@keystrokehq/platform 0.1.157 → 0.1.159

package/dist/{start-BBW9vi1A.mjs → start-CcTA67Ri.mjs}

@@ -1,6 +1,6 @@
-import { C as setManagedServiceCredential, S as setCredentialInstanceSecretValue, _ as withMcpReadClient, a as completeMcpOAuthConnect, b as readCredentialInstanceSecret, c as describeCredentialBindings, d as discoverOpenApiApp, f as isDiscoveryError, g as PublicHttpUrlError, h as withCredentialAssignments, i as beginMcpOAuthConnect, l as discoverGraphqlApp, m as verifyOAuthState, n as cronPayloadSchema, o as createOAuthState, p as resolveConnectedMcpAuthHeaders, r as McpOAuthConnectError, s as decodeOAuthState, u as discoverMcpApp, v as deleteCredentialInstanceSecret, x as setCredentialInstanceSecret, y as deleteManagedServiceCredential$1 } from "./dist-CGVfb4k_.mjs";
-import { $ as CompleteManagedDeployArtifactResponseSchema, $i as projectFileId, $n as PublicFormSubmitResponseSchema, $r as UserPreferencesSchema, $t as ListAgentWorkspaceFilesResponseSchema, A as projectArtifactKey, Aa as resolvePublicPlatformApiOrigin, Ar as SubmitTeamRequestRequestSchema, At as DraftRevisionResponseSchema, B as AgentEnvImageSnapshotResponseSchema, Bi as mapProjectDeployment, Bn as PresignUserAvatarRequestSchema, Br as UpdateManagedServiceCredentialRequestSchema, Bt as GetTemplateResponseSchema, C as loadProjectSourceFiles, Ca as mintOrgWorkerToken, Ci as displayCredentialAppName, Cn as OpenApiDiscoverResponseSchema, Cr as StartMcpOAuthConnectionInputSchema, Ct as DbProxyQueryRequestSchema, D as prefetchCanvasShards, Di as isHelloWorldTemplateSlug, Dr as SubmitAgentFeedbackResponseSchema, Dt as DraftCommitResponseSchema, E as orgLogoStorageKey, Ea as verifyOrgWorkerToken, Ei as isDraftSnapshotPlaceholderCommitSha, En as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, Er as SubmitAgentFeedbackRequestSchema, Et as DownloadActiveProjectSourceResponseSchema, F as userAvatarStorageKey, Fi as listenPortFromPublicUrl, Fn as PresignCustomAppLogoResponseSchema, Fr as TriggerInvokeInputsSchema, Ft as FinalizeCustomAppLogoRequestSchema, G as AgentSummarySchema, Gi as mergeUserPreferences, Gn as ProjectReachabilityResponseSchema, Gr as UpdateProjectMemberResponseSchema, Gt as HistoryRunDetailResponseSchema, H as AgentMemoryFileSummarySchema, Hi as mapProjectSettings, Hn as ProjectGitRemoteRequestSchema, Hr as UpdateOrganizationMemberResponseSchema, Ht as GraphqlDiscoverResponseSchema, I as AcceptOrganizationInvitationResponseSchema, Ii as mapOrganizationInvitation, In as PresignOrgLogoRequestSchema, Ir as TriggerInvokeRequestSchema, It as FinalizeCustomAppLogoResponseSchema, J as AppSlugAvailabilityResponseSchema, Jn as ProjectSlugAvailabilityQuerySchema, Jr as UploadProjectSourceManifestRequestSchema, Jt as InviteOrganizationMembersRequestSchema, K as AgentWorkspaceFileSummarySchema, Ki as normalizeSlackAppHandle, Kn as ProjectResponseSchema, Kr as UpdateProjectRequestSchema, Kt as HistoryRunListQuerySchema, L as ActionsCatalogShardSchema, Li as mapOrganizationMember, Ln as PresignOrgLogoResponseSchema, Lr as TriggerInvokeResponseSchema, Lt as GetAppCatalogEntryResponseSchema, M as projectSourceBlobKey, Mi as isSlackCustomAppOauthSlug, Mn as PrepareManagedDeployRequestSchema, Mr as TemplateFilesResponseSchema, Mt as DuplicateCredentialRequestSchema, N as publicKeystrokeAssetsObjectUrl, Ni as jsonSchemaToWorkflowInputSchema, Nn as PrepareManagedDeployResponseSchema, Nr as TemplateKindSchema, Nt as DuplicateCredentialsResponseSchema, O as projectArtifactBlobKey, Oa as DEFAULT_CLOUD_PLATFORM_ORIGIN, On as PROJECT_SLUG_TAKEN_MESSAGE, Or as SubmitMarketingContactRequestSchema, Ot as DraftConflictResponseSchema, Pi as jsonSchemaToZod, Pn as PresignCustomAppLogoRequestSchema, Pr as TriggerAttachmentUpdateRequestSchema, Pt as ErrorResponseSchema, Q as CompleteManagedDeployArtifactRequestSchema, Qi as parseStoredRouteManifest, Qn as PublicFormSubmitBodySchema, Qr as UserPreferencesPatchSchema, Qt as ListAgentMemoryFilesResponseSchema, R as ActiveOrganizationResponseSchema, Ri as mapProject, Rn as PresignProjectSourceRequestSchema, Rr as TriggerRunListQuerySchema, Rt as GetCredentialResponseSchema, S as keystrokeAssetsOrgLogoKeyFromPublicUrl, Si as deriveCredentialInstanceSlug, Sn as OpenApiDiscoverRequestSchema, Sr as SlugAvailabilityResponseSchema, St as DRAFT_SNAPSHOT_PLACEHOLDER_COMMIT_SHA, T as openModularArtifactShards, Tn as OrganizationSidebarBrandingSchema, Tr as StoredProjectSourceManifestSchema, Tt as DownloadActiveProjectArtifactResponseSchema, U as AgentSummaryDetailResponseSchema, Ui as mapUserOrganization, Un as ProjectGitRemoteResponseSchema, Ur as UpdateOrganizationRequestSchema, Ut as HeartbeatManagedDeployResponseSchema, V as AgentManifestShardSchema, Vi as mapProjectMember, Vn as PresignUserAvatarResponseSchema, Vr as UpdateOrganizationMemberRequestSchema, Vt as GraphqlDiscoverRequestSchema, W as AgentSummaryListResponseSchema, Wn as ProjectGitStatusResponseSchema, Wr as UpdateProjectMemberRequestSchema, Wt as HistoryRunCancelResponseSchema, X as CancelManagedDeployResponseSchema, Xi as organizationSlugErrorCodeFromMessage, Xn as ProjectSourceResourcesSchema, Xr as UserAvatarPatchSchema, Xt as InviteProjectMembersRequestSchema, Y as CancelManagedDeployRequestSchema, Yi as organizationInvitationAcceptPath, Yn as ProjectSlugAvailabilityResponseSchema, Yr as UploadProjectSourceResponseSchema, Yt as InviteOrganizationMembersResponseSchema, Z as ChannelPlatformSchema, Zi as parseAppSlug, Zn as PublicFormMetadataSchema, Zr as UserAvatarSchema, Zt as InviteProjectMembersResponseSchema, _ as isStorageBucketNotFoundError, _a as isAllowedChatAttachmentMediaType, _i as WorkspaceWorkflowOverviewSchema, _n as ListTemplatesResponseSchema, _r as SlackAppInstallStartResponseSchema, _t as CreateSlackAppRequestSchema, a as createAssetsStorageClient, aa as slackCustomAppHandleFromSlug, ai as WorkflowManifestFlowShardSchema, an as ListDraftFilesResponseSchema, ar as RecentResourceSchema, at as CreateCredentialsRequestSchema, b as keystrokeAssetsAppLogoKeyFromPublicUrl, bi as buildCredentialInstanceLabel, bn as McpDiscoverRequestSchema, br as SlackAppManifestResponseSchema, bt as DEFAULT_WORKFLOW_CANVAS_MODEL, ca as validateFormFieldConfig, ci as WorkflowRunInputsSchema, cn as ListOrganizationInvitationsResponseSchema, cr as SLACK_CUSTOM_APP_BOT_SCOPES, ct as CreateCustomAppResponseSchema, d as isKeystrokeAssetsAppLogoPublicUrl, di as WorkflowSummarySchema, dn as ListOrganizationsResponseSchema, dr as SLACK_GATEWAY_OAUTH_APP_KEY, dt as CreateOrganizationRequestSchema, ea as resolvePublicFormFields, ei as WorkflowCanvasCredentialBindingsSchema, en as ListApiKeysResponseSchema, er as PublishManagedDeployCandidateRequestSchema, et as CompleteProjectArtifactRequestSchema, f as isKeystrokeAssetsAvatarPublicUrl, fa as FilePartSchema, fi as WorkspaceTriggerDetailSchema, fn as ListProjectDeploymentsResponseSchema, fr as SLACK_KEYSTROKE_APP_BOT_SCOPES, ft as CreateOrganizationResponseSchema, ga as chatAttachmentExtension, gi as WorkspaceTriggerRunListResponseSchema, gn as ListProjectsResponseSchema, gr as SkillSummarySchema, gt as CreateProjectResponseSchema, h as isProjectArtifactIndexKey, ha as PublicModelsResponseSchema, hi as WorkspaceTriggerOverviewSchema, hn as ListProjectMetricsResponseSchema, hr as SkillSummaryListResponseSchema, ht as CreateProjectRequestSchema, i as chatAttachmentStorageKey, ia as slackAppBindingChannelId, ii as WorkflowFormUpsertBodySchema, in as ListCredentialsPageResponseSchema, ir as RecentResourceListResponseSchema, it as CreateApiKeyResponseSchema, ja as resolvePublicPlatformOrigin, jr as SubmitTeamRequestResponseSchema, jt as DraftUpdateEventSchema, ka as resolveExternalPlatformOrigin, ki as isLlmProviderSlug, kr as SubmitMarketingContactResponseSchema, kt as DraftFileContentQuerySchema, l as isAppLogoStorageKey, la as validateWorkflowRunInputValues, li as WorkflowSummaryDetailResponseSchema, ln as ListOrganizationMembersPageQuerySchema, lr as SLACK_CUSTOM_APP_CREDENTIAL_SLUG, lt as CreateDraftCommitRequestSchema, m as isOrgLogoStorageKey, ma as PresignChatAttachmentResponseSchema, mi as WorkspaceTriggerListResponseSchema, mn as ListProjectMembersResponseSchema, mr as SkillSummaryDetailResponseSchema, mt as CreateProjectArtifactResponseSchema, n as publishDraftUpdateBestEffort, na as schemaHasFileFields, ni as WorkflowCanvasSchema, nn as ListChannelPlatformsResponseSchema, nr as PublishedFormListResponseSchema, nt as ConnectManagedServiceCredentialRequestSchema, o as ensureKeystrokeAssetsBucket, oa as slackCustomAppOauthSlug, oi as WorkflowManifestMetaShardSchema, on as ListManagedServiceCredentialsResponseSchema, or as RenewManagedDeployUploadRequestSchema, ot as CreateCredentialsResponseSchema, p as isKeystrokeAssetsOrgLogoPublicUrl, pa as PresignChatAttachmentRequestSchema, pi as WorkspaceTriggerFileSchema, pn as ListProjectFilesResponseSchema, pr as SLACK_KEYSTROKE_APP_SLUG, pt as CreateProjectArtifactRequestSchema, q as AppSlugAvailabilityQuerySchema, qi as normalizeUserPreferences, qn as ProjectSettingsResponseSchema, qr as UpdateProjectSettingsRequestSchema, qt as HistoryRunListResponseSchema, r as appLogoStorageKey, ra as schemaHasUnsupportedFormFields, ri as WorkflowFormResponseSchema, rn as ListCredentialsPageQuerySchema, rr as PublishedFormSchema, rt as CreateApiKeyRequestSchema, s as extractRouteManifestFromArtifact, sa as validateCredentialValueAgainstFields, si as WorkflowRunInputsPutBodySchema, sn as ListMcpAppToolsResponseSchema, sr as RenewManagedDeployUploadResponseSchema, st as CreateCustomAppRequestSchema, t as createInProcessProjectDraftNotifier, ta as resolveUniqueCredentialInstanceLabel, ti as WorkflowCanvasRunSchema, tn as ListAppsResponseSchema, tr as PublishManagedDeployCandidateResponseSchema, tt as CompleteProjectArtifactResponseSchema, u as isChatAttachmentStorageKey, ua as validationErrorResponse, ui as WorkflowSummaryListResponseSchema, un as ListOrganizationMembersPageResponseSchema, ur as SLACK_CUSTOM_APP_SLUG_PREFIX, ut as CreateDraftDiffCommitRequestSchema, v as isStorageNotFoundError$1, va as MICRO_CREDITS_PER_CREDIT, vi as agentMemoryFileId, vn as ManagedServiceCredentialSchema, vr as SlackAppListResponseSchema, vt as CreateSlackAppResponseSchema, wn as OrganizationSidebarBrandingPatchSchema, wr as StartMcpOAuthConnectionResultSchema, wt as DeclineOrganizationInvitationResponseSchema, x as keystrokeAssetsAvatarKeyFromPublicUrl, xi as buildSlackAppManifest, xn as McpDiscoverResponseSchema, xr as SlugAvailabilityQuerySchema, xt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, y as isUserAvatarStorageKey, ya as credentialInputSchema, yi as agentWorkspaceFileId, yn as ManagedServiceKindSchema, yr as SlackAppManifestRequestSchema, yt as DEFAULT_TRIGGER_OVERVIEW_MODEL, z as ActiveProjectSourceRevisionSchema, zi as mapProjectArtifact, zn as PresignProjectSourceResponseSchema, zr as UpdateCredentialRequestSchema, zt as GetCustomAppResponseSchema } from "./project-draft-notifier-B7K0aaAp.mjs";
