@keystrokehq/cli 0.0.39 → 0.0.40

package/dist/{src-DI-ybNjR.mjs → src-DOCKWJRW.mjs}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
-import { a as createKyInstance, i as buildSearchParams, n as auth, r as bundles, s as getClientEnv, t as projects$1 } from "./projects-ZNcKwds2.mjs";
+import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
+import { a as createKyInstance, i as buildSearchParams, n as auth, o as getClientEnv, r as bundles, t as projects$1 } from "./projects-DOYjjoZ-.mjs";
 //#region ../../packages/workflow-sdk/src/v1/admin.ts
 const admin = (api) => ({
 	orgs: {
@@ -21,7 +22,13 @@ const admin = (api) => ({
 		},
 		get: (id) => api.get(`admin/users/${id}`).json(),
 		setRole: (id, params) => api.patch(`admin/users/${id}/system-role`, { json: params }).json()
-	}
+	},
+	providerApps: { 
+	/**
+	* Upserts an org-scoped custom provider app registration.
+	* Wraps `POST /api/v1/admin/provider-apps`.
+	*/
+upsert: (params) => api.post("admin/provider-apps", { json: params }).json() }
 });
 //#endregion
 //#region ../../packages/workflow-sdk/src/v1/agents.ts
@@ -40,18 +47,50 @@ const apiKeys = (api) => ({
 	remove: (id) => api.delete(`api-keys/${id}`).json()
 });
 //#endregion
-//#region ../../packages/workflow-sdk/src/v1/connections.ts
-const connections = (api) => ({ 
+//#region ../../packages/workflow-sdk/src/v1/cli.ts
+const DEFAULT_TELEMETRY_TIMEOUT_MS = 2500;
+const cli = (api) => ({ 
 /**
-* Returns the caller's configured connections.
-*
-* @param params Optional filters. See `ListConnectionsQuerySchema` in
-*   `@keystroke/shared-types/connections` for the authoritative schema.
+* Records a completed CLI command for product telemetry.
+* Wraps `POST /api/v1/cli/telemetry`.
 */
-list: (params) => {
-	const searchParams = buildSearchParams(params);
-	return api.get("connections", searchParams ? { searchParams } : {}).json();
-} });
+telemetry: { send: (body, options) => api.post("cli/telemetry", {
+	json: body,
+	timeout: options?.timeoutMs ?? DEFAULT_TELEMETRY_TIMEOUT_MS
+}).json() } });
+//#endregion
+//#region ../../packages/workflow-sdk/src/v1/connections.ts
+const connections = (api) => ({
+	/**
+	* Returns the caller's configured connections.
+	*
+	* @param params Optional filters. See `ListConnectionsQuerySchema` in
+	*   `@keystroke/shared-types/connections` for the authoritative schema.
+	*/
+	list: (params) => {
+		const searchParams = buildSearchParams(params);
+		return api.get("connections", searchParams ? { searchParams } : {}).json();
+	},
+	/**
+	* Starts a platform OAuth connect flow for an official integration.
+	* Wraps `POST /api/v1/connections/:integrationId/initiate`.
+	*/
+	initiate: (integrationId, body) => {
+		const hasBody = body !== void 0 && Object.keys(body).length > 0;
+		return api.post(`connections/${integrationId}/initiate`, hasBody ? { json: body } : {}).json();
+	},
+	/**
+	* Polls OAuth completion for a connect attempt started with {@link initiate}.
+	* Wraps `GET /api/v1/connections/:integrationId/status`.
+	*/
+	getStatus: (integrationId, params) => {
+		const searchParams = buildSearchParams({
+			since: params.since,
+			...params.credentialConnectionId ? { credentialConnectionId: params.credentialConnectionId } : {}
+		});
+		return api.get(`connections/${integrationId}/status`, { searchParams }).json();
+	}
+});
 //#endregion
 //#region ../../packages/workflow-sdk/src/v1/credential-definitions.ts
 const credentialDefinitions = (api) => {
@@ -533,6 +572,7 @@ function createClient(config = {}) {
 	return {
 		agents: agents(v1),
 		admin: admin(v1),
+		cli: cli(v1),
 		apiKeys: apiKeys(v1),
 		public: publicApi(v1),
 		bundles: bundles(v1),
@@ -554,4 +594,10 @@ function createClient(config = {}) {
 	};
 }
 //#endregion
-export { createClient };
+//#region ../../packages/workflow-sdk/src/index.ts
+var src_exports = /* @__PURE__ */ __exportAll({
+	SDK_VERSION: () => SDK_VERSION,
+	createClient: () => createClient
+});
+//#endregion
+export { createClient as n, src_exports as t };

