@keystrokehq/cli 0.1.5 → 0.1.6

package/dist/{dist-C3YClLXV.mjs → dist-H53GUsol.mjs}

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 //#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/core.js
 var _a$1;
+/** A special constant with type `never` */
+const NEVER = /* @__PURE__ */ Object.freeze({ status: "aborted" });
 function $constructor(name, initializer, params) {
 	function init(inst, def) {
 		if (!inst._zod) Object.defineProperty(inst, "_zod", {
@@ -607,6 +609,7 @@ const string$1 = (params) => {
 const integer = /^-?\d+$/;
 const number$2 = /^-?\d+(?:\.\d+)?$/;
 const boolean$1 = /^(?:true|false)$/i;
+const _null$2 = /^null$/i;
 const lowercase = /^[^A-Z]*$/;
 const uppercase = /^[^a-z]*$/;
 //#endregion
@@ -1419,6 +1422,26 @@ const $ZodBoolean = /* @__PURE__ */ $constructor("$ZodBoolean", (inst, def) => {
 		return payload;
 	};
 });
+const $ZodNull = /* @__PURE__ */ $constructor("$ZodNull", (inst, def) => {
+	$ZodType.init(inst, def);
+	inst._zod.pattern = _null$2;
+	inst._zod.values = new Set([null]);
+	inst._zod.parse = (payload, _ctx) => {
+		const input = payload.value;
+		if (input === null) return payload;
+		payload.issues.push({
+			expected: "null",
+			code: "invalid_type",
+			input,
+			inst
+		});
+		return payload;
+	};
+});
+const $ZodAny = /* @__PURE__ */ $constructor("$ZodAny", (inst, def) => {
+	$ZodType.init(inst, def);
+	inst._zod.parse = (payload) => payload;
+});
 const $ZodUnknown = /* @__PURE__ */ $constructor("$ZodUnknown", (inst, def) => {
 	$ZodType.init(inst, def);
 	inst._zod.parse = (payload) => payload;
@@ -2340,6 +2363,9 @@ function handlePipeResult(left, next, ctx) {
 		fallback: left.fallback
 	}, ctx);
 }
+const $ZodPreprocess = /* @__PURE__ */ $constructor("$ZodPreprocess", (inst, def) => {
+	$ZodPipe.init(inst, def);
+});
 const $ZodReadonly = /* @__PURE__ */ $constructor("$ZodReadonly", (inst, def) => {
 	$ZodType.init(inst, def);
 	defineLazy(inst._zod, "propValues", () => def.innerType._zod.propValues);
@@ -2805,6 +2831,17 @@ function _boolean(Class, params) {
 	});
 }
 /* @__NO_SIDE_EFFECTS__ */
+function _null$1(Class, params) {
+	return new Class({
+		type: "null",
+		...normalizeParams(params)
+	});
+}
+/* @__NO_SIDE_EFFECTS__ */
+function _any(Class) {
+	return new Class({ type: "any" });
+}
+/* @__NO_SIDE_EFFECTS__ */
 function _unknown(Class) {
 	return new Class({ type: "unknown" });
 }
@@ -3038,7 +3075,7 @@ function initializeContext(params) {
 		external: params?.external ?? void 0
 	};
 }
-function process(schema, ctx, _params = {
+function process$1(schema, ctx, _params = {
 	path: [],
 	schemaPath: []
 }) {
@@ -3075,7 +3112,7 @@ function process(schema, ctx, _params = {
 		const parent = schema._zod.parent;
 		if (parent) {
 			if (!result.ref) result.ref = parent;
-			process(parent, ctx, params);
+			process$1(parent, ctx, params);
 			ctx.seen.get(parent).isParent = true;
 		}
 	}
@@ -3295,7 +3332,7 @@ const createToJSONSchemaMethod = (schema, processors = {}) => (params) => {
 		...params,
 		processors
 	});
-	process(schema, ctx);
+	process$1(schema, ctx);
 	extractDefs(ctx, schema);
 	return finalize(ctx, schema);
 };
@@ -3307,7 +3344,7 @@ const createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params)
 		io,
 		processors
 	});
-	process(schema, ctx);
+	process$1(schema, ctx);
 	extractDefs(ctx, schema);
 	return finalize(ctx, schema);
 };
@@ -3473,7 +3510,7 @@ const arrayProcessor = (schema, ctx, _json, params) => {
 	if (typeof minimum === "number") json.minItems = minimum;
 	if (typeof maximum === "number") json.maxItems = maximum;
 	json.type = "array";
-	json.items = process(def.element, ctx, {
+	json.items = process$1(def.element, ctx, {
 		...params,
 		path: [...params.path, "items"]
 	});
@@ -3484,7 +3521,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 	json.type = "object";
 	json.properties = {};
 	const shape = def.shape;
-	for (const key in shape) json.properties[key] = process(shape[key], ctx, {
+	for (const key in shape) json.properties[key] = process$1(shape[key], ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -3502,7 +3539,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 	if (def.catchall?._zod.def.type === "never") json.additionalProperties = false;
 	else if (!def.catchall) {
 		if (ctx.io === "output") json.additionalProperties = false;
-	} else if (def.catchall) json.additionalProperties = process(def.catchall, ctx, {
+	} else if (def.catchall) json.additionalProperties = process$1(def.catchall, ctx, {
 		...params,
 		path: [...params.path, "additionalProperties"]
 	});
@@ -3510,7 +3547,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 const unionProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
 	const isExclusive = def.inclusive === false;
-	const options = def.options.map((x, i) => process(x, ctx, {
+	const options = def.options.map((x, i) => process$1(x, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -3523,7 +3560,7 @@ const unionProcessor = (schema, ctx, json, params) => {
 };
 const intersectionProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
-	const a = process(def.left, ctx, {
+	const a = process$1(def.left, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -3531,7 +3568,7 @@ const intersectionProcessor = (schema, ctx, json, params) => {
 			0
 		]
 	});
-	const b = process(def.right, ctx, {
+	const b = process$1(def.right, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -3548,7 +3585,7 @@ const tupleProcessor = (schema, ctx, _json, params) => {
 	json.type = "array";
 	const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
 	const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
-	const prefixItems = def.items.map((x, i) => process(x, ctx, {
+	const prefixItems = def.items.map((x, i) => process$1(x, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -3556,7 +3593,7 @@ const tupleProcessor = (schema, ctx, _json, params) => {
 			i
 		]
 	}));
-	const rest = def.rest ? process(def.rest, ctx, {
+	const rest = def.rest ? process$1(def.rest, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -3587,7 +3624,7 @@ const recordProcessor = (schema, ctx, _json, params) => {
 	const keyType = def.keyType;
 	const patterns = keyType._zod.bag?.patterns;
 	if (def.mode === "loose" && patterns && patterns.size > 0) {
-		const valueSchema = process(def.valueType, ctx, {
+		const valueSchema = process$1(def.valueType, ctx, {
 			...params,
 			path: [
 				...params.path,
@@ -3598,11 +3635,11 @@ const recordProcessor = (schema, ctx, _json, params) => {
 		json.patternProperties = {};
 		for (const pattern of patterns) json.patternProperties[pattern.source] = valueSchema;
 	} else {
-		if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") json.propertyNames = process(def.keyType, ctx, {
+		if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") json.propertyNames = process$1(def.keyType, ctx, {
 			...params,
 			path: [...params.path, "propertyNames"]
 		});
-		json.additionalProperties = process(def.valueType, ctx, {
+		json.additionalProperties = process$1(def.valueType, ctx, {
 			...params,
 			path: [...params.path, "additionalProperties"]
 		});
@@ -3615,7 +3652,7 @@ const recordProcessor = (schema, ctx, _json, params) => {
 };
 const nullableProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
-	const inner = process(def.innerType, ctx, params);
+	const inner = process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	if (ctx.target === "openapi-3.0") {
 		seen.ref = def.innerType;
@@ -3624,27 +3661,27 @@ const nullableProcessor = (schema, ctx, json, params) => {
 };
 const nonoptionalProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const defaultProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	json.default = JSON.parse(JSON.stringify(def.defaultValue));
