@keystrokehq/keystroke 1.0.24 → 1.0.25

package/dist/{dist-CE8Bys_M.cjs → dist-BhKByPZJ.cjs}

@@ -885,13 +885,38 @@ zod.z.object({ patch: zod.z.object({
 	mode: ChannelListenModeSchema.optional(),
 	subscribeOnMention: zod.z.boolean().optional()
 }) });
+/**
+* Where a manual MCP API key is injected on each request. MCP servers don't
+* advertise API-key support in a discoverable way, so the user picks the
+* placement: a request header (optionally prefixed, e.g. `Bearer `) or a query
+* param (e.g. Exa's `exaApiKey`).
+*/
+const McpApiKeyPlacementSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
+	kind: zod.z.literal("header"),
+	name: zod.z.string().trim().min(1),
+	/** Prepended to the token, e.g. `"Bearer "` for `Authorization: Bearer <token>`. */
+	prefix: zod.z.string().optional()
+}), zod.z.object({
+	kind: zod.z.literal("query"),
+	name: zod.z.string().trim().min(1)
+})]);
+zod.z.object({
+	token: zod.z.string().trim().min(1),
+	placement: McpApiKeyPlacementSchema.default({
+		kind: "header",
+		name: "Authorization",
+		prefix: "Bearer "
+	})
+});
 /** Metadata for one vault field on a custom api_key app. */
 const AppCredentialFieldSchema = zod.z.object({
 	label: zod.z.string().trim().min(1).optional(),
 	secret: zod.z.boolean().optional(),
 	optional: zod.z.boolean().optional(),
 	description: zod.z.string().trim().min(1).optional(),
-	default: zod.z.string().optional()
+	default: zod.z.string().optional(),
+	/** For direct MCP api-key apps: where this field's value is injected on the request. */
+	placement: McpApiKeyPlacementSchema.optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = zod.z.record(zod.z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -942,11 +967,43 @@ zod.z.object({
 	suggestion: AppSlugSchema.optional()
 });
 zod.z.object({ slug: zod.z.string().trim().min(1) });
+/** Request body for creating an org custom app (api_key or direct MCP). */
+const optionalCredentialFieldsSchema = zod.z.record(zod.z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema);
 zod.z.object({
 	name: customAppNameSchema,
 	slug: AppSlugSchema,
 	description: zod.z.string().trim().min(1),
-	fields: AppCredentialFieldsSchema
+	source: zod.z.enum([
+		"custom",
+		"mcp",
+		"openapi"
+	]).default("custom"),
+	mcpUrl: zod.z.string().url().optional(),
+	authKind: AppAuthKindSchema.optional(),
+	fields: optionalCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
+	oauthScopes: zod.z.array(OAuthScopeOptionSchema).optional()
+}).superRefine((data, ctx) => {
+	if (data.source === "mcp" && !data.mcpUrl) ctx.addIssue({
+		code: "custom",
+		message: "mcpUrl is required for MCP apps",
+		path: ["mcpUrl"]
+	});
+	if (!(data.authKind ?? (data.source === "custom" ? "api_key" : void 0))) {
+		ctx.addIssue({
+			code: "custom",
+			message: "authKind is required",
+			path: ["authKind"]
+		});
+		return;
+	}
+	if (data.source === "custom") {
+		const parsed = AppCredentialFieldsSchema.safeParse(data.fields ?? {});
+		if (!parsed.success) for (const issue of parsed.error.issues) ctx.addIssue({
+			...issue,
+			path: ["fields", ...issue.path]
+		});
+	}
 });
 zod.z.object({
 	id: zod.z.string().min(1),
@@ -954,9 +1011,12 @@ zod.z.object({
 	name: zod.z.string().min(1),
 	description: zod.z.string().min(1),
 	category: zod.z.string().min(1),
-	authKind: zod.z.literal("api_key"),
-	source: zod.z.literal("custom"),
-	credentialFields: AppCredentialFieldsSchema,
+	authKind: AppAuthKindSchema,
+	source: AppSourceSchema,
