@keystrokehq/cli 0.0.17 → 0.0.19

package/dist/{task-target-build-BG6cC3bz.mjs → task-target-build-DCV0UDaz.mjs}

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DMmY6oDW.mjs";
-import { mkdir, writeFile } from "node:fs/promises";
+import { r as getKeystrokeProjectPath } from "./paths-JzzFkXQA-CEipIeVl.mjs";
+import "./dist-CIInPRGh.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-B0eiobOd.mjs";
 import path from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
 import { createHash, randomUUID } from "node:crypto";
 //#region ../../packages/workflow-builder/dist/builder-options-BT2McCyF.mjs
@@ -109,7 +111,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-CZIixHeR.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-CNTyUzme.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -216,7 +218,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-RizI57RC-CxHwCkQ_.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-RizI57RC-DjhOsdOm.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +321,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-BNXDZU71.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-BRmL2lmw.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }
@@ -330,8 +332,7 @@ function readOptionalJsonSchemaKeysFromSchemaObject(schema) {
 	return properties.filter((key) => !required.has(key));
 }
 function getTaskRuntimeBundlePath(projectRoot, target) {
-	const hash = createHash("sha256").update(target.bindingKey).digest("hex").slice(0, 16);
-	return path.join(projectRoot, ".keystroke", "task-target-build", `${hash}.mjs`);
+	return getKeystrokeProjectPath(projectRoot, "task-target-build", `${createHash("sha256").update(target.bindingKey).digest("hex").slice(0, 16)}.mjs`);
 }
 async function writeRuntimeBundle(bundlePath, code) {
 	await mkdir(path.dirname(bundlePath), { recursive: true });

package/dist/{task-target-deploy-CZBGNC0H-Ck724yF4.mjs → task-target-deploy-CZBGNC0H-I-tvkGCC.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { n as SHA256HashSchema } from "./common-BaGFkj3n.mjs";
+import { n as SHA256HashSchema } from "./common-AK0q0Oz0.mjs";
 import { createHash } from "node:crypto";
 //#region ../../packages/shared-types/src/deployments/api/snapshot-payload.ts
 function sortObjectKeysDeep(value) {

package/dist/{task-target-deploy-gMQC8kXU.mjs → task-target-deploy-DmpCWE3u.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 
-import { n as deployTaskTargets } from "./task-target-deploy-CZBGNC0H-Ck724yF4.mjs";
+import { n as deployTaskTargets } from "./task-target-deploy-CZBGNC0H-I-tvkGCC.mjs";
 export { deployTaskTargets };

