@keystrokehq/cli 0.0.7 → 0.0.9

package/dist/{task-target-build-Di8gflnj.mjs → task-target-build-D5IrHqSl.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-aLuQvlIq.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-B0eiobOd.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
@@ -109,7 +109,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-CsrSOCcj.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-D4o8gRZs.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -216,7 +216,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-B3OCTX9K-Cgt51KLh.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-B3OCTX9K-ME6IVdUB.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +319,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-DsrXI6XH.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-1qz1XNq7.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }

package/dist/{task-target-deploy-Bf5i3ox1-BU16VPsE.mjs → task-target-deploy-Bf5i3ox1-2K0hAwzk.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { r as SHA256HashSchema } from "./common-BrVAdUyD.mjs";
+import { r as SHA256HashSchema } from "./common-B3bLe3Mk.mjs";
 import { createHash } from "node:crypto";
 //#region ../../packages/shared-types/src/deployments/api/snapshot-payload.ts
 function sortObjectKeysDeep(value) {

package/dist/{task-target-deploy-BzGRNDiv.mjs → task-target-deploy-Bzfftyru.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 
-import { n as deployTaskTargets } from "./task-target-deploy-Bf5i3ox1-BU16VPsE.mjs";
+import { n as deployTaskTargets } from "./task-target-deploy-Bf5i3ox1-2K0hAwzk.mjs";
 export { deployTaskTargets };

package/dist/task-target-deploy-runner.mjs

@@ -2,7 +2,7 @@
 
 import "./default-urls-BS4twrsS.mjs";
 import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-D9eFU8Jk.mjs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -116,7 +116,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-Di8gflnj.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-D5IrHqSl.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -129,7 +129,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-Di8gflnj.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-D5IrHqSl.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -158,11 +158,11 @@ async function resolveDeployAuthOptions(options) {
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-B_bkUlIL.mjs");
+	const { createDeployClient } = await import("./deploy-B8TYutOi.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-BzGRNDiv.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-Bzfftyru.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-BZt0Duhs.mjs → test-Dsx4cRnE.mjs}

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 
-import { C as CliExitError, D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
+import { M as throwReportedCliExit, O as CliExitError, b as toErrorMessage, i as getProcessEnv, t as ui } from "./keystroke.mjs";
 import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
-import { i as writeJson, n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-q4KljAhu.mjs";
-import { t as createTypedCommand } from "./commander-pxSPDCZ4.mjs";
-import { n as getProcessEnv } from "./env-YTZGKGIu.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-D-YKFNxL.mjs";
-import { a as readManifestsFromOutDir } from "./dist-C2Dq_nx3.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
-import { a as registerHostedActionDispatcher, c as registerOperationCredentialResolver, f as registerOperationContext, g as getOfficialIntegrationMetadata, h as registerRuntime, n as clearHostedActionExecutionPolicy, o as registerHostedActionExecutionPolicy, p as clearRuntime, s as clearOperationCredentialResolver, t as clearHostedActionDispatcher, u as clearOperationContext } from "./hosted-action-dispatcher-registry-TOVzMhUR.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-DD8TLlPu.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BRYuEubW.mjs";
-import { n as WorkflowsRunOptionsSchema, t as RUN_OPTIONS_CONFIG } from "./options-BhB9qA5P.mjs";
-import { a as validateInputOrExit, i as resolveInput, r as pollForCompletion, t as handleWorkflowsTryDeploy } from "./try-deploy.handler-YDOirkk1.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-D9eFU8Jk.mjs";
+import { i as writeJson, n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BCDZb3Gy.mjs";
+import { t as createTypedCommand } from "./commander-B6_tg5_w.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-DT06adrn.mjs";
+import { a as readManifestsFromOutDir } from "./dist-DvO0q6Fo.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-BREjwFKO.mjs";
+import { a as registerHostedActionDispatcher, c as registerOperationCredentialResolver, f as registerOperationContext, g as getOfficialIntegrationMetadata, h as registerRuntime, n as clearHostedActionExecutionPolicy, o as registerHostedActionExecutionPolicy, p as clearRuntime, s as clearOperationCredentialResolver, t as clearHostedActionDispatcher, u as clearOperationContext } from "./hosted-action-dispatcher-registry-BWEtn13o.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Be6RMTb2.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-j5DlVkb2.mjs";
+import { n as WorkflowsRunOptionsSchema, t as RUN_OPTIONS_CONFIG } from "./options-CIVqkc8V.mjs";
+import { t as handleWorkflowsTryDeploy } from "./try-deploy.handler-Lq69ON02.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BLT-uS2e.mjs";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
-import { z } from "zod";
 import { pathToFileURL } from "node:url";
+import { z } from "zod";
 //#region ../../packages/core/src/test-runtime/credentials/env-resolver.ts
 /**
 * Computes the env var name for a credential key.

