@keystrokehq/cli 0.1.17 → 0.1.19

package/dist/{dist-E9nHDRnf.mjs → dist-BYODo4g3.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { n as __require, t as __commonJSMin } from "./chunk-DiodbrVj.mjs";
-import { $n as any, Bn as normalizeCredentialList, Gt as ROUTE_MANIFEST_REL_PATH, Ht as PromptResponseSchema, In as credentialInputSchema, Jn as number$1, Qn as _null, Xn as _enum, Yn as ZodType, Zn as _function, _r as toJSONSchema, ar as literal, cr as object, dr as record, er as array, fr as string, gr as datetime, hr as url, ir as intersection, lr as optional, mr as unknown, nr as custom, or as looseObject, pr as union, rr as discriminatedUnion, sr as number, tr as boolean$1, ur as preprocess, vr as NEVER } from "./dist-BRA_tOTT.mjs";
-import "./dist-DeRE4uJW.mjs";
+import { $n as _enum, Qn as ZodType, Rn as credentialInputSchema, Un as normalizeCredentialList, Ut as PromptResponseSchema, W as DEFAULT_CLOUD_PLATFORM_ORIGIN, Wt as PublicModelsResponseSchema, Zn as number$1, _r as unknown, ar as custom, br as toJSONSchema, cr as literal, dr as object, er as _function, fr as optional, gr as union, hr as string, ir as boolean$1, lr as looseObject, mr as record, nr as any, or as discriminatedUnion, pr as preprocess, qt as ROUTE_MANIFEST_REL_PATH, rr as array, sr as intersection, tr as _null, ur as number, vr as url, xr as NEVER, yr as datetime } from "./dist-DmqYCJqU.mjs";
+import "./dist-QE1G9hAR.mjs";
 import "./chunk-BZUGFHVS-CPWRFwK8.mjs";
 import "./chunk-DLL7UR66-BUYgzxnR.mjs";
 import "./chunk-TN7HHBQW-CSB_R-XD.mjs";
@@ -138,7 +138,7 @@ new Set([
 	p.SEMI_SEMI_AND
 ]);
 //#endregion
-//#region ../../packages/manifest/dist/discovery-CWjr_liZ.mjs
+//#region ../../packages/manifest/dist/discovery-C6Un-m9-.mjs
 const SOURCE_EXT = /\.(ts|mts|mjs|js)$/;
 const DECLARATION_FILE$1 = /\.d\.(ts|mts|cts)$/;
 function entryIdFromFile(rootDir, filePath, options) {
@@ -202,6 +202,33 @@ async function discoverModuleFileEntries(rootDir, options) {
 		moduleFile
 	}));
 }
+/**
+* Slugs are unique per (project, primitive kind), mirroring the per-table
+* `(project_id, slug)` unique index in the database. An agent, a workflow, and a
+* trigger may all share the same slug because they live in separate tables and
+* are routed by type (`/agents/{slug}` vs `/workflows/{slug}`); two of the same
+* kind may not.
+*
+* Single pass over `entries` (O(n)) — keyed on `kind + key` so cross-kind slug
+* reuse is allowed without a nested scan.
+*/
+function validateUniqueModuleKeys(entries) {
+	const byScopedKey = /* @__PURE__ */ new Map();
+	for (const entry of entries) {
+		const scopedKey = `${entry.kind}\u0000${entry.key}`;
+		const existing = byScopedKey.get(scopedKey);
+		if (existing) existing.filePaths.push(entry.filePath);
+		else byScopedKey.set(scopedKey, {
+			kind: entry.kind,
+			key: entry.key,
+			filePaths: [entry.filePath]
+		});
+	}
+	for (const { kind, key, filePaths } of byScopedKey.values()) {
+		if (filePaths.length <= 1) continue;
+		throw new Error(`Duplicate ${kind} slug "${key}": ${filePaths.join(", ")}`);
+	}
+}
 const HEADER_BYTES = 2048;
 const DIRECTIVE_RE = /@keystroke\s+ignore(?::([a-z]+))?/;
 /** Parse `@keystroke ignore` directives from a file header snippet. */
@@ -1109,430 +1136,16 @@ Object.freeze({
     option is given.`]]
 ]).keys()].sort();
 new TextDecoder("utf-8", { fatal: !0 });
-//#endregion
-//#region ../../node_modules/.pnpm/cron-schedule@6.0.0/node_modules/cron-schedule/dist/utils.js
-function extractDateElements(date) {
-	return {
-		second: date.getSeconds(),
-		minute: date.getMinutes(),
-		hour: date.getHours(),
-		day: date.getDate(),
-		month: date.getMonth(),
-		weekday: date.getDay(),
-		year: date.getFullYear()
-	};
-}
-function getDaysInMonth(year, month) {
-	return new Date(year, month + 1, 0).getDate();
+new AsyncLocalStorage();
+new AsyncLocalStorage();
+new AsyncLocalStorage();
+new AsyncLocalStorage();
+createRequire(import.meta.url);
+function buildPgSchema$1(registry) {
+	return Object.fromEntries(Object.entries(registry).map(([name, { pg }]) => [name, pg]));
 }
-function getDaysBetweenWeekdays(weekday1, weekday2) {
-	if (weekday1 <= weekday2) return weekday2 - weekday1;
-	return 6 - weekday1 + weekday2 + 1;
-}
-//#endregion
-//#region ../../node_modules/.pnpm/cron-schedule@6.0.0/node_modules/cron-schedule/dist/cron.js
-var Cron = class {
-	constructor({ seconds, minutes, hours, days, months, weekdays }) {
-		if (!seconds || seconds.size === 0) throw new Error("There must be at least one allowed second.");
-		if (!minutes || minutes.size === 0) throw new Error("There must be at least one allowed minute.");
-		if (!hours || hours.size === 0) throw new Error("There must be at least one allowed hour.");
-		if (!months || months.size === 0) throw new Error("There must be at least one allowed month.");
-		if ((!weekdays || weekdays.size === 0) && (!days || days.size === 0)) throw new Error("There must be at least one allowed day or weekday.");
-		this.seconds = Array.from(seconds).sort((a, b) => a - b);
-		this.minutes = Array.from(minutes).sort((a, b) => a - b);
-		this.hours = Array.from(hours).sort((a, b) => a - b);
-		this.days = Array.from(days).sort((a, b) => a - b);
-		this.months = Array.from(months).sort((a, b) => a - b);
-		this.weekdays = Array.from(weekdays).sort((a, b) => a - b);
-		const validateData = (name, data, constraint) => {
-			if (data.some((x) => typeof x !== "number" || x % 1 !== 0 || x < constraint.min || x > constraint.max)) throw new Error(`${name} must only consist of integers which are within the range of ${constraint.min} and ${constraint.max}`);
-		};
-		validateData("seconds", this.seconds, {
-			min: 0,
-			max: 59
-		});
-		validateData("minutes", this.minutes, {
-			min: 0,
-			max: 59
-		});
-		validateData("hours", this.hours, {
-			min: 0,
-			max: 23
-		});
-		validateData("days", this.days, {
-			min: 1,
-			max: 31
-		});
-		validateData("months", this.months, {
-			min: 0,
-			max: 11
-		});
-		validateData("weekdays", this.weekdays, {
-			min: 0,
-			max: 6
-		});
-		this.reversed = {
-			seconds: this.seconds.map((x) => x).reverse(),
-			minutes: this.minutes.map((x) => x).reverse(),
-			hours: this.hours.map((x) => x).reverse(),
-			days: this.days.map((x) => x).reverse(),
-			months: this.months.map((x) => x).reverse(),
-			weekdays: this.weekdays.map((x) => x).reverse()
-		};
-	}
-	/**
-	* Find the next or previous hour, starting from the given start hour that matches the hour constraint.
-	* startHour itself might also be allowed.
-	*/
-	findAllowedHour(dir, startHour) {
-		return dir === "next" ? this.hours.find((x) => x >= startHour) : this.reversed.hours.find((x) => x <= startHour);
-	}
-	/**
-	* Find the next or previous minute, starting from the given start minute that matches the minute constraint.
-	* startMinute itself might also be allowed.
-	*/
-	findAllowedMinute(dir, startMinute) {
-		return dir === "next" ? this.minutes.find((x) => x >= startMinute) : this.reversed.minutes.find((x) => x <= startMinute);
-	}
-	/**
-	* Find the next or previous second, starting from the given start second that matches the second constraint.
-	* startSecond itself IS NOT allowed.
-	*/
-	findAllowedSecond(dir, startSecond) {
-		return dir === "next" ? this.seconds.find((x) => x > startSecond) : this.reversed.seconds.find((x) => x < startSecond);
-	}
-	/**
-	* Find the next or previous time, starting from the given start time that matches the hour, minute
-	* and second constraints. startTime itself might also be allowed.
-	*/
-	findAllowedTime(dir, startTime) {
-		let hour = this.findAllowedHour(dir, startTime.hour);
-		if (hour !== void 0) if (hour === startTime.hour) {
-			let minute = this.findAllowedMinute(dir, startTime.minute);
-			if (minute !== void 0) if (minute === startTime.minute) {
-				const second = this.findAllowedSecond(dir, startTime.second);
-				if (second !== void 0) return {
-					hour,
-					minute,
-					second
-				};
-				minute = this.findAllowedMinute(dir, dir === "next" ? startTime.minute + 1 : startTime.minute - 1);
-				if (minute !== void 0) return {
-					hour,
-					minute,
-					second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
-				};
-			} else return {
-				hour,
-				minute,
-				second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
-			};
-			hour = this.findAllowedHour(dir, dir === "next" ? startTime.hour + 1 : startTime.hour - 1);
-			if (hour !== void 0) return {
-				hour,
-				minute: dir === "next" ? this.minutes[0] : this.reversed.minutes[0],
-				second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
-			};
-		} else return {
-			hour,
-			minute: dir === "next" ? this.minutes[0] : this.reversed.minutes[0],
-			second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
-		};
-	}
-	/**
-	* Find the next or previous day in the given month, starting from the given startDay
-	* that matches either the day or the weekday constraint. startDay itself might also be allowed.
-	*/
-	findAllowedDayInMonth(dir, year, month, startDay) {
-		var _a, _b;
-		if (startDay < 1) throw new Error("startDay must not be smaller than 1.");
-		const daysInMonth = getDaysInMonth(year, month);
-		const daysRestricted = this.days.length !== 31;
-		const weekdaysRestricted = this.weekdays.length !== 7;
-		if (!daysRestricted && !weekdaysRestricted) {
-			if (startDay > daysInMonth) return dir === "next" ? void 0 : daysInMonth;
-			return startDay;
-		}
-		let allowedDayByDays;
-		if (daysRestricted) {
-			allowedDayByDays = dir === "next" ? this.days.find((x) => x >= startDay) : this.reversed.days.find((x) => x <= startDay);
-			if (allowedDayByDays !== void 0 && allowedDayByDays > daysInMonth) allowedDayByDays = void 0;
-		}
-		let allowedDayByWeekdays;
-		if (weekdaysRestricted) {
-			const startWeekday = new Date(year, month, startDay).getDay();
-			const nearestAllowedWeekday = dir === "next" ? (_a = this.weekdays.find((x) => x >= startWeekday)) !== null && _a !== void 0 ? _a : this.weekdays[0] : (_b = this.reversed.weekdays.find((x) => x <= startWeekday)) !== null && _b !== void 0 ? _b : this.reversed.weekdays[0];
-			if (nearestAllowedWeekday !== void 0) {
-				const daysBetweenWeekdays = dir === "next" ? getDaysBetweenWeekdays(startWeekday, nearestAllowedWeekday) : getDaysBetweenWeekdays(nearestAllowedWeekday, startWeekday);
-				allowedDayByWeekdays = dir === "next" ? startDay + daysBetweenWeekdays : startDay - daysBetweenWeekdays;
-				if (allowedDayByWeekdays > daysInMonth || allowedDayByWeekdays < 1) allowedDayByWeekdays = void 0;
-			}
-		}
-		if (allowedDayByDays !== void 0 && allowedDayByWeekdays !== void 0) return dir === "next" ? Math.min(allowedDayByDays, allowedDayByWeekdays) : Math.max(allowedDayByDays, allowedDayByWeekdays);
-		if (allowedDayByDays !== void 0) return allowedDayByDays;
-		if (allowedDayByWeekdays !== void 0) return allowedDayByWeekdays;
-	}
-	/** Gets the next date starting from the given start date or now. */
-	getNextDate(startDate = /* @__PURE__ */ new Date()) {
-		const startDateElements = extractDateElements(startDate);
-		let minYear = startDateElements.year;
-		let startIndexMonth = this.months.findIndex((x) => x >= startDateElements.month);
-		if (startIndexMonth === -1) {
-			startIndexMonth = 0;
-			minYear++;
-		}
-		const maxIterations = this.months.length * 5;
-		for (let i = 0; i < maxIterations; i++) {
-			const year = minYear + Math.floor((startIndexMonth + i) / this.months.length);
-			const month = this.months[(startIndexMonth + i) % this.months.length];
-			const isStartMonth = year === startDateElements.year && month === startDateElements.month;
-			let day = this.findAllowedDayInMonth("next", year, month, isStartMonth ? startDateElements.day : 1);
-			let isStartDay = isStartMonth && day === startDateElements.day;
-			if (day !== void 0 && isStartDay) {
-				const nextTime = this.findAllowedTime("next", startDateElements);
-				if (nextTime !== void 0) return new Date(year, month, day, nextTime.hour, nextTime.minute, nextTime.second);
-				day = this.findAllowedDayInMonth("next", year, month, day + 1);
-				isStartDay = false;
-			}
-			if (day !== void 0 && !isStartDay) return new Date(year, month, day, this.hours[0], this.minutes[0], this.seconds[0]);
-		}
-		throw new Error("No valid next date was found.");
-	}
-	/** Gets the specified amount of future dates starting from the given start date or now. */
-	getNextDates(amount, startDate) {
-		const dates = [];
-		let nextDate;
-		for (let i = 0; i < amount; i++) {
-			nextDate = this.getNextDate(nextDate !== null && nextDate !== void 0 ? nextDate : startDate);
-			dates.push(nextDate);
-		}
-		return dates;
-	}
-	/**
-	* Get an ES6 compatible iterator which iterates over the next dates starting from startDate or now.
-	* The iterator runs until the optional endDate is reached or forever.
-	*/
-	*getNextDatesIterator(startDate, endDate) {
-		let nextDate;
-		while (true) {
-			nextDate = this.getNextDate(nextDate !== null && nextDate !== void 0 ? nextDate : startDate);
-			if (endDate && endDate.getTime() < nextDate.getTime()) return;
-			yield nextDate;
-		}
-	}
-	/** Gets the previous date starting from the given start date or now. */
-	getPrevDate(startDate = /* @__PURE__ */ new Date()) {
-		const startDateElements = extractDateElements(startDate);
-		let maxYear = startDateElements.year;
-		let startIndexMonth = this.reversed.months.findIndex((x) => x <= startDateElements.month);
-		if (startIndexMonth === -1) {
-			startIndexMonth = 0;
-			maxYear--;
-		}
-		const maxIterations = this.reversed.months.length * 5;
-		for (let i = 0; i < maxIterations; i++) {
-			const year = maxYear - Math.floor((startIndexMonth + i) / this.reversed.months.length);
-			const month = this.reversed.months[(startIndexMonth + i) % this.reversed.months.length];
-			const isStartMonth = year === startDateElements.year && month === startDateElements.month;
-			let day = this.findAllowedDayInMonth("prev", year, month, isStartMonth ? startDateElements.day : getDaysInMonth(year, month));
-			let isStartDay = isStartMonth && day === startDateElements.day;
-			if (day !== void 0 && isStartDay) {
-				const prevTime = this.findAllowedTime("prev", startDateElements);
-				if (prevTime !== void 0) return new Date(year, month, day, prevTime.hour, prevTime.minute, prevTime.second);
-				if (day > 1) {
-					day = this.findAllowedDayInMonth("prev", year, month, day - 1);
-					isStartDay = false;
-				}
-			}
-			if (day !== void 0 && !isStartDay) return new Date(year, month, day, this.reversed.hours[0], this.reversed.minutes[0], this.reversed.seconds[0]);
-		}
-		throw new Error("No valid previous date was found.");
-	}
-	/** Gets the specified amount of previous dates starting from the given start date or now. */
-	getPrevDates(amount, startDate) {
-		const dates = [];
-		let prevDate;
-		for (let i = 0; i < amount; i++) {
-			prevDate = this.getPrevDate(prevDate !== null && prevDate !== void 0 ? prevDate : startDate);
-			dates.push(prevDate);
-		}
-		return dates;
-	}
-	/**
-	* Get an ES6 compatible iterator which iterates over the previous dates starting from startDate or now.
-	* The iterator runs until the optional endDate is reached or forever.
