@xopcai/xopc 0.0.142 → 0.0.144

package/dist/src/connectors/composio-logo.js

@@ -0,0 +1,51 @@
+//#region src/connectors/composio-logo.ts
+const COMPOSIO_LOGO_SLUG = /^[a-z0-9_]{1,80}$/;
+const COMPOSIO_LOGO_MAX_BYTES = 512 * 1024;
+const COMPOSIO_LOGO_CONTENT_TYPES = new Set([
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif",
+	"image/svg+xml"
+]);
+async function composioLogoResponse(toolkit) {
+	const slug = toolkit.trim().toLowerCase();
+	if (!COMPOSIO_LOGO_SLUG.test(slug)) return Response.json({
+		ok: false,
+		error: "Invalid toolkit slug."
+	}, { status: 400 });
+	const upstream = await fetch(`https://logos.composio.dev/api/${encodeURIComponent(slug)}`, {
+		headers: { Accept: "image/png,image/webp,image/svg+xml,image/*;q=0.8" },
+		redirect: "error",
+		signal: AbortSignal.timeout(8e3)
+	});
+	if (!upstream.ok) return Response.json({
+		ok: false,
+		error: "Connector logo is unavailable."
+	}, { status: 404 });
+	const contentType = upstream.headers.get("content-type")?.split(";")[0]?.trim().toLowerCase() ?? "";
+	if (!COMPOSIO_LOGO_CONTENT_TYPES.has(contentType)) return Response.json({
+		ok: false,
+		error: "Connector logo has an unsupported format."
+	}, { status: 415 });
+	if (Number(upstream.headers.get("content-length") ?? "0") > COMPOSIO_LOGO_MAX_BYTES) return Response.json({
+		ok: false,
+		error: "Connector logo is too large."
+	}, { status: 413 });
+	const data = await upstream.arrayBuffer();
+	if (data.byteLength > COMPOSIO_LOGO_MAX_BYTES) return Response.json({
+		ok: false,
+		error: "Connector logo is too large."
+	}, { status: 413 });
+	return new Response(data, { headers: {
+		"Cache-Control": "public, max-age=86400, stale-while-revalidate=604800",
+		"Content-Length": String(data.byteLength),
+		"Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'",
+		"Content-Type": contentType,
+		"X-Content-Type-Options": "nosniff"
+	} });
+}
+//#endregion
+export { composioLogoResponse };
+
+//# sourceMappingURL=composio-logo.js.map

package/dist/src/connectors/composio-logo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composio-logo.js","names":[],"sources":["../../../src/connectors/composio-logo.ts"],"sourcesContent":["const COMPOSIO_LOGO_SLUG = /^[a-z0-9_]{1,80}$/;\nconst COMPOSIO_LOGO_MAX_BYTES = 512 * 1024;\nconst COMPOSIO_LOGO_CONTENT_TYPES = new Set([\n  'image/png',\n  'image/jpeg',\n  'image/webp',\n  'image/gif',\n  'image/svg+xml',\n]);\n\nexport async function composioLogoResponse(toolkit: string): Promise<Response> {\n  const slug = toolkit.trim().toLowerCase();\n  if (!COMPOSIO_LOGO_SLUG.test(slug)) {\n    return Response.json({ ok: false, error: 'Invalid toolkit slug.' }, { status: 400 });\n  }\n  const upstream = await fetch(`https://logos.composio.dev/api/${encodeURIComponent(slug)}`, {\n    headers: { Accept: 'image/png,image/webp,image/svg+xml,image/*;q=0.8' },\n    redirect: 'error',\n    signal: AbortSignal.timeout(8_000),\n  });\n  if (!upstream.ok) {\n    return Response.json({ ok: false, error: 'Connector logo is unavailable.' }, { status: 404 });\n  }\n  const contentType = upstream.headers.get('content-type')?.split(';')[0]?.trim().toLowerCase() ?? '';\n  if (!COMPOSIO_LOGO_CONTENT_TYPES.has(contentType)) {\n    return Response.json({ ok: false, error: 'Connector logo has an unsupported format.' }, { status: 415 });\n  }\n  const declaredLength = Number(upstream.headers.get('content-length') ?? '0');\n  if (declaredLength > COMPOSIO_LOGO_MAX_BYTES) {\n    return Response.json({ ok: false, error: 'Connector logo is too large.' }, { status: 413 });\n  }\n  const data = await upstream.arrayBuffer();\n  if (data.byteLength > COMPOSIO_LOGO_MAX_BYTES) {\n    return Response.json({ ok: false, error: 'Connector logo is too large.' }, { status: 413 });\n  }\n  return new Response(data, {\n    headers: {\n      'Cache-Control': 'public, max-age=86400, stale-while-revalidate=604800',\n      'Content-Length': String(data.byteLength),\n      'Content-Security-Policy': \"default-src 'none'; style-src 'unsafe-inline'\",\n      'Content-Type': contentType,\n      'X-Content-Type-Options': 'nosniff',\n    },\n  });\n}\n"],"mappings":";AAAA,MAAM,qBAAqB;AAC3B,MAAM,0BAA0B,MAAM;AACtC,MAAM,8BAA8B,IAAI,IAAI;CAC1C;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,eAAsB,qBAAqB,SAAoC;CAC7E,MAAM,OAAO,QAAQ,MAAM,CAAC,aAAa;AACzC,KAAI,CAAC,mBAAmB,KAAK,KAAK,CAChC,QAAO,SAAS,KAAK;EAAE,IAAI;EAAO,OAAO;EAAyB,EAAE,EAAE,QAAQ,KAAK,CAAC;CAEtF,MAAM,WAAW,MAAM,MAAM,kCAAkC,mBAAmB,KAAK,IAAI;EACzF,SAAS,EAAE,QAAQ,oDAAoD;EACvE,UAAU;EACV,QAAQ,YAAY,QAAQ,IAAM;EACnC,CAAC;AACF,KAAI,CAAC,SAAS,GACZ,QAAO,SAAS,KAAK;EAAE,IAAI;EAAO,OAAO;EAAkC,EAAE,EAAE,QAAQ,KAAK,CAAC;CAE/F,MAAM,cAAc,SAAS,QAAQ,IAAI,eAAe,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI;AACjG,KAAI,CAAC,4BAA4B,IAAI,YAAY,CAC/C,QAAO,SAAS,KAAK;EAAE,IAAI;EAAO,OAAO;EAA6C,EAAE,EAAE,QAAQ,KAAK,CAAC;AAG1G,KADuB,OAAO,SAAS,QAAQ,IAAI,iBAAiB,IAAI,IACtD,GAAG,wBACnB,QAAO,SAAS,KAAK;EAAE,IAAI;EAAO,OAAO;EAAgC,EAAE,EAAE,QAAQ,KAAK,CAAC;CAE7F,MAAM,OAAO,MAAM,SAAS,aAAa;AACzC,KAAI,KAAK,aAAa,wBACpB,QAAO,SAAS,KAAK;EAAE,IAAI;EAAO,OAAO;EAAgC,EAAE,EAAE,QAAQ,KAAK,CAAC;AAE7F,QAAO,IAAI,SAAS,MAAM,EACxB,SAAS;EACP,iBAAiB;EACjB,kBAAkB,OAAO,KAAK,WAAW;EACzC,2BAA2B;EAC3B,gBAAgB;EAChB,0BAA0B;EAC3B,EACF,CAAC"}