-import { $ as canInviteToProject, A as toProjectGitRepository, B as requireSession, C as createProjectSourceServiceFactory, D as ProjectRepositoryNotReadyError, E as trackProductEvent, F as authorize, G as agentListScope, H as routeProject, I as forbidden, J as canAccessAgent, K as apiKeyListScope, L as requireOrganization, O as archiveProjectRepositoryInline, P as isProjectGitProviderError, Q as canInviteRole, R as requireProject, T as identifyOrganizationGroup, U as accessContext, V as requireVerifiedOrganization, W as getProjectInvitePermission, X as canAccessSkill, Y as canAccessHistoryRun, Z as canAccessWorkflow, _ as commitProjectDraftFromDiff, a as cancelManagedDeploy, at as credentialListScope, c as prepareManagedDeploy, ct as organizationActions, d as ManagedDeployError, dt as skillListScope, et as canReadApiKey, f as deleteManagedDeployCandidateBestEffort, ft as userActions, g as commitProjectDraft, gt as pingProjectTarget, ht as log, i as workerOrganizationIdFromContext, it as checkPermission, j as MANAGED_DRAFT_BRANCH, k as provisionProjectRepositoryInline, l as publishManagedDeployCandidate, lt as projectActions, mt as event, n as readWorkerTokenFromRequest, nt as canRevokeApiKey, o as completeManagedDeployArtifact, ot as historyListScope, p as promoteManagedDeployMain, pt as workflowListScope, q as apiKeysActions, r as requireWorkerToken, rt as canViewCredential, s as heartbeatManagedDeploy, st as managedServicesActions, t as withProjectScope, tt as canReadProject, u as renewManagedDeployUpload, ut as projectListScope, v as mapDraftCommitError, w as mapProjectSourceError, x as assertAvailable, y as ensureProjectRepositoryReady, z as requireProjectMembership } from "./with-project-scope-BLKH8VDX.mjs";
+import { C as setManagedServiceCredential, S as setCredentialInstanceSecretValue, _ as withMcpReadClient, a as completeMcpOAuthConnect, b as readCredentialInstanceSecret, c as describeCredentialBindings, d as discoverOpenApiApp, f as isDiscoveryError, g as PublicHttpUrlError, h as withCredentialAssignments, i as beginMcpOAuthConnect, l as discoverGraphqlApp, m as verifyOAuthState, n as cronPayloadSchema, o as createOAuthState, p as resolveConnectedMcpAuthHeaders, r as McpOAuthConnectError, s as decodeOAuthState, u as discoverMcpApp, v as deleteCredentialInstanceSecret, x as setCredentialInstanceSecret, y as deleteManagedServiceCredential$1 } from "./dist-C34Iplu5.mjs";
+import { $ as AppSlugAvailabilityResponseSchema, $n as ProjectGitStatusResponseSchema, $r as UpdateProjectMemberRequestSchema, $t as HistoryRunDetailResponseSchema, A as prefetchCanvasShards, Ai as buildSlackAppManifest, An as McpDiscoverResponseSchema, Ar as SlugAvailabilityQuerySchema, At as DRAFT_SNAPSHOT_PLACEHOLDER_COMMIT_SHA, Ba as resolvePublicPlatformOrigin, Br as SubmitTeamRequestResponseSchema, Bt as DuplicateCredentialRequestSchema, C as keystrokeAssetsAppLogoKeyFromPublicUrl, Ca as PresignChatAttachmentResponseSchema, Ci as WorkspaceTriggerListResponseSchema, Cn as ListProjectMembersResponseSchema, Cr as SkillSummaryDetailResponseSchema, Ct as CreateProjectRequestSchema, Da as MICRO_CREDITS_PER_CREDIT, Di as agentMemoryFileId, Dn as ManagedServiceCredentialSchema, Dr as SlackAppListResponseSchema, Dt as DEFAULT_TRIGGER_OVERVIEW_MODEL, E as loadProjectSourceFiles, Ea as isAllowedChatAttachmentMediaType, Ei as WorkspaceWorkflowOverviewSchema, En as ListTemplatesResponseSchema, Er as SlackAppInstallStartResponseSchema, Et as CreateSlackAppResponseSchema, F as projectSourceBlobKey, Fa as verifyOrgWorkerToken, Fi as isDraftSnapshotPlaceholderCommitSha, Fn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, Fr as SubmitAgentFeedbackRequestSchema, Ft as DraftCommitResponseSchema, G as AgentEnvImageSnapshotResponseSchema, Gi as mapOrganizationInvitation, Gn as PresignOrgLogoRequestSchema, Gr as TriggerInvokeRequestSchema, Gt as GetAppCatalogEntryResponseSchema, H as ActionsCatalogShardSchema, Hi as jsonSchemaToWorkflowInputSchema, Hn as PrepareManagedDeployResponseSchema, Hr as TemplateKindSchema, Ht as ErrorResponseSchema, I as publicKeystrokeAssetsObjectUrl, Ii as isHelloWorldTemplateSlug, Ir as SubmitAgentFeedbackResponseSchema, It as DraftConflictResponseSchema, J as AgentSummaryDetailResponseSchema, Ji as mapProjectArtifact, Jn as PresignProjectSourceResponseSchema, Jr as UpdateCredentialRequestSchema, Jt as GetTemplateResponseSchema, K as AgentManifestShardSchema, Ki as mapOrganizationMember, Kn as PresignOrgLogoResponseSchema, Kr as TriggerInvokeResponseSchema, Kt as GetCredentialResponseSchema, L as putBrowserProfileMeta, La as DEFAULT_CLOUD_PLATFORM_ORIGIN, Ln as PROJECT_SLUG_TAKEN_MESSAGE, Lr as SubmitMarketingContactRequestSchema, Lt as DraftFileContentQuerySchema, Ma as mintOrgWorkerToken, Mi as displayCredentialAppName, Mn as OpenApiDiscoverResponseSchema, Mr as StartMcpOAuthConnectionInputSchema, Mt as DeclineOrganizationInvitationResponseSchema, N as projectArtifactKey, Nn as OrganizationSidebarBrandingPatchSchema, Nr as StartMcpOAuthConnectionResultSchema, Nt as DownloadActiveProjectArtifactResponseSchema, O as openModularArtifactShards, Oa as credentialInputSchema, Oi as agentWorkspaceFileId, On as ManagedServiceKindSchema, Or as SlackAppManifestRequestSchema, Ot as DEFAULT_WORKFLOW_CANVAS_MODEL, Pn as OrganizationSidebarBrandingSchema, Pr as StoredProjectSourceManifestSchema, Pt as DownloadActiveProjectSourceResponseSchema, Q as AppSlugAvailabilityQuerySchema, Qi as mapUserOrganization, Qn as ProjectGitRemoteResponseSchema, Qr as UpdateOrganizationRequestSchema, Qt as HistoryRunCancelResponseSchema, R as putBrowserSessionMeta, Ra as resolveExternalPlatformOrigin, Ri as isLlmProviderSlug, Rr as SubmitMarketingContactResponseSchema, Rt as DraftRevisionResponseSchema, S as isUserAvatarStorageKey, Sa as PresignChatAttachmentRequestSchema, Si as WorkspaceTriggerFileSchema, Sn as ListProjectFilesResponseSchema, Sr as SLACK_KEYSTROKE_APP_SLUG, St as CreateProjectArtifactResponseSchema, T as keystrokeAssetsOrgLogoKeyFromPublicUrl, Ta as chatAttachmentExtension, Ti as WorkspaceTriggerRunListResponseSchema, Tn as ListProjectsResponseSchema, Tr as SkillSummarySchema, Tt as CreateSlackAppRequestSchema, U as ActiveOrganizationResponseSchema, Ui as jsonSchemaToZod, Un as PresignCustomAppLogoRequestSchema, Ur as TriggerAttachmentUpdateRequestSchema, Ut as FinalizeCustomAppLogoRequestSchema, V as AcceptOrganizationInvitationResponseSchema, Vi as isSlackCustomAppOauthSlug, Vn as PrepareManagedDeployRequestSchema, Vr as TemplateFilesResponseSchema, Vt as DuplicateCredentialsResponseSchema, W as ActiveProjectSourceRevisionSchema, Wi as listenPortFromPublicUrl, Wn as PresignCustomAppLogoResponseSchema, Wr as TriggerInvokeInputsSchema, Wt as FinalizeCustomAppLogoResponseSchema, X as AgentSummarySchema, Xi as mapProjectMember, Xn as PresignUserAvatarResponseSchema, Xr as UpdateOrganizationMemberRequestSchema, Xt as GraphqlDiscoverResponseSchema, Y as AgentSummaryListResponseSchema, Yi as mapProjectDeployment, Yn as PresignUserAvatarRequestSchema, Yr as UpdateManagedServiceCredentialRequestSchema, Yt as GraphqlDiscoverRequestSchema, Z as AgentWorkspaceFileSummarySchema, Zi as mapProjectSettings, Zn as ProjectGitRemoteRequestSchema, Zr as UpdateOrganizationMemberResponseSchema, Zt as HeartbeatManagedDeployResponseSchema, _ as isOrgLogoStorageKey, _a as validateFormFieldConfig, _i as WorkflowRunInputsSchema, _n as ListOrganizationInvitationsResponseSchema, _r as SLACK_CUSTOM_APP_BOT_SCOPES, _t as CreateDraftCommitRequestSchema, a as createAssetsStorageClient, aa as organizationSlugErrorCodeFromMessage, ai as UserAvatarPatchSchema, an as InviteProjectMembersResponseSchema, ar as ProjectSourceResourcesSchema, at as ChannelPlatformSchema, b as isStorageBucketNotFoundError, bi as WorkflowSummarySchema, bn as ListOrganizationsResponseSchema, br as SLACK_GATEWAY_OAUTH_APP_KEY, bt as CreateOrganizationResponseSchema, ca as projectFileId, ci as UserPreferencesSchema, cn as ListApiKeysResponseSchema, cr as PublicFormSubmitResponseSchema, ct as CompleteProjectArtifactRequestSchema, d as isAppLogoStorageKey, da as schemaHasFileFields, di as WorkflowCanvasSchema, dn as ListChannelPlatformsResponseSchema, dr as PublishedFormListResponseSchema, dt as CreateApiKeyRequestSchema, ea as mergeUserPreferences, ei as UpdateProjectMemberResponseSchema, en as HistoryRunListQuerySchema, er as ProjectReachabilityResponseSchema, f as isBrowserMediaStorageKey, fa as schemaHasUnsupportedFormFields, fi as WorkflowFormResponseSchema, fn as ListCredentialsPageQuerySchema, fr as PublishedFormSchema, ft as CreateApiKeyResponseSchema, g as isKeystrokeAssetsOrgLogoPublicUrl, ga as validateCredentialValueAgainstFields, gi as WorkflowRunInputsPutBodySchema, gn as