-	*/
-	*getPrevDatesIterator(startDate, endDate) {
-		let prevDate;
-		while (true) {
-			prevDate = this.getPrevDate(prevDate !== null && prevDate !== void 0 ? prevDate : startDate);
-			if (endDate && endDate.getTime() > prevDate.getTime()) return;
-			yield prevDate;
-		}
-	}
-	/** Returns true when there is a cron date at the given date. */
-	matchDate(date) {
-		const { second, minute, hour, day, month, weekday } = extractDateElements(date);
-		if (this.seconds.indexOf(second) === -1 || this.minutes.indexOf(minute) === -1 || this.hours.indexOf(hour) === -1 || this.months.indexOf(month) === -1) return false;
-		if (this.days.length !== 31 && this.weekdays.length !== 7) return this.days.indexOf(day) !== -1 || this.weekdays.indexOf(weekday) !== -1;
-		return this.days.indexOf(day) !== -1 && this.weekdays.indexOf(weekday) !== -1;
-	}
-};
-//#endregion
-//#region ../../node_modules/.pnpm/cron-schedule@6.0.0/node_modules/cron-schedule/dist/cron-parser.js
-const secondConstraint = {
-	min: 0,
-	max: 59
-};
-const minuteConstraint = {
-	min: 0,
-	max: 59
-};
-const hourConstraint = {
-	min: 0,
-	max: 23
-};
-const dayConstraint = {
-	min: 1,
-	max: 31
-};
-const monthConstraint = {
-	min: 1,
-	max: 12,
-	aliases: {
-		jan: "1",
-		feb: "2",
-		mar: "3",
-		apr: "4",
-		may: "5",
-		jun: "6",
-		jul: "7",
-		aug: "8",
-		sep: "9",
-		oct: "10",
-		nov: "11",
-		dec: "12"
-	}
-};
-const weekdayConstraint = {
-	min: 0,
-	max: 7,
-	aliases: {
-		mon: "1",
-		tue: "2",
-		wed: "3",
-		thu: "4",
-		fri: "5",
-		sat: "6",
-		sun: "7"
-	}
-};
-const timeNicknames = {
-	"@yearly": "0 0 1 1 *",
-	"@annually": "0 0 1 1 *",
-	"@monthly": "0 0 1 * *",
-	"@weekly": "0 0 * * 0",
-	"@daily": "0 0 * * *",
-	"@hourly": "0 * * * *",
-	"@minutely": "* * * * *"
-};
-function parseElement(element, constraint) {
-	const result = /* @__PURE__ */ new Set();
-	if (element === "*") {
-		for (let i = constraint.min; i <= constraint.max; i = i + 1) result.add(i);
-		return result;
-	}
-	const listElements = element.split(",");
-	if (listElements.length > 1) {
-		for (const listElement of listElements) {
-			const parsedListElement = parseElement(listElement, constraint);
-			for (const x of parsedListElement) result.add(x);
-		}
-		return result;
-	}
-	const parseSingleElement = (singleElement) => {
-		var _a, _b;
-		singleElement = (_b = (_a = constraint.aliases) === null || _a === void 0 ? void 0 : _a[singleElement.toLowerCase()]) !== null && _b !== void 0 ? _b : singleElement;
-		const parsedElement = Number.parseInt(singleElement, 10);
-		if (Number.isNaN(parsedElement)) throw new Error(`Failed to parse ${element}: ${singleElement} is NaN.`);
-		if (parsedElement < constraint.min || parsedElement > constraint.max) throw new Error(`Failed to parse ${element}: ${singleElement} is outside of constraint range of ${constraint.min} - ${constraint.max}.`);
-		return parsedElement;
-	};
-	const rangeSegments = /^(([0-9a-zA-Z]+)-([0-9a-zA-Z]+)|\*)(\/([0-9]+))?$/.exec(element);
-	if (rangeSegments === null) {
-		result.add(parseSingleElement(element));
-		return result;
-	}
-	let parsedStart = rangeSegments[1] === "*" ? constraint.min : parseSingleElement(rangeSegments[2]);
-	const parsedEnd = rangeSegments[1] === "*" ? constraint.max : parseSingleElement(rangeSegments[3]);
-	if (constraint === weekdayConstraint && parsedStart === 7 && parsedEnd !== 7) parsedStart = 0;
-	if (parsedStart > parsedEnd) throw new Error(`Failed to parse ${element}: Invalid range (start: ${parsedStart}, end: ${parsedEnd}).`);
-	const step = rangeSegments[5];
-	let parsedStep = 1;
-	if (step !== void 0) {
-		parsedStep = Number.parseInt(step, 10);
-		if (Number.isNaN(parsedStep)) throw new Error(`Failed to parse step: ${step} is NaN.`);
-		if (parsedStep < 1) throw new Error(`Failed to parse step: Expected ${step} to be greater than 0.`);
-	}
-	for (let i = parsedStart; i <= parsedEnd; i = i + parsedStep) result.add(i);
-	return result;
-}
-/** Parses a cron expression into a Cron instance. */
-function parseCronExpression(cronExpression) {
-	var _a;
-	if (typeof cronExpression !== "string") throw new TypeError("Invalid cron expression: must be of type string.");
-	cronExpression = (_a = timeNicknames[cronExpression.toLowerCase()]) !== null && _a !== void 0 ? _a : cronExpression;
-	const elements = cronExpression.split(" ").filter((elem) => elem.length > 0);
-	if (elements.length < 5 || elements.length > 6) throw new Error("Invalid cron expression: expected 5 or 6 elements.");
-	const rawSeconds = elements.length === 6 ? elements[0] : "0";
-	const rawMinutes = elements.length === 6 ? elements[1] : elements[0];
-	const rawHours = elements.length === 6 ? elements[2] : elements[1];
-	const rawDays = elements.length === 6 ? elements[3] : elements[2];
-	const rawMonths = elements.length === 6 ? elements[4] : elements[3];
-	const rawWeekdays = elements.length === 6 ? elements[5] : elements[4];
-	return new Cron({
-		seconds: parseElement(rawSeconds, secondConstraint),
-		minutes: parseElement(rawMinutes, minuteConstraint),
-		hours: parseElement(rawHours, hourConstraint),
-		days: parseElement(rawDays, dayConstraint),
-		months: new Set(Array.from(parseElement(rawMonths, monthConstraint)).map((x) => x - 1)),
-		weekdays: new Set(Array.from(parseElement(rawWeekdays, weekdayConstraint)).map((x) => x % 7))
-	});
-}
-//#endregion
-//#region ../../packages/action/dist/index.mjs
-const zodSchema$3 = custom((v) => v instanceof ZodType, "must be a Zod schema");
-object({
-	slug: string().trim().min(1),
-	name: string().optional(),
-	description: string().optional(),
-	input: zodSchema$3,
-	output: zodSchema$3,
-	credentials: array(credentialInputSchema).optional(),
-	run: _function()
-});
-new AsyncLocalStorage();
-new AsyncLocalStorage();
-new AbortController().signal;
-const REGISTRY_KEY$2 = Symbol.for("keystroke.workflowRunGetter");
-function registry$1() {
-	const globalScope = globalThis;
-	if (!globalScope[REGISTRY_KEY$2]) globalScope[REGISTRY_KEY$2] = {};
-	return globalScope[REGISTRY_KEY$2];
-}
-function registerWorkflowRunGetter(fn) {
-	registry$1().getter = fn;
-}
-new AsyncLocalStorage();
-new AsyncLocalStorage();
-new AsyncLocalStorage();
-new AsyncLocalStorage();
-createRequire(import.meta.url);
-function buildPgSchema$1(registry) {
-	return Object.fromEntries(Object.entries(registry).map(([name, { pg }]) => [name, pg]));
-}
-function buildSqliteSchema$1(registry) {
-	return Object.fromEntries(Object.entries(registry).map(([name, { sqlite }]) => [name, sqlite]));
+function buildSqliteSchema$1(registry) {
+	return Object.fromEntries(Object.entries(registry).map(([name, { sqlite }]) => [name, sqlite]));
 }
 const agents = pgTable("agents", {
 	id: text("id").primaryKey(),
@@ -2203,850 +1816,215 @@ const tableRegistry$1 = {
 buildPgSchema$1(tableRegistry$1);
 buildSqliteSchema$1(tableRegistry$1);
 //#endregion
-//#region ../../packages/platform-database/dist/mcp-oauth-SRTcHMWZ.mjs
-const users = pgTable("users", {
-	id: text("id").primaryKey(),
-	name: text("name").notNull(),
-	email: text("email").notNull().unique(),
-	emailVerified: boolean("email_verified").notNull(),
-	image: text("image"),
-	preferences: jsonb("preferences"),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+//#region ../../packages/agent/dist/schemas-DqPtvoUX.mjs
+const AGENT_MODEL_ID_PATTERN = /^[a-z0-9-]+\/.+/;
+const AgentModelIdSchema = custom((value) => typeof value === "string" && AGENT_MODEL_ID_PATTERN.test(value), "model must be vendor/model-id");
+const GatewayModelPricingSchema = object({
+	input: string().optional(),
+	output: string().optional(),
+	input_cache_read: string().optional()
 });
-const usersSqlite = sqliteTable("users", {
-	id: text$1("id").primaryKey(),
-	name: text$1("name").notNull(),
-	email: text$1("email").notNull().unique(),
-	emailVerified: integer$1("email_verified", { mode: "boolean" }).notNull(),
-	image: text$1("image"),
-	preferences: text$1("preferences", { mode: "json" }),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+object({
+	id: string().min(1),
+	name: string().optional(),
+	type: string().optional(),
+	context_window: number().int().positive().optional(),
+	max_tokens: number().int().positive().optional(),
+	tags: array(string()).optional(),
+	pricing: GatewayModelPricingSchema.optional()
 });
-const authAccounts = pgTable("accounts", {
-	id: text("id").primaryKey(),
-	accountId: text("account_id").notNull(),
-	providerId: text("provider_id").notNull(),
-	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
-	accessToken: text("access_token"),
-	refreshToken: text("refresh_token"),
-	idToken: text("id_token"),
-	accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
-	refreshTokenExpiresAt: timestamp("refresh_token_expires_at", { withTimezone: true }),
-	scope: text("scope"),
-	password: text("password"),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [index("account_user_id_idx").on(table.userId)]);
-const authAccountsSqlite = sqliteTable("accounts", {
-	id: text$1("id").primaryKey(),
-	accountId: text$1("account_id").notNull(),
-	providerId: text$1("provider_id").notNull(),
-	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
-	accessToken: text$1("access_token"),
-	refreshToken: text$1("refresh_token"),
-	idToken: text$1("id_token"),
-	accessTokenExpiresAt: integer$1("access_token_expires_at", { mode: "timestamp_ms" }),
-	refreshTokenExpiresAt: integer$1("refresh_token_expires_at", { mode: "timestamp_ms" }),
-	scope: text$1("scope"),
-	password: text$1("password"),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [index$1("account_user_id_idx").on(table.userId)]);
-const authDeviceCodes = pgTable("device_auth_codes", {
-	id: text("id").primaryKey(),
-	deviceCode: text("device_code").notNull(),
-	userCode: text("user_code").notNull(),
-	userId: text("user_id"),
-	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
-	status: text("status").notNull(),
-	lastPolledAt: timestamp("last_polled_at", { withTimezone: true }),
-	pollingInterval: integer("polling_interval"),
-	clientId: text("client_id"),
-	scope: text("scope")
+const ThinkingLevelSchema = _enum([
+	"provider-default",
+	"none",
+	"minimal",
+	"low",
+	"medium",
+	"high",
+	"xhigh"
+]);
+object({
+	systemPrompt: string(),
+	model: AgentModelIdSchema,
+	thinkingLevel: ThinkingLevelSchema.optional()
 });
-const authDeviceCodesSqlite = sqliteTable("device_auth_codes", {
-	id: text$1("id").primaryKey(),
-	deviceCode: text$1("device_code").notNull(),
-	userCode: text$1("user_code").notNull(),
-	userId: text$1("user_id"),
-	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }).notNull(),
-	status: text$1("status").notNull(),
-	lastPolledAt: integer$1("last_polled_at", { mode: "timestamp_ms" }),
-	pollingInterval: integer$1("polling_interval"),
-	clientId: text$1("client_id"),
-	scope: text$1("scope")
+globalThis.crypto?.webcrypto ?? globalThis.crypto ?? import("node:crypto").then((m) => m.webcrypto);
+//#endregion
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+const RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
+/**
+* Assert 'object' type schema.
+*
+* @internal
+*/
+const AssertObjectSchema = custom((v) => v !== null && (typeof v === "object" || typeof v === "function"));
+/**
+* A progress token, used to associate progress notifications with the original request.
+*/
+const ProgressTokenSchema = union([string(), number().int()]);
+/**
+* An opaque token used to represent a cursor for pagination.
+*/
+const CursorSchema = string();
+looseObject({
+	/**
+	* Requested duration in milliseconds to retain task from creation.
+	*/
+	ttl: number().optional(),
+	/**
+	* Time in milliseconds to wait between task status requests.
+	*/
+	pollInterval: number().optional()
 });
-const authJwks = pgTable("jwks", {
-	id: text("id").primaryKey(),
-	publicKey: text("public_key").notNull(),
-	privateKey: text("private_key").notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	expiresAt: timestamp("expires_at", { withTimezone: true })
+const TaskMetadataSchema = object({ ttl: number().optional() });
+/**
+* Metadata for associating messages with a task.
+* Include this in the `_meta` field under the key `io.modelcontextprotocol/related-task`.
+*/
+const RelatedTaskMetadataSchema = object({ taskId: string() });
+const RequestMetaSchema = looseObject({
+	/**
+	* If specified, the caller is requesting out-of-band progress notifications for this request (as represented by notifications/progress). The value of this parameter is an opaque token that will be attached to any subsequent notifications. The receiver is not obligated to provide these notifications.
+	*/
+	progressToken: ProgressTokenSchema.optional(),
+	/**
+	* If specified, this request is related to the provided task.
+	*/
+	[RELATED_TASK_META_KEY]: RelatedTaskMetadataSchema.optional()
 });
-const authJwksSqlite = sqliteTable("jwks", {
-	id: text$1("id").primaryKey(),
-	publicKey: text$1("public_key").notNull(),
-	privateKey: text$1("private_key").notNull(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" })
+/**
+* Common params for any request.
+*/
+const BaseRequestParamsSchema = object({ 
+/**
+* See [General fields: `_meta`](/specification/draft/basic/index#meta) for notes on `_meta` usage.
+*/
+_meta: RequestMetaSchema.optional() });
+/**
+* Common params for any task-augmented request.
+*/
+const TaskAugmentedRequestParamsSchema = BaseRequestParamsSchema.extend({ 
+/**
+* If specified, the caller is requesting task-augmented execution for this request.
+* The request will return a CreateTaskResult immediately, and the actual result can be
+* retrieved later via tasks/result.
+*
+* Task augmentation is subject to capability negotiation - receivers MUST declare support
+* for task augmentation of specific request types in their capabilities.
+*/
+task: TaskMetadataSchema.optional() });
+const RequestSchema = object({
+	method: string(),
+	params: BaseRequestParamsSchema.loose().optional()
 });
-const authSessions = pgTable("sessions", {
-	id: text("id").primaryKey(),
-	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
-	token: text("token").notNull().unique(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	ipAddress: text("ip_address"),
-	userAgent: text("user_agent"),
-	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" })
-}, (table) => [index("session_user_id_idx").on(table.userId)]);
-const authSessionsSqlite = sqliteTable("sessions", {
-	id: text$1("id").primaryKey(),
-	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }).notNull(),
-	token: text$1("token").notNull().unique(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	ipAddress: text$1("ip_address"),
-	userAgent: text$1("user_agent"),
-	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" })
-}, (table) => [index$1("session_user_id_idx").on(table.userId)]);
-const authVerifications = pgTable("verification", {
-	id: text("id").primaryKey(),
-	identifier: text("identifier").notNull(),
-	value: text("value").notNull(),
-	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [index("verification_identifier_idx").on(table.identifier)]);
-const authVerificationsSqlite = sqliteTable("verification", {
-	id: text$1("id").primaryKey(),
-	identifier: text$1("identifier").notNull(),
-	value: text$1("value").notNull(),
-	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }).notNull(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [index$1("verification_identifier_idx").on(table.identifier)]);
+const NotificationsParamsSchema = object({ 
 /**
-* Tables backing keystroke as an OAuth 2.1 Authorization Server for the
-* Universal MCP server: dynamically-registered MCP/AI clients, their issued
-* access/refresh tokens, and consent records.
+* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+* for notes on _meta usage.
+*/
+_meta: RequestMetaSchema.optional() });
+const NotificationSchema = object({
+	method: string(),
+	params: NotificationsParamsSchema.loose().optional()
+});
+const ResultSchema = looseObject({ 
+/**
+* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+* for notes on _meta usage.
+*/
+_meta: RequestMetaSchema.optional() });
+/**
+* A uniquely identifying ID for a request in JSON-RPC.
+*/
+const RequestIdSchema = union([string(), number().int()]);
+/**
+* A request that expects a response.
+*/
+const JSONRPCRequestSchema = object({
+	jsonrpc: literal("2.0"),
+	id: RequestIdSchema,
+	...RequestSchema.shape
+}).strict();
+/**
+* A notification which does not expect a response.
+*/
+const JSONRPCNotificationSchema = object({
+	jsonrpc: literal("2.0"),
+	...NotificationSchema.shape
+}).strict();
+/**
+* A successful (non-error) response to a request.
+*/
+const JSONRPCResultResponseSchema = object({
+	jsonrpc: literal("2.0"),
+	id: RequestIdSchema,
+	result: ResultSchema
+}).strict();
+/**
+* Error codes defined by the JSON-RPC specification.
+*/
+var ErrorCode;
+(function(ErrorCode) {
+	ErrorCode[ErrorCode["ConnectionClosed"] = -32e3] = "ConnectionClosed";
+	ErrorCode[ErrorCode["RequestTimeout"] = -32001] = "RequestTimeout";
+	ErrorCode[ErrorCode["ParseError"] = -32700] = "ParseError";
+	ErrorCode[ErrorCode["InvalidRequest"] = -32600] = "InvalidRequest";
+	ErrorCode[ErrorCode["MethodNotFound"] = -32601] = "MethodNotFound";
+	ErrorCode[ErrorCode["InvalidParams"] = -32602] = "InvalidParams";
+	ErrorCode[ErrorCode["InternalError"] = -32603] = "InternalError";
+	ErrorCode[ErrorCode["UrlElicitationRequired"] = -32042] = "UrlElicitationRequired";
+})(ErrorCode || (ErrorCode = {}));
+/**
+* A response to a request that indicates an error occurred.
+*/
+const JSONRPCErrorResponseSchema = object({
+	jsonrpc: literal("2.0"),
+	id: RequestIdSchema.optional(),
+	error: object({
+		/**
+		* The error type that occurred.
+		*/
+		code: number().int(),
+		/**
+		* A short description of the error. The message SHOULD be limited to a concise single sentence.
+		*/
+		message: string(),
+		/**
+		* Additional information about the error. The value of this member is defined by the sender (e.g. detailed error information, nested errors etc.).
+		*/
+		data: unknown().optional()
+	})
+}).strict();
+union([
+	JSONRPCRequestSchema,
+	JSONRPCNotificationSchema,
+	JSONRPCResultResponseSchema,
+	JSONRPCErrorResponseSchema
+]);
+union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
+/**
+* A response that indicates success but carries no data.
+*/
+const EmptyResultSchema = ResultSchema.strict();
+const CancelledNotificationParamsSchema = NotificationsParamsSchema.extend({
+	/**
+	* The ID of the request to cancel.
+	*
+	* This MUST correspond to the ID of a request previously issued in the same direction.
+	*/
+	requestId: RequestIdSchema.optional(),
+	/**
+	* An optional string describing the reason for the cancellation. This MAY be logged or presented to the user.
+	*/
+	reason: string().optional()
+});
+/**
+* This notification can be sent by either side to indicate that it is cancelling a previously-issued request.
 *
-* NOT to be confused with `oauth_apps` / `oauth_connections`, which model the
-* inverse — keystroke as an OAuth *client* storing our users' connections to
-* third-party providers. These `mcp_oauth_*` tables are the provider side.
+* The request SHOULD still be in-flight, but due to communication latency, it is always possible that this notification MAY arrive after the request has already finished.
 *
-* Wired to Better Auth via the Drizzle adapter (`authSchemaFor`). Better Auth
-* addresses these by its fixed model names (`oauthApplication`,
-* `oauthAccessToken`, `oauthConsent`) and by field name (the JS property keys
-* below); the physical table/column names are ours to choose.
+* This notification indicates that the result will be unused, so any associated processing SHOULD cease.
 *
-* Note: access/refresh tokens are stored as opaque plaintext bearer strings
-* (the Better Auth mcp plugin looks them up directly and cannot hash them),
-* consistent with how the `sessions` table stores session tokens. They are
-* short-lived; rely on DB access controls + at-rest encryption.