package/dist/src/connectors/composio-sessions.d.ts

@@ -0,0 +1,116 @@
+import type { ToolRouterCreateSessionConfig } from '@composio/core';
+import { CredentialResolver } from '../auth/credentials.js';
+import type { ConnectorActionMetadata, ConnectorConnection, ConnectorInstallationPolicy } from './types.js';
+export declare function resolveComposioApiKey(resolver?: CredentialResolver): Promise<string | null>;
+export declare function assertComposioApiKeyConfigured(resolver?: CredentialResolver): Promise<string>;
+export type ComposioToolkitCatalogItem = {
+    slug: string;
+    name: string;
+    logoUrl?: string;
+    isNoAuth: boolean;
+    connected: boolean;
+    providerConnectionId?: string;
+};
+export type ComposioAuthorizeResult = {
+    toolkit: string;
+    connectionId: string;
+    connectUrl?: string;
+    status: string;
+};
+type SessionToolkitResponse = {
+    items: Array<{
+        slug: string;
+        name: string;
+        logo?: string;
+        isNoAuth: boolean;
+        connection?: {
+            isActive: boolean;
+            connectedAccount?: {
+                status: string;
+                id: string;
+            };
+        };
+    }>;
+    cursor?: string;
+};
+export type ComposioSessionLike = {
+    sessionId: string;
+    toolkits(options?: {
+        toolkits?: string[];
+        isConnected?: boolean;
+        limit?: number;
+        cursor?: string;
+    }): Promise<SessionToolkitResponse>;
+    authorize(toolkit: string, options?: {
+        callbackUrl?: string;
+        alias?: string;
+    }): Promise<{
+        id: string;
+        status: string;
+        redirectUrl?: string | null;
+    }>;
+    search(params: {
+        query: string;
+        toolkits?: string[];
+    }): Promise<unknown>;
+    execute(toolSlug: string, args?: Record<string, unknown>, options?: {
+        account?: string;
+    }): Promise<unknown>;
+};
+export type ComposioSessionsClient = {
+    sessions: {
+        create(userId: string, config?: ToolRouterCreateSessionConfig): Promise<ComposioSessionLike>;
+    };
+    connectedAccounts: {
+        list(query?: {
+            userIds?: string[];
+            toolkitSlugs?: string[];
+        }): Promise<unknown>;
+        delete(id: string): Promise<unknown>;
+        refresh(id: string): Promise<unknown>;
+    };
+};
+export type ComposioSessionContext = {
+    principalId: string;
+    installationScope?: string;
+    toolkits?: string[];
+    connectedAccounts?: Record<string, string[]>;
+    callbackUrl?: string;
+};
+type ClientFactory = () => Promise<ComposioSessionsClient>;
+/** Convert local identities to stable opaque Composio user IDs without disclosing user data. */
+export declare function createComposioPrincipalId(principalId: string, installationScope?: string): string;
+export declare class ComposioSessionsAdapter {
+    private readonly createClient;
+    constructor(options?: {
+        resolver?: CredentialResolver;
+        clientFactory?: ClientFactory;
+    });
+    createSession(context: ComposioSessionContext): Promise<ComposioSessionLike>;
+    listToolkitCatalog(context: Omit<ComposioSessionContext, 'toolkits'>): Promise<ComposioToolkitCatalogItem[]>;
+    authorize(context: ComposioSessionContext & {
+        toolkit: string;
+        installationId?: string;
+        alias?: string;
+    }): Promise<ComposioAuthorizeResult>;
+    syncConnections(context: Pick<ComposioSessionContext, 'principalId' | 'installationScope'>): Promise<ConnectorConnection[]>;
+    revokeConnection(connection: ConnectorConnection): Promise<void>;
+    refreshConnection(connection: ConnectorConnection): Promise<ConnectorConnection>;
+    executeWithPolicy(input: {
+        context: ComposioSessionContext;
+        installation: ConnectorInstallationPolicy;
+        connection?: ConnectorConnection;
+        action: ConnectorActionMetadata;
+        args?: Record<string, unknown>;
+        agentId?: string;
+        sessionKey?: string;
+        confirmed?: boolean;
+    }): Promise<{
+        decision: 'allowed';
+        result: unknown;
+    } | {
+        decision: 'denied' | 'confirmation_required';
+        reason: string;
+    }>;
+}
+export {};

package/dist/src/connectors/composio-sessions.js

@@ -0,0 +1,296 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { appendConnectorExecutionAudit, getConnectorInstallation, listConnectorConnections, upsertConnectorConnection } from "../storage/sqlite/connector-repository.js";
+import { evaluateConnectorExecutionPolicy } from "./policy.js";
+import { resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { Composio } from "@composio/core";
+import { PiProvider } from "@composio/experimental";
+//#region src/connectors/composio-sessions.ts
+init_credentials();
+init_logger();
+const log = createLogger("Connectors:ComposioSessions");
+const COMPOSIO_API_KEY_PROVIDER = "connector-composio-api-key";
+async function resolveComposioApiKey(resolver = new CredentialResolver()) {
+	return (await resolver.resolveApiKey(COMPOSIO_API_KEY_PROVIDER).catch(() => void 0))?.trim() || process.env.XOPC_COMPOSIO_API_KEY?.trim() || process.env.COMPOSIO_API_KEY?.trim() || null;
+}
+async function assertComposioApiKeyConfigured(resolver = new CredentialResolver()) {
+	const apiKey = await resolveComposioApiKey(resolver);
+	if (!apiKey) throw new Error("Composio API key is not configured. Install the \"Composio API Key\" connector first.");
+	return apiKey;
+}
+function stableHash(value) {
+	return createHash("sha256").update(value).digest("hex").slice(0, 24);
+}
+function defaultInstallationScope() {
+	const configured = process.env.XOPC_STATE_DIR?.trim() || process.env.XOPC_CONFIG_PATH?.trim();
+	return configured ? resolve(configured) : resolve(process.cwd());
+}
+/** Convert local identities to stable opaque Composio user IDs without disclosing user data. */
+function createComposioPrincipalId(principalId, installationScope = defaultInstallationScope()) {
+	const normalized = principalId.trim();
+	if (!normalized) throw new Error("Connector principalId is required.");
+	return `xopc_${stableHash(installationScope)}_${stableHash(normalized)}`;
+}
+function readArray(payload) {
+	if (!payload || typeof payload !== "object" || Array.isArray(payload)) return [];
+	const record = payload;
+	for (const key of [
+		"items",
+		"data",
+		"connected_accounts"
+	]) if (Array.isArray(record[key])) return record[key];
+	return [];
+}
+function readString(record, keys) {
+	for (const key of keys) {
+		const value = record[key];
+		if (typeof value === "string" && value.trim()) return value.trim();
+	}
+}
+function connectionStatus(value) {
+	switch (value?.toUpperCase()) {
+		case "ACTIVE": return "active";
+		case "INITIATED":
+		case "INITIALIZING": return "pending";
+		case "EXPIRED": return "expired";
+		case "FAILED": return "failed";
+		case "REVOKED":
+		case "DELETED": return "revoked";
+		case "INACTIVE": return "disabled";
+		default: return "unknown";
+	}
+}
+var ComposioSessionsAdapter = class {
+	createClient;
+	constructor(options = {}) {
+		if (options.clientFactory) {
+			this.createClient = options.clientFactory;
+			return;
+		}
+		const resolver = options.resolver ?? new CredentialResolver();
+		this.createClient = async () => {
+			return new Composio({
+				apiKey: await assertComposioApiKeyConfigured(resolver),
+				baseURL: process.env.XOPC_COMPOSIO_BASE_URL?.trim() || void 0,
+				allowTracking: false,
+				dangerouslyAllowAutoUploadDownloadFiles: false,
+				fileUploadDirs: false,
+				provider: new PiProvider(),
+				host: "xopc"
+			});
+		};
+	}
+	async createSession(context) {
+		const client = await this.createClient();
+		const config = {
+			manageConnections: {
+				enable: true,
+				callbackUrl: context.callbackUrl,
+				waitForConnections: false
+			},
+			sandbox: { enable: false },
+			multiAccount: {
+				enable: true,
+				maxAccountsPerToolkit: 5,
+				requireExplicitSelection: true
+			},
+			...context.toolkits?.length ? { toolkits: { enable: context.toolkits } } : {},
+			...context.connectedAccounts && Object.keys(context.connectedAccounts).length > 0 ? { connectedAccounts: context.connectedAccounts } : {}
+		};
+		return client.sessions.create(createComposioPrincipalId(context.principalId, context.installationScope), config);
+	}
+	async listToolkitCatalog(context) {
+		const session = await this.createSession(context);
+		const items = [];
+		let cursor;
+		for (let page = 0; page < 20; page++) {
+			const response = await session.toolkits({
+				limit: 100,
+				cursor
+			});
+			for (const item of response.items) items.push({
+				slug: item.slug,
+				name: item.name,
+				logoUrl: item.logo,
+				isNoAuth: item.isNoAuth,
+				connected: item.connection?.isActive === true,
+				providerConnectionId: item.connection?.connectedAccount?.id
+			});
+			if (!response.cursor || response.cursor === cursor) break;
+			cursor = response.cursor;
+		}
+		return items;
+	}
+	async authorize(context) {
+		const request = await (await this.createSession({
+			...context,
+			toolkits: [context.toolkit]
+		})).authorize(context.toolkit, {
+			callbackUrl: context.callbackUrl,
+			alias: context.alias
+		});
+		const connectorId = `composio-${context.toolkit}`;
+		upsertConnectorConnection({
+			id: `composio-${request.id}`,
+			installationId: context.installationId && getConnectorInstallation(context.installationId) ? context.installationId : void 0,
+			connectorId,
+			provider: "composio",
+			principalId: context.principalId,
+			providerConnectionId: request.id,
+			alias: context.alias,
+			identity: {},
+			status: connectionStatus(request.status),
+			isDefault: listConnectorConnections({
+				principalId: context.principalId,
+				connectorId
+			}).length === 0,
+			metadata: { toolkit: context.toolkit }
+		});
+		return {
+			toolkit: context.toolkit,
+			connectionId: request.id,
+			connectUrl: request.redirectUrl ?? void 0,
+			status: request.status
+		};
+	}
+	async syncConnections(context) {
+		const client = await this.createClient();
+		const providerPrincipalId = createComposioPrincipalId(context.principalId, context.installationScope);
+		const payload = await client.connectedAccounts.list({ userIds: [providerPrincipalId] });
+		const synced = [];
+		for (const item of readArray(payload)) {
+			if (!item || typeof item !== "object" || Array.isArray(item)) continue;
+			const row = item;
+			const toolkitRecord = row.toolkit && typeof row.toolkit === "object" && !Array.isArray(row.toolkit) ? row.toolkit : {};
+			const providerConnectionId = readString(row, [
+				"id",
+				"nanoid",
+				"connectedAccountId",
+				"connected_account_id"
+			]);
+			const toolkit = readString(toolkitRecord, ["slug"]) ?? readString(row, ["toolkitSlug", "toolkit_slug"]);
+			if (!providerConnectionId || !toolkit) continue;
+			const connectorId = `composio-${toolkit}`;
+			const existing = listConnectorConnections({
+				principalId: context.principalId,
+				connectorId
+			}).find((connection) => connection.providerConnectionId === providerConnectionId);
+			const identity = row.connectionData && typeof row.connectionData === "object" && !Array.isArray(row.connectionData) ? row.connectionData : {};
+			synced.push(upsertConnectorConnection({
+				id: existing?.id ?? `composio-${providerConnectionId}`,
+				installationId: existing?.installationId,
+				connectorId,
+				provider: "composio",
+				principalId: context.principalId,
+				providerConnectionId,
+				alias: existing?.alias,
+				identity,
+				status: connectionStatus(readString(row, ["status"])),
+				isDefault: existing?.isDefault ?? false,
+				connectedAt: readString(row, ["createdAt", "created_at"]),
+				lastError: readString(row, ["lastError", "last_error"]),
+				metadata: {
+					toolkit,
+					providerPrincipalId
+				}
+			}));
+		}
+		return synced;
+	}
+	async revokeConnection(connection) {
+		await (await this.createClient()).connectedAccounts.delete(connection.providerConnectionId);
+		upsertConnectorConnection({
+			...connection,
+			status: "revoked",
+			isDefault: false,
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	}
+	async refreshConnection(connection) {
+		await (await this.createClient()).connectedAccounts.refresh(connection.providerConnectionId);
+		const synced = await this.syncConnections({ principalId: connection.principalId });
+		return synced.find((candidate) => candidate.id === connection.id) ?? synced.find((candidate) => candidate.providerConnectionId === connection.providerConnectionId) ?? connection;
+	}
+	async executeWithPolicy(input) {
+		const evaluation = evaluateConnectorExecutionPolicy({
+			installation: input.installation,
+			action: input.action,
+			agentId: input.agentId,
+			connectionId: input.connection?.id,
+			confirmed: input.confirmed
+		});
+		if (evaluation.decision !== "allowed") {
+			appendConnectorExecutionAudit({
+				installationId: input.installation.id,
+				connectionId: input.connection?.id,
+				connectorId: input.installation.connectorId,
+				principalId: input.context.principalId,
+				agentId: input.agentId,
+				sessionKey: input.sessionKey,
+				actionId: input.action.actionId,
+				scope: input.action.scope,
+				decision: evaluation.decision,
+				resultStatus: "not_executed"
+			});
+			return {
+				decision: evaluation.decision,
+				reason: evaluation.reason
+			};
+		}
+		const startedAt = Date.now();
+		try {
+			const toolkit = input.action.toolkit;
+			const connectedAccounts = toolkit && input.connection ? { [toolkit]: [input.connection.providerConnectionId] } : input.context.connectedAccounts;
+			const result = await (await this.createSession({
+				...input.context,
+				connectedAccounts
+			})).execute(input.action.actionId, input.args ?? {}, input.connection ? { account: input.connection.providerConnectionId } : void 0);
+			appendConnectorExecutionAudit({
+				installationId: input.installation.id,
+				connectionId: input.connection?.id,
+				connectorId: input.installation.connectorId,
+				principalId: input.context.principalId,
+				agentId: input.agentId,
+				sessionKey: input.sessionKey,
+				actionId: input.action.actionId,
+				scope: input.action.scope,
+				decision: "allowed",
+				resultStatus: "success",
+				durationMs: Date.now() - startedAt
+			});
+			return {
+				decision: "allowed",
+				result
+			};
+		} catch (err) {
+			const errorCode = err && typeof err === "object" && "code" in err ? String(err.code) : void 0;
+			appendConnectorExecutionAudit({
+				installationId: input.installation.id,
+				connectionId: input.connection?.id,
+				connectorId: input.installation.connectorId,
+				principalId: input.context.principalId,
+				agentId: input.agentId,
+				sessionKey: input.sessionKey,
+				actionId: input.action.actionId,
+				scope: input.action.scope,
+				decision: "allowed",
+				resultStatus: "error",
+				durationMs: Date.now() - startedAt,
+				errorCode
+			});
+			log.warn({
+				err,
+				connectorId: input.installation.connectorId,
+				actionId: input.action.actionId,
+				phase: "execute"
+			}, "Composio connector action failed");
+			throw err;
+		}
+	}
+};
+//#endregion
+export { ComposioSessionsAdapter, assertComposioApiKeyConfigured, createComposioPrincipalId, resolveComposioApiKey };
+
+//# sourceMappingURL=composio-sessions.js.map

