@keystrokehq/cli 0.0.20 → 0.0.22

package/dist/{test.handler-DhhcsvHN.mjs → test.handler-CAsVgOpT.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { a as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-BUzxM3QI.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-B2cQ-Nt3.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{tool.handler-C3LNyQbc.mjs → tool.handler-BHS5Z4J_.mjs}

@@ -1,23 +1,21 @@
 #!/usr/bin/env node
 
 import { D as CliExitError, a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
-import { t as Credentials } from "./dist-CIInPRGh.mjs";
+import { t as Credentials } from "./dist-DuJjDZIf.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
 import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-BUzxM3QI.mjs";
-import { a as readManifestsFromOutDir } from "./dist-BGrWr5fp.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CWP2fji3.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-IGYhEC8Y.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-pyBoobIm.mjs";
-import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DKclfet-.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B2cQ-Nt3.mjs";
+import { a as readManifestsFromOutDir } from "./dist-Br4m3sFZ.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cj3MFnU0.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Bi1Aacc5.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-qMfOrRIu.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-3XOGl4hh.mjs";
 import * as os from "node:os";
 import { tmpdir } from "node:os";
 import * as path$1 from "node:path";
 import path from "node:path";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
-import { clearOperationContext, clearOperationCredentialResolver, registerOperationContext, registerOperationCredentialResolver } from "@keystrokehq/core/operation/runtime";
-import { clearRuntime, registerRuntime } from "@keystrokehq/core/workflow/runtime";
 //#region ../../packages/testing/src/shared/create-mock-hook.ts
 /** Creates a Hook that resolves immediately when awaited. */
 function createMockHook() {
@@ -43,6 +41,62 @@ function createTestWorkflowContext(options = {}) {
 	};
 }
 //#endregion
+//#region ../../packages/core/dist/chunks/execution-scope-BCDb3CU7.mjs
+const SCOPE_STACK_KEY = "__ks_execution_scope_stack__";
+function getScopeStack() {
+	const g = globalThis;
+	if (!g[SCOPE_STACK_KEY]) g[SCOPE_STACK_KEY] = [];
+	return g[SCOPE_STACK_KEY];
+}
+function getCurrentScope() {
+	const stack = getScopeStack();
+	return stack[stack.length - 1] ?? getDefaultScope();
+}
+const DEFAULT_SCOPE_KEY = "__ks_execution_scope_default__";
+function getDefaultScope() {
+	const g = globalThis;
+	if (!g[DEFAULT_SCOPE_KEY]) g[DEFAULT_SCOPE_KEY] = { stepContextProviders: [] };
+	return g[DEFAULT_SCOPE_KEY];
+}
+function setExecutionScopeWorkflowRuntime(provider) {
+	const scope = getCurrentScope();
+	scope.workflowRuntimeProvider = provider;
+}
+function pushExecutionScopeStepContext(provider) {
+	const scope = getCurrentScope();
+	scope.stepContextProviders = [...scope.stepContextProviders, provider];
+}
+function clearExecutionScopeStepContexts() {
+	const scope = getCurrentScope();
+	scope.stepContextProviders = [];
+}
+function setExecutionScopeStepCredentialResolver(resolver) {
+	const scope = getCurrentScope();
+	scope.stepCredentialResolver = resolver;
+}
+//#endregion
+//#region ../../packages/core/dist/chunks/credential-resolver-registry-BRH30wCz.mjs
+function registerOperationContext(registry) {
+	pushExecutionScopeStepContext(registry.getOperationContext);
+}
+function clearOperationContext() {
+	clearExecutionScopeStepContexts();
+}
+function registerOperationCredentialResolver(resolver) {
+	setExecutionScopeStepCredentialResolver(resolver.resolveOperationCredentials);
+}
+function clearOperationCredentialResolver() {
+	setExecutionScopeStepCredentialResolver(void 0);
+}
+//#endregion
+//#region ../../packages/core/dist/chunks/context-registry-DqNWcTgK.mjs
+function registerRuntime(registry) {
+	setExecutionScopeWorkflowRuntime(registry.getRuntime);
+}
+function clearRuntime() {
+	setExecutionScopeWorkflowRuntime(void 0);
+}
+//#endregion
 //#region ../../packages/testing/src/test-runtime/credentials/env-resolver.ts
 /**
 * Computes the env var name for a credential key.

