@keystrokehq/snowflake 0.0.16 → 0.0.17

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Buster
+Copyright (c) 2026 Dallin
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,241 +1,17 @@
 # @keystrokehq/snowflake
 
-Official Keystroke integration for the Snowflake Data Cloud. One package wraps the Snowflake SQL API v2, Snowpipe file REST, Snowpipe Streaming, Streams, Tasks, Warehouses, Roles, Users, Grants, Shares, account admin, and the public Snowflake status page behind a typed, `fetch`-based HTTPS client — plus 22 polling triggers and 3 auto-ingest webhook triggers.
+Keystroke-managed integration.
 
-No Node-native dependencies. The runtime is built on `fetch` + `SubtleCrypto`, so it runs in Cloudflare Workers and other isolate tiers without any shim.
-
-See `PLAN.md` for the full action/trigger enumeration and `IMPLEMENTATION_NOTES.md` for the decisions that shipped with this build.
-
-## Install
-
-```bash
-pnpm add @keystrokehq/snowflake
-```
-
-## Credentials
-
-The public `snowflake` connection accepts four auth modes via a discriminated union on `mode`:
-
-| Mode | When to use |
-|------|-------------|
-| `keypair` | Service accounts with an RSA key pair registered on the Snowflake user (recommended). |
-| `oauth` | External IdP or Snowflake-hosted OAuth — supply a bearer access token, optionally refreshable. |
-| `pat` | Programmatic Access Token (Snowflake preview). |
-| `basic` | Legacy username + password. Emits a deprecation warning at client creation time. |
-
-Shared required fields: `SNOWFLAKE_ACCOUNT`, plus `SNOWFLAKE_USER` for any non-OAuth mode. Optional session fields — `SNOWFLAKE_ROLE`, `SNOWFLAKE_WAREHOUSE`, `SNOWFLAKE_DATABASE`, `SNOWFLAKE_SCHEMA`, `SNOWFLAKE_HOST`, `SNOWFLAKE_REGION` — are honored by every operation when the input does not provide an override.
-
-Example vault values for key-pair mode:
-
-```ts
-import type { SnowflakeCredentials } from '@keystrokehq/snowflake/credential-sets';
-
-const credentials: SnowflakeCredentials = {
-  mode: 'keypair',
-  SNOWFLAKE_ACCOUNT: 'my-org-my-account',
-  SNOWFLAKE_USER: 'KEYSTROKE_SVC',
-  SNOWFLAKE_PRIVATE_KEY: '-----BEGIN PRIVATE KEY-----\n...',
-  SNOWFLAKE_ROLE: 'KEYSTROKE_ROLE',
-  SNOWFLAKE_WAREHOUSE: 'KEYSTROKE_WH',
-};
-```
-
-## Client
-
-All domain functions accept a `SnowflakeClient` produced by `createSnowflakeClient(credentials)`. The client is stateless other than an internal OAuth/keypair JWT cache; reuse a single client across many operations.
-
-```ts
-import { createSnowflakeClient } from '@keystrokehq/snowflake/client';
-
-const client = createSnowflakeClient(credentials);
-```
-
-## Quickstart
-
-### Execute a statement
+**App:** `snowflake`  
+**Version:** `20260615_00`  
+**Actions:** 16
 
 ```ts
-import { executeSql } from '@keystrokehq/snowflake/sql';
+import { defineAgent } from "@keystrokehq/keystroke/agent";
+import { snowflakeCancelStatementExecution } from "@keystrokehq/snowflake/actions";
 
-const result = await executeSql(client, {
-  statement: 'SELECT 1 AS ping',
-  timeout: 60,
+export default defineAgent({
+  key: "snowflake-agent",
+  tools: [snowflakeCancelStatementExecution],
 });
-
-for (const row of result.rows) {
-  console.log(row);
-}
 ```
-
-### Find rows with parameter binding
-
-```ts
-import { findRows } from '@keystrokehq/snowflake/rows';
-
-const rows = await findRows(client, {
-  database: 'ANALYTICS',
-  schema: 'PUBLIC',
-  table: 'ORDERS',
-  where: { STATUS: 'OPEN' },
-  orderBy: [{ column: 'CREATED_AT', direction: 'DESC' }],
-  limit: 100,
-});
-```
-
-### Show tables in a schema
-
-```ts
-import { showTables } from '@keystrokehq/snowflake/catalog';
-
-const tables = await showTables(client, {
-  database: 'ANALYTICS',
-  schema: 'PUBLIC',
-});
-```
-
-### Run a task on demand
-
-```ts
-import { executeTask } from '@keystrokehq/snowflake/tasks';
-
-await executeTask(client, {
-  database: 'ANALYTICS',
-  schema: 'PUBLIC',
-  name: 'REFRESH_FACTS',
-});
-```
-
-### Refresh a pipe + insert files over Snowpipe REST
-
-```ts
-import { insertFiles, refreshPipe } from '@keystrokehq/snowflake/pipes';
-
-await refreshPipe(client, {
-  database: 'ANALYTICS',
-  schema: 'RAW',
-  name: 'ORDERS_PIPE',
-});
-
-await insertFiles(client, {
-  database: 'ANALYTICS',
-  schema: 'RAW',
-  name: 'ORDERS_PIPE',
-  files: [{ path: 'orders/2026/04/20.parquet' }],
-});
-```
-
-## Triggers
-
-### Polling trigger — new rows on a stream
-
-```ts
-import { polling } from '@keystrokehq/snowflake/triggers';
-
-const bound = polling.streamHasNewRows({
-  streamName: 'ANALYTICS.PUBLIC.ORDERS_STREAM',