-*/
-const mcpOauthClient = pgTable("mcp_oauth_client", {
-	id: text("id").primaryKey(),
-	name: text("name").notNull(),
-	icon: text("icon"),
-	metadata: text("metadata"),
-	clientId: text("client_id").notNull().unique(),
-	clientSecret: text("client_secret"),
-	redirectUrls: text("redirect_urls").notNull(),
-	type: text("type").notNull(),
-	disabled: boolean("disabled").notNull().default(false),
-	userId: text("user_id").references(() => users.id, { onDelete: "cascade" }),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [index("mcp_oauth_client_user_id_idx").on(table.userId)]);
-const mcpOauthClientSqlite = sqliteTable("mcp_oauth_client", {
-	id: text$1("id").primaryKey(),
-	name: text$1("name").notNull(),
-	icon: text$1("icon"),
-	metadata: text$1("metadata"),
-	clientId: text$1("client_id").notNull().unique(),
-	clientSecret: text$1("client_secret"),
-	redirectUrls: text$1("redirect_urls").notNull(),
-	type: text$1("type").notNull(),
-	disabled: integer$1("disabled", { mode: "boolean" }).notNull().default(false),
-	userId: text$1("user_id").references(() => usersSqlite.id, { onDelete: "cascade" }),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [index$1("mcp_oauth_client_user_id_idx").on(table.userId)]);
-const mcpOauthAccessToken = pgTable("mcp_oauth_access_token", {
-	id: text("id").primaryKey(),
-	accessToken: text("access_token").notNull().unique(),
-	refreshToken: text("refresh_token").unique(),
-	accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
-	refreshTokenExpiresAt: timestamp("refresh_token_expires_at", { withTimezone: true }),
-	clientId: text("client_id").notNull(),
-	userId: text("user_id").references(() => users.id, { onDelete: "cascade" }),
-	scopes: text("scopes"),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [index("mcp_oauth_access_token_client_id_idx").on(table.clientId), index("mcp_oauth_access_token_user_id_idx").on(table.userId)]);
-const mcpOauthAccessTokenSqlite = sqliteTable("mcp_oauth_access_token", {
-	id: text$1("id").primaryKey(),
-	accessToken: text$1("access_token").notNull().unique(),
-	refreshToken: text$1("refresh_token").unique(),
-	accessTokenExpiresAt: integer$1("access_token_expires_at", { mode: "timestamp_ms" }),
-	refreshTokenExpiresAt: integer$1("refresh_token_expires_at", { mode: "timestamp_ms" }),
-	clientId: text$1("client_id").notNull(),
-	userId: text$1("user_id").references(() => usersSqlite.id, { onDelete: "cascade" }),
-	scopes: text$1("scopes"),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [index$1("mcp_oauth_access_token_client_id_idx").on(table.clientId), index$1("mcp_oauth_access_token_user_id_idx").on(table.userId)]);
-const mcpOauthConsent = pgTable("mcp_oauth_consent", {
-	id: text("id").primaryKey(),
-	clientId: text("client_id").notNull(),
-	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
-	scopes: text("scopes"),
-	consentGiven: boolean("consent_given").notNull().default(false),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [index("mcp_oauth_consent_client_id_idx").on(table.clientId), index("mcp_oauth_consent_user_id_idx").on(table.userId)]);
-const mcpOauthConsentSqlite = sqliteTable("mcp_oauth_consent", {
-	id: text$1("id").primaryKey(),
-	clientId: text$1("client_id").notNull(),
-	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
-	scopes: text$1("scopes"),
-	consentGiven: integer$1("consent_given", { mode: "boolean" }).notNull().default(false),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [index$1("mcp_oauth_consent_client_id_idx").on(table.clientId), index$1("mcp_oauth_consent_user_id_idx").on(table.userId)]);
-createRequire(import.meta.url);
-function buildPgSchema(registry) {
-	return Object.fromEntries(Object.entries(registry).map(([name, { pg }]) => [name, pg]));
-}
-function buildSqliteSchema(registry) {
-	return Object.fromEntries(Object.entries(registry).map(([name, { sqlite }]) => [name, sqlite]));
-}
-/** Better Auth API Key shape (`apikey` model → physical `api_keys`). */
-const authApiKeys = pgTable("api_keys", {
-	id: text("id").primaryKey(),
-	configId: text("config_id").notNull().default("default"),
-	name: text("name"),
-	start: text("start"),
-	prefix: text("prefix"),
-	/** Hashed secret for verification (Better Auth `key`). */
-	key: text("key").notNull(),
-	/** Encrypted plaintext secret — keystroke extension for re-display. */
-	keyCiphertext: text("key_ciphertext"),
-	referenceId: text("reference_id").notNull(),
-	refillInterval: integer("refill_interval"),
-	refillAmount: integer("refill_amount"),
-	lastRefillAt: timestamp("last_refill_at", { withTimezone: true }),
-	enabled: boolean("enabled").default(true),
-	rateLimitEnabled: boolean("rate_limit_enabled").default(true),
-	rateLimitTimeWindow: integer("rate_limit_time_window"),
-	rateLimitMax: integer("rate_limit_max"),
-	requestCount: integer("request_count").default(0),
-	remaining: integer("remaining"),
-	lastRequest: timestamp("last_request", { withTimezone: true }),
-	expiresAt: timestamp("expires_at", { withTimezone: true }),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	permissions: text("permissions"),
-	metadata: text("metadata")
-}, (table) => [
-	index("api_keys_reference_id_idx").on(table.referenceId),
-	index("api_keys_config_id_idx").on(table.configId),
-	index("api_keys_key_idx").on(table.key)
-]);
-const authApiKeysSqlite = sqliteTable("api_keys", {
-	id: text$1("id").primaryKey(),
-	configId: text$1("config_id").notNull().default("default"),
-	name: text$1("name"),
-	start: text$1("start"),
-	prefix: text$1("prefix"),
-	key: text$1("key").notNull(),
-	keyCiphertext: text$1("key_ciphertext"),
-	referenceId: text$1("reference_id").notNull(),
-	refillInterval: integer$1("refill_interval"),
-	refillAmount: integer$1("refill_amount"),
-	lastRefillAt: integer$1("last_refill_at", { mode: "timestamp_ms" }),
-	enabled: integer$1("enabled", { mode: "boolean" }).default(true),
-	rateLimitEnabled: integer$1("rate_limit_enabled", { mode: "boolean" }).default(true),
-	rateLimitTimeWindow: integer$1("rate_limit_time_window"),
-	rateLimitMax: integer$1("rate_limit_max"),
-	requestCount: integer$1("request_count").default(0),
-	remaining: integer$1("remaining"),
-	lastRequest: integer$1("last_request", { mode: "timestamp_ms" }),
-	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	permissions: text$1("permissions"),
-	metadata: text$1("metadata")
-}, (table) => [
-	index$1("api_keys_reference_id_idx").on(table.referenceId),
-	index$1("api_keys_config_id_idx").on(table.configId),
-	index$1("api_keys_key_idx").on(table.key)
-]);
-const organizations = pgTable("organizations", {
-	id: text("id").primaryKey(),
-	name: text("name").notNull(),
-	slug: text("slug").notNull(),
-	dbSchema: text("db_schema").notNull(),
-	dbUser: text("db_user").notNull(),
-	dbPasswordCiphertext: text("db_password_ciphertext").notNull(),
-	hostingAppName: text("hosting_app_name"),
-	runtimeId: text("runtime_id"),
-	baseUrl: text("base_url"),
-	storageBucket: text("storage_bucket"),
-	storageEndpoint: text("storage_endpoint"),
-	storageAccessKeyIdCiphertext: text("storage_access_key_id_ciphertext"),
-	storageSecretAccessKeyCiphertext: text("storage_secret_access_key_ciphertext"),
-	storageRegion: text("storage_region"),
-	storageForcePathStyle: boolean("storage_force_path_style"),
-	customLogoEnabled: boolean("custom_logo_enabled").notNull().default(false),
-	customLogoExplicitlyDisabled: boolean("custom_logo_explicitly_disabled").notNull().default(false),
-	logoLightUrl: text("logo_light_url"),
-	logoDarkUrl: text("logo_dark_url"),
-	logoHeightPx: integer("logo_height_px").notNull().default(20),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	verifiedAt: timestamp("verified_at", { withTimezone: true }),
-	deletedAt: timestamp("deleted_at", { withTimezone: true })
-}, (table) => [uniqueIndex("organizations_slug_unique").on(table.slug)]);
-const organizationsSqlite = sqliteTable("organizations", {
-	id: text$1("id").primaryKey(),
-	name: text$1("name").notNull(),
-	slug: text$1("slug").notNull(),
-	dbSchema: text$1("db_schema").notNull(),
-	dbUser: text$1("db_user").notNull(),
-	dbPasswordCiphertext: text$1("db_password_ciphertext").notNull(),
-	hostingAppName: text$1("hosting_app_name"),
-	runtimeId: text$1("runtime_id"),
-	baseUrl: text$1("base_url"),
-	storageBucket: text$1("storage_bucket"),
-	storageEndpoint: text$1("storage_endpoint"),
-	storageAccessKeyIdCiphertext: text$1("storage_access_key_id_ciphertext"),
-	storageSecretAccessKeyCiphertext: text$1("storage_secret_access_key_ciphertext"),
-	storageRegion: text$1("storage_region"),
-	storageForcePathStyle: integer$1("storage_force_path_style", { mode: "boolean" }),
-	customLogoEnabled: integer$1("custom_logo_enabled", { mode: "boolean" }).notNull().default(false),
-	customLogoExplicitlyDisabled: integer$1("custom_logo_explicitly_disabled", { mode: "boolean" }).notNull().default(false),
-	logoLightUrl: text$1("logo_light_url"),
-	logoDarkUrl: text$1("logo_dark_url"),
-	logoHeightPx: integer$1("logo_height_px").notNull().default(20),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	verifiedAt: integer$1("verified_at", { mode: "timestamp_ms" }),
-	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
-}, (table) => [uniqueIndex$1("organizations_slug_unique").on(table.slug)]);
-const apps = pgTable("apps", {
-	id: text("id").primaryKey(),
-	organizationId: text("organization_id").references(() => organizations.id, { onDelete: "cascade" }),
-	slug: text("slug").notNull(),
-	name: text("name").notNull(),
-	description: text("description").notNull(),
-	category: text("category").notNull(),
-	logo: text("logo"),
-	authKind: text("auth_kind").$type().notNull(),
-	oauthScopes: jsonb("oauth_scopes").$type().notNull(),
-	credentialFields: jsonb("credential_fields").$type().notNull().default({}),
-	credentialScheme: text("credential_scheme").$type(),
-	url: text("url"),
-	source: text("source").$type().notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [uniqueIndex("apps_slug_idx").on(table.slug), index("apps_organization_id_idx").on(table.organizationId)]);
-const appsSqlite = sqliteTable("apps", {
-	id: text$1("id").primaryKey(),
-	organizationId: text$1("organization_id").references(() => organizationsSqlite.id, { onDelete: "cascade" }),
-	slug: text$1("slug").notNull(),
-	name: text$1("name").notNull(),
-	description: text$1("description").notNull(),
-	category: text$1("category").notNull(),
-	logo: text$1("logo"),
-	authKind: text$1("auth_kind").$type().notNull(),
-	oauthScopes: text$1("oauth_scopes", { mode: "json" }).$type().notNull(),
-	credentialFields: text$1("credential_fields", { mode: "json" }).$type().notNull().default({}),
-	credentialScheme: text$1("credential_scheme").$type(),
-	url: text$1("url"),
-	source: text$1("source").$type().notNull(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [uniqueIndex$1("apps_slug_idx").on(table.slug), index$1("apps_organization_id_idx").on(table.organizationId)]);
-const oauthApps = pgTable("oauth_apps", {
-	id: text("id").primaryKey(),
-	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
-	provider: text("provider").notNull(),
-	slug: text("slug").notNull(),
-	tokenStrategy: text("token_strategy").$type().notNull(),
-	clientIdCiphertext: text("client_id_ciphertext").notNull(),
-	clientSecretCiphertext: text("client_secret_ciphertext").notNull(),
-	signingSecretCiphertext: text("signing_secret_ciphertext"),
-	redirectUri: text("redirect_uri"),
-	metadata: jsonb("metadata").$type(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [uniqueIndex("oauth_apps_organization_id_slug_idx").on(table.organizationId, table.slug), index("oauth_apps_slug_idx").on(table.slug)]);
-const oauthAppsSqlite = sqliteTable("oauth_apps", {
-	id: text$1("id").primaryKey(),
-	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
-	provider: text$1("provider").notNull(),
-	slug: text$1("slug").notNull(),
-	tokenStrategy: text$1("token_strategy").$type().notNull(),
-	clientIdCiphertext: text$1("client_id_ciphertext").notNull(),
-	clientSecretCiphertext: text$1("client_secret_ciphertext").notNull(),
-	signingSecretCiphertext: text$1("signing_secret_ciphertext"),
-	redirectUri: text$1("redirect_uri"),
-	metadata: text$1("metadata", { mode: "json" }).$type(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [uniqueIndex$1("oauth_apps_organization_id_slug_idx").on(table.organizationId, table.slug), index$1("oauth_apps_slug_idx").on(table.slug)]);
-const oauthConnections = pgTable("oauth_connections", {
-	id: text("id").primaryKey(),
-	appId: text("app_id").notNull().references(() => oauthApps.id, { onDelete: "cascade" }),
-	externalId: text("external_id").notNull(),
-	accessTokenCiphertext: text("access_token_ciphertext").notNull(),
-	refreshTokenCiphertext: text("refresh_token_ciphertext"),
-	accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
-	grantedScopes: jsonb("granted_scopes").$type(),
-	metadata: jsonb("metadata").$type(),
-	connectedAt: timestamp("connected_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [uniqueIndex("oauth_connections_app_external_unique").on(table.appId, table.externalId), index("oauth_connections_external_id_idx").on(table.externalId)]);
-const oauthConnectionsSqlite = sqliteTable("oauth_connections", {
-	id: text$1("id").primaryKey(),
-	appId: text$1("app_id").notNull().references(() => oauthAppsSqlite.id, { onDelete: "cascade" }),
-	externalId: text$1("external_id").notNull(),
-	accessTokenCiphertext: text$1("access_token_ciphertext").notNull(),
-	refreshTokenCiphertext: text$1("refresh_token_ciphertext"),
-	accessTokenExpiresAt: integer$1("access_token_expires_at", { mode: "timestamp_ms" }),
-	grantedScopes: text$1("granted_scopes", { mode: "json" }).$type(),
-	metadata: text$1("metadata", { mode: "json" }).$type(),
-	connectedAt: integer$1("connected_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [uniqueIndex$1("oauth_connections_app_external_unique").on(table.appId, table.externalId), index$1("oauth_connections_external_id_idx").on(table.externalId)]);
-const organizationUsers = pgTable("organization_users", {
-	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
-	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
-	role: text("role").notNull().$type(),
-	status: text("status").notNull().$type().default("active"),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	deletedAt: timestamp("deleted_at", { withTimezone: true })
-}, (table) => [primaryKey({ columns: [table.organizationId, table.userId] }), index("organization_users_user_id_idx").on(table.userId)]);
-const organizationUsersSqlite = sqliteTable("organization_users", {
-	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
-	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
-	role: text$1("role").notNull().$type(),
-	status: text$1("status").notNull().$type().default("active"),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
-}, (table) => [primaryKey$1({ columns: [table.organizationId, table.userId] }), index$1("organization_users_user_id_idx").on(table.userId)]);
-const organizationInvitations = pgTable("organization_invitations", {
-	id: text("id").primaryKey(),
-	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
-	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
-	email: text("email").notNull(),
-	role: text("role").notNull().$type(),
-	status: text("status").notNull().$type(),
-	invitedByUserId: text("invited_by_user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	expiresAt: timestamp("expires_at", { withTimezone: true })
-}, (table) => [
-	index("organization_invitations_user_id_idx").on(table.userId),
-	index("organization_invitations_organization_id_idx").on(table.organizationId),
-	uniqueIndex("organization_invitations_org_user_pending_unique").on(table.organizationId, table.userId).where(sql`${table.status} = 'pending'`)
-]);
-const organizationInvitationsSqlite = sqliteTable("organization_invitations", {
-	id: text$1("id").primaryKey(),
-	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
-	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
-	email: text$1("email").notNull(),
-	role: text$1("role").notNull().$type(),
-	status: text$1("status").notNull().$type(),
-	invitedByUserId: text$1("invited_by_user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" })
-}, (table) => [
-	index$1("organization_invitations_user_id_idx").on(table.userId),
-	index$1("organization_invitations_organization_id_idx").on(table.organizationId),
-	uniqueIndex$1("organization_invitations_org_user_pending_unique").on(table.organizationId, table.userId).where(sql`${table.status} = 'pending'`)
-]);
-const projectStatusEnum = pgEnum("project_status", [
-	"inactive",
-	"starting",
-	"active",
-	"failed"
-]);
-const projects = pgTable("projects", {
-	id: text("id").primaryKey(),
-	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
-	name: text("name").notNull(),
-	slug: text("slug").notNull(),
-	description: text("description"),
-	defaultMemberRole: text("default_member_role").notNull().$type().default("builder"),
-	invitePermission: text("invite_permission").notNull().$type().default("admin"),
-	createdByUserId: text("created_by_user_id").references(() => users.id, { onDelete: "set null" }),
-	status: projectStatusEnum("status").notNull(),
-	baseUrl: text("base_url"),
-	runtimeId: text("runtime_id"),
-	activeArtifactId: text("active_artifact_id"),
-	pendingArtifactId: text("pending_artifact_id"),
-	lastError: text("last_error"),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	deletedAt: timestamp("deleted_at", { withTimezone: true })
-}, (table) => [index("projects_organization_id_idx").on(table.organizationId), uniqueIndex("projects_organization_slug_unique").on(table.organizationId, table.slug).where(sql`${table.deletedAt} IS NULL`)]);
-const projectsSqlite = sqliteTable("projects", {
-	id: text$1("id").primaryKey(),
-	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
-	name: text$1("name").notNull(),
-	slug: text$1("slug").notNull(),
-	description: text$1("description"),
-	defaultMemberRole: text$1("default_member_role").notNull().$type().default("builder"),
-	invitePermission: text$1("invite_permission").notNull().$type().default("admin"),
-	createdByUserId: text$1("created_by_user_id").references(() => usersSqlite.id, { onDelete: "set null" }),
-	status: text$1("status").$type().notNull(),
-	baseUrl: text$1("base_url"),
-	runtimeId: text$1("runtime_id"),
-	activeArtifactId: text$1("active_artifact_id"),
-	pendingArtifactId: text$1("pending_artifact_id"),
-	lastError: text$1("last_error"),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
-}, (table) => [index$1("projects_organization_id_idx").on(table.organizationId), uniqueIndex$1("projects_organization_slug_unique").on(table.organizationId, table.slug).where(sql`${table.deletedAt} IS NULL`)]);
-const projectArtifactStatusEnum = pgEnum("project_artifact_status", ["pending", "ready"]);
-const projectArtifacts = pgTable("project_artifacts", {
-	id: text("id").primaryKey(),
-	projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-	storageKey: text("storage_key").notNull(),
-	manifestJson: jsonb("manifest_json"),
-	sourceManifestJson: jsonb("source_manifest_json"),
-	version: integer("version").notNull(),
-	createdByUserId: text("created_by_user_id").references(() => users.id, { onDelete: "set null" }),
-	status: projectArtifactStatusEnum("status").notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [index("project_artifacts_project_id_idx").on(table.projectId)]);
-const projectArtifactsSqlite = sqliteTable("project_artifacts", {
-	id: text$1("id").primaryKey(),
-	projectId: text$1("project_id").notNull().references(() => projectsSqlite.id, { onDelete: "cascade" }),
-	storageKey: text$1("storage_key").notNull(),
-	manifestJson: text$1("manifest_json", { mode: "json" }),
-	sourceManifestJson: text$1("source_manifest_json", { mode: "json" }),
-	version: integer$1("version").notNull(),
-	createdByUserId: text$1("created_by_user_id").references(() => usersSqlite.id, { onDelete: "set null" }),
-	status: text$1("status").$type().notNull(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [index$1("project_artifacts_project_id_idx").on(table.projectId)]);
-const projectUsers = pgTable("project_users", {
-	projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
-	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
-	role: text("role").notNull().$type(),
-	status: text("status").notNull().$type().default("active"),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
-	deletedAt: timestamp("deleted_at", { withTimezone: true })
-}, (table) => [primaryKey({ columns: [table.projectId, table.userId] }), index("project_users_user_id_idx").on(table.userId)]);
-const projectUsersSqlite = sqliteTable("project_users", {
-	projectId: text$1("project_id").notNull().references(() => projectsSqlite.id, { onDelete: "cascade" }),
-	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
-	role: text$1("role").notNull().$type(),
-	status: text$1("status").notNull().$type().default("active"),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
-	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
-}, (table) => [primaryKey$1({ columns: [table.projectId, table.userId] }), index$1("project_users_user_id_idx").on(table.userId)]);
-const secretValues = pgTable("secret_values", {
-	id: text("id").primaryKey(),
-	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
-	refKind: text("ref_kind").$type().notNull(),
-	refId: text("ref_id").notNull(),
-	field: text("field").$type().notNull(),
-	ciphertext: text("ciphertext").notNull(),
-	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
-	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
-}, (table) => [uniqueIndex("secret_values_ref_unique").on(table.organizationId, table.refKind, table.refId, table.field)]);
-const secretValuesSqlite = sqliteTable("secret_values", {
-	id: text$1("id").primaryKey(),
-	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
-	refKind: text$1("ref_kind").$type().notNull(),
-	refId: text$1("ref_id").notNull(),
-	field: text$1("field").$type().notNull(),
-	ciphertext: text$1("ciphertext").notNull(),
-	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
-	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
-}, (table) => [uniqueIndex$1("secret_values_ref_unique").on(table.organizationId, table.refKind, table.refId, table.field)]);
-/**
-* Platform control-plane tables — Postgres (hosted) or SQLite (local dev).
-*/
-const tableRegistry = {
-	organizations: {
-		pg: organizations,
-		sqlite: organizationsSqlite
-	},
-	organizationUsers: {
-		pg: organizationUsers,
-		sqlite: organizationUsersSqlite
-	},
-	organizationInvitations: {
-		pg: organizationInvitations,
-		sqlite: organizationInvitationsSqlite
-	},
-	projects: {
-		pg: projects,
-		sqlite: projectsSqlite
-	},
-	projectUsers: {
-		pg: projectUsers,
-		sqlite: projectUsersSqlite
-	},
-	projectArtifacts: {
-		pg: projectArtifacts,
-		sqlite: projectArtifactsSqlite
-	},
-	users: {
-		pg: users,
-		sqlite: usersSqlite
-	},
-	authSessions: {
-		pg: authSessions,
-		sqlite: authSessionsSqlite
-	},
-	authAccounts: {
-		pg: authAccounts,
-		sqlite: authAccountsSqlite
-	},
-	authVerifications: {
-		pg: authVerifications,
-		sqlite: authVerificationsSqlite
-	},
-	authDeviceCodes: {
-		pg: authDeviceCodes,
-		sqlite: authDeviceCodesSqlite
-	},
-	authJwks: {
-		pg: authJwks,
-		sqlite: authJwksSqlite
-	},
-	authApiKeys: {
-		pg: authApiKeys,
-		sqlite: authApiKeysSqlite
-	},
-	apps: {
-		pg: apps,
-		sqlite: appsSqlite
-	},
-	oauthApps: {
-		pg: oauthApps,
-		sqlite: oauthAppsSqlite
-	},
-	oauthConnections: {
-		pg: oauthConnections,
-		sqlite: oauthConnectionsSqlite
-	},
-	mcpOauthClient: {
-		pg: mcpOauthClient,
-		sqlite: mcpOauthClientSqlite
-	},
-	mcpOauthAccessToken: {
-		pg: mcpOauthAccessToken,
-		sqlite: mcpOauthAccessTokenSqlite
-	},
-	mcpOauthConsent: {
-		pg: mcpOauthConsent,
-		sqlite: mcpOauthConsentSqlite
-	},
-	secretValues: {
-		pg: secretValues,
-		sqlite: secretValuesSqlite
-	}
-};
-buildPgSchema(tableRegistry);
-buildSqliteSchema(tableRegistry);
-new AsyncLocalStorage();
-new AsyncLocalStorage();
-globalThis.crypto?.webcrypto ?? globalThis.crypto ?? import("node:crypto").then((m) => m.webcrypto);
-//#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
-const RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
-/**
-* Assert 'object' type schema.
-*
-* @internal
-*/
-const AssertObjectSchema = custom((v) => v !== null && (typeof v === "object" || typeof v === "function"));
-/**
-* A progress token, used to associate progress notifications with the original request.
-*/
-const ProgressTokenSchema = union([string(), number().int()]);
-/**
-* An opaque token used to represent a cursor for pagination.
-*/
-const CursorSchema = string();
-looseObject({
-	/**
-	* Requested duration in milliseconds to retain task from creation.
-	*/
-	ttl: number().optional(),
-	/**
-	* Time in milliseconds to wait between task status requests.
-	*/
-	pollInterval: number().optional()
-});
-const TaskMetadataSchema = object({ ttl: number().optional() });
-/**
-* Metadata for associating messages with a task.
-* Include this in the `_meta` field under the key `io.modelcontextprotocol/related-task`.
