@keystrokehq/platform 0.1.147 → 0.1.149

package/dist/{start-BRUA3xO7.mjs → start-jeNqY0AL.mjs}

@@ -1,6 +1,6 @@
-import { C as setManagedServiceCredential, S as setCredentialInstanceSecretValue, _ as withMcpReadClient, a as completeMcpOAuthConnect, b as readCredentialInstanceSecret, c as describeCredentialBindings, d as discoverOpenApiApp, f as isDiscoveryError, g as PublicHttpUrlError, h as withCredentialAssignments, i as beginMcpOAuthConnect, l as discoverGraphqlApp, m as verifyOAuthState, n as cronPayloadSchema, o as createOAuthState, p as resolveConnectedMcpAuthHeaders, r as McpOAuthConnectError, s as decodeOAuthState, u as discoverMcpApp, v as deleteCredentialInstanceSecret, x as setCredentialInstanceSecret, y as deleteManagedServiceCredential$1 } from "./dist-BIKIpPhu.mjs";
-import { $ as CompleteProjectArtifactResponseSchema, $i as resolveUniqueCredentialInstanceLabel, $n as PublishManagedDeployCandidateResponseSchema, $r as WorkflowCanvasRunSchema, $t as ListAppsResponseSchema, Aa as resolvePublicPlatformOrigin, Ai as isSlackCustomAppOauthSlug, An as PrepareManagedDeployRequestSchema, Ar as TemplateFilesResponseSchema, At as DuplicateCredentialRequestSchema, B as AgentMemoryFileSummarySchema, Bi as mapProjectSettings, Bn as ProjectGitRemoteRequestSchema, Br as UpdateOrganizationMemberResponseSchema, Bt as GraphqlDiscoverResponseSchema, Cn as OrganizationSidebarBrandingSchema, Cr as StoredProjectSourceManifestSchema, Ct as DownloadActiveProjectArtifactResponseSchema, D as projectArtifactBlobKey, Da as DEFAULT_CLOUD_PLATFORM_ORIGIN, Di as isLlmProviderSlug, Dr as SubmitMarketingContactResponseSchema, Dt as DraftFileContentQuerySchema, E as prefetchCanvasShards, En as PROJECT_SLUG_TAKEN_MESSAGE, Er as SubmitMarketingContactRequestSchema, Et as DraftConflictResponseSchema, F as AcceptOrganizationInvitationResponseSchema, Fi as mapOrganizationMember, Fn as PresignOrgLogoResponseSchema, Fr as TriggerInvokeResponseSchema, Ft as GetAppCatalogEntryResponseSchema, G as AppSlugAvailabilityQuerySchema, Gi as normalizeUserPreferences, Gn as ProjectSettingsResponseSchema, Gr as UpdateProjectSettingsRequestSchema, Gt as HistoryRunListResponseSchema, H as AgentSummaryListResponseSchema, Hn as ProjectGitStatusResponseSchema, Hr as UpdateProjectMemberRequestSchema, Ht as HistoryRunCancelResponseSchema, I as ActionsCatalogShardSchema, Ii as mapProject, In as PresignProjectSourceRequestSchema, Ir as TriggerRunListQuerySchema, It as GetCredentialResponseSchema, J as CancelManagedDeployResponseSchema, Ji as organizationSlugErrorCodeFromMessage, Jn as ProjectSourceResourcesSchema, Jr as UserAvatarPatchSchema, Jt as InviteProjectMembersRequestSchema, K as AppSlugAvailabilityResponseSchema, Kn as ProjectSlugAvailabilityQuerySchema, Kr as UploadProjectSourceManifestRequestSchema, Kt as InviteOrganizationMembersRequestSchema, L as ActiveOrganizationResponseSchema, Li as mapProjectArtifact, Ln as PresignProjectSourceResponseSchema, Lr as UpdateCredentialRequestSchema, Lt as GetCustomAppResponseSchema, M as publicKeystrokeAssetsObjectUrl, Mi as jsonSchemaToZod, Mn as PresignCustomAppLogoRequestSchema, Mr as TriggerAttachmentUpdateRequestSchema, Mt as ErrorResponseSchema, Ni as listenPortFromPublicUrl, Nn as PresignCustomAppLogoResponseSchema, Nr as TriggerInvokeInputsSchema, Nt as FinalizeCustomAppLogoRequestSchema, Oa as resolveExternalPlatformOrigin, Or as SubmitTeamRequestRequestSchema, Ot as DraftRevisionResponseSchema, P as userAvatarStorageKey, Pi as mapOrganizationInvitation, Pn as PresignOrgLogoRequestSchema, Pr as TriggerInvokeRequestSchema, Pt as FinalizeCustomAppLogoResponseSchema, Q as CompleteProjectArtifactRequestSchema, Qi as resolvePublicFormFields, Qn as PublishManagedDeployCandidateRequestSchema, Qr as WorkflowCanvasCredentialBindingsSchema, Qt as ListApiKeysResponseSchema, R as ActiveProjectSourceRevisionSchema, Ri as mapProjectDeployment, Rn as PresignUserAvatarRequestSchema, Rr as UpdateManagedServiceCredentialRequestSchema, Rt as GetTemplateResponseSchema, S as loadProjectSourceFiles, Sa as mintOrgWorkerToken, Sn as OrganizationSidebarBrandingPatchSchema, Sr as StartMcpOAuthConnectionResultSchema, St as DeclineOrganizationInvitationResponseSchema, T as orgLogoStorageKey, Ta as verifyOrgWorkerToken, Ti as isHelloWorldTemplateSlug, Tr as SubmitAgentFeedbackResponseSchema, Tt as DraftCommitResponseSchema, U as AgentSummarySchema, Ui as mergeUserPreferences, Un as ProjectReachabilityResponseSchema, Ur as UpdateProjectMemberResponseSchema, Ut as HistoryRunDetailResponseSchema, V as AgentSummaryDetailResponseSchema, Vi as mapUserOrganization, Vn as ProjectGitRemoteResponseSchema, Vr as UpdateOrganizationRequestSchema, Vt as HeartbeatManagedDeployResponseSchema, W as AgentWorkspaceFileSummarySchema, Wi as normalizeSlackAppHandle, Wn as ProjectResponseSchema, Wr as UpdateProjectRequestSchema, Wt as HistoryRunListQuerySchema, X as CompleteManagedDeployArtifactRequestSchema, Xi as parseStoredRouteManifest, Xn as PublicFormSubmitBodySchema, Xr as UserPreferencesPatchSchema, Xt as ListAgentMemoryFilesResponseSchema, Y as ChannelPlatformSchema, Yi as parseAppSlug, Yn as PublicFormMetadataSchema, Yr as UserAvatarSchema, Yt as InviteProjectMembersResponseSchema, Z as CompleteManagedDeployArtifactResponseSchema, Zi as projectFileId, Zn as PublicFormSubmitResponseSchema, Zr as UserPreferencesSchema, Zt as