@keystrokehq/platform 0.1.2 → 0.1.3

package/dist/dist-DvjFaP47.cjs

@@ -1,3799 +0,0 @@
-//#region \0rolldown/runtime.js
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-//#endregion
-let dockerode = require("dockerode");
-dockerode = __toESM(dockerode, 1);
-let node_fs = require("node:fs");
-let node_path = require("node:path");
-let node_child_process = require("node:child_process");
-let node_os = require("node:os");
-let zod = require("zod");
-let _aws_sdk_client_s3 = require("@aws-sdk/client-s3");
-let _aws_sdk_s3_request_presigner = require("@aws-sdk/s3-request-presigner");
-//#region ../../packages/hosting/dist/index.mjs
-const PROJECT_SERVER_PORT = 3e3;
-const PROJECT_SERVER_ROOT = "/app";
-const PROJECT_SERVER_FRAMEWORK_NODE_MODULES = `/opt/keystroke/node_modules`;
-const PROJECT_SERVER_HEALTH = {
-	path: "/health",
-	port: PROJECT_SERVER_PORT
-};
-const RUNTIME_ENV_KEYS = [
-	"BETTER_AUTH_SECRET",
-	"PUBLIC_SERVER_URL",
-	"PUBLIC_WEB_URL",
-	"POSTGRES_SSL",
-	"KEYSTROKE_SCHEDULER_MODULE",
-	"UPSTASH_REDIS_URL",
-	"REDIS_URL",
-	"KEYSTROKE_QUEUE_PREFIX"
-];
-/** Provider and gateway env forwarded from the platform into project servers. */
-const PROVIDER_ENV_KEYS = [
-	"ANTHROPIC_API_KEY",
-	"OPENAI_API_KEY",
-	"AI_GATEWAY_API_KEY",
-	"AI_GATEWAY_BASE_URL"
-];
-/** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */
-const DEV_PLATFORM_WORKER_TOKEN = "dev-platform-worker-token";
-/** Per-project postgres env injected into every project server container/machine. */
-function projectDatabaseRuntimeEnv(database) {
-	return {
-		POSTGRES_HOST: rewriteLoopbackHost(database.host),
-		POSTGRES_PORT: String(database.port),
-		POSTGRES_DB: database.database,
-		POSTGRES_USER: database.user,
-		POSTGRES_PASSWORD: database.password,
-		DATABASE_SEARCH_PATH: database.searchPath
-	};
-}
-/**
-* Builds the launch spec for a single project server. `artifactStorageKey` is the
-* object key for that deploy's built `dist` tarball in the org bucket — there is
-* no base image, so it is required.
-*/
-function resolveRuntimeLaunch(options, artifactStorageKey, database, extraEnv) {
-	if (!artifactStorageKey) throw new Error("Cannot start a project server without an artifact storage key");
-	const env = options.env ?? process.env;
-	return {
-		image: resolveProjectServerImage(env, options.image),
-		env: buildRuntimeEnv(env, artifactStorageKey, database, extraEnv),
-		port: PROJECT_SERVER_PORT,
-		health: PROJECT_SERVER_HEALTH
-	};
-}
-/** Env vars passed into the project server container/machine. */
-function buildRuntimeEnv(source, artifactStorageKey, database, extraEnv) {
-	const entries = new Map([
-		["PORT", String(PROJECT_SERVER_PORT)],
-		["KEYSTROKE_ROOT", PROJECT_SERVER_ROOT],
-		["KEYSTROKE_RUNTIME_NODE_MODULES", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],
-		["ARTIFACT_STORAGE_KEY", artifactStorageKey],
-		["PROJECT_ID", database.projectId],
-		["ORGANIZATION_ID", database.organizationId],
-		["TENANT_ID", database.organizationId]
-	]);
-	for (const key of RUNTIME_ENV_KEYS) {
-		const value = source[key]?.trim();
-		if (!value) {
-			if (key === "POSTGRES_SSL") throw new Error("POSTGRES_SSL is required");
-			continue;
-		}
-		entries.set(key, value);
-	}
-	if (!extraEnv) for (const key of PROVIDER_ENV_KEYS) {
-		const value = source[key]?.trim();
-		if (value) entries.set(key, value);
-	}
-	const worker = resolveWorkerRuntimeConfig(source);
-	entries.set("PLATFORM_URL", worker.platformUrl);
-	entries.set("WORKER_INTERNAL_TOKEN", worker.workerToken);
-	for (const [key, value] of Object.entries(projectDatabaseRuntimeEnv(database))) entries.set(key, value);
-	if (extraEnv) for (const [key, value] of Object.entries(extraEnv)) entries.set(key, value);
-	return Object.fromEntries(entries);
-}
-function resolvePlatformWorkerToken(source = process.env) {
-	const explicit = source.PLATFORM_WORKER_TOKEN?.trim() ?? source.WORKER_INTERNAL_TOKEN?.trim();
-	if (explicit) return explicit;
-	if (source.NODE_ENV === "production") return;
-	return DEV_PLATFORM_WORKER_TOKEN;
-}
-/** Platform API URL reachable from a project-server container. */
-const DEV_PLATFORM_URL = "http://localhost:3002";
-function resolveWorkerPlatformUrl(source = process.env) {
-	const raw = source.PLATFORM_URL?.trim() ?? source.PUBLIC_PLATFORM_URL?.trim() ?? (source.NODE_ENV === "production" ? void 0 : DEV_PLATFORM_URL);
-	if (!raw) return;
-	return rewriteLoopbackUrl(raw);
-}
-/** Rewrite loopback hosts so containers can reach Postgres and other host services. */
-function rewriteLoopbackHost(host) {
-	if (host === "localhost" || host === "127.0.0.1") return "host.docker.internal";
-	return host;
-}
-function rewriteLoopbackUrl(url) {
-	try {
-		const parsed = new URL(url);
-		parsed.hostname = rewriteLoopbackHost(parsed.hostname);
-		return parsed.toString().replace(/\/$/, "");
-	} catch {
-		return url;
-	}
-}
-/** dockerode expects `KEY=value` strings. */
-function formatDockerEnv(env) {
-	return Object.entries(env).map(([key, value]) => `${key}=${value}`);
-}
-function resolveProjectServerImage(env = process.env, override) {
-	return override ?? env.PROJECT_DOCKER_IMAGE ?? env.TENANT_DOCKER_IMAGE ?? "keystroke/project-server:local";
-}
-var WorkerRuntimeConfigError = class extends Error {
-	missing;
-	constructor(missing) {
-		super(`Worker runtime config incomplete (missing: ${missing.join(", ")}). In production set PLATFORM_WORKER_TOKEN and PUBLIC_PLATFORM_URL (or PLATFORM_URL).`);
-		this.name = "WorkerRuntimeConfigError";
-		this.missing = missing;
-	}
-};
-/** Fail fast when the platform cannot start worker-mode project servers. */
-function resolveWorkerRuntimeConfig(source = process.env) {
-	const platformUrl = resolveWorkerPlatformUrl(source);
-	const workerToken = resolvePlatformWorkerToken(source);
-	const missing = [];
-	if (!platformUrl) missing.push("PUBLIC_PLATFORM_URL or PLATFORM_URL");
-	if (!workerToken) missing.push("PLATFORM_WORKER_TOKEN");
-	if (missing.length > 0) throw new WorkerRuntimeConfigError(missing);
-	return {
-		platformUrl,
-		workerToken
-	};
-}
-const DEFAULT_TIMEOUT_MS = 12e4;
-const DEFAULT_INTERVAL_MS = 500;
-async function waitForHealth(baseUrl, options = {}) {
-	const fetchImpl = options.fetchImpl ?? fetch;
-	const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-	const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
-	const deadline = Date.now() + timeoutMs;
-	const url = new URL(PROJECT_SERVER_HEALTH.path, baseUrl);
-	while (Date.now() < deadline) {
-		try {
-			if ((await fetchImpl(url, { signal: AbortSignal.timeout(2e3) })).ok) return;
-		} catch {}
-		await sleep(intervalMs);
-	}
-	throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);
-}
-function sleep(ms) {
-	return new Promise((resolve) => {
-		setTimeout(resolve, ms);
-	});
-}
-const MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? "keystroke";
-function createDockerRuntime(options = {}) {
-	const docker = options.docker ?? new dockerode.default();
-	return { async start(input) {
-		const launch = resolveRuntimeLaunch(options, input.artifactStorageKey, input.database, input.env);
-		await ensureImage(docker, launch.image);
-		await removeExistingContainer(docker, input.projectId);
-		const container = await docker.createContainer({
-			Image: launch.image,
-			name: containerName(input.projectId),
-			Labels: {
-				"keystroke.project.id": input.projectId,
-				"keystroke.project.name": input.name
-			},
-			ExposedPorts: { [`${launch.port}/tcp`]: {} },
-			HostConfig: {
-				ExtraHosts: ["host.docker.internal:host-gateway"],
-				PortBindings: { [`${launch.port}/tcp`]: [{ HostPort: "0" }] }
-			},
-			NetworkingConfig: { EndpointsConfig: { [MINIO_DOCKER_NETWORK]: {} } },
-			Env: formatDockerEnv(launch.env)
-		});
-		await container.start();
-		const inspect = await container.inspect();
-		const binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];
-		if (!binding?.HostPort) throw new Error("Failed to resolve project container host port");
-		const baseUrl = `http://127.0.0.1:${binding.HostPort}`;
-		await waitForHealth(baseUrl, {
-			fetchImpl: options.fetchImpl,
-			timeoutMs: options.healthTimeoutMs
-		});
-		return {
-			runtimeId: inspect.Id,
-			baseUrl
-		};
-	} };
-}
-function containerName(projectId) {
-	return `keystroke-project-${projectId}`;
-}
-async function removeExistingContainer(docker, projectId) {
-	try {
-		const existing = docker.getContainer(containerName(projectId));
-		await existing.stop({ t: 5 }).catch(() => void 0);
-		await existing.remove({ force: true });
-	} catch {}
-}
-async function ensureImage(docker, image) {
-	try {
-		await docker.getImage(image).inspect();
-		return;
-	} catch {}
-	await new Promise((resolvePromise, reject) => {
-		docker.pull(image, (error, stream) => {
-			if (error) {
-				reject(error);
-				return;
-			}
-			if (!stream) {
-				reject(/* @__PURE__ */ new Error(`Failed to pull image ${image}`));
-				return;
-			}
