@keystrokehq/hosting 0.1.10 → 0.1.12

package/dist/index.mjs

@@ -1,3 +1,4 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
 import Docker from "dockerode";
 import { mkdir } from "node:fs/promises";
 //#region src/constants.ts
@@ -4807,6 +4808,7 @@ const INFRA_SYSTEM_SLUGS = [
 	"health",
 	"healthcheck",
 	"healthz",
+	"hook-resume",
 	"hooks",
 	"internal",
 	"item",
@@ -4972,14 +4974,14 @@ const OrganizationUserRoleSchema = _enum([
 	"admin",
 	"builder"
 ]);
-const isoDateTime$5 = string().datetime();
+const isoDateTime$7 = string().datetime();
 const OrganizationSchema = object({
 	id: string(),
 	name: string(),
 	slug: OrganizationSlugSchema,
 	verified: boolean(),
-	createdAt: isoDateTime$5,
-	updatedAt: isoDateTime$5
+	createdAt: isoDateTime$7,
+	updatedAt: isoDateTime$7
 });
 const ProjectSchema = object({
 	id: string(),
@@ -4991,8 +4993,8 @@ const ProjectSchema = object({
 	baseUrl: string().nullable(),
 	runtimeId: string().nullable(),
 	lastError: string().nullable(),
-	createdAt: isoDateTime$5,
-	updatedAt: isoDateTime$5
+	createdAt: isoDateTime$7,
+	updatedAt: isoDateTime$7
 });
 object({
 	organization: OrganizationSchema,
@@ -5012,7 +5014,7 @@ const ProjectListMetricsSchema = object({
 	workflowCount: number$1(),
 	skillCount: number$1(),
 	credentialCount: number$1(),
-	lastDeploymentAt: isoDateTime$5.nullable()
+	lastDeploymentAt: isoDateTime$7.nullable()
 });
 record(string(), ProjectListMetricsSchema);
 object({
@@ -5031,6 +5033,14 @@ const AppSlugSchema = ProjectSlugSchema;
 function resolveExplicitPublicPlatformOrigin(env = process.env) {
 	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
 }
+function isValidIanaTimezone(value) {
+	try {
+		Intl.DateTimeFormat(void 0, { timeZone: value });
+		return true;
+	} catch {
+		return false;
+	}
+}
 /** How a credential instance is stored (`credential_instances.auth_kind`). */
 const CredentialAuthKindSchema = _enum([
 	"api_key",
@@ -5288,6 +5298,7 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		name: requiredDisplayTextSchema,
 		description: requiredDisplayTextSchema,
 		model: string(),
+		compactionModel: string().optional(),
 		systemPrompt: string(),
 		toolCount: number$1().int().nonnegative(),
 		credentialCount: number$1().int().nonnegative(),
@@ -5321,7 +5332,9 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		/** Deterministic AST control-flow skeleton (deploy-time producer). */
 		flowGraph: WorkflowCanvasGraphSchema.optional(),
 		/** sha256 of the workflow source the `flowGraph` was produced from (staleness). */
-		flowGraphSourceHash: string().optional()
+		flowGraphSourceHash: string().optional(),
+		/** sha256 of `JSON.stringify(flowGraph)` — baked at build so canvas polls skip re-hashing. */
+		flowGraphHash: string().optional()
 	}),
 	object({
 		kind: literal("trigger-webhook"),
@@ -5357,6 +5370,8 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		moduleFile: string(),
 		sourceHash: string().optional(),
 		schedule: string(),
+		/** Static cron payload from `defineCronSource({ payload })` — omitted when the source has none. */
+		payload: unknown().optional(),
 		name: requiredDisplayTextSchema,
 		description: requiredDisplayTextSchema
 	})
@@ -5367,6 +5382,171 @@ object({
 	skills: array(StoredRouteManifestSkillSchema).default([]),
 	integrations: array(string()).optional()
 });
+const isoDateTime$6 = string().datetime();
+const subscriptionStatusSchema = _enum([
+	"none",
+	"trialing",
+	"active",
+	"past_due",
+	"canceled"
+]);
+const CreditPackSchema = object({
+	id: string(),
+	usd: number$1(),
+	microCredits: number$1(),
+	label: string()
+});
+const AutoTopupSummarySchema = object({
+	enabled: boolean(),
+	thresholdMicroCredits: number$1().nullable(),
+	amountMicroCredits: number$1().nullable(),
+	/** A saved payment method exists to charge off-session. */
+	hasPaymentMethod: boolean(),
+	/** A top-up invoice payment is in flight. */
+	pending: boolean()
+});
+/**
+* The plan's resolved limits. Storage overage is billed from the wallet's
+* pushed-down `includedStorageGb`; concurrency, per-pass run timeouts, and
+* API/MCP rate limits are enforced from the wallet (timeouts/concurrency) or
+* plan preset (rate limits). Log retention is configured but not pruned yet.