package/dist/{test.handler-iCUotLes.mjs → test.handler-Duqj67Qi.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-D-YKFNxL.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-DT06adrn.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{trigger-artifacts-B3OCTX9K-Cgt51KLh.mjs → trigger-artifacts-B3OCTX9K-ME6IVdUB.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-Bwlb-KZE.mjs";
-import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-8uqgIurC.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-aLuQvlIq.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CsrSOCcj.mjs";
+import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-BtlcsEVn.mjs";
+import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-RuJszab7.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-B0eiobOd.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D4o8gRZs.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-B3OCTX9K.mjs

package/dist/{trigger-manifest-CXD9I7Rb.mjs → trigger-manifest-B3Gq1739.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { c as TriggerTypeSchema, o as TriggerCredentialRequirementsSchema, s as TriggerSourceSchema, u as WebhookMethodSchema } from "./credential-requirements-DjDFthio.mjs";
+import { c as TriggerTypeSchema, o as TriggerCredentialRequirementsSchema, s as TriggerSourceSchema, u as WebhookMethodSchema } from "./credential-requirements-BCW8aQWS.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({

package/dist/try-deploy.handler-Lq69ON02.mjs

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+
+import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
+import { O as CliExitError, a as isLocalMode, b as toErrorMessage, t as ui } from "./keystroke.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-D9eFU8Jk.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-DT06adrn.mjs";
+import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-DvO0q6Fo.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-BREjwFKO.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-Be6RMTb2.mjs";
+import { r as isUnknownSchema } from "./schema-display-DuWBmkwk.mjs";
+import { t as createBuildProgress } from "./build-progress-Mzsk4RKr.mjs";
+import { t as withErrorBoundary } from "./error-boundary-D6KTx1HL.mjs";
+import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BLT-uS2e.mjs";
+//#region src/lib/format.ts
+function formatBytes(bytes) {
+	if (bytes < 1024) return `${bytes} B`;
+	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+	return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+//#endregion
+//#region src/commands/workflows/_shared/run-helpers.ts
+/**
+* Resolve input and validate against existing schema if available.
+* Returns input and workflowsDir for downstream use.
+*/
+async function resolveAndValidateInputForRun(options) {
+	const input = await resolveInput(options);
+	const workflowsDir = await requireWorkflowsDir(options.path);
+	trackProject(workflowsDir);
+	const existingSchema = await tryReadExistingInputSchema(workflowsDir, options.workflow);
+	if (existingSchema && !isUnknownSchema(existingSchema)) validateInputOrExit(options.workflow, input, existingSchema);
+	return {
+		input,
+		workflowsDir
+	};
+}
+/**
+* Build workflow(s) for run using the standard build pipeline, then read
+* prepared artifacts from disk filtered by workflow ref.
+*/
+async function buildWorkflowsForRun(options) {
+	const progress = createBuildProgress(options.workflow);
+	try {
+		const { result, outDir } = await runWorkflowBuild({
+			workflowsDir: options.workflowsDir,
+			workflowRef: options.workflow,
+			verbose: options.verbose,
+			onProgressEvent: progress.handleEvent
+		});
+		const filtered = (await readWorkflowsFromDisk(outDir)).filter((wf) => wf.manifestData.id === options.workflow || wf.name === options.workflow);
+		if (filtered.length === 0) {
+			const availableNames = result.artifacts.map((a) => a.manifest.name);
+			throw new WorkflowNotFoundError(options.workflow, availableNames);
+		}
+		return filtered;
+	} finally {
+		progress.stop();
+	}
+}
+/**
+* Validate input against the first build's input schema if available.
+*/
+function validateInputWithFirstBuild(options, input, builds) {
+	const inputSchema = builds[0]?.manifestData.workflowSchemas.input;