 };
 const prefaultProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	if (ctx.io === "input") json._prefault = JSON.parse(JSON.stringify(def.defaultValue));
 };
 const catchProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	let catchValue;
@@ -3659,32 +3696,32 @@ const pipeProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
 	const inIsTransform = def.in._zod.traits.has("$ZodTransform");
 	const innerType = ctx.io === "input" ? inIsTransform ? def.out : def.in : def.out;
-	process(innerType, ctx, params);
+	process$1(innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = innerType;
 };
 const readonlyProcessor = (schema, ctx, json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	json.readOnly = true;
 };
 const promiseProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const optionalProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const lazyProcessor = (schema, ctx, _json, params) => {
 	const innerType = schema._zod.innerType;
-	process(innerType, ctx, params);
+	process$1(innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = innerType;
 };
@@ -3739,7 +3776,7 @@ function toJSONSchema(input, params) {
 		const defs = {};
 		for (const entry of registry._idmap.entries()) {
 			const [_, schema] = entry;
-			process(schema, ctx);
+			process$1(schema, ctx);
 		}
 		const schemas = {};
 		ctx.external = {
@@ -3759,7 +3796,7 @@ function toJSONSchema(input, params) {
 		...params,
 		processors: allProcessors
 	});
-	process(input, ctx);
+	process$1(input, ctx);
 	extractDefs(ctx, input);
 	return finalize(ctx, input);
 }
@@ -4247,6 +4284,22 @@ const ZodBoolean = /* @__PURE__ */ $constructor("ZodBoolean", (inst, def) => {
 function boolean(params) {
 	return /* @__PURE__ */ _boolean(ZodBoolean, params);
 }
+const ZodNull = /* @__PURE__ */ $constructor("ZodNull", (inst, def) => {
+	$ZodNull.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => nullProcessor(inst, ctx, json, params);
+});
+function _null(params) {
+	return /* @__PURE__ */ _null$1(ZodNull, params);
+}
+const ZodAny = /* @__PURE__ */ $constructor("ZodAny", (inst, def) => {
+	$ZodAny.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => void 0;
+});
+function any() {
+	return /* @__PURE__ */ _any(ZodAny);
+}
 const ZodUnknown = /* @__PURE__ */ $constructor("ZodUnknown", (inst, def) => {
 	$ZodUnknown.init(inst, def);
 	ZodType.init(inst, def);
@@ -4360,6 +4413,14 @@ function object(shape, params) {
 		...normalizeParams(params)
 	});
 }
+function looseObject(shape, params) {
+	return new ZodObject({
+		type: "object",
+		shape,
+		catchall: unknown(),
+		...normalizeParams(params)
+	});
+}
 const ZodUnion = /* @__PURE__ */ $constructor("ZodUnion", (inst, def) => {
 	$ZodUnion.init(inst, def);
 	ZodType.init(inst, def);
@@ -4632,6 +4693,10 @@ function pipe(in_, out) {
 		out
 	});
 }
+const ZodPreprocess = /* @__PURE__ */ $constructor("ZodPreprocess", (inst, def) => {
+	ZodPipe.init(inst, def);
+	$ZodPreprocess.init(inst, def);
+});
 const ZodReadonly = /* @__PURE__ */ $constructor("ZodReadonly", (inst, def) => {
 	$ZodReadonly.init(inst, def);
 	ZodType.init(inst, def);
@@ -4670,6 +4735,13 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
 	return /* @__PURE__ */ _superRefine(fn, params);
 }
+function preprocess(fn, schema) {
+	return new ZodPreprocess({
+		type: "pipe",
+		in: transform(fn),
+		out: schema
+	});
+}
 //#endregion
 //#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/coerce.js
 function number(params) {
@@ -5053,6 +5125,7 @@ const LEGAL_TRUST_SLUGS = [
 	"compliance",
 	"cookie-policy",
 	"cookies",
+	"data-use",
 	"disclose",
 	"dpa",
 	"eula",
@@ -5292,6 +5365,7 @@ const OrganizationSchema = object({
 	id: string(),
 	name: string(),
 	slug: OrganizationSlugSchema,
+	verified: boolean(),
 	createdAt: isoDateTime$5,
 	updatedAt: isoDateTime$5
 });
@@ -5380,6 +5454,15 @@ function listenPortFromPublicUrl(value, fallback) {
 		return fallback;
 	}
 }
+const LOCAL_PLATFORM_ORIGIN = "http://localhost:3002";
+/** Reads `PUBLIC_PLATFORM_URL` when explicitly set. */
+function resolveExplicitPublicPlatformOrigin(env = process.env) {
+	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
+}
+/** `PUBLIC_PLATFORM_URL` origin; falls back to {@link LOCAL_PLATFORM_ORIGIN} when unset. */
+function resolvePublicPlatformOrigin(env = process.env) {
+	return resolveExplicitPublicPlatformOrigin(env) ?? "http://localhost:3002";
+}
 /** On-disk path under the project root (packed in deploy artifacts when present). */
 const ROUTE_MANIFEST_REL_PATH = "dist/.keystroke/route-manifest.json";
 const StoredRouteManifestSkillSchema = object({
@@ -5392,6 +5475,10 @@ const attachmentSchemasSchema = record(string(), object({
 	requestSchema: record(string(), unknown()),
 	filterSchema: record(string(), unknown()).optional()
 }));
+const attachmentMetaSchema = record(string(), object({
+	name: string().optional(),
+	description: string().optional()
+}));
 const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 	object({ kind: literal("health") }),
 	object({
@@ -5403,7 +5490,9 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		model: string(),
 		systemPrompt: string(),
 		toolCount: number$1().int().nonnegative(),
-		credentialCount: number$1().int().nonnegative()
+		credentialCount: number$1().int().nonnegative(),
+		appSlugs: array(string()).default([]),
+		toolSlugs: array(string()).default([])
 	}),
 	object({
 		kind: literal("workflow"),
@@ -5419,13 +5508,20 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		endpoint: string(),
 		attachmentIds: array(string()),
 		moduleFile: string(),
-		attachmentSchemas: attachmentSchemasSchema
+		/** sha256 of the trigger source file, baked at build time for overview change-detection. */
+		sourceHash: string().optional(),
+		attachmentSchemas: attachmentSchemasSchema,
+		attachmentMeta: attachmentMetaSchema.optional()
 	}),
 	object({
 		kind: literal("trigger-poll"),
 		attachmentId: string(),
+		attachmentIds: array(string()),
 		moduleFile: string(),
-		schedule: string()
+		sourceHash: string().optional(),
+		schedule: string(),
+		name: string().optional(),
+		description: string().optional()
 	}),
 	object({
 		kind: literal("trigger-poll-group"),
@@ -5437,16 +5533,180 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 	object({
 		kind: literal("cron-schedule"),
 		attachmentId: string(),
+		attachmentIds: array(string()),
 		moduleFile: string(),
-		schedule: string()
+		sourceHash: string().optional(),
+		schedule: string(),
+		name: string().optional(),
+		description: string().optional()
 	})
 ]);
-const StoredRouteManifestSchema = object({
+const storedRouteManifestV2Schema = object({
 	version: literal(2),
 	entries: array(storedRouteManifestEntryV2Schema),
 	skills: array(StoredRouteManifestSkillSchema).default([]),
 	integrations: array(string()).optional()
 });
+const DERIVED_ENTRY_KINDS = new Set([
+	"agent-sessions-list",
+	"agent-session-detail",
+	"workflow-runs-list",
+	"workflow-run-detail",
+	"trigger-runs-list",
+	"trigger-run-detail"
+]);
+function webhookEndpointFromPath(path) {
+	return path.replace(/^\/triggers\//, "").replace(/^\/+|\/+$/g, "");
+}
+function legacyAgentAppSlugs(entry) {
+	if (Array.isArray(entry.appSlugs)) return entry.appSlugs;
+	if (Array.isArray(entry.credentialSlugs)) return entry.credentialSlugs;
+	if (Array.isArray(entry.credentialKeys)) return entry.credentialKeys;
+	return [];
+}
+/** TODO remove after all artifacts rebuilt — upcasts legacy v1 manifests to v2. */
+function normalizeEntryToV2(entry) {
+	const kind = entry.kind;
+	if (typeof kind !== "string") return null;
+	if (DERIVED_ENTRY_KINDS.has(kind) || kind === "plugin") return null;
