@xopcai/xopc 0.0.391 → 0.0.393

package/dist/src/gateway/scenes/host.js

@@ -1,154 +0,0 @@
-import { createLogger } from "../../utils/logger/index.js";
-import { init_logger } from "../../utils/logger.js";
-import { assertSceneStorageReady, init_scenes_schema } from "../../storage/sqlite/scenes-schema.js";
-import { init_providers, isProviderConfiguredSync, resolveModel } from "../../providers/index.js";
-import { SceneRepository } from "../../scenes/repository.js";
-import { SceneApplicationService } from "../../scenes/service.js";
-import { BrowserSubscriptionService } from "../../notifications/browserSubscriptions.js";
-import { ScenePreferenceService } from "../../scenes/preferences.js";
-import { SceneExecutionService } from "../../scenes/execution.js";
-import { SceneAgentExecutor } from "../../scenes/agentExecutor.js";
-import { SceneInboxService } from "../../scenes/inbox.js";
-import { SceneMailObservationService } from "../../scenes/mailObservations.js";
-import { maintainSceneStorage } from "../../scenes/maintenance.js";
-import { SceneMetrics } from "../../scenes/metrics.js";
-import { resolveSceneModelRef } from "../../scenes/model.js";
-import { SceneCapabilityRegistry } from "../../scenes/registry.js";
-import { SceneResultNotifications } from "../../scenes/resultNotifications.js";
-import { SceneRuntime } from "../../scenes/runtime.js";
-import { familyPlanTemplate, mailFollowUpTemplate } from "../../scenes/templates.js";
-import { SceneUserNotesProvider } from "../../scenes/userNotes.js";
-import { createSceneBrowserDispatcher } from "./browserNotifications.js";
-import { GatewaySceneMailContext } from "./mailContext.js";
-import { SlackThreadSource } from "./slackThreadSource.js";
-import { SceneSourceRegistry, decisionLogTemplate, taskFollowUpTemplate } from "../../scenes/taskFollowUp/contracts.js";
-import { SceneTaskExecutionService } from "../../scenes/taskFollowUp/service.js";
-//#region src/gateway/scenes/host.ts
-init_providers();
-init_scenes_schema();
-init_logger();
-const log = createLogger("Gateway:Scenes");
-/** Composition root for the initialized database. Never creates tables or starts an old worker. */
-var GatewaySceneHost = class {
-	http;
-	runtime;
-	notifications;
-	browserDispatcher;
-	timer;
-	active;
-	stopped = false;
-	nextMaintenanceAt = 0;
-	clock;
-	constructor(db, input) {
-		this.db = db;
-		assertSceneStorageReady(db);
-		if (!input.principal.ownerId.trim() || !input.principal.workspaceId.trim()) throw new Error("Scene host principal is required");
-		const clock = input.clock ?? Date.now;
-		this.clock = clock;
-		const repository = new SceneRepository(db);
-		repository.installTemplate(mailFollowUpTemplate);
-		repository.installTemplate(familyPlanTemplate);
-		repository.installTemplate(taskFollowUpTemplate);
-		repository.installTemplate(decisionLogTemplate);
-		const mail = input.mail ?? new GatewaySceneMailContext(db, clock);
-		const providers = new SceneCapabilityRegistry([mail, new SceneUserNotesProvider(db, clock)]);
-		const authorize = (activation) => {
-			if (activation.ownerId !== input.principal.ownerId || activation.workspaceId !== input.principal.workspaceId) return {
-				accountIds: [],
-				contextProviders: [],
-				effectHandlers: []
-			};
-			const grants = providers.list().flatMap((provider) => {
-				const accountIds = provider.authorization?.(activation) ?? null;
-				return accountIds === null ? [] : [{
-					id: provider.id,
-					accountIds
-				}];
-			});
-			return {
-				accountIds: [...new Set(grants.flatMap((grant) => grant.accountIds))],
-				contextProviders: grants.map((grant) => grant.id),
-				effectHandlers: []
-			};
-		};
-		const grant = async (activation) => authorize(activation);
-		const executor = input.executor ?? new SceneAgentExecutor(() => resolveModel(resolveSceneModelRef(input.config())));
-		const sourceProviders = new SceneSourceRegistry([new SlackThreadSource(db)]);