-*/
-const RelatedTaskMetadataSchema = object({ taskId: string() });
-const RequestMetaSchema = looseObject({
-	/**
-	* If specified, the caller is requesting out-of-band progress notifications for this request (as represented by notifications/progress). The value of this parameter is an opaque token that will be attached to any subsequent notifications. The receiver is not obligated to provide these notifications.
-	*/
-	progressToken: ProgressTokenSchema.optional(),
-	/**
-	* If specified, this request is related to the provided task.
-	*/
-	[RELATED_TASK_META_KEY]: RelatedTaskMetadataSchema.optional()
-});
-/**
-* Common params for any request.
-*/
-const BaseRequestParamsSchema = object({ 
-/**
-* See [General fields: `_meta`](/specification/draft/basic/index#meta) for notes on `_meta` usage.
-*/
-_meta: RequestMetaSchema.optional() });
-/**
-* Common params for any task-augmented request.
-*/
-const TaskAugmentedRequestParamsSchema = BaseRequestParamsSchema.extend({ 
-/**
-* If specified, the caller is requesting task-augmented execution for this request.
-* The request will return a CreateTaskResult immediately, and the actual result can be
-* retrieved later via tasks/result.
-*
-* Task augmentation is subject to capability negotiation - receivers MUST declare support
-* for task augmentation of specific request types in their capabilities.
-*/
-task: TaskMetadataSchema.optional() });
-const RequestSchema = object({
-	method: string(),
-	params: BaseRequestParamsSchema.loose().optional()
-});
-const NotificationsParamsSchema = object({ 
-/**
-* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
-* for notes on _meta usage.
-*/
-_meta: RequestMetaSchema.optional() });
-const NotificationSchema = object({
-	method: string(),
-	params: NotificationsParamsSchema.loose().optional()
-});
-const ResultSchema = looseObject({ 
-/**
-* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
-* for notes on _meta usage.
-*/
-_meta: RequestMetaSchema.optional() });
-/**
-* A uniquely identifying ID for a request in JSON-RPC.
-*/
-const RequestIdSchema = union([string(), number().int()]);
-/**
-* A request that expects a response.
-*/
-const JSONRPCRequestSchema = object({
-	jsonrpc: literal("2.0"),
-	id: RequestIdSchema,
-	...RequestSchema.shape
-}).strict();
-/**
-* A notification which does not expect a response.
-*/
-const JSONRPCNotificationSchema = object({
-	jsonrpc: literal("2.0"),
-	...NotificationSchema.shape
-}).strict();
-/**
-* A successful (non-error) response to a request.
-*/
-const JSONRPCResultResponseSchema = object({
-	jsonrpc: literal("2.0"),
-	id: RequestIdSchema,
-	result: ResultSchema
-}).strict();
-/**
-* Error codes defined by the JSON-RPC specification.
-*/
-var ErrorCode;
-(function(ErrorCode) {
-	ErrorCode[ErrorCode["ConnectionClosed"] = -32e3] = "ConnectionClosed";
-	ErrorCode[ErrorCode["RequestTimeout"] = -32001] = "RequestTimeout";
-	ErrorCode[ErrorCode["ParseError"] = -32700] = "ParseError";
-	ErrorCode[ErrorCode["InvalidRequest"] = -32600] = "InvalidRequest";
-	ErrorCode[ErrorCode["MethodNotFound"] = -32601] = "MethodNotFound";
-	ErrorCode[ErrorCode["InvalidParams"] = -32602] = "InvalidParams";
-	ErrorCode[ErrorCode["InternalError"] = -32603] = "InternalError";
-	ErrorCode[ErrorCode["UrlElicitationRequired"] = -32042] = "UrlElicitationRequired";
-})(ErrorCode || (ErrorCode = {}));
-/**
-* A response to a request that indicates an error occurred.
-*/
-const JSONRPCErrorResponseSchema = object({
-	jsonrpc: literal("2.0"),
-	id: RequestIdSchema.optional(),
-	error: object({
-		/**
-		* The error type that occurred.
-		*/
-		code: number().int(),
-		/**
-		* A short description of the error. The message SHOULD be limited to a concise single sentence.
-		*/
-		message: string(),
-		/**
-		* Additional information about the error. The value of this member is defined by the sender (e.g. detailed error information, nested errors etc.).
-		*/
-		data: unknown().optional()
-	})
-}).strict();
-union([
-	JSONRPCRequestSchema,
-	JSONRPCNotificationSchema,
-	JSONRPCResultResponseSchema,
-	JSONRPCErrorResponseSchema
-]);
-union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
-/**
-* A response that indicates success but carries no data.
-*/
-const EmptyResultSchema = ResultSchema.strict();
-const CancelledNotificationParamsSchema = NotificationsParamsSchema.extend({
-	/**
-	* The ID of the request to cancel.
-	*
-	* This MUST correspond to the ID of a request previously issued in the same direction.
-	*/
-	requestId: RequestIdSchema.optional(),
-	/**
-	* An optional string describing the reason for the cancellation. This MAY be logged or presented to the user.
-	*/
-	reason: string().optional()
-});
-/**
-* This notification can be sent by either side to indicate that it is cancelling a previously-issued request.
-*
-* The request SHOULD still be in-flight, but due to communication latency, it is always possible that this notification MAY arrive after the request has already finished.
-*
-* This notification indicates that the result will be unused, so any associated processing SHOULD cease.
-*
-* A client MUST NOT attempt to cancel its `initialize` request.
+* A client MUST NOT attempt to cancel its `initialize` request.
 */
 const CancelledNotificationSchema = NotificationSchema.extend({
 	method: literal("notifications/cancelled"),
@@ -11186,10 +10164,701 @@ var require_limit = /* @__PURE__ */ __commonJSMin(((exports) => {
 		(_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 || (_b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`);
 		for (const f of list) ajv.addFormat(f, fs[f]);
 	}
-	module.exports = exports = formatsPlugin;
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.default = formatsPlugin;
-})))();
+	module.exports = exports = formatsPlugin;
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.default = formatsPlugin;
+})))();
+//#endregion
+//#region ../../packages/action/dist/index.mjs
+const zodSchema$3 = custom((v) => v instanceof ZodType, "must be a Zod schema");
+object({
+	slug: string().trim().min(1),
+	name: string().optional(),
+	description: string().optional(),
+	input: zodSchema$3,
+	output: zodSchema$3,
+	credentials: array(credentialInputSchema).optional(),
+	run: _function()
+});
+new AsyncLocalStorage();
+new AsyncLocalStorage();
+new AbortController().signal;
+const REGISTRY_KEY$2 = Symbol.for("keystroke.workflowRunGetter");
+function registry$1() {
+	const globalScope = globalThis;
+	if (!globalScope[REGISTRY_KEY$2]) globalScope[REGISTRY_KEY$2] = {};
+	return globalScope[REGISTRY_KEY$2];
+}
+function registerWorkflowRunGetter(fn) {
+	registry$1().getter = fn;
+}
+//#endregion
+//#region ../../packages/platform-database/dist/mcp-oauth-SRTcHMWZ.mjs
+const users = pgTable("users", {
+	id: text("id").primaryKey(),
+	name: text("name").notNull(),
+	email: text("email").notNull().unique(),
+	emailVerified: boolean("email_verified").notNull(),
+	image: text("image"),
+	preferences: jsonb("preferences"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+});
+const usersSqlite = sqliteTable("users", {
+	id: text$1("id").primaryKey(),
+	name: text$1("name").notNull(),
+	email: text$1("email").notNull().unique(),
+	emailVerified: integer$1("email_verified", { mode: "boolean" }).notNull(),
+	image: text$1("image"),
+	preferences: text$1("preferences", { mode: "json" }),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+});
+const authAccounts = pgTable("accounts", {
+	id: text("id").primaryKey(),
+	accountId: text("account_id").notNull(),
+	providerId: text("provider_id").notNull(),
+	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+	accessToken: text("access_token"),
+	refreshToken: text("refresh_token"),
+	idToken: text("id_token"),
+	accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
+	refreshTokenExpiresAt: timestamp("refresh_token_expires_at", { withTimezone: true }),
+	scope: text("scope"),
+	password: text("password"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [index("account_user_id_idx").on(table.userId)]);
+const authAccountsSqlite = sqliteTable("accounts", {
+	id: text$1("id").primaryKey(),
+	accountId: text$1("account_id").notNull(),
+	providerId: text$1("provider_id").notNull(),
+	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
+	accessToken: text$1("access_token"),
+	refreshToken: text$1("refresh_token"),
+	idToken: text$1("id_token"),
+	accessTokenExpiresAt: integer$1("access_token_expires_at", { mode: "timestamp_ms" }),
+	refreshTokenExpiresAt: integer$1("refresh_token_expires_at", { mode: "timestamp_ms" }),
+	scope: text$1("scope"),
+	password: text$1("password"),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [index$1("account_user_id_idx").on(table.userId)]);
+const authDeviceCodes = pgTable("device_auth_codes", {
+	id: text("id").primaryKey(),
+	deviceCode: text("device_code").notNull(),
+	userCode: text("user_code").notNull(),
+	userId: text("user_id"),
+	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
+	status: text("status").notNull(),
+	lastPolledAt: timestamp("last_polled_at", { withTimezone: true }),
+	pollingInterval: integer("polling_interval"),
+	clientId: text("client_id"),
+	scope: text("scope")
+});
+const authDeviceCodesSqlite = sqliteTable("device_auth_codes", {
+	id: text$1("id").primaryKey(),
+	deviceCode: text$1("device_code").notNull(),
+	userCode: text$1("user_code").notNull(),
+	userId: text$1("user_id"),
+	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }).notNull(),
+	status: text$1("status").notNull(),
+	lastPolledAt: integer$1("last_polled_at", { mode: "timestamp_ms" }),
+	pollingInterval: integer$1("polling_interval"),
+	clientId: text$1("client_id"),
+	scope: text$1("scope")
+});
+const authJwks = pgTable("jwks", {
+	id: text("id").primaryKey(),
+	publicKey: text("public_key").notNull(),
+	privateKey: text("private_key").notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	expiresAt: timestamp("expires_at", { withTimezone: true })
+});
+const authJwksSqlite = sqliteTable("jwks", {
+	id: text$1("id").primaryKey(),
+	publicKey: text$1("public_key").notNull(),
+	privateKey: text$1("private_key").notNull(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" })
+});
+const authSessions = pgTable("sessions", {
+	id: text("id").primaryKey(),
+	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
+	token: text("token").notNull().unique(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	ipAddress: text("ip_address"),
+	userAgent: text("user_agent"),
+	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" })
+}, (table) => [index("session_user_id_idx").on(table.userId)]);
+const authSessionsSqlite = sqliteTable("sessions", {
+	id: text$1("id").primaryKey(),
+	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }).notNull(),
+	token: text$1("token").notNull().unique(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	ipAddress: text$1("ip_address"),
+	userAgent: text$1("user_agent"),
+	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" })
+}, (table) => [index$1("session_user_id_idx").on(table.userId)]);
+const authVerifications = pgTable("verification", {
+	id: text("id").primaryKey(),
+	identifier: text("identifier").notNull(),
+	value: text("value").notNull(),
+	expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [index("verification_identifier_idx").on(table.identifier)]);
+const authVerificationsSqlite = sqliteTable("verification", {
+	id: text$1("id").primaryKey(),
+	identifier: text$1("identifier").notNull(),
+	value: text$1("value").notNull(),
+	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }).notNull(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [index$1("verification_identifier_idx").on(table.identifier)]);
+/**
+* Tables backing keystroke as an OAuth 2.1 Authorization Server for the
+* Universal MCP server: dynamically-registered MCP/AI clients, their issued
+* access/refresh tokens, and consent records.
+*
+* NOT to be confused with `oauth_apps` / `oauth_connections`, which model the
+* inverse — keystroke as an OAuth *client* storing our users' connections to
+* third-party providers. These `mcp_oauth_*` tables are the provider side.
+*
+* Wired to Better Auth via the Drizzle adapter (`authSchemaFor`). Better Auth
+* addresses these by its fixed model names (`oauthApplication`,
+* `oauthAccessToken`, `oauthConsent`) and by field name (the JS property keys
+* below); the physical table/column names are ours to choose.
+*
+* Note: access/refresh tokens are stored as opaque plaintext bearer strings
+* (the Better Auth mcp plugin looks them up directly and cannot hash them),
+* consistent with how the `sessions` table stores session tokens. They are
+* short-lived; rely on DB access controls + at-rest encryption.
+*/
+const mcpOauthClient = pgTable("mcp_oauth_client", {
+	id: text("id").primaryKey(),
+	name: text("name").notNull(),
+	icon: text("icon"),
+	metadata: text("metadata"),
+	clientId: text("client_id").notNull().unique(),
+	clientSecret: text("client_secret"),
+	redirectUrls: text("redirect_urls").notNull(),
+	type: text("type").notNull(),
+	disabled: boolean("disabled").notNull().default(false),
+	userId: text("user_id").references(() => users.id, { onDelete: "cascade" }),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [index("mcp_oauth_client_user_id_idx").on(table.userId)]);
+const mcpOauthClientSqlite = sqliteTable("mcp_oauth_client", {
+	id: text$1("id").primaryKey(),
+	name: text$1("name").notNull(),
+	icon: text$1("icon"),
+	metadata: text$1("metadata"),
+	clientId: text$1("client_id").notNull().unique(),
+	clientSecret: text$1("client_secret"),
+	redirectUrls: text$1("redirect_urls").notNull(),
+	type: text$1("type").notNull(),
+	disabled: integer$1("disabled", { mode: "boolean" }).notNull().default(false),
+	userId: text$1("user_id").references(() => usersSqlite.id, { onDelete: "cascade" }),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [index$1("mcp_oauth_client_user_id_idx").on(table.userId)]);
+const mcpOauthAccessToken = pgTable("mcp_oauth_access_token", {
+	id: text("id").primaryKey(),
+	accessToken: text("access_token").notNull().unique(),
+	refreshToken: text("refresh_token").unique(),
+	accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
+	refreshTokenExpiresAt: timestamp("refresh_token_expires_at", { withTimezone: true }),
+	clientId: text("client_id").notNull(),
+	userId: text("user_id").references(() => users.id, { onDelete: "cascade" }),
+	scopes: text("scopes"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [index("mcp_oauth_access_token_client_id_idx").on(table.clientId), index("mcp_oauth_access_token_user_id_idx").on(table.userId)]);
+const mcpOauthAccessTokenSqlite = sqliteTable("mcp_oauth_access_token", {
+	id: text$1("id").primaryKey(),
+	accessToken: text$1("access_token").notNull().unique(),
+	refreshToken: text$1("refresh_token").unique(),
+	accessTokenExpiresAt: integer$1("access_token_expires_at", { mode: "timestamp_ms" }),
+	refreshTokenExpiresAt: integer$1("refresh_token_expires_at", { mode: "timestamp_ms" }),
+	clientId: text$1("client_id").notNull(),
+	userId: text$1("user_id").references(() => usersSqlite.id, { onDelete: "cascade" }),
+	scopes: text$1("scopes"),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [index$1("mcp_oauth_access_token_client_id_idx").on(table.clientId), index$1("mcp_oauth_access_token_user_id_idx").on(table.userId)]);
+const mcpOauthConsent = pgTable("mcp_oauth_consent", {
+	id: text("id").primaryKey(),
+	clientId: text("client_id").notNull(),
+	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+	scopes: text("scopes"),
+	consentGiven: boolean("consent_given").notNull().default(false),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [index("mcp_oauth_consent_client_id_idx").on(table.clientId), index("mcp_oauth_consent_user_id_idx").on(table.userId)]);
+const mcpOauthConsentSqlite = sqliteTable("mcp_oauth_consent", {
+	id: text$1("id").primaryKey(),
+	clientId: text$1("client_id").notNull(),
+	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
+	scopes: text$1("scopes"),
+	consentGiven: integer$1("consent_given", { mode: "boolean" }).notNull().default(false),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [index$1("mcp_oauth_consent_client_id_idx").on(table.clientId), index$1("mcp_oauth_consent_user_id_idx").on(table.userId)]);
+createRequire(import.meta.url);
+function buildPgSchema(registry) {
+	return Object.fromEntries(Object.entries(registry).map(([name, { pg }]) => [name, pg]));
+}
+function buildSqliteSchema(registry) {
+	return Object.fromEntries(Object.entries(registry).map(([name, { sqlite }]) => [name, sqlite]));
+}
+/** Better Auth API Key shape (`apikey` model → physical `api_keys`). */
+const authApiKeys = pgTable("api_keys", {
+	id: text("id").primaryKey(),
+	configId: text("config_id").notNull().default("default"),
+	name: text("name"),
+	start: text("start"),
+	prefix: text("prefix"),
+	/** Hashed secret for verification (Better Auth `key`). */
+	key: text("key").notNull(),
+	/** Encrypted plaintext secret — keystroke extension for re-display. */
+	keyCiphertext: text("key_ciphertext"),
+	referenceId: text("reference_id").notNull(),
+	refillInterval: integer("refill_interval"),
+	refillAmount: integer("refill_amount"),
+	lastRefillAt: timestamp("last_refill_at", { withTimezone: true }),
+	enabled: boolean("enabled").default(true),
+	rateLimitEnabled: boolean("rate_limit_enabled").default(true),
+	rateLimitTimeWindow: integer("rate_limit_time_window"),
+	rateLimitMax: integer("rate_limit_max"),
+	requestCount: integer("request_count").default(0),
+	remaining: integer("remaining"),
+	lastRequest: timestamp("last_request", { withTimezone: true }),
+	expiresAt: timestamp("expires_at", { withTimezone: true }),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	permissions: text("permissions"),
+	metadata: text("metadata")
+}, (table) => [
+	index("api_keys_reference_id_idx").on(table.referenceId),
+	index("api_keys_config_id_idx").on(table.configId),
+	index("api_keys_key_idx").on(table.key)
+]);
+const authApiKeysSqlite = sqliteTable("api_keys", {
+	id: text$1("id").primaryKey(),
+	configId: text$1("config_id").notNull().default("default"),
+	name: text$1("name"),
+	start: text$1("start"),
+	prefix: text$1("prefix"),
+	key: text$1("key").notNull(),
+	keyCiphertext: text$1("key_ciphertext"),
+	referenceId: text$1("reference_id").notNull(),
+	refillInterval: integer$1("refill_interval"),
+	refillAmount: integer$1("refill_amount"),
+	lastRefillAt: integer$1("last_refill_at", { mode: "timestamp_ms" }),
+	enabled: integer$1("enabled", { mode: "boolean" }).default(true),
+	rateLimitEnabled: integer$1("rate_limit_enabled", { mode: "boolean" }).default(true),
+	rateLimitTimeWindow: integer$1("rate_limit_time_window"),
+	rateLimitMax: integer$1("rate_limit_max"),
+	requestCount: integer$1("request_count").default(0),
+	remaining: integer$1("remaining"),
+	lastRequest: integer$1("last_request", { mode: "timestamp_ms" }),
+	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" }),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	permissions: text$1("permissions"),
+	metadata: text$1("metadata")
+}, (table) => [
+	index$1("api_keys_reference_id_idx").on(table.referenceId),
+	index$1("api_keys_config_id_idx").on(table.configId),
+	index$1("api_keys_key_idx").on(table.key)
+]);
+const organizations = pgTable("organizations", {
+	id: text("id").primaryKey(),
+	name: text("name").notNull(),
+	slug: text("slug").notNull(),
+	dbSchema: text("db_schema").notNull(),
+	dbUser: text("db_user").notNull(),
+	dbPasswordCiphertext: text("db_password_ciphertext").notNull(),
+	hostingAppName: text("hosting_app_name"),
+	runtimeId: text("runtime_id"),
+	baseUrl: text("base_url"),
+	storageBucket: text("storage_bucket"),
+	storageEndpoint: text("storage_endpoint"),
+	storageAccessKeyIdCiphertext: text("storage_access_key_id_ciphertext"),
+	storageSecretAccessKeyCiphertext: text("storage_secret_access_key_ciphertext"),
+	storageRegion: text("storage_region"),
+	storageForcePathStyle: boolean("storage_force_path_style"),
+	customLogoEnabled: boolean("custom_logo_enabled").notNull().default(false),
+	customLogoExplicitlyDisabled: boolean("custom_logo_explicitly_disabled").notNull().default(false),
+	logoLightUrl: text("logo_light_url"),
+	logoDarkUrl: text("logo_dark_url"),
+	logoHeightPx: integer("logo_height_px").notNull().default(20),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	verifiedAt: timestamp("verified_at", { withTimezone: true }),
+	deletedAt: timestamp("deleted_at", { withTimezone: true })
+}, (table) => [uniqueIndex("organizations_slug_unique").on(table.slug)]);
+const organizationsSqlite = sqliteTable("organizations", {