package/dist/{status.handler-1hEzX5oB.mjs → status.handler-7411LjJt.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { g as REAUTH_HINT, h as AUTH_HINT, p as ui } from "./keystroke.mjs";
-import { a as getApiKeyValidationStatus, c as resolveEffectiveOrganization, i as formatOrgSourceLabel, t as ORG_CONTEXT_HINT } from "./org-context-CNh2p2DP.mjs";
+import { a as getApiKeyValidationStatus, c as resolveEffectiveOrganization, i as formatOrgSourceLabel, t as ORG_CONTEXT_HINT } from "./org-context-BAbQ9nhH.mjs";
 //#region src/commands/auth/status.handler.ts
 async function getLiveUser(ctx, validation) {
 	if (!ctx.client || validation.kind !== "valid") return;

package/dist/{switch.handler-D135WwfB.mjs → switch.handler-CfCy8yzX.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { P as throwReportedCliExit, p as ui } from "./keystroke.mjs";
-import { n as credentials } from "./dist-B5jy238v.mjs";
-import { i as requireClient } from "./context-Brc9VGV9.mjs";
-import { c as resolveEffectiveOrganization, n as ORG_STORED_KEYS_HINT, t as ORG_CONTEXT_HINT } from "./org-context-CNh2p2DP.mjs";
+import { n as credentials } from "./dist-rsDq3fTk.mjs";
+import { i as requireClient } from "./context-DaBLwEWi.mjs";
+import { c as resolveEffectiveOrganization, n as ORG_STORED_KEYS_HINT, t as ORG_CONTEXT_HINT } from "./org-context-BAbQ9nhH.mjs";
 import { select } from "@clack/prompts";
 //#region src/commands/org/switch.handler.ts
 async function handleOrgSwitch(_options, ctx) {

package/dist/{sync-CFScllh3.mjs → sync-Dp57sXlR.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-B_8QwPpe.mjs";
+import { t as createTypedCommand } from "./commander-DIOuj6NJ.mjs";
 import { z } from "zod";
 //#region src/commands/sync/sync.command.ts
 /**
@@ -32,7 +32,7 @@ function createSyncCommand() {
 		description: "Sync local workflows with Keystroke",
 		schema: SyncOptionsSchema,
 		optionsConfig: SYNC_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./sync.handler-x8v53-TT.mjs")).handleSync
+		loadHandler: async () => (await import("./sync.handler-B6p_PFqf.mjs")).handleSync
 	});
 }
 //#endregion

package/dist/{sync.handler-x8v53-TT.mjs → sync.handler-B6p_PFqf.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
 import { L as logger, P as throwReportedCliExit, S as toErrorMessage, l as isLocalMode, p as ui } from "./keystroke.mjs";
-import { i as projects } from "./dist-B5jy238v.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-Brc9VGV9.mjs";
-import { n as deployFromDir } from "./dist-BmbFJq8U.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-Db6at6IA.mjs";
-import { t as createBuildProgress } from "./build-progress-D_SQqdHA.mjs";
-import { t as createDeployProgress } from "./deploy-progress-BDOCSm_U.mjs";
+import { i as projects } from "./dist-rsDq3fTk.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-DaBLwEWi.mjs";
+import { n as deployFromDir } from "./dist-BpLSQDJX.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cto7y-K3.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-BdjQ_VZx.mjs";
+import { t as createBuildProgress } from "./build-progress-ClHW7cxW.mjs";
+import { t as createDeployProgress } from "./deploy-progress-DccPUWfp.mjs";
 //#region src/commands/sync/sync.handler.ts
 async function handleSync(options, ctx) {
 	try {