package/dist/src/connectors/composio-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composio-sessions.js","names":["listStoredConnectorConnections"],"sources":["../../../src/connectors/composio-sessions.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { resolve } from 'node:path';\n\nimport { Composio } from '@composio/core';\nimport type { ToolRouterCreateSessionConfig } from '@composio/core';\nimport { PiProvider } from '@composio/experimental';\n\nimport { CredentialResolver } from '../auth/credentials.js';\nimport {\n  appendConnectorExecutionAudit,\n  getConnectorInstallation,\n  listConnectorConnections as listStoredConnectorConnections,\n  upsertConnectorConnection,\n} from '../storage/sqlite/connector-repository.js';\nimport { createLogger } from '../utils/logger.js';\nimport { evaluateConnectorExecutionPolicy } from './policy.js';\nimport type {\n  ConnectorActionMetadata,\n  ConnectorConnection,\n  ConnectorInstallationPolicy,\n} from './types.js';\n\nconst log = createLogger('Connectors:ComposioSessions');\nconst COMPOSIO_API_KEY_PROVIDER = 'connector-composio-api-key';\n\nexport async function resolveComposioApiKey(resolver = new CredentialResolver()): Promise<string | null> {\n  const stored = await resolver.resolveApiKey(COMPOSIO_API_KEY_PROVIDER).catch(() => undefined);\n  return stored?.trim() || process.env.XOPC_COMPOSIO_API_KEY?.trim() || process.env.COMPOSIO_API_KEY?.trim() || null;\n}\n\nexport async function assertComposioApiKeyConfigured(resolver = new CredentialResolver()): Promise<string> {\n  const apiKey = await resolveComposioApiKey(resolver);\n  if (!apiKey) {\n    throw new Error('Composio API key is not configured. Install the \"Composio API Key\" connector first.');\n  }\n  return apiKey;\n}\n\nexport type ComposioToolkitCatalogItem = {\n  slug: string;\n  name: string;\n  logoUrl?: string;\n  isNoAuth: boolean;\n  connected: boolean;\n  providerConnectionId?: string;\n};\n\nexport type ComposioAuthorizeResult = {\n  toolkit: string;\n  connectionId: string;\n  connectUrl?: string;\n  status: string;\n};\n\ntype SessionToolkitResponse = {\n  items: Array<{\n    slug: string;\n    name: string;\n    logo?: string;\n    isNoAuth: boolean;\n    connection?: {\n      isActive: boolean;\n      connectedAccount?: { status: string; id: string };\n    };\n  }>;\n  cursor?: string;\n};\n\nexport type ComposioSessionLike = {\n  sessionId: string;\n  toolkits(options?: { toolkits?: string[]; isConnected?: boolean; limit?: number; cursor?: string }): Promise<SessionToolkitResponse>;\n  authorize(toolkit: string, options?: { callbackUrl?: string; alias?: string }): Promise<{\n    id: string;\n    status: string;\n    redirectUrl?: string | null;\n  }>;\n  search(params: { query: string; toolkits?: string[] }): Promise<unknown>;\n  execute(toolSlug: string, args?: Record<string, unknown>, options?: { account?: string }): Promise<unknown>;\n};\n\nexport type ComposioSessionsClient = {\n  sessions: {\n    create(userId: string, config?: ToolRouterCreateSessionConfig): Promise<ComposioSessionLike>;\n  };\n  connectedAccounts: {\n    list(query?: { userIds?: string[]; toolkitSlugs?: string[] }): Promise<unknown>;\n    delete(id: string): Promise<unknown>;\n    refresh(id: string): Promise<unknown>;\n  };\n};\n\nexport type ComposioSessionContext = {\n  principalId: string;\n  installationScope?: string;\n  toolkits?: string[];\n  connectedAccounts?: Record<string, string[]>;\n  callbackUrl?: string;\n};\n\ntype ClientFactory = () => Promise<ComposioSessionsClient>;\n\nfunction stableHash(value: string): string {\n  return createHash('sha256').update(value).digest('hex').slice(0, 24);\n}\n\nfunction defaultInstallationScope(): string {\n  const configured = process.env.XOPC_STATE_DIR?.trim() || process.env.XOPC_CONFIG_PATH?.trim();\n  return configured ? resolve(configured) : resolve(process.cwd());\n}\n\n/** Convert local identities to stable opaque Composio user IDs without disclosing user data. */\nexport function createComposioPrincipalId(principalId: string, installationScope = defaultInstallationScope()): string {\n  const normalized = principalId.trim();\n  if (!normalized) throw new Error('Connector principalId is required.');\n  return `xopc_${stableHash(installationScope)}_${stableHash(normalized)}`;\n}\n\nfunction readArray(payload: unknown): unknown[] {\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return [];\n  const record = payload as Record<string, unknown>;\n  for (const key of ['items', 'data', 'connected_accounts']) {\n    if (Array.isArray(record[key])) return record[key] as unknown[];\n  }\n  return [];\n}\n\nfunction readString(record: Record<string, unknown>, keys: string[]): string | undefined {\n  for (const key of keys) {\n    const value = record[key];\n    if (typeof value === 'string' && value.trim()) return value.trim();\n  }\n  return undefined;\n}\n\nfunction connectionStatus(value: string | undefined): ConnectorConnection['status'] {\n  switch (value?.toUpperCase()) {\n    case 'ACTIVE': return 'active';\n    case 'INITIATED':\n    case 'INITIALIZING': return 'pending';\n    case 'EXPIRED': return 'expired';\n    case 'FAILED': return 'failed';\n    case 'REVOKED':\n    case 'DELETED': return 'revoked';\n    case 'INACTIVE': return 'disabled';\n    default: return 'unknown';\n  }\n}\n\nexport class ComposioSessionsAdapter {\n  private readonly createClient: ClientFactory;\n\n  constructor(options: { resolver?: CredentialResolver; clientFactory?: ClientFactory } = {}) {\n    if (options.clientFactory) {\n      this.createClient = options.clientFactory;\n      return;\n    }\n    const resolver = options.resolver ?? new CredentialResolver();\n    this.createClient = async () => {\n      const apiKey = await assertComposioApiKeyConfigured(resolver);\n      return new Composio({\n        apiKey,\n        baseURL: process.env.XOPC_COMPOSIO_BASE_URL?.trim() || undefined,\n        allowTracking: false,\n        dangerouslyAllowAutoUploadDownloadFiles: false,\n        fileUploadDirs: false,\n        provider: new PiProvider(),\n        host: 'xopc',\n      }) as unknown as ComposioSessionsClient;\n    };\n  }\n\n  async createSession(context: ComposioSessionContext): Promise<ComposioSessionLike> {\n    const client = await this.createClient();\n    const config: ToolRouterCreateSessionConfig = {\n      manageConnections: {\n        enable: true,\n        callbackUrl: context.callbackUrl,\n        waitForConnections: false,\n      },\n      sandbox: { enable: false },\n      multiAccount: {\n        enable: true,\n        maxAccountsPerToolkit: 5,\n        requireExplicitSelection: true,\n      },\n      ...(context.toolkits?.length ? { toolkits: { enable: context.toolkits } } : {}),\n      ...