@keystrokehq/cli 0.0.1 → 0.0.3

package/dist/{trigger-artifacts-DQPbQNqC-B4yeeFBY.mjs → trigger-artifacts-B3OCTX9K-DG-FGGJT.mjs}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
-import { n as readOptionalJsonSchemaKeys } from "./_manifest-JSRE3H8k.mjs";
-import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-BWWzu8VG.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-KA0Iw0Z1.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D_BCZqV6.mjs";
+import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-Bwlb-KZE.mjs";
+import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-8uqgIurC.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-CAJLnMRi.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-h2W05D_Q.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
-//#region ../../packages/workflow-builder/dist/trigger-artifacts-DQPbQNqC.mjs
+//#region ../../packages/workflow-builder/dist/trigger-artifacts-B3OCTX9K.mjs
 async function bundleTriggerCallbacks(options) {
 	return bundleCallbacks(options.filePath, options.projectRoot, options.exportNames, options.triggerExportName, options.workflowExtraction);
 }

package/dist/{trigger-manifest-CY7brZeg.mjs → trigger-manifest-CXD9I7Rb.mjs}

@@ -1,7 +1,6 @@
 #!/usr/bin/env node
 
-import { d as TriggerSourceSchema, f as TriggerTypeSchema, m as WebhookMethodSchema, u as TriggerCredentialRequirementsSchema } from "./schedule-BXx3uXwr.mjs";
-import "./_manifest-JSRE3H8k.mjs";
+import { c as TriggerTypeSchema, o as TriggerCredentialRequirementsSchema, s as TriggerSourceSchema, u as WebhookMethodSchema } from "./credential-requirements-DjDFthio.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({

package/dist/{try-deploy.handler-DqybNhXx.mjs → try-deploy.handler-2aX5TmLk.mjs}

@@ -2,17 +2,17 @@
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
 import { C as CliExitError, h as toErrorMessage, t as ui, w as InputValidationError } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-CUK7yBM0.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { a as readManifestsFromOutDir, o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-DBQaBfnn.mjs";
-import { a as validateRequiredFields, n as formatValidationError, r as isUnknownSchema, t as formatMissingInputError } from "./schema-display-CgmeKigW.mjs";
-import { r as isLocalMode } from "./env-91KwMKov.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-T7HZuB97.mjs";
-import { t as createBuildProgress } from "./build-progress-DgYKb4hB.mjs";
-import { t as withErrorBoundary } from "./error-boundary-VL-JLfIa.mjs";
-import { n as sleep, t as TERMINAL_STATUSES } from "./run-polling-CAgFRdK3.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { r as isLocalMode } from "./env-YTZGKGIu.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Y1f1hGYy.mjs";
+import { a as readManifestsFromOutDir, o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-BcaIdRR6.mjs";
+import { a as validateRequiredFields, n as formatValidationError, r as isUnknownSchema, t as formatMissingInputError } from "./schema-display-D4A1gQEM.mjs";
+import { t as createBuildProgress } from "./build-progress-Cn2j1LqF.mjs";
+import { t as withErrorBoundary } from "./error-boundary-B9PgBkv8.mjs";
+import { n as sleep, t as TERMINAL_STATUSES } from "./run-polling-CTzhTgyN.mjs";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";
 import { z } from "zod";

package/dist/{upload.handler-DCtiznQp.mjs → upload.handler-CqProKVJ.mjs}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 
 import { D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { a as writeJsonError, i as writeJson } from "./output-DM4b7KgY.mjs";
-import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { n as getProcessEnv } from "./env-91KwMKov.mjs";
-import { i as requireClient } from "./context-T7HZuB97.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-Bt-L3GjF.mjs";
-import { t as readCredentialEnvMap } from "./credential-env-map-CI8yWHVy.mjs";
-import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-OfVHOtG3.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-BKo5PjcQ.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { a as writeJsonError, i as writeJson } from "./output-q4KljAhu.mjs";
+import { n as getProcessEnv } from "./env-YTZGKGIu.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
+import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DHlK_O4L.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-DFlytKJS.mjs";
+import { t as readCredentialEnvMap } from "./credential-env-map-C8P7uTD-.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-B-wwbCvw.mjs";
 import * as path$1 from "node:path";
 import { confirm, isCancel } from "@clack/prompts";
 //#region src/commands/credentials/upload/upload.handler.ts

