@keystrokehq/keystroke 1.0.8 → 1.0.9

package/dist/action.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("./dist-DOMwPx7V.cjs");
+const require_dist = require("./dist-HI6bM6LK.cjs");
 exports.CREDENTIAL_SCOPE_TYPES = require_dist.CREDENTIAL_SCOPE_TYPES;
 exports.actionCoreSchema = require_dist.actionCoreSchema;
 exports.createStepInvocation = require_dist.createStepInvocation;
@@ -9,6 +9,7 @@ exports.defineAction = require_dist.defineAction;
 exports.defineCredential = require_dist.defineCredential;
 exports.executeAction = require_dist.executeAction;
 exports.getActionCredentialRequirements = require_dist.getActionCredentialRequirements;
+exports.getRegisteredMcpCredentialContext = require_dist.getRegisteredMcpCredentialContext;
 exports.getRegisteredProjectScopeId = require_dist.getRegisteredProjectScopeId;
 exports.getRunSignal = require_dist.getRunSignal;
 exports.getWorkflowRunHandle = require_dist.getWorkflowRunHandle;
@@ -21,6 +22,7 @@ exports.registerProjectScopeGetter = require_dist.registerProjectScopeGetter;
 exports.registerWorkflowRunGetter = require_dist.registerWorkflowRunGetter;
 exports.resolveActionTool = require_dist.resolveActionTool;
 exports.runOutsideActionExecution = require_dist.runOutsideActionExecution;
+exports.runWithMcpCredentialContext = require_dist.runWithMcpCredentialContext;
 exports.runWithRunSignal = require_dist.runWithRunSignal;
 exports.runWithinActionExecution = require_dist.runWithinActionExecution;
 exports.toCredentialRequirement = require_dist.toCredentialRequirement;

package/dist/action.d.cts

@@ -1,3 +1,3 @@
-import { C as isCredentialInput, S as defineCredential, T as toCredentialRequirement, a as CredentialInput, b as credential, d as DefineOAuthCredentialInput, f as DefineStaticCredentialInput, l as CredentialScopeType, n as Credential, o as CredentialList, p as NormalizeCredential, r as CredentialAuthKind, s as CredentialRequirement, t as CREDENTIAL_SCOPE_TYPES, u as DefineCredentialInput, v as ResolvedCredentials, w as normalizeCredentialList, x as credentialInputSchema } from "./index-e9f4pcX4.cjs";
-import { C as resolveActionTool, E as runWithinActionExecution, S as registerWorkflowRunGetter, T as runWithRunSignal, _ as getWorkflowRunHandle, a as ResolveActionCredentialsFn, b as isWithinActionExecution, c as WorkflowActionDefinition, d as createStepInvocation, f as defineAction, g as getRunSignal, h as getRegisteredProjectScopeId, i as AgentRunOptions, l as WorkflowRunHandle, m as getActionCredentialRequirements, n as ActionDefinition, o as ResolveActionToolOptions, p as executeAction, r as ActionDefinitionInput, s as StepInvocation, t as ActionCredentialConsumer, u as actionCoreSchema, v as isAction, w as runOutsideActionExecution, x as registerProjectScopeGetter, y as isStepInvocation } from "./index-Dgy9MjuX.cjs";
-export { type ActionCredentialConsumer, type ActionDefinition, type ActionDefinitionInput, type AgentRunOptions, CREDENTIAL_SCOPE_TYPES, type Credential, type CredentialAuthKind, type CredentialInput, type CredentialList, type CredentialRequirement, type CredentialScopeType, type DefineCredentialInput, type DefineOAuthCredentialInput, type DefineStaticCredentialInput, type NormalizeCredential, type ResolveActionCredentialsFn, type ResolveActionToolOptions, type ResolvedCredentials, type StepInvocation, type WorkflowActionDefinition, type WorkflowRunHandle, actionCoreSchema, createStepInvocation, credential, credentialInputSchema, defineAction, defineCredential, executeAction, getActionCredentialRequirements, getRegisteredProjectScopeId, getRunSignal, getWorkflowRunHandle, isAction, isCredentialInput, isStepInvocation, isWithinActionExecution, normalizeCredentialList, registerProjectScopeGetter, registerWorkflowRunGetter, resolveActionTool, runOutsideActionExecution, runWithRunSignal, runWithinActionExecution, toCredentialRequirement };
