@xopcai/xopc 0.0.306 → 0.0.307

package/dist/src/storage/sqlite/connection-wait-repository.js

@@ -6,6 +6,9 @@ import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "
 import { init_session_instance_repository, readCurrentTranscriptId } from "./session-instance-repository.js";
 import { bumpSessionInputRevision, getSessionInputById, getSessionInputState, init_session_input_repository, insertSessionInput, setSessionInputStatus } from "./session-input-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
+import { getConnectorAccount, init_connector_account_repository } from "./connector-account-repository.js";
+import { getConnectorConnection, init_connector_repository } from "./connector-repository.js";
+import { getSessionMetadata, init_session_repository } from "./session-repository.js";
 import { randomUUID } from "node:crypto";
 import { EventEmitter } from "node:events";
 //#region src/storage/sqlite/connection-wait-repository.ts
@@ -222,9 +225,64 @@ function consumeConnectionResume(input) {
 }
 function connectionBindings(conversationId) {
 	if (!isXopcDatabaseOpen()) return [];
+	let metadata = getSessionMetadata(conversationId);
+	if (metadata?.sessionType === "workflow-subagent" && metadata.parentConversationId) metadata = getSessionMetadata(metadata.parentConversationId);
+	const workflowAccounts = metadata?.sessionType === "workflow-run" ? metadata.customData?.connectorAccounts : void 0;
+	if (workflowAccounts && typeof workflowAccounts === "object" && !Array.isArray(workflowAccounts)) return Object.entries(workflowAccounts).flatMap(([connectorId, ids]) => Array.isArray(ids) ? ids.flatMap((id) => {
+		if (typeof id !== "string") return [];
+		const account = getConnectorAccount(id);
+		return [{
+			key: `${connectorId}:${id}`,
+			connectorId,
+			accountId: id,
+			connectionId: account?.currentConnectionId,
+			label: account?.label ?? connectorId,
+			capabilities: []
+		}];
+	}) : []);
 	const state = getSessionInputState(conversationId);
 	const input = state.activeInputId ? getSessionInputById(conversationId, state.activeInputId) : void 0;
-	return input?.payload ? getConnectionWait(input.payload.waitId)?.needs ?? [] : [];
+	if (!input) return [];
+	const wait = input.payload ? getConnectionWait(input.payload.waitId) : void 0;
+	const stored = getSqliteDatabase().prepare(`SELECT connector_id, account_id FROM connector_objective_accounts
+    WHERE conversation_id = ? AND transcript_id = ? AND objective_id = ?`).all(conversationId, readCurrentTranscriptId(getSqliteDatabase(), conversationId) ?? "", wait?.objectiveId ?? input.id);
+	return (wait?.needs ?? stored.map((row) => ({
+		key: `${row.connector_id}:${row.account_id}`,
+		connectorId: row.connector_id,
+		accountId: row.account_id,
+		label: getConnectorAccount(row.account_id)?.label ?? row.connector_id,
+		capabilities: []
+	}))).map((need) => {
+		const accountId = need.accountId ?? (need.connectionId ? getConnectorConnection(need.connectionId)?.accountId : void 0);
+		const account = accountId ? getConnectorAccount(accountId) : void 0;
+		return {
+			...need,
+			accountId,
+			connectionId: account?.currentConnectionId ?? need.connectionId
+		};
+	});
+}
+/** Changes to the objective or transcript invalidate an outstanding action approval. */
+function connectorObjectiveScope(conversationId) {
+	const state = getSessionInputState(conversationId);
+	const input = state.activeInputId ? getSessionInputById(conversationId, state.activeInputId) : void 0;
+	if (!input) return void 0;
+	const active = getActiveConnectionWait(conversationId);
+	const wait = input.payload ? getConnectionWait(input.payload.waitId) : active?.originInputId === input.id ? active : void 0;
+	return JSON.stringify([
+		readCurrentTranscriptId(getSqliteDatabase(), conversationId),
+		wait?.objectiveId ?? input.id,
+		wait?.objectiveRevision ?? 0
+	]);
+}
+function bindObjectiveAccount(conversationId, connectorId, accountId) {
+	const db = getSqliteDatabase();
+	const state = getSessionInputState(conversationId);
+	const input = state.activeInputId ? getSessionInputById(conversationId, state.activeInputId) : void 0;
+	if (!input) return;
+	const wait = input.payload ? getConnectionWait(input.payload.waitId) : void 0;
+	db.prepare(`INSERT OR IGNORE INTO connector_objective_accounts
+    (conversation_id, transcript_id, objective_id, connector_id, account_id) VALUES (?, ?, ?, ?, ?)`).run(conversationId, readCurrentTranscriptId(db, conversationId) ?? "", wait?.objectiveId ?? input.id, connectorId, accountId);
 }
 function connectionBinding(conversationId, connectorId) {
 	const matches = connectionBindings(conversationId).filter((need) => need.connectorId === connectorId);
@@ -334,15 +392,18 @@ function listConnectionWaitsToCheck() {
 }
 var log, events;
 var init_connection_wait_repository = __esmMin((() => {
+	init_connector_account_repository();
+	init_connector_repository();
 	init_logger();
 	init_task_run_repository();
 	init_connection();
 	init_transaction();
 	init_session_instance_repository();
+	init_session_repository();
 	init_session_input_repository();
 	log = createLogger("Connectors:Wait");
 	events = new EventEmitter();
 }));
 //#endregion
 init_connection_wait_repository();
-export { cancelConnectionObjective, connectionBinding, connectionBindings, consumeConnectionResume, getActiveConnectionWait, getConnectionResumeInput, getConnectionWait, init_connection_wait_repository, invalidateConnectionResumeIntent, isConnectionSuspended, listConnectionWaitsToCheck, onConnectionWaitChanged, publishConnectionWait, queueConnectionResolution, requireSessionConnection, reviseCurrentConnectionObjective, updateConnectionWait };
+export { bindObjectiveAccount, cancelConnectionObjective, connectionBinding, connectionBindings, connectorObjectiveScope, consumeConnectionResume, getActiveConnectionWait, getConnectionResumeInput, getConnectionWait, init_connection_wait_repository, invalidateConnectionResumeIntent, isConnectionSuspended, listConnectionWaitsToCheck, onConnectionWaitChanged, publishConnectionWait, queueConnectionResolution, requireSessionConnection, reviseCurrentConnectionObjective, updateConnectionWait };