ListMcpAppToolsResponseSchema, gr as RenewManagedDeployUploadResponseSchema, gt as CreateCustomAppResponseSchema, h as isKeystrokeAssetsAvatarPublicUrl, ha as slackCustomAppOauthSlug, hi as WorkflowManifestMetaShardSchema, hn as ListManagedServiceCredentialsResponseSchema, hr as RenewManagedDeployUploadRequestSchema, ht as CreateCustomAppRequestSchema, i as chatAttachmentStorageKey, ia as organizationInvitationAcceptPath, ii as UploadProjectSourceResponseSchema, in as InviteProjectMembersRequestSchema, ir as ProjectSlugAvailabilityResponseSchema, it as CancelManagedDeployResponseSchema, j as projectArtifactBlobKey, ji as deriveCredentialInstanceSlug, jn as OpenApiDiscoverRequestSchema, jr as SlugAvailabilityResponseSchema, jt as DbProxyQueryRequestSchema, k as orgLogoStorageKey, ki as buildCredentialInstanceLabel, kn as McpDiscoverRequestSchema, kr as SlackAppManifestResponseSchema, kt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, l as getBrowserProfileMeta, la as resolvePublicFormFields, li as WorkflowCanvasCredentialBindingsSchema, ln as ListAppsResponseSchema, lr as PublishManagedDeployCandidateRequestSchema, lt as CompleteProjectArtifactResponseSchema, m as isKeystrokeAssetsAppLogoPublicUrl, ma as slackCustomAppHandleFromSlug, mi as WorkflowManifestFlowShardSchema, mn as ListDraftFilesResponseSchema, mr as RecentResourceSchema, mt as CreateCredentialsResponseSchema, n as publishDraftUpdateBestEffort, na as normalizeUserPreferences, ni as UpdateProjectSettingsRequestSchema, nn as InviteOrganizationMembersRequestSchema, nr as ProjectSettingsResponseSchema, nt as BrowserResumeStateSchema, o as ensureKeystrokeAssetsBucket, oa as parseAppSlug, oi as UserAvatarSchema, on as ListAgentMemoryFilesResponseSchema, or as PublicFormMetadataSchema, ot as CompleteManagedDeployArtifactRequestSchema, p as isChatAttachmentStorageKey, pa as slackAppBindingChannelId, pi as WorkflowFormUpsertBodySchema, pn as ListCredentialsPageResponseSchema, pr as RecentResourceListResponseSchema, pt as CreateCredentialsRequestSchema, q as AgentMemoryFileSummarySchema, qi as mapProject, qn as PresignProjectSourceRequestSchema, qr as TriggerRunListQuerySchema, qt as GetCustomAppResponseSchema, r as appLogoStorageKey, ri as UploadProjectSourceManifestRequestSchema, rn as InviteOrganizationMembersResponseSchema, rr as ProjectSlugAvailabilityQuerySchema, rt as CancelManagedDeployRequestSchema, s as extractRouteManifestFromArtifact, sa as parseStoredRouteManifest, si as UserPreferencesPatchSchema, sn as ListAgentWorkspaceFilesResponseSchema, sr as PublicFormSubmitBodySchema, st as CompleteManagedDeployArtifactResponseSchema, t as createInProcessProjectDraftNotifier, ta as normalizeSlackAppHandle, ti as UpdateProjectRequestSchema, tn as HistoryRunListResponseSchema, tr as ProjectResponseSchema, tt as BrainReferenceSchema, u as getBrowserSessionMeta, ua as resolveUniqueCredentialInstanceLabel, ui as WorkflowCanvasRunSchema, ur as PublishManagedDeployCandidateResponseSchema, ut as ConnectManagedServiceCredentialRequestSchema, v as isProjectArtifactIndexKey, va as validateWorkflowRunInputValues, vi as WorkflowSummaryDetailResponseSchema, vn as ListOrganizationMembersPageQuerySchema, vr as SLACK_CUSTOM_APP_CREDENTIAL_SLUG, vt as CreateDraftDiffCommitRequestSchema, w as keystrokeAssetsAvatarKeyFromPublicUrl, wa as PublicModelsResponseSchema, wi as WorkspaceTriggerOverviewSchema, wn as ListProjectMetricsResponseSchema, wr as SkillSummaryListResponseSchema, wt as CreateProjectResponseSchema, x as isStorageNotFoundError$1, xa as FilePartSchema, xi as WorkspaceTriggerDetailSchema, xn as ListProjectDeploymentsResponseSchema, xr as SLACK_KEYSTROKE_APP_BOT_SCOPES, xt as CreateProjectArtifactRequestSchema, ya as validationErrorResponse, yi as WorkflowSummaryListResponseSchema, yn as ListOrganizationMembersPageResponseSchema, yr as SLACK_CUSTOM_APP_SLUG_PREFIX, yt as CreateOrganizationRequestSchema, z as userAvatarStorageKey, za as resolvePublicPlatformApiOrigin, zr as SubmitTeamRequestRequestSchema, zt as DraftUpdateEventSchema } from "./project-draft-notifier-3Eh4dVet.mjs";
+import { $ as canInviteToProject, A as toProjectGitRepository, B as requireSession, C as createProjectSourceServiceFactory, D as ProjectRepositoryNotReadyError, E as trackProductEvent, F as authorize, G as agentListScope, H as routeProject, I as forbidden, J as canAccessAgent, K as apiKeyListScope, L as requireOrganization, O as archiveProjectRepositoryInline, P as isProjectGitProviderError, Q as canInviteRole, R as requireProject, T as identifyOrganizationGroup, U as accessContext, V as requireVerifiedOrganization, W as getProjectInvitePermission, X as canAccessSkill, Y as canAccessHistoryRun, Z as canAccessWorkflow, _ as commitProjectDraftFromDiff, a as cancelManagedDeploy, at as credentialListScope, c as prepareManagedDeploy, ct as organizationActions, d as ManagedDeployError, dt as skillListScope, et as canReadApiKey, f as deleteManagedDeployCandidateBestEffort, ft as userActions, g as commitProjectDraft, gt as pingProjectTarget, ht as log, i as workerOrganizationIdFromContext, it as checkPermission, j as MANAGED_DRAFT_BRANCH, k as provisionProjectRepositoryInline, l as publishManagedDeployCandidate, lt as projectActions, mt as event, n as readWorkerTokenFromRequest, nt as canRevokeApiKey, o as completeManagedDeployArtifact, ot as historyListScope, p as promoteManagedDeployMain, pt as workflowListScope, q as apiKeysActions, r as requireWorkerToken, rt as canViewCredential, s as heartbeatManagedDeploy, st as managedServicesActions, t as withProjectScope, tt as canReadProject, u as renewManagedDeployUpload, ut as projectListScope, v as mapDraftCommitError, w as mapProjectSourceError, x as assertAvailable, y as ensureProjectRepositoryReady, z as requireProjectMembership } from "./with-project-scope-SZ39WEgf.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
 import { getCachedPublicModelIds, loadPublicModelIds } from "./lib/public-models.mjs";
@@ -23042,43 +23042,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-pOt--woU.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-C9Gg1ddP.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-Cku6hGej.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-Be0zQ_f7.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-C3KTKhlL.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-C-3d7ESt.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-Dz0ilrHF.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-C7wx5Bh1.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-DhpPwVcw.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-DmH4dWRH.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-Dr7gGPKc.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-BwFiTQrE.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-SVr6JZrX.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-BZAfMfUV.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-B8FLyvxG.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-tfAQp0jc.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-BYWL1wkh.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-BTlZYjo7.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-aZgyO6BG.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-C-CLQ7lX.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -23094,15 +23094,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-_V6c_Y8y.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-k5cPr22G.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-C0ugHzL2.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-BVZcigNs.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-B5iKJ_sK.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-MLxD0uQg.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -23110,95 +23110,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-Cds5pG3P.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-DFtFYp5a.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-Cds5pG3P.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-DFtFYp5a.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-Cds5pG3P.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-DFtFYp5a.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-C5rIiKqa.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-BwEG_0TC.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-CwkMwpF4.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-CFGJGHQV.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-ByfczQFR.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-Dra48sTI.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-DHu-IjJK.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-CZYNhteL.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-i4UN8_wj.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-CydFkKuG.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-BqGE2v_-.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-Db6pJcoM.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-D8thql_D.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-Cw-TysL1.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-4f_UlCmY.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-D-vuFBZl.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-BAzZcYrH.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-CfJSN2db.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-Dmo6hsDY.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-DIJO-xRn.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-DWG5wZv2.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-CfkXHOno.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-CsMYO96e.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-qi8k7FKX.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-PLyckfMd.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-BwDcAbR9.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-DN7WjSgJ.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-CnvXaCG2.