+*/
+const PlanLimitsSchema = object({
+	includedStorageGb: number$1(),
+	concurrencyLimit: number$1(),
+	agentTimeoutMs: number$1(),
+	workflowTimeoutMs: number$1(),
+	pollTimeoutMs: number$1(),
+	/** Configured retention window; pruning not implemented yet. */
+	logRetentionDays: number$1(),
+	apiRateLimitCapacity: number$1(),
+	apiRateLimitRefillPerSec: number$1(),
+	mcpRateLimitCapacity: number$1(),
+	mcpRateLimitRefillPerSec: number$1()
+});
+object({
+	planKey: string(),
+	subscriptionStatus: subscriptionStatusSchema,
+	planCreditMicroCredits: number$1(),
+	prepaidCreditMicroCredits: number$1(),
+	periodStart: isoDateTime$6.nullable(),
+	periodEnd: isoDateTime$6.nullable(),
+	autoTopup: AutoTopupSummarySchema,
+	creditPacks: array(CreditPackSchema),
+	limits: PlanLimitsSchema
+});
+const BillingUsageMeterSchema = object({
+	/** Meter key (`llm`, `vm_second`, …); null groups uncategorized rows. */
+	meterKey: string().nullable(),
+	/** Charged this period, µc. */
+	microCredits: number$1(),
+	/** Tracked-but-not-charged usage (e.g. BYOK LLM calls), display USD. */
+	unchargedUsd: number$1()
+});
+object({
+	periodStart: isoDateTime$6.nullable(),
+	periodEnd: isoDateTime$6.nullable(),
+	totalMicroCredits: number$1(),
+	byMeter: array(BillingUsageMeterSchema)
+});
+const billingLedgerEntryTypeSchema = _enum([
+	"grant_plan",
+	"grant_prepaid",
+	"expire_plan",
+	"adjustment"
+]);
+object({
+	entries: array(object({
+		id: string(),
+		entryType: billingLedgerEntryTypeSchema,
+		label: string(),
+		/** Signed: positive grants, negative expirations/adjustments. */
+		microCredits: number$1(),
+		bucket: _enum(["plan", "prepaid"]).nullable(),
+		/** Stripe invoice behind the entry, when there is one — powers "View invoice". */
+		stripeInvoiceId: string().nullable(),
+		createdAt: isoDateTime$6
+	})),
+	/** Set only when the latest payment failure is newer than the latest successful payment. */
+	lastPaymentFailureAt: isoDateTime$6.nullable()
+});
+object({ 
+/** Web-app path to land on after Checkout (must be a path, not a URL). */
+returnPath: string().startsWith("/").max(512).optional() });
+object({
+	packId: string(),
+	returnPath: string().startsWith("/").max(512).optional()
+});
+object({ returnPath: string().startsWith("/").max(512).optional() });
+object({ url: string().url() });
+object({
+	/** Hosted invoice page (view, download, receipt). */
+	url: string().url(),
+	/** Direct PDF download when Stripe provides one. */
+	pdf: string().url().nullable()
+});
+object({ 
+/** Stripe Checkout Session id from the `session_id` success-URL param. */
+sessionId: string().min(1).max(255) });
+object({
+	/**
+	* `granted` — credits are in the wallet now; `processing` — payment not
+	* complete yet, the webhook will finish it; `ignored` — not a confirmable
+	* session for this org.
