@keystrokehq/cli 0.0.21 → 0.0.22

package/dist/{api-J9UL8pqZ.mjs → api-O5tdGdzc.mjs}

@@ -29,7 +29,33 @@ const InitiateConnectionRequestSchema = z.object({
 	* tenant-specific authorize URL.
 	*/
 	input: z.record(z.string(), z.unknown()).optional(),
-	requestedScopes: z.array(z.string()).optional()
+	requestedScopes: z.array(z.string()).optional(),
+	/**
+	* Scope target for the resulting credential set. Optional — the
+	* server resolves the default at request time: an explicit value
+	* wins; absent that, the presence of `projectId` selects
+	* `project`, and otherwise the request defaults to
+	* `organization`. User scope must always be explicit.
+	*/
+	scope: CredentialScopeSchema.optional(),
+	/**
+	* Required when `scope === 'project'` (whether explicit or
+	* resolved). Must not be present for the other scopes.
+	*/
+	projectId: z.uuid().optional(),
+	/**
+	* Optional caller-supplied display name for the resulting
+	* connection. Falls back to the integration's display name on
+	* persist; collisions at the same scope target are auto-suffixed
+	* server-side.
+	*/
+	name: z.string().min(1).max(255).optional()
+}).refine((data) => !(data.scope === "project" && !data.projectId), {
+	message: "projectId is required when scope is 'project'",
+	path: ["projectId"]
+}).refine((data) => !(data.projectId && data.scope && data.scope !== "project"), {
+	message: "projectId must not be supplied when scope is not 'project'",
+	path: ["projectId"]
 });
 const InitiateConnectionResponseSchema = z.object({
 	authUrl: z.string(),
@@ -56,8 +82,8 @@ const ConnectionStatusFailedSchema = z.object({
 	/**
 	* Optional human-readable detail. Truncated by the server to
 	* {@link CONNECTION_FAILURE_DETAIL_MAX_CHARS} characters before being
-	* persisted in `credential_sets.last_callback_error_detail` and
-	* before being echoed in the callback redirect query.
+	* persisted in `connection_flows.error_detail` and before being
+	* echoed in the callback redirect query.
 	*/
 	message: z.string().max(300).optional(),
 	/** ISO-8601 timestamp of when the failure was recorded. */

package/dist/{connect-DzVxjeYr.mjs → connect-_l7Lkfxi.mjs}

@@ -8,6 +8,14 @@ const ConnectOptionsSchema = JsonOptionSchema.extend({
 	integrationId: z.string().optional(),
 	connection: z.string().optional().describe("Credential connection path to use when an integration has multiple OAuth paths"),
 	input: z.array(z.string()).optional().describe("Connection input as key=value. Repeat for multiple fields."),
+	scope: z.enum([
+		"organization",
+		"project",
+		"user"
+	]).optional().describe("Connection scope (organization | project | user). Defaults to project when a project is detected, otherwise organization. Use 'user' for personal credentials."),
+	projectId: z.string().optional().describe("Project to scope the connection to. Auto-detected from keystroke.config.ts when run inside a project directory."),
+	path: z.string().optional().describe("Path to the project root (default: nearest keystroke.config.ts walking up from cwd)"),
+	name: z.string().optional().describe("Display name for the resulting connection. Defaults to the integration name; duplicates are auto-suffixed."),
 	timeout: z.coerce.number().int().min(30).max(600).default(300).describe("Timeout in seconds (default: 5 minutes)"),
 	noOpen: z.boolean().optional().describe("Print the authorization URL instead of opening a browser")
 });
@@ -21,6 +29,22 @@ const CONNECT_OPTIONS_CONFIG = {
 		description: "Connection input as key=value. Repeat for multiple fields.",
 		collect: true
 	},
+	scope: {
+		flag: "--scope <organization|project|user>",
+		description: "Connection scope. Defaults to 'project' when a project is detected, otherwise 'organization'."
+	},
+	projectId: {
+		flag: "--project-id <uuid>",
+		description: "Project to scope the connection to. Required when --scope project is used outside a project directory."
+	},
+	path: {
+		flag: "--path <dir>",
+		description: "Path to the project root (default: walk up from cwd looking for keystroke.config.ts)"
+	},
+	name: {
+		flag: "--name <name>",
+		description: "Display name for the resulting connection."
+	},
 	timeout: {
 		flag: "--timeout <seconds>",
 		description: "Timeout in seconds (default: 300)"
@@ -37,7 +61,7 @@ function createConnectCommand() {
 		description: "Connect an official integration via OAuth (e.g., keystroke connect slack)",
 		schema: ConnectOptionsSchema,
 		optionsConfig: CONNECT_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./connect.handler-DFQdxkWZ.mjs")).handleConnect,
+		loadHandler: async () => (await import("./connect.handler-tqk-DOv8.mjs")).handleConnect,
 		argument: {
 			name: "integrationId",
 			description: "Integration to connect (e.g., slack, linear)",