(context.connectedAccounts && Object.keys(context.connectedAccounts).length > 0\n        ? { connectedAccounts: context.connectedAccounts }\n        : {}),\n    };\n    return client.sessions.create(\n      createComposioPrincipalId(context.principalId, context.installationScope),\n      config,\n    );\n  }\n\n  async listToolkitCatalog(context: Omit<ComposioSessionContext, 'toolkits'>): Promise<ComposioToolkitCatalogItem[]> {\n    const session = await this.createSession(context);\n    const items: ComposioToolkitCatalogItem[] = [];\n    let cursor: string | undefined;\n    for (let page = 0; page < 20; page++) {\n      const response = await session.toolkits({ limit: 100, cursor });\n      for (const item of response.items) {\n        items.push({\n          slug: item.slug,\n          name: item.name,\n          logoUrl: item.logo,\n          isNoAuth: item.isNoAuth,\n          connected: item.connection?.isActive === true,\n          providerConnectionId: item.connection?.connectedAccount?.id,\n        });\n      }\n      if (!response.cursor || response.cursor === cursor) break;\n      cursor = response.cursor;\n    }\n    return items;\n  }\n\n  async authorize(\n    context: ComposioSessionContext & { toolkit: string; installationId?: string; alias?: string },\n  ): Promise<ComposioAuthorizeResult> {\n    const session = await this.createSession({ ...context, toolkits: [context.toolkit] });\n    const request = await session.authorize(context.toolkit, {\n      callbackUrl: context.callbackUrl,\n      alias: context.alias,\n    });\n    const connectorId = `composio-${context.toolkit}`;\n    upsertConnectorConnection({\n      id: `composio-${request.id}`,\n      installationId: context.installationId && getConnectorInstallation(context.installationId)\n        ? context.installationId\n        : undefined,\n      connectorId,\n      provider: 'composio',\n      principalId: context.principalId,\n      providerConnectionId: request.id,\n      alias: context.alias,\n      identity: {},\n      status: connectionStatus(request.status),\n      isDefault: listStoredConnectorConnections({ principalId: context.principalId, connectorId }).length === 0,\n      metadata: { toolkit: context.toolkit },\n    });\n    return {\n      toolkit: context.toolkit,\n      connectionId: request.id,\n      connectUrl: request.redirectUrl ?? undefined,\n      status: request.status,\n    };\n  }\n\n  async syncConnections(context: Pick<ComposioSessionContext, 'principalId' | 'installationScope'>): Promise<ConnectorConnection[]> {\n    const client = await this.createClient();\n    const providerPrincipalId = createComposioPrincipalId(context.principalId, context.installationScope);\n    const payload = await client.connectedAccounts.list({ userIds: [providerPrincipalId] });\n    const synced: ConnectorConnection[] = [];\n    for (const item of readArray(payload)) {\n      if (!item || typeof item !== 'object' || Array.isArray(item)) continue;\n      const row = item as Record<string, unknown>;\n      const toolkitRecord = row.toolkit && typeof row.toolkit === 'object' && !Array.isArray(row.toolkit)\n        ? row.toolkit as Record<string, unknown>\n        : {};\n      const providerConnectionId = readString(row, ['id', 'nanoid', 'connectedAccountId', 'connected_account_id']);\n      const toolkit = readString(toolkitRecord, ['slug']) ?? readString(row, ['toolkitSlug', 'toolkit_slug']);\n      if (!providerConnectionId || !toolkit) continue;\n      const connectorId = `composio-${toolkit}`;\n      const existing = listStoredConnectorConnections({ principalId: context.principalId, connectorId })\n        .find((connection) => connection.providerConnectionId === providerConnectionId);\n      const identity = row.connectionData && typeof row.connectionData === 'object' && !Array.isArray(row.connectionData)\n        ? row.connectionData as Record<string, unknown>\n        : {};\n      synced.push(upsertConnectorConnection({\n        id: existing?.id ?? `composio-${providerConnectionId}`,\n        installationId: existing?.installationId,\n        connectorId,\n        provider: 'composio',\n        principalId: context.principalId,\n        providerConnectionId,\n        alias: existing?.alias,\n        identity,\n        status: connectionStatus(readString(row, ['status'])),\n        isDefault: existing?.isDefault ?? false,\n        connectedAt: readString(row, ['createdAt', 'created_at']),\n        lastError: readString(row, ['lastError', 'last_error']),\n        metadata: { toolkit, providerPrincipalId },\n      }));\n    }\n    return synced;\n  }\n\n  async revokeConnection(connection: ConnectorConnection): Promise<void> {\n    const client = await this.createClient();\n    await client.connectedAccounts.delete(connection.providerConnectionId);\n    upsertConnectorConnection({\n      ...connection,\n      status: 'revoked',\n      isDefault: false,\n      updatedAt: new Date().toISOString(),\n    });\n  }\n\n  async refreshConnection(connection: ConnectorConnection): Promise<ConnectorConnection> {\n    const client = await this.createClient();\n    await client.connectedAccounts.refresh(connection.providerConnectionId);\n    const synced = await this.syncConnections({ principalId: connection.principalId });\n    return synced.find((candidate) => candidate.id === connection.id)\n      ?? synced.find((candidate) => candidate.providerConnectionId === connection.providerConnectionId)\n      ?? connection;\n  }\n\n  async executeWithPolicy(input: {\n    context: ComposioSessionContext;\n    installation: ConnectorInstallationPolicy;\n    connection?: ConnectorConnection;\n    action: ConnectorActionMetadata;\n    args?: Record<string, unknown>;\n    agentId?: string;\n    sessionKey?: string;\n    confirmed?: boolean;\n  }): Promise<{ decision: 'allowed'; result: unknown } | { decision: 'denied' | 'confirmation_required'; reason: string }> {\n    const evaluation = evaluateConnectorExecutionPolicy({\n      installation: input.installation,\n      action: input.action,\n      agentId: input.agentId,\n      connectionId: input.connection?.id,\n      confirmed: input.confirmed,\n    });\n    if (evaluation.decision !== 'allowed') {\n      appendConnectorExecutionAudit({\n        installationId: input.installation.id,\n        connectionId: input.connection?.id,\n        connectorId: input.installation.connectorId,\n        principalId: input.context.principalId,\n        agentId: input.agentId,\n        sessionKey: input.sessionKey,\n        actionId: input.action.actionId,\n        scope: input.action.scope,\n        decision: evaluation.decision,\n        resultStatus: 'not_executed',\n      });\n      return { decision: evaluation.decision, reason: evaluation.reason };\n    }\n\n    const startedAt = Date.now();\n    try {\n      const toolkit = input.action.toolkit;\n      const connectedAccounts = toolkit && input.connection\n        ? { [toolkit]: [input.connection.providerConnectionId] }\n        : input.context.connectedAccounts;\n      const session = await this.createSession({ ...input.context, connectedAccounts });\n      const result = await session.execute(\n        input.action.actionId,\n        input.args ?? {},\n        input.connection ? { account: input.connection.providerConnectionId } : undefined,\n      );\n      appendConnectorExecutionAudit({\n        installationId: input.installation.id,\n        connectionId: input.connection?.id,\n        connectorId: input.installation.connectorId,\n        principalId: input.context.principalId,\n        agentId: input.agentId,\n        sessionKey: input.sessionKey,\n        actionId: input.action.actionId,\n        scope: input.action.scope,\n        decision: 'allowed',\n        resultStatus: 'success',\n        