+	if (inputSchema && typeof inputSchema === "object" && !isUnknownSchema(inputSchema)) validateInputOrExit(options.workflow, input, inputSchema);
+}
+/**
+* Render success message after build.
+*/
+function renderBuildSuccessMessage(builds) {
+	const first = builds[0];
+	if (!first) return;
+	if (builds.length > 1) ui.success(`Built ${builds.length} workflow(s) with name "${first.name}"`);
+	else ui.success(`Built ${first.name} (${formatBytes(first.bundleSize)})`);
+}
+/**
+* Render completion success message (single or multi).
+*/
+function renderRunCompletionSuccessMessage(builds, elapsedSeconds) {
+	if (builds.length === 0) return;
+	if (builds.length > 1) ui.success(`All ${builds.length} workflow(s) completed in ${elapsedSeconds}s`);
+	else ui.success(`Workflow completed in ${elapsedSeconds}s`);
+}
+//#endregion
+//#region src/commands/workflows/try-deploy.handler/index.ts
+var try_deploy_handler_exports = /* @__PURE__ */ __exportAll({ handleWorkflowsTryDeploy: () => handleWorkflowsTryDeploy });
+async function handleWorkflowsTryDeploy(options, ctx) {
+	return withErrorBoundary("Try-deploy", async () => {
+		const client = requireClient(ctx);
+		const startTime = Date.now();
+		const local = isLocalMode();
+		const { input, workflowsDir } = await resolveAndValidateInputForRun(options);
+		const storagePaths = [];
+		let runError;
+		try {
+			const builds = await buildWorkflowsForRun({
+				...options,
+				workflowsDir
+			});
+			renderBuildSuccessMessage(builds);
+			validateInputWithFirstBuild(options, input, builds);
+			const projectConfig = await assertWorkflowProjectRoot(workflowsDir);
+			await assertProjectConfigMatchesAuthenticatedOrg(client, projectConfig);
+			for (const [i, build] of builds.entries()) {
+				if (builds.length > 1) ui.header(`Running "${build.name}" (${i + 1}/${builds.length})...`);
+				let storagePath;
+				if (local) {
+					storagePath = build.bundlePath;
+					if (i === 0) ui.hint("Local mode: using bundle from build output (skipping upload)");
+				} else {
+					ui.header("Uploading test bundle...");
+					storagePath = (await uploadTestBundle(client, build, false)).storagePath;
+					storagePaths.push(storagePath);
+					ui.success("Upload complete");
+				}
+				ui.header("Executing workflow...");
+				const { runId } = await client.workflows.testById({
+					workflowName: build.name,
+					storagePath,
+					exportName: build.exportName,
+					manifest: build.manifestData,
+					flowJson: build.flowData,
+					triggers: build.triggers,
+					bundleHash: build.bundleHash,
+					bundleSize: build.bundleSize,
+					args: [input],
+					organizationId: projectConfig.organizationId,
+					projectId: projectConfig.projectId
+				});
+				ui.hint(`Run ID: ${runId}`);
+				const snapshot = await pollForCompletion(client, runId, options.timeout, options.verbose);
+				const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
+				if (snapshot.run.status === "completed") {
+					if (snapshot.run.output !== void 0 && snapshot.run.output !== null) {
+						ui.br();
+						ui.header("Output:");
+						ui.text(JSON.stringify(snapshot.run.output, null, 2));
+					}
+					continue;
+				}
+				if (snapshot.run.status === "failed") {
+					ui.br();
+					ui.error(`Workflow failed after ${elapsed}s`);
+					if (snapshot.run.error) ui.error(toErrorMessage(snapshot.run.error));
+					runError = snapshot.run.error ?? /* @__PURE__ */ new Error("Workflow failed");
+					break;
+				}
+				ui.br();
+				ui.warn(`Workflow still ${snapshot.run.status} after ${elapsed}s (timeout: ${options.timeout}s)`);
+				ui.hint(`Check status: keystroke runs get ${runId}`);
+				runError = /* @__PURE__ */ new Error(`Workflow still ${snapshot.run.status} after timeout`);
+				break;
+			}
+			if (!runError) {
+				ui.br();
+				renderRunCompletionSuccessMessage(builds, ((Date.now() - startTime) / 1e3).toFixed(1));
+			}
+		} finally {
+			if (!local) for (const sp of storagePaths) try {
+				await client.workflows.deleteTestBundle({ storagePath: sp });
+				if (options.verbose) ui.hint("Test bundle cleaned up");
+			} catch {}
+		}
+		if (runError) throw new CliExitError("Workflow execution failed");
+	}, { json: ctx.jsonMode });
+}
+//#endregion
+export { try_deploy_handler_exports as n, handleWorkflowsTryDeploy as t };

