@keystrokehq/platform 0.1.159 → 0.1.161

package/dist/{start-CcTA67Ri.mjs → start-CihXthAQ.mjs}

@@ -10,7 +10,7 @@ import "node:fs/promises";
 import { acquireProjectDatabasePool, buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, collectChildRunCancelTargets, deleteCredentialInstanceById, ensureOAuthCredentialInstance, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, getWorkspaceTriggerById, listActiveAgents, listActiveOrgGatewayBindingsByPlatform, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listAttachmentsByTriggerIds, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listReplayEvents, listWorkspaceTriggerRunRows, listWorkspaceTriggers, releaseProjectDatabasePool, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowBySlug, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesByAppSlug, selectCredentialInstancesForScope, selectProjectResourceCounts, selectTriggerById, selectWorkflowCanvasAnnotations, selectWorkflowLastRunAtByIds, selectWorkflowOverview, selectWorkflowRunById, selectWorkflowRunForWorkflow, selectWorkflowRunInputValues, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, setWorkflowCanvasAnnotationsGenerating, setWorkflowOverviewGenerating, softDeleteGatewayAttachmentByChannel, storedTriggerSourceFromRow, touchResourceActivity, triggerTimezoneFromConfig, updateTriggerOverview, updateWorkflowCanvasAnnotations, updateWorkflowOverview, updateWorkflowRunInputValues, upsertCredentialInstance } from "@keystrokehq/database";
 import { ZodError, z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectArtifactSourceManifestConflictError, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, buildDefaultOrgProjectName, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, countActiveMembersForOrganization, countActiveProjectsForOrganization, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthAppBySlug, deleteOAuthConnectionById, deleteOrgApp, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureOAuthApp, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, getDecryptedOAuthAppBySlug, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOAuthAppsBySlugPrefix, listOAuthConnectionsByAppId, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listPublishedFormsForOrganization, listTemplates, listUsageEventsForRuns, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, releaseProjectDeployLease, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, resolvePlatformDatabaseUrl, revokeOrgPlatformApiKey, rotatePublishedFormToken, runWithOrganizationScope, saveOAuthConnection, seedOfficialTemplates, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectEnabledPublishedFormByToken, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthAppById, selectOAuthAppBySlug, selectOAuthConnectionById, selectOAuthConnectionsByIds, selectOrgAppBySlug, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectRepositoryByProjectId, selectProjectsByOrganizationId, selectPublishedFormForWorkflow, selectTemplateBySlug, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, summarizeUsageForRuns, transitionProjectArtifactProtocolState, unpublishFormForWorkflow, updateOAuthAppMetadataBySlug, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectArtifactSourceManifest, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, upsertPublishedForm } from "@keystrokehq/platform-database";
+import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectArtifactSourceManifestConflictError, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, buildDefaultOrgProjectName, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, countActiveMembersForOrganization, countActiveProjectsForOrganization, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthAppBySlug, deleteOAuthConnectionById, deleteOrgApp, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureOAuthApp, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, getDecryptedOAuthAppBySlug, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOAuthAppsBySlugPrefix, listOAuthConnectionsByAppId, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listPublishedFormsForOrganization, listTemplates, listUsageEventsForRuns, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, releaseProjectDeployLease, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, resolveTenantDatabaseUrl, revokeOrgPlatformApiKey, rotatePublishedFormToken, runWithOrganizationScope, saveOAuthConnection, seedOfficialTemplates, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectEnabledPublishedFormByToken, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthAppById, selectOAuthAppBySlug, selectOAuthConnectionById, selectOAuthConnectionsByIds, selectOrgAppBySlug, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectRepositoryByProjectId, selectProjectsByOrganizationId, selectPublishedFormForWorkflow, selectTemplateBySlug, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, summarizeUsageForRuns, transitionProjectArtifactProtocolState, unpublishFormForWorkflow, updateOAuthAppMetadataBySlug, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectArtifactSourceManifest, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, upsertPublishedForm } from "@keystrokehq/platform-database";
 import "node:fs";
 import { basename, join, normalize, relative, resolve } from "node:path";
 import { tmpdir } from "node:os";