+	id: text$1("id").primaryKey(),
+	name: text$1("name").notNull(),
+	slug: text$1("slug").notNull(),
+	dbSchema: text$1("db_schema").notNull(),
+	dbUser: text$1("db_user").notNull(),
+	dbPasswordCiphertext: text$1("db_password_ciphertext").notNull(),
+	hostingAppName: text$1("hosting_app_name"),
+	runtimeId: text$1("runtime_id"),
+	baseUrl: text$1("base_url"),
+	storageBucket: text$1("storage_bucket"),
+	storageEndpoint: text$1("storage_endpoint"),
+	storageAccessKeyIdCiphertext: text$1("storage_access_key_id_ciphertext"),
+	storageSecretAccessKeyCiphertext: text$1("storage_secret_access_key_ciphertext"),
+	storageRegion: text$1("storage_region"),
+	storageForcePathStyle: integer$1("storage_force_path_style", { mode: "boolean" }),
+	customLogoEnabled: integer$1("custom_logo_enabled", { mode: "boolean" }).notNull().default(false),
+	customLogoExplicitlyDisabled: integer$1("custom_logo_explicitly_disabled", { mode: "boolean" }).notNull().default(false),
+	logoLightUrl: text$1("logo_light_url"),
+	logoDarkUrl: text$1("logo_dark_url"),
+	logoHeightPx: integer$1("logo_height_px").notNull().default(20),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	verifiedAt: integer$1("verified_at", { mode: "timestamp_ms" }),
+	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
+}, (table) => [uniqueIndex$1("organizations_slug_unique").on(table.slug)]);
+const apps = pgTable("apps", {
+	id: text("id").primaryKey(),
+	organizationId: text("organization_id").references(() => organizations.id, { onDelete: "cascade" }),
+	slug: text("slug").notNull(),
+	name: text("name").notNull(),
+	description: text("description").notNull(),
+	category: text("category").notNull(),
+	logo: text("logo"),
+	authKind: text("auth_kind").$type().notNull(),
+	oauthScopes: jsonb("oauth_scopes").$type().notNull(),
+	credentialFields: jsonb("credential_fields").$type().notNull().default({}),
+	credentialScheme: text("credential_scheme").$type(),
+	url: text("url"),
+	source: text("source").$type().notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [uniqueIndex("apps_slug_idx").on(table.slug), index("apps_organization_id_idx").on(table.organizationId)]);
+const appsSqlite = sqliteTable("apps", {
+	id: text$1("id").primaryKey(),
+	organizationId: text$1("organization_id").references(() => organizationsSqlite.id, { onDelete: "cascade" }),
+	slug: text$1("slug").notNull(),
+	name: text$1("name").notNull(),
+	description: text$1("description").notNull(),
+	category: text$1("category").notNull(),
+	logo: text$1("logo"),
+	authKind: text$1("auth_kind").$type().notNull(),
+	oauthScopes: text$1("oauth_scopes", { mode: "json" }).$type().notNull(),
+	credentialFields: text$1("credential_fields", { mode: "json" }).$type().notNull().default({}),
+	credentialScheme: text$1("credential_scheme").$type(),
+	url: text$1("url"),
+	source: text$1("source").$type().notNull(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [uniqueIndex$1("apps_slug_idx").on(table.slug), index$1("apps_organization_id_idx").on(table.organizationId)]);
+const oauthApps = pgTable("oauth_apps", {
+	id: text("id").primaryKey(),
+	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
+	provider: text("provider").notNull(),
+	slug: text("slug").notNull(),
+	tokenStrategy: text("token_strategy").$type().notNull(),
+	clientIdCiphertext: text("client_id_ciphertext").notNull(),
+	clientSecretCiphertext: text("client_secret_ciphertext").notNull(),
+	signingSecretCiphertext: text("signing_secret_ciphertext"),
+	redirectUri: text("redirect_uri"),
+	metadata: jsonb("metadata").$type(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [uniqueIndex("oauth_apps_organization_id_slug_idx").on(table.organizationId, table.slug), index("oauth_apps_slug_idx").on(table.slug)]);
+const oauthAppsSqlite = sqliteTable("oauth_apps", {
+	id: text$1("id").primaryKey(),
+	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
+	provider: text$1("provider").notNull(),
+	slug: text$1("slug").notNull(),
+	tokenStrategy: text$1("token_strategy").$type().notNull(),
+	clientIdCiphertext: text$1("client_id_ciphertext").notNull(),
+	clientSecretCiphertext: text$1("client_secret_ciphertext").notNull(),
+	signingSecretCiphertext: text$1("signing_secret_ciphertext"),
+	redirectUri: text$1("redirect_uri"),
+	metadata: text$1("metadata", { mode: "json" }).$type(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [uniqueIndex$1("oauth_apps_organization_id_slug_idx").on(table.organizationId, table.slug), index$1("oauth_apps_slug_idx").on(table.slug)]);
+const oauthConnections = pgTable("oauth_connections", {
+	id: text("id").primaryKey(),
+	appId: text("app_id").notNull().references(() => oauthApps.id, { onDelete: "cascade" }),
+	externalId: text("external_id").notNull(),
+	accessTokenCiphertext: text("access_token_ciphertext").notNull(),
+	refreshTokenCiphertext: text("refresh_token_ciphertext"),
+	accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
+	grantedScopes: jsonb("granted_scopes").$type(),
+	metadata: jsonb("metadata").$type(),
+	connectedAt: timestamp("connected_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [uniqueIndex("oauth_connections_app_external_unique").on(table.appId, table.externalId), index("oauth_connections_external_id_idx").on(table.externalId)]);
+const oauthConnectionsSqlite = sqliteTable("oauth_connections", {
+	id: text$1("id").primaryKey(),
+	appId: text$1("app_id").notNull().references(() => oauthAppsSqlite.id, { onDelete: "cascade" }),
+	externalId: text$1("external_id").notNull(),
+	accessTokenCiphertext: text$1("access_token_ciphertext").notNull(),
+	refreshTokenCiphertext: text$1("refresh_token_ciphertext"),
+	accessTokenExpiresAt: integer$1("access_token_expires_at", { mode: "timestamp_ms" }),
+	grantedScopes: text$1("granted_scopes", { mode: "json" }).$type(),
+	metadata: text$1("metadata", { mode: "json" }).$type(),
+	connectedAt: integer$1("connected_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [uniqueIndex$1("oauth_connections_app_external_unique").on(table.appId, table.externalId), index$1("oauth_connections_external_id_idx").on(table.externalId)]);
+const organizationUsers = pgTable("organization_users", {
+	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
+	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+	role: text("role").notNull().$type(),
+	status: text("status").notNull().$type().default("active"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	deletedAt: timestamp("deleted_at", { withTimezone: true })
+}, (table) => [primaryKey({ columns: [table.organizationId, table.userId] }), index("organization_users_user_id_idx").on(table.userId)]);
+const organizationUsersSqlite = sqliteTable("organization_users", {
+	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
+	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
+	role: text$1("role").notNull().$type(),
+	status: text$1("status").notNull().$type().default("active"),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
+}, (table) => [primaryKey$1({ columns: [table.organizationId, table.userId] }), index$1("organization_users_user_id_idx").on(table.userId)]);
+const organizationInvitations = pgTable("organization_invitations", {
+	id: text("id").primaryKey(),
+	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
+	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+	email: text("email").notNull(),
+	role: text("role").notNull().$type(),
+	status: text("status").notNull().$type(),
+	invitedByUserId: text("invited_by_user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	expiresAt: timestamp("expires_at", { withTimezone: true })
+}, (table) => [
+	index("organization_invitations_user_id_idx").on(table.userId),
+	index("organization_invitations_organization_id_idx").on(table.organizationId),
+	uniqueIndex("organization_invitations_org_user_pending_unique").on(table.organizationId, table.userId).where(sql`${table.status} = 'pending'`)
+]);
+const organizationInvitationsSqlite = sqliteTable("organization_invitations", {
+	id: text$1("id").primaryKey(),
+	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
+	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
+	email: text$1("email").notNull(),
+	role: text$1("role").notNull().$type(),
+	status: text$1("status").notNull().$type(),
+	invitedByUserId: text$1("invited_by_user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	expiresAt: integer$1("expires_at", { mode: "timestamp_ms" })
+}, (table) => [
+	index$1("organization_invitations_user_id_idx").on(table.userId),
+	index$1("organization_invitations_organization_id_idx").on(table.organizationId),
+	uniqueIndex$1("organization_invitations_org_user_pending_unique").on(table.organizationId, table.userId).where(sql`${table.status} = 'pending'`)
+]);
+const projectStatusEnum = pgEnum("project_status", [
+	"inactive",
+	"starting",
+	"active",
+	"failed"
+]);
+const projects = pgTable("projects", {
+	id: text("id").primaryKey(),
+	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
+	name: text("name").notNull(),
+	slug: text("slug").notNull(),
+	description: text("description"),
+	defaultMemberRole: text("default_member_role").notNull().$type().default("builder"),
+	invitePermission: text("invite_permission").notNull().$type().default("admin"),
+	createdByUserId: text("created_by_user_id").references(() => users.id, { onDelete: "set null" }),
+	status: projectStatusEnum("status").notNull(),
+	baseUrl: text("base_url"),
+	runtimeId: text("runtime_id"),
+	activeArtifactId: text("active_artifact_id"),
+	pendingArtifactId: text("pending_artifact_id"),
+	lastError: text("last_error"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	deletedAt: timestamp("deleted_at", { withTimezone: true })
+}, (table) => [index("projects_organization_id_idx").on(table.organizationId), uniqueIndex("projects_organization_slug_unique").on(table.organizationId, table.slug).where(sql`${table.deletedAt} IS NULL`)]);
+const projectsSqlite = sqliteTable("projects", {
+	id: text$1("id").primaryKey(),
+	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
+	name: text$1("name").notNull(),
+	slug: text$1("slug").notNull(),
+	description: text$1("description"),
+	defaultMemberRole: text$1("default_member_role").notNull().$type().default("builder"),
+	invitePermission: text$1("invite_permission").notNull().$type().default("admin"),
+	createdByUserId: text$1("created_by_user_id").references(() => usersSqlite.id, { onDelete: "set null" }),
+	status: text$1("status").$type().notNull(),
+	baseUrl: text$1("base_url"),
+	runtimeId: text$1("runtime_id"),
+	activeArtifactId: text$1("active_artifact_id"),
+	pendingArtifactId: text$1("pending_artifact_id"),
+	lastError: text$1("last_error"),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
+}, (table) => [index$1("projects_organization_id_idx").on(table.organizationId), uniqueIndex$1("projects_organization_slug_unique").on(table.organizationId, table.slug).where(sql`${table.deletedAt} IS NULL`)]);
+const projectArtifactStatusEnum = pgEnum("project_artifact_status", ["pending", "ready"]);
+const projectArtifacts = pgTable("project_artifacts", {
+	id: text("id").primaryKey(),
+	projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+	storageKey: text("storage_key").notNull(),
+	manifestJson: jsonb("manifest_json"),
+	sourceManifestJson: jsonb("source_manifest_json"),
+	version: integer("version").notNull(),
+	createdByUserId: text("created_by_user_id").references(() => users.id, { onDelete: "set null" }),
+	status: projectArtifactStatusEnum("status").notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [index("project_artifacts_project_id_idx").on(table.projectId)]);
+const projectArtifactsSqlite = sqliteTable("project_artifacts", {
+	id: text$1("id").primaryKey(),
+	projectId: text$1("project_id").notNull().references(() => projectsSqlite.id, { onDelete: "cascade" }),
+	storageKey: text$1("storage_key").notNull(),
+	manifestJson: text$1("manifest_json", { mode: "json" }),
+	sourceManifestJson: text$1("source_manifest_json", { mode: "json" }),
+	version: integer$1("version").notNull(),
+	createdByUserId: text$1("created_by_user_id").references(() => usersSqlite.id, { onDelete: "set null" }),
+	status: text$1("status").$type().notNull(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [index$1("project_artifacts_project_id_idx").on(table.projectId)]);
+const projectUsers = pgTable("project_users", {
+	projectId: text("project_id").notNull().references(() => projects.id, { onDelete: "cascade" }),
+	userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+	role: text("role").notNull().$type(),
+	status: text("status").notNull().$type().default("active"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+	deletedAt: timestamp("deleted_at", { withTimezone: true })
+}, (table) => [primaryKey({ columns: [table.projectId, table.userId] }), index("project_users_user_id_idx").on(table.userId)]);
+const projectUsersSqlite = sqliteTable("project_users", {
+	projectId: text$1("project_id").notNull().references(() => projectsSqlite.id, { onDelete: "cascade" }),
+	userId: text$1("user_id").notNull().references(() => usersSqlite.id, { onDelete: "cascade" }),
+	role: text$1("role").notNull().$type(),
+	status: text$1("status").notNull().$type().default("active"),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull(),
+	deletedAt: integer$1("deleted_at", { mode: "timestamp_ms" })
+}, (table) => [primaryKey$1({ columns: [table.projectId, table.userId] }), index$1("project_users_user_id_idx").on(table.userId)]);
+const secretValues = pgTable("secret_values", {
+	id: text("id").primaryKey(),
+	organizationId: text("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
+	refKind: text("ref_kind").$type().notNull(),
+	refId: text("ref_id").notNull(),
+	field: text("field").$type().notNull(),
+	ciphertext: text("ciphertext").notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull()
+}, (table) => [uniqueIndex("secret_values_ref_unique").on(table.organizationId, table.refKind, table.refId, table.field)]);
+const secretValuesSqlite = sqliteTable("secret_values", {
+	id: text$1("id").primaryKey(),
+	organizationId: text$1("organization_id").notNull().references(() => organizationsSqlite.id, { onDelete: "cascade" }),
+	refKind: text$1("ref_kind").$type().notNull(),
+	refId: text$1("ref_id").notNull(),
+	field: text$1("field").$type().notNull(),
+	ciphertext: text$1("ciphertext").notNull(),
+	createdAt: integer$1("created_at", { mode: "timestamp_ms" }).notNull(),
+	updatedAt: integer$1("updated_at", { mode: "timestamp_ms" }).notNull()
+}, (table) => [uniqueIndex$1("secret_values_ref_unique").on(table.organizationId, table.refKind, table.refId, table.field)]);
+/**
+* Platform control-plane tables — Postgres (hosted) or SQLite (local dev).
+*/
+const tableRegistry = {
+	organizations: {
+		pg: organizations,
+		sqlite: organizationsSqlite
+	},
+	organizationUsers: {
+		pg: organizationUsers,
+		sqlite: organizationUsersSqlite
+	},
+	organizationInvitations: {
+		pg: organizationInvitations,
+		sqlite: organizationInvitationsSqlite
+	},
+	projects: {
+		pg: projects,
+		sqlite: projectsSqlite
+	},
+	projectUsers: {
+		pg: projectUsers,
+		sqlite: projectUsersSqlite
+	},
+	projectArtifacts: {
+		pg: projectArtifacts,
+		sqlite: projectArtifactsSqlite
+	},
+	users: {
+		pg: users,
+		sqlite: usersSqlite
+	},
+	authSessions: {
+		pg: authSessions,
+		sqlite: authSessionsSqlite
+	},
+	authAccounts: {
+		pg: authAccounts,
+		sqlite: authAccountsSqlite
+	},
+	authVerifications: {
+		pg: authVerifications,
+		sqlite: authVerificationsSqlite
+	},
+	authDeviceCodes: {
+		pg: authDeviceCodes,
+		sqlite: authDeviceCodesSqlite
+	},
+	authJwks: {
+		pg: authJwks,
+		sqlite: authJwksSqlite
+	},
+	authApiKeys: {
+		pg: authApiKeys,
+		sqlite: authApiKeysSqlite
+	},
+	apps: {
+		pg: apps,
+		sqlite: appsSqlite
+	},
+	oauthApps: {
+		pg: oauthApps,
+		sqlite: oauthAppsSqlite
+	},
+	oauthConnections: {
+		pg: oauthConnections,
+		sqlite: oauthConnectionsSqlite
+	},
+	mcpOauthClient: {
+		pg: mcpOauthClient,
+		sqlite: mcpOauthClientSqlite
+	},
+	mcpOauthAccessToken: {
+		pg: mcpOauthAccessToken,
+		sqlite: mcpOauthAccessTokenSqlite
+	},
+	mcpOauthConsent: {
+		pg: mcpOauthConsent,
+		sqlite: mcpOauthConsentSqlite
+	},
+	secretValues: {
+		pg: secretValues,
+		sqlite: secretValuesSqlite
+	}
+};
+buildPgSchema(tableRegistry);
+buildSqliteSchema(tableRegistry);
+new AsyncLocalStorage();
+new AsyncLocalStorage();
 //#endregion
 //#region ../../node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -17561,246 +17230,1030 @@ var require_parser = /* @__PURE__ */ __commonJSMin(((exports) => {
 				} else yield* this.lineEnd(fc);
 			}
 		}
-		flowScalar(type) {
-			if (this.onNewLine) {
-				let nl = this.source.indexOf("\n") + 1;
-				while (nl !== 0) {
-					this.onNewLine(this.offset + nl);
-					nl = this.source.indexOf("\n", nl) + 1;
-				}
-			}
-			return {
-				type,
-				offset: this.offset,
-				indent: this.indent,
-				source: this.source
-			};
+		flowScalar(type) {
+			if (this.onNewLine) {
+				let nl = this.source.indexOf("\n") + 1;
+				while (nl !== 0) {
+					this.onNewLine(this.offset + nl);
+					nl = this.source.indexOf("\n", nl) + 1;
+				}
+			}
+			return {
+				type,
+				offset: this.offset,
+				indent: this.indent,
+				source: this.source
+			};
+		}
+		startBlockValue(parent) {
+			switch (this.type) {
+				case "alias":
+				case "scalar":
+				case "single-quoted-scalar":
+				case "double-quoted-scalar": return this.flowScalar(this.type);
+				case "block-scalar-header": return {
+					type: "block-scalar",
+					offset: this.offset,
+					indent: this.indent,
+					props: [this.sourceToken],
+					source: ""
+				};
+				case "flow-map-start":
+				case "flow-seq-start": return {
+					type: "flow-collection",
+					offset: this.offset,
+					indent: this.indent,
+					start: this.sourceToken,
+					items: [],
+					end: []
+				};
+				case "seq-item-ind": return {
+					type: "block-seq",
+					offset: this.offset,
+					indent: this.indent,
+					items: [{ start: [this.sourceToken] }]
+				};
+				case "explicit-key-ind": {
+					this.onKeyLine = true;
+					const start = getFirstKeyStartProps(getPrevProps(parent));
+					start.push(this.sourceToken);
+					return {
+						type: "block-map",
+						offset: this.offset,
+						indent: this.indent,
+						items: [{
+							start,
+							explicitKey: true
+						}]
+					};
+				}
+				case "map-value-ind": {
+					this.onKeyLine = true;
+					const start = getFirstKeyStartProps(getPrevProps(parent));
+					return {
+						type: "block-map",
+						offset: this.offset,
+						indent: this.indent,
+						items: [{
+							start,
+							key: null,
+							sep: [this.sourceToken]
+						}]
+					};
+				}
+			}
+			return null;
+		}
+		atIndentedComment(start, indent) {
+			if (this.type !== "comment") return false;
+			if (this.indent <= indent) return false;
+			return start.every((st) => st.type === "newline" || st.type === "space");
+		}
+		*documentEnd(docEnd) {
+			if (this.type !== "doc-mode") {
+				if (docEnd.end) docEnd.end.push(this.sourceToken);
+				else docEnd.end = [this.sourceToken];
+				if (this.type === "newline") yield* this.pop();
+			}
+		}
+		*lineEnd(token) {
+			switch (this.type) {
+				case "comma":
+				case "doc-start":
+				case "doc-end":
+				case "flow-seq-end":
+				case "flow-map-end":
+				case "map-value-ind":
+					yield* this.pop();
+					yield* this.step();
+					break;
+				case "newline": this.onKeyLine = false;
+				default:
+					if (token.end) token.end.push(this.sourceToken);
+					else token.end = [this.sourceToken];
+					if (this.type === "newline") yield* this.pop();
+			}
+		}
+	};
+	exports.Parser = Parser;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/public-api.js
+var require_public_api = /* @__PURE__ */ __commonJSMin(((exports) => {
+	var composer = require_composer();
+	var Document = require_Document();
+	var errors = require_errors();
+	var log = require_log();
+	var identity = require_identity();
+	var lineCounter = require_line_counter();
+	var parser = require_parser();
+	function parseOptions(options) {
+		const prettyErrors = options.prettyErrors !== false;
+		return {
+			lineCounter: options.lineCounter || prettyErrors && new lineCounter.LineCounter() || null,
+			prettyErrors
+		};
+	}
+	/**
+	* Parse the input as a stream of YAML documents.
+	*
+	* Documents should be separated from each other by `...` or `---` marker lines.
+	*
+	* @returns If an empty `docs` array is returned, it will be of type
+	*   EmptyStream and contain additional stream information. In
+	*   TypeScript, you should use `'empty' in docs` as a type guard for it.
