@keystrokehq/cli 0.0.147 → 0.0.148

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as ROUTE_MANIFEST_REL_PATH, A as ListOrganizationMembersResponseSchema, B as PresignOrgLogoRequestSchema, C as HistoryRunCancelResponseSchema, Ct as WorkflowSummaryListResponseSchema, D as InviteOrganizationMembersRequestSchema, Dt as parseErrorResponse, E as HistoryRunListResponseSchema, Et as originFromPublicUrl, F as ListProjectsResponseSchema, G as PresignUserAvatarResponseSchema, H as PresignProjectSourceRequestSchema, I as OrganizationSidebarBrandingPatchSchema, J as ProjectSlugAvailabilityResponseSchema, K as ProjectReachabilityResponseSchema, L as OrganizationSidebarBrandingSchema, M as ListProjectDeploymentsResponseSchema, N as ListProjectFilesResponseSchema, O as InviteOrganizationMembersResponseSchema, P as ListProjectMetricsResponseSchema, Q as QueuedRunResponseSchema, R as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, S as HealthResponseSchema, St as WorkflowSummaryDetailResponseSchema, T as HistoryRunListQuerySchema, U as PresignProjectSourceResponseSchema, V as PresignOrgLogoResponseSchema, W as PresignUserAvatarRequestSchema, X as PromptResponseSchema, Y as PromptInputSchema, Z as QueuedAgentPromptResponseSchema, _ as CredentialInstanceListResponseSchema, _t as UserAvatarSchema, a as AgentSessionListResponseSchema, at as TriggerListResponseSchema, b as ErrorResponseSchema, bt as WorkflowRunDetailResponseSchema, c as CompleteProjectArtifactResponseSchema, ct as UpdateCredentialInstanceBodySchema, d as CreateCredentialInstanceBodySchema, dt as UpdateOrganizationRequestSchema, et as RecentResourceListResponseSchema, f as CreateOrganizationRequestSchema, ft as UpdateProjectRequestSchema, g as CreateProjectResponseSchema, gt as UserAvatarPatchSchema, h as CreateProjectRequestSchema, ht as UpsertGatewayAttachmentBodySchema, i as AgentSessionDetailResponseSchema, it as TriggerDetailResponseSchema, j as ListOrganizationsResponseSchema, k as ListOrganizationInvitationsResponseSchema, l as ConnectAuthorizeUrlResponseSchema, lt as UpdateOrganizationMemberRequestSchema, m as CreateProjectArtifactResponseSchema, mt as UploadProjectSourceResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nt as SkillSummaryListResponseSchema, o as AgentSummaryDetailResponseSchema, ot as TriggerRunDetailResponseSchema, p as CreateOrganizationResponseSchema, pt as UploadProjectSourceManifestRequestSchema, q as ProjectResponseSchema, r as ActiveOrganizationResponseSchema, rt as SlugAvailabilityResponseSchema, s as AgentSummaryListResponseSchema, st as TriggerRunListResponseSchema, t as ACTIVE_ORG_HEADER, tt as SkillSummaryDetailResponseSchema, u as ConnectProvidersResponseSchema, ut as UpdateOrganizationMemberResponseSchema, v as CredentialInstanceRecordSchema, vt as UserPreferencesPatchSchema, w as HistoryRunDetailResponseSchema, wt as listenPortFromPublicUrl, x as GatewayAttachmentRecordSchema, xt as WorkflowRunListResponseSchema, y as DeclineOrganizationInvitationResponseSchema, yt as UserPreferencesSchema, z as PollRunResponseSchema } from "./dist-RyUAxTtn.mjs";
+import { $ as ProjectSlugAvailabilityResponseSchema, A as InviteOrganizationMembersRequestSchema, At as WorkflowSummaryDetailResponseSchema, B as ListProjectsResponseSchema, C as GatewayAttachmentRecordSchema, Ct as UpsertGatewayAttachmentBodySchema, D as HistoryRunDetailResponseSchema, Dt as UserPreferencesSchema, E as HistoryRunCancelResponseSchema, Et as UserPreferencesPatchSchema, F as ListOrganizationMembersResponseSchema, Ft as parseErrorResponse, G as PresignOrgLogoRequestSchema, H as OrganizationSidebarBrandingSchema, I as ListOrganizationsResponseSchema, J as PresignProjectSourceResponseSchema, K as PresignOrgLogoResponseSchema, L as ListProjectDeploymentsResponseSchema, M as ListAppsResponseSchema, Mt as listenPortFromPublicUrl, N as ListCredentialsResponseSchema, O as HistoryRunListQuerySchema, Ot as WorkflowRunDetailResponseSchema, P as ListOrganizationInvitationsResponseSchema, Pt as originFromPublicUrl, Q as ProjectResponseSchema, R as ListProjectFilesResponseSchema, S as ErrorResponseSchema, St as UploadProjectSourceResponseSchema, T as HealthResponseSchema, Tt as UserAvatarSchema, U as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, V as OrganizationSidebarBrandingPatchSchema, W as PollRunResponseSchema, X as PresignUserAvatarResponseSchema, Y as PresignUserAvatarRequestSchema, Z as ProjectReachabilityResponseSchema, _ as CreateProjectRequestSchema, _t as UpdateOrganizationMemberRequestSchema, a as AgentSessionListResponseSchema, at as RecentResourceListResponseSchema, b as CredentialInstanceRecordSchema, bt as UpdateProjectRequestSchema, c as CompleteProjectArtifactResponseSchema, ct as SlugAvailabilityResponseSchema, d as CreateCredentialInstanceBodySchema, dt as TriggerDetailResponseSchema, et as PromptInputSchema, f as CreateCredentialsRequestSchema, ft as TriggerListResponseSchema, g as CreateProjectArtifactResponseSchema, gt as UpdateCredentialRequestSchema, h as CreateOrganizationResponseSchema, ht as UpdateCredentialInstanceBodySchema, i as AgentSessionDetailResponseSchema, it as ROUTE_MANIFEST_REL_PATH, j as InviteOrganizationMembersResponseSchema, jt as WorkflowSummaryListResponseSchema, k as HistoryRunListResponseSchema, kt as WorkflowRunListResponseSchema, l as ConnectAuthorizeUrlResponseSchema, lt as StartOAuthConnectionInputSchema, m as CreateOrganizationRequestSchema, mt as TriggerRunListResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nt as QueuedAgentPromptResponseSchema, o as AgentSummaryDetailResponseSchema, ot as SkillSummaryDetailResponseSchema, p as CreateCredentialsResponseSchema, pt as TriggerRunDetailResponseSchema, q as PresignProjectSourceRequestSchema, r as ActiveOrganizationResponseSchema, rt as QueuedRunResponseSchema, s as AgentSummaryListResponseSchema, st as SkillSummaryListResponseSchema, t as ACTIVE_ORG_HEADER, tt as PromptResponseSchema, u as ConnectProvidersResponseSchema, ut as StartOAuthConnectionResultSchema, v as CreateProjectResponseSchema, vt as UpdateOrganizationMemberResponseSchema, w as GetCredentialResponseSchema, wt as UserAvatarPatchSchema, x as DeclineOrganizationInvitationResponseSchema, xt as UploadProjectSourceManifestRequestSchema, y as CredentialInstanceListResponseSchema, yt as UpdateOrganizationRequestSchema, z as ListProjectMetricsResponseSchema } from "./dist-B61CtbIr.mjs";
 import { t as walkProject } from "./walk-project-171B4cvO-DJy3qZKd.mjs";
 import { a as installPlaygroundDependencies, i as installDependencies, n as buildPlaygroundWorkspace, o as resolvePackageManager, s as resolveCliRoot, t as readCliVersion } from "./version-DESgLEkE.mjs";
 import { createRequire } from "node:module";
@@ -3879,1382 +3879,121 @@ function createInvitationsResource(http) {
 		}
 	};
 }
-function createMembersResource$1(http) {
+function buildOAuthAuthorizeSearchParams(input) {
+	const params = {};
+	const scopes = input.scopes ?? [];
+	if (scopes.length > 0) params.scopes = scopes.join(",");
+	const projectIds = input.projectIds ?? [];
+	if (projectIds.length > 0) params.projectIds = projectIds.join(",");
+	if (input.createOrganizationCredential) params.org = "true";
+	if (input.createUserProvidedCredential) params.user = "true";
+	return params;
+}
+function createCredentialsResource(http) {
 	return {
-		async listOrganizationMembers() {
+		async list() {
 			try {
-				const data = await http.get("/api/members").json();
-				return ListOrganizationMembersResponseSchema.parse(data).members;
+				const data = await http.get("/api/credentials").json();
+				return ListCredentialsResponseSchema.parse(data).credentials;
 			} catch (error) {
 				throw await toPlatformError(error);
 			}
 		},
-		async inviteOrganizationMembers(input) {
-			const body = InviteOrganizationMembersRequestSchema.parse(input);
+		async get(credentialId) {
 			try {
-				const data = await http.post("/api/members/invitations", { json: body }).json();
-				return InviteOrganizationMembersResponseSchema.parse(data);
+				const data = await http.get(`/api/credentials/${encodeURIComponent(credentialId)}`).json();
+				return GetCredentialResponseSchema.parse(data).credential;
 			} catch (error) {
 				throw await toPlatformError(error);
 			}
 		},
-		async updateOrganizationMember(userId, input) {
-			const body = UpdateOrganizationMemberRequestSchema.parse(input);
+		async create(input) {
+			const body = CreateCredentialsRequestSchema.parse(input);
 			try {
-				const data = await http.patch(`/api/members/${encodeURIComponent(userId)}`, { json: body }).json();
-				return UpdateOrganizationMemberResponseSchema.parse(data).member;
+				const data = await http.post("/api/credentials", { json: body }).json();
+				return CreateCredentialsResponseSchema.parse(data).credentials;
 			} catch (error) {
 				throw await toPlatformError(error);
 			}
 		},
-		async removeOrganizationMember(userId) {
+		async update(credentialId, patch) {
+			const body = UpdateCredentialRequestSchema.parse(patch);
 			try {
-				await http.delete(`/api/members/${encodeURIComponent(userId)}`);
+				const data = await http.patch(`/api/credentials/${encodeURIComponent(credentialId)}`, { json: body }).json();
+				return GetCredentialResponseSchema.parse(data).credential;
 			} catch (error) {
 				throw await toPlatformError(error);
 			}
-		}
-	};
-}
-const APP_CATALOG_BASE = [
-	{
-		id: "app-gmail",
-		name: "Gmail",
-		description: "Email trigger and delivery integration.",
-		category: "Communication"
-	},
-	{
-		id: "app-slack",
-		name: "Slack",
-		description: "Post messages and handle approvals via Slack channels.",
-		category: "Communication"
-	},
-	{
-		id: "app-github",
-		name: "GitHub",
-		description: "React to repo events and manage pull requests.",
-		category: "Development"
-	},
-	{
-		id: "app-anthropic",
-		name: "Anthropic",
-		description: "Claude models for agent and workflow AI steps.",
-		category: "AI"
-	},
-	{
-		id: "app-attio",
-		name: "Attio",
-		description: "CRM operations for deals, contacts, and notes.",
-		category: "CRM"
-	},
-	{
-		id: "app-openai",
-		name: "OpenAI",
-		description: "GPT models and embeddings for AI-powered steps.",
-		category: "AI"
-	},
-	{
-		id: "app-airtable",
-		name: "Airtable",
-		description: "Read and write records in Airtable bases.",
-		category: "Data"
-	},
-	{
-		id: "app-google-sheets",
-		name: "Google Sheets",
-		description: "Read, update, and append rows in spreadsheets.",
-		category: "Data"
-	},
-	{
-		id: "app-google-drive",
-		name: "Google Drive",
-		description: "Find, read, and organize files across shared drives.",
-		category: "Productivity"
-	},
-	{
-		id: "app-google-calendar",
-		name: "Google Calendar",
-		description: "Create events, check availability, and coordinate meetings.",
-		category: "Productivity"
-	},
-	{
-		id: "app-notion",
-		name: "Notion",
-		description: "Query databases, create pages, and update workspace docs.",
-		category: "Productivity"
-	},
-	{
-		id: "app-linear",
-		name: "Linear",
-		description: "Create issues, update triage queues, and comment on work.",
-		category: "Development"
-	},
-	{
-		id: "app-jira",
-		name: "Jira",
-		description: "Sync issues, transitions, comments, and project fields.",
-		category: "Development"
-	},
-	{
-		id: "app-asana",
-		name: "Asana",
-		description: "Create tasks, update projects, and track team work.",
-		category: "Project Management"
-	},
-	{
-		id: "app-trello",
-		name: "Trello",
-		description: "Move cards, update boards, and automate checklist work.",
-		category: "Project Management"
-	},
-	{
-		id: "app-clickup",
-		name: "ClickUp",
-		description: "Manage tasks, docs, custom fields, and workspace automations.",
-		category: "Project Management"
-	},
-	{
-		id: "app-monday",
-		name: "monday.com",
-		description: "Automate boards, items, updates, and team workflows.",
-		category: "Project Management"
-	},
-	{
-		id: "app-discord",
-		name: "Discord",
-		description: "Post updates, listen for commands, and manage communities.",
-		category: "Communication"
-	},
-	{
-		id: "app-microsoft-teams",
-		name: "Microsoft Teams",
-		description: "Send messages, route approvals, and coordinate team channels.",
-		category: "Communication"
-	},
-	{
-		id: "app-google-chat",
-		name: "Google Chat",
-		description: "Send messages and surface agent responses in Google Chat.",
-		category: "Communication"
-	},
-	{
-		id: "app-telegram",
-		name: "Telegram",
-		description: "Send bot messages and respond to chats and groups.",
-		category: "Communication"
-	},
-	{
-		id: "app-whatsapp",
-		name: "WhatsApp",
-		description: "Send WhatsApp messages and respond to customer threads.",
-		category: "Communication"
-	},
-	{
-		id: "app-hubspot",
-		name: "HubSpot",
-		description: "Manage contacts, companies, deals, tickets, and timelines.",
-		category: "CRM"
-	},
-	{
-		id: "app-salesforce",
-		name: "Salesforce",
-		description: "Read and update leads, accounts, opportunities, and cases.",
-		category: "CRM"
-	},
-	{
-		id: "app-pipedrive",
-		name: "Pipedrive",
-		description: "Move deals, update contacts, and automate sales pipelines.",
-		category: "CRM"
-	},
-	{
-		id: "app-intercom",
-		name: "Intercom",
-		description: "Route conversations, update users, and summarize support.",
-		category: "Support"
-	},
-	{
-		id: "app-zendesk",
-		name: "Zendesk",
-		description: "Create tickets, reply to customers, and sync support context.",
-		category: "Support"
-	},
-	{
-		id: "app-freshdesk",
-		name: "Freshdesk",
-		description: "Automate ticket routing, replies, and customer updates.",
-		category: "Support"
-	},
-	{
-		id: "app-front",
-		name: "Front",
-		description: "Manage shared inboxes, comments, tags, and customer replies.",
-		category: "Support"
-	},
-	{
-		id: "app-stripe",
-		name: "Stripe",
-		description: "React to payments, manage customers, and reconcile billing.",
-		category: "Finance"
-	},
-	{
-		id: "app-quickbooks",
-		name: "QuickBooks",