+	if (kind === "health") return { kind: "health" };
+	if (kind === "agent") {
+		const slug = typeof entry.slug === "string" ? entry.slug : typeof entry.agentSlug === "string" ? entry.agentSlug : void 0;
+		if (!slug || typeof entry.moduleFile !== "string") return null;
+		return {
+			kind: "agent",
+			slug,
+			moduleFile: entry.moduleFile,
+			...typeof entry.name === "string" ? { name: entry.name } : {},
+			...typeof entry.description === "string" ? { description: entry.description } : {},
+			model: typeof entry.model === "string" ? entry.model : "",
+			systemPrompt: typeof entry.systemPrompt === "string" ? entry.systemPrompt : "",
+			toolCount: typeof entry.toolCount === "number" ? entry.toolCount : 0,
+			credentialCount: typeof entry.credentialCount === "number" ? entry.credentialCount : 0,
+			appSlugs: legacyAgentAppSlugs(entry),
+			toolSlugs: Array.isArray(entry.toolSlugs) ? entry.toolSlugs : []
+		};
+	}
+	if (kind === "workflow") {
+		const slug = typeof entry.slug === "string" ? entry.slug : typeof entry.workflowSlug === "string" ? entry.workflowSlug : void 0;
+		if (!slug || typeof entry.moduleFile !== "string") return null;
+		const name = typeof entry.name === "string" ? entry.name : typeof entry.workflowName === "string" ? entry.workflowName : void 0;
+		return {
+			kind: "workflow",
+			slug,
+			moduleFile: entry.moduleFile,
+			...name ? { name } : {},
+			...typeof entry.description === "string" ? { description: entry.description } : {},
+			subscribable: entry.subscribable === true,
+			requestSchema: entry.requestSchema && typeof entry.requestSchema === "object" ? entry.requestSchema : {}
+		};
+	}
+	if (kind === "trigger-webhook") {
+		if (typeof entry.moduleFile !== "string" || !Array.isArray(entry.attachmentIds)) return null;
+		const endpoint = typeof entry.endpoint === "string" ? entry.endpoint : typeof entry.path === "string" ? webhookEndpointFromPath(entry.path) : void 0;
+		if (!endpoint) return null;
+		return {
+			kind: "trigger-webhook",
+			endpoint,
+			attachmentIds: entry.attachmentIds,
+			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
+			attachmentSchemas: entry.attachmentSchemas && typeof entry.attachmentSchemas === "object" ? entry.attachmentSchemas : {},
+			...entry.attachmentMeta && typeof entry.attachmentMeta === "object" ? { attachmentMeta: entry.attachmentMeta } : {}
+		};
+	}
+	if (kind === "trigger-poll") {
+		if (typeof entry.attachmentId !== "string" || typeof entry.moduleFile !== "string" || typeof entry.schedule !== "string") return null;
+		return {
+			kind: "trigger-poll",
+			attachmentId: entry.attachmentId,
+			attachmentIds: Array.isArray(entry.attachmentIds) ? entry.attachmentIds : [entry.attachmentId],
+			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
+			schedule: entry.schedule,
+			...typeof entry.name === "string" ? { name: entry.name } : {},
+			...typeof entry.description === "string" ? { description: entry.description } : {}
+		};
+	}
+	if (kind === "trigger-poll-group") {
+		if (typeof entry.pollId !== "string" || typeof entry.moduleFile !== "string" || typeof entry.schedule !== "string" || !Array.isArray(entry.attachmentIds)) return null;
+		return {
+			kind: "trigger-poll-group",
+			pollId: entry.pollId,
+			attachmentIds: entry.attachmentIds,
+			moduleFile: entry.moduleFile,
+			schedule: entry.schedule
+		};
+	}
+	if (kind === "cron-schedule") {
+		if (typeof entry.attachmentId !== "string" || typeof entry.moduleFile !== "string" || typeof entry.schedule !== "string") return null;
+		return {
+			kind: "cron-schedule",
+			attachmentId: entry.attachmentId,
+			attachmentIds: Array.isArray(entry.attachmentIds) ? entry.attachmentIds : [entry.attachmentId],
+			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
+			schedule: entry.schedule,
+			...typeof entry.name === "string" ? { name: entry.name } : {},
+			...typeof entry.description === "string" ? { description: entry.description } : {}
+		};
+	}
+	return null;
+}
+/** TODO remove after all artifacts rebuilt — upcasts legacy v1 manifests to v2. */
+function normalizeV2ManifestInput(value) {
+	if (!value || typeof value !== "object") return value;
+	const raw = value;
+	if (raw.version !== 2 || !Array.isArray(raw.entries)) return value;
+	return {
+		...raw,
+		entries: raw.entries.map((entry) => {
+			if (!entry || typeof entry !== "object") return entry;
+			const kind = entry.kind;
+			if (kind === "trigger-poll" || kind === "cron-schedule" || kind === "trigger-webhook" || kind === "trigger-poll-group") {
+				const trigger = entry;
+				if (Array.isArray(trigger.attachmentIds)) return entry;
+				return {
+					...trigger,
+					attachmentIds: typeof trigger.attachmentId === "string" ? [trigger.attachmentId] : []
+				};
+			}
+			if (kind !== "agent") return entry;
+			const agent = entry;
+			if (Array.isArray(agent.appSlugs)) return entry;
+			const appSlugs = legacyAgentAppSlugs(agent);
+			if (appSlugs.length === 0) return entry;
+			const { credentialKeys: _credentialKeys, credentialSlugs: _credentialSlugs, ...rest } = agent;
+			return {
+				...rest,
+				appSlugs,
+				toolSlugs: Array.isArray(agent.toolSlugs) ? agent.toolSlugs : []
+			};
+		})
+	};
+}
+/** TODO remove after all artifacts rebuilt — upcasts legacy v1 manifests to v2. */
+function normalizeStoredRouteManifestToV2(value) {
+	if (!value || typeof value !== "object") throw new Error("Invalid route manifest");
+	const raw = value;
+	if (raw.version === 2) return storedRouteManifestV2Schema.parse(normalizeV2ManifestInput(value));
+	const entriesRaw = Array.isArray(raw.entries) ? raw.entries : [];
+	const entries = [];
+	for (const entry of entriesRaw) {
+		if (!entry || typeof entry !== "object") continue;
+		const normalized = normalizeEntryToV2(entry);
+		if (normalized) entries.push(normalized);
+	}
+	return storedRouteManifestV2Schema.parse({
+		version: 2,
+		entries,
+		skills: raw.skills ?? [],
+		integrations: raw.integrations
+	});
+}
+function parseStoredRouteManifest(value) {
+	return normalizeStoredRouteManifestToV2(value);
+}
 /** Messaging platforms that support agent gateway bindings. */
 const ChannelPlatformKeySchema = _enum(["slack"]);
 const ChannelReactionSupportSchema = _enum([
@@ -5495,6 +5755,8 @@ const AppGatewaySchema = object({
 	}),
 	supportsChannelDirectory: boolean(),
 	webhookPathHint: string().min(1),
+	/** Composio/keystroke app slug for Connect when it differs from the gateway platform key (e.g. slack → slackbot). */
+	connectAppId: string().min(1).optional(),
 	docsUrl: string().url().optional(),
 	tagline: string().min(1).optional()
 });
@@ -5506,7 +5768,11 @@ const ChannelPlatformSchema = object({
 	fallbackDomain: string().min(1),
 	description: string().min(1),
 	tagline: string().min(1),
-	authKind: _enum(["oauth", "api_key"]),
+	authKind: _enum([
+		"oauth",
+		"api_key",
+		"keystroke"
+	]),
 	credentialFields: array(object({
 		key: string().min(1),
 		label: string().min(1),
@@ -5528,6 +5794,7 @@ const ChannelPlatformSchema = object({
 	}),
 	webhookPathHint: string().min(1),
 	supportsChannelDirectory: boolean(),
+	connectAppId: string().min(1).optional(),
 	docsUrl: string().url().optional()
 });
 const ChannelBindingSchema = object({
@@ -5581,11 +5848,38 @@ const UpdateChannelBindingBodySchema = object({ patch: object({
 	mode: ChannelListenModeSchema.optional(),
 	subscribeOnMention: boolean().optional()
 }) });
+/**
+* Where a manual MCP API key is injected on each request. MCP servers don't
+* advertise API-key support in a discoverable way, so the user picks the
+* placement: a request header (optionally prefixed, e.g. `Bearer `) or a query
+* param (e.g. Exa's `exaApiKey`).