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-D-8gxmaP.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-f9M_vuc-.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-DRFoW0C-.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-DY5piVHO.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-2pQbXs2k.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-fcXxJihT.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-A6BX1u07.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-kqbTOzyl.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-BbF6VRAs.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-B0nvnaNC.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-DH8DXZHk.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-BZu5Y0_b.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23210,19 +23210,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-2CgZVKNz.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-DJcVQv94.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-CELJ23aS.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-CkQXWW4r.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-CNN23vys.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-CVIdMQNt.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-CNN23vys.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-CVIdMQNt.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23238,7 +23238,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-D85Ko7xE.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-CC9iSUtu.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23254,23 +23254,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-0JXMDwY6.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-V0ICWlBe.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-0JXMDwY6.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-V0ICWlBe.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-BJYQ4YMc.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-DNzAYX6m.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-DhLdSVMT.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-C1BGrnWw.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-Drqts0Ou.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-CnfTAbzI.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23278,15 +23278,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-SSB0_xkn.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-B1Ps6tSN.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-C4E3RCT1.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-CAJx_7wb.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-BG4ZXuon.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-Br4CX4D7.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23294,19 +23294,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-BqIxQcAx.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-LJ-ZA12Q.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-CmI2Hsa_.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-D5O7yMdH.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-Cad6_7os.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-fLUtqiC5.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-QeeptGn3.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-B7l_Yxt6.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23314,11 +23314,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-CAcZBrRZ.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-C-bnMPIj.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-BqaLEgp2.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-6GoSNLwr.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23326,7 +23326,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-BXvN_CFk.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-B8hzbOXn.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23338,49 +23338,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-C0KKUEqR.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-CzrLicva.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BUdYCD74.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DhZ6O7s7.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BUdYCD74.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DhZ6O7s7.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-BUdYCD74.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DhZ6O7s7.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-BsgloKrW.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-BpR3IuQT.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-BcuExFs8.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-ChhbgU5K.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-B5YnpCBT.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-DeancsK_.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-CF1nf3bu.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-D1sTQfnU.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-BcBrl1X2.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-TfCXA31l.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-BcBrl1X2.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-TfCXA31l.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-QGZXHyY0.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-DZkjdqDZ.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-QGZXHyY0.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-DZkjdqDZ.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -23795,6 +23795,146 @@ Object.freeze({
     option is given.`]]
 ]).keys()].sort();
 new TextDecoder("utf-8", { fatal: !0 });
+z.enum(["local", "browseruse"]);
+const BROWSER_USE_API = "https://api.browser-use.com/api/v4";
+async function browserUseFetch(apiKey, path, init) {
+	return fetch(`${BROWSER_USE_API}${path}`, {
+		...init,
+		headers: {
+			"X-Browser-Use-API-Key": apiKey,
+			"Content-Type": "application/json",
+			...init?.headers ?? {}
+		}
+	});
+}
+/** Create a Browser Use cloud browser (for CLI open / live view). */
+async function createBrowserUseSession(options) {
+	const body = {};
+	if (options.timeout !== void 0) body.timeout = options.timeout;
+	if (options.profileId) body.profileId = options.profileId;
+	if (options.record) body.browserSettings = { record: true };
+	if (options.proxyCountryCode) body.proxyCountryCode = options.proxyCountryCode;
+	const res = await browserUseFetch(options.apiKey, "/browsers", {
+		method: "POST",
+		body: JSON.stringify(body)
+	});
+	if (!res.ok) {
+		const text = await res.text();
+		throw new Error(`Browser Use create failed (${res.status}): ${text}`);
+	}
+	return await res.json();
+}
+/** Navigate a cloud browser without leaving a persistent agent-browser daemon attached. */
+async function navigateBrowserUseSession(cdpUrl, url) {
+	const socket = new WebSocket(cdpUrl.replace(/^http:/, "ws:").replace(/^https:/, "wss:"));
+	let nextId = 1;
+	let pageSessionId;
+	const pending = /* @__PURE__ */ new Map();
+	await new Promise((resolve, reject) => {
+		socket.addEventListener("open", () => resolve(), { once: true });
+		socket.addEventListener("error", () => reject(/* @__PURE__ */ new Error("Browser Use CDP connection failed")), { once: true });
+	});
+	socket.addEventListener("message", (event) => {
+		const message = JSON.parse(String(event.data));
+		if (!message.id) return;
+		const request = pending.get(message.id);
+		if (!request) return;
+		pending.delete(message.id);
+		if (message.error) request.reject(new Error(message.error.message ?? "Browser Use CDP request failed"));
+		else request.resolve(message);
+	});
+	const send = (method, params, sessionId) => {
+		const id = nextId++;
+		return new Promise((resolve, reject) => {
+			pending.set(id, {
+				resolve,
+				reject
+			});
+			socket.send(JSON.stringify({
+				id,
+				method,
+				...params ? { params } : {},
+				...sessionId ? { sessionId } : {}
+			}));
+		});
+	};
+	try {
+		const page = ((await send("Target.getTargets")).result?.targetInfos ?? []).find((target) => target.type === "page");
+		if (!page) throw new Error("Browser Use page target not found");
+		pageSessionId = (await send("Target.attachToTarget", {
+			targetId: page.targetId,
+			flatten: true
+		})).result?.sessionId;
+		if (!pageSessionId) throw new Error("Browser Use page attachment failed");
+		await send("Page.navigate", { url }, pageSessionId);
+	} finally {
+		for (const request of pending.values()) request.reject(/* @__PURE__ */ new Error("Browser Use CDP connection closed"));
+		pending.clear();
+		socket.close();
+	}
+}
+async function getBrowserUseSession(options) {
+	const res = await browserUseFetch(options.apiKey, `/browsers/${options.sessionId}`);
+	if (!res.ok) {
+		const text = await res.text();
+		throw new Error(`Browser Use get failed (${res.status}): ${text}`);
+	}
+	return await res.json();
+}
+/** Create or update a Browser Use profile for an agent (returns id). */
+async function ensureBrowserUseProfile(options) {
+	for (const userId of [options.userId ?? options.name, options.legacyUserId].filter((value, index, all) => Boolean(value) && all.indexOf(value) === index)) {
+		const list = await browserUseFetch(options.apiKey, `/profiles?userId=${encodeURIComponent(userId)}`);
+		if (list.ok) {
+			const data = await list.json();
+			const existing = (data.items ?? (Array.isArray(data) ? data : [])).find((profile) => profile.name === options.name);
+			if (existing?.id) return existing.id;
+		}
+	}
+	const res = await browserUseFetch(options.apiKey, "/profiles", {
+		method: "POST",
+		body: JSON.stringify({
+			name: options.name,
+			userId: options.userId ?? options.name
+		})
+	});
+	if (!res.ok) {
+		const text = await res.text();
+		throw new Error(`Browser Use profile create failed (${res.status}): ${text}`);
+	}
+	return (await res.json()).id;
+}
+/**
+* Open a Browser Use live session on the durable profile for an agent slug.
+* Used by platform `browser/open` and by the CLI when a local API key is set.
