@keystrokehq/platform 0.1.53 → 0.1.54

package/dist/{dist-DC0vKr_j.cjs → dist-BdKX0B7h.cjs}

@@ -4979,14 +4979,14 @@ const OrganizationUserRoleSchema$1 = _enum([
 	"admin",
 	"builder"
 ]);
-const isoDateTime$6$1 = string().datetime();
+const isoDateTime$7$1 = string().datetime();
 const OrganizationSchema$1 = object({
 	id: string(),
 	name: string(),
 	slug: OrganizationSlugSchema$1,
 	verified: boolean(),
-	createdAt: isoDateTime$6$1,
-	updatedAt: isoDateTime$6$1
+	createdAt: isoDateTime$7$1,
+	updatedAt: isoDateTime$7$1
 });
 const ProjectSchema$1 = object({
 	id: string(),
@@ -4998,8 +4998,8 @@ const ProjectSchema$1 = object({
 	baseUrl: string().nullable(),
 	runtimeId: string().nullable(),
 	lastError: string().nullable(),
-	createdAt: isoDateTime$6$1,
-	updatedAt: isoDateTime$6$1
+	createdAt: isoDateTime$7$1,
+	updatedAt: isoDateTime$7$1
 });
 object({
 	organization: OrganizationSchema$1,
@@ -5019,7 +5019,7 @@ const ProjectListMetricsSchema$1 = object({
 	workflowCount: number$1(),
 	skillCount: number$1(),
 	credentialCount: number$1(),
-	lastDeploymentAt: isoDateTime$6$1.nullable()
+	lastDeploymentAt: isoDateTime$7$1.nullable()
 });
 record(string(), ProjectListMetricsSchema$1);
 object({
@@ -5374,7 +5374,7 @@ object({
 	skills: array(StoredRouteManifestSkillSchema$1).default([]),
 	integrations: array(string()).optional()
 });
-const isoDateTime$5$1 = string().datetime();
+const isoDateTime$6$1 = string().datetime();
 const subscriptionStatusSchema$1 = _enum([
 	"none",
 	"trialing",
@@ -5421,8 +5421,8 @@ object({
 	subscriptionStatus: subscriptionStatusSchema$1,
 	planCreditMicroCredits: number$1(),
 	prepaidCreditMicroCredits: number$1(),
-	periodStart: isoDateTime$5$1.nullable(),
-	periodEnd: isoDateTime$5$1.nullable(),
+	periodStart: isoDateTime$6$1.nullable(),
+	periodEnd: isoDateTime$6$1.nullable(),
 	autoTopup: AutoTopupSummarySchema$1,
 	creditPacks: array(CreditPackSchema$1),
 	limits: PlanLimitsSchema$1
@@ -5436,8 +5436,8 @@ const BillingUsageMeterSchema$1 = object({
 	unchargedUsd: number$1()
 });
 object({
-	periodStart: isoDateTime$5$1.nullable(),
-	periodEnd: isoDateTime$5$1.nullable(),
+	periodStart: isoDateTime$6$1.nullable(),
+	periodEnd: isoDateTime$6$1.nullable(),
 	totalMicroCredits: number$1(),
 	byMeter: array(BillingUsageMeterSchema$1)
 });
@@ -5457,10 +5457,10 @@ object({
 		bucket: _enum(["plan", "prepaid"]).nullable(),
 		/** Stripe invoice behind the entry, when there is one — powers "View invoice". */
 		stripeInvoiceId: string().nullable(),
-		createdAt: isoDateTime$5$1
+		createdAt: isoDateTime$6$1
 	})),
 	/** Set only when the latest payment failure is newer than the latest successful payment. */
-	lastPaymentFailureAt: isoDateTime$5$1.nullable()
+	lastPaymentFailureAt: isoDateTime$6$1.nullable()
 });
 object({ 
 /** Web-app path to land on after Checkout (must be a path, not a URL). */
@@ -6572,12 +6572,19 @@ const HistoryRunActorSchema$1 = object({