+*/
+const McpApiKeyPlacementSchema = discriminatedUnion("kind", [object({
+	kind: literal("header"),
+	name: string().trim().min(1),
+	/** Prepended to the token, e.g. `"Bearer "` for `Authorization: Bearer <token>`. */
+	prefix: string().optional()
+}), object({
+	kind: literal("query"),
+	name: string().trim().min(1)
+})]);
+object({
+	token: string().trim().min(1),
+	placement: McpApiKeyPlacementSchema.default({
+		kind: "header",
+		name: "Authorization",
+		prefix: "Bearer "
+	})
+});
 /** Metadata for one vault field on a custom api_key app. */
 const AppCredentialFieldSchema = object({
 	label: string().trim().min(1).optional(),
 	secret: boolean().optional(),
-	optional: boolean().optional()
+	optional: boolean().optional(),
+	description: string().trim().min(1).optional(),
+	default: string().optional(),
+	/** For direct MCP api-key apps: where this field's value is injected on the request. */
+	placement: McpApiKeyPlacementSchema.optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = record(string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -5602,6 +5896,13 @@ const AppAuthKindSchema = _enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema = _enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -5615,7 +5916,11 @@ object({
 	logo: string().url().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
+}).extend({
+	source: AppSourceSchema,
+	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional()
+});
 const customAppNameSchema = string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema = ProjectSlugAvailabilityReasonSchema;
 const AppSlugAvailabilityResponseSchema = object({
@@ -5625,12 +5930,43 @@ const AppSlugAvailabilityResponseSchema = object({
 	suggestion: AppSlugSchema.optional()
 });
 object({ slug: string().trim().min(1) });
-/** Request body for creating an org custom api_key app. */
+/** Request body for creating an org custom app (api_key or direct MCP). */
+const optionalCredentialFieldsSchema = record(string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema);
 const CreateCustomAppRequestSchema = object({
 	name: customAppNameSchema,
 	slug: AppSlugSchema,
 	description: string().trim().min(1),
-	fields: AppCredentialFieldsSchema
+	source: _enum([
+		"custom",
+		"mcp",
+		"openapi"
+	]).default("custom"),
+	mcpUrl: string().url().optional(),
+	authKind: AppAuthKindSchema.optional(),
+	fields: optionalCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
+	oauthScopes: array(OAuthScopeOptionSchema).optional()
+}).superRefine((data, ctx) => {
+	if (data.source === "mcp" && !data.mcpUrl) ctx.addIssue({
+		code: "custom",
+		message: "mcpUrl is required for MCP apps",
+		path: ["mcpUrl"]
+	});
+	if (!(data.authKind ?? (data.source === "custom" ? "api_key" : void 0))) {
+		ctx.addIssue({
+			code: "custom",
+			message: "authKind is required",
+			path: ["authKind"]
+		});
+		return;
+	}
+	if (data.source === "custom") {
+		const parsed = AppCredentialFieldsSchema.safeParse(data.fields ?? {});
+		if (!parsed.success) for (const issue of parsed.error.issues) ctx.addIssue({
+			...issue,
+			path: ["fields", ...issue.path]
+		});
+	}
 });
 /** Full custom app detail returned by GET (includes credential template for sync). */
 const CustomAppDetailSchema = object({
@@ -5639,9 +5975,12 @@ const CustomAppDetailSchema = object({
 	name: string().min(1),
 	description: string().min(1),
 	category: string().min(1),
-	authKind: literal("api_key"),
-	source: literal("custom"),
-	credentialFields: AppCredentialFieldsSchema,
+	authKind: AppAuthKindSchema,
+	source: AppSourceSchema,
+	mcpUrl: string().url().nullable().optional(),
+	credentialFields: optionalCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
+	oauthScopes: array(OAuthScopeOptionSchema).optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5659,6 +5998,8 @@ object({
 	oauthScopes: array(OAuthScopeOptionSchema),
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
+	mcpUrl: string().url().nullable().optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5675,9 +6016,73 @@ const ListAppsResponseSchema = array(object({
 	source: AppSourceSchema,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema.optional(),
+	/** Direct MCP server URL when source is mcp. */
+	mcpUrl: string().url().nullable().optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 }));
+const McpAuthProbeModeSchema = _enum([
+	"none",
+	"token",
+	"oauth"
+]);
+const McpAuthProbeOAuthSchema = object({
+	issuer: string().optional(),
+	authorizationEndpoint: string().url(),
+	tokenEndpoint: string().url(),
+	registrationEndpoint: string().url().optional(),
+	scopes: array(string()),
+	resource: string().optional(),
+	/** Human-readable label from OAuth protected-resource metadata (RFC 9728). */
+	resourceName: string().optional()
+});
+object({
+	url: string().url(),
+	mode: McpAuthProbeModeSchema,
+	unauthenticatedStatus: number$1().int().optional(),
+	scheme: AppCredentialSchemeSchema.optional(),
+	oauth: McpAuthProbeOAuthSchema.optional()
+});
+object({ url: string().url() });
+const McpDiscoverResponseSchema = object({
+	detected: boolean(),
+	template: object({
+		authKind: AppAuthKindSchema,
+		credentialFields: record(string(), AppCredentialFieldSchema).optional(),
+		credentialScheme: AppCredentialSchemeSchema.optional(),
+		oauthScopes: array(OAuthScopeOptionSchema),
+		mcpUrl: string().url(),
+		oauth: McpAuthProbeOAuthSchema.optional(),
+		serverName: string().optional(),
+		serverDescription: string().optional()
+	})
+});
+const StartMcpOAuthConnectionInputSchema = object({
+	appSlug: string().trim().min(1),
+	projects: array(string().trim().min(1)).optional(),
+	createOrganizationCredential: boolean().optional(),
+	createUserProvidedCredential: boolean().optional(),
+	label: string().trim().min(1).optional(),
+	credentialInstanceId: string().trim().min(1).optional(),
+	scopes: array(string()).optional()
+});
+const StartMcpOAuthConnectionResultSchema = object({ authorizeUrl: string().url() });
+object({ url: string().url() });
+const OpenApiDiscoverResponseSchema = object({
+	detected: boolean(),
+	template: object({
+		authKind: AppAuthKindSchema,
+		credentialFields: record(string(), AppCredentialFieldSchema).optional(),
+		credentialScheme: AppCredentialSchemeSchema.optional(),
+		oauthScopes: array(OAuthScopeOptionSchema),
+		openapiUrl: string().url(),
+		name: string().optional(),
+		description: string().optional(),
+		homepageUrl: string().optional()
+	})
+});
 const CatalogAppsPageSchema = object({
 	items: array(object({
 		name: string(),
@@ -5734,6 +6139,12 @@ function parseAppSlug(slug) {
 		slug: trimmed
 	};
 }
+/** Web URL that opens the org apps page with a connect dialog for the given app. */
+function buildConnectDeeplink(options) {
+	const base = options.webUrl.replace(/\/+$/, "");
+	const params = new URLSearchParams({ connect: options.appSlug });
+	return `${base}/${options.orgSlug}/apps?${params.toString()}`;
+}
 /** How a credential instance is stored (`credential_instances.auth_kind`). */
 const CredentialAuthKindSchema = _enum([
 	"api_key",
@@ -5792,7 +6203,7 @@ const AppCredentialSummarySchema = object({
 });
 const credentialSecretValueSchema = record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -5807,7 +6218,9 @@ const CredentialTargetsFieldsSchema = object({
 	createOrganizationCredential: boolean().default(false),
 	createUserProvidedCredential: boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: string().trim().min(1).optional()