+	*/
+	status: _enum([
+		"granted",
+		"processing",
+		"ignored"
+	]),
+	reason: string().optional()
+});
+object({
+	enabled: boolean(),
+	thresholdMicroCredits: number$1().int().positive().optional(),
+	packId: string().optional()
+});
+const BillingUsageEventSourceSchema = _enum([
+	"ai_gateway",
+	"sandbox",
+	"web_proxy",
+	"storage",
+	"dispatch",
+	"poll"
+]);
+const BillingUsageMeterKeySchema = _enum([
+	"llm",
+	"vm_second",
+	"web_search",
+	"web_fetch",
+	"workflow_run",
+	"agent_run",
+	"poll_trigger",
+	"tigris_storage"
+]);
+const BillingUsageKeySourceSchema = _enum(["platform", "byok"]);
+const BillingUsageRunKindSchema = _enum(["agent", "workflow"]);
+object({ events: array(object({
+	projectId: string().min(1).max(255).nullable().optional(),
+	runId: string().min(1).max(255).nullable().optional(),
+	runKind: BillingUsageRunKindSchema.nullable().optional(),
+	source: BillingUsageEventSourceSchema,
+	sourceEventId: string().min(1).max(512),
+	meterKey: BillingUsageMeterKeySchema,
+	quantity: number$1().finite().nonnegative(),
+	unit: string().min(1).max(64),
+	providerCostUsd: number$1().finite().nonnegative().nullable().optional(),
+	keySource: BillingUsageKeySourceSchema.nullable().optional(),
+	occurredAt: isoDateTime$6,
+	metadata: record(string(), unknown()).nullable().optional()
+}).strict()).min(1).max(100) }).strict();
+object({
+	accepted: number$1().int().nonnegative(),
+	inserted: number$1().int().nonnegative(),
+	duplicate: number$1().int().nonnegative(),
+	settledLedgerId: string().nullable(),
+	chargeMicroCredits: number$1().int().nonnegative()
+});
 /** Messaging platforms that support agent gateway bindings. */
 const ChannelPlatformKeySchema = _enum(["slack"]);
 const ChannelReactionSupportSchema = _enum([
@@ -5666,15 +5846,18 @@ object({
 	integrationDescription: string().min(1),
 	logo: string().url().nullable().optional(),
 	authKind: AppAuthKindSchema,
-	oauthScopes: array(OAuthScopeOptionSchema),
 	/** Where app metadata and execution are sourced (e.g. composio, custom). */
 	source: AppSourceSchema,
+	/** Endpoint URL for MCP, OpenAPI, or GraphQL custom apps. */
+	url: string().url().nullable().optional(),
+	/** True when the app has a non-empty credential field template. */
+	hasCredentialFields: boolean().optional()
+}).extend({
+	oauthScopes: array(OAuthScopeOptionSchema),
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
 	/** Composio auth scheme when credentialFields are present. */
 	credentialScheme: AppCredentialSchemeSchema.optional(),
-	/** Endpoint URL for MCP, OpenAPI, or GraphQL custom apps. */
-	url: string().url().nullable().optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -5796,7 +5979,11 @@ const AppCredentialConnectionKindSchema = _enum(["oauth", "manual"]);
 const OAuthPermissionModeSchema = _enum(["default", "restricted"]);
 const optionalTimestamp$1 = string().optional();
 const nullableOptionalTimestamp = string().nullable().optional();
-object({
+/**
+* Summary row for the apps/credentials table and credential detail page.
+* Plaintext secrets are never returned — only masked `keyPreviews`.
+*/
+const AppCredentialSummarySchema = object({
 	id: string().min(1),
 	appId: string().min(1),
 	/** Stable per-scope identifier; pass to `--credential` to pin a specific instance. */
@@ -5887,7 +6074,19 @@ object({
 	isDefault: boolean().optional(),
 	value: credentialSecretValueSchema.optional()
 }).refine((input) => input.label !== void 0 || input.isDefault !== void 0 || input.value !== void 0, { message: "At least one field is required" });
-const CredentialAssignmentTargetTypeSchema = _enum(["workflow", "agent"]);
+object({
+	limit: number().int().min(1).max(200).optional(),
+	cursor: string().min(1).optional()
+});
+object({
+	items: array(AppCredentialSummarySchema),
+	nextCursor: string().nullable()
+});
+const CredentialAssignmentTargetTypeSchema = _enum([
+	"workflow",
+	"agent",
+	"poll"
+]);
 object({ assignments: array(object({
 	id: string(),
 	targetType: CredentialAssignmentTargetTypeSchema,
@@ -6002,7 +6201,11 @@ const ValidationErrorDetailSchema = object({
 	message: string()
 });
 /** Machine-readable codes returned in standard API error bodies. */
-const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(_enum(["needs_org_selection", "org_unverified"]));