+*/
+async function openCloudBrowserLogin(options) {
+	const url = options.url ?? "about:blank";
+	const cloudProfileId = options.cloudProfileId ?? await ensureBrowserUseProfile({
+		apiKey: options.apiKey,
+		name: `keystroke-agent-${options.agentSlug}`,
+		userId: options.profileOwnerId ?? options.agentSlug,
+		...options.profileOwnerId ? { legacyUserId: options.agentSlug } : {}
+	});
+	const session = await createBrowserUseSession({
+		apiKey: options.apiKey,
+		profileId: cloudProfileId,
+		timeout: options.timeout ?? 15,
+		...options.record ? { record: true } : {}
+	});
+	const sessionId = options.sessionId ?? `cli-${Date.now()}`;
+	if (url !== "about:blank" && session.cdpUrl) await navigateBrowserUseSession(session.cdpUrl, url);
+	return {
+		sessionId,
+		browserUseSessionId: session.id,
+		cloudProfileId,
+		url,
+		...session.liveUrl ? { liveUrl: session.liveUrl } : {},
+		...session.cdpUrl ? { cdpUrl: session.cdpUrl } : {},
+		...session.startedAt ? { startedAt: session.startedAt } : {},
+		...session.timeoutAt ? { timeoutAt: session.timeoutAt } : {}
+	};
+}
 z.object({
 	clone: z.object({
 		repository: z.string().trim().min(1),
@@ -25158,7 +25298,7 @@ function withOrganizationProjectDatabase() {
 trace.getTracer("keystroke.http");
 //#endregion
 //#region src/routes/account/users/me/avatar/GET.ts
-const handler$115 = async (c) => {
+const handler$116 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserAvatarSchema.parse({ url: dbUser.image ?? null }));
@@ -25177,7 +25317,7 @@ function avatarExtensionForContentType(contentType) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/presign/POST.ts
-const handler$114 = async (c) => {
+const handler$115 = async (c) => {
 	const parsed = PresignUserAvatarRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25217,7 +25357,7 @@ async function deleteStoredImageIfOwned(input) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/PATCH.ts
-const handler$113 = async (c) => {
+const handler$114 = async (c) => {
 	const parsed = UserAvatarPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar update" }), 400);
 	const user = c.get("user");
@@ -25259,14 +25399,14 @@ const handler$113 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/GET.ts
-const handler$112 = async (c) => {
+const handler$113 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserPreferencesSchema.parse(normalizeUserPreferences(dbUser.preferences)));
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/PATCH.ts
-const handler$111 = async (c) => {
+const handler$112 = async (c) => {
 	const parsed = UserPreferencesPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid preferences update" }), 400);
 	const user = c.get("user");
@@ -25281,7 +25421,7 @@ const handler$111 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/GET.ts
-const handler$110 = async (c) => {
+const handler$111 = async (c) => {
 	const memberships = await selectUserOrganizations(c.get("user").id);
 	return c.json(ListOrganizationsResponseSchema.parse(memberships.map(mapUserOrganization)));
 };
@@ -25391,7 +25531,7 @@ function createOrganizationHandler(deps) {
 }
 //#endregion
 //#region src/routes/account/organizations/slug-available/GET.ts
-const handler$109 = async (c) => {
+const handler$110 = async (c) => {
 	const parsed = SlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
 		excludeOrganizationId: c.req.query("excludeOrganizationId")
@@ -25402,7 +25542,7 @@ const handler$109 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/GET.ts
-const handler$108 = async (c) => {
+const handler$109 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const membership = await selectUserOrganizationMembership(c.get("user").id, organizationId);
 	if (!membership) throw new Error(`Organization membership missing after param guard: ${organizationId}`);
@@ -25410,7 +25550,7 @@ const handler$108 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/PATCH.ts
-const handler$107 = async (c) => {
+const handler$108 = async (c) => {
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
 	const parsed = UpdateOrganizationRequestSchema.safeParse(body);
@@ -25435,7 +25575,7 @@ const handler$107 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/GET.ts
-const handler$106 = async (c) => {
+const handler$107 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
 	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
@@ -25484,7 +25624,7 @@ async function finalizeOrgLogoVariant(input) {
 		publicUrl: finalized.publicUrl
 	};
 }
-const handler$105 = async (c) => {
+const handler$106 = async (c) => {
 	const parsed = OrganizationSidebarBrandingPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid branding update" }), 400);
 	const { organizationId } = c.get("organization");
@@ -25512,7 +25652,7 @@ const handler$105 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/logo/presign/POST.ts
-const handler$104 = async (c) => {
+const handler$105 = async (c) => {
 	const parsed = PresignOrgLogoRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid logo upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25722,7 +25862,7 @@ function buildPlatformHistoryUsage(events, durationMs) {
 }
 //#endregion
 //#region src/routes/account/history/GET.ts
-const handler$103 = async (c) => {
+const handler$104 = async (c) => {
 	const organization = c.get("organization");
 	const ctx = accessContext(c);
 	const query = HistoryRunListQuerySchema.parse({
@@ -25747,7 +25887,7 @@ const handler$103 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/history/[runId]/GET.ts
-const handler$102 = async (c) => {
+const handler$103 = async (c) => {
 	const runId = c.req.param("runId") ?? "";
 	if (!runId) return c.json(null, 404);
 	const core = await findHistoryRunCore(runId);
@@ -25807,7 +25947,7 @@ function toAgentSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/agents/GET.ts
-const handler$101 = async (c) => {
+const handler$102 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, agentListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(AgentSummaryListResponseSchema.parse([]));
 	const rows = await listActiveAgents(filter);
@@ -25838,7 +25978,13 @@ z.object({
 	* Maximum tool-loop steps per prompt. When omitted, Keystroke uses
 	* {@link DEFAULT_MAX_STEPS}.
 	*/
-	maxSteps: z.number().int().positive().optional()
+	maxSteps: z.number().int().positive().optional(),
+	/**
+	* Brain references attached to this agent: base slugs or qualified
+	* `{brain}:{filter}` references. Runtime normalization deduplicates in
+	* declaration order.
+	*/
+	brains: z.array(BrainReferenceSchema).min(1).max(16).optional()
 });
 new AsyncLocalStorage();
 //#endregion
@@ -26119,7 +26265,7 @@ function touchResourceActivityBestEffort(options) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/GET.ts
-const handler$100 = async (c) => {
+const handler$101 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(AgentSummaryDetailResponseSchema.parse(null));
@@ -26142,7 +26288,7 @@ const handler$100 = async (c) => {
 function relativePathsFromStorageKeys(prefix, keys) {
 	return keys.filter((key) => key.startsWith(prefix) && key.endsWith(".md")).map((key) => key.slice(prefix.length)).filter((path) => !path.startsWith(".") && !path.includes("/."));
 }
-const handler$99 = async (c) => {
+const handler$100 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentMemoryFilesResponseSchema.parse({ files: [] }), 404);
@@ -26167,7 +26313,7 @@ function isStorageNotFoundError(error) {
 	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
 	return name === "NoSuchKey" || code === "NoSuchKey" || code === "NotFound" || status === 404;
 }
-const handler$98 = async (c) => {
+const handler$99 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -26389,7 +26535,7 @@ async function cancelHistoryRun(c, kind, cancel) {
 }
 //#endregion
 //#region src/routes/account/agents/sessions/[sessionId]/cancel/POST.ts
-const handler$95 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
+const handler$96 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
 //#endregion
 //#region src/routes/account/resources/workflows.ts
 function toWorkflowSummary(row, options) {
@@ -26406,7 +26552,7 @@ function toWorkflowSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/workflows/GET.ts
-const handler$94 = async (c) => {
+const handler$95 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, workflowListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(WorkflowSummaryListResponseSchema.parse([]));
 	const rows = await listActiveWorkflows(filter);
@@ -26420,7 +26566,7 @@ function buildPublicFormUrl(token) {
 }
 //#endregion
 //#region src/routes/account/workflows/forms/GET.ts
-const handler$93 = async (c) => {
+const handler$94 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const filter = await resolveListProjectIds(c, listScope(c, workflowListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(PublishedFormListResponseSchema.parse([]));
@@ -26440,7 +26586,7 @@ const handler$93 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/GET.ts
-const handler$92 = async (c) => {
+const handler$93 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const row = workflowId ? await selectActiveWorkflowById(workflowId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessWorkflow)) return c.json(WorkflowSummaryDetailResponseSchema.parse(null));
@@ -26988,7 +27134,7 @@ function buildWorkflowCanvas(input) {
 //#region src/routes/account/workflows/[workflowId]/canvas/GET.ts
 /** Bumped when the annotation prompt/model changes, so cached annotations invalidate. */
 const ANNOTATIONS_GENERATOR_VERSION = "wf-canvas-annotations-v1";
-const handler$91 = async (c) => {
+const handler$92 = async (c) => {
 	const organization = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -27162,7 +27308,7 @@ function toBinding(key, description) {
 * each of its requirements currently binds to (read-only, no decryption). Not
 * content-hash cached — credential state changes without a redeploy.
 */
-const handler$90 = async (c) => {
+const handler$91 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -27321,7 +27467,7 @@ function toCanvasRunStatus(status) {
 	if (status === "canceled") return "canceled";
 	return "running";
 }
-const handler$89 = async (c) => {
+const handler$90 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const runId = c.req.param("runId") ?? "";
 	if (!workflowId.trim() || !runId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow or run id" }), 400);
@@ -27491,7 +27637,7 @@ function createGetWorkflowOverviewHandler(createSource) {
 }
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/run-inputs/GET.ts
-const handler$88 = async (c) => {
+const handler$89 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -27506,7 +27652,7 @@ const handler$88 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/run-inputs/PUT.ts
-const handler$87 = async (c) => {
+const handler$88 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -27537,7 +27683,7 @@ function parseRunInput$1(requestSchema, input) {
 * the workflow row's request schema, creates a pending run, and enqueues it on
 * the project's queue (drained by the project runtime worker). Returns the run id.
 */
-const handler$86 = async (c) => {
+const handler$87 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -27611,7 +27757,7 @@ async function resolvePublishableInputSchema(projectId, row) {
 }
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/form/GET.ts
-const handler$85 = async (c) => {
+const handler$86 = async (c) => {
 	const resolved = await resolveFormWorkflow(c);
 	if (resolved instanceof Response) return resolved;
 	const { organizationId } = c.get("organization");
@@ -27620,7 +27766,7 @@ const handler$85 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/form/PUT.ts
-const handler$84 = async (c) => {
+const handler$85 = async (c) => {
 	const resolved = await resolveFormWorkflow(c, { requireManageAccess: true });
 	if (resolved instanceof Response) return resolved;
 	const body = WorkflowFormUpsertBodySchema.safeParse(await c.req.json().catch(() => null));
@@ -27649,7 +27795,7 @@ const handler$84 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/form/DELETE.ts
-const handler$83 = async (c) => {
+const handler$84 = async (c) => {
 	const resolved = await resolveFormWorkflow(c, { requireManageAccess: true });
 	if (resolved instanceof Response) return resolved;
 	const { organizationId } = c.get("organization");
@@ -27659,7 +27805,7 @@ const handler$83 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/form/rotate/POST.ts
-const handler$82 = async (c) => {
+const handler$83 = async (c) => {
 	const resolved = await resolveFormWorkflow(c, { requireManageAccess: true });
 	if (resolved instanceof Response) return resolved;
 	const { organizationId } = c.get("organization");
@@ -27681,7 +27827,7 @@ function extensionFromUpload$1(contentType, filename) {
 * hydration reads by project id + storage key, so runs read the file the same
 * way `storeFile` output does.
 */
-const handler$81 = async (c) => {
+const handler$82 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -27706,7 +27852,7 @@ const handler$81 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/runs/GET.ts
-const handler$80 = async (c) => {
+const handler$81 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -27729,7 +27875,7 @@ const handler$80 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/runs/[runId]/cancel/POST.ts
-const handler$79 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
+const handler$80 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
 //#endregion
 //#region src/routes/account/resources/skills.ts
 function toSkillSummary(row) {
@@ -27746,7 +27892,7 @@ function toSkillSummary(row) {
 }
 //#endregion
 //#region src/routes/account/skills/GET.ts
-const handler$78 = async (c) => {
+const handler$79 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, skillListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(SkillSummaryListResponseSchema.parse([]));
 	const rows = await listActiveSkills(filter);
@@ -27754,7 +27900,7 @@ const handler$78 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/skills/[skillId]/GET.ts
-const handler$77 = async (c) => {
+const handler$78 = async (c) => {
 	const skillId = c.req.param("skillId") ?? "";
 	const row = skillId ? await selectActiveSkillById(skillId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessSkill)) return c.json(SkillSummaryDetailResponseSchema.parse(null));
@@ -27863,7 +28009,7 @@ function toWorkspaceTriggerRunSummary(item, assignments) {
 }
 //#endregion
 //#region src/routes/account/triggers/GET.ts
-const handler$76 = async (c) => {
+const handler$77 = async (c) => {
 	const organization = c.get("organization");
 	const scope = listScope(c, projectListScope(accessContext(c)));
 	const filter = await resolveListProjectIds(c, scope, c.req.query("projectId"));
@@ -27875,7 +28021,7 @@ const handler$76 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/GET.ts
-const handler$75 = async (c) => {
+const handler$76 = async (c) => {
 	const organization = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -27891,7 +28037,7 @@ const handler$75 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/runs/GET.ts
-const handler$74 = async (c) => {
+const handler$75 = async (c) => {
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
 	const filter = await resolveListProjectIds(c, listScope(c, projectListScope(accessContext(c))));
@@ -28053,7 +28199,7 @@ async function syncNativeTriggerSchedule(organization, trigger) {
 	}
 	await scheduler.removeTriggerSchedule?.(trigger.slug, trigger.projectId);
 }
-const handler$73 = async (c) => {
+const handler$74 = async (c) => {
 	const organization = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	const attachmentId = c.req.param("attachmentId") ?? "";
@@ -28125,7 +28271,7 @@ var InvokeHttpError = class extends Error {
 * Manually invoke a trigger from the dashboard or CLI. Validates webhook input against
 * stored attachment schemas, then enqueues a trigger job on the project's queue.
