@keystrokehq/platform 0.1.60 → 0.1.61

package/dist/{dist-B2pUVq21.cjs → dist-Bf-X1hc-.cjs}

@@ -1,4 +1,4 @@
-const require_dist$3 = require("./dist-CQoqJpV-.cjs");
+const require_dist$3 = require("./dist-b4HzEMMH.cjs");
 let node_crypto = require("node:crypto");
 let _keystrokehq_database = require("@keystrokehq/database");
 let node_events = require("node:events");
@@ -9532,7 +9532,9 @@ const storedRouteManifestEntryV2Schema = zod.z.discriminatedUnion("kind", [
 		/** Deterministic AST control-flow skeleton (deploy-time producer). */
 		flowGraph: WorkflowCanvasGraphSchema.optional(),
 		/** sha256 of the workflow source the `flowGraph` was produced from (staleness). */
-		flowGraphSourceHash: zod.z.string().optional()
+		flowGraphSourceHash: zod.z.string().optional(),
+		/** sha256 of `JSON.stringify(flowGraph)` — baked at build so canvas polls skip re-hashing. */
+		flowGraphHash: zod.z.string().optional()
 	}),
 	zod.z.object({
 		kind: zod.z.literal("trigger-webhook"),
@@ -10624,7 +10626,15 @@ const UpdateCredentialRequestSchema = zod.z.object({
 	isDefault: zod.z.boolean().optional(),
 	value: credentialSecretValueSchema.optional()
 }).refine((input) => input.label !== void 0 || input.isDefault !== void 0 || input.value !== void 0, { message: "At least one field is required" });
-const ListCredentialsResponseSchema = zod.z.array(AppCredentialSummarySchema);
+zod.z.array(AppCredentialSummarySchema);
+const ListCredentialsPageQuerySchema = zod.z.object({
+	limit: zod.z.coerce.number().int().min(1).max(200).optional(),
+	cursor: zod.z.string().min(1).optional()
+});
+const ListCredentialsPageResponseSchema = zod.z.object({
+	items: zod.z.array(AppCredentialSummarySchema),
+	nextCursor: zod.z.string().nullable()
+});
 const GetCredentialResponseSchema = AppCredentialSummarySchema;
 const CreateCredentialsResponseSchema = zod.z.array(AppCredentialSummarySchema);
 const CredentialAssignmentTargetTypeSchema = zod.z.enum([
@@ -11385,7 +11395,8 @@ const HistoryRunDetailSchema = zod.z.discriminatedUnion("kind", [HistoryWorkflow
 const HistoryRunListQuerySchema = zod.z.object({
 	project: zod.z.string().min(1).optional(),
 	status: HistoryRunStatusSchema.optional(),
-	kind: HistoryRunKindSchema.optional()
+	kind: HistoryRunKindSchema.optional(),
+	limit: zod.z.coerce.number().int().min(1).max(200).optional()
 });
 const HistoryRunListResponseSchema = zod.z.array(HistoryRunSchema);
 const HistoryRunDetailResponseSchema = HistoryRunDetailSchema.nullable();
@@ -11694,7 +11705,15 @@ const OrganizationMemberSchema = zod.z.object({
 	joinedAt: isoDateTime$5.optional(),
 	lastActiveAt: isoDateTime$5.nullable().optional()
 });
-const ListOrganizationMembersResponseSchema = zod.z.array(OrganizationMemberSchema);
+zod.z.array(OrganizationMemberSchema);
+const ListOrganizationMembersPageQuerySchema = zod.z.object({
+	limit: zod.z.coerce.number().int().min(1).max(200).optional(),
+	cursor: zod.z.string().min(1).optional()
+});
+const ListOrganizationMembersPageResponseSchema = zod.z.object({
+	items: zod.z.array(OrganizationMemberSchema),
+	nextCursor: zod.z.string().nullable()
+});
 const InviteOrganizationMembersRequestSchema = zod.z.object({
 	emails: zod.z.array(zod.z.string().trim().email()).min(1),
 	role: InvitableOrganizationMemberRoleSchema
@@ -12731,7 +12750,7 @@ function registerWorkflowRunGetter(fn) {
 }
 new node_async_hooks.AsyncLocalStorage();
 //#endregion
-//#region ../../packages/credentials/dist/store-BGAoQoPf.mjs
+//#region ../../packages/credentials/dist/store-C6DRzb2o.mjs
 function normalizeRow(row) {
 	const { projectId: _projectId, ...rest } = row;
 	return rest;
@@ -12743,12 +12762,11 @@ function normalizeLocalRow(row) {
 	const { projectId: _projectId, ...rest } = row;
 	return rest;
 }
-async function selectCredentialInstanceById$1$1(id) {
-	const row = await (0, _keystrokehq_database.selectCredentialInstanceById)(id);