+import { C as defineCredential, E as toCredentialRequirement, S as credentialInputSchema, T as normalizeCredentialList, c as CredentialRequirement, d as DefineCredentialInput, f as DefineOAuthCredentialInput, i as CredentialAuthKind, m as NormalizeCredential, n as Credential, o as CredentialInput, p as DefineStaticCredentialInput, s as CredentialList, t as CREDENTIAL_SCOPE_TYPES, u as CredentialScopeType, w as isCredentialInput, x as credential, y as ResolvedCredentials } from "./index-WT4ULMiw.cjs";
+import { C as registerProjectScopeGetter, D as runWithMcpCredentialContext, E as runOutsideActionExecution, O as runWithRunSignal, S as isWithinActionExecution, T as resolveActionTool, _ as getRegisteredProjectScopeId, a as McpCredentialContext, b as isAction, c as StepInvocation, d as actionCoreSchema, f as createStepInvocation, g as getRegisteredMcpCredentialContext, h as getActionCredentialRequirements, i as AgentRunOptions, k as runWithinActionExecution, l as WorkflowActionDefinition, m as executeAction, n as ActionDefinition, o as ResolveActionCredentialsFn, p as defineAction, r as ActionDefinitionInput, s as ResolveActionToolOptions, t as ActionCredentialConsumer, u as WorkflowRunHandle, v as getRunSignal, w as registerWorkflowRunGetter, x as isStepInvocation, y as getWorkflowRunHandle } from "./index-D4dAsbJr.cjs";
+export { type ActionCredentialConsumer, type ActionDefinition, type ActionDefinitionInput, type AgentRunOptions, CREDENTIAL_SCOPE_TYPES, type Credential, type CredentialAuthKind, type CredentialInput, type CredentialList, type CredentialRequirement, type CredentialScopeType, type DefineCredentialInput, type DefineOAuthCredentialInput, type DefineStaticCredentialInput, type McpCredentialContext, type NormalizeCredential, type ResolveActionCredentialsFn, type ResolveActionToolOptions, type ResolvedCredentials, type StepInvocation, type WorkflowActionDefinition, type WorkflowRunHandle, actionCoreSchema, createStepInvocation, credential, credentialInputSchema, defineAction, defineCredential, executeAction, getActionCredentialRequirements, getRegisteredMcpCredentialContext, getRegisteredProjectScopeId, getRunSignal, getWorkflowRunHandle, isAction, isCredentialInput, isStepInvocation, isWithinActionExecution, normalizeCredentialList, registerProjectScopeGetter, registerWorkflowRunGetter, resolveActionTool, runOutsideActionExecution, runWithMcpCredentialContext, runWithRunSignal, runWithinActionExecution, toCredentialRequirement };

package/dist/action.d.mts

@@ -1,3 +1,3 @@
-import { C as isCredentialInput, S as defineCredential, T as toCredentialRequirement, a as CredentialInput, b as credential, d as DefineOAuthCredentialInput, f as DefineStaticCredentialInput, l as CredentialScopeType, n as Credential, o as CredentialList, p as NormalizeCredential, r as CredentialAuthKind, s as CredentialRequirement, t as CREDENTIAL_SCOPE_TYPES, u as DefineCredentialInput, v as ResolvedCredentials, w as normalizeCredentialList, x as credentialInputSchema } from "./index-e9f4pcX4.mjs";
