@keystrokehq/cli 0.1.147 → 0.1.149

package/dist/{dist-E6dh6qXe.mjs → dist-C6adeAws.mjs}

@@ -4794,7 +4794,7 @@ function number(params) {
 	return /* @__PURE__ */ _coercedNumber(ZodNumber, params);
 }
 //#endregion
-//#region ../../packages/shared/dist/billing-BL8kgXs-.mjs
+//#region ../../packages/shared/dist/billing-Ig0pw49a.mjs
 const isoDateTime$7 = string().datetime();
 const subscriptionStatusSchema = _enum([
 	"none",
@@ -4949,7 +4949,11 @@ const BillingUsageMeterKeySchema = _enum([
 	"tigris_storage"
 ]);
 const BillingUsageKeySourceSchema = _enum(["platform", "byok"]);
-const BillingUsageRunKindSchema = _enum(["agent", "workflow"]);
+const BillingUsageRunKindSchema = _enum([
+	"agent",
+	"workflow",
+	"platform_agent"
+]);
 object({ events: array(object({
 	projectId: string().min(1).max(255).nullable().optional(),
 	runId: string().min(1).max(255).nullable().optional(),
@@ -4972,7 +4976,7 @@ object({
 	chargeMicroCredits: number$1().int().nonnegative()
 });
 //#endregion
-//#region ../../packages/shared/dist/credential-runtime-PPZh5Cbn.mjs
+//#region ../../packages/shared/dist/credential-runtime-Cbm2X9rK.mjs
 const ACTIVE_ORG_HEADER = "x-keystroke-org-id";
 /**
 * Client surface that originated the request. The hosted web app and CLI set this
@@ -5016,8 +5020,7 @@ const ChatAttachmentInputSchema = object({
 	mediaType: string().min(1),
 	filename: string().optional()
 });
-/** JSON-safe file ref for workflow inputs, step outputs, and `agent.prompt({ files })`. */
-const FilePartSchema = object({
+object({
 	type: literal("file"),
 	mediaType: string().min(1),
 	url: string().min(1),
@@ -5037,14 +5040,6 @@ const PresignChatAttachmentResponseSchema = object({
 const LOCAL_PLATFORM_ORIGIN = "http://localhost:3002";
 /** Default production platform origin when no env override is set. */
 const DEFAULT_CLOUD_PLATFORM_ORIGIN = "https://api.keystroke.ai";
-/** Reads `PUBLIC_PLATFORM_URL` when explicitly set. */
-function resolveExplicitPublicPlatformOrigin(env = process.env) {
-	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
-}
-/** `PUBLIC_PLATFORM_URL` origin; falls back to {@link LOCAL_PLATFORM_ORIGIN} when unset. */
-function resolvePublicPlatformOrigin(env = process.env) {
-	return resolveExplicitPublicPlatformOrigin(env) ?? "http://localhost:3002";
-}
 //#endregion
 //#region ../../packages/shared/dist/credential-spec-B-iwg8Oc.mjs
 /** OpenAPI 3.0 JSON Schema for manifests and route discovery. */
@@ -5828,6 +5823,7 @@ const ProjectSchema = object({
 	baseUrl: string().nullable(),
 	runtimeId: string().nullable(),
 	lastError: string().nullable(),
+	activeArtifactId: string().nullable(),
 	createdAt: isoDateTime$6,
 	updatedAt: isoDateTime$6
 });
@@ -5876,6 +5872,17 @@ function slugifyAppName(name) {
 }
 /** Browser→platform request budget (ping + small platform overhead). */
 const PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS = 17e3;
+/**
+* SDK HTTP budget for managed deploy transaction requests. Completion may
+* download and validate a near-limit artifact, so it must not inherit ky's 10s
+* default. Local analysis/build runs outside the HTTP request.
+*/
+const MANAGED_DEPLOY_REQUEST_TIMEOUT_MS = 15 * 6e4;
+/**
+* SDK HTTP budget for draft `commit` / `commitFromDiff`. First uploads can be
+* multi-MB binary patches applied on Code.Storage; ky’s default 10s aborts those.
+*/
+const PROJECT_DRAFT_COMMIT_REQUEST_TIMEOUT_MS = 5 * 6e4;
 /** Path of the public Mintlify-hosted docs search MCP server, relative to the web origin. */
 const DOCS_MCP_PATH = "/docs/mcp";
 /**
@@ -5915,27 +5922,6 @@ function originFromPublicUrl(value, fallback) {
 	if (!trimmed) return fallback.replace(/\/+$/, "");
 	return trimmed.replace(/\/+$/, "");
 }
-/** TCP port to bind for a local server, derived from a public URL. */
-function listenPortFromUrl(url, fallback) {
-	const parsed = new URL(url);
-	if (parsed.port) {
-		const port = Number(parsed.port);
-		if (Number.isFinite(port) && port > 0) return port;
-	}
-	if (parsed.protocol === "https:") return 443;
-	if (parsed.protocol === "http:") return 80;
-	return fallback;
-}
-/** Shorthand: listen port from `PUBLIC_*_URL` or fallback. */
-function listenPortFromPublicUrl(value, fallback) {
-	const trimmed = value?.trim();
-	if (!trimmed) return fallback;
-	try {
-		return listenPortFromUrl(trimmed, fallback);
-	} catch {
-		return fallback;
-	}
-}
 /**
 * Target for Zod ↔ JSON Schema round-trips of persisted Keystroke schemas
 * (workflow inputs, webhook payloads, hook resume schemas, agent output schemas).
@@ -5957,8 +5943,8 @@ function zodToStoredJsonSchema(schema, options = {}) {
 		} } : {}
 	});
 }
-/** On-disk path under the project root (packed in deploy artifacts when present). */
-const ROUTE_MANIFEST_REL_PATH = "dist/.keystroke/route-manifest.json";
+/** Thin modular project index (source of truth for emit hashes + shard paths). */
+const PROJECT_MANIFEST_REL_PATH = "dist/.keystroke/manifest.json";
 /**
 * Structural workflow-canvas graph contract.
 *
@@ -6288,6 +6274,7 @@ const storedRouteManifestV2Schema = object({
 	skills: array(StoredRouteManifestSkillSchema).default([]),
 	integrations: array(string()).optional()
 });
+const StoredRouteManifestSchema = storedRouteManifestV2Schema;
 /**
 * Parse a stored route manifest. Only the strict v2 schema is supported: the
 * builder always emits v2 and every deploy regenerates the manifest, so there is
@@ -6297,6 +6284,117 @@ const storedRouteManifestV2Schema = object({
 function parseStoredRouteManifest(value) {
 	return storedRouteManifestV2Schema.parse(value);
 }
+const ProjectManifestModuleRefSchema = object({
+	kind: _enum([
+		"agent",
+		"workflow",
+		"trigger"
+	]),
+	id: string(),
+	/** Path relative to `dist/.keystroke/`. */
+	path: string(),
+	/** Input-closure / source hash that produced the meta shard. */
+	contentHash: string(),
+	/** Workflows only — path of the flow-graph shard relative to `dist/.keystroke/`. */
+	flowPath: string().optional(),
+	/** Workflows only — hash of the workflow source used for the flow producer. */
+	flowHash: string().optional()
+});
+const ProjectManifestSchema = object({
+	version: literal(3),
+	modules: array(ProjectManifestModuleRefSchema),
+	skills: array(StoredRouteManifestSkillSchema).default([]),
+	integrations: array(string()).optional(),
+	actionsCatalogPath: string(),
+	actionsCatalogHash: string()
+});
+function parseProjectManifest(value) {
+	return ProjectManifestSchema.parse(value);
+}
+object({
+	kind: literal("agent"),
+	slug: string(),
+	moduleFile: string(),
+	name: requiredDisplayTextSchema,
+	description: requiredDisplayTextSchema,
+	model: string(),
+	compactionModel: string().optional(),
+	systemPrompt: string(),
+	toolCount: number$1().int().nonnegative(),
+	credentialCount: number$1().int().nonnegative(),
+	appSlugs: array(string()).default([]),
+	toolSlugs: array(string()).default([]),
+	toolRequirements: record(string(), array(CredentialRequirementSummarySchema)).optional(),
+	sandboxRequirements: array(CredentialRequirementSummarySchema).optional()
+});
+object({
+	kind: literal("workflow"),
+	slug: string(),
+	name: requiredDisplayTextSchema,
+	description: requiredDisplayTextSchema,
+	subscribable: boolean(),
+	moduleFile: string(),
+	requestSchema: record(string(), unknown()),
+	responseSchema: record(string(), unknown()).optional()
+});
+object({
+	flowGraph: WorkflowCanvasGraphSchema,
+	flowGraphSourceHash: string(),
+	flowGraphHash: string()
+});
+object({ entries: array(discriminatedUnion("kind", [
+	object({
+		kind: literal("trigger-webhook"),
+		endpoint: string(),
+		attachmentIds: array(string()),
+		moduleFile: string(),
+		sourceHash: string().optional(),
+		attachmentSchemas: attachmentSchemasSchema,
+		attachmentMeta: attachmentMetaSchema.optional()
+	}),
+	object({
+		kind: literal("trigger-poll"),
+		attachmentId: string(),
+		attachmentIds: array(string()),
+		moduleFile: string(),
+		sourceHash: string().optional(),
+		schedule: string(),
+		timezone: string().optional(),
+		name: requiredDisplayTextSchema,
+		description: requiredDisplayTextSchema
+	}),
+	object({
+		kind: literal("trigger-poll-group"),
+		pollId: string(),
+		attachmentIds: array(string()),
+		moduleFile: string(),
+		schedule: string(),
+		timezone: string().optional()
+	}),
+	object({
+		kind: literal("cron-schedule"),
+		attachmentId: string(),
+		attachmentIds: array(string()),
+		moduleFile: string(),
+		sourceHash: string().optional(),
+		schedule: string(),
+		timezone: string().optional(),
+		payload: unknown().optional(),
+		name: requiredDisplayTextSchema,
+		description: requiredDisplayTextSchema
+	})
+])).min(1) });
+object({ entries: array(object({
+	kind: literal("action"),
+	slug: string(),
+	name: requiredDisplayTextSchema,
+	description: requiredDisplayTextSchema,
+	moduleFile: string(),