+	label: string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: string().trim().min(1).optional()
 });
 /** Input for starting an OAuth connection (connect dialog / CLI connect). */
 const StartOAuthConnectionInputSchema = CredentialTargetsFieldsSchema.extend({
@@ -5820,25 +6233,22 @@ const StartOAuthConnectionResultSchema = object({
 	status: _enum(["connected", "redirecting"]),
 	authorizeUrl: string().url().nullable()
 });
-/** Input for starting a Composio/keystroke connection (connect dialog). */
-const StartKeystrokeConnectionInputSchema = object({
+/** Input for starting a keystroke connection (connect dialog). */
+const StartKeystrokeConnectionInputSchema = CredentialTargetsFieldsSchema.extend({
 	app: string().trim().min(1),
-	scopeType: AppCredentialScopeSchema,
-	projectSlug: string().trim().min(1).optional(),
-	label: string().trim().min(1).optional()
+	value: credentialSecretValueSchema.optional()
 }).superRefine((input, ctx) => {
-	if (input.scopeType === "project" && !input.projectSlug?.trim()) ctx.addIssue({
-		code: "custom",
-		message: "projectSlug is required for project scope",
-		path: ["projectSlug"]
-	});
+	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 });
-/** Result of starting a Composio/keystroke connection. */
-const StartKeystrokeConnectionResultSchema = object({
-	status: _enum(["redirecting"]),
+/** Result of starting a keystroke connection. */
+const StartKeystrokeConnectionResultSchema = discriminatedUnion("status", [object({
+	status: literal("connected"),
+	connectionId: string().min(1)
+}), object({
+	status: literal("redirecting"),
 	authorizeUrl: string().url(),
-	connectionId: string()
-});
+	connectionId: string().min(1)
+})]);
 /** Request body for `POST /api/credentials` (manual api-key fan-out). */
 const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
 	appId: string().min(1),
@@ -5867,6 +6277,44 @@ const UpdateCredentialRequestSchema = object({
 const ListCredentialsResponseSchema = array(AppCredentialSummarySchema);
 const GetCredentialResponseSchema = AppCredentialSummarySchema;
 const CreateCredentialsResponseSchema = array(AppCredentialSummarySchema);
+const CredentialAssignmentTargetTypeSchema = _enum(["workflow", "agent"]);
+const CredentialAssignmentRecordSchema = object({
+	id: string(),
+	targetType: CredentialAssignmentTargetTypeSchema,
+	targetKey: string(),
+	consumerId: string(),
+	credentialSlug: string(),
+	instanceId: string(),
+	credential: string().optional(),
+	scopeType: _enum([
+		"organization",
+		"project",
+		"user"
+	]).optional(),
+	createdAt: string(),
+	updatedAt: string()
+});
+const CredentialAssignmentListResponseSchema = object({ assignments: array(CredentialAssignmentRecordSchema) });
+const AssignCredentialBodySchema = object({
+	targetType: CredentialAssignmentTargetTypeSchema,
+	targetKey: string().min(1),
+	/** Omit or '*' for wildcard assignment. */
+	consumerId: string().optional(),
+	credential: string().min(1)
+});
+const CredentialAssignmentListQuerySchema = object({
+	targetType: CredentialAssignmentTargetTypeSchema,
+	targetKey: string().min(1)
+});
+const CredentialConsumerListQuerySchema = object({
+	targetType: CredentialAssignmentTargetTypeSchema,
+	targetKey: string().min(1)
+});
+const CredentialConsumerListResponseSchema = object({ consumers: array(object({
+	consumerId: string(),
+	label: string(),
+	appSlugs: array(string())
+})) });
 const McpConnectionStatusSchema = _enum([
 	"INITIATED",
 	"ACTIVE",
@@ -5887,22 +6335,60 @@ object({
 	entityId: string(),
 	instanceId: string()
 });
+const McpCredentialAssignmentTargetSchema = object({
+	type: CredentialAssignmentTargetTypeSchema,
+	key: string().trim().min(1)
+});
 object({
 	app: string().trim().min(1),
 	tool: string().trim().min(1),
 	arguments: record(string(), unknown()).default({}),
 	/** Pinned provider toolkit version, sourced from the app definition; forwarded to the provider. */
-	version: string().trim().min(1)
+	version: string().trim().min(1),
+	/** When set, platform MCP resolve checks credential assignments before scope defaults. */
+	assignmentTarget: McpCredentialAssignmentTargetSchema.optional(),
+	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
+	consumerId: string().trim().min(1).optional()
+});
+object({
+	error: _enum([
+		"not_found",
+		"forbidden",
+		"mcp_execute_failed"
+	]),
+	message: string()
 });
 const SubmitTeamRequestRequestSchema = object({
 	type: _enum([
 		"org-deletion",
 		"contact",
-		"enterprise-upgrade"
+		"enterprise-upgrade",
+		"verification"
 	]),
 	message: string().trim().max(5e3).optional()
 });
 object({ ok: literal(true) });
+const MarketingContactCompanySizeSchema = _enum([
+	"1-10",
+	"11-50",
+	"51-200",
+	"201-500",
+	"500+"
+]);
+const SubmitMarketingContactRequestSchema = object({
+	fullName: string().trim().min(1, "Full name is required").max(200),
+	workEmail: string().trim().email("Enter a valid email address").max(320),
+	companySize: MarketingContactCompanySizeSchema,
+	message: string().trim().min(1, "Message is required").max(5e3),
+	/** Honeypot — must stay empty; bots that fill it are ignored silently. */
+	companyWebsite: string().optional()
+});
+function isCredentialInput(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value;
+	return typeof candidate.key === "string" && CredentialAuthKindSchema.safeParse(candidate.kind).success && candidate.schema instanceof ZodType;
+}
+const credentialInputSchema = custom((value) => isCredentialInput(value), "must be a credential requirement");
 function normalizeCredentialList(list) {
 	return list.map((item) => toCredentialRequirement(item));
 }
@@ -5923,7 +6409,7 @@ const ValidationErrorDetailSchema = object({
 	message: string()
 });
 /** Machine-readable codes returned in standard API error bodies. */
-const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(_enum(["needs_org_selection"]));
+const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(_enum(["needs_org_selection", "org_unverified"]));
 /** Standard JSON error body returned by the HTTP API. */
 const ErrorResponseSchema = object({
 	error: string(),
@@ -5983,13 +6469,16 @@ const ConnectProvidersResponseSchema = object({ providers: array(object({
 })) });
 const ConnectAuthorizeUrlResponseSchema = object({ url: string() });
 const QueuedRunResponseSchema = object({ runId: string() });
-const QueuedAgentPromptResponseSchema = object({ sessionId: string() });
+const QueuedAgentPromptResponseSchema = object({
+	sessionId: string(),
+	runId: string()
+});
 object({
 	workflows: array(string().min(1)).optional(),
 	attachments: array(string().min(1)).optional()
 });
 const PollRunMultiResponseSchema = object({ results: array(object({
-	attachmentKey: string(),
+	attachmentSlug: string(),
 	workflowKey: string(),
 	runId: string().optional(),
 	body: unknown().optional(),
@@ -6013,6 +6502,33 @@ object({
 	kind: RunSourceKindSchema,
 	id: string().nullable()
 });
+const AgentTriggerOriginSchema = _enum(["project", "ephemeral"]);
+const AgentTriggerStatusSchema = _enum([
+	"active",
+	"disabled",
+	"completed"
+]);
+const AgentTriggerTypeSchema = _enum([
+	"webhook",
+	"cron",
+	"poll"
+]);
+const AgentTriggerSummaryListResponseSchema = array(object({
+	id: string(),
+	label: string(),
+	name: string().nullable().optional(),
+	description: string().nullable().optional(),
+	type: AgentTriggerTypeSchema,
+	schedule: string().nullable(),