ListAgentWorkspaceFilesResponseSchema, _ as isStorageNotFoundError$1, _a as credentialInputSchema, _i as agentWorkspaceFileId, _n as ManagedServiceKindSchema, _r as SlackAppManifestRequestSchema, _t as DEFAULT_TRIGGER_OVERVIEW_MODEL, a as createAssetsStorageClient, aa as validateCredentialValueAgainstFields, ai as WorkflowRunInputsPutBodySchema, an as ListMcpAppToolsResponseSchema, ar as RenewManagedDeployUploadResponseSchema, at as CreateCustomAppRequestSchema, b as keystrokeAssetsAvatarKeyFromPublicUrl, bi as deriveCredentialInstanceSlug, bn as OpenApiDiscoverRequestSchema, br as SlugAvailabilityResponseSchema, bt as DRAFT_SNAPSHOT_PLACEHOLDER_COMMIT_SHA, c as isAppLogoStorageKey, ca as validationErrorResponse, ci as WorkflowSummaryListResponseSchema, cn as ListOrganizationMembersPageResponseSchema, cr as SLACK_CUSTOM_APP_SLUG_PREFIX, ct as CreateDraftDiffCommitRequestSchema, d as isKeystrokeAssetsAvatarPublicUrl, da as PresignChatAttachmentRequestSchema, di as WorkspaceTriggerFileSchema, dn as ListProjectFilesResponseSchema, dr as SLACK_KEYSTROKE_APP_SLUG, dt as CreateProjectArtifactRequestSchema, ea as schemaHasFileFields, ei as WorkflowCanvasSchema, en as ListChannelPlatformsResponseSchema, er as PublishedFormListResponseSchema, et as ConnectManagedServiceCredentialRequestSchema, f as isKeystrokeAssetsOrgLogoPublicUrl, fa as PresignChatAttachmentResponseSchema, fi as WorkspaceTriggerListResponseSchema, fn as ListProjectMembersResponseSchema, fr as SkillSummaryDetailResponseSchema, ft as CreateProjectArtifactResponseSchema, g as isStorageBucketNotFoundError, ga as MICRO_CREDITS_PER_CREDIT, gi as agentMemoryFileId, gn as ManagedServiceCredentialSchema, gr as SlackAppListResponseSchema, gt as CreateSlackAppResponseSchema, ha as isAllowedChatAttachmentMediaType, hi as WorkspaceWorkflowOverviewSchema, hn as ListTemplatesResponseSchema, hr as SlackAppInstallStartResponseSchema, ht as CreateSlackAppRequestSchema, i as chatAttachmentStorageKey, ia as slackCustomAppOauthSlug, ii as WorkflowManifestMetaShardSchema, in as ListManagedServiceCredentialsResponseSchema, ir as RenewManagedDeployUploadRequestSchema, it as CreateCredentialsResponseSchema, j as projectSourceBlobKey, ji as jsonSchemaToWorkflowInputSchema, jn as PrepareManagedDeployResponseSchema, jr as TemplateKindSchema, jt as DuplicateCredentialsResponseSchema, k as projectArtifactKey, ka as resolvePublicPlatformApiOrigin, kr as SubmitTeamRequestResponseSchema, kt as DraftUpdateEventSchema, l as isChatAttachmentStorageKey, li as WorkflowSummarySchema, ln as ListOrganizationsResponseSchema, lr as SLACK_GATEWAY_OAUTH_APP_KEY, lt as CreateOrganizationRequestSchema, m as isProjectArtifactIndexKey, ma as chatAttachmentExtension, mi as WorkspaceTriggerRunListResponseSchema, mn as ListProjectsResponseSchema, mr as SkillSummarySchema, mt as CreateProjectResponseSchema, n as publishDraftUpdateBestEffort, na as slackAppBindingChannelId, ni as WorkflowFormUpsertBodySchema, nn as ListCredentialsPageResponseSchema, nr as RecentResourceListResponseSchema, nt as CreateApiKeyResponseSchema, o as ensureKeystrokeAssetsBucket, oa as validateFormFieldConfig, oi as WorkflowRunInputsSchema, on as ListOrganizationInvitationsResponseSchema, or as SLACK_CUSTOM_APP_BOT_SCOPES, ot as CreateCustomAppResponseSchema, p as isOrgLogoStorageKey, pa as PublicModelsResponseSchema, pi as WorkspaceTriggerOverviewSchema, pn as ListProjectMetricsResponseSchema, pr as SkillSummaryListResponseSchema, pt as CreateProjectRequestSchema, q as CancelManagedDeployRequestSchema, qi as organizationInvitationAcceptPath, qn as ProjectSlugAvailabilityResponseSchema, qr as UploadProjectSourceResponseSchema, qt as InviteOrganizationMembersResponseSchema, r as appLogoStorageKey, ra as slackCustomAppHandleFromSlug, ri as WorkflowManifestFlowShardSchema, rn as ListDraftFilesResponseSchema, rr as RecentResourceSchema, rt as CreateCredentialsRequestSchema, s as extractRouteManifestFromArtifact, sa as validateWorkflowRunInputValues, si as WorkflowSummaryDetailResponseSchema, sn as ListOrganizationMembersPageQuerySchema, sr as SLACK_CUSTOM_APP_CREDENTIAL_SLUG, st as CreateDraftCommitRequestSchema, t as createInProcessProjectDraftNotifier, ta as schemaHasUnsupportedFormFields, ti as WorkflowFormResponseSchema, tn as ListCredentialsPageQuerySchema, tr as PublishedFormSchema, tt as CreateApiKeyRequestSchema, u as isKeystrokeAssetsAppLogoPublicUrl, ua as FilePartSchema, ui as WorkspaceTriggerDetailSchema, un as ListProjectDeploymentsResponseSchema, ur as SLACK_KEYSTROKE_APP_BOT_SCOPES, ut as CreateOrganizationResponseSchema, v as isUserAvatarStorageKey, va as mcpEntityId, vi as buildCredentialInstanceLabel, vn as McpDiscoverRequestSchema, vr as SlackAppManifestResponseSchema, vt as DEFAULT_WORKFLOW_CANVAS_MODEL, w as openModularArtifactShards, wi as isDraftSnapshotPlaceholderCommitSha, wn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, wr as SubmitAgentFeedbackRequestSchema, wt as DownloadActiveProjectSourceResponseSchema, x as keystrokeAssetsOrgLogoKeyFromPublicUrl, xi as displayCredentialAppName, xn as OpenApiDiscoverResponseSchema, xr as StartMcpOAuthConnectionInputSchema, xt as DbProxyQueryRequestSchema, y as keystrokeAssetsAppLogoKeyFromPublicUrl, yi as buildSlackAppManifest, yn as McpDiscoverResponseSchema, yr as SlugAvailabilityQuerySchema, yt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, z as AgentManifestShardSchema, zi as mapProjectMember, zn as PresignUserAvatarResponseSchema, zr as UpdateOrganizationMemberRequestSchema, zt as GraphqlDiscoverRequestSchema } from "./project-draft-notifier-IV-0I5b0.mjs";