-		const activationAdapters = new SceneCapabilityRegistry([new SceneTaskExecutionService(db, {
-			config: input.config,
-			sources: sourceProviders
-		})]);
-		this.http = {
-			activationAdapters,
-			sourceProviders,
-			repository,
-			mail,
-			mailDiscovery: mail instanceof GatewaySceneMailContext ? mail : void 0,
-			application: new SceneApplicationService(repository, providers, grant, clock, () => {
-				if (input.executor) return [];
-				try {
-					return isProviderConfiguredSync(resolveModel(resolveSceneModelRef(input.config())).provider) ? [] : ["model_credentials"];
-				} catch {
-					return ["model_configuration"];
-				}
-			}),
-			inbox: new SceneInboxService(db, clock),
-			browser: new BrowserSubscriptionService(db, clock),
-			preferences: new ScenePreferenceService(db),
-			metrics: new SceneMetrics(db, clock, () => input.executor ? null : resolveSceneModelRef(input.config()))
-		};
-		this.runtime = new SceneRuntime(repository, new SceneExecutionService(repository, providers, executor, grant, clock), new SceneMailObservationService(repository, mail, grant, clock, 6e4), clock, input.intervalMs ?? 5e3);
-		this.notifications = new SceneResultNotifications(db, authorize, (event) => input.publish("notification.created", event), clock);
-		this.browserDispatcher = createSceneBrowserDispatcher(db, authorize, clock);
-		this.intervalMs = input.intervalMs ?? 5e3;
-	}
-	intervalMs;
-	start() {
-		if (this.stopped) throw new Error("Create a new scene host after shutdown");
-		if (this.timer) return;
-		assertSceneStorageReady(this.db);
-		this.runtime.start();
-		const poll = () => {
-			for (const adapter of this.http.activationAdapters.list()) adapter.tick().catch((err) => log.error({
-				err,
-				adapter: adapter.id
-			}, "Scene adapter check failed"));
-			try {
-				if (this.clock() >= this.nextMaintenanceAt) {
-					maintainSceneStorage(this.db, this.clock());
-					this.nextMaintenanceAt = this.clock() + 36e5;
-				}
-				this.notifications.drain();
-				this.browserDispatcher.drainOne().catch((err) => log.error({ err }, "Scene browser reminder failed"));
-			} catch (err) {
-				log.error({ err }, "Scene result publication failed");
-			}
-		};
-		this.timer = setInterval(poll, this.intervalMs);
-		this.timer.unref();
-		poll();
-	}
-	tick() {
-		if (this.stopped) return Promise.reject(/* @__PURE__ */ new Error("Scene host stopped"));
-		if (this.active) return this.active;
-		const work = Promise.all([this.runtime.tick(), ...this.http.activationAdapters.list().map((adapter) => adapter.tick())]).then(() => {
-			if (!this.stopped) this.notifications.drain();
-		});
-		this.active = work.finally(() => {
-			this.active = void 0;
-		});
-		return this.active;
-	}
-	/** Must finish before the Gateway closes SQLite or its realtime broker. */
-	async stop() {
-		this.stopped = true;
-		if (this.timer) clearInterval(this.timer);
-		this.timer = void 0;
-		await Promise.all(this.http.activationAdapters.list().map((adapter) => adapter.stop()));
-		await this.runtime.stop();
-		await this.browserDispatcher.stop();
-		await this.active?.catch(() => void 0);
-	}
-};
-//#endregion
-export { GatewaySceneHost };

package/dist/src/gateway/scenes/mailContext.d.ts

@@ -1,32 +0,0 @@
-import type { DatabaseSync } from 'node:sqlite';
-import { ComposioSessionsAdapter } from '../../connectors/composio-sessions.js';
-import { type SceneActivation, type ScenePrincipal } from '../../scenes/contracts.js';
-import type { SceneContextProvider, SceneEvidence } from '../../scenes/execution.js';
-import { SceneMailContextProvider } from '../../scenes/mailContext.js';
-/** Reads only the delegated thread; never starts mailbox learning or persists raw mail. */
-export declare class GatewaySceneMailContext extends SceneMailContextProvider {
-    private readonly connectionDb;
-    private readonly now;
-    private readonly adapter;