package/dist/{task-DTvLzUkA.mjs → task-DzwZiru5.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-ClAIoIrX.mjs";
+import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-COSVuCFH.mjs";
 import { z } from "zod";
 import "node:crypto";
 const SHA256HashSchema = z.string().length(64, "Must be 64 characters").regex(/^[a-f0-9]{64}$/i, "Must be hexadecimal").transform((value) => value);

package/dist/{task-target-build-CtvRyVjH.mjs → task-target-build-bIN-ngtL.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { r as getKeystrokeProjectPath } from "./paths-DpHfoaXN-CdPimpky.mjs";
-import "./dist-B5jy238v.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-I07NYwfH.mjs";
+import "./dist-rsDq3fTk.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-C4dOpzvX.mjs";
 import path from "node:path";
 import { mkdir, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
@@ -111,7 +111,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-r4aynBU0.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-CetSMqeq.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -218,7 +218,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-BcRScRSp-BRpU-He5.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-BcRScRSp-CbuG4AfM.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +319,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-DTvLzUkA.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-DzwZiru5.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }

package/dist/{task-target-deploy-m9LfE488.mjs → task-target-deploy-DhlZNykk.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 
-import { n as deployTaskTargets } from "./task-target-deploy-dQYnMO8n-d2vdeqXH.mjs";
+import { n as deployTaskTargets } from "./task-target-deploy-dQYnMO8n-Cx_r9Kzk.mjs";
 export { deployTaskTargets };

package/dist/{task-target-deploy-dQYnMO8n-d2vdeqXH.mjs → task-target-deploy-dQYnMO8n-Cx_r9Kzk.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { n as SHA256HashSchema } from "./common-AK0q0Oz0.mjs";
+import { n as SHA256HashSchema } from "./common-BcLVOrEe.mjs";
 import { createHash } from "node:crypto";
 //#region ../../packages/shared-types/src/deployments/api/snapshot-payload.ts
 function sortObjectKeysDeep(value) {