+	appSlug: string().optional(),
+	inputSchema: record(string(), unknown()),
+	outputSchema: record(string(), unknown()),
+	requirements: array(CredentialRequirementSummarySchema).optional()
+})) });
 /** Messaging platforms that support agent gateway bindings. */
 const ChannelPlatformKeySchema = _enum(["slack"]);
 const ChannelReactionSupportSchema = _enum([
@@ -6387,6 +6485,8 @@ const ChannelPlatformSchema = object({
 	connectAppId: string().min(1).optional(),
 	docsUrl: string().url().optional()
 });
+/** Whether a binding targets a single Slack channel or an entire custom Slack app. */
+const ChannelBindingTargetKindSchema = _enum(["channel", "app"]);
 const ChannelBindingSchema = object({
 	id: string().min(1),
 	channelId: string().min(1),
@@ -6394,6 +6494,10 @@ const ChannelBindingSchema = object({
 	channelKind: ChannelBindingKindSchema,
 	mode: ChannelListenModeSchema,
 	subscribeOnMention: boolean(),
+	/** Defaults to `"channel"` for existing per-channel bindings. */
+	bindingKind: ChannelBindingTargetKindSchema.optional(),
+	/** Present for app-level bindings — Slack bot handle without `@`. */
+	slackAppHandle: string().min(1).optional(),
 	createdAt: string(),
 	updatedAt: string()
 });
@@ -6411,7 +6515,26 @@ const ChannelDirectoryEntrySchema = object({
 	name: string().min(1),
 	kind: ChannelBindingKindSchema,
 	memberCount: number$1().int().nonnegative().optional(),
-	isArchived: boolean().optional()
+	isArchived: boolean().optional(),
+	/** Whether the workspace bot is a member (when the directory source provides it). */
+	isMember: boolean().optional()
+});
+/** Custom Slack app membership listing for an agent. */
+const SlackAgentMembershipsResponseSchema = object({
+	handle: string().min(1),
+	slackAppSlug: string().min(1),
+	accountId: string().min(1),
+	/** False when join/leave isn't available (missing scopes, Composio proxy, etc.). */
+	canManage: boolean(),
+	channels: array(ChannelDirectoryEntrySchema.extend({ isMember: boolean() }))
+});
+const SlackMembershipChannelBodySchema = object({ channelId: string().min(1) });
+/** Create-channel response: directory entry plus optional Slack deep link. */
+const CreateSlackChannelResponseSchema = ChannelDirectoryEntrySchema.extend({
+	/** `https://slack.com/app_redirect?channel=…&team=…` — open after create. */
+	openUrl: string().url(),
+	/** True when the acting user was invited into the new channel. */
+	invitedUser: boolean().optional()
 });
 const ChannelConnectionListResponseSchema = array(ChannelConnectionSchema);
 const ChannelDirectoryListResponseSchema = array(ChannelDirectoryEntrySchema);
@@ -6435,6 +6558,14 @@ const BindChannelBodySchema = object({
 	accountId: string().min(1),
 	binding: NewChannelBindingInputSchema
 });
+/** Create a Slack channel via the workspace bot token, then optionally bind. */
+const CreateSlackChannelBodySchema = object({
+	accountId: string().min(1),
+	name: string().trim().min(1).max(80).regex(/^#?[a-z0-9][a-z0-9_-]*$/, "Channel name must be lowercase alphanumeric with _ or -"),
+	isPrivate: boolean().optional().default(false)
+});
+/** Bind an agent to a custom Slack app (app-level — mentions/DMs anywhere the app is). */
+const BindAgentSlackAppBodySchema = object({ slackAppSlug: string().min(1) });
 const UpdateChannelBindingBodySchema = object({ patch: object({
 	mode: ChannelListenModeSchema.optional(),
 	subscribeOnMention: boolean().optional()
@@ -6682,6 +6813,17 @@ const StartMcpOAuthConnectionInputSchema = object({
 	scopes: array(string()).optional()
 });
 const StartMcpOAuthConnectionResultSchema = object({ authorizeUrl: string().url() });
+/** One tool from a live MCP `tools/list` for a connected custom org app. */
+const McpAppToolSchema = object({
+	name: string().min(1),
+	description: string().optional(),
+	inputSchema: record(string(), unknown()).optional()
+});
+const ListMcpAppToolsResponseSchema = object({
+	slug: string().min(1),
+	url: string().url(),
+	tools: array(McpAppToolSchema)
+});
 function displayNameFromUrl$1(url) {
 	let hostname;
 	try {
@@ -6791,14 +6933,28 @@ function parseAppSlug(slug) {
 function buildConnectDeeplink(options) {
 	const base = options.webUrl.replace(/\/+$/, "");
 	const params = new URLSearchParams({ connect: options.appSlug });
+	if (options.flow) params.set("flow", options.flow);
 	return `${base}/${options.orgSlug}/apps?${params.toString()}`;
 }
 /**
+* Web URL that opens an agent's External Channels Slack dialog.
+* `rail=configure` shows the channels panel; `slack=` selects Keystroke vs custom wizard.
+*/
+function buildAgentSlackDeeplink(options) {
+	const base = options.webUrl.replace(/\/+$/, "");
+	const params = new URLSearchParams({
+		rail: "configure",
+		slack: options.kind
+	});
+	return `${base}/${options.orgSlug}/agents/${encodeURIComponent(options.agentId)}?${params.toString()}`;
+}
+/**
 * Resolve a connect-catalog slug.
 *
-* `slack` is the action/credential toolkit; External Channels bind through the
-* `slackbot` gateway connect app. When both are in the catalog, `connect slack`
-* remaps to `slackbot` so users get a bindable workspace.
+* Slack slugs resolve as-is: `slack` (Personal Slack Account) opens the web
+* chooser, and `slackbot` is the catalog slug for the Keystroke Slack App.
+* Callers pick a specific Slack dialog with a connect-deeplink `flow` instead
+* of slug rewriting.
 */
 function resolveConnectAppSlug(slug, apps) {
 	const trimmed = slug.trim();
@@ -6808,10 +6964,6 @@ function resolveConnectAppSlug(slug, apps) {
 	} catch {
 		throw new Error(`Invalid app slug: ${slug}`);
 	}
-	if (trimmed === "slack") {
-		const slackbot = apps.find((app) => app.id === "slackbot");
-		if (slackbot) return slackbot;
-	}
 	const match = apps.find((app) => app.id === trimmed);
 	if (!match) {
 		const available = apps.map((app) => app.id).join(", ") || "(none)";
@@ -6819,6 +6971,49 @@ function resolveConnectAppSlug(slug, apps) {
 	}
 	return match;
 }
+/** Catalog / connect slug for the Keystroke Slack App (bot). */
+const SLACK_KEYSTROKE_APP_SLUG = "slackbot";
+/** Catalog / connect slug for a personal Slack user-token connection. */
+const SLACK_PERSONAL_APP_SLUG = "slack";
+/**
+* `?flow=` values for the Apps-page Slack connect deeplink
+* (`?connect=slack&flow=…`). Omitted flow opens the three-way chooser.
+* `keystroke` opens the Keystroke Slack App dialog (catalog slug `slackbot`),
+* `personal` the Personal Slack Account dialog (catalog slug `slack`),
+* `custom` the custom Slack app wizard.
+*/
+const SLACK_CONNECT_FLOWS = [
+	"keystroke",
+	"personal",
+	"custom"
+];
+/** Parse a `?flow=` search value; null when missing or not a Slack connect flow. */
+function parseSlackConnectFlow(value) {
+	return typeof value === "string" && SLACK_CONNECT_FLOWS.includes(value) ? value : null;
+}
+/**
+* Normalize a Slack bot handle to Slack's username charset/length.
+* Strips leading `@`, lowercases, turns whitespace into hyphens, drops other
+* disallowed characters, collapses repeated separators, truncates to 21.
+*
+* Handles remain lowercase (Slack username rules). App / bot *display* names
+* may use mixed case and spaces — see {@link slackAppNameFromHandle}.
+*/
+function normalizeSlackAppHandle(handle) {
+	return handle.trim().replace(/^@+/, "").toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9._-]/g, "").replace(/-+/g, "-").replace(/^[-._]+|[-._]+$/g, "").slice(0, 21);
+}
+/** True when a normalized handle is usable as a Slack bot username. */
+function isValidSlackAppHandle(handle) {
+	const normalized = normalizeSlackAppHandle(handle);
+	return normalized.length > 0 && normalized.length <= 21 && normalized !== "slackbot" && /^[a-z0-9._-]+$/.test(normalized);
+}
+/** Human-readable reason a handle is invalid, or null when valid. */
+function slackAppHandleError(handle) {
+	const normalized = normalizeSlackAppHandle(handle);
+	if (!normalized) return "Handle is required";
+	if (normalized === "slackbot") return "Handle cannot be slackbot";
+	return null;
+}
 const LOCKFILE_MANAGERS = [
 	["pnpm-lock.yaml", "pnpm"],
 	["yarn.lock", "yarn"],
@@ -6855,6 +7050,20 @@ function detectProjectPackageManagerFromSnapshot(files) {
 	return detectFromLockfileNames(paths) ?? "npm";
 }
 /**
+* Frozen pnpm install for trusted lockfiles (managed draft / deploy worktrees).
+*
+* pnpm 11 defaults `minimumReleaseAge` to 1440 minutes and re-verifies every
+* lockfile entry. Fresh `@keystrokehq/*` publishes are expected in Keystroke
+* projects, so exclude that scope. `trustLockfile` skips re-applying the age
+* gate to the committed lockfile (authored under the user's local pnpm).
+*/
+const PNPM_FROZEN_INSTALL_ARGS = [
+	"install",
+	"--frozen-lockfile",
+	"--config.trustLockfile=true",
+	"--config.minimum-release-age-exclude[]=@keystrokehq/*"
+];
+/**
 * Whether a package-manager install exit should be treated as success.