-    constructor(connectionDb: DatabaseSync, now?: () => number, adapter?: Pick<ComposioSessionsAdapter, 'executeWithPolicy'>);
-    private recordRequest;
-    listAccounts(principal: ScenePrincipal): Array<{
-        id: string;
-        label: string;
-    }>;
-    authorizedAccounts(activation: SceneActivation): string[];
-    listSources(principal: ScenePrincipal, limit?: number, afterId?: string): {
-        id: string;
-        accountId: string;
-        subject: string;
-        sender: string;
-    }[];
-    searchSources(principal: ScenePrincipal, value: unknown, signal: AbortSignal): Promise<{
-        id: string;
-        accountId: string;
-        subject: string;
-        sender: string;
-    }[]>;
-    private source;
-    read(input: Parameters<SceneContextProvider['read']>[0]): Promise<SceneEvidence[]>;
-}

package/dist/src/gateway/scenes/mailContext.js

@@ -1,235 +0,0 @@
-import { getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
-import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
-import { getConnectorDefinition } from "../../connectors/catalog.js";
-import { sceneContentHash } from "../../scenes/contracts.js";
-import { normalizeConnectedSourceResult } from "../../connectors/connected-source-normalizers.js";
-import { sanitizeConnectedSourceValue } from "../../connectors/connected-source-sanitization.js";
-import { SceneSourceNotReady, sceneSourceFailureReason } from "../../scenes/readiness.js";
-import { SceneMailContextProvider } from "../../scenes/mailContext.js";
-import { createHash } from "node:crypto";
-import { z } from "zod";
-//#region src/gateway/scenes/mailContext.ts
-init_connector_repository();
-const ACTION = "GMAIL_FETCH_MESSAGE_BY_THREAD_ID";
-function record(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-/** Reads only the delegated thread; never starts mailbox learning or persists raw mail. */
-var GatewaySceneMailContext = class extends SceneMailContextProvider {
-	constructor(connectionDb, now = Date.now, adapter = new ComposioSessionsAdapter()) {
-		super(connectionDb, now);
-		this.connectionDb = connectionDb;
-		this.now = now;
-		this.adapter = adapter;
-	}
-	recordRequest(principal, accountId) {
-		this.connectionDb.prepare(`INSERT INTO scene_connector_usage VALUES (?, ?, ?, ?, 1)
-      ON CONFLICT(owner_id, workspace_id, account_id, utc_day) DO UPDATE SET request_count = request_count + 1`).run(principal.ownerId, principal.workspaceId, accountId, Math.floor(this.now() / 864e5));
-	}
-	listAccounts(principal) {
-		return this.connectionDb.prepare(`SELECT a.id, a.label, a.identity_json, c.connector_id FROM connector_accounts a
-      JOIN connector_connections c ON c.id = a.current_connection_id AND c.account_id = a.id
-        AND c.principal_id = a.principal_id AND c.connector_id = a.connector_id
-      JOIN connector_installations i ON i.id = c.installation_id AND i.principal_id = a.principal_id AND i.connector_id = a.connector_id
-      WHERE a.principal_id = ? AND a.enabled = 1 AND c.status = 'active' AND c.provider = 'composio'
-        AND i.enabled = 1 AND i.confirmation_policy <> 'always'
-        AND json_array_length(i.allowed_agent_ids_json) = 0 AND a.allowed_agent_ids_json IS NULL
-        AND (i.selected_account_ids_json = 'null' OR EXISTS (SELECT 1 FROM json_each(i.selected_account_ids_json) WHERE value = a.id))
-        AND (c.expires_at IS NULL OR julianday(c.expires_at) > julianday(?, 'unixepoch')) ORDER BY a.id LIMIT 100`).all(principal.ownerId, this.now() / 1e3).filter((row) => {
-			const definition = getConnectorDefinition(String(row.connector_id));
-			return definition?.runtime.type === "composio" && definition.runtime.toolkit === "gmail";
-		}).map((row) => {
-			const identity = record(JSON.parse(String(row.identity_json)));
-			return {
-				id: String(row.id),
-				label: String(row.label || identity.email || identity.name || row.id).slice(0, 300)
-			};
-		});
-	}