+	*/
+	function parseAllDocuments(source, options = {}) {
+		const { lineCounter, prettyErrors } = parseOptions(options);
+		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
+		const composer$1 = new composer.Composer(options);
+		const docs = Array.from(composer$1.compose(parser$1.parse(source)));
+		if (prettyErrors && lineCounter) for (const doc of docs) {
+			doc.errors.forEach(errors.prettifyError(source, lineCounter));
+			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
+		}
+		if (docs.length > 0) return docs;
+		return Object.assign([], { empty: true }, composer$1.streamInfo());
+	}
+	/** Parse an input string into a single YAML.Document */
+	function parseDocument(source, options = {}) {
+		const { lineCounter, prettyErrors } = parseOptions(options);
+		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
+		const composer$1 = new composer.Composer(options);
+		let doc = null;
+		for (const _doc of composer$1.compose(parser$1.parse(source), true, source.length)) if (!doc) doc = _doc;
+		else if (doc.options.logLevel !== "silent") {
+			doc.errors.push(new errors.YAMLParseError(_doc.range.slice(0, 2), "MULTIPLE_DOCS", "Source contains multiple documents; please use YAML.parseAllDocuments()"));
+			break;
 		}
-		startBlockValue(parent) {
-			switch (this.type) {
-				case "alias":
-				case "scalar":
-				case "single-quoted-scalar":
-				case "double-quoted-scalar": return this.flowScalar(this.type);
-				case "block-scalar-header": return {
-					type: "block-scalar",
-					offset: this.offset,
-					indent: this.indent,
-					props: [this.sourceToken],
-					source: ""
-				};
-				case "flow-map-start":
-				case "flow-seq-start": return {
-					type: "flow-collection",
-					offset: this.offset,
-					indent: this.indent,
-					start: this.sourceToken,
-					items: [],
-					end: []
+		if (prettyErrors && lineCounter) {
+			doc.errors.forEach(errors.prettifyError(source, lineCounter));
+			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
+		}
+		return doc;
+	}
+	function parse(src, reviver, options) {
+		let _reviver = void 0;
+		if (typeof reviver === "function") _reviver = reviver;
+		else if (options === void 0 && reviver && typeof reviver === "object") options = reviver;
+		const doc = parseDocument(src, options);
+		if (!doc) return null;
+		doc.warnings.forEach((warning) => log.warn(doc.options.logLevel, warning));
+		if (doc.errors.length > 0) if (doc.options.logLevel !== "silent") throw doc.errors[0];
+		else doc.errors = [];
+		return doc.toJS(Object.assign({ reviver: _reviver }, options));
+	}
+	function stringify(value, replacer, options) {
+		let _replacer = null;
+		if (typeof replacer === "function" || Array.isArray(replacer)) _replacer = replacer;
+		else if (options === void 0 && replacer) options = replacer;
+		if (typeof options === "string") options = options.length;
+		if (typeof options === "number") {
+			const indent = Math.round(options);
+			options = indent < 1 ? void 0 : indent > 8 ? { indent: 8 } : { indent };
+		}
+		if (value === void 0) {
+			const { keepUndefined } = options ?? replacer ?? {};
+			if (!keepUndefined) return void 0;
+		}
+		if (identity.isDocument(value) && !_replacer) return value.toString(options);
+		return new Document.Document(value, _replacer, options).toString(options);
+	}
+	exports.parse = parse;
+	exports.parseAllDocuments = parseAllDocuments;
+	exports.parseDocument = parseDocument;
+	exports.stringify = stringify;
+}));
+(/* @__PURE__ */ __commonJSMin(((exports) => {
+	var composer = require_composer();
+	var Document = require_Document();
+	var Schema = require_Schema();
+	var errors = require_errors();
+	var Alias = require_Alias();
+	var identity = require_identity();
+	var Pair = require_Pair();
+	var Scalar = require_Scalar();
+	var YAMLMap = require_YAMLMap();
+	var YAMLSeq = require_YAMLSeq();
+	require_cst();
+	var lexer = require_lexer();
+	var lineCounter = require_line_counter();
+	var parser = require_parser();
+	var publicApi = require_public_api();
+	var visit = require_visit();
+	exports.Composer = composer.Composer;
+	exports.Document = Document.Document;
+	exports.Schema = Schema.Schema;
+	exports.YAMLError = errors.YAMLError;
+	exports.YAMLParseError = errors.YAMLParseError;
+	exports.YAMLWarning = errors.YAMLWarning;
+	exports.Alias = Alias.Alias;
+	exports.isAlias = identity.isAlias;
+	exports.isCollection = identity.isCollection;
+	exports.isDocument = identity.isDocument;
+	exports.isMap = identity.isMap;
+	exports.isNode = identity.isNode;
+	exports.isPair = identity.isPair;
+	exports.isScalar = identity.isScalar;
+	exports.isSeq = identity.isSeq;
+	exports.Pair = Pair.Pair;
+	exports.Scalar = Scalar.Scalar;
+	exports.YAMLMap = YAMLMap.YAMLMap;
+	exports.YAMLSeq = YAMLSeq.YAMLSeq;
+	exports.Lexer = lexer.Lexer;
+	exports.LineCounter = lineCounter.LineCounter;
+	exports.Parser = parser.Parser;
+	exports.parse = publicApi.parse;
+	exports.parseAllDocuments = publicApi.parseAllDocuments;
+	exports.parseDocument = publicApi.parseDocument;
+	exports.stringify = publicApi.stringify;
+	exports.visit = visit.visit;
+	exports.visitAsync = visit.visitAsync;
+})))();
+//#endregion
+//#region ../../packages/memory/dist/index.mjs
+const memoryPathSchema = string().describe("Relative path under the memory dir (e.g. MEMORY.md, USER.md, archive/note.md).");
+const searchScopeSchema = _enum([
+	"archive",
+	"sessions",
+	"all"
+]).describe("Where to look: all (default) = archive/*.md plus every saved session transcript across all past chats; archive = long-form notes only; sessions = all past session transcripts only. USER.md and MEMORY.md are in the system snapshot — use read for those.");
+const searchQuerySchema = string().describe("Keywords to find across archive notes and/or all past session transcripts. Plain words, case-insensitive; multiple words match if ANY word appears. Use when the user references an earlier chat or prior decision. Returns ranked snippets — use read on a hit path for the full file.");
+object({
+	action: _enum([
+		"list",
+		"read",
+		"write",
+		"edit",
+		"search"
+	]).describe("list: archive/*.md filenames; read: { path }; write: { path, content }; edit: { path, oldText, newText }; search: { query, scope?, limit?, full? }."),
+	path: memoryPathSchema.optional(),
+	content: string().describe("Full file content (write).").optional(),
+	oldText: string().describe("Exact text to replace, first match (edit).").optional(),
+	newText: string().describe("Replacement text; empty string deletes oldText (edit).").optional(),
+	query: searchQuerySchema.optional(),
+	scope: searchScopeSchema.optional(),
+	limit: number().int().min(1).max(50).optional(),
+	full: boolean$1().describe("When true, return complete archive note files for archive hits, ignored for session hits (search).").optional()
+});
+new AsyncLocalStorage();
+[
+	"You are an expert chat title generator.",
+	"",
+	"Given the conversation so far (initial user message), generate a short, clear, and natural title (max 6-8 words) that captures the main topic or goal.",
+	"",
+	"Rules:",
+	"- Be specific and descriptive; avoid vague titles like \"Conversation\" or \"Question\"",
+	"- Prefer action-oriented or outcome-focused phrasing when possible",
+	"- Use title case",
+	"- Keep it under 65 characters when possible",
+	"- Do not use quotes or emojis",
+	"- Return ONLY the title, nothing else",
+	"",
+	"Examples:",
+	"",
+	"User: How do I set up a new Next.js project with TypeScript?",
+	"→ Setting Up Next.js Project with TypeScript",
+	"",
+	"User: Help me debug this React hook that's causing infinite re-renders. Here's the code...",
+	"→ Debugging Infinite Re-render in React Hook",
+	"",
+	"User: Write a cold email sequence for fundraising from YC alums",
+	"→ YC Alumni Fundraising Cold Email Sequence"
+].join("\n");
+const STATIC_MODEL_IDS = new Set([
+	"alibaba/qwen-3-14b",
+	"alibaba/qwen-3-235b",
+	"alibaba/qwen-3-30b",
+	"alibaba/qwen-3-32b",
+	"alibaba/qwen-3.6-max-preview",
+	"alibaba/qwen3-235b-a22b-thinking",
+	"alibaba/qwen3-coder",
+	"alibaba/qwen3-coder-30b-a3b",
+	"alibaba/qwen3-coder-next",
+	"alibaba/qwen3-coder-plus",
+	"alibaba/qwen3-embedding-0.6b",
+	"alibaba/qwen3-embedding-4b",
+	"alibaba/qwen3-embedding-8b",
+	"alibaba/qwen3-max",
+	"alibaba/qwen3-max-preview",
+	"alibaba/qwen3-max-thinking",
+	"alibaba/qwen3-next-80b-a3b-instruct",
+	"alibaba/qwen3-next-80b-a3b-thinking",
+	"alibaba/qwen3-vl-235b-a22b-instruct",
+	"alibaba/qwen3-vl-instruct",
+	"alibaba/qwen3-vl-thinking",
+	"alibaba/qwen3.5-flash",
+	"alibaba/qwen3.5-plus",
+	"alibaba/qwen3.6-27b",
+	"alibaba/qwen3.6-plus",
+	"alibaba/qwen3.7-max",
+	"alibaba/qwen3.7-plus",
+	"alibaba/wan-v2.5-t2v-preview",
+	"alibaba/wan-v2.6-i2v",
+	"alibaba/wan-v2.6-i2v-flash",
+	"alibaba/wan-v2.6-r2v",
+	"alibaba/wan-v2.6-r2v-flash",
+	"alibaba/wan-v2.6-t2v",
+	"amazon/nova-2-lite",
+	"amazon/nova-lite",
+	"amazon/nova-micro",
+	"amazon/nova-pro",
+	"amazon/titan-embed-text-v2",
+	"anthropic/claude-3-haiku",
+	"anthropic/claude-3.5-haiku",
+	"anthropic/claude-haiku-4.5",
+	"anthropic/claude-opus-4",
+	"anthropic/claude-opus-4.1",
+	"anthropic/claude-opus-4.5",
+	"anthropic/claude-opus-4.6",
+	"anthropic/claude-opus-4.7",
+	"anthropic/claude-opus-4.8",
+	"anthropic/claude-sonnet-4",
+	"anthropic/claude-sonnet-4.5",
+	"anthropic/claude-sonnet-4.6",
+	"arcee-ai/trinity-large-preview",
+	"arcee-ai/trinity-large-thinking",
+	"arcee-ai/trinity-mini",
+	"bfl/flux-2-flex",
+	"bfl/flux-2-klein-4b",
+	"bfl/flux-2-klein-9b",
+	"bfl/flux-2-max",
+	"bfl/flux-2-pro",
+	"bfl/flux-kontext-max",
+	"bfl/flux-kontext-pro",
+	"bfl/flux-pro-1.0-fill",
+	"bfl/flux-pro-1.1",
+	"bfl/flux-pro-1.1-ultra",
+	"bytedance/seed-1.6",
+	"bytedance/seed-1.8",
+	"bytedance/seedance-2.0",
+	"bytedance/seedance-2.0-fast",
+	"bytedance/seedance-v1.0-pro",
+	"bytedance/seedance-v1.0-pro-fast",
+	"bytedance/seedance-v1.5-pro",
+	"bytedance/seedream-4.0",
+	"bytedance/seedream-4.5",
+	"bytedance/seedream-5.0-lite",
+	"cohere/command-a",
+	"cohere/embed-v4.0",
+	"cohere/rerank-v3.5",
+	"cohere/rerank-v4-fast",
+	"cohere/rerank-v4-pro",
+	"deepseek/deepseek-r1",
+	"deepseek/deepseek-v3",
+	"deepseek/deepseek-v3.1",
+	"deepseek/deepseek-v3.1-terminus",
+	"deepseek/deepseek-v3.2",
+	"deepseek/deepseek-v3.2-thinking",
+	"deepseek/deepseek-v4-flash",
+	"deepseek/deepseek-v4-pro",
+	"google/gemini-2.5-flash",
+	"google/gemini-2.5-flash-image",
+	"google/gemini-2.5-flash-lite",
+	"google/gemini-2.5-pro",
+	"google/gemini-3-flash",
+	"google/gemini-3-pro-image",
+	"google/gemini-3-pro-preview",
+	"google/gemini-3.1-flash-image",
+	"google/gemini-3.1-flash-image-preview",
+	"google/gemini-3.1-flash-lite",
+	"google/gemini-3.1-flash-lite-image",
+	"google/gemini-3.1-flash-lite-preview",
+	"google/gemini-3.1-pro-preview",
+	"google/gemini-3.5-flash",
+	"google/gemini-embedding-001",
+	"google/gemini-embedding-2",
+	"google/gemma-4-26b-a4b-it",
+	"google/gemma-4-31b-it",
+	"google/imagen-4.0-fast-generate-001",
+	"google/imagen-4.0-generate-001",
+	"google/imagen-4.0-ultra-generate-001",
+	"google/text-embedding-005",
+	"google/text-multilingual-embedding-002",
+	"google/veo-3.0-fast-generate-001",
+	"google/veo-3.0-generate-001",
+	"google/veo-3.1-fast-generate-001",
+	"google/veo-3.1-generate-001",
+	"inception/mercury-2",
+	"inception/mercury-coder-small",
+	"interfaze/interfaze-beta",
+	"klingai/kling-v2.5-turbo-i2v",
+	"klingai/kling-v2.5-turbo-t2v",
+	"klingai/kling-v2.6-i2v",
+	"klingai/kling-v2.6-motion-control",
+	"klingai/kling-v2.6-t2v",
+	"klingai/kling-v3.0-i2v",
+	"klingai/kling-v3.0-motion-control",
+	"klingai/kling-v3.0-t2v",
+	"kwaipilot/kat-coder-pro-v1",
+	"kwaipilot/kat-coder-pro-v2",
+	"meituan/longcat-flash-chat",
+	"meituan/longcat-flash-thinking-2601",
+	"meta/llama-3.1-70b",
+	"meta/llama-3.1-8b",
+	"meta/llama-3.2-11b",
+	"meta/llama-3.2-1b",
+	"meta/llama-3.2-3b",
+	"meta/llama-3.2-90b",
+	"meta/llama-3.3-70b",
+	"meta/llama-4-maverick",
+	"meta/llama-4-scout",
+	"minimax/minimax-m2",
+	"minimax/minimax-m2.1",
+	"minimax/minimax-m2.1-lightning",
+	"minimax/minimax-m2.5",
+	"minimax/minimax-m2.5-highspeed",
+	"minimax/minimax-m2.7",
+	"minimax/minimax-m2.7-highspeed",
+	"minimax/minimax-m3",
+	"mistral/codestral",
+	"mistral/codestral-embed",
+	"mistral/devstral-2",
+	"mistral/devstral-small",
+	"mistral/devstral-small-2",
+	"mistral/magistral-medium",
+	"mistral/magistral-small",
+	"mistral/ministral-14b",
+	"mistral/ministral-3b",
+	"mistral/ministral-8b",
+	"mistral/mistral-embed",
+	"mistral/mistral-large-3",
+	"mistral/mistral-medium",
+	"mistral/mistral-medium-3.5",
+	"mistral/mistral-nemo",
+	"mistral/mistral-small",
+	"mistral/pixtral-12b",
+	"mistral/pixtral-large",
+	"moonshotai/kimi-k2",
+	"moonshotai/kimi-k2-thinking",
+	"moonshotai/kimi-k2.5",
+	"moonshotai/kimi-k2.6",
+	"moonshotai/kimi-k2.7-code",
+	"moonshotai/kimi-k2.7-code-highspeed",
+	"morph/morph-v3-fast",
+	"morph/morph-v3-large",
+	"nvidia/nemotron-3-nano-30b-a3b",
+	"nvidia/nemotron-3-super-120b-a12b",
+	"nvidia/nemotron-3-ultra-550b-a55b",
+	"nvidia/nemotron-nano-12b-v2-vl",
+	"nvidia/nemotron-nano-9b-v2",
+	"openai/gpt-3.5-turbo",
+	"openai/gpt-3.5-turbo-instruct",
+	"openai/gpt-4-turbo",
+	"openai/gpt-4.1",
+	"openai/gpt-4.1-mini",
+	"openai/gpt-4.1-nano",
+	"openai/gpt-4o",
+	"openai/gpt-4o-mini",
+	"openai/gpt-4o-mini-search-preview",
+	"openai/gpt-4o-mini-transcribe",
+	"openai/gpt-4o-transcribe",
+	"openai/gpt-5",
+	"openai/gpt-5-chat",
+	"openai/gpt-5-codex",
+	"openai/gpt-5-mini",
+	"openai/gpt-5-nano",
+	"openai/gpt-5-pro",
+	"openai/gpt-5.1-codex",
+	"openai/gpt-5.1-codex-max",
+	"openai/gpt-5.1-codex-mini",
+	"openai/gpt-5.1-instant",
+	"openai/gpt-5.1-thinking",
+	"openai/gpt-5.2",
+	"openai/gpt-5.2-chat",
+	"openai/gpt-5.2-codex",
+	"openai/gpt-5.2-pro",
+	"openai/gpt-5.3-chat",
+	"openai/gpt-5.3-codex",
+	"openai/gpt-5.4",
+	"openai/gpt-5.4-mini",
+	"openai/gpt-5.4-nano",
+	"openai/gpt-5.4-pro",
+	"openai/gpt-5.5",
+	"openai/gpt-5.5-pro",
+	"openai/gpt-image-1",
+	"openai/gpt-image-1-mini",
+	"openai/gpt-image-1.5",
+	"openai/gpt-image-2",
+	"openai/gpt-oss-120b",
+	"openai/gpt-oss-20b",
+	"openai/gpt-oss-safeguard-20b",
+	"openai/gpt-realtime-1.5",
+	"openai/gpt-realtime-2",
+	"openai/gpt-realtime-mini",
+	"openai/o1",
+	"openai/o3",
+	"openai/o3-deep-research",
+	"openai/o3-mini",
+	"openai/o3-pro",
+	"openai/o4-mini",
+	"openai/text-embedding-3-large",
+	"openai/text-embedding-3-small",
+	"openai/text-embedding-ada-002",
+	"openai/tts-1",
+	"openai/tts-1-hd",
+	"openai/whisper-1",
+	"perplexity/sonar",
+	"perplexity/sonar-pro",
+	"perplexity/sonar-reasoning-pro",
+	"prodia/flux-fast-schnell",
+	"quiverai/arrow-1.1",
+	"recraft/recraft-v2",
+	"recraft/recraft-v3",
+	"recraft/recraft-v4",
+	"recraft/recraft-v4-pro",
+	"recraft/recraft-v4.1",
+	"recraft/recraft-v4.1-pro",
+	"recraft/recraft-v4.1-utility",
+	"recraft/recraft-v4.1-utility-pro",
+	"sakana/fugu-ultra",
+	"stepfun/step-3.5-flash",
+	"stepfun/step-3.7-flash",
+	"voyage/rerank-2.5",
+	"voyage/rerank-2.5-lite",
+	"voyage/voyage-3-large",
+	"voyage/voyage-3.5",
+	"voyage/voyage-3.5-lite",
+	"voyage/voyage-4",
+	"voyage/voyage-4-large",
+	"voyage/voyage-4-lite",
+	"voyage/voyage-code-2",
+	"voyage/voyage-code-3",
+	"voyage/voyage-finance-2",
+	"voyage/voyage-law-2",
+	"xai/grok-4.1-fast-non-reasoning",
+	"xai/grok-4.1-fast-reasoning",
+	"xai/grok-4.20-multi-agent",
+	"xai/grok-4.20-multi-agent-beta",
+	"xai/grok-4.20-non-reasoning",
+	"xai/grok-4.20-non-reasoning-beta",
+	"xai/grok-4.20-reasoning",
+	"xai/grok-4.20-reasoning-beta",
+	"xai/grok-4.3",
+	"xai/grok-build-0.1",
+	"xai/grok-imagine-image",
+	"xai/grok-imagine-video",
+	"xai/grok-imagine-video-1.5",
+	"xai/grok-imagine-video-1.5-preview",
+	"xai/grok-stt",
+	"xai/grok-tts",
+	"xai/grok-voice-think-fast-1.0",
+	"xiaomi/mimo-v2-flash",
+	"xiaomi/mimo-v2-pro",
+	"xiaomi/mimo-v2.5",
+	"xiaomi/mimo-v2.5-pro",
+	"zai/glm-4.5",
+	"zai/glm-4.5-air",
+	"zai/glm-4.5v",
+	"zai/glm-4.6",
+	"zai/glm-4.6v",
+	"zai/glm-4.6v-flash",
+	"zai/glm-4.7",
+	"zai/glm-4.7-flash",
+	"zai/glm-4.7-flashx",
+	"zai/glm-5",
+	"zai/glm-5-turbo",
+	"zai/glm-5.1",
+	"zai/glm-5.2",
+	"zai/glm-5.2-fast",
+	"zai/glm-5v-turbo"
+]);
+let cachedModelIds;
+let pendingModelIds;
+function resolvePlatformOriginForModelCatalog() {
+	const fromKeystroke = process.env.KEYSTROKE_PLATFORM_URL?.trim();
+	if (fromKeystroke) return fromKeystroke.replace(/\/+$/, "");
+	const fromPlatform = process.env.PLATFORM_URL?.trim();
+	if (fromPlatform) return fromPlatform.replace(/\/+$/, "");
+	return DEFAULT_CLOUD_PLATFORM_ORIGIN;
+}
+async function fetchPublicModelIds() {
+	if (cachedModelIds) return cachedModelIds;
+	if (pendingModelIds) return pendingModelIds;
+	const platformOrigin = resolvePlatformOriginForModelCatalog();
+	pendingModelIds = (async () => {
+		try {
+			const response = await fetch(`${platformOrigin}/api/public/models`, { headers: { accept: "application/json" } });
+			if (!response.ok) throw new Error(`Failed to fetch public model catalog (${response.status})`);
+			const parsed = PublicModelsResponseSchema.safeParse(await response.json());
+			if (!parsed.success || parsed.data.models.length === 0) throw new Error("Public model catalog response had no models");
+			cachedModelIds = new Set(parsed.data.models);
+			return cachedModelIds;
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			console.warn(`Skipping agent model validation: ${message}`);
+			return;
+		} finally {
+			pendingModelIds = void 0;
+		}
+	})();
+	return pendingModelIds;
+}
+/**
+* Fail when any model id is unknown. Checks the committed catalog first (fast,
+* offline) and only fetches the live catalog to confirm misses — so newly added
+* gateway models still validate without a per-build network round-trip.
