cowork-os 0.3.21 → 0.3.23

package/src/electron/utils/onedrive-api.ts

@@ -0,0 +1,137 @@
+/**
+ * OneDrive API helpers (Microsoft Graph)
+ */
+
+import { OneDriveConnectionTestResult, OneDriveSettingsData } from '../../shared/types';
+
+export const ONEDRIVE_API_BASE = 'https://graph.microsoft.com/v1.0';
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function parseJsonSafe(text: string): any | undefined {
+  const trimmed = text.trim();
+  if (!trimmed) return undefined;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return undefined;
+  }
+}
+
+function formatGraphError(status: number, data: any, fallback?: string): string {
+  const message =
+    data?.error?.message ||
+    data?.message ||
+    fallback ||
+    'Microsoft Graph error';
+  return `Microsoft Graph error ${status}: ${message}`;
+}
+
+export interface OneDriveRequestOptions {
+  method: 'GET' | 'POST' | 'PATCH' | 'DELETE' | 'PUT';
+  path: string;
+  query?: Record<string, string | number | boolean | undefined>;
+  body?: any;
+  headers?: Record<string, string>;
+  timeoutMs?: number;
+}
+
+export interface OneDriveRequestResult {
+  status: number;
+  data?: any;
+  raw?: string;
+}
+
+export async function onedriveRequest(
+  settings: OneDriveSettingsData,
+  options: OneDriveRequestOptions
+): Promise<OneDriveRequestResult> {
+  if (!settings.accessToken) {
+    throw new Error('OneDrive access token not configured. Add it in Settings > Integrations > OneDrive.');
+  }
+
+  const params = new URLSearchParams();
+  if (options.query) {
+    for (const [key, value] of Object.entries(options.query)) {
+      if (value === undefined || value === null) continue;
+      params.set(key, String(value));
+    }
+  }
+  const queryString = params.toString();
+  const url = `${ONEDRIVE_API_BASE}${options.path}${queryString ? `?${queryString}` : ''}`;
+
+  const headers: Record<string, string> = {
+    Authorization: `Bearer ${settings.accessToken}`,
+    ...(options.headers || {}),
+  };
+
+  const isBinaryBody = options.body instanceof Uint8Array || options.body instanceof ArrayBuffer || Buffer.isBuffer(options.body);
+  if (options.body && !isBinaryBody && options.method !== 'GET' && options.method !== 'DELETE') {
+    headers['Content-Type'] = headers['Content-Type'] || 'application/json';
+  }
+
+  const timeoutMs = options.timeoutMs ?? settings.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    const response = await fetch(url, {
+      method: options.method,
+      headers,
+      body: options.body
+        ? isBinaryBody
+          ? options.body
+          : JSON.stringify(options.body)
+        : undefined,
+      signal: controller.signal,
+    });
+
+    const rawText = typeof response.text === 'function' ? await response.text() : '';
+    const data = rawText ? parseJsonSafe(rawText) : undefined;
+
+    if (!response.ok) {
+      throw new Error(formatGraphError(response.status, data, response.statusText));
+    }
+
+    return {
+      status: response.status,
+      data: data ?? undefined,
+      raw: rawText || undefined,
+    };
+  } catch (error: any) {
+    if (error?.name === 'AbortError') {
+      throw new Error('OneDrive API request timed out');
+    }
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+function extractDriveOwner(data: any): { name?: string; userId?: string; driveId?: string } {
+  if (!data || typeof data !== 'object') return {};
+  const name =
+    data?.owner?.user?.displayName ||
+    data?.owner?.user?.id ||
+    undefined;
+  const userId = data?.owner?.user?.id || undefined;
+  const driveId = data?.id || undefined;
+  return { name, userId, driveId };
+}
+
+export async function testOneDriveConnection(settings: OneDriveSettingsData): Promise<OneDriveConnectionTestResult> {
+  try {
+    const result = await onedriveRequest(settings, { method: 'GET', path: '/me/drive' });
+    const extracted = extractDriveOwner(result.data);
+    return {
+      success: true,
+      name: extracted.name,
+      userId: extracted.userId,
+      driveId: extracted.driveId,
+    };
+  } catch (error: any) {
+    return {
+      success: false,
+      error: error?.message || 'Failed to connect to OneDrive',
+    };
+  }
+}