 *
 * pnpm 10+ exits non-zero with `ERR_PNPM_IGNORED_BUILDS` when a dependency's
@@ -6867,6 +7076,53 @@ function isAcceptableInstallExit(manager, exitCode, output) {
 	if (manager === "pnpm" && output.includes("ERR_PNPM_IGNORED_BUILDS")) return true;
 	return false;
 }
+/** Request body for generating a Slack app manifest (stateless). */
+const SlackAppManifestRequestSchema = object({
+	name: string().trim().min(1).max(80),
+	handle: string().trim().min(1).max(80).transform(normalizeSlackAppHandle).superRefine((handle, ctx) => {
+		if (isValidSlackAppHandle(handle)) return;
+		ctx.addIssue({
+			code: "custom",
+			message: slackAppHandleError(handle) ?? "Handle must be a valid Slack bot username"
+		});
+	})
+});
+/** Request body for creating a custom Slack app (credentials + identity). */
+const CreateSlackAppRequestSchema = SlackAppManifestRequestSchema.extend({
+	clientId: string().trim().min(1),
+	clientSecret: string().trim().min(1),
+	signingSecret: string().trim().min(1),
+	/** Scope the resulting credential to this project (agent flow); org-scoped when omitted. */
+	projectId: string().trim().min(1).optional()
+});
+const SlackAppInstalledTeamSchema = object({
+	teamId: string().min(1),
+	teamName: string().min(1).optional(),
+	connectionId: string().min(1)
+});
+const SlackAppBoundAgentSchema = object({
+	agentId: string().min(1),
+	agentSlug: string().min(1).optional(),
+	agentName: string().min(1).optional(),
+	projectId: string().min(1).optional()
+});
+/** Summary of a custom Slack app for list/detail responses. */
+const SlackAppSummarySchema = object({
+	id: string().min(1),
+	slug: string().min(1),
+	name: string().min(1),
+	handle: string().min(1),
+	slackAppId: string().min(1).optional(),
+	installedTeams: array(SlackAppInstalledTeamSchema),
+	boundAgent: SlackAppBoundAgentSchema.optional()
+});
+const SlackAppListResponseSchema = array(SlackAppSummarySchema);
+const SlackAppManifestResponseSchema = object({ manifest: record(string(), unknown()) });
+const CreateSlackAppResponseSchema = object({
+	app: SlackAppSummarySchema,
+	authorizeUrl: string().url()
+});
+const SlackAppInstallStartResponseSchema = object({ authorizeUrl: string().url() });
 /** Scope of a platform app credential (maps to `credential_instances.scope_type`). */
 const AppCredentialScopeSchema = _enum([
 	"user",
@@ -6964,7 +7220,9 @@ const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
 	appId: string().min(1),
 	connectionKind: AppCredentialConnectionKindSchema,
 	value: credentialSecretValueSchema.optional(),
-	scopes: array(string().min(1)).optional()
+	scopes: array(string().min(1)).optional(),
+	/** Friendly per-scope slug; when omitted, derived from label/name. */
+	slug: string().trim().min(1).optional()
 }).superRefine((input, ctx) => {
 	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 	if (input.connectionKind === "manual" && !input.value) ctx.addIssue({
@@ -7030,11 +7288,14 @@ const SubmitTeamRequestRequestSchema = object({
 		"enterprise-upgrade",
 		"verification",
 		"slack-connect",
-		"connector-access"
+		"connector-access",
+		"platform-agent-feedback"
 	]),
 	message: string().trim().max(5e3).optional(),
 	/** Required for connector-access requests (sandbox VM secret exposure). */
-	appSlug: string().trim().min(1).optional()
+	appSlug: string().trim().min(1).optional(),
+	/** Optional platform-agent chat/session id for feedback requests. */
+	sessionId: string().trim().min(1).optional()
 }).superRefine((value, ctx) => {
 	if (value.type === "connector-access" && !value.appSlug) ctx.addIssue({
 		code: ZodIssueCode.custom,
@@ -7346,7 +7607,9 @@ const HistoryRunSchema = object({
 	otherServicesUsed: array(string()),
 	totalCostUsd: number$1().nullable(),
 	messageCount: number$1().optional(),
-	stepCount: number$1().optional()
+	stepCount: number$1().optional(),
+	/** Present for workflow child runs when known. */
+	parentWorkflowRunId: string().nullable().optional()
 });
 const HistoryTraceSpanSchema = object({
 	id: string(),
@@ -7399,6 +7662,7 @@ const HistoryTraceSchema = object({
 const HistoryWorkflowStepSchema = object({
 	id: string(),
 	actionKey: string(),
+	input: unknown().nullable(),
 	output: unknown(),
 	completedAt: string()
 });
@@ -7412,6 +7676,7 @@ const HistoryWorkflowRunDetailSchema = object({
 		triggeredAt: string(),
 		startedAt: string().nullable(),
 		finishedAt: string().nullable(),
+		parentWorkflowRunId: string().nullable(),
 		input: unknown().nullable(),
 		output: unknown().nullable(),
 		error: unknown().nullable()
@@ -7541,7 +7806,8 @@ const WorkflowRunSummarySchema = object({
 	sourceKind: RunSourceKindSchema,
 	sourceId: string().nullable(),
 	triggerRunId: string().nullable(),
-	attachmentId: string().nullable()
+	attachmentId: string().nullable(),
+	parentWorkflowRunId: string().nullable()
 });
 const WorkflowRunRecordSchema = object({
 	id: string(),
@@ -7574,7 +7840,8 @@ const WorkflowRunListResponseSchema = object({
 _enum([
 	"trigger",
 	"steps",
-	"trace"
+	"trace",
+	"children"
 ]);
 object({ include: string().optional() });
 const TriggerRunDetailSchema = object({
@@ -7593,9 +7860,16 @@ const TriggerRunDetailSchema = object({
 const WorkflowStepRunSchema = object({
 	id: string(),
 	actionKey: string(),
+	/** Step input when recorded; `null` for legacy events that only stored output. */
+	input: unknown().nullable(),
 	output: unknown(),
 	completedAt: string()
 });
+object({
+	type: literal("keystroke.step-completed.v1"),
+	input: unknown(),
+	output: unknown()
+});
 const TraceTriggerSummarySchema = object({
 	triggerType: string(),
 	triggerRunId: string(),
@@ -7644,20 +7918,43 @@ const TraceResponseSchema = object({
 	spans: array(TraceSpanSchema),
 	logs: array(TraceLogSchema)
 });
-const WorkflowRunDetailResponseSchema = object({
-	run: WorkflowRunRecordSchema,
-	trigger: TriggerRunDetailSchema.nullable(),
-	steps: array(WorkflowStepRunSchema),
-	trace: TraceResponseSchema.nullable()
-});
 const WorkflowHookStatusSchema = _enum(["waiting", "resumed"]);
-const WorkflowRunHooksResponseSchema = object({ items: array(object({
+const WorkflowHookSummarySchema = object({
 	token: string(),
 	correlationId: string(),
 	status: WorkflowHookStatusSchema,
 	createdAt: string(),
 	resumeUrl: string().nullable()
-})) });
+});
+const WorkflowRunHooksResponseSchema = object({ items: array(WorkflowHookSummarySchema) });
+/** Light parent→child link (always present; used when `children` is not in include). */
+const WorkflowChildRunLinkSchema = object({
+	kind: _enum(["workflow", "agent"]),
+	runId: string(),
+	workflowSlug: string().optional(),
+	agentSlug: string().optional(),
+	correlationId: string(),
+	status: string()
+});
+const WorkflowRunChildDetailSchema = lazy(() => object({
+	kind: literal("workflow"),
+	correlationId: string(),
+	run: WorkflowRunRecordSchema,
+	trigger: TriggerRunDetailSchema.nullable(),
+	steps: array(WorkflowStepRunSchema),
+	trace: TraceResponseSchema.nullable(),
+	children: array(WorkflowRunChildSchema),
+	hooks: array(WorkflowHookSummarySchema)
+}));
+const WorkflowRunChildSchema = lazy(() => union([WorkflowChildRunLinkSchema, WorkflowRunChildDetailSchema]));
+const WorkflowRunDetailResponseSchema = object({
+	run: WorkflowRunRecordSchema,
+	trigger: TriggerRunDetailSchema.nullable(),
+	steps: array(WorkflowStepRunSchema),
+	trace: TraceResponseSchema.nullable(),
+	children: array(WorkflowRunChildSchema),
+	hooks: array(WorkflowHookSummarySchema)
+});
 const AgentSessionStatusSchema = _enum([
 	"running",
 	"completed",
@@ -7735,6 +8032,68 @@ const AgentSessionDetailResponseSchema = object({
 	promptFinishEvents: array(HistoryAgentPromptFinishEventSchema).default([]),
 	trace: TraceResponseSchema.nullable()
 });
+const PlatformAgentSessionStatusSchema = _enum([
+	"running",
+	"completed",
+	"failed",
+	"canceled"
+]);
+/** Gateway model id (`vendor/model-id`). Catalog membership is checked at the route. */
+const PlatformAgentModelIdSchema = string().min(1).regex(/^[^/\s]+\/[^/\s].*$/, "model must be vendor/model-id");
+const PlatformAgentMessagePartSchema = union([object({
+	type: literal("text"),
+	text: string()
+}).passthrough(), object({ type: string().min(1) }).passthrough()]);
+const PlatformAgentTranscriptSchema = array(object({
+	id: string().min(1),
+	role: _enum([
+		"system",
+		"user",
+		"assistant"
+	]),
+	parts: array(PlatformAgentMessagePartSchema),
+	/** Event-row timestamp when the message was appended (ISO). */
+	createdAt: string().datetime().optional(),
+	/**
+	* Wall-clock work duration for an assistant turn, derived from matching
+	* `agent_start` → `agent_end` events (milliseconds).
+	*/
+	workedMs: number$1().int().nonnegative().optional()
+}).passthrough());
+const PlatformAgentPromptInputSchema = object({
+	message: string().default(""),
+	projectId: string().min(1),
+	model: PlatformAgentModelIdSchema,
+	sessionId: string().min(1).optional(),
+	files: array(ChatAttachmentInputSchema).max(5).optional()
+}).strict().refine((data) => data.message.trim().length > 0 || (data.files?.length ?? 0) > 0, { message: "message or files is required" });
+/** Same enqueue response as project agents — keep one wire shape. */
+const PlatformAgentPromptResponseSchema = QueuedAgentPromptResponseSchema;
+const PlatformAgentCancelResponseSchema = object({ ok: literal(true) });
+object({
+	startIndex: number().int().min(0).optional().default(0),
+	/** Required on run streams so the handler can resolve the owned session / project. */
+	sessionId: string().min(1).optional()
+});
+const PlatformAgentSessionSummarySchema = object({
+	id: string(),
+	projectId: string(),
+	status: PlatformAgentSessionStatusSchema,
+	title: string().nullable(),
+	model: string().nullable(),
+	activeRunId: string().nullable(),
+	lastDraftCommitSha: string().nullable(),
+	messageCount: number$1().int().nonnegative(),
+	createdAt: string().datetime(),
+	updatedAt: string().datetime()
+});
+const PlatformAgentSessionListResponseSchema = object({ items: array(PlatformAgentSessionSummarySchema) });
+const PlatformAgentSessionDetailResponseSchema = object({
+	session: PlatformAgentSessionSummarySchema.extend({ error: string().nullable() }),
+	activeRunId: string().nullable().default(null),
+	messages: PlatformAgentTranscriptSchema,
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([])
+});
 const SlackGatewayModeSchema = _enum([
 	"mention",
 	"channel",
@@ -8057,7 +8416,22 @@ object({
 	workflow: string().min(1).optional(),
 	agent: string().min(1).optional()
 });
-const TriggerInvokeResponseSchema = object({ runId: string().min(1) });
+/** One attachment that will fire from this invoke (workflow runs are created later). */
+const TriggerInvokeTargetSchema = object({
+	kind: TriggerTargetKindSchema,
+	slug: string().min(1),
+	attachmentSlug: string().min(1)
+});
+/**
+* `POST /api/triggers/:triggerId/invoke` — 202 Accepted.
