@keystrokehq/keystroke 1.0.19 → 1.0.20

package/dist/{dist-ubYcMOAC.cjs → dist-BF8uTixs.cjs}

@@ -1,6 +1,7 @@
 const require_chunk = require("./chunk-DHdmVzO2.cjs");
-const require_dist$1 = require("./dist-D-5MaYYx.cjs");
+const require_dist$1 = require("./dist-CHlytoPR.cjs");
 let node_async_hooks = require("node:async_hooks");
+let node_module = require("node:module");
 require("node:fs");
 require("node:path");
 let node_crypto = require("node:crypto");
@@ -3130,8 +3131,9 @@ function getDatabaseHandle$1() {
 function getDbFromContext$1() {
 	return getDatabaseHandle$1().db;
 }
+(0, node_module.createRequire)(require("url").pathToFileURL(__filename).href);
 function buildPgSchema$1(registry) {
-	return Object.fromEntries(Object.entries(registry).map(([name, { pg: pg$3 }]) => [name, pg$3]));
+	return Object.fromEntries(Object.entries(registry).map(([name, { pg }]) => [name, pg]));
 }
 function buildSqliteSchema$1(registry) {
 	return Object.fromEntries(Object.entries(registry).map(([name, { sqlite }]) => [name, sqlite]));
@@ -3451,7 +3453,8 @@ const credentialInstances = pgTable("credential_instances", {
 	sharedConnectionId: text$1("shared_connection_id"),
 	grantedScopes: jsonb("granted_scopes").$type(),
 	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	lastUsedAt: timestamp("last_used_at", { withTimezone: true })
 }, (table) => [uniqueIndex$1("credential_instances_project_scope_slug_unique").on(table.projectId, table.scopeType, table.scopeId, table.slug), index$1("credential_instances_project_app_slug_scope_idx").on(table.projectId, table.appSlug, table.scopeType, table.scopeId)]);
 const credentialInstancesSqlite = sqliteTable("credential_instances", {
 	id: text("id").primaryKey(),
@@ -3470,7 +3473,8 @@ const credentialInstancesSqlite = sqliteTable("credential_instances", {
 	sharedConnectionId: text("shared_connection_id"),
 	grantedScopes: text("granted_scopes", { mode: "json" }).$type(),
 	createdAt: integer("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer("updated_at", { mode: "timestamp_ms" }).notNull()
+	updatedAt: integer("updated_at", { mode: "timestamp_ms" }).notNull(),
+	lastUsedAt: integer("last_used_at", { mode: "timestamp_ms" })
 }, (table) => [uniqueIndex("credential_instances_project_scope_slug_unique").on(table.projectId, table.scopeType, table.scopeId, table.slug), index("credential_instances_project_app_slug_scope_idx").on(table.projectId, table.appSlug, table.scopeType, table.scopeId)]);
 const credentialAssignments = pgTable("credential_assignments", {
 	id: text$1("id").primaryKey(),
@@ -3865,6 +3869,10 @@ async function selectCredentialInstancesForScope(appSlug, scopeType, scopeId) {
 	const scopeCondition = scopeId === null ? and(eq(credentialInstances.scopeType, scopeType), isNull(credentialInstances.scopeId)) : and(eq(credentialInstances.scopeType, scopeType), eq(credentialInstances.scopeId, scopeId));
 	return db.select().from(credentialInstances).where(credentialScopeAnd(scopeType, eq(credentialInstances.appSlug, appSlug), scopeCondition));
 }
+/** Record that a credential was just resolved/used. Targeted by id; never throws on a missing row. */
+async function touchCredentialInstanceLastUsed(id) {
+	await getDb$1().update(credentialInstances).set({ lastUsedAt: /* @__PURE__ */ new Date() }).where(eq(credentialInstances.id, id));
+}
 async function listCredentialAssignmentsByTarget(options) {
 	return getDb$1().select().from(credentialAssignments).where(scopedAnd$1(credentialAssignments, eq(credentialAssignments.targetType, options.targetType), eq(credentialAssignments.targetKey, options.targetKey)));
 }
@@ -17261,7 +17269,7 @@ async function connectMcpServer(name, options) {
 }
 async function createTransport(url, transport, requestInit, fetchImpl) {
 	if (transport === "sse") {
-		const { SSEClientTransport } = await Promise.resolve().then(() => require("./sse-iAjqagFU.cjs"));