+	endpoint: string().nullable(),
+	origin: AgentTriggerOriginSchema,
+	prompt: string().nullable(),
+	status: AgentTriggerStatusSchema,
+	executionCount: number$1().int().nonnegative(),
+	until: string().nullable(),
+	attachmentId: string(),
+	attachmentSlug: string()
+}));
 const WorkflowRunStatusSchema = _enum([
 	"pending",
 	"running",
@@ -6090,7 +6606,7 @@ _enum([
 object({ include: string().optional() });
 const TriggerRunDetailSchema = object({
 	id: string(),
-	attachmentId: string(),
+	triggerId: string(),
 	attachmentSlug: string().nullable(),
 	triggerType: _enum([
 		"cron",
@@ -6172,6 +6688,10 @@ const AgentSessionSummarySchema = object({
 	status: AgentSessionStatusSchema,
 	source: RunSourceKindSchema,
 	sourceId: string().nullable(),
+	title: string().nullable(),
+	ranByUserName: string().nullable(),
+	gatewayPlatform: string().nullable(),
+	triggerType: AgentTriggerTypeSchema.nullable(),
 	createdAt: string(),
 	updatedAt: string(),
 	messageCount: number$1()
@@ -6225,6 +6745,12 @@ const AgentSessionDetailResponseSchema = object({
 	events: array(AgentEventSchema),
 	trace: TraceResponseSchema.nullable()
 });
+object({ sinceSeq: number().int().min(0).optional() });
+const AgentSessionChatStateResponseSchema = object({
+	status: AgentSessionStatusSchema,
+	messages: array(record(string(), unknown())),
+	live: record(string(), unknown()).nullable()
+});
 const SlackGatewayModeSchema = _enum([
 	"mention",
 	"channel",
@@ -6339,7 +6865,7 @@ const HistoryTraceTriggerSchema = object({
 	workflowKey: string().optional(),
 	agentKey: string().optional(),
 	attachmentId: string().nullable().optional(),
-	attachmentKey: string().nullable().optional(),
+	attachmentSlug: string().nullable().optional(),
 	route: string().optional(),
 	sourcePath: string().nullable().optional()
 }).nullable();
@@ -6379,7 +6905,7 @@ const HistoryRunDetailSchema = discriminatedUnion("kind", [object({
 	}),
 	trigger: object({
 		id: string(),
-		attachmentKey: string().nullable(),
+		attachmentSlug: string().nullable(),
 		triggerType: string(),
 		sourcePath: string().nullable(),
 		payload: unknown().nullable(),
@@ -6411,7 +6937,7 @@ const HistoryRunDetailSchema = discriminatedUnion("kind", [object({
 	}),
 	gateway: object({
 		threadId: string(),
-		attachmentKey: string().nullable()
+		attachmentSlug: string().nullable()
 	}).nullable(),
 	messages: array(record(string(), unknown())),
 	trace: HistoryTraceSchema.nullable(),
@@ -6440,7 +6966,9 @@ object({
 });
 const CredentialInstanceRecordSchema = object({
 	id: string(),
-	key: string(),
+	appSlug: string(),
+	slug: string(),
+	name: string().nullable(),
 	scopeType: CredentialScopeTypeSchema,
 	scopeId: string().nullable(),
 	label: string().nullable(),
@@ -6450,6 +6978,8 @@ const CredentialInstanceRecordSchema = object({
 const CredentialInstanceListResponseSchema = object({ instances: array(CredentialInstanceRecordSchema) });
 const CreateCredentialInstanceBodySchema = object({
 	key: string().min(1),
+	slug: string().min(1).optional(),
+	name: string().nullable().optional(),
 	scopeType: CredentialScopeTypeSchema,
 	scopeId: string().nullable().optional(),
 	label: string().nullable().optional(),
@@ -6457,6 +6987,8 @@ const CreateCredentialInstanceBodySchema = object({
 	value: record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" })
 });
 const UpdateCredentialInstanceBodySchema = object({
+	slug: string().min(1).optional(),
+	name: string().nullable().optional(),
 	label: string().nullable().optional(),
 	isDefault: boolean().optional(),
 	value: record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" }).optional()
@@ -6466,6 +6998,18 @@ const TriggerRunTypeSchema = _enum([
 	"webhook",
 	"poll"
 ]);
+const TriggerRunOutcomeSchema = _enum([
+	"dispatched",
+	"skipped",
+	"failed"
+]);
+const TriggerRunReasonSchema = _enum([
+	"filter_rejected",
+	"transform_undefined",
+	"invalid_payload",
+	"source_error",
+	"handler_error"
+]);
 const TriggerRunWorkflowSummarySchema = object({
 	id: string(),
 	status: WorkflowRunStatusSchema,
@@ -6480,15 +7024,23 @@ const TriggerRunSummarySchema = object({
 	triggerType: TriggerRunTypeSchema,
 	triggeredAt: string(),
 	sourcePath: string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema.nullable()
+	outcome: TriggerRunOutcomeSchema,
+	reason: TriggerRunReasonSchema.nullable(),
+	detail: string().nullable(),
+	/** Workflow runs dispatched by this fire (fan-out → one per matched workflow attachment). */
+	workflowRuns: array(TriggerRunWorkflowSummarySchema),
+	/** Agent sessions dispatched by this fire (fan-out → one per matched agent attachment). */
+	agentSessions: array(TriggerRunAgentSessionSummarySchema)
 });
 const TriggerRunRecordSchema = object({
 	id: string(),
-	attachmentId: string(),
+	triggerId: string(),
 	attachmentSlug: string(),
 	triggerType: TriggerRunTypeSchema,
 	sourcePath: string().nullable(),
+	outcome: TriggerRunOutcomeSchema,
+	reason: TriggerRunReasonSchema.nullable(),
+	detail: string().nullable(),
 	payload: unknown().nullable(),
 	triggeredAt: string()
 });
@@ -6523,9 +7075,16 @@ const TriggerTypeSchema = _enum([
 	"cron"
 ]);
 const TriggerTargetKindSchema = _enum(["workflow", "agent"]);
+const TriggerStatusSchema = _enum(["active", "disabled"]);
+const TriggerAttachmentStatusSchema = _enum(["active", "disabled"]);
 const TriggerListItemSchema = object({
-	key: string(),
+	slug: string(),
+	name: string().optional(),
+	description: string().optional(),
 	type: TriggerTypeSchema,
+	status: TriggerStatusSchema.optional(),
+	schedule: string().nullable().optional(),
+	sourcePath: string().optional(),
 	route: string().optional(),
 	webhookUrl: string().url().optional(),
 	targetKind: TriggerTargetKindSchema,
@@ -6535,6 +7094,136 @@ const TriggerListItemSchema = object({
 const TriggerListResponseSchema = object({ triggers: array(TriggerListItemSchema) });
 object({ endpoint: string().min(1).optional() });
 const TriggerDetailResponseSchema = TriggerListItemSchema;
+const TriggerAssignmentSchema = object({
+	kind: TriggerTargetKindSchema,
+	id: string(),
+	slug: string(),
+	name: string(),
+	attachmentId: string(),
+	attachmentSlug: string(),
+	status: TriggerAttachmentStatusSchema,
+	disabledAt: string().nullable()
+});
+/** Status of the downstream run/session a dispatched fire produced. */
+const WorkspaceTriggerRunStatusSchema = _enum([
+	"completed",
+	"running",
+	"failed"
+]);
+/**
+* Categorical reason a fire was recorded but produced no downstream run. These map
+* from the persisted `trigger_runs.reason` enum onto the labels the UI renders.
+*/
+const WorkspaceTriggerSkipReasonSchema = _enum([
+	"filtered",
+	"no_new_data",
+	"transform_undefined"
+]);
+/**
+* A single downstream run/session a dispatched fire produced. A fan-out fire can
+* dispatch several of these (multiple workflows and/or agents off one source event).
+*/
+const WorkspaceTriggerRunTargetSchema = discriminatedUnion("kind", [object({
+	kind: literal("workflow"),
+	runId: string(),
+	workflowId: string(),
+	status: WorkspaceTriggerRunStatusSchema,
+	name: string()
+}), object({
+	kind: literal("agent"),
+	sessionId: string(),
+	agentId: string(),
+	status: WorkspaceTriggerRunStatusSchema,
+	name: string()
+})]);
+/**
+* Outcome of a single trigger fire — drives the run-history row presentation. Every
+* recorded fire either dispatched one or more workflow/agent targets, was skipped by
+* trigger logic, or failed before any target ran.
