@keystrokehq/keystroke 1.0.18 → 1.0.20

package/dist/{dist-BWGuF7Bi.mjs → dist-D0HbZRpR.mjs}

@@ -883,7 +883,9 @@ z.object({ patch: z.object({
 const AppCredentialFieldSchema = z.object({
 	label: z.string().trim().min(1).optional(),
 	secret: z.boolean().optional(),
-	optional: z.boolean().optional()
+	optional: z.boolean().optional(),
+	description: z.string().trim().min(1).optional(),
+	default: z.string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = z.record(z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -900,6 +902,13 @@ const AppAuthKindSchema = z.enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema = z.enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -913,7 +922,11 @@ z.object({
 	logo: z.string().url().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: z.array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
+}).extend({
+	source: AppSourceSchema,
+	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional()
+});
 const customAppNameSchema = z.string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema = ProjectSlugAvailabilityReasonSchema;
 z.object({
@@ -953,6 +966,7 @@ z.object({
 	oauthScopes: z.array(OAuthScopeOptionSchema),
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	createdAt: z.string().min(1),
 	updatedAt: z.string().min(1)
 });
@@ -973,6 +987,8 @@ const AppCatalogEntrySchema = z.object({
 	source: AppSourceSchema,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -1074,7 +1090,7 @@ const AppCredentialSummarySchema = z.object({
 });
 const credentialSecretValueSchema = z.record(z.string(), z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -1089,7 +1105,9 @@ const CredentialTargetsFieldsSchema = z.object({
 	createOrganizationCredential: z.boolean().default(false),
 	createUserProvidedCredential: z.boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: z.string().trim().min(1).optional()
+	label: z.string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: z.string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema.extend({
 	appId: z.string().min(1),
@@ -1100,14 +1118,22 @@ z.object({
 	status: z.enum(["connected", "redirecting"]),
 	authorizeUrl: z.string().url().nullable()
 });
-CredentialTargetsFieldsSchema.extend({ app: z.string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema.extend({
+	app: z.string().trim().min(1),
+	value: credentialSecretValueSchema.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 });
-z.object({
-	status: z.enum(["redirecting"]),
+const connectedKeystrokeConnectionResultSchema = z.object({
+	status: z.literal("connected"),
+	connectionId: z.string().min(1)
+});
+const redirectingKeystrokeConnectionResultSchema = z.object({
+	status: z.literal("redirecting"),
 	authorizeUrl: z.string().url(),
-	connectionId: z.string()
+	connectionId: z.string().min(1)
 });
+z.discriminatedUnion("status", [connectedKeystrokeConnectionResultSchema, redirectingKeystrokeConnectionResultSchema]);
 CredentialTargetsFieldsSchema.extend({
 	appId: z.string().min(1),
 	connectionKind: AppCredentialConnectionKindSchema,
@@ -1217,6 +1243,27 @@ z.object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: z.string().trim().min(1).optional()
 });
+const ExecuteKeystrokeToolErrorCodeSchema = z.enum([
+	"not_found",
+	"forbidden",
+	"mcp_execute_failed"
+]);
+/** Platform MCP execute error body (422 for upstream tool failures, 404/403 for resolve/access). */
+const ExecuteKeystrokeToolErrorResponseSchema = z.object({
+	error: ExecuteKeystrokeToolErrorCodeSchema,
+	message: z.string()
+});
+/** Turn upstream provider JSON error strings into LLM-readable text. */
+function formatMcpToolErrorMessage(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return trimmed;
+	try {
+		const parsed = JSON.parse(trimmed);
+		if (typeof parsed.detail === "string" && parsed.detail.trim()) return typeof parsed.code === "string" && parsed.code.trim() ? `${parsed.code}: ${parsed.detail.trim()}` : parsed.detail.trim();
+		if (typeof parsed.message === "string" && parsed.message.trim()) return parsed.message.trim();
+	} catch {}
+	return trimmed;
+}
 const TeamRequestTypeSchema = z.enum([
 	"org-deletion",
 	"contact",
@@ -2337,6 +2384,12 @@ const AgentMemoryFileSummarySchema = z.object({
 	path: z.string().min(1)
 });
 z.object({ files: z.array(AgentMemoryFileSummarySchema) });
+/** A single workspace file exposed to the dashboard (no contents in list responses). */
+const AgentWorkspaceFileSummarySchema = z.object({
+	id: z.string(),
+	path: z.string().min(1)
+});
+z.object({ files: z.array(AgentWorkspaceFileSummarySchema) });
 //#endregion
 //#region ../action/dist/index.mjs
 const zodSchema = z.custom((v) => v instanceof z.ZodType, "must be a Zod schema");
@@ -2578,6 +2631,6 @@ function getRegisteredProjectScopeId() {
 	return registry().getter?.();
 }
 //#endregion
-export { credentialInputSchema as C, normalizeCredentialList as D, mcpEntityId as E, toCredentialRequirement as O, credential as S, isCredentialInput as T, runWithMcpCredentialContext as _, getActionCredentialRequirements as a, CREDENTIAL_SCOPE_TYPES as b, getRunSignal as c, isStepInvocation as d, isWithinActionExecution as f, runOutsideActionExecution as g, resolveActionTool as h, executeAction as i, toolParameters as k, getWorkflowRunHandle as l, registerWorkflowRunGetter as m, createStepInvocation as n, getRegisteredMcpCredentialContext as o, registerProjectScopeGetter as p, defineAction as r, getRegisteredProjectScopeId as s, actionCoreSchema as t, isAction as u, runWithRunSignal as v, defineCredential as w, buildConnectDeeplink as x, runWithinActionExecution as y };
+export { toCredentialRequirement as A, credential as C, isCredentialInput as D, formatMcpToolErrorMessage as E, mcpEntityId as O, buildConnectDeeplink as S, defineCredential as T, runWithMcpCredentialContext as _, getActionCredentialRequirements as a, CREDENTIAL_SCOPE_TYPES as b, getRunSignal as c, isStepInvocation as d, isWithinActionExecution as f, runOutsideActionExecution as g, resolveActionTool as h, executeAction as i, toolParameters as j, normalizeCredentialList as k, getWorkflowRunHandle as l, registerWorkflowRunGetter as m, createStepInvocation as n, getRegisteredMcpCredentialContext as o, registerProjectScopeGetter as p, defineAction as r, getRegisteredProjectScopeId as s, actionCoreSchema as t, isAction as u, runWithRunSignal as v, credentialInputSchema as w, ExecuteKeystrokeToolErrorResponseSchema as x, runWithinActionExecution as y };
 
-//# sourceMappingURL=dist-BWGuF7Bi.mjs.map
+//# sourceMappingURL=dist-D0HbZRpR.mjs.map