-  schedule: '*/5 * * * *',
-  name: 'Orders stream has new rows',
-  transform: (event) => ({
-    streamName: event.streamName,
-    checkedAt: event.checkedAt,
-  }),
-});
-```
-
-### Polling trigger — signature-diff on `SHOW GRANTS`
-
-```ts
-import { polling } from '@keystrokehq/snowflake/triggers';
-
-const grants = polling.grantsChanged({
-  grantee: { role: 'KEYSTROKE_ROLE' },
-  schedule: '15m',
-});
-```
-
-### Auto-ingest webhook — AWS SNS
-
-```ts
-import { webhooks } from '@keystrokehq/snowflake/triggers';
-
-const s3Sns = webhooks.autoIngestS3Sns({
-  name: 'Snowpipe via SNS',
-  transform: (batch) => ({
-    bucket: batch.events[0]?.bucket,
-    objects: batch.events.length,
-  }),
-});
-```
-
-### Auto-ingest webhook — GCS Pub/Sub push
-
-```ts
-import { webhooks } from '@keystrokehq/snowflake/triggers';
-
-const gcs = webhooks.autoIngestGcsPubSub({
-  transform: (batch) => ({ objects: batch.events.length }),
-});
-```
-
-### Auto-ingest webhook — Azure Event Grid
-
-```ts
-import { webhooks } from '@keystrokehq/snowflake/triggers';
-
-const eg = webhooks.autoIngestAzureEventGrid({
-  transform: (batch) => ({ objects: batch.events.length }),
-});
-```
-
-## Verification helpers
-
-Every auto-ingest webhook verifies itself through the `verify` callback wired by the trigger factory. The underlying helpers are also exported for direct use — for example, from an edge proxy that wants to reject unsigned requests before the payload reaches a workflow.
-
-```ts
-import {
-  SnowflakeWebhookVerificationError,
-  verifyEventGridRequest,
-  verifyPubSubPushAuthorization,
-  verifySnsMessage,
-} from '@keystrokehq/snowflake/verification';
-
-try {
-  await verifySnsMessage(rawBody, {
-    expectedTopicArn: 'arn:aws:sns:us-east-1:123456789012:snowpipe-orders',
-  });
-} catch (err) {
-  if (err instanceof SnowflakeWebhookVerificationError) {
-    // err.reason ∈ 'invalid-json' | 'schema' | 'topic-arn' | 'signing-cert-host' | 'signature' | ...
-  }
-}
-```
-
-## Public surface
-
-- `@keystrokehq/snowflake/credential-sets` — `snowflakeCredentialSet`, platform-only auto-ingest webhook credential sets, auth schemas, and credential types.
-- `@keystrokehq/snowflake/operations` — catalog operation barrel (empty today; trigger-only package).
-- `@keystrokehq/snowflake/client` — `createSnowflakeClient(credentials, options?)` for direct SQL API access.
-- `@keystrokehq/snowflake/schemas` — shared Zod schemas (statements, results, pipes, catalog, and more).
-- `@keystrokehq/snowflake/events` — curated Zod event contracts emitted by each trigger.
-- `@keystrokehq/snowflake/triggers` — `polling`, `webhooks`, and `autoIngest` direct-binding helpers.
-- `@keystrokehq/snowflake/verification` — auto-ingest cloud-event verification (SNS, Pub/Sub, Event Grid).
-
-### Operation domains
-
-- `sql` — `submitStatement`, `getStatement`, `cancelStatement`, `executeSql`, `runQuery`, `getStatementResultPartition`, `iterateStatementResult`, `waitForStatement`.
-- `results` — partition iteration + row hydration helpers.
-- `catalog` — `SHOW`/`DESCRIBE` across databases, schemas, tables, views, columns, warehouses, roles, users, stages, pipes, tasks, streams, shares, functions, procedures, file formats, grants; plus Relay-style `findDatabases`/`findSchemas`/`findTables` and BASIC-parity `describeTable`/`exploreColumns`.
-- `rows` — `findRow`, `findRows`, `insertRow`, `batchInsert`, `updateRow`, `deleteRow`, `upsertRow`, `mergeRows`.
-- `databases`, `schemas-catalog`, `tables`, `views`, `stages`, `file-formats`, `streams`, `tasks`, `warehouses`, `roles`, `users`, `grants`, `shares`, `functions`, `procedures`, `accounts`, `org-admin` — DDL + admin.
-- `pipes`, `streaming`, `bulk` — Snowpipe file REST, Snowpipe Streaming channels, stage-oriented bulk helpers.
-- `status-page` — Composio-parity Snowflake status page endpoints.
-
-## Safety
-
-- Destructive DDL operations (`dropTable`, `dropDatabase`, `dropSchema`, `dropUser`, `dropRole`, `dropWarehouse`, `dropShare`, etc.) require an explicit `confirm: true` input and are marked `needsApproval: true` where surfaced through the operation factory.
-- The package never streams file bytes directly through the SQL API. File-oriented helpers (`putFile`, `getFile`) orchestrate `PUT @stage` / `GET @stage` SQL statements and return the result; binary payloads must be supplied through an external stage with its own cloud credentials.
-- `basic` auth emits `console.warn` at client creation time; Snowflake has deprecated password-only programmatic access.
-
-## License
-
-MIT