 const HistoryRunUsageLineItemSchema$1 = object({
 	id: string(),
 	label: string(),
-	amountUsd: number$1()
+	/** Amount debited from the org's Keystroke balance for this line. */
+	billedUsd: number$1(),
+	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
+	providerCostUsd: number$1().nullable().optional(),
+	keySource: _enum(["byok", "platform"]).nullable().optional()
 });
 const HistoryRunUsageSchema$1 = object({
 	runDurationMs: number$1().nullable(),
 	lineItems: array(HistoryRunUsageLineItemSchema$1),
-	totalExcludingDurationUsd: number$1().nullable()
+	/** Sum of `billedUsd` — what Keystroke charged for this run. */
+	totalBilledUsd: number$1().nullable(),
+	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
+	externalProviderCostUsd: number$1().nullable().optional()
 });
 const HistoryRunSchema$1 = object({
 	id: string(),
@@ -6998,7 +7005,7 @@ const OrganizationMemberStatusSchema$1 = _enum([
 	"suspended"
 ]);
 const InvitableOrganizationMemberRoleSchema$1 = _enum(["admin", "builder"]);
-const isoDateTime$4$1 = string().datetime();
+const isoDateTime$5$1 = string().datetime();
 object({
 	id: string(),
 	name: string(),
@@ -7006,8 +7013,8 @@ object({
 	role: OrganizationMemberRoleSchema$1,
 	status: OrganizationMemberStatusSchema$1,
 	avatarUrl: string().optional(),
-	joinedAt: isoDateTime$4$1.optional(),
-	lastActiveAt: isoDateTime$4$1.nullable().optional()
+	joinedAt: isoDateTime$5$1.optional(),
+	lastActiveAt: isoDateTime$5$1.nullable().optional()
 });
 object({
 	emails: array(string().trim().email()).min(1),
@@ -7034,7 +7041,7 @@ object({
 	role: OrganizationMemberRoleSchema$1
 });
 object({ success: literal(true) });
-const isoDateTime$3$1 = string().datetime();
+const isoDateTime$4$1 = string().datetime();
 const ApiKeyCreatorSchema$1 = object({
 	id: string(),
 	name: string(),
@@ -7047,12 +7054,37 @@ const ApiKeySummarySchema$1 = object({
 	id: string(),
 	name: string(),
 	keyPreview: string(),
-	createdAt: isoDateTime$3$1,
+	createdAt: isoDateTime$4$1,
 	createdBy: ApiKeyCreatorSchema$1,
 	isCreatedByCurrentUser: boolean()
 });
 object({ name: string().trim().min(1).max(128) });
 ApiKeySummarySchema$1.extend({ secret: string() });
+const isoDateTime$3$1 = string().datetime();
+const ManagedServiceKindSchema$1 = _enum(["llm"]);
+_enum([
+	"openai",
+	"anthropic",
+	"google",
+	"groq",
+	"xai"
+]);
+object({
+	id: string(),
+	kind: ManagedServiceKindSchema$1,
+	provider: string(),
+	keyPreview: string(),
+	createdAt: isoDateTime$3$1,
+	updatedAt: isoDateTime$3$1,
+	createdBy: ApiKeyCreatorSchema$1,
+	isCreatedByCurrentUser: boolean()
+});
+object({
+	kind: ManagedServiceKindSchema$1.default("llm"),
+	provider: string().trim().min(1),
+	apiKey: string().trim().min(1)
+});
+object({ apiKey: string().trim().min(1) });
 const ProjectUserRoleSchema$1 = _enum(["admin", "builder"]);
 const ProjectInvitePermissionSchema$1 = _enum(["admin", "all"]);