package/dist/users.get.handler-C_d2GWKX.mjs

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+import { t as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-q4KljAhu.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CNC8JfZ5.mjs";
+//#region src/commands/admin/users.get.handler.ts
+async function handleAdminUsersGet(options, ctx) {
+	const client = requireClient(ctx);
+	try {
+		const result = await client.admin.users.get(options.userId);
+		if (isIamJsonMode(options, ctx)) {
+			writeJson(result);
+			return;
+		}
+		ui.text(`User: ${result.user.email}`);
+		ui.text(`ID: ${result.user.id}`);
+		ui.text(`System role: ${result.user.role}`);
+	} catch (error) {
+		await handleIamError(error, ctx, "Failed to get platform user");
+	}
+}
+//#endregion
+export { handleAdminUsersGet };

package/dist/users.list.handler-DXAsO8Yk.mjs

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+
+import { t as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-q4KljAhu.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CNC8JfZ5.mjs";
+import Table from "cli-table3";
+//#region src/commands/admin/users.list.handler.ts
+async function handleAdminUsersList(options, ctx) {
+	const client = requireClient(ctx);
+	try {
+		const result = await client.admin.users.list();
+		if (isIamJsonMode(options, ctx)) {
+			writeJson(result);
+			return;
+		}
+		const table = new Table({
+			head: [
+				"Email",
+				"ID",
+				"System role"
+			],
+			style: { head: [] }
+		});
+		for (const user of result.users) table.push([
+			user.email,
+			user.id,
+			user.role
+		]);
+		ui.text(table.toString());
+	} catch (error) {
+		await handleIamError(error, ctx, "Failed to list platform users");
+	}
+}
+//#endregion
+export { handleAdminUsersList };

package/dist/users.set-role.handler-Bn_yV4RI.mjs

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+
+import { t as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-q4KljAhu.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
+import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-CNC8JfZ5.mjs";
+//#region src/commands/admin/users.set-role.handler.ts
+async function handleAdminUsersSetRole(options, ctx) {
+	const client = requireClient(ctx);
+	requireConfirmation({
+		confirmed: options.confirm,
+		message: "Changing a system role changes platform-level access.",
+		ctx
+	});
+	try {
+		const result = await client.admin.users.setRole(options.userId, { role: options.role });
+		if (isIamJsonMode(options, ctx)) {
+			writeJson(result);
+			return;
+		}
+		ui.success(`Updated ${result.user.email} to system role ${result.user.role}`);
+	} catch (error) {
+		await handleIamError(error, ctx, "Failed to update platform user role");
+	}
+}
+//#endregion
+export { handleAdminUsersSetRole };

package/dist/{utils-CywxCDM7.mjs → utils-DlYHjGg9.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { i as readProjectConfig } from "./project-config-D1qsQlO7.mjs";
-import { h as resolveBuildOutputDir } from "./layout-CbMtQ2tm.mjs";
+import { i as readProjectConfig } from "./project-config-opj6DsPF.mjs";
+import { h as resolveBuildOutputDir } from "./layout-B95Tku8F.mjs";
 import path from "node:path";
 //#region ../../packages/project-config/src/utils.ts
 function resolveConfiguredBuildOutputDir(projectRoot, buildConfig) {

package/dist/{validate.handler-DOcTaJL0.mjs → validate.handler-CGD6GttR.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 import { D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-CUK7yBM0.mjs";
-import { i as writeJson } from "./output-DM4b7KgY.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { s as build, t as WorkflowNotFoundError } from "./workflow-build-DBQaBfnn.mjs";
-import { t as createBuildProgress } from "./build-progress-DgYKb4hB.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { i as writeJson } from "./output-q4KljAhu.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { s as build, t as WorkflowNotFoundError } from "./workflow-build-BcaIdRR6.mjs";
+import { t as createBuildProgress } from "./build-progress-Cn2j1LqF.mjs";
 import { mkdtemp, rm } from "node:fs/promises";
 import * as os from "node:os";
 import * as path$1 from "node:path";

