@keystrokehq/cli 0.0.136 → 0.0.138

package/dist/index.mjs

@@ -1,18 +1,94 @@
 #!/usr/bin/env node
-import { _ as _coercedNumber, a as array, c as discriminatedUnion, d as object, f as record, g as url, h as unknown, i as _enum, l as literal, m as union, n as ZodNumber, o as boolean, p as string, r as ZodType, s as custom, t as entryIdFromFile, u as number$1 } from "./discovery-XqwkB9H_-C2XdYbG2.mjs";
+import { $ as SkillSummaryListResponseSchema, A as ListProjectFilesResponseSchema, B as PresignProjectSourceResponseSchema, C as HealthResponseSchema, D as ListOrganizationMembersResponseSchema, E as ListOrganizationInvitationsResponseSchema, F as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, G as ProjectSlugAvailabilityResponseSchema, H as PresignUserAvatarResponseSchema, I as PollRunResponseSchema, J as QueuedAgentPromptResponseSchema, K as PromptInputSchema, L as PresignOrgLogoRequestSchema, M as ListProjectsResponseSchema, N as OrganizationSidebarBrandingPatchSchema, O as ListOrganizationsResponseSchema, P as OrganizationSidebarBrandingSchema, Q as SkillSummaryDetailResponseSchema, R as PresignOrgLogoResponseSchema, S as GatewayAttachmentRecordSchema, St as parseErrorResponse, T as InviteOrganizationMembersResponseSchema, U as ProjectReachabilityResponseSchema, V as PresignUserAvatarRequestSchema, W as ProjectResponseSchema, X as ROUTE_MANIFEST_REL_PATH, Y as QueuedRunResponseSchema, Z as RecentResourceListResponseSchema, _ as CreateProjectResponseSchema, _t as WorkflowSummaryDetailResponseSchema, a as AgentSessionDetailResponseSchema, at as UpdateCredentialInstanceBodySchema, b as DeclineOrganizationInvitationResponseSchema, c as AgentSummaryListResponseSchema, ct as UpdateOrganizationRequestSchema, d as ConnectProvidersResponseSchema, dt as UploadProjectSourceResponseSchema, et as SlugAvailabilityResponseSchema, f as CreateCredentialInstanceBodySchema, ft as UpsertGatewayAttachmentBodySchema, g as CreateProjectRequestSchema, gt as WorkflowRunListResponseSchema, h as CreateProjectArtifactResponseSchema, ht as WorkflowRunDetailResponseSchema, i as AgentListResponseSchema, it as TriggerRunListResponseSchema, j as ListProjectMetricsResponseSchema, k as ListProjectDeploymentsResponseSchema, l as CompleteProjectArtifactResponseSchema, lt as UpdateProjectRequestSchema, m as CreateOrganizationResponseSchema, mt as UserAvatarSchema, n as AcceptOrganizationInvitationResponseSchema, nt as TriggerListResponseSchema, o as AgentSessionListResponseSchema, ot as UpdateOrganizationMemberRequestSchema, p as CreateOrganizationRequestSchema, pt as UserAvatarPatchSchema, q as PromptResponseSchema, r as ActiveOrganizationResponseSchema, rt as TriggerRunDetailResponseSchema, s as AgentSummaryDetailResponseSchema, st as UpdateOrganizationMemberResponseSchema, t as ACTIVE_ORG_HEADER, tt as TriggerDetailResponseSchema, u as ConnectAuthorizeUrlResponseSchema, ut as UploadProjectSourceManifestRequestSchema, v as CredentialInstanceListResponseSchema, vt as WorkflowSummaryListResponseSchema, w as InviteOrganizationMembersRequestSchema, x as ErrorResponseSchema, xt as originFromPublicUrl, y as CredentialInstanceRecordSchema, yt as listenPortFromPublicUrl, z as PresignProjectSourceRequestSchema } from "./dist-CqVk9JsS.mjs";
+import { t as walkProject } from "./walk-project-171B4cvO-DJy3qZKd.mjs";
 import { a as installPlaygroundDependencies, i as installDependencies, n as buildPlaygroundWorkspace, o as resolvePackageManager, s as resolveCliRoot, t as readCliVersion } from "./version-DESgLEkE.mjs";
 import { createRequire } from "node:module";
 import { Command } from "commander";
-import { Entry } from "@napi-rs/keyring";
 import Conf from "conf";
 import { homedir, platform, tmpdir } from "node:os";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { Entry } from "@napi-rs/keyring";
 import { confirm, input, select } from "@inquirer/prompts";
-import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { pathToFileURL } from "node:url";
 import { access, copyFile, cp, lstat, mkdir, readFile, readdir, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { pathToFileURL } from "node:url";
+//#region src/resolve-platform-url.ts
+const DEFAULT_WEB_URL = "https://app.keystroke.ai";
+const DEFAULT_PLATFORM_URL = "https://api.keystroke.ai";
+const LOCAL_PLATFORM_URL = "http://localhost:3002";
+function webOriginFromUrl(webUrl) {
+	return originFromPublicUrl(webUrl, webUrl.replace(/\/+$/, ""));
+}
+/** Known web origins with a fixed platform API — undefined for custom/staging URLs. */
+function knownPlatformUrlForWebUrl(webUrl) {
+	const webOrigin = webOriginFromUrl(webUrl);
+	if (webOrigin === "http://localhost:3000" || webOrigin === "http://127.0.0.1:3000") return LOCAL_PLATFORM_URL;
+	if (webOrigin === "https://app.keystroke.ai") return DEFAULT_PLATFORM_URL;
+}
+function resolvePlatformUrlForWebUrl(webUrl, options = {}) {
+	const explicit = options.platformUrl?.trim();
+	if (explicit) return explicit.replace(/\/+$/, "");
+	const known = knownPlatformUrlForWebUrl(webUrl);
+	if (known) return known;
+	return (options.fallback?.trim() || "https://api.keystroke.ai").replace(/\/+$/, "");
+}
+//#endregion
+//#region src/config.ts
+function getCliConfigDir(cwd = join(homedir(), ".keystroke")) {
+	return cwd;
+}
+function getConfigDir(config) {
+	return dirname(config.path);
+}
+function getEffectiveApiTarget(config) {
+	const explicit = config.get("apiTarget");
+	if (explicit === "local" || explicit === "platform") return explicit;
+	return "local";
+}
+function syncPlatformUrlWithWebUrl(config) {
+	const known = knownPlatformUrlForWebUrl(config.get("webUrl"));
+	if (!known) return;
+	if (config.get("platformUrl") !== known) config.set("platformUrl", known);
+}
+function createCliConfig(cwd = getCliConfigDir()) {
+	const config = new Conf({
+		projectName: "keystroke",
+		cwd,
+		schema: {
+			serverUrl: {
+				type: "string",
+				default: "http://localhost:3001"
+			},
+			webUrl: {
+				type: "string",
+				default: DEFAULT_WEB_URL
+			},
+			platformUrl: {
+				type: "string",
+				default: DEFAULT_PLATFORM_URL
+			},
+			activeOrganizationId: { type: "string" },
+			activeProjectId: { type: "string" },
+			apiTarget: {
+				type: "string",
+				enum: ["local", "platform"]
+			}
+		}
+	});
+	syncPlatformUrlWithWebUrl(config);
+	return config;
+}
+function getServerUrl(config) {
+	return config.get("serverUrl");
+}
+function getWebUrl(config) {
+	return config.get("webUrl");
+}
+function getPlatformUrl(config) {
+	return resolvePlatformUrlForWebUrl(getWebUrl(config), { fallback: config.get("platformUrl") });
+}
+//#endregion
 //#region ../../node_modules/.pnpm/ky@2.0.2/node_modules/ky/distribution/errors/KyError.js
 /**
 Base class for all Ky-specific errors. `HTTPError`, `NetworkError`, `TimeoutError`, and `ForceRetryError` extend this class.