package/dist/task-target-deploy-runner.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 
 import { r as getKeystrokeProjectPath } from "./paths-DpHfoaXN-CdPimpky.mjs";
-import "./default-urls-BoSm4s9C.mjs";
-import "./dist-B5jy238v.mjs";
-import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { t as resolveCliCredentials } from "./resolve-cli-credentials-GVOOedoQ.mjs";
+import "./default-urls-jMHepw2q.mjs";
+import "./dist-rsDq3fTk.mjs";
+import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-VloWJirJ.mjs";
+import { t as resolveCliCredentials } from "./resolve-cli-credentials-BecTgRE7.mjs";
 import path from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
@@ -119,7 +119,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-CtvRyVjH.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-bIN-ngtL.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -132,7 +132,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-CtvRyVjH.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-bIN-ngtL.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -163,11 +163,11 @@ async function resolveDeployAuthOptions(options) {
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-BiKBH25R.mjs");
+	const { createDeployClient } = await import("./deploy-NSrCthrD.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-m9LfE488.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-DhlZNykk.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-Dx4RXoLZ.mjs → test-BHj1LMHN.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { p as ui } from "./keystroke.mjs";
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BPydP5tG.mjs";
-import { t as createTypedCommand } from "./commander-B_8QwPpe.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-C0pbsv39.mjs";
+import { t as createTypedCommand } from "./commander-DIOuj6NJ.mjs";
 import { z } from "zod";
 //#region src/commands/test/test.command.ts
 const TestOptionsSchema = JsonOptionSchema;
@@ -63,7 +63,7 @@ function createTestCommand() {
 				description: "Agent tool name from the built manifest",
 				key: "toolName"
 			},
-			loadHandler: async () => (await import("./tool.handler-DsbpocYI.mjs")).handleTestTool
+			loadHandler: async () => (await import("./tool.handler-wH-lWk7T.mjs")).handleTestTool
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/{test.handler-Mz_XOnJl.mjs → test.handler-BmrgrK08.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { p as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-Brc9VGV9.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-DaBLwEWi.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{test.handler-BmvL5vF8.mjs → test.handler-mo5agj6w.mjs}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 
 import { A as CliExitError, S as toErrorMessage, l as isLocalMode, p as ui } from "./keystroke.mjs";
-import { i as projects } from "./dist-B5jy238v.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Brc9VGV9.mjs";
-import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-BmbFJq8U.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
-import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-Db6at6IA.mjs";
-import { a as isUnknownSchema } from "./schema-display-sZ6ConJd.mjs";
-import { t as createBuildProgress } from "./build-progress-D_SQqdHA.mjs";
-import { t as withErrorBoundary } from "./error-boundary-D2DiCLAp.mjs";
-import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-htHWhG0T.mjs";
-import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-BRCQgyWl.mjs";
+import { i as projects } from "./dist-rsDq3fTk.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-VloWJirJ.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-DaBLwEWi.mjs";
+import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-BpLSQDJX.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cto7y-K3.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-BdjQ_VZx.mjs";
+import { a as isUnknownSchema } from "./schema-display-DKreWhh1.mjs";
+import { t as createBuildProgress } from "./build-progress-ClHW7cxW.mjs";
+import { t as withErrorBoundary } from "./error-boundary-IUSz7k4x.mjs";
+import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DVis_pob.mjs";
+import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-DpaMDcsV.mjs";
 //#region src/lib/format.ts
 function formatBytes(bytes) {
 	if (bytes < 1024) return `${bytes} B`;

package/dist/{tool.handler-DsbpocYI.mjs → tool.handler-wH-lWk7T.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 import { A as CliExitError, P as throwReportedCliExit, S as toErrorMessage, c as getProcessEnv, p as ui } from "./keystroke.mjs";
-import { t as Credentials } from "./dist-B5jy238v.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as writeJson } from "./output-BPydP5tG.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Brc9VGV9.mjs";
-import { a as readManifestsFromOutDir } from "./dist-BmbFJq8U.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Db6at6IA.mjs";
+import { t as Credentials } from "./dist-rsDq3fTk.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-VloWJirJ.mjs";
+import { i as writeJson } from "./output-C0pbsv39.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-DaBLwEWi.mjs";
+import { a as readManifestsFromOutDir } from "./dist-BpLSQDJX.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cto7y-K3.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-BdjQ_VZx.mjs";
 import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-CknsHF5T.mjs";
-import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-htHWhG0T.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DVis_pob.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
 import * as os from "node:os";

package/dist/{trigger-artifacts-BcRScRSp-BRpU-He5.mjs → trigger-artifacts-BcRScRSp-CbuG4AfM.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-B6h4WRv4.mjs";
-import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-RuJszab7.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-I07NYwfH.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-r4aynBU0.mjs";
+import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-D6KT-r-e.mjs";
+import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-BvwnxyIt.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-C4dOpzvX.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CetSMqeq.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-BcRScRSp.mjs

package/dist/{trigger-manifest-BVqjDhxU.mjs → trigger-manifest-EaOKzq4D.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
-import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-B5Alhu1v-DanlSKnT.mjs";
+import { t as JsonSchemaSchema } from "./common-BcLVOrEe.mjs";
+import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-B5Alhu1v-C26qMgU_.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({

