cowork-os 0.3.21 → 0.3.25

package/src/electron/utils/notion-api.ts

@@ -0,0 +1,126 @@
+/**
+ * Notion API helpers
+ */
+
+import { NotionConnectionTestResult, NotionSettingsData } from '../../shared/types';
+
+export const NOTION_API_BASE = 'https://api.notion.com/v1';
+export const DEFAULT_NOTION_VERSION = '2025-09-03';
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function getNotionVersion(settings: NotionSettingsData): string {
+  return settings.notionVersion || DEFAULT_NOTION_VERSION;
+}
+
+function parseJsonSafe(text: string): any | undefined {
+  const trimmed = text.trim();
+  if (!trimmed) return undefined;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return undefined;
+  }
+}
+
+function formatNotionError(status: number, data: any, fallback?: string): string {
+  const message =
+    data?.message ||
+    data?.error ||
+    data?.details ||
+    fallback ||
+    'Notion API error';
+  return `Notion API error ${status}: ${message}`;
+}
+
+export interface NotionRequestOptions {
+  method: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+  path: string;
+  body?: Record<string, any>;
+  timeoutMs?: number;
+}
+
+export interface NotionRequestResult {
+  status: number;
+  data?: any;
+  raw?: string;
+}
+
+export async function notionRequest(
+  settings: NotionSettingsData,
+  options: NotionRequestOptions
+): Promise<NotionRequestResult> {
+  if (!settings.apiKey) {
+    throw new Error('Notion API key not configured. Add it in Settings > Integrations > Notion.');
+  }
+
+  const url = `${NOTION_API_BASE}${options.path}`;
+  const headers: Record<string, string> = {
+    Authorization: `Bearer ${settings.apiKey}`,
+    'Notion-Version': getNotionVersion(settings),
+  };
+
+  if (options.method !== 'GET' && options.method !== 'DELETE') {
+    headers['Content-Type'] = 'application/json';
+  }
+
+  const timeoutMs = options.timeoutMs ?? settings.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    const response = await fetch(url, {
+      method: options.method,
+      headers,
+      body: options.body ? JSON.stringify(options.body) : undefined,
+      signal: controller.signal,
+    });
+
+    const rawText = typeof response.text === 'function' ? await response.text() : '';
+    const data = rawText ? parseJsonSafe(rawText) : undefined;
+
+    if (!response.ok) {
+      throw new Error(formatNotionError(response.status, data, response.statusText));
+    }
+
+    return {
+      status: response.status,
+      data: data ?? undefined,
+      raw: rawText || undefined,
+    };
+  } catch (error: any) {
+    if (error?.name === 'AbortError') {
+      throw new Error('Notion API request timed out');
+    }
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+function extractUserInfo(data: any): { name?: string; userId?: string } {
+  if (!data || typeof data !== 'object') return {};
+  const name =
+    data.name ||
+    data?.bot?.owner?.user?.name ||
+    data?.person?.name ||
+    undefined;
+  const userId = data.id || data.user_id || undefined;
+  return { name, userId };
+}
+
+export async function testNotionConnection(settings: NotionSettingsData): Promise<NotionConnectionTestResult> {
+  try {
+    const result = await notionRequest(settings, { method: 'GET', path: '/users/me' });
+    const extracted = extractUserInfo(result.data);
+    return {
+      success: true,
+      name: extracted.name,
+      userId: extracted.userId,
+    };
+  } catch (error: any) {
+    return {
+      success: false,
+      error: error?.message || 'Failed to connect to Notion',
+    };
+  }
+}