package/dist/src/storage/sqlite/connector-account-repository.d.ts

@@ -1,5 +1,10 @@
 import type { ConnectorAccount } from '../../connectors/types.js';
 export declare function getConnectorAccount(id: string): ConnectorAccount | undefined;
+export declare function updateConnectorAccount(id: string, patch: {
+    label?: string;
+    enabled?: boolean;
+    allowedAgentIds?: string[] | null;
+}): ConnectorAccount;
 export declare function listConnectorAccounts(options?: {
     principalId?: string;
     connectorId?: string;
@@ -7,6 +12,7 @@ export declare function listConnectorAccounts(options?: {
 export declare function refreshConnectorAccountCurrent(accountId: string): ConnectorAccount | undefined;
 export declare function reconcileConnectorAccount(input: {
     connectionId: string;
+    backendId?: string;
     identityKey: string;
     identity: Record<string, unknown>;
 }): ConnectorAccount;

package/dist/src/storage/sqlite/connector-account-repository.js

@@ -1,6 +1,6 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
 //#region src/storage/sqlite/connector-account-repository.ts
-init_transaction();
 function parseIdentity(value) {
 	try {
 		const parsed = JSON.parse(value);
@@ -15,8 +15,12 @@ function fromRow(row) {
 		connectorId: row.connector_id,
 		principalId: row.principal_id,
 		identityKey: row.identity_key ?? void 0,
+		backendId: row.backend_id ?? void 0,
 		identity: parseIdentity(row.identity_json),
 		currentConnectionId: row.current_connection_id ?? void 0,
+		label: row.label ?? void 0,
+		enabled: row.enabled === 1,
+		allowedAgentIds: row.allowed_agent_ids_json === null ? null : JSON.parse(row.allowed_agent_ids_json),
 		createdAt: row.created_at,
 		updatedAt: row.updated_at
 	};
@@ -74,6 +78,13 @@ function getConnectorAccount(id) {
 	const row = getSqliteDatabase().prepare("SELECT * FROM connector_accounts WHERE id = ?").get(id);
 	return row ? fromRow(row) : void 0;
 }
+function updateConnectorAccount(id, patch) {
+	const account = getConnectorAccount(id);
+	if (!account) throw new Error("Connector account not found.");
+	getSqliteDatabase().prepare(`UPDATE connector_accounts
+    SET label = ?, enabled = ?, allowed_agent_ids_json = ?, updated_at = ? WHERE id = ?`).run(patch.label === void 0 ? account.label ?? null : patch.label.trim() || null, patch.enabled ?? account.enabled ? 1 : 0, patch.allowedAgentIds === void 0 ? account.allowedAgentIds === null ? null : JSON.stringify(account.allowedAgentIds) : patch.allowedAgentIds === null ? null : JSON.stringify([...new Set(patch.allowedAgentIds)]), (/* @__PURE__ */ new Date()).toISOString(), id);
+	return getConnectorAccount(id);
+}
 function listConnectorAccounts(options = {}) {
 	const clauses = [];
 	const values = [];
@@ -109,13 +120,26 @@ function refreshConnectorAccountCurrent(accountId) {
 function reconcileConnectorAccount(input) {
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	return getConnectorAccount(runSqliteWriteTransaction((db) => {
-		const connection = db.prepare("SELECT account_id, connector_id, principal_id FROM connector_connections WHERE id = ?").get(input.connectionId);
+		const connection = db.prepare(`SELECT c.account_id, c.connector_id, c.principal_id, a.backend_id FROM connector_connections c
+       JOIN connector_accounts a ON a.id = c.account_id WHERE c.id = ?`).get(input.connectionId);