durationMs: Date.now() - startedAt,\n      });\n      return { decision: 'allowed', result };\n    } catch (err) {\n      const errorCode = err && typeof err === 'object' && 'code' in err ? String((err as { code?: unknown }).code) : undefined;\n      appendConnectorExecutionAudit({\n        installationId: input.installation.id,\n        connectionId: input.connection?.id,\n        connectorId: input.installation.connectorId,\n        principalId: input.context.principalId,\n        agentId: input.agentId,\n        sessionKey: input.sessionKey,\n        actionId: input.action.actionId,\n        scope: input.action.scope,\n        decision: 'allowed',\n        resultStatus: 'error',\n        durationMs: Date.now() - startedAt,\n        errorCode,\n      });\n      log.warn(\n        { err, connectorId: input.installation.connectorId, actionId: input.action.actionId, phase: 'execute' },\n        'Composio connector action failed',\n      );\n      throw err;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;kBAO4D;aAOV;AAQlD,MAAM,MAAM,aAAa,8BAA8B;AACvD,MAAM,4BAA4B;AAElC,eAAsB,sBAAsB,WAAW,IAAI,oBAAoB,EAA0B;AAEvG,SAAO,MADc,SAAS,cAAc,0BAA0B,CAAC,YAAY,KAAA,EAAU,GAC9E,MAAM,IAAI,QAAQ,IAAI,uBAAuB,MAAM,IAAI,QAAQ,IAAI,kBAAkB,MAAM,IAAI;;AAGhH,eAAsB,+BAA+B,WAAW,IAAI,oBAAoB,EAAmB;CACzG,MAAM,SAAS,MAAM,sBAAsB,SAAS;AACpD,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,wFAAsF;AAExG,QAAO;;AAkET,SAAS,WAAW,OAAuB;AACzC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAGtE,SAAS,2BAAmC;CAC1C,MAAM,aAAa,QAAQ,IAAI,gBAAgB,MAAM,IAAI,QAAQ,IAAI,kBAAkB,MAAM;AAC7F,QAAO,aAAa,QAAQ,WAAW,GAAG,QAAQ,QAAQ,KAAK,CAAC;;;AAIlE,SAAgB,0BAA0B,aAAqB,oBAAoB,0BAA0B,EAAU;CACrH,MAAM,aAAa,YAAY,MAAM;AACrC,KAAI,CAAC,WAAY,OAAM,IAAI,MAAM,qCAAqC;AACtE,QAAO,QAAQ,WAAW,kBAAkB,CAAC,GAAG,WAAW,WAAW;;AAGxE,SAAS,UAAU,SAA6B;AAC9C,KAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,QAAQ,CAAE,QAAO,EAAE;CAChF,MAAM,SAAS;AACf,MAAK,MAAM,OAAO;EAAC;EAAS;EAAQ;EAAqB,CACvD,KAAI,MAAM,QAAQ,OAAO,KAAK,CAAE,QAAO,OAAO;AAEhD,QAAO,EAAE;;AAGX,SAAS,WAAW,QAAiC,MAAoC;AACvF,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,QAAQ,OAAO;AACrB,MAAI,OAAO,UAAU,YAAY,MAAM,MAAM,CAAE,QAAO,MAAM,MAAM;;;AAKtE,SAAS,iBAAiB,OAA0D;AAClF,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,SAAU,QAAO;EACtB,KAAK;EACL,KAAK,eAAgB,QAAO;EAC5B,KAAK,UAAW,QAAO;EACvB,KAAK,SAAU,QAAO;EACtB,KAAK;EACL,KAAK,UAAW,QAAO;EACvB,KAAK,WAAY,QAAO;EACxB,QAAS,QAAO;;;AAIpB,IAAa,0BAAb,MAAqC;CACnC;CAEA,YAAY,UAA4E,EAAE,EAAE;AAC1F,MAAI,QAAQ,eAAe;AACzB,QAAK,eAAe,QAAQ;AAC5B;;EAEF,MAAM,WAAW,QAAQ,YAAY,IAAI,oBAAoB;AAC7D,OAAK,eAAe,YAAY;AAE9B,UAAO,IAAI,SAAS;IAClB,QAAA,MAFmB,+BAA+B,SAAS;IAG3D,SAAS,QAAQ,IAAI,wBAAwB,MAAM,IAAI,KAAA;IACvD,eAAe;IACf,yCAAyC;IACzC,gBAAgB;IAChB,UAAU,IAAI,YAAY;IAC1B,MAAM;IACP,CAAC;;;CAIN,MAAM,cAAc,SAA+D;EACjF,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,SAAwC;GAC5C,mBAAmB;IACjB,QAAQ;IACR,aAAa,QAAQ;IACrB,oBAAoB;IACrB;GACD,SAAS,EAAE,QAAQ,OAAO;GAC1B,cAAc;IACZ,QAAQ;IACR,uBAAuB;IACvB,0BAA0B;IAC3B;GACD,GAAI,QAAQ,UAAU,SAAS,EAAE,UAAU,EAAE,QAAQ,QAAQ,UAAU,EAAE,GAAG,EAAE;GAC9E,GAAI,QAAQ,qBAAqB,OAAO,KAAK,QAAQ,kBAAkB,CAAC,SAAS,IAC7E,EAAE,mBAAmB,QAAQ,mBAAmB,GAChD,EAAE;GACP;AACD,SAAO,OAAO,SAAS,OACrB,0BAA0B,QAAQ,aAAa,QAAQ,kBAAkB,EACzE,OACD;;CAGH,MAAM,mBAAmB,SAA0F;EACjH,MAAM,UAAU,MAAM,KAAK,cAAc,QAAQ;EACjD,MAAM,QAAsC,EAAE;EAC9C,IAAI;AACJ,OAAK,IAAI,OAAO,GAAG,OAAO,IAAI,QAAQ;GACpC,MAAM,WAAW,MAAM,QAAQ,SAAS;IAAE,OAAO;IAAK;IAAQ,CAAC;AAC/D,QAAK,MAAM,QAAQ,SAAS,MAC1B,OAAM,KAAK;IACT,MAAM,KAAK;IACX,MAAM,KAAK;IACX,SAAS,KAAK;IACd,UAAU,KAAK;IACf,WAAW,KAAK,YAAY,aAAa;IACzC,sBAAsB,KAAK,YAAY,kBAAkB;IAC1D,CAAC;AAEJ,OAAI,CAAC,SAAS,UAAU,SAAS,WAAW,OAAQ;AACpD,YAAS,SAAS;;AAEpB,SAAO;;CAGT,MAAM,UACJ,SACkC;EAElC,MAAM,UAAU,OAAM,MADA,KAAK,cAAc;GAAE,GAAG;GAAS,UAAU,CAAC,QAAQ,QAAQ;GAAE,CAAC,EACvD,UAAU,QAAQ,SAAS;GACvD,aAAa,QAAQ;GACrB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,cAAc,YAAY,QAAQ;AACxC,4BAA0B;GACxB,IAAI,YAAY,QAAQ;GACxB,gBAAgB,QAAQ,kBAAkB,yBAAyB,QAAQ,eAAe,GACtF,QAAQ,iBACR,KAAA;GACJ;GACA,UAAU;GACV,aAAa,QAAQ;GACrB,sBAAsB,QAAQ;GAC9B,OAAO,QAAQ;GACf,UAAU,EAAE;GACZ,QAAQ,iBAAiB,QAAQ,OAAO;GACxC,WAAWA,yBAA+B;IAAE,aAAa,QAAQ;IAAa;IAAa,CAAC,CAAC,WAAW;GACxG,UAAU,EAAE,SAAS,QAAQ,SAAS;GACvC,CAAC;AACF,SAAO;GACL,SAAS,QAAQ;GACjB,cAAc,QAAQ;GACtB,YAAY,QAAQ,eAAe,KAAA;GACnC,QAAQ,QAAQ;GACjB;;CAGH,MAAM,gBAAgB,SAA4G;EAChI,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,sBAAsB,0BAA0B,QAAQ,aAAa,QAAQ,kBAAkB;EACrG,MAAM,UAAU,MAAM,OAAO,kBAAkB,KAAK,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC;EACvF,MAAM,SAAgC,EAAE;AACxC,OAAK,MAAM,QAAQ,UAAU,QAAQ,EAAE;AACrC,OAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,KAAK,CAAE;GAC9D,MAAM,MAAM;GACZ,MAAM,gBAAgB,IAAI,WAAW,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,QAAQ,GAC/F,IAAI,UACJ,EAAE;GACN,MAAM,uBAAuB,WAAW,KAAK;IAAC;IAAM;IAAU;IAAsB;IAAuB,CAAC;GAC5G,MAAM,UAAU,WAAW,eAAe,CAAC,OAAO,CAAC,IAAI,WAAW,KAAK,CAAC,eAAe,eAAe,CAAC;AACvG,OAAI,CAAC,wBAAwB,CAAC,QAAS;GACvC,MAAM,cAAc,YAAY;GAChC,MAAM,WAAWA,yBAA+B;IAAE,aAAa,QAAQ;IAAa;IAAa,CAAC,CAC/F,MAAM,eAAe,WAAW,yBAAyB,qBAAqB;GACjF,MAAM,WAAW,IAAI,kBAAkB,OAAO,IAAI,mBAAmB,YAAY,CAAC,MAAM,QAAQ,IAAI,eAAe,GAC/G,IAAI,iBACJ,EAAE;AACN,UAAO,KAAK,0BAA0B;IACpC,IAAI,UAAU,MAAM,YAAY;IAChC,gBAAgB,UAAU;IAC1B;IACA,UAAU;IACV,aAAa,QAAQ;IACrB;IACA,OAAO,UAAU;IACjB;IACA,QAAQ,iBAAiB,WAAW,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,WAAW,UAAU,aAAa;IAClC,aAAa,WAAW,KAAK,CAAC,aAAa,aAAa,CAAC;IACzD,WAAW,WAAW,KAAK,CAAC,aAAa,aAAa,CAAC;IACvD,UAAU;KAAE;KAAS;KAAqB;IAC3C,CAAC,CAAC;;AAEL,SAAO;;CAGT,MAAM,iBAAiB,YAAgD;AAErE,SAAM,MADe,KAAK,cAAc,EAC3B,kBAAkB,OAAO,WAAW,qBAAqB;AACtE,4BAA0B;GACxB,GAAG;GACH,QAAQ;GACR,WAAW;GACX,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;;CAGJ,MAAM,kBAAkB,YAA+D;AAErF,SAAM,MADe,KAAK,cAAc,EAC3B,kBAAkB,QAAQ,WAAW,qBAAqB;EACvE,MAAM,SAAS,MAAM,KAAK,gBAAgB,EAAE,aAAa,WAAW,aAAa,CAAC;AAClF,SAAO,OAAO,MAAM,cAAc,UAAU,OAAO,WAAW,GAAG,IAC5D,OAAO,MAAM,cAAc,UAAU,yBAAyB,WAAW,qBAAqB,IAC9F;;CAGP,MAAM,kBAAkB,OASiG;EACvH,MAAM,aAAa,iCAAiC;GAClD,cAAc,MAAM;GACpB,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,cAAc,MAAM,YAAY;GAChC,WAAW,MAAM;GAClB,CAAC;AACF,MAAI,WAAW,aAAa,WAAW;AACrC,iCAA8B;IAC5B,gBAAgB,MAAM,aAAa;IACnC,cAAc,MAAM,YAAY;IAChC,aAAa,MAAM,aAAa;IAChC,aAAa,MAAM,QAAQ;IAC3B,SAAS,MAAM;IACf,YAAY,MAAM;IAClB,UAAU,MAAM,OAAO;IACvB,OAAO,MAAM,OAAO;IACpB,UAAU,WAAW;IACrB,cAAc;IACf,CAAC;AACF,UAAO;IAAE,UAAU,WAAW;IAAU,QAAQ,WAAW;IAAQ;;EAGrE,MAAM,YAAY,KAAK,KAAK;AAC5B,MAAI;GACF,MAAM,UAAU,MAAM,OAAO;GAC7B,MAAM,oBAAoB,WAAW,MAAM,aACvC,GAAG,UAAU,CAAC,MAAM,WAAW,qBAAqB,EAAE,GACtD,MAAM,QAAQ;GAElB,MAAM,SAAS,OAAM,MADC,KAAK,cAAc;IAAE,GAAG,MAAM;IAAS;IAAmB,CAAC,EACpD,QAC3B,MAAM,OAAO,UACb,MAAM,QAAQ,EAAE,EAChB,MAAM,aAAa,EAAE,SAAS,MAAM,WAAW,sBAAsB,GAAG,KAAA,EACzE;AACD,iCAA8B;IAC5B,gBAAgB,MAAM,aAAa;IACnC,cAAc,MAAM,YAAY;IAChC,aAAa,MAAM,aAAa;IAChC,aAAa,MAAM,QAAQ;IAC3B,SAAS,MAAM;IACf,YAAY,MAAM;IAClB,UAAU,MAAM,OAAO;IACvB,OAAO,MAAM,OAAO;IACpB,UAAU;IACV,cAAc;IACd,YAAY,KAAK,KAAK,GAAG;IAC1B,CAAC;AACF,UAAO;IAAE,UAAU;IAAW;IAAQ;WAC/B,KAAK;GACZ,MAAM,YAAY,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAM,OAAQ,IAA2B,KAAK,GAAG,KAAA;AAC/G,iCAA8B;IAC5B,gBAAgB,MAAM,aAAa;IACnC,cAAc,MAAM,YAAY;IAChC,aAAa,MAAM,aAAa;IAChC,aAAa,MAAM,QAAQ;IAC3B,SAAS,MAAM;IACf,YAAY,MAAM;IAClB,UAAU,MAAM,OAAO;IACvB,OAAO,MAAM,OAAO;IACpB,UAAU;IACV,cAAc;IACd,YAAY,KAAK,KAAK,GAAG;IACzB;IACD,CAAC;AACF,OAAI,KACF;IAAE;IAAK,aAAa,MAAM,aAAa;IAAa,UAAU,MAAM,OAAO;IAAU,OAAO;IAAW,EACvG,mCACD;AACD,SAAM"}