@@ -1292,1539 +1368,6 @@ const createInstance = (defaults) => {
 };
 const ky = createInstance();
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/coerce.js
-function number(params) {
-	return _coercedNumber(ZodNumber, params);
-}
-//#endregion
-//#region ../../packages/shared/dist/index.mjs
-const ACTIVE_ORG_HEADER = "x-keystroke-org-id";
-/** Auth, session, and account-entry URL segments. */
-const AUTH_ACCOUNT_SLUGS = [
-	"2fa",
-	"accept-invite",
-	"auth",
-	"authorize",
-	"callback",
-	"callbacks",
-	"confirm-email",
-	"confirmation",
-	"connect",
-	"device",
-	"email-verification",
-	"forgot-password",
-	"invite",
-	"invites",
-	"login",
-	"logout",
-	"magic-link",
-	"mfa",
-	"oauth",
-	"onboarding",
-	"password",
-	"recovery",
-	"register",
-	"reset-password",
-	"saml",
-	"session",
-	"sessions",
-	"sign-in",
-	"sign-up",
-	"signin",
-	"signout",
-	"signup",
-	"sso",
-	"token",
-	"tokens",
-	"unlink",
-	"verify",
-	"verify-email"
-];
-/** Org, workspace, billing, and account-management URL segments. */
-const ORG_ACCOUNT_SLUGS = [
-	"account",
-	"accounts",
-	"billing",
-	"console",
-	"invoice",
-	"invoices",
-	"member",
-	"members",
-	"me",
-	"org",
-	"organization",
-	"organizations",
-	"orgs",
-	"payment",
-	"payments",
-	"plan",
-	"plans",
-	"portal",
-	"preferences",
-	"profile",
-	"settings",
-	"subscription",
-	"subscriptions",
-	"team",
-	"teams",
-	"upgrade",
-	"usage",
-	"user",
-	"users",
-	"workspace",
-	"workspaces"
-];
-/** Product surfaces, resource types, and in-app navigation segments. */
-const PRODUCT_SLUGS = [
-	"action",
-	"actions",
-	"activity",
-	"agent",
-	"agents",
-	"analytics",
-	"app",
-	"apps",
-	"artifact",
-	"artifacts",
-	"assistant",
-	"assistants",
-	"audit",
-	"audit-log",
-	"automation",
-	"automations",
-	"branch",
-	"branches",
-	"canvas",
-	"chat",
-	"chats",
-	"connection",
-	"connections",
-	"create",
-	"credential",
-	"credentials",
-	"dashboard",
-	"deployment",
-	"deployments",
-	"examples",
-	"execute",
-	"execution",
-	"executions",
-	"explore",
-	"get-started",
-	"history",
-	"inbox",
-	"inspector",
-	"integration",
-	"integrations",
-	"library",
-	"logs",
-	"marketplace",
-	"mcp",
-	"mcps",
-	"new",
-	"notifications",
-	"observe",
-	"plugin",
-	"plugins",
-	"primitive",
-	"primitives",
-	"project",
-	"projects",
-	"recents",
-	"registry",
-	"reports",
-	"run",
-	"runs",
-	"runtime",
-	"runtimes",
-	"sandbox",
-	"sandboxes",
-	"search",
-	"skill",
-	"skills",
-	"templates",
-	"thread",
-	"threads",
-	"trigger",
-	"triggers",
-	"version",
-	"versions",
-	"workflow",
-	"workflows"
-];
-/** Marketing, docs, company, and go-to-market URL segments. */
-const MARKETING_SITE_SLUGS = [
-	"about",
-	"affiliates",
-	"ai",
-	"announcements",
-	"anthropic",
-	"blog",
-	"book-demo",
-	"brand",
-	"campaigns",
-	"career",
-	"careers",
-	"case-studies",
-	"casestudies",
-	"changelog",
-	"chatgpt",
-	"chrome-extension",
-	"claude",
-	"codex",
-	"community",
-	"company",
-	"compare",
-	"contact",
-	"contribute",
-	"creators",
-	"customers",
-	"demo",
-	"demos",
-	"discord",
-	"docs",
-	"documentation",
-	"download",
-	"downloads",
-	"dust",
-	"emerging-talent",
-	"engineering-blog",
-	"enterprise",
-	"events",
-	"experts",
-	"extension",
-	"faq",
-	"faqs",
-	"features",
-	"forum",
-	"glean",
-	"grok",
-	"guide",
-	"guides",
-	"gumloop",
-	"handbook",
-	"help",
-	"help-center",
-	"home",
-	"how-it-works",
-	"howitworks",
-	"inspo",
-	"intern",
-	"investors",
-	"jobs",
-	"legal",
-	"lindy",
-	"llm",
-	"llms",
-	"love",
-	"make",
-	"manifesto",
-	"media",
-	"merch",
-	"mission",
-	"mobile",
-	"models",
-	"n8n",
-	"news",
-	"newsroom",
-	"open",
-	"open-claw",
-	"open-source",
-	"openai",
-	"our-story",
-	"overview",
-	"partners",
-	"pi",
-	"pipedream",
-	"platform",
-	"press",
-	"press-kit",
-	"pricing",
-	"privacy",
-	"product",
-	"products",
-	"provider",
-	"providers",
-	"quick-start",
-	"quickstart",
-	"refer",
-	"relay",
-	"relay-app",
-	"reporting",
-	"request-demo",
-	"resources",
-	"roadmap",
-	"schedule-demo",
-	"security",
-	"solutions",
-	"stack-ai",
-	"stackai",
-	"startup",
-	"startups",
-	"status",
-	"stories",
-	"story",
-	"students",
-	"support",
-	"swag",
-	"switch",
-	"talent",
-	"terms",
-	"testimonials",
-	"thesis",
-	"tines",
-	"trust",
-	"tutorials",
-	"university",
-	"use-case",
-	"use-cases",
-	"usecases",
-	"versus",
-	"vellum",
-	"vs",
-	"webinars",
-	"workato",
-	"xai",
-	"yc",
-	"zapier"
-];
-/** Integrations, competitors, and partner brand slugs (marketing / integration pages). */
-const INTEGRATION_BRAND_SLUGS = [
-	"airtable",
-	"asana",
-	"aws",
-	"azure",
-	"bun",
-	"confluence",
-	"copilot",
-	"cursor",
-	"databricks",
-	"figma",
-	"firebase",
-	"fly",
-	"gcp",
-	"gemini",
-	"github",
-	"gitlab",
-	"gmail",
-	"heroku",
-	"hubspot",
-	"huggingface",
-	"jira",
-	"linear",
-	"mailchimp",
-	"meta",
-	"mistral",
-	"mixmax",
-	"monday",
-	"netlify",
-	"neon",
-	"notion",
-	"npm",
-	"outlook",
-	"outreach",
-	"perplexity",
-	"planetscale",
-	"pnpm",
-	"postmark",
-	"ramp",
-	"railway",
-	"render",
-	"resend",
-	"salesforce",
-	"segment",
-	"sendgrid",
-	"shopify",
-	"slack",
-	"snowflake",
-	"stripe",
-	"supabase",
-	"terraform",
-	"trello",
-	"turso",
-	"twilio",
-	"typeform",
-	"vercel",
-	"vscode",
-	"windsurf",
-	"yarn"
-];
-/** Company, team, and department landing-page segments. */
-const COMPANY_TEAM_SLUGS = [
-	"engineers",
-	"engineering",
-	"executives",
-	"hc",
-	"intern",
-	"it",
-	"leadership",
-	"marketing",
-	"ops",
-	"revops",
-	"sales",
-	"services",
-	"tech"
-];
-/** Legal, trust, compliance, and policy URL segments. */
-const LEGAL_TRUST_SLUGS = [
-	"accessibility",
-	"agreement",
-	"a11y",
-	"bug-bounty",
-	"compliance",
-	"cookie-policy",
-	"cookies",
-	"disclose",
-	"dpa",
-	"eula",
-	"gdpr",
-	"hipaa",
-	"iso",
-	"msa",
-	"pci",
-	"responsible-disclosure",
-	"sla",
-	"soc2",
-	"tos",
-	"trust-center",
-	"trustcenter",
-	"vulnerability"
-];
-/** Developer, API, CLI, and technical URL segments. */
-const DEVELOPER_TECH_SLUGS = [
-	"api",
-	"api-docs",
-	"cli",
-	"code",
-	"config",
-	"developer",
-	"developer-tools",
-	"developers",
-	"dev-tools",
-	"devtools",
-	"dev",
-	"dev-states",
-	"graphql",
-	"graphql-playground",
-	"mcp-server",
-	"mcp-servers",
-	"openapi",
-	"sdk",
-	"swagger"
-];
-/** Infra, ops, static assets, and system URL segments. */
-const INFRA_SYSTEM_SLUGS = [
-	"acme-challenge",
-	"admin",
-	"apple-app-site-association",
-	"assets",
-	"batch",
-	"cache",
-	"cdn",
-	"cron",
-	"debug",
-	"error",
-	"errors",
-	"favicon",
-	"feed",
-	"files",
-	"health",
-	"healthcheck",
-	"healthz",
-	"hooks",
-	"internal",
-	"item",
-	"manifest",
-	"metrics",
-	"null",
-	"ping",
-	"prod",
-	"public",
-	"redirect",
-	"robots",
-	"rpc",
-	"rss",
-	"sharer",
-	"sitemap",
-	"staging",
-	"static",
-	"storage",
-	"test",
-	"undefined",
-	"universal",
-	"webhooks",
-	"well-known",
-	"www"
-];
-/** Reserved slugs that are valid org names in theory but blocked for routing safety. */
-const ROUTING_SAFETY_SLUGS = [
-	"alpha",
-	"anonymous",
-	"archive",
-	"archived",
-	"beta",
-	"clone",
-	"copy",
-	"default",
-	"deleted",
-	"demo-org",
-	"draft",
-	"drafts",
-	"duplicate",
-	"early-access",
-	"embed",
-	"embedded",
-	"export",
-	"fork",
-	"free",
-	"guest",
-	"import",
-	"index",
-	"list",
-	"manage",
-	"moderator",
-	"newsletter",
-	"owner",
-	"preview",
-	"previews",
-	"private",
-	"pro",
-	"public-api",
-	"publish",
-	"published",
-	"queue",
-	"remove",
-	"root",
-	"sample",
-	"samples",
-	"selection",
-	"share",
-	"shared",
-	"sponsor",
-	"sponsors",
-	"sponsorship",
-	"subscribe",
-	"super",
-	"superuser",
-	"system",
-	"sys",
-	"test-org",
-	"trash",
-	"unpublish",
-	"unsubscribe",
-	"upload",
-	"uploads",
-	"waitlist",
-	"widget",
-	"widgets",
-	"worker",
-	"workers"
-];
-/**
-* URL segments reserved for global (non-org) routes — cannot be used as an org slug.
-* Prefer adding new entries to the category arrays above; the Set is the enforcement surface.