package/dist/{workflow-build-DBQaBfnn.mjs → workflow-build-BcaIdRR6.mjs}

@@ -2,20 +2,20 @@
 
 import { i as __toESM, n as __exportAll } from "./chunk-CH6r78ws.mjs";
 import { a as originalConsole, h as toErrorMessage, i as logger, o as ANSI, s as style, t as ui } from "./keystroke.mjs";
-import { a as getKeystrokeTmpDir } from "./dist-CUK7yBM0.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { c as FlowGraphSchema, s as WorkflowManifestSchema } from "./_manifest-JSRE3H8k.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-CDnbkR2f.mjs";
-import { r as RelativeFilePathSchema } from "./file-metadata-D1vm-XY2.mjs";
-import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-CbMtQ2tm.mjs";
-import { t as resolveConfiguredBuildOutputDir } from "./utils-CywxCDM7.mjs";
-import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-BtV7Xycc.mjs";
-import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-GUYIUo0i-_aG2zjue.mjs";
-import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-BG8poUm3-BbXlU2kI.mjs";
-import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-CV84H5fZ-B_CBCmb4.mjs";
-import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-n9d1hKNq.mjs";
-import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-Cj-ADyu--BJQcFPCG.mjs";
-import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-DLCOvnD1.mjs";
+import { a as getKeystrokeTmpDir } from "./dist-BF6r1hfv.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { a as FlowGraphSchema, i as WorkflowManifestSchema } from "./workflow-manifest-CAW5FlX0.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-Bfa3DBgc.mjs";
+import { r as RelativeFilePathSchema } from "./file-metadata-CdFXMMIw.mjs";
+import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-B95Tku8F.mjs";
+import { t as resolveConfiguredBuildOutputDir } from "./utils-DlYHjGg9.mjs";
+import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-FPT0bJaA.mjs";
+import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-C6ed-9dl-aBmqqvD5.mjs";
+import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-CtvttJdP-DrJruQgR.mjs";
+import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-DDPnzlJ1-CYJD2n2b.mjs";
+import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-BeimiQ2U.mjs";
+import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-DEEChuND-eixwPnPP.mjs";
+import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-BKRFUzWW.mjs";
 import * as fs from "node:fs/promises";
 import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
 import * as path$1 from "node:path";
@@ -23,32 +23,9 @@ import path from "node:path";
 import { z } from "zod";
 import { fileURLToPath } from "node:url";
 import { createHash } from "node:crypto";
-import "oxc-parser";
 import { performance } from "node:perf_hooks";
-//#region ../../packages/workflow-core/dist/chunks/schema-DnT5yizJ.mjs
+//#region ../../packages/core/dist/flow-graph-toolkit/index.mjs
 var import_out = /* @__PURE__ */ __toESM(require_out(), 1);
-const MAX_JSON_DEPTH = 20;
-function buildJsonValueSchema(depth) {
-	const primitives = z.union([
-		z.string(),
-		z.number(),
-		z.boolean(),
-		z.null()
-	]);
-	if (depth <= 0) return primitives;
-	const nested = buildJsonValueSchema(depth - 1);
-	return z.union([
-		primitives,
-		z.array(nested),
-		z.record(z.string(), nested)
-	]);
-}
-const jsonValueSchema = buildJsonValueSchema(MAX_JSON_DEPTH);
-z.record(z.string(), jsonValueSchema);
-z.custom((value) => value instanceof z.ZodType, "Expected a Zod schema");