 */
-const handler$72 = async (c) => {
+const handler$73 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -28207,7 +28353,7 @@ const handler$72 = async (c) => {
 * Form metadata for the dashboard invoke popover: webhook request schemas and
 * cron's read-only static payload.
 */
-const handler$71 = async (c) => {
+const handler$72 = async (c) => {
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
 	const filter = await resolveListProjectIds(c, listScope(c, projectListScope(accessContext(c))));
@@ -28273,7 +28419,7 @@ function latestRecentInteractionAt(recent) {
 //#endregion
 //#region src/routes/account/recents/GET.ts
 const RECENTS_LIMIT = 50;
-const handler$70 = async (c) => {
+const handler$71 = async (c) => {
 	const userId = c.get("user").id;
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, { kind: "member-only" });
@@ -28299,7 +28445,7 @@ const handler$70 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/GET.ts
-const handler$69 = async (c) => {
+const handler$70 = async (c) => {
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, listScope(c, projectListScope(accessContext(c))));
 	const projects = await selectProjectsByOrganizationId(organization.organizationId, { grantedProjectIds: grantedProjectIdsList });
@@ -28325,7 +28471,7 @@ function mergeProjectListMetrics(input) {
 }
 //#endregion
 //#region src/routes/account/projects/metrics/GET.ts
-const handler$68 = async (c) => {
+const handler$69 = async (c) => {
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, listScope(c, projectListScope(accessContext(c))));
 	const [resourceCounts, lastDeploymentAtByProject] = await Promise.all([selectProjectResourceCounts(grantedProjectIdsList !== void 0 ? { projectIds: grantedProjectIdsList } : void 0), selectLastDeploymentAtByProject(organization.organizationId)]);
@@ -28383,7 +28529,7 @@ function createCreateProjectHandler(options = {}) {
 }
 //#endregion
 //#region src/routes/account/projects/slug-available/GET.ts
-const handler$66 = async (c) => {
+const handler$67 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = ProjectSlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
@@ -28395,12 +28541,12 @@ const handler$66 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/GET.ts
-const handler$65 = async (c) => {
+const handler$66 = async (c) => {
 	return c.json(ProjectResponseSchema.parse(routeProject(c.get("project"))));
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/PATCH.ts
-const handler$64 = async (c) => {
+const handler$65 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -28432,7 +28578,7 @@ function createDeleteProjectHandler(projectGit) {
 }
 //#endregion
 //#region src/routes/account/projects/[projectId]/deployments/GET.ts
-const handler$62 = async (c) => {
+const handler$63 = async (c) => {
 	const rows = await selectProjectDeployments(c.get("project").id);
 	return c.json(ListProjectDeploymentsResponseSchema.parse(rows.map(mapProjectDeployment)));
 };
@@ -28440,7 +28586,7 @@ const handler$62 = async (c) => {
 //#region src/routes/account/projects/[projectId]/artifacts/POST.ts
 const DEFAULT_PRESIGN_TTL_SECONDS$1 = 900;
 const ARTIFACT_CONTENT_TYPE = "application/gzip";
-const handler$61 = async (c) => {
+const handler$62 = async (c) => {
 	const project = c.get("project");
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
@@ -28483,7 +28629,7 @@ const handler$61 = async (c) => {
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/active/download/GET.ts
 const DEFAULT_PRESIGN_TTL_SECONDS = 900;
-const handler$60 = async (c) => {
+const handler$61 = async (c) => {
 	const project = c.get("project");
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
@@ -28677,7 +28823,7 @@ function createCompleteProjectArtifactHandler(_projectGit) {
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/source/presign/POST.ts
 const SOURCE_BLOB_CONTENT_TYPE = "text/plain; charset=utf-8";
-const handler$58 = async (c) => {
+const handler$59 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -28705,7 +28851,7 @@ const handler$58 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/source/manifest/POST.ts
-const handler$57 = async (c) => {
+const handler$58 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -28742,7 +28888,7 @@ function extensionFromUpload(contentType, filename) {
 	if (fromName && /^[a-z0-9]+$/.test(fromName)) return fromName;
 	return chatAttachmentExtension(contentType) ?? "bin";
 }
-const handler$56 = async (c) => {
+const handler$57 = async (c) => {
 	const project = c.get("project");
 	const slug = c.req.param("slug");
 	if (!slug) return c.json(ErrorResponseSchema.parse({ error: "Agent slug is required" }), 400);
@@ -28767,7 +28913,7 @@ const handler$56 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/agents/[slug]/attachments/[...key]/GET.ts
-const handler$55 = async (c) => {
+const handler$56 = async (c) => {
 	const project = c.get("project");
 	const slug = c.req.param("slug");
 	const keyParam = c.req.param("key");
@@ -28783,6 +28929,233 @@ const handler$55 = async (c) => {
 	return c.redirect(url, 302);
 };
 //#endregion
+//#region src/routes/account/projects/[projectId]/agents/[slug]/browser/sessions/[sessionId]/GET.ts
+const BrowserSessionMetaResponseSchema = z.object({
+	agentSlug: z.string(),
+	sessionId: z.string(),
+	provider: z.enum(["local", "browseruse"]),
+	liveUrl: z.string().optional(),
+	browserUseSessionId: z.string().optional(),
+	browserStartedAt: z.string().optional(),
+	browserUsageSettledAt: z.string().optional(),
+	cloudProfileId: z.string().optional(),
+	timeoutAt: z.string().optional(),
+	recordingStorageKey: z.string().optional(),
+	screenshotStorageKeys: z.array(z.string()).optional(),
+	resumeState: BrowserResumeStateSchema.optional(),
+	updatedAt: z.string()
+});
+function createHandler$2(settleBrowserUsage) {
+	return async (c) => {
+		const project = c.get("project");
+		const slug = c.req.param("slug");
+		const sessionId = c.req.param("sessionId");
+		if (!slug || !sessionId) return c.json(ErrorResponseSchema.parse({ error: "slug and sessionId are required" }), 400);
+		const agent = await runWithProjectScope(project.id, () => selectAgentBySlug(slug));
+		if (!agent || agent.projectId !== project.id) return c.json(ErrorResponseSchema.parse({ error: "Agent not found" }), 404);
+		const { organizationId } = c.get("organization");
+		const organization = await selectOrganizationById(organizationId);
+		if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+		const storage = createOrgStorageClient(organization);
+		let meta = await getBrowserSessionMeta(storage, {
+			projectId: project.id,
+			agentId: agent.id,
+			sessionId
+		});
+		if (!meta) return c.json(ErrorResponseSchema.parse({ error: "Browser session not found" }), 404);
+		if (settleBrowserUsage && meta.browserUseSessionId && meta.browserStartedAt && !meta.browserUsageSettledAt && meta.timeoutAt && Date.parse(meta.timeoutAt) <= Date.now()) {
+			const apiKey = process.env.BROWSER_USE_API_KEY?.trim();
+			const browser = apiKey ? await getBrowserUseSession({
+				apiKey,
+				sessionId: meta.browserUseSessionId
+			}).catch(() => null) : null;
+			if (browser && browser.status !== "active") {
+				const browserUsageSettledAt = (/* @__PURE__ */ new Date()).toISOString();
+				await settleBrowserUsage({
+					organizationId,
+					projectId: project.id,
+					agentId: agent.id,
+					sessionId,
+					browserUseSessionId: meta.browserUseSessionId,
+					startedAt: browser.startedAt ?? meta.browserStartedAt,
+					finishedAt: browser.finishedAt ?? void 0
+				});
+				meta = {
+					...meta,
+					browserUsageSettledAt,
+					liveUrl: void 0
+				};
+				await putBrowserSessionMeta(storage, {
+					projectId: project.id,
+					agentId: agent.id,
+					sessionId,
+					meta
+				});
+			}
+		}
+		return c.json(BrowserSessionMetaResponseSchema.parse(meta));
+	};
+}
+//#endregion
+//#region src/routes/account/projects/[projectId]/agents/[slug]/browser/open/POST.ts
+const OpenBodySchema = z.object({
+	url: z.string().optional(),
+	sessionId: z.string().optional()
+});
+const OpenResponseSchema = z.object({
+	agentSlug: z.string(),
+	sessionId: z.string(),
+	provider: z.literal("browseruse"),
+	liveUrl: z.string().optional(),
+	browserUseSessionId: z.string(),
+	cloudProfileId: z.string(),
+	url: z.string(),
+	updatedAt: z.string(),
+	hint: z.string()
+});
+function createHandler$1(settleBrowserUsage) {
+	return async (c) => {
+		const apiKey = process.env.BROWSER_USE_API_KEY?.trim();
+		if (!apiKey) return c.json(ErrorResponseSchema.parse({ error: "Browser Use is not configured on the platform (set BROWSER_USE_API_KEY). Local Playwright is not used for project-linked open." }), 503);
+		const project = c.get("project");
+		const slug = c.req.param("slug");
+		if (!slug) return c.json(ErrorResponseSchema.parse({ error: "slug is required" }), 400);
+		const parsed = OpenBodySchema.safeParse(await c.req.json().catch(() => ({})));
+		if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid body" }), 400);
+		const agent = await runWithProjectScope(project.id, () => selectAgentBySlug(slug));
+		if (!agent || agent.projectId !== project.id) return c.json(ErrorResponseSchema.parse({ error: "Agent not found" }), 404);
+		const { organizationId } = c.get("organization");
+		const organization = await selectOrganizationById(organizationId);
+		if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+		const storage = createOrgStorageClient(organization);
+		const profile = await getBrowserProfileMeta(storage, {
+			projectId: project.id,
+			agentId: agent.id
+		});
+		const existing = parsed.data.sessionId ? await getBrowserSessionMeta(storage, {
+			projectId: project.id,
+			agentId: agent.id,
+			sessionId: parsed.data.sessionId
+		}) : null;
+		const resumeUrl = existing?.resumeState?.tabs.find((tab) => tab.active)?.url;
+		const requestedUrl = parsed.data.url ?? resumeUrl;
+		const active = existing?.browserUseSessionId ? await getBrowserUseSession({
+			apiKey,
+			sessionId: existing.browserUseSessionId
+		}).catch(() => null) : null;
+		if (active?.status === "active" && active.cdpUrl && parsed.data.url) {
+			await navigateBrowserUseSession(active.cdpUrl, parsed.data.url);
+			const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+			await putBrowserSessionMeta(storage, {
+				projectId: project.id,
+				agentId: agent.id,
+				sessionId: existing.sessionId,
+				meta: {
+					...existing,
+					updatedAt
+				}
+			});
+			return c.json(OpenResponseSchema.parse({
+				...existing,
+				liveUrl: active.liveUrl ?? existing?.liveUrl,
+				browserUseSessionId: active.id,
+				cloudProfileId: profile?.cloudProfileId ?? existing?.cloudProfileId,
+				url: parsed.data.url,
+				updatedAt,
+				hint: "Continue in the existing live browser."