 const ProjectMemberStatusSchema$1 = _enum(["active", "invited"]);
@@ -7290,7 +7322,7 @@ object({
 	lastOpenedAt: string().min(1),
 	lastModifiedAt: string().min(1)
 });
-const isoDateTime$7 = string().datetime();
+const isoDateTime$8 = string().datetime();
 const sha256Hex$1 = string().regex(/^[a-f0-9]{64}$/, "Expected a lowercase hex sha256 digest");
 /**
 * A single entry in a deploy's file tree, as served to the dashboard. Carries
@@ -7350,7 +7382,7 @@ object({
 		path: string().min(1),
 		hash: sha256Hex$1
 	})),
-	generatedAt: isoDateTime$7
+	generatedAt: isoDateTime$8
 });
 /** A single source file returned by the bulk active-source download endpoint. */
 const DownloadActiveProjectSourceFileSchema$1 = object({
@@ -17018,14 +17050,14 @@ const OrganizationUserRoleSchema = zod.z.enum([
 	"admin",
 	"builder"
 ]);
-const isoDateTime$6 = zod.z.string().datetime();
+const isoDateTime$7 = zod.z.string().datetime();
 const OrganizationSchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
 	slug: OrganizationSlugSchema,
 	verified: zod.z.boolean(),
-	createdAt: isoDateTime$6,
-	updatedAt: isoDateTime$6
+	createdAt: isoDateTime$7,
+	updatedAt: isoDateTime$7
 });
 const ProjectSchema = zod.z.object({
 	id: zod.z.string(),
@@ -17037,8 +17069,8 @@ const ProjectSchema = zod.z.object({
 	baseUrl: zod.z.string().nullable(),
 	runtimeId: zod.z.string().nullable(),
 	lastError: zod.z.string().nullable(),
-	createdAt: isoDateTime$6,
-	updatedAt: isoDateTime$6
+	createdAt: isoDateTime$7,
+	updatedAt: isoDateTime$7
 });
 const UserOrganizationSchema = zod.z.object({
 	organization: OrganizationSchema,
@@ -17062,7 +17094,7 @@ const ProjectListMetricsSchema = zod.z.object({
 	workflowCount: zod.z.number(),
 	skillCount: zod.z.number(),
 	credentialCount: zod.z.number(),
-	lastDeploymentAt: isoDateTime$6.nullable()
+	lastDeploymentAt: isoDateTime$7.nullable()
 });
 const ListProjectMetricsResponseSchema = zod.z.record(zod.z.string(), ProjectListMetricsSchema);
 const CreateProjectRequestSchema = zod.z.object({
@@ -17482,7 +17514,7 @@ const storedRouteManifestV2Schema = zod.z.object({
 function parseStoredRouteManifest(value) {
 	return storedRouteManifestV2Schema.parse(value);
 }
-const isoDateTime$5 = zod.z.string().datetime();
+const isoDateTime$6 = zod.z.string().datetime();
 const subscriptionStatusSchema = zod.z.enum([
 	"none",
 	"trialing",
@@ -17529,8 +17561,8 @@ zod.z.object({
 	subscriptionStatus: subscriptionStatusSchema,
 	planCreditMicroCredits: zod.z.number(),
 	prepaidCreditMicroCredits: zod.z.number(),
-	periodStart: isoDateTime$5.nullable(),
-	periodEnd: isoDateTime$5.nullable(),
+	periodStart: isoDateTime$6.nullable(),
+	periodEnd: isoDateTime$6.nullable(),
 	autoTopup: AutoTopupSummarySchema,
 	creditPacks: zod.z.array(CreditPackSchema),
 	limits: PlanLimitsSchema
@@ -17544,8 +17576,8 @@ const BillingUsageMeterSchema = zod.z.object({
 	unchargedUsd: zod.z.number()
