarativeRestConnector({
   kind: "figjam",
   displayName: "FigJam",
-  description: "Read FigJam boards (stickies, connectors, shapes, sections), list team/project boards, render board images, and post or delete board comments through the Figma REST API.",
+  description: "Read FigJam boards (stickies, connectors, shapes, sections), project metadata, render board images, and post or delete board comments through the Figma REST API.",
   auth: {
     kind: "oauth2",
     authorizationUrl: "https://www.figma.com/oauth",
@@ -70170,7 +70680,7 @@ var figjamConnector = declarativeRestConnector({
       "file_comments:write",
       "file_content:read",
       "file_versions:read",
-      "projects:read",
+      "project_metadata:read",
       "webhooks:write"
     ],
     clientIdEnv: "FIGMA_OAUTH_CLIENT_ID",
@@ -70328,33 +70838,16 @@ var figjamConnector = declarativeRestConnector({
       requiredScopes: ["file_comments:read"]
     },
     {
-      name: "teams.projects.list",
+      name: "projects.metadata.get",
       class: "read",
-      description: "List projects inside a Figma team (FigJam boards live alongside Figma design files inside projects).",
+      description: "Get metadata for a Figma/FigJam project visible to the authenticated user.",
       parameters: {
         type: "object",
-        properties: { team_id: { type: "string" } },
-        required: ["team_id"]
-      },
-      request: { method: "GET", path: "/v1/teams/{team_id}/projects" },
-      requiredScopes: ["projects:read"]
-    },
-    {
-      name: "projects.files.list",
-      class: "read",
-      description: 'List files inside a project \u2014 response items expose a `type` field; FigJam boards are returned with type "jam" and design files with type "design".',
-      parameters: {
-        type: "object",
-        properties: {
-          project_id: { type: "string" }
-        },
+        properties: { project_id: { type: "string" } },
         required: ["project_id"]
       },
-      request: {
-        method: "GET",
-        path: "/v1/projects/{project_id}/files"
-      },
-      requiredScopes: ["projects:read"]
+      request: { method: "GET", path: "/v1/projects/{project_id}/meta" },
+      requiredScopes: ["project_metadata:read"]
     },
     {
       name: "files.comments.create",
@@ -143754,6 +144247,9 @@ export {
   jiraCloudConnector,
   jotformConnector,
   justcallConnector,
+  createKafkaConnector,
+  kafkaConnector,
+  publicKafkaSocketFactory,
   leadConnectorConnector,
   lemonSqueezyConnector,
   linearConnector,
@@ -144249,4 +144745,4 @@ export {
   demandbaseConnector,
   adapters_exports
 };
-//# sourceMappingURL=chunk-ARONCYSG.js.map
+//# sourceMappingURL=chunk-5LDZLVKP.js.map