 		if (!connection?.account_id) throw new Error(`Connector connection not found: ${input.connectionId}`);
 		const targetId = db.prepare(`
       SELECT id FROM connector_accounts
-      WHERE principal_id = ? AND connector_id = ? AND identity_key = ?
-    `).get(connection.principal_id, connection.connector_id, input.identityKey)?.id ?? connection.account_id;
+      WHERE principal_id = ? AND connector_id = ? AND identity_key = ? AND backend_id IS ?
+    `).get(connection.principal_id, connection.connector_id, input.identityKey, input.backendId ?? connection.backend_id)?.id ?? connection.account_id;
 		if (targetId !== connection.account_id) {
+			db.prepare(`UPDATE connector_installations SET selected_account_ids_json = (
+        SELECT json_group_array(DISTINCT CASE WHEN value = ? THEN ? ELSE value END)
+        FROM json_each(connector_installations.selected_account_ids_json))
+        WHERE json_type(selected_account_ids_json) = 'array'
+        AND EXISTS (SELECT 1 FROM json_each(selected_account_ids_json) WHERE value = ?)`).run(connection.account_id, targetId, connection.account_id);
+			db.prepare(`INSERT OR IGNORE INTO connector_objective_accounts
+        SELECT conversation_id, transcript_id, objective_id, connector_id, ?
+        FROM connector_objective_accounts WHERE account_id = ?`).run(targetId, connection.account_id);
+			const source = getConnectorAccount(connection.account_id);
+			const target = getConnectorAccount(targetId);
+			const agents = source.allowedAgentIds === null ? target.allowedAgentIds : target.allowedAgentIds === null ? source.allowedAgentIds : target.allowedAgentIds.filter((id) => source.allowedAgentIds.includes(id));
+			db.prepare(`UPDATE connector_accounts SET enabled = ?, allowed_agent_ids_json = ?, label = COALESCE(label, ?) WHERE id = ?`).run(source.enabled && target.enabled ? 1 : 0, agents === null ? null : JSON.stringify(agents), source.label ?? null, targetId);
 			mergeAccountSourceData(db, connection.connector_id, connection.account_id, targetId);
 			if (db.prepare("SELECT 1 FROM connector_sync_policies WHERE account_id = ?").get(targetId)) db.prepare("DELETE FROM connector_sync_policies WHERE account_id = ?").run(connection.account_id);
 			else db.prepare("UPDATE connector_sync_policies SET account_id = ? WHERE account_id = ?").run(targetId, connection.account_id);
@@ -133,11 +157,15 @@ function reconcileConnectorAccount(input) {
 		if (!primary) throw new Error(`Connector account has no authorizations: ${targetId}`);
 		db.prepare(`
       UPDATE connector_accounts
-      SET identity_key = ?, identity_json = ?, current_connection_id = ?, updated_at = ?
+      SET identity_key = ?, identity_json = ?, current_connection_id = ?, updated_at = ?, backend_id = ?
       WHERE id = ?
-    `).run(input.identityKey, JSON.stringify(input.identity), primary.id, now, targetId);
+    `).run(input.identityKey, JSON.stringify(input.identity), primary.id, now, input.backendId ?? connection.backend_id, targetId);
 		return targetId;
 	}));
 }
+var init_connector_account_repository = __esmMin((() => {
+	init_transaction();
+}));
 //#endregion
-export { getConnectorAccount, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent };
+init_connector_account_repository();
+export { getConnectorAccount, init_connector_account_repository, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent, updateConnectorAccount };