-			docker.modem.followProgress(stream, (progressError) => {
-				if (progressError) {
-					reject(progressError);
-					return;
-				}
-				resolvePromise();
-			});
-		});
-	});
-}
-function dockerPlugin(options = {}) {
-	const env = options.env ?? process.env;
-	return {
-		name: "docker",
-		workerRuntime: resolveWorkerRuntimeConfig(env),
-		createRuntime: () => createDockerRuntime({
-			...options,
-			env
-		})
-	};
-}
-/** Local Docker hosting — default for platform and dev. */
-function defaultHostingPlugin(options = {}) {
-	return dockerPlugin(options);
-}
-async function pingProject(baseUrl, options = {}) {
-	const timeoutMs = options.timeoutMs ?? 15e3;
-	const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};
-	try {
-		return (await (options.fetchImpl ?? fetch)(new URL(PROJECT_SERVER_HEALTH.path, baseUrl), {
-			signal: AbortSignal.timeout(timeoutMs),
-			headers
-		})).ok;
-	} catch {
-		return false;
-	}
-}
-function canPingProjectTarget(target, plugin) {
-	if (plugin?.canPingTarget) return plugin.canPingTarget(target);
-	return !!target.baseUrl;
-}
-async function pingProjectTarget(target, options = {}) {
-	if (!canPingProjectTarget(target, options.plugin)) return false;
-	return pingProject(target.baseUrl, {
-		...options,
-		runtimeId: target.runtimeId
-	});
-}
-//#endregion
-//#region ../../packages/shared/dist/index.mjs
-const ACTIVE_ORG_HEADER = "x-keystroke-org-id";
-/** Auth, session, and account-entry URL segments. */
-const AUTH_ACCOUNT_SLUGS = [
-	"2fa",
-	"accept-invite",
-	"auth",
-	"authorize",
-	"callback",
-	"callbacks",
-	"confirm-email",
-	"confirmation",
-	"connect",
-	"device",
-	"email-verification",
-	"forgot-password",
-	"invite",
-	"invites",
-	"login",
-	"logout",
-	"magic-link",
-	"mfa",
-	"oauth",
-	"onboarding",
-	"password",
-	"recovery",
-	"register",
-	"reset-password",
-	"saml",
-	"session",
-	"sessions",
-	"sign-in",
-	"sign-up",
-	"signin",
-	"signout",
-	"signup",
-	"sso",
-	"token",
-	"tokens",
-	"unlink",
-	"verify",
-	"verify-email"
-];
-/** Org, workspace, billing, and account-management URL segments. */
-const ORG_ACCOUNT_SLUGS = [
-	"account",
-	"accounts",
-	"billing",
-	"console",
-	"invoice",
-	"invoices",
-	"member",
-	"members",
-	"me",
-	"org",
-	"organization",
-	"organizations",
-	"orgs",
-	"payment",
-	"payments",
-	"plan",
-	"plans",
-	"portal",
-	"preferences",
-	"profile",
-	"settings",
-	"subscription",
-	"subscriptions",
-	"team",
-	"teams",
-	"upgrade",
-	"usage",
-	"user",
-	"users",
-	"workspace",
-	"workspaces"
-];
-/** Product surfaces, resource types, and in-app navigation segments. */
-const PRODUCT_SLUGS = [
-	"action",
-	"actions",
-	"activity",
-	"agent",
-	"agents",
-	"analytics",
-	"app",
-	"apps",
-	"artifact",
-	"artifacts",
-	"assistant",
-	"assistants",
-	"audit",
-	"audit-log",
-	"automation",
-	"automations",
-	"branch",
-	"branches",
-	"canvas",
-	"chat",
-	"chats",
-	"connection",
-	"connections",
-	"create",
-	"credential",
-	"credentials",
-	"dashboard",
-	"deployment",
-	"deployments",
-	"examples",
-	"execute",
-	"execution",
-	"executions",
-	"explore",
-	"get-started",
-	"history",
-	"inbox",
-	"inspector",
-	"integration",
-	"integrations",
-	"library",
-	"logs",
-	"marketplace",
-	"mcp",
-	"mcps",
-	"new",
-	"notifications",
-	"observe",
-	"plugin",
-	"plugins",
-	"primitive",
-	"primitives",
-	"project",
-	"projects",
-	"recents",
-	"registry",
-	"reports",
-	"run",
-	"runs",
-	"runtime",
-	"runtimes",
-	"sandbox",
-	"sandboxes",
-	"search",
-	"skill",
-	"skills",
-	"templates",
-	"thread",
-	"threads",
-	"trigger",
-	"triggers",
-	"version",
-	"versions",
-	"workflow",
-	"workflows"
-];
-/** Marketing, docs, company, and go-to-market URL segments. */
-const MARKETING_SITE_SLUGS = [
-	"about",
-	"affiliates",
-	"ai",
-	"announcements",
-	"anthropic",
-	"blog",
-	"book-demo",
-	"brand",
-	"campaigns",
-	"career",
-	"careers",
-	"case-studies",
-	"casestudies",
-	"changelog",
-	"chatgpt",
-	"chrome-extension",
-	"claude",
-	"codex",
-	"community",
-	"company",
-	"compare",
-	"contact",
-	"contribute",
-	"creators",
-	"customers",
-	"demo",
-	"demos",
-	"discord",
-	"docs",
-	"documentation",
-	"download",
-	"downloads",
-	"dust",
-	"emerging-talent",
-	"engineering-blog",
-	"enterprise",
-	"events",
-	"experts",
-	"extension",
-	"faq",
-	"faqs",
-	"features",
-	"forum",
-	"glean",
-	"grok",
-	"guide",
-	"guides",
-	"gumloop",
-	"handbook",
-	"help",
-	"help-center",
-	"home",
-	"how-it-works",
-	"howitworks",
-	"inspo",
-	"intern",
-	"investors",
-	"jobs",
-	"legal",
-	"lindy",
-	"llm",
-	"llms",
-	"love",
-	"make",
-	"manifesto",
-	"media",
-	"merch",
-	"mission",
-	"mobile",
-	"models",
-	"n8n",
-	"news",
-	"newsroom",
-	"open",
-	"open-claw",
-	"open-source",
-	"openai",
-	"our-story",
-	"overview",
-	"partners",
-	"pi",
-	"pipedream",
-	"platform",
-	"press",
-	"press-kit",
-	"pricing",
-	"privacy",
-	"product",
-	"products",
-	"provider",
-	"providers",
-	"quick-start",
-	"quickstart",
-	"refer",
-	"relay",
-	"relay-app",
-	"reporting",
-	"request-demo",
-	"resources",
-	"roadmap",
-	"schedule-demo",
-	"security",
-	"solutions",
-	"stack-ai",
-	"stackai",
-	"startup",
-	"startups",
-	"status",
-	"stories",
-	"story",
-	"students",
-	"support",
-	"swag",
-	"switch",
-	"talent",
-	"terms",
-	"testimonials",
-	"thesis",
-	"tines",
-	"trust",
-	"tutorials",
-	"university",
-	"use-case",
-	"use-cases",
-	"usecases",
-	"versus",
-	"vellum",
-	"vs",
-	"webinars",
-	"workato",
-	"xai",
-	"yc",
-	"zapier"
-];
-/** Integrations, competitors, and partner brand slugs (marketing / integration pages). */
-const INTEGRATION_BRAND_SLUGS = [
-	"airtable",
-	"asana",
-	"aws",
-	"azure",
-	"bun",
-	"confluence",
-	"copilot",
-	"cursor",
-	"databricks",
-	"figma",
-	"firebase",
-	"fly",
-	"gcp",
-	"gemini",
-	"github",
-	"gitlab",
-	"gmail",
-	"heroku",
-	"hubspot",
-	"huggingface",
-	"jira",
-	"linear",
-	"mailchimp",
-	"meta",
-	"mistral",
-	"mixmax",
-	"monday",
-	"netlify",
-	"neon",
-	"notion",
-	"npm",
-	"outlook",
-	"outreach",
-	"perplexity",
-	"planetscale",
-	"pnpm",
-	"postmark",
-	"ramp",
-	"railway",
-	"render",
-	"resend",
-	"salesforce",
-	"segment",
-	"sendgrid",
-	"shopify",
-	"slack",
-	"snowflake",
-	"stripe",
-	"supabase",
-	"terraform",
-	"trello",
-	"turso",
-	"twilio",
-	"typeform",
-	"vercel",
-	"vscode",
-	"windsurf",
-	"yarn"
-];
-/** Company, team, and department landing-page segments. */
-const COMPANY_TEAM_SLUGS = [
-	"engineers",
-	"engineering",
-	"executives",
-	"hc",
-	"intern",
-	"it",
-	"leadership",
-	"marketing",
-	"ops",
-	"revops",
-	"sales",
-	"services",
-	"tech"
-];
-/** Legal, trust, compliance, and policy URL segments. */
-const LEGAL_TRUST_SLUGS = [
-	"accessibility",
-	"agreement",
-	"a11y",
-	"bug-bounty",
-	"compliance",
-	"cookie-policy",
-	"cookies",
-	"disclose",
-	"dpa",
-	"eula",
-	"gdpr",
-	"hipaa",
-	"iso",
-	"msa",
-	"pci",
-	"responsible-disclosure",
-	"sla",
-	"soc2",
-	"tos",
-	"trust-center",
-	"trustcenter",
-	"vulnerability"
-];
-/** Developer, API, CLI, and technical URL segments. */
-const DEVELOPER_TECH_SLUGS = [
-	"api",
-	"api-docs",
-	"cli",
-	"code",
-	"config",
-	"developer",
-	"developer-tools",
-	"developers",
-	"dev-tools",
-	"devtools",
-	"dev",
-	"dev-states",
-	"graphql",
-	"graphql-playground",
-	"mcp-server",
-	"mcp-servers",
-	"openapi",
-	"sdk",
-	"swagger"
-];
-/** Infra, ops, static assets, and system URL segments. */
-const INFRA_SYSTEM_SLUGS = [
-	"acme-challenge",
-	"admin",
-	"apple-app-site-association",
-	"assets",
-	"batch",
-	"cache",
-	"cdn",
-	"cron",
-	"debug",
-	"error",
-	"errors",
-	"favicon",
-	"feed",
-	"files",
-	"health",
-	"healthcheck",
-	"healthz",
-	"hooks",
-	"internal",
-	"item",
-	"manifest",
-	"metrics",
-	"null",
-	"ping",
-	"prod",
-	"public",
-	"redirect",
-	"robots",
-	"rpc",
-	"rss",
-	"sharer",
-	"sitemap",
-	"staging",
-	"static",
-	"storage",
-	"test",
-	"undefined",
-	"universal",
-	"webhooks",
-	"well-known",
-	"www"
-];
-/** Reserved slugs that are valid org names in theory but blocked for routing safety. */
-const ROUTING_SAFETY_SLUGS = [
-	"alpha",
-	"anonymous",
-	"archive",
-	"archived",
-	"beta",
-	"clone",
-	"copy",
-	"default",
-	"deleted",
-	"demo-org",
-	"draft",
-	"drafts",
-	"duplicate",
-	"early-access",
-	"embed",
-	"embedded",
-	"export",
-	"fork",
-	"free",
-	"guest",
-	"import",
-	"index",
-	"list",
-	"manage",
-	"moderator",
-	"newsletter",
-	"owner",
-	"preview",
-	"previews",
-	"private",
-	"pro",
-	"public-api",
-	"publish",
-	"published",
-	"queue",
-	"remove",
-	"root",
-	"sample",
-	"samples",
-	"selection",
-	"share",
-	"shared",
-	"sponsor",
-	"sponsors",
-	"sponsorship",
-	"subscribe",
-	"super",
-	"superuser",
-	"system",
-	"sys",
-	"test-org",
-	"trash",
-	"unpublish",
-	"unsubscribe",
-	"upload",
-	"uploads",
-	"waitlist",
-	"widget",
-	"widgets",
-	"worker",
-	"workers"
-];
-/**
-* URL segments reserved for global (non-org) routes — cannot be used as an org slug.