-import { C as resolveActionTool, E as runWithinActionExecution, S as registerWorkflowRunGetter, T as runWithRunSignal, _ as getWorkflowRunHandle, a as ResolveActionCredentialsFn, b as isWithinActionExecution, c as WorkflowActionDefinition, d as createStepInvocation, f as defineAction, g as getRunSignal, h as getRegisteredProjectScopeId, i as AgentRunOptions, l as WorkflowRunHandle, m as getActionCredentialRequirements, n as ActionDefinition, o as ResolveActionToolOptions, p as executeAction, r as ActionDefinitionInput, s as StepInvocation, t as ActionCredentialConsumer, u as actionCoreSchema, v as isAction, w as runOutsideActionExecution, x as registerProjectScopeGetter, y as isStepInvocation } from "./index-Bl4VEelg.mjs";
-export { type ActionCredentialConsumer, type ActionDefinition, type ActionDefinitionInput, type AgentRunOptions, CREDENTIAL_SCOPE_TYPES, type Credential, type CredentialAuthKind, type CredentialInput, type CredentialList, type CredentialRequirement, type CredentialScopeType, type DefineCredentialInput, type DefineOAuthCredentialInput, type DefineStaticCredentialInput, type NormalizeCredential, type ResolveActionCredentialsFn, type ResolveActionToolOptions, type ResolvedCredentials, type StepInvocation, type WorkflowActionDefinition, type WorkflowRunHandle, actionCoreSchema, createStepInvocation, credential, credentialInputSchema, defineAction, defineCredential, executeAction, getActionCredentialRequirements, getRegisteredProjectScopeId, getRunSignal, getWorkflowRunHandle, isAction, isCredentialInput, isStepInvocation, isWithinActionExecution, normalizeCredentialList, registerProjectScopeGetter, registerWorkflowRunGetter, resolveActionTool, runOutsideActionExecution, runWithRunSignal, runWithinActionExecution, toCredentialRequirement };
+import { C as defineCredential, E as toCredentialRequirement, S as credentialInputSchema, T as normalizeCredentialList, c as CredentialRequirement, d as DefineCredentialInput, f as DefineOAuthCredentialInput, i as CredentialAuthKind, m as NormalizeCredential, n as Credential, o as CredentialInput, p as DefineStaticCredentialInput, s as CredentialList, t as CREDENTIAL_SCOPE_TYPES, u as CredentialScopeType, w as isCredentialInput, x as credential, y as ResolvedCredentials } from "./index-WT4ULMiw.mjs";
+import { C as registerProjectScopeGetter, D as runWithMcpCredentialContext, E as runOutsideActionExecution, O as runWithRunSignal, S as isWithinActionExecution, T as resolveActionTool, _ as getRegisteredProjectScopeId, a as McpCredentialContext, b as isAction, c as StepInvocation, d as actionCoreSchema, f as createStepInvocation, g as getRegisteredMcpCredentialContext, h as getActionCredentialRequirements, i as AgentRunOptions, k as runWithinActionExecution, l as WorkflowActionDefinition, m as executeAction, n as ActionDefinition, o as ResolveActionCredentialsFn, p as defineAction, r as ActionDefinitionInput, s as ResolveActionToolOptions, t as ActionCredentialConsumer, u as WorkflowRunHandle, v as getRunSignal, w as registerWorkflowRunGetter, x as isStepInvocation, y as getWorkflowRunHandle } from "./index-Sx9T2i0u.mjs";