package/dist/{trigger-artifacts-BcRScRSp-DqFgzl_B.mjs → trigger-artifacts-BcRScRSp-C-JBJ6y8.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { c as readOptionalJsonSchemaKeys } from "./src-BHTjsZ9V.mjs";
-import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-BoF7MLzP.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-CzXPGxdU.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D8-hxij0.mjs";
+import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-B6h4WRv4.mjs";
+import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-RuJszab7.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-aLuQvlIq.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D4aTZv4R.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-BcRScRSp.mjs

package/dist/{trigger-manifest-DTni4NaZ.mjs → trigger-manifest-C07EM-b2.mjs}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
-import { l as JsonSchemaSchema, t as src_exports } from "./src-BHTjsZ9V.mjs";
+import { t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
+import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-D0mavK8j-CFMf0Xwu.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({
@@ -15,12 +16,12 @@ const TriggerBuildManifestSchema = z.object({
 	* `logicalTriggerKey` (`id`) back to the human-authored name.
 	*/
 	authoredTriggerId: z.string().min(1),
-	type: src_exports.TriggerTypeSchema,
+	type: TriggerTypeSchema,
 	/**
 	* Webhook source discriminator (`'custom' | 'app'`). Undefined for
 	* non-webhook triggers.
 	*/
-	triggerSource: src_exports.TriggerSourceSchema.optional(),
+	triggerSource: TriggerSourceSchema.optional(),
 	/**
 	* Root-trigger lineage key for `.narrow()` lineage. Narrowed custom-webhook
 	* siblings share the same `webhookSecretHash`/`webhookPublicId` via this key.
@@ -31,11 +32,11 @@ const TriggerBuildManifestSchema = z.object({
 	schedule: z.string().optional(),
 	timezone: z.string().optional(),
 	config: z.record(z.string(), z.unknown()).optional(),
-	requiredCredentials: src_exports.TriggerCredentialRequirementsSchema.optional(),
+	requiredCredentials: TriggerCredentialRequirementsSchema.optional(),
 	/** Server-side JSON Schema filter; replaces the legacy filter callback. */
 	filterSchema: JsonSchemaSchema.optional(),
 	/** Declarative idempotency-key resolver; replaces the legacy callback. */
-	idempotencyConfig: src_exports.IdempotencyKeyConfigSchema.optional(),
+	idempotencyConfig: IdempotencyKeyConfigSchema.optional(),
 	functions: z.record(z.string(), TriggerBuildFunctionSchema).optional()
 });
 //#endregion

package/dist/{upgrade-Cf7y38xR.mjs → upgrade-bZVjVXnu.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-DQLrBSIW.mjs";
+import { t as createTypedCommand } from "./commander-9Kro0Dl3.mjs";
 import { z } from "zod";
 //#region src/commands/upgrade/upgrade.command.ts
 const PackageManagerSchema = z.enum([
@@ -34,7 +34,7 @@ function createUpgradeCommand() {
 		description: "Upgrade the Keystroke CLI to the latest published version",
 		schema: UpgradeOptionsSchema,
 		optionsConfig: UPGRADE_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upgrade.handler-Bz_oQcAw.mjs")).handleUpgrade
+		loadHandler: async () => (await import("./upgrade.handler-C7KvNL0x.mjs")).handleUpgrade
 	});
 }
 //#endregion

package/dist/{upload-CJWApEgz.mjs → upload-CE4H5R1h.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { n as __exportAll } from "./chunk-DYxdGL9S.mjs";
+import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
 import path from "node:path";
 import { createReadStream, promises } from "node:fs";
 import { fileURLToPath } from "node:url";