package/dist/{connect.handler-DFQdxkWZ.mjs → connect.handler-tqk-DOv8.mjs}

@@ -1,9 +1,11 @@
 #!/usr/bin/env node
 
 import { a as ui, j as throwReportedCliExit, p as AUTH_HINT, v as isNetworkError, y as toErrorMessage } from "./keystroke.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
 import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { n as resolveWorkflowsDir } from "./resolve-project-Cj3MFnU0.mjs";
 import { t as openBrowser } from "./browser-Dvv5OQrt.mjs";
-import { i as InitiateConnectionResponseSchema, n as ConnectionStatusResponseSchema, r as InitiateConnectionRequestSchema } from "./api-J9UL8pqZ.mjs";
+import { i as InitiateConnectionResponseSchema, n as ConnectionStatusResponseSchema, r as InitiateConnectionRequestSchema } from "./api-O5tdGdzc.mjs";
 import { t as getIntegrationCatalog } from "./integration-catalog-cYlTmOSb.mjs";
 //#region src/commands/connect/connect.handler.ts
 function formatIntegrationLabel(catalog, integrationId) {
@@ -75,6 +77,29 @@ function exitWithError(ctx, message, opts) {
 	if (opts?.hint) ui.hint(opts.hint);
 	throwReportedCliExit(message);
 }
+/**
+* Resolve the project id for this connect attempt.
+*
+* Precedence:
+*   1. Explicit `--project-id <uuid>` flag.
+*   2. `keystroke.config.ts` discovered from `--path` or by walking up
+*      from cwd. Best-effort — silently returns `null` when nothing is
+*      found.
+*
+* Caller decides whether `null` is fatal: with `--scope project` it's
+* a usage error; with the default resolution it falls back to
+* organization scope.
+*/
+async function resolveConnectProjectId(options) {
+	if (options.projectId) return options.projectId;
+	const workflowsDir = await resolveWorkflowsDir(options.path);
+	if (!workflowsDir) return null;
+	try {
+		return (await assertWorkflowProjectRoot(workflowsDir)).projectId;
+	} catch {
+		return null;
+	}
+}
 function parseConnectionInput(rawInputs, ctx) {
 	const input = {};
 	for (const rawInput of rawInputs) {
@@ -127,12 +152,22 @@ async function handleConnect(options, ctx) {
 		if (oauthConnection && ((catalogEntry?.connections.length ?? 0) > 1 || options.connection)) ui.text(`Connection: ${formatConnectionLabel(oauthConnection)} (id: ${oauthConnection.id}${formatConnectionFlags(oauthConnection)})`);
 		ui.br();
 	}
+	const resolvedProjectId = await resolveConnectProjectId(options);
+	if (options.scope === "project" && !resolvedProjectId) exitWithError(ctx, "--scope project requires a project context. Pass --project-id <uuid>, --path <dir>, or run inside a project directory.", {
+		code: "USAGE_ERROR",
+		hint: "Use `keystroke init` to create a project, or pick a different scope."
+	});
+	const scopeForRequest = options.scope;
+	const projectIdForRequest = scopeForRequest === "user" || scopeForRequest === "organization" ? void 0 : resolvedProjectId ?? void 0;
 	let authUrl;
 	let initiatedAt;
 	try {
 		const requestBody = InitiateConnectionRequestSchema.parse({
 			...oauthConnection ? { credentialConnectionId: oauthConnection.id } : {},
-			...Object.keys(connectionInput).length > 0 ? { input: connectionInput } : {}
+			...Object.keys(connectionInput).length > 0 ? { input: connectionInput } : {},
+			...scopeForRequest ? { scope: scopeForRequest } : {},
+			...projectIdForRequest ? { projectId: projectIdForRequest } : {},
+			...options.name ? { name: options.name } : {}
 		});
 		const hasRequestBody = Object.keys(requestBody).length > 0;
 		const response = await fetch(`${baseUrl}/api/v1/connections/${integrationId}/initiate`, {