+const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(_enum([
+	"needs_org_selection",
+	"org_unverified",
+	"connector_unavailable"
+]));
 object({
 	error: string(),
 	code: ErrorResponseCodeSchema.optional(),
@@ -6113,6 +6316,17 @@ union([
 	SkipResponseSchema,
 	object({ runId: string() })
 ]);
+object({
+	sql: string().min(1),
+	params: array(unknown()).default([]),
+	method: string().min(1).optional()
+});
+object({ migrations: array(object({
+	sql: array(string().min(1)),
+	hash: string().min(1),
+	folderMillis: number$1()
+})) });
+object({ results: array(object({ rows: array(unknown()) })) });
 const RunSourceKindSchema = _enum([
 	"api",
 	"trigger",
@@ -6151,6 +6365,191 @@ object({
 	attachmentId: string(),
 	attachmentSlug: string()
 });
+const HistoryRunKindSchema = _enum(["workflow", "agent"]);
+const HistoryRunStatusSchema = _enum([
+	"pending",
+	"running",
+	"sleeping",
+	"waiting_hook",
+	"completed",
+	"failed",
+	"canceled"
+]);
+const HistoryRunActorSchema = object({
+	userId: string(),
+	name: string(),
+	avatarUrl: string().nullable().optional()
+});
+const HistoryRunUsageLineItemSchema = object({
+	id: string(),
+	label: string(),
+	/** Amount debited from the org's Keystroke balance for this line. */
+	billedUsd: number$1(),
+	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
+	providerCostUsd: number$1().nullable().optional(),
+	keySource: _enum(["byok", "platform"]).nullable().optional()
+});
+const HistoryRunUsageSchema = object({
+	runDurationMs: number$1().nullable(),
+	lineItems: array(HistoryRunUsageLineItemSchema),
+	/** Sum of `billedUsd` — what Keystroke charged for this run. */
+	totalBilledUsd: number$1().nullable(),
+	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
+	externalProviderCostUsd: number$1().nullable().optional()
+});
+const HistoryRunSchema = object({
+	id: string(),
+	kind: HistoryRunKindSchema,
+	traceId: string().nullable(),
+	projectId: string(),
+	projectName: string(),
+	resourceKey: string(),
+	resourceId: string(),
+	resourceName: string(),
+	status: HistoryRunStatusSchema,
+	triggeredAt: string(),
+	timeInQueueMs: number$1().nullable(),
+	startedAt: string(),
+	finishedAt: string().nullable(),
+	durationMs: number$1().nullable(),
+	triggerLabel: string(),
+	triggerRaw: string(),
+	ranAs: HistoryRunActorSchema.nullable(),
+	modelsUsed: array(string()),
+	otherServicesUsed: array(string()),
+	totalCostUsd: number$1().nullable(),
+	messageCount: number$1().optional(),
+	stepCount: number$1().optional()
+});
+const HistoryTraceSpanSchema = object({
+	id: string(),
+	traceId: string(),
+	parentSpanId: string().nullable(),
+	kind: string(),
+	refId: string(),
+	name: string(),
+	status: string(),
+	startedAt: string(),
+	finishedAt: string().nullable(),
+	metadata: unknown().nullable(),
+	error: unknown().nullable()
+});
+const HistoryTraceLogSchema = object({
+	id: string(),
+	traceId: string(),
+	spanId: string(),
+	seq: number$1(),
+	level: string(),
+	message: string(),
+	data: unknown().nullable(),
+	source: string(),
+	createdAt: string()
+});
+const HistoryTraceTriggerSchema = object({
+	triggerType: string(),
+	triggerRunId: string(),
+	workflowKey: string().optional(),
+	agentKey: string().optional(),
+	attachmentId: string().nullable().optional(),
+	attachmentSlug: string().nullable().optional(),
+	route: string().optional(),
+	sourcePath: string().nullable().optional()
+}).nullable();
+const HistoryTraceGatewaySchema = object({
+	gatewayAttachmentId: string(),
+	gatewayAttachmentKey: string(),
+	threadId: string().optional(),
+	channelId: string().optional(),
+	mode: string().optional()
+}).nullable();
+const HistoryTraceSchema = object({
+	traceId: string(),
+	trigger: HistoryTraceTriggerSchema,
+	gateway: HistoryTraceGatewaySchema,
+	spans: array(HistoryTraceSpanSchema),
+	logs: array(HistoryTraceLogSchema)
+});
+const HistoryWorkflowStepSchema = object({
+	id: string(),
+	actionKey: string(),
+	output: unknown(),
+	completedAt: string()
+});
+const HistoryWorkflowRunDetailSchema = object({
+	kind: literal("workflow"),
+	run: object({
+		id: string(),
+		workflowKey: string(),
+		status: HistoryRunStatusSchema,
+		trigger: string(),
+		triggeredAt: string(),
+		startedAt: string().nullable(),