package/dist/src/connectors/composio-triggers.d.ts

@@ -6,5 +6,22 @@ export type ComposioTriggerArchiveEntry = {
     trigger?: string;
     payload: unknown;
 };
+export declare function verifyComposioWebhook(input: {
+    body: string;
+    webhookId: string;
+    webhookTimestamp: string;
+    signature: string;
+    secret: string;
+    nowMs?: number;
+    toleranceSeconds?: number;
+}): unknown;
+export declare function normalizeComposioTriggerPayload(payload: unknown, webhookId?: string): {
+    id: string;
+    type: string;
+    toolkit?: string;
+    trigger?: string;
+    data: Record<string, unknown>;
+};
+export declare function applyComposioConnectionLifecycleEvent(payload: unknown): void;
 export declare function appendComposioTriggerEvent(config: Config, payload: unknown): Promise<ComposioTriggerArchiveEntry>;
 export declare function listComposioTriggerEvents(config: Config, limit?: number): Promise<ComposioTriggerArchiveEntry[]>;

package/dist/src/connectors/composio-triggers.js

@@ -1,6 +1,7 @@
+import { listConnectorConnections, upsertConnectorConnection } from "../storage/sqlite/connector-repository.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { dirname, join } from "node:path";
-import crypto from "node:crypto";
+import crypto, { createHmac, timingSafeEqual } from "node:crypto";
 import { appendFile, mkdir, readFile } from "node:fs/promises";
 //#region src/connectors/composio-triggers.ts
 function archivePath(config) {
@@ -9,17 +10,59 @@ function archivePath(config) {
 function readString(value) {
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
+function verifyComposioWebhook(input) {
+	if (!input.secret || !input.webhookId || !input.webhookTimestamp || !input.signature) throw new Error("Missing Composio webhook signature fields.");
+	const timestampMs = Number(input.webhookTimestamp) * 1e3;
+	const toleranceMs = (input.toleranceSeconds ?? 300) * 1e3;
+	if (!Number.isFinite(timestampMs) || Math.abs((input.nowMs ?? Date.now()) - timestampMs) > toleranceMs) throw new Error("Composio webhook timestamp is outside the allowed window.");
+	const expected = createHmac("sha256", input.secret).update(`${input.webhookId}.${input.webhookTimestamp}.${input.body}`).digest("base64");
+	const received = input.signature.split(",").at(-1)?.trim() ?? "";
+	const expectedBuffer = Buffer.from(expected);
+	const receivedBuffer = Buffer.from(received);
+	if (expectedBuffer.length !== receivedBuffer.length || !timingSafeEqual(expectedBuffer, receivedBuffer)) throw new Error("Invalid Composio webhook signature.");
+	return JSON.parse(input.body);
+}
+function normalizeComposioTriggerPayload(payload, webhookId) {
+	const row = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
+	const metadata = row.metadata && typeof row.metadata === "object" && !Array.isArray(row.metadata) ? row.metadata : {};
+	const data = row.data && typeof row.data === "object" && !Array.isArray(row.data) ? row.data : {};
+	const toolkitRecord = metadata.toolkit && typeof metadata.toolkit === "object" && !Array.isArray(metadata.toolkit) ? metadata.toolkit : {};
+	return {
+		id: webhookId ?? readString(row.id ?? row.eventId ?? row.event_id) ?? crypto.randomUUID(),
+		type: readString(row.type) ?? "composio.trigger.message",
+		toolkit: readString(metadata.toolkit_slug ?? toolkitRecord.slug ?? row.toolkit ?? row.toolkit_slug),
+		trigger: readString(metadata.trigger_slug ?? row.trigger ?? row.triggerName ?? row.trigger_name),
+		data
+	};
+}
+function applyComposioConnectionLifecycleEvent(payload) {
+	const normalized = normalizeComposioTriggerPayload(payload);
+	if (normalized.type !== "composio.connected_account.expired" && normalized.type !== "composio.connected_account.deleted") return;
+	const providerConnectionId = readString(normalized.data.id ?? normalized.data.nanoid ?? normalized.data.connected_account_id);
+	if (!providerConnectionId) return;
+	const connection = listConnectorConnections().find((candidate) => candidate.provider === "composio" && candidate.providerConnectionId === providerConnectionId);
+	if (!connection) return;
+	upsertConnectorConnection({
+		...connection,
+		status: normalized.type.endsWith(".deleted") ? "revoked" : "expired",
+		isDefault: false,
+		lastError: normalized.type.endsWith(".deleted") ? "Connection was removed in Composio." : "Connection expired and requires authorization."
+	});
+}
 async function appendComposioTriggerEvent(config, payload) {
 	const record = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
+	const normalized = normalizeComposioTriggerPayload(payload);
 	const entry = {
 		at: (/* @__PURE__ */ new Date()).toISOString(),
-		id: readString(record.id ?? record.eventId ?? record.event_id) ?? crypto.randomUUID(),
-		toolkit: readString(record.toolkit ?? record.toolkit_slug ?? record.appName ?? record.app_name),
-		trigger: readString(record.trigger ?? record.triggerName ?? record.trigger_name ?? record.type),
+		id: normalized.id,
+		toolkit: normalized.toolkit ?? readString(record.appName ?? record.app_name),
+		trigger: normalized.trigger ?? normalized.type,
 		payload
 	};
 	const path = archivePath(config);
 	await mkdir(dirname(path), { recursive: true });
+	const existing = (await listComposioTriggerEvents(config, 500)).find((candidate) => candidate.id === entry.id);
+	if (existing) return existing;
 	await appendFile(path, `${JSON.stringify(entry)}\n`, "utf8");
 	return entry;
 }
@@ -27,6 +70,6 @@ async function listComposioTriggerEvents(config, limit = 50) {
 	return (await readFile(archivePath(config), "utf8").catch(() => "")).split("\n").filter(Boolean).slice(-Math.max(1, Math.min(limit, 500))).map((line) => JSON.parse(line)).reverse();
 }
 //#endregion
-export { appendComposioTriggerEvent, listComposioTriggerEvents };
+export { appendComposioTriggerEvent, applyComposioConnectionLifecycleEvent, listComposioTriggerEvents, normalizeComposioTriggerPayload, verifyComposioWebhook };
 