package/src/electron/utils/sharepoint-api.ts

@@ -0,0 +1,132 @@
+/**
+ * SharePoint API helpers (Microsoft Graph)
+ */
+
+import { SharePointConnectionTestResult, SharePointSettingsData } from '../../shared/types';
+
+export const SHAREPOINT_API_BASE = 'https://graph.microsoft.com/v1.0';
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function parseJsonSafe(text: string): any | undefined {
+  const trimmed = text.trim();
+  if (!trimmed) return undefined;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return undefined;
+  }
+}
+
+function formatGraphError(status: number, data: any, fallback?: string): string {
+  const message =
+    data?.error?.message ||
+    data?.message ||
+    fallback ||
+    'Microsoft Graph error';
+  return `Microsoft Graph error ${status}: ${message}`;
+}
+
+export interface SharePointRequestOptions {
+  method: 'GET' | 'POST' | 'PATCH' | 'DELETE' | 'PUT';
+  path: string;
+  query?: Record<string, string | number | boolean | undefined>;
+  body?: any;
+  headers?: Record<string, string>;
+  timeoutMs?: number;
+}
+
+export interface SharePointRequestResult {
+  status: number;
+  data?: any;
+  raw?: string;
+}
+
+export async function sharepointRequest(
+  settings: SharePointSettingsData,
+  options: SharePointRequestOptions
+): Promise<SharePointRequestResult> {
+  if (!settings.accessToken) {
+    throw new Error('SharePoint access token not configured. Add it in Settings > Integrations > SharePoint.');
+  }
+
+  const params = new URLSearchParams();
+  if (options.query) {
+    for (const [key, value] of Object.entries(options.query)) {
+      if (value === undefined || value === null) continue;
+      params.set(key, String(value));
+    }
+  }
+  const queryString = params.toString();
+  const url = `${SHAREPOINT_API_BASE}${options.path}${queryString ? `?${queryString}` : ''}`;
+
+  const headers: Record<string, string> = {
+    Authorization: `Bearer ${settings.accessToken}`,
+    ...(options.headers || {}),
+  };
+
+  const isBinaryBody = options.body instanceof Uint8Array || options.body instanceof ArrayBuffer || Buffer.isBuffer(options.body);
+  if (options.body && !isBinaryBody && options.method !== 'GET' && options.method !== 'DELETE') {
+    headers['Content-Type'] = headers['Content-Type'] || 'application/json';
+  }
+
+  const timeoutMs = options.timeoutMs ?? settings.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    const response = await fetch(url, {
+      method: options.method,
+      headers,
+      body: options.body
+        ? isBinaryBody
+          ? options.body
+          : JSON.stringify(options.body)
+        : undefined,
+      signal: controller.signal,
+    });
+
+    const rawText = typeof response.text === 'function' ? await response.text() : '';
+    const data = rawText ? parseJsonSafe(rawText) : undefined;
+
+    if (!response.ok) {
+      throw new Error(formatGraphError(response.status, data, response.statusText));
+    }
+
+    return {
+      status: response.status,
+      data: data ?? undefined,
+      raw: rawText || undefined,
+    };
+  } catch (error: any) {
+    if (error?.name === 'AbortError') {
+      throw new Error('SharePoint API request timed out');
+    }
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+function extractUserInfo(data: any): { name?: string; userId?: string } {
+  if (!data || typeof data !== 'object') return {};
+  const name = data.displayName || data.name || undefined;
+  const userId = data.id || undefined;
+  return { name, userId };
+}
+
+export async function testSharePointConnection(settings: SharePointSettingsData): Promise<SharePointConnectionTestResult> {
+  try {
+    const result = await sharepointRequest(settings, { method: 'GET', path: '/me' });
+    const extracted = extractUserInfo(result.data);
+    return {
+      success: true,
+      name: extracted.name,
+      userId: extracted.userId,
+    };
+  } catch (error: any) {
+    return {
+      success: false,
+      error: error?.message || 'Failed to connect to SharePoint',
+    };
+  }
+}

package/src/electron/utils/validation.ts

@@ -4,6 +4,7 @@
  */
 
 import { z } from 'zod';
+import { LLM_PROVIDER_TYPES } from '../../shared/types';
 