+		finishedAt: string().nullable(),
+		input: unknown().nullable(),
+		output: unknown().nullable(),
+		error: unknown().nullable()
+	}),
+	trigger: object({
+		id: string(),
+		attachmentSlug: string().nullable(),
+		triggerType: string(),
+		sourcePath: string().nullable(),
+		payload: unknown().nullable(),
+		triggeredAt: string()
+	}).nullable(),
+	steps: array(HistoryWorkflowStepSchema),
+	trace: HistoryTraceSchema.nullable(),
+	ranAs: HistoryRunActorSchema.nullable().optional(),
+	usage: HistoryRunUsageSchema.nullable().optional()
+});
+const HistoryAgentCompactionEventSchema = object({
+	seq: number$1(),
+	createdAt: string(),
+	compactionModel: string(),
+	sourceModel: string(),
+	estimatedBeforeTokens: number$1().optional(),
+	retainedTailEstimate: number$1().optional(),
+	durable: boolean()
+});
+const HistoryRunDetailSchema = discriminatedUnion("kind", [HistoryWorkflowRunDetailSchema, object({
+	kind: literal("agent"),
+	runId: string(),
+	session: object({
+		id: string(),
+		agentKey: string(),
+		status: HistoryRunStatusSchema,
+		source: _enum([
+			"api",
+			"gateway",
+			"trigger",
+			"workflow",
+			"agent"
+		]),
+		sourceId: string().nullable(),
+		createdAt: string(),
+		updatedAt: string(),
+		messageCount: number$1(),
+		error: unknown().nullable()
+	}),
+	gateway: object({
+		threadId: string(),
+		attachmentSlug: string().nullable()
+	}).nullable(),
+	messages: array(record(string(), unknown())),
+	/** Sanitized context-compaction markers for the conversation timeline. */
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([]),
+	trace: HistoryTraceSchema.nullable(),
+	ranAs: HistoryRunActorSchema.nullable().optional(),
+	usage: HistoryRunUsageSchema.nullable().optional()
+})]);
+object({
+	project: string().min(1).optional(),
+	status: HistoryRunStatusSchema.optional(),
+	kind: HistoryRunKindSchema.optional(),
+	limit: number().int().min(1).max(200).optional()
+});
+HistoryRunDetailSchema.nullable();
+HistoryRunSchema.nullable();
 const WorkflowRunStatusSchema = _enum([
 	"pending",
 	"running",
@@ -6332,6 +6731,7 @@ const AgentSessionRecordSchema = object({
 	status: AgentSessionStatusSchema,
 	source: RunSourceKindSchema,
 	sourceId: string().nullable(),
+	title: string().nullable(),
 	createdAt: string(),
 	updatedAt: string(),
 	parentSpanId: string().nullable(),
@@ -6370,17 +6770,18 @@ const AgentEventSchema = object({
 });
 object({
 	session: AgentSessionRecordSchema,
+	activeRunId: string().nullable().default(null),
 	gateway: GatewaySessionDetailSchema.nullable(),
 	messages: array(record(string(), unknown())),
 	events: array(AgentEventSchema),
+	/**
+	* Sanitized context-compaction markers, populated alongside `messages`.
+	* A cheap indexed lookup (session_id + event_type) — never the full event
+	* log. Defaulted so older servers remain compatible.
+	*/
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([]),
 	trace: TraceResponseSchema.nullable()
 });
-object({ sinceSeq: number().int().min(0).optional() });
-object({
-	status: AgentSessionStatusSchema,
-	messages: array(record(string(), unknown())),
-	live: record(string(), unknown()).nullable()
-});
 const SlackGatewayModeSchema = _enum([
 	"mention",
 	"channel",
@@ -6415,171 +6816,6 @@ object({ agents: array(object({
 	name: string().optional(),
 	route: string()
 })) });
-const HistoryRunKindSchema = _enum(["workflow", "agent"]);
-const HistoryRunStatusSchema = _enum([
-	"pending",
-	"running",
-	"sleeping",
-	"waiting_hook",
-	"completed",
-	"failed",
-	"canceled"
-]);
-const HistoryRunActorSchema = object({
-	userId: string(),
-	name: string(),
-	avatarUrl: string().nullable().optional()
-});
-const HistoryRunUsageLineItemSchema = object({
-	id: string(),
-	label: string(),
-	amountUsd: number$1()
-});
-const HistoryRunUsageSchema = object({
-	runDurationMs: number$1().nullable(),
-	lineItems: array(HistoryRunUsageLineItemSchema),
-	totalExcludingDurationUsd: number$1().nullable()
-});
-const HistoryRunSchema = object({
-	id: string(),
-	kind: HistoryRunKindSchema,
-	traceId: string().nullable(),
-	projectId: string(),
-	projectName: string(),
-	resourceKey: string(),
-	resourceId: string(),
-	resourceName: string(),
-	status: HistoryRunStatusSchema,
-	triggeredAt: string(),