 //# sourceMappingURL=composio-triggers.js.map

package/dist/src/connectors/composio-triggers.js.map

@@ -1 +1 @@
-{"version":3,"file":"composio-triggers.js","names":[],"sources":["../../../src/connectors/composio-triggers.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport { mkdir, appendFile, readFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\n\nimport type { Config } from '../config/schema.js';\nimport { getWorkspacePath } from '../config/workspace-path-helpers.js';\n\nexport type ComposioTriggerArchiveEntry = {\n  at: string;\n  id: string;\n  toolkit?: string;\n  trigger?: string;\n  payload: unknown;\n};\n\nfunction archivePath(config: Config): string {\n  const workspace = getWorkspacePath(config) || './workspace';\n  return join(workspace, 'state', 'connectors', 'composio-triggers.jsonl');\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nexport async function appendComposioTriggerEvent(config: Config, payload: unknown): Promise<ComposioTriggerArchiveEntry> {\n  const record = payload && typeof payload === 'object' && !Array.isArray(payload) ? payload as Record<string, unknown> : {};\n  const entry: ComposioTriggerArchiveEntry = {\n    at: new Date().toISOString(),\n    id: readString(record.id ?? record.eventId ?? record.event_id) ?? crypto.randomUUID(),\n    toolkit: readString(record.toolkit ?? record.toolkit_slug ?? record.appName ?? record.app_name),\n    trigger: readString(record.trigger ?? record.triggerName ?? record.trigger_name ?? record.type),\n    payload,\n  };\n  const path = archivePath(config);\n  await mkdir(dirname(path), { recursive: true });\n  await appendFile(path, `${JSON.stringify(entry)}\\n`, 'utf8');\n  return entry;\n}\n\nexport async function listComposioTriggerEvents(config: Config, limit = 50): Promise<ComposioTriggerArchiveEntry[]> {\n  const path = archivePath(config);\n  const text = await readFile(path, 'utf8').catch(() => '');\n  return text\n    .split('\\n')\n    .filter(Boolean)\n    .slice(-Math.max(1, Math.min(limit, 500)))\n    .map((line) => JSON.parse(line) as ComposioTriggerArchiveEntry)\n    .reverse();\n}\n"],"mappings":";;;;;AAeA,SAAS,YAAY,QAAwB;AAE3C,QAAO,KADW,iBAAiB,OAAO,IAAI,eACvB,SAAS,cAAc,0BAA0B;;AAG1E,SAAS,WAAW,OAAoC;AACtD,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,MAAM,MAAM,GAAG,KAAA;;AAGpE,eAAsB,2BAA2B,QAAgB,SAAwD;CACvH,MAAM,SAAS,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG,UAAqC,EAAE;CAC1H,MAAM,QAAqC;EACzC,qBAAI,IAAI,MAAM,EAAC,aAAa;EAC5B,IAAI,WAAW,OAAO,MAAM,OAAO,WAAW,OAAO,SAAS,IAAI,OAAO,YAAY;EACrF,SAAS,WAAW,OAAO,WAAW,OAAO,gBAAgB,OAAO,WAAW,OAAO,SAAS;EAC/F,SAAS,WAAW,OAAO,WAAW,OAAO,eAAe,OAAO,gBAAgB,OAAO,KAAK;EAC/F;EACD;CACD,MAAM,OAAO,YAAY,OAAO;AAChC,OAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAC/C,OAAM,WAAW,MAAM,GAAG,KAAK,UAAU,MAAM,CAAC,KAAK,OAAO;AAC5D,QAAO;;AAGT,eAAsB,0BAA0B,QAAgB,QAAQ,IAA4C;AAGlH,SAAO,MADY,SADN,YAAY,OACO,EAAE,OAAO,CAAC,YAAY,GAAG,EAEtD,MAAM,KAAK,CACX,OAAO,QAAQ,CACf,MAAM,CAAC,KAAK,IAAI,GAAG,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC,CACzC,KAAK,SAAS,KAAK,MAAM,KAAK,CAAgC,CAC9D,SAAS"}
+{"version":3,"file":"composio-triggers.js","names":[],"sources":["../../../src/connectors/composio-triggers.ts"],"sourcesContent":["import crypto, { createHmac, timingSafeEqual } from 'node:crypto';\nimport { mkdir, appendFile, readFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\n\nimport type { Config } from '../config/schema.js';\nimport { getWorkspacePath } from '../config/workspace-path-helpers.js';\nimport { listConnectorConnections, upsertConnectorConnection } from '../storage/sqlite/connector-repository.js';\n\nexport type ComposioTriggerArchiveEntry = {\n  at: string;\n  id: string;\n  toolkit?: string;\n  trigger?: string;\n  payload: unknown;\n};\n\nfunction archivePath(config: Config): string {\n  const workspace = getWorkspacePath(config) || './workspace';\n  return join(workspace, 'state', 'connectors', 'composio-triggers.jsonl');\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nexport function verifyComposioWebhook(input: {\n  body: string;\n  webhookId: string;\n  webhookTimestamp: string;\n  signature: string;\n  secret: string;\n  nowMs?: number;\n  toleranceSeconds?: number;\n}): unknown {\n  if (!input.secret || !input.webhookId || !input.webhookTimestamp || !input.signature) {\n    throw new Error('Missing Composio webhook signature fields.');\n  }\n  const timestampMs = Number(input.webhookTimestamp) * 1000;\n  const toleranceMs = (input.toleranceSeconds ?? 300) * 1000;\n  if (!Number.isFinite(timestampMs) || Math.abs((input.nowMs ?? Date.now()) - timestampMs) > toleranceMs) {\n    throw new Error('Composio webhook timestamp is outside the allowed window.');\n  }\n  const expected = createHmac('sha256', input.secret)\n    .update(`${input.webhookId}.${input.webhookTimestamp}.${input.body}`)\n    .digest('base64');\n  const received = input.signature.split(',').at(-1)?.trim() ?? '';\n  const expectedBuffer = Buffer.from(expected);\n  const receivedBuffer = Buffer.from(received);\n  if (expectedBuffer.length !== receivedBuffer.length || !timingSafeEqual(expectedBuffer, receivedBuffer)) {\n    throw new Error('Invalid Composio webhook signature.');\n  }\n  return JSON.parse(input.body) as unknown;\n}\n\nexport function normalizeComposioTriggerPayload(payload: unknown, webhookId?: string): {\n  id: string;\n  type: string;\n  toolkit?: string;\n  trigger?: string;\n  data: Record<string, unknown>;\n} {\n  const row = payload && typeof payload === 'object' && !Array.isArray(payload) ? payload as Record<string, unknown> : {};\n  const metadata = row.metadata && typeof row.metadata === 'object' && !Array.isArray(row.metadata)\n    ? row.metadata as Record<string, unknown>\n    : {};\n  const data = row.data && typeof row.data === 'object' && !Array.isArray(row.data)\n    ? row.data as Record<string, unknown>\n    : {};\n  const toolkitRecord = metadata.toolkit && typeof metadata.toolkit === 'object' && !Array.isArray(metadata.toolkit)\n    ? metadata.toolkit as Record<string, unknown>\n    : {};\n  return {\n    id: webhookId ?? readString(row.id ?? row.eventId ?? row.event_id) ?? crypto.randomUUID(),\n    type: readString(row.type) ?? 