package/dist/{upload.handler-BHIWYPph.mjs → upload.handler-DXVx2u3A.mjs}

@@ -3,13 +3,13 @@
 import { a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
 import { a as writeJsonError, i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-BUzxM3QI.mjs";
-import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-BGrWr5fp.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CWP2fji3.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-BrJsBkfx.mjs";
-import { t as readCredentialEnvMap } from "./credential-env-map-qLCR_QbO.mjs";
-import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-xPtLFTjW.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-BHI_B-U-.mjs";
+import { i as requireClient } from "./context-B2cQ-Nt3.mjs";
+import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-Br4m3sFZ.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cj3MFnU0.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-cYlTmOSb.mjs";
+import { t as readCredentialEnvMap } from "./credential-env-map-Dvp00a4M.mjs";
+import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DQW8xxof.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-kfGeiSB1.mjs";
 import * as path$1 from "node:path";
 import { confirm, isCancel } from "@clack/prompts";
 //#region src/commands/credentials/upload/upload.handler.ts

package/dist/{users.get.handler-spWaHG8h.mjs → users.get.handler-DqD2ELK2.mjs}

@@ -2,7 +2,7 @@
 
 import { a as ui } from "./keystroke.mjs";
 import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-BUzxM3QI.mjs";
+import { i as requireClient } from "./context-B2cQ-Nt3.mjs";
 import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
 //#region src/commands/admin/users.get.handler.ts
 async function handleAdminUsersGet(options, ctx) {

package/dist/{users.list.handler-DLuU7cd_.mjs → users.list.handler-DZSPvpGF.mjs}

@@ -2,7 +2,7 @@
 
 import { a as ui } from "./keystroke.mjs";
 import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-BUzxM3QI.mjs";
+import { i as requireClient } from "./context-B2cQ-Nt3.mjs";
 import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
 import Table from "cli-table3";
 //#region src/commands/admin/users.list.handler.ts

package/dist/{users.set-role.handler-CojFmpcD.mjs → users.set-role.handler-73smNUVF.mjs}

@@ -2,7 +2,7 @@
 
 import { a as ui } from "./keystroke.mjs";
 import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-BUzxM3QI.mjs";
+import { i as requireClient } from "./context-B2cQ-Nt3.mjs";
 import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
 //#region src/commands/admin/users.set-role.handler.ts
 async function handleAdminUsersSetRole(options, ctx) {

package/dist/{utils-Ddltm1sR.mjs → utils-BaxDlCsW.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { i as readProjectConfig } from "./project-config-DudGRFPO.mjs";
-import { h as resolveBuildOutputDir } from "./layout-DRf9qUf8.mjs";
+import { h as resolveBuildOutputDir } from "./layout-B95Tku8F.mjs";
 import path from "node:path";
 //#region ../../packages/project-config/src/utils.ts
 function resolveConfiguredBuildOutputDir(projectRoot, buildConfig) {

package/dist/{validate.handler-DIJBuX1P.mjs → validate.handler-CmfcMX0t.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 import { a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
-import { i as projects } from "./dist-CIInPRGh.mjs";
+import { i as projects } from "./dist-DuJjDZIf.mjs";
 import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CWP2fji3.mjs";
-import { s as build, t as WorkflowNotFoundError } from "./workflow-build-IGYhEC8Y.mjs";
-import { t as createBuildProgress } from "./build-progress-BVwDg6lC.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cj3MFnU0.mjs";
+import { s as build, t as WorkflowNotFoundError } from "./workflow-build-Bi1Aacc5.mjs";
+import { t as createBuildProgress } from "./build-progress-nYa14iBP.mjs";
 import * as os from "node:os";
 import * as path$1 from "node:path";
 import { mkdtemp, rm } from "node:fs/promises";