-	timeInQueueMs: number$1().nullable(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	durationMs: number$1().nullable(),
-	triggerLabel: string(),
-	triggerRaw: string(),
-	ranAs: HistoryRunActorSchema.nullable(),
-	modelsUsed: array(string()),
-	otherServicesUsed: array(string()),
-	totalCostUsd: number$1().nullable(),
-	messageCount: number$1().optional(),
-	stepCount: number$1().optional()
-});
-const HistoryTraceSpanSchema = object({
-	id: string(),
-	traceId: string(),
-	parentSpanId: string().nullable(),
-	kind: string(),
-	refId: string(),
-	name: string(),
-	status: string(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	metadata: unknown().nullable(),
-	error: unknown().nullable()
-});
-const HistoryTraceLogSchema = object({
-	id: string(),
-	traceId: string(),
-	spanId: string(),
-	seq: number$1(),
-	level: string(),
-	message: string(),
-	data: unknown().nullable(),
-	source: string(),
-	createdAt: string()
-});
-const HistoryTraceTriggerSchema = object({
-	triggerType: string(),
-	triggerRunId: string(),
-	workflowKey: string().optional(),
-	agentKey: string().optional(),
-	attachmentId: string().nullable().optional(),
-	attachmentSlug: string().nullable().optional(),
-	route: string().optional(),
-	sourcePath: string().nullable().optional()
-}).nullable();
-const HistoryTraceGatewaySchema = object({
-	gatewayAttachmentId: string(),
-	gatewayAttachmentKey: string(),
-	threadId: string().optional(),
-	channelId: string().optional(),
-	mode: string().optional()
-}).nullable();
-const HistoryTraceSchema = object({
-	traceId: string(),
-	trigger: HistoryTraceTriggerSchema,
-	gateway: HistoryTraceGatewaySchema,
-	spans: array(HistoryTraceSpanSchema),
-	logs: array(HistoryTraceLogSchema)
-});
-const HistoryWorkflowStepSchema = object({
-	id: string(),
-	actionKey: string(),
-	output: unknown(),
-	completedAt: string()
-});
-const HistoryRunDetailSchema = discriminatedUnion("kind", [object({
-	kind: literal("workflow"),
-	run: object({
-		id: string(),
-		workflowKey: string(),
-		status: HistoryRunStatusSchema,
-		trigger: string(),
-		triggeredAt: string(),
-		startedAt: string().nullable(),
-		finishedAt: string().nullable(),
-		input: unknown().nullable(),
-		output: unknown().nullable(),
-		error: unknown().nullable()
-	}),
-	trigger: object({
-		id: string(),
-		attachmentSlug: string().nullable(),
-		triggerType: string(),
-		sourcePath: string().nullable(),
-		payload: unknown().nullable(),
-		triggeredAt: string()
-	}).nullable(),
-	steps: array(HistoryWorkflowStepSchema),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-}), object({
-	kind: literal("agent"),
-	runId: string(),
-	session: object({
-		id: string(),
-		agentKey: string(),
-		status: HistoryRunStatusSchema,
-		source: _enum([
-			"api",
-			"gateway",
-			"trigger",
-			"workflow",
-			"agent"
-		]),
-		sourceId: string().nullable(),
-		createdAt: string(),
-		updatedAt: string(),
-		messageCount: number$1(),
-		error: unknown().nullable()
-	}),
-	gateway: object({
-		threadId: string(),
-		attachmentSlug: string().nullable()
-	}).nullable(),
-	messages: array(record(string(), unknown())),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-})]);
-object({
-	project: string().min(1).optional(),
-	status: HistoryRunStatusSchema.optional(),
-	kind: HistoryRunKindSchema.optional()
-});
-HistoryRunDetailSchema.nullable();
-HistoryRunSchema.nullable();
 object({ subscriptions: array(object({
 	id: string(),
 	workflowKey: string(),
@@ -6674,7 +6910,8 @@ const TriggerRunRecordSchema = object({
 object({
 	limit: number().int().min(1).max(100).optional().default(20),
 	cursor: string().min(1).optional(),
-	triggerType: TriggerRunTypeSchema.optional()
+	triggerType: TriggerRunTypeSchema.optional(),
+	outcome: TriggerRunOutcomeSchema.optional()
 });
 object({
 	items: array(TriggerRunSummarySchema),
@@ -6742,7 +6979,8 @@ const WorkspaceTriggerRunStatusSchema = _enum([
 const WorkspaceTriggerSkipReasonSchema = _enum([
 	"filtered",
 	"no_new_data",
-	"transform_undefined"
+	"transform_undefined",
+	"payload_mismatch"
 ]);
 /**
 * A single downstream run/session a dispatched fire produced. A fan-out fire can
@@ -6773,7 +7011,9 @@ const WorkspaceTriggerRunOutcomeSchema = discriminatedUnion("kind", [
 	}),
 	object({
 		kind: literal("skipped"),