package/dist/{upgrade-C9G6HksL.mjs → upgrade-BXgpsNcQ.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-B_8QwPpe.mjs";
+import { t as createTypedCommand } from "./commander-DIOuj6NJ.mjs";
 import { t as PackageManagerValues } from "./package-manager-BwJ6muas.mjs";
 import { z } from "zod";
 //#region src/commands/upgrade/upgrade.command.ts
@@ -30,7 +30,7 @@ function createUpgradeCommand() {
 		description: "Upgrade the Keystroke CLI to the latest published version",
 		schema: UpgradeOptionsSchema,
 		optionsConfig: UPGRADE_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upgrade.handler-DsFeAFF4.mjs")).handleUpgrade
+		loadHandler: async () => (await import("./upgrade.handler-COptE2fK.mjs")).handleUpgrade
 	});
 }
 //#endregion

package/dist/{upload.handler-DscKDQ63.mjs → upload.handler-Y-yOXVYC.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 import { P as throwReportedCliExit, S as toErrorMessage, c as getProcessEnv, p as ui } from "./keystroke.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { a as writeJsonError, i as writeJson } from "./output-BPydP5tG.mjs";
-import { i as requireClient } from "./context-Brc9VGV9.mjs";
-import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-BmbFJq8U.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-mZs6EAlN.mjs";
-import { t as readCredentialEnvMap } from "./credential-env-map-5a41jLwM.mjs";
-import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DtwLbee6.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-CStYUB2h.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-VloWJirJ.mjs";
+import { a as writeJsonError, i as writeJson } from "./output-C0pbsv39.mjs";
+import { i as requireClient } from "./context-DaBLwEWi.mjs";
+import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-BpLSQDJX.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cto7y-K3.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-DEHwWAO6.mjs";
+import { t as readCredentialEnvMap } from "./credential-env-map-rXDibCDT.mjs";
+import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-Bud9r1JE.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-BvcO7KgE.mjs";
 import * as path$1 from "node:path";
 import { confirm, isCancel } from "@clack/prompts";
 //#region src/commands/credentials/upload/upload.handler.ts

package/dist/{users.get.handler-CaUv_maM.mjs → users.get.handler-BGOCxdkB.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { p as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-BPydP5tG.mjs";
-import { i as requireClient } from "./context-Brc9VGV9.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-D01Gw8-M.mjs";
+import { i as writeJson } from "./output-C0pbsv39.mjs";
+import { i as requireClient } from "./context-DaBLwEWi.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CPkuyDrD.mjs";
 //#region src/commands/admin/users.get.handler.ts
 async function handleAdminUsersGet(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{users.list.handler-DzsOvAtd.mjs → users.list.handler-CeCdVYny.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { p as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-BPydP5tG.mjs";
-import { i as requireClient } from "./context-Brc9VGV9.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-D01Gw8-M.mjs";
+import { i as writeJson } from "./output-C0pbsv39.mjs";
+import { i as requireClient } from "./context-DaBLwEWi.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CPkuyDrD.mjs";
 import Table from "cli-table3";
 //#region src/commands/admin/users.list.handler.ts
 async function handleAdminUsersList(options, ctx) {

package/dist/{users.set-role.handler-koRzA0V9.mjs → users.set-role.handler-ChUvfPm9.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { p as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-BPydP5tG.mjs";
-import { i as requireClient } from "./context-Brc9VGV9.mjs";
-import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-D01Gw8-M.mjs";
+import { i as writeJson } from "./output-C0pbsv39.mjs";
+import { i as requireClient } from "./context-DaBLwEWi.mjs";
+import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-CPkuyDrD.mjs";
 //#region src/commands/admin/users.set-role.handler.ts
 async function handleAdminUsersSetRole(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{utils-BaxDlCsW.mjs → utils-DZkAd_Yh.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { i as readProjectConfig } from "./project-config-DudGRFPO.mjs";
-import { h as resolveBuildOutputDir } from "./layout-B95Tku8F.mjs";
+import { i as readProjectConfig } from "./project-config-VloWJirJ.mjs";
+import { h as resolveBuildOutputDir } from "./layout-CqQq4MmI.mjs";
 import path from "node:path";
 //#region ../../packages/project-config/src/utils.ts
 function resolveConfiguredBuildOutputDir(projectRoot, buildConfig) {