-import { $ as canInviteToProject, A as toProjectGitRepository, B as requireSession, C as createProjectSourceServiceFactory, D as ProjectRepositoryNotReadyError, E as trackProductEvent, F as authorize, G as agentListScope, H as routeProject, I as forbidden, J as canAccessAgent, K as apiKeyListScope, L as requireOrganization, O as archiveProjectRepositoryInline, P as isProjectGitProviderError, Q as canInviteRole, R as requireProject, T as identifyOrganizationGroup, U as accessContext, V as requireVerifiedOrganization, W as getProjectInvitePermission, X as canAccessSkill, Y as canAccessHistoryRun, Z as canAccessWorkflow, _ as commitProjectDraftFromDiff, a as cancelManagedDeploy, at as credentialListScope, c as prepareManagedDeploy, ct as organizationActions, d as ManagedDeployError, dt as skillListScope, et as canReadApiKey, f as deleteManagedDeployCandidateBestEffort, ft as userActions, g as commitProjectDraft, gt as pingProjectTarget, ht as log, i as workerOrganizationIdFromContext, it as checkPermission, j as MANAGED_DRAFT_BRANCH, k as provisionProjectRepositoryInline, l as publishManagedDeployCandidate, lt as projectActions, mt as event, n as readWorkerTokenFromRequest, nt as canRevokeApiKey, o as completeManagedDeployArtifact, ot as historyListScope, p as promoteManagedDeployMain, pt as workflowListScope, q as apiKeysActions, r as requireWorkerToken, rt as canViewCredential, s as heartbeatManagedDeploy, st as managedServicesActions, t as withProjectScope, tt as canReadProject, u as renewManagedDeployUpload, ut as projectListScope, v as mapDraftCommitError, w as mapProjectSourceError, x as assertAvailable, y as ensureProjectRepositoryReady, z as requireProjectMembership } from "./with-project-scope-M7_dsWGP.mjs";
+import { C as setManagedServiceCredential, S as setCredentialInstanceSecretValue, _ as withMcpReadClient, a as completeMcpOAuthConnect, b as readCredentialInstanceSecret, c as describeCredentialBindings, d as discoverOpenApiApp, f as isDiscoveryError, g as PublicHttpUrlError, h as withCredentialAssignments, i as beginMcpOAuthConnect, l as discoverGraphqlApp, m as verifyOAuthState, n as cronPayloadSchema, o as createOAuthState, p as resolveConnectedMcpAuthHeaders, r as McpOAuthConnectError, s as decodeOAuthState, u as discoverMcpApp, v as deleteCredentialInstanceSecret, x as setCredentialInstanceSecret, y as deleteManagedServiceCredential$1 } from "./dist-Cy5yFN73.mjs";
+import { $ as CompleteProjectArtifactRequestSchema, $i as resolvePublicFormFields, $n as PublishManagedDeployCandidateRequestSchema, $r as WorkflowCanvasCredentialBindingsSchema, $t as ListApiKeysResponseSchema, Aa as resolvePublicPlatformApiOrigin, Ar as SubmitTeamRequestResponseSchema, At as DraftUpdateEventSchema, B as AgentManifestShardSchema, Bi as mapProjectMember, Bn as PresignUserAvatarResponseSchema, Br as UpdateOrganizationMemberRequestSchema, Bt as GraphqlDiscoverRequestSchema, Ca as mintOrgWorkerToken, Cn as OrganizationSidebarBrandingPatchSchema, Cr as StartMcpOAuthConnectionResultSchema, Ct as DeclineOrganizationInvitationResponseSchema, D as projectArtifactBlobKey, Dn as PROJECT_SLUG_TAKEN_MESSAGE, Dr as SubmitMarketingContactRequestSchema, Dt as DraftConflictResponseSchema, E as prefetchCanvasShards, Ea as verifyOrgWorkerToken, Ei as isHelloWorldTemplateSlug, Er as SubmitAgentFeedbackResponseSchema, Et as DraftCommitResponseSchema, F as AcceptOrganizationInvitationResponseSchema, Fi as mapOrganizationInvitation, Fn as PresignOrgLogoRequestSchema, Fr as TriggerInvokeRequestSchema, Ft as FinalizeCustomAppLogoResponseSchema, G as AgentWorkspaceFileSummarySchema, Gi as normalizeSlackAppHandle, Gn as ProjectResponseSchema, Gr as UpdateProjectRequestSchema, Gt as HistoryRunListQuerySchema, H as AgentSummaryDetailResponseSchema, Hi as mapUserOrganization, Hn as ProjectGitRemoteResponseSchema, Hr as UpdateOrganizationRequestSchema, Ht as HeartbeatManagedDeployResponseSchema, I as ActionsCatalogShardSchema, Ii as mapOrganizationMember, In as PresignOrgLogoResponseSchema, Ir as TriggerInvokeResponseSchema, It as GetAppCatalogEntryResponseSchema, J as CancelManagedDeployRequestSchema, Ji as organizationInvitationAcceptPath, Jn as ProjectSlugAvailabilityResponseSchema, Jr as UploadProjectSourceResponseSchema, Jt as InviteOrganizationMembersResponseSchema, K as AppSlugAvailabilityQuerySchema, Ki as normalizeUserPreferences, Kn as ProjectSettingsResponseSchema, Kr as UpdateProjectSettingsRequestSchema, Kt as HistoryRunListResponseSchema, L as ActiveOrganizationResponseSchema, Li as mapProject, Ln as PresignProjectSourceRequestSchema, Lr as TriggerRunListQuerySchema, Lt as GetCredentialResponseSchema, M as publicKeystrokeAssetsObjectUrl, Mi as jsonSchemaToWorkflowInputSchema, Mn as PrepareManagedDeployResponseSchema, Mr as TemplateKindSchema, Mt as DuplicateCredentialsResponseSchema, Ni as jsonSchemaToZod, Nn as PresignCustomAppLogoRequestSchema, Nr as TriggerAttachmentUpdateRequestSchema, Nt as ErrorResponseSchema, Oa as DEFAULT_CLOUD_PLATFORM_ORIGIN, Oi as isLlmProviderSlug, Or as SubmitMarketingContactResponseSchema, Ot as DraftFileContentQuerySchema, P as userAvatarStorageKey, Pi as