-		reason: WorkspaceTriggerSkipReasonSchema
+		reason: WorkspaceTriggerSkipReasonSchema,
+		/** One-line Zod issue summary when reason is payload_mismatch. */
+		detail: string().nullable().optional()
 	}),
 	object({
 		kind: literal("failed"),
@@ -6846,6 +7086,30 @@ object({
 	input: TriggerOverviewInputSchema
 });
 object({ enabled: boolean() });
+object({
+	input: unknown().optional(),
+	workflow: string().min(1).optional(),
+	agent: string().min(1).optional()
+});
+object({ runId: string().min(1) });
+object({
+	type: TriggerTypeSchema,
+	attachments: array(object({
+		attachmentSlug: string().min(1),
+		kind: TriggerTargetKindSchema,
+		targetSlug: string().min(1),
+		targetName: string().min(1),
+		enabled: boolean(),
+		/** Webhook attachment JSON Schema used to drive the invoke form. */
+		requestSchema: record(string(), unknown()).optional()
+	})),
+	/** Cron source static payload — display only; never overridden on invoke. */
+	staticPayload: unknown().optional()
+});
+object({
+	manual: literal(true),
+	attachments: array(string().min(1)).optional()
+});
 const OrganizationMemberRoleSchema = _enum([
 	"owner",
 	"admin",
@@ -6858,16 +7122,24 @@ const OrganizationMemberStatusSchema = _enum([
 	"suspended"
 ]);
 const InvitableOrganizationMemberRoleSchema = _enum(["admin", "builder"]);
-const isoDateTime$4 = string().datetime();
-object({
+const isoDateTime$5 = string().datetime();
+const OrganizationMemberSchema = object({
 	id: string(),
 	name: string(),
 	email: string().email(),
 	role: OrganizationMemberRoleSchema,
 	status: OrganizationMemberStatusSchema,
 	avatarUrl: string().optional(),
-	joinedAt: isoDateTime$4.optional(),
-	lastActiveAt: isoDateTime$4.nullable().optional()
+	joinedAt: isoDateTime$5.optional(),
+	lastActiveAt: isoDateTime$5.nullable().optional()
+});
+object({
+	limit: number().int().min(1).max(200).optional(),
+	cursor: string().min(1).optional()
+});
+object({
+	items: array(OrganizationMemberSchema),
+	nextCursor: string().nullable()
 });
 object({
 	emails: array(string().trim().email()).min(1),
@@ -6894,7 +7166,7 @@ object({
 	role: OrganizationMemberRoleSchema
 });
 object({ success: literal(true) });
-const isoDateTime$3 = string().datetime();
+const isoDateTime$4 = string().datetime();
 const ApiKeyCreatorSchema = object({
 	id: string(),
 	name: string(),
@@ -6907,12 +7179,37 @@ const ApiKeySummarySchema = object({
 	id: string(),
 	name: string(),
 	keyPreview: string(),
-	createdAt: isoDateTime$3,
+	createdAt: isoDateTime$4,
 	createdBy: ApiKeyCreatorSchema,
 	isCreatedByCurrentUser: boolean()
 });
 object({ name: string().trim().min(1).max(128) });
 ApiKeySummarySchema.extend({ secret: string() });
+const isoDateTime$3 = string().datetime();
+const ManagedServiceKindSchema = _enum(["llm"]);
+_enum([
+	"openai",
+	"anthropic",
+	"google",
+	"groq",
+	"xai"
+]);
+object({
+	id: string(),
+	kind: ManagedServiceKindSchema,
+	provider: string(),
+	keyPreview: string(),
+	createdAt: isoDateTime$3,
+	updatedAt: isoDateTime$3,
+	createdBy: ApiKeyCreatorSchema,
+	isCreatedByCurrentUser: boolean()
+});
+object({
+	kind: ManagedServiceKindSchema.default("llm"),
+	provider: string().trim().min(1),
+	apiKey: string().trim().min(1)
+});
+object({ apiKey: string().trim().min(1) });
 const ProjectUserRoleSchema = _enum(["admin", "builder"]);
 const ProjectInvitePermissionSchema = _enum(["admin", "all"]);
 const ProjectMemberStatusSchema = _enum(["active", "invited"]);
@@ -6962,14 +7259,6 @@ object({
 	uploadUrl: url(),
 	storageKey: string().min(1)
 });
-function isValidIanaTimezone(value) {
-	try {
-		Intl.DateTimeFormat(void 0, { timeZone: value });
-		return true;
-	} catch {
-		return false;
-	}
-}
 const UserInterfaceThemeSchema = _enum([
 	"system",
 	"light",
@@ -7490,17 +7779,48 @@ function parseOrgArtifactsFromEnv(env = process.env) {
 	});
 }
 //#endregion
+//#region src/org-worker-token.ts
+function sign(secret, organizationId) {
+	return createHmac("sha256", secret).update(`org-worker:${organizationId}`).digest("base64url");
+}
+/**
+* Per-org worker token: `{organizationId}.{hmac}`. Self-describing so the
+* platform can tell which org a machine is calling as, and stateless — verified
+* by re-signing with the shared `PLATFORM_WORKER_TOKEN` secret.
