@xopcai/xopc 0.0.306 → 0.0.307

package/dist/src/connectors/china-catalog.js

@@ -0,0 +1,430 @@
+//#region src/connectors/china-catalog.ts
+const FEISHU_MCP_VERSION = "0.5.1";
+const DINGTALK_MCP_VERSION = "1.1.21";
+const CHINA_CONNECTORS = [
+	{
+		id: "feishu-workspace",
+		version: FEISHU_MCP_VERSION,
+		displayName: "飞书办公",
+		description: "连接飞书文档、知识库、日历、消息和多维表格。",
+		category: "docs",
+		kind: "mcp",
+		source: "builtin",
+		capabilities: [
+			"tools",
+			"runtime.mcp.stdio",
+			"auth.apiKey"
+		],
+		benefits: ["understand", "act"],
+		tags: [
+			"中国",
+			"飞书",
+			"文档",
+			"知识库",
+			"日历",
+			"多维表格"
+		],
+		branding: {
+			logoUrl: "/channel-icons/feishu.svg",
+			source: "builtin"
+		},
+		verificationLevel: "verified",
+		auth: { mode: "apiKey" },
+		setup: {
+			links: [{
+				label: "前往飞书开放平台创建应用",
+				href: "https://open.feishu.cn/app",
+				external: true
+			}],
+			secrets: [{
+				key: "appId",
+				label: "App ID",
+				description: "在飞书开放平台的应用凭证页复制。",
+				required: true
+			}, {
+				key: "appSecret",
+				label: "App Secret",
+				description: "与 App ID 同一凭证页，仅保存在本机凭据存储。",
+				required: true
+			}],
+			config: [{
+				key: "tools",
+				label: "启用工具",
+				type: "string",
+				required: true,
+				defaultValue: "preset.light",
+				description: "飞书 MCP 工具预设或逗号分隔的工具列表。"
+			}]
+		},
+		runtime: {
+			type: "mcp",
+			serverId: "feishu_workspace",
+			localPackage: {
+				registry: "npm",
+				name: "@larksuiteoapi/lark-mcp",
+				version: FEISHU_MCP_VERSION
+			},
+			serverTemplate: {
+				command: "npx",
+				args: [
+					"-y",
+					`@larksuiteoapi/lark-mcp@${FEISHU_MCP_VERSION}`,
+					"mcp"
+				],
+				env: {
+					APP_ID: "{{secrets.appId}}",
+					APP_SECRET: "{{secrets.appSecret}}",
+					LARK_TOOLS: "{{config.tools}}",
+					LARK_DOMAIN: "https://open.feishu.cn",
+					LARK_TOKEN_MODE: "auto"
+				}
+			}
+		},
+		permissions: {
+			data: [
+				"documents",
+				"communications",
+				"calendar"
+			],
+			networkDomains: ["open.feishu.cn"],
+			localExec: true,
+			filesystem: []
+		},
+		integrationStrategy: {
+			lane: "mcp",
+			workload: "core",
+			preferred: true
+		}
+	},
+	{
+		id: "dingtalk-workspace",
+		version: DINGTALK_MCP_VERSION,
+		displayName: "钉钉办公",
+		description: "连接钉钉通讯录、待办、日历、机器人和工作通知。",
+		category: "automation",
+		kind: "mcp",
+		source: "builtin",
+		capabilities: [
+			"tools",
+			"runtime.mcp.stdio",
+			"auth.apiKey"
+		],
+		benefits: ["act", "reach"],
+		tags: [
+			"中国",
+			"钉钉",
+			"通讯录",
+			"待办",
+			"日历",
+			"机器人"
+		],
+		branding: {
+			logoUrl: "/connector-icons/dingtalk-mark.svg",
+			source: "builtin"
+		},
+		verificationLevel: "verified",
+		auth: { mode: "apiKey" },
+		setup: {
+			links: [{
+				label: "前往钉钉开发者后台创建应用",
+				href: "https://open-dev.dingtalk.com/fe/app",
+				external: true
+			}],
+			secrets: [{
+				key: "clientId",
+				label: "Client ID",
+				description: "在钉钉应用的凭证与基础信息页复制。",
+				required: true
+			}, {
+				key: "clientSecret",
+				label: "Client Secret",
+				description: "与 Client ID 同一页面，仅保存在本机凭据存储。",
+				required: true
+			}],
+			config: [{
+				key: "activeProfiles",
+				label: "启用服务",
+				type: "string",
+				required: true,