listenPortFromPublicUrl, Pn as PresignCustomAppLogoResponseSchema, Pr as TriggerInvokeInputsSchema, Pt as FinalizeCustomAppLogoRequestSchema, Q as CompleteManagedDeployArtifactResponseSchema, Qi as projectFileId, Qn as PublicFormSubmitResponseSchema, Qr as UserPreferencesSchema, Qt as ListAgentWorkspaceFilesResponseSchema, R as ActiveProjectSourceRevisionSchema, Ri as mapProjectArtifact, Rn as PresignProjectSourceResponseSchema, Rr as UpdateCredentialRequestSchema, Rt as GetCustomAppResponseSchema, S as loadProjectSourceFiles, Si as displayCredentialAppName, Sn as OpenApiDiscoverResponseSchema, Sr as StartMcpOAuthConnectionInputSchema, St as DbProxyQueryRequestSchema, T as orgLogoStorageKey, Ti as isDraftSnapshotPlaceholderCommitSha, Tn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, Tr as SubmitAgentFeedbackRequestSchema, Tt as DownloadActiveProjectSourceResponseSchema, U as AgentSummaryListResponseSchema, Un as ProjectGitStatusResponseSchema, Ur as UpdateProjectMemberRequestSchema, Ut as HistoryRunCancelResponseSchema, V as AgentMemoryFileSummarySchema, Vi as mapProjectSettings, Vn as ProjectGitRemoteRequestSchema, Vr as UpdateOrganizationMemberResponseSchema, Vt as GraphqlDiscoverResponseSchema, W as AgentSummarySchema, Wi as mergeUserPreferences, Wn as ProjectReachabilityResponseSchema, Wr as UpdateProjectMemberResponseSchema, Wt as HistoryRunDetailResponseSchema, X as ChannelPlatformSchema, Xi as parseAppSlug, Xn as PublicFormMetadataSchema, Xr as UserAvatarSchema, Xt as InviteProjectMembersResponseSchema, Y as CancelManagedDeployResponseSchema, Yi as organizationSlugErrorCodeFromMessage, Yn as ProjectSourceResourcesSchema, Yr as UserAvatarPatchSchema, Yt as InviteProjectMembersRequestSchema, Z as CompleteManagedDeployArtifactRequestSchema, Zi as parseStoredRouteManifest, Zn as PublicFormSubmitBodySchema, Zr as UserPreferencesPatchSchema, Zt as ListAgentMemoryFilesResponseSchema, _ as isStorageNotFoundError$1, _a as MICRO_CREDITS_PER_CREDIT, _i as agentMemoryFileId, _n as ManagedServiceCredentialSchema, _r as SlackAppListResponseSchema, _t as CreateSlackAppResponseSchema, a as createAssetsStorageClient, aa as slackCustomAppOauthSlug, ai as WorkflowManifestMetaShardSchema, an as ListManagedServiceCredentialsResponseSchema, ar as RenewManagedDeployUploadRequestSchema, at as CreateCredentialsResponseSchema, b as keystrokeAssetsAvatarKeyFromPublicUrl, bi as buildSlackAppManifest, bn as McpDiscoverResponseSchema, br as SlugAvailabilityQuerySchema, bt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, c as isAppLogoStorageKey, ca as validateWorkflowRunInputValues, ci as WorkflowSummaryDetailResponseSchema, cn as ListOrganizationMembersPageQuerySchema, cr as SLACK_CUSTOM_APP_CREDENTIAL_SLUG, ct as CreateDraftCommitRequestSchema, d as isKeystrokeAssetsAvatarPublicUrl, da as FilePartSchema, di as WorkspaceTriggerDetailSchema, dn as ListProjectDeploymentsResponseSchema, dr as SLACK_KEYSTROKE_APP_BOT_SCOPES, dt as CreateOrganizationResponseSchema, ea as resolveUniqueCredentialInstanceLabel, ei as WorkflowCanvasRunSchema, en as ListAppsResponseSchema, er as PublishManagedDeployCandidateResponseSchema, et as CompleteProjectArtifactResponseSchema, f as isKeystrokeAssetsOrgLogoPublicUrl, fa as PresignChatAttachmentRequestSchema, fi as WorkspaceTriggerFileSchema, fn as ListProjectFilesResponseSchema, fr as SLACK_KEYSTROKE_APP_SLUG, ft as CreateProjectArtifactRequestSchema, g as isStorageBucketNotFoundError, ga as isAllowedChatAttachmentMediaType, gi as WorkspaceWorkflowOverviewSchema, gn as ListTemplatesResponseSchema, gr as SlackAppInstallStartResponseSchema, gt as CreateSlackAppRequestSchema, ha as chatAttachmentExtension, hi as WorkspaceTriggerRunListResponseSchema, hn as ListProjectsResponseSchema, hr as SkillSummarySchema, ht as CreateProjectResponseSchema, i as chatAttachmentStorageKey, ia as slackCustomAppHandleFromSlug, ii as WorkflowManifestFlowShardSchema, in as ListDraftFilesResponseSchema, ir as RecentResourceSchema, it as CreateCredentialsRequestSchema, j as projectSourceBlobKey, ja as resolvePublicPlatformOrigin, ji as isSlackCustomAppOauthSlug, jn as PrepareManagedDeployRequestSchema, jr as TemplateFilesResponseSchema, jt as DuplicateCredentialRequestSchema, k as projectArtifactKey, ka as resolveExternalPlatformOrigin, kr as SubmitTeamRequestRequestSchema, kt as DraftRevisionResponseSchema, l as isChatAttachmentStorageKey, la as validationErrorResponse, li as WorkflowSummaryListResponseSchema, ln as ListOrganizationMembersPageResponseSchema, lr as SLACK_CUSTOM_APP_SLUG_PREFIX, lt as CreateDraftDiffCommitRequestSchema, m as isProjectArtifactIndexKey, ma as PublicModelsResponseSchema, mi as WorkspaceTriggerOverviewSchema, mn as ListProjectMetricsResponseSchema, mr as SkillSummaryListResponseSchema, mt as CreateProjectRequestSchema, n as publishDraftUpdateBestEffort, na as schemaHasUnsupportedFormFields, ni as WorkflowFormResponseSchema, nn as ListCredentialsPageQuerySchema, nr as PublishedFormSchema, nt as CreateApiKeyRequestSchema, o as ensureKeystrokeAssetsBucket, oa as validateCredentialValueAgainstFields, oi as WorkflowRunInputsPutBodySchema, on as ListMcpAppToolsResponseSchema, or as RenewManagedDeployUploadResponseSchema, ot as CreateCustomAppRequestSchema, p as isOrgLogoStorageKey, pa as PresignChatAttachmentResponseSchema, pi as WorkspaceTriggerListResponseSchema, pn as