-	return row ? normalizeLocalRow(row) : void 0;
+async function selectCredentialInstancesForScopes$1(scopes) {
+	return (await (0, _keystrokehq_database.selectCredentialInstancesForScopes)(scopes)).map(normalizeLocalRow);
 }
-async function selectCredentialInstancesForScope$1$1(appSlug, scopeType, scopeId) {
-	return (await (0, _keystrokehq_database.selectCredentialInstancesForScope)(appSlug, scopeType, scopeId)).map(normalizeLocalRow);
+async function selectCredentialInstancesByIds$1(ids) {
+	return (await (0, _keystrokehq_database.selectCredentialInstancesByIds)(ids)).map(normalizeLocalRow);
 }
 //#endregion
 //#region ../../packages/secrets/dist/index.mjs
@@ -12868,14 +12886,6 @@ async function setCredentialInstanceSecret(options) {
 		updatedAt: now
 	});
 }
-async function readCredentialInstanceSecret(instanceId) {
-	if ((0, _keystrokehq_platform_database.getOrganizationScopeId)() === void 0) return null;
-	return createSecretStore().get({
-		kind: "credential_instance",
-		id: instanceId,
-		field: "payload"
-	});
-}
 async function deleteCredentialInstanceSecret(instanceId) {
 	if ((0, _keystrokehq_platform_database.getOrganizationScopeId)() === void 0) return;
 	await createSecretStore().deleteRef("credential_instance", instanceId);
@@ -31248,6 +31258,9 @@ function toSummary(row) {
 		isDefault: row.isDefault
 	};
 }
+function scopeCacheKey(appSlug, scopeType, scopeId) {
+	return `${appSlug}\0${scopeType}\0${scopeId}`;
+}
 /** Pick the single instance for a scope: the only one, or the unique default; else ambiguous. */
 function pickInstance$1(rows) {
 	if (rows.length === 0) return { kind: "none" };
@@ -31269,12 +31282,12 @@ function scopeIdFor(scope, context, orgId) {
 		case "user": return context.userId;
 	}
 }
-async function describeCredentialBinding(options) {
+function describeFromPreload(options, preload) {
 	const { key, scope, consumerId, context } = options;
 	const orgId = context.orgId ?? (0, _keystrokehq_database.getServerTenantScopeId)();
 	const assignedId = selectAssignedInstanceId(context.assignments, consumerId, key);
 	if (assignedId) {
-		const row = await selectCredentialInstanceById$1$1(assignedId);
+		const row = preload.byId.get(assignedId);
 		if (row && row.appSlug === key) return {
 			policy: "assigned",
 			row: toSummary(row)
@@ -31282,7 +31295,7 @@ async function describeCredentialBinding(options) {
 	}
 	if (scope) {
 		const scopeId = scopeIdFor(scope, context, orgId);
-		const picked = scopeId ? pickInstance$1(await selectCredentialInstancesForScope$1$1(key, scope, scopeId)) : { kind: "none" };
+		const picked = scopeId ? pickInstance$1(preload.byScope.get(scopeCacheKey(key, scope, scopeId)) ?? []) : { kind: "none" };
 		if (picked.kind === "row") return {
 			policy: "scope-pinned",
 			pinnedScope: scope,
@@ -31295,7 +31308,7 @@ async function describeCredentialBinding(options) {
 		};
 	}
 	if (context.projectId) {
-		const picked = pickInstance$1(await selectCredentialInstancesForScope$1$1(key, "project", context.projectId));
+		const picked = pickInstance$1(preload.byScope.get(scopeCacheKey(key, "project", context.projectId)) ?? []);
 		if (picked.kind === "row") return {
 			policy: "project-default",
 			row: toSummary(picked.row)
@@ -31306,7 +31319,7 @@ async function describeCredentialBinding(options) {
 		};
 	}
 	if (orgId) {
-		const picked = pickInstance$1(await selectCredentialInstancesForScope$1$1(key, "organization", orgId));
+		const picked = pickInstance$1(preload.byScope.get(scopeCacheKey(key, "organization", orgId)) ?? []);
 		if (picked.kind === "row") return {
 			policy: "org-default",
 			row: toSummary(picked.row)
@@ -31321,6 +31334,55 @@ async function describeCredentialBinding(options) {
 		reason: "missing"
 	};
 }
+/**
+* Prefetch every instance needed to resolve `requirements` against `context`,
+* then describe each binding in memory (2 DB round trips total).