-*/
-const RESERVED_ORGANIZATION_SLUGS = new Set([
-	...AUTH_ACCOUNT_SLUGS,
-	...ORG_ACCOUNT_SLUGS,
-	...PRODUCT_SLUGS,
-	...MARKETING_SITE_SLUGS,
-	...INTEGRATION_BRAND_SLUGS,
-	...COMPANY_TEAM_SLUGS,
-	...LEGAL_TRUST_SLUGS,
-	...DEVELOPER_TECH_SLUGS,
-	...INFRA_SYSTEM_SLUGS,
-	...ROUTING_SAFETY_SLUGS
-]);
-/**
-* Base slug format: lowercase, 2-64 chars, alphanumeric + dashes.
-*
-* IMPORTANT: this is the schema for *reading* slugs (persisted rows, API
-* responses). It intentionally does NOT enforce the reserved-name list — an org
-* created before a name became reserved must still parse on read. Use
-* `ClaimableOrganizationSlugSchema` to validate slugs a user is trying to claim.
-*/
-const OrganizationSlugSchema = string().trim().toLowerCase().min(2, "Slug must be at least 2 characters").max(64, "Slug must be at most 64 characters").regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "Use lowercase letters, numbers, and dashes only");
-/**
-* Slug validation for *claiming* a slug (organization create/rename). Adds the
-* reserved-name check on top of the base format. Never use this to parse
-* existing org data, or pre-existing orgs whose slug later became reserved would
-* fail to load.
-*/
-const ClaimableOrganizationSlugSchema = OrganizationSlugSchema.refine((slug) => !RESERVED_ORGANIZATION_SLUGS.has(slug), "This slug is reserved");
-/** Same format as organization slugs — org-scoped, no global reserved list. */
-const ProjectSlugSchema = OrganizationSlugSchema;
-/** Browser→platform request budget (ping + small platform overhead). */
-const PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS = 17e3;
-/** Normalize a public origin URL (no trailing slash). */
-function originFromPublicUrl(value, fallback) {
-	const trimmed = value?.trim();
-	if (!trimmed) return fallback.replace(/\/+$/, "");
-	return trimmed.replace(/\/+$/, "");
-}
-/** TCP port to bind for a local server, derived from a public URL. */
-function listenPortFromUrl(url, fallback) {
-	const parsed = new URL(url);
-	if (parsed.port) {
-		const port = Number(parsed.port);
-		if (Number.isFinite(port) && port > 0) return port;
-	}
-	if (parsed.protocol === "https:") return 443;
-	if (parsed.protocol === "http:") return 80;
-	return fallback;
-}
-/** Shorthand: listen port from `PUBLIC_*_URL` or fallback. */
-function listenPortFromPublicUrl(value, fallback) {
-	const trimmed = value?.trim();
-	if (!trimmed) return fallback;
-	try {
-		return listenPortFromUrl(trimmed, fallback);
-	} catch {
-		return fallback;
-	}
-}
-const serializedRouteManifestEntrySchema = discriminatedUnion("kind", [
-	object({
-		kind: literal("health"),
-		method: literal("GET"),
-		path: literal("/health")
-	}),
-	object({
-		kind: literal("agent"),
-		method: literal("POST"),
-		path: string(),
-		agentSlug: string(),
-		moduleFile: string(),
-		requestSchema: record(string(), unknown()),
-		responseSchema: record(string(), unknown())
-	}),
-	object({
-		kind: literal("agent-sessions-list"),
-		method: literal("GET"),
-		path: string(),
-		agentSlug: string(),
-		moduleFile: string()
-	}),
-	object({
-		kind: literal("agent-session-detail"),
-		method: literal("GET"),
-		path: string(),
-		agentSlug: string(),
-		moduleFile: string()
-	}),
-	object({
-		kind: literal("workflow"),
-		method: literal("POST"),
-		path: string(),
-		workflowSlug: string(),
-		workflowName: string().optional(),
-		moduleFile: string(),
-		requestSchema: record(string(), unknown()),
-		responseSchema: record(string(), unknown())
-	}),
-	object({
-		kind: literal("workflow-runs-list"),
-		method: literal("GET"),
-		path: string(),
-		workflowSlug: string(),
-		workflowName: string().optional(),
-		moduleFile: string()
-	}),
-	object({
-		kind: literal("workflow-run-detail"),
-		method: literal("GET"),
-		path: string(),
-		workflowSlug: string(),
-		workflowName: string().optional(),
-		moduleFile: string()
-	}),
-	object({
-		kind: literal("trigger-webhook"),
-		method: literal("POST"),
-		path: string(),
-		attachmentIds: array(string()),
-		moduleFile: string(),
-		requestSchema: record(string(), unknown()),
-		attachmentSchemas: record(string(), object({
-			requestSchema: record(string(), unknown()),
-			filterSchema: record(string(), unknown()).optional()
-		})),
-		responseSchema: record(string(), unknown())
-	}),
-	object({
-		kind: literal("trigger-poll"),
-		method: literal("POST"),
-		path: string(),
-		attachmentId: string(),
-		moduleFile: string(),
-		schedule: string(),
-		responseSchema: record(string(), unknown())
-	}),
-	object({
-		kind: literal("trigger-poll-group"),
-		method: literal("POST"),
-		path: string(),
-		pollId: string(),
-		attachmentIds: array(string()),
-		moduleFile: string(),
-		schedule: string(),
-		responseSchema: record(string(), unknown())
-	}),
-	object({
-		kind: literal("trigger-runs-list"),
-		method: literal("GET"),
-		path: string(),
-		attachmentId: string(),
-		moduleFile: string()
-	}),
-	object({
-		kind: literal("trigger-run-detail"),
-		method: literal("GET"),
-		path: string(),
-		attachmentId: string(),
-		moduleFile: string()
-	}),
-	object({
-		kind: literal("cron-schedule"),
-		attachmentId: string(),
-		moduleFile: string(),
-		schedule: string()
-	}),
-	object({
-		kind: literal("plugin"),
-		method: _enum([
-			"GET",
-			"POST",
-			"PUT",
-			"PATCH",
-			"DELETE"
-		]),
-		path: string(),
-		plugin: string()
-	})
-]);
-object({
-	version: literal(1),
-	entries: array(serializedRouteManifestEntrySchema),
-	integrations: array(string()).optional()
-});
-/** How a credential instance is stored (`credential_instances.auth_kind`). */
-const CredentialAuthKindSchema = _enum(["api_key", "oauth_managed"]);
-/** Where a credential instance is stored (`credential_instances.scope_type`). */
-const CredentialScopeTypeSchema = _enum([
-	"global",
-	"organization",
-	"project",
-	"user"
-]);
-/**
-* Resolution chain step when an action/tool looks up credentials.
-* `selection` uses explicit instance ids; other levels map to {@link CredentialScopeType}.
-*/
-const CredentialScopeLevelSchema = _enum([
-	"selection",
-	"organization",
-	"project",
-	"user"
-]);
-CredentialAuthKindSchema.options;
-CredentialScopeTypeSchema.options;
-CredentialScopeLevelSchema.options;
-function isCredentialInput(value) {
-	if (typeof value !== "object" || value === null) return false;
-	const candidate = value;
-	return typeof candidate.key === "string" && CredentialAuthKindSchema.safeParse(candidate.kind).success && candidate.schema instanceof ZodType;
-}
-custom((value) => isCredentialInput(value), "must be a credential requirement");
-const OrganizationSlugErrorCodeSchema = _enum([
-	"slug_taken",
-	"slug_reserved",
-	"slug_invalid"
-]);
-const SlugAvailabilityReasonSchema = _enum([
-	"taken",
-	"reserved",
-	"invalid"
-]);
-const SlugAvailabilityResponseSchema = object({
-	slug: string(),
-	available: boolean(),
-	reason: SlugAvailabilityReasonSchema.optional(),
-	suggestion: OrganizationSlugSchema.optional()
-});
-object({
-	slug: string().trim().min(1),
-	excludeOrganizationId: string().min(1).optional()
-});
-const ProjectSlugAvailabilityReasonSchema = _enum(["taken", "invalid"]);
-const ProjectSlugAvailabilityResponseSchema = object({
-	slug: string(),
-	available: boolean(),
-	reason: ProjectSlugAvailabilityReasonSchema.optional(),
-	suggestion: ProjectSlugSchema.optional()
-});
-object({
-	slug: string().trim().min(1),
-	excludeProjectId: string().min(1).optional()
-});
-const ProjectStatusSchema = _enum([
-	"inactive",
-	"starting",
-	"active",
-	"failed"
-]);
-const OrganizationUserRoleSchema = _enum([
-	"owner",
-	"admin",
-	"builder"
-]);
-const isoDateTime$3 = string().datetime();
-const OrganizationSchema = object({
-	id: string(),
-	name: string(),
-	slug: OrganizationSlugSchema,
-	createdAt: isoDateTime$3,
-	updatedAt: isoDateTime$3
-});
-const ProjectSchema = object({
-	id: string(),
-	organizationId: string(),
-	name: string(),
-	slug: ProjectSlugSchema,
-	description: string().nullable(),
-	status: ProjectStatusSchema,
-	baseUrl: string().nullable(),
-	runtimeId: string().nullable(),
-	lastError: string().nullable(),
-	createdAt: isoDateTime$3,
-	updatedAt: isoDateTime$3
-});
-const UserOrganizationSchema = object({
-	organization: OrganizationSchema,
-	role: OrganizationUserRoleSchema
-});
-const ActiveOrganizationResponseSchema = object({ organization: UserOrganizationSchema.nullable() });
-const ListOrganizationsResponseSchema = object({ organizations: array(UserOrganizationSchema) });
-const CreateOrganizationRequestSchema = object({
-	name: string().trim().min(1),
-	/** Format-only at the wire boundary; reserved-name checks run in platform-database. */
-	slug: OrganizationSlugSchema.optional()
-});
-const UpdateOrganizationRequestSchema = object({
-	name: string().trim().min(1).optional(),
-	slug: ClaimableOrganizationSlugSchema.optional()
-}).refine((data) => data.name !== void 0 || data.slug !== void 0, { message: "At least one field is required" });
-const CreateOrganizationResponseSchema = object({ organization: UserOrganizationSchema });
-const ListProjectsResponseSchema = object({ projects: array(ProjectSchema) });
