@keystrokehq/platform 1.0.25 → 1.0.26

package/dist/{dist-CXr-QoFY.cjs → dist-Be3BWye3.cjs}

@@ -5182,7 +5182,9 @@ object({ patch: object({
 const AppCredentialFieldSchema$1 = object({
 	label: string().trim().min(1).optional(),
 	secret: boolean().optional(),
-	optional: boolean().optional()
+	optional: boolean().optional(),
+	description: string().trim().min(1).optional(),
+	default: string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema$1 = record(string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema$1).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -5199,6 +5201,13 @@ const AppAuthKindSchema$1 = _enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema$1 = _enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -5212,7 +5221,11 @@ object({
 	logo: string().url().optional(),
 	authKind: AppAuthKindSchema$1,
 	oauthScopes: array(OAuthScopeOptionSchema$1)
-}).extend({ source: AppSourceSchema$1 });
+}).extend({
+	source: AppSourceSchema$1,
+	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional()
+});
 const customAppNameSchema$1 = string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema$1 = ProjectSlugAvailabilityReasonSchema$1;
 object({
@@ -5252,6 +5265,7 @@ object({
 	oauthScopes: array(OAuthScopeOptionSchema$1),
 	source: AppSourceSchema$1,
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5268,6 +5282,8 @@ object({
 	source: AppSourceSchema$1,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema$1.optional()
 });
@@ -5357,7 +5373,7 @@ object({
 });
 const credentialSecretValueSchema$1 = record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget$1(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue$1(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -5372,7 +5388,9 @@ const CredentialTargetsFieldsSchema$1 = object({
 	createOrganizationCredential: boolean().default(false),
 	createUserProvidedCredential: boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: string().trim().min(1).optional()
+	label: string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
@@ -5383,14 +5401,20 @@ object({
 	status: _enum(["connected", "redirecting"]),
 	authorizeUrl: string().url().nullable()
 });
-CredentialTargetsFieldsSchema$1.extend({ app: string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema$1.extend({
+	app: string().trim().min(1),
+	value: credentialSecretValueSchema$1.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget$1(input)) addMissingCredentialTargetIssue$1(ctx);
 });
-object({
-	status: _enum(["redirecting"]),
+discriminatedUnion("status", [object({
+	status: literal("connected"),
+	connectionId: string().min(1)
+}), object({
+	status: literal("redirecting"),
 	authorizeUrl: string().url(),
-	connectionId: string()
-});
+	connectionId: string().min(1)
+})]);
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
 	connectionKind: AppCredentialConnectionKindSchema$1,
@@ -5486,6 +5510,14 @@ object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: string().trim().min(1).optional()
 });
+object({
+	error: _enum([
+		"not_found",
+		"forbidden",
+		"mcp_execute_failed"
+	]),
+	message: string()
+});
 object({
 	type: _enum([
 		"org-deletion",
@@ -8256,7 +8288,9 @@ zod.z.object({ patch: zod.z.object({
 const AppCredentialFieldSchema = zod.z.object({
 	label: zod.z.string().trim().min(1).optional(),
 	secret: zod.z.boolean().optional(),
-	optional: zod.z.boolean().optional()
+	optional: zod.z.boolean().optional(),
+	description: zod.z.string().trim().min(1).optional(),
+	default: zod.z.string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = zod.z.record(zod.z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -8288,6 +8322,13 @@ const AppAuthKindSchema = zod.z.enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema = zod.z.enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -8301,7 +8342,11 @@ zod.z.object({
 	logo: zod.z.string().url().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
+}).extend({
+	source: AppSourceSchema,
+	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional()
+});
 const customAppNameSchema = zod.z.string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema = ProjectSlugAvailabilityReasonSchema;
 const AppSlugAvailabilityResponseSchema = zod.z.object({
@@ -8345,6 +8390,7 @@ zod.z.object({
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	createdAt: zod.z.string().min(1),
 	updatedAt: zod.z.string().min(1)
 });
@@ -8365,6 +8411,8 @@ const AppCatalogEntrySchema = zod.z.object({
 	source: AppSourceSchema,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -8462,12 +8510,12 @@ function deriveCredentialInstanceSlug(options) {
 	if (fromName) {
 		const base = normalizeOrganizationNameToSlugBase(fromName) || options.appSlug;
 		if (!taken.has(base)) return base;
-		let suffix = 2;
+		let suffix = 1;
 		while (taken.has(`${base}-${suffix}`)) suffix += 1;
 		return `${base}-${suffix}`;
 	}
 	if (!taken.has(options.appSlug)) return options.appSlug;
-	let suffix = 2;
+	let suffix = 1;
 	while (taken.has(`${options.appSlug}-${suffix}`)) suffix += 1;
 	return `${options.appSlug}-${suffix}`;
 }
@@ -8524,7 +8572,7 @@ const AppCredentialSummarySchema = zod.z.object({
 });
 const credentialSecretValueSchema = zod.z.record(zod.z.string(), zod.z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -8539,7 +8587,9 @@ const CredentialTargetsFieldsSchema = zod.z.object({
 	createOrganizationCredential: zod.z.boolean().default(false),
 	createUserProvidedCredential: zod.z.boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: zod.z.string().trim().min(1).optional()
+	label: zod.z.string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: zod.z.string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema.extend({
 	appId: zod.z.string().min(1),
@@ -8550,14 +8600,22 @@ zod.z.object({
 	status: zod.z.enum(["connected", "redirecting"]),
 	authorizeUrl: zod.z.string().url().nullable()
 });
-CredentialTargetsFieldsSchema.extend({ app: zod.z.string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema.extend({
+	app: zod.z.string().trim().min(1),
+	value: credentialSecretValueSchema.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 });
-zod.z.object({
-	status: zod.z.enum(["redirecting"]),
+const connectedKeystrokeConnectionResultSchema = zod.z.object({
+	status: zod.z.literal("connected"),
+	connectionId: zod.z.string().min(1)
+});
+const redirectingKeystrokeConnectionResultSchema = zod.z.object({
+	status: zod.z.literal("redirecting"),
 	authorizeUrl: zod.z.string().url(),
-	connectionId: zod.z.string()
+	connectionId: zod.z.string().min(1)
 });
+zod.z.discriminatedUnion("status", [connectedKeystrokeConnectionResultSchema, redirectingKeystrokeConnectionResultSchema]);
 /** Request body for `POST /api/credentials` (manual api-key fan-out). */
 const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
 	appId: zod.z.string().min(1),
@@ -8661,6 +8719,15 @@ zod.z.object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: zod.z.string().trim().min(1).optional()
 });
+const ExecuteKeystrokeToolErrorCodeSchema = zod.z.enum([
+	"not_found",
+	"forbidden",
+	"mcp_execute_failed"
+]);
+zod.z.object({
+	error: ExecuteKeystrokeToolErrorCodeSchema,
+	message: zod.z.string()
+});
 const TeamRequestTypeSchema = zod.z.enum([
 	"org-deletion",
 	"contact",
@@ -33043,6 +33110,12 @@ Object.defineProperty(exports, "deleteCredentialInstanceSecret", {
 		return deleteCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "deriveCredentialInstanceSlug", {
+	enumerable: true,
+	get: function() {
+		return deriveCredentialInstanceSlug;
+	}
+});
 Object.defineProperty(exports, "displayCredentialAppName", {
 	enumerable: true,
 	get: function() {
@@ -33278,4 +33351,4 @@ Object.defineProperty(exports, "validationErrorResponse", {
 	}
 });
 
-//# sourceMappingURL=dist-CXr-QoFY.cjs.map
+//# sourceMappingURL=dist-Be3BWye3.cjs.map