-z.custom((value) => value instanceof z.ZodObject, "Expected a Zod object schema");
-//#endregion
-//#region ../../packages/workflow-core/dist/flow-graph-toolkit/index.mjs
 function detectAgentInPathCycles(input) {
 	const nodes = /* @__PURE__ */ new Map();
 	const edges = /* @__PURE__ */ new Map();
@@ -94,7 +71,7 @@ function toCycleNode(node) {
 	};
 }
 //#endregion
-//#region ../../packages/workflow-builder/dist/build-9Sd6SkIz.mjs
+//#region ../../packages/workflow-builder/dist/build-CQCgOqoE.mjs
 const DiscoveredWorkflowSchema = z.object({
 	exportFilePath: z.string(),
 	resolvedFilePath: z.string(),
@@ -1001,7 +978,7 @@ async function buildDiscoveredWorkflows(options) {
 	const failures = [...buildPlan.failures];
 	const warnings = [];
 	if (buildPlan.workflows.length > 0) {
-		const { buildWorkflowArtifacts } = await import("./build-workflows-CfxBnIWh-CdYPv8w2.mjs");
+		const { buildWorkflowArtifacts } = await import("./build-workflows-3fdvdHHf-DJ_lH1NH.mjs");
 		const result = await buildWorkflowArtifacts({
 			entries: buildPlan.workflows,
 			workflowsByKey,
@@ -1016,7 +993,7 @@ async function buildDiscoveredWorkflows(options) {
 		warnings.push(...result.warnings);
 	}
 	if (buildPlan.agents.length > 0) {
-		const { buildAgentArtifacts } = await import("./build-agents-BmM_AsSd-BGi9wtzt.mjs");
+		const { buildAgentArtifacts } = await import("./build-agents-DfbiMZ_e-CRnzruSu.mjs");
 		const result = await buildAgentArtifacts({
 			entries: buildPlan.agents,
 			projectRoot: options.projectRoot
@@ -1025,7 +1002,7 @@ async function buildDiscoveredWorkflows(options) {
 		failures.push(...result.failures);
 	}
 	if (buildPlan.tasks.length > 0) {
-		const { buildTaskArtifacts } = await import("./build-tasks-CdihpudT-D5r5HUHe.mjs");
+		const { buildTaskArtifacts } = await import("./build-tasks-O1jYtlv1-Y65uGWuz.mjs");
 		const result = await buildTaskArtifacts({
 			entries: buildPlan.tasks,
 			projectRoot: options.projectRoot,
@@ -1133,7 +1110,7 @@ async function createBuildPlan(options) {
 		const currentWorkflowIndex = workflowProgressIndex;
 		workflowProgressIndex += 1;
 		if (!loadResult?.ok) {
-			const { createWorkflowMetadataFailure } = await import("./build-workflows-CfxBnIWh-CdYPv8w2.mjs");
+			const { createWorkflowMetadataFailure } = await import("./build-workflows-3fdvdHHf-DJ_lH1NH.mjs");
 			plan.failures.push(createWorkflowMetadataFailure(discoveredWorkflow, loadResult?.error));
 			continue;
 		}
@@ -1331,7 +1308,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			cacheResolvedBindingKeys,
 			releaseBundleMemory: config.releaseBundleMemory
 		};
-		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-BG8poUm3-BbXlU2kI.mjs").then((n) => n.f).then((n) => n.t);
+		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-CtvttJdP-DrJruQgR.mjs").then((n) => n.f).then((n) => n.t);
 		const writeResult = targetBindingKeys ? await writeTargetedBuildOutput({
 			artifacts: finalizedScopedArtifacts,
 			agentArtifacts,
@@ -1356,7 +1333,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			elapsedMs: performance.now() - writeStartedAt,
 			...writeResult.skippedWriteCount !== void 0 && writeResult.skippedWriteCount > 0 ? { skippedWriteCount: writeResult.skippedWriteCount } : {}
 		});
-		const { buildMetadataArtifacts } = await import("./build-metadata-BWS7uhd_-DR8gJjTX.mjs");
+		const { buildMetadataArtifacts } = await import("./build-metadata-zidV9Cai-RgG4ndIH.mjs");
 		const metadata = await buildMetadataArtifacts({
 			projectRoot: config.projectRoot,
 			outputDir,