-const ProjectListMetricsSchema = object({
-	agentCount: number$1(),
-	workflowCount: number$1(),
-	skillCount: number$1(),
-	credentialCount: number$1(),
-	lastDeploymentAt: isoDateTime$3.nullable()
-});
-const ListProjectMetricsResponseSchema = object({ metrics: record(string(), ProjectListMetricsSchema) });
-const CreateProjectRequestSchema = object({
-	name: string().trim().min(1),
-	description: string().trim().min(1).optional()
-});
-const UpdateProjectRequestSchema = object({
-	name: string().trim().min(1).optional(),
-	description: string().trim().optional(),
-	slug: ProjectSlugSchema.optional()
-}).refine((data) => data.name !== void 0 || data.description !== void 0 || data.slug !== void 0, { message: "At least one field is required" });
-const CreateProjectResponseSchema = object({ project: ProjectSchema });
-const ProjectResponseSchema = object({ project: ProjectSchema });
-const ProjectReachabilityResponseSchema = object({ reachable: boolean() });
-const ValidationErrorDetailSchema = object({
-	path: string(),
-	message: string()
-});
-/** Machine-readable codes returned in standard API error bodies. */
-const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(_enum(["needs_org_selection"]));
-/** Standard JSON error body returned by the HTTP API. */
-const ErrorResponseSchema = object({
-	error: string(),
-	code: ErrorResponseCodeSchema.optional(),
-	message: string().optional(),
-	details: array(ValidationErrorDetailSchema).optional()
-});
-const MessageOnlyErrorBodySchema = object({ message: string() });
-/** Parse a JSON error body from the API. */
-function parseErrorResponse(body) {
-	const parsed = ErrorResponseSchema.safeParse(body);
-	if (parsed.success) return parsed.data;
-	const messageOnly = MessageOnlyErrorBodySchema.safeParse(body);
-	if (messageOnly.success) return {
-		error: messageOnly.data.message,
-		message: messageOnly.data.message
-	};
-}
-const CredentialRunContextSchema = object({
-	orgId: string().min(1).optional(),
-	projectId: string().min(1).optional(),
-	userId: string().min(1).optional(),
-	userIds: record(string(), string()).optional(),
-	selection: record(string(), string()).optional()
-});
-const ThinkingLevelSchema = _enum([
-	"off",
-	"minimal",
-	"low",
-	"medium",
-	"high",
-	"xhigh"
-]);
-const PromptInputSchema = object({
-	message: string().min(1),
-	sessionId: string().min(1).optional(),
-	subscriptionId: string().min(1).optional(),
-	context: CredentialRunContextSchema.optional(),
-	thinkingLevel: ThinkingLevelSchema.optional()
-});
-const PromptResponseSchema = object({
-	sessionId: string(),
-	messages: array(record(string(), unknown())),
-	error: string().nullable()
-});
-const SkipResponseSchema = object({
-	ok: literal(true),
-	skipped: literal(true)
-});
-const HealthResponseSchema = object({ ok: literal(true) });
-object({ service: string() });
-const ConnectProvidersResponseSchema = object({ providers: array(object({
-	key: string(),
-	mode: _enum(["authorize-url", "browser-redirect"]),
-	path: string(),
-	requiresAuth: boolean()
-})) });
-const ConnectAuthorizeUrlResponseSchema = object({ url: string() });
-const QueuedRunResponseSchema = object({ runId: string() });
-const QueuedAgentPromptResponseSchema = object({ sessionId: string() });
-object({
-	workflows: array(string().min(1)).optional(),
-	attachments: array(string().min(1)).optional()
-});
-const PollRunMultiResponseSchema = object({ results: array(object({
-	attachmentKey: string(),
-	workflowKey: string(),
-	runId: string().optional(),
-	body: unknown().optional(),
-	queued: boolean(),
-	skipped: boolean().optional()
-})) });
-const PollRunResponseSchema = union([
-	record(string(), unknown()),
-	PollRunMultiResponseSchema,
-	SkipResponseSchema,
-	object({ runId: string() })
-]);
-const RunSourceKindSchema = _enum([
-	"api",
-	"trigger",
-	"gateway",
-	"workflow",
-	"agent"
-]);
-object({
-	kind: RunSourceKindSchema,
-	id: string().nullable()
-});
-const WorkflowRunStatusSchema = _enum([
-	"pending",
-	"running",
-	"completed",
-	"failed"
-]);
-const WorkflowRunTriggerSchema = _enum([
-	"api",
-	"cron",
-	"webhook",
-	"poll",
-	"retry"
-]);
-_enum([
-	"run_started",
-	"step_completed",
-	"step_failed",
-	"step_retrying",
-	"sleep_scheduled",
-	"sleep_completed",
-	"hook_created",
-	"hook_resumed",
-	"run_completed",
-	"run_failed"
-]);
-const WorkflowRunSummarySchema = object({
-	id: string(),
-	status: WorkflowRunStatusSchema,
-	trigger: WorkflowRunTriggerSchema,
-	triggeredAt: string(),
-	startedAt: string().nullable(),
-	finishedAt: string().nullable(),
-	sourceKind: RunSourceKindSchema,
-	sourceId: string().nullable(),
-	triggerRunId: string().nullable(),
-	attachmentId: string().nullable()
-});
-const WorkflowRunRecordSchema = object({
-	id: string(),
-	workflowSlug: string(),
-	status: WorkflowRunStatusSchema,
-	trigger: WorkflowRunTriggerSchema,
-	triggeredAt: string(),
-	startedAt: string().nullable(),
-	finishedAt: string().nullable(),
-	sourceKind: RunSourceKindSchema,
-	sourceId: string().nullable(),
-	triggerRunId: string().nullable(),
-	attachmentId: string().nullable(),
-	parentWorkflowRunId: string().nullable(),
-	parentSpanId: string().nullable(),
-	input: unknown().nullable(),
-	output: unknown().nullable(),
-	error: unknown().nullable()
-});
-object({
-	limit: number().int().min(1).max(100).optional().default(20),
-	cursor: string().min(1).optional(),
-	status: WorkflowRunStatusSchema.optional(),
-	trigger: WorkflowRunTriggerSchema.optional()
-});
-const WorkflowRunListResponseSchema = object({
-	items: array(WorkflowRunSummarySchema),
-	nextCursor: string().nullable()
-});
-_enum([
-	"trigger",
-	"steps",
-	"trace"
-]);
-object({ include: string().optional() });
-const TriggerRunDetailSchema = object({
-	id: string(),
-	attachmentId: string(),
-	attachmentSlug: string().nullable(),
-	triggerType: _enum([
-		"cron",
-		"webhook",
-		"poll"
-	]),
-	sourcePath: string().nullable(),
-	payload: unknown().nullable(),
-	triggeredAt: string()
-});
-const WorkflowStepRunSchema = object({
-	id: string(),
-	actionKey: string(),
-	output: unknown(),
-	completedAt: string()
-});
-const TraceTriggerSummarySchema = object({
-	triggerType: string(),
-	triggerRunId: string(),
-	workflowSlug: string().optional(),
-	agentSlug: string().optional(),
-	attachmentId: string().nullable().optional(),
-	attachmentSlug: string().nullable().optional(),
-	route: string().optional(),
-	sourcePath: string().nullable().optional()
-}).nullable();
-const TraceGatewaySummarySchema = object({
-	gatewayAttachmentId: string(),
-	gatewayAttachmentKey: string(),
-	threadId: string().optional(),
-	channelId: string().optional(),
-	mode: string().optional()
-}).nullable();
-const TraceSpanSchema = object({
-	id: string(),
-	traceId: string(),
-	parentSpanId: string().nullable(),
-	kind: string(),
-	refId: string(),
-	name: string(),
-	status: string(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	metadata: unknown().nullable(),
-	error: unknown().nullable()
-});
-const TraceLogSchema = object({
-	id: string(),
-	traceId: string(),
-	spanId: string(),
-	seq: number$1(),
-	level: string(),
-	message: string(),
-	data: unknown().nullable(),
-	source: string(),
-	createdAt: string()
-});
-const TraceResponseSchema = object({
-	traceId: string(),
-	trigger: TraceTriggerSummarySchema,
-	gateway: TraceGatewaySummarySchema,
-	spans: array(TraceSpanSchema),
-	logs: array(TraceLogSchema)
-});
-const WorkflowRunDetailResponseSchema = object({
-	run: WorkflowRunRecordSchema,
-	trigger: TriggerRunDetailSchema.nullable(),
-	steps: array(WorkflowStepRunSchema),
-	trace: TraceResponseSchema.nullable()
-});
-const AgentSessionStatusSchema = _enum([
-	"running",
-	"completed",
-	"failed"
-]);
-const AgentSessionSummarySchema = object({
-	id: string(),
-	status: AgentSessionStatusSchema,
-	source: RunSourceKindSchema,
-	sourceId: string().nullable(),
-	createdAt: string(),
-	updatedAt: string(),
-	messageCount: number$1()
-});
-const AgentSessionRecordSchema = object({
-	id: string(),
-	agentSlug: string(),
-	status: AgentSessionStatusSchema,
-	source: RunSourceKindSchema,
-	sourceId: string().nullable(),
-	createdAt: string(),
-	updatedAt: string(),
-	parentSpanId: string().nullable(),
-	messageCount: number$1(),
-	error: unknown().nullable()
-});
-object({
-	limit: number().int().min(1).max(100).optional().default(20),
-	cursor: string().min(1).optional(),
-	status: AgentSessionStatusSchema.optional(),
-	source: RunSourceKindSchema.optional()
-});
-const AgentSessionListResponseSchema = object({
-	items: array(AgentSessionSummarySchema),
-	nextCursor: string().nullable()
-});
-_enum([
-	"gateway",
-	"messages",
-	"events",
-	"trace"
-]);
-object({ include: string().optional() });
-const GatewaySessionDetailSchema = object({
-	threadId: string(),
-	attachmentId: string(),
-	attachmentSlug: string().nullable()
-});
-const AgentEventSchema = object({
-	id: string(),
-	sessionId: string(),
-	seq: number$1(),
-	eventType: string(),
-	payload: unknown(),
-	createdAt: string()
-});
-const AgentSessionDetailResponseSchema = object({
-	session: AgentSessionRecordSchema,