package/dist/{workflow-build-IGYhEC8Y.mjs → workflow-build-Bi1Aacc5.mjs}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 
-import { a as __toESM, n as __exportAll } from "./chunk-DYxdGL9S.mjs";
+import { i as __toESM, n as __exportAll } from "./chunk-CH6r78ws.mjs";
 import { F as originalConsole, P as logger, a as ui, n as style, t as ANSI, y as toErrorMessage } from "./keystroke.mjs";
-import { r as getKeystrokeTmpDir } from "./dist-CIInPRGh.mjs";
+import { r as getKeystrokeTmpDir } from "./dist-DuJjDZIf.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as WorkflowBuildManifestSchema, o as FlowGraphSchema } from "./src-BHTjsZ9V.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-CZ7BeUSG.mjs";
-import { r as RelativeFilePathSchema } from "./file-metadata-B8c7Y5yg.mjs";
-import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-DRf9qUf8.mjs";
-import { t as resolveConfiguredBuildOutputDir } from "./utils-Ddltm1sR.mjs";
-import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-BsbCEeMw.mjs";
-import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-Bv-B0nHj-DtMWZ7Cc.mjs";
-import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-byNNUjRm-w5O7-VT_.mjs";
-import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-y0glInUe-CfNsQNia.mjs";
-import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-Cnk0L10M.mjs";
-import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-BBg2E_6G-BJTRqWrQ.mjs";
-import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-CRqBc6D6.mjs";
+import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-1sC52TIG.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-Pg0aURo7.mjs";
+import { r as RelativeFilePathSchema } from "./file-metadata-DQVDjr7M.mjs";
+import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-B95Tku8F.mjs";
+import { t as resolveConfiguredBuildOutputDir } from "./utils-BaxDlCsW.mjs";
+import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-B-qzc3zC.mjs";
+import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-Bv-B0nHj-CO8mjjSl.mjs";
+import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-byNNUjRm-B-on1n6c.mjs";
+import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-y0glInUe-DxX0-BRO.mjs";
+import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-B9omBIuN.mjs";
+import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-BBg2E_6G-wPP9mjQx.mjs";
+import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-aOM0agxS.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
 import * as fs from "node:fs/promises";
@@ -978,7 +978,7 @@ async function buildDiscoveredWorkflows(options) {
 	const failures = [...buildPlan.failures];
 	const warnings = [];
 	if (buildPlan.workflows.length > 0) {
-		const { buildWorkflowArtifacts } = await import("./build-workflows-BZ_m97Pr-DwcnRlyh.mjs");
+		const { buildWorkflowArtifacts } = await import("./build-workflows-BZ_m97Pr-DKANy85L.mjs");
 		const result = await buildWorkflowArtifacts({
 			entries: buildPlan.workflows,
 			workflowsByKey,
@@ -993,7 +993,7 @@ async function buildDiscoveredWorkflows(options) {
 		warnings.push(...result.warnings);
 	}
 	if (buildPlan.agents.length > 0) {
-		const { buildAgentArtifacts } = await import("./build-agents-DseUtzd4-BNtZrqoY.mjs");
+		const { buildAgentArtifacts } = await import("./build-agents-DseUtzd4-DFh2e5Cn.mjs");
 		const result = await buildAgentArtifacts({
 			entries: buildPlan.agents,
 			projectRoot: options.projectRoot
@@ -1002,7 +1002,7 @@ async function buildDiscoveredWorkflows(options) {
 		failures.push(...result.failures);
 	}
 	if (buildPlan.tasks.length > 0) {
-		const { buildTaskArtifacts } = await import("./build-tasks-C09SdfjC-DxKcmENc.mjs");
+		const { buildTaskArtifacts } = await import("./build-tasks-C09SdfjC-B0F7BZZG.mjs");
 		const result = await buildTaskArtifacts({
 			entries: buildPlan.tasks,
 			projectRoot: options.projectRoot,
@@ -1110,7 +1110,7 @@ async function createBuildPlan(options) {
 		const currentWorkflowIndex = workflowProgressIndex;
 		workflowProgressIndex += 1;
 		if (!loadResult?.ok) {
-			const { createWorkflowMetadataFailure } = await import("./build-workflows-BZ_m97Pr-DwcnRlyh.mjs");
+			const { createWorkflowMetadataFailure } = await import("./build-workflows-BZ_m97Pr-DKANy85L.mjs");
 			plan.failures.push(createWorkflowMetadataFailure(discoveredWorkflow, loadResult?.error));
 			continue;
 		}
@@ -1308,7 +1308,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			cacheResolvedBindingKeys,
 			releaseBundleMemory: config.releaseBundleMemory
 		};
-		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-byNNUjRm-w5O7-VT_.mjs").then((n) => n.f).then((n) => n.t);
+		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-byNNUjRm-B-on1n6c.mjs").then((n) => n.f).then((n) => n.t);
 		const writeResult = targetBindingKeys ? await writeTargetedBuildOutput({
 			artifacts: finalizedScopedArtifacts,
 			agentArtifacts,
@@ -1333,7 +1333,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			elapsedMs: performance.now() - writeStartedAt,
 			...writeResult.skippedWriteCount !== void 0 && writeResult.skippedWriteCount > 0 ? { skippedWriteCount: writeResult.skippedWriteCount } : {}
 		});
-		const { buildMetadataArtifacts } = await import("./build-metadata-BB_L45ZS-d5-QLDZ5.mjs");
+		const { buildMetadataArtifacts } = await import("./build-metadata-BB_L45ZS-BtGGjHIV.mjs");
 		const metadata = await buildMetadataArtifacts({
 			projectRoot: config.projectRoot,
 			outputDir,