package/dist/{upgrade-Bdez-X6_.mjs → upgrade-DQrHCNR8.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-pxSPDCZ4.mjs";
+import { t as createTypedCommand } from "./commander-B6_tg5_w.mjs";
 import { z } from "zod";
 //#region src/commands/upgrade/upgrade.command.ts
 const PackageManagerSchema = z.enum([
@@ -34,7 +34,7 @@ function createUpgradeCommand() {
 		description: "Upgrade the Keystroke CLI to the latest published version",
 		schema: UpgradeOptionsSchema,
 		optionsConfig: UPGRADE_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upgrade.handler-DhH_Cuza.mjs")).handleUpgrade
+		loadHandler: async () => (await import("./upgrade.handler-B0NxKINA.mjs")).handleUpgrade
 	});
 }
 //#endregion

package/dist/{upgrade.handler-DhH_Cuza.mjs → upgrade.handler-B0NxKINA.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
+import { M as throwReportedCliExit, b as toErrorMessage, t as ui } from "./keystroke.mjs";
 import { spawn } from "node:child_process";
 //#region src/commands/upgrade/upgrade.handler.ts
 const CLI_PACKAGE_NAME = "@keystrokehq/cli";

package/dist/{upload.handler-BmqZAPxZ.mjs → upload.handler-BMJiaCzk.mjs}

@@ -1,16 +1,15 @@
 #!/usr/bin/env node
 
-import { D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
-import { a as writeJsonError, i as writeJson } from "./output-q4KljAhu.mjs";
-import { n as getProcessEnv } from "./env-YTZGKGIu.mjs";
-import { i as requireClient } from "./context-D-YKFNxL.mjs";
-import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-C2Dq_nx3.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
-import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DHlK_O4L.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-ClP7YGqM.mjs";
-import { t as readCredentialEnvMap } from "./credential-env-map-C8P7uTD-.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-B-wwbCvw.mjs";
+import { M as throwReportedCliExit, b as toErrorMessage, i as getProcessEnv, t as ui } from "./keystroke.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-D9eFU8Jk.mjs";
+import { a as writeJsonError, i as writeJson } from "./output-BCDZb3Gy.mjs";
+import { i as requireClient } from "./context-DT06adrn.mjs";
+import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-DvO0q6Fo.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-BREjwFKO.mjs";
+import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DAQfKqn0.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-4T5Yad-n.mjs";
+import { t as readCredentialEnvMap } from "./credential-env-map-C23GV6LN.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-C-4kBAFw.mjs";
 import * as path$1 from "node:path";
 import { confirm, isCancel } from "@clack/prompts";
 //#region src/commands/credentials/upload/upload.handler.ts

package/dist/{users.get.handler-uoEgEwI-.mjs → users.get.handler-eJtaB-2G.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-q4KljAhu.mjs";
-import { i as requireClient } from "./context-D-YKFNxL.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CNC8JfZ5.mjs";
+import { i as writeJson } from "./output-BCDZb3Gy.mjs";
+import { i as requireClient } from "./context-DT06adrn.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-B5G-N3Hx.mjs";
 //#region src/commands/admin/users.get.handler.ts
 async function handleAdminUsersGet(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{users.list.handler-DLWPOIHD.mjs → users.list.handler-DE6s08i0.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-q4KljAhu.mjs";
-import { i as requireClient } from "./context-D-YKFNxL.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CNC8JfZ5.mjs";
+import { i as writeJson } from "./output-BCDZb3Gy.mjs";
+import { i as requireClient } from "./context-DT06adrn.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-B5G-N3Hx.mjs";
 import Table from "cli-table3";
 //#region src/commands/admin/users.list.handler.ts
 async function handleAdminUsersList(options, ctx) {