package/dist/{validate.handler-BkBsS8BL.mjs → validate.handler-Cf6Hv_La.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
 import { P as throwReportedCliExit, S as toErrorMessage, p as ui } from "./keystroke.mjs";
-import { i as projects } from "./dist-B5jy238v.mjs";
-import { i as writeJson } from "./output-BPydP5tG.mjs";
-import { a as readManifestsFromOutDir } from "./dist-BmbFJq8U.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
-import { c as build, s as typecheckWorkflows, t as WorkflowNotFoundError } from "./workflow-build-Db6at6IA.mjs";
-import { t as createBuildProgress } from "./build-progress-D_SQqdHA.mjs";
-import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-BRCQgyWl.mjs";
+import { i as projects } from "./dist-rsDq3fTk.mjs";
+import { i as writeJson } from "./output-C0pbsv39.mjs";
+import { a as readManifestsFromOutDir } from "./dist-BpLSQDJX.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-Cto7y-K3.mjs";
+import { c as build, s as typecheckWorkflows, t as WorkflowNotFoundError } from "./workflow-build-BdjQ_VZx.mjs";
+import { t as createBuildProgress } from "./build-progress-ClHW7cxW.mjs";
+import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-DpaMDcsV.mjs";
 import * as path$1 from "node:path";
 import * as os from "node:os";
 import { mkdtemp, readFile, readdir, rm } from "node:fs/promises";