package/dist/workflow-build-manifest-1sC52TIG.mjs

@@ -0,0 +1,259 @@
+#!/usr/bin/env node
+
+import { n as SHA256HashSchema, t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
+import { a as IntegrationScopeSchema, d as WorkflowStepEntrySchema, o as ResolvedCredentialSetSchema, t as CredentialRequirementsSchema, u as TriggerUploadDataSchema } from "./credential-requirements-D0mavK8j-CFMf0Xwu.mjs";
+import { a as SourceLocationSchema, i as ImportSourceSchema, n as CallsiteFingerprintSchema, t as CallKindSchema } from "./source-analysis-z2RSZw6X.mjs";
+import { z } from "zod";
+//#region ../../packages/workflow-build-contracts/src/flow-graph-schema.ts
+const DecisionKindSchema = z.enum([
+	"if",
+	"switch",
+	"ternary"
+]);
+const ParallelKindSchema = z.enum([
+	"all",
+	"race",
+	"allSettled",
+	"any"
+]);
+const LoopKindSchema = z.enum([
+	"for",
+	"for-of",
+	"for-in",
+	"while",
+	"do-while"
+]);
+const ExitKindSchema = z.enum(["return", "throw"]);
+const FlowBranchKindSchema = z.enum([
+	"then",
+	"else",
+	"parallel-branch"
+]);
+const FlowNodeTypeSchema = z.enum([
+	"entry",
+	"step",
+	"code-block",
+	"decision",
+	"merge",
+	"fork",
+	"join",
+	"parallel-map",
+	"loop",
+	"exit"
+]);
+const FlowEdgeTypeSchema = z.enum([
+	"default",
+	"true-branch",
+	"false-branch",
+	"merge",
+	"loop-entry",
+	"loop-back",
+	"parallel",
+	"return"
+]);
+const FlowStatementSchema = z.object({
+	kind: z.string().min(1),
+	label: z.string().min(1),
+	sourceText: z.string().min(1)
+});
+const EntryNodeDataSchema = z.object({ kind: z.literal("entry") });
+const StepNodeDataSchema = z.object({
+	kind: z.literal("call"),
+	callKind: CallKindSchema,
+	stepName: z.string().min(1),
+	callsiteFingerprint: CallsiteFingerprintSchema.optional(),
+	exportName: z.string().min(1).optional(),
+	stepId: z.string().min(1).optional(),
+	awaited: z.boolean().optional(),
+	dynamic: z.boolean().optional(),
+	recursive: z.boolean().optional(),
+	importSource: ImportSourceSchema.optional(),
+	outputBinding: z.string().min(1).optional(),
+	description: z.string().optional(),
+	inputSchema: JsonSchemaSchema.optional(),
+	outputSchema: JsonSchemaSchema.optional(),
+	source: SourceLocationSchema.optional(),
+	astKind: z.string().min(1).optional(),
+	scopeOverride: IntegrationScopeSchema.optional(),
+	credentialSets: z.array(ResolvedCredentialSetSchema).optional(),
+	requiredOAuthScopes: z.array(z.string()).optional()
+});
+const CodeBlockNodeDataSchema = z.object({
+	kind: z.literal("code-block"),
+	statements: z.array(FlowStatementSchema)
+});
+const DecisionNodeDataSchema = z.object({
+	kind: z.literal("decision"),
+	decisionKind: DecisionKindSchema.optional(),
+	source: SourceLocationSchema.optional(),
+	astKind: z.string().min(1).optional(),
+	conditionText: z.string().optional()
+});
+const MergeNodeDataSchema = z.object({
+	kind: z.literal("merge"),
+	source: SourceLocationSchema.optional()
+});
+const ForkNodeDataSchema = z.object({
+	kind: z.literal("fork"),
+	parallelKind: ParallelKindSchema.optional(),
+	preStatements: z.array(FlowStatementSchema).optional(),