package/dist/{users.set-role.handler-BCJhTsyb.mjs → users.set-role.handler-BVNvaKKS.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-q4KljAhu.mjs";
-import { i as requireClient } from "./context-D-YKFNxL.mjs";
-import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-CNC8JfZ5.mjs";
+import { i as writeJson } from "./output-BCDZb3Gy.mjs";
+import { i as requireClient } from "./context-DT06adrn.mjs";
+import { n as isIamJsonMode, r as requireConfirmation, t as handleIamError } from "./iam-command-utils-B5G-N3Hx.mjs";
 //#region src/commands/admin/users.set-role.handler.ts
 async function handleAdminUsersSetRole(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{utils-DlYHjGg9.mjs → utils-C_qCshBA.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { i as readProjectConfig } from "./project-config-opj6DsPF.mjs";
-import { h as resolveBuildOutputDir } from "./layout-B95Tku8F.mjs";
+import { i as readProjectConfig } from "./project-config-D9eFU8Jk.mjs";
+import { h as resolveBuildOutputDir } from "./layout-CXkZEsXI.mjs";
 import path from "node:path";
 //#region ../../packages/project-config/src/utils.ts
 function resolveConfiguredBuildOutputDir(projectRoot, buildConfig) {

package/dist/{validate.handler-ROzzUI85.mjs → validate.handler-BUga7Umz.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
-import { D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
+import { M as throwReportedCliExit, b as toErrorMessage, t as ui } from "./keystroke.mjs";
 import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { i as writeJson } from "./output-q4KljAhu.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
-import { s as build, t as WorkflowNotFoundError } from "./workflow-build-DD8TLlPu.mjs";
-import { t as createBuildProgress } from "./build-progress-Cn2j1LqF.mjs";
+import { i as writeJson } from "./output-BCDZb3Gy.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-BREjwFKO.mjs";
+import { s as build, t as WorkflowNotFoundError } from "./workflow-build-Be6RMTb2.mjs";
+import { t as createBuildProgress } from "./build-progress-Mzsk4RKr.mjs";
 import { mkdtemp, rm } from "node:fs/promises";
 import * as os from "node:os";
 import * as path$1 from "node:path";