+export { type ActionCredentialConsumer, type ActionDefinition, type ActionDefinitionInput, type AgentRunOptions, CREDENTIAL_SCOPE_TYPES, type Credential, type CredentialAuthKind, type CredentialInput, type CredentialList, type CredentialRequirement, type CredentialScopeType, type DefineCredentialInput, type DefineOAuthCredentialInput, type DefineStaticCredentialInput, type McpCredentialContext, type NormalizeCredential, type ResolveActionCredentialsFn, type ResolveActionToolOptions, type ResolvedCredentials, type StepInvocation, type WorkflowActionDefinition, type WorkflowRunHandle, actionCoreSchema, createStepInvocation, credential, credentialInputSchema, defineAction, defineCredential, executeAction, getActionCredentialRequirements, getRegisteredMcpCredentialContext, getRegisteredProjectScopeId, getRunSignal, getWorkflowRunHandle, isAction, isCredentialInput, isStepInvocation, isWithinActionExecution, normalizeCredentialList, registerProjectScopeGetter, registerWorkflowRunGetter, resolveActionTool, runOutsideActionExecution, runWithMcpCredentialContext, runWithRunSignal, runWithinActionExecution, toCredentialRequirement };

package/dist/action.mjs

@@ -1,2 +1,2 @@
-import { S as isCredentialInput, T as toCredentialRequirement, _ as runWithinActionExecution, a as getActionCredentialRequirements, b as credentialInputSchema, c as getWorkflowRunHandle, d as isWithinActionExecution, f as registerProjectScopeGetter, g as runWithRunSignal, h as runOutsideActionExecution, i as executeAction, l as isAction, m as resolveActionTool, n as createStepInvocation, o as getRegisteredProjectScopeId, p as registerWorkflowRunGetter, r as defineAction, s as getRunSignal, t as actionCoreSchema, u as isStepInvocation, v as CREDENTIAL_SCOPE_TYPES, w as normalizeCredentialList, x as defineCredential, y as credential } from "./dist-DqFdFpiB.mjs";
-export { CREDENTIAL_SCOPE_TYPES, actionCoreSchema, createStepInvocation, credential, credentialInputSchema, defineAction, defineCredential, executeAction, getActionCredentialRequirements, getRegisteredProjectScopeId, getRunSignal, getWorkflowRunHandle, isAction, isCredentialInput, isStepInvocation, isWithinActionExecution, normalizeCredentialList, registerProjectScopeGetter, registerWorkflowRunGetter, resolveActionTool, runOutsideActionExecution, runWithRunSignal, runWithinActionExecution, toCredentialRequirement };
+import { C as defineCredential, D as toCredentialRequirement, E as normalizeCredentialList, S as credentialInputSchema, _ as runWithMcpCredentialContext, a as getActionCredentialRequirements, b as CREDENTIAL_SCOPE_TYPES, c as getRunSignal, d as isStepInvocation, f as isWithinActionExecution, g as runOutsideActionExecution, h as resolveActionTool, i as executeAction, l as getWorkflowRunHandle, m as registerWorkflowRunGetter, n as createStepInvocation, o as getRegisteredMcpCredentialContext, p as registerProjectScopeGetter, r as defineAction, s as getRegisteredProjectScopeId, t as actionCoreSchema, u as isAction, v as runWithRunSignal, w as isCredentialInput, x as credential, y as runWithinActionExecution } from "./dist-CppO7361.mjs";
+export { CREDENTIAL_SCOPE_TYPES, actionCoreSchema, createStepInvocation, credential, credentialInputSchema, defineAction, defineCredential, executeAction, getActionCredentialRequirements, getRegisteredMcpCredentialContext, getRegisteredProjectScopeId, getRunSignal, getWorkflowRunHandle, isAction, isCredentialInput, isStepInvocation, isWithinActionExecution, normalizeCredentialList, registerProjectScopeGetter, registerWorkflowRunGetter, resolveActionTool, runOutsideActionExecution, runWithMcpCredentialContext, runWithRunSignal, runWithinActionExecution, toCredentialRequirement };

package/dist/agent.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-DHdmVzO2.cjs");
-const require_dist$1 = require("./dist-DOMwPx7V.cjs");
-const require_dist$2 = require("./dist-C5otI4u3.cjs");
+const require_dist$1 = require("./dist-HI6bM6LK.cjs");
+const require_dist$2 = require("./dist-DivFQzKG.cjs");