-	authorizedAccounts(activation) {
-		if (activation.scope.kind !== "objects" || activation.scope.ids.length !== 1) return [];
-		const source = this.connectionDb.prepare("SELECT account_id FROM scene_mail_sources WHERE id = ? AND owner_id = ? AND workspace_id = ?").get(activation.scope.ids[0], activation.ownerId, activation.workspaceId);
-		return source && activation.permissions.accountIds.includes(String(source.account_id)) && this.listAccounts(activation).some((account) => account.id === source.account_id) ? [String(source.account_id)] : [];
-	}
-	listSources(principal, limit = 50, afterId = "") {
-		const accounts = new Set(this.listAccounts(principal).map((account) => account.id));
-		return this.connectionDb.prepare("SELECT id, account_id, subject, sender FROM scene_mail_sources WHERE owner_id = ? AND workspace_id = ? AND id > ? ORDER BY id LIMIT ?").all(principal.ownerId, principal.workspaceId, afterId, limit).filter((row) => accounts.has(String(row.account_id))).map((row) => ({
-			id: String(row.id),
-			accountId: String(row.account_id),
-			subject: String(row.subject),
-			sender: String(row.sender)
-		}));
-	}
-	async searchSources(principal, value, signal) {
-		const { accountId, query } = z.strictObject({
-			accountId: z.string().min(1).max(200),
-			query: z.string().trim().min(1).max(500)
-		}).parse(value);
-		if (!this.listAccounts(principal).some((account) => account.id === accountId)) throw new Error("Mail account is not available for scene reads");
-		const account = this.connectionDb.prepare("SELECT current_connection_id FROM connector_accounts WHERE id = ?").get(accountId);
-		const connection = getConnectorConnection(String(account.current_connection_id));
-		const installation = getConnectorInstallation(connection.installationId);
-		signal.throwIfAborted();
-		this.recordRequest(principal, accountId);
-		const response = await this.adapter.executeWithPolicy({
-			context: {
-				principalId: principal.ownerId,
-				toolkits: ["gmail"]
-			},
-			connection,
-			installation,
-			signal,
-			action: {
-				connectorId: connection.connectorId,
-				toolkit: "gmail",
-				actionId: "GMAIL_FETCH_EMAILS",
-				scope: "read",
-				curated: true,
-				cachedAt: new Date(this.now()).toISOString()
-			},
-			args: {
-				query: `(${query}) -in:spam -in:trash -in:drafts`,
-				max_results: 30,
-				include_payload: true,
-				verbose: false
-			}
-		});
-		signal.throwIfAborted();
-		if (response.decision !== "allowed") throw new Error("Mail search permission is required");
-		const envelope = record(response.result);
-		if (envelope.successful === false || envelope.error || !Array.isArray(record(envelope.data).messages)) throw new SceneSourceNotReady();
-		if (!this.listAccounts(principal).some((account) => account.id === accountId) || this.connectionDb.prepare("SELECT current_connection_id FROM connector_accounts WHERE id = ?").get(accountId)?.current_connection_id !== connection.id) throw new Error("Mail authorization changed");
-		const normalized = normalizeConnectedSourceResult({
-			toolkit: "gmail",
-			actionId: "GMAIL_FETCH_EMAILS",
-			result: envelope.data
-		});
-		const sources = /* @__PURE__ */ new Map();
-		for (const mail of normalized.slice(0, 30)) {
-			const threadId = mail.value.threadId;
-			if (typeof threadId !== "string" || !threadId.trim() || threadId.length > 200) continue;
-			if (Array.isArray(mail.value.labels) && mail.value.labels.some((label) => [
-				"DRAFT",
-				"TRASH",
-				"SPAM"
-			].includes(String(label)))) continue;
-			const id = createHash("sha256").update(JSON.stringify([
-				principal.ownerId,
-				principal.workspaceId,
-				accountId,
-				threadId
-			])).digest("hex");
-			const subject = String(mail.value.subject ?? "").slice(0, 300);
-			const sender = String(mail.value.sender ?? "").slice(0, 300);
-			this.connectionDb.prepare(`INSERT INTO scene_mail_sources VALUES (?, ?, ?, ?, ?, ?, ?, ?)
