@pikku/kysely 0.12.7 → 0.12.8

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 ## 0.12.0
 
+## 0.12.8
+
+### Patch Changes
+
+- f85c234: Add unified credential system with per-user OAuth and AI agent pre-flight checks
+
+  - Unified CredentialService with lazy loading per user via pikkuUserId
+  - wire.getCredential() for typed single credential lookup
+  - MissingCredentialError with structured payload for client-side connect flows
+  - Console UI: Global/Users credential tabs, per-user OAuth connect/revoke
+  - AI agent pre-flight check: detects missing OAuth credentials from addon metadata, shows "Connect your accounts" prompt before chat
+  - CLI codegen: generates credentialsMeta per addon package for runtime lookup
+  - Vercel AI runner: catches MissingCredentialError as runtime fallback
+
+- Updated dependencies [f85c234]
+- Updated dependencies [88d3100]
+  - @pikku/core@0.12.14
+
 ## 0.12.7
 
 ### Patch Changes

package/dist/src/kysely-credential-service.d.ts

@@ -26,5 +26,7 @@ export declare class KyselyCredentialService implements CredentialService {
     delete(name: string, userId?: string): Promise<void>;
     has(name: string, userId?: string): Promise<boolean>;
     getAll(userId: string): Promise<Record<string, unknown>>;
+    getUsersWithCredential(name: string): Promise<string[]>;
+    getAllUsers(): Promise<string[]>;
     rotateKEK(): Promise<number>;
 }

package/dist/src/kysely-credential-service.js

@@ -160,6 +160,24 @@ export class KyselyCredentialService {
         }
         return result;
     }
+    async getUsersWithCredential(name) {
+        const rows = await this.db
+            .selectFrom('credentials')
+            .select('userId')
+            .where('name', '=', name)
+            .where('userId', 'is not', null)
+            .execute();
+        return rows.map((row) => row.userId).filter(Boolean);
+    }
+    async getAllUsers() {
+        const rows = await this.db
+            .selectFrom('credentials')
+            .select('userId')
+            .distinct()
+            .where('userId', 'is not', null)
+            .execute();
+        return rows.map((row) => row.userId).filter(Boolean);
+    }
     async rotateKEK() {
         if (!this.previousKey) {
             throw new Error('No previousKey configured — nothing to rotate from');

package/dist/src/kysely-tables.d.ts

@@ -105,7 +105,7 @@ export interface AIRunTable {
     resourceId: string;
     status: Generated<'running' | 'suspended' | 'completed' | 'failed'>;
     errorMessage: string | null;
-    suspendReason: 'approval' | 'rpc-missing' | null;
+    suspendReason: 'approval' | 'credential' | 'rpc-missing' | null;
     missingRpcs: string | null;
     usageInputTokens: Generated<number>;
     usageOutputTokens: Generated<number>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/kysely",
-  "version": "0.12.7",
+  "version": "0.12.8",
   "author": "yasser.fadl@gmail.com",
   "license": "MIT",
   "module": "dist/src/index.js",
@@ -20,7 +20,7 @@
     "prepublishOnly": "yarn build"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.10"
+    "@pikku/core": "^0.12.14"
   },
   "dependencies": {
     "kysely": "^0.28.12"

package/src/kysely-credential-service.ts

@@ -216,6 +216,28 @@ export class KyselyCredentialService implements CredentialService {
     return result
   }
 
+  async getUsersWithCredential(name: string): Promise<string[]> {
+    const rows = await this.db
+      .selectFrom('credentials')
+      .select('userId')
+      .where('name', '=', name)
+      .where('userId', 'is not', null)
+      .execute()
+
+    return rows.map((row) => row.userId!).filter(Boolean)
+  }
+
+  async getAllUsers(): Promise<string[]> {
+    const rows = await this.db
+      .selectFrom('credentials')
+      .select('userId')
+      .distinct()
+      .where('userId', 'is not', null)
+      .execute()
+
+    return rows.map((row) => row.userId!).filter(Boolean)
+  }
+
   async rotateKEK(): Promise<number> {
     if (!this.previousKey) {
       throw new Error('No previousKey configured — nothing to rotate from')

package/src/kysely-tables.ts

@@ -120,7 +120,7 @@ export interface AIRunTable {
   resourceId: string
   status: Generated<'running' | 'suspended' | 'completed' | 'failed'>
   errorMessage: string | null
-  suspendReason: 'approval' | 'rpc-missing' | null
+  suspendReason: 'approval' | 'credential' | 'rpc-missing' | null
   missingRpcs: string | null
   usageInputTokens: Generated<number>
   usageOutputTokens: Generated<number>