-		description: "Create invoices, sync customers, and reconcile accounting data.",
-		category: "Finance"
-	},
-	{
-		id: "app-xero",
-		name: "Xero",
-		description: "Automate invoices, contacts, bills, and accounting workflows.",
-		category: "Finance"
-	},
-	{
-		id: "app-shopify",
-		name: "Shopify",
-		description: "Process orders, update products, and coordinate fulfillment.",
-		category: "Commerce"
-	},
-	{
-		id: "app-woocommerce",
-		name: "WooCommerce",
-		description: "Sync orders, customers, products, and storefront events.",
-		category: "Commerce"
-	},
-	{
-		id: "app-webflow",
-		name: "Webflow",
-		description: "Publish CMS items, update site content, and trigger workflows.",
-		category: "Marketing"
-	},
-	{
-		id: "app-mailchimp",
-		name: "Mailchimp",
-		description: "Manage audiences, campaigns, tags, and email automations.",
-		category: "Marketing"
-	},
-	{
-		id: "app-sendgrid",
-		name: "SendGrid",
-		description: "Send transactional email and react to delivery events.",
-		category: "Marketing"
-	},
-	{
-		id: "app-typeform",
-		name: "Typeform",
-		description: "Capture form responses and enrich follow-up workflows.",
-		category: "Forms"
-	},
-	{
-		id: "app-surveymonkey",
-		name: "SurveyMonkey",
-		description: "Collect survey responses and sync insights into workflows.",
-		category: "Forms"
-	},
-	{
-		id: "app-calendly",
-		name: "Calendly",
-		description: "React to bookings, cancellations, and scheduling updates.",
-		category: "Productivity"
-	},
-	{
-		id: "app-docusign",
-		name: "DocuSign",
-		description: "Send envelopes, track signatures, and file completed agreements.",
-		category: "Documents"
-	},
-	{
-		id: "app-dropbox",
-		name: "Dropbox",
-		description: "Read files, upload assets, and organize shared folders.",
-		category: "Files"
-	},
-	{
-		id: "app-box",
-		name: "Box",
-		description: "Search enterprise files, update folders, and manage documents.",
-		category: "Files"
-	},
-	{
-		id: "app-figma",
-		name: "Figma",
-		description: "Inspect designs, sync comments, and coordinate design handoffs.",
-		category: "Design"
-	},
-	{
-		id: "app-canva",
-		name: "Canva",
-		description: "Create design assets and automate content production.",
-		category: "Design"
-	},
-	{
-		id: "app-sentry",
-		name: "Sentry",
-		description: "Triage errors, summarize issues, and route incidents.",
-		category: "Observability"
-	},
-	{
-		id: "app-datadog",
-		name: "Datadog",
-		description: "Query metrics, inspect monitors, and coordinate incidents.",
-		category: "Observability"
-	},
-	{
-		id: "app-pagerduty",
-		name: "PagerDuty",
-		description: "Create incidents, page responders, and automate escalations.",
-		category: "Observability"
-	},
-	{
-		id: "app-gitlab",
-		name: "GitLab",
-		description: "Manage merge requests, issues, pipelines, and repositories.",
-		category: "Development"
-	},
-	{
-		id: "app-bitbucket",
-		name: "Bitbucket",
-		description: "Automate pull requests, branches, and repository workflows.",
-		category: "Development"
-	},
-	{
-		id: "app-vercel",
-		name: "Vercel",
-		description: "Track deployments, manage projects, and react to build events.",
-		category: "Development"
-	},
-	{
-		id: "app-netlify",
-		name: "Netlify",
-		description: "Automate deploys, forms, sites, and build notifications.",
-		category: "Development"
-	},
-	{
-		id: "app-supabase",
-		name: "Supabase",
-		description: "Query databases, manage auth, and automate backend workflows.",
-		category: "Data"
-	},
-	{
-		id: "app-postgres",
-		name: "Postgres",
-		description: "Run SQL queries and sync structured data from Postgres.",
-		category: "Data"
-	},
-	{
-		id: "app-snowflake",
-		name: "Snowflake",
-		description: "Query warehouse data and automate analytics workflows.",
-		category: "Data"
-	},
-	{
-		id: "app-databricks",
-		name: "Databricks",
-		description: "Run jobs, query lakehouse data, and coordinate pipelines.",
-		category: "Data"
-	},
-	{
-		id: "app-segment",
-		name: "Segment",
-		description: "Route customer events and enrich downstream automations.",
-		category: "Data"
-	},
-	{
-		id: "app-twilio",
-		name: "Twilio",
-		description: "Send SMS, manage calls, and coordinate customer notifications.",
-		category: "Communication"
-	},
-	{
-		id: "app-zoom",
-		name: "Zoom",
-		description: "Schedule meetings, manage recordings, and notify attendees.",
-		category: "Communication"
-	},
-	{
-		id: "app-loom",
-		name: "Loom",
-		description: "Create video handoffs, summarize recordings, and share updates.",
-		category: "Communication"
-	},
-	{
-		id: "app-miro",
-		name: "Miro",
-		description: "Create boards, sync cards, and coordinate visual planning.",
-		category: "Productivity"
-	},
-	{
-		id: "app-coda",
-		name: "Coda",
-		description: "Update docs, tables, packs, and team operating workflows.",
-		category: "Productivity"
-	},
-	{
-		id: "app-confluence",
-		name: "Confluence",
-		description: "Search knowledge bases and create or update documentation.",
-		category: "Productivity"
-	},
-	{
-		id: "app-aws",
-		name: "AWS",
-		description: "Coordinate cloud resources, events, queues, and infrastructure.",
-		category: "Infrastructure"
-	},
-	{
-		id: "app-google-cloud",
-		name: "Google Cloud",
-		description: "Manage cloud jobs, storage, Pub/Sub, and deployment workflows.",
-		category: "Infrastructure"
-	},
-	{
-		id: "app-azure",
-		name: "Azure",
-		description: "Automate Azure resources, queues, deployments, and identities.",
-		category: "Infrastructure"
-	},
-	{
-		id: "app-cloudflare",
-		name: "Cloudflare",
-		description: "Manage DNS, Workers, Pages, queues, and edge automations.",
-		category: "Infrastructure"
-	},
-	{
-		id: "app-docker",
-		name: "Docker",
-		description: "Coordinate images, registries, builds, and deployment events.",
-		category: "Infrastructure"
-	},
-	{
-		id: "app-kubernetes",
-		name: "Kubernetes",
-		description: "Inspect clusters, trigger jobs, and automate operations.",
-		category: "Infrastructure"
-	},
-	{
-		id: "app-algolia",
-		name: "Algolia",
-		description: "Sync search indexes and automate content discovery workflows.",
-		category: "Data"
-	},
-	{
-		id: "app-elasticsearch",
-		name: "Elasticsearch",
-		description: "Query search clusters and automate log or document workflows.",
-		category: "Data"
-	},
-	{
-		id: "app-redis",
-		name: "Redis",
-		description: "Read cache data, coordinate queues, and manage realtime state.",
-		category: "Data"
-	},
-	{
-		id: "app-pinecone",
-		name: "Pinecone",
-		description: "Manage vector indexes and power retrieval workflows.",
-		category: "AI"
-	},
-	{
-		id: "app-plaid",
-		name: "Plaid",
-		description: "Connect financial accounts and automate banking data flows.",
-		category: "Finance"
-	},
-	{
-		id: "app-brex",
-		name: "Brex",
-		description: "Sync expenses, cards, reimbursements, and finance approvals.",
-		category: "Finance"
-	},
-	{
-		id: "app-mercury",
-		name: "Mercury",
-		description: "Automate banking workflows, transactions, and treasury tasks.",
-		category: "Finance"
-	},
-	{
-		id: "app-elevenlabs",
-		name: "ElevenLabs",
-		description: "Generate speech, transcribe audio, and automate voice agents.",
-		category: "AI"
-	},
-	{
-		id: "app-perplexity",
-		name: "Perplexity",
-		description: "Search the web with citations and grounded AI answers.",
-		category: "AI"
-	},
-	{
-		id: "app-gemini",
-		name: "Gemini",
-		description: "Use Google AI models for generation, analysis, and reasoning.",
-		category: "AI"
-	},
-	{
-		id: "app-polymarket",
-		name: "Polymarket",
-		description: "Read market data and automate prediction-market workflows.",
-		category: "Finance"
-	},
-	{
-		id: "app-blacksmith",
-		name: "Blacksmith",
-		description: "Automate CI builds, runners, and developer infrastructure.",
-		category: "Development"
-	},
-	{
-		id: "app-deel",
-		name: "Deel",
-		description: "Sync employee, contractor, payroll, and HR workflows.",
-		category: "HR"
-	},
-	{
-		id: "app-doordash",
-		name: "DoorDash",
-		description: "Coordinate delivery, merchant, and logistics workflows.",
-		category: "Commerce"
-	},
-	{
-		id: "app-dub",
-		name: "Dub",
-		description: "Manage short links, attribution, and campaign routing.",
-		category: "Marketing"
-	},
-	{
-		id: "app-exa",
-		name: "Exa",
-		description: "Search the web and retrieve AI-ready research results.",
-		category: "AI"
-	},
-	{
-		id: "app-firecrawl",
-		name: "Firecrawl",
-		description: "Crawl sites, extract structured data, and power research agents.",
-		category: "Search"
-	},
-	{
-		id: "app-granola",
-		name: "Granola",
-		description: "Sync meeting notes, summaries, and follow-up workflows.",
-		category: "Productivity"
-	},
-	{
-		id: "app-gusto",
-		name: "Gusto",
-		description: "Automate payroll, benefits, and HR operations.",
-		category: "HR"
-	},
-	{
-		id: "app-hex",
-		name: "Hex",
-		description: "Run analytics workflows, notebooks, and data apps.",
-		category: "Data"
-	},
-	{
-		id: "app-instacart",
-		name: "Instacart",
-		description: "Coordinate grocery commerce, orders, and fulfillment workflows.",
-		category: "Commerce"
-	},
-	{
-		id: "app-kalshi",
-		name: "Kalshi",
-		description: "Read event markets and automate prediction-market workflows.",
-		category: "Finance"
-	},
-	{
-		id: "app-omni",
-		name: "Omni",
-		description: "Query business intelligence models and automate analytics workflows.",
-		category: "Data"
-	},
-	{
-		id: "app-parallel",
-		name: "Parallel",
-		description: "Run AI research, enrichment, and web task workflows.",
-		category: "AI"
-	},
-	{
-		id: "app-planetscale",
-		name: "PlanetScale",
-		description: "Manage MySQL databases, branches, and deploy requests.",
-		category: "Data"
-	},
-	{
-		id: "app-porter",
-		name: "Porter",
-		description: "Coordinate cloud deployments and application infrastructure.",
-		category: "Development"
-	},
-	{
-		id: "app-puzzle",
-		name: "Puzzle",
-		description: "Automate accounting workflows, books, and finance operations.",
-		category: "Finance"
-	},
-	{
-		id: "app-pylon",
-		name: "Pylon",
-		description: "Manage B2B support conversations and customer workflows.",
-		category: "Support"
-	},
-	{
-		id: "app-ramp",
-		name: "Ramp",
-		description: "Sync spend, expenses, approvals, and finance workflows.",
-		category: "Finance"
-	},
-	{
-		id: "app-reducto",
-		name: "Reducto",
-		description: "Extract structured data from complex documents.",
-		category: "Documents"
-	},
-	{
-		id: "app-resend",
-		name: "Resend",
-		description: "Send product email and react to delivery events.",
-		category: "Marketing"
-	},
-	{
-		id: "app-rippling",
-		name: "Rippling",
-		description: "Automate employee, device, payroll, and HR workflows.",
-		category: "HR"
-	},
-	{
-		id: "app-streak",
-		name: "Streak",
-		description: "Manage Gmail-native CRM pipelines and contact workflows.",
-		category: "CRM"
-	},
-	{
-		id: "app-warp",
-		name: "Warp",
-		description: "Coordinate terminal, developer environment, and AI coding workflows.",
-		category: "Development"
-	},
-	{
-		id: "app-apollo",
-		name: "Apollo",
-		description: "Sync sales intelligence, prospecting, and enrichment workflows.",
-		category: "CRM"
-	},
-	{
-		id: "app-cal-com",
-		name: "Cal.com",
-		description: "Automate scheduling, bookings, availability, and routing workflows.",
-		category: "Productivity"
-	},
-	{
-		id: "app-cerebras",
-		name: "Cerebras",
-		description: "Use fast AI inference for model-powered workflow steps.",
-		category: "AI"
-	},
-	{
-		id: "app-chargebee",
-		name: "Chargebee",
-		description: "Automate subscription billing, customers, invoices, and revenue workflows.",
-		category: "Finance"
-	},
-	{
-		id: "app-deepseek",
-		name: "DeepSeek",
-		description: "Use DeepSeek models for generation, reasoning, and analysis.",
-		category: "AI"
-	},
-	{
-		id: "app-gong",
-		name: "Gong",
-		description: "Sync revenue conversations, account insights, and sales follow-up workflows.",
-		category: "CRM"
-	},
-	{
-		id: "app-google-contacts",
-		name: "Google Contacts",
-		description: "Read and update contact records across Google Workspace.",
-		category: "Productivity"
-	},
-	{
-		id: "app-google-docs",
-		name: "Google Docs",
-		description: "Create, read, and update collaborative documents.",
-		category: "Documents"
-	},
-	{
-		id: "app-google-forms",
-		name: "Google Forms",
-		description: "Capture form responses and turn submissions into automated work.",
-		category: "Forms"
-	},
-	{
-		id: "app-google-meet",
-		name: "Google Meet",
-		description: "Coordinate meetings, recordings, and video collaboration workflows.",
-		category: "Communication"
-	},
-	{
-		id: "app-google-slides",
-		name: "Google Slides",
-		description: "Create and update presentations from workflow outputs.",
-		category: "Documents"
-	},
-	{
-		id: "app-google-tasks",
-		name: "Google Tasks",
-		description: "Create tasks, update lists, and coordinate personal work queues.",
-		category: "Productivity"
-	},
-	{
-		id: "app-greenhouse",
-		name: "Greenhouse",
-		description: "Automate candidate, job, and interview coordination workflows.",
-		category: "HR"
-	},
-	{
-		id: "app-groq",
-		name: "Groq",
-		description: "Use low-latency AI inference in agents and workflows.",
-		category: "AI"
-	},
-	{
-		id: "app-help-scout",
-		name: "Help Scout",
-		description: "Manage customer conversations, mailboxes, and support workflows.",
-		category: "Support"
-	},
-	{
-		id: "app-linkedin",
-		name: "LinkedIn",
-		description: "Coordinate professional network, recruiting, and social workflows.",
-		category: "CRM"
-	},
-	{
-		id: "app-microsoft-excel",
-		name: "Microsoft Excel",
-		description: "Read, update, and append rows in Excel workbooks.",
-		category: "Data"
-	},
-	{
-		id: "app-microsoft-onedrive",
-		name: "Microsoft OneDrive",
-		description: "Find, read, upload, and organize files in OneDrive.",
-		category: "Files"
-	},
-	{
-		id: "app-microsoft-outlook",
-		name: "Microsoft Outlook",