package/dist/task-target-deploy-runner.mjs

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 
-import "./default-urls-BS4twrsS.mjs";
-import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { r as getKeystrokeProjectPath } from "./paths-JzzFkXQA-CEipIeVl.mjs";
+import "./default-urls-BoSm4s9C.mjs";
+import "./dist-CIInPRGh.mjs";
+import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { t as resolveCliCredentials } from "./resolve-cli-credentials-DytxgMwn.mjs";
 import path from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
 //#region src/lib/process-handoff.ts
 function replaceProcessOrSpawn(options) {
@@ -22,8 +24,9 @@ function replaceProcessOrSpawn(options) {
 }
 //#endregion
 //#region src/task-target-deploy-runner.ts
-const TASK_TARGET_DESCRIPTOR_PATH = path.join(".keystroke", "task-target-deploy", "descriptor.json");
-const TASK_TARGET_BUILD_DESCRIPTOR_PATH = path.join(".keystroke", "task-target-deploy", "build-descriptor.json");
+const TASK_TARGET_DEPLOY_DIR = "task-target-deploy";
+const TASK_TARGET_DESCRIPTOR_FILE = "descriptor.json";
+const TASK_TARGET_BUILD_DESCRIPTOR_FILE = "build-descriptor.json";
 function parseArgs(argv) {
 	const options = {
 		targetFiles: [],
@@ -68,10 +71,10 @@ async function resolveProjectRoot(explicitPath) {
 	return discovered;
 }
 function descriptorPath(projectRoot) {
-	return path.join(projectRoot, TASK_TARGET_DESCRIPTOR_PATH);
+	return getKeystrokeProjectPath(projectRoot, TASK_TARGET_DEPLOY_DIR, TASK_TARGET_DESCRIPTOR_FILE);
 }
 function buildDescriptorPath(projectRoot) {
-	return path.join(projectRoot, TASK_TARGET_BUILD_DESCRIPTOR_PATH);
+	return getKeystrokeProjectPath(projectRoot, TASK_TARGET_DEPLOY_DIR, TASK_TARGET_BUILD_DESCRIPTOR_FILE);
 }
 async function writeDescriptor(projectRoot, descriptor) {
 	const filePath = descriptorPath(projectRoot);
@@ -116,7 +119,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-BG6cC3bz.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-DCV0UDaz.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -129,7 +132,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-BG6cC3bz.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-DCV0UDaz.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -142,12 +145,14 @@ async function runPreparePhase(projectRoot) {
 	});
 }
 async function resolveDeployAuthOptions(options) {
-	const resolved = await resolveAuthOptions({
-		apiKey: options.apiKey,
-		serverUrl: options.serverUrl
+	const envApiKey = process.env.KEYSTROKE_API_KEY;
+	const envServerUrl = process.env.SERVER_URL;
+	const resolved = await resolveCliCredentials({
+		apiKey: options.apiKey ?? envApiKey,
+		serverUrl: options.serverUrl ?? envServerUrl
 	});
-	const apiKey = resolved.apiKey ?? process.env.KEYSTROKE_API_KEY;
-	const serverUrl = resolved.serverUrl ?? process.env.SERVER_URL ?? "https://api.kestroke.ai";
+	const apiKey = resolved.apiKey;
+	const serverUrl = resolved.serverUrl ?? "https://api.keystroke.ai";
 	const organizationId = options.org ?? process.env.KEYSTROKE_ORG_ID ?? resolved.activeOrg?.organizationId;
 	if (!apiKey || !serverUrl) throw new Error("Not authenticated. Run `keystroke auth` or pass --api-key and --server-url.");
 	return {
@@ -158,11 +163,11 @@ async function resolveDeployAuthOptions(options) {
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-CJbVB7e2.mjs");
+	const { createDeployClient } = await import("./deploy-BPDUTKZD.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-gMQC8kXU.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-DmpCWE3u.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-CKBpp1gg.mjs → test-TTQXrhHm.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-CGdYhH0p.mjs";
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
+import { t as createTypedCommand } from "./commander-C5qcOo8m.mjs";
 import { z } from "zod";
 //#region src/commands/test/test.command.ts
 const TestOptionsSchema = JsonOptionSchema;
@@ -63,7 +63,7 @@ function createTestCommand() {
 				description: "Agent tool name from the built manifest",
 				key: "toolName"
 			},
-			loadHandler: async () => (await import("./tool.handler--IzRGelu.mjs")).handleTestTool
+			loadHandler: async () => (await import("./tool.handler-DMfFZCRg.mjs")).handleTestTool
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/{test.handler-DkizZhVu.mjs → test.handler-B7Ahe9ta.mjs}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 
-import { k as CliExitError, n as ui, o as isLocalMode, x as toErrorMessage } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B1L8pZsH.mjs";
-import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-C9rQQ4qU.mjs";
-import { r as isUnknownSchema } from "./schema-display-CNqiYBIb.mjs";
-import { t as createBuildProgress } from "./build-progress-BZivcVz4.mjs";
-import { t as withErrorBoundary } from "./error-boundary-CyLcinp1.mjs";
-import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BWcLQvm0.mjs";
+import { D as CliExitError, a as ui, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-CIInPRGh.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-BydAGTiB.mjs";
+import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-Cx0RV8s7.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-C8AiYxqp.mjs";
+import { r as isUnknownSchema } from "./schema-display-NVEl_DFY.mjs";
+import { t as createBuildProgress } from "./build-progress-AR8xow4_.mjs";
+import { t as withErrorBoundary } from "./error-boundary-B8cmSwJH.mjs";
+import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BhOdFyh3.mjs";
 //#region src/lib/format.ts
 function formatBytes(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
@@ -26,7 +26,7 @@ function formatBytes(bytes) {
 async function resolveAndValidateInputForRun(options) {
 	const input = await resolveInput(options);
 	const workflowsDir = await requireWorkflowsDir(options.path);
-	trackProject(workflowsDir);
+	projects.track(workflowsDir);
 	const existingSchema = await tryReadExistingInputSchema(workflowsDir, options.workflow);
 	if (existingSchema && !isUnknownSchema(existingSchema)) validateInputOrExit(options.workflow, input, existingSchema);
 	return {