-        ON CONFLICT(id) DO UPDATE SET subject = excluded.subject, sender = excluded.sender, selected_at = excluded.selected_at`).run(id, principal.ownerId, principal.workspaceId, accountId, threadId, subject, sender, this.now());
-			sources.set(id, {
-				id,
-				accountId,
-				subject,
-				sender
-			});
-		}
-		return [...sources.values()];
-	}
-	source(subjectId) {
-		const row = this.connectionDb.prepare(`SELECT a.current_connection_id, s.thread_id FROM scene_mail_sources s
-      JOIN connector_accounts a ON a.id = s.account_id WHERE s.id = ?`).get(subjectId);
-		if (!row) throw new Error("Mail source unavailable");
-		return {
-			connectionId: String(row.current_connection_id),
-			threadId: String(row.thread_id)
-		};
-	}
-	async read(input) {
-		input.signal.throwIfAborted();
-		const accounts = this.authorizedAccounts(input.activation);
-		if (!input.permissions.contextProviders.includes("mail") || accounts.length !== 1 || !input.permissions.accountIds.includes(accounts[0]) || input.activation.scope.kind !== "objects" || input.activation.scope.ids[0] !== input.subjectId) throw new Error("Mail permission is required");
-		const origin = this.source(input.subjectId);
-		const startedAt = this.now();
-		if (input.notBefore !== void 0 && startedAt < input.notBefore) throw new SceneSourceNotReady();
-		const connection = getConnectorConnection(origin.connectionId);
-		const installation = getConnectorInstallation(connection.installationId);
-		const messages = [];
-		const tokens = /* @__PURE__ */ new Set();
-		let pageToken;
-		do {
-			input.signal.throwIfAborted();
-			if (!this.authorizedAccounts(input.activation).includes(accounts[0]) || sceneContentHash(this.source(input.subjectId)) !== sceneContentHash(origin)) throw new Error("Mail permission changed");
-			let response;
-			try {
-				this.recordRequest(input.activation, accounts[0]);
-				response = await this.adapter.executeWithPolicy({
-					context: {
-						principalId: input.activation.ownerId,
-						toolkits: ["gmail"]
-					},
-					connection,
-					installation,
-					signal: input.signal,
-					action: {
-						connectorId: connection.connectorId,
-						toolkit: "gmail",
-						actionId: ACTION,
-						scope: "read",
-						curated: true,
-						cachedAt: new Date(startedAt).toISOString()
-					},
-					args: {
-						user_id: "me",
-						thread_id: origin.threadId,
-						...pageToken ? { page_token: pageToken } : {}
-					}
-				});
-			} catch (error) {
-				input.signal.throwIfAborted();
-				throw new SceneSourceNotReady(sceneSourceFailureReason(error));
-			}
-			input.signal.throwIfAborted();
-			if (response.decision !== "allowed") throw new Error("Mail connector permission is required");
-			const envelope = record(response.result);
-			const data = record(envelope.data);
-			if (envelope.successful === false || envelope.error || !Array.isArray(data.messages) || data.messages.some((message) => !message || typeof message !== "object")) throw new SceneSourceNotReady(sceneSourceFailureReason(envelope.error));
-			messages.push(...data.messages.map(record));
-			if (messages.length > 30 || JSON.stringify(messages).length > 5e5) throw new Error("Mail thread exceeds its context budget");
-			if (data.nextPageToken != null && typeof data.nextPageToken !== "string") throw new SceneSourceNotReady();
-			pageToken = typeof data.nextPageToken === "string" && data.nextPageToken ? data.nextPageToken : void 0;
-			if (pageToken) {
-				if (!data.messages.length || tokens.has(pageToken) || tokens.size >= 29) throw new SceneSourceNotReady();
-				tokens.add(pageToken);
-			}
-		} while (pageToken);
-		if (!this.authorizedAccounts(input.activation).includes(accounts[0]) || sceneContentHash(this.source(input.subjectId)) !== sceneContentHash(origin)) throw new Error("Mail permission changed");
-		if (messages.some((message) => message.threadId !== origin.threadId || !Array.isArray(message.labelIds))) throw new SceneSourceNotReady();
-		const normalized = normalizeConnectedSourceResult({
-			toolkit: "gmail",
-			actionId: ACTION,
-			result: { messages }
-		});
-		if (normalized.length !== messages.length || new Set(normalized.map((message) => message.externalId)).size !== messages.length) throw new SceneSourceNotReady();