package/dist/{workflow-build-DD8TLlPu.mjs → workflow-build-Be6RMTb2.mjs}

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
 
 import { i as __toESM, n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { a as originalConsole, h as toErrorMessage, i as logger, o as ANSI, s as style, t as ui } from "./keystroke.mjs";
+import { b as toErrorMessage, d as ANSI, f as style, l as logger, t as ui, u as originalConsole } from "./keystroke.mjs";
 import { a as getKeystrokeTmpDir } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
-import { a as FlowGraphSchema, i as WorkflowManifestSchema } from "./workflow-manifest-CAW5FlX0.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-Bfa3DBgc.mjs";
-import { r as RelativeFilePathSchema } from "./file-metadata-CdFXMMIw.mjs";
-import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-B95Tku8F.mjs";
-import { t as resolveConfiguredBuildOutputDir } from "./utils-DlYHjGg9.mjs";
-import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-FPT0bJaA.mjs";
-import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-C6ed-9dl-aBmqqvD5.mjs";
-import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-CtvttJdP-DrJruQgR.mjs";
-import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-DDPnzlJ1-CYJD2n2b.mjs";
-import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-BeimiQ2U.mjs";
-import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-DEEChuND-eixwPnPP.mjs";
-import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-BKRFUzWW.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-D9eFU8Jk.mjs";
+import { a as FlowGraphSchema, i as WorkflowManifestSchema } from "./workflow-manifest-BfL74mjp.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-sJFbH5H8.mjs";
+import { r as RelativeFilePathSchema } from "./file-metadata-BvGM-B2v.mjs";
+import { c as createArtifactOutputFiles, l as createMetadataOutputFile, o as METADATA_ROOT_DIR_NAME, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-CXkZEsXI.mjs";
+import { t as resolveConfiguredBuildOutputDir } from "./utils-C_qCshBA.mjs";
+import { a as readAgentSandboxPackage, r as AGENT_VM_TOOLS_RUNTIME_RELATIVE_PATH } from "./agent-bundle-package-DWV6B_5q-B-qzc3zC.mjs";
+import { a as prewarmFileContentCache, c as typedEntries, i as createFileContentCache, l as require_out, n as computeBuilderFingerprint, o as resetFileContentCache, r as computeWorkflowFingerprint, s as sha256String } from "./metadata-layout-C6ed-9dl-C6Bylr_z.mjs";
+import { a as getAgentArtifactPaths, c as hashWorkflowManifestForDisk, d as resolveOutputDir, i as createAgentOutputFiles, l as removeAgentArtifacts, n as BUILD_CACHE_FILE_NAME, o as hashAgentManifestForDisk, r as allOutputFilesExist, s as hashWorkflowFlowForDisk, t as AGENT_ARTIFACT_DIR_PREFIX, u as removeWorkflowArtifacts } from "./writer-CtvttJdP-DZJ0mZCm.mjs";
+import { a as createDiscoveryFailure, c as createNamespaceStarExportDiscoveryError, d as isWorkflowLoadResult, f as loadWorkflowMetadataBatch, i as createAmbiguousExportDiscoveryError, l as isAgentLoadResult, o as createDuplicateWorkflowIdFailure, t as DuplicateWorkflowIdError, u as isTaskLoadResult } from "./import-module-DDPnzlJ1-BIBSgOhK.mjs";
+import { a as literalString, n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-ghZc3xZ5.mjs";
+import { a as getLocalModuleSpecifier, c as removeAllMetadataArtifacts, d as resolveDefaultExportAssignment, f as resolveLocalModulePath, i as collectWorkflowImportNames, n as DISCOVERY_IGNORE, o as getVariableDeclarators, r as collectLocalWorkflowBindings, s as isExportedVariableStatement, t as DISCOVERY_GLOB, u as removeMetadataArtifacts } from "./source-analysis-DEEChuND-Csu0oOlw.mjs";
+import { n as parseRelativeFilePath } from "./normalize-path-CojS-CgQ-D_WTiHKw.mjs";
 import * as fs from "node:fs/promises";
 import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
 import * as path$1 from "node:path";
 import path from "node:path";
-import { z } from "zod";
 import { fileURLToPath } from "node:url";
+import { z } from "zod";
 import { createHash } from "node:crypto";
 import { performance } from "node:perf_hooks";
 //#region ../../packages/core/dist/flow-graph-toolkit/index.mjs
@@ -978,7 +978,7 @@ async function buildDiscoveredWorkflows(options) {
 	const failures = [...buildPlan.failures];
 	const warnings = [];
 	if (buildPlan.workflows.length > 0) {
-		const { buildWorkflowArtifacts } = await import("./build-workflows-3fdvdHHf-Bg5XV7hM.mjs");
+		const { buildWorkflowArtifacts } = await import("./build-workflows-3fdvdHHf-BDTy9QgT.mjs");
 		const result = await buildWorkflowArtifacts({
 			entries: buildPlan.workflows,
 			workflowsByKey,
@@ -993,7 +993,7 @@ async function buildDiscoveredWorkflows(options) {
 		warnings.push(...result.warnings);
 	}
 	if (buildPlan.agents.length > 0) {
-		const { buildAgentArtifacts } = await import("./build-agents-DfbiMZ_e-in-if4_C.mjs");
+		const { buildAgentArtifacts } = await import("./build-agents-DfbiMZ_e-CgnKa9A6.mjs");
 		const result = await buildAgentArtifacts({
 			entries: buildPlan.agents,
 			projectRoot: options.projectRoot
@@ -1002,7 +1002,7 @@ async function buildDiscoveredWorkflows(options) {
 		failures.push(...result.failures);
 	}
 	if (buildPlan.tasks.length > 0) {
-		const { buildTaskArtifacts } = await import("./build-tasks-O1jYtlv1-B2Dm4hFj.mjs");
+		const { buildTaskArtifacts } = await import("./build-tasks-O1jYtlv1-Bkw0w1r3.mjs");
 		const result = await buildTaskArtifacts({
 			entries: buildPlan.tasks,
 			projectRoot: options.projectRoot,
@@ -1110,7 +1110,7 @@ async function createBuildPlan(options) {
 		const currentWorkflowIndex = workflowProgressIndex;
 		workflowProgressIndex += 1;
 		if (!loadResult?.ok) {
-			const { createWorkflowMetadataFailure } = await import("./build-workflows-3fdvdHHf-Bg5XV7hM.mjs");
+			const { createWorkflowMetadataFailure } = await import("./build-workflows-3fdvdHHf-BDTy9QgT.mjs");
 			plan.failures.push(createWorkflowMetadataFailure(discoveredWorkflow, loadResult?.error));
 			continue;
 		}
@@ -1308,7 +1308,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			cacheResolvedBindingKeys,
 			releaseBundleMemory: config.releaseBundleMemory
 		};
-		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-CtvttJdP-DrJruQgR.mjs").then((n) => n.f).then((n) => n.t);
+		const { writeBuildOutput, writeTargetedBuildOutput } = await import("./writer-CtvttJdP-DZJ0mZCm.mjs").then((n) => n.f).then((n) => n.t);
 		const writeResult = targetBindingKeys ? await writeTargetedBuildOutput({
 			artifacts: finalizedScopedArtifacts,
 			agentArtifacts,
@@ -1333,7 +1333,7 @@ async function runBuild(config, initialTargetBindingKeys, metadataRebuildDecisio
 			elapsedMs: performance.now() - writeStartedAt,
 			...writeResult.skippedWriteCount !== void 0 && writeResult.skippedWriteCount > 0 ? { skippedWriteCount: writeResult.skippedWriteCount } : {}
 		});
-		const { buildMetadataArtifacts } = await import("./build-metadata-zidV9Cai-BAS0FMxT.mjs");
+		const { buildMetadataArtifacts } = await import("./build-metadata-zidV9Cai-Bq37kBOM.mjs");
 		const metadata = await buildMetadataArtifacts({
 			projectRoot: config.projectRoot,
 			outputDir,