 });
 zod.z.object({
-	periodStart: isoDateTime$5.nullable(),
-	periodEnd: isoDateTime$5.nullable(),
+	periodStart: isoDateTime$6.nullable(),
+	periodEnd: isoDateTime$6.nullable(),
 	totalMicroCredits: zod.z.number(),
 	byMeter: zod.z.array(BillingUsageMeterSchema)
 });
@@ -17564,12 +17596,12 @@ const BillingActivityEntrySchema = zod.z.object({
 	bucket: zod.z.enum(["plan", "prepaid"]).nullable(),
 	/** Stripe invoice behind the entry, when there is one — powers "View invoice". */
 	stripeInvoiceId: zod.z.string().nullable(),
-	createdAt: isoDateTime$5
+	createdAt: isoDateTime$6
 });
 zod.z.object({
 	entries: zod.z.array(BillingActivityEntrySchema),
 	/** Set only when the latest payment failure is newer than the latest successful payment. */
-	lastPaymentFailureAt: isoDateTime$5.nullable()
+	lastPaymentFailureAt: isoDateTime$6.nullable()
 });
 zod.z.object({ 
 /** Web-app path to land on after Checkout (must be a path, not a URL). */
@@ -19114,12 +19146,19 @@ const HistoryRunActorSchema = zod.z.object({
 const HistoryRunUsageLineItemSchema = zod.z.object({
 	id: zod.z.string(),
 	label: zod.z.string(),
-	amountUsd: zod.z.number()
+	/** Amount debited from the org's Keystroke balance for this line. */
+	billedUsd: zod.z.number(),
+	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
+	providerCostUsd: zod.z.number().nullable().optional(),
+	keySource: zod.z.enum(["byok", "platform"]).nullable().optional()
 });
 const HistoryRunUsageSchema = zod.z.object({
 	runDurationMs: zod.z.number().nullable(),
 	lineItems: zod.z.array(HistoryRunUsageLineItemSchema),
-	totalExcludingDurationUsd: zod.z.number().nullable()
+	/** Sum of `billedUsd` — what Keystroke charged for this run. */
+	totalBilledUsd: zod.z.number().nullable(),
+	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
+	externalProviderCostUsd: zod.z.number().nullable().optional()
 });
 const HistoryRunSchema = zod.z.object({
 	id: zod.z.string(),
@@ -19554,7 +19593,7 @@ const OrganizationMemberStatusSchema = zod.z.enum([
 	"suspended"
 ]);
 const InvitableOrganizationMemberRoleSchema = zod.z.enum(["admin", "builder"]);
-const isoDateTime$4 = zod.z.string().datetime();
+const isoDateTime$5 = zod.z.string().datetime();
 const OrganizationMemberSchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
@@ -19562,8 +19601,8 @@ const OrganizationMemberSchema = zod.z.object({
 	role: OrganizationMemberRoleSchema,
 	status: OrganizationMemberStatusSchema,
 	avatarUrl: zod.z.string().optional(),
-	joinedAt: isoDateTime$4.optional(),
-	lastActiveAt: isoDateTime$4.nullable().optional()
+	joinedAt: isoDateTime$5.optional(),
+	lastActiveAt: isoDateTime$5.nullable().optional()
 });
 const ListOrganizationMembersResponseSchema = zod.z.array(OrganizationMemberSchema);
 const InviteOrganizationMembersRequestSchema = zod.z.object({
@@ -19599,7 +19638,7 @@ const DeclineOrganizationInvitationResponseSchema = zod.z.object({ success: zod.