+*/
+async function validateAgentModelIds(modelIds) {
+	const missingFromStatic = [...new Set(modelIds)].filter((id) => !STATIC_MODEL_IDS.has(id));
+	if (missingFromStatic.length === 0) return;
+	const live = await fetchPublicModelIds();
+	if (!live) return;
+	const unknown = missingFromStatic.filter((id) => !live.has(id));
+	if (unknown.length === 0) return;
+	throw new Error(unknown.length === 1 ? `Unknown gateway model: ${unknown[0]}` : `Unknown gateway models: ${unknown.join(", ")}`);
+}
+//#endregion
+//#region ../../node_modules/.pnpm/cron-schedule@6.0.0/node_modules/cron-schedule/dist/utils.js
+function extractDateElements(date) {
+	return {
+		second: date.getSeconds(),
+		minute: date.getMinutes(),
+		hour: date.getHours(),
+		day: date.getDate(),
+		month: date.getMonth(),
+		weekday: date.getDay(),
+		year: date.getFullYear()
+	};
+}
+function getDaysInMonth(year, month) {
+	return new Date(year, month + 1, 0).getDate();
+}
+function getDaysBetweenWeekdays(weekday1, weekday2) {
+	if (weekday1 <= weekday2) return weekday2 - weekday1;
+	return 6 - weekday1 + weekday2 + 1;
+}
+//#endregion
+//#region ../../node_modules/.pnpm/cron-schedule@6.0.0/node_modules/cron-schedule/dist/cron.js
+var Cron = class {
+	constructor({ seconds, minutes, hours, days, months, weekdays }) {
+		if (!seconds || seconds.size === 0) throw new Error("There must be at least one allowed second.");
+		if (!minutes || minutes.size === 0) throw new Error("There must be at least one allowed minute.");
+		if (!hours || hours.size === 0) throw new Error("There must be at least one allowed hour.");
+		if (!months || months.size === 0) throw new Error("There must be at least one allowed month.");
+		if ((!weekdays || weekdays.size === 0) && (!days || days.size === 0)) throw new Error("There must be at least one allowed day or weekday.");
+		this.seconds = Array.from(seconds).sort((a, b) => a - b);
+		this.minutes = Array.from(minutes).sort((a, b) => a - b);
+		this.hours = Array.from(hours).sort((a, b) => a - b);
+		this.days = Array.from(days).sort((a, b) => a - b);
+		this.months = Array.from(months).sort((a, b) => a - b);
+		this.weekdays = Array.from(weekdays).sort((a, b) => a - b);
+		const validateData = (name, data, constraint) => {
+			if (data.some((x) => typeof x !== "number" || x % 1 !== 0 || x < constraint.min || x > constraint.max)) throw new Error(`${name} must only consist of integers which are within the range of ${constraint.min} and ${constraint.max}`);
+		};
+		validateData("seconds", this.seconds, {
+			min: 0,
+			max: 59
+		});
+		validateData("minutes", this.minutes, {
+			min: 0,
+			max: 59
+		});
+		validateData("hours", this.hours, {
+			min: 0,
+			max: 23
+		});
+		validateData("days", this.days, {
+			min: 1,
+			max: 31
+		});
+		validateData("months", this.months, {
+			min: 0,
+			max: 11
+		});
+		validateData("weekdays", this.weekdays, {
+			min: 0,
+			max: 6
+		});
+		this.reversed = {
+			seconds: this.seconds.map((x) => x).reverse(),
+			minutes: this.minutes.map((x) => x).reverse(),
+			hours: this.hours.map((x) => x).reverse(),
+			days: this.days.map((x) => x).reverse(),
+			months: this.months.map((x) => x).reverse(),
+			weekdays: this.weekdays.map((x) => x).reverse()
+		};
+	}
+	/**
+	* Find the next or previous hour, starting from the given start hour that matches the hour constraint.
+	* startHour itself might also be allowed.
+	*/
+	findAllowedHour(dir, startHour) {
+		return dir === "next" ? this.hours.find((x) => x >= startHour) : this.reversed.hours.find((x) => x <= startHour);
+	}
+	/**
+	* Find the next or previous minute, starting from the given start minute that matches the minute constraint.
+	* startMinute itself might also be allowed.
+	*/
+	findAllowedMinute(dir, startMinute) {
+		return dir === "next" ? this.minutes.find((x) => x >= startMinute) : this.reversed.minutes.find((x) => x <= startMinute);
+	}
+	/**
+	* Find the next or previous second, starting from the given start second that matches the second constraint.
+	* startSecond itself IS NOT allowed.
+	*/
+	findAllowedSecond(dir, startSecond) {
+		return dir === "next" ? this.seconds.find((x) => x > startSecond) : this.reversed.seconds.find((x) => x < startSecond);
+	}
+	/**
+	* Find the next or previous time, starting from the given start time that matches the hour, minute
+	* and second constraints. startTime itself might also be allowed.
+	*/
+	findAllowedTime(dir, startTime) {
+		let hour = this.findAllowedHour(dir, startTime.hour);
+		if (hour !== void 0) if (hour === startTime.hour) {
+			let minute = this.findAllowedMinute(dir, startTime.minute);
+			if (minute !== void 0) if (minute === startTime.minute) {
+				const second = this.findAllowedSecond(dir, startTime.second);
+				if (second !== void 0) return {
+					hour,
+					minute,
+					second
 				};
-				case "seq-item-ind": return {
-					type: "block-seq",
-					offset: this.offset,
-					indent: this.indent,
-					items: [{ start: [this.sourceToken] }]
+				minute = this.findAllowedMinute(dir, dir === "next" ? startTime.minute + 1 : startTime.minute - 1);
+				if (minute !== void 0) return {
+					hour,
+					minute,
+					second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
 				};
-				case "explicit-key-ind": {
-					this.onKeyLine = true;
-					const start = getFirstKeyStartProps(getPrevProps(parent));
-					start.push(this.sourceToken);
-					return {
-						type: "block-map",
-						offset: this.offset,
-						indent: this.indent,
-						items: [{
-							start,
-							explicitKey: true
-						}]
-					};
-				}
-				case "map-value-ind": {
-					this.onKeyLine = true;
-					const start = getFirstKeyStartProps(getPrevProps(parent));
-					return {
-						type: "block-map",
-						offset: this.offset,
-						indent: this.indent,
-						items: [{
-							start,
-							key: null,
-							sep: [this.sourceToken]
-						}]
-					};
-				}
+			} else return {
+				hour,
+				minute,
+				second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
+			};
+			hour = this.findAllowedHour(dir, dir === "next" ? startTime.hour + 1 : startTime.hour - 1);
+			if (hour !== void 0) return {
+				hour,
+				minute: dir === "next" ? this.minutes[0] : this.reversed.minutes[0],
+				second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
+			};
+		} else return {
+			hour,
+			minute: dir === "next" ? this.minutes[0] : this.reversed.minutes[0],
+			second: dir === "next" ? this.seconds[0] : this.reversed.seconds[0]
+		};
+	}
+	/**
+	* Find the next or previous day in the given month, starting from the given startDay
+	* that matches either the day or the weekday constraint. startDay itself might also be allowed.
+	*/
+	findAllowedDayInMonth(dir, year, month, startDay) {
+		var _a, _b;
+		if (startDay < 1) throw new Error("startDay must not be smaller than 1.");
+		const daysInMonth = getDaysInMonth(year, month);
+		const daysRestricted = this.days.length !== 31;
+		const weekdaysRestricted = this.weekdays.length !== 7;
+		if (!daysRestricted && !weekdaysRestricted) {
+			if (startDay > daysInMonth) return dir === "next" ? void 0 : daysInMonth;
+			return startDay;
+		}
+		let allowedDayByDays;
+		if (daysRestricted) {
+			allowedDayByDays = dir === "next" ? this.days.find((x) => x >= startDay) : this.reversed.days.find((x) => x <= startDay);
+			if (allowedDayByDays !== void 0 && allowedDayByDays > daysInMonth) allowedDayByDays = void 0;
+		}
+		let allowedDayByWeekdays;
+		if (weekdaysRestricted) {
+			const startWeekday = new Date(year, month, startDay).getDay();
+			const nearestAllowedWeekday = dir === "next" ? (_a = this.weekdays.find((x) => x >= startWeekday)) !== null && _a !== void 0 ? _a : this.weekdays[0] : (_b = this.reversed.weekdays.find((x) => x <= startWeekday)) !== null && _b !== void 0 ? _b : this.reversed.weekdays[0];
+			if (nearestAllowedWeekday !== void 0) {
+				const daysBetweenWeekdays = dir === "next" ? getDaysBetweenWeekdays(startWeekday, nearestAllowedWeekday) : getDaysBetweenWeekdays(nearestAllowedWeekday, startWeekday);
+				allowedDayByWeekdays = dir === "next" ? startDay + daysBetweenWeekdays : startDay - daysBetweenWeekdays;
+				if (allowedDayByWeekdays > daysInMonth || allowedDayByWeekdays < 1) allowedDayByWeekdays = void 0;
 			}
-			return null;
 		}
-		atIndentedComment(start, indent) {
-			if (this.type !== "comment") return false;
-			if (this.indent <= indent) return false;
-			return start.every((st) => st.type === "newline" || st.type === "space");
+		if (allowedDayByDays !== void 0 && allowedDayByWeekdays !== void 0) return dir === "next" ? Math.min(allowedDayByDays, allowedDayByWeekdays) : Math.max(allowedDayByDays, allowedDayByWeekdays);
+		if (allowedDayByDays !== void 0) return allowedDayByDays;
+		if (allowedDayByWeekdays !== void 0) return allowedDayByWeekdays;
+	}
+	/** Gets the next date starting from the given start date or now. */
+	getNextDate(startDate = /* @__PURE__ */ new Date()) {
+		const startDateElements = extractDateElements(startDate);
+		let minYear = startDateElements.year;
+		let startIndexMonth = this.months.findIndex((x) => x >= startDateElements.month);
+		if (startIndexMonth === -1) {
+			startIndexMonth = 0;
+			minYear++;
 		}
-		*documentEnd(docEnd) {
-			if (this.type !== "doc-mode") {
-				if (docEnd.end) docEnd.end.push(this.sourceToken);
-				else docEnd.end = [this.sourceToken];
-				if (this.type === "newline") yield* this.pop();
+		const maxIterations = this.months.length * 5;
+		for (let i = 0; i < maxIterations; i++) {
+			const year = minYear + Math.floor((startIndexMonth + i) / this.months.length);
+			const month = this.months[(startIndexMonth + i) % this.months.length];
+			const isStartMonth = year === startDateElements.year && month === startDateElements.month;
+			let day = this.findAllowedDayInMonth("next", year, month, isStartMonth ? startDateElements.day : 1);
+			let isStartDay = isStartMonth && day === startDateElements.day;
+			if (day !== void 0 && isStartDay) {
+				const nextTime = this.findAllowedTime("next", startDateElements);
+				if (nextTime !== void 0) return new Date(year, month, day, nextTime.hour, nextTime.minute, nextTime.second);
+				day = this.findAllowedDayInMonth("next", year, month, day + 1);
+				isStartDay = false;
 			}
+			if (day !== void 0 && !isStartDay) return new Date(year, month, day, this.hours[0], this.minutes[0], this.seconds[0]);
 		}
-		*lineEnd(token) {
-			switch (this.type) {
-				case "comma":
-				case "doc-start":
-				case "doc-end":
-				case "flow-seq-end":
-				case "flow-map-end":
-				case "map-value-ind":
-					yield* this.pop();
-					yield* this.step();
-					break;
-				case "newline": this.onKeyLine = false;
-				default:
-					if (token.end) token.end.push(this.sourceToken);
-					else token.end = [this.sourceToken];
-					if (this.type === "newline") yield* this.pop();
+		throw new Error("No valid next date was found.");
+	}
+	/** Gets the specified amount of future dates starting from the given start date or now. */
+	getNextDates(amount, startDate) {
+		const dates = [];
+		let nextDate;
+		for (let i = 0; i < amount; i++) {
+			nextDate = this.getNextDate(nextDate !== null && nextDate !== void 0 ? nextDate : startDate);
+			dates.push(nextDate);
+		}
+		return dates;
+	}
+	/**
+	* Get an ES6 compatible iterator which iterates over the next dates starting from startDate or now.
+	* The iterator runs until the optional endDate is reached or forever.
+	*/
+	*getNextDatesIterator(startDate, endDate) {
+		let nextDate;
+		while (true) {
+			nextDate = this.getNextDate(nextDate !== null && nextDate !== void 0 ? nextDate : startDate);
+			if (endDate && endDate.getTime() < nextDate.getTime()) return;
+			yield nextDate;
+		}
+	}
+	/** Gets the previous date starting from the given start date or now. */
+	getPrevDate(startDate = /* @__PURE__ */ new Date()) {
+		const startDateElements = extractDateElements(startDate);
+		let maxYear = startDateElements.year;
+		let startIndexMonth = this.reversed.months.findIndex((x) => x <= startDateElements.month);
+		if (startIndexMonth === -1) {
+			startIndexMonth = 0;
+			maxYear--;
+		}
+		const maxIterations = this.reversed.months.length * 5;
+		for (let i = 0; i < maxIterations; i++) {
+			const year = maxYear - Math.floor((startIndexMonth + i) / this.reversed.months.length);
+			const month = this.reversed.months[(startIndexMonth + i) % this.reversed.months.length];
+			const isStartMonth = year === startDateElements.year && month === startDateElements.month;
+			let day = this.findAllowedDayInMonth("prev", year, month, isStartMonth ? startDateElements.day : getDaysInMonth(year, month));
+			let isStartDay = isStartMonth && day === startDateElements.day;
+			if (day !== void 0 && isStartDay) {
+				const prevTime = this.findAllowedTime("prev", startDateElements);
+				if (prevTime !== void 0) return new Date(year, month, day, prevTime.hour, prevTime.minute, prevTime.second);
+				if (day > 1) {
+					day = this.findAllowedDayInMonth("prev", year, month, day - 1);
+					isStartDay = false;
+				}
 			}
+			if (day !== void 0 && !isStartDay) return new Date(year, month, day, this.reversed.hours[0], this.reversed.minutes[0], this.reversed.seconds[0]);
 		}
-	};
-	exports.Parser = Parser;
-}));
+		throw new Error("No valid previous date was found.");
+	}
+	/** Gets the specified amount of previous dates starting from the given start date or now. */
+	getPrevDates(amount, startDate) {
+		const dates = [];
+		let prevDate;
+		for (let i = 0; i < amount; i++) {
+			prevDate = this.getPrevDate(prevDate !== null && prevDate !== void 0 ? prevDate : startDate);
+			dates.push(prevDate);
+		}
+		return dates;
+	}
+	/**
+	* Get an ES6 compatible iterator which iterates over the previous dates starting from startDate or now.
+	* The iterator runs until the optional endDate is reached or forever.
+	*/
+	*getPrevDatesIterator(startDate, endDate) {
+		let prevDate;
+		while (true) {
+			prevDate = this.getPrevDate(prevDate !== null && prevDate !== void 0 ? prevDate : startDate);
+			if (endDate && endDate.getTime() > prevDate.getTime()) return;
+			yield prevDate;
+		}
+	}
+	/** Returns true when there is a cron date at the given date. */
+	matchDate(date) {
+		const { second, minute, hour, day, month, weekday } = extractDateElements(date);
+		if (this.seconds.indexOf(second) === -1 || this.minutes.indexOf(minute) === -1 || this.hours.indexOf(hour) === -1 || this.months.indexOf(month) === -1) return false;
+		if (this.days.length !== 31 && this.weekdays.length !== 7) return this.days.indexOf(day) !== -1 || this.weekdays.indexOf(weekday) !== -1;
+		return this.days.indexOf(day) !== -1 && this.weekdays.indexOf(weekday) !== -1;
+	}
+};
 //#endregion
-//#region ../../node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/public-api.js
-var require_public_api = /* @__PURE__ */ __commonJSMin(((exports) => {
-	var composer = require_composer();
-	var Document = require_Document();
-	var errors = require_errors();
-	var log = require_log();
-	var identity = require_identity();
-	var lineCounter = require_line_counter();
-	var parser = require_parser();
-	function parseOptions(options) {
-		const prettyErrors = options.prettyErrors !== false;
-		return {
-			lineCounter: options.lineCounter || prettyErrors && new lineCounter.LineCounter() || null,
-			prettyErrors
-		};
+//#region ../../node_modules/.pnpm/cron-schedule@6.0.0/node_modules/cron-schedule/dist/cron-parser.js
+const secondConstraint = {
+	min: 0,
+	max: 59
+};
+const minuteConstraint = {
+	min: 0,
+	max: 59
+};
+const hourConstraint = {
+	min: 0,
+	max: 23
+};
+const dayConstraint = {
+	min: 1,
+	max: 31
+};
+const monthConstraint = {
+	min: 1,
+	max: 12,
+	aliases: {
+		jan: "1",
+		feb: "2",
+		mar: "3",
+		apr: "4",
+		may: "5",
+		jun: "6",
+		jul: "7",
+		aug: "8",
+		sep: "9",
+		oct: "10",
+		nov: "11",
+		dec: "12"
 	}
-	/**
-	* Parse the input as a stream of YAML documents.
-	*
-	* Documents should be separated from each other by `...` or `---` marker lines.
-	*
-	* @returns If an empty `docs` array is returned, it will be of type
-	*   EmptyStream and contain additional stream information. In
-	*   TypeScript, you should use `'empty' in docs` as a type guard for it.