package/dist/{workflow-bundler-BzHk73PM-Bt-poFqX.mjs → workflow-bundler-BzHk73PM-tt09RbIA.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-BeimiQ2U.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CsrSOCcj.mjs";
+import { n as identifierName, o as parseSourceFile, r as isNode } from "./oxc-B3KI3rf_-ghZc3xZ5.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-D4o8gRZs.mjs";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import * as path$1 from "node:path";
 import { createHash } from "node:crypto";

package/dist/{workflow-manifest-CAW5FlX0.mjs → workflow-manifest-BfL74mjp.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { r as SHA256HashSchema, t as JsonSchemaSchema } from "./common-BrVAdUyD.mjs";
-import { a as ResolvedCredentialSetSchema, c as TriggerTypeSchema, d as WorkflowStepEntrySchema, i as IntegrationScopeSchema, l as TriggerUploadDataSchema, t as CredentialRequirementsSchema } from "./credential-requirements-DjDFthio.mjs";
-import { a as SourceLocationSchema, i as ImportSourceSchema, n as CallsiteFingerprintSchema, t as CallKindSchema } from "./source-analysis-BspLa3E5.mjs";
-import { t as DurationSchema } from "./schedule-BRN4hzQM.mjs";
+import { r as SHA256HashSchema, t as JsonSchemaSchema } from "./common-B3bLe3Mk.mjs";
+import { a as ResolvedCredentialSetSchema, c as TriggerTypeSchema, d as WorkflowStepEntrySchema, i as IntegrationScopeSchema, l as TriggerUploadDataSchema, t as CredentialRequirementsSchema } from "./credential-requirements-BCW8aQWS.mjs";
+import { a as SourceLocationSchema, i as ImportSourceSchema, n as CallsiteFingerprintSchema, t as CallKindSchema } from "./source-analysis-CHkWMC40.mjs";
+import { t as DurationSchema } from "./schedule-BWAI6qLx.mjs";
 import { z } from "zod";
 //#region ../../packages/core/src/artifacts/flow-graph-schema.ts
 const DecisionKindSchema = z.enum([