package/dist/{test.handler-Dk3CmTa7.mjs → test.handler-CkkplyX6.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-B1L8pZsH.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-BydAGTiB.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{tool.handler--IzRGelu.mjs → tool.handler-DMfFZCRg.mjs}

@@ -1,18 +1,20 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, a as getProcessEnv, k as CliExitError, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B1L8pZsH.mjs";
-import { a as readManifestsFromOutDir } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-C9rQQ4qU.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BRUEdPrN.mjs";
-import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BWcLQvm0.mjs";
-import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { D as CliExitError, a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { t as Credentials } from "./dist-CIInPRGh.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-BydAGTiB.mjs";
+import { a as readManifestsFromOutDir } from "./dist-Cx0RV8s7.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-C8AiYxqp.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BVliROAz.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BhOdFyh3.mjs";
+import * as os from "node:os";
 import { tmpdir } from "node:os";
+import * as path$1 from "node:path";
 import path from "node:path";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
 //#region ../../packages/testing/src/shared/create-mock-hook.ts
 /** Creates a Hook that resolves immediately when awaited. */
@@ -142,12 +144,30 @@ function createCredentialCache() {
 }
 //#endregion
 //#region ../../packages/testing/src/test-runtime/credentials/server-resolver.ts
+/**
+* Default `CredentialAuthResolver` that derives a `homeDir` from the supplied
+* `credentialsPath` (when present) and reads from the local-memory
+* `Credentials` controller. Falls back to the singleton on the user's home.
+*/
+const defaultResolveAuth = async (input) => {
+	const credentials = new Credentials({ homeDir: input.credentialsPath ? path$1.dirname(path$1.dirname(input.credentialsPath)) : os.homedir() });
+	let active = null;
+	let urls = null;
+	try {
+		active = await credentials.getActiveOrg();
+		urls = await credentials.getServerUrls();
+	} catch {}
+	return {
+		apiKey: input.apiKey ?? active?.apiKey,
+		serverUrl: input.serverUrl ?? urls?.serverUrl
+	};
+};
 async function createServerCredentialResolver(options, dependencies = {
 	fetch: globalThis.fetch,
-	resolveAuthOptions
+	resolveAuth: defaultResolveAuth
 }) {
 	try {
-		const resolvedAuth = await dependencies.resolveAuthOptions({
+		const resolvedAuth = await dependencies.resolveAuth({
 			apiKey: options.apiKey,
 			serverUrl: options.baseUrl,
 			credentialsPath: options.credentialsPath
@@ -394,7 +414,7 @@ async function executeOperationTool(params) {
 			mode: "auto",
 			apiKey: ctx.apiKey,
 			baseUrl: ctx.baseUrl,
-			credentialsPath: ctx.credentialsPath
+			credentialsPath: ctx.metadataFilePath
 		},
 		source: "cli",
 		sourceLabel: "CLI"

package/dist/{trigger-artifacts-RizI57RC-CxHwCkQ_.mjs → trigger-artifacts-RizI57RC-DjhOsdOm.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-B6h4WRv4.mjs";
-import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-CO5ir_za.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DMmY6oDW.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CZIixHeR.mjs";
+import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-D6KT-r-e.mjs";
+import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-8uqgIurC.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-B0eiobOd.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CNTyUzme.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-RizI57RC.mjs

package/dist/{trigger-manifest-PTjVYL1r.mjs → trigger-manifest-DxdCjGz_.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { a as TriggerCredentialRequirementsSchema, l as WebhookMethodSchema, o as TriggerSourceSchema, s as TriggerTypeSchema } from "./credential-requirements-FtBk5JVB.mjs";
+import { a as TriggerCredentialRequirementsSchema, l as WebhookMethodSchema, o as TriggerSourceSchema, s as TriggerTypeSchema } from "./credential-requirements-Ob-7H-0F.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({