+* `runId` is the trigger-run / trigger-job id (not a workflow run id). Use
+* `triggers runs get` after dispatch to resolve `workflowRuns` / `agentSessions`.
+*/
+const TriggerInvokeResponseSchema = object({
+	runId: string().min(1),
+	triggerSlug: string().min(1),
+	targets: array(TriggerInvokeTargetSchema)
+});
 /**
 * `GET /api/triggers/:triggerId/invoke-inputs` — form metadata for the dashboard.
 * Webhook attachments carry `requestSchema`; cron carries read-only `staticPayload`.
@@ -8328,20 +8702,69 @@ const PresignOrgLogoResponseSchema = object({
 	storageKey: string().min(1)
 });
 const ProjectArtifactStatusSchema = _enum(["pending", "ready"]);
+const commitSha$3 = string().regex(/^[0-9a-f]{40}$/i);
 const isoDateTime$1 = string().datetime();
+/**
+* Client-supplied provenance. `sourceRepositoryId` is optional on the wire —
+* the platform binds it from the ready project repository when omitted.
+*
+* Healthy filtered deploy (Slice 3) owns when these fields are required; Slice 1
+* keeps them optional so snapshot deploys continue to work.
+*/
+const clientGitProvenanceFields = {
+	sourceCommitSha: commitSha$3,
+	baseMainSha: commitSha$3,
+	baseDraftSha: commitSha$3
+};
+function requireClientGitProvenanceFields(data, ctx) {
+	const requiredKeys = [
+		"sourceCommitSha",
+		"baseMainSha",
+		"baseDraftSha"
+	];
+	const present = requiredKeys.filter((key) => data[key] !== void 0);
+	if (present.length === 0 || present.length === requiredKeys.length) return;
+	for (const key of requiredKeys) if (data[key] === void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: `${key} is required when git provenance is provided`,
+		path: [key]
+	});
+}
+const CreateProjectArtifactRequestSchema = object({
+	sourceRepositoryId: string().min(1).optional(),
+	sourceCommitSha: clientGitProvenanceFields.sourceCommitSha.optional(),
+	baseMainSha: clientGitProvenanceFields.baseMainSha.optional(),
+	baseDraftSha: clientGitProvenanceFields.baseDraftSha.optional(),
+	/** Lowercase hex sha256 of the gzip tarball — enables content-addressed upload skip. */
+	checksumSha256: string().regex(/^[0-9a-f]{64}$/).optional(),
+	sizeBytes: number$1().int().nonnegative().optional()
+}).superRefine(requireClientGitProvenanceFields).superRefine((data, ctx) => {
+	if (data.checksumSha256 !== void 0 && data.sizeBytes === void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "sizeBytes is required when checksumSha256 is provided",
+		path: ["sizeBytes"]
+	});
+});
 const ProjectArtifactSchema = object({
 	id: string(),
 	projectId: string(),
 	storageKey: string(),
 	status: ProjectArtifactStatusSchema,
+	sourceCommitSha: string().nullable().optional(),
 	createdAt: isoDateTime$1,
 	updatedAt: isoDateTime$1
 });
 const CreateProjectArtifactResponseSchema = object({
 	artifact: ProjectArtifactSchema,
-	uploadUrl: string().url(),
+	/** Null when the tarball bytes already exist at the content-addressed key (skip PUT). */
+	uploadUrl: string().url().nullable(),
 	expiresInSeconds: number$1().int().positive()
 });
+/**
+* Optional body for artifact complete. When `manifest` is present the platform
+* skips re-downloading the tarball (CLI already has it in memory after pack).
+*/
+const CompleteProjectArtifactRequestSchema = object({ manifest: StoredRouteManifestSchema.optional() });
 const CompleteProjectArtifactResponseSchema = object({
 	artifact: ProjectArtifactSchema,
 	project: ProjectSchema
@@ -8361,6 +8784,527 @@ const ListProjectDeploymentsResponseSchema = array(object({
 	createdAt: isoDateTime$1,
 	active: boolean()
 }));
+const ConfiguredProjectGitStatusSchema = object({
+	provider: _enum(["github", "code_storage"]),
+	lifecycleStatus: _enum([
+		"provisioning",
+		"ready",
+		"failed",
+		"deleting",
+		"deleted"
+	]),
+	contentStatus: _enum([
+		"empty",
+		"awaiting_source",
+		"synced",
+		"failed"
+	]),
+	defaultBranch: string().min(1),
+	owner: string().nullable(),
+	name: string().nullable(),
+	lastErrorCode: string().nullable(),
+	lastError: string().nullable()
+});
+const ProjectGitStatusResponseSchema = discriminatedUnion("configured", [object({ configured: literal(false) }), object({
+	configured: literal(true),
+	repository: ConfiguredProjectGitStatusSchema
+})]);
+/** Remotes default to read-only. `draft_write` is Code.Storage-only. */
+const ProjectGitRemoteRequestSchema = object({
+	ephemeral: boolean().optional(),
+	capability: _enum(["read", "draft_write"]).optional()
+});
+const ProjectGitRemoteResponseSchema = object({
+	url: string().url(),
+	username: string().min(1),
+	password: string().min(1),
+	expiresAt: string().datetime(),
+	defaultBranch: literal("main"),
+	draftBranch: literal("ks/draft")
+});
+/** Snapshot/content-addressed blob digests are always lowercase sha256. */
+const sha256Hex$1 = string().regex(/^[a-f0-9]{64}$/, "Expected a lowercase hex sha256 digest");
+/** One file in a modular deploy artifact (path relative to `dist/`). */
+const ProjectArtifactIndexFileSchema = object({
+	path: string().min(1).refine((path) => !path.startsWith("/") && !path.includes("\\") && !path.includes("\0") && path.split("/").every((segment) => segment !== "" && segment !== "." && segment !== ".."), "Expected a normalized dist-relative path"),
+	hash: sha256Hex$1,
+	size: number$1().int().nonnegative()
+});
+/** Per-deploy index: logical dist paths → content-addressed module blobs. */
+const ProjectArtifactIndexSchema = object({
+	version: literal(1),
+	files: array(ProjectArtifactIndexFileSchema).min(1)
+});
+/** A blob the CLI may need to upload for a modular artifact. */
+const ModuleBlobRefSchema = object({
+	hash: sha256Hex$1,
+	size: number$1().int().nonnegative()
+});
+const isoDateTime = string().datetime();
+/** Snapshot/content-addressed blob digests are always lowercase sha256. */
+const sha256Hex = string().regex(/^[a-f0-9]{64}$/, "Expected a lowercase hex sha256 digest");
+/** Max bytes for a single source file collected or served from a deploy tree. */
+const PROJECT_SOURCE_MAX_FILE_BYTES = 256 * 1024;
+/** Max total bytes across all source files in a deploy tree listing. */
+const PROJECT_SOURCE_MAX_TOTAL_BYTES = 8 * 1024 * 1024;
+/** Max file count in a deploy tree listing. */
+const PROJECT_SOURCE_MAX_FILES = 2e3;
+/** Directory names excluded from project source trees (Git and snapshot). */
+const PROJECT_SOURCE_IGNORED_DIRS = Object.freeze(new Set([
+	"node_modules",
+	"dist",
+	".git",
+	".turbo",
+	"build",
+	"coverage",
+	".keystroke",
+	".cache",
+	"tmp"
+]));
+/** Basename regex: any name containing `.env` (e.g. `.env`, `.env.local`). */
+const PROJECT_SOURCE_IGNORED_ENV_BASENAME = /\.env/;
+/** Basename regex: names ending in `.log`. */
+const PROJECT_SOURCE_IGNORED_LOG_BASENAME = /\.log$/;
+/** True when a basename should be excluded from project source trees. */
+function isIgnoredProjectSourceFileName(name) {
+	return name === "pnpm-workspace.yaml" || PROJECT_SOURCE_IGNORED_ENV_BASENAME.test(name) || PROJECT_SOURCE_IGNORED_LOG_BASENAME.test(name);
+}
+/**
+* True when any path segment is an ignored directory (e.g. `src/node_modules/x`).
+* Does not treat the filename itself as a directory.
+*/
+function isIgnoredProjectSourcePath(path) {
+	const segments = path.split("/");
+	for (let index = 0; index < segments.length - 1; index += 1) {
+		const segment = segments[index];
+		if (segment && PROJECT_SOURCE_IGNORED_DIRS.has(segment)) return true;
+	}
+	const base = segments.at(-1);
+	return base !== void 0 && isIgnoredProjectSourceFileName(base);
+}
+/** True when the leading sample of a buffer looks binary (NUL byte). */
+function isProbablyBinaryProjectSource(bytes) {
+	const sampleLength = Math.min(bytes.length, 8e3);
+	for (let index = 0; index < sampleLength; index += 1) if (bytes[index] === 0) return true;
+	return false;
+}
+/**
+* A single entry in a deploy's file tree, as served to the dashboard. Carries
+* no contents: `id` is a stable, path-derived handle used for selection and
+* `?file=` deep links. Contents are fetched lazily by immutable revision + path.