+*/
+const WorkspaceTriggerRunOutcomeSchema = discriminatedUnion("kind", [
+	object({
+		kind: literal("dispatched"),
+		targets: array(WorkspaceTriggerRunTargetSchema)
+	}),
+	object({
+		kind: literal("skipped"),
+		reason: WorkspaceTriggerSkipReasonSchema
+	}),
+	object({
+		kind: literal("failed"),
+		error: string()
+	})
+]);
+const WorkspaceTriggerSummarySchema = object({
+	/** `triggers.id` UUID for the trigger row. */
+	id: string(),
+	slug: string(),
+	name: string(),
+	description: string().nullable(),
+	type: TriggerTypeSchema,
+	status: TriggerStatusSchema,
+	projectId: string(),
+	projectName: string(),
+	/** Webhook ingress URL (webhook triggers only). */
+	webhookUrl: string().nullable(),
+	/** Cron expression or poll cadence label (cron/poll triggers only). */
+	schedule: string().nullable(),
+	/** Workflows + agents currently bound to this source. */
+	assignments: array(TriggerAssignmentSchema),
+	lastFiredAt: string().nullable(),
+	fireCount: number$1().int().nonnegative(),
+	createdAt: string()
+});
+const WorkspaceTriggerDetailSchema = WorkspaceTriggerSummarySchema.extend({ 
+/** Source module file path, relative to the project root. */
+sourcePath: string() });
+const WorkspaceTriggerListResponseSchema = array(WorkspaceTriggerSummarySchema);
+const WorkspaceTriggerRunListResponseSchema = object({
+	items: array(object({
+		id: string(),
+		triggerType: TriggerTypeSchema,
+		triggeredAt: string(),
+		/** Poll/webhook source path or endpoint that produced the fire. */
+		sourcePath: string().nullable(),
+		outcome: WorkspaceTriggerRunOutcomeSchema
+	})),
+	nextCursor: string().nullable()
+});
+const WorkspaceTriggerFileSchema = object({
+	path: string(),
+	contents: string()
+});
+/** LLM-generated markdown overview envelope served to the web dashboard. */
+const WorkspaceTriggerOverviewSchema = object({
+	status: _enum([
+		"generating",
+		"ready",
+		"failed"
+	]),
+	markdown: string(),
+	hash: string(),
+	generatedAt: string().nullable(),
+	model: string()
+});
+/** Inputs the worker feeds the LLM to generate a trigger overview. */
+const TriggerOverviewInputSchema = object({
+	name: string(),
+	description: string().nullable(),
+	type: TriggerTypeSchema,
+	schedule: string().nullable(),
+	sourcePath: string(),
+	sourceContents: string(),
+	assignments: array(TriggerAssignmentSchema)
+});
+object({
+	triggerId: string(),
+	projectId: string(),
+	triggerHash: string(),
+	model: string(),
+	input: TriggerOverviewInputSchema
+});
+object({ enabled: boolean() });
 const OrganizationMemberRoleSchema = _enum([
 	"owner",
 	"admin",
@@ -6781,8 +7470,13 @@ const AgentSummarySchema = object({
 	description: string().optional(),
 	sourcePath: string().min(1).optional(),
 	model: string().optional(),
+	systemPrompt: string().optional(),
 	toolCount: optionalCount,
 	credentialCount: optionalCount,
+	apps: array(object({
+		id: string(),
+		label: string()
+	})).optional(),
 	lastRunAt: optionalTimestamp
 });
 const WorkflowSummarySchema = object({
@@ -6895,7 +7589,15 @@ object({
 	})),
 	generatedAt: isoDateTime
 });
+const ListAgentMemoryFilesResponseSchema = object({ files: array(object({
+	id: string(),
+	path: string().min(1)
+})) });
+const ListAgentWorkspaceFilesResponseSchema = object({ files: array(object({
+	id: string(),
+	path: string().min(1)
+})) });
 //#endregion
-export { ListCredentialsResponseSchema as $, UpsertGatewayAttachmentBodySchema as $t, CreateOrganizationResponseSchema as A, SlugAvailabilityResponseSchema as At, GetCredentialResponseSchema as B, TriggerRunListResponseSchema as Bt, CreateApiKeyResponseSchema as C, toJSONSchema as Cn, PromptResponseSchema as Ct, CreateCustomAppRequestSchema as D, RecentResourceListResponseSchema as Dt, CreateCredentialsResponseSchema as E, ROUTE_MANIFEST_REL_PATH as Et, CredentialInstanceRecordSchema as F, StoredRouteManifestSchema as Ft, HistoryRunListQuerySchema as G, UpdateOrganizationMemberResponseSchema as Gt, HealthResponseSchema as H, UpdateCredentialInstanceBodySchema as Ht, DeclineOrganizationInvitationResponseSchema as I, SubmitTeamRequestRequestSchema as It, InviteOrganizationMembersResponseSchema as J, UpdateProjectMemberResponseSchema as Jt, HistoryRunListResponseSchema as K, UpdateOrganizationRequestSchema as Kt, DownloadActiveProjectArtifactResponseSchema as L, TriggerDetailResponseSchema as Lt, CreateProjectRequestSchema as M, StartKeystrokeConnectionResultSchema as Mt, CreateProjectResponseSchema as N, StartOAuthConnectionInputSchema as Nt, CreateCustomAppResponseSchema as O, SkillSummaryDetailResponseSchema as Ot, CredentialInstanceListResponseSchema as P, StartOAuthConnectionResultSchema as Pt, ListAppsResponseSchema as Q, UploadProjectSourceResponseSchema as Qt, ErrorResponseSchema as R, TriggerListResponseSchema as Rt, CreateApiKeyRequestSchema as S, union as Sn, PromptInputSchema as St, CreateCredentialsRequestSchema as T, QueuedRunResponseSchema as Tt, HistoryRunCancelResponseSchema as U, UpdateCredentialRequestSchema as Ut, GetCustomAppResponseSchema as V, UpdateChannelBindingBodySchema as Vt, HistoryRunDetailResponseSchema as W, UpdateOrganizationMemberRequestSchema as Wt, InviteProjectMembersResponseSchema as X, UpdateProjectSettingsRequestSchema as Xt, InviteProjectMembersRequestSchema as Y, UpdateProjectRequestSchema as Yt, ListApiKeysResponseSchema as Z, UploadProjectSourceManifestRequestSchema as Zt, ChannelDirectoryListResponseSchema as _, custom as _n, PresignUserAvatarResponseSchema as _t, AgentSessionListResponseSchema as a, WorkflowRunListResponseSchema as an, ListProjectMembersResponseSchema as at, ConnectAuthorizeUrlResponseSchema as b, object as bn, ProjectSettingsResponseSchema as bt, AppSlugAvailabilityResponseSchema as c, listenPortFromPublicUrl as cn, OrganizationSidebarBrandingPatchSchema as ct, CatalogActionsPageResponseSchema as d, parseAppSlug as dn, PollRunResponseSchema as dt, UserAvatarPatchSchema as en, ListOrganizationInvitationsResponseSchema as et, CatalogAppDetailResponseSchema as f, parseErrorResponse as fn, PresignOrgLogoRequestSchema as ft, ChannelConnectionSchema as g, array as gn, PresignUserAvatarRequestSchema as gt, ChannelConnectionListResponseSchema as h, _function as hn, PresignProjectSourceResponseSchema as ht, AgentSessionDetailResponseSchema as i, WorkflowRunDetailResponseSchema as in, ListProjectFilesResponseSchema as it, CreateProjectArtifactResponseSchema as j, StartKeystrokeConnectionInputSchema as jt, CreateOrganizationRequestSchema as k, SkillSummaryListResponseSchema as kt, BindChannelBodySchema as l, normalizeCredentialList as ln, OrganizationSidebarBrandingSchema as lt, ChannelAccountListResponseSchema as m, ZodType as mn, PresignProjectSourceRequestSchema as mt, AcceptOrganizationInvitationResponseSchema as n, UserPreferencesPatchSchema as nn, ListOrganizationsResponseSchema as nt, AgentSummaryDetailResponseSchema as o, WorkflowSummaryDetailResponseSchema as on, ListProjectMetricsResponseSchema as