 // Common validation patterns
 const MAX_STRING_LENGTH = 10000;
@@ -63,6 +64,14 @@ export const TaskMessageSchema = z.object({
   message: z.string().min(1).max(MAX_PROMPT_LENGTH),
 });
 
+export const FileImportSchema = z.object({
+  workspaceId: z.string().refine(
+    (val) => val === TEMP_WORKSPACE_ID || z.string().uuid().safeParse(val).success,
+    { message: 'Must be a valid UUID or temp workspace ID' }
+  ),
+  files: z.array(z.string().min(1).max(MAX_PATH_LENGTH)).min(1).max(20),
+});
+
 // ============ Approval Schemas ============
 
 export const ApprovalResponseSchema = z.object({
@@ -72,7 +81,7 @@ export const ApprovalResponseSchema = z.object({
 
 // ============ LLM Settings Schemas ============
 
-export const LLMProviderTypeSchema = z.enum(['anthropic', 'bedrock', 'ollama', 'gemini', 'openrouter', 'openai']);
+export const LLMProviderTypeSchema = z.enum(LLM_PROVIDER_TYPES);
 
 export const AnthropicSettingsSchema = z.object({
   apiKey: z.string().max(500).optional(),
@@ -102,6 +111,7 @@ export const GeminiSettingsSchema = z.object({
 export const OpenRouterSettingsSchema = z.object({
   apiKey: z.string().max(500).optional(),
   model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
 }).optional();
 
 export const OpenAISettingsSchema = z.object({
@@ -114,6 +124,32 @@ export const OpenAISettingsSchema = z.object({
   authMethod: z.enum(['api_key', 'oauth']).optional(),
 }).optional();
 
+export const GroqSettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+}).optional();
+
+export const XAISettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+}).optional();
+
+export const KimiSettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+}).optional();
+
+export const CustomProviderConfigSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+});
+
+export const CustomProvidersSchema = z.record(z.string(), CustomProviderConfigSchema).optional();
+
 export const LLMSettingsSchema = z.object({
   providerType: LLMProviderTypeSchema,
   modelKey: z.string().max(200),
@@ -123,6 +159,10 @@ export const LLMSettingsSchema = z.object({
   gemini: GeminiSettingsSchema,
   openrouter: OpenRouterSettingsSchema,
   openai: OpenAISettingsSchema,
+  groq: GroqSettingsSchema,
+  xai: XAISettingsSchema,
+  kimi: KimiSettingsSchema,
+  customProviders: CustomProvidersSchema,
 });
 
 // ============ Search Settings Schemas ============
@@ -163,6 +203,58 @@ export const XSettingsSchema = z.object({
   quoteDepth: z.number().int().min(0).max(5).optional(),
 });
 
+// ============ Notion Settings Schema ============
+
+export const NotionSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  apiKey: z.string().max(2000).optional(),
+  notionVersion: z.string().max(50).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ Box Settings Schema ============
+
+export const BoxSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ OneDrive Settings Schema ============
+
+export const OneDriveSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  driveId: z.string().max(200).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ Google Drive Settings Schema ============
+
+export const GoogleDriveSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ Dropbox Settings Schema ============
+
+export const DropboxSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ SharePoint Settings Schema ============
+
+export const SharePointSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  siteId: z.string().max(500).optional(),
+  driveId: z.string().max(500).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
 // ============ Guardrail Settings Schema ============
 
 export const GuardrailSettingsSchema = z.object({
@@ -451,6 +543,15 @@ export const MCPRegistrySearchSchema = z.object({
   offset: z.number().int().min(0).default(0),
 });
 