-		description: "Send email, read messages, and coordinate calendar workflows.",
-		category: "Communication"
-	},
-	{
-		id: "app-microsoft-planner",
-		name: "Microsoft Planner",
-		description: "Create tasks, update plans, and coordinate project work.",
-		category: "Project Management"
-	},
-	{
-		id: "app-microsoft-sharepoint",
-		name: "Microsoft SharePoint",
-		description: "Search sites, update lists, and manage shared documents.",
-		category: "Documents"
-	},
-	{
-		id: "app-mistral",
-		name: "Mistral",
-		description: "Use Mistral models for generation, analysis, and AI workflow steps.",
-		category: "AI"
-	},
-	{
-		id: "app-posthog",
-		name: "PostHog",
-		description: "Query product analytics, feature flags, and user behavior signals.",
-		category: "Data"
-	},
-	{
-		id: "app-reddit",
-		name: "Reddit",
-		description: "Monitor communities, posts, and discussion-driven workflows.",
-		category: "Marketing"
-	},
-	{
-		id: "app-square",
-		name: "Square",
-		description: "Automate payments, customers, catalog, and point-of-sale workflows.",
-		category: "Finance"
-	},
-	{
-		id: "app-todoist",
-		name: "Todoist",
-		description: "Create tasks, update projects, and automate personal work queues.",
-		category: "Productivity"
-	},
-	{
-		id: "app-wordpress",
-		name: "WordPress",
-		description: "Publish posts, update pages, and automate site content workflows.",
-		category: "Marketing"
-	},
-	{
-		id: "app-x-twitter",
-		name: "X / Twitter",
-		description: "Monitor posts, publish updates, and coordinate social workflows.",
-		category: "Marketing"
-	},
-	{
-		id: "app-xai",
-		name: "xAI",
-		description: "Use xAI models for generation, analysis, and reasoning steps.",
-		category: "AI"
-	},
-	{
-		id: "app-youtube",
-		name: "YouTube",
-		description: "Manage videos, channels, comments, and creator workflows.",
-		category: "Marketing"
-	}
-];
-const APP_INTEGRATION_DESCRIPTIONS = {
-	"app-gmail": "Connect Gmail so agents can read, draft, send, and organize email as part of a workflow. Use it for customer follow-ups, approval threads, inbound request triage, or any automation where the next step happens in an inbox.",
-	"app-slack": "Connect Slack so agents can post updates, request approvals, and keep work moving from channel conversations. Use it for deployment approvals, triage alerts, support handoffs, or workflows that need a human decision in chat.",
-	"app-github": "Connect GitHub so agents can react to issues, pull requests, commits, and repository events. Use it to automate review follow-ups, update project state, open PRs, or summarize engineering activity without leaving Keystroke.",
-	"app-anthropic": "Connect Anthropic to give workflows and agents access to Claude for reasoning, writing, analysis, and structured generation. Use it when an automation needs judgment, summarization, code understanding, or a safer model step.",
-	"app-attio": "Connect Attio so agents can look up customer context, update CRM records, and keep deal activity current. Use it to enrich leads, prepare account briefs, or write notes back to the relationship record after work happens elsewhere.",
-	"app-openai": "Connect OpenAI to use GPT models, embeddings, and multimodal generation inside agents and workflows. Use it for classification, drafting, extraction, retrieval, and AI steps that need fast general-purpose model coverage.",
-	"app-airtable": "Connect Airtable so workflows can read, create, and update records in the bases your team already uses. Use it for lightweight operations dashboards, intake queues, content calendars, or any structured data that lives outside the product database.",
-	"app-google-sheets": "Connect Google Sheets so agents can inspect spreadsheets, append rows, and keep tabular data up to date. Use it for operational reports, lead lists, reconciliation sheets, or simple automations that still run through a spreadsheet.",
-	"app-google-drive": "Connect Google Drive so agents can find, read, create, and organize files across shared folders. Use it when workflows need source documents, generated exports, meeting artifacts, or project files stored in Drive.",
-	"app-google-calendar": "Connect Google Calendar so agents can check availability, create events, and coordinate schedule changes. Use it for booking follow-ups, launch calendars, interview loops, or workflows that need to reserve time with the right people.",
-	"app-notion": "Connect Notion so agents can search workspace knowledge, update databases, and create pages from completed work. Use it to turn conversations into docs, keep project trackers current, or pull context from team operating notes.",
-	"app-linear": "Connect Linear so agents can create issues, update triage queues, and comment on engineering work. Use it to turn chat decisions into tickets, keep statuses current, or route follow-up tasks to the right project.",
-	"app-jira": "Connect Jira so agents can sync issues, transitions, comments, and project fields with the rest of your automation. Use it for sprint hygiene, release coordination, support escalations, or workflows that need to move work through Jira states.",
-	"app-asana": "Connect Asana so workflows can create tasks, update projects, and keep team work visible. Use it for campaign checklists, launch plans, cross-functional handoffs, or automations that turn decisions into assigned tasks.",
-	"app-trello": "Connect Trello so agents can move cards, update boards, and manage checklist work. Use it for lightweight pipelines, editorial boards, personal task flows, or team processes that are organized around cards.",
-	"app-clickup": "Connect ClickUp so agents can manage tasks, docs, custom fields, and workspace automations. Use it to update complex workspaces, coordinate owners, or keep custom project metadata in sync with the rest of your tools.",
-	"app-monday": "Connect monday.com so agents can update boards, create items, and automate team workflow changes. Use it for operations trackers, handoff boards, campaign production, or any process your team runs through monday.com.",
-	"app-discord": "Connect Discord so agents can post updates, listen for commands, and respond inside communities or private servers. Use it for developer communities, customer groups, incident rooms, or lightweight command-driven workflows.",
-	"app-microsoft-teams": "Connect Microsoft Teams so agents can send messages, coordinate approvals, and keep work moving in team channels. Use it for enterprise handoffs, meeting follow-ups, internal notifications, or workflows that need to meet users where they collaborate.",
-	"app-google-chat": "Connect Google Chat so agents can send updates and surface workflow responses in spaces or direct messages. Use it for Workspace-native notifications, team approvals, status pings, or lightweight chat commands.",
-	"app-telegram": "Connect Telegram so agents can send bot messages and respond to chats or groups. Use it for community operations, alerts, personal workflows, or automations that need fast mobile-friendly messaging.",
-	"app-whatsapp": "Connect WhatsApp so agents can send customer messages and respond to conversation threads. Use it for support follow-ups, appointment reminders, sales handoffs, or any workflow where customers already expect WhatsApp updates.",
-	"app-hubspot": "Connect HubSpot so agents can manage contacts, companies, deals, tickets, and timelines. Use it to enrich CRM records, log customer activity, trigger sales follow-ups, or keep marketing and success workflows aligned.",
-	"app-salesforce": "Connect Salesforce so workflows can read and update leads, accounts, opportunities, and cases. Use it for account research, sales operations, support escalation, or automations that need Salesforce to remain the source of truth.",
-	"app-pipedrive": "Connect Pipedrive so agents can move deals, update contacts, and automate sales pipeline work. Use it for lead routing, next-step reminders, pipeline cleanup, or follow-ups triggered by activity in other systems.",
-	"app-intercom": "Connect Intercom so agents can route conversations, update users, and summarize support context. Use it to triage inbound messages, draft replies, escalate issues, or connect customer conversations to product and engineering workflows.",
-	"app-zendesk": "Connect Zendesk so agents can create tickets, reply to customers, and keep support context in sync. Use it for ticket triage, SLA follow-ups, escalation summaries, or workflows that turn support signals into action.",
-	"app-freshdesk": "Connect Freshdesk so workflows can route tickets, draft replies, and update customer records. Use it to automate support queues, enrich tickets with external context, or make sure resolution steps are captured consistently.",
-	"app-front": "Connect Front so agents can work with shared inboxes, internal comments, tags, and customer replies. Use it for support or success teams that coordinate from email but need automation to keep the thread moving.",
-	"app-stripe": "Connect Stripe so agents can react to payments, manage customers, and reconcile billing events. Use it for revenue alerts, failed payment follow-ups, invoice workflows, or customer lifecycle automation tied to billing state.",
-	"app-quickbooks": "Connect QuickBooks so workflows can create invoices, sync customers, and reconcile accounting data. Use it for finance handoffs, bookkeeping follow-ups, payment checks, or automations that keep operational data aligned with accounting.",
-	"app-xero": "Connect Xero so agents can automate invoices, contacts, bills, and accounting workflows. Use it for finance reviews, customer billing updates, payable tracking, or recurring accounting tasks that should not require manual entry.",
-	"app-shopify": "Connect Shopify so agents can process orders, update products, and coordinate fulfillment work. Use it for ecommerce support, inventory checks, fulfillment exceptions, or automations triggered by store events.",
-	"app-woocommerce": "Connect WooCommerce so workflows can sync orders, customers, products, and storefront events. Use it for store operations, fulfillment coordination, customer follow-ups, or reporting across commerce and support tools.",
-	"app-webflow": "Connect Webflow so agents can publish CMS items, update site content, and react to site events. Use it for marketing pages, content operations, launch checklists, or workflows that turn approved content into live updates.",
-	"app-mailchimp": "Connect Mailchimp so agents can manage audiences, campaigns, tags, and email automations. Use it for lifecycle marketing, list hygiene, campaign follow-ups, or workflows that connect product events to audience segments.",
-	"app-sendgrid": "Connect SendGrid so workflows can send transactional email and react to delivery events. Use it for notifications, receipts, onboarding messages, or automations that need reliable email delivery and bounce handling.",
-	"app-typeform": "Connect Typeform so agents can capture submissions and turn responses into follow-up work. Use it for intake forms, lead qualification, research surveys, or workflows that start when someone submits structured answers.",
-	"app-surveymonkey": "Connect SurveyMonkey so agents can collect responses and move survey insights into the right workflow. Use it for customer research, feedback analysis, NPS follow-up, or reporting loops that begin with survey data.",
-	"app-calendly": "Connect Calendly so agents can react to bookings, cancellations, and scheduling updates. Use it for sales handoffs, interview coordination, onboarding calls, or workflows that need to prepare before or follow up after a meeting.",
-	"app-docusign": "Connect DocuSign so workflows can send envelopes, track signatures, and file completed agreements. Use it for contracts, approvals, onboarding packets, or any process where a signed document should trigger the next step.",
-	"app-dropbox": "Connect Dropbox so agents can read files, upload assets, and organize shared folders. Use it for document intake, generated exports, client deliverables, or workflows that need to move files between teams and systems.",
-	"app-box": "Connect Box so agents can search enterprise files, update folders, and manage documents securely. Use it for governed document workflows, legal handoffs, knowledge retrieval, or file operations that need enterprise storage controls.",
-	"app-figma": "Connect Figma so agents can inspect designs, sync comments, and coordinate design handoffs. Use it to pull design context into implementation work, track feedback, or turn approved mockups into downstream tasks.",
-	"app-canva": "Connect Canva so agents can help create design assets and automate content production. Use it for campaign graphics, social templates, brand asset updates, or workflows where creative requests need repeatable output.",
-	"app-sentry": "Connect Sentry so agents can triage errors, summarize issues, and route incidents from production signals. Use it to turn crash reports into engineering tasks, prepare context for responders, or close the loop after a fix.",
-	"app-datadog": "Connect Datadog so workflows can query metrics, inspect monitors, and coordinate incidents. Use it for alert triage, deployment checks, operational summaries, or automations that need observability context before taking action.",
-	"app-pagerduty": "Connect PagerDuty so agents can create incidents, page responders, and automate escalation steps. Use it for on-call workflows, incident updates, postmortem prep, or routing urgent operational work to the right person.",
-	"app-gitlab": "Connect GitLab so agents can manage merge requests, issues, pipelines, and repositories. Use it for CI follow-ups, release coordination, code review automation, or engineering workflows centered on GitLab projects.",
-	"app-bitbucket": "Connect Bitbucket so workflows can automate pull requests, branches, and repository activity. Use it for review routing, branch hygiene, deployment handoffs, or teams whose source control lives in Atlassian.",
