@keystrokehq/platform 0.1.121 → 0.1.122

package/dist/{dist-CkBSbX2_.cjs → dist-C-PZgxMy.cjs}

@@ -1,4 +1,4 @@
-const require_dist$3 = require("./dist-QS2Dafen.cjs");
+const require_dist$3 = require("./dist-B9_lBb-p.cjs");
 let node_crypto = require("node:crypto");
 let _keystrokehq_database = require("@keystrokehq/database");
 let node_events = require("node:events");
@@ -9529,7 +9529,9 @@ const storedRouteManifestEntryV2Schema = zod.z.discriminatedUnion("kind", [
 		appSlugs: zod.z.array(zod.z.string()).default([]),
 		toolSlugs: zod.z.array(zod.z.string()).default([]),
 		/** Credential requirements per tool slug (the agent's credential consumer key). */
-		toolRequirements: zod.z.record(zod.z.string(), zod.z.array(CredentialRequirementSummarySchema)).optional()
+		toolRequirements: zod.z.record(zod.z.string(), zod.z.array(CredentialRequirementSummarySchema)).optional(),
+		/** Credential requirements for the agent's VM sandbox env / git bootstrap. */
+		sandboxRequirements: zod.z.array(CredentialRequirementSummarySchema).optional()
 	}),
 	zod.z.object({
 		kind: zod.z.literal("action"),
@@ -10878,11 +10880,20 @@ const TeamRequestTypeSchema = zod.z.enum([
 	"contact",
 	"enterprise-upgrade",
 	"verification",
-	"slack-connect"
+	"slack-connect",
+	"connector-access"
 ]);
 const SubmitTeamRequestRequestSchema = zod.z.object({
 	type: TeamRequestTypeSchema,
-	message: zod.z.string().trim().max(5e3).optional()
+	message: zod.z.string().trim().max(5e3).optional(),
+	/** Required for connector-access requests (sandbox VM secret exposure). */
+	appSlug: zod.z.string().trim().min(1).optional()
+}).superRefine((value, ctx) => {
+	if (value.type === "connector-access" && !value.appSlug) ctx.addIssue({
+		code: zod.z.ZodIssueCode.custom,
+		path: ["appSlug"],
+		message: "appSlug is required for connector-access requests"
+	});
 });
 const SubmitTeamRequestResponseSchema = zod.z.object({ ok: zod.z.literal(true) });
 const TemplateKindSchema = zod.z.enum([
@@ -10941,12 +10952,52 @@ const SubmitMarketingContactRequestSchema = zod.z.object({
 });
 const SubmitMarketingContactResponseSchema = SubmitTeamRequestResponseSchema;
 const PublicModelsResponseSchema = zod.z.object({ models: zod.z.array(zod.z.string()) });
+zod.z.object({ accessToken: zod.z.string() });
 function isCredentialInput(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const candidate = value;
-	return typeof candidate.key === "string" && CredentialAuthKindSchema.safeParse(candidate.kind).success && candidate.schema instanceof zod.z.ZodType;
+	return typeof candidate.key === "string" && CredentialAuthKindSchema.safeParse(candidate.kind).success && candidate.schema instanceof zod.z.ZodType && (candidate.materializedSchema === void 0 || candidate.materializedSchema instanceof zod.z.ZodType);
 }
 const credentialInputSchema = zod.z.custom((value) => isCredentialInput(value), "must be a credential requirement");
+const CredentialAccessUnavailableReasonSchema = zod.z.enum(["request_access", "reconnect_required"]);
+zod.z.object({
+	error: zod.z.literal("credential_access_unavailable"),
+	code: zod.z.literal("credential_access_unavailable"),
+	appSlug: zod.z.string().min(1),
+	reason: CredentialAccessUnavailableReasonSchema,
+	requestAccessUrl: zod.z.string().url().optional(),
+	message: zod.z.string().optional()
+});
+zod.z.discriminatedUnion("kind", [
+	zod.z.object({
+		kind: zod.z.literal("api_key"),
+		instanceId: zod.z.string().min(1)
+	}),
+	zod.z.object({
+		kind: zod.z.literal("oauth"),
+		connectionId: zod.z.string().min(1)
+	}),
+	zod.z.object({
+		kind: zod.z.literal("keystroke"),
+		instanceId: zod.z.string().min(1),
+		connectionId: zod.z.string().min(1),
+		appSlug: zod.z.string().min(1)
+	})
+]);
+zod.z.discriminatedUnion("kind", [
+	zod.z.object({
+		kind: zod.z.literal("api_key"),
+		value: zod.z.unknown()
+	}),
+	zod.z.object({
+		kind: zod.z.literal("oauth"),
+		accessToken: zod.z.string().min(1)
+	}),
+	zod.z.object({
+		kind: zod.z.literal("keystroke"),
+		value: zod.z.unknown()
+	})
+]);
 const ValidationErrorDetailSchema = zod.z.object({
 	path: zod.z.string(),
 	message: zod.z.string()
@@ -13332,6 +13383,18 @@ async function readCredentialInstanceSecret(instanceId) {
 		field: "payload"
 	});
 }
+/**
+* Persist an encrypted payload for an existing credential instance without changing authKind
+* or clearing connectionId. Used for dual-writing Composio API-key connections.
+*/
+async function setCredentialInstanceSecretValue(instanceId, value) {
+	if ((0, _keystrokehq_platform_database.getOrganizationScopeId)() === void 0) throw new Error("setCredentialInstanceSecretValue requires an organization scope");
+	await createSecretStore().set({
+		kind: "credential_instance",
+		id: instanceId,
+		field: "payload"
+	}, JSON.stringify(value));
+}
 async function deleteCredentialInstanceSecret(instanceId) {
 	if ((0, _keystrokehq_platform_database.getOrganizationScopeId)() === void 0) return;
 	await createSecretStore().deleteRef("credential_instance", instanceId);
@@ -38987,6 +39050,12 @@ Object.defineProperty(exports, "createJobQueue", {
 		return createJobQueue;
 	}
 });
+Object.defineProperty(exports, "credentialInputSchema", {
+	enumerable: true,
+	get: function() {
+		return credentialInputSchema;
+	}
+});
 Object.defineProperty(exports, "cronPayloadSchema", {
 	enumerable: true,
 	get: function() {
@@ -39335,6 +39404,12 @@ Object.defineProperty(exports, "setCredentialInstanceSecret", {
 		return setCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "setCredentialInstanceSecretValue", {
+	enumerable: true,
+	get: function() {
+		return setCredentialInstanceSecretValue;
+	}
+});
 Object.defineProperty(exports, "setManagedServiceCredential", {
 	enumerable: true,
 	get: function() {
@@ -39378,4 +39453,4 @@ Object.defineProperty(exports, "withCredentialAssignments", {
 	}
 });
 
-//# sourceMappingURL=dist-CkBSbX2_.cjs.map
+//# sourceMappingURL=dist-C-PZgxMy.cjs.map