+				defaultValue: "dingtalk-contacts,dingtalk-calendar,dingtalk-todo,dingtalk-robot",
+				description: "逗号分隔的钉钉 MCP 服务列表。"
+			}]
+		},
+		runtime: {
+			type: "mcp",
+			serverId: "dingtalk_workspace",
+			localPackage: {
+				registry: "npm",
+				name: "dingtalk-mcp",
+				version: DINGTALK_MCP_VERSION
+			},
+			serverTemplate: {
+				command: "npx",
+				args: ["-y", `dingtalk-mcp@${DINGTALK_MCP_VERSION}`],
+				env: {
+					DINGTALK_Client_ID: "{{secrets.clientId}}",
+					DINGTALK_Client_Secret: "{{secrets.clientSecret}}",
+					ACTIVE_PROFILES: "{{config.activeProfiles}}"
+				}
+			}
+		},
+		permissions: {
+			data: [
+				"contacts",
+				"communications",
+				"calendar",
+				"tasks"
+			],
+			networkDomains: ["api.dingtalk.com", "oapi.dingtalk.com"],
+			localExec: true,
+			filesystem: []
+		},
+		integrationStrategy: {
+			lane: "mcp",
+			workload: "core",
+			preferred: true
+		}
+	},
+	{
+		id: "wps-cloud-docs",
+		version: "2.0.0",
+		displayName: "WPS 365 云文档",
+		description: "通过 WPS 官方 MCP 搜索云文档、读取内容与评论并管理分享权限。",
+		category: "docs",
+		kind: "mcp",
+		source: "builtin",
+		capabilities: [
+			"tools",
+			"runtime.mcp.streamableHttp",
+			"auth.apiKey"
+		],
+		benefits: ["understand", "act"],
+		tags: [
+			"中国",
+			"WPS",
+			"云文档",
+			"知识库"
+		],
+		branding: {
+			logoUrl: "/connector-icons/wps-docs.svg",
+			source: "builtin"
+		},
+		verificationLevel: "verified",
+		auth: { mode: "apiKey" },
+		setup: {
+			links: [{
+				label: "查看 WPS 用户 Access Token 获取流程",
+				href: "https://open.wps.cn/documents/app-integration-dev/wps365/server/certification-authorization/user-authorization/flow",
+				external: true
+			}],
+			secrets: [{
+				key: "accessToken",
+				label: "用户 Access Token",
+				description: "需先创建 WPS 开放平台应用并完成用户授权。",
+				required: true
+			}]
+		},
+		runtime: {
+			type: "mcp",
+			serverId: "wps_cloud_docs",
+			serverTemplate: {
+				url: "https://openapi.wps.cn/mcp/v2/kso-yundoc/message",
+				transport: "streamable-http",
+				headers: { Authorization: "Bearer {{secrets.accessToken}}" }
+			}
+		},
+		permissions: {
+			data: ["documents"],
+			networkDomains: ["openapi.wps.cn"],
+			localExec: false,
+			filesystem: []
+		},
+		integrationStrategy: {
+			lane: "mcp",
+			workload: "core",
+			preferred: true
+		}
+	},
+	{
+		id: "tencent-meeting",
+		version: "1.0.0",
+		displayName: "腾讯会议",
+		description: "通过腾讯会议官方 MCP 查询、创建和管理个人会议。",
+		category: "automation",
+		kind: "mcp",
+		source: "builtin",
+		capabilities: [
+			"tools",
+			"runtime.mcp.streamableHttp",
+			"auth.apiKey"
+		],
+		benefits: ["understand", "act"],
+		tags: [
+			"中国",
+			"腾讯会议",
+			"会议",
+			"日程"
+		],
+		branding: {
+			logoUrl: "/connector-icons/tencent-meeting-mark.svg",
+			source: "builtin"
+		},
+		verificationLevel: "beta",
+		auth: { mode: "apiKey" },
+		setup: {
+			links: [{
+				label: "前往腾讯会议 MCP 获取说明",
+				href: "https://meeting.tencent.com/support/topic/2233/index.html",
+				external: true
+			}],
+			secrets: [{
+				key: "token",
+				label: "腾讯会议 MCP Token",
+				description: "目前个人账号可直接获取，企业账号需申请灰度。",
+				required: true
+			}]
+		},
+		runtime: {
+			type: "mcp",
+			serverId: "tencent_meeting",
+			serverTemplate: {