'composio.trigger.message',\n    toolkit: readString(metadata.toolkit_slug ?? toolkitRecord.slug ?? row.toolkit ?? row.toolkit_slug),\n    trigger: readString(metadata.trigger_slug ?? row.trigger ?? row.triggerName ?? row.trigger_name),\n    data,\n  };\n}\n\nexport function applyComposioConnectionLifecycleEvent(payload: unknown): void {\n  const normalized = normalizeComposioTriggerPayload(payload);\n  if (normalized.type !== 'composio.connected_account.expired' && normalized.type !== 'composio.connected_account.deleted') return;\n  const providerConnectionId = readString(normalized.data.id ?? normalized.data.nanoid ?? normalized.data.connected_account_id);\n  if (!providerConnectionId) return;\n  const connection = listConnectorConnections().find((candidate) => (\n    candidate.provider === 'composio' && candidate.providerConnectionId === providerConnectionId\n  ));\n  if (!connection) return;\n  upsertConnectorConnection({\n    ...connection,\n    status: normalized.type.endsWith('.deleted') ? 'revoked' : 'expired',\n    isDefault: false,\n    lastError: normalized.type.endsWith('.deleted') ? 'Connection was removed in Composio.' : 'Connection expired and requires authorization.',\n  });\n}\n\nexport async function appendComposioTriggerEvent(config: Config, payload: unknown): Promise<ComposioTriggerArchiveEntry> {\n  const record = payload && typeof payload === 'object' && !Array.isArray(payload) ? payload as Record<string, unknown> : {};\n  const normalized = normalizeComposioTriggerPayload(payload);\n  const entry: ComposioTriggerArchiveEntry = {\n    at: new Date().toISOString(),\n    id: normalized.id,\n    toolkit: normalized.toolkit ?? readString(record.appName ?? record.app_name),\n    trigger: normalized.trigger ?? normalized.type,\n    payload,\n  };\n  const path = archivePath(config);\n  await mkdir(dirname(path), { recursive: true });\n  const recent = await listComposioTriggerEvents(config, 500);\n  const existing = recent.find((candidate) => candidate.id === entry.id);\n  if (existing) return existing;\n  await appendFile(path, `${JSON.stringify(entry)}\\n`, 'utf8');\n  return entry;\n}\n\nexport async function listComposioTriggerEvents(config: Config, limit = 50): Promise<ComposioTriggerArchiveEntry[]> {\n  const path = archivePath(config);\n  const text = await readFile(path, 'utf8').catch(() => '');\n  return text\n    .split('\\n')\n    .filter(Boolean)\n    .slice(-Math.max(1, Math.min(limit, 500)))\n    .map((line) => JSON.parse(line) as ComposioTriggerArchiveEntry)\n    .reverse();\n}\n"],"mappings":";;;;;;AAgBA,SAAS,YAAY,QAAwB;AAE3C,QAAO,KADW,iBAAiB,OAAO,IAAI,eACvB,SAAS,cAAc,0BAA0B;;AAG1E,SAAS,WAAW,OAAoC;AACtD,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,MAAM,MAAM,GAAG,KAAA;;AAGpE,SAAgB,sBAAsB,OAQ1B;AACV,KAAI,CAAC,MAAM,UAAU,CAAC,MAAM,aAAa,CAAC,MAAM,oBAAoB,CAAC,MAAM,UACzE,OAAM,IAAI,MAAM,6CAA6C;CAE/D,MAAM,cAAc,OAAO,MAAM,iBAAiB,GAAG;CACrD,MAAM,eAAe,MAAM,oBAAoB,OAAO;AACtD,KAAI,CAAC,OAAO,SAAS,YAAY,IAAI,KAAK,KAAK,MAAM,SAAS,KAAK,KAAK,IAAI,YAAY,GAAG,YACzF,OAAM,IAAI,MAAM,4DAA4D;CAE9E,MAAM,WAAW,WAAW,UAAU,MAAM,OAAO,CAChD,OAAO,GAAG,MAAM,UAAU,GAAG,MAAM,iBAAiB,GAAG,MAAM,OAAO,CACpE,OAAO,SAAS;CACnB,MAAM,WAAW,MAAM,UAAU,MAAM,IAAI,CAAC,GAAG,GAAG,EAAE,MAAM,IAAI;CAC9D,MAAM,iBAAiB,OAAO,KAAK,SAAS;CAC5C,MAAM,iBAAiB,OAAO,KAAK,SAAS;AAC5C,KAAI,eAAe,WAAW,eAAe,UAAU,CAAC,gBAAgB,gBAAgB,eAAe,CACrG,OAAM,IAAI,MAAM,sCAAsC;AAExD,QAAO,KAAK,MAAM,MAAM,KAAK;;AAG/B,SAAgB,gCAAgC,SAAkB,WAMhE;CACA,MAAM,MAAM,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG,UAAqC,EAAE;CACvH,MAAM,WAAW,IAAI,YAAY,OAAO,IAAI,aAAa,YAAY,CAAC,MAAM,QAAQ,IAAI,SAAS,GAC7F,IAAI,WACJ,EAAE;CACN,MAAM,OAAO,IAAI,QAAQ,OAAO,IAAI,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,KAAK,GAC7E,IAAI,OACJ,EAAE;CACN,MAAM,gBAAgB,SAAS,WAAW,OAAO,SAAS,YAAY,YAAY,CAAC,MAAM,QAAQ,SAAS,QAAQ,GAC9G,SAAS,UACT,EAAE;AACN,QAAO;EACL,IAAI,aAAa,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,SAAS,IAAI,OAAO,YAAY;EACzF,MAAM,WAAW,IAAI,KAAK,IAAI;EAC9B,SAAS,WAAW,SAAS,gBAAgB,cAAc,QAAQ,IAAI,WAAW,IAAI,aAAa;EACnG,SAAS,WAAW,SAAS,gBAAgB,IAAI,WAAW,IAAI,eAAe,IAAI,aAAa;EAChG;EACD;;AAGH,SAAgB,sCAAsC,SAAwB;CAC5E,MAAM,aAAa,gCAAgC,QAAQ;AAC3D,KAAI,WAAW,SAAS,wCAAwC,WAAW,SAAS,qCAAsC;CAC1H,MAAM,uBAAuB,WAAW,WAAW,KAAK,MAAM,WAAW,KAAK,UAAU,WAAW,KAAK,qBAAqB;AAC7H,KAAI,CAAC,qBAAsB;CAC3B,MAAM,aAAa,0BAA0B,CAAC,MAAM,cAClD,UAAU,aAAa,cAAc,UAAU,yBAAyB,qBACxE;AACF,KAAI,CAAC,WAAY;AACjB,2BAA0B;EACxB,GAAG;EACH,QAAQ,WAAW,KAAK,SAAS,WAAW,GAAG,YAAY;EAC3D,WAAW;EACX,WAAW,WAAW,KAAK,SAAS,WAAW,GAAG,wCAAwC;EAC3F,CAAC;;AAGJ,eAAsB,2BAA2B,QAAgB,SAAwD;CACvH,MAAM,SAAS,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG,UAAqC,EAAE;CAC1H,MAAM,aAAa,gCAAgC,QAAQ;CAC3D,MAAM,QAAqC;EACzC,qBAAI,IAAI,MAAM,EAAC,aAAa;EAC5B,IAAI,WAAW;EACf,SAAS,WAAW,WAAW,WAAW,OAAO,WAAW,OAAO,SAAS;EAC5E,SAAS,WAAW,WAAW,WAAW;EAC1C;EACD;CACD,MAAM,OAAO,YAAY,OAAO;AAChC,OAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;CAE/C,MAAM,YAAW,MADI,0BAA0B,QAAQ,IAAI,EACnC,MAAM,cAAc,UAAU,OAAO,MAAM,GAAG;AACtE,KAAI,SAAU,QAAO;AACrB,OAAM,WAAW,MAAM,GAAG,KAAK,UAAU,MAAM,CAAC,KAAK,OAAO;AAC5D,QAAO;;AAGT,eAAsB,0BAA0B,QAAgB,QAAQ,IAA4C;AAGlH,SAAO,MADY,SADN,YAAY,OACO,EAAE,OAAO,CAAC,YAAY,GAAG,EAEtD,MAAM,KAAK,CACX,OAAO,QAAQ,CACf,MAAM,CAAC,KAAK,IAAI,GAAG,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC,CACzC,KAAK,SAAS,KAAK,MAAM,KAAK,CAAgC,CAC9D,SAAS"}