+export const MCPConnectorOAuthSchema = z.object({
+  provider: z.enum(['salesforce', 'jira', 'hubspot', 'zendesk']),
+  clientId: z.string().min(1).max(500),
+  clientSecret: z.string().max(500).optional(),
+  scopes: z.array(z.string().max(200)).max(50).optional(),
+  loginUrl: z.string().url().max(500).optional(),
+  subdomain: z.string().max(200).optional(),
+});
+
 // ============ Hooks (Webhooks) Schemas ============
 
 export const HookMappingChannelSchema = z.enum(['telegram', 'discord', 'slack', 'whatsapp', 'imessage', 'signal', 'mattermost', 'matrix', 'twitch', 'line', 'bluebubbles', 'email', 'last']);

package/src/electron/utils/x-cli.ts

@@ -46,7 +46,7 @@ function buildGlobalArgs(settings: XSettingsData, json: boolean): string[] {
 
   if (settings.authMethod === 'manual') {
     if (!settings.authToken || !settings.ct0) {
-      throw new Error('Missing auth_token or ct0. Add them in Settings > More Channels > X.');
+      throw new Error('Missing auth_token or ct0. Add them in Settings > X (Twitter).');
     }
     args.push('--auth-token', settings.authToken, '--ct0', settings.ct0);
   } else {

package/src/renderer/App.tsx

@@ -5,6 +5,7 @@ import { RightPanel } from './components/RightPanel';
 import { Settings } from './components/Settings';
 import { DisclaimerModal } from './components/DisclaimerModal';
 import { Onboarding } from './components/Onboarding';
+import { BrowserView } from './components/BrowserView';
 // TaskQueuePanel moved to RightPanel
 import { ToastContainer } from './components/Toast';
 import { QuickTaskFAB } from './components/QuickTaskFAB';
@@ -20,14 +21,15 @@ function getEffectiveTheme(themeMode: ThemeMode): 'light' | 'dark' {
   return themeMode;
 }
 
-type AppView = 'main' | 'settings';
+type AppView = 'main' | 'settings' | 'browser';
 
 export function App() {
   const [currentWorkspace, setCurrentWorkspace] = useState<Workspace | null>(null);
   const [tasks, setTasks] = useState<Task[]>([]);
   const [selectedTaskId, setSelectedTaskId] = useState<string | null>(null);
   const [currentView, setCurrentView] = useState<AppView>('main');
-  const [settingsTab, setSettingsTab] = useState<'appearance' | 'llm' | 'search' | 'telegram' | 'slack' | 'whatsapp' | 'teams' | 'morechannels' | 'updates' | 'guardrails' | 'queue' | 'skills' | 'scheduled' | 'voice'>('appearance');
+  const [browserUrl, setBrowserUrl] = useState<string>('');
+  const [settingsTab, setSettingsTab] = useState<'appearance' | 'llm' | 'search' | 'telegram' | 'slack' | 'whatsapp' | 'teams' | 'x' | 'morechannels' | 'integrations' | 'updates' | 'guardrails' | 'queue' | 'skills' | 'scheduled' | 'voice' | 'missioncontrol'>('appearance');
   const [events, setEvents] = useState<TaskEvent[]>([]);
 
   // Model selection state
@@ -82,6 +84,11 @@ export function App() {
     loadLLMConfig();
   };
 
+  const handleOpenBrowserView = (url?: string) => {
+    setBrowserUrl(url || '');
+    setCurrentView('browser');
+  };
+
   const handleShowOnboarding = () => {
     // Reset onboarding state to show the wizard again
     setOnboardingCompleted(false);
@@ -710,6 +717,10 @@ export function App() {
                 selectedTaskId={selectedTaskId}
                 onSelectTask={setSelectedTaskId}
                 onOpenSettings={() => setCurrentView('settings')}
+                onOpenMissionControl={() => {
+                  setSettingsTab('missioncontrol');
+                  setCurrentView('settings');
+                }}
                 onTasksChanged={loadTasks}
               />
             )}
@@ -727,6 +738,7 @@ export function App() {
                 setCurrentView('settings');
               }}
               onStopTask={handleCancelTask}
+              onOpenBrowserView={handleOpenBrowserView}
               selectedModel={selectedModel}
               availableModels={availableModels}
               onModelChange={handleModelChange}
@@ -770,6 +782,12 @@ export function App() {
           onboardingCompletedAt={onboardingCompletedAt}
         />
       )}
+      {currentView === 'browser' && (
+        <BrowserView
+          initialUrl={browserUrl}
+          onBack={() => setCurrentView('main')}
+        />
+      )}
     </div>
   );
 }