ListProjectMembersResponseSchema, pr as SkillSummaryDetailResponseSchema, pt as CreateProjectArtifactResponseSchema, q as AppSlugAvailabilityResponseSchema, qn as ProjectSlugAvailabilityQuerySchema, qr as UploadProjectSourceManifestRequestSchema, qt as InviteOrganizationMembersRequestSchema, r as appLogoStorageKey, ra as slackAppBindingChannelId, ri as WorkflowFormUpsertBodySchema, rn as ListCredentialsPageResponseSchema, rr as RecentResourceListResponseSchema, rt as CreateApiKeyResponseSchema, s as extractRouteManifestFromArtifact, sa as validateFormFieldConfig, si as WorkflowRunInputsSchema, sn as ListOrganizationInvitationsResponseSchema, sr as SLACK_CUSTOM_APP_BOT_SCOPES, st as CreateCustomAppResponseSchema, t as createInProcessProjectDraftNotifier, ta as schemaHasFileFields, ti as WorkflowCanvasSchema, tn as ListChannelPlatformsResponseSchema, tr as PublishedFormListResponseSchema, tt as ConnectManagedServiceCredentialRequestSchema, u as isKeystrokeAssetsAppLogoPublicUrl, ui as WorkflowSummarySchema, un as ListOrganizationsResponseSchema, ur as SLACK_GATEWAY_OAUTH_APP_KEY, ut as CreateOrganizationRequestSchema, v as isUserAvatarStorageKey, va as credentialInputSchema, vi as agentWorkspaceFileId, vn as ManagedServiceKindSchema, vr as SlackAppManifestRequestSchema, vt as DEFAULT_TRIGGER_OVERVIEW_MODEL, w as openModularArtifactShards, wn as OrganizationSidebarBrandingSchema, wr as StoredProjectSourceManifestSchema, wt as DownloadActiveProjectArtifactResponseSchema, x as keystrokeAssetsOrgLogoKeyFromPublicUrl, xi as deriveCredentialInstanceSlug, xn as OpenApiDiscoverRequestSchema, xr as SlugAvailabilityResponseSchema, xt as DRAFT_SNAPSHOT_PLACEHOLDER_COMMIT_SHA, y as keystrokeAssetsAppLogoKeyFromPublicUrl, ya as mcpEntityId, yi as buildCredentialInstanceLabel, yn as McpDiscoverRequestSchema, yr as SlackAppManifestResponseSchema, yt as DEFAULT_WORKFLOW_CANVAS_MODEL, z as AgentEnvImageSnapshotResponseSchema, zi as mapProjectDeployment, zn as PresignUserAvatarRequestSchema, zr as UpdateManagedServiceCredentialRequestSchema, zt as GetTemplateResponseSchema } from "./project-draft-notifier-epPD70Eo.mjs";
+import { $ as canInviteToProject, A as toProjectGitRepository, B as requireSession, C as createProjectSourceServiceFactory, D as ProjectRepositoryNotReadyError, E as trackProductEvent, F as authorize, G as agentListScope, H as routeProject, I as forbidden, J as canAccessAgent, K as apiKeyListScope, L as requireOrganization, O as archiveProjectRepositoryInline, P as isProjectGitProviderError, Q as canInviteRole, R as requireProject, T as identifyOrganizationGroup, U as accessContext, V as requireVerifiedOrganization, W as getProjectInvitePermission, X as canAccessSkill, Y as canAccessHistoryRun, Z as canAccessWorkflow, _ as commitProjectDraftFromDiff, a as cancelManagedDeploy, at as credentialListScope, c as prepareManagedDeploy, ct as organizationActions, d as ManagedDeployError, dt as skillListScope, et as canReadApiKey, f as deleteManagedDeployCandidateBestEffort, ft as userActions, g as commitProjectDraft, gt as pingProjectTarget, ht as log, i as workerOrganizationIdFromContext, it as checkPermission, j as MANAGED_DRAFT_BRANCH, k as provisionProjectRepositoryInline, l as publishManagedDeployCandidate, lt as projectActions, mt as event, n as readWorkerTokenFromRequest, nt as canRevokeApiKey, o as completeManagedDeployArtifact, ot as historyListScope, p as promoteManagedDeployMain, pt as workflowListScope, q as apiKeysActions, r as requireWorkerToken, rt as canViewCredential, s as heartbeatManagedDeploy, st as managedServicesActions, t as withProjectScope, tt as canReadProject, u as renewManagedDeployUpload, ut as projectListScope, v as mapDraftCommitError, w as mapProjectSourceError, x as assertAvailable, y as ensureProjectRepositoryReady, z as requireProjectMembership } from "./with-project-scope-BOBvdFb0.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
 import { getCachedPublicModelIds, loadPublicModelIds } from "./lib/public-models.mjs";
@@ -91,64 +91,17 @@ function requireOrganizationParam() {
 	};
 }
 //#endregion
-//#region ../../packages/sandbox/dist/sizes-bFiP6d6Y.mjs
-/** Author-facing VM size presets (t-shirt sizes; Daytona-aligned). */
+//#region ../../packages/sandbox/dist/sizes-CeGfTo5B.mjs
+/**
+* Author-facing VM size presets (legacy).
+* Hosted Modal ignores `size` (small request + burst). Local microsandbox still maps
+* presets to guest CPU/RAM via {@link resolveSandboxResources}.
+*/
 const SandboxSizeSchema = z.enum([
 	"small",
 	"medium",
 	"large"
 ]);
-const SIZE_RESOURCES = {
-	small: {
-		cpu: 1,
-		memoryGiB: 1,
-		diskGiB: 3,
-		memoryMiB: 1024
-	},
-	medium: {
-		cpu: 2,
-		memoryGiB: 4,
-		diskGiB: 8,
-		memoryMiB: 4096
-	},
-	large: {
-		cpu: 4,
-		memoryGiB: 8,
-		diskGiB: 10,
-		memoryMiB: 8192
-	}
-};
-/**
-* Daytona pay-as-you-go rates (USD per second of reserved resource).
-* @see https://www.daytona.io/docs/en/billing/
-*/
-const DAYTONA_CPU_USD_PER_SECOND = 14e-6;
-const DAYTONA_MEMORY_USD_PER_GIB_SECOND = 45e-7;
-const DAYTONA_DISK_USD_PER_GIB_SECOND = 3e-8;
-function daytonaSandboxUsdPerSecond(resources) {
-	return resources.cpu * DAYTONA_CPU_USD_PER_SECOND + resources.memoryGiB * DAYTONA_MEMORY_USD_PER_GIB_SECOND + resources.diskGiB * DAYTONA_DISK_USD_PER_GIB_SECOND;
-}
-/**
-* Pass-through µc/s for a size (ceil to match historical small rate: 18.59 → 19).