-	gateway: GatewaySessionDetailSchema.nullable(),
-	messages: array(record(string(), unknown())),
-	events: array(AgentEventSchema),
-	trace: TraceResponseSchema.nullable()
-});
-const SlackGatewayModeSchema = _enum([
-	"mention",
-	"channel",
-	"dm"
-]);
-const GatewayAttachmentSourceSchema = object({
-	kind: literal("slack"),
-	mode: SlackGatewayModeSchema,
-	credentialKey: string(),
-	channelIds: array(string()).optional(),
-	subscribeOnMention: boolean()
-});
-const GatewayAttachmentRecordSchema = object({
-	id: string(),
-	key: string(),
-	agentKey: string(),
-	channelId: string(),
-	teamId: string().nullable().optional(),
-	platform: string(),
-	source: GatewayAttachmentSourceSchema,
-	registeredAt: string(),
-	updatedAt: string()
-});
-object({ attachments: array(GatewayAttachmentRecordSchema) });
-const UpsertGatewayAttachmentBodySchema = object({
-	agentKey: string().min(1),
-	teamId: string().min(1).optional(),
-	mode: SlackGatewayModeSchema.optional(),
-	subscribeOnMention: boolean().optional()
-});
-const AgentListResponseSchema = object({ agents: array(object({
-	key: string(),
-	name: string().optional(),
-	route: string()
-})) });
-object({ subscriptions: array(object({
-	id: string(),
-	workflowKey: string(),
-	userId: string(),
-	enabled: boolean(),
-	createdAt: string(),
-	updatedAt: string()
-})) });
-object({
-	userId: string().min(1).optional(),
-	enabled: boolean().optional()
-});
-const CredentialInstanceRecordSchema = object({
-	id: string(),
-	key: string(),
-	scopeType: CredentialScopeTypeSchema,
-	scopeId: string().nullable(),
-	label: string().nullable(),
-	isDefault: boolean(),
-	authKind: CredentialAuthKindSchema
-});
-const CredentialInstanceListResponseSchema = object({ instances: array(CredentialInstanceRecordSchema) });
-const CreateCredentialInstanceBodySchema = object({
-	key: string().min(1),
-	scopeType: CredentialScopeTypeSchema,
-	scopeId: string().nullable().optional(),
-	label: string().nullable().optional(),
-	isDefault: boolean().optional(),
-	value: record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" })
-});
-const UpdateCredentialInstanceBodySchema = object({
-	label: string().nullable().optional(),
-	isDefault: boolean().optional(),
-	value: record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" }).optional()
-});
-const TriggerRunTypeSchema = _enum([
-	"cron",
-	"webhook",
-	"poll"
-]);
-const TriggerRunWorkflowSummarySchema = object({
-	id: string(),
-	status: WorkflowRunStatusSchema,
-	workflowSlug: string()
-});
-const TriggerRunAgentSessionSummarySchema = object({
-	id: string(),
-	agentSlug: string()
-});
-const TriggerRunSummarySchema = object({
-	id: string(),
-	triggerType: TriggerRunTypeSchema,
-	triggeredAt: string(),
-	sourcePath: string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema.nullable()
-});
-const TriggerRunRecordSchema = object({
-	id: string(),
-	attachmentId: string(),
-	attachmentSlug: string(),
-	triggerType: TriggerRunTypeSchema,
-	sourcePath: string().nullable(),
-	payload: unknown().nullable(),
-	triggeredAt: string()
-});
-object({
-	limit: number().int().min(1).max(100).optional().default(20),
-	cursor: string().min(1).optional(),
-	triggerType: TriggerRunTypeSchema.optional()
-});
-const TriggerRunListResponseSchema = object({
-	items: array(TriggerRunSummarySchema),
-	nextCursor: string().nullable()
-});
-_enum([
-	"workflows",
-	"agents",
-	"trace"
-]);
-object({ include: string().optional() });
-const TriggerRunAgentSessionDetailSchema = object({
-	id: string(),
-	agentSlug: string()
-});
-const TriggerRunDetailResponseSchema = object({
-	run: TriggerRunRecordSchema,
-	workflowRuns: array(WorkflowRunSummarySchema),
-	agentSessions: array(TriggerRunAgentSessionDetailSchema),
-	trace: TraceResponseSchema.nullable()
-});
-const TriggerTypeSchema = _enum([
-	"webhook",
-	"poll",
-	"cron"
-]);
-const TriggerTargetKindSchema = _enum(["workflow", "agent"]);
-const TriggerListItemSchema = object({
-	key: string(),
-	type: TriggerTypeSchema,
-	route: string().optional(),
-	webhookUrl: string().url().optional(),
-	targetKind: TriggerTargetKindSchema,
-	workflowKey: string().optional(),
-	agentKey: string().optional()
-});
-const TriggerListResponseSchema = object({ triggers: array(TriggerListItemSchema) });
-object({ endpoint: string().min(1).optional() });
-const TriggerDetailResponseSchema = TriggerListItemSchema;
-const OrganizationMemberRoleSchema = _enum([
-	"owner",
-	"admin",
-	"builder"
-]);
-const OrganizationMemberStatusSchema = _enum([
-	"invited",
-	"active",
-	"rejected",
-	"suspended"
-]);
-const InvitableOrganizationMemberRoleSchema = _enum(["admin", "builder"]);
-const isoDateTime$2 = string().datetime();
-const OrganizationMemberSchema = object({
-	id: string(),
-	name: string(),
-	email: string().email(),
-	role: OrganizationMemberRoleSchema,
-	status: OrganizationMemberStatusSchema,
-	avatarUrl: string().optional(),
-	joinedAt: isoDateTime$2.optional(),
-	lastActiveAt: isoDateTime$2.nullable().optional()
-});
-const ListOrganizationMembersResponseSchema = object({ members: array(OrganizationMemberSchema) });
-const InviteOrganizationMembersRequestSchema = object({
-	emails: array(string().trim().email()).min(1),
-	role: InvitableOrganizationMemberRoleSchema
-});
-const InviteOrganizationMemberResultStatusSchema = _enum([
-	"sent",
-	"already_member",
-	"pending",
-	"invalid"
-]);
-const InviteOrganizationMembersResponseSchema = object({ results: array(object({
-	email: string(),
-	status: InviteOrganizationMemberResultStatusSchema,
-	invitationId: string().optional()
-})) });
-const UpdateOrganizationMemberRequestSchema = object({ role: InvitableOrganizationMemberRoleSchema });
-const UpdateOrganizationMemberResponseSchema = object({ member: OrganizationMemberSchema });
-const ListOrganizationInvitationsResponseSchema = object({ invitations: array(object({
-	id: string(),
-	organizationName: string(),
-	organizationSlug: OrganizationSlugSchema,
-	invitedByName: string().optional(),
-	invitedByEmail: string().email().optional(),
-	role: OrganizationMemberRoleSchema
-})) });
-const AcceptOrganizationInvitationResponseSchema = object({ organization: UserOrganizationSchema });
-const DeclineOrganizationInvitationResponseSchema = object({ success: literal(true) });
-/** Custom avatar override; null means fall back to OAuth `users.image`. */
-const UserAvatarSchema = object({ url: url().nullable() });
-const UserAvatarPatchSchema = object({ 
-/** Storage key returned from presign; null removes the custom override. */
-storageKey: string().min(1).nullable() });
-const PresignUserAvatarRequestSchema = object({ contentType: string().trim().min(1) });
-const PresignUserAvatarResponseSchema = object({
-	uploadUrl: url(),
-	storageKey: string().min(1)
-});
-const OrganizationLogoVariantSchema = _enum(["light", "dark"]);
-const OrganizationSidebarBrandingSchema = object({
-	customLogoEnabled: boolean(),
-	customLogoExplicitlyDisabled: boolean(),
-	logoLightUrl: url().nullable(),
-	logoDarkUrl: url().nullable(),
-	logoHeightPx: number$1().int().min(14).max(32)
-});
-const OrganizationSidebarBrandingPatchSchema = object({
-	customLogoEnabled: boolean().optional(),
-	customLogoExplicitlyDisabled: boolean().optional(),
-	logoLightStorageKey: string().min(1).nullable().optional(),
-	logoDarkStorageKey: string().min(1).nullable().optional(),
-	logoHeightPx: number$1().int().min(14).max(32).optional()
-}).refine((value) => value.customLogoEnabled !== void 0 || value.customLogoExplicitlyDisabled !== void 0 || value.logoLightStorageKey !== void 0 || value.logoDarkStorageKey !== void 0 || value.logoHeightPx !== void 0, { message: "At least one branding field is required" });
-const PresignOrgLogoRequestSchema = object({
-	variant: OrganizationLogoVariantSchema,
-	contentType: string().trim().min(1)
-});
-const PresignOrgLogoResponseSchema = object({
-	uploadUrl: url(),
-	storageKey: string().min(1)
-});
-const ProjectArtifactStatusSchema = _enum(["pending", "ready"]);
-const isoDateTime$1 = string().datetime();
-const ProjectArtifactSchema = object({
-	id: string(),
-	projectId: string(),
-	storageKey: string(),
-	status: ProjectArtifactStatusSchema,
-	createdAt: isoDateTime$1,
-	updatedAt: isoDateTime$1
-});
-const CreateProjectArtifactResponseSchema = object({
-	artifact: ProjectArtifactSchema,
-	uploadUrl: string().url(),
-	expiresInSeconds: number$1().int().positive()
-});
-const CompleteProjectArtifactResponseSchema = object({
-	artifact: ProjectArtifactSchema,
-	project: ProjectSchema
-});
-const ListProjectDeploymentsResponseSchema = object({ deployments: array(object({
-	id: string(),
-	projectId: string(),
-	version: number$1().int().positive(),
-	deployedBy: string().nullable(),
-	deployedByEmail: string().optional(),
-	deployedByAvatarUrl: string().optional(),
-	createdAt: isoDateTime$1,
-	active: boolean()
-})) });
-const optionalCount = number$1().int().nonnegative().nullable().optional();
-const optionalTimestamp = string().nullable().optional();
-const AgentSummarySchema = object({
-	id: string().min(1),
-	slug: string().min(1),
-	name: string().min(1),