+	source: SourceLocationSchema.optional(),
+	astKind: z.string().min(1).optional()
+});
+const JoinNodeDataSchema = z.object({
+	kind: z.literal("join"),
+	outputBinding: z.string().min(1).optional(),
+	source: SourceLocationSchema.optional()
+});
+const ParallelMapNodeDataSchema = z.object({
+	kind: z.literal("parallel-map"),
+	parallelKind: ParallelKindSchema.optional(),
+	iterationExpression: z.string().optional(),
+	stepNames: z.array(z.string()).optional(),
+	outputBinding: z.string().min(1).optional(),
+	preStatements: z.array(FlowStatementSchema).optional(),
+	source: SourceLocationSchema.optional(),
+	astKind: z.string().min(1).optional()
+});
+const LoopNodeDataSchema = z.object({
+	kind: z.literal("loop"),
+	loopKind: LoopKindSchema.optional(),
+	source: SourceLocationSchema.optional(),
+	astKind: z.string().min(1).optional(),
+	conditionText: z.string().optional()
+});
+const ExitNodeDataSchema = z.object({
+	kind: z.literal("exit"),
+	exitKind: ExitKindSchema,
+	sourceText: z.string().optional(),
+	source: SourceLocationSchema.optional(),
+	astKind: z.string().min(1).optional()
+});
+const FlowNodeDataSchema = z.discriminatedUnion("kind", [
+	EntryNodeDataSchema,
+	StepNodeDataSchema,
+	CodeBlockNodeDataSchema,
+	DecisionNodeDataSchema,
+	MergeNodeDataSchema,
+	ForkNodeDataSchema,
+	JoinNodeDataSchema,
+	ParallelMapNodeDataSchema,
+	LoopNodeDataSchema,
+	ExitNodeDataSchema
+]);
+const FlowEdgeDataSchema = z.object({ branchKind: FlowBranchKindSchema.optional() }).catchall(z.unknown());
+const FlowPositionSchema = z.object({
+	x: z.number().finite(),
+	y: z.number().finite()
+});
+const FlowNodeSchema = z.object({
+	id: z.string().min(1),
+	type: FlowNodeTypeSchema,
+	label: z.string(),
+	position: FlowPositionSchema,
+	data: FlowNodeDataSchema
+});
+const FlowEdgeSchema = z.object({
+	id: z.string().min(1),
+	source: z.string().min(1),
+	target: z.string().min(1),
+	type: FlowEdgeTypeSchema,
+	label: z.string().optional(),
+	data: FlowEdgeDataSchema.optional()
+});
+const FlowGraphSchema = z.object({
+	nodes: z.array(FlowNodeSchema),
+	edges: z.array(FlowEdgeSchema),
+	entryPoint: z.string().min(1),
+	exitPoints: z.array(z.string().min(1)),
+	generatedAt: z.iso.datetime(),
+	diagnostics: z.array(z.string())
+});
+//#endregion
+//#region ../../packages/workflow-build-contracts/src/workflow-build-manifest.ts
+const WORKFLOW_MANIFEST_GENERATOR = "local-build";
+const WORKFLOW_MANIFEST_SCHEMA_VERSION = "1.0.0";
+z.object({
+	name: z.string().trim().min(1).max(255),
+	description: z.string().trim().min(1).optional(),
+	tags: z.array(z.string()).optional()
+});
+z.object({
+	name: z.string().trim().min(1).max(255),
+	description: z.string().trim().min(1).optional(),
+	tags: z.array(z.string()).optional()
+});
+const WorkflowIOSchema = z.object({
+	input: JsonSchemaSchema.nullable(),
+	output: JsonSchemaSchema.nullable()
+});
+const BuildInfoSchema = z.object({
+	timestamp: z.iso.datetime(),
+	builderVersion: z.string().min(1),
+	generatedBy: z.literal(WORKFLOW_MANIFEST_GENERATOR),
+	gitCommit: z.string().optional(),