-* small 1/1/3 → 19, medium 2/4/8 → 47, large 4/8/10 → 93.
-*/
-function vmSecondRateMicroCredits(size) {
-	return Math.ceil(daytonaSandboxUsdPerSecond(resolveSandboxResources(size)) * 1e6);
-}
-/**
-* Scale factor for `vm_second` quantity so `quantity * 19µc` ≈ Daytona cost.
-* Fractional on purpose — charge math rounds after multiplying the small rate.
-*/
-function vmSecondSizeMultiplier(size) {
-	return vmSecondRateMicroCredits(normalizeSandboxSize(size)) / vmSecondRateMicroCredits("small");
-}
-vmSecondSizeMultiplier("small"), vmSecondSizeMultiplier("medium"), vmSecondSizeMultiplier("large");
-function normalizeSandboxSize(size) {
-	return size ?? "small";
-}
-function resolveSandboxResources(size) {
-	return SIZE_RESOURCES[normalizeSandboxSize(size)];
-}
 const replaceEditSchema = z.object({
 	oldText: z.string().describe("Exact text to replace. Must be unique in the file and must not overlap other edits in this call."),
 	newText: z.string().describe("Replacement text")
@@ -168,7 +121,7 @@ z.object({
 });
 new AsyncLocalStorage();
 //#endregion
-//#region ../../packages/sandbox/dist/files-Bo1xCPZl.mjs
+//#region ../../packages/sandbox/dist/files-Ds9QSoth.mjs
 const SandboxModeSchema = z.enum(["in-process", "vm"]);
 const SandboxFileContentSchema = z.object({
 	path: z.string(),
@@ -203,7 +156,19 @@ const SandboxGitUserSchema = z.object({
 const SandboxGitCloneSchema = z.object({
 	repository: z.string().trim().min(1).regex(GITHUB_REPOSITORY_PATTERN, "repository must be \"owner/repo\""),
 	credential: z.string().trim().min(1),
+	/** Branch or tag to check out. Ignored when `commit` is set. */
 	branch: z.string().trim().min(1).optional(),
+	/**
+	* Full 40-character commit SHA. Checked out after clone/fetch.
+	* Prefer this over `branch` when pinning an exact revision.
+	* Abbreviated SHAs are rejected — `git fetch origin <sha>` requires the full object id.
+	*/
+	commit: z.string().trim().regex(/^[0-9a-f]{40}$/i, "commit must be a full 40-character hex SHA").optional(),
+	/**
+	* When true (default), use a shallow clone/fetch (`--depth 1`).
+	* Set `false` for full history.
+	*/
+	shallow: z.boolean().optional(),
 	path: z.string().trim().min(1).optional()
 });
 const SandboxGitSchema = z.object({
@@ -218,7 +183,10 @@ z.object({
 	/** Sandbox execution mode. Defaults to in-process when omitted. */
 	mode: SandboxModeSchema.optional(),
 	files: SandboxFilesInputSchema.optional(),
-	/** VM size preset. Requires `mode: "vm"`. Defaults to `small` when omitted. */
+	/**
+	* Legacy VM size preset. Requires `mode: "vm"`. Hosted Modal ignores this;
+	* microsandbox may still map it to guest resources.
+	*/
 	size: SandboxSizeSchema.optional(),
 	credentials: z.array(credentialInputSchema).optional(),
 	env: SandboxEnvFnSchema.optional(),
@@ -23073,43 +23041,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-CCCr_tPX.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-TSMaRG7d.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-DfDggg_6.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-BTw8Ngxw.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-Dkmv0R8V.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-DJ5QESRe.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-CnLQJsUt.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-CYmeGfSd.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-BBgw-6pC.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-DH6iZY6e.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-Ct3SAQ08.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-bDqlvCFS.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-BwqC7bCC.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-BpUNFIj_.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-BqV_MANe.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-ByODYvY3.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-Ca0nzr_C.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-XoM2vEj9.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-D903m8qg.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-BCBnLOvQ.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -23125,15 +23093,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-BxDXiRvU.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-DNoYOZJW.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-sqhvIobF.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-CNAHqe3x.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-DV_QfkzW.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-eJdxrokN.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -23141,95 +23109,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-BbJvjSpG.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-NZKf4LsQ.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BbJvjSpG.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-NZKf4LsQ.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BbJvjSpG.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-NZKf4LsQ.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-CXP6pDbv.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-SXgOs9lq.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-7DhR58Zm.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-DLzlKIMs.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-Bdfmgc0u.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-C1bu2M-u.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-B7Ur1ZcG.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-Ci4eZwvl.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-gQz2sv1S.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-Dh-JkUFM.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-BmJhvNnj.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-BMBbGpbQ.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-qaPwXeWi.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-ByRsaqHL.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-CKVgH6nB.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-DnsZhC8W.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-B1pLP8yk.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-DBZ7Qqfe.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-D-ibiLnI.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-Bj8VSTpF.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-Z8F4EV6H.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-Slrid0s-.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-C-r9wMhz.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-BGTC1cpC.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-BfQHeAts.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-CXQO_-U6.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-D5ERZLjk.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-Bappyw4f.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-CDTBMSHy.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-BrwVGfzI.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-B59vZ2kd.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-DQe2P16M.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-C6uU4zNL.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-DIqhD6tO.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-DhIHVx-D.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-C8fI0udp.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-bh9I2go-.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-DY2DbsYN.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-D1jCTVev.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-BDykb7U5.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23241,19 +23209,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-CjGj9lct.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-BOLMrmzT.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-BKBhmoCb.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-Fdk5PHqm.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-Bs_t1j98.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-AChVXfeK.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-Bs_t1j98.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-AChVXfeK.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23269,7 +23237,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-Cfb2vS15.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-dPfT0pwK.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23285,23 +23253,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-OQOsjx4z.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-CLDQS5Cz.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-OQOsjx4z.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-CLDQS5Cz.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-1ZXfyQ-t.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-CK_-dzC0.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-cIsrnNwV.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-D9cWwS1q.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-D3VN3S0f.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-CeSSZajn.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23309,15 +23277,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-_OafNle4.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-cnZSWZGF.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-DPGV7vUh.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-DPOJyqhc.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-B0IdVsm4.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-C6Ig-4s9.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23325,19 +23293,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-C7Q9qdxK.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-Di5dss4o.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-B4KhLQRr.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-og1gvaaU.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-BtqrcbrP.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-Dgsgk_Bp.