+		const { SSEClientTransport } = await Promise.resolve().then(() => require("./sse-5bXReLPW.cjs"));
 		return new SSEClientTransport(url, {
 			requestInit,
 			fetch: fetchImpl
@@ -17464,10 +17472,9 @@ const authVerificationsSqlite = sqliteTable("verification", {
 	createdAt: integer("created_at", { mode: "timestamp_ms" }).notNull(),
 	updatedAt: integer("updated_at", { mode: "timestamp_ms" }).notNull()
 }, (table) => [index("verification_identifier_idx").on(table.identifier)]);
-//#endregion
-//#region ../platform-database/dist/index.mjs
+(0, node_module.createRequire)(require("url").pathToFileURL(__filename).href);
 function buildPgSchema(registry) {
-	return Object.fromEntries(Object.entries(registry).map(([name, { pg: pg$2 }]) => [name, pg$2]));
+	return Object.fromEntries(Object.entries(registry).map(([name, { pg }]) => [name, pg]));
 }
 function buildSqliteSchema(registry) {
 	return Object.fromEntries(Object.entries(registry).map(([name, { sqlite }]) => [name, sqlite]));
@@ -17596,6 +17603,7 @@ const apps = pgTable("apps", {
 	authKind: text$1("auth_kind").$type().notNull(),
 	oauthScopes: jsonb("oauth_scopes").$type().notNull(),
 	credentialFields: jsonb("credential_fields").$type().notNull().default({}),
+	credentialScheme: text$1("credential_scheme").$type(),
 	source: text$1("source").$type().notNull(),
 	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
 	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
@@ -17611,6 +17619,7 @@ const appsSqlite = sqliteTable("apps", {
 	authKind: text("auth_kind").$type().notNull(),
 	oauthScopes: text("oauth_scopes", { mode: "json" }).$type().notNull(),
 	credentialFields: text("credential_fields", { mode: "json" }).$type().notNull().default({}),
+	credentialScheme: text("credential_scheme").$type(),
 	source: text("source").$type().notNull(),
 	createdAt: integer("created_at", { mode: "timestamp_ms" }).notNull(),
 	updatedAt: integer("updated_at", { mode: "timestamp_ms" }).notNull()
@@ -18057,7 +18066,7 @@ async function resolveOAuthAccessToken(connection, app, tokenRefresh) {
 	return refreshed.accessToken;
 }
 //#endregion
-//#region ../credentials/dist/store-BokhwcCi.mjs
+//#region ../credentials/dist/store-Bib92S-M.mjs
 function normalizeRow(row) {
 	const { projectId: _projectId, ...rest } = row;
 	return rest;
@@ -18076,6 +18085,9 @@ async function selectCredentialInstanceById$1(id) {
 async function selectCredentialInstancesForScope$1(appSlug, scopeType, scopeId) {
 	return (await selectCredentialInstancesForScope(appSlug, scopeType, scopeId)).map(normalizeLocalRow);
 }
+async function touchCredentialInstanceLastUsed$1(id) {
+	await touchCredentialInstanceLastUsed(id);
+}
 //#endregion
 //#region ../secrets/dist/index.mjs
 const ALGORITHM = "aes-256-gcm";
@@ -18508,7 +18520,25 @@ function pickInstance(rows, key, consumer) {
 		consumer
 	});
 }
+/** Throttle window for last-used writes so bursty runs don't hammer the same row. */
+const LAST_USED_THROTTLE_MS = 6e4;
+/**
+* Record that a credential was just resolved. Throttled (skip when touched within
+* {@link LAST_USED_THROTTLE_MS}) and best-effort: a write failure must never break resolution.
+*/
+async function touchLastUsed(row) {
+	const last = row.lastUsedAt?.getTime();
+	if (last !== void 0 && Date.now() - last < LAST_USED_THROTTLE_MS) return;
+	try {
+		await touchCredentialInstanceLastUsed$1(row.id);
+	} catch {}
+}
 async function resolveInstanceValue(row, requirement, backend) {
+	const value = await materializeInstanceValue(row, requirement, backend);
+	await touchLastUsed(row);
+	return value;
+}
+async function materializeInstanceValue(row, requirement, backend) {
 	if (row.authKind === "keystroke") {
 		if (!row.connectionId) throw new MissingCredentialsError({
 			key: row.appSlug,
@@ -19020,4 +19050,4 @@ Object.defineProperty(exports, "zodToJsonSchema", {
 	}
 });
 
-//# sourceMappingURL=dist-ubYcMOAC.cjs.map
+//# sourceMappingURL=dist-BF8uTixs.cjs.map