-		const active = normalized.filter((message) => !message.value.labels.some((label) => [
-			"DRAFT",
-			"TRASH",
-			"SPAM"
-		].includes(String(label))));
-		if (!active.length || active.some((message) => typeof message.value.content !== "string" || !message.value.content.trim())) throw new SceneSourceNotReady();
-		const evidence = active.map((message) => {
-			const content = JSON.stringify(sanitizeConnectedSourceValue(message.value));
-			return {
-				id: `mail:${accounts[0]}:${message.externalId}`,
-				subjectId: input.subjectId,
-				ownerId: input.activation.ownerId,
-				workspaceId: input.activation.workspaceId,
-				accountId: accounts[0],
-				content,
-				revision: sceneContentHash(content),
-				freshUntil: startedAt + 30 * 6e4,
-				...message.occurredAt ? { occurredAt: Date.parse(message.occurredAt) } : {}
-			};
-		});
-		if (evidence.reduce((size, message) => size + message.content.length, 0) > 12e4) throw new Error("Mail thread exceeds its context budget");
-		return evidence;
-	}
-};
-//#endregion
-export { GatewaySceneMailContext };

package/dist/src/gateway/scenes/slackThreadSource.d.ts

@@ -1,41 +0,0 @@
-import type { DatabaseSync } from 'node:sqlite';
-import { z } from 'zod';
-import { ComposioSessionsAdapter } from '../../connectors/composio-sessions.js';
-import { type ScenePrincipal } from '../../scenes/contracts.js';
-import type { SceneSourceAdapter, SourceSnapshot } from '../../scenes/taskFollowUp/contracts.js';
-export declare const slackThreadSchema: z.ZodObject<{
-    accountId: z.ZodString;
-    teamId: z.ZodString;
-    channelId: z.ZodString;
-    threadTs: z.ZodString;
-}, z.core.$strict>;
-export type SlackThread = z.infer<typeof slackThreadSchema>;
-/** Parse locally; never fetch a user-supplied URL. Reply links resolve to their root. */
-export declare function parseSlackThreadUrl(value: string): {
-    channelId: string;
-    threadTs: string;
-};
-/** Read-only connector adapter. Account policy is rechecked before and after every page. */
-export declare class SlackThreadSource implements SceneSourceAdapter {
-    private readonly db;
-    private readonly adapter;
-    readonly id = "slack_thread";
-    readonly label = "Slack thread";
-    normalize(reference: Record<string, string>): {
-        accountId: string;
-        teamId: string;
-        channelId: string;
-        threadTs: string;
-    };
-    accountIds(reference: Record<string, string>): string[];
-    authorized(principal: ScenePrincipal, reference: Record<string, string>): boolean;
-    constructor(db: DatabaseSync, adapter?: Pick<ComposioSessionsAdapter, 'executeWithPolicy'>);
-    listAccounts(principal: ScenePrincipal): Array<{
-        id: string;
-        label: string;
-    }>;
-    private connection;
-    private call;
-    resolveLink(principal: ScenePrincipal, accountId: string, url: string, signal: AbortSignal): Promise<SlackThread>;
-    read(principal: ScenePrincipal, reference: Record<string, string>, signal: AbortSignal): Promise<SourceSnapshot>;
-}

package/dist/src/gateway/scenes/slackThreadSource.js

@@ -1,168 +0,0 @@
-import { getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
-import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
-import { getConnectorDefinition } from "../../connectors/catalog.js";
-import { sceneContentHash } from "../../scenes/contracts.js";
-import { sanitizeConnectedSourceValue } from "../../connectors/connected-source-sanitization.js";
-import { z } from "zod";
-//#region src/gateway/scenes/slackThreadSource.ts
-init_connector_repository();
-const slackThreadSchema = z.strictObject({
-	accountId: z.string().min(1).max(200),
-	teamId: z.string().regex(/^T[A-Z0-9]+$/),
-	channelId: z.string().regex(/^[CDG][A-Z0-9]+$/),
-	threadTs: z.string().regex(/^\d{10,}\.\d{6}$/)
-});
-/** Parse locally; never fetch a user-supplied URL. Reply links resolve to their root. */
-function parseSlackThreadUrl(value) {
-	const url = new URL(value);
-	if (url.protocol !== "https:" || !/^[a-z0-9-]+\.slack\.com$/.test(url.hostname) || url.username || url.password || url.port) throw new Error("Expected a Slack message link");
-	const match = /^\/archives\/([CDG][A-Z0-9]+)\/p(\d{16,})$/.exec(url.pathname);
-	if (!match) throw new Error("Expected a Slack message link");