+*/
+async function describeCredentialBindings(requirements, context) {
+	if (requirements.length === 0) return [];
+	const orgId = context.orgId ?? (0, _keystrokehq_database.getServerTenantScopeId)();
+	const assignedIds = /* @__PURE__ */ new Set();
+	const scopeKeys = /* @__PURE__ */ new Map();
+	for (const requirement of requirements) {
+		const assignedId = selectAssignedInstanceId(context.assignments, requirement.consumerId, requirement.key);
+		if (assignedId) assignedIds.add(assignedId);
+		const addScope = (scopeType, scopeId) => {
+			if (!scopeId) return;
+			const key = scopeCacheKey(requirement.key, scopeType, scopeId);
+			if (!scopeKeys.has(key)) scopeKeys.set(key, {
+				appSlug: requirement.key,
+				scopeType,
+				scopeId
+			});
+		};
+		if (requirement.scope) addScope(requirement.scope, scopeIdFor(requirement.scope, context, orgId));
+		else {
+			addScope("project", context.projectId);
+			addScope("organization", orgId);
+		}
+	}
+	const [assignedRows, scopeRows] = await Promise.all([selectCredentialInstancesByIds$1([...assignedIds]), selectCredentialInstancesForScopes$1([...scopeKeys.values()])]);
+	const byId = new Map(assignedRows.map((row) => [row.id, row]));
+	const byScope = /* @__PURE__ */ new Map();
+	for (const row of scopeRows) {
+		if (!row.scopeId) continue;
+		const key = scopeCacheKey(row.appSlug, row.scopeType, row.scopeId);
+		const existing = byScope.get(key) ?? [];
+		existing.push(row);
+		byScope.set(key, existing);
+	}
+	const preload = {
+		byId,
+		byScope
+	};
+	return requirements.map((requirement) => describeFromPreload({
+		key: requirement.key,
+		...requirement.scope ? { scope: requirement.scope } : {},
+		consumerId: requirement.consumerId,
+		context,
+		preload
+	}, preload));
+}
 function encodeOAuthState(payload) {
 	return (0, _keystrokehq_database.encryptCredentialPayload)(JSON.stringify(payload));
 }
@@ -37259,10 +37321,16 @@ Object.defineProperty(exports, "ListAppsResponseSchema", {
 		return ListAppsResponseSchema;
 	}
 });
-Object.defineProperty(exports, "ListCredentialsResponseSchema", {
+Object.defineProperty(exports, "ListCredentialsPageQuerySchema", {
 	enumerable: true,
 	get: function() {
-		return ListCredentialsResponseSchema;
+		return ListCredentialsPageQuerySchema;
+	}
+});
+Object.defineProperty(exports, "ListCredentialsPageResponseSchema", {
+	enumerable: true,
+	get: function() {
+		return ListCredentialsPageResponseSchema;
 	}
 });
 Object.defineProperty(exports, "ListManagedServiceCredentialsResponseSchema", {
@@ -37277,10 +37345,16 @@ Object.defineProperty(exports, "ListOrganizationInvitationsResponseSchema", {
 		return ListOrganizationInvitationsResponseSchema;
 	}
 });
-Object.defineProperty(exports, "ListOrganizationMembersResponseSchema", {
+Object.defineProperty(exports, "ListOrganizationMembersPageQuerySchema", {
+	enumerable: true,
+	get: function() {
+		return ListOrganizationMembersPageQuerySchema;
+	}
+});
+Object.defineProperty(exports, "ListOrganizationMembersPageResponseSchema", {
 	enumerable: true,
 	get: function() {
-		return ListOrganizationMembersResponseSchema;
+		return ListOrganizationMembersPageResponseSchema;
 	}
 });
 Object.defineProperty(exports, "ListOrganizationsResponseSchema", {
@@ -37841,10 +37915,10 @@ Object.defineProperty(exports, "deriveCredentialInstanceSlug", {
 		return deriveCredentialInstanceSlug;
 	}
 });
-Object.defineProperty(exports, "describeCredentialBinding", {
+Object.defineProperty(exports, "describeCredentialBindings", {
 	enumerable: true,
 	get: function() {
-		return describeCredentialBinding;
+		return describeCredentialBindings;
 	}
 });
 Object.defineProperty(exports, "discoverGraphqlApp", {
@@ -38087,12 +38161,6 @@ Object.defineProperty(exports, "publicKeystrokeAssetsObjectUrl", {
 		return publicKeystrokeAssetsObjectUrl;
 	}
 });
-Object.defineProperty(exports, "readCredentialInstanceSecret", {
-	enumerable: true,
-	get: function() {
-		return readCredentialInstanceSecret;
-	}
-});
 Object.defineProperty(exports, "resolveExternalPlatformOrigin", {
 	enumerable: true,
 	get: function() {
@@ -38148,4 +38216,4 @@ Object.defineProperty(exports, "withCredentialAssignments", {
 	}
 });
 
-//# sourceMappingURL=dist-B2pUVq21.cjs.map
+//# sourceMappingURL=dist-Bf-X1hc-.cjs.map