@@ -23042,43 +23042,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-C9Gg1ddP.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-BIf5gGqG.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-Be0zQ_f7.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-BCa3xdGo.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-C-3d7ESt.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-CbT5drYF.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-C7wx5Bh1.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-B4yoSfyf.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-DmH4dWRH.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-ByfuXSM5.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-BwFiTQrE.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-er5mDQNz.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-BZAfMfUV.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-Bj7WFM6h.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-tfAQp0jc.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-DXZ5uhPU.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-BTlZYjo7.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-CApc3__T.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-C-CLQ7lX.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-6aEnLCVv.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -23094,15 +23094,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-k5cPr22G.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-B9Z94tO0.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-BVZcigNs.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-CGTrChvy.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-MLxD0uQg.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-e-FH0don.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -23110,95 +23110,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-DFtFYp5a.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-BqL8psbZ.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-DFtFYp5a.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-BqL8psbZ.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-DFtFYp5a.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-BqL8psbZ.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-BwEG_0TC.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-BgDq4EZN.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-CFGJGHQV.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-Bxfoq5j1.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-Dra48sTI.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-CrFmXh4m.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-CZYNhteL.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-C2CPKhrN.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-CydFkKuG.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-BJ0q1GBE.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-Db6pJcoM.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-CTDyKCXg.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-Cw-TysL1.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-L8NhQ2gn.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-D-vuFBZl.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-BcXSvF8B.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-CfJSN2db.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-BeLru9sJ.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-DIJO-xRn.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-Bi70fnk2.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-CfkXHOno.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-22yFZZl3.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-qi8k7FKX.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-CWlnzaF_.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-BwDcAbR9.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-BkY8XxP3.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-CnvXaCG2.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-3oZn4IX3.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-f9M_vuc-.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-8CCLntdL.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-DY5piVHO.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-DHkWJL_X.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-fcXxJihT.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-DlfoteTS.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-kqbTOzyl.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-DXk8fFNF.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-B0nvnaNC.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-9xs9xnct.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-BZu5Y0_b.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-DZMrmoU4.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23210,19 +23210,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-DJcVQv94.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-MoOBI4cl.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-CkQXWW4r.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-C-Bmly3g.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-CVIdMQNt.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-2_OrDEhW.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-CVIdMQNt.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-2_OrDEhW.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23238,7 +23238,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-CC9iSUtu.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-CLY0-MJW.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23254,23 +23254,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-V0ICWlBe.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-BR0JWm0f.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-V0ICWlBe.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-BR0JWm0f.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-DNzAYX6m.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-CHQktHZQ.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-C1BGrnWw.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-CkCNbfyK.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-CnfTAbzI.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-CUrVbKU3.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23278,15 +23278,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-B1Ps6tSN.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-fOLMDPQt.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-CAJx_7wb.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-DTdRS8Js.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-Br4CX4D7.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-BOu85Rbh.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23294,19 +23294,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-LJ-ZA12Q.