-	projectId: string().min(1),
-	updatedAt: string().min(1),
-	description: string().optional(),
-	sourcePath: string().min(1).optional(),
-	model: string().optional(),
-	toolCount: optionalCount,
-	credentialCount: optionalCount,
-	lastRunAt: optionalTimestamp
-});
-const WorkflowSummarySchema = object({
-	id: string().min(1),
-	slug: string().min(1),
-	name: string().min(1),
-	projectId: string().min(1),
-	updatedAt: string().min(1),
-	description: string().optional(),
-	sourcePath: string().min(1).optional(),
-	lastRunAt: optionalTimestamp
-});
-const SkillSummarySchema = object({
-	id: string().min(1),
-	slug: string().min(1),
-	name: string().min(1),
-	projectId: string().min(1),
-	updatedAt: string().min(1),
-	description: string().optional(),
-	sourcePath: string().min(1).optional()
-});
-const AgentSummaryListResponseSchema = array(AgentSummarySchema);
-const AgentSummaryDetailResponseSchema = AgentSummarySchema.nullable();
-const WorkflowSummaryListResponseSchema = array(WorkflowSummarySchema);
-const WorkflowSummaryDetailResponseSchema = WorkflowSummarySchema.nullable();
-const SkillSummaryListResponseSchema = array(SkillSummarySchema);
-const SkillSummaryDetailResponseSchema = SkillSummarySchema.nullable();
-const RecentResourceKindSchema = _enum([
-	"agent",
-	"workflow",
-	"skill"
-]);
-const RecentResourceSourceSchema = _enum(["owned", "shared"]);
-const RecentResourceListResponseSchema = array(object({
-	id: string().min(1),
-	resourceKind: RecentResourceKindSchema,
-	resourceId: string().min(1),
-	name: string().min(1),
-	description: string().optional(),
-	projectId: string().min(1),
-	projectName: string().min(1),
-	sourcePath: string().min(1).optional(),
-	source: RecentResourceSourceSchema,
-	lastOpenedAt: string().min(1),
-	lastModifiedAt: string().min(1)
-}));
-const isoDateTime = string().datetime();
-const sha256Hex = string().regex(/^[a-f0-9]{64}$/, "Expected a lowercase hex sha256 digest");
-/**
-* A single entry in a deploy's file tree, as served to the dashboard. Carries
-* no contents: `id` is a stable, path-derived handle used for selection and
-* `?file=` deep links; `hash` is the content address used to fetch the bytes
-* lazily and to cache them immutably in the browser.
-*/
-const ProjectFileSummarySchema = object({
-	id: string(),
-	path: string().min(1),
-	hash: sha256Hex
-});
-/** Maps a runtime resource slug (agent/workflow/skill) to its source file path. */
-const ProjectSourceResourceRefSchema = object({
-	slug: string().min(1),
-	path: string().min(1)
-});
-const ProjectSourceResourcesSchema = object({
-	agents: array(ProjectSourceResourceRefSchema).default([]),
-	workflows: array(ProjectSourceResourceRefSchema).default([]),
-	skills: array(ProjectSourceResourceRefSchema).default([])
-});
-const emptyResources = () => ({
-	agents: [],
-	workflows: [],
-	skills: []
-});
-/** Response for the file-tree listing of a project's active deploy. */
-const ListProjectFilesResponseSchema = object({
-	artifactId: string().nullable(),
-	files: array(ProjectFileSummarySchema),
-	resources: ProjectSourceResourcesSchema.default(emptyResources())
-});
-object({
-	path: string().min(1),
-	contents: string(),
-	hash: sha256Hex
-});
-/** Request: ask the platform which blobs are missing and get presigned PUTs. */
-const PresignProjectSourceRequestSchema = object({ blobs: array(object({
-	hash: sha256Hex,
-	size: number$1().int().nonnegative()
-})) });
-/** Response: presigned PUTs for the subset of blobs not already stored. */
-const PresignProjectSourceResponseSchema = object({ uploads: array(object({
-	hash: sha256Hex,
-	url: string().url()
-})) });
-/** Request body the CLI sends to finalize a deploy's source manifest. */
-const UploadProjectSourceManifestRequestSchema = object({
-	files: array(object({
-		path: string().min(1),
-		hash: sha256Hex
-	})),
-	resources: ProjectSourceResourcesSchema.default(emptyResources())
-});
-const UploadProjectSourceResponseSchema = object({
-	ok: literal(true),
-	fileCount: number$1().int().nonnegative()
-});
-object({
-	files: array(object({
-		id: string(),
-		path: string().min(1),
-		hash: sha256Hex
-	})),
-	resources: ProjectSourceResourcesSchema.default(emptyResources()),
-	generatedAt: isoDateTime
-});
-//#endregion
 //#region ../../packages/sdk/dist/index.mjs
 function normalizeBaseUrl$1(baseUrl) {
 	return baseUrl.replace(/\/+$/, "");
@@ -4781,9 +3324,11 @@ async function runDeviceLogin(options) {
 		});
 		if (!tokenResult.error) {
 			const token = tokenResult.data;
+			const organizationId = token.scope?.trim();
 			return {
 				accessToken: token.access_token,
-				expiresIn: token.expires_in
+				expiresIn: token.expires_in,
+				organizationId: organizationId || void 0
 			};
 		}
 		const errorPayload = tokenResult.error;
@@ -4835,82 +3380,6 @@ async function getCliJwt(platformUrl, force = false) {
 	return cache.get(force);
 }
 //#endregion
-//#region src/resolve-platform-url.ts
-const DEFAULT_WEB_URL = "https://app.keystroke.ai";
-const DEFAULT_PLATFORM_URL = "https://api.keystroke.ai";
-const LOCAL_PLATFORM_URL = "http://localhost:3002";
-function webOriginFromUrl(webUrl) {
-	return originFromPublicUrl(webUrl, webUrl.replace(/\/+$/, ""));
-}
-/** Known web origins with a fixed platform API — undefined for custom/staging URLs. */
-function knownPlatformUrlForWebUrl(webUrl) {
-	const webOrigin = webOriginFromUrl(webUrl);
-	if (webOrigin === "http://localhost:3000" || webOrigin === "http://127.0.0.1:3000") return LOCAL_PLATFORM_URL;
-	if (webOrigin === "https://app.keystroke.ai") return DEFAULT_PLATFORM_URL;
-}
-function resolvePlatformUrlForWebUrl(webUrl, options = {}) {
-	const explicit = options.platformUrl?.trim();
-	if (explicit) return explicit.replace(/\/+$/, "");
-	const known = knownPlatformUrlForWebUrl(webUrl);
-	if (known) return known;
-	return (options.fallback?.trim() || "https://api.keystroke.ai").replace(/\/+$/, "");
-}
-//#endregion
-//#region src/config.ts
-function getCliConfigDir(cwd = join(homedir(), ".keystroke")) {
-	return cwd;
-}
-function getConfigDir(config) {
-	return dirname(config.path);
-}
-function getEffectiveApiTarget(config) {
-	const explicit = config.get("apiTarget");
-	if (explicit === "local" || explicit === "platform") return explicit;
-	return "local";
-}
-function syncPlatformUrlWithWebUrl(config) {
-	const known = knownPlatformUrlForWebUrl(config.get("webUrl"));
-	if (!known) return;
-	if (config.get("platformUrl") !== known) config.set("platformUrl", known);
-}
-function createCliConfig(cwd = getCliConfigDir()) {
-	const config = new Conf({
-		projectName: "keystroke",
-		cwd,
-		schema: {
-			serverUrl: {
-				type: "string",
-				default: "http://localhost:3001"
-			},
-			webUrl: {
-				type: "string",
-				default: DEFAULT_WEB_URL
-			},
-			platformUrl: {
-				type: "string",
-				default: DEFAULT_PLATFORM_URL
-			},
-			activeOrganizationId: { type: "string" },
-			activeProjectId: { type: "string" },
-			apiTarget: {
-				type: "string",
-				enum: ["local", "platform"]
-			}
-		}
-	});
-	syncPlatformUrlWithWebUrl(config);
-	return config;
-}
-function getServerUrl(config) {
-	return config.get("serverUrl");
-}
-function getWebUrl(config) {
-	return config.get("webUrl");
-}
-function getPlatformUrl(config) {
-	return resolvePlatformUrlForWebUrl(getWebUrl(config), { fallback: config.get("platformUrl") });
-}
-//#endregion
 //#region src/auth/resolve-cli-auth.ts
 /** Returns JWT bearer auth when a session refresh token is stored; otherwise none. */
 function resolveCliAuth(config) {
@@ -8674,6 +7143,15 @@ async function activateOrganization(config, organizationId) {
 	platform.setActiveOrganizationId(membership.organization.id);
 	return membership;
 }
+function resolveOrganizationIdForLogin(organizations, options = {}) {
+	if (options.organizationRef ?? options.organizationId) return resolveOrganizationRef(organizations, options.organizationRef ?? options.organizationId).organization.id;
+	for (const candidateId of [options.deviceOrganizationId, options.storedOrganizationId]) {
+		const organizationId = candidateId?.trim();
+		if (organizationId && organizations.some((entry) => entry.organization.id === organizationId)) return organizationId;
+	}
+	if (organizations.length === 1) return organizations[0].organization.id;
+	return [...organizations].sort((left, right) => left.organization.slug.localeCompare(right.organization.slug))[0].organization.id;
+}
 async function pickOrganization(config, organizations, organizationRef) {
 	if (organizationRef) return activateOrganization(config, resolveOrganizationRef(organizations, organizationRef).organization.id);
 	if (!process.stdin.isTTY) {
@@ -8697,33 +7175,21 @@ async function selectActiveOrganization(config, options = {}) {
 async function syncActiveOrganizationAfterLogin(config, options = {}) {
 	const organizations = await listOrganizations(config);
 	if (organizations.length === 0) throw new Error(`No organization found — create one at ${getWebUrl(config)}`);
-	const storedId = config.get("activeOrganizationId");
-	if (storedId && organizations.some((entry) => entry.organization.id === storedId)) {