package/dist/{upgrade-cH9I_pZq.mjs → upgrade-Cx-bUWUc.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { t as createTypedCommand } from "./commander-C5qcOo8m.mjs";
 import { z } from "zod";
 //#region src/commands/upgrade/upgrade.command.ts
 const PackageManagerSchema = z.enum([
@@ -34,7 +34,7 @@ function createUpgradeCommand() {
 		description: "Upgrade the Keystroke CLI to the latest published version",
 		schema: UpgradeOptionsSchema,
 		optionsConfig: UPGRADE_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upgrade.handler-CXEF4ue0.mjs")).handleUpgrade
+		loadHandler: async () => (await import("./upgrade.handler-5qSzPC7D.mjs")).handleUpgrade
 	});
 }
 //#endregion

package/dist/{upgrade.handler-CXEF4ue0.mjs → upgrade.handler-5qSzPC7D.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui, x as toErrorMessage } from "./keystroke.mjs";
+import { a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
 import { spawn } from "node:child_process";
 //#region src/commands/upgrade/upgrade.handler.ts
 const CLI_PACKAGE_NAME = "@keystrokehq/cli";

package/dist/{upload.handler-CpKuAaQ_.mjs → upload.handler-_d2WZwxd.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, a as getProcessEnv, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { a as writeJsonError, i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
-import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-BgT4mLzW.mjs";
-import { t as readCredentialEnvMap } from "./credential-env-map-B2nVJXPn.mjs";
-import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-CiOwDS5y.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-CfyBUMPS.mjs";
+import { a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { a as writeJsonError, i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
+import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-Cx0RV8s7.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-CmvYPvI6.mjs";
+import { t as readCredentialEnvMap } from "./credential-env-map-BA4LNI7x.mjs";
+import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-jRiXEr6P.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-z74ud-YZ.mjs";
 import * as path$1 from "node:path";
 import { confirm, isCancel } from "@clack/prompts";
 //#region src/commands/credentials/upload/upload.handler.ts

package/dist/{users.get.handler-D0WO6D1K.mjs → users.get.handler-DIooG7Wy.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-ByLX0A-V.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
 //#region src/commands/admin/users.get.handler.ts
 async function handleAdminUsersGet(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{users.list.handler-BSTIniF1.mjs → users.list.handler-DdGW-DSg.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-ByLX0A-V.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
 import Table from "cli-table3";
 //#region src/commands/admin/users.list.handler.ts
 async function handleAdminUsersList(options, ctx) {

package/dist/{users.set-role.handler-DAKdSkbn.mjs → users.set-role.handler-Ek-kntLp.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
-import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-ByLX0A-V.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
+import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
 //#region src/commands/admin/users.set-role.handler.ts
 async function handleAdminUsersSetRole(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{utils-VC0Vl_pm.mjs → utils-BMUWnz1P.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { i as readProjectConfig } from "./project-config-CsBMT4TL.mjs";
-import { h as resolveBuildOutputDir } from "./layout-CXkZEsXI.mjs";
+import { i as readProjectConfig } from "./project-config-DudGRFPO.mjs";
+import { h as resolveBuildOutputDir } from "./layout-P1v-Gssz.mjs";
 import path from "node:path";
 //#region ../../packages/project-config/src/utils.ts
 function resolveConfiguredBuildOutputDir(projectRoot, buildConfig) {

