@keystrokehq/hosting 0.1.14 → 0.1.15

package/dist/index.cjs

@@ -4393,6 +4393,25 @@ function superRefine(fn, params) {
 	return /* @__PURE__ */ _superRefine(fn, params);
 }
 //#endregion
+//#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+const ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+(function(ZodFirstPartyTypeKind) {})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
+//#endregion
 //#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/coerce.js
 function number(params) {
 	return /* @__PURE__ */ _coercedNumber(ZodNumber, params);
@@ -5333,7 +5352,9 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		appSlugs: array(string()).default([]),
 		toolSlugs: array(string()).default([]),
 		/** Credential requirements per tool slug (the agent's credential consumer key). */
-		toolRequirements: record(string(), array(CredentialRequirementSummarySchema)).optional()
+		toolRequirements: record(string(), array(CredentialRequirementSummarySchema)).optional(),
+		/** Credential requirements for the agent's VM sandbox env / git bootstrap. */
+		sandboxRequirements: array(CredentialRequirementSummarySchema).optional()
 	}),
 	object({
 		kind: literal("action"),
@@ -6256,9 +6277,24 @@ object({
 		"contact",
 		"enterprise-upgrade",
 		"verification",
-		"slack-connect"
+		"slack-connect",
+		"connector-access"
 	]),
-	message: string().trim().max(5e3).optional()
+	message: string().trim().max(5e3).optional(),
+	/** Required for connector-access requests (sandbox VM secret exposure). */
+	appSlug: string().trim().min(1).optional()
+}).superRefine((value, ctx) => {
+	if (value.type === "connector-access" && !value.appSlug) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		path: ["appSlug"],
+		message: "appSlug is required for connector-access requests"
+	});
+});
+object({ ok: literal(true) });
+object({
+	message: string().trim().min(1).max(1e4),
+	cliVersion: string().trim().min(1).max(64).optional(),
+	projectSlug: string().trim().min(1).max(128).optional()
 });
 object({ ok: literal(true) });
 const TemplateKindSchema = _enum([
@@ -6311,6 +6347,46 @@ object({
 	companyWebsite: string().optional()
 });
 object({ models: array(string()) });
+object({ accessToken: string() });
+const CredentialAccessUnavailableReasonSchema = _enum(["request_access", "reconnect_required"]);
+object({
+	error: literal("credential_access_unavailable"),
+	code: literal("credential_access_unavailable"),
+	appSlug: string().min(1),
+	reason: CredentialAccessUnavailableReasonSchema,
+	requestAccessUrl: string().url().optional(),
+	message: string().optional()
+});
+discriminatedUnion("kind", [
+	object({
+		kind: literal("api_key"),
+		instanceId: string().min(1)
+	}),
+	object({
+		kind: literal("oauth"),
+		connectionId: string().min(1)
+	}),
+	object({
+		kind: literal("keystroke"),
+		instanceId: string().min(1),
+		connectionId: string().min(1),
+		appSlug: string().min(1)
+	})
+]);
+discriminatedUnion("kind", [
+	object({
+		kind: literal("api_key"),
+		value: unknown()
+	}),
+	object({
+		kind: literal("oauth"),
+		accessToken: string().min(1)
+	}),
+	object({
+		kind: literal("keystroke"),
+		value: unknown()
+	})
+]);
 const ValidationErrorDetailSchema = object({
 	path: string(),
 	message: string()
@@ -8012,7 +8088,7 @@ function parseOrgArtifactsFromEnv(env = process.env) {
 	const parsed = JSON.parse(Buffer.from(raw, "base64").toString("utf8"));
 	if (!Array.isArray(parsed)) throw new Error("KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array");
 	return parsed.map((entry) => {
-		if (!entry || typeof entry !== "object" || typeof entry.projectId !== "string" || typeof entry.artifactStorageKey !== "string") throw new Error("KEYSTROKE_ORG_ARTIFACTS entries require projectId and artifactStorageKey");
+		if (!entry || typeof entry !== "object" || typeof entry.projectId !== "string" || typeof entry.artifactStorageKey !== "string" || typeof entry.artifactId !== "string" || typeof entry.artifactVersion !== "number") throw new Error("KEYSTROKE_ORG_ARTIFACTS entries require projectId, artifactStorageKey, artifactId, and artifactVersion");
 		return entry;
 	});
 }
@@ -8214,7 +8290,9 @@ function createDockerRuntime(options = {}) {
 			if (input.projects.length === 0) throw new Error("Docker org runtime requires at least one project deploy");
 			let launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({
 				projectId: project.projectId,
-				artifactStorageKey: project.artifactStorageKey
+				artifactStorageKey: project.artifactStorageKey,
+				artifactId: project.artifactId,
+				artifactVersion: project.artifactVersion
 			})), input.database, input.env);
 			if (options.workspacesMount) {
 				const { hostPath, containerPath } = options.workspacesMount;