-* Prefer adding new entries to the category arrays above; the Set is the enforcement surface.
-*/
-const RESERVED_ORGANIZATION_SLUGS = new Set([
-	...AUTH_ACCOUNT_SLUGS,
-	...ORG_ACCOUNT_SLUGS,
-	...PRODUCT_SLUGS,
-	...MARKETING_SITE_SLUGS,
-	...INTEGRATION_BRAND_SLUGS,
-	...COMPANY_TEAM_SLUGS,
-	...LEGAL_TRUST_SLUGS,
-	...DEVELOPER_TECH_SLUGS,
-	...INFRA_SYSTEM_SLUGS,
-	...ROUTING_SAFETY_SLUGS
-]);
-/**
-* Base slug format: lowercase, 2-64 chars, alphanumeric + dashes.
-*
-* IMPORTANT: this is the schema for *reading* slugs (persisted rows, API
-* responses). It intentionally does NOT enforce the reserved-name list — an org
-* created before a name became reserved must still parse on read. Use
-* `ClaimableOrganizationSlugSchema` to validate slugs a user is trying to claim.
-*/
-const OrganizationSlugSchema = zod.z.string().trim().toLowerCase().min(2, "Slug must be at least 2 characters").max(64, "Slug must be at most 64 characters").regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "Use lowercase letters, numbers, and dashes only");
-/**
-* Slug validation for *claiming* a slug (organization create/rename). Adds the
-* reserved-name check on top of the base format. Never use this to parse
-* existing org data, or pre-existing orgs whose slug later became reserved would
-* fail to load.
-*/
-const ClaimableOrganizationSlugSchema = OrganizationSlugSchema.refine((slug) => !RESERVED_ORGANIZATION_SLUGS.has(slug), "This slug is reserved");
-/** Same format as organization slugs — org-scoped, no global reserved list. */
-const ProjectSlugSchema = OrganizationSlugSchema;
-/** TCP port to bind for a local server, derived from a public URL. */
-function listenPortFromUrl(url, fallback) {
-	const parsed = new URL(url);
-	if (parsed.port) {
-		const port = Number(parsed.port);
-		if (Number.isFinite(port) && port > 0) return port;
-	}
-	if (parsed.protocol === "https:") return 443;
-	if (parsed.protocol === "http:") return 80;
-	return fallback;
-}
-/** Shorthand: listen port from `PUBLIC_*_URL` or fallback. */
-function listenPortFromPublicUrl(value, fallback) {
-	const trimmed = value?.trim();
-	if (!trimmed) return fallback;
-	try {
-		return listenPortFromUrl(trimmed, fallback);
-	} catch {
-		return fallback;
-	}
-}
-/** On-disk path under the project root (packed in deploy artifacts when present). */
-const ROUTE_MANIFEST_REL_PATH = "dist/.keystroke/route-manifest.json";
-const StoredRouteManifestSkillSchema = zod.z.object({
-	slug: zod.z.string(),
-	name: zod.z.string().optional(),
-	description: zod.z.string().optional(),
-	moduleFile: zod.z.string()
-});
-const serializedRouteManifestEntrySchema = zod.z.discriminatedUnion("kind", [
-	zod.z.object({
-		kind: zod.z.literal("health"),
-		method: zod.z.literal("GET"),
-		path: zod.z.literal("/health")
-	}),
-	zod.z.object({
-		kind: zod.z.literal("agent"),
-		method: zod.z.literal("POST"),
-		path: zod.z.string(),
-		agentSlug: zod.z.string(),
-		moduleFile: zod.z.string(),
-		name: zod.z.string().optional(),
-		description: zod.z.string().optional(),
-		model: zod.z.string(),
-		systemPrompt: zod.z.string(),
-		toolCount: zod.z.number().int().nonnegative(),
-		credentialCount: zod.z.number().int().nonnegative(),
-		requestSchema: zod.z.record(zod.z.string(), zod.z.unknown()),
-		responseSchema: zod.z.record(zod.z.string(), zod.z.unknown())
-	}),
-	zod.z.object({
-		kind: zod.z.literal("agent-sessions-list"),
-		method: zod.z.literal("GET"),
-		path: zod.z.string(),
-		agentSlug: zod.z.string(),
-		moduleFile: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("agent-session-detail"),
-		method: zod.z.literal("GET"),
-		path: zod.z.string(),
-		agentSlug: zod.z.string(),
-		moduleFile: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("workflow"),
-		method: zod.z.literal("POST"),
-		path: zod.z.string(),
-		workflowSlug: zod.z.string(),
-		workflowName: zod.z.string().optional(),
-		description: zod.z.string().optional(),
-		subscribable: zod.z.boolean(),
-		moduleFile: zod.z.string(),
-		requestSchema: zod.z.record(zod.z.string(), zod.z.unknown()),
-		responseSchema: zod.z.record(zod.z.string(), zod.z.unknown())
-	}),
-	zod.z.object({
-		kind: zod.z.literal("workflow-runs-list"),
-		method: zod.z.literal("GET"),
-		path: zod.z.string(),
-		workflowSlug: zod.z.string(),
-		workflowName: zod.z.string().optional(),
-		moduleFile: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("workflow-run-detail"),
-		method: zod.z.literal("GET"),
-		path: zod.z.string(),
-		workflowSlug: zod.z.string(),
-		workflowName: zod.z.string().optional(),
-		moduleFile: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("trigger-webhook"),
-		method: zod.z.literal("POST"),
-		path: zod.z.string(),
-		attachmentIds: zod.z.array(zod.z.string()),
-		moduleFile: zod.z.string(),
-		requestSchema: zod.z.record(zod.z.string(), zod.z.unknown()),
-		attachmentSchemas: zod.z.record(zod.z.string(), zod.z.object({
-			requestSchema: zod.z.record(zod.z.string(), zod.z.unknown()),
-			filterSchema: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
-		})),
-		responseSchema: zod.z.record(zod.z.string(), zod.z.unknown())
-	}),
-	zod.z.object({
-		kind: zod.z.literal("trigger-poll"),
-		method: zod.z.literal("POST"),
-		path: zod.z.string(),
-		attachmentId: zod.z.string(),
-		moduleFile: zod.z.string(),
-		schedule: zod.z.string(),
-		responseSchema: zod.z.record(zod.z.string(), zod.z.unknown())
-	}),
-	zod.z.object({
-		kind: zod.z.literal("trigger-poll-group"),
-		method: zod.z.literal("POST"),
-		path: zod.z.string(),
-		pollId: zod.z.string(),
-		attachmentIds: zod.z.array(zod.z.string()),
-		moduleFile: zod.z.string(),
-		schedule: zod.z.string(),
-		responseSchema: zod.z.record(zod.z.string(), zod.z.unknown())
-	}),
-	zod.z.object({
-		kind: zod.z.literal("trigger-runs-list"),
-		method: zod.z.literal("GET"),
-		path: zod.z.string(),
-		attachmentId: zod.z.string(),
-		moduleFile: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("trigger-run-detail"),
-		method: zod.z.literal("GET"),
-		path: zod.z.string(),
-		attachmentId: zod.z.string(),
-		moduleFile: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("cron-schedule"),
-		attachmentId: zod.z.string(),
-		moduleFile: zod.z.string(),
-		schedule: zod.z.string()
-	}),
-	zod.z.object({
-		kind: zod.z.literal("plugin"),
-		method: zod.z.enum([
-			"GET",
-			"POST",
-			"PUT",
-			"PATCH",
-			"DELETE"
-		]),
-		path: zod.z.string(),
-		plugin: zod.z.string()
-	})
-]);
-const StoredRouteManifestSchema = zod.z.object({
-	version: zod.z.literal(1),
-	entries: zod.z.array(serializedRouteManifestEntrySchema),
-	skills: zod.z.array(StoredRouteManifestSkillSchema).default([]),
-	integrations: zod.z.array(zod.z.string()).optional()
-});
-function parseStoredRouteManifest(value) {
-	return StoredRouteManifestSchema.parse(value);
-}
-/** Messaging platforms that support agent gateway bindings. */
-const ChannelPlatformKeySchema = zod.z.enum(["slack"]);
-const ChannelReactionSupportSchema = zod.z.enum([
-	"full",
-	"read-only",
-	"none"
-]);
-const ChannelCardSupportSchema = zod.z.enum([
-	"full",
-	"partial",
-	"none"
-]);
-const ChannelStreamingSupportSchema = zod.z.enum([
-	"native",
-	"post-edit",
-	"buffered",
-	"drafts",
-	"none"
-]);
-const ChannelCapabilitiesSchema = zod.z.object({
-	mentions: zod.z.boolean(),
-	reactions: ChannelReactionSupportSchema,
-	cards: ChannelCardSupportSchema,
-	modals: zod.z.boolean(),
-	streaming: ChannelStreamingSupportSchema,
-	dms: zod.z.boolean()
-});
-const ChannelListenModeSchema = zod.z.enum([
-	"mention",
-	"all",
-	"dm"
-]);
-const ChannelBindingKindSchema = zod.z.enum([
-	"public",
-	"private",
-	"dm",
-	"group",
-	"space"
-]);
-const AppGatewaySchema = zod.z.object({
-	capabilities: ChannelCapabilitiesSchema,
-	supportedModes: zod.z.array(ChannelListenModeSchema).min(1),
-	resourceNoun: zod.z.object({
-		singular: zod.z.string().min(1),