-	"app-vercel": "Connect Vercel so agents can track deployments, inspect projects, and react to build events. Use it for preview checks, release notifications, failed build triage, or workflows that connect product changes to deployment state.",
-	"app-netlify": "Connect Netlify so agents can automate deploys, forms, sites, and build notifications. Use it for static site releases, form-driven workflows, build triage, or marketing site operations tied to deployment events.",
-	"app-supabase": "Connect Supabase so agents can query databases, manage auth context, and automate backend workflows. Use it for operational data checks, admin tasks, user support lookups, or workflows that depend on app data stored in Supabase.",
-	"app-postgres": "Connect Postgres so workflows can run SQL queries and sync structured data from your database. Use it for reports, back-office operations, data enrichment, or automations that need direct access to relational data.",
-	"app-snowflake": "Connect Snowflake so agents can query warehouse data and automate analytics workflows. Use it for reporting, customer segmentation, anomaly checks, or workflows that need trusted business data before acting.",
-	"app-databricks": "Connect Databricks so workflows can run jobs, query lakehouse data, and coordinate data pipelines. Use it for analytics operations, model-adjacent workflows, data quality checks, or pipeline handoffs between teams.",
-	"app-segment": "Connect Segment so agents can route customer events and enrich downstream automations. Use it for lifecycle triggers, audience syncs, event QA, or workflows that begin when product behavior changes.",
-	"app-twilio": "Connect Twilio so agents can send SMS, manage calls, and coordinate customer notifications. Use it for reminders, verification flows, support callbacks, or automations that need to reach people outside email and chat.",
-	"app-zoom": "Connect Zoom so agents can schedule meetings, manage recordings, and notify attendees. Use it for meeting prep, transcript follow-ups, customer call workflows, or automations that turn live conversations into next steps.",
-	"app-loom": "Connect Loom so agents can create video handoffs, summarize recordings, and share updates. Use it for async status reports, customer walkthroughs, product feedback, or workflows where a short video carries the context.",
-	"app-miro": "Connect Miro so agents can create boards, sync cards, and coordinate visual planning. Use it for workshops, roadmap sessions, research synthesis, or workflows that move structured work into a shared canvas.",
-	"app-coda": "Connect Coda so workflows can update docs, tables, packs, and team operating systems. Use it for custom trackers, lightweight apps, planning docs, or automations that need to keep Coda tables current.",
-	"app-confluence": "Connect Confluence so agents can search knowledge bases and create or update documentation. Use it for runbooks, implementation notes, release docs, or workflows that should leave behind durable team knowledge.",
-	"app-aws": "Connect AWS so agents can coordinate cloud resources, events, queues, and infrastructure tasks. Use it for operational checks, deployment handoffs, queue monitoring, or workflows that need cloud state before acting.",
-	"app-google-cloud": "Connect Google Cloud so workflows can manage cloud jobs, storage, Pub/Sub, and deployment work. Use it for infrastructure automation, data pipeline coordination, operational checks, or alerts tied to Google Cloud services.",
-	"app-azure": "Connect Azure so agents can automate resources, queues, deployments, and identity-related tasks. Use it for enterprise cloud operations, release workflows, infrastructure checks, or automations in Microsoft-backed environments.",
-	"app-cloudflare": "Connect Cloudflare so agents can manage DNS, Workers, Pages, queues, and edge automations. Use it for site operations, edge deployments, incident response, or workflows that need to change traffic and infrastructure at the edge.",
-	"app-docker": "Connect Docker so agents can coordinate images, registries, builds, and deployment events. Use it for release preparation, image promotion, environment checks, or workflows that need container metadata.",
-	"app-kubernetes": "Connect Kubernetes so agents can inspect clusters, trigger jobs, and automate operational tasks. Use it for rollout checks, incident triage, job coordination, or workflows that need live cluster context.",
-	"app-algolia": "Connect Algolia so workflows can sync search indexes and automate content discovery tasks. Use it for search freshness, indexing checks, merchandising updates, or workflows that need searchable content to stay current.",
-	"app-elasticsearch": "Connect Elasticsearch so agents can query search clusters and automate log or document workflows. Use it for operational investigations, search-backed features, document indexing, or workflows that depend on fast text retrieval.",
-	"app-redis": "Connect Redis so workflows can read cache data, coordinate queues, and manage realtime state. Use it for operational checks, queue insight, temporary state lookups, or automations that need fast key-value context.",
-	"app-pinecone": "Connect Pinecone so agents can manage vector indexes and power retrieval workflows. Use it for semantic search, memory, recommendation, or knowledge retrieval steps that need embeddings-backed context.",
-	"app-plaid": "Connect Plaid so agents can work with financial account data and banking flows. Use it for transaction enrichment, onboarding checks, financial reporting, or workflows that depend on verified account activity.",
-	"app-brex": "Connect Brex so workflows can sync expenses, cards, reimbursements, and finance approvals. Use it for spend review, receipt follow-up, budget alerts, or automations that connect finance operations to team workflows.",
-	"app-mercury": "Connect Mercury so agents can automate banking workflows, transactions, and treasury tasks. Use it for finance operations, cash movement checks, approval routing, or workflows triggered by account activity.",
-	"app-elevenlabs": "Connect ElevenLabs so agents can generate speech, transcribe audio, and build voice-enabled workflows. Use it for narrated updates, voice agents, call summaries, or automations that need natural-sounding audio output.",
-	"app-perplexity": "Connect Perplexity so agents can search the web with citations and grounded answers. Use it for research, competitive monitoring, fact gathering, or workflows that need fresh external context before making a recommendation.",
-	"app-gemini": "Connect Gemini so agents can use Google AI models for generation, analysis, and reasoning. Use it for multimodal understanding, document analysis, content generation, or workflows that benefit from Google model coverage.",
-	"app-polymarket": "Connect Polymarket so agents can read market data and automate prediction-market workflows. Use it for market monitoring, research context, probability tracking, or automations that react to changing public forecasts.",
-	"app-blacksmith": "Connect Blacksmith so agents can inspect CI runs, coordinate build infrastructure, and react to developer workflow events. Use it for failed build triage, runner capacity checks, deployment gates, or automations that keep engineering pipelines moving.",
-	"app-deel": "Connect Deel so agents can work with contractor, employee, payroll, and compliance workflows. Use it to prepare onboarding tasks, follow up on HR operations, reconcile workforce data, or route people ops requests to the right system.",
-	"app-doordash": "Connect DoorDash so agents can coordinate delivery, merchant, and logistics workflows. Use it for order exception handling, fulfillment updates, operational alerts, or automations where real-world delivery status needs to trigger follow-up work.",
-	"app-dub": "Connect Dub so agents can manage short links, attribution, and campaign routing. Use it to create tracked links, monitor conversion signals, clean up campaign metadata, or connect marketing activity to downstream reporting.",
-	"app-exa": "Connect Exa so agents can search the web and retrieve AI-ready research results. Use it for market scans, company enrichment, competitive research, or workflows that need fresh external context before drafting or deciding.",
-	"app-firecrawl": "Connect Firecrawl so agents can crawl sites, extract structured data, and turn webpages into workflow-ready inputs. Use it for lead enrichment, documentation ingestion, content monitoring, or research tasks that start from public web pages.",
-	"app-granola": "Connect Granola so agents can use meeting notes, summaries, and follow-up context in your workflows. Use it to turn calls into tasks, update account records, prepare recap messages, or make meeting outcomes available to other automations.",
-	"app-gusto": "Connect Gusto so agents can coordinate payroll, benefits, and HR operations. Use it for onboarding checklists, payroll review reminders, people ops follow-ups, or workflows that need employee and compensation context.",
-	"app-hex": "Connect Hex so agents can run analytics workflows, query notebooks, and coordinate data app outputs. Use it for metric investigations, recurring analysis, stakeholder reports, or automations that need trusted analytical context.",
-	"app-instacart": "Connect Instacart so agents can coordinate grocery commerce, orders, and fulfillment workflows. Use it for delivery exceptions, merchant operations, catalog checks, or automations that depend on order and shopper activity.",
-	"app-kalshi": "Connect Kalshi so agents can read event markets and automate prediction-market workflows. Use it for market monitoring, probability snapshots, research briefs, or automations that react to changing expectations around real-world events.",
-	"app-omni": "Connect Omni so agents can query business intelligence models and automate analytics workflows. Use it to answer operational questions, refresh stakeholder summaries, investigate metric movement, or bring governed BI context into agent work.",
-	"app-parallel": "Connect Parallel so agents can run AI research, enrichment, and web task workflows. Use it for background research, lead enrichment, competitive monitoring, or automations that delegate broad information-gathering tasks.",
-	"app-planetscale": "Connect PlanetScale so agents can manage database branches, deploy requests, and MySQL-backed workflows. Use it for schema review reminders, release coordination, operational data checks, or automations tied to database changes.",
-	"app-porter": "Connect Porter so agents can coordinate cloud deployments and application infrastructure. Use it for rollout checks, failed deploy triage, environment updates, or workflows that keep application operations moving.",
-	"app-puzzle": "Connect Puzzle so agents can automate accounting workflows, books, and finance operations. Use it for close checklists, transaction review, finance handoffs, or workflows that keep bookkeeping context current.",
-	"app-pylon": "Connect Pylon so agents can manage B2B support conversations and customer workflows. Use it to triage customer issues, summarize account context, route engineering follow-ups, or keep support signals connected to product work.",
-	"app-ramp": "Connect Ramp so agents can sync spend, expenses, approvals, and finance workflows. Use it for receipt follow-ups, budget alerts, approval routing, or automations that connect company spend to operational context.",
-	"app-reducto": "Connect Reducto so agents can extract structured data from complex documents. Use it for document intake, contract review prep, invoice parsing, or workflows where PDFs and files need to become reliable structured inputs.",
-	"app-resend": "Connect Resend so agents can send product email and react to delivery events. Use it for onboarding messages, transactional notifications, bounce handling, or workflows that need reliable email delivery from product systems.",
-	"app-rippling": "Connect Rippling so agents can coordinate employee, device, payroll, and HR workflows from one place. Use it for onboarding and offboarding checklists, access changes, equipment follow-ups, or automations that need workforce context before acting.",
-	"app-streak": "Connect Streak so agents can manage Gmail-native CRM pipelines and contact workflows. Use it for deal follow-ups, inbox-driven sales activity, contact updates, or workflows where relationship context lives directly inside Gmail.",
-	"app-warp": "Connect Warp so agents can coordinate terminal, developer environment, and AI coding workflows. Use it for developer setup tasks, command-driven runbooks, environment checks, or workflows that bridge local engineering activity with team operations.",
-	"app-apollo": "Connect Apollo so agents can use sales intelligence, prospecting data, and enrichment workflows. Use it to qualify leads, enrich accounts, prepare outbound context, or route sales follow-ups based on fresh prospect data.",
-	"app-cal-com": "Connect Cal.com so agents can automate scheduling, bookings, availability, and routing workflows. Use it for handoff scheduling, round-robin booking, interview coordination, or follow-ups that should happen before or after a meeting.",
-	"app-cerebras": "Connect Cerebras so agents can use fast AI inference inside workflows and tools. Use it for low-latency generation, classification, extraction, or model-powered steps that need quick responses at scale.",
-	"app-chargebee": "Connect Chargebee so agents can automate subscription billing, customers, invoices, and revenue workflows. Use it for renewal alerts, billing support, failed payment follow-ups, or automations tied to subscription lifecycle changes.",
-	"app-deepseek": "Connect DeepSeek so agents can use DeepSeek models for generation, reasoning, and analysis. Use it for coding assistance, structured extraction, summarization, or AI steps that benefit from an additional model provider.",