package/dist/actions/index.cjs

@@ -0,0 +1,18 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_actions = require("../actions-BGkaZb6a.cjs");
+exports.snowflakeCancelStatementExecution = require_actions.snowflakeCancelStatementExecution;
+exports.snowflakeCheckStatementStatus = require_actions.snowflakeCheckStatementStatus;
+exports.snowflakeDropWarehouse = require_actions.snowflakeDropWarehouse;
+exports.snowflakeExecuteSql = require_actions.snowflakeExecuteSql;
+exports.snowflakeFetchCatalogIntegration = require_actions.snowflakeFetchCatalogIntegration;
+exports.snowflakeGetActiveScheduledMaintenances = require_actions.snowflakeGetActiveScheduledMaintenances;
+exports.snowflakeGetAllScheduledMaintenances = require_actions.snowflakeGetAllScheduledMaintenances;
+exports.snowflakeGetComponentStatus = require_actions.snowflakeGetComponentStatus;
+exports.snowflakeGetStatusRollup = require_actions.snowflakeGetStatusRollup;
+exports.snowflakeGetStatusSummary = require_actions.snowflakeGetStatusSummary;
+exports.snowflakeGetUnresolvedIncidents = require_actions.snowflakeGetUnresolvedIncidents;
+exports.snowflakeGetUpcomingScheduledMaintenances = require_actions.snowflakeGetUpcomingScheduledMaintenances;
+exports.snowflakeShowDatabases = require_actions.snowflakeShowDatabases;
+exports.snowflakeShowSchemas = require_actions.snowflakeShowSchemas;
+exports.snowflakeShowTables = require_actions.snowflakeShowTables;
+exports.snowflakeValidateCredential = require_actions.snowflakeValidateCredential;