-		plural: zod.z.string().min(1)
-	}),
-	supportsChannelDirectory: zod.z.boolean(),
-	webhookPathHint: zod.z.string().min(1),
-	docsUrl: zod.z.string().url().optional(),
-	tagline: zod.z.string().min(1).optional()
-});
-zod.z.object({
-	key: ChannelPlatformKeySchema,
-	name: zod.z.string().min(1),
-	appLogoId: zod.z.string().min(1),
-	fallbackDomain: zod.z.string().min(1),
-	description: zod.z.string().min(1),
-	tagline: zod.z.string().min(1),
-	authKind: zod.z.enum(["oauth", "api_key"]),
-	credentialFields: zod.z.array(zod.z.object({
-		key: zod.z.string().min(1),
-		label: zod.z.string().min(1),
-		placeholder: zod.z.string().optional(),
-		helpText: zod.z.string().optional(),
-		type: zod.z.enum([
-			"text",
-			"password",
-			"textarea"
-		]),
-		required: zod.z.boolean(),
-		prefix: zod.z.string().optional()
-	})),
-	capabilities: ChannelCapabilitiesSchema,
-	supportedModes: zod.z.array(ChannelListenModeSchema).min(1),
-	resourceNoun: zod.z.object({
-		singular: zod.z.string().min(1),
-		plural: zod.z.string().min(1)
-	}),
-	webhookPathHint: zod.z.string().min(1),
-	supportsChannelDirectory: zod.z.boolean(),
-	docsUrl: zod.z.string().url().optional()
-});
-const ChannelBindingSchema = zod.z.object({
-	id: zod.z.string().min(1),
-	channelId: zod.z.string().min(1),
-	channelName: zod.z.string().min(1),
-	channelKind: ChannelBindingKindSchema,
-	mode: ChannelListenModeSchema,
-	subscribeOnMention: zod.z.boolean(),
-	createdAt: zod.z.string(),
-	updatedAt: zod.z.string()
-});
-const ChannelConnectionSchema = zod.z.object({
-	id: zod.z.string().min(1),
-	platform: ChannelPlatformKeySchema,
-	agentId: zod.z.string().min(1),
-	accountLabel: zod.z.string().min(1),
-	accountId: zod.z.string().min(1),
-	connectedAt: zod.z.string(),
-	bindings: zod.z.array(ChannelBindingSchema)
-});
-const ChannelDirectoryEntrySchema = zod.z.object({
-	id: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	kind: ChannelBindingKindSchema,
-	memberCount: zod.z.number().int().nonnegative().optional(),
-	isArchived: zod.z.boolean().optional()
-});
-zod.z.object({ connections: zod.z.array(ChannelConnectionSchema) });
-zod.z.object({ channels: zod.z.array(ChannelDirectoryEntrySchema) });
-zod.z.object({ teamName: zod.z.string().min(1).optional() });
-/** OAuth workspace available for channel bindings (e.g. Slack team). */
-const ChannelAccountSchema = zod.z.object({
-	id: zod.z.string().min(1),
-	platform: ChannelPlatformKeySchema,
-	label: zod.z.string().min(1),
-	connectedAt: zod.z.string()
-});
-zod.z.object({ accounts: zod.z.array(ChannelAccountSchema) });
-const NewChannelBindingInputSchema = zod.z.object({
-	channelId: zod.z.string().min(1),
-	channelName: zod.z.string().min(1),
-	channelKind: ChannelBindingKindSchema.optional(),
-	mode: ChannelListenModeSchema.optional(),
-	subscribeOnMention: zod.z.boolean().optional()
-});
-zod.z.object({
-	platform: ChannelPlatformKeySchema,
-	accountId: zod.z.string().min(1),
-	binding: NewChannelBindingInputSchema
-});
-zod.z.object({ patch: zod.z.object({
-	mode: ChannelListenModeSchema.optional(),
-	subscribeOnMention: zod.z.boolean().optional()
-}) });
-/** A single OAuth scope an app can request, with human copy for connect UI. */
-const OAuthScopeOptionSchema = zod.z.object({
-	name: zod.z.string().min(1),
-	description: zod.z.string().min(1),
-	defaultSelected: zod.z.boolean().optional(),
-	required: zod.z.boolean().optional()
-});
-/** How an app authenticates when connecting credentials. */
-const AppAuthKindSchema = zod.z.enum([
-	"oauth",
-	"api_key",
-	"keystroke"
-]);
-/**
-* Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
-* Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
-*/
-const AppSourceSchema = zod.z.string().trim().min(1);
-zod.z.object({
-	slug: zod.z.string().trim().min(1),
-	name: zod.z.string().min(1),
-	description: zod.z.string().min(1),
-	category: zod.z.string().min(1),
-	logo: zod.z.string().url().optional(),
-	authKind: AppAuthKindSchema,
-	oauthScopes: zod.z.array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
-zod.z.object({
-	id: zod.z.string().min(1),
-	organizationId: zod.z.string().min(1).nullable(),
-	slug: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	description: zod.z.string().min(1),
-	category: zod.z.string().min(1),
-	logo: zod.z.string().url().nullable(),
-	authKind: AppAuthKindSchema,
-	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
-	source: AppSourceSchema,
-	createdAt: zod.z.string().min(1),
-	updatedAt: zod.z.string().min(1)
-});
-/**
-* A connectable integration shown in the "Connect an app" picker. An "app" is
-* an integration / credential set — connected state is whether a credential exists.
-*/
-const AppCatalogEntrySchema = zod.z.object({
-	id: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	description: zod.z.string().min(1),
-	category: zod.z.string().min(1),
-	integrationDescription: zod.z.string().min(1),
-	logo: zod.z.string().url().nullable().optional(),
-	authKind: AppAuthKindSchema,
-	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
-	/** When present, the app supports agent gateway bindings (external channels). */
-	gateway: AppGatewaySchema.optional()
-});
-const ListAppsResponseSchema = zod.z.object({ apps: zod.z.array(AppCatalogEntrySchema) });
-/** How a credential instance is stored (`credential_instances.auth_kind`). */
-const CredentialAuthKindSchema = zod.z.enum([
-	"api_key",
-	"oauth_managed",
-	"keystroke"
-]);
-/**
-* Where a credential instance is stored (`credential_instances.scope_type`), and the only thing an
-* action/tool can pin via `.scope(...)`. There is no resolution chain: when no scope is pinned, the
-* resolver tries the project default, then the org default, then throws.
-*/
-const CredentialScopeTypeSchema = zod.z.enum([
-	"organization",
-	"project",
-	"user"
-]);
-CredentialAuthKindSchema.options;
-CredentialScopeTypeSchema.options;
-/** Human-readable app name from a credential slug (e.g. `google-drive` → `Google Drive`). */
-function displayCredentialAppName(appId) {
-	return appId.split(/[-_]+/).filter(Boolean).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
-}
-function buildCredentialInstanceLabel(options) {
-	const appName = options.appName.trim();
-	switch (options.scopeType) {
-		case "organization": return `Organization ${appName}`;
-		case "user": return `Personal ${appName}`;
-		case "project": return `${appName} (${options.projectName?.trim() || "Project"})`;
-		default: return options.scopeType;
-	}
-}
-/** Pick a label that is unused within a credential scope, suffixing when needed. */
-function resolveUniqueCredentialInstanceLabel(options) {
-	const taken = new Set([...options.takenLabels].map((label) => label ?? null));
-	if (!taken.has(options.baseLabel)) return options.baseLabel;
-	const disambiguator = options.disambiguator?.trim();
-	if (disambiguator) {
-		const withDisambiguator = `${options.baseLabel} (${disambiguator})`;
-		if (!taken.has(withDisambiguator)) return withDisambiguator;
-	}
-	let suffix = 2;
-	while (taken.has(`${options.baseLabel} (${suffix})`)) suffix += 1;
-	return `${options.baseLabel} (${suffix})`;
-}
-/** Scope of a platform app credential (maps to `credential_instances.scope_type`). */
-const AppCredentialScopeSchema = zod.z.enum([
-	"user",
-	"project",
-	"organization"
-]);
-/** How the credential was connected (OAuth vs manual api-key entry). */
-const AppCredentialConnectionKindSchema = zod.z.enum(["oauth", "manual"]);
-/** Connect-dialog permission preset for OAuth scope selection. */
-const OAuthPermissionModeSchema = zod.z.enum(["default", "restricted"]);
-const optionalTimestamp$1 = zod.z.string().optional();
-const nullableOptionalTimestamp = zod.z.string().nullable().optional();
-/**
-* Summary row for the apps/credentials table and credential detail page.
-* Plaintext secrets are never returned — only masked `keyPreviews`.