+*/
+const ProjectFileSummarySchema = object({
+	id: string(),
+	path: string().min(1)
+});
+/** Maps a runtime resource slug (agent/workflow/skill) to its source file path. */
+const ProjectSourceResourceRefSchema = object({
+	slug: string().min(1),
+	path: string().min(1)
+});
+const ProjectSourceResourcesSchema = object({
+	agents: array(ProjectSourceResourceRefSchema).default([]),
+	workflows: array(ProjectSourceResourceRefSchema).default([]),
+	skills: array(ProjectSourceResourceRefSchema).default([])
+});
+const emptyResources = () => ({
+	agents: [],
+	workflows: [],
+	skills: []
+});
+/** Response for the file-tree listing of a project's active deploy. */
+const ListProjectFilesResponseSchema = object({
+	artifactId: string().nullable(),
+	files: array(ProjectFileSummarySchema),
+	resources: ProjectSourceResourcesSchema.default(emptyResources())
+});
+object({
+	path: string().min(1),
+	contents: string(),
+	hash: sha256Hex
+});
+/** Request: ask the platform which blobs are missing and get presigned PUTs. */
+const PresignProjectSourceRequestSchema = object({ blobs: array(object({
+	hash: sha256Hex,
+	size: number$1().int().nonnegative()
+})) });
+const PresignedBlobUploadSchema = object({
+	hash: sha256Hex,
+	url: string().url()
+});
+/** Response: presigned PUTs for the subset of blobs not already stored. */
+const PresignProjectSourceResponseSchema = object({ uploads: array(PresignedBlobUploadSchema) });
+/** Request body the CLI sends to finalize a deploy's source manifest. */
+const UploadProjectSourceManifestRequestSchema = object({ files: array(object({
+	path: string().min(1),
+	hash: sha256Hex
+})) });
+const UploadProjectSourceResponseSchema = object({
+	ok: literal(true),
+	fileCount: number$1().int().nonnegative()
+});
+object({
+	files: array(object({
+		id: string(),
+		path: string().min(1),
+		hash: sha256Hex
+	})),
+	generatedAt: isoDateTime
+});
+/** A single source file returned by the bulk active-source download endpoint. */
+const DownloadActiveProjectSourceFileSchema = object({
+	path: string().min(1),
+	contents: string()
+});
+/** Response for downloading all source files from a project's active deploy. */
+const DownloadActiveProjectSourceResponseSchema = object({
+	artifactId: string(),
+	files: array(DownloadActiveProjectSourceFileSchema)
+});
+const commitSha$2 = string().regex(/^[0-9a-f]{40}$/i);
+/**
+* Metadata for the active project's published source revision.
+* Contains no credentials — clients mint remotes separately when needed.
+*/
+const ActiveProjectSourceRevisionSchema = discriminatedUnion("kind", [object({
+	artifactId: string().min(1),
+	kind: literal("git"),
+	commitSha: commitSha$2,
+	branch: string().min(1)
+}), object({
+	artifactId: string().min(1),
+	kind: literal("snapshot")
+})]);
+const commitSha$1 = string().regex(/^[0-9a-f]{40}$/i);
+const repositoryPath = string().min(1).refine((path) => !path.startsWith("/") && !path.includes("\\") && !path.includes("\0") && path.split("/").every((segment) => segment !== "" && segment !== "." && segment !== ".."), "Expected a normalized repository-relative path");
+/** Stable filtered-deploy resource key (`agents/foo`, `workflows/bar`). */
+const ManagedDeployResourceKeySchema = string().regex(/^(agents|workflows)\/[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/);
+const ManagedDeployModeSchema = _enum(["full", "filtered"]);
+const ManagedDeployImpactCompletenessSchema = _enum(["complete", "unknown"]);
+const ManagedDeployCandidateOpSchema = object({
+	path: repositoryPath,
+	op: _enum(["upsert", "delete"])
+});
+const ManagedDeployRequireFullCodeSchema = _enum([
+	"package_manifest",
+	"lockfile",
+	"config",
+	"skills_or_assets",
+	"unsafe_delete_or_rename",
+	"dynamic_or_unresolved_import",
+	"missing_ownership",
+	"ambiguous_ownership",
+	"non_filterable_deployable",
+	"unknown_selected_key",
+	"unproven_safe"
+]);
+const ManagedDeployExpansionSchema = object({
+	resourceKey: ManagedDeployResourceKeySchema,
+	reason: string().min(1),
+	sharedInputs: array(string().min(1))
+});
+const ManagedDeploySourcePathChangeSchema = object({
+	path: repositoryPath,
+	kind: _enum([
+		"added",
+		"modified",
+		"deleted",
+		"renamed"
+	]),
+	previousPath: repositoryPath.optional()
+});
+object({
+	selectedResourceKeys: array(ManagedDeployResourceKeySchema).min(1),
+	changedPaths: array(union([repositoryPath, ManagedDeploySourcePathChangeSchema])).min(1),
+	/** D0 (draft) checkout root. Defaults to process cwd when omitted. */
+	root: string().min(1).optional(),
+	/** Optional M0 (main) checkout root for dual-tree CLI analyze. */
+	mainRoot: string().min(1).optional(),
+	/** Analyzer contract version the caller expects (forward-compatible). */
+	analyzerContractVersion: string().min(1).optional(),
+	/**
+	* Optional M0 package.json / lockfile contents for package-impact attribution.
+	* When omitted, package/lockfile changes remain full-deploy.
+	*/
+	baseManifestFiles: array(object({
+		path: repositoryPath,
+		contents: string()
+	})).optional()
+});
+discriminatedUnion("requireFull", [object({
+	requireFull: literal(true),
+	code: ManagedDeployRequireFullCodeSchema,
+	reason: string().min(1)
+}), object({
+	requireFull: literal(false),
+	resourceKeys: array(ManagedDeployResourceKeySchema).min(1),
+	impactedResourceKeys: array(ManagedDeployResourceKeySchema).default([]),
+	expansions: array(ManagedDeployExpansionSchema),
+	sourceDelta: array(repositoryPath),
+	impactCompleteness: ManagedDeployImpactCompletenessSchema.default("complete"),
+	warnings: array(string()).default([]),
+	candidateOps: array(ManagedDeployCandidateOpSchema).default([]),
+	analyzerContractVersion: string().min(1).optional()
+})]);
+object({
+	path: repositoryPath,
+	contents: string()
+});
+const ManagedDeployCandidateRecipeEntrySchema = object({
+	path: repositoryPath,
+	op: _enum(["upsert", "delete"]),
+	mode: _enum([
+		"100644",
+		"100755",
+		"120000",
+		"160000"
+	]).optional(),
+	blobSha: commitSha$1.optional()
+}).superRefine((data, ctx) => {
+	if (data.op === "upsert") {
+		if (data.mode == null) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "mode is required for upsert entries",
+			path: ["mode"]
+		});
+		if (data.blobSha == null) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "blobSha is required for upsert entries",
+			path: ["blobSha"]
+		});
+	}
+});
+const ManagedDeployCandidateRecipeSchema = object({
+	parentSha: commitSha$1,
+	treeSha: commitSha$1,
+	draftSha: commitSha$1,
+	mode: _enum(["full", "filtered"]),
+	entries: array(ManagedDeployCandidateRecipeEntrySchema)
+}).superRefine((data, ctx) => {
+	const seen = /* @__PURE__ */ new Set();
+	for (const [index, entry] of data.entries.entries()) {
+		if (seen.has(entry.path)) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: `Duplicate candidate recipe path: ${entry.path}`,
+			path: [
+				"entries",
+				index,
+				"path"
+			]
+		});
+		seen.add(entry.path);
+	}
+});
+const PrepareManagedDeployRequestSchema = object({
+	mainSha: commitSha$1,
+	draftSha: commitSha$1,
+	mode: ManagedDeployModeSchema,
+	candidateOps: array(ManagedDeployCandidateOpSchema).min(1).optional(),
+	requestedResourceKeys: array(ManagedDeployResourceKeySchema).min(1).optional(),
+	resourceKeys: array(ManagedDeployResourceKeySchema).min(1).optional(),
+	impactCompleteness: ManagedDeployImpactCompletenessSchema.optional(),
+	acceptImpact: boolean().optional()
+}).superRefine((data, ctx) => {
+	const seenCandidatePaths = /* @__PURE__ */ new Set();
+	for (const [index, operation] of (data.candidateOps ?? []).entries()) {
+		if (seenCandidatePaths.has(operation.path)) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: `Duplicate candidate operation path: ${operation.path}`,
+			path: [
+				"candidateOps",
+				index,
+				"path"
+			]
+		});
+		seenCandidatePaths.add(operation.path);
+	}
+	if (data.mode === "filtered") {
+		if (!data.candidateOps?.length) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "candidateOps is required for filtered deploys",
+			path: ["candidateOps"]
+		});
+		if (!data.requestedResourceKeys?.length) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "requestedResourceKeys is required for filtered deploys",
+			path: ["requestedResourceKeys"]
+		});
+		if (!data.resourceKeys?.length) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "resourceKeys is required for filtered deploys",
+			path: ["resourceKeys"]
+		});
+		if (data.impactCompleteness == null) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "impactCompleteness is required for filtered deploys",
+			path: ["impactCompleteness"]
+		});
+		if (data.requestedResourceKeys && data.resourceKeys && !data.requestedResourceKeys.every((key) => data.resourceKeys.includes(key))) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "requestedResourceKeys must be a subset of resourceKeys",
+			path: ["requestedResourceKeys"]
+		});
+		if ((data.requestedResourceKeys != null && data.resourceKeys != null && (data.requestedResourceKeys.length !== data.resourceKeys.length || !data.requestedResourceKeys.every((key) => data.resourceKeys.includes(key))) || data.impactCompleteness === "unknown") && data.acceptImpact !== true) ctx.addIssue({
+			code: ZodIssueCode.custom,
+			message: "acceptImpact is required for expanded or unknown filtered impact",
+			path: ["acceptImpact"]
+		});
+		return;
+	}
+	for (const field of [
+		"candidateOps",
+		"requestedResourceKeys",
+		"resourceKeys",
+		"impactCompleteness",
+		"acceptImpact"
+	]) if (data[field] != null) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: `${field} is not valid for full deploys`,
+		path: [field]
+	});
+});
+const PrepareManagedDeployResponseSchema = object({
+	artifact: ProjectArtifactSchema,
+	project: ProjectSchema,
+	mode: _enum(["full", "filtered"]),
+	mainSha: commitSha$1,
+	draftSha: commitSha$1,
+	candidateRef: string().min(1),
+	candidateEphemeral: boolean(),
+	publishMode: _enum(["git_push", "recipe"]),
+	candidateWriteRemote: object({
+		url: string().min(1),
+		username: string().min(1),
+		password: string().min(1),
+		expiresAt: string().datetime()
+	}).optional(),
+	candidateOps: array(ManagedDeployCandidateOpSchema).nullable().default(null)
+});
+const PublishManagedDeployCandidateRequestSchema = object({
+	artifactId: string().uuid(),
+	candidateSha: commitSha$1.optional(),
+	recipe: ManagedDeployCandidateRecipeSchema.optional(),
+	/**
+	* Client-attested tip trees for full-mode equality checks. When both are
+	* present, platform compares the strings and skips provider tree walks.