 function organizationInvitationAcceptPath(invitationId) {
 	return `/organization/invitations?${new URLSearchParams({ accept: invitationId }).toString()}`;
 }
-const isoDateTime$3 = zod.z.string().datetime();
+const isoDateTime$4 = zod.z.string().datetime();
 const ApiKeyCreatorSchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
@@ -19612,13 +19651,43 @@ const ApiKeySummarySchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
 	keyPreview: zod.z.string(),
-	createdAt: isoDateTime$3,
+	createdAt: isoDateTime$4,
 	createdBy: ApiKeyCreatorSchema,
 	isCreatedByCurrentUser: zod.z.boolean()
 });
 const ListApiKeysResponseSchema = zod.z.array(ApiKeySummarySchema);
 const CreateApiKeyRequestSchema = zod.z.object({ name: zod.z.string().trim().min(1).max(128) });
 const CreateApiKeyResponseSchema = ApiKeySummarySchema.extend({ secret: zod.z.string() });
+const isoDateTime$3 = zod.z.string().datetime();
+const ManagedServiceKindSchema = zod.z.enum(["llm"]);
+const LLM_PROVIDER_SLUGS = [
+	"openai",
+	"anthropic",
+	"google",
+	"groq",
+	"xai"
+];
+zod.z.enum(LLM_PROVIDER_SLUGS);
+const ManagedServiceCredentialSchema = zod.z.object({
+	id: zod.z.string(),
+	kind: ManagedServiceKindSchema,
+	provider: zod.z.string(),
+	keyPreview: zod.z.string(),
+	createdAt: isoDateTime$3,
+	updatedAt: isoDateTime$3,
+	createdBy: ApiKeyCreatorSchema,
+	isCreatedByCurrentUser: zod.z.boolean()
+});
+const ListManagedServiceCredentialsResponseSchema = zod.z.array(ManagedServiceCredentialSchema);
+const ConnectManagedServiceCredentialRequestSchema = zod.z.object({
+	kind: ManagedServiceKindSchema.default("llm"),
+	provider: zod.z.string().trim().min(1),
+	apiKey: zod.z.string().trim().min(1)
+});
+const UpdateManagedServiceCredentialRequestSchema = zod.z.object({ apiKey: zod.z.string().trim().min(1) });
+function isLlmProviderSlug(value) {
+	return LLM_PROVIDER_SLUGS.includes(value);
+}
 const ProjectUserRoleSchema = zod.z.enum(["admin", "builder"]);
 const ProjectInvitePermissionSchema = zod.z.enum(["admin", "all"]);
 const ProjectMemberStatusSchema = zod.z.enum(["active", "invited"]);
@@ -20721,6 +20790,48 @@ async function deleteCredentialInstanceSecret(instanceId) {
 	if ((0, _keystrokehq_platform_database.getOrganizationScopeId)() === void 0) return;
 	await createSecretStore().deleteRef("credential_instance", instanceId);
 }
+function keyPreviewFromSecret(secret) {
+	return `******${secret.slice(-4)}`;
+}
+function encryptManagedServiceCredentialValue(value) {
+	return encryptSecretPayload(JSON.stringify(value));
+}
+async function setManagedServiceCredential(options) {
+	const now = /* @__PURE__ */ new Date();
+	const valueCiphertext = encryptManagedServiceCredentialValue({ apiKey: options.apiKey });
+	const keyPreview = keyPreviewFromSecret(options.apiKey);
+	const existing = await (0, _keystrokehq_platform_database.getManagedServiceCredential)(options.organizationId, options.kind, options.provider);
+	if (existing) {
+		await (0, _keystrokehq_platform_database.updateManagedServiceCredentialValue)(existing.id, {
+			valueCiphertext,
+			keyPreview,
+			updatedAt: now
+		});
+		return {
+			id: existing.id,
+			created: false
+		};
+	}
+	const id = crypto.randomUUID();
+	await (0, _keystrokehq_platform_database.insertManagedServiceCredential)({
+		id,
+		organizationId: options.organizationId,
+		kind: options.kind,
+		provider: options.provider,
+		valueCiphertext,
+		keyPreview,
+		createdByUserId: options.createdByUserId,
+		createdAt: now,
+		updatedAt: now
+	});
+	return {
+		id,