-*/
-const AppCredentialSummarySchema = zod.z.object({
-	id: zod.z.string().min(1),
-	appId: zod.z.string().min(1),
-	label: zod.z.string().min(1),
-	scope: AppCredentialScopeSchema,
-	lastRefreshedAt: zod.z.string().nullable(),
-	appName: zod.z.string().min(1).optional(),
-	projectId: zod.z.string().min(1).optional(),
-	projectName: zod.z.string().min(1).optional(),
-	status: zod.z.string().optional(),
-	createdAt: optionalTimestamp$1,
-	lastUsedAt: nullableOptionalTimestamp,
-	isDefault: zod.z.boolean().optional(),
-	connectionKind: AppCredentialConnectionKindSchema.optional(),
-	ownerUserId: zod.z.string().min(1).optional(),
-	ownerName: zod.z.string().min(1).optional(),
-	ownerAvatarUrl: zod.z.string().url().optional(),
-	grantedScopes: zod.z.array(zod.z.string().min(1)).optional(),
-	credentialKeys: zod.z.array(zod.z.string().min(1)).optional(),
-	keyPreviews: zod.z.record(zod.z.string(), zod.z.string()).optional(),
-	expiresAt: optionalTimestamp$1
-});
-const credentialSecretValueSchema = zod.z.record(zod.z.string(), zod.z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
-function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
-}
-function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
-	ctx.addIssue({
-		code: "custom",
-		message: "At least one credential target is required",
-		path
-	});
-}
-/** Target fields shared by create and OAuth start flows. */
-const CredentialTargetsFieldsSchema = zod.z.object({
-	projects: zod.z.array(zod.z.string().min(1)).default([]),
-	createOrganizationCredential: zod.z.boolean().default(false),
-	createUserProvidedCredential: zod.z.boolean().default(false)
-});
-CredentialTargetsFieldsSchema.extend({
-	appId: zod.z.string().min(1),
-	scopes: zod.z.array(zod.z.string().min(1)),
-	permissionMode: OAuthPermissionModeSchema
-});
-zod.z.object({
-	status: zod.z.enum(["connected", "redirecting"]),
-	authorizeUrl: zod.z.string().url().nullable()
-});
-/** Request body for `POST /api/credentials` (manual api-key fan-out). */
-const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
-	appId: zod.z.string().min(1),
-	connectionKind: AppCredentialConnectionKindSchema,
-	value: credentialSecretValueSchema.optional(),
-	scopes: zod.z.array(zod.z.string().min(1)).optional()
-}).superRefine((input, ctx) => {
-	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
-	if (input.connectionKind === "manual" && !input.value) ctx.addIssue({
-		code: "custom",
-		message: "value is required for manual connections",
-		path: ["value"]
-	});
-	if (input.connectionKind === "oauth") ctx.addIssue({
-		code: "custom",
-		message: "OAuth credentials are created via the OAuth callback",
-		path: ["connectionKind"]
-	});
-});
-/** Request body for `PATCH /api/credentials/:id`. */
-const UpdateCredentialRequestSchema = zod.z.object({
-	label: zod.z.string().trim().min(1).optional(),
-	isDefault: zod.z.boolean().optional(),
-	value: credentialSecretValueSchema.optional()
-}).refine((input) => input.label !== void 0 || input.isDefault !== void 0 || input.value !== void 0, { message: "At least one field is required" });
-const ListCredentialsResponseSchema = zod.z.object({ credentials: zod.z.array(AppCredentialSummarySchema) });
-const GetCredentialResponseSchema = zod.z.object({ credential: AppCredentialSummarySchema });
-const CreateCredentialsResponseSchema = zod.z.object({ credentials: zod.z.array(AppCredentialSummarySchema) });
-const McpConnectionStatusSchema = zod.z.enum([
-	"INITIATED",
-	"ACTIVE",
-	"EXPIRED",
-	"FAILED",
-	"INACTIVE",
-	"REVOKED"
-]);
-const McpAppSchema = zod.z.object({
-	slug: zod.z.string(),
-	name: zod.z.string(),
-	connected: zod.z.boolean(),
-	connectionId: zod.z.string().optional(),
-	status: McpConnectionStatusSchema.optional()
-});
-zod.z.object({ apps: zod.z.array(McpAppSchema) });
-zod.z.object({
-	connectionId: zod.z.string(),
-	entityId: zod.z.string(),
-	instanceId: zod.z.string()
-});
-zod.z.object({
-	app: zod.z.string().trim().min(1),
-	tool: zod.z.string().trim().min(1),
-	arguments: zod.z.record(zod.z.string(), zod.z.unknown()).default({}),
-	/**
-	* Resolved credential instance to execute against. When set, the platform executes that exact
-	* connection (scoped to the caller's org); when omitted it resolves the app's instance by scope.
-	*/
-	instanceId: zod.z.string().trim().min(1).optional(),
-	/** Pinned provider toolkit version, sourced from the app definition; forwarded to the provider. */
-	version: zod.z.string().trim().min(1)
-});
-const TeamRequestTypeSchema = zod.z.enum([
-	"org-deletion",
-	"contact",
-	"enterprise-upgrade"
-]);
-const SubmitTeamRequestRequestSchema = zod.z.object({
-	type: TeamRequestTypeSchema,
-	message: zod.z.string().trim().max(5e3).optional()
-});
-const SubmitTeamRequestResponseSchema = zod.z.object({ ok: zod.z.literal(true) });
-function isCredentialInput(value) {
-	if (typeof value !== "object" || value === null) return false;
-	const candidate = value;
-	return typeof candidate.key === "string" && CredentialAuthKindSchema.safeParse(candidate.kind).success && candidate.schema instanceof zod.z.ZodType;
-}
-const credentialInputSchema = zod.z.custom((value) => isCredentialInput(value), "must be a credential requirement");
-const PROJECT_SLUG_TAKEN_MESSAGE = "That slug is already taken.";
-const OrganizationSlugErrorCodeSchema = zod.z.enum([
-	"slug_taken",
-	"slug_reserved",
-	"slug_invalid"
-]);
-const SlugAvailabilityReasonSchema = zod.z.enum([
-	"taken",
-	"reserved",
-	"invalid"
-]);
-const SlugAvailabilityResponseSchema = zod.z.object({
-	slug: zod.z.string(),
-	available: zod.z.boolean(),
-	reason: SlugAvailabilityReasonSchema.optional(),
-	suggestion: OrganizationSlugSchema.optional()
-});
-const SlugAvailabilityQuerySchema = zod.z.object({
-	slug: zod.z.string().trim().min(1),
-	excludeOrganizationId: zod.z.string().min(1).optional()
-});
-const ProjectSlugAvailabilityReasonSchema = zod.z.enum(["taken", "invalid"]);
-const ProjectSlugAvailabilityResponseSchema = zod.z.object({
-	slug: zod.z.string(),
-	available: zod.z.boolean(),
-	reason: ProjectSlugAvailabilityReasonSchema.optional(),
-	suggestion: ProjectSlugSchema.optional()
-});
-const ProjectSlugAvailabilityQuerySchema = zod.z.object({
-	slug: zod.z.string().trim().min(1),
-	excludeProjectId: zod.z.string().min(1).optional()
-});
-function organizationSlugErrorCodeFromMessage(message) {
-	if (message === "That slug is already taken." || /already taken/i.test(message)) return "slug_taken";
-	if (/reserved/i.test(message)) return "slug_reserved";
-	return "slug_invalid";
-}
-const ProjectStatusSchema = zod.z.enum([
-	"inactive",
-	"starting",
-	"active",
-	"failed"
-]);
-const OrganizationUserRoleSchema = zod.z.enum([
-	"owner",
-	"admin",
-	"builder"
-]);
-const isoDateTime$5 = zod.z.string().datetime();
-const OrganizationSchema = zod.z.object({
-	id: zod.z.string(),
-	name: zod.z.string(),
-	slug: OrganizationSlugSchema,
-	createdAt: isoDateTime$5,
-	updatedAt: isoDateTime$5
-});
-const ProjectSchema = zod.z.object({
-	id: zod.z.string(),
-	organizationId: zod.z.string(),
-	name: zod.z.string(),
-	slug: ProjectSlugSchema,
-	description: zod.z.string().nullable(),
-	status: ProjectStatusSchema,
-	baseUrl: zod.z.string().nullable(),
-	runtimeId: zod.z.string().nullable(),
-	lastError: zod.z.string().nullable(),
-	createdAt: isoDateTime$5,
-	updatedAt: isoDateTime$5
-});
-const UserOrganizationSchema = zod.z.object({
-	organization: OrganizationSchema,
-	role: OrganizationUserRoleSchema
-});
-const ActiveOrganizationResponseSchema = zod.z.object({ organization: UserOrganizationSchema.nullable() });
-const ListOrganizationsResponseSchema = zod.z.object({ organizations: zod.z.array(UserOrganizationSchema) });
-const CreateOrganizationRequestSchema = zod.z.object({
-	name: zod.z.string().trim().min(1),
-	/** Format-only at the wire boundary; reserved-name checks run in platform-database. */
-	slug: OrganizationSlugSchema.optional()
-});
-const UpdateOrganizationRequestSchema = zod.z.object({
-	name: zod.z.string().trim().min(1).optional(),
-	slug: ClaimableOrganizationSlugSchema.optional()
-}).refine((data) => data.name !== void 0 || data.slug !== void 0, { message: "At least one field is required" });
-const CreateOrganizationResponseSchema = zod.z.object({ organization: UserOrganizationSchema });
-const ListProjectsResponseSchema = zod.z.object({ projects: zod.z.array(ProjectSchema) });
-const ProjectListMetricsSchema = zod.z.object({
-	agentCount: zod.z.number(),
-	workflowCount: zod.z.number(),
-	skillCount: zod.z.number(),