-		const membership = await activateOrganization(config, storedId);
-		process.stdout.write(`Using organization ${membership.organization.name}\n`);
-		return membership;
-	}
-	if (organizations.length === 1) {
-		const membership = await activateOrganization(config, organizations[0].organization.id);
-		process.stdout.write(`Using organization ${membership.organization.name}\n`);
-		return membership;
-	}
-	if (options.organizationRef ?? options.organizationId) {
-		const membership = await pickOrganization(config, organizations, options.organizationRef ?? options.organizationId);
-		process.stdout.write(`Using organization ${membership.organization.name}\n`);
-		return membership;
-	}
-	const membership = await pickOrganization(config, organizations);
-	process.stdout.write(`Using organization ${membership.organization.name}\n`);
-	return membership;
+	return activateOrganization(config, resolveOrganizationIdForLogin(organizations, {
+		organizationRef: options.organizationRef,
+		organizationId: options.organizationId,
+		deviceOrganizationId: options.deviceOrganizationId,
+		storedOrganizationId: config.get("activeOrganizationId")
+	}));
 }
 async function ensureActiveOrganization(config) {
+	const organizations = await listOrganizations(config);
+	if (organizations.length === 0) throw new Error("No organization found. Run `keystroke auth login` after creating one in the dashboard.");
 	const storedId = config.get("activeOrganizationId");
-	if (storedId) {
+	if (storedId && organizations.some((entry) => entry.organization.id === storedId)) {
 		await activateOrganization(config, storedId);
 		return;
 	}
-	const organizations = await listOrganizations(config);
 	if (organizations.length === 1) {
 		await activateOrganization(config, organizations[0].organization.id);
 		return;
@@ -8965,6 +7431,30 @@ function parseJsonOption(value, flag) {
 	}
 }
 //#endregion
+//#region src/resolve-project-target.ts
+async function resolveActiveProject(config, platform) {
+	const ref = getCliTargetOptions().projectId ?? config.get("activeProjectId");
+	if (!ref) return;
+	const client = platform ?? createCliPlatformClient(config);
+	if (!getCliTargetOptions().projectId && looksLikeUuid(ref)) return resolveProjectRef(client, ref);
+	return resolveProjectRef(client, ref);
+}
+async function resolveActiveProjectId(config) {
+	return (await resolveActiveProject(config))?.id;
+}
+//#endregion
+//#region src/commands/agent/list.ts
+function registerAgentListCommand(agent) {
+	agent.command("list").description("List agents in the active organization").action(() => runCliCommand("List agents failed", async () => {
+		const config = createCliConfig();
+		const client = createCliPlatformClient(config);
+		await ensureActiveOrganization(config);
+		const projectId = await resolveActiveProjectId(config);
+		const result = await client.agents.list(projectId ? { projectId } : void 0);
+		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+	}, void 0, { orgScoped: true }));
+}
+//#endregion
 //#region src/commands/agent/prompt.ts
 function registerAgentPromptCommand(agent) {
 	agent.command("prompt").description("Send a message to an agent (or follow up in an existing session)").argument("<agentId>", "Agent key / route id").requiredOption("--message <text>", "Message to send").option("--session-id <id>", "Existing session id for follow-up").action((agentId, options) => runProjectCliCommand("Agent prompt failed", async ({ client }) => {
@@ -8997,6 +7487,7 @@ function registerAgentSessionsCommand(agent) {
 //#region src/commands/agent/index.ts
 function registerAgentCommand(program) {
 	const agent = program.command("agent").description("Invoke and inspect agents");
+	registerAgentListCommand(agent);
 	registerAgentPromptCommand(agent);
 	registerAgentSessionsCommand(agent);
 }
@@ -9299,7 +7790,7 @@ function resolveAuthLoginTargets(options, config) {
 //#endregion
 //#region src/commands/auth/login.ts
 function registerAuthLoginCommand(auth) {
-	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (omit to use production defaults; local dev: http://localhost:3000)").option("--platform-url <url>", "Platform API origin (derived from web URL when omitted)").option("--org <slug>", "Active organization slug (skips prompt when you belong to several)").action(async (options) => {
+	auth.command("login").description("Authenticate via browser device flow").option("--web-url <url>", "Web dashboard origin (omit to use production defaults; local dev: http://localhost:3000)").option("--platform-url <url>", "Platform API origin (derived from web URL when omitted)").option("--org <slug>", "Active organization slug (overrides browser default)").action(async (options) => {
 		const config = createCliConfig();
 		const { webUrl, platformUrl } = resolveAuthLoginTargets(options, config);
 		config.set("webUrl", webUrl);
@@ -9312,9 +7803,12 @@ function registerAuthLoginCommand(auth) {
 			});
 			setAccessToken(platformUrl, result.accessToken);
 			const user = await getSessionWithBearer(platformUrl, result.accessToken);
-			if (user) process.stdout.write(`Logged in as ${user.name} (${user.email})\n`);
-			else process.stdout.write(`Logged in to ${webUrl}\n`);
-			await syncActiveOrganizationAfterLogin(config, { organizationRef: options.org });
+			const membership = await syncActiveOrganizationAfterLogin(config, {
+				organizationRef: options.org,
+				deviceOrganizationId: result.organizationId
+			});
+			if (user) process.stdout.write(`Logged in as ${user.name} (${user.email}) — organization ${membership.organization.name}\n`);
+			else process.stdout.write(`Logged in to ${webUrl} — organization ${membership.organization.name}\n`);
 		} catch (error) {
 			process.stderr.write(`${formatCliError(error, "Login failed", {
 				webUrl,
@@ -9391,7 +7885,7 @@ function registerBuildCommand(program) {
 	program.command("build").description("Build the keystroke project for production").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
 		try {
 			const root = resolveProjectRoot(options.dir);
-			const { buildApp } = await import("./dist-uZuvgIVp.mjs");
+			const { buildApp } = await import("./dist-QMg0gSzo.mjs");
 			await buildApp({ root });
 			process.stdout.write(`Built ${root}\n`);
 		} catch (error) {
@@ -9435,115 +7929,10 @@ function packProjectArtifact(projectRoot) {
 }
 //#endregion
 //#region src/project/collect-source.ts
-const IGNORED_DIRS = new Set([
-	"node_modules",
-	"dist",
-	".git",
-	".turbo",
-	"build",
-	"coverage",
-	".keystroke",
-	".cache",
-	"tmp"
-]);
-const IGNORED_ENV_FILE = /\.env/;
-const IGNORED_LOG_FILE = /\.log$/;
-const MAX_FILE_BYTES = 256 * 1024;
-const MAX_TOTAL_BYTES = 8 * 1024 * 1024;
-const MAX_FILES = 2e3;
-function isIgnoredFile(name) {
-	return IGNORED_ENV_FILE.test(name) || IGNORED_LOG_FILE.test(name);
-}
-function toPosix(path) {
-	return path.split(sep).join("/");
-}
-function isProbablyBinary(buffer) {
-	const sampleLength = Math.min(buffer.length, 8e3);
-	for (let index = 0; index < sampleLength; index += 1) if (buffer[index] === 0) return true;
-	return false;
-}
-function walkFiles(root, dir, out, totals) {
-	for (const name of readdirSync(dir).sort()) {
-		if (out.length >= MAX_FILES || totals.bytes >= MAX_TOTAL_BYTES) return;
-		const absolute = join(dir, name);
-		const stats = statSync(absolute);
-		if (stats.isDirectory()) {
-			if (IGNORED_DIRS.has(name)) continue;
-			walkFiles(root, absolute, out, totals);
-			continue;
-		}
-		if (!stats.isFile() || stats.size > MAX_FILE_BYTES || isIgnoredFile(name)) continue;
-		const buffer = readFileSync(absolute);
-		if (isProbablyBinary(buffer)) continue;
-		totals.bytes += buffer.byteLength;
-		out.push({
-			path: toPosix(relative(root, absolute)),
-			contents: buffer.toString("utf8"),
-			hash: createHash("sha256").update(buffer).digest("hex")
-		});
-	}
-}
-function posixPrefix(root, srcRoot, subdir) {
-	return `${toPosix(relative(root, join(srcRoot, subdir)))}/`;
-}
-function collectModuleRefs(srcRoot, root, files, subdir, nestedEntry) {
-	const dir = join(srcRoot, subdir);
-	const prefix = posixPrefix(root, srcRoot, subdir);
-	const refs = [];
-	for (const file of files) {
-		if (!file.path.startsWith(prefix) || !/\.(ts|mts)$/.test(file.path)) continue;
-		const slug = entryIdFromFile(dir, join(root, file.path), { nestedEntry });
-		if (slug) refs.push({
-			slug,
-			path: file.path
-		});
-	}
-	return refs;
-}
-function collectSkillRefs(srcRoot, root, files) {
-	const dir = join(srcRoot, "skills");
-	const prefix = posixPrefix(root, srcRoot, "skills");
-	const refs = [];
-	for (const file of files) {
-		if (!file.path.startsWith(prefix) || !file.path.endsWith("SKILL.md")) continue;
-		const slug = toPosix(relative(dir, join(root, file.path)).replace(/\/?SKILL\.md$/, ""));
-		if (slug) refs.push({
-			slug,
-			path: file.path
-		});
-	}
-	return refs;
-}
-/**
-* Collect the project's actual source code into a deploy snapshot: every text
-* file under the project root (minus build output / deps) plus a map of each
-* agent / workflow / skill key to its source path. The map mirrors the same
-* path-derived ids the build step uses.
