@keystrokehq/platform 0.1.73 → 0.1.75

package/dist/{dist-CLjJy5Ds.mjs → dist-CdjC5zLI.mjs}

@@ -5258,6 +5258,7 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		name: requiredDisplayTextSchema,
 		description: requiredDisplayTextSchema,
 		model: string(),
+		compactionModel: string().optional(),
 		systemPrompt: string(),
 		toolCount: number$1().int().nonnegative(),
 		credentialCount: number$1().int().nonnegative(),
@@ -5465,6 +5466,47 @@ object({
 	thresholdMicroCredits: number$1().int().positive().optional(),
 	packId: string().optional()
 });
+const BillingUsageEventSourceSchema = _enum([
+	"ai_gateway",
+	"sandbox",
+	"web_proxy",
+	"storage",
+	"dispatch",
+	"poll"
+]);
+const BillingUsageMeterKeySchema = _enum([
+	"llm",
+	"vm_second",
+	"web_search",
+	"web_fetch",
+	"workflow_run",
+	"agent_run",
+	"poll_trigger",
+	"tigris_storage"
+]);
+const BillingUsageKeySourceSchema = _enum(["platform", "byok"]);
+const BillingUsageRunKindSchema = _enum(["agent", "workflow"]);
+object({ events: array(object({
+	projectId: string().min(1).max(255).nullable().optional(),
+	runId: string().min(1).max(255).nullable().optional(),
+	runKind: BillingUsageRunKindSchema.nullable().optional(),
+	source: BillingUsageEventSourceSchema,
+	sourceEventId: string().min(1).max(512),
+	meterKey: BillingUsageMeterKeySchema,
+	quantity: number$1().finite().nonnegative(),
+	unit: string().min(1).max(64),
+	providerCostUsd: number$1().finite().nonnegative().nullable().optional(),
+	keySource: BillingUsageKeySourceSchema.nullable().optional(),
+	occurredAt: isoDateTime$6,
+	metadata: record(string(), unknown()).nullable().optional()
+}).strict()).min(1).max(100) }).strict();
+object({
+	accepted: number$1().int().nonnegative(),
+	inserted: number$1().int().nonnegative(),
+	duplicate: number$1().int().nonnegative(),
+	settledLedgerId: string().nullable(),
+	chargeMicroCredits: number$1().int().nonnegative()
+});
 /** Messaging platforms that support agent gateway bindings. */
 const ChannelPlatformKeySchema = _enum(["slack"]);
 const ChannelReactionSupportSchema = _enum([
@@ -6283,6 +6325,191 @@ object({
 	attachmentId: string(),
 	attachmentSlug: string()
 });
+const HistoryRunKindSchema = _enum(["workflow", "agent"]);
+const HistoryRunStatusSchema = _enum([
+	"pending",
+	"running",
+	"sleeping",
+	"waiting_hook",
+	"completed",
+	"failed",
+	"canceled"
+]);
+const HistoryRunActorSchema = object({
+	userId: string(),
+	name: string(),
+	avatarUrl: string().nullable().optional()
+});
+const HistoryRunUsageLineItemSchema = object({
+	id: string(),
+	label: string(),
+	/** Amount debited from the org's Keystroke balance for this line. */
+	billedUsd: number$1(),
+	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
+	providerCostUsd: number$1().nullable().optional(),
+	keySource: _enum(["byok", "platform"]).nullable().optional()
+});
+const HistoryRunUsageSchema = object({
+	runDurationMs: number$1().nullable(),
+	lineItems: array(HistoryRunUsageLineItemSchema),
+	/** Sum of `billedUsd` — what Keystroke charged for this run. */
+	totalBilledUsd: number$1().nullable(),
+	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
+	externalProviderCostUsd: number$1().nullable().optional()
+});
+const HistoryRunSchema = object({
+	id: string(),
+	kind: HistoryRunKindSchema,
+	traceId: string().nullable(),
+	projectId: string(),
+	projectName: string(),
+	resourceKey: string(),
+	resourceId: string(),
+	resourceName: string(),
+	status: HistoryRunStatusSchema,
+	triggeredAt: string(),
+	timeInQueueMs: number$1().nullable(),
+	startedAt: string(),
+	finishedAt: string().nullable(),
+	durationMs: number$1().nullable(),
+	triggerLabel: string(),
+	triggerRaw: string(),
+	ranAs: HistoryRunActorSchema.nullable(),
+	modelsUsed: array(string()),
+	otherServicesUsed: array(string()),
+	totalCostUsd: number$1().nullable(),
+	messageCount: number$1().optional(),
+	stepCount: number$1().optional()
+});
+const HistoryTraceSpanSchema = object({
+	id: string(),
+	traceId: string(),
+	parentSpanId: string().nullable(),
+	kind: string(),
+	refId: string(),
+	name: string(),
+	status: string(),
+	startedAt: string(),
+	finishedAt: string().nullable(),
+	metadata: unknown().nullable(),
+	error: unknown().nullable()
+});
+const HistoryTraceLogSchema = object({
+	id: string(),
+	traceId: string(),
+	spanId: string(),
+	seq: number$1(),
+	level: string(),
+	message: string(),
+	data: unknown().nullable(),
+	source: string(),
+	createdAt: string()
+});
+const HistoryTraceTriggerSchema = object({
+	triggerType: string(),
+	triggerRunId: string(),
+	workflowKey: string().optional(),
+	agentKey: string().optional(),
+	attachmentId: string().nullable().optional(),
+	attachmentSlug: string().nullable().optional(),
+	route: string().optional(),
+	sourcePath: string().nullable().optional()
+}).nullable();
+const HistoryTraceGatewaySchema = object({
+	gatewayAttachmentId: string(),
+	gatewayAttachmentKey: string(),
+	threadId: string().optional(),
+	channelId: string().optional(),
+	mode: string().optional()
+}).nullable();
+const HistoryTraceSchema = object({
+	traceId: string(),
+	trigger: HistoryTraceTriggerSchema,
+	gateway: HistoryTraceGatewaySchema,
+	spans: array(HistoryTraceSpanSchema),
+	logs: array(HistoryTraceLogSchema)
+});
+const HistoryWorkflowStepSchema = object({
+	id: string(),
+	actionKey: string(),
+	output: unknown(),
+	completedAt: string()
+});
+const HistoryWorkflowRunDetailSchema = object({
+	kind: literal("workflow"),
+	run: object({
+		id: string(),
+		workflowKey: string(),
+		status: HistoryRunStatusSchema,
+		trigger: string(),
+		triggeredAt: string(),
+		startedAt: string().nullable(),
+		finishedAt: string().nullable(),
+		input: unknown().nullable(),
+		output: unknown().nullable(),
+		error: unknown().nullable()
+	}),
+	trigger: object({
+		id: string(),
+		attachmentSlug: string().nullable(),
+		triggerType: string(),
+		sourcePath: string().nullable(),
+		payload: unknown().nullable(),
+		triggeredAt: string()
+	}).nullable(),
+	steps: array(HistoryWorkflowStepSchema),
+	trace: HistoryTraceSchema.nullable(),
+	ranAs: HistoryRunActorSchema.nullable().optional(),
+	usage: HistoryRunUsageSchema.nullable().optional()
+});
+const HistoryAgentCompactionEventSchema = object({
+	seq: number$1(),
+	createdAt: string(),
+	compactionModel: string(),
+	sourceModel: string(),
+	estimatedBeforeTokens: number$1().optional(),
+	retainedTailEstimate: number$1().optional(),
+	durable: boolean()
+});
+const HistoryRunDetailSchema = discriminatedUnion("kind", [HistoryWorkflowRunDetailSchema, object({
+	kind: literal("agent"),
+	runId: string(),
+	session: object({
+		id: string(),
+		agentKey: string(),
+		status: HistoryRunStatusSchema,
+		source: _enum([
+			"api",
+			"gateway",
+			"trigger",
+			"workflow",
+			"agent"
+		]),
+		sourceId: string().nullable(),
+		createdAt: string(),
+		updatedAt: string(),
+		messageCount: number$1(),
+		error: unknown().nullable()
+	}),
+	gateway: object({
+		threadId: string(),
+		attachmentSlug: string().nullable()
+	}).nullable(),
+	messages: array(record(string(), unknown())),
+	/** Sanitized context-compaction markers for the conversation timeline. */
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([]),
+	trace: HistoryTraceSchema.nullable(),
+	ranAs: HistoryRunActorSchema.nullable().optional(),
+	usage: HistoryRunUsageSchema.nullable().optional()
+})]);
+object({
+	project: string().min(1).optional(),
+	status: HistoryRunStatusSchema.optional(),
+	kind: HistoryRunKindSchema.optional(),
+	limit: number().int().min(1).max(200).optional()
+});
+HistoryRunDetailSchema.nullable();
+HistoryRunSchema.nullable();
 const WorkflowRunStatusSchema = _enum([
 	"pending",
 	"running",
@@ -6507,6 +6734,12 @@ object({
 	gateway: GatewaySessionDetailSchema.nullable(),
 	messages: array(record(string(), unknown())),
 	events: array(AgentEventSchema),
+	/**
+	* Sanitized context-compaction markers, populated alongside `messages`.
+	* A cheap indexed lookup (session_id + event_type) — never the full event
+	* log. Defaulted so older servers remain compatible.
+	*/
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([]),
 	trace: TraceResponseSchema.nullable()
 });
 const SlackGatewayModeSchema = _enum([
@@ -6543,179 +6776,6 @@ object({ agents: array(object({
 	name: string().optional(),
 	route: string()
 })) });
-const HistoryRunKindSchema = _enum(["workflow", "agent"]);
-const HistoryRunStatusSchema = _enum([
-	"pending",
-	"running",
-	"sleeping",
-	"waiting_hook",
-	"completed",
-	"failed",
-	"canceled"
-]);
-const HistoryRunActorSchema = object({
-	userId: string(),
-	name: string(),
-	avatarUrl: string().nullable().optional()
-});
-const HistoryRunUsageLineItemSchema = object({
-	id: string(),
-	label: string(),
-	/** Amount debited from the org's Keystroke balance for this line. */
-	billedUsd: number$1(),
-	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
-	providerCostUsd: number$1().nullable().optional(),
-	keySource: _enum(["byok", "platform"]).nullable().optional()
-});
-const HistoryRunUsageSchema = object({
-	runDurationMs: number$1().nullable(),
-	lineItems: array(HistoryRunUsageLineItemSchema),
-	/** Sum of `billedUsd` — what Keystroke charged for this run. */
-	totalBilledUsd: number$1().nullable(),
-	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
-	externalProviderCostUsd: number$1().nullable().optional()
-});
-const HistoryRunSchema = object({
-	id: string(),
-	kind: HistoryRunKindSchema,
-	traceId: string().nullable(),
-	projectId: string(),
-	projectName: string(),
-	resourceKey: string(),
-	resourceId: string(),
-	resourceName: string(),
-	status: HistoryRunStatusSchema,
-	triggeredAt: string(),
-	timeInQueueMs: number$1().nullable(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	durationMs: number$1().nullable(),
-	triggerLabel: string(),
-	triggerRaw: string(),
-	ranAs: HistoryRunActorSchema.nullable(),
-	modelsUsed: array(string()),
-	otherServicesUsed: array(string()),
-	totalCostUsd: number$1().nullable(),
-	messageCount: number$1().optional(),
-	stepCount: number$1().optional()
-});
-const HistoryTraceSpanSchema = object({
-	id: string(),
-	traceId: string(),
-	parentSpanId: string().nullable(),
-	kind: string(),
-	refId: string(),
-	name: string(),
-	status: string(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	metadata: unknown().nullable(),
-	error: unknown().nullable()
-});
-const HistoryTraceLogSchema = object({
-	id: string(),
-	traceId: string(),
-	spanId: string(),
-	seq: number$1(),
-	level: string(),
-	message: string(),
-	data: unknown().nullable(),
-	source: string(),
-	createdAt: string()
-});
-const HistoryTraceTriggerSchema = object({
-	triggerType: string(),
-	triggerRunId: string(),
-	workflowKey: string().optional(),
-	agentKey: string().optional(),
-	attachmentId: string().nullable().optional(),
-	attachmentSlug: string().nullable().optional(),
-	route: string().optional(),
-	sourcePath: string().nullable().optional()
-}).nullable();
-const HistoryTraceGatewaySchema = object({
-	gatewayAttachmentId: string(),
-	gatewayAttachmentKey: string(),
-	threadId: string().optional(),
-	channelId: string().optional(),
-	mode: string().optional()
-}).nullable();
-const HistoryTraceSchema = object({
-	traceId: string(),
-	trigger: HistoryTraceTriggerSchema,
-	gateway: HistoryTraceGatewaySchema,
-	spans: array(HistoryTraceSpanSchema),
-	logs: array(HistoryTraceLogSchema)
-});
-const HistoryWorkflowStepSchema = object({
-	id: string(),
-	actionKey: string(),
-	output: unknown(),
-	completedAt: string()
-});
-const HistoryRunDetailSchema = discriminatedUnion("kind", [object({
-	kind: literal("workflow"),
-	run: object({
-		id: string(),
-		workflowKey: string(),
-		status: HistoryRunStatusSchema,
-		trigger: string(),
-		triggeredAt: string(),
-		startedAt: string().nullable(),
-		finishedAt: string().nullable(),
-		input: unknown().nullable(),
-		output: unknown().nullable(),
-		error: unknown().nullable()
-	}),
-	trigger: object({
-		id: string(),
-		attachmentSlug: string().nullable(),
-		triggerType: string(),
-		sourcePath: string().nullable(),
-		payload: unknown().nullable(),
-		triggeredAt: string()
-	}).nullable(),
-	steps: array(HistoryWorkflowStepSchema),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-}), object({
-	kind: literal("agent"),
-	runId: string(),
-	session: object({
-		id: string(),
-		agentKey: string(),
-		status: HistoryRunStatusSchema,
-		source: _enum([
-			"api",
-			"gateway",
-			"trigger",
-			"workflow",
-			"agent"
-		]),
-		sourceId: string().nullable(),
-		createdAt: string(),
-		updatedAt: string(),
-		messageCount: number$1(),
-		error: unknown().nullable()
-	}),
-	gateway: object({
-		threadId: string(),
-		attachmentSlug: string().nullable()
-	}).nullable(),
-	messages: array(record(string(), unknown())),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-})]);
-object({
-	project: string().min(1).optional(),
-	status: HistoryRunStatusSchema.optional(),
-	kind: HistoryRunKindSchema.optional(),
-	limit: number().int().min(1).max(200).optional()
-});
-HistoryRunDetailSchema.nullable();
-HistoryRunSchema.nullable();
 object({ subscriptions: array(object({
 	id: string(),
 	workflowKey: string(),
@@ -7687,8 +7747,8 @@ function verifyOrgWorkerToken(secret, token) {
 	if (signature.length !== expected.length || !timingSafeEqual(signature, expected)) return;
 	return { organizationId };
 }
+/** Non-secret runtime config forwarded into org workers. Never include platform secrets. */
 const RUNTIME_ENV_KEYS = [
-	"BETTER_AUTH_SECRET",
 	"PUBLIC_PLATFORM_URL",
 	"PUBLIC_PLATFORM_PROXY_URL",
 	"PUBLIC_WEB_URL",
@@ -7696,6 +7756,15 @@ const RUNTIME_ENV_KEYS = [
 	"REDIS_URL",
 	"KEYSTROKE_QUEUE_PREFIX"
 ];
+/** Env keys that must never be forwarded into untrusted org workers. */
+const FORBIDDEN_WORKER_ENV_KEYS = [
+	"BETTER_AUTH_SECRET",
+	"DATABASE_URL",
+	"POSTGRES_PASSWORD",
+	"PLATFORM_WORKER_TOKEN",
+	"STRIPE_SECRET_KEY",
+	"CREDENTIAL_ENCRYPTION_KEY"
+];
 /** Provider and gateway env forwarded from the platform into project servers. */
 const PROVIDER_ENV_KEYS = [
 	"ANTHROPIC_API_KEY",
@@ -7742,6 +7811,7 @@ function buildRuntimeEnv(source, artifacts, database, extraEnv) {
 	entries.set("PLATFORM_URL", worker.platformUrl);
 	entries.set("WORKER_INTERNAL_TOKEN", mintOrgWorkerToken(worker.workerToken, database.organizationId));
 	if (extraEnv) for (const [key, value] of Object.entries(extraEnv)) entries.set(key, value);
+	for (const key of FORBIDDEN_WORKER_ENV_KEYS) entries.delete(key);
 	return Object.fromEntries(entries);
 }
 function resolvePlatformWorkerToken(source = process.env) {
@@ -7974,4 +8044,4 @@ async function fetchDeployStatus(baseUrl, options = {}) {
 //#endregion
 export { verifyOrgWorkerToken as a, pingProjectTarget as i, fetchDeployStatus as n, mintOrgWorkerToken as r, defaultHostingPlugin as t };
 
-//# sourceMappingURL=dist-CLjJy5Ds.mjs.map
+//# sourceMappingURL=dist-CdjC5zLI.mjs.map