-	credentialCount: zod.z.number(),
-	lastDeploymentAt: isoDateTime$5.nullable()
-});
-const ListProjectMetricsResponseSchema = zod.z.object({ metrics: zod.z.record(zod.z.string(), ProjectListMetricsSchema) });
-const CreateProjectRequestSchema = zod.z.object({
-	name: zod.z.string().trim().min(1),
-	description: zod.z.string().trim().min(1).optional()
-});
-const UpdateProjectRequestSchema = zod.z.object({
-	name: zod.z.string().trim().min(1).optional(),
-	description: zod.z.string().trim().optional(),
-	slug: ProjectSlugSchema.optional()
-}).refine((data) => data.name !== void 0 || data.description !== void 0 || data.slug !== void 0, { message: "At least one field is required" });
-const CreateProjectResponseSchema = zod.z.object({ project: ProjectSchema });
-const ProjectResponseSchema = zod.z.object({ project: ProjectSchema });
-const ProjectReachabilityResponseSchema = zod.z.object({ reachable: zod.z.boolean() });
-const ValidationErrorDetailSchema = zod.z.object({
-	path: zod.z.string(),
-	message: zod.z.string()
-});
-/** Machine-readable codes returned in standard API error bodies. */
-const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(zod.z.enum(["needs_org_selection"]));
-/** Standard JSON error body returned by the HTTP API. */
-const ErrorResponseSchema = zod.z.object({
-	error: zod.z.string(),
-	code: ErrorResponseCodeSchema.optional(),
-	message: zod.z.string().optional(),
-	details: zod.z.array(ValidationErrorDetailSchema).optional()
-});
-/** Build the JSON body for HTTP 400 validation failures. */
-function validationErrorResponse(error, summary) {
-	return {
-		error: summary,
-		details: error.issues.map((issue) => ({
-			path: issue.path.join("."),
-			message: issue.message
-		}))
-	};
-}
-zod.z.object({ message: zod.z.string() });
-const CredentialRunContextSchema = zod.z.object({
-	orgId: zod.z.string().min(1).optional(),
-	projectId: zod.z.string().min(1).optional(),
-	userId: zod.z.string().min(1).optional(),
-	userIds: zod.z.record(zod.z.string(), zod.z.string()).optional(),
-	selection: zod.z.record(zod.z.string(), zod.z.string()).optional()
-});
-const ThinkingLevelSchema = zod.z.enum([
-	"off",
-	"minimal",
-	"low",
-	"medium",
-	"high",
-	"xhigh"
-]);
-zod.z.object({
-	message: zod.z.string().min(1),
-	sessionId: zod.z.string().min(1).optional(),
-	subscriptionId: zod.z.string().min(1).optional(),
-	context: CredentialRunContextSchema.optional(),
-	thinkingLevel: ThinkingLevelSchema.optional()
-});
-zod.z.object({
-	sessionId: zod.z.string(),
-	messages: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())),
-	error: zod.z.string().nullable()
-});
-const SkipResponseSchema = zod.z.object({
-	ok: zod.z.literal(true),
-	skipped: zod.z.literal(true)
-});
-zod.z.object({ ok: zod.z.literal(true) });
-zod.z.object({ service: zod.z.string() });
-const ConnectProviderSchema = zod.z.object({
-	key: zod.z.string(),
-	mode: zod.z.enum(["authorize-url", "browser-redirect"]),
-	path: zod.z.string(),
-	requiresAuth: zod.z.boolean()
-});
-zod.z.object({ providers: zod.z.array(ConnectProviderSchema) });
-zod.z.object({ url: zod.z.string() });
-zod.z.object({ runId: zod.z.string() });
-zod.z.object({ sessionId: zod.z.string() });
-zod.z.object({
-	workflows: zod.z.array(zod.z.string().min(1)).optional(),
-	attachments: zod.z.array(zod.z.string().min(1)).optional()
-});
-const PollAttachmentResultSchema = zod.z.object({
-	attachmentKey: zod.z.string(),
-	workflowKey: zod.z.string(),
-	runId: zod.z.string().optional(),
-	body: zod.z.unknown().optional(),
-	queued: zod.z.boolean(),
-	skipped: zod.z.boolean().optional()
-});
-const PollRunMultiResponseSchema = zod.z.object({ results: zod.z.array(PollAttachmentResultSchema) });
-zod.z.union([
-	zod.z.record(zod.z.string(), zod.z.unknown()),
-	PollRunMultiResponseSchema,
-	SkipResponseSchema,
-	zod.z.object({ runId: zod.z.string() })
-]);
-const RunSourceKindSchema = zod.z.enum([
-	"api",
-	"trigger",
-	"gateway",
-	"workflow",
-	"agent"
-]);
-zod.z.object({
-	kind: RunSourceKindSchema,
-	id: zod.z.string().nullable()
-});
-const WorkflowRunStatusSchema = zod.z.enum([
-	"pending",
-	"running",
-	"sleeping",
-	"waiting_hook",
-	"completed",
-	"failed",
-	"canceled"
-]);
-const WorkflowRunTriggerSchema = zod.z.enum([
-	"api",
-	"cron",
-	"webhook",
-	"poll",
-	"retry"
-]);
-zod.z.enum([
-	"run_started",
-	"step_completed",
-	"step_failed",
-	"step_retrying",
-	"sleep_scheduled",
-	"sleep_completed",
-	"hook_created",
-	"hook_resumed",
-	"run_completed",
-	"run_failed",
-	"run_canceled"
-]);
-const WorkflowRunSummarySchema = zod.z.object({
-	id: zod.z.string(),
-	status: WorkflowRunStatusSchema,
-	trigger: WorkflowRunTriggerSchema,
-	triggeredAt: zod.z.string(),
-	startedAt: zod.z.string().nullable(),
-	finishedAt: zod.z.string().nullable(),
-	sourceKind: RunSourceKindSchema,
-	sourceId: zod.z.string().nullable(),
-	triggerRunId: zod.z.string().nullable(),
-	attachmentId: zod.z.string().nullable()
-});
-const WorkflowRunRecordSchema = zod.z.object({
-	id: zod.z.string(),
-	workflowSlug: zod.z.string(),
-	status: WorkflowRunStatusSchema,
-	trigger: WorkflowRunTriggerSchema,
-	triggeredAt: zod.z.string(),
-	startedAt: zod.z.string().nullable(),
-	finishedAt: zod.z.string().nullable(),
-	sourceKind: RunSourceKindSchema,
-	sourceId: zod.z.string().nullable(),
-	triggerRunId: zod.z.string().nullable(),
-	attachmentId: zod.z.string().nullable(),
-	parentWorkflowRunId: zod.z.string().nullable(),
-	parentSpanId: zod.z.string().nullable(),
-	input: zod.z.unknown().nullable(),
-	output: zod.z.unknown().nullable(),
-	error: zod.z.unknown().nullable()
-});
-zod.z.object({
-	limit: zod.z.coerce.number().int().min(1).max(100).optional().default(20),
-	cursor: zod.z.string().min(1).optional(),
-	status: WorkflowRunStatusSchema.optional(),
-	trigger: WorkflowRunTriggerSchema.optional()
-});
-zod.z.object({
-	items: zod.z.array(WorkflowRunSummarySchema),
-	nextCursor: zod.z.string().nullable()
-});
-zod.z.enum([
-	"trigger",
-	"steps",
-	"trace"
-]);
-zod.z.object({ include: zod.z.string().optional() });
-const TriggerRunDetailSchema = zod.z.object({
-	id: zod.z.string(),
-	attachmentId: zod.z.string(),
-	attachmentSlug: zod.z.string().nullable(),
-	triggerType: zod.z.enum([
-		"cron",
-		"webhook",
-		"poll"
-	]),
-	sourcePath: zod.z.string().nullable(),
-	payload: zod.z.unknown().nullable(),
-	triggeredAt: zod.z.string()
-});
-const WorkflowStepRunSchema = zod.z.object({
-	id: zod.z.string(),
-	actionKey: zod.z.string(),
-	output: zod.z.unknown(),
-	completedAt: zod.z.string()
-});
-const TraceTriggerSummarySchema = zod.z.object({
-	triggerType: zod.z.string(),
-	triggerRunId: zod.z.string(),
-	workflowSlug: zod.z.string().optional(),
-	agentSlug: zod.z.string().optional(),
-	attachmentId: zod.z.string().nullable().optional(),
-	attachmentSlug: zod.z.string().nullable().optional(),
-	route: zod.z.string().optional(),
-	sourcePath: zod.z.string().nullable().optional()
-}).nullable();
-const TraceGatewaySummarySchema = zod.z.object({
-	gatewayAttachmentId: zod.z.string(),
-	gatewayAttachmentKey: zod.z.string(),
-	threadId: zod.z.string().optional(),
-	channelId: zod.z.string().optional(),
-	mode: zod.z.string().optional()
-}).nullable();
-const TraceSpanSchema = zod.z.object({
-	id: zod.z.string(),
-	traceId: zod.z.string(),
-	parentSpanId: zod.z.string().nullable(),
-	kind: zod.z.string(),
-	refId: zod.z.string(),
-	name: zod.z.string(),
-	status: zod.z.string(),
-	startedAt: zod.z.string(),
-	finishedAt: zod.z.string().nullable(),
-	metadata: zod.z.unknown().nullable(),
-	error: zod.z.unknown().nullable()
-});
-const TraceLogSchema = zod.z.object({
-	id: zod.z.string(),
-	traceId: zod.z.string(),
-	spanId: zod.z.string(),
-	seq: zod.z.number(),
-	level: zod.z.string(),
-	message: zod.z.string(),
-	data: zod.z.unknown().nullable(),
-	source: zod.z.string(),
-	createdAt: zod.z.string()
-});
-const TraceResponseSchema = zod.z.object({
-	traceId: zod.z.string(),
-	trigger: TraceTriggerSummarySchema,
-	gateway: TraceGatewaySummarySchema,
-	spans: zod.z.array(TraceSpanSchema),
-	logs: zod.z.array(TraceLogSchema)
-});
-zod.z.object({
-	run: WorkflowRunRecordSchema,
-	trigger: TriggerRunDetailSchema.nullable(),
-	steps: zod.z.array(WorkflowStepRunSchema),
-	trace: TraceResponseSchema.nullable()
-});
-const AgentSessionStatusSchema = zod.z.enum([
-	"running",
-	"completed",
-	"failed",
-	"canceled"
-]);
-const AgentSessionSummarySchema = zod.z.object({
-	id: zod.z.string(),
-	status: AgentSessionStatusSchema,
-	source: RunSourceKindSchema,