package/dist/{workflow-bundler-BPiqVscj-X1PFFAuP.mjs → workflow-bundler-BzHk73PM-Cde7cKiU.mjs}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
-import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-n9d1hKNq.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D_BCZqV6.mjs";
+import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-BeimiQ2U.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-h2W05D_Q.mjs";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import * as path$1 from "node:path";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
-//#region ../../packages/workflow-builder/dist/workflow-bundler-BPiqVscj.mjs
+//#region ../../packages/workflow-builder/dist/workflow-bundler-BzHk73PM.mjs
 function getDefaultExternal() {
 	return [
 		/^node:/,
@@ -69,7 +69,7 @@ function collectRuntimeExportNames(resolvedFilePath) {
 }
 function createDelegateStubModule(exports, resolvedFilePath) {
 	const lines = [
-		`import { Agent, Workflow } from '@keystroke/workflow-core';`,
+		`import { Agent, Workflow } from '@keystrokehq/core';`,
 		`import { z } from 'zod';`,
 		""
 	];

package/dist/{_manifest-JSRE3H8k.mjs → workflow-manifest-CAW5FlX0.mjs}

@@ -1,9 +1,11 @@
 #!/usr/bin/env node
 
-import { F as schemaToJsonSchema, S as SourceLocationSchema, V as SHA256HashSchema, a as CredentialRequirementsSchema, c as IntegrationScopeSchema, f as TriggerTypeSchema, h as WorkflowStepEntrySchema, l as ResolvedCredentialSetSchema, p as TriggerUploadDataSchema, t as DurationSchema, v as CallKindSchema, x as ImportSourceSchema, y as CallsiteFingerprintSchema, z as JsonSchemaSchema } from "./schedule-BXx3uXwr.mjs";
+import { r as SHA256HashSchema, t as JsonSchemaSchema } from "./common-BrVAdUyD.mjs";
+import { a as ResolvedCredentialSetSchema, c as TriggerTypeSchema, d as WorkflowStepEntrySchema, i as IntegrationScopeSchema, l as TriggerUploadDataSchema, t as CredentialRequirementsSchema } from "./credential-requirements-DjDFthio.mjs";
+import { a as SourceLocationSchema, i as ImportSourceSchema, n as CallsiteFingerprintSchema, t as CallKindSchema } from "./source-analysis-BspLa3E5.mjs";
+import { t as DurationSchema } from "./schedule-BRN4hzQM.mjs";
 import { z } from "zod";
-import { createHash } from "node:crypto";
-//#region ../../packages/workflow-core/src/artifacts/flow-graph-schema.ts
+//#region ../../packages/core/src/artifacts/flow-graph-schema.ts
 const DecisionKindSchema = z.enum([
 	"if",
 	"switch",
@@ -169,66 +171,7 @@ const FlowGraphSchema = z.object({
 	diagnostics: z.array(z.string())
 });
 //#endregion
-//#region ../../packages/workflow-core/src/artifacts/schema-fingerprint.ts
-/**
-* schema-fingerprint.ts
-*
-* Computes a deterministic fingerprint (hash) of a credential set's schema.
-* Used as a persistence-layer identity stamp: the workflow-builder stamps each
-* credential requirement with its fingerprint at build time, the server stamps
-* each vault row with the fingerprint at upload time, and the executor's
-* credential resolver compares the two at read time so schema drift surfaces
-* as a `CredentialSchemaMismatchError` rather than a silent decode into a
-* stale shape.
-*
-* The fingerprint is deterministic: identical JSON schemas always produce the