ot, CatalogAppsPageResponseSchema as p, slugifyAppName as pn, PresignOrgLogoResponseSchema as pt, InviteOrganizationMembersRequestSchema as q, UpdateProjectMemberRequestSchema as qt, ActiveOrganizationResponseSchema as r, UserPreferencesSchema as rn, ListProjectDeploymentsResponseSchema as rt, AgentSummaryListResponseSchema as s, WorkflowSummaryListResponseSchema as sn, ListProjectsResponseSchema as st, ACTIVE_ORG_HEADER as t, UserAvatarSchema as tn, ListOrganizationMembersResponseSchema as tt, CatalogActionDetailResponseSchema as u, originFromPublicUrl as un, PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS as ut, ChannelPlatformSchema as v, discriminatedUnion as vn, ProjectReachabilityResponseSchema as vt, CreateCredentialInstanceBodySchema as w, QueuedAgentPromptResponseSchema as wt, ConnectProvidersResponseSchema as x, string as xn, ProjectSlugAvailabilityResponseSchema as xt, CompleteProjectArtifactResponseSchema as y, literal as yn, ProjectResponseSchema as yt, GatewayAttachmentRecordSchema as z, TriggerRunDetailResponseSchema as zt };
+export { HistoryRunListQuerySchema as $, optional as $n, TriggerListResponseSchema as $t, CreateCustomAppRequestSchema as A, listenPortFromPublicUrl as An, PresignUserAvatarResponseSchema as At, CredentialConsumerListQuerySchema as B, _enum as Bn, RecentResourceListResponseSchema as Bt, ConnectAuthorizeUrlResponseSchema as C, WorkspaceTriggerDetailSchema as Cn, PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS as Ct, CreateCredentialInstanceBodySchema as D, WorkspaceTriggerRunListResponseSchema as Dn, PresignProjectSourceRequestSchema as Dt, CreateApiKeyResponseSchema as E, WorkspaceTriggerOverviewSchema as En, PresignOrgLogoResponseSchema as Et, CreateProjectRequestSchema as F, parseStoredRouteManifest as Fn, PromptInputSchema as Ft, DownloadActiveProjectArtifactResponseSchema as G, boolean as Gn, StartKeystrokeConnectionResultSchema as Gt, CredentialInstanceListResponseSchema as H, _null as Hn, SkillSummaryListResponseSchema as Ht, CreateProjectResponseSchema as I, resolvePublicPlatformOrigin as In, PromptResponseSchema as It, GetCredentialResponseSchema as J, intersection as Jn, StartOAuthConnectionInputSchema as Jt, ErrorResponseSchema as K, custom as Kn, StartMcpOAuthConnectionInputSchema as Kt, CredentialAssignmentListQuerySchema as L, slugifyAppName as Ln, QueuedAgentPromptResponseSchema as Lt, CreateOrganizationRequestSchema as M, originFromPublicUrl as Mn, ProjectResponseSchema as Mt, CreateOrganizationResponseSchema as N, parseAppSlug as Nn, ProjectSettingsResponseSchema as Nt, CreateCredentialsRequestSchema as O, buildConnectDeeplink as On, PresignProjectSourceResponseSchema as Ot, CreateProjectArtifactResponseSchema as P, parseErrorResponse as Pn, ProjectSlugAvailabilityResponseSchema as Pt, HistoryRunDetailResponseSchema as Q, object as Qn, TriggerDetailResponseSchema as Qt, CredentialAssignmentListResponseSchema as R, number as Rn, QueuedRunResponseSchema as Rt, CompleteProjectArtifactResponseSchema as S, WorkflowSummaryListResponseSchema as Sn, OrganizationSidebarBrandingSchema as St, CreateApiKeyRequestSchema as T, WorkspaceTriggerListResponseSchema as Tn, PresignOrgLogoRequestSchema as Tt, CredentialInstanceRecordSchema as U, any as Un, SlugAvailabilityResponseSchema as Ut, CredentialConsumerListResponseSchema as V, _function as Vn, SkillSummaryDetailResponseSchema as Vt, DeclineOrganizationInvitationResponseSchema as W, array as Wn, StartKeystrokeConnectionInputSchema as Wt, HealthResponseSchema as X, looseObject as Xn, SubmitMarketingContactRequestSchema as Xt, GetCustomAppResponseSchema as Y, literal as Yn, StartOAuthConnectionResultSchema as Yt, HistoryRunCancelResponseSchema as Z, number$1 as Zn, SubmitTeamRequestRequestSchema as Zt, ChannelAccountListResponseSchema as _, UserPreferencesPatchSchema as _n, ListProjectMetricsResponseSchema as _t, AgentSessionDetailResponseSchema as a, UpdateOrganizationMemberRequestSchema as an, url as ar, LOCAL_PLATFORM_ORIGIN as at, ChannelDirectoryListResponseSchema as b, WorkflowRunListResponseSchema as bn, OpenApiDiscoverResponseSchema as bt, AgentSummaryListResponseSchema as c, UpdateProjectMemberRequestSchema as cn, NEVER as cr, ListApiKeysResponseSchema as ct, AssignCredentialBodySchema as d, UpdateProjectSettingsRequestSchema as dn, ListOrganizationInvitationsResponseSchema as dt, TriggerRunDetailResponseSchema as en, preprocess as er, HistoryRunListResponseSchema as et, BindChannelBodySchema as f, UploadProjectSourceManifestRequestSchema as fn, ListOrganizationMembersResponseSchema as ft, CatalogAppsPageResponseSchema as g, UserAvatarSchema as gn, ListProjectMembersResponseSchema as gt, CatalogAppDetailResponseSchema as h, UserAvatarPatchSchema as hn, ListProjectFilesResponseSchema as ht, AgentSessionChatStateResponseSchema as i, UpdateCredentialRequestSchema as in, unknown as ir, InviteProjectMembersResponseSchema as it, CreateCustomAppResponseSchema as j, normalizeCredentialList as jn, ProjectReachabilityResponseSchema as jt, CreateCredentialsResponseSchema as k, credentialInputSchema as kn, PresignUserAvatarRequestSchema as kt, AgentTriggerSummaryListResponseSchema as l, UpdateProjectMemberResponseSchema as ln, ListAppsResponseSchema as lt, CatalogActionsPageResponseSchema as m, UpsertGatewayAttachmentBodySchema as mn, ListProjectDeploymentsResponseSchema as mt, AcceptOrganizationInvitationResponseSchema as n, UpdateChannelBindingBodySchema as nn, string as nr, InviteOrganizationMembersResponseSchema as nt, AgentSessionListResponseSchema as o, UpdateOrganizationMemberResponseSchema as on, datetime as or, ListAgentMemoryFilesResponseSchema as ot, CatalogActionDetailResponseSchema as p, UploadProjectSourceResponseSchema as pn, ListOrganizationsResponseSchema as pt, GatewayAttachmentRecordSchema as q, discriminatedUnion as qn, StartMcpOAuthConnectionResultSchema as qt, ActiveOrganizationResponseSchema as r, UpdateCredentialInstanceBodySchema as rn, union as rr, InviteProjectMembersRequestSchema as rt, AgentSummaryDetailResponseSchema as s, UpdateOrganizationRequestSchema as sn, toJSONSchema as sr, ListAgentWorkspaceFilesResponseSchema as st, ACTIVE_ORG_HEADER as t, TriggerRunListResponseSchema as tn, record as tr, InviteOrganizationMembersRequestSchema as tt, AppSlugAvailabilityResponseSchema as u, UpdateProjectRequestSchema as un, ListCredentialsResponseSchema as ut, ChannelConnectionListResponseSchema as v, UserPreferencesSchema as vn, ListProjectsResponseSchema as vt, ConnectProvidersResponseSchema as w, WorkspaceTriggerFileSchema as wn, PollRunResponseSchema as wt, ChannelPlatformSchema as x, WorkflowSummaryDetailResponseSchema as xn, OrganizationSidebarBrandingPatchSchema as xt, ChannelConnectionSchema as y, WorkflowRunDetailResponseSchema as yn, McpDiscoverResponseSchema as yt, CredentialAssignmentRecordSchema as z, ZodType as zn, ROUTE_MANIFEST_REL_PATH as zt };
 
-//# sourceMappingURL=dist-C3YClLXV.mjs.map
+//# sourceMappingURL=dist-H53GUsol.mjs.map