package/dist/{validate.handler-I8LY-UkG.mjs → validate.handler-Cq2uJjXY.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { s as build, t as WorkflowNotFoundError } from "./workflow-build-C9rQQ4qU.mjs";
-import { t as createBuildProgress } from "./build-progress-BZivcVz4.mjs";
-import { mkdtemp, rm } from "node:fs/promises";
+import { a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-CIInPRGh.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { s as build, t as WorkflowNotFoundError } from "./workflow-build-C8AiYxqp.mjs";
+import { t as createBuildProgress } from "./build-progress-AR8xow4_.mjs";
 import * as os from "node:os";
 import * as path$1 from "node:path";
+import { mkdtemp, rm } from "node:fs/promises";
 //#region src/commands/workflows/validate/workflow-validate.ts
 /**
 * workflow-validate.ts
@@ -256,7 +256,7 @@ function renderValidateFailure(error, asJson) {
 //#region src/commands/workflows/validate/validate.handler.ts
 async function handleWorkflowsValidate(options, ctx) {
 	const workflowsDir = await requireWorkflowsDir(options.path);
-	trackProject(workflowsDir);
+	projects.track(workflowsDir);
 	const { jsonMode } = ctx;
 	renderValidateHeader(options.workflow);
 	const progress = createBuildProgress(options.workflow ?? "all workflows");

package/dist/{workflow-build-C9rQQ4qU.mjs → workflow-build-C8AiYxqp.mjs}

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
 
 import { i as __toESM, n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { d as originalConsole, f as ANSI, n as ui, p as style, u as logger, x as toErrorMessage } from "./keystroke.mjs";
-import { a as getKeystrokeTmpDir } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-OPFqFD6f.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-CZdlCTFs.mjs";
-import { r as RelativeFilePathSchema } from "./file-metadata-DaPPpiTh.mjs";
-import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-CXkZEsXI.mjs";
-import { t as resolveConfiguredBuildOutputDir } from "./utils-VC0Vl_pm.mjs";
-import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-rRTPU13L.mjs";
-import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-Bv-B0nHj-CqlcZz_g.mjs";
-import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-B-SpZ0G2-olEAgSLc.mjs";
-import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module--8x5SLum-DaUNACER.mjs";
-import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-DdiZWqe2.mjs";
-import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-BBg2E_6G-BQqm16RR.mjs";
-import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-DFTvyA27.mjs";
-import * as fs from "node:fs/promises";
-import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
+import { F as originalConsole, P as logger, a as ui, n as style, t as ANSI, y as toErrorMessage } from "./keystroke.mjs";
+import { r as getKeystrokeTmpDir } from "./dist-CIInPRGh.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-BKKW9D05.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-tIsqF2OP.mjs";
+import { r as RelativeFilePathSchema } from "./file-metadata-lrX05iRt.mjs";
+import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-P1v-Gssz.mjs";
+import { t as resolveConfiguredBuildOutputDir } from "./utils-BMUWnz1P.mjs";
+import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-FPT0bJaA.mjs";
+import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-Bv-B0nHj-B1c5giJ7.mjs";
+import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-B-SpZ0G2-CLh7sXRd.mjs";
+import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module--8x5SLum-DjPUZr4i.mjs";
+import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-Cvx4Z-4H.mjs";
+import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-BBg2E_6G-Ut7kYHOz.mjs";
+import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-D4wSBHgG.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
+import * as fs from "node:fs/promises";
+import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { z } from "zod";
 import { createHash } from "node:crypto";
@@ -978,7 +978,7 @@ async function buildDiscoveredWorkflows(options) {
 	const failures = [...buildPlan.failures];
 	const warnings = [];
 	if (buildPlan.workflows.length > 0) {
-		const { buildWorkflowArtifacts } = await import("./build-workflows-CV4tBo6S-knCnBKTc.mjs");
+		const { buildWorkflowArtifacts } = await import("./build-workflows-CV4tBo6S-szwrAGWT.mjs");
 		const result = await buildWorkflowArtifacts({
 			entries: buildPlan.workflows,
 			workflowsByKey,
@@ -993,7 +993,7 @@ async function buildDiscoveredWorkflows(options) {
 		warnings.push(...result.warnings);
 	}
 	if (buildPlan.agents.length > 0) {
-		const { buildAgentArtifacts } = await import("./build-agents-DseUtzd4-VYWtIZy9.mjs");
+		const { buildAgentArtifacts } = await import("./build-agents-DseUtzd4-CthuIecx.mjs");
 		const result = await buildAgentArtifacts({
 			entries: buildPlan.agents,
 			projectRoot: options.projectRoot
@@ -1002,7 +1002,7 @@ async function buildDiscoveredWorkflows(options) {
 		failures.push(...result.failures);
 	}
 	if (buildPlan.tasks.length > 0) {
-		const { buildTaskArtifacts } = await import("./build-tasks-GVuMLS0h-p08mMOyK.mjs");
+		const { buildTaskArtifacts } = await import("./build-tasks-GVuMLS0h-BaPhhGXO.mjs");
 		const result = await buildTaskArtifacts({
 			entries: buildPlan.tasks,
 			projectRoot: options.projectRoot,
@@ -1110,7 +1110,7 @@ async function createBuildPlan(options) {
 		const currentWorkflowIndex = workflowProgressIndex;
 		workflowProgressIndex += 1;
 		if (!loadResult?.ok) {
-			const { createWorkflowMetadataFailure } = await import("./build-workflows-CV4tBo6S-knCnBKTc.mjs");
+			const { createWorkflowMetadataFailure } = await import("./build-workflows-CV4tBo6S-szwrAGWT.mjs");
 			plan.failures.push(createWorkflowMetadataFailure(discoveredWorkflow, loadResult?.error));
 			continue;
 		}
@@ -1308,7 +1308,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			cacheResolvedBindingKeys,
 			releaseBundleMemory: config.releaseBundleMemory
 		};
-		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-B-SpZ0G2-olEAgSLc.mjs").then((n) => n.f).then((n) => n.t);
+		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-B-SpZ0G2-CLh7sXRd.mjs").then((n) => n.f).then((n) => n.t);
 		const writeResult = targetBindingKeys ? await writeTargetedBuildOutput({
 			artifacts: finalizedScopedArtifacts,
 			agentArtifacts,
@@ -1333,7 +1333,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			elapsedMs: performance.now() - writeStartedAt,
 			...writeResult.skippedWriteCount !== void 0 && writeResult.skippedWriteCount > 0 ? { skippedWriteCount: writeResult.skippedWriteCount } : {}
 		});
-		const { buildMetadataArtifacts } = await import("./build-metadata-C8Ra_Gi--BdoyLQMl.mjs");
+		const { buildMetadataArtifacts } = await import("./build-metadata-C8Ra_Gi--L3l8w0rh.mjs");
 		const metadata = await buildMetadataArtifacts({
 			projectRoot: config.projectRoot,
 			outputDir,