+	gitBranch: z.string().optional(),
+	gitIsDirty: z.boolean().optional(),
+	nodeVersion: z.string().min(1),
+	platform: z.string().min(1),
+	sourceChecksumAlgorithm: z.enum(["sha256"]),
+	sourceChecksum: z.string().length(64),
+	generatedFiles: z.array(z.string().min(1))
+});
+const ManifestDependenciesSchema = z.object({
+	localFiles: z.record(z.string(), z.string()),
+	packages: z.record(z.string(), z.string()),
+	workspacePackages: z.record(z.string(), z.string()),
+	builtins: z.array(z.string())
+});
+const DurationSchema = z.union([z.number().int().positive().finite(), z.string().regex(/^[1-9]\d*[smhdwy]$/)]);
+const WorkflowTriggerBindingSchema = z.object({
+	/** Authored trigger name (from `xxxTrigger({ name: ... })`). */
+	authoredTriggerId: z.string().min(1),
+	triggerType: z.enum([
+		"webhook",
+		"cron",
+		"polling"
+	]),
+	hasTransform: z.boolean(),
+	narrowedFrom: z.string().optional(),
+	lineage: z.array(z.string()).optional()
+});
+const WorkflowCoreManifestSchema = z.object({
+	schemaVersion: z.literal(WORKFLOW_MANIFEST_SCHEMA_VERSION),
+	id: z.string().min(1),
+	name: z.string().trim().min(1).max(255),
+	description: z.string().trim().min(1).optional(),
+	tags: z.array(z.string()).optional(),
+	exportName: z.string().min(1),
+	workflowSchemas: WorkflowIOSchema,
+	workflowGlobals: JsonSchemaSchema.optional(),
+	timeout: DurationSchema.optional(),
+	triggers: z.array(WorkflowTriggerBindingSchema).optional()
+});
+const WorkflowBuildManifestSchema = WorkflowCoreManifestSchema.extend({
+	workflowSource: SourceLocationSchema.optional(),
+	buildInfo: BuildInfoSchema,
+	dependencies: ManifestDependenciesSchema,
+	hasCycles: z.boolean().optional(),
+	credentials: CredentialRequirementsSchema.optional(),
+	sandboxes: z.array(z.record(z.string(), z.unknown())).optional(),
+	steps: z.record(z.string(), WorkflowStepEntrySchema)
+});
+z.object({
+	organizationId: z.string(),
+	workflowId: z.string(),
+	bundle: z.instanceof(Uint8Array).optional(),
+	manifest: WorkflowBuildManifestSchema,
+	sourcePath: z.string().optional(),
+	triggers: z.array(TriggerUploadDataSchema).optional(),
+	bundleSize: z.number().optional(),
+	bundleHash: SHA256HashSchema.optional(),
+	skipVersionBump: z.boolean().optional(),
+	projectRoot: z.string().optional(),
+	projectId: z.uuid(),
+	flowJson: FlowGraphSchema.optional(),
+	deploymentSnapshotOnly: z.boolean().optional()
+});
+//#endregion
+export { FlowGraphSchema as a, WorkflowCoreManifestSchema as i, WORKFLOW_MANIFEST_SCHEMA_VERSION as n, WorkflowBuildManifestSchema as r, WORKFLOW_MANIFEST_GENERATOR as t };

package/dist/{workflow-bundler-BzHk73PM-Cs-4Ml-p.mjs → workflow-bundler-BzHk73PM-xQwAF08W.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-Cnk0L10M.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D8-hxij0.mjs";
+import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-B9omBIuN.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D4aTZv4R.mjs";
 import * as path$1 from "node:path";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { createHash } from "node:crypto";