+			}));
+		}
+		if (settleBrowserUsage && existing?.browserUseSessionId && !existing.browserUsageSettledAt && existing.browserStartedAt) {
+			const prior = await getBrowserUseSession({
+				apiKey,
+				sessionId: existing.browserUseSessionId
+			}).catch(() => null);
+			if (prior && prior.status !== "active") {
+				const browserUsageSettledAt = (/* @__PURE__ */ new Date()).toISOString();
+				await settleBrowserUsage({
+					organizationId,
+					projectId: project.id,
+					agentId: agent.id,
+					sessionId: existing.sessionId,
+					browserUseSessionId: existing.browserUseSessionId,
+					startedAt: prior.startedAt ?? existing.browserStartedAt,
+					finishedAt: prior.finishedAt ?? void 0
+				});
+				await putBrowserSessionMeta(storage, {
+					projectId: project.id,
+					agentId: agent.id,
+					sessionId: existing.sessionId,
+					meta: {
+						...existing,
+						browserUsageSettledAt
+					}
+				});
+			}
+		}
+		const opened = await openCloudBrowserLogin({
+			apiKey,
+			agentSlug: slug,
+			profileOwnerId: agent.id,
+			...parsed.data.sessionId ? {
+				sessionId: parsed.data.sessionId,
+				timeout: 5
+			} : {},
+			...requestedUrl ? { url: requestedUrl } : {},
+			...profile?.cloudProfileId ? { cloudProfileId: profile.cloudProfileId } : {},
+			record: process.env.AGENT_BROWSER_RECORD === "true"
+		});
+		await putBrowserProfileMeta(storage, {
+			projectId: project.id,
+			agentId: agent.id,
+			cloudProfileId: opened.cloudProfileId
+		});
+		const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+		const meta = {
+			agentSlug: slug,
+			sessionId: opened.sessionId,
+			provider: "browseruse",
+			browserUseSessionId: opened.browserUseSessionId,
+			updatedAt,
+			...opened.liveUrl ? { liveUrl: opened.liveUrl } : {},
+			browserStartedAt: opened.startedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+			...opened.timeoutAt ? { timeoutAt: opened.timeoutAt } : {},
+			...existing?.recordingStorageKey ? { recordingStorageKey: existing.recordingStorageKey } : {},
+			...existing?.screenshotStorageKeys ? { screenshotStorageKeys: existing.screenshotStorageKeys } : {},
+			...existing?.resumeState ? { resumeState: existing.resumeState } : {}
+		};
+		await putBrowserSessionMeta(storage, {
+			projectId: project.id,
+			agentId: agent.id,
+			sessionId: opened.sessionId,
+			meta
+		});
+		return c.json(OpenResponseSchema.parse({
+			...meta,
+			cloudProfileId: opened.cloudProfileId,
+			url: opened.url,
+			hint: "Sign in in the live view, then close when done. Profile cookies persist for this agent."
+		}));
+	};
+}
+//#endregion
+//#region src/routes/account/projects/[projectId]/agents/[slug]/browser/media/[...key]/GET.ts
+/** Presign/redirect for a browser-media object under this agent. */
+const handler$55 = async (c) => {
+	const project = c.get("project");
+	const slug = c.req.param("slug");
+	const keyParam = c.req.param("key");
+	if (!slug || !keyParam) return c.json(ErrorResponseSchema.parse({ error: "Media key is required" }), 400);
+	const storageKey = keyParam.split("/").map((segment) => decodeURIComponent(segment)).join("/");
+	const agent = await runWithProjectScope(project.id, () => selectAgentBySlug(slug));
+	if (!agent || agent.projectId !== project.id) return c.json(ErrorResponseSchema.parse({ error: "Agent not found" }), 404);
+	if (!isBrowserMediaStorageKey(storageKey, project.id, agent.id)) return c.json(ErrorResponseSchema.parse({ error: "Media not found" }), 404);
+	const { organizationId } = c.get("organization");
+	const organization = await selectOrganizationById(organizationId);
+	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+	const url = await createOrgStorageClient(organization).presignGet({ key: storageKey });
+	return c.redirect(url, 302);
+};
+//#endregion
 //#region src/routes/account/projects/[projectId]/files/GET.ts
 /**
 * Resolve registry moduleFile values to paths in the deploy source snapshot.
@@ -32271,6 +32644,8 @@ function mountAccountRoutes(options) {
 	const listAgentWorkspaceFiles = createListAgentWorkspaceFilesHandler(options.agentWorkspaceFiles);
 	const getAgentWorkspaceFileContent = createGetAgentWorkspaceFileContentHandler(options.agentWorkspaceFiles);
 	const snapshotAgentEnvImage = createSnapshotAgentEnvImageHandler(options.snapshotAgentEnvImage);
+	const openBrowserSession = createHandler$1(options.settleBrowserUsage);
+	const getBrowserSession = createHandler$2(options.settleBrowserUsage);
 	const downloadActiveProjectSource = createDownloadActiveProjectSourceHandler(createProjectSource);
 	const getActiveProjectSourceRevision = createGetActiveProjectSourceRevisionHandler(createProjectSource);
 	const getTriggerFile = createGetTriggerFileHandler(createProjectSource);
@@ -32304,22 +32679,22 @@ function mountAccountRoutes(options) {
 	const requireProjectManageMembers = authorize(projectActions.manageMembers);
 	const requireInvitableProjectRole = authorizePayload(InviteProjectMembersRequestSchema, ({ c, ctx, body }) => canInviteToProject(ctx, { invitePermission: getProjectInvitePermission(c) }, body.role));
 	const requireOrgParam = requireOrganizationParam();
-	account.get("/organizations", handler$110);
-	account.get("/organizations/slug-available", handler$109);
+	account.get("/organizations", handler$111);
+	account.get("/organizations/slug-available", handler$110);
 	account.post("/organizations", createOrganizationHandler(options));
-	account.get("/organizations/:organizationId", requireOrgParam, handler$108);
-	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$107);
-	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$106);
-	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$105);
-	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$104);
+	account.get("/organizations/:organizationId", requireOrgParam, handler$109);
+	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$108);
+	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$107);
+	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$106);
+	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$105);
 	account.get("/invitations", handler$35);
 	account.post("/invitations/:invitationId/accept", handler$34);
 	account.post("/invitations/:invitationId/decline", handler$33);
-	account.get("/users/me/avatar", handler$115);
-	account.post("/users/me/avatar/presign", handler$114);
-	account.patch("/users/me/avatar", handler$113);
-	account.get("/users/me/preferences", handler$112);
-	account.patch("/users/me/preferences", handler$111);
+	account.get("/users/me/avatar", handler$116);
+	account.post("/users/me/avatar/presign", handler$115);
+	account.patch("/users/me/avatar", handler$114);
+	account.get("/users/me/preferences", handler$113);
+	account.patch("/users/me/preferences", handler$112);
 	const withOrgDb = withOrganizationProjectDatabase();
 	orgScoped.get(keystrokeSlackOAuthProvider.routes.start, requireOrgUpdate, withOrgDb, startKeystrokeSlackInstall);
 	orgScoped.get(keystrokeSlackOAuthProvider.routes.authorizeUrl, requireOrgUpdate, withOrgDb, getKeystrokeSlackAuthorizeUrl);
@@ -32358,58 +32733,58 @@ function mountAccountRoutes(options) {
 	orgScoped.post("/managed-service-credentials", requireManagedServicesManage, handler$8);
 	orgScoped.patch("/managed-service-credentials/:id", requireManagedServicesManage, handler$7);
 	orgScoped.delete("/managed-service-credentials/:id", requireManagedServicesManage, handler$6);
-	orgScoped.get("/agents", withOrgDb, handler$101);
-	orgScoped.get("/agents/:agentId", withOrgDb, handler$100);
-	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$99);
-	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$98);
+	orgScoped.get("/agents", withOrgDb, handler$102);
+	orgScoped.get("/agents/:agentId", withOrgDb, handler$101);
+	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$100);
+	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$99);
 	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, listAgentWorkspaceFiles);
 	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, getAgentWorkspaceFileContent);
-	orgScoped.get("/workflows", withOrgDb, handler$94);
-	orgScoped.get("/workflows/forms", handler$93);
-	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$92);
-	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$91);
-	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$90);
-	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$89);
+	orgScoped.get("/workflows", withOrgDb, handler$95);
+	orgScoped.get("/workflows/forms", handler$94);
+	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$93);
+	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$92);
+	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$91);
+	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$90);
 	orgScoped.get("/workflows/:workflowId/overview", withOrgDb, getWorkflowOverview);
-	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$80);
-	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$88);
-	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$87);
-	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$86);
-	orgScoped.get("/workflows/:workflowId/form", withOrgDb, handler$85);
-	orgScoped.put("/workflows/:workflowId/form", withOrgDb, handler$84);
-	orgScoped.delete("/workflows/:workflowId/form", withOrgDb, handler$83);
-	orgScoped.post("/workflows/:workflowId/form/rotate", withOrgDb, handler$82);
-	orgScoped.post("/workflows/:workflowId/attachments/presign", withOrgDb, handler$81);
-	orgScoped.get("/skills", withOrgDb, handler$78);
-	orgScoped.get("/skills/:skillId", withOrgDb, handler$77);
-	orgScoped.get("/triggers", withOrgDb, handler$76);
-	orgScoped.get("/triggers/:triggerId", withOrgDb, handler$75);
-	orgScoped.get("/triggers/:triggerId/runs", withOrgDb, handler$74);
+	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$81);
+	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$89);
+	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$88);
+	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$87);
+	orgScoped.get("/workflows/:workflowId/form", withOrgDb, handler$86);
+	orgScoped.put("/workflows/:workflowId/form", withOrgDb, handler$85);