package/dist/src/storage/sqlite/connector-repository.js

@@ -1,7 +1,7 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "./transaction.js";
 import { randomUUID } from "node:crypto";
 //#region src/storage/sqlite/connector-repository.ts
-init_transaction();
 function parseStringArray(value) {
 	try {
 		const parsed = JSON.parse(value);
@@ -27,7 +27,7 @@ function installationFromRow(row) {
 		allowedAgentIds: parseStringArray(row.allowed_agent_ids_json),
 		maxScope: row.max_scope,
 		confirmationPolicy: row.confirmation_policy,
-		selectedConnectionIds: parseStringArray(row.selected_connection_ids_json),
+		selectedAccountIds: row.selected_account_ids_json === "null" ? null : parseStringArray(row.selected_account_ids_json),
 		createdAt: row.created_at,
 		updatedAt: row.updated_at
 	};
@@ -101,6 +101,7 @@ function catalogFromRow(row) {
 function approvalFromRow(row) {
 	return {
 		id: row.id,
+		waitId: row.wait_id ?? void 0,
 		principalId: row.principal_id,
 		connectorId: row.connector_id,
 		connectionId: row.connection_id ?? void 0,
@@ -129,9 +130,9 @@ function createConnectorApproval(input) {
       INSERT INTO connector_approvals (
         id, principal_id, connector_id, connection_id, agent_id, conversation_id, action_id,
         scope, arguments_hash, arguments_preview_json, status, expires_at, created_at,
-        decided_at, consumed_at
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `).run(record.id, record.principalId, record.connectorId, record.connectionId ?? null, record.agentId ?? null, record.conversationId ?? null, record.actionId, record.scope, record.argumentsHash, JSON.stringify(record.argumentsPreview), record.status, record.expiresAt, record.createdAt, record.decidedAt ?? null, record.consumedAt ?? null);
+        decided_at, consumed_at, wait_id
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(record.id, record.principalId, record.connectorId, record.connectionId ?? null, record.agentId ?? null, record.conversationId ?? null, record.actionId, record.scope, record.argumentsHash, JSON.stringify(record.argumentsPreview), record.status, record.expiresAt, record.createdAt, record.decidedAt ?? null, record.consumedAt ?? null, record.waitId ?? null);
 	});
 	return record;
 }
@@ -223,7 +224,7 @@ function upsertConnectorInstallation(input) {
 		db.prepare(`
       INSERT INTO connector_installations (
         id, connector_id, principal_id, enabled, allowed_agent_ids_json, max_scope,
-        confirmation_policy, selected_connection_ids_json, created_at, updated_at
+        confirmation_policy, selected_account_ids_json, created_at, updated_at
       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       ON CONFLICT(id) DO UPDATE SET
         connector_id = excluded.connector_id,
@@ -232,9 +233,9 @@ function upsertConnectorInstallation(input) {
         allowed_agent_ids_json = excluded.allowed_agent_ids_json,
         max_scope = excluded.max_scope,
         confirmation_policy = excluded.confirmation_policy,
-        selected_connection_ids_json = excluded.selected_connection_ids_json,
+        selected_account_ids_json = excluded.selected_account_ids_json,
         updated_at = excluded.updated_at
-    `).run(input.id, input.connectorId, input.principalId, input.enabled ? 1 : 0, JSON.stringify(input.allowedAgentIds), input.maxScope, input.confirmationPolicy, JSON.stringify(input.selectedConnectionIds), input.createdAt ?? now, input.updatedAt ?? now);
+    `).run(input.id, input.connectorId, input.principalId, input.enabled ? 1 : 0, JSON.stringify(input.allowedAgentIds), input.maxScope, input.confirmationPolicy, JSON.stringify(input.selectedAccountIds), input.createdAt ?? now, input.updatedAt ?? now);
 		return getConnectorInstallation(input.id);
 	});
 }
@@ -251,7 +252,7 @@ function deleteConnectorInstallation(id) {
 function upsertConnectorConnection(input) {
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	return runSqliteWriteTransaction((db) => {
-		const accountId = input.accountId ?? `account:${input.id}`;
+		const accountId = db.prepare("SELECT account_id FROM connector_connections WHERE id = ?").get(input.id)?.account_id ?? input.accountId ?? `account:${input.id}`;
 		db.prepare(`
       INSERT INTO connector_accounts (
         id, connector_id, principal_id, identity_json, current_connection_id, created_at, updated_at
@@ -400,5 +401,9 @@ function releaseConnectorWebhookDelivery(id, error) {
     `).run(message.slice(0, 500), id);
 	});
 }
+var init_connector_repository = __esmMin((() => {
+	init_transaction();
+}));
 //#endregion
-export { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation };
+init_connector_repository();
+export { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation };

package/dist/src/storage/sqlite/connector-sync-policy-repository.js

@@ -53,7 +53,7 @@ function upsertConnectorSyncPolicy(input) {
         interval_minutes = excluded.interval_minutes,
         allowed_scenario_keys_json = excluded.allowed_scenario_keys_json,
         revision = connector_sync_policies.revision + 1,
-        updated_at = excluded.updated_at`).run(input.accountId, input.scanEnabled ?? current?.scanEnabled ?? true ? 1 : 0, input.proactiveEnabled ?? current?.proactiveEnabled ?? false ? 1 : 0, intervalMinutes, JSON.stringify(allowedScenarioKeys), now);
+        updated_at = excluded.updated_at`).run(input.accountId, input.scanEnabled ?? current?.scanEnabled ?? false ? 1 : 0, input.proactiveEnabled ?? current?.proactiveEnabled ?? false ? 1 : 0, intervalMinutes, JSON.stringify(allowedScenarioKeys), now);
 	});
 	return getConnectorSyncPolicy(input.accountId);
 }

package/dist/src/storage/sqlite/index.js

@@ -28,6 +28,8 @@ import { COMPOSER_INPUT_HISTORY_LIMIT, appendComposerInputHistory, clearComposer
 import { bindEndpointPrincipal, createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal, touchEndpointPrincipal } from "./endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, listEndpointToolInvocationAudits, startEndpointToolInvocationAudit } from "./endpoint-tool-invocation-repository.js";
 import { getInteractionState, setInteractionState, updateInteractionStateFromMessage } from "./interaction-state-repository.js";
+import { getConnectorAccount, init_connector_account_repository, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
+import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation } from "./connector-repository.js";
 import { deleteSessionRecord, ensureSessionRecord, findConversationIdByTranscriptId, getCurrentTranscriptId, getGlobalSessionStats, getSessionMetadata, getSessionPersistedLevels, incrementSessionStatsOnAppend, init_session_repository, listSessionMetadata, listSessionsByAgent, patchSessionMetadata, resetSessionRecord, resolveSessionAgentId, updateSessionStats } from "./session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "./session-task-plan-repository.js";
 import { buildRelationshipPrompt, getRelationshipSettings, isProactiveSupportAllowed, updateRelationshipSettings } from "./relationship-settings-repository.js";
@@ -37,8 +39,6 @@ import { deleteNoteAgentContextRecord, getNoteAgentContextRecord, upsertNoteAgen
 import { claimKnowledgeSourceItems, completeKnowledgeSourceItemSynthesis, countKnowledgeSourceItems, deleteKnowledgeSourceItems, finishKnowledgeSyncRun, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, pruneBoundedKnowledgeSourceItems, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, startKnowledgeSyncRun, upsertKnowledgeSourceItems } from "./knowledge-repository.js";
 import { deleteSessionConfig, getSessionConfig, hasSessionConfig, setSessionConfig, updateSessionConfig } from "./config-repository.js";
 import { createObjectLinkRecord, deleteObjectLinkRecord, getActivityEventRecord, listActivityRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, recordActivityEvent } from "./activity-repository.js";
-import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeConnectorWebhookDelivery, consumeConnectorApproval, createConnectorApproval, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, getCachedConnectorCatalogEntry, getConnectorApproval, getConnectorConnection, getConnectorInstallation, listCachedConnectorCatalogEntries, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation } from "./connector-repository.js";
-import { getConnectorAccount, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
 import { getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, listConnectorSyncPolicies, upsertConnectorSyncPolicy } from "./connector-sync-policy-repository.js";
 import { getUserTrustPolicy, setUserTrustPolicy } from "./user-trust-repository.js";
 //#region src/storage/sqlite/index.ts
@@ -53,5 +53,7 @@ init_session_input_repository();
 init_session_metadata();
 init_row_mappers();
 init_session_repository();
+init_connector_repository();
+init_connector_account_repository();
 //#endregion
 export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, DatabaseSchemaTooOldError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendMediaToAssistantTranscriptEntry, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteEndpointSessionBindingsByPrincipal, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findConversationIdByTranscriptId, findLatestAssistantTranscriptEntryId, findSessionInput, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentTranscriptId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };

package/dist/src/storage/sqlite/migrations/182_connector_account_policies.sql

@@ -0,0 +1,92 @@
+ALTER TABLE connector_installations RENAME COLUMN selected_connection_ids_json TO selected_account_ids_json;
+UPDATE connector_installations
+SET selected_account_ids_json = CASE
+  WHEN json_array_length(selected_account_ids_json) = 0 THEN 'null'
+  ELSE (
+    SELECT json_group_array(DISTINCT c.account_id)
+    FROM json_each(connector_installations.selected_account_ids_json) selected
+    JOIN connector_connections c ON c.id = selected.value
+    WHERE c.principal_id = connector_installations.principal_id
+      AND c.connector_id = connector_installations.connector_id
+      AND c.account_id IS NOT NULL
+  )
+END;
+
+ALTER TABLE connector_accounts ADD COLUMN label TEXT;
+ALTER TABLE connector_accounts ADD COLUMN enabled INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE connector_accounts ADD COLUMN allowed_agent_ids_json TEXT;
+UPDATE connector_accounts SET label = (
+  SELECT alias FROM connector_connections WHERE account_id = connector_accounts.id
+  AND alias IS NOT NULL ORDER BY is_default DESC, updated_at DESC LIMIT 1
+);
+
+CREATE TABLE connector_backends (
+  id TEXT PRIMARY KEY,
+  mode TEXT NOT NULL CHECK(mode IN ('managed', 'byok')),
+  label TEXT NOT NULL,
+  credential_ref TEXT,
+  credential_source TEXT NOT NULL DEFAULT 'stored' CHECK(credential_source IN ('stored','environment')),
+  verified_at TEXT,
+  active INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL
+);
+CREATE UNIQUE INDEX idx_connector_backend_active ON connector_backends(active) WHERE active = 1;
+ALTER TABLE connector_accounts ADD COLUMN backend_id TEXT;
+DROP INDEX idx_connector_accounts_identity;
+CREATE UNIQUE INDEX idx_connector_accounts_identity
+  ON connector_accounts(principal_id, backend_id, connector_id, identity_key)
+  WHERE identity_key IS NOT NULL;
+
+CREATE TABLE connector_objective_accounts (
+  conversation_id TEXT NOT NULL,
+  transcript_id TEXT NOT NULL,
+  objective_id TEXT NOT NULL,
+  connector_id TEXT NOT NULL,
+  account_id TEXT NOT NULL REFERENCES connector_accounts(id) ON DELETE CASCADE,
+  PRIMARY KEY(conversation_id, transcript_id, objective_id, connector_id, account_id)
+);
+
+-- Provider IDs are scoped to a backend, not the whole installation.
+CREATE TABLE connector_connections_next (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT REFERENCES connector_installations(id) ON DELETE SET NULL,
+  connector_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  provider_connection_id TEXT NOT NULL,
+  alias TEXT,
+  identity_json TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL DEFAULT 'unknown' CHECK(status IN ('pending','active','expired','failed','revoked','disabled','unknown')),
+  is_default INTEGER NOT NULL DEFAULT 0 CHECK(is_default IN (0,1)),
+  connected_at TEXT,
+  expires_at TEXT,
+  last_error TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  account_id TEXT REFERENCES connector_accounts(id) ON DELETE CASCADE
+);
+INSERT INTO connector_connections_next SELECT * FROM connector_connections;
+DROP TABLE connector_connections;
+ALTER TABLE connector_connections_next RENAME TO connector_connections;
+CREATE INDEX idx_connector_connections_principal ON connector_connections(principal_id, connector_id, status);
+CREATE INDEX idx_connector_connections_account ON connector_connections(account_id);
+CREATE UNIQUE INDEX idx_connector_connections_provider_backend
+  ON connector_connections(provider, COALESCE(json_extract(metadata_json, '$.backendId'), ''), provider_connection_id);
+
+CREATE TABLE connector_authorization_attempts (
+  id TEXT PRIMARY KEY,
+  principal_id TEXT NOT NULL,
+  connector_id TEXT NOT NULL,
+  backend_id TEXT,
+  connection_id TEXT NOT NULL REFERENCES connector_connections(id) ON DELETE CASCADE,
+  expected_account_id TEXT,
+  authorization_url TEXT,
+  status TEXT NOT NULL CHECK(status IN ('awaiting_user','succeeded','failed','expired')),
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX idx_connector_authorization_attempt_scope ON connector_authorization_attempts(principal_id,connector_id,created_at);
+CREATE TABLE connector_runtime_identity (id INTEGER PRIMARY KEY CHECK(id = 1), installation_id TEXT NOT NULL);
+INSERT INTO connector_runtime_identity VALUES(1, lower(hex(randomblob(16))));
+ALTER TABLE connector_approvals ADD COLUMN wait_id TEXT;