+				url: "https://mcp.meeting.tencent.com/mcp",
+				transport: "streamable-http",
+				headers: { "X-Tencent-Meeting-Token": "{{secrets.token}}" }
+			}
+		},
+		permissions: {
+			data: ["calendar", "meeting_records"],
+			networkDomains: ["mcp.meeting.tencent.com"],
+			localExec: false,
+			filesystem: []
+		},
+		integrationStrategy: {
+			lane: "mcp",
+			workload: "core",
+			preferred: true
+		}
+	},
+	{
+		id: "wps-calendar",
+		version: "2.0.0",
+		displayName: "WPS 365 日历",
+		description: "通过 WPS 官方 MCP 查询日程、管理参与人并创建会议安排。",
+		category: "automation",
+		kind: "mcp",
+		source: "builtin",
+		capabilities: [
+			"tools",
+			"runtime.mcp.streamableHttp",
+			"auth.apiKey"
+		],
+		benefits: ["understand", "act"],
+		tags: [
+			"中国",
+			"WPS",
+			"日历",
+			"日程"
+		],
+		branding: {
+			logoUrl: "/connector-icons/wps-calendar.svg",
+			source: "builtin"
+		},
+		verificationLevel: "verified",
+		auth: { mode: "apiKey" },
+		setup: {
+			links: [{
+				label: "查看 WPS 用户 Access Token 获取流程",
+				href: "https://open.wps.cn/documents/app-integration-dev/wps365/server/certification-authorization/user-authorization/flow",
+				external: true
+			}],
+			secrets: [{
+				key: "accessToken",
+				label: "用户 Access Token",
+				description: "需先创建 WPS 开放平台应用并完成用户授权。",
+				required: true
+			}]
+		},
+		runtime: {
+			type: "mcp",
+			serverId: "wps_calendar",
+			serverTemplate: {
+				url: "https://openapi.wps.cn/mcp/v2/kso-calendar/message",
+				transport: "streamable-http",
+				headers: { Authorization: "Bearer {{secrets.accessToken}}" }
+			}
+		},
+		permissions: {
+			data: ["calendar"],
+			networkDomains: ["openapi.wps.cn"],
+			localExec: false,
+			filesystem: []
+		},
+		integrationStrategy: {
+			lane: "mcp",
+			workload: "core",
+			preferred: true
+		}
+	},
+	{
+		id: "wps-mail",
+		version: "2.0.0",
+		displayName: "WPS 365 邮箱",
+		description: "通过 WPS 官方 MCP 搜索邮件、读取邮件并创建或发送草稿。",
+		category: "automation",
+		kind: "mcp",
+		source: "builtin",
+		capabilities: [
+			"tools",
+			"runtime.mcp.streamableHttp",
+			"auth.apiKey"
+		],
+		benefits: ["understand", "act"],
+		tags: [
+			"中国",
+			"WPS",
+			"邮箱",
+			"邮件"
+		],
+		branding: {
+			logoUrl: "/connector-icons/wps-mail.svg",
+			source: "builtin"
+		},
+		verificationLevel: "verified",
+		auth: { mode: "apiKey" },
+		setup: {
+			links: [{
+				label: "查看 WPS 用户 Access Token 获取流程",
+				href: "https://open.wps.cn/documents/app-integration-dev/wps365/server/certification-authorization/user-authorization/flow",
+				external: true
+			}],
+			secrets: [{
+				key: "accessToken",
+				label: "用户 Access Token",
+				description: "需先创建 WPS 开放平台应用并完成用户授权。",
+				required: true
+			}]
+		},
+		runtime: {
+			type: "mcp",
+			serverId: "wps_mail",
+			serverTemplate: {
+				url: "https://openapi.wps.cn/mcp/v2/kso-mail/message",
+				transport: "streamable-http",
+				headers: { Authorization: "Bearer {{secrets.accessToken}}" }
+			}
+		},
+		permissions: {
+			data: ["email"],
+			networkDomains: ["openapi.wps.cn"],
+			localExec: false,
+			filesystem: []
+		},
+		integrationStrategy: {
+			lane: "mcp",
+			workload: "core",
+			preferred: true
+		}
+	}
+];
+//#endregion
+export { CHINA_CONNECTORS };