-	const threadTs = url.searchParams.get("thread_ts") ?? `${match[2].slice(0, -6)}.${match[2].slice(-6)}`;
-	if (!/^\d{10,}\.\d{6}$/.test(threadTs)) throw new Error("Invalid Slack thread timestamp");
-	return {
-		channelId: match[1],
-		threadTs
-	};
-}
-const object = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
-/** Read-only connector adapter. Account policy is rechecked before and after every page. */
-var SlackThreadSource = class {
-	id = "slack_thread";
-	label = "Slack thread";
-	normalize(reference) {
-		return slackThreadSchema.parse(reference);
-	}
-	accountIds(reference) {
-		return [this.normalize(reference).accountId];
-	}
-	authorized(principal, reference) {
-		return this.listAccounts(principal).some((account) => account.id === this.normalize(reference).accountId);
-	}
-	constructor(db, adapter = new ComposioSessionsAdapter()) {
-		this.db = db;
-		this.adapter = adapter;
-	}
-	listAccounts(principal) {
-		return this.db.prepare(`SELECT a.id, a.label, c.connector_id FROM connector_accounts a
-      JOIN connector_connections c ON c.id = a.current_connection_id AND c.account_id = a.id
-        AND c.principal_id = a.principal_id AND c.connector_id = a.connector_id
-      JOIN connector_installations i ON i.id = c.installation_id AND i.principal_id = a.principal_id AND i.connector_id = a.connector_id
-      WHERE a.principal_id = ? AND a.enabled = 1 AND c.status = 'active' AND c.provider = 'composio'
-        AND i.enabled = 1 AND i.confirmation_policy <> 'always'
-        AND json_array_length(i.allowed_agent_ids_json) = 0 AND a.allowed_agent_ids_json IS NULL
-        AND (i.selected_account_ids_json = 'null' OR EXISTS (SELECT 1 FROM json_each(i.selected_account_ids_json) WHERE value = a.id))
-        AND (c.expires_at IS NULL OR julianday(c.expires_at) > julianday('now')) ORDER BY a.id LIMIT 100`).all(principal.ownerId).filter((row) => {
-			const definition = getConnectorDefinition(String(row.connector_id));
-			return definition?.runtime.type === "composio" && definition.runtime.toolkit === "slack";
-		}).map((row) => ({
-			id: String(row.id),
-			label: String(row.label || row.id).slice(0, 300)
-		}));
-	}
-	connection(principal, accountId) {
-		if (!this.listAccounts(principal).some((account) => account.id === accountId)) throw new Error("Slack account permission unavailable");
-		const row = this.db.prepare("SELECT current_connection_id FROM connector_accounts WHERE id = ?").get(accountId);
-		return getConnectorConnection(String(row.current_connection_id));
-	}
-	async call(principal, accountId, actionId, args, signal) {
-		signal.throwIfAborted();
-		const connection = this.connection(principal, accountId);
-		const installation = getConnectorInstallation(connection.installationId);
-		const day = Math.floor(Date.now() / 864e5);
-		const usage = this.db.prepare("SELECT request_count FROM scene_connector_usage WHERE owner_id = ? AND workspace_id = ? AND account_id = ? AND utc_day = ?").get(principal.ownerId, principal.workspaceId, accountId, day);
-		if (Number(usage?.request_count ?? 0) >= 3e3) throw new Error("Slack daily request budget exhausted");
-		this.db.prepare(`INSERT INTO scene_connector_usage VALUES (?, ?, ?, ?, 1)
-      ON CONFLICT(owner_id, workspace_id, account_id, utc_day) DO UPDATE SET request_count = request_count + 1`).run(principal.ownerId, principal.workspaceId, accountId, day);
-		const result = await this.adapter.executeWithPolicy({
-			context: {
-				principalId: principal.ownerId,
-				toolkits: ["slack"]
-			},
-			connection,
-			installation,
-			signal,
-			args,
-			action: {
-				connectorId: connection.connectorId,
-				toolkit: "slack",
-				actionId,
-				scope: "read",
-				curated: true,
-				cachedAt: (/* @__PURE__ */ new Date()).toISOString()
-			}
-		});
-		signal.throwIfAborted();
-		if (this.connection(principal, accountId).id !== connection.id) throw new Error("Slack connection changed");
-		if (result.decision !== "allowed") throw new Error("Slack read requires permission");
-		const envelope = object(result.result);
-		const data = object(envelope.data);
-		if (envelope.successful === false || envelope.error || data.ok === false || data.error || !Object.keys(data).length) throw new Error("Slack source unavailable; check connection permissions or rate limit");