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-DbTBqoAx.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-Bgvo4ns8.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23345,11 +23313,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-CcDUURT_.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-Btls0z5p.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-meYbxwKe.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-DhEkDFzv.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23357,7 +23325,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-Dpa06FoX.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-CQcOv9CF.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23369,49 +23337,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-BXOK7sK9.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-BpSqVIPI.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BB1Ht64L.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DXpEj3fV.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BB1Ht64L.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DXpEj3fV.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-BB1Ht64L.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DXpEj3fV.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-Cq884xsD.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-Dn0wLDU-.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-Beapk7yc.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-DQvMc1zp.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-DE4ViTiv.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-diwoTzG1.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-Cp1J6H5O.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-6IIwCLBF.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-BGj_s-m5.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-Tj8z25NW.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-BGj_s-m5.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-Tj8z25NW.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-DFulxpOb.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-Cg9qSy8a.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-DFulxpOb.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-Cg9qSy8a.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -23831,6 +23799,8 @@ z.object({
 		repository: z.string().trim().min(1),
 		credential: z.string().trim().min(1),
 		branch: z.string().trim().min(1).optional(),
+		commit: z.string().trim().min(1).optional(),
+		shallow: z.boolean().optional(),
 		path: z.string().trim().min(1).optional()
 	}),
 	user: z.object({
@@ -26249,57 +26219,150 @@ function workspaceRelativePathsFromStorageKeys(keys) {
 	return orderWorkspaceRelativePaths(keys);
 }
 //#endregion
-//#region src/routes/account/agents/[agentId]/workspace/files/GET.ts
-const handler$97 = async (c) => {
-	const agentId = c.req.param("agentId") ?? "";
-	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
-	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
-	const { organizationId } = c.get("organization");
-	const organization = await selectOrganizationById(organizationId);
-	if (!organization) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
-	const storage = createOrgAgentStorageClient(organization, row.id);
-	let keys;
-	try {
-		keys = await storage.listObjects("");
-	} catch (error) {
-		if (isStorageBucketNotFoundError(error)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }));
-		throw error;
+//#region src/routes/account/agents/[agentId]/workspace/files/backend.ts
+function createObjectStorageBackend(organization, agentId) {
+	const storage = createOrgAgentStorageClient(organization, agentId);
+	return {
+		async listFiles() {
+			try {
+				return {
+					exists: true,
+					paths: await storage.listObjects("")
+				};
+			} catch (error) {
+				if (isStorageBucketNotFoundError(error)) return {
+					exists: false,
+					paths: []
+				};
+				throw error;
+			}
+		},
+		getFileContent(path) {
+			return storage.getObject(path);
+		}
+	};
+}
+function createVolumeBackend(agentWorkspaceFiles, organizationId, agentId) {
+	return {
+		listFiles() {
+			return agentWorkspaceFiles.listFiles({
+				organizationId,
+				agentId
+			});
+		},
+		getFileContent(path) {
+			return agentWorkspaceFiles.getFileContent({
+				organizationId,
+				agentId,
+				path
+			});
+		}
+	};
+}
+async function resolveAgentWorkspaceFilesBackend(input) {
+	const volume = input.agentWorkspaceFiles ? createVolumeBackend(input.agentWorkspaceFiles, input.organization.id, input.agentId) : void 0;
+	if (input.sandboxMode === "in-process") return { backend: createObjectStorageBackend(input.organization, input.agentId) };
+	if (input.sandboxMode === "vm") return { backend: volume ?? createObjectStorageBackend(input.organization, input.agentId) };
+	if (volume) {
+		const listed = await volume.listFiles();
+		if (listed.exists) return {
+			backend: volume,
+			listed
+		};
 	}
-	const files = workspaceRelativePathsFromStorageKeys(keys).map((path) => AgentWorkspaceFileSummarySchema.parse({
-		id: agentWorkspaceFileId(path),
-		path
-	}));
-	return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files }));
-};
+	const objectStorage = createObjectStorageBackend(input.organization, input.agentId);
+	return {
+		backend: objectStorage,
+		listed: await objectStorage.listFiles()
+	};
+}
+//#endregion
+//#region src/routes/account/agents/[agentId]/workspace/files/GET.ts
+function createListAgentWorkspaceFilesHandler(agentWorkspaceFiles) {
+	return async (c) => {
+		const agentId = c.req.param("agentId") ?? "";
+		const row = agentId ? await selectActiveAgentById(agentId) : void 0;
+		if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
+		const { organizationId } = c.get("organization");
+		const organization = await selectOrganizationById(organizationId);
+		if (!organization) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
+		const resolved = await resolveAgentWorkspaceFilesBackend({
+			sandboxMode: row.sandboxMode,
+			organization,
+			agentId: row.id,
+			agentWorkspaceFiles
+		});
+		const files = workspaceRelativePathsFromStorageKeys((resolved.listed ?? await resolved.backend.listFiles()).paths).map((path) => AgentWorkspaceFileSummarySchema.parse({
+			id: agentWorkspaceFileId(path),
+			path
+		}));
+		return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files }));
+	};
+}
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/content/GET.ts
-const handler$96 = async (c) => {
-	const agentId = c.req.param("agentId") ?? "";
-	const path = c.req.query("path");
-	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
-	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
-	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ErrorResponseSchema.parse({ error: "Agent not found" }), 404);
-	const { organizationId } = c.get("organization");
-	const organization = await selectOrganizationById(organizationId);
-	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
-	let relativePath;
-	try {
-		relativePath = resolveWorkspaceRelativePath(join(tmpdir(), "agent-workspace"), path);
-	} catch (error) {
-		if ((error instanceof Error ? error.message : "Invalid file path").includes("must stay within")) return c.json(ErrorResponseSchema.parse({ error: "Invalid file path" }), 400);
-		throw error;
-	}
-	const storage = createOrgAgentStorageClient(organization, row.id);
-	let bytes;
-	try {
-		bytes = await storage.getObject(relativePath);
-	} catch (error) {
-		if (isStorageNotFoundError$1(error)) return c.json(ErrorResponseSchema.parse({ error: "File not found" }), 404);
-		throw error;
-	}
-	c.header("Content-Type", "text/plain; charset=utf-8");
-	return c.body(new TextDecoder().decode(bytes));
-};
+function createGetAgentWorkspaceFileContentHandler(agentWorkspaceFiles) {
+	return async (c) => {
+		const agentId = c.req.param("agentId") ?? "";
+		const path = c.req.query("path");
+		if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
+		const row = agentId ? await selectActiveAgentById(agentId) : void 0;
+		if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ErrorResponseSchema.parse({ error: "Agent not found" }), 404);
+		const { organizationId } = c.get("organization");
+		const organization = await selectOrganizationById(organizationId);
+		if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+		let relativePath;
+		try {
+			relativePath = resolveWorkspaceRelativePath(join(tmpdir(), "agent-workspace"), path);
+		} catch (error) {
+			if ((error instanceof Error ? error.message : "Invalid file path").includes("must stay within")) return c.json(ErrorResponseSchema.parse({ error: "Invalid file path" }), 400);
+			throw error;
+		}
+		let bytes;
+		try {
+			const resolved = await resolveAgentWorkspaceFilesBackend({
+				sandboxMode: row.sandboxMode,
+				organization,
+				agentId: row.id,
+				agentWorkspaceFiles
+			});
+			if (resolved.listed && !resolved.listed.exists) return c.json(ErrorResponseSchema.parse({ error: "File not found" }), 404);
+			bytes = await resolved.backend.getFileContent(relativePath);
+		} catch (error) {
+			if (isStorageNotFoundError$1(error)) return c.json(ErrorResponseSchema.parse({ error: "File not found" }), 404);
+			const message = error instanceof Error ? error.message : String(error);
+			if (/not found|NoSuchKey|404/i.test(message)) return c.json(ErrorResponseSchema.parse({ error: "File not found" }), 404);
+			throw error;
+		}
+		c.header("Content-Type", "text/plain; charset=utf-8");
+		return c.body(new TextDecoder().decode(bytes));
+	};
+}
+//#endregion
+//#region src/routes/account/projects/[projectId]/agents/[slug]/env-image/POST.ts
+/**
+* POST /api/projects/:projectId/agents/:slug/env-image
+* Enqueue (or report) an org-scoped env Image build for the agent's `sandboxSetup`.