package/dist/src/connectors/composio-backends.d.ts

@@ -0,0 +1,26 @@
+import { CredentialResolver } from '../auth/credentials.js';
+export type ComposioBackend = {
+    id: string;
+    mode: 'managed' | 'byok';
+    label: string;
+    credential_ref: string | null;
+    credential_source: 'stored' | 'environment';
+    verified_at: string | null;
+    active: number;
+    created_at: string;
+};
+export declare function listComposioBackends(): ComposioBackend[];
+export declare function getComposioBackend(id?: string): ComposioBackend | undefined;
+export declare function addComposioBackend(input: {
+    id?: string;
+    mode: 'managed' | 'byok';
+    label: string;
+    credentialRef?: string;
+    credentialSource?: 'stored' | 'environment';
+}): ComposioBackend;
+export declare function activateComposioBackend(id: string): void;
+export declare function removeComposioBackend(id: string, resolver?: CredentialResolver): Promise<void>;
+/** Bootstrap once; subsequent routing always uses the explicitly selected backend. */
+export declare function ensureComposioBackend(resolver?: CredentialResolver): Promise<ComposioBackend>;
+export declare function resolveBackendKey(backend: ComposioBackend, resolver?: CredentialResolver): Promise<string | null>;
+export declare function markComposioBackendVerified(id: string): void;