-* same hash regardless of property ordering, timestamps, or other
-* non-structural differences.
-*
-* @remarks
-* This is the *persistence* fingerprint. The construction-time registry in
-* `credential-set/registry.ts` uses a different (Zod-structural) fingerprint
-* purely for in-process identity collision detection; the two fingerprints
-* serve different purposes and do not need to match.
-*/
-/**
-* Compute a deterministic fingerprint for a JSON schema object.
-*
-* The schema is the output of `schemaToJsonSchema(zodSchema)` — a plain JSON
-* object describing the shape of the Zod schema.
-*
-* Properties are sorted recursively before hashing to ensure deterministic
-* output regardless of insertion order.
-*
-* @example
-* ```ts
-* const auth = schemaToJsonSchema(credentialSet.auth);
-* const stored = credentialSet.stored ? schemaToJsonSchema(credentialSet.stored) : undefined;
-* const fingerprint = computeSchemaFingerprint(auth, stored);
-* ```
-*
-* @see CredentialSchemaMismatchError
-*/
-function computeSchemaFingerprint(authSchema, storedSchema) {
-	const normalized = sortDeep({
-		auth: authSchema,
-		...storedSchema ? { stored: storedSchema } : {}
-	});
-	const json = JSON.stringify(normalized);
-	return createHash("sha256").update(json).digest("hex").substring(0, 16);
-}
-function sortDeep(value) {
-	if (value === null || value === void 0) return value;
-	if (Array.isArray(value)) return value.map(sortDeep);
-	if (typeof value === "object") {
-		const sorted = {};
-		for (const key of Object.keys(value).sort()) sorted[key] = sortDeep(value[key]);
-		return sorted;
-	}
-	return value;
-}
-//#endregion
-//#region ../../packages/workflow-core/src/artifacts/workflow-manifest.ts
+//#region ../../packages/core/src/artifacts/workflow-manifest.ts
 const WORKFLOW_MANIFEST_GENERATOR = "local-build";
 const WORKFLOW_MANIFEST_SCHEMA_VERSION = "1.0.0";
 /** Shared identity fields for a workflow. Single source of truth for name/description/tags validation. */
@@ -315,71 +258,4 @@ z.object({
 	deploymentSnapshotOnly: z.boolean().optional()
 });
 //#endregion
-//#region ../../packages/workflow-core/src/shared/declared-credential-requirements.ts
-function readSchemaKeys(schema, propertyKey) {
-	if (schema === null || typeof schema !== "object") return [];
-	const candidate = schema[propertyKey];
-	if (candidate === null || typeof candidate !== "object" || Array.isArray(candidate)) return [];
-	return Object.keys(candidate).sort();
-}
-/**
-* Returns sorted keys that are NOT listed in the JSON Schema `required` array.
-*/
-function readOptionalJsonSchemaKeys(schema) {
-	if (schema === null || typeof schema !== "object") return [];
-	const record = schema;
-	const properties = record.properties;
-	if (properties === null || typeof properties !== "object" || Array.isArray(properties)) return [];
-	const requiredSet = new Set(Array.isArray(record.required) ? record.required : []);
-	return Object.keys(properties).filter((key) => !requiredSet.has(key)).sort();
-}
-function toDeclaredCredentialRequirement(credentialSet) {
-	const optionalAuthKeys = credentialSet.optionalCredentialKeys;
-	const optionalStoredKeys = credentialSet.optionalStoredCredentialKeys;