-	sourceId: zod.z.string().nullable(),
-	createdAt: zod.z.string(),
-	updatedAt: zod.z.string(),
-	messageCount: zod.z.number()
-});
-const AgentSessionRecordSchema = zod.z.object({
-	id: zod.z.string(),
-	agentSlug: zod.z.string(),
-	status: AgentSessionStatusSchema,
-	source: RunSourceKindSchema,
-	sourceId: zod.z.string().nullable(),
-	createdAt: zod.z.string(),
-	updatedAt: zod.z.string(),
-	parentSpanId: zod.z.string().nullable(),
-	messageCount: zod.z.number(),
-	error: zod.z.unknown().nullable()
-});
-zod.z.object({
-	limit: zod.z.coerce.number().int().min(1).max(100).optional().default(20),
-	cursor: zod.z.string().min(1).optional(),
-	status: AgentSessionStatusSchema.optional(),
-	source: RunSourceKindSchema.optional()
-});
-zod.z.object({
-	items: zod.z.array(AgentSessionSummarySchema),
-	nextCursor: zod.z.string().nullable()
-});
-zod.z.enum([
-	"gateway",
-	"messages",
-	"events",
-	"trace"
-]);
-zod.z.object({ include: zod.z.string().optional() });
-const GatewaySessionDetailSchema = zod.z.object({
-	threadId: zod.z.string(),
-	attachmentId: zod.z.string(),
-	attachmentSlug: zod.z.string().nullable()
-});
-const AgentEventSchema = zod.z.object({
-	id: zod.z.string(),
-	sessionId: zod.z.string(),
-	seq: zod.z.number(),
-	eventType: zod.z.string(),
-	payload: zod.z.unknown(),
-	createdAt: zod.z.string()
-});
-zod.z.object({
-	session: AgentSessionRecordSchema,
-	gateway: GatewaySessionDetailSchema.nullable(),
-	messages: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())),
-	events: zod.z.array(AgentEventSchema),
-	trace: TraceResponseSchema.nullable()
-});
-const SlackGatewayModeSchema = zod.z.enum([
-	"mention",
-	"channel",
-	"dm"
-]);
-const GatewayAttachmentSourceSchema = zod.z.object({
-	kind: zod.z.literal("slack"),
-	mode: SlackGatewayModeSchema,
-	credentialKey: zod.z.string(),
-	channelIds: zod.z.array(zod.z.string()).optional(),
-	subscribeOnMention: zod.z.boolean()
-});
-const GatewayAttachmentRecordSchema = zod.z.object({
-	id: zod.z.string(),
-	key: zod.z.string(),
-	agentKey: zod.z.string(),
-	channelId: zod.z.string(),
-	teamId: zod.z.string().nullable().optional(),
-	platform: zod.z.string(),
-	source: GatewayAttachmentSourceSchema,
-	registeredAt: zod.z.string(),
-	updatedAt: zod.z.string()
-});
-zod.z.object({ attachments: zod.z.array(GatewayAttachmentRecordSchema) });
-zod.z.object({
-	agentKey: zod.z.string().min(1),
-	teamId: zod.z.string().min(1).optional(),
-	mode: SlackGatewayModeSchema.optional(),
-	subscribeOnMention: zod.z.boolean().optional()
-});
-const AgentListItemSchema = zod.z.object({
-	key: zod.z.string(),
-	name: zod.z.string().optional(),
-	route: zod.z.string()
-});
-zod.z.object({ agents: zod.z.array(AgentListItemSchema) });
-const HistoryRunKindSchema = zod.z.enum(["workflow", "agent"]);
-const HistoryRunStatusSchema = zod.z.enum([
-	"pending",
-	"running",
-	"sleeping",
-	"waiting_hook",
-	"completed",
-	"failed",
-	"canceled"
-]);
-const HistoryRunActorSchema = zod.z.object({
-	userId: zod.z.string(),
-	name: zod.z.string(),
-	avatarUrl: zod.z.string().nullable().optional()
-});
-const HistoryRunUsageLineItemSchema = zod.z.object({
-	id: zod.z.string(),
-	label: zod.z.string(),
-	amountUsd: zod.z.number()
-});
-const HistoryRunUsageSchema = zod.z.object({
-	runDurationMs: zod.z.number().nullable(),
-	lineItems: zod.z.array(HistoryRunUsageLineItemSchema),
-	totalExcludingDurationUsd: zod.z.number().nullable()
-});
-const HistoryRunSchema = zod.z.object({
-	id: zod.z.string(),
-	kind: HistoryRunKindSchema,
-	traceId: zod.z.string().nullable(),
-	projectId: zod.z.string(),
-	projectName: zod.z.string(),
-	resourceKey: zod.z.string(),
-	resourceId: zod.z.string(),
-	resourceName: zod.z.string(),
-	status: HistoryRunStatusSchema,
-	triggeredAt: zod.z.string(),
-	timeInQueueMs: zod.z.number().nullable(),
-	startedAt: zod.z.string(),
-	finishedAt: zod.z.string().nullable(),
-	durationMs: zod.z.number().nullable(),
-	triggerLabel: zod.z.string(),
-	triggerRaw: zod.z.string(),
-	ranAs: HistoryRunActorSchema.nullable(),
-	modelsUsed: zod.z.array(zod.z.string()),
-	otherServicesUsed: zod.z.array(zod.z.string()),
-	totalCostUsd: zod.z.number().nullable(),
-	messageCount: zod.z.number().optional(),
-	stepCount: zod.z.number().optional()
-});
-const HistoryTraceSpanSchema = zod.z.object({
-	id: zod.z.string(),
-	traceId: zod.z.string(),
-	parentSpanId: zod.z.string().nullable(),
-	kind: zod.z.string(),
-	refId: zod.z.string(),
-	name: zod.z.string(),
-	status: zod.z.string(),
-	startedAt: zod.z.string(),
-	finishedAt: zod.z.string().nullable(),
-	metadata: zod.z.unknown().nullable(),
-	error: zod.z.unknown().nullable()
-});
-const HistoryTraceLogSchema = zod.z.object({
-	id: zod.z.string(),
-	traceId: zod.z.string(),
-	spanId: zod.z.string(),
-	seq: zod.z.number(),
-	level: zod.z.string(),
-	message: zod.z.string(),
-	data: zod.z.unknown().nullable(),
-	source: zod.z.string(),
-	createdAt: zod.z.string()
-});
-const HistoryTraceTriggerSchema = zod.z.object({
-	triggerType: zod.z.string(),
-	triggerRunId: zod.z.string(),
-	workflowKey: zod.z.string().optional(),
-	agentKey: zod.z.string().optional(),
-	attachmentId: zod.z.string().nullable().optional(),
-	attachmentKey: zod.z.string().nullable().optional(),
-	route: zod.z.string().optional(),
-	sourcePath: zod.z.string().nullable().optional()
-}).nullable();
-const HistoryTraceGatewaySchema = zod.z.object({
-	gatewayAttachmentId: zod.z.string(),
-	gatewayAttachmentKey: zod.z.string(),
-	threadId: zod.z.string().optional(),
-	channelId: zod.z.string().optional(),
-	mode: zod.z.string().optional()
-}).nullable();
-const HistoryTraceSchema = zod.z.object({
-	traceId: zod.z.string(),
-	trigger: HistoryTraceTriggerSchema,
-	gateway: HistoryTraceGatewaySchema,
-	spans: zod.z.array(HistoryTraceSpanSchema),
-	logs: zod.z.array(HistoryTraceLogSchema)
-});
-const HistoryWorkflowStepSchema = zod.z.object({
-	id: zod.z.string(),
-	actionKey: zod.z.string(),
-	output: zod.z.unknown(),
-	completedAt: zod.z.string()
-});
-const HistoryWorkflowRunDetailSchema = zod.z.object({
-	kind: zod.z.literal("workflow"),
-	run: zod.z.object({
-		id: zod.z.string(),
-		workflowKey: zod.z.string(),
-		status: HistoryRunStatusSchema,
-		trigger: zod.z.string(),
-		triggeredAt: zod.z.string(),
-		startedAt: zod.z.string().nullable(),
-		finishedAt: zod.z.string().nullable(),
-		input: zod.z.unknown().nullable(),
-		output: zod.z.unknown().nullable(),
-		error: zod.z.unknown().nullable()
-	}),
-	trigger: zod.z.object({
-		id: zod.z.string(),
-		attachmentKey: zod.z.string().nullable(),
-		triggerType: zod.z.string(),
-		sourcePath: zod.z.string().nullable(),
-		payload: zod.z.unknown().nullable(),
-		triggeredAt: zod.z.string()
-	}).nullable(),
-	steps: zod.z.array(HistoryWorkflowStepSchema),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-});
-const HistoryAgentSessionDetailSchema = zod.z.object({
-	kind: zod.z.literal("agent"),
-	runId: zod.z.string(),
-	session: zod.z.object({
-		id: zod.z.string(),
-		agentKey: zod.z.string(),
-		status: HistoryRunStatusSchema,
-		source: zod.z.enum([
-			"api",
-			"gateway",
-			"trigger",
-			"workflow",
-			"agent"
-		]),
-		sourceId: zod.z.string().nullable(),
-		createdAt: zod.z.string(),
-		updatedAt: zod.z.string(),
-		messageCount: zod.z.number(),
-		error: zod.z.unknown().nullable()
-	}),
-	gateway: zod.z.object({
-		threadId: zod.z.string(),
-		attachmentKey: zod.z.string().nullable()
-	}).nullable(),
-	messages: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-});
-const HistoryRunDetailSchema = zod.z.discriminatedUnion("kind", [HistoryWorkflowRunDetailSchema, HistoryAgentSessionDetailSchema]);
-const HistoryRunListQuerySchema = zod.z.object({
-	project: zod.z.string().min(1).optional(),
-	status: HistoryRunStatusSchema.optional(),
-	kind: HistoryRunKindSchema.optional()
-});
-const HistoryRunListResponseSchema = zod.z.array(HistoryRunSchema);
-const HistoryRunDetailResponseSchema = HistoryRunDetailSchema.nullable();
-const HistoryRunCancelResponseSchema = HistoryRunSchema.nullable();
-const WorkflowSubscriptionRecordSchema = zod.z.object({
-	id: zod.z.string(),
-	workflowKey: zod.z.string(),
-	userId: zod.z.string(),
-	enabled: zod.z.boolean(),
-	createdAt: zod.z.string(),
-	updatedAt: zod.z.string()
-});
-zod.z.object({ subscriptions: zod.z.array(WorkflowSubscriptionRecordSchema) });
-zod.z.object({
-	userId: zod.z.string().min(1).optional(),
-	enabled: zod.z.boolean().optional()
-});
-const CredentialInstanceRecordSchema = zod.z.object({
-	id: zod.z.string(),