-	"app-gong": "Connect Gong so agents can use revenue conversations, account insights, and sales activity. Use it to summarize calls, extract next steps, update CRM context, or trigger follow-ups from customer conversations.",
-	"app-google-contacts": "Connect Google Contacts so agents can read and update contact records across Google Workspace. Use it to enrich communication workflows, keep people data current, or resolve the right recipient before sending follow-ups.",
-	"app-google-docs": "Connect Google Docs so agents can create, read, and update collaborative documents. Use it for drafting briefs, maintaining runbooks, turning conversations into docs, or updating shared plans after workflow activity.",
-	"app-google-forms": "Connect Google Forms so agents can capture submissions and turn responses into follow-up work. Use it for intake flows, lightweight surveys, internal requests, or automations that begin when someone submits structured information.",
-	"app-google-meet": "Connect Google Meet so agents can coordinate meetings, recordings, and video collaboration workflows. Use it for meeting prep, attendee updates, recording follow-ups, or automations that turn live conversations into next steps.",
-	"app-google-slides": "Connect Google Slides so agents can create and update presentations from workflow outputs. Use it for status decks, customer recaps, board updates, or automations that turn approved content and data into slides.",
-	"app-google-tasks": "Connect Google Tasks so agents can create tasks, update lists, and coordinate personal work queues. Use it for lightweight reminders, follow-up capture, personal task routing, or workflows that should land in a simple to-do list.",
-	"app-greenhouse": "Connect Greenhouse so agents can automate candidate, job, and interview coordination workflows. Use it for recruiting follow-ups, interview loop prep, candidate summaries, or workflows that keep hiring processes current.",
-	"app-groq": "Connect Groq so agents can use low-latency AI inference in workflows. Use it for fast classification, summarization, extraction, or interactive agent steps where response speed matters.",
-	"app-help-scout": "Connect Help Scout so agents can manage customer conversations, mailboxes, and support workflows. Use it to triage inbound requests, draft replies, summarize customer context, or route support signals into product and engineering work.",
-	"app-linkedin": "Connect LinkedIn so agents can coordinate professional network, recruiting, and social workflows. Use it for prospect research, hiring context, relationship prep, or automations that connect professional profiles to your operating data.",
-	"app-microsoft-excel": "Connect Microsoft Excel so agents can read, update, and append rows in workbooks. Use it for operational reports, finance trackers, reconciliation sheets, or workflows that need to work with spreadsheets stored in Microsoft 365.",
-	"app-microsoft-onedrive": "Connect Microsoft OneDrive so agents can find, read, upload, and organize files. Use it for document intake, generated exports, shared artifacts, or workflows that need source material from Microsoft cloud storage.",
-	"app-microsoft-outlook": "Connect Microsoft Outlook so agents can send email, read messages, and coordinate calendar workflows. Use it for customer follow-ups, scheduling handoffs, inbox triage, or automations that need to operate inside Microsoft 365.",
-	"app-microsoft-planner": "Connect Microsoft Planner so agents can create tasks, update plans, and coordinate project work. Use it for team checklists, project handoffs, status updates, or workflows that should create visible work items for Microsoft 365 teams.",
-	"app-microsoft-sharepoint": "Connect Microsoft SharePoint so agents can search sites, update lists, and manage shared documents. Use it for governed document workflows, internal knowledge retrieval, approval tracking, or automations that depend on SharePoint content.",
-	"app-mistral": "Connect Mistral so agents can use Mistral models for generation, analysis, and reasoning. Use it for multilingual tasks, structured extraction, summarization, or AI workflow steps that need another model option.",
-	"app-posthog": "Connect PostHog so agents can query product analytics, feature flags, and user behavior signals. Use it for growth investigations, experiment follow-ups, customer debugging, or workflows triggered by product usage patterns.",
-	"app-reddit": "Connect Reddit so agents can monitor communities, posts, and discussion-driven workflows. Use it for audience research, brand monitoring, support signal discovery, or automations that react to public community conversations.",
-	"app-square": "Connect Square so agents can automate payments, customers, catalog, and point-of-sale workflows. Use it for transaction follow-ups, customer updates, sales reporting, or operational workflows tied to in-person and online commerce.",
-	"app-todoist": "Connect Todoist so agents can create tasks, update projects, and automate personal work queues. Use it for lightweight reminders, follow-up capture, recurring checklists, or workflows that should become personal tasks.",
-	"app-wordpress": "Connect WordPress so agents can publish posts, update pages, and automate site content workflows. Use it for editorial operations, release notes, content refreshes, or workflows that turn approved drafts into live site updates.",
-	"app-x-twitter": "Connect X / Twitter so agents can monitor posts, publish updates, and coordinate social workflows. Use it for launch announcements, brand monitoring, support escalation, or automations that react to public conversation.",
-	"app-xai": "Connect xAI so agents can use xAI models for generation, analysis, and reasoning. Use it for drafting, summarization, classification, or AI workflow steps that benefit from another model provider.",
-	"app-youtube": "Connect YouTube so agents can manage videos, channels, comments, and creator workflows. Use it for publishing checklists, comment triage, content reporting, or automations that connect video activity to the rest of your workspace."
-};
-const CATEGORY_INTEGRATION_USE_CASES = {
-	AI: "add model calls, embeddings, structured generation, and reasoning steps to agents or workflows",
-	Commerce: "keep storefront, order, product, and fulfillment workflows moving without manual handoffs",
-	Communication: "send updates, listen for replies, route approvals, and keep conversations tied to the work they affect",
-	CRM: "sync customer context, update records, and keep sales or success workflows current",
-	Data: "query, enrich, sync, and transform structured data as part of automated workflows",
-	Design: "pull design context into implementation work and keep creative handoffs coordinated",
-	Development: "react to engineering events, update project metadata, and connect code activity to agent workflows",
-	Documents: "send, track, organize, and file documents as part of repeatable business processes",
-	Files: "find, read, upload, and organize files so workflows can work with the right source material",
-	Finance: "reconcile billing, accounting, customer, and transaction data across finance workflows",
-	Forms: "capture submissions, enrich responses, and trigger follow-up work from collected data",
-	HR: "coordinate onboarding, payroll, and people operations without leaving the workspace",
-	Infrastructure: "coordinate cloud resources, deployments, queues, and operational tasks from one workspace",
-	Marketing: "manage campaigns, audiences, content, and delivery events from automated growth workflows",
-	Observability: "triage incidents, summarize operational context, and route alerts to the right responders",
-	Productivity: "coordinate calendars, docs, tasks, files, and team knowledge without leaving the workspace",
-	"Project Management": "create tasks, update project state, and keep work queues aligned with agent-driven execution",
-	Search: "retrieve fresh external context, crawl sources, and ground workflows in real-time results",
-	Support: "triage customer conversations, update tickets, and move support context into the right workflow"
-};
-function buildIntegrationDescription(app) {
-	const explicit = APP_INTEGRATION_DESCRIPTIONS[app.id];
-	if (explicit) return explicit;
-	const categoryUseCase = CATEGORY_INTEGRATION_USE_CASES[app.category] ?? "connect external context, events, and actions to your automated workflows";
-	return `Connect ${app.name} to Keystroke so the workflows and AI agents you build can use it as a live ${app.category.toLowerCase()} system. ${app.description} Once connected, those automations can ${categoryUseCase}.`;
-}
-const DEFAULT_OAUTH_SCOPE_DESCRIPTIONS = {
-	email: "View the email address associated with the connected account.",
-	profile: "View basic profile information for the connected account."
-};
-const OAUTH_SCOPE_CATALOG_BY_APP_ID = {
-	"app-slack": [
-		{
-			name: "channels:history",
-			description: "View messages and other content in public channels that the Slack Bot has been added to."
-		},
-		{
-			name: "channels:read",
-			description: "View basic information about public channels in Slack."
-		},
-		{
-			name: "chat:write",
-			description: "Send messages as the Keystroke Slack Bot."
 		},
-		{
-			name: "commands",
-			description: "Add shortcuts and slash commands that start Keystroke actions."
-		},
-		{
-			name: "users:read",
-			description: "View people in the Slack workspace."
-		},
-		{
-			name: "groups:read",
-			description: "View basic information about private channels."
-		},
-		{
-			name: "im:read",
-			description: "View basic information about direct messages."
-		},
-		{
-			name: "mpim:read",
-			description: "View basic information about group direct messages."
-		},
-		{
-			name: "reactions:read",
-			description: "View emoji reactions in conversations."
-		},
-		{
-			name: "team:read",
-			description: "View basic information about the Slack workspace."
-		},
-		{
-			name: "files:read",
-			description: "View files shared in Slack conversations."
-		},
-		{
-			name: "users.profile:read",
-			description: "View profile fields for people in the workspace."
-		},
-		{
-			name: "channels:join",
-			description: "Join public channels in the workspace."
-		},
-		{
-			name: "chat:write.public",
-			description: "Send messages to public channels the bot is not a member of."
-		},
-		{
-			name: "groups:history",
-			description: "View messages in private channels the bot has been added to."
-		},
-		{
-			name: "im:history",
-			description: "View messages in direct message conversations."
-		},
-		{
-			name: "mpim:history",
-			description: "View messages in group direct message conversations."
-		},
-		{
-			name: "reactions:write",
-			description: "Add emoji reactions to Slack messages."
-		},
-		{
-			name: "files:write",
-			description: "Upload and manage files in Slack conversations."
-		}
-	],
-	"app-gmail": [
-		{
-			name: "gmail.readonly",
-			description: "View Gmail messages and metadata."
-		},
-		{
-			name: "gmail.send",
-			description: "Send email from the connected Gmail account."
-		},
-		{
-			name: "gmail.modify",
-			description: "Read, label, archive, and delete Gmail messages."
-		},
-		{
-			name: "gmail.labels",
-			description: "Create, read, update, and delete Gmail labels."
-		},
-		{
-			name: "gmail.compose",
-			description: "Create and manage draft email messages."
-		},
-		{
-			name: "profile",
-			description: DEFAULT_OAUTH_SCOPE_DESCRIPTIONS.profile
+		async delete(credentialId) {
+			try {
+				await http.delete(`/api/credentials/${encodeURIComponent(credentialId)}`);
+			} catch (error) {
+				throw await toPlatformError(error);
+			}
 		},
-		{
-			name: "email",
-			description: DEFAULT_OAUTH_SCOPE_DESCRIPTIONS.email
+		async startOAuthConnection(input) {
+			const body = StartOAuthConnectionInputSchema.parse(input);
+			try {
+				const data = await http.get(`/api/oauth/${encodeURIComponent(body.appId)}/authorize-url`, { searchParams: buildOAuthAuthorizeSearchParams(body) }).json();
+				const { url } = ConnectAuthorizeUrlResponseSchema.parse(data);
+				return StartOAuthConnectionResultSchema.parse({
+					status: "redirecting",
+					authorizeUrl: url
+				});
+			} catch (error) {
+				throw await toPlatformError(error);
+			}
 		}
-	],
-	"app-github": [
-		{
-			name: "repo",
-			description: "Read and write code, pull requests, issues, and repository metadata."
-		},
-		{
-			name: "read:org",
-			description: "Read organization membership and team information."
-		},
-		{
-			name: "workflow",
-			description: "Update GitHub Actions workflow files."
-		},
-		{
-			name: "admin:repo_hook",
-			description: "Create and manage repository webhooks."
-		},
-		{
-			name: "read:user",
-			description: "Read the connected GitHub user profile."
-		},
-		{
-			name: "user:email",
-			description: "Read the connected GitHub user email addresses."
+	};
+}
+function createAppsResource(http) {
+	return { async listCatalog() {
+		try {
+			const data = await http.get("/api/apps").json();
+			return ListAppsResponseSchema.parse(data).apps;
+		} catch (error) {
+			throw await toPlatformError(error);
 		}
-	],
-	"app-stripe": [
-		{
-			name: "charges:read",
-			description: "View charges, payment status, and dispute details."
-		},
-		{
-			name: "customers:read",
-			description: "View customers and saved billing details."
-		},
-		{
-			name: "customers:write",
-			description: "Create and update customer records."
-		},
-		{
-			name: "invoices:read",
-			description: "View invoices, invoice items, and payment attempts."
+	} };
+}
+function createMembersResource$1(http) {
+	return {
+		async listOrganizationMembers() {
+			try {
+				const data = await http.get("/api/members").json();
+				return ListOrganizationMembersResponseSchema.parse(data).members;
+			} catch (error) {
+				throw await toPlatformError(error);
+			}
 		},
-		{
-			name: "invoices:write",
-			description: "Create, finalize, and update invoices."