 const require_dist$3 = require("./dist-DO51rYHS.cjs");
 require("./env-api-keys-BFptfIIs.cjs");
 const require_event_stream = require("./event-stream-CS-ls7wC.cjs");
@@ -902,7 +902,7 @@ function loadGoogleVertexProviderModule() {
 	return googleVertexProviderModulePromise;
 }
 function loadMistralProviderModule() {
-	mistralProviderModulePromise ||= Promise.resolve().then(() => require("./mistral-wOLLEgb9.cjs")).then((module) => {
+	mistralProviderModulePromise ||= Promise.resolve().then(() => require("./mistral-CSlOhLAJ.cjs")).then((module) => {
 		const provider = module;
 		return {
 			stream: provider.streamMistral,
@@ -14246,7 +14246,7 @@ async function resolveAgentWorkspaceRoot(agentId, sessionId, options) {
 		sessionRoot
 	};
 }
-async function resolveAgentTools(tools, resolver) {
+async function resolveAgentTools(tools, resolver, options) {
 	const prepared = [];
 	const mcpConnections = [];
 	for (const item of tools) {
@@ -14265,8 +14265,10 @@ async function resolveAgentTools(tools, resolver) {
 				}),
 				consumer: {
 					kind: "tool",
-					name: item.slug
-				}
+					name: item.slug,
+					id: item.slug
+				},
+				mcpCredentialContext: options?.mcpCredentialContext
 			}));
 			continue;
 		}
@@ -14284,7 +14286,7 @@ async function resolveMemoryFactory(memoryOption, defMemory, injectedFactory) {
 	return createDefaultMemory(typeof option === "object" ? option : {});
 }
 /** Sandbox tools + host tools → pi agent from a {@link AgentDefinition}. */
-async function buildAgentRuntime(def, ctx, runPrompt = {}) {
+async function buildAgentRuntime(def, ctx, runPrompt = {}, agentSlug) {
 	const { agentRoot, sessionRoot } = await resolveAgentWorkspaceRoot(ctx.agentId, ctx.sessionId, {
 		workspacesRoot: runPrompt.workspacesRoot,
 		agentRoot: runPrompt.agentRoot,
@@ -14302,12 +14304,21 @@ async function buildAgentRuntime(def, ctx, runPrompt = {}) {
 		agentId: ctx.agentId,
 		sessionId: ctx.sessionId
 	}) : void 0;
+	const credentialContext = require_dist$2.buildCredentialRunContext({ request: runPrompt.credentials });
+	const assignmentTargetKey = agentSlug ?? runPrompt.tracing?.agentKey;
 	const resolver = require_dist$2.createCredentialResolver({
-		context: require_dist$2.buildCredentialRunContext({ request: runPrompt.credentials }),
+		context: assignmentTargetKey ? await require_dist$2.withCredentialAssignments(credentialContext, {
+			targetType: "agent",
+			targetKey: assignmentTargetKey
+		}) : credentialContext,
 		oauthAdapter: runPrompt.oauthAdapter
 	});
 	const memoryTools = memory ? [memory.tool] : [];
-	const resolved = await resolveAgentTools(def.tools ?? [], resolver);
+	const mcpCredentialContext = assignmentTargetKey ? { assignmentTarget: {
+		type: "agent",
+		key: assignmentTargetKey
+	} } : void 0;
+	const resolved = await resolveAgentTools(def.tools ?? [], resolver, { mcpCredentialContext });
 	const captured = require_dist$2.captureCredentialToolErrors([
 		...memoryTools,
 		...resolved.tools,
@@ -14420,7 +14431,7 @@ function defineAgent(input) {
 		slug,
 		...input.name !== void 0 ? { name: input.name } : {},
 		...input.description !== void 0 ? { description: input.description } : {},
-		buildRuntime: (ctx, runPrompt) => buildAgentRuntime(def, ctx, runPrompt),
+		buildRuntime: (ctx, runPrompt) => buildAgentRuntime(def, ctx, runPrompt, slug),
 		prompt: (promptInput, runPrompt) => {
 			const handle = require_dist$1.getWorkflowRunHandle();
 			if (handle?.agentRunner && !require_dist$1.isWithinActionExecution() && !isWithinAgentPromptExecution()) {