package/src/electron/utils/onedrive-api.ts

@@ -0,0 +1,137 @@
+/**
+ * OneDrive API helpers (Microsoft Graph)
+ */
+
+import { OneDriveConnectionTestResult, OneDriveSettingsData } from '../../shared/types';
+
+export const ONEDRIVE_API_BASE = 'https://graph.microsoft.com/v1.0';
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function parseJsonSafe(text: string): any | undefined {
+  const trimmed = text.trim();
+  if (!trimmed) return undefined;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return undefined;
+  }
+}
+
+function formatGraphError(status: number, data: any, fallback?: string): string {
+  const message =
+    data?.error?.message ||
+    data?.message ||
+    fallback ||
+    'Microsoft Graph error';
+  return `Microsoft Graph error ${status}: ${message}`;
+}
+
+export interface OneDriveRequestOptions {
+  method: 'GET' | 'POST' | 'PATCH' | 'DELETE' | 'PUT';
+  path: string;
+  query?: Record<string, string | number | boolean | undefined>;
+  body?: any;
+  headers?: Record<string, string>;
+  timeoutMs?: number;
+}
+
+export interface OneDriveRequestResult {
+  status: number;
+  data?: any;
+  raw?: string;
+}
+
+export async function onedriveRequest(
+  settings: OneDriveSettingsData,
+  options: OneDriveRequestOptions
+): Promise<OneDriveRequestResult> {
+  if (!settings.accessToken) {
+    throw new Error('OneDrive access token not configured. Add it in Settings > Integrations > OneDrive.');
+  }
+
+  const params = new URLSearchParams();
+  if (options.query) {
+    for (const [key, value] of Object.entries(options.query)) {
+      if (value === undefined || value === null) continue;
+      params.set(key, String(value));
+    }
+  }
+  const queryString = params.toString();
+  const url = `${ONEDRIVE_API_BASE}${options.path}${queryString ? `?${queryString}` : ''}`;
+
+  const headers: Record<string, string> = {
+    Authorization: `Bearer ${settings.accessToken}`,
+    ...(options.headers || {}),
+  };
+
+  const isBinaryBody = options.body instanceof Uint8Array || options.body instanceof ArrayBuffer || Buffer.isBuffer(options.body);
+  if (options.body && !isBinaryBody && options.method !== 'GET' && options.method !== 'DELETE') {
+    headers['Content-Type'] = headers['Content-Type'] || 'application/json';
+  }
+
+  const timeoutMs = options.timeoutMs ?? settings.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    const response = await fetch(url, {
+      method: options.method,
+      headers,
+      body: options.body
+        ? isBinaryBody
+          ? options.body
+          : JSON.stringify(options.body)
+        : undefined,
+      signal: controller.signal,
+    });
+
+    const rawText = typeof response.text === 'function' ? await response.text() : '';
+    const data = rawText ? parseJsonSafe(rawText) : undefined;
+
+    if (!response.ok) {
+      throw new Error(formatGraphError(response.status, data, response.statusText));
+    }
+
+    return {
+      status: response.status,
+      data: data ?? undefined,
+      raw: rawText || undefined,
+    };
+  } catch (error: any) {
+    if (error?.name === 'AbortError') {
+      throw new Error('OneDrive API request timed out');
+    }
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+function extractDriveOwner(data: any): { name?: string; userId?: string; driveId?: string } {
+  if (!data || typeof data !== 'object') return {};
+  const name =
+    data?.owner?.user?.displayName ||
+    data?.owner?.user?.id ||
+    undefined;
+  const userId = data?.owner?.user?.id || undefined;
+  const driveId = data?.id || undefined;
+  return { name, userId, driveId };
+}
+
+export async function testOneDriveConnection(settings: OneDriveSettingsData): Promise<OneDriveConnectionTestResult> {
+  try {
+    const result = await onedriveRequest(settings, { method: 'GET', path: '/me/drive' });
+    const extracted = extractDriveOwner(result.data);
+    return {
+      success: true,
+      name: extracted.name,
+      userId: extracted.userId,
+      driveId: extracted.driveId,
+    };
+  } catch (error: any) {
+    return {
+      success: false,
+      error: error?.message || 'Failed to connect to OneDrive',
+    };
+  }
+}