package/dist/{workflow-build-Db6at6IA.mjs → workflow-build-BdjQ_VZx.mjs}

@@ -2,28 +2,28 @@
 
 import { i as __toESM, n as __exportAll } from "./chunk-CH6r78ws.mjs";
 import { L as logger, R as originalConsole, S as toErrorMessage, n as style, p as ui, t as ANSI } from "./keystroke.mjs";
-import { r as getKeystrokeTmpDir } from "./dist-B5jy238v.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-CV6bBmDO.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-DfWD5tvv.mjs";
-import { r as RelativeFilePathSchema } from "./file-metadata-DQVDjr7M.mjs";
-import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-B95Tku8F.mjs";
-import { t as resolveConfiguredBuildOutputDir } from "./utils-BaxDlCsW.mjs";
-import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-B-qzc3zC.mjs";
-import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-Bv-B0nHj-CO8mjjSl.mjs";
-import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-BLg0RuZa-Y6ExdYH9.mjs";
-import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-y0glInUe-EuAWaw9g.mjs";
-import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-B9omBIuN.mjs";
-import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-BBg2E_6G-wPP9mjQx.mjs";
-import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-aOM0agxS.mjs";
+import { r as getKeystrokeTmpDir } from "./dist-rsDq3fTk.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-VloWJirJ.mjs";
+import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-EnRP3HRK.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-IKErxq4q.mjs";
+import { r as RelativeFilePathSchema } from "./file-metadata-bzAf3GqL.mjs";
+import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-CqQq4MmI.mjs";
+import { t as resolveConfiguredBuildOutputDir } from "./utils-DZkAd_Yh.mjs";
+import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-DyuZcU-M.mjs";
+import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-Bv-B0nHj-qhsuNON1.mjs";
+import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-BLg0RuZa-ynLkRVCU.mjs";
+import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-y0glInUe-CVKziY2H.mjs";
+import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-ghZc3xZ5.mjs";
+import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-BBg2E_6G-CS88X3nS.mjs";
+import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-lQUBXXzi.mjs";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
 import path from "node:path";
 import * as fs from "node:fs/promises";
 import { access, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 import { existsSync, realpathSync } from "node:fs";
-import { fileURLToPath } from "node:url";
 import { z } from "zod";
+import { fileURLToPath } from "node:url";
 import { execFile } from "node:child_process";
 import { createHash } from "node:crypto";
 import { promisify } from "node:util";
@@ -1001,7 +1001,7 @@ async function buildDiscoveredWorkflows(options) {
 	const failures = [...buildPlan.failures];
 	const warnings = [];
 	if (buildPlan.workflows.length > 0) {
-		const { buildWorkflowArtifacts } = await import("./build-workflows-C-gQM3l5-_zcBHE3M.mjs");
+		const { buildWorkflowArtifacts } = await import("./build-workflows-C-gQM3l5-B1By02sw.mjs");
 		const result = await buildWorkflowArtifacts({
 			entries: buildPlan.workflows,
 			workflowsByKey,
@@ -1016,7 +1016,7 @@ async function buildDiscoveredWorkflows(options) {
 		warnings.push(...result.warnings);
 	}
 	if (buildPlan.agents.length > 0) {
-		const { buildAgentArtifacts } = await import("./build-agents-CUzBnlAG-3ePFZiJ6.mjs");
+		const { buildAgentArtifacts } = await import("./build-agents-CUzBnlAG-BlVdU8WI.mjs");
 		const result = await buildAgentArtifacts({
 			entries: buildPlan.agents,
 			projectRoot: options.projectRoot
@@ -1025,7 +1025,7 @@ async function buildDiscoveredWorkflows(options) {
 		failures.push(...result.failures);
 	}
 	if (buildPlan.tasks.length > 0) {
-		const { buildTaskArtifacts } = await import("./build-tasks-5eOvI19S-tbN6CRx9.mjs");
+		const { buildTaskArtifacts } = await import("./build-tasks-5eOvI19S-DOJYTRNL.mjs");
 		const result = await buildTaskArtifacts({
 			entries: buildPlan.tasks,
 			projectRoot: options.projectRoot,
@@ -1133,7 +1133,7 @@ async function createBuildPlan(options) {
 		const currentWorkflowIndex = workflowProgressIndex;
 		workflowProgressIndex += 1;
 		if (!loadResult?.ok) {
-			const { createWorkflowMetadataFailure } = await import("./build-workflows-C-gQM3l5-_zcBHE3M.mjs");
+			const { createWorkflowMetadataFailure } = await import("./build-workflows-C-gQM3l5-B1By02sw.mjs");
 			plan.failures.push(createWorkflowMetadataFailure(discoveredWorkflow, loadResult?.error));
 			continue;
 		}
@@ -1331,7 +1331,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			cacheResolvedBindingKeys,
 			releaseBundleMemory: config.releaseBundleMemory
 		};
-		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-BLg0RuZa-Y6ExdYH9.mjs").then((n) => n.f).then((n) => n.t);
+		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-BLg0RuZa-ynLkRVCU.mjs").then((n) => n.f).then((n) => n.t);
 		const writeResult = targetBindingKeys ? await writeTargetedBuildOutput({
 			artifacts: finalizedScopedArtifacts,
 			agentArtifacts,
@@ -1356,7 +1356,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			elapsedMs: performance.now() - writeStartedAt,
 			...writeResult.skippedWriteCount !== void 0 && writeResult.skippedWriteCount > 0 ? { skippedWriteCount: writeResult.skippedWriteCount } : {}
 		});
-		const { buildMetadataArtifacts } = await import("./build-metadata-BB_L45ZS-DRQsV6JK.mjs");
+		const { buildMetadataArtifacts } = await import("./build-metadata-BB_L45ZS-DF9jjlo7.mjs");
 		const metadata = await buildMetadataArtifacts({
 			projectRoot: config.projectRoot,
 			outputDir,