+		async inviteOrganizationMembers(input) {
+			const body = InviteOrganizationMembersRequestSchema.parse(input);
+			try {
+				const data = await http.post("/api/members/invitations", { json: body }).json();
+				return InviteOrganizationMembersResponseSchema.parse(data);
+			} catch (error) {
+				throw await toPlatformError(error);
+			}
 		},
-		{
-			name: "subscriptions:read",
-			description: "View subscription plans, items, and billing schedules."
+		async updateOrganizationMember(userId, input) {
+			const body = UpdateOrganizationMemberRequestSchema.parse(input);
+			try {
+				const data = await http.patch(`/api/members/${encodeURIComponent(userId)}`, { json: body }).json();
+				return UpdateOrganizationMemberResponseSchema.parse(data).member;
+			} catch (error) {
+				throw await toPlatformError(error);
+			}
 		},
-		{
-			name: "webhook_endpoints:write",
-			description: "Create and manage webhook endpoints for Stripe events."
+		async removeOrganizationMember(userId) {
+			try {
+				await http.delete(`/api/members/${encodeURIComponent(userId)}`);
+			} catch (error) {
+				throw await toPlatformError(error);
+			}
 		}
-	]
-};
-function buildAppCatalogEntry(app) {
-	return {
-		...app,
-		integrationDescription: buildIntegrationDescription(app),
-		oauthScopes: OAUTH_SCOPE_CATALOG_BY_APP_ID[app.id] ?? []
 	};
 }
-/**
-* The supported-app catalog shown in the "Connect an app" picker. Mirrors the
-* curated integration list from keystroke-mockups. No connected/available flag:
-* "connected" is not a property of an app, it's whether a credential exists.
-*/
-const appCatalogSeed = APP_CATALOG_BASE.map(buildAppCatalogEntry);
-const GMAIL_SCOPES = [
-	"gmail.readonly",
-	"gmail.send",
-	"profile",
-	"email"
-];
-const SLACK_SCOPES = [
-	"channels:history",
-	"channels:read",
-	"chat:write",
-	"commands",
-	"users:read",
-	"groups:read",
-	"im:read",
-	"mpim:read",
-	"reactions:read",
-	"team:read",
-	"files:read",
-	"users.profile:read"
-];
-/**
-* Credential records the signed-in user can see, spanning the three scopes
-* (organization, project, user) and both connection kinds (oauth, manual) so
-* the table's pre-built views and the detail page all have data to render.
-*/
-const credentialSeed = [
-	{
-		id: "cred-gmail-org-1",
-		appId: "app-gmail",
-		appName: "Gmail",
-		label: "Company Gmail",
-		scope: "organization",
-		isDefault: true,
-		status: "Active",
-		connectionKind: "oauth",
-		createdAt: "2026-02-10T14:00:00Z",
-		lastUsedAt: "2026-04-20T15:44:00Z",
-		lastRefreshedAt: "2026-04-20T15:44:00Z",
-		expiresAt: "2026-05-20T15:44:00Z",
-		grantedScopes: GMAIL_SCOPES,
-		ownerUserId: "org-member-nate",
-		ownerName: "Nate Wells"
-	},
-	{
-		id: "cred-gmail-proj-marketing",
-		appId: "app-gmail",
-		appName: "Gmail",
-		label: "Marketing Gmail",
-		scope: "project",
-		projectId: "project_gtm_engineering",
-		projectName: "GTM Engineering",
-		isDefault: false,
-		status: "Active",
-		connectionKind: "oauth",
-		createdAt: "2026-03-10T09:00:00Z",
-		lastUsedAt: "2026-04-19T11:20:00Z",
-		lastRefreshedAt: "2026-04-19T11:20:00Z",
-		expiresAt: "2026-05-19T11:20:00Z",
-		grantedScopes: GMAIL_SCOPES,
-		ownerUserId: "org-member-nate",
-		ownerName: "Nate Wells"
-	},
-	{
-		id: "cred-gmail-proj-support",
-		appId: "app-gmail",
-		appName: "Gmail",
-		label: "Support Gmail",
-		scope: "project",
-		projectId: "project_gtm_engineering",
-		projectName: "GTM Engineering",
-		isDefault: false,
-		status: "Expired",
-		connectionKind: "oauth",
-		createdAt: "2026-03-15T10:30:00Z",
-		lastUsedAt: "2026-04-18T16:05:00Z",
-		lastRefreshedAt: "2026-04-18T16:05:00Z",
-		expiresAt: "2026-04-18T16:05:00Z",
-		grantedScopes: [
-			"gmail.readonly",
-			"profile",
-			"email"
-		],
-		ownerUserId: "org-member-dallin",
-		ownerName: "Dallin Bentley"
-	},
-	{
-		id: "cred-gmail-user-blake",
-		appId: "app-gmail",
-		appName: "Gmail",
-		label: "Blake's Gmail",
-		scope: "user",
-		isDefault: false,
-		status: "Active",
-		connectionKind: "oauth",
-		createdAt: "2026-03-20T08:15:00Z",
-		lastUsedAt: "2026-04-20T09:18:00Z",
-		lastRefreshedAt: "2026-04-20T09:18:00Z",
-		expiresAt: "2026-05-20T09:18:00Z",
-		grantedScopes: GMAIL_SCOPES,
-		ownerUserId: "user_blake_rouse",
-		ownerName: "Blake Rouse"
-	},
-	{
-		id: "cred-slack-org-1",
-		appId: "app-slack",
-		appName: "Slack",
-		label: "Keystroke Slack",
-		scope: "organization",
-		isDefault: true,
-		status: "Active",
-		connectionKind: "oauth",
-		createdAt: "2026-02-12T11:00:00Z",
-		lastUsedAt: "2026-04-20T14:21:00Z",
-		lastRefreshedAt: "2026-04-20T14:21:00Z",
-		expiresAt: "2026-05-20T14:21:00Z",
-		grantedScopes: SLACK_SCOPES,
-		ownerUserId: "org-member-wells",
-		ownerName: "Wells Riley"
-	},
-	{
-		id: "cred-slack-user-nate",
-		appId: "app-slack",
-		appName: "Slack",
-		label: "Nate's Slack",
-		scope: "user",
-		isDefault: false,
-		status: "Needs Reauth",
-		connectionKind: "oauth",
-		createdAt: "2026-03-22T15:45:00Z",
-		lastUsedAt: "2026-04-20T12:05:00Z",
-		lastRefreshedAt: "2026-04-20T12:05:00Z",
-		expiresAt: "2026-04-20T12:05:00Z",
-		grantedScopes: SLACK_SCOPES,
-		ownerUserId: "org-member-nate",
-		ownerName: "Nate Wells"
-	},
-	{
-		id: "cred-github-org-1",
-		appId: "app-github",
-		appName: "GitHub",
-		label: "Keystroke GitHub",
-		scope: "organization",
-		isDefault: true,
-		status: "Active",
-		connectionKind: "oauth",
-		createdAt: "2026-02-08T09:30:00Z",
-		lastUsedAt: "2026-04-20T13:02:00Z",
-		lastRefreshedAt: "2026-04-20T13:02:00Z",
-		expiresAt: "2026-05-20T13:02:00Z",
-		grantedScopes: [
-			"repo",
-			"read:org",
-			"workflow"
-		],
-		ownerUserId: "org-member-dallin",
-		ownerName: "Dallin Bentley"
-	},
-	{
-		id: "cred-github-proj-personal",
-		appId: "app-github",
-		appName: "GitHub",
-		label: "Personal Repo GitHub",
-		scope: "project",
-		projectId: "project_personal_repo",
-		projectName: "Blake's Project",
-		isDefault: false,
-		status: "Active",
-		connectionKind: "oauth",
-		createdAt: "2026-03-01T16:00:00Z",
-		lastUsedAt: "2026-04-19T19:41:00Z",
-		lastRefreshedAt: "2026-04-19T19:41:00Z",
-		expiresAt: "2026-05-19T19:41:00Z",
-		grantedScopes: ["repo", "workflow"],
-		ownerUserId: "user_blake_rouse",
-		ownerName: "Blake Rouse"
-	},
-	{
-		id: "cred-anthropic-org-1",
-		appId: "app-anthropic",
-		appName: "Anthropic",
-		label: "Anthropic API",
-		scope: "organization",
-		isDefault: true,
-		status: "Active",
-		connectionKind: "manual",
-		createdAt: "2026-02-20T13:00:00Z",
-		lastUsedAt: "2026-04-19T09:40:00Z",
-		lastRefreshedAt: "2026-04-19T09:40:00Z",
-		credentialKeys: ["ANTHROPIC_API_KEY"],
-		keyPreviews: { ANTHROPIC_API_KEY: "••••••••••••••••••M5f" },
-		ownerUserId: "org-member-nate",
-		ownerName: "Nate Wells"
-	}
-];
 /** Review personas for mocked project members and API key authors (not org membership). */
 const mockPersonaSeed = [
 	{
@@ -5328,7 +4067,6 @@ const apiKeySeed = [
 		isCreatedByCurrentUser: false
 	}
 ];
-let credentialRecords = [...credentialSeed];
 function createMockApiKeySecret() {
 	const secret = `sk_${`${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`}`;
 	return {
@@ -5336,113 +4074,6 @@ function createMockApiKeySecret() {
 		keyPreview: `******${secret.slice(-4)}`
 	};
 }
-function createAppsResource() {
-	return { listCatalog: mock({
-		domain: "apps",
-		method: "listCatalog",
-		plannedEndpoint: "GET /api/apps"
-	}, async () => appCatalogSeed) };
-}
-function createCredentialsResource() {
-	return {
-		list: mock({
-			domain: "credentials",
-			method: "list",
-			plannedEndpoint: "GET /api/credentials"
-		}, async () => credentialRecords),
-		get: mock({
-			domain: "credentials",
-			method: "get",
-			plannedEndpoint: "GET /api/credentials/:id"
-		}, async (credentialId) => credentialRecords.find((credential) => credential.id === credentialId) ?? null),
-		startOAuthConnection: mock({
-			domain: "credentials",
-			method: "startOAuthConnection",
-			plannedEndpoint: "GET /oauth/:key/authorize-url"
-		}, async (input) => {
-			await new Promise((resolve) => setTimeout(resolve, 900));
-			return {
-				status: "connected",
-				authorizeUrl: null
-			};
-		}),
-		create: mock({
-			domain: "credentials",
-			method: "create",
-			plannedEndpoint: "POST /api/credentials"
-		}, async (input) => {
-			const app = appCatalogSeed.find((entry) => entry.id === input.appId);
-			const now = (/* @__PURE__ */ new Date()).toISOString();
-			const keyName = `${(app?.name ?? "APP").toUpperCase().replace(/\W+/g, "_")}_API_KEY`;
-			const base = {
-				appId: input.appId,
-				appName: app?.name,
-				status: "Active",
-				connectionKind: input.connectionKind,
-				createdAt: now,
-				lastRefreshedAt: now,
-				lastUsedAt: null,
-				isDefault: false,
-				grantedScopes: input.scopes,
-				credentialKeys: input.apiKey ? [keyName] : void 0,
-				keyPreviews: input.apiKey ? { [keyName]: maskSecretPreview(input.apiKey) } : void 0,
-				ownerUserId: "user_blake_rouse",
-				ownerName: "Blake Rouse"
-			};
-			const created = [
-				...input.projectIds.map((projectId) => ({
-					...base,
-					id: `cred-${input.appId}-${projectId}-${Date.now().toString(36)}`,
-					label: `${app?.name ?? input.appId} project credential`,
-					scope: "project",
-					projectId
-				})),
-				...input.createOrganizationCredential ? [{
-					...base,
-					id: `cred-${input.appId}-org-${Date.now().toString(36)}`,
-					label: `${app?.name ?? input.appId} organization credential`,
-					scope: "organization"
-				}] : [],
-				...input.createUserProvidedCredential ? [{
-					...base,
-					id: `cred-${input.appId}-user-${Date.now().toString(36)}`,
-					label: `${app?.name ?? input.appId} personal credential`,
-					scope: "user"
-				}] : []
-			];
-			credentialRecords = [...created, ...credentialRecords];
-			return created;
-		}),
-		update: mock({
-			domain: "credentials",
-			method: "update",
-			plannedEndpoint: "PATCH /api/credentials/:id"
-		}, async (credentialId, patch) => {
-			const target = credentialRecords.find((credential) => credential.id === credentialId);
-			if (!target) return null;
-			const settingDefault = patch.isDefault === true;
-			credentialRecords = credentialRecords.map((credential) => {
-				if (credential.id === credentialId) return {
-					...credential,
-					...patch.label !== void 0 ? { label: patch.label } : {},
-					...patch.isDefault !== void 0 ? { isDefault: patch.isDefault } : {}
-				};
-				if (settingDefault && credential.appId === target.appId && credential.scope === target.scope) return {
-					...credential,
-					isDefault: false
-				};
-				return credential;
-			});
-			return credentialRecords.find((credential) => credential.id === credentialId) ?? null;
-		})
-	};
-}
-/** Masked preview of a secret — last 4 chars revealed, the rest masked. */
-function maskSecretPreview(value) {
-	const trimmed = value.trim();
-	if (trimmed.length <= 4) return "•".repeat(Math.max(trimmed.length, 4));
-	return `${"•".repeat(Math.min(trimmed.length - 4, 20))}${trimmed.slice(-4)}`;
-}
 const projectMembersStore = /* @__PURE__ */ new Map();
 function getProjectMembers(projectId) {
 	let members = projectMembersStore.get(projectId);
@@ -6297,8 +4928,8 @@ function createPlatformClient(options) {
 		agents: createAgentsResource(http),
 		workflows: createWorkflowsResource(http),
 		skills: createSkillsResource(http),
-		apps: createAppsResource(),
-		credentials: createCredentialsResource(),
+		apps: createAppsResource(http),
+		credentials: createCredentialsResource(http),
 		history: createHistoryResource(http),
 		deployments: createDeploymentsResource(http),
 		gatewayAttachments: createGatewayAttachmentsResource(http),
@@ -6729,6 +5360,44 @@ function registerAgentCommand(program) {
 	registerAgentSessionsCommand(agent);
 }
 //#endregion
+//#region src/commands/app/run-app-list.ts
+async function runAppList(client) {
+	return client.apps.listCatalog();
+}
+//#endregion
+//#region src/commands/app/list.ts
+function registerAppListCommand(app) {
+	app.command("list").description("List connectable apps in the active organization").action(() => runCliCommand("List apps failed", async () => {
+		const config = createCliConfig();
+		const client = createCliPlatformClient(config);
+		await ensureActiveOrganization(config);
+		const apps = await runAppList(client);
+		process.stdout.write(`${JSON.stringify(apps, null, 2)}\n`);
+	}, void 0, { orgScoped: true }));
+}
+//#endregion
+//#region src/commands/app/index.ts
+function registerAppCommand(program) {
+	registerAppListCommand(program.command("app").description("Browse connectable integrations"));
+}
+//#endregion
