@keystrokehq/keystroke 0.0.173 → 0.0.175

package/dist/{dist--zLOSTcG.cjs → dist-B3WT5qgl.cjs}

@@ -843,7 +843,39 @@ const OAuthScopeOptionSchema = zod.z.object({
 	required: zod.z.boolean().optional()
 });
 /** How an app authenticates when connecting credentials. */
-const AppAuthKindSchema = zod.z.enum(["oauth", "api_key"]);
+const AppAuthKindSchema = zod.z.enum([
+	"oauth",
+	"api_key",
+	"keystroke"
+]);
+/**
+* Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
+* Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
+*/
+const AppSourceSchema = zod.z.string().trim().min(1);
+zod.z.object({
+	slug: zod.z.string().trim().min(1),
+	name: zod.z.string().min(1),
+	description: zod.z.string().min(1),
+	category: zod.z.string().min(1),
+	logo: zod.z.string().url().optional(),
+	authKind: AppAuthKindSchema,
+	oauthScopes: zod.z.array(OAuthScopeOptionSchema)
+}).extend({ source: AppSourceSchema });
+zod.z.object({
+	id: zod.z.string().min(1),
+	organizationId: zod.z.string().min(1).nullable(),
+	slug: zod.z.string().min(1),
+	name: zod.z.string().min(1),
+	description: zod.z.string().min(1),
+	category: zod.z.string().min(1),
+	logo: zod.z.string().url().nullable(),
+	authKind: AppAuthKindSchema,
+	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
+	source: AppSourceSchema,
+	createdAt: zod.z.string().min(1),
+	updatedAt: zod.z.string().min(1)
+});
 /**
 * A connectable integration shown in the "Connect an app" picker. An "app" is
 * an integration / credential set — connected state is whether a credential exists.
@@ -854,6 +886,7 @@ const AppCatalogEntrySchema = zod.z.object({
 	description: zod.z.string().min(1),
 	category: zod.z.string().min(1),
 	integrationDescription: zod.z.string().min(1),
+	logo: zod.z.string().url().nullable().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
 	/** When present, the app supports agent gateway bindings (external channels). */
@@ -866,32 +899,18 @@ const CredentialAuthKindSchema = zod.z.enum([
 	"oauth_managed",
 	"keystroke"
 ]);
-/** Where a credential instance is stored (`credential_instances.scope_type`). */
-const CredentialScopeTypeSchema = zod.z.enum([
-	"organization",
-	"project",
-	"user"
-]);
 /**
-* Resolution chain step when an action/tool looks up credentials.
-* `selection` uses explicit instance ids; other levels map to {@link CredentialScopeType}.
+* Where a credential instance is stored (`credential_instances.scope_type`), and the only thing an
+* action/tool can pin via `.scope(...)`. There is no resolution chain: when no scope is pinned, the
+* resolver tries the project default, then the org default, then throws.
 */
-const CredentialScopeLevelSchema = zod.z.enum([
-	"selection",
+const CredentialScopeTypeSchema = zod.z.enum([
 	"organization",
 	"project",
 	"user"
 ]);
 CredentialAuthKindSchema.options;
-CredentialScopeTypeSchema.options;
-const CREDENTIAL_SCOPE_LEVELS = CredentialScopeLevelSchema.options;
-/** Default chain when `credential.static(...).scope()` is called with no args. */
-const DEFAULT_CREDENTIAL_RESOLUTION_CHAIN = ["organization", "project"];
-const CREDENTIAL_SCOPE_LEVEL_TO_SCOPE_TYPE = {
-	organization: "organization",
-	project: "project",
-	user: "user"
-};
+const CREDENTIAL_SCOPE_TYPES = CredentialScopeTypeSchema.options;
 /** Scope of a platform app credential (maps to `credential_instances.scope_type`). */
 const AppCredentialScopeSchema = zod.z.enum([
 	"user",
@@ -1015,7 +1034,14 @@ const KeystrokeCredentialSchema = zod.z.object({
 zod.z.object({
 	app: zod.z.string().trim().min(1),
 	tool: zod.z.string().trim().min(1),
-	arguments: zod.z.record(zod.z.string(), zod.z.unknown()).default({})
+	arguments: zod.z.record(zod.z.string(), zod.z.unknown()).default({}),
+	/**
+	* Resolved credential instance to execute against. When set, the platform executes that exact
+	* connection (scoped to the caller's org); when omitted it resolves the app's instance by scope.
+	*/
+	instanceId: zod.z.string().trim().min(1).optional(),
+	/** Pinned provider toolkit version, sourced from the app definition; forwarded to the provider. */