+	mcpUrl: zod.z.string().url().nullable().optional(),
+	credentialFields: optionalCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
+	oauthScopes: zod.z.array(OAuthScopeOptionSchema).optional(),
 	createdAt: zod.z.string().min(1),
 	updatedAt: zod.z.string().min(1)
 });
@@ -973,6 +1033,7 @@ zod.z.object({
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
 	credentialScheme: AppCredentialSchemeSchema.optional(),
+	mcpUrl: zod.z.string().url().nullable().optional(),
 	createdAt: zod.z.string().min(1),
 	updatedAt: zod.z.string().min(1)
 });
@@ -995,10 +1056,72 @@ const AppCatalogEntrySchema = zod.z.object({
 	credentialFields: AppCredentialFieldsSchema.optional(),
 	/** Composio auth scheme when credentialFields are present. */
 	credentialScheme: AppCredentialSchemeSchema.optional(),
+	/** Direct MCP server URL when source is mcp. */
+	mcpUrl: zod.z.string().url().nullable().optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
 zod.z.array(AppCatalogEntrySchema);
+const McpAuthProbeModeSchema = zod.z.enum([
+	"none",
+	"token",
+	"oauth"
+]);
+const McpAuthProbeOAuthSchema = zod.z.object({
+	issuer: zod.z.string().optional(),
+	authorizationEndpoint: zod.z.string().url(),
+	tokenEndpoint: zod.z.string().url(),
+	registrationEndpoint: zod.z.string().url().optional(),
+	scopes: zod.z.array(zod.z.string()),
+	resource: zod.z.string().optional(),
+	/** Human-readable label from OAuth protected-resource metadata (RFC 9728). */
+	resourceName: zod.z.string().optional()
+});
+zod.z.object({
+	url: zod.z.string().url(),
+	mode: McpAuthProbeModeSchema,
+	unauthenticatedStatus: zod.z.number().int().optional(),
+	scheme: AppCredentialSchemeSchema.optional(),
+	oauth: McpAuthProbeOAuthSchema.optional()
+});
+zod.z.object({ url: zod.z.string().url() });
+zod.z.object({
+	detected: zod.z.boolean(),
+	template: zod.z.object({
+		authKind: AppAuthKindSchema,
+		credentialFields: zod.z.record(zod.z.string(), AppCredentialFieldSchema).optional(),
+		credentialScheme: AppCredentialSchemeSchema.optional(),
+		oauthScopes: zod.z.array(OAuthScopeOptionSchema),
+		mcpUrl: zod.z.string().url(),
+		oauth: McpAuthProbeOAuthSchema.optional(),
+		serverName: zod.z.string().optional(),
+		serverDescription: zod.z.string().optional()
+	})
+});
+zod.z.object({
+	appSlug: zod.z.string().trim().min(1),
+	projects: zod.z.array(zod.z.string().trim().min(1)).optional(),
+	createOrganizationCredential: zod.z.boolean().optional(),
+	createUserProvidedCredential: zod.z.boolean().optional(),
+	label: zod.z.string().trim().min(1).optional(),
+	credentialInstanceId: zod.z.string().trim().min(1).optional(),
+	scopes: zod.z.array(zod.z.string()).optional()
+});
+zod.z.object({ authorizeUrl: zod.z.string().url() });
+zod.z.object({ url: zod.z.string().url() });
+zod.z.object({
+	detected: zod.z.boolean(),
+	template: zod.z.object({
+		authKind: AppAuthKindSchema,
+		credentialFields: zod.z.record(zod.z.string(), AppCredentialFieldSchema).optional(),
+		credentialScheme: AppCredentialSchemeSchema.optional(),
+		oauthScopes: zod.z.array(OAuthScopeOptionSchema),
+		openapiUrl: zod.z.string().url(),
+		name: zod.z.string().optional(),
+		description: zod.z.string().optional(),
+		homepageUrl: zod.z.string().optional()
+	})
+});
 const CatalogAppSummarySchema = zod.z.object({
 	name: zod.z.string(),
 	description: zod.z.string(),
@@ -2975,4 +3098,4 @@ Object.defineProperty(exports, "toolParameters", {
 	}
 });
 
-//# sourceMappingURL=dist-CE8Bys_M.cjs.map
+//# sourceMappingURL=dist-BhKByPZJ.cjs.map