+*/
+function createSnapshotAgentEnvImageHandler(snapshot) {
+	return async (c) => {
+		if (!snapshot) return c.json({ error: "Env Image builds are not configured on this platform" }, 503);
+		const project = c.get("project");
+		const slug = c.req.param("slug") ?? "";
+		if (!slug) return c.json({ error: "slug is required" }, 400);
+		const result = await snapshot({
+			organizationId: project.organizationId,
+			projectId: project.id,
+			agentSlug: slug
+		});
+		if (!result.ok) {
+			const status = result.httpStatus;
+			return c.json({ error: result.error }, status);
+		}
+		if (result.httpStatus === 202) return c.json(AgentEnvImageSnapshotResponseSchema.parse(result.body), 202);
+		return c.json(AgentEnvImageSnapshotResponseSchema.parse(result.body));
+	};
+}
 //#endregion
 //#region src/routes/account/history/cancel-run.ts
 /** Shared body for the workflow-run and agent-session cancel endpoints. */
@@ -32208,6 +32271,9 @@ function mountAccountRoutes(options) {
 	const commitDraft = createCommitDraftHandler(options.projectGit, options.draftNotifier);
 	const commitDraftFromDiff = createCommitDraftFromDiffHandler(options.projectGit, options.draftNotifier);
 	const getDraftEvents = createGetDraftEventsHandler(options.draftNotifier);
+	const listAgentWorkspaceFiles = createListAgentWorkspaceFilesHandler(options.agentWorkspaceFiles);
+	const getAgentWorkspaceFileContent = createGetAgentWorkspaceFileContentHandler(options.agentWorkspaceFiles);
+	const snapshotAgentEnvImage = createSnapshotAgentEnvImageHandler(options.snapshotAgentEnvImage);
 	const downloadActiveProjectSource = createDownloadActiveProjectSourceHandler(createProjectSource);
 	const getActiveProjectSourceRevision = createGetActiveProjectSourceRevisionHandler(createProjectSource);
 	const getTriggerFile = createGetTriggerFileHandler(createProjectSource);
@@ -32299,8 +32365,8 @@ function mountAccountRoutes(options) {
 	orgScoped.get("/agents/:agentId", withOrgDb, handler$100);
 	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$99);
 	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$98);
-	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$97);
-	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$96);
+	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, listAgentWorkspaceFiles);
+	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, getAgentWorkspaceFileContent);
 	orgScoped.get("/workflows", withOrgDb, handler$94);
 	orgScoped.get("/workflows/forms", handler$93);
 	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$92);
@@ -32372,6 +32438,7 @@ function mountAccountRoutes(options) {
 	projectScoped.post("/:projectId/draft/commits", requireProject(), requireProjectMember, requireProjectDeploy, commitDraft);
 	projectScoped.post("/:projectId/draft/commits/from-diff", requireProject(), requireProjectMember, requireProjectDeploy, commitDraftFromDiff);
 	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$56);
+	projectScoped.post("/:projectId/agents/:slug/env-image", requireProject(), requireProjectMember, withOrgDb, snapshotAgentEnvImage);
 	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$55);
 	projectScoped.get("/:projectId/artifacts/:artifactId/files/content", requireProject(), requireProjectMember, getProjectFileContent);
 	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$62);
@@ -32940,7 +33007,9 @@ async function createApp$1(auth, options) {
 				projectQuotaGate: options.projectQuotaGate,
 				projectGit: options.projectGit,
 				draftNotifier,
-				platformAgent: options.platformAgent
+				platformAgent: options.platformAgent,
+				agentWorkspaceFiles: options.agentWorkspaceFiles,
+				snapshotAgentEnvImage: options.snapshotAgentEnvImage
 			}));
 		},
 		mountInternal: (app, { tokenRefresh }) => {
@@ -33095,6 +33164,8 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 		maintenanceHandler: platformConfig.maintenanceHandler,
 		platformAgentJobHandler: platformConfig.platformAgent?.handleJob,
 		imageRolloutJobHandler: platformConfig.imageRolloutJobHandler,
+		projectAgentSandboxGraceJobHandler: platformConfig.projectAgentSandboxGraceJobHandler,
+		projectAgentEnvImageJobHandler: platformConfig.projectAgentEnvImageJobHandler,
 		onPlatformQueueCancel: platformConfig.platformAgent?.onCancel,
 		beforePromoteProjectDeploy: platformConfig.projectGit ? async ({ projectId, artifactId }) => {
 			return promoteManagedGitAfterHealth({
@@ -33103,6 +33174,7 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 				artifactId
 			});
 		} : void 0,
+		afterPromoteProjectDeploy: platformConfig.afterPromoteProjectDeploy,
 		afterProjectDeployHealthFailure: platformConfig.projectGit ? async ({ projectId, artifactId }) => {
 			await cleanupManagedGitAfterHealthFailure({
 				provider: platformConfig.projectGit,
@@ -33187,6 +33259,8 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 		projectGit: platformConfig.projectGit,
 		draftCommandRunner: platformConfig.draftCommandRunner,
 		draftNotifier: platformConfig.draftNotifier,
+		agentWorkspaceFiles: platformConfig.agentWorkspaceFiles,
+		snapshotAgentEnvImage: platformConfig.snapshotAgentEnvImage,
 		orgRateLimit: platformConfig.orgRateLimit,
 		platformAgent: platformConfig.platformAgent
 	});
@@ -33202,4 +33276,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-BRUA3xO7.mjs.map
+//# sourceMappingURL=start-jeNqY0AL.mjs.map