-	const schemaFingerprint = computeSchemaFingerprint(schemaToJsonSchema(credentialSet.auth), credentialSet.stored ? schemaToJsonSchema(credentialSet.stored) : void 0);
-	const onCredentialRevoked = credentialSet.onCredentialRevoked;
-	return {
-		credentialSetId: credentialSet.id,
-		...credentialSet.namespace ? { namespace: credentialSet.namespace } : {},
-		resolvedCredentialSetId: credentialSet.resolvedCredentialSetId,
-		credentialKeys: [...credentialSet.credentialKeys],
-		...optionalAuthKeys.length > 0 ? { optionalCredentialKeys: [...optionalAuthKeys] } : {},
-		storedCredentialKeys: [...credentialSet.storedCredentialKeys],
-		...optionalStoredKeys.length > 0 ? { optionalStoredCredentialKeys: [...optionalStoredKeys] } : {},
-		schemaFingerprint,
-		...credentialSet.needsResolve ? { needsResolve: true } : {},
-		...credentialSet.resolveCacheMs > 0 ? { resolveCacheMs: credentialSet.resolveCacheMs } : {},
-		...onCredentialRevoked ? { onCredentialRevoked } : {},
-		...credentialSet.proxy ? { proxy: credentialSet.proxy } : {},
-		...credentialSet.needsRawSecret === true ? { needsRawSecret: true } : {}
-	};
-}
-function toDeclaredCredentialRequirements(credentialSets) {
-	return credentialSets.map(toDeclaredCredentialRequirement);
-}
-function manifestToDeclaredCredentialRequirement(credentialSet) {
-	const authKeys = readSchemaKeys(credentialSet.auth, "properties");
-	const optionalAuthKeys = readOptionalJsonSchemaKeys(credentialSet.auth);
-	const storedSchema = credentialSet.stored ?? credentialSet.auth;
-	const storedKeys = readSchemaKeys(storedSchema, "properties");
-	const optionalStoredKeys = readOptionalJsonSchemaKeys(storedSchema);
-	const schemaFingerprint = credentialSet.auth ? computeSchemaFingerprint(credentialSet.auth, credentialSet.stored) : void 0;
-	const onCredentialRevoked = credentialSet.onCredentialRevoked;
-	return {
-		credentialSetId: credentialSet.id,
-		...credentialSet.namespace ? { namespace: credentialSet.namespace } : {},
-		resolvedCredentialSetId: credentialSet.resolvedCredentialSetId,
-		credentialKeys: authKeys,
-		...optionalAuthKeys.length > 0 ? { optionalCredentialKeys: optionalAuthKeys } : {},
-		storedCredentialKeys: storedKeys,
-		...optionalStoredKeys.length > 0 ? { optionalStoredCredentialKeys: optionalStoredKeys } : {},
-		...schemaFingerprint ? { schemaFingerprint } : {},
-		...credentialSet.needsResolve ? { needsResolve: true } : {},
-		...typeof credentialSet.resolveCacheMs === "number" && credentialSet.resolveCacheMs > 0 ? { resolveCacheMs: credentialSet.resolveCacheMs } : {},
-		...onCredentialRevoked ? { onCredentialRevoked } : {},
-		...credentialSet.proxy ? { proxy: credentialSet.proxy } : {},
-		...credentialSet.needsRawSecret === true ? { needsRawSecret: true } : {}
-	};
-}
-//#endregion
-export { WORKFLOW_MANIFEST_SCHEMA_VERSION as a, FlowGraphSchema as c, WORKFLOW_MANIFEST_GENERATOR as i, readOptionalJsonSchemaKeys as n, WorkflowCoreManifestSchema as o, toDeclaredCredentialRequirements as r, WorkflowManifestSchema as s, manifestToDeclaredCredentialRequirement as t };
+export { FlowGraphSchema as a, WorkflowManifestSchema as i, WORKFLOW_MANIFEST_SCHEMA_VERSION as n, WorkflowCoreManifestSchema as r, WORKFLOW_MANIFEST_GENERATOR as t };