package/dist/src/storage/sqlite/migrations/183_connector_backend_consistency.sql

@@ -0,0 +1,20 @@
+-- Repair only accounts whose authorizations agree on one known backend.
+-- Identity collisions are reconciled transactionally by the next provider sync.
+WITH candidates AS (
+  SELECT c.account_id, MIN(json_extract(c.metadata_json, '$.backendId')) AS backend_id
+  FROM connector_connections c
+  GROUP BY c.account_id
+  HAVING COUNT(DISTINCT json_extract(c.metadata_json, '$.backendId')) = 1
+    AND COUNT(json_extract(c.metadata_json, '$.backendId')) = COUNT(*)
+)
+UPDATE connector_accounts AS account
+SET backend_id = (SELECT backend_id FROM candidates WHERE account_id = account.id)
+WHERE account.backend_id IS NULL
+  AND EXISTS (SELECT 1 FROM candidates JOIN connector_backends backend ON backend.id = candidates.backend_id WHERE candidates.account_id = account.id)
+  AND NOT EXISTS (
+    SELECT 1 FROM connector_accounts other JOIN candidates ON candidates.account_id = account.id
+    WHERE other.id <> account.id
+      AND COALESCE(other.backend_id, (SELECT backend_id FROM candidates WHERE account_id = other.id)) = candidates.backend_id
+      AND other.principal_id = account.principal_id AND other.connector_id = account.connector_id
+      AND other.identity_key = account.identity_key
+  );

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 181;
+export declare const XOPC_DB_SCHEMA_VERSION = 183;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -35,16 +35,16 @@ function applySingleMigration(db, migration) {
 		targetVersion: migration.targetVersion,
 		file: migration.filename
 	}, "Applying SQLite migration");
-	const rebuildDevices = migration.targetVersion === 179;
+	const rebuildParentTable = migration.targetVersion === 179 || migration.targetVersion === 182;
 	const foreignKeysEnabled = Number(db.prepare("PRAGMA foreign_keys").get()?.foreign_keys) === 1;
-	if (rebuildDevices) db.exec("PRAGMA foreign_keys = OFF");
+	if (rebuildParentTable) db.exec("PRAGMA foreign_keys = OFF");
 	let transactionStarted = false;
 	try {
 		db.exec("BEGIN IMMEDIATE");
 		transactionStarted = true;
 		db.exec(migration.sql);
 		const summary = migration.targetVersion === 178 ? migrateConversationUuids(db) : void 0;
-		if (rebuildDevices && db.prepare("PRAGMA foreign_key_check").all().length > 0) throw new Error("Device platform migration would violate foreign key integrity");
+		if (rebuildParentTable && db.prepare("PRAGMA foreign_key_check").all().length > 0) throw new Error("Parent table migration would violate foreign key integrity");
 		setSchemaVersion(db, migration.targetVersion);
 		db.exec("COMMIT");
 		return summary;
@@ -55,7 +55,7 @@ function applySingleMigration(db, migration) {
 		const em = error instanceof Error ? error.message : String(error);
 		throw new Error(`SQLite migration to v${migration.targetVersion} (${migration.filename}) failed: ${em}`, { cause: error });
 	} finally {
-		if (rebuildDevices && foreignKeysEnabled) db.exec("PRAGMA foreign_keys = ON");
+		if (rebuildParentTable && foreignKeysEnabled) db.exec("PRAGMA foreign_keys = ON");
 	}
 }
 /**
@@ -63,7 +63,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 181;
+	const targetVersion = options.targetVersion ?? 183;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 165) throw new DatabaseSchemaTooOldError(currentVersion, 165);
@@ -118,7 +118,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 181;
+	const appVersion = options.targetVersion ?? 183;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -157,7 +157,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 165;
-	XOPC_DB_SCHEMA_VERSION = 181;
+	XOPC_DB_SCHEMA_VERSION = 183;
 	MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 }));
 //#endregion

package/dist/src/storage/sqlite/schema.js

@@ -33,7 +33,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 165;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 181,
+		targetVersion: 183,
 		databasePath: fresh ? void 0 : options.databasePath
 	});
 }

package/dist/src/tasks/home-query-service.js

@@ -1,6 +1,6 @@
 import { isHomeAttentionAcknowledged } from "../storage/sqlite/home-attention-repository.js";
-import { getRelationshipSettings } from "../storage/sqlite/relationship-settings-repository.js";
 import { listConnectorApprovals } from "../storage/sqlite/connector-repository.js";
+import { getRelationshipSettings } from "../storage/sqlite/relationship-settings-repository.js";
 import "../storage/sqlite/index.js";
 import { TaskRepository } from "./task-repository.js";
 import { TaskReadModelProjector } from "./task-read-model-projector.js";
@@ -362,10 +362,10 @@ var HomeQueryService = class {
 				id: `connector-approval:${approval.id}`,
 				kind: "connector_approval",
 				title: approval.actionId,
-				detail: `${approval.connectorId} · ${approval.scope}`,
+				detail: `${approval.connectorId} · ${approval.scope}\n${JSON.stringify(approval.argumentsPreview).slice(0, 1600)}`,
 				reason: "approval_required",
 				urgency: "now",
-				href: "/connectors",
+				href: approval.conversationId ? `/chat/${encodeURIComponent(approval.conversationId)}` : "/connectors",
 				updatedAt: Date.parse(approval.createdAt),
 				response: {
 					kind: "connector_approval",