+//#region src/commands/connect/parse-connect-scopes.ts
+function parseConnectScopes(scopes, projectIds) {
+	const normalized = scopes.length > 0 ? scopes : ["org"];
+	for (const scope of normalized) if (scope !== "org" && scope !== "user" && scope !== "project") throw new Error(`Unknown scope "${scope}". Expected org, user, or project.`);
+	const createOrganizationCredential = normalized.includes("org");
+	const createUserProvidedCredential = normalized.includes("user");
+	const includesProject = normalized.includes("project");
+	const selectedProjectIds = includesProject ? projectIds : [];
+	if (includesProject && selectedProjectIds.length === 0) throw new Error("--project-id is required when scope includes project");
+	if (!createOrganizationCredential && !createUserProvidedCredential && selectedProjectIds.length === 0) throw new Error("At least one scope is required via --scope and/or --project-id");
+	return {
+		createOrganizationCredential,
+		createUserProvidedCredential,
+		projectIds: selectedProjectIds
+	};
+}
+//#endregion
 //#region src/auth/open-url.ts
 function openUrl(url) {
 	const platform = process.platform;
@@ -6743,7 +5412,7 @@ function providerLabel(key) {
 	return key.charAt(0).toUpperCase() + key.slice(1);
 }
 async function runConnect(options) {
-	const { client, provider, serverUrl, printUrl } = options;
+	const { client, platform, provider, serverUrl, printUrl, oauthScopes = [], credentialScopes } = options;
 	const label = providerLabel(provider.key);
 	if (provider.mode === "browser-redirect") {
 		const url = `${serverUrl}${provider.path}`;
@@ -6755,6 +5424,30 @@ async function runConnect(options) {
 		process.stdout.write(`Complete ${label} sign-in in your browser.\n`);
 		return;
 	}
+	if (platform) {
+		const scopes = credentialScopes ?? parseConnectScopes([], []);
+		const result = await platform.credentials.startOAuthConnection({
+			appId: provider.key,
+			scopes: oauthScopes,
+			permissionMode: "default",
+			projectIds: scopes.projectIds,
+			createOrganizationCredential: scopes.createOrganizationCredential,
+			createUserProvidedCredential: scopes.createUserProvidedCredential
+		});
+		if (!result.authorizeUrl) throw new Error("OAuth provider did not return an authorize URL");
+		if (oauthScopes.length > 0) {
+			process.stdout.write("Requested OAuth scopes:\n");
+			for (const scope of oauthScopes) process.stdout.write(`  - ${scope}\n`);
+			process.stdout.write("\n");
+		}
+		if (printUrl) {
+			process.stdout.write(`${result.authorizeUrl}\n`);
+			return;
+		}
+		openUrl(result.authorizeUrl);
+		process.stdout.write(`Complete ${label} sign-in in your browser.\n`);
+		return;
+	}
 	const payload = await client.connect.getAuthorizeUrl(provider.path);
 	const scopes = new URL(payload.url).searchParams.get("scope")?.split(" ").filter(Boolean) ?? [];
 	if (scopes.length > 0) {
@@ -6776,8 +5469,11 @@ function resolveConnectTargetOptions() {
 	if (local) return { local: true };
 	return { orgScoped: true };
 }
+function collectValues(value, previous) {
+	return previous.concat([value]);
+}
 function registerConnectCommand(program) {
-	program.command("connect [provider]").description("Connect third-party accounts (uses apiTarget; --local for local server)").option("--print-url", "Print the authorize URL and exit without opening the browser").action((provider, options) => runCliCommand("Could not fetch connect providers", async (ctx) => {
+	program.command("connect [provider]").description("Connect third-party accounts (uses apiTarget; --local for local server)").option("--oauth-scope <scope>", "OAuth permission scope to request (repeatable)", collectValues, []).option("--scope <scope>", "Credential scope: org, user, or project (repeatable)", collectValues, []).option("--project-id <id>", "Project id when scope includes project (repeatable)", collectValues, []).option("--print-url", "Print the authorize URL and exit without opening the browser").action((provider, options) => runCliCommand("Could not fetch connect providers", async (ctx) => {
 		const providers = await ctx.client.connect.listProviders();
 		if (!provider) {
 			if (providers.length === 0) {
@@ -6793,11 +5489,18 @@ function registerConnectCommand(program) {
 			const available = providers.map((entry) => entry.key).join(", ") || "(none)";
 			throw new Error(`Unknown provider "${provider}". Available: ${available}`);
 		}
+		const hasScopeFlags = options.scope.length > 0 || options.projectId.length > 0;
+		if (ctx.apiTarget.mode === "local" && hasScopeFlags) throw new Error("--scope and --project-id are only supported against the platform API (omit --local)");
+		const credentialScopes = ctx.apiTarget.mode === "platform" ? parseConnectScopes(options.scope, options.projectId) : void 0;
+		const platform = ctx.apiTarget.mode === "platform" ? createCliPlatformClient(createCliConfig()) : void 0;
 		await runConnect({
 			client: ctx.client,
+			platform,
 			provider: match,
 			serverUrl: ctx.serverUrl,
-			printUrl: options.printUrl
+			printUrl: options.printUrl,
+			oauthScopes: options.oauthScope,
+			credentialScopes
 		});
 	}, void 0, resolveConnectTargetOptions()));
 }
@@ -6811,67 +5514,120 @@ function resolveCredentialsTargetOptions(options = {}) {
 	return { orgScoped: true };
 }
 //#endregion
+//#region src/commands/credentials/run-credentials.ts
+async function withActivePlatformClient$1(config, fn) {
+	const platform = createCliPlatformClient(config);
+	await ensureActiveOrganization(config);
+	await fn(platform);
+}
+function isLocalCredentialsTarget() {
+	return Boolean(getCliTargetOptions().local);
+}
+async function runCredentialsCommand(fallback, fn) {
+	const config = createCliConfig();
+	const local = isLocalCredentialsTarget();
+	try {
+		if (local) {
+			await fn({
+				config,
+				local: true
+			});
+			return;
+		}
+		await withActivePlatformClient$1(config, async (platform) => {
+			await fn({
+				config,
+				platform,
+				local: false
+			});
+		});
+	} catch (error) {
+		process.stderr.write(`${formatCliError(error, fallback, {
+			serverUrl: getPlatformUrl(config),
+			webUrl: getWebUrl(config)
+		})}\n`);
+		process.exitCode = 1;
+	}
+}
+function buildPlatformCreateRequest(args) {
+	const apiKey = Object.values(args.value)[0];
+	if (!apiKey) throw new Error("At least one --set field is required");
+	return {
+		appId: args.appId,
+		connectionKind: "manual",
+		apiKey,
+		projectIds: args.scope === "project" && args.projectId ? [args.projectId] : [],
+		createOrganizationCredential: args.scope === "org",
+		createUserProvidedCredential: args.scope === "user"
+	};
+}
+function buildPlatformUpdatePatch(args) {
+	return {
+		...args.label !== void 0 ? { label: args.label } : {},
+		...args.isDefault !== void 0 ? { isDefault: args.isDefault } : {},
+		...args.value ? { value: args.value } : {}
+	};
+}
+//#endregion
 //#region src/commands/credentials/delete.ts
 function registerCredentialsDeleteCommand(credentials) {
-	credentials.command("delete").description("Delete an api_key credential instance").argument("<id>", "Credential instance id").action((id) => runCliCommand("Delete credential failed", async ({ client }) => {
-		await client.credentials.deleteInstance(id);
-	}, void 0, resolveCredentialsTargetOptions()));
+	credentials.command("delete").description("Delete a credential instance").argument("<id>", "Credential instance id").action((id) => runCredentialsCommand("Delete credential failed", async ({ platform, local }) => {
+		if (local) {
+			const config = createCliConfig();
+			const target = await resolveApiTarget(config, {
+				...getCliTargetOptions(),
+				...resolveCredentialsTargetOptions()
+			});
+			await createCliClient(config, {
+				baseUrl: target.baseUrl,
+				platform: target.mode === "platform"
+			}).credentials.deleteInstance(id);
+			return;
+		}
+		await platform.credentials.delete(id);
+	}));
 }
 //#endregion
-//#region src/commands/credentials/list.ts
-function registerCredentialsListCommand(credentials) {
-	credentials.command("list").description("List stored credential instances").option("--key <key>", "Filter by credential key").action((options) => runCliCommand("List credential instances failed", async ({ client }) => {
-		const result = await client.credentials.listInstances(options.key ? { key: options.key } : void 0);
-		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-	}, void 0, resolveCredentialsTargetOptions()));
+//#region src/commands/credentials/get.ts
+function registerCredentialsGetCommand(credentials) {
+	credentials.command("get").description("Get a credential instance by id").argument("<id>", "Credential instance id").action((id) => runCredentialsCommand("Get credential failed", async ({ platform, local }) => {
+		if (local) {
+			const config = createCliConfig();
+			const target = await resolveApiTarget(config, {
+				...getCliTargetOptions(),
+				...resolveCredentialsTargetOptions()
+			});
+			const match = (await createCliClient(config, {
+				baseUrl: target.baseUrl,
+				platform: target.mode === "platform"
+			}).credentials.listInstances()).instances.find((instance) => instance.id === id);
+			if (!match) throw new Error(`Credential ${id} not found`);
+			process.stdout.write(`${JSON.stringify(match, null, 2)}\n`);
+			return;
+		}
+		const credential = await platform.credentials.get(id);
+		process.stdout.write(`${JSON.stringify({ credential }, null, 2)}\n`);
+	}));
 }
 //#endregion
-//#region src/commands/credentials/format-set-conflict-error.ts
-function describeInstance(instance) {
-	const defaultStatus = instance.isDefault ? "default" : "not default";
-	const labelStatus = instance.label ? `label: ${instance.label}` : "no label";
-	return `id: ${instance.id}, ${defaultStatus}, ${labelStatus}`;
-}
-function formatSetFields(setFields) {
-	return setFields.map((field) => `--set ${field}`).join(" ");
-}
-function formatSetConflictError(args) {
-	const binary = cliBinaryName();
-	const setArgs = formatSetFields(args.setFields);
-	const listCmd = `${binary} credentials list --key ${args.key}`;
-	const addSecondCmd = `${binary} credentials set ${args.key} --scope ${args.scope} --label <name> ${setArgs}`;
-	if (args.matching.length === 1) {
-		const instance = args.matching[0];
-		const updateCmd = `${binary} credentials update ${instance.id} ${setArgs}`;
-		return [
-			`An ${args.key} credential already exists in ${args.scope} scope (${describeInstance(instance)}).`,
-			"credentials set creates a new instance — it does not update an existing one.",
-			"To update the existing credential:",
-			`  ${updateCmd}`,
-			"To add a second credential in the same scope:",
-			`  ${addSecondCmd}`,
-			`List instances: ${listCmd}`
-		].join("\n");
-	}
-	const instanceLines = args.matching.map((instance) => `  • ${describeInstance(instance)}`);
-	return [
-		`Multiple ${args.key} credentials already exist in ${args.scope} scope. --label is required to add another:`,
-		...instanceLines,
-		"To add another credential in the same scope:",
-		`  ${addSecondCmd}`,
-		`List instances: ${listCmd}`
-	].join("\n");
-}
-async function assertNoSetConflict(client, args) {
-	if (args.label) return;
-	const { instances } = await client.credentials.listInstances({ key: args.key });
-	const matching = instances.filter((instance) => instance.scopeType === args.scopeType && (args.scopeType !== "project" || instance.scopeId === args.projectId));
-	if (matching.length === 0) return;
-	throw new Error(formatSetConflictError({
-		key: args.key,
-		scope: args.scope,
-		setFields: args.setFields,
-		matching
+//#region src/commands/credentials/list.ts
+function registerCredentialsListCommand(credentials) {
+	credentials.command("list").description("List stored credential instances").option("--key <key>", "Filter by credential key (local server only)").action((options) => runCredentialsCommand("List credential instances failed", async ({ platform, local }) => {
+		if (local) {
+			const config = createCliConfig();
+			const target = await resolveApiTarget(config, {
+				...getCliTargetOptions(),
+				...resolveCredentialsTargetOptions()
+			});
+			const result = await createCliClient(config, {
+				baseUrl: target.baseUrl,
+				platform: target.mode === "platform"
+			}).credentials.listInstances(options.key ? { key: options.key } : void 0);
+			process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+			return;
+		}
+		const credentialsList = await platform.credentials.list();
+		process.stdout.write(`${JSON.stringify({ credentials: credentialsList }, null, 2)}\n`);
 	}));
 }
 //#endregion
@@ -6956,33 +5712,127 @@ function scopeTypeFromCli(scope) {
 	}