package/dist/{workflows-g9z87AJJ.mjs → workflows-S-gbfw8f.mjs}

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-DM4b7KgY.mjs";
-import { t as createTypedCommand } from "./commander-DfTVqQ-3.mjs";
-import { V as SHA256HashSchema, p as TriggerUploadDataSchema, z as JsonSchemaSchema } from "./schedule-BXx3uXwr.mjs";
-import { c as FlowGraphSchema, s as WorkflowManifestSchema } from "./_manifest-JSRE3H8k.mjs";
-import { n as WorkflowsRunOptionsSchema, t as RUN_OPTIONS_CONFIG } from "./options-CeaTcFxP.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-q4KljAhu.mjs";
+import { t as createTypedCommand } from "./commander-DZ3F3CVq.mjs";
+import { r as SHA256HashSchema, t as JsonSchemaSchema } from "./common-BrVAdUyD.mjs";
+import { l as TriggerUploadDataSchema } from "./credential-requirements-DjDFthio.mjs";
+import { a as FlowGraphSchema, i as WorkflowManifestSchema } from "./workflow-manifest-CAW5FlX0.mjs";
+import { n as WorkflowsRunOptionsSchema, t as RUN_OPTIONS_CONFIG } from "./options-Dn9t3K4a.mjs";
 import { z } from "zod";
 const GitProviderSchema = z.enum(["codestorage", "github"]);
 const GitTreeEntryTypeSchema = z.enum(["file", "directory"]);
@@ -320,7 +321,7 @@ function createWorkflowsBuildCommand() {
 		description: "Build workflows locally",
 		schema: WorkflowsBuildOptionsSchema,
 		optionsConfig: BUILD_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./build.handler-4799CjWH.mjs")).handleWorkflowsBuild
+		loadHandler: async () => (await import("./build.handler-Tb3IpABI.mjs")).handleWorkflowsBuild
 	});
 }
 //#endregion
@@ -347,7 +348,7 @@ function createWorkflowsDiffCommand() {
 			description: "Authored workflow id (preferred) or workflow name",
 			key: "workflow"
 		},
-		loadHandler: async () => (await import("./diff.handler-Du7SY8K4.mjs")).handleWorkflowsDiff
+		loadHandler: async () => (await import("./diff.handler--zdSkUnK.mjs")).handleWorkflowsDiff
 	});
 }
 //#endregion
@@ -380,7 +381,7 @@ function createWorkflowsEnvCommand() {
 			key: "workflow",
 			required: false
 		},
-		loadHandler: async () => (await import("./env.handler-BAzBuMzQ.mjs")).handleWorkflowsEnv
+		loadHandler: async () => (await import("./env.handler-d4sJ706C.mjs")).handleWorkflowsEnv
 	});
 }
 //#endregion
@@ -412,7 +413,7 @@ function createWorkflowsInspectCommand() {
 			description: "Authored workflow id (preferred) or workflow name",
 			key: "workflow"
 		},
-		loadHandler: async () => (await import("./inspect.handler-DT_cD036.mjs")).handleWorkflowsInspect
+		loadHandler: async () => (await import("./inspect.handler-DbN0ZVTh.mjs")).handleWorkflowsInspect
 	});
 }
 //#endregion
@@ -508,7 +509,7 @@ function createWorkflowsLogsCommand() {
 			key: "workflow",
 			required: false
 		},
-		loadHandler: async () => (await import("./logs.handler-BD_dXiL1.mjs")).handleWorkflowsLogs
+		loadHandler: async () => (await import("./logs.handler-4ctMVYMj.mjs")).handleWorkflowsLogs
 	});
 }
 //#endregion
@@ -699,7 +700,7 @@ function createWorkflowsPausedCommand() {
 			key: "workflow",
 			required: false
 		},
-		loadHandler: async () => (await import("./paused.handler-BMFm9Cff.mjs")).handleWorkflowsPaused
+		loadHandler: async () => (await import("./paused.handler-B3aVqw-m.mjs")).handleWorkflowsPaused
 	});
 }
 //#endregion
@@ -715,7 +716,7 @@ function createWorkflowsTryDeployCommand() {
 			description: "Authored workflow id (preferred) or workflow name. Multiple workflows with the same name run sequentially.",
 			key: "workflow"
 		},
-		loadHandler: async () => (await import("./try-deploy.handler-DqybNhXx.mjs").then((n) => n.n)).handleWorkflowsTryDeploy
+		loadHandler: async () => (await import("./try-deploy.handler-2aX5TmLk.mjs").then((n) => n.n)).handleWorkflowsTryDeploy
 	});
 }
 //#endregion
@@ -753,7 +754,7 @@ function createWorkflowsValidateCommand() {
 			key: "workflow",
 			required: false
 		},
-		loadHandler: async () => (await import("./validate.handler-DOcTaJL0.mjs")).handleWorkflowsValidate
+		loadHandler: async () => (await import("./validate.handler-CGD6GttR.mjs")).handleWorkflowsValidate
 	});
 }
 //#endregion
@@ -772,14 +773,14 @@ function createWorkflowsCommand() {
 		description: "Manage, run, inspect, and debug workflows",
 		schema: WorkflowsOptionsSchema,
 		optionsConfig: WORKFLOWS_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./list.handler-BTWvCyjA.mjs")).handleWorkflowsList,
+		loadHandler: async () => (await import("./list.handler-BRq-nScx.mjs")).handleWorkflowsList,
 		subcommands: [
 			createTypedCommand({
 				name: "list",
 				description: "List all workflows in the project",
 				schema: WorkflowsOptionsSchema,
 				optionsConfig: WORKFLOWS_OPTIONS_CONFIG,
-				loadHandler: async () => (await import("./list.handler-BTWvCyjA.mjs")).handleWorkflowsList
+				loadHandler: async () => (await import("./list.handler-BRq-nScx.mjs")).handleWorkflowsList
 			}),
 			createWorkflowsBuildCommand(),
 			createWorkflowsTryDeployCommand(),