-		return data;
-	}
-	async resolveLink(principal, accountId, url, signal) {
-		const parsed = parseSlackThreadUrl(url);
-		const auth = await this.call(principal, accountId, "SLACK_TEST_AUTH", {}, signal);
-		if (typeof auth.team_id !== "string" || !/^T[A-Z0-9]+$/.test(auth.team_id)) throw new Error("Slack workspace identity unavailable");
-		return {
-			accountId,
-			teamId: auth.team_id,
-			...parsed
-		};
-	}
-	async read(principal, reference, signal) {
-		const thread = this.normalize(reference);
-		if ((await this.call(principal, thread.accountId, "SLACK_TEST_AUTH", {}, signal)).team_id !== thread.teamId) throw new Error("Slack workspace identity changed");
-		const messages = /* @__PURE__ */ new Map();
-		const cursors = /* @__PURE__ */ new Set();
-		let cursor;
-		do {
-			const data = await this.call(principal, thread.accountId, "SLACK_FETCH_MESSAGE_THREAD_FROM_A_CONVERSATION", {
-				channel: thread.channelId,
-				ts: thread.threadTs,
-				limit: 100,
-				...cursor ? { cursor } : {}
-			}, signal);
-			if (!Array.isArray(data.messages) || !data.messages.length) throw new Error("Slack thread is missing or incomplete");
-			for (const item of data.messages) {
-				const message = object(item);
-				if (typeof message.ts !== "string" || typeof message.text !== "string" || message.ts !== thread.threadTs && message.thread_ts !== thread.threadTs) throw new Error("Unexpected Slack thread response");
-				messages.set(message.ts, {
-					ts: message.ts,
-					user: String(message.user ?? message.bot_id ?? "unknown"),
-					text: String(sanitizeConnectedSourceValue(message.text)),
-					...Array.isArray(message.files) && message.files.length || Array.isArray(message.attachments) && message.attachments.length ? { unreadAttachments: sanitizeConnectedSourceValue({
-						files: Array.isArray(message.files) ? message.files.slice(0, 20).map((value) => {
-							const file = object(value);
-							return {
-								id: file.id,
-								name: file.name,
-								mimetype: file.mimetype
-							};
-						}) : [],
-						richMessageCount: Array.isArray(message.attachments) ? message.attachments.length : 0,
-						contentFetched: false
-					}) } : {}
-				});
-			}
-			if (messages.size > 200) throw new Error("Slack thread exceeds the 200-message context budget");
-			const next = object(data.response_metadata).next_cursor;
-			if (next != null && typeof next !== "string") throw new Error("Invalid Slack pagination");
-			cursor = typeof next === "string" && next.trim() ? next.trim() : void 0;
-			if (data.has_more === true && !cursor) throw new Error("Slack thread pagination is incomplete");
-			if (cursor && (cursors.has(cursor) || cursors.size >= 9)) throw new Error("Slack pagination budget exceeded");
-			if (cursor) cursors.add(cursor);
-		} while (cursor);
-		if (!messages.has(thread.threadTs)) throw new Error("Select the root of the Slack thread");
-		const ordered = [...messages.values()].sort((a, b) => a.ts.localeCompare(b.ts));
-		const text = JSON.stringify(ordered);
-		if (text.length > 32e3) throw new Error("Slack thread exceeds the 32,000-character context budget");
-		return {
-			revision: sceneContentHash(ordered),
-			text,
-			observedAt: Date.now()
-		};
-	}
-};
-//#endregion
-export { SlackThreadSource, parseSlackThreadUrl, slackThreadSchema };

package/dist/src/notifications/browser-endpoint.d.ts

@@ -1,2 +0,0 @@
-/** Only supported public browser-push providers may receive subscription requests. */
-export declare function allowedPushEndpoint(value: string): boolean;

package/dist/src/notifications/browser-endpoint.js

@@ -1,13 +0,0 @@
-//#region src/notifications/browser-endpoint.ts
-/** Only supported public browser-push providers may receive subscription requests. */
-function allowedPushEndpoint(value) {
-	try {
-		const url = new URL(value);
-		const host = url.hostname;
-		return url.protocol === "https:" && !url.username && !url.password && (!url.port || url.port === "443") && (host === "fcm.googleapis.com" || host === "updates.push.services.mozilla.com" || host.endsWith(".push.services.mozilla.com") || host === "web.push.apple.com" || host.endsWith(".notify.windows.com"));
-	} catch {
-		return false;
-	}
-}
-//#endregion
-export { allowedPushEndpoint };