+	version: zod.z.string().trim().min(1)
 });
 const TeamRequestTypeSchema = zod.z.enum([
 	"org-deletion",
@@ -1040,12 +1066,12 @@ function createRef(kind, key, schema, options) {
 		key,
 		schema,
 		...tokenField !== void 0 ? { tokenField } : {},
-		scope(...chain) {
+		scope(scope) {
 			return {
 				key,
 				kind,
 				schema,
-				chain: chain.length > 0 ? chain : DEFAULT_CREDENTIAL_RESOLUTION_CHAIN,
+				scope,
 				...tokenField !== void 0 ? { tokenField } : {}
 			};
 		}
@@ -1076,7 +1102,7 @@ function normalizeCredentialList(list) {
 	return list.map((item) => toCredentialRequirement(item));
 }
 function isCredentialRequirement(item) {
-	return "chain" in item;
+	return typeof item.scope !== "function";
 }
 function toCredentialRequirement(item) {
 	if (isCredentialRequirement(item)) return item;
@@ -1084,7 +1110,6 @@ function toCredentialRequirement(item) {
 		key: item.key,
 		kind: item.kind,
 		schema: item.schema,
-		chain: DEFAULT_CREDENTIAL_RESOLUTION_CHAIN,
 		...item.tokenField !== void 0 ? { tokenField: item.tokenField } : {}
 	};
 }
@@ -2250,19 +2275,13 @@ function registerWorkflowRunGetter(fn) {
 function getWorkflowRunHandle() {
 	return registry().getter?.();
 }
-function buildSelectionForAction(action, instanceId) {
-	if (!action.credentials?.length) return {};
-	const requirements = normalizeCredentialList(action.credentials);
-	return Object.fromEntries(requirements.map((requirement) => [requirement.key, instanceId]));
-}
 function executeStep(state) {
 	if (state.input === void 0) throw new Error(`Step "${state.action.slug}" has no input. Call .run(input) before awaiting or chaining .scope().`);
 	const handle = getWorkflowRunHandle();
 	if (!handle) throw new Error(`Step "${state.action.slug}" must run inside a workflow or be called as .run(input, credentials) in tests.`);
 	return handle.actionRunner(state.action, state.input, {
 		id: state.id,
-		credentialChain: state.chain,
-		credentialSelection: state.selection
+		credentialScope: state.scope
 	});
 }
 function isStepInvocation(value) {
@@ -2270,20 +2289,10 @@ function isStepInvocation(value) {
 }
 function createStepInvocation(state) {
 	return {
-		scope(...chain) {
-			return createStepInvocation({
-				...state,
-				chain: chain.length > 0 ? chain : state.chain
-			});
-		},
-		select(instanceIdOrMap) {
-			const nextSelection = typeof instanceIdOrMap === "string" ? buildSelectionForAction(state.action, instanceIdOrMap) : instanceIdOrMap;
+		scope(scope) {
 			return createStepInvocation({
 				...state,
-				selection: {
-					...state.selection,
-					...nextSelection
-				}
+				scope
 			});
 		},
 		run(input) {
@@ -2315,11 +2324,15 @@ function attachStepApi(action) {
 				input
 			});
 		},
-		scope(...chain) {
-			return createStepInvocation({
-				action: stepAction,
-				input: void 0,
-				chain
+		scope(scope) {
+			if (!action.credentials) return attachStepApi(action);
+			const credentials = normalizeCredentialList(action.credentials).map((requirement) => ({
+				...requirement,
+				scope
+			}));
+			return attachStepApi({
+				...action,
+				credentials
 			});
 		}
 	};
@@ -2374,22 +2387,10 @@ function resolveActionTool(action, options) {
 	};
 }
 //#endregion
-Object.defineProperty(exports, "CREDENTIAL_SCOPE_LEVELS", {
-	enumerable: true,
-	get: function() {
-		return CREDENTIAL_SCOPE_LEVELS;
-	}
-});
-Object.defineProperty(exports, "CREDENTIAL_SCOPE_LEVEL_TO_SCOPE_TYPE", {
-	enumerable: true,
-	get: function() {
-		return CREDENTIAL_SCOPE_LEVEL_TO_SCOPE_TYPE;
-	}
-});
-Object.defineProperty(exports, "DEFAULT_CREDENTIAL_RESOLUTION_CHAIN", {
+Object.defineProperty(exports, "CREDENTIAL_SCOPE_TYPES", {
 	enumerable: true,
 	get: function() {
-		return DEFAULT_CREDENTIAL_RESOLUTION_CHAIN;
+		return CREDENTIAL_SCOPE_TYPES;
 	}
 });
 Object.defineProperty(exports, "actionCoreSchema", {
@@ -2531,4 +2532,4 @@ Object.defineProperty(exports, "toolParameters", {
 	}
 });
 
-//# sourceMappingURL=dist--zLOSTcG.cjs.map
+//# sourceMappingURL=dist-B3WT5qgl.cjs.map