package/src/electron/utils/sharepoint-api.ts

@@ -0,0 +1,132 @@
+/**
+ * SharePoint API helpers (Microsoft Graph)
+ */
+
+import { SharePointConnectionTestResult, SharePointSettingsData } from '../../shared/types';
+
+export const SHAREPOINT_API_BASE = 'https://graph.microsoft.com/v1.0';
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function parseJsonSafe(text: string): any | undefined {
+  const trimmed = text.trim();
+  if (!trimmed) return undefined;
+  try {
+    return JSON.parse(trimmed);
+  } catch {
+    return undefined;
+  }
+}
+
+function formatGraphError(status: number, data: any, fallback?: string): string {
+  const message =
+    data?.error?.message ||
+    data?.message ||
+    fallback ||
+    'Microsoft Graph error';
+  return `Microsoft Graph error ${status}: ${message}`;
+}
+
+export interface SharePointRequestOptions {
+  method: 'GET' | 'POST' | 'PATCH' | 'DELETE' | 'PUT';
+  path: string;
+  query?: Record<string, string | number | boolean | undefined>;
+  body?: any;
+  headers?: Record<string, string>;
+  timeoutMs?: number;
+}
+
+export interface SharePointRequestResult {
+  status: number;
+  data?: any;
+  raw?: string;
+}
+
+export async function sharepointRequest(
+  settings: SharePointSettingsData,
+  options: SharePointRequestOptions
+): Promise<SharePointRequestResult> {
+  if (!settings.accessToken) {
+    throw new Error('SharePoint access token not configured. Add it in Settings > Integrations > SharePoint.');
+  }
+
+  const params = new URLSearchParams();
+  if (options.query) {
+    for (const [key, value] of Object.entries(options.query)) {
+      if (value === undefined || value === null) continue;
+      params.set(key, String(value));
+    }
+  }
+  const queryString = params.toString();
+  const url = `${SHAREPOINT_API_BASE}${options.path}${queryString ? `?${queryString}` : ''}`;
+
+  const headers: Record<string, string> = {
+    Authorization: `Bearer ${settings.accessToken}`,
+    ...(options.headers || {}),
+  };
+
+  const isBinaryBody = options.body instanceof Uint8Array || options.body instanceof ArrayBuffer || Buffer.isBuffer(options.body);
+  if (options.body && !isBinaryBody && options.method !== 'GET' && options.method !== 'DELETE') {
+    headers['Content-Type'] = headers['Content-Type'] || 'application/json';
+  }
+
+  const timeoutMs = options.timeoutMs ?? settings.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    const response = await fetch(url, {
+      method: options.method,
+      headers,
+      body: options.body
+        ? isBinaryBody
+          ? options.body
+          : JSON.stringify(options.body)
+        : undefined,
+      signal: controller.signal,
+    });
+
+    const rawText = typeof response.text === 'function' ? await response.text() : '';
+    const data = rawText ? parseJsonSafe(rawText) : undefined;
+
+    if (!response.ok) {
+      throw new Error(formatGraphError(response.status, data, response.statusText));
+    }
+
+    return {
+      status: response.status,
+      data: data ?? undefined,
+      raw: rawText || undefined,
+    };
+  } catch (error: any) {
+    if (error?.name === 'AbortError') {
+      throw new Error('SharePoint API request timed out');
+    }
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+function extractUserInfo(data: any): { name?: string; userId?: string } {
+  if (!data || typeof data !== 'object') return {};
+  const name = data.displayName || data.name || undefined;
+  const userId = data.id || undefined;
+  return { name, userId };
+}
+
+export async function testSharePointConnection(settings: SharePointSettingsData): Promise<SharePointConnectionTestResult> {
+  try {
+    const result = await sharepointRequest(settings, { method: 'GET', path: '/me' });
+    const extracted = extractUserInfo(result.data);
+    return {
+      success: true,
+      name: extracted.name,
+      userId: extracted.userId,
+    };
+  } catch (error: any) {
+    return {
+      success: false,
+      error: error?.message || 'Failed to connect to SharePoint',
+    };
+  }
+}

package/src/electron/utils/validation.ts

@@ -4,6 +4,7 @@
  */
 
 import { z } from 'zod';
+import { LLM_PROVIDER_TYPES } from '../../shared/types';
 
 // Common validation patterns
 const MAX_STRING_LENGTH = 10000;
@@ -63,6 +64,26 @@ export const TaskMessageSchema = z.object({
   message: z.string().min(1).max(MAX_PROMPT_LENGTH),
 });
 
+export const FileImportSchema = z.object({
+  workspaceId: z.string().refine(
+    (val) => val === TEMP_WORKSPACE_ID || z.string().uuid().safeParse(val).success,
+    { message: 'Must be a valid UUID or temp workspace ID' }
+  ),
+  files: z.array(z.string().min(1).max(MAX_PATH_LENGTH)).min(1).max(20),
+});
+
+export const FileImportDataSchema = z.object({
+  workspaceId: z.string().refine(
+    (val) => val === TEMP_WORKSPACE_ID || z.string().uuid().safeParse(val).success,
+    { message: 'Must be a valid UUID or temp workspace ID' }
+  ),
+  files: z.array(z.object({
+    name: z.string().min(1).max(MAX_PATH_LENGTH),
+    data: z.string().min(1),
+    mimeType: z.string().max(200).optional(),
+  })).min(1).max(20),
+});
+
 // ============ Approval Schemas ============
 
 export const ApprovalResponseSchema = z.object({
@@ -72,7 +93,7 @@ export const ApprovalResponseSchema = z.object({
 
 // ============ LLM Settings Schemas ============
 
-export const LLMProviderTypeSchema = z.enum(['anthropic', 'bedrock', 'ollama', 'gemini', 'openrouter', 'openai']);
+export const LLMProviderTypeSchema = z.enum(LLM_PROVIDER_TYPES);
 
 export const AnthropicSettingsSchema = z.object({
   apiKey: z.string().max(500).optional(),
@@ -102,6 +123,7 @@ export const GeminiSettingsSchema = z.object({
 export const OpenRouterSettingsSchema = z.object({
   apiKey: z.string().max(500).optional(),
   model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
 }).optional();
 
 export const OpenAISettingsSchema = z.object({
@@ -114,6 +136,40 @@ export const OpenAISettingsSchema = z.object({
   authMethod: z.enum(['api_key', 'oauth']).optional(),
 }).optional();
 