+	*/
+	draftTreeSha: commitSha$1.optional(),
+	candidateTreeSha: commitSha$1.optional()
+}).superRefine((data, ctx) => {
+	const hasDraft = data.draftTreeSha != null;
+	if (hasDraft !== (data.candidateTreeSha != null)) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "draftTreeSha and candidateTreeSha must both be provided together",
+		path: hasDraft ? ["candidateTreeSha"] : ["draftTreeSha"]
+	});
+});
+const PublishManagedDeployCandidateResponseSchema = object({
+	artifactId: string().uuid(),
+	candidateSha: commitSha$1,
+	candidateRef: string().min(1),
+	candidateEphemeral: boolean()
+});
+const checksumSha256 = string().regex(/^[0-9a-f]{64}$/);
+const CompleteManagedDeployArtifactRequestSchema = union([object({
+	artifactId: string().uuid(),
+	index: ProjectArtifactIndexSchema
+}), object({
+	artifactId: string().uuid(),
+	checksumSha256,
+	sizeBytes: number$1().int().positive()
+})]);
+const CompleteManagedDeployArtifactResponseSchema = object({
+	artifact: ProjectArtifactSchema,
+	project: ProjectSchema,
+	candidateSha: commitSha$1,
+	mode: ManagedDeployModeSchema
+});
+const CancelManagedDeployRequestSchema = object({ artifactId: string().uuid() });
+const CancelManagedDeployResponseSchema = object({ cancelled: literal(true) });
+/** Presign missing module blobs (CAS). Unchanged hashes are omitted from `uploads`. */
+const RenewManagedDeployUploadRequestSchema = object({
+	artifactId: string().uuid(),
+	blobs: array(ModuleBlobRefSchema)
+});
+const RenewManagedDeployUploadResponseSchema = object({
+	uploads: array(PresignedBlobUploadSchema),
+	expiresInSeconds: number$1().int().positive()
+});
+const HeartbeatManagedDeployRequestSchema = object({ artifactId: string().uuid() });
+const HeartbeatManagedDeployResponseSchema = object({ expiresAt: string().datetime() });
+const commitSha = string().regex(/^[0-9a-f]{40}$/i);
+/** Tip of the shared unpublished draft branch (`ks/draft`). */
+const DraftRevisionResponseSchema = object({
+	commitSha,
+	branch: literal("ks/draft")
+});
+/** File tree for a draft revision. Clients pin subsequent reads to `commitSha`. */
+const ListDraftFilesResponseSchema = object({
+	commitSha,
+	files: array(ProjectFileSummarySchema)
+});
+object({
+	path: string().min(1),
+	/**
+	* Optional immutable SHA from a prior list/revision response. When omitted,
+	* the platform resolves the current `ks/draft` tip.
+	*/
+	commitSha: commitSha.optional()
+});
+/** SDK/helper shape for a draft file body plus the SHA it was read at. */
+const DraftFileContentResponseSchema = object({
+	content: string(),
+	commitSha
+});
+const DraftCommitFileChangeSchema = discriminatedUnion("op", [object({
+	op: literal("upsert"),
+	path: string().min(1),
+	content: string()
+}), object({
+	op: literal("delete"),
+	path: string().min(1)
+})]);
+/**
+* Atomic multi-file commit against `ks/draft`. `expectedHeadSha` is required
+* for compare-and-swap; overlapping concurrent edits return a conflict.
+*/
+const CreateDraftCommitRequestSchema = object({
+	expectedHeadSha: commitSha,
+	message: string().min(1).max(500).optional(),
+	files: array(DraftCommitFileChangeSchema).min(1)
+});
+const DraftCommitResponseSchema = object({ commitSha });
+/**
+* Max decoded bytes for a `git diff --binary` submitted to the draft from-diff
+* endpoint. Keeps request bodies bounded for CLI sync and trusted workers.
+*/
+const PROJECT_DRAFT_DIFF_MAX_BYTES = 2 * 1024 * 1024;
+/** Base64 expands 3 bytes → 4 chars; pad for padding characters. */
+const PROJECT_DRAFT_DIFF_MAX_BASE64_CHARS = Math.ceil(PROJECT_DRAFT_DIFF_MAX_BYTES / 3) * 4;
+/**
+* Commit a binary Git patch (`git diff --binary`) against `ks/draft`.
+* `expectedHeadSha` is required for compare-and-swap.
+*/
+const CreateDraftDiffCommitRequestSchema = object({
+	expectedHeadSha: commitSha,
+	message: string().min(1).max(500).optional(),
+	/** Base64-encoded `git diff --binary` output. */
+	diffBase64: string().min(1).max(PROJECT_DRAFT_DIFF_MAX_BASE64_CHARS)
+});
+/** Structured 409 when CAS loses and touched paths overlap concurrent edits. */
+const DraftConflictResponseSchema = object({
+	error: string(),
+	code: literal("conflict"),
+	currentHeadSha: commitSha
+});
+/**
+* Transient SSE payload after an accepted draft commit. Not a durable event log —
+* clients use it only to invalidate pinned draft reads.
+*/
+const DraftUpdateEventSchema = object({
+	projectId: string().min(1),
+	commitSha
+});
 const optionalCount = number$1().int().nonnegative().nullable().optional();
 const optionalTimestamp = string().nullable().optional();
 const AgentSummarySchema = object({
@@ -8745,82 +9689,6 @@ const PublicFormSubmitBodySchema = object({
 	website: string().max(200).optional()
 });
 const PublicFormSubmitResponseSchema = object({ ok: literal(true) });
-const isoDateTime = string().datetime();
-const sha256Hex = string().regex(/^[a-f0-9]{64}$/, "Expected a lowercase hex sha256 digest");
-/**
-* A single entry in a deploy's file tree, as served to the dashboard. Carries
-* no contents: `id` is a stable, path-derived handle used for selection and
-* `?file=` deep links; `hash` is the content address used to fetch the bytes
-* lazily and to cache them immutably in the browser.
-*/
-const ProjectFileSummarySchema = object({
-	id: string(),
-	path: string().min(1),
-	hash: sha256Hex
-});
-/** Maps a runtime resource slug (agent/workflow/skill) to its source file path. */
-const ProjectSourceResourceRefSchema = object({
-	slug: string().min(1),
-	path: string().min(1)
-});
-const ProjectSourceResourcesSchema = object({
-	agents: array(ProjectSourceResourceRefSchema).default([]),
-	workflows: array(ProjectSourceResourceRefSchema).default([]),
-	skills: array(ProjectSourceResourceRefSchema).default([])
-});
-const emptyResources = () => ({
-	agents: [],
-	workflows: [],
-	skills: []
-});
-/** Response for the file-tree listing of a project's active deploy. */
-const ListProjectFilesResponseSchema = object({
-	artifactId: string().nullable(),
-	files: array(ProjectFileSummarySchema),
-	resources: ProjectSourceResourcesSchema.default(emptyResources())
-});
-object({
-	path: string().min(1),
-	contents: string(),
-	hash: sha256Hex
-});
-/** Request: ask the platform which blobs are missing and get presigned PUTs. */
-const PresignProjectSourceRequestSchema = object({ blobs: array(object({
-	hash: sha256Hex,
-	size: number$1().int().nonnegative()
-})) });
-/** Response: presigned PUTs for the subset of blobs not already stored. */
-const PresignProjectSourceResponseSchema = object({ uploads: array(object({
-	hash: sha256Hex,
-	url: string().url()
-})) });
-/** Request body the CLI sends to finalize a deploy's source manifest. */
-const UploadProjectSourceManifestRequestSchema = object({ files: array(object({
-	path: string().min(1),
-	hash: sha256Hex
-})) });
-const UploadProjectSourceResponseSchema = object({
-	ok: literal(true),
-	fileCount: number$1().int().nonnegative()
-});
-object({
-	files: array(object({
-		id: string(),
-		path: string().min(1),
-		hash: sha256Hex
-	})),
-	generatedAt: isoDateTime
-});
-/** A single source file returned by the bulk active-source download endpoint. */
-const DownloadActiveProjectSourceFileSchema = object({
-	path: string().min(1),
-	contents: string()
-});
-/** Response for downloading all source files from a project's active deploy. */
-const DownloadActiveProjectSourceResponseSchema = object({
-	artifactId: string(),
-	files: array(DownloadActiveProjectSourceFileSchema)
-});
 /** Relative path written after a local pull or MCP workspace hydration. */
 const PROJECT_PULL_STATE_RELATIVE_PATH = ".keystroke/pull-state.json";
 const ProjectPullStateSchema = object({
@@ -8838,6 +9706,6 @@ const ListAgentWorkspaceFilesResponseSchema = object({ files: array(object({
 })) });
 const WorkflowRunInputsPutBodySchema = record(string(), unknown());
 //#endregion