package/dist/{workflow-build-manifest-OPFqFD6f.mjs → workflow-build-manifest-BKKW9D05.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { n as SHA256HashSchema, t as JsonSchemaSchema } from "./common-BaGFkj3n.mjs";
-import { a as SourceLocationSchema, i as ImportSourceSchema, n as CallsiteFingerprintSchema, t as CallKindSchema } from "./source-analysis-CJPymdaA.mjs";
-import { c as TriggerUploadDataSchema, i as ResolvedCredentialSetSchema, r as IntegrationScopeSchema, t as CredentialRequirementsSchema, u as WorkflowStepEntrySchema } from "./credential-requirements-FtBk5JVB.mjs";
+import { n as SHA256HashSchema, t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
+import { a as SourceLocationSchema, i as ImportSourceSchema, n as CallsiteFingerprintSchema, t as CallKindSchema } from "./source-analysis-Cs0CTBQk.mjs";
+import { c as TriggerUploadDataSchema, i as ResolvedCredentialSetSchema, r as IntegrationScopeSchema, t as CredentialRequirementsSchema, u as WorkflowStepEntrySchema } from "./credential-requirements-Ob-7H-0F.mjs";
 import { z } from "zod";
 //#region ../../packages/workflow-build-contracts/src/flow-graph-schema.ts
 const DecisionKindSchema = z.enum([

package/dist/{workflow-bundler-BzHk73PM-AIB4-u4Y.mjs → workflow-bundler-BzHk73PM-WI31RJjH.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-DdiZWqe2.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CZIixHeR.mjs";
-import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-Cvx4Z-4H.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CNTyUzme.mjs";
 import * as path$1 from "node:path";
+import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/workflow-bundler-BzHk73PM.mjs