+*/
+function mintOrgWorkerToken(secret, organizationId) {
+	return `${organizationId}.${sign(secret, organizationId)}`;
+}
+function verifyOrgWorkerToken(secret, token) {
+	if (!secret || !token) return;
+	const separator = token.lastIndexOf(".");
+	if (separator <= 0) return;
+	const organizationId = token.slice(0, separator);
+	const signature = Buffer.from(token.slice(separator + 1));
+	const expected = Buffer.from(sign(secret, organizationId));
+	if (signature.length !== expected.length || !timingSafeEqual(signature, expected)) return;
+	return { organizationId };
+}
+//#endregion
 //#region src/runtime-env.ts
+/** Non-secret runtime config forwarded into org workers. Never include platform secrets. */
 const RUNTIME_ENV_KEYS = [
-	"BETTER_AUTH_SECRET",
 	"PUBLIC_PLATFORM_URL",
 	"PUBLIC_PLATFORM_PROXY_URL",
 	"PUBLIC_WEB_URL",
-	"POSTGRES_SSL",
 	"UPSTASH_REDIS_URL",
 	"REDIS_URL",
 	"KEYSTROKE_QUEUE_PREFIX"
 ];
+/** Env keys that must never be forwarded into untrusted org workers. */
+const FORBIDDEN_WORKER_ENV_KEYS = [
+	"BETTER_AUTH_SECRET",
+	"DATABASE_URL",
+	"POSTGRES_PASSWORD",
+	"PLATFORM_WORKER_TOKEN",
+	"STRIPE_SECRET_KEY",
+	"CREDENTIAL_ENCRYPTION_KEY"
+];
 /** Provider and gateway env forwarded from the platform into project servers. */
 const PROVIDER_ENV_KEYS = [
 	"ANTHROPIC_API_KEY",
@@ -7510,25 +7830,6 @@ const PROVIDER_ENV_KEYS = [
 ];
 /** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */
 const DEV_PLATFORM_WORKER_TOKEN = "dev-platform-worker-token";
-const PROJECT_DATABASE_ENV_KEYS = [
-	"POSTGRES_HOST",
-	"POSTGRES_PORT",
-	"POSTGRES_DB",
-	"POSTGRES_USER",
-	"POSTGRES_PASSWORD",
-	"DATABASE_SEARCH_PATH"
-];
-/** Per-project postgres env injected into every project server container/machine. */
-function projectDatabaseRuntimeEnv(database) {
-	return {
-		POSTGRES_HOST: rewriteLoopbackHost(database.host),
-		POSTGRES_PORT: String(database.port),
-		POSTGRES_DB: database.database,
-		POSTGRES_USER: database.user,
-		POSTGRES_PASSWORD: database.password,
-		DATABASE_SEARCH_PATH: database.searchPath
-	};
-}
 /**
 * Builds the launch spec for an org worker. Each deploy artifact is encoded in
 * `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.
@@ -7555,10 +7856,7 @@ function buildRuntimeEnv(source, artifacts, database, extraEnv) {
 	]);
 	for (const key of RUNTIME_ENV_KEYS) {
 		const value = source[key]?.trim();
-		if (!value) {
-			if (key === "POSTGRES_SSL") throw new Error("POSTGRES_SSL is required");
-			continue;
-		}
+		if (!value) continue;
 		entries.set(key, value);
 	}
 	if (!extraEnv) for (const key of PROVIDER_ENV_KEYS) {
@@ -7567,9 +7865,9 @@ function buildRuntimeEnv(source, artifacts, database, extraEnv) {
 	}
 	const worker = resolveWorkerRuntimeConfig(source);
 	entries.set("PLATFORM_URL", worker.platformUrl);
-	entries.set("WORKER_INTERNAL_TOKEN", worker.workerToken);
-	for (const [key, value] of Object.entries(projectDatabaseRuntimeEnv(database))) entries.set(key, value);
+	entries.set("WORKER_INTERNAL_TOKEN", mintOrgWorkerToken(worker.workerToken, database.organizationId));
 	if (extraEnv) for (const [key, value] of Object.entries(extraEnv)) entries.set(key, value);
+	for (const key of FORBIDDEN_WORKER_ENV_KEYS) entries.delete(key);
 	return Object.fromEntries(entries);
 }
 function resolvePlatformWorkerToken(source = process.env) {
@@ -7820,6 +8118,6 @@ async function fetchDeployStatus(baseUrl, options = {}) {
 	}
 }
 //#endregion
-export { DEV_PLATFORM_WORKER_TOKEN, PROJECT_DATABASE_ENV_KEYS, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, RUNTIME_PING_TIMEOUT_MS, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, defaultHostingPlugin, dockerPlugin, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, projectDatabaseRuntimeEnv, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, waitForHealth };
+export { DEV_PLATFORM_WORKER_TOKEN, FORBIDDEN_WORKER_ENV_KEYS, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, RUNTIME_PING_TIMEOUT_MS, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, defaultHostingPlugin, dockerPlugin, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, verifyOrgWorkerToken, waitForHealth };
 
 //# sourceMappingURL=index.mjs.map