-	key: zod.z.string(),
-	scopeType: CredentialScopeTypeSchema,
-	scopeId: zod.z.string().nullable(),
-	label: zod.z.string().nullable(),
-	isDefault: zod.z.boolean(),
-	authKind: CredentialAuthKindSchema
-});
-zod.z.object({ instances: zod.z.array(CredentialInstanceRecordSchema) });
-zod.z.object({
-	key: zod.z.string().min(1),
-	scopeType: CredentialScopeTypeSchema,
-	scopeId: zod.z.string().nullable().optional(),
-	label: zod.z.string().nullable().optional(),
-	isDefault: zod.z.boolean().optional(),
-	value: zod.z.record(zod.z.string(), zod.z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" })
-});
-zod.z.object({
-	label: zod.z.string().nullable().optional(),
-	isDefault: zod.z.boolean().optional(),
-	value: zod.z.record(zod.z.string(), zod.z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" }).optional()
-});
-const TriggerRunTypeSchema = zod.z.enum([
-	"cron",
-	"webhook",
-	"poll"
-]);
-const TriggerRunWorkflowSummarySchema = zod.z.object({
-	id: zod.z.string(),
-	status: WorkflowRunStatusSchema,
-	workflowSlug: zod.z.string()
-});
-const TriggerRunAgentSessionSummarySchema = zod.z.object({
-	id: zod.z.string(),
-	agentSlug: zod.z.string()
-});
-const TriggerRunSummarySchema = zod.z.object({
-	id: zod.z.string(),
-	triggerType: TriggerRunTypeSchema,
-	triggeredAt: zod.z.string(),
-	sourcePath: zod.z.string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema.nullable()
-});
-const TriggerRunRecordSchema = zod.z.object({
-	id: zod.z.string(),
-	attachmentId: zod.z.string(),
-	attachmentSlug: zod.z.string(),
-	triggerType: TriggerRunTypeSchema,
-	sourcePath: zod.z.string().nullable(),
-	payload: zod.z.unknown().nullable(),
-	triggeredAt: zod.z.string()
-});
-zod.z.object({
-	limit: zod.z.coerce.number().int().min(1).max(100).optional().default(20),
-	cursor: zod.z.string().min(1).optional(),
-	triggerType: TriggerRunTypeSchema.optional()
-});
-zod.z.object({
-	items: zod.z.array(TriggerRunSummarySchema),
-	nextCursor: zod.z.string().nullable()
-});
-zod.z.enum([
-	"workflows",
-	"agents",
-	"trace"
-]);
-zod.z.object({ include: zod.z.string().optional() });
-const TriggerRunAgentSessionDetailSchema = zod.z.object({
-	id: zod.z.string(),
-	agentSlug: zod.z.string()
-});
-zod.z.object({
-	run: TriggerRunRecordSchema,
-	workflowRuns: zod.z.array(WorkflowRunSummarySchema),
-	agentSessions: zod.z.array(TriggerRunAgentSessionDetailSchema),
-	trace: TraceResponseSchema.nullable()
-});
-const TriggerTypeSchema = zod.z.enum([
-	"webhook",
-	"poll",
-	"cron"
-]);
-const TriggerTargetKindSchema = zod.z.enum(["workflow", "agent"]);
-const TriggerListItemSchema = zod.z.object({
-	key: zod.z.string(),
-	type: TriggerTypeSchema,
-	route: zod.z.string().optional(),
-	webhookUrl: zod.z.string().url().optional(),
-	targetKind: TriggerTargetKindSchema,
-	workflowKey: zod.z.string().optional(),
-	agentKey: zod.z.string().optional()
-});
-zod.z.object({ triggers: zod.z.array(TriggerListItemSchema) });
-zod.z.object({ endpoint: zod.z.string().min(1).optional() });
-const OrganizationMemberRoleSchema = zod.z.enum([
-	"owner",
-	"admin",
-	"builder"
-]);
-const OrganizationMemberStatusSchema = zod.z.enum([
-	"invited",
-	"active",
-	"rejected",
-	"suspended"
-]);
-const InvitableOrganizationMemberRoleSchema = zod.z.enum(["admin", "builder"]);
-const isoDateTime$4 = zod.z.string().datetime();
-const OrganizationMemberSchema = zod.z.object({
-	id: zod.z.string(),
-	name: zod.z.string(),
-	email: zod.z.string().email(),
-	role: OrganizationMemberRoleSchema,
-	status: OrganizationMemberStatusSchema,
-	avatarUrl: zod.z.string().optional(),
-	joinedAt: isoDateTime$4.optional(),
-	lastActiveAt: isoDateTime$4.nullable().optional()
-});
-const ListOrganizationMembersResponseSchema = zod.z.object({ members: zod.z.array(OrganizationMemberSchema) });
-const InviteOrganizationMembersRequestSchema = zod.z.object({
-	emails: zod.z.array(zod.z.string().trim().email()).min(1),
-	role: InvitableOrganizationMemberRoleSchema
-});
-const InviteOrganizationMemberResultStatusSchema = zod.z.enum([
-	"sent",
-	"already_member",
-	"pending",
-	"invalid"
-]);
-const InviteOrganizationMemberResultSchema = zod.z.object({
-	email: zod.z.string(),
-	status: InviteOrganizationMemberResultStatusSchema,
-	invitationId: zod.z.string().optional()
-});
-const InviteOrganizationMembersResponseSchema = zod.z.object({ results: zod.z.array(InviteOrganizationMemberResultSchema) });
-const UpdateOrganizationMemberRequestSchema = zod.z.object({ role: InvitableOrganizationMemberRoleSchema });
-const UpdateOrganizationMemberResponseSchema = zod.z.object({ member: OrganizationMemberSchema });
-const OrganizationInvitationSchema = zod.z.object({
-	id: zod.z.string(),
-	organizationName: zod.z.string(),
-	organizationSlug: OrganizationSlugSchema,
-	invitedByName: zod.z.string().optional(),
-	invitedByEmail: zod.z.string().email().optional(),
-	role: OrganizationMemberRoleSchema
-});
-const ListOrganizationInvitationsResponseSchema = zod.z.object({ invitations: zod.z.array(OrganizationInvitationSchema) });
-const AcceptOrganizationInvitationResponseSchema = zod.z.object({ organization: UserOrganizationSchema });
-const DeclineOrganizationInvitationResponseSchema = zod.z.object({ success: zod.z.literal(true) });
-/** Web path to auto-accept an invitation after sign-in (used in invite emails). */
-function organizationInvitationAcceptPath(invitationId) {
-	return `/organization/invitations?${new URLSearchParams({ accept: invitationId }).toString()}`;
-}
-const isoDateTime$3 = zod.z.string().datetime();
-const ApiKeyCreatorSchema = zod.z.object({
-	id: zod.z.string(),
-	name: zod.z.string(),
-	email: zod.z.string().email().optional(),
-	avatarUrl: zod.z.string().optional(),
-	/** True when the creator user row no longer exists. */
-	deleted: zod.z.boolean().optional()
-});
-const ApiKeySummarySchema = zod.z.object({
-	id: zod.z.string(),
-	name: zod.z.string(),
-	keyPreview: zod.z.string(),
-	createdAt: isoDateTime$3,
-	createdBy: ApiKeyCreatorSchema,
-	isCreatedByCurrentUser: zod.z.boolean()
-});
-const ListApiKeysResponseSchema = zod.z.object({ apiKeys: zod.z.array(ApiKeySummarySchema) });
-const CreateApiKeyRequestSchema = zod.z.object({ name: zod.z.string().trim().min(1).max(128) });
-const CreateApiKeyResponseSchema = ApiKeySummarySchema.extend({ secret: zod.z.string() });
-const ProjectUserRoleSchema = zod.z.enum(["admin", "builder"]);
-const ProjectInvitePermissionSchema = zod.z.enum(["admin", "all"]);
-const ProjectMemberStatusSchema = zod.z.enum(["active", "invited"]);
-const isoDateTime$2 = zod.z.string().datetime();
-const ProjectMemberSchema = zod.z.object({
-	id: zod.z.string(),
-	projectId: zod.z.string(),
-	name: zod.z.string(),
-	email: zod.z.string().email(),
-	role: ProjectUserRoleSchema,
-	status: ProjectMemberStatusSchema,
-	image: zod.z.string().nullable(),
-	createdAt: isoDateTime$2,
-	isCurrentUser: zod.z.boolean().optional()
-});
-const ListProjectMembersResponseSchema = zod.z.object({ members: zod.z.array(ProjectMemberSchema) });
-const InviteProjectMembersRequestSchema = zod.z.object({
-	emails: zod.z.array(zod.z.string().trim().email()).min(1),
-	role: ProjectUserRoleSchema
-});
-const InviteProjectMemberResultStatusSchema = zod.z.enum([
-	"added",
-	"already_member",
-	"not_org_member",
-	"invalid"
-]);
-const InviteProjectMemberResultSchema = zod.z.object({
-	email: zod.z.string(),
-	status: InviteProjectMemberResultStatusSchema
-});
-const InviteProjectMembersResponseSchema = zod.z.object({ results: zod.z.array(InviteProjectMemberResultSchema) });
-const UpdateProjectMemberRequestSchema = zod.z.object({ role: ProjectUserRoleSchema });
-const UpdateProjectMemberResponseSchema = zod.z.object({ member: ProjectMemberSchema });
-const ProjectSettingsSchema = zod.z.object({
-	description: zod.z.string(),
-	defaultRole: ProjectUserRoleSchema,
-	invitePermission: ProjectInvitePermissionSchema
-});
-const UpdateProjectSettingsRequestSchema = zod.z.object({
-	description: zod.z.string().optional(),
-	defaultRole: ProjectUserRoleSchema.optional(),
-	invitePermission: ProjectInvitePermissionSchema.optional()
-}).refine((data) => data.description !== void 0 || data.defaultRole !== void 0 || data.invitePermission !== void 0, { message: "At least one field is required" });
-const ProjectSettingsResponseSchema = zod.z.object({ settings: ProjectSettingsSchema });
-/** Custom avatar override; null means fall back to OAuth `users.image`. */
-const UserAvatarSchema = zod.z.object({ url: zod.z.url().nullable() });
-const UserAvatarPatchSchema = zod.