+export const AzureSettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  endpoint: z.string().max(500).optional(),
+  deployment: z.string().max(200).optional(),
+  deployments: z.array(z.string().max(200)).max(50).optional(),
+  apiVersion: z.string().max(200).optional(),
+}).optional();
+
+export const GroqSettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+}).optional();
+
+export const XAISettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+}).optional();
+
+export const KimiSettingsSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+}).optional();
+
+export const CustomProviderConfigSchema = z.object({
+  apiKey: z.string().max(500).optional(),
+  model: z.string().max(200).optional(),
+  baseUrl: z.string().max(500).optional(),
+});
+
+export const CustomProvidersSchema = z.record(z.string(), CustomProviderConfigSchema).optional();
+
 export const LLMSettingsSchema = z.object({
   providerType: LLMProviderTypeSchema,
   modelKey: z.string().max(200),
@@ -123,6 +179,11 @@ export const LLMSettingsSchema = z.object({
   gemini: GeminiSettingsSchema,
   openrouter: OpenRouterSettingsSchema,
   openai: OpenAISettingsSchema,
+  azure: AzureSettingsSchema,
+  groq: GroqSettingsSchema,
+  xai: XAISettingsSchema,
+  kimi: KimiSettingsSchema,
+  customProviders: CustomProvidersSchema,
 });
 
 // ============ Search Settings Schemas ============
@@ -163,6 +224,63 @@ export const XSettingsSchema = z.object({
   quoteDepth: z.number().int().min(0).max(5).optional(),
 });
 
+// ============ Notion Settings Schema ============
+
+export const NotionSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  apiKey: z.string().max(2000).optional(),
+  notionVersion: z.string().max(50).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ Box Settings Schema ============
+
+export const BoxSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ OneDrive Settings Schema ============
+
+export const OneDriveSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  driveId: z.string().max(200).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ Google Workspace Settings Schema ============
+
+export const GoogleWorkspaceSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  clientId: z.string().max(4000).optional(),
+  clientSecret: z.string().max(4000).optional(),
+  accessToken: z.string().max(4000).optional(),
+  refreshToken: z.string().max(4000).optional(),
+  tokenExpiresAt: z.number().int().optional(),
+  scopes: z.array(z.string().max(200)).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ Dropbox Settings Schema ============
+
+export const DropboxSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
+// ============ SharePoint Settings Schema ============
+
+export const SharePointSettingsSchema = z.object({
+  enabled: z.boolean().default(false),
+  accessToken: z.string().max(4000).optional(),
+  siteId: z.string().max(500).optional(),
+  driveId: z.string().max(500).optional(),
+  timeoutMs: z.number().int().min(1000).max(120000).optional(),
+});
+
 // ============ Guardrail Settings Schema ============
 
 export const GuardrailSettingsSchema = z.object({
@@ -451,6 +569,15 @@ export const MCPRegistrySearchSchema = z.object({
   offset: z.number().int().min(0).default(0),
 });
 
+export const MCPConnectorOAuthSchema = z.object({
+  provider: z.enum(['salesforce', 'jira', 'hubspot', 'zendesk']),
+  clientId: z.string().min(1).max(500),
+  clientSecret: z.string().max(500).optional(),
+  scopes: z.array(z.string().max(200)).max(50).optional(),
+  loginUrl: z.string().url().max(500).optional(),
+  subdomain: z.string().max(200).optional(),
+});
+
 // ============ Hooks (Webhooks) Schemas ============
 
 export const HookMappingChannelSchema = z.enum(['telegram', 'discord', 'slack', 'whatsapp', 'imessage', 'signal', 'mattermost', 'matrix', 'twitch', 'line', 'bluebubbles', 'email', 'last']);

package/src/electron/utils/x-cli.ts

@@ -46,7 +46,7 @@ function buildGlobalArgs(settings: XSettingsData, json: boolean): string[] {
 
   if (settings.authMethod === 'manual') {
     if (!settings.authToken || !settings.ct0) {
-      throw new Error('Missing auth_token or ct0. Add them in Settings > More Channels > X.');
+      throw new Error('Missing auth_token or ct0. Add them in Settings > X (Twitter).');
     }
     args.push('--auth-token', settings.authToken, '--ct0', settings.ct0);
   } else {