-*/
+/** Collect deploy source files via the shared project walk (for `--skip-build`). */
 function collectProjectSource(root) {
-	const files = [];
-	walkFiles(root, root, files, { bytes: 0 });
-	const srcRoot = join(root, "src");
-	return {
-		files,
-		resources: {
-			agents: collectModuleRefs(srcRoot, root, files, "agents", "agent"),
-			workflows: collectModuleRefs(srcRoot, root, files, "workflows", "workflow"),
-			skills: collectSkillRefs(srcRoot, root, files)
-		}
-	};
-}
-//#endregion
-//#region src/resolve-project-target.ts
-async function resolveActiveProject(config, platform) {
-	const ref = getCliTargetOptions().projectId ?? config.get("activeProjectId");
-	if (!ref) return;
-	const client = platform ?? createCliPlatformClient(config);
-	if (!getCliTargetOptions().projectId && looksLikeUuid(ref)) return resolveProjectRef(client, ref);
-	return resolveProjectRef(client, ref);
-}
-async function resolveActiveProjectId(config) {
-	return (await resolveActiveProject(config))?.id;
+	if (!existsSync(join(root, "dist/.keystroke/route-manifest.json"))) throw new Error(`Route manifest missing at ${ROUTE_MANIFEST_REL_PATH}. Run keystroke build before deploy --skip-build.`);
+	return { files: walkProject(root, { collectSources: true }).sourceFiles };
 }
 //#endregion
 //#region src/commands/deploy.ts
@@ -9577,13 +7966,10 @@ async function uploadProjectSourceSnapshot(client, projectId, artifactId, source
 		});
 		if (!response.ok) throw new Error(`Source blob upload failed (${response.status})`);
 	}));
-	await client.artifacts.uploadManifest(projectId, artifactId, {
-		files: source.files.map((file) => ({
-			path: file.path,
-			hash: file.hash
-		})),
-		resources: source.resources
-	});
+	await client.artifacts.uploadManifest(projectId, artifactId, { files: source.files.map((file) => ({
+		path: file.path,
+		hash: file.hash
+	})) });
 }
 async function sleep(ms) {
 	await new Promise((resolve) => {
@@ -9594,16 +7980,20 @@ async function runDeploy(options) {
 	const root = resolveProjectRoot(options.dir);
 	const config = createCliConfig();
 	const client = createCliPlatformClient(config);
+	let source;
 	if (!options.skipBuild) {
-		const { buildApp } = await import("./dist-uZuvgIVp.mjs");
-		await buildApp({ root });
-	}
+		const { buildApp } = await import("./dist-QMg0gSzo.mjs");
+		source = { files: (await buildApp({
+			root,
+			collectSources: true,
+			emitManifest: true
+		})).sourceFiles };
+	} else source = collectProjectSource(root);
 	const archive = packProjectArtifact(root);
 	let active = await client.organizations.getActive();
 	if (!active) active = await selectActiveOrganization(config);
 	client.setActiveOrganizationId(active.organization.id);
 	const project = await client.projects.get(options.projectId);
-	const source = collectProjectSource(root);
 	const created = await client.artifacts.create(project.id);
 	const uploadPromise = fetch(created.uploadUrl, {
 		method: "PUT",
@@ -9692,7 +8082,7 @@ function runtimeChildEnv(parentEnv, overrides) {
 //#region src/project/bootstrap-run.ts
 /** Node args + env for `@keystrokehq/build` bootstrap (shared by start + dev). */
 async function resolveBootstrapRun(options) {
-	const { resolveRuntimeBuildArtifact } = await import("./dist-uZuvgIVp.mjs");
+	const { resolveRuntimeBuildArtifact } = await import("./dist-QMg0gSzo.mjs");
 	const loader = pathToFileURL(resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/runtime-loader.mjs")).href;
 	const bootstrap = resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/bootstrap.mjs");
 	const args = [`--import=${loader}`];
@@ -9842,7 +8232,7 @@ async function runDev(options) {
 	process.on("SIGINT", shutdown);
 	process.on("SIGTERM", shutdown);
 	try {
-		const { watchApp } = await import("./dist-uZuvgIVp.mjs");
+		const { watchApp } = await import("./dist-QMg0gSzo.mjs");
 		await watchApp({
 			root,
 			clean: false,
@@ -10380,7 +8770,7 @@ async function runStart(options) {
 	const apiPort = Number(new URL(serverUrl).port || 80);
 	const runtimeNodeModules = resolveCliRuntimeNodeModules(resolveCliRoot(import.meta.url));
 	ensureNativeDeps(runtimeNodeModules);
-	const { buildApp } = await import("./dist-uZuvgIVp.mjs");
+	const { buildApp } = await import("./dist-QMg0gSzo.mjs");
 	await buildApp({
 		root,
 		clean: false
@@ -10473,6 +8863,18 @@ function registerTriggerCommand(program) {
 	registerTriggerRunsCommand(trigger);
 }
 //#endregion
+//#region src/commands/workflow/list.ts
+function registerWorkflowListCommand(workflow) {
+	workflow.command("list").description("List workflows in the active organization").action(() => runCliCommand("List workflows failed", async () => {
+		const config = createCliConfig();
+		const client = createCliPlatformClient(config);
+		await ensureActiveOrganization(config);
+		const projectId = await resolveActiveProjectId(config);
+		const result = await client.workflows.list(projectId ? { projectId } : void 0);
+		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+	}, void 0, { orgScoped: true }));
+}
+//#endregion
 //#region src/commands/workflow/run.ts
 function registerWorkflowRunCommand(workflow) {
 	workflow.command("run").description("Invoke a workflow").argument("<workflowId>", "Workflow key / route id").option("--input <json>", "JSON request body (defaults to {})", "{}").addHelpText("after", `
@@ -10511,6 +8913,7 @@ function registerWorkflowRunsCommand(workflow) {
 //#region src/commands/workflow/index.ts
 function registerWorkflowCommand(program) {
 	const workflow = program.command("workflow").description("Invoke and inspect workflows");
+	registerWorkflowListCommand(workflow);
 	registerWorkflowRunCommand(workflow);
 	registerWorkflowRunsCommand(workflow);
 }
@@ -10584,6 +8987,18 @@ function registerConfigCommand(program) {
 	});
 }
 //#endregion
+//#region src/commands/skill/index.ts
+function registerSkillCommand(program) {
+	program.command("skill").description("Inspect platform skills").command("list").description("List skills in the active organization").action(() => runCliCommand("List skills failed", async () => {
+		const config = createCliConfig();
+		const client = createCliPlatformClient(config);
+		await ensureActiveOrganization(config);
+		const projectId = await resolveActiveProjectId(config);
+		const result = await client.skills.list(projectId ? { projectId } : void 0);
+		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+	}, void 0, { orgScoped: true }));
+}
+//#endregion
 //#region src/commands/skills.ts
 function registerSkillsCommand(program) {
 	program.command("skills").description("Manage bundled agent skills").command("sync").description("Overwrite bundled skills and AGENTS.md with the CLI version").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
@@ -10664,6 +9079,7 @@ function createProgram() {
 	registerHealthCommand(program);
 	registerInitCommand(program);
 	registerSkillsCommand(program);
+	registerSkillCommand(program);
 	registerBuildCommand(program);
 	registerDeployCommand(program);
 	registerDevCommand(program);