+		created: true
+	};
+}
+async function deleteManagedServiceCredential(id) {
+	await (0, _keystrokehq_platform_database.deleteManagedServiceCredential)(id);
+}
 //#endregion
 //#region ../../node_modules/.pnpm/eventsource-parser@3.0.8/node_modules/eventsource-parser/dist/index.js
 var ParseError = class extends Error {
@@ -44805,6 +44916,12 @@ Object.defineProperty(exports, "CompleteProjectArtifactResponseSchema", {
 		return CompleteProjectArtifactResponseSchema;
 	}
 });
+Object.defineProperty(exports, "ConnectManagedServiceCredentialRequestSchema", {
+	enumerable: true,
+	get: function() {
+		return ConnectManagedServiceCredentialRequestSchema;
+	}
+});
 Object.defineProperty(exports, "CreateApiKeyRequestSchema", {
 	enumerable: true,
 	get: function() {
@@ -45021,6 +45138,12 @@ Object.defineProperty(exports, "ListCredentialsResponseSchema", {
 		return ListCredentialsResponseSchema;
 	}
 });
+Object.defineProperty(exports, "ListManagedServiceCredentialsResponseSchema", {
+	enumerable: true,
+	get: function() {
+		return ListManagedServiceCredentialsResponseSchema;
+	}
+});
 Object.defineProperty(exports, "ListOrganizationInvitationsResponseSchema", {
 	enumerable: true,
 	get: function() {
@@ -45069,6 +45192,18 @@ Object.defineProperty(exports, "ListProjectsResponseSchema", {
 		return ListProjectsResponseSchema;
 	}
 });
+Object.defineProperty(exports, "ManagedServiceCredentialSchema", {
+	enumerable: true,
+	get: function() {
+		return ManagedServiceCredentialSchema;
+	}
+});
+Object.defineProperty(exports, "ManagedServiceKindSchema", {
+	enumerable: true,
+	get: function() {
+		return ManagedServiceKindSchema;
+	}
+});
 Object.defineProperty(exports, "McpDiscoverRequestSchema", {
 	enumerable: true,
 	get: function() {
@@ -45321,6 +45456,12 @@ Object.defineProperty(exports, "UpdateCredentialRequestSchema", {
 		return UpdateCredentialRequestSchema;
 	}
 });
+Object.defineProperty(exports, "UpdateManagedServiceCredentialRequestSchema", {
+	enumerable: true,
+	get: function() {
+		return UpdateManagedServiceCredentialRequestSchema;
+	}
+});
 Object.defineProperty(exports, "UpdateOrganizationMemberRequestSchema", {
 	enumerable: true,
 	get: function() {
@@ -45573,6 +45714,12 @@ Object.defineProperty(exports, "deleteCredentialInstanceSecret", {
 		return deleteCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "deleteManagedServiceCredential", {
+	enumerable: true,
+	get: function() {
+		return deleteManagedServiceCredential;
+	}
+});
 Object.defineProperty(exports, "deriveCredentialInstanceSlug", {
 	enumerable: true,
 	get: function() {
@@ -45651,6 +45798,12 @@ Object.defineProperty(exports, "isKeystrokeAssetsOrgLogoPublicUrl", {
 		return isKeystrokeAssetsOrgLogoPublicUrl;
 	}
 });
+Object.defineProperty(exports, "isLlmProviderSlug", {
+	enumerable: true,
+	get: function() {
+		return isLlmProviderSlug;
+	}
+});
 Object.defineProperty(exports, "isOrgLogoStorageKey", {
 	enumerable: true,
 	get: function() {
@@ -45855,6 +46008,12 @@ Object.defineProperty(exports, "setCredentialInstanceSecret", {
 		return setCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "setManagedServiceCredential", {
+	enumerable: true,
+	get: function() {
+		return setManagedServiceCredential;
+	}
+});
 Object.defineProperty(exports, "userAvatarStorageKey", {
 	enumerable: true,
 	get: function() {
@@ -45886,4 +46045,4 @@ Object.defineProperty(exports, "withCredentialAssignments", {
 	}
 });
 
-//# sourceMappingURL=dist-DC0vKr_j.cjs.map
+//# sourceMappingURL=dist-BdKX0B7h.cjs.map