package/dist/src/tui/backends/gateway-realtime-backend.js

@@ -3,8 +3,8 @@ import { init_logger } from "../../utils/logger.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
 import { parseModelRef } from "../../agent/models/selection.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
-import { RealtimeClient } from "../../../packages/realtime-client/src/index.js";
 import { gatewayCredentialAuthorization } from "../../gateway/credential.js";
+import { RealtimeClient } from "../../../packages/realtime-client/src/index.js";
 import { buildTuiTranscriptTree, transcriptTreeEntryIdToRowNumber } from "../tui-transcript-tree.js";
 import { computeTuiSessionStats } from "../tui-session-stats.js";
 import { createRequire } from "node:module";

package/dist/src/tui/tui-startup-resources.js

@@ -2,10 +2,10 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
+import { listConnectorInstances } from "../connectors/instances.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
-import { listConnectorInstances } from "../connectors/instances.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { basename } from "node:path";

package/dist/src/workflows/domain/definition.d.ts

@@ -110,6 +110,7 @@ export interface WorkflowDefinitionManifest {
 }
 export interface WorkflowConnectorRequirement {
     connectorId: string;
+    accountIds?: string[];
     scope?: 'read' | 'write' | 'admin';
     connectionRequired?: boolean;
     optional?: boolean;

package/dist/src/workflows/domain/validation.js

@@ -121,7 +121,7 @@ function validateManifest(value, errors) {
 			field: "manifest.resources"
 		});
 	}
-	if (value.connectors !== void 0 && (!Array.isArray(value.connectors) || value.connectors.some((connector) => !isRecord(connector) || typeof connector.connectorId !== "string" || connector.scope !== void 0 && ![
+	if (value.connectors !== void 0 && (!Array.isArray(value.connectors) || value.connectors.some((connector) => !isRecord(connector) || typeof connector.connectorId !== "string" || connector.accountIds !== void 0 && (!Array.isArray(connector.accountIds) || connector.accountIds.length === 0 || connector.accountIds.some((id) => typeof id !== "string" || !id.trim()) || new Set(connector.accountIds).size !== connector.accountIds.length) || connector.scope !== void 0 && ![
 		"read",
 		"write",
 		"admin"

package/dist/src/workflows/service/workflow-run-service.js

@@ -195,6 +195,7 @@ var WorkflowRunService = class {
 			agentId: params.agentId,
 			definitionId: params.definitionId,
 			definitionTitle: definition.title,
+			connectorAccounts: connectorPreflight.accounts,
 			triggerSource: params.source.kind,
 			goal,
 			parentConversationId: params.parentConversationId,
@@ -386,8 +387,21 @@ var WorkflowRunService = class {
 				httpStatus: 400
 			};
 		}
+		const replayConnectors = preflightWorkflowConnectors({
+			definition,
+			config: this.options.service.currentConfig,
+			agentId: params.agentId
+		});
+		if (!replayConnectors.ok) return {
+			ok: false,
+			code: "connector_preflight_failed",
+			message: replayConnectors.issues.map((issue) => issue.message).join(" "),
+			httpStatus: 409,
+			details: replayConnectors
+		};
 		const { conversationId } = await this.options.sessionBridge.prepareRunSession({
 			runId: replayRunId,
+			connectorAccounts: replayConnectors.accounts,
 			agentId: params.agentId,
 			definitionId: existing.run.definitionId,
 			definitionTitle: `${definition.title} replay`,

package/dist/src/workflows/service/workflow-session-bridge.d.ts

@@ -11,6 +11,7 @@ export interface PrepareWorkflowRunSessionParams {
     parentConversationId?: string;
     projectId?: string;
     triggerSource?: string;
+    connectorAccounts?: Record<string, string[]>;
 }
 export interface PrepareWorkflowRunSessionResult {
     conversationId: string;

package/dist/src/workflows/service/workflow-session-bridge.js

@@ -48,6 +48,7 @@ var WorkflowSessionBridge = class {
 				workflowRunId: params.runId,
 				workflowDefinitionId: params.definitionId,
 				workflowGoal: params.goal,
+				connectorAccounts: params.connectorAccounts ?? {},
 				deferVisibilityUntilOutput: true,
 				...params.triggerSource ? { triggerSource: params.triggerSource } : {},
 				...params.parentConversationId ? { parentConversationId: params.parentConversationId } : {}