+	orgScoped.delete("/workflows/:workflowId/form", withOrgDb, handler$84);
+	orgScoped.post("/workflows/:workflowId/form/rotate", withOrgDb, handler$83);
+	orgScoped.post("/workflows/:workflowId/attachments/presign", withOrgDb, handler$82);
+	orgScoped.get("/skills", withOrgDb, handler$79);
+	orgScoped.get("/skills/:skillId", withOrgDb, handler$78);
+	orgScoped.get("/triggers", withOrgDb, handler$77);
+	orgScoped.get("/triggers/:triggerId", withOrgDb, handler$76);
+	orgScoped.get("/triggers/:triggerId/runs", withOrgDb, handler$75);
 	orgScoped.get("/triggers/:triggerId/file", withOrgDb, getTriggerFile);
 	orgScoped.get("/triggers/:triggerId/overview", withOrgDb, getTriggerOverview);
-	orgScoped.get("/triggers/:triggerId/invoke-inputs", withOrgDb, handler$71);
-	orgScoped.post("/triggers/:triggerId/invoke", withOrgDb, handler$72);
-	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$73);
-	orgScoped.get("/recents", withOrgDb, handler$70);
-	orgScoped.get("/history", withOrgDb, handler$103);
-	orgScoped.get("/history/:runId", withOrgDb, handler$102);
-	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$79);
-	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$95);
+	orgScoped.get("/triggers/:triggerId/invoke-inputs", withOrgDb, handler$72);
+	orgScoped.post("/triggers/:triggerId/invoke", withOrgDb, handler$73);
+	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$74);
+	orgScoped.get("/recents", withOrgDb, handler$71);
+	orgScoped.get("/history", withOrgDb, handler$104);
+	orgScoped.get("/history/:runId", withOrgDb, handler$103);
+	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$80);
+	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$96);
 	orgScoped.get("/credentials", withOrgDb, handler$44);
 	orgScoped.post("/credentials", withOrgDb, handler$43);
 	orgScoped.get("/credentials/:credentialId", withOrgDb, (c, next) => c.req.param("credentialId") === "instances" ? next() : handler$42(c, next));
 	orgScoped.patch("/credentials/:credentialId", withOrgDb, handler$41);
 	orgScoped.post("/credentials/:credentialId/duplicate", withOrgDb, handler$40);
 	orgScoped.delete("/credentials/:credentialId", withOrgDb, deleteCredential);
-	orgScoped.get("/projects", handler$69);
-	orgScoped.get("/projects/slug-available", handler$66);
-	orgScoped.get("/projects/metrics", withOrgDb, handler$68);
+	orgScoped.get("/projects", handler$70);
+	orgScoped.get("/projects/slug-available", handler$67);
+	orgScoped.get("/projects/metrics", withOrgDb, handler$69);
 	orgScoped.post("/projects", createCreateProjectHandler({
 		projectQuotaGate: options.projectQuotaGate,
 		projectGit: options.projectGit
 	}));
-	projectScoped.get("/:projectId", requireProject(), requireProjectMember, handler$65);
-	projectScoped.patch("/:projectId", requireProject(), requireProjectMember, requireProjectUpdate, handler$64);
+	projectScoped.get("/:projectId", requireProject(), requireProjectMember, handler$66);
+	projectScoped.patch("/:projectId", requireProject(), requireProjectMember, requireProjectUpdate, handler$65);
 	projectScoped.delete("/:projectId", requireProject(), requireProjectMember, requireProjectDelete, createDeleteProjectHandler(options.projectGit));
 	projectScoped.get("/:projectId/settings", requireProject(), requireProjectMember, handler$49);
 	projectScoped.get("/:projectId/git", requireProject(), requireProjectMember, handler$47);
@@ -32434,19 +32809,23 @@ function mountAccountRoutes(options) {
 	projectScoped.get("/:projectId/draft/events", requireProject(), requireProjectMember, getDraftEvents);
 	projectScoped.post("/:projectId/draft/commits", requireProject(), requireProjectMember, requireProjectDeploy, commitDraft);
 	projectScoped.post("/:projectId/draft/commits/from-diff", requireProject(), requireProjectMember, requireProjectDeploy, commitDraftFromDiff);
-	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$56);
+	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$57);
 	projectScoped.post("/:projectId/agents/:slug/env-image", requireProject(), requireProjectMember, withOrgDb, snapshotAgentEnvImage);
-	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$55);
+	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$56);
+	projectScoped.get("/:projectId/agents/:slug/browser/sessions/:sessionId", requireProject(), requireProjectMember, withOrgDb, getBrowserSession);
+	projectScoped.post("/:projectId/agents/:slug/browser/open", requireProject(), requireProjectMember, withOrgDb, openBrowserSession);
+	projectScoped.get("/:projectId/agents/:slug/browser/media/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$55);
 	projectScoped.get("/:projectId/artifacts/:artifactId/files/content", requireProject(), requireProjectMember, getProjectFileContent);
-	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$62);
-	projectScoped.get("/:projectId/artifacts/active/download", requireProject(), requireProjectMember, requireProjectDeploy, handler$60);
+	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$63);
+	projectScoped.get("/:projectId/artifacts/active/download", requireProject(), requireProjectMember, requireProjectDeploy, handler$61);
 	projectScoped.get("/:projectId/artifacts/active/source", requireProject(), requireProjectMember, withOrgDb, downloadActiveProjectSource);
 	projectScoped.get("/:projectId/artifacts/active/source/revision", requireProject(), requireProjectMember, getActiveProjectSourceRevision);
-	projectScoped.post("/:projectId/artifacts", requireProject(), requireProjectMember, requireProjectDeploy, handler$61);
+	projectScoped.post("/:projectId/artifacts", requireProject(), requireProjectMember, requireProjectDeploy, handler$62);
 	projectScoped.post("/:projectId/artifacts/:artifactId/complete", requireProject(), requireProjectMember, requireProjectDeploy, completeProjectArtifact);
-	projectScoped.post("/:projectId/artifacts/:artifactId/source/presign", requireProject(), requireProjectMember, requireProjectDeploy, handler$58);
-	projectScoped.post("/:projectId/artifacts/:artifactId/source/manifest", requireProject(), requireProjectMember, requireProjectDeploy, handler$57);
+	projectScoped.post("/:projectId/artifacts/:artifactId/source/presign", requireProject(), requireProjectMember, requireProjectDeploy, handler$59);
+	projectScoped.post("/:projectId/artifacts/:artifactId/source/manifest", requireProject(), requireProjectMember, requireProjectDeploy, handler$58);
 	options.platformAgent?.mountOrgRoutes(orgScoped);
+	options.brain?.mountAccountRoutes(orgScoped);
 	orgScoped.route("/projects", projectScoped);
 	account.route("/", orgScoped);
 	return account;
@@ -32578,7 +32957,7 @@ async function runOrgDatabaseQuery(options, query) {
 		releaseProjectDatabasePool(options);
 	}
 }
-function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp) {
+function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp, brain) {
 	const internal = new Hono();
 	const protect = requireWorkerToken(workerToken);
 	const materialize = createCredentialMaterializeHandler(tokenRefresh, { resolveSandboxAccessToken: mcp ? (connectionId) => mcp.resolveSandboxAccessToken(connectionId) : void 0 });
@@ -32645,6 +33024,14 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp) {
 		if (early) return early;
 		await next();
 	});
+	internal.use("/organizations/:organizationId/*", async (c, next) => {
+		const verified = verifyOrgWorkerToken(workerToken, readWorkerTokenFromRequest(c));
+		if (verified && verified.organizationId !== c.req.param("organizationId")) return c.json({
+			error: "unauthorized",
+			message: "Token org mismatch."
+		}, 401);
+		await next();
+	});
 	internal.use("/projects/:projectId/*", async (c, next) => {
 		const verified = verifyOrgWorkerToken(workerToken, readWorkerTokenFromRequest(c));
 		if (verified) {
@@ -32664,6 +33051,7 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp) {
 		return c.json({ orgSlug: organization.slug });
 	});
 	mcp?.mountInternalRoutes?.(internal, { withProjectScope });
+	brain?.mountInternalRoutes(internal);
 	internal.post("/projects/:projectId/credentials/materialize", async (c) => {
 		const response = await withProjectScope(c.req.param("projectId"), async () => materialize(c));
 		if (response === void 0) return c.json({ error: "Project not found" }, 404);
@@ -33026,12 +33414,14 @@ async function createApp$1(auth, options) {
 				projectGit: options.projectGit,
 				draftNotifier,
 				platformAgent: options.platformAgent,
+				brain: options.brain,
 				agentWorkspaceFiles: options.agentWorkspaceFiles,
+				settleBrowserUsage: options.settleBrowserUsage,
 				snapshotAgentEnvImage: options.snapshotAgentEnvImage
 			}));
 		},
 		mountInternal: (app, { tokenRefresh }) => {
-			app.route("/internal", mountInternalRoutes(options.hosting.workerRuntime.workerToken, tokenRefresh, options.llmProxy, options.mcp));
+			app.route("/internal", mountInternalRoutes(options.hosting.workerRuntime.workerToken, tokenRefresh, options.llmProxy, options.mcp, options.brain));
 		}
 	});
 }
@@ -33192,6 +33582,7 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 				artifactId
 			});
 		} : void 0,
+		validateProjectDeployManifest: platformConfig.validateProjectDeployManifest,
 		afterPromoteProjectDeploy: platformConfig.afterPromoteProjectDeploy,
 		afterProjectDeployHealthFailure: platformConfig.projectGit ? async ({ projectId, artifactId }) => {
 			await cleanupManagedGitAfterHealthFailure({
@@ -33278,9 +33669,11 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 		draftCommandRunner: platformConfig.draftCommandRunner,
 		draftNotifier: platformConfig.draftNotifier,
 		agentWorkspaceFiles: platformConfig.agentWorkspaceFiles,
+		settleBrowserUsage: platformConfig.settleBrowserUsage,
 		snapshotAgentEnvImage: platformConfig.snapshotAgentEnvImage,
 		orgRateLimit: platformConfig.orgRateLimit,
-		platformAgent: platformConfig.platformAgent
+		platformAgent: platformConfig.platformAgent,
+		brain: platformConfig.brain
 	});
 	await hooks.afterCreateApp?.(app, auth);
 	const port = resolvePlatformListenPort();
@@ -33294,4 +33687,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-BBW9vi1A.mjs.map
+//# sourceMappingURL=start-CcTA67Ri.mjs.map