-export { HistoryRunCancelResponseSchema as $, WorkflowSummaryListResponseSchema as $n, ZodIssueCode as $r, QueuedAgentPromptResponseSchema as $t, CreateOrganizationResponseSchema as A, UpdateProjectMemberRequestSchema as An, requiredDisplayTextSchema as Ar, OrganizationSidebarBrandingSchema as At, DownloadActiveProjectSourceResponseSchema as B, UserPreferencesSchema as Bn, AutoTopupSummarySchema as Br, PresignUserAvatarResponseSchema as Bt, CreateApiKeyResponseSchema as C, safeParse$1 as Ci, UpdateChannelBindingBodySchema as Cn, CredentialAssignmentRecordSchema as Cr, ListProjectsResponseSchema as Ct, CreateCustomAppRequestSchema as D, UpdateOrganizationMemberRequestSchema as Dn, credentialInputSchema as Dr, McpDiscoverResponseSchema as Dt, CreateCredentialsResponseSchema as E, UpdateManagedServiceCredentialRequestSchema as En, ExecuteKeystrokeToolRequestSchema as Er, ManagedServiceKindSchema as Et, CredentialInstanceRecordSchema as F, UploadProjectSourceResponseSchema as Fn, CLIENT_CHANNEL_HEADER as Fr, PresignOrgLogoRequestSchema as Ft, FormFieldConfigSchema as G, WorkflowFormUpsertBodySchema as Gn, BillingUsageResponseSchema as Gr, ProjectSlugAvailabilityResponseSchema as Gt, DuplicateCredentialsResponseSchema as H, WorkflowCanvasRunSchema as Hn, BillingInvoiceUrlResponseSchema as Hr, ProjectReachabilityResponseSchema as Ht, DOCS_QUERY_TOOL as I, UpsertGatewayAttachmentBodySchema as In, FilePartSchema as Ir, PresignOrgLogoResponseSchema as It, GetCredentialResponseSchema as J, WorkflowRunInputsPutBodySchema as Jn, CreateBillingPortalRequestSchema as Jr, PublicFormMetadataSchema as Jt, GatewayAttachmentRecordSchema as K, WorkflowRunDetailResponseSchema as Kn, ConfirmCheckoutRequestSchema as Kr, PromptInputSchema as Kt, DOCS_SEARCH_TOOL as L, UserAvatarPatchSchema as Ln, PresignChatAttachmentRequestSchema as Lr, PresignProjectSourceRequestSchema as Lt, CreateProjectRequestSchema as M, UpdateProjectRequestSchema as Mn, LOCAL_PLATFORM_ORIGIN as Mr, PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS as Mt, CreateProjectResponseSchema as N, UpdateProjectSettingsRequestSchema as Nn, resolvePublicPlatformOrigin as Nr, PresignCustomAppLogoRequestSchema as Nt, CreateCustomAppResponseSchema as O, UpdateOrganizationMemberResponseSchema as On, getOpenApiJsonSchema as Or, OpenApiDiscoverResponseSchema as Ot, CredentialInstanceListResponseSchema as P, UploadProjectSourceManifestRequestSchema as Pn, ACTIVE_ORG_HEADER as Pr, PresignCustomAppLogoResponseSchema as Pt, HealthResponseSchema as Q, WorkflowSummaryDetailResponseSchema as Qn, number as Qr, PublishedFormSchema as Qt, DeclineOrganizationInvitationResponseSchema as R, UserAvatarSchema as Rn, PresignChatAttachmentResponseSchema as Rr, PresignProjectSourceResponseSchema as Rt, CreateApiKeyRequestSchema as S, datetime as Si, TriggerRunListResponseSchema as Sn, CredentialAssignmentListResponseSchema as Sr, ListProjectMetricsResponseSchema as St, CreateCredentialsRequestSchema as T, UpdateCredentialRequestSchema as Tn, CredentialConsumerListResponseSchema as Tr, ManagedServiceCredentialSchema as Tt, FinalizeCustomAppLogoRequestSchema as U, WorkflowCanvasSchema as Un, BillingRedirectResponseSchema as Ur, ProjectResponseSchema as Ut, DuplicateCredentialRequestSchema as V, WorkflowCanvasCredentialBindingsSchema as Vn, BillingActivityResponseSchema as Vr, ProjectPullStateSchema as Vt, FinalizeCustomAppLogoResponseSchema as W, WorkflowFormResponseSchema as Wn, BillingSummaryResponseSchema as Wr, ProjectSettingsResponseSchema as Wt, GetTemplateResponseSchema as X, WorkflowRunListResponseSchema as Xn, CreateSubscriptionCheckoutRequestSchema as Xr, PublicFormSubmitResponseSchema as Xt, GetCustomAppResponseSchema as Y, WorkflowRunInputsSchema as Yn, CreateCreditsCheckoutRequestSchema as Yr, PublicFormSubmitBodySchema as Yt, GraphqlDiscoverResponseSchema as Z, WorkflowRunResponseSchema as Zn, UpdateAutoTopupRequestSchema as Zr, PublishedFormListResponseSchema as Zt, ChannelDirectoryListResponseSchema as _, record as _i, TriggerDetailResponseSchema as _n, resolveDocsMcpUrl as _r, ListOrganizationMembersPageResponseSchema as _t, AgentSummaryDetailResponseSchema as a, array as ai, SkillSummaryListResponseSchema as an, WorkspaceWorkflowOverviewSchema as ar, InviteProjectMembersRequestSchema as at, ConnectManagedServiceCredentialRequestSchema as b, unknown as bi, TriggerListResponseSchema as bn, AssignCredentialBodySchema as br, ListProjectFilesResponseSchema as bt, AppSlugAvailabilityResponseSchema as c, discriminatedUnion as ci, StartKeystrokeConnectionResultSchema as cn, detectProjectPackageManagerFromSnapshot as cr, ListAgentWorkspaceFilesResponseSchema as ct, CatalogActionsPageResponseSchema as d, literal as di, StartOAuthConnectionInputSchema as dn, normalizeDocsSearchPaths as dr, ListChannelPlatformsResponseSchema as dt, ZodType as ei, QueuedRunResponseSchema as en, WorkspaceTriggerDetailSchema as er, HistoryRunDetailResponseSchema as et, CatalogAppDetailResponseSchema as f, looseObject as fi, StartOAuthConnectionResultSchema as fn, originFromPublicUrl as fr, ListCredentialsPageQuerySchema as ft, ChannelConnectionSchema as g, preprocess as gi, TemplateFilesResponseSchema as gn, resolveConnectAppSlug as gr, ListOrganizationMembersPageQuerySchema as gt, ChannelConnectionListResponseSchema as h, optional as hi, SubmitTeamRequestRequestSchema as hn, parseStoredRouteManifest as hr, ListOrganizationInvitationsResponseSchema as ht, AgentSessionListResponseSchema as i, any as ii, SkillSummaryDetailResponseSchema as in, WorkspaceTriggerRunListResponseSchema as ir, InviteOrganizationMembersResponseSchema as it, CreateProjectArtifactResponseSchema as j, UpdateProjectMemberResponseSchema as jn, DEFAULT_CLOUD_PLATFORM_ORIGIN as jr, PROJECT_PULL_STATE_RELATIVE_PATH as jt, CreateOrganizationRequestSchema as k, UpdateOrganizationRequestSchema as kn, normalizeCredentialList as kr, OrganizationSidebarBrandingPatchSchema as kt, BindChannelBodySchema as l, intersection as li, StartMcpOAuthConnectionInputSchema as ln, isAcceptableInstallExit as lr, ListApiKeysResponseSchema as lt, ChannelAccountListResponseSchema as m, object as mi, SubmitMarketingContactRequestSchema as mn, parseErrorResponse as mr, ListManagedServiceCredentialsResponseSchema as mt, ActiveOrganizationResponseSchema as n, _function as ni, RecentResourceListResponseSchema as nn, WorkspaceTriggerListResponseSchema as nr, HistoryRunListResponseSchema as nt, AgentSummaryListResponseSchema as o, boolean as oi, SlugAvailabilityResponseSchema as on, buildConnectDeeplink as or, InviteProjectMembersResponseSchema as ot, CatalogAppsPageResponseSchema as p, number$1 as pi, SubmitAgentFeedbackRequestSchema as pn, parseAppSlug as pr, ListCredentialsPageResponseSchema as pt, GetAppCatalogEntryResponseSchema as q, WorkflowRunHooksResponseSchema as qn, ConfirmCheckoutResponseSchema as qr, PromptResponseSchema as qt, AgentSessionDetailResponseSchema as r, _null as ri, STORED_JSON_SCHEMA_TARGET as rn, WorkspaceTriggerOverviewSchema as rr, InviteOrganizationMembersRequestSchema as rt, AgentTriggerSummaryListResponseSchema as s, custom as si, StartKeystrokeConnectionInputSchema as sn, deriveCustomAppDisplay as sr, ListAgentMemoryFilesResponseSchema as st, AcceptOrganizationInvitationResponseSchema as t, _enum as ti, ROUTE_MANIFEST_REL_PATH as tn, WorkspaceTriggerFileSchema as tr, HistoryRunListQuerySchema as tt, CatalogActionDetailResponseSchema as u, lazy as ui, StartMcpOAuthConnectionResultSchema as un, listenPortFromPublicUrl as ur, ListAppsResponseSchema as ut, CompleteProjectArtifactResponseSchema as v, string as vi, TriggerInvokeInputsSchema as vn, slugifyAppName as vr, ListOrganizationsResponseSchema as vt, CreateCredentialInstanceBodySchema as w, NEVER as wi, UpdateCredentialInstanceBodySchema as wn, CredentialConsumerListQuerySchema as wr, ListTemplatesResponseSchema as wt, ConnectProvidersResponseSchema as x, url as xi, TriggerRunDetailResponseSchema as xn, CredentialAssignmentListQuerySchema as xr, ListProjectMembersResponseSchema as xt, ConnectAuthorizeUrlResponseSchema as y, union as yi, TriggerInvokeResponseSchema as yn, zodToStoredJsonSchema as yr, ListProjectDeploymentsResponseSchema as yt, DownloadActiveProjectArtifactResponseSchema as z, UserPreferencesPatchSchema as zn, PublicModelsResponseSchema as zr, PresignUserAvatarRequestSchema as zt };
+export { DownloadActiveProjectArtifactResponseSchema as $, CreateCreditsCheckoutRequestSchema as $i, SkillSummaryDetailResponseSchema as $n, WorkflowSummaryDetailResponseSchema as $r, OpenApiDiscoverResponseSchema as $t, CreateApiKeyResponseSchema as A, CredentialConsumerListQuerySchema as Ai, ProjectGitStatusResponseSchema as An, UpdateOrganizationRequestSchema as Ar, ListApiKeysResponseSchema as At, CreateProjectArtifactRequestSchema as B, CLIENT_CHANNEL_HEADER as Bi, PublicFormSubmitResponseSchema as Bn, UserPreferencesPatchSchema as Br, ListOrganizationMembersPageResponseSchema as Bt, CompleteManagedDeployArtifactResponseSchema as C, union as Ca, resolveDocsMcpUrl as Ci, PresignProjectSourceRequestSchema as Cn, TriggerRunListResponseSchema as Cr, HistoryRunListResponseSchema as Ct, ConnectManagedServiceCredentialRequestSchema as D, safeParse$1 as Da, CredentialAssignmentListQuerySchema as Di, ProjectArtifactIndexSchema as Dn, UpdateManagedServiceCredentialRequestSchema as Dr, InviteProjectMembersResponseSchema as Dt, ConnectAuthorizeUrlResponseSchema as E, datetime as Ea, AssignCredentialBodySchema as Ei, PresignUserAvatarResponseSchema as En, UpdateCredentialRequestSchema as Er, InviteProjectMembersRequestSchema as Et, CreateCustomAppResponseSchema as F, normalizeCredentialList as Fi, ProjectSlugAvailabilityResponseSchema as Fn, UploadProjectSourceManifestRequestSchema as Fr, ListDraftFilesResponseSchema as Ft, CreateSlackAppResponseSchema as G, BillingActivityResponseSchema as Gi, QueuedAgentPromptResponseSchema as Gn, WorkflowFormResponseSchema as Gr, ListProjectMetricsResponseSchema as Gt, CreateProjectRequestSchema as H, PresignChatAttachmentResponseSchema as Hi, PublishManagedDeployCandidateResponseSchema as