package/dist/{integrations-cwRfplNG.mjs → integrations-Cdq7iSLj.mjs}

@@ -2,7 +2,7 @@
 
 import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
 import { t as createTypedCommand } from "./commander-9Kro0Dl3.mjs";
-import { t as ConnectionKindValues } from "./api-J9UL8pqZ.mjs";
+import { t as ConnectionKindValues } from "./api-O5tdGdzc.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/platform-providers/index.ts
 const platformProviderRegistry = {

package/dist/keystroke.mjs

@@ -521,7 +521,7 @@ const logger = {
 };
 //#endregion
 //#region package.json
-var version = "0.0.21";
+var version = "0.0.22";
 //#endregion
 //#region src/command-registry.ts
 const ROOT_OPTIONS_WITH_VALUES$1 = new Set([
@@ -549,7 +549,7 @@ const lazyCommandDefinitions = [
 	},
 	{
 		name: "connect",
-		loadCommand: async () => (await import("./connect-DzVxjeYr.mjs")).createConnectCommand()
+		loadCommand: async () => (await import("./connect-_l7Lkfxi.mjs")).createConnectCommand()
 	},
 	{
 		name: "credentials",
@@ -570,7 +570,7 @@ const lazyCommandDefinitions = [
 	},
 	{
 		name: "integrations",
-		loadCommand: async () => (await import("./integrations-cwRfplNG.mjs")).createIntegrationsCommand()
+		loadCommand: async () => (await import("./integrations-Cdq7iSLj.mjs")).createIntegrationsCommand()
 	},
 	{
 		name: "invites",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keystrokehq/cli",
-  "version": "0.0.21",
+  "version": "0.0.22",
   "private": false,
   "description": "Command-line interface for creating, managing, and deploying Keystroke automations.",
   "type": "module",
@@ -39,19 +39,19 @@
     "tsdown": "0.21.10",
     "typescript": "^5.9.3",
     "vitest": "^4.1.5",
-    "@keystrokehq/config": "0.0.2",
-    "@keystroke/shared-types": "0.0.4",
-    "@keystroke/local-memory": "0.0.1",
     "@keystroke/env-utils": "0.0.0",
+    "@keystroke/local-memory": "0.0.1",
+    "@keystrokehq/config": "0.0.2",
+    "@keystroke/shared-types": "0.0.5",
     "@keystroke/typescript-config": "0.0.0",
-    "@keystroke/test-utils": "0.0.3",
     "@keystroke/utils": "0.0.0",
-    "@keystroke/workflow-builder": "0.0.6",
-    "@keystrokehq/testing": "0.2.2",
+    "@keystroke/test-utils": "0.0.3",
+    "@keystroke/workflow-builder": "0.0.7",
     "@keystrokehq/core": "0.0.7",
-    "@keystroke/workflow-deploy": "0.0.5",
     "@keystrokehq/workflow-build-contracts": "0.0.3",
-    "@keystroke/workflow-sdk": "0.0.3"
+    "@keystrokehq/testing": "0.2.2",
+    "@keystroke/workflow-deploy": "0.0.6",
+    "@keystroke/workflow-sdk": "0.0.4"
   },
   "keywords": [
     "automation",