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-DGMy7UqY.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-D5O7yMdH.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-3FJx9OHR.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-fLUtqiC5.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-B33n95tj.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-B7l_Yxt6.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-C__3OEUI.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23314,11 +23314,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-C-bnMPIj.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-Dir1T2pe.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-6GoSNLwr.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-B6qpOnEx.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23326,7 +23326,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-B8hzbOXn.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-wCJ3VeLQ.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23338,49 +23338,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-CzrLicva.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-CM9LfL2_.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-DhZ6O7s7.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-OTPZoVIc.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-DhZ6O7s7.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-OTPZoVIc.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-DhZ6O7s7.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-OTPZoVIc.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-BpR3IuQT.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-BlMtw3zE.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-ChhbgU5K.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-Tc8p6XHA.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-DeancsK_.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-C015jSF9.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-D1sTQfnU.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-CCtnjSuS.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-TfCXA31l.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-ZVVhtqX_.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-TfCXA31l.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-ZVVhtqX_.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-DZkjdqDZ.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-C3OjJAZi.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-DZkjdqDZ.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-C3OjJAZi.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -32927,6 +32927,16 @@ var DbProxyRejectedError = class extends Error {
 };
 /** Reject multi-statement SQL and explicit transaction/session control. */
 const FORBIDDEN_SQL = /\b(BEGIN|COMMIT|ROLLBACK|START\s+TRANSACTION|SET\s+ROLE|SET\s+SESSION|RESET\s+ROLE|SET\s+LOCAL\s+ROLE|SET\s+CONFIG|SELECT\s+SET_CONFIG)\b/i;
+function stripLeadingSqlComments(sql) {
+	return sql.replace(/^(?:\s|--[^\r\n]*(?:\r?\n|$)|\/\*[\s\S]*?\*\/)+/, "");
+}
+function statementKind(sql) {
+	return stripLeadingSqlComments(sql).match(/^[a-z]+/i)?.[0]?.toLowerCase() ?? "other";
+}
+function queryFingerprint(sql) {
+	const normalized = stripLeadingSqlComments(sql).trim().replace(/'(?:''|[^'])*'/g, "?").replace(/\$\$[\s\S]*?\$\$/g, "?").replace(/\$[A-Za-z_][A-Za-z0-9_]*\$[\s\S]*?\$[A-Za-z_][A-Za-z0-9_]*\$/g, "?").replace(/\b\d+(?:\.\d+)?\b/g, "?").replace(/\s+/g, " ");
+	return createHash("sha256").update(normalized).digest("hex");
+}
 function assertSingleSafeStatement(sql) {
 	const trimmed = sql.trim();
 	if (!trimmed) throw new DbProxyRejectedError("Empty SQL is not allowed");
@@ -32936,10 +32946,10 @@ function assertSingleSafeStatement(sql) {
 		if (withoutLiterals.split(";").map((part) => part.trim()).filter(Boolean).length > 1) throw new DbProxyRejectedError("Only one SQL statement is allowed per proxy request");
 	}
 }
-/** Shared platform pool + signed organization claim (RLS). */
+/** Least-privilege tenant pool + signed organization claim (RLS). */
 function resolveTenantProxyOptions(organization) {
 	return {
-		url: resolvePlatformDatabaseUrl(),
+		url: resolveTenantDatabaseUrl(),
 		organizationId: organization.id
 	};
 }
@@ -32978,19 +32988,42 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp, brain) {
 			error: "Invalid request body",
 			details: parsed.error.flatten()
 		}, 400);
-		const options = resolveTenantProxyOptions(organization);
+		const started = Date.now();
+		const audit = {
+			organization_id: organizationId,
+			query_fingerprint: queryFingerprint(parsed.data.sql),
+			statement_kind: statementKind(parsed.data.sql),
+			method: parsed.data.method ?? "execute"
+		};
 		try {
-			return c.json(await runOrgDatabaseQuery(options, parsed.data));
+			const result = await runOrgDatabaseQuery(resolveTenantProxyOptions(organization), parsed.data);
+			log.info("security.db_proxy_query", {
+				...audit,
+				verdict: "allowed",
+				row_count: result.rows.length,
+				duration_ms: Date.now() - started
+			});
+			return c.json(result);
 		} catch (error) {
 			console.error("Database proxy query failed", {
 				organizationId,
 				error
 			});
 			const message = error instanceof Error ? error.message : "Database proxy query failed.";
+			const reason = error instanceof DbProxyRejectedError ? "policy_rejected" : /permission denied/i.test(message) ? "permission_denied" : message.includes("TENANT_DATABASE_URL") ? "unavailable" : "failed";
+			log.warn("security.db_proxy_query", {
+				...audit,
+				verdict: reason,
+				duration_ms: Date.now() - started
+			});
 			if (error instanceof DbProxyRejectedError) return c.json({
 				error: "db_proxy_query_rejected",
 				message
 			}, 400);
+			if (message.includes("TENANT_DATABASE_URL")) return c.json({
+				error: "db_proxy_unavailable",
+				message
+			}, 503);
 			return c.json({
 				error: "db_proxy_query_failed",
 				message
@@ -33687,4 +33720,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-CcTA67Ri.mjs.map
+//# sourceMappingURL=start-CihXthAQ.mjs.map