package/dist/src/connectors/composio-backends.js

@@ -0,0 +1,65 @@
+import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { randomUUID } from "node:crypto";
+//#region src/connectors/composio-backends.ts
+init_credentials();
+init_transaction();
+function listComposioBackends() {
+	return getSqliteDatabase().prepare("SELECT * FROM connector_backends ORDER BY created_at").all();
+}
+function getComposioBackend(id) {
+	return id ? getSqliteDatabase().prepare("SELECT * FROM connector_backends WHERE id = ?").get(id) : getSqliteDatabase().prepare("SELECT * FROM connector_backends WHERE active = 1").get();
+}
+function addComposioBackend(input) {
+	const id = input.id ?? randomUUID();
+	getSqliteDatabase().prepare(`INSERT INTO connector_backends(id, mode, label, credential_ref, credential_source, created_at)
+    VALUES (?, ?, ?, ?, ?, ?)`).run(id, input.mode, input.label, input.credentialRef ?? null, input.credentialSource ?? "stored", (/* @__PURE__ */ new Date()).toISOString());
+	return getComposioBackend(id);
+}
+function activateComposioBackend(id) {
+	if (!getComposioBackend(id)) throw new Error("Connection service not found.");
+	runSqliteWriteTransaction((db) => {
+		db.prepare("UPDATE connector_backends SET active = 0 WHERE active = 1").run();
+		db.prepare("UPDATE connector_backends SET active = 1 WHERE id = ?").run(id);
+	});
+}
+async function removeComposioBackend(id, resolver = new CredentialResolver()) {
+	const backend = getComposioBackend(id);
+	if (!backend) throw new Error("Connection service not found.");
+	if (backend.active) throw new Error("Select another connection service before removing this one.");
+	if (getSqliteDatabase().prepare(`SELECT 1 FROM connector_connections c JOIN connector_accounts a ON a.id = c.account_id
+    WHERE a.backend_id = ? AND c.status NOT IN ('revoked') LIMIT 1`).get(id)) throw new Error("Disconnect the accounts using this service before removing its credentials.");
+	if (backend.credential_ref && backend.credential_source === "stored") await resolver.deleteProviderCredential(backend.credential_ref);
+	getSqliteDatabase().prepare("DELETE FROM connector_backends WHERE id = ?").run(id);
+}
+/** Bootstrap once; subsequent routing always uses the explicitly selected backend. */
+async function ensureComposioBackend(resolver = new CredentialResolver()) {
+	const existing = getComposioBackend();
+	if (existing) return existing;
+	const storedKey = await resolver.resolveApiKey("connector-composio-api-key").catch(() => null);
+	const envRef = process.env.XOPC_COMPOSIO_API_KEY?.trim() ? "XOPC_COMPOSIO_API_KEY" : process.env.COMPOSIO_API_KEY?.trim() ? "COMPOSIO_API_KEY" : void 0;
+	const key = storedKey || (envRef ? process.env[envRef] : void 0);
+	const initialized = getComposioBackend();
+	if (initialized) return initialized;
+	const backend = addComposioBackend({
+		mode: key ? "byok" : "managed",
+		label: key ? "Composio" : "XOPC Cloud",
+		credentialRef: storedKey ? "connector-composio-api-key" : envRef,
+		credentialSource: !storedKey && envRef ? "environment" : "stored"
+	});
+	getSqliteDatabase().prepare("UPDATE connector_accounts SET backend_id = ? WHERE backend_id IS NULL").run(backend.id);
+	activateComposioBackend(backend.id);
+	return getComposioBackend(backend.id);
+}
+async function resolveBackendKey(backend, resolver = new CredentialResolver()) {
+	if (backend.mode === "managed") return null;
+	if (backend.credential_source === "environment") return backend.credential_ref ? process.env[backend.credential_ref]?.trim() || null : null;
+	const key = backend.credential_ref ? await resolver.resolveApiKey(backend.credential_ref) : null;
+	if (key?.trim()) return key.trim();
+	return null;
+}
+function markComposioBackendVerified(id) {
+	getSqliteDatabase().prepare("UPDATE connector_backends SET verified_at = ? WHERE id = ?").run((/* @__PURE__ */ new Date()).toISOString(), id);
+}
+//#endregion
+export { activateComposioBackend, addComposioBackend, ensureComposioBackend, getComposioBackend, listComposioBackends, markComposioBackendVerified, removeComposioBackend, resolveBackendKey };

package/dist/src/connectors/composio-catalog.js

@@ -1,8 +1,9 @@
-import { listCachedConnectorCatalogEntries, replaceConnectorCatalogEntries } from "../storage/sqlite/connector-repository.js";
+import { init_connector_repository, listCachedConnectorCatalogEntries, replaceConnectorCatalogEntries } from "../storage/sqlite/connector-repository.js";
 import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { composioIntegrationStrategy } from "./integration-strategy.js";
 import { connectorUnderstandingCapability } from "./learning-recipes.js";
 //#region src/connectors/composio-catalog.ts
+init_connector_repository();
 const CATALOG_CACHE_TTL_MS = 360 * 60 * 1e3;
 const COMPOSIO_RECOMMENDED_TOOLKITS = [
 	"gmail",

package/dist/src/connectors/composio-managed-client.js

@@ -81,7 +81,9 @@ var ManagedComposioClient = class {
 				return { toolSchemas: Object.assign({}, ...results.map((result) => result.toolSchemas ?? {})) };
 			},
 			execute: async (toolSlug, args = {}, options) => {
-				const selected = options?.account ?? connectedAccounts[toolkit()]?.[0];
+				const candidates = connectedAccounts[toolkit()] ?? [];
+				const selected = options?.account ?? (candidates.length === 1 ? candidates[0] : void 0);
+				if (!selected) throw new Error("Select one account explicitly before executing a connected app tool.");
 				return (await this.request({
 					path: "/connectors/composio/execute",
 					method: "POST",