 }
 //#endregion
+//#region src/commands/credentials/rotate-key.ts
+function registerCredentialsRotateKeyCommand(credentials) {
+	credentials.command("rotate-key").description("Rotate an api_key credential secret").argument("<id>", "Credential instance id").requiredOption("--set <field>", "Credential field as key=value or key=@env:VAR", collectSetValues$2, []).action((id, options) => runCredentialsCommand("Rotate credential key failed", async ({ platform, local }) => {
+		const value = parseCredentialValueFields(options.set);
+		if (local) throw new Error("credentials rotate-key requires the platform API target (omit --local)");
+		const patch = buildPlatformUpdatePatch({ value });
+		const credential = await platform.credentials.update(id, patch);
+		process.stdout.write(`${JSON.stringify({ credential }, null, 2)}\n`);
+	}));
+}
+function collectSetValues$2(value, previous) {
+	return previous.concat([value]);
+}
+//#endregion
+//#region src/commands/credentials/format-set-conflict-error.ts
+function describeInstance(instance) {
+	const defaultStatus = instance.isDefault ? "default" : "not default";
+	const labelStatus = instance.label ? `label: ${instance.label}` : "no label";
+	return `id: ${instance.id}, ${defaultStatus}, ${labelStatus}`;
+}
+function formatSetFields(setFields) {
+	return setFields.map((field) => `--set ${field}`).join(" ");
+}
+function formatSetConflictError(args) {
+	const binary = cliBinaryName();
+	const setArgs = formatSetFields(args.setFields);
+	const listCmd = `${binary} credentials list --key ${args.key}`;
+	const addSecondCmd = `${binary} credentials set ${args.key} --scope ${args.scope} --label <name> ${setArgs}`;
+	if (args.matching.length === 1) {
+		const instance = args.matching[0];
+		const updateCmd = `${binary} credentials update ${instance.id} ${setArgs}`;
+		return [
+			`An ${args.key} credential already exists in ${args.scope} scope (${describeInstance(instance)}).`,
+			"credentials set creates a new instance — it does not update an existing one.",
+			"To update the existing credential:",
+			`  ${updateCmd}`,
+			"To add a second credential in the same scope:",
+			`  ${addSecondCmd}`,
+			`List instances: ${listCmd}`
+		].join("\n");
+	}
+	const instanceLines = args.matching.map((instance) => `  • ${describeInstance(instance)}`);
+	return [
+		`Multiple ${args.key} credentials already exist in ${args.scope} scope. --label is required to add another:`,
+		...instanceLines,
+		"To add another credential in the same scope:",
+		`  ${addSecondCmd}`,
+		`List instances: ${listCmd}`
+	].join("\n");
+}
+async function assertNoSetConflict(client, args) {
+	if (args.label) return;
+	const { instances } = await client.credentials.listInstances({ key: args.key });
+	const matching = instances.filter((instance) => instance.scopeType === args.scopeType && (args.scopeType !== "project" || instance.scopeId === args.projectId));
+	if (matching.length === 0) return;
+	throw new Error(formatSetConflictError({
+		key: args.key,
+		scope: args.scope,
+		setFields: args.setFields,
+		matching
+	}));
+}
+//#endregion
 //#region src/commands/credentials/set.ts
 function registerCredentialsSetCommand(credentials) {
-	credentials.command("set").description("Create a new api_key credential instance").argument("<key>", "Credential key, e.g. exa").requiredOption("--scope <scope>", "org, user, project, or global").option("--project-id <id>", "Project id when scope is project").option("--label <label>", "Human-readable label within the scope").option("--default", "Mark as default for this scope").option("--set <field>", "Credential field as key=value or key=@env:VAR (falls back to project .env when unset in shell)", collectSetValues$1, []).action((key, options) => runCliCommand("Set credential failed", async ({ client }) => {
+	credentials.command("set").description("Create a new api_key credential instance").argument("<key>", "Credential key or app id, e.g. exa").requiredOption("--scope <scope>", "org, user, project, or global").option("--project-id <id>", "Project id when scope is project").option("--label <label>", "Human-readable label within the scope").option("--default", "Mark as default for this scope").option("--set <field>", "Credential field as key=value or key=@env:VAR (falls back to project .env when unset in shell)", collectSetValues$1, []).action((key, options) => runCredentialsCommand("Set credential failed", async ({ platform, local }) => {
 		const value = parseCredentialValueFields(options.set);
 		const scopeType = scopeTypeFromCli(options.scope);
 		if (scopeType === "project" && !options.projectId) throw new Error("--project-id is required when scope is project");
-		await assertNoSetConflict(client, {
-			key,
+		if (local) {
+			const config = createCliConfig();
+			const target = await resolveApiTarget(config, {
+				...getCliTargetOptions(),
+				...resolveCredentialsTargetOptions({
+					scopeType,
+					projectId: options.projectId
+				})
+			});
+			const client = createCliClient(config, {
+				baseUrl: target.baseUrl,
+				platform: target.mode === "platform"
+			});
+			await assertNoSetConflict(client, {
+				key,
+				scope: options.scope,
+				scopeType,
+				projectId: options.projectId,
+				label: options.label,
+				setFields: options.set
+			});
+			const result = await client.credentials.createInstance({
+				key,
+				scopeType,
+				scopeId: scopeType === "project" ? options.projectId : void 0,
+				label: options.label,
+				isDefault: options.default,
+				value
+			});
+			process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+			return;
+		}
+		if (options.scope === "global") throw new Error("global scope is only supported against a local keystroke server");
+		const created = await platform.credentials.create(buildPlatformCreateRequest({
+			appId: key,
+			value,
 			scope: options.scope,
-			scopeType,
-			projectId: options.projectId,
-			label: options.label,
-			setFields: options.set
-		});
-		const result = await client.credentials.createInstance({
-			key,
-			scopeType,
-			scopeId: scopeType === "project" ? options.projectId : void 0,
-			label: options.label,
-			isDefault: options.default,
-			value
-		});
-		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-	}, void 0, resolveCredentialsTargetOptions({
-		scopeType: scopeTypeFromCli(options.scope),
-		projectId: options.projectId
-	})));
+			projectId: options.projectId
+		}));
+		if (options.label !== void 0 || options.default !== void 0) {
+			const patch = buildPlatformUpdatePatch({
+				...options.label !== void 0 ? { label: options.label } : {},
+				...options.default !== void 0 ? { isDefault: options.default } : {}
+			});
+			for (const credential of created) {
+				const updated = await platform.credentials.update(credential.id, patch);
+				process.stdout.write(`${JSON.stringify({ credential: updated }, null, 2)}\n`);
+			}
+			return;
+		}
+		process.stdout.write(`${JSON.stringify({ credentials: created }, null, 2)}\n`);
+	}));
 }
 function collectSetValues$1(value, previous) {
 	return previous.concat([value]);
@@ -6990,15 +5840,33 @@ function collectSetValues$1(value, previous) {
 //#endregion
 //#region src/commands/credentials/update.ts
 function registerCredentialsUpdateCommand(credentials) {
-	credentials.command("update").description("Update an api_key credential instance").argument("<id>", "Credential instance id").option("--label <label>", "Human-readable label within the scope").option("--default", "Mark as default for this scope").option("--set <field>", "Credential field as key=value or key=@env:VAR", collectSetValues, []).action((id, options) => runCliCommand("Update credential failed", async ({ client }) => {
+	credentials.command("update").description("Update a credential instance").argument("<id>", "Credential instance id").option("--label <label>", "Human-readable label within the scope").option("--default", "Mark as default for this scope").option("--set <field>", "Credential field as key=value or key=@env:VAR", collectSetValues, []).action((id, options) => runCredentialsCommand("Update credential failed", async ({ platform, local }) => {
 		const value = options.set.length > 0 ? parseCredentialValueFields(options.set) : void 0;
-		const result = await client.credentials.updateInstance(id, {
+		if (local) {
+			const config = createCliConfig();
+			const target = await resolveApiTarget(config, {
+				...getCliTargetOptions(),
+				...resolveCredentialsTargetOptions()
+			});
+			const result = await createCliClient(config, {
+				baseUrl: target.baseUrl,
+				platform: target.mode === "platform"
+			}).credentials.updateInstance(id, {
+				...options.label !== void 0 ? { label: options.label } : {},
+				...options.default !== void 0 ? { isDefault: options.default } : {},
+				...value ? { value } : {}
+			});
+			process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+			return;
+		}
+		const patch = buildPlatformUpdatePatch({
 			...options.label !== void 0 ? { label: options.label } : {},
 			...options.default !== void 0 ? { isDefault: options.default } : {},
 			...value ? { value } : {}
 		});
-		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-	}, void 0, resolveCredentialsTargetOptions()));
+		const credential = await platform.credentials.update(id, patch);
+		process.stdout.write(`${JSON.stringify({ credential }, null, 2)}\n`);
+	}));
 }
 function collectSetValues(value, previous) {
 	return previous.concat([value]);
@@ -7006,10 +5874,12 @@ function collectSetValues(value, previous) {
 //#endregion
 //#region src/commands/credentials/index.ts
 function registerCredentialsCommand(program) {
-	const credentials = program.command("credentials").description("Manage stored api_key credential instances");
+	const credentials = program.command("credentials").description("Manage platform app credentials and local api_key instances");
 	registerCredentialsListCommand(credentials);
+	registerCredentialsGetCommand(credentials);
 	registerCredentialsSetCommand(credentials);
 	registerCredentialsUpdateCommand(credentials);
+	registerCredentialsRotateKeyCommand(credentials);
 	registerCredentialsDeleteCommand(credentials);
 }
 //#endregion
@@ -7122,7 +5992,7 @@ function registerBuildCommand(program) {
 	program.command("build").description("Build the keystroke project for production").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
 		try {
 			const root = resolveProjectRoot(options.dir);
-			const { buildApp } = await import("./dist-Dswf_uJt.mjs");
+			const { buildApp } = await import("./dist-CcJj87Po.mjs");
 			await buildApp({ root });
 			process.stdout.write(`Built ${root}\n`);
 		} catch (error) {
@@ -7219,7 +6089,7 @@ async function runDeploy(options) {
 	const client = createCliPlatformClient(config);
 	let source;
 	if (!options.skipBuild) {
-		const { buildApp } = await import("./dist-Dswf_uJt.mjs");
+		const { buildApp } = await import("./dist-CcJj87Po.mjs");
 		source = { files: (await buildApp({
 			root,
 			collectSources: true,
@@ -7319,7 +6189,7 @@ function runtimeChildEnv(parentEnv, overrides) {
 //#region src/project/bootstrap-run.ts
 /** Node args + env for `@keystrokehq/build` bootstrap (shared by start + dev). */
 async function resolveBootstrapRun(options) {
-	const { resolveRuntimeBuildArtifact } = await import("./dist-Dswf_uJt.mjs");
+	const { resolveRuntimeBuildArtifact } = await import("./dist-CcJj87Po.mjs");
 	const loader = pathToFileURL(resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/runtime-loader.mjs")).href;
 	const bootstrap = resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/bootstrap.mjs");
 	const args = [`--import=${loader}`];
@@ -7469,7 +6339,7 @@ async function runDev(options) {
 	process.on("SIGINT", shutdown);
 	process.on("SIGTERM", shutdown);
 	try {
-		const { watchApp } = await import("./dist-Dswf_uJt.mjs");
+		const { watchApp } = await import("./dist-CcJj87Po.mjs");
 		await watchApp({
 			root,
 			clean: false,
@@ -8084,7 +6954,7 @@ async function runStart(options) {
 	const apiPort = Number(new URL(serverUrl).port || 80);
 	const runtimeNodeModules = resolveCliRuntimeNodeModules(resolveCliRoot(import.meta.url));
 	ensureNativeDeps(runtimeNodeModules);
-	const { buildApp } = await import("./dist-Dswf_uJt.mjs");
+	const { buildApp } = await import("./dist-CcJj87Po.mjs");
 	await buildApp({
 		root,
 		clean: false
@@ -8447,6 +7317,7 @@ function createProgram() {
 	registerDevCommand(program);
 	registerStartCommand(program);
 	registerAgentCommand(program);
+	registerAppCommand(program);
 	registerWorkflowCommand(program);
 	registerTriggerCommand(program);
 	return program;