Hn, WorkflowCanvasCredentialBindingsSchema as Hr, ListProjectDeploymentsResponseSchema as Ht, CreateDraftCommitRequestSchema as I, requiredDisplayTextSchema as Ii, PromptInputSchema as In, UploadProjectSourceResponseSchema as Ir, ListManagedServiceCredentialsResponseSchema as It, CredentialInstanceListResponseSchema as J, BillingSummaryResponseSchema as Ji, RenewManagedDeployUploadRequestSchema as Jn, WorkflowRunHooksResponseSchema as Jr, MANAGED_DEPLOY_REQUEST_TIMEOUT_MS as Jt, CreateSlackChannelBodySchema as K, BillingInvoiceUrlResponseSchema as Ki, QueuedRunResponseSchema as Kn, WorkflowFormUpsertBodySchema as Kr, ListProjectsResponseSchema as Kt, CreateDraftDiffCommitRequestSchema as L, DEFAULT_CLOUD_PLATFORM_ORIGIN as Li, PromptResponseSchema as Ln, UpsertGatewayAttachmentBodySchema as Lr, ListMcpAppToolsResponseSchema as Lt, CreateCredentialsRequestSchema as M, ExecuteKeystrokeToolRequestSchema as Mi, ProjectReachabilityResponseSchema as Mn, UpdateProjectMemberResponseSchema as Mr, ListChannelPlatformsResponseSchema as Mt, CreateCredentialsResponseSchema as N, credentialInputSchema as Ni, ProjectResponseSchema as Nn, UpdateProjectRequestSchema as Nr, ListCredentialsPageQuerySchema as Nt, ConnectProvidersResponseSchema as O, NEVER as Oa, CredentialAssignmentListResponseSchema as Oi, ProjectGitRemoteRequestSchema as On, UpdateOrganizationMemberRequestSchema as Or, ListAgentMemoryFilesResponseSchema as Ot, CreateCustomAppRequestSchema as P, getOpenApiJsonSchema as Pi, ProjectSettingsResponseSchema as Pn, UpdateProjectSettingsRequestSchema as Pr, ListCredentialsPageResponseSchema as Pt, DeclineOrganizationInvitationResponseSchema as Q, CreateBillingPortalRequestSchema as Qi, STORED_JSON_SCHEMA_TARGET as Qn, WorkflowRunResponseSchema as Qr, McpDiscoverResponseSchema as Qt, CreateOrganizationRequestSchema as R, LOCAL_PLATFORM_ORIGIN as Ri, PublicFormMetadataSchema as Rn, UserAvatarPatchSchema as Rr, ListOrganizationInvitationsResponseSchema as Rt, CompleteManagedDeployArtifactRequestSchema as S, string as Sa, resolveConnectAppSlug as Si, PresignOrgLogoResponseSchema as Sn, TriggerRunDetailResponseSchema as Sr, HistoryRunListQuerySchema as St, CompleteProjectArtifactResponseSchema as T, url as Ta, zodToStoredJsonSchema as Ti, PresignUserAvatarRequestSchema as Tn, UpdateCredentialInstanceBodySchema as Tr, InviteOrganizationMembersResponseSchema as Tt, CreateProjectResponseSchema as U, PublicModelsResponseSchema as Ui, PublishedFormListResponseSchema as Un, WorkflowCanvasRunSchema as Ur, ListProjectFilesResponseSchema as Ut, CreateProjectArtifactResponseSchema as V, PresignChatAttachmentRequestSchema as Vi, PublishManagedDeployCandidateRequestSchema as Vn, UserPreferencesSchema as Vr, ListOrganizationsResponseSchema as Vt, CreateSlackAppRequestSchema as W, AutoTopupSummarySchema as Wi, PublishedFormSchema as Wn, WorkflowCanvasSchema as Wr, ListProjectMembersResponseSchema as Wt, DOCS_QUERY_TOOL as X, ConfirmCheckoutRequestSchema as Xi, SLACK_KEYSTROKE_APP_SLUG as Xn, WorkflowRunInputsSchema as Xr, ManagedServiceCredentialSchema as Xt, CredentialInstanceRecordSchema as Y, BillingUsageResponseSchema as Yi, RenewManagedDeployUploadResponseSchema as Yn, WorkflowRunInputsPutBodySchema as Yr, ManagedDeployResourceKeySchema as Yt, DOCS_SEARCH_TOOL as Z, ConfirmCheckoutResponseSchema as Zi, SLACK_PERSONAL_APP_SLUG as Zn, WorkflowRunListResponseSchema as Zr, ManagedServiceKindSchema as Zt, CatalogAppsPageResponseSchema as _, number$1 as _a, parseAppSlug as _i, PrepareManagedDeployRequestSchema as _n, TemplateFilesResponseSchema as _r, HealthResponseSchema as _t, AgentSessionListResponseSchema as a, _enum as aa, WorkspaceTriggerRunListResponseSchema as ai, PROJECT_MANIFEST_REL_PATH as an, SlackAppManifestResponseSchema as ar, DraftUpdateEventSchema as at, ChannelConnectionSchema as b, preprocess as ba, parseSlackConnectFlow as bi, PresignCustomAppLogoResponseSchema as bn, TriggerInvokeResponseSchema as br, HistoryRunCancelResponseSchema as bt, AgentTriggerSummaryListResponseSchema as c, any as ca, buildConnectDeeplink as ci, PROJECT_SOURCE_IGNORED_DIRS as cn, StartKeystrokeConnectionInputSchema as cr, FinalizeCustomAppLogoRequestSchema as ct, BindChannelBodySchema as d, custom as da, isAcceptableInstallExit as di, PROJECT_SOURCE_MAX_TOTAL_BYTES as dn, StartMcpOAuthConnectionResultSchema as dr, GatewayAttachmentRecordSchema as dt, CreateSubscriptionCheckoutRequestSchema as ea, WorkflowSummaryListResponseSchema as ei, OrganizationSidebarBrandingPatchSchema as en, SkillSummaryListResponseSchema as er, DownloadActiveProjectSourceResponseSchema as et, CancelManagedDeployRequestSchema as f, discriminatedUnion as fa, isIgnoredProjectSourceFileName as fi, PlatformAgentCancelResponseSchema as fn, StartOAuthConnectionInputSchema as fr, GetAppCatalogEntryResponseSchema as ft, CatalogAppDetailResponseSchema as g, looseObject as ga, originFromPublicUrl as gi, PlatformAgentSessionListResponseSchema as gn, SubmitTeamRequestRequestSchema as gr, GraphqlDiscoverResponseSchema as gt, CatalogActionsPageResponseSchema as h, literal as ha, normalizeDocsSearchPaths as hi, PlatformAgentSessionDetailResponseSchema as hn, SubmitMarketingContactRequestSchema as hr, GetTemplateResponseSchema as ht, AgentSessionDetailResponseSchema as i, ZodType as ia, WorkspaceTriggerOverviewSchema as ii, PROJECT_DRAFT_DIFF_MAX_BYTES as in, SlackAppManifestRequestSchema as ir, DraftRevisionResponseSchema as it, CreateCredentialInstanceBodySchema as j, CredentialConsumerListResponseSchema as ji, ProjectPullStateSchema as jn, UpdateProjectMemberRequestSchema as jr, ListAppsResponseSchema as jt, CreateApiKeyRequestSchema as k, CredentialAssignmentRecordSchema as ki, ProjectGitRemoteResponseSchema as kn, UpdateOrganizationMemberResponseSchema as kr, ListAgentWorkspaceFilesResponseSchema as kt, AppSlugAvailabilityResponseSchema as l, array as la, deriveCustomAppDisplay as li, PROJECT_SOURCE_MAX_FILES as ln, StartKeystrokeConnectionResultSchema as lr, FinalizeCustomAppLogoResponseSchema as lt, CatalogActionDetailResponseSchema as m, lazy as ma, isProbablyBinaryProjectSource as mi, PlatformAgentPromptResponseSchema as mn, SubmitAgentFeedbackRequestSchema as mr, GetCustomAppResponseSchema as mt, ActiveOrganizationResponseSchema as n, number as na, WorkspaceTriggerFileSchema as ni, PNPM_FROZEN_INSTALL_ARGS as nn, SlackAppInstallStartResponseSchema as nr, DraftConflictResponseSchema as nt, AgentSummaryDetailResponseSchema as o, _function as oa, WorkspaceWorkflowOverviewSchema as oi, PROJECT_PULL_STATE_RELATIVE_PATH as on, SlackMembershipChannelBodySchema as or, DuplicateCredentialRequestSchema as ot, CancelManagedDeployResponseSchema as p, intersection as pa, isIgnoredProjectSourcePath as pi, PlatformAgentPromptInputSchema as pn, StartOAuthConnectionResultSchema as pr, GetCredentialResponseSchema as pt, CreateSlackChannelResponseSchema as q, BillingRedirectResponseSchema as qi, RecentResourceListResponseSchema as qn, WorkflowRunDetailResponseSchema as qr, ListTemplatesResponseSchema as qt, ActiveProjectSourceRevisionSchema as r, ZodIssueCode as ra, WorkspaceTriggerListResponseSchema as ri, PROJECT_DRAFT_COMMIT_REQUEST_TIMEOUT_MS as rn, SlackAppListResponseSchema as rr, DraftFileContentResponseSchema as rt, AgentSummaryListResponseSchema as s, _null as sa, buildAgentSlackDeeplink as si, PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS as sn, SlugAvailabilityResponseSchema as sr, DuplicateCredentialsResponseSchema as st, AcceptOrganizationInvitationResponseSchema as t, UpdateAutoTopupRequestSchema as ta, WorkspaceTriggerDetailSchema as ti, OrganizationSidebarBrandingSchema as tn, SlackAgentMembershipsResponseSchema as tr, DraftCommitResponseSchema as tt, BindAgentSlackAppBodySchema as u, boolean as ua, detectProjectPackageManagerFromSnapshot as ui, PROJECT_SOURCE_MAX_FILE_BYTES as un, StartMcpOAuthConnectionInputSchema as ur, FormFieldConfigSchema as ut, ChannelAccountListResponseSchema as v, object as va, parseErrorResponse as vi, PrepareManagedDeployResponseSchema as vn, TriggerDetailResponseSchema as vr, HeartbeatManagedDeployRequestSchema as vt, CompleteProjectArtifactRequestSchema as w, unknown as wa, slugifyAppName as wi, PresignProjectSourceResponseSchema as wn, UpdateChannelBindingBodySchema as wr, InviteOrganizationMembersRequestSchema as wt, ChannelDirectoryListResponseSchema as x, record as xa, parseStoredRouteManifest as xi, PresignOrgLogoRequestSchema as xn, TriggerListResponseSchema as xr, HistoryRunDetailResponseSchema as xt, ChannelConnectionListResponseSchema as y, optional as ya, parseProjectManifest as yi, PresignCustomAppLogoRequestSchema as yn, TriggerInvokeInputsSchema as yr, HeartbeatManagedDeployResponseSchema as yt, CreateOrganizationResponseSchema as z, ACTIVE_ORG_HEADER as zi, PublicFormSubmitBodySchema as zn, UserAvatarSchema as zr, ListOrganizationMembersPageQuerySchema as zt };
 
-//# sourceMappingURL=dist-E6dh6qXe.mjs.map
+//# sourceMappingURL=dist-C6adeAws.mjs.map