package/dist/src/connectors/composio-managed-events.js

@@ -2,7 +2,7 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, releaseConnectorWebhookDelivery } from "../storage/sqlite/connector-repository.js";
 import "../storage/sqlite/index.js";
-import { resolveComposioApiKey } from "./composio-sessions.js";
+import { ensureComposioBackend, listComposioBackends } from "./composio-backends.js";
 import { ManagedComposioClient } from "./composio-managed-client.js";
 import { appendComposioTriggerEvent, applyComposioConnectionLifecycleEvent, normalizeComposioTriggerPayload } from "./composio-triggers.js";
 import { createHash } from "node:crypto";
@@ -43,7 +43,10 @@ var ManagedComposioEventPoller = class {
 	}
 	async runSync() {
 		const config = this.input.getConfig();
-		const hasByok = this.input.hasByok ?? (async () => Boolean(await resolveComposioApiKey()));
+		const hasByok = this.input.hasByok ?? (async () => {
+			await ensureComposioBackend();
+			return !listComposioBackends().some((backend) => backend.mode === "managed");
+		});
 		if (!hasInstalledComposioToolkit(config) || await hasByok()) return;
 		const client = this.input.client ?? new ManagedComposioClient();
 		try {

package/dist/src/connectors/composio-session-types.d.ts

@@ -54,6 +54,7 @@ export type ComposioSessionLike = {
     }): Promise<unknown>;
 };
 export type ComposioSessionsClient = {
+    backendId?: string;
     mode?: 'managed' | 'byok';
     sessions: {
         create(userId: string, config?: ToolRouterCreateSessionConfig): Promise<ComposioSessionLike>;
@@ -62,6 +63,7 @@ export type ComposioSessionsClient = {
         list(query?: {
             userIds?: string[];
             toolkitSlugs?: string[];
+            cursor?: string;
         }): Promise<unknown>;
         delete(id: string): Promise<unknown>;
         refresh(id: string): Promise<unknown>;

package/dist/src/connectors/composio-sessions.d.ts

@@ -12,6 +12,7 @@ export type ComposioToolkitCatalogItem = {
     providerConnectionId?: string;
 };
 export type ComposioAuthorizeResult = {
+    attemptId: string;
     toolkit: string;
     connectionId: string;
     connectUrl?: string;
@@ -19,6 +20,7 @@ export type ComposioAuthorizeResult = {
 };
 export type { ComposioAuthConfigOption, ComposioSessionLike, ComposioSessionsClient, ComposioToolkitAuthState, } from './composio-session-types.js';
 export type ComposioSessionContext = {
+    backendId?: string;
     principalId: string;
     installationScope?: string;
     providerPrincipalId?: string;
@@ -27,15 +29,18 @@ export type ComposioSessionContext = {
     connectedAccounts?: Record<string, string[]>;
     callbackUrl?: string;
 };
-type ClientFactory = () => Promise<ComposioSessionsClient>;
+type ClientFactory = (backendId?: string) => Promise<ComposioSessionsClient>;
 /** Convert local identities to stable opaque Composio user IDs without disclosing user data. */
 export declare function createComposioPrincipalId(principalId: string, installationScope?: string): string;
 export declare class ComposioSessionsAdapter {
     private readonly createClient;
+    private readonly injectedClient;
+    private readonly resolver;
     constructor(options?: {
         resolver?: CredentialResolver;
         clientFactory?: ClientFactory;
         fileDownloadDir?: string;
+        apiKey?: string;
     });
     createSession(context: ComposioSessionContext): Promise<ComposioSessionLike>;
     getToolkitAuthState(toolkit: string): Promise<ComposioToolkitAuthState>;
@@ -45,8 +50,12 @@ export declare class ComposioSessionsAdapter {
         authConfigId?: string;
         installationId?: string;
         alias?: string;
+        expectedAccountId?: string;
     }): Promise<ComposioAuthorizeResult>;
-    syncConnections(context: Pick<ComposioSessionContext, 'principalId' | 'installationScope'>): Promise<ConnectorConnection[]>;
+    /** Verify a replacement credential without changing local authorizations. */
+    verifyConnections(connections: ConnectorConnection[]): Promise<void>;
+    private listAllAccounts;
+    syncConnections(context: Pick<ComposioSessionContext, 'principalId' | 'installationScope' | 'backendId'>): Promise<ConnectorConnection[]>;
     revokeConnection(connection: ConnectorConnection): Promise<void>;
     refreshConnection(connection: ConnectorConnection): Promise<ConnectorConnection>;
     executeWithPolicy(input: {