package/dist/actions/index.d.cts

@@ -0,0 +1,2 @@
+import { a as snowflakeGetUpcomingScheduledMaintenances, c as snowflakeGetStatusRollup, d as snowflakeGetActiveScheduledMaintenances, f as snowflakeFetchCatalogIntegration, g as snowflakeCancelStatementExecution, h as snowflakeCheckStatementStatus, i as snowflakeShowDatabases, l as snowflakeGetComponentStatus, m as snowflakeDropWarehouse, n as snowflakeShowTables, o as snowflakeGetUnresolvedIncidents, p as snowflakeExecuteSql, r as snowflakeShowSchemas, s as snowflakeGetStatusSummary, t as snowflakeValidateCredential, u as snowflakeGetAllScheduledMaintenances } from "../index-DUGCZPGQ.cjs";
+export { snowflakeCancelStatementExecution, snowflakeCheckStatementStatus, snowflakeDropWarehouse, snowflakeExecuteSql, snowflakeFetchCatalogIntegration, snowflakeGetActiveScheduledMaintenances, snowflakeGetAllScheduledMaintenances, snowflakeGetComponentStatus, snowflakeGetStatusRollup, snowflakeGetStatusSummary, snowflakeGetUnresolvedIncidents, snowflakeGetUpcomingScheduledMaintenances, snowflakeShowDatabases, snowflakeShowSchemas, snowflakeShowTables, snowflakeValidateCredential };

package/dist/actions/index.d.mts

@@ -0,0 +1,2 @@
+import { a as snowflakeGetUpcomingScheduledMaintenances, c as snowflakeGetStatusRollup, d as snowflakeGetActiveScheduledMaintenances, f as snowflakeFetchCatalogIntegration, g as snowflakeCancelStatementExecution, h as snowflakeCheckStatementStatus, i as snowflakeShowDatabases, l as snowflakeGetComponentStatus, m as snowflakeDropWarehouse, n as snowflakeShowTables, o as snowflakeGetUnresolvedIncidents, p as snowflakeExecuteSql, r as snowflakeShowSchemas, s as snowflakeGetStatusSummary, t as snowflakeValidateCredential, u as snowflakeGetAllScheduledMaintenances } from "../index-RhOmpRxD.mjs";
+export { snowflakeCancelStatementExecution, snowflakeCheckStatementStatus, snowflakeDropWarehouse, snowflakeExecuteSql, snowflakeFetchCatalogIntegration, snowflakeGetActiveScheduledMaintenances, snowflakeGetAllScheduledMaintenances, snowflakeGetComponentStatus, snowflakeGetStatusRollup, snowflakeGetStatusSummary, snowflakeGetUnresolvedIncidents, snowflakeGetUpcomingScheduledMaintenances, snowflakeShowDatabases, snowflakeShowSchemas, snowflakeShowTables, snowflakeValidateCredential };

package/dist/actions/index.mjs

@@ -0,0 +1,2 @@
+import { a as snowflakeGetUpcomingScheduledMaintenances, c as snowflakeGetStatusRollup, d as snowflakeGetActiveScheduledMaintenances, f as snowflakeFetchCatalogIntegration, g as snowflakeCancelStatementExecution, h as snowflakeCheckStatementStatus, i as snowflakeShowDatabases, l as snowflakeGetComponentStatus, m as snowflakeDropWarehouse, n as snowflakeShowTables, o as snowflakeGetUnresolvedIncidents, p as snowflakeExecuteSql, r as snowflakeShowSchemas, s as snowflakeGetStatusSummary, t as snowflakeValidateCredential, u as snowflakeGetAllScheduledMaintenances } from "../actions-BR_JWhT_.mjs";
+export { snowflakeCancelStatementExecution, snowflakeCheckStatementStatus, snowflakeDropWarehouse, snowflakeExecuteSql, snowflakeFetchCatalogIntegration, snowflakeGetActiveScheduledMaintenances, snowflakeGetAllScheduledMaintenances, snowflakeGetComponentStatus, snowflakeGetStatusRollup, snowflakeGetStatusSummary, snowflakeGetUnresolvedIncidents, snowflakeGetUpcomingScheduledMaintenances, snowflakeShowDatabases, snowflakeShowSchemas, snowflakeShowTables, snowflakeValidateCredential };