-	*/
-	function parseAllDocuments(source, options = {}) {
-		const { lineCounter, prettyErrors } = parseOptions(options);
-		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
-		const composer$1 = new composer.Composer(options);
-		const docs = Array.from(composer$1.compose(parser$1.parse(source)));
-		if (prettyErrors && lineCounter) for (const doc of docs) {
-			doc.errors.forEach(errors.prettifyError(source, lineCounter));
-			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
-		}
-		if (docs.length > 0) return docs;
-		return Object.assign([], { empty: true }, composer$1.streamInfo());
+};
+const weekdayConstraint = {
+	min: 0,
+	max: 7,
+	aliases: {
+		mon: "1",
+		tue: "2",
+		wed: "3",
+		thu: "4",
+		fri: "5",
+		sat: "6",
+		sun: "7"
 	}
-	/** Parse an input string into a single YAML.Document */
-	function parseDocument(source, options = {}) {
-		const { lineCounter, prettyErrors } = parseOptions(options);
-		const parser$1 = new parser.Parser(lineCounter?.addNewLine);
-		const composer$1 = new composer.Composer(options);
-		let doc = null;
-		for (const _doc of composer$1.compose(parser$1.parse(source), true, source.length)) if (!doc) doc = _doc;
-		else if (doc.options.logLevel !== "silent") {
-			doc.errors.push(new errors.YAMLParseError(_doc.range.slice(0, 2), "MULTIPLE_DOCS", "Source contains multiple documents; please use YAML.parseAllDocuments()"));
-			break;
-		}
-		if (prettyErrors && lineCounter) {
-			doc.errors.forEach(errors.prettifyError(source, lineCounter));
-			doc.warnings.forEach(errors.prettifyError(source, lineCounter));
+};
+const timeNicknames = {
+	"@yearly": "0 0 1 1 *",
+	"@annually": "0 0 1 1 *",
+	"@monthly": "0 0 1 * *",
+	"@weekly": "0 0 * * 0",
+	"@daily": "0 0 * * *",
+	"@hourly": "0 * * * *",
+	"@minutely": "* * * * *"
+};
+function parseElement(element, constraint) {
+	const result = /* @__PURE__ */ new Set();
+	if (element === "*") {
+		for (let i = constraint.min; i <= constraint.max; i = i + 1) result.add(i);
+		return result;
+	}
+	const listElements = element.split(",");
+	if (listElements.length > 1) {
+		for (const listElement of listElements) {
+			const parsedListElement = parseElement(listElement, constraint);
+			for (const x of parsedListElement) result.add(x);
 		}
-		return doc;
+		return result;
 	}
-	function parse(src, reviver, options) {
-		let _reviver = void 0;
-		if (typeof reviver === "function") _reviver = reviver;
-		else if (options === void 0 && reviver && typeof reviver === "object") options = reviver;
-		const doc = parseDocument(src, options);
-		if (!doc) return null;
-		doc.warnings.forEach((warning) => log.warn(doc.options.logLevel, warning));
-		if (doc.errors.length > 0) if (doc.options.logLevel !== "silent") throw doc.errors[0];
-		else doc.errors = [];
-		return doc.toJS(Object.assign({ reviver: _reviver }, options));
+	const parseSingleElement = (singleElement) => {
+		var _a, _b;
+		singleElement = (_b = (_a = constraint.aliases) === null || _a === void 0 ? void 0 : _a[singleElement.toLowerCase()]) !== null && _b !== void 0 ? _b : singleElement;
+		const parsedElement = Number.parseInt(singleElement, 10);
+		if (Number.isNaN(parsedElement)) throw new Error(`Failed to parse ${element}: ${singleElement} is NaN.`);
+		if (parsedElement < constraint.min || parsedElement > constraint.max) throw new Error(`Failed to parse ${element}: ${singleElement} is outside of constraint range of ${constraint.min} - ${constraint.max}.`);
+		return parsedElement;
+	};
+	const rangeSegments = /^(([0-9a-zA-Z]+)-([0-9a-zA-Z]+)|\*)(\/([0-9]+))?$/.exec(element);
+	if (rangeSegments === null) {
+		result.add(parseSingleElement(element));
+		return result;
 	}
-	function stringify(value, replacer, options) {
-		let _replacer = null;
-		if (typeof replacer === "function" || Array.isArray(replacer)) _replacer = replacer;
-		else if (options === void 0 && replacer) options = replacer;
-		if (typeof options === "string") options = options.length;
-		if (typeof options === "number") {
-			const indent = Math.round(options);
-			options = indent < 1 ? void 0 : indent > 8 ? { indent: 8 } : { indent };
-		}
-		if (value === void 0) {
-			const { keepUndefined } = options ?? replacer ?? {};
-			if (!keepUndefined) return void 0;
-		}
-		if (identity.isDocument(value) && !_replacer) return value.toString(options);
-		return new Document.Document(value, _replacer, options).toString(options);
+	let parsedStart = rangeSegments[1] === "*" ? constraint.min : parseSingleElement(rangeSegments[2]);
+	const parsedEnd = rangeSegments[1] === "*" ? constraint.max : parseSingleElement(rangeSegments[3]);
+	if (constraint === weekdayConstraint && parsedStart === 7 && parsedEnd !== 7) parsedStart = 0;
+	if (parsedStart > parsedEnd) throw new Error(`Failed to parse ${element}: Invalid range (start: ${parsedStart}, end: ${parsedEnd}).`);
+	const step = rangeSegments[5];
+	let parsedStep = 1;
+	if (step !== void 0) {
+		parsedStep = Number.parseInt(step, 10);
+		if (Number.isNaN(parsedStep)) throw new Error(`Failed to parse step: ${step} is NaN.`);
+		if (parsedStep < 1) throw new Error(`Failed to parse step: Expected ${step} to be greater than 0.`);
 	}
-	exports.parse = parse;
-	exports.parseAllDocuments = parseAllDocuments;
-	exports.parseDocument = parseDocument;
-	exports.stringify = stringify;
-}));
-(/* @__PURE__ */ __commonJSMin(((exports) => {
-	var composer = require_composer();
-	var Document = require_Document();
-	var Schema = require_Schema();
-	var errors = require_errors();
-	var Alias = require_Alias();
-	var identity = require_identity();
-	var Pair = require_Pair();
-	var Scalar = require_Scalar();
-	var YAMLMap = require_YAMLMap();
-	var YAMLSeq = require_YAMLSeq();
-	require_cst();
-	var lexer = require_lexer();
-	var lineCounter = require_line_counter();
-	var parser = require_parser();
-	var publicApi = require_public_api();
-	var visit = require_visit();
-	exports.Composer = composer.Composer;
-	exports.Document = Document.Document;
-	exports.Schema = Schema.Schema;
-	exports.YAMLError = errors.YAMLError;
-	exports.YAMLParseError = errors.YAMLParseError;
-	exports.YAMLWarning = errors.YAMLWarning;
-	exports.Alias = Alias.Alias;
-	exports.isAlias = identity.isAlias;
-	exports.isCollection = identity.isCollection;
-	exports.isDocument = identity.isDocument;
-	exports.isMap = identity.isMap;
-	exports.isNode = identity.isNode;
-	exports.isPair = identity.isPair;
-	exports.isScalar = identity.isScalar;
-	exports.isSeq = identity.isSeq;
-	exports.Pair = Pair.Pair;
-	exports.Scalar = Scalar.Scalar;
-	exports.YAMLMap = YAMLMap.YAMLMap;
-	exports.YAMLSeq = YAMLSeq.YAMLSeq;
-	exports.Lexer = lexer.Lexer;
-	exports.LineCounter = lineCounter.LineCounter;
-	exports.Parser = parser.Parser;
-	exports.parse = publicApi.parse;
-	exports.parseAllDocuments = publicApi.parseAllDocuments;
-	exports.parseDocument = publicApi.parseDocument;
-	exports.stringify = publicApi.stringify;
-	exports.visit = visit.visit;
-	exports.visitAsync = visit.visitAsync;
-})))();
+	for (let i = parsedStart; i <= parsedEnd; i = i + parsedStep) result.add(i);
+	return result;
+}
+/** Parses a cron expression into a Cron instance. */
+function parseCronExpression(cronExpression) {
+	var _a;
+	if (typeof cronExpression !== "string") throw new TypeError("Invalid cron expression: must be of type string.");
+	cronExpression = (_a = timeNicknames[cronExpression.toLowerCase()]) !== null && _a !== void 0 ? _a : cronExpression;
+	const elements = cronExpression.split(" ").filter((elem) => elem.length > 0);
+	if (elements.length < 5 || elements.length > 6) throw new Error("Invalid cron expression: expected 5 or 6 elements.");
+	const rawSeconds = elements.length === 6 ? elements[0] : "0";
+	const rawMinutes = elements.length === 6 ? elements[1] : elements[0];
+	const rawHours = elements.length === 6 ? elements[2] : elements[1];
+	const rawDays = elements.length === 6 ? elements[3] : elements[2];
+	const rawMonths = elements.length === 6 ? elements[4] : elements[3];
+	const rawWeekdays = elements.length === 6 ? elements[5] : elements[4];
+	return new Cron({
+		seconds: parseElement(rawSeconds, secondConstraint),
+		minutes: parseElement(rawMinutes, minuteConstraint),
+		hours: parseElement(rawHours, hourConstraint),
+		days: parseElement(rawDays, dayConstraint),
+		months: new Set(Array.from(parseElement(rawMonths, monthConstraint)).map((x) => x - 1)),
+		weekdays: new Set(Array.from(parseElement(rawWeekdays, weekdayConstraint)).map((x) => x % 7))
+	});
+}
 //#endregion
 //#region ../../packages/workflow/dist/index.mjs
 const zodSchema$2 = custom((v) => v instanceof ZodType, "must be a Zod schema");
@@ -17933,6 +18386,12 @@ function isTriggerAttachment(value) {
 	if (!(TRIGGER_ATTACHMENT$1 in value) || value[TRIGGER_ATTACHMENT$1] !== true) return false;
 	return triggerAttachmentCoreSchema$1.safeParse(value).success;
 }
+function isWorkflowTriggerAttachment(attachment) {
+	return attachment.target === "workflow";
+}
+function isAgentTriggerAttachment(attachment) {
+	return attachment.target === "agent";
+}
 /** Read slug from a trigger source (`slug` preferred, legacy `key` fallback). */
 function sourceSlugFrom(source) {
 	const slug = source.slug?.trim() || source.key?.trim();
@@ -17990,6 +18449,12 @@ function agentRouteFromKey(key) {
 function workflowRouteFromKey(key) {
 	return `/workflows/${key}`;
 }
+function pollRouteFromSourceSlug(sourceSlug) {
+	return `/triggers/${sourceSlug}/poll`;
+}
+function pollGroupRouteFromId(pollId) {
+	return `/triggers/polls/${pollId}/run`;
+}
 function webhookRouteFromEndpoint(endpoint) {
 	const normalized = normalizeWebhookEndpoint(endpoint);
 	if (!normalized) throw new Error("Webhook endpoint must not be empty");
@@ -18069,6 +18534,142 @@ function agentManifestEntry(agent, options) {
 		toolSlugs: collectAgentToolSlugs(agent)
 	};
 }
+function pollGroupId(discovered) {
+	const source = discovered.attachment.source;
+	if (source.kind !== "poll") throw new Error(`Attachment "${discovered.slug}" is not a poll trigger`);
+	return source.id ?? sourceSlugFrom(source);
+}
+function buildPollGroups(attachments) {
+	const byId = /* @__PURE__ */ new Map();
+	for (const discovered of attachments) {
+		if (discovered.attachment.source.kind !== "poll") continue;
+		const id = pollGroupId(discovered);
+		const group = byId.get(id) ?? [];
+		group.push(discovered);
+		byId.set(id, group);
+	}
+	return [...byId.entries()].map(([id, groupAttachments]) => ({
+		id,
+		attachments: groupAttachments
+	}));
+}
+function validatePollGroups(groups) {
+	for (const group of groups) {
+		if (group.attachments.length <= 1) continue;
+		if (new Set(group.attachments.map((discovered) => {
+			const source = discovered.attachment.source;
+			if (source.kind !== "poll") throw new Error(`Poll group "${group.id}" has non-poll attachment ${discovered.slug}`);
+			return source.schedule;
+		})).size > 1) {
+			const slugs = group.attachments.map((discovered) => discovered.slug).join(", ");
+			throw new Error(`Poll group "${group.id}" has attachments with different schedules (${slugs})`);
+		}
+	}
+}
+function discoveredSlug(attachment) {
+	return attachment.slug;
+}
+function validateTriggerAttachments(attachments) {
+	const pollRoutes = /* @__PURE__ */ new Map();
+	for (const attachment of attachments) {
+		const source = attachment.attachment.source;
+		const slug = discoveredSlug(attachment);
+		if (source.kind === "poll") {
+			const sourceSlug = sourceSlugFrom(source);
+			const route = pollRouteFromSourceSlug(sourceSlug);
+			const existingPoll = pollRoutes.get(route);
+			if (existingPoll) throw new Error(`Poll route ${route} is declared by both "${existingPoll}" and "${sourceSlug}"`);
+			pollRoutes.set(route, sourceSlug);
+			const groupRoute = pollGroupRouteFromId(source.id ?? sourceSlug);
+			if (pollRoutes.has(groupRoute)) throw new Error(`Poll group route ${groupRoute} conflicts with a poll attachment route`);
+			if (!source.schedule.trim()) throw new Error(`Trigger attachment "${slug}" has an empty poll schedule`);
+			continue;
+		}
+		if (source.kind === "cron") {
+			if (!source.schedule.trim()) throw new Error(`Trigger attachment "${slug}" has an empty cron schedule`);
+			continue;
+		}
+		if (!source.endpoint.trim()) throw new Error(`Trigger attachment "${slug}" has an empty webhook endpoint`);
+		const route = webhookRouteFromEndpoint(source.endpoint);
+		if (pollRoutes.has(route)) throw new Error(`Webhook route ${route} conflicts with a poll trigger route`);
+	}
+}
+function workflowKeyForAttachment(attachment, workflows) {
+	if (!isWorkflowTriggerAttachment(attachment.attachment)) throw new Error(`Trigger attachment "${discoveredSlug(attachment)}" is not a workflow attachment`);
+	const workflowKey = attachment.attachment.workflow.slug;
+	const matched = workflows.find((entry) => entry.key === workflowKey);
+	if (!matched) throw new Error(`Trigger attachment "${discoveredSlug(attachment)}" references an unknown workflow`);
+	return matched.key;
+}
+function agentKeyForAttachment(attachment, agents) {
+	if (!isAgentTriggerAttachment(attachment.attachment)) throw new Error(`Trigger attachment "${discoveredSlug(attachment)}" is not an agent attachment`);
+	const agentKey = attachment.attachment.agent.slug;
+	const matched = agents.find((entry) => entry.key === agentKey);
+	if (!matched) throw new Error(`Trigger attachment "${discoveredSlug(attachment)}" references an unknown agent`);
+	return matched.key;
+}
+function validateAttachmentTargets(attachments, workflows, agents) {
+	for (const attachment of attachments) {
+		if (isWorkflowTriggerAttachment(attachment.attachment)) {
+			workflowKeyForAttachment(attachment, workflows);
+			continue;
+		}
+		agentKeyForAttachment(attachment, agents);
+	}
+}
+function validateUniqueAttachmentSlugs(attachments) {
+	const bySlug = /* @__PURE__ */ new Map();
+	for (const attachment of attachments) {
+		const slug = discoveredSlug(attachment);
+		const existing = bySlug.get(slug);
+		if (existing) throw new Error(`Duplicate trigger attachment slug "${slug}" (${existing}, ${attachment.filePath})`);
+		bySlug.set(slug, attachment.filePath);
+	}
+}
+function sourceConfigSignature(source) {
+	if (source.kind === "webhook") return `webhook:${source.endpoint}`;
+	if (source.kind === "cron") return `cron:${source.schedule}`;
+	return `poll:${source.id ?? source.slug}:${source.schedule}`;
+}
+function validateUniqueTriggerSourceSlugs(attachments) {
+	const bySourceSlug = /* @__PURE__ */ new Map();
+	for (const attachment of attachments) {
+		const source = attachment.attachment.source;
+		const sourceSlug = sourceSlugFrom(source);
+		const signature = sourceConfigSignature(source);
+		const existing = bySourceSlug.get(sourceSlug);
+		if (existing && existing.signature !== signature) throw new Error(`Conflicting trigger source slug "${sourceSlug}" with differing config (${existing.filePath}, ${attachment.filePath})`);
+		if (!existing) bySourceSlug.set(sourceSlug, {
+			filePath: attachment.filePath,
+			signature
+		});
+	}
+}
+/** Build/deploy manifest invariants — not re-run at runtime bootstrap. */
+function validateProjectModules(input) {
+	validateTriggerAttachments(input.attachments);
+	validatePollGroups(buildPollGroups(input.attachments));
+	validateUniqueTriggerSourceSlugs(input.attachments);
+	validateUniqueAttachmentSlugs(input.attachments);
+	validateAttachmentTargets(input.attachments, input.workflows, input.agents);
+	validateUniqueModuleKeys([
+		...input.agents.map((entry) => ({
+			kind: "agent",
+			key: entry.key,
+			filePath: entry.filePath
+		})),
+		...input.workflows.map((workflow) => ({
+			kind: "workflow",
+			key: workflow.key,
+			filePath: workflow.filePath
+		})),
+		...input.attachments.map((attachment) => ({
+			kind: "trigger",
+			key: attachment.slug,
+			filePath: attachment.filePath
+		}))
+	]);
+}
 const SKIP_DIRS = new Set([".git", "node_modules"]);
 function toPosix$1(path) {
 	return path.split(sep).join("/");
@@ -18339,11 +18940,6 @@ async function importTriggerAttachments(filePath, options) {
 	if (candidates.length === 0) return [validateImportedTriggerAttachment(void 0, filePath)];
 	return candidates.map((candidate) => validateImportedTriggerAttachment(candidate, filePath));
 }
-function pollGroupId(discovered) {
-	const source = discovered.attachment.source;
-	if (source.kind !== "poll") throw new Error(`Attachment "${discovered.slug}" is not a poll trigger`);
-	return source.id ?? sourceSlugFrom(source);
-}
 function buildWebhookBindingsByRoute(attachments, handlerOptionsFor) {
 	const webhookBindingsByRoute = /* @__PURE__ */ new Map();
 	for (const discovered of attachments) {
@@ -18504,12 +19100,22 @@ async function buildStoredRouteManifestForProject(projectRoot, options) {
 		const sourcePaths = new SourceModuleFileResolver(projectRoot);
 		const manifest = [{ kind: "health" }];
 		const agentEntries = await discoverAgentEntries(dirs.agentsDir, reload);
-		for (const entry of agentEntries) {
-			const agent = await importAgentDefinition(entry.filePath, reload);
+		const workflows = await discoverWorkflows(dirs.workflowsDir, reload);
+		const attachments = await discoverTriggerAttachments(dirs.triggersDir, reload);
+		validateProjectModules({
+			agents: agentEntries,
+			workflows,
+			attachments
+		});
+		const loadedAgents = await Promise.all(agentEntries.map(async (entry) => ({
+			entry,
+			agent: await importAgentDefinition(entry.filePath, reload)
+		})));
+		await validateAgentModelIds(loadedAgents.map(({ agent }) => agent.model));
+		for (const { entry, agent } of loadedAgents) {
 			const moduleFile = await sourcePaths.resolve("agents", "agent", dirs.agentsDir, entry.filePath);
 			manifest.push(agentManifestEntry(agent, { moduleFile }));
 		}
-		const workflows = await discoverWorkflows(dirs.workflowsDir, reload);
 		for (const workflow of workflows) {
 			const moduleFile = await sourcePaths.resolve("workflows", "workflow", dirs.workflowsDir, workflow.filePath);
 			manifest.push({
@@ -18522,7 +19128,6 @@ async function buildStoredRouteManifestForProject(projectRoot, options) {
 				request: workflow.definition.input
 			});
 		}
-		const attachments = await discoverTriggerAttachments(dirs.triggersDir, reload);
 		const discoveredBySlug = new Map(attachments.map((attachment) => [attachment.slug, attachment]));
 		const cronByTriggerSlug = /* @__PURE__ */ new Map();
 		const pollByGroupId = /* @__PURE__ */ new Map();
@@ -18619,6 +19224,6 @@ async function emitStoredRouteManifestForProject(projectRoot) {
 	persistStoredRouteManifest(projectRoot, await buildStoredRouteManifestForProject(projectRoot));
 }
 //#endregion
-export { discoverEntries as A, validateImportedTriggerAttachment as C, webhookRouteFromEndpoint as D, webhookMatchSchemaForBindings as E, walkTypeScriptFiles as F, entryIdFromFile as M, readKeystrokeIgnoreDirective as N, workflowRouteFromKey as O, shouldSkipKeystrokeModuleFile as P, toStoredRouteManifest as S, webhookManifestAttachmentSchemasFromBindings as T, importWorkflowDefinition as _, buildWebhookBindingsByRoute as a, schemaToJson as b, countAgentCredentials as c, discoverTriggerAttachments as d, discoverWorkflowEntries as f, importTriggerAttachments as g, importAgentDefinition as h, buildStoredRouteManifestFromContext as i, discoverModuleFileEntries as j, packAssetDirs as k, discoverAgentEntries as l, emitStoredRouteManifestForProject as m, agentRouteFromKey as n, collectAgentAppSlugs as o, discoverWorkflows as p, buildStoredRouteManifestForProject as r, collectAgentToolSlugs as s, agentManifestEntry as t, discoverSkillManifestEntries as u, persistStoredRouteManifest as v, validateImportedWorkflowDefinition as w, serializeRouteManifest as x, pollGroupId as y };
+export { validatePollGroups as A, attachmentSlugFromRecord as B, pollRouteFromSourceSlug as C, validateAttachmentTargets as D, toStoredRouteManifest as E, webhookManifestAttachmentSchemasFromBindings as F, readKeystrokeIgnoreDirective as G, discoverEntries as H, webhookMatchSchemaForBindings as I, walkTypeScriptFiles as J, shouldSkipKeystrokeModuleFile as K, webhookRouteFromEndpoint as L, validateTriggerAttachments as M, validateUniqueAttachmentSlugs as N, validateImportedTriggerAttachment as O, validateUniqueTriggerSourceSlugs as P, workflowKeyForAttachment as R, pollGroupRouteFromId as S, serializeRouteManifest as T, discoverModuleFileEntries as U, packAssetDirs as V, entryIdFromFile as W, importAgentDefinition as _, buildStoredRouteManifestForProject as a, persistStoredRouteManifest as b, collectAgentAppSlugs as c, discoverAgentEntries as d, discoverSkillManifestEntries as f, emitStoredRouteManifestForProject as g, discoverWorkflows as h, buildPollGroups as i, validateProjectModules as j, validateImportedWorkflowDefinition as k, collectAgentToolSlugs as l, discoverWorkflowEntries as m, agentManifestEntry as n, buildStoredRouteManifestFromContext as o, discoverTriggerAttachments as p, validateUniqueModuleKeys as q, agentRouteFromKey as r, buildWebhookBindingsByRoute as s, agentKeyForAttachment as t, countAgentCredentials as u, importTriggerAttachments as v, schemaToJson as w, pollGroupId as x, importWorkflowDefinition as y, workflowRouteFromKey as z };
 
-//# sourceMappingURL=dist-E9nHDRnf.mjs.map
+//# sourceMappingURL=dist-BYODo4g3.mjs.map