@keystrokehq/platform 1.0.24 → 1.0.26

package/dist/{dist-Blx9Yzw8.cjs → dist-Be3BWye3.cjs}

@@ -5182,7 +5182,9 @@ object({ patch: object({
 const AppCredentialFieldSchema$1 = object({
 	label: string().trim().min(1).optional(),
 	secret: boolean().optional(),
-	optional: boolean().optional()
+	optional: boolean().optional(),
+	description: string().trim().min(1).optional(),
+	default: string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema$1 = record(string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema$1).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -5199,6 +5201,13 @@ const AppAuthKindSchema$1 = _enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema$1 = _enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -5212,7 +5221,11 @@ object({
 	logo: string().url().optional(),
 	authKind: AppAuthKindSchema$1,
 	oauthScopes: array(OAuthScopeOptionSchema$1)
-}).extend({ source: AppSourceSchema$1 });
+}).extend({
+	source: AppSourceSchema$1,
+	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional()
+});
 const customAppNameSchema$1 = string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema$1 = ProjectSlugAvailabilityReasonSchema$1;
 object({
@@ -5252,6 +5265,7 @@ object({
 	oauthScopes: array(OAuthScopeOptionSchema$1),
 	source: AppSourceSchema$1,
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5268,6 +5282,8 @@ object({
 	source: AppSourceSchema$1,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema$1.optional()
 });
@@ -5357,7 +5373,7 @@ object({
 });
 const credentialSecretValueSchema$1 = record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget$1(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue$1(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -5372,7 +5388,9 @@ const CredentialTargetsFieldsSchema$1 = object({
 	createOrganizationCredential: boolean().default(false),
 	createUserProvidedCredential: boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: string().trim().min(1).optional()
+	label: string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
@@ -5383,14 +5401,20 @@ object({
 	status: _enum(["connected", "redirecting"]),
 	authorizeUrl: string().url().nullable()
 });
-CredentialTargetsFieldsSchema$1.extend({ app: string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema$1.extend({
+	app: string().trim().min(1),
+	value: credentialSecretValueSchema$1.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget$1(input)) addMissingCredentialTargetIssue$1(ctx);
 });
-object({
-	status: _enum(["redirecting"]),
+discriminatedUnion("status", [object({
+	status: literal("connected"),
+	connectionId: string().min(1)
+}), object({
+	status: literal("redirecting"),
 	authorizeUrl: string().url(),
-	connectionId: string()
-});
+	connectionId: string().min(1)
+})]);
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
 	connectionKind: AppCredentialConnectionKindSchema$1,
@@ -5486,6 +5510,14 @@ object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: string().trim().min(1).optional()
 });
+object({
+	error: _enum([
+		"not_found",
+		"forbidden",
+		"mcp_execute_failed"
+	]),
+	message: string()
+});
 object({
 	type: _enum([
 		"org-deletion",
@@ -6512,6 +6544,10 @@ object({ files: array(object({
 	id: string(),
 	path: string().min(1)
 })) });
+object({ files: array(object({
+	id: string(),
+	path: string().min(1)
+})) });
 /** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */
 function encodeOrgArtifacts(artifacts) {
 	return Buffer.from(JSON.stringify(artifacts)).toString("base64");
@@ -8252,7 +8288,9 @@ zod.z.object({ patch: zod.z.object({
 const AppCredentialFieldSchema = zod.z.object({
 	label: zod.z.string().trim().min(1).optional(),
 	secret: zod.z.boolean().optional(),
-	optional: zod.z.boolean().optional()
+	optional: zod.z.boolean().optional(),
+	description: zod.z.string().trim().min(1).optional(),
+	default: zod.z.string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = zod.z.record(zod.z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -8284,6 +8322,13 @@ const AppAuthKindSchema = zod.z.enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema = zod.z.enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -8297,7 +8342,11 @@ zod.z.object({
 	logo: zod.z.string().url().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
+}).extend({
+	source: AppSourceSchema,
+	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional()
+});
 const customAppNameSchema = zod.z.string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema = ProjectSlugAvailabilityReasonSchema;
 const AppSlugAvailabilityResponseSchema = zod.z.object({
@@ -8341,6 +8390,7 @@ zod.z.object({
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	createdAt: zod.z.string().min(1),
 	updatedAt: zod.z.string().min(1)
 });
@@ -8361,6 +8411,8 @@ const AppCatalogEntrySchema = zod.z.object({
 	source: AppSourceSchema,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -8458,12 +8510,12 @@ function deriveCredentialInstanceSlug(options) {
 	if (fromName) {
 		const base = normalizeOrganizationNameToSlugBase(fromName) || options.appSlug;
 		if (!taken.has(base)) return base;
-		let suffix = 2;
+		let suffix = 1;
 		while (taken.has(`${base}-${suffix}`)) suffix += 1;
 		return `${base}-${suffix}`;
 	}
 	if (!taken.has(options.appSlug)) return options.appSlug;
-	let suffix = 2;
+	let suffix = 1;
 	while (taken.has(`${options.appSlug}-${suffix}`)) suffix += 1;
 	return `${options.appSlug}-${suffix}`;
 }
@@ -8520,7 +8572,7 @@ const AppCredentialSummarySchema = zod.z.object({
 });
 const credentialSecretValueSchema = zod.z.record(zod.z.string(), zod.z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -8535,7 +8587,9 @@ const CredentialTargetsFieldsSchema = zod.z.object({
 	createOrganizationCredential: zod.z.boolean().default(false),
 	createUserProvidedCredential: zod.z.boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: zod.z.string().trim().min(1).optional()
+	label: zod.z.string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: zod.z.string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema.extend({
 	appId: zod.z.string().min(1),
@@ -8546,14 +8600,22 @@ zod.z.object({
 	status: zod.z.enum(["connected", "redirecting"]),
 	authorizeUrl: zod.z.string().url().nullable()
 });
-CredentialTargetsFieldsSchema.extend({ app: zod.z.string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema.extend({
+	app: zod.z.string().trim().min(1),
+	value: credentialSecretValueSchema.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 });
-zod.z.object({
-	status: zod.z.enum(["redirecting"]),
+const connectedKeystrokeConnectionResultSchema = zod.z.object({
+	status: zod.z.literal("connected"),
+	connectionId: zod.z.string().min(1)
+});
+const redirectingKeystrokeConnectionResultSchema = zod.z.object({
+	status: zod.z.literal("redirecting"),
 	authorizeUrl: zod.z.string().url(),
-	connectionId: zod.z.string()
+	connectionId: zod.z.string().min(1)
 });
+zod.z.discriminatedUnion("status", [connectedKeystrokeConnectionResultSchema, redirectingKeystrokeConnectionResultSchema]);
 /** Request body for `POST /api/credentials` (manual api-key fan-out). */
 const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
 	appId: zod.z.string().min(1),
@@ -8657,6 +8719,15 @@ zod.z.object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: zod.z.string().trim().min(1).optional()
 });
+const ExecuteKeystrokeToolErrorCodeSchema = zod.z.enum([
+	"not_found",
+	"forbidden",
+	"mcp_execute_failed"
+]);
+zod.z.object({
+	error: ExecuteKeystrokeToolErrorCodeSchema,
+	message: zod.z.string()
+});
 const TeamRequestTypeSchema = zod.z.enum([
 	"org-deletion",
 	"contact",
@@ -9861,6 +9932,16 @@ const ListAgentMemoryFilesResponseSchema = zod.z.object({ files: zod.z.array(Age
 function agentMemoryFileId(path) {
 	return projectFileId(path);
 }
+/** A single workspace file exposed to the dashboard (no contents in list responses). */
+const AgentWorkspaceFileSummarySchema = zod.z.object({
+	id: zod.z.string(),
+	path: zod.z.string().min(1)
+});
+const ListAgentWorkspaceFilesResponseSchema = zod.z.object({ files: zod.z.array(AgentWorkspaceFileSummarySchema) });
+/** Stable, path-derived file id (used by the web for selection + deep links). */
+function agentWorkspaceFileId(path) {
+	return projectFileId(path);
+}
 function mapOrganization(row) {
 	return OrganizationSchema.parse({
 		id: row.id,
@@ -32212,6 +32293,22 @@ function isBucketAlreadyExistsError(error) {
 	const code = "Code" in error ? String(error.Code) : "";
 	return name === "BucketAlreadyOwnedByYou" || code === "BucketAlreadyOwnedByYou" || name === "BucketAlreadyExists" || code === "BucketAlreadyExists";
 }
+function isStorageNotFoundError(error) {
+	if (!error || typeof error !== "object") return false;
+	const record = error;
+	const name = typeof record.name === "string" ? record.name : "";
+	const code = typeof record.Code === "string" ? record.Code : "";
+	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
+	return name === "NoSuchKey" || code === "NoSuchKey" || code === "NotFound" || status === 404;
+}
+function isStorageBucketNotFoundError(error) {
+	if (!error || typeof error !== "object") return false;
+	const record = error;
+	const name = typeof record.name === "string" ? record.name : "";
+	const code = typeof record.Code === "string" ? record.Code : "";
+	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
+	return name === "NoSuchBucket" || code === "NoSuchBucket" || name === "NotFound" || status === 404;
+}
 /** Shared bucket for cross-org public assets (avatars, org sidebar logos). */
 const KEYSTROKE_ASSETS_BUCKET = "keystroke-assets";
 /** Env var for the browser-facing origin of public asset objects (no trailing slash). */
@@ -32334,8 +32431,13 @@ function isUnsupportedStorageFeatureError(error) {
 	return name === "NotImplemented" || code === "NotImplemented" || code === "NotSupported";
 }
 const DEFAULT_BUCKET_NAME_PREFIX = "ks";
+const S3_BUCKET_NAME_MAX = 63;
+function assertBucketName(name) {
+	if (name.length > S3_BUCKET_NAME_MAX) throw new Error(`bucket name exceeds ${S3_BUCKET_NAME_MAX} chars (${name.length}): ${name}`);
+	return name;
+}
 function orgStorageBucketName(input, prefix = DEFAULT_BUCKET_NAME_PREFIX) {
-	return `${prefix.trim().replace(/-+$/g, "")}-${input.organizationId.toLowerCase()}`;
+	return assertBucketName(`${prefix.trim().replace(/-+$/g, "")}-${input.organizationId.toLowerCase()}`);
 }
 function minioStoragePlugin(options = {}) {
 	const adminConfig = storageAdminConfigFromEnv(options.env ?? process.env);
@@ -32426,6 +32528,12 @@ Object.defineProperty(exports, "AgentSummarySchema", {
 		return AgentSummarySchema;
 	}
 });
+Object.defineProperty(exports, "AgentWorkspaceFileSummarySchema", {
+	enumerable: true,
+	get: function() {
+		return AgentWorkspaceFileSummarySchema;
+	}
+});
 Object.defineProperty(exports, "AppSlugAvailabilityQuerySchema", {
 	enumerable: true,
 	get: function() {
@@ -32594,6 +32702,12 @@ Object.defineProperty(exports, "ListAgentMemoryFilesResponseSchema", {
 		return ListAgentMemoryFilesResponseSchema;
 	}
 });
+Object.defineProperty(exports, "ListAgentWorkspaceFilesResponseSchema", {
+	enumerable: true,
+	get: function() {
+		return ListAgentWorkspaceFilesResponseSchema;
+	}
+});
 Object.defineProperty(exports, "ListApiKeysResponseSchema", {
 	enumerable: true,
 	get: function() {
@@ -32954,6 +33068,12 @@ Object.defineProperty(exports, "agentMemoryFileId", {
 		return agentMemoryFileId;
 	}
 });
+Object.defineProperty(exports, "agentWorkspaceFileId", {
+	enumerable: true,
+	get: function() {
+		return agentWorkspaceFileId;
+	}
+});
 Object.defineProperty(exports, "buildCredentialInstanceLabel", {
 	enumerable: true,
 	get: function() {
@@ -32990,6 +33110,12 @@ Object.defineProperty(exports, "deleteCredentialInstanceSecret", {
 		return deleteCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "deriveCredentialInstanceSlug", {
+	enumerable: true,
+	get: function() {
+		return deriveCredentialInstanceSlug;
+	}
+});
 Object.defineProperty(exports, "displayCredentialAppName", {
 	enumerable: true,
 	get: function() {
@@ -33026,6 +33152,18 @@ Object.defineProperty(exports, "isOrgLogoStorageKey", {
 		return isOrgLogoStorageKey;
 	}
 });
+Object.defineProperty(exports, "isStorageBucketNotFoundError", {
+	enumerable: true,
+	get: function() {
+		return isStorageBucketNotFoundError;
+	}
+});
+Object.defineProperty(exports, "isStorageNotFoundError", {
+	enumerable: true,
+	get: function() {
+		return isStorageNotFoundError;
+	}
+});
 Object.defineProperty(exports, "isUserAvatarStorageKey", {
 	enumerable: true,
 	get: function() {
@@ -33213,4 +33351,4 @@ Object.defineProperty(exports, "validationErrorResponse", {
 	}
 });
 
-//# sourceMappingURL=dist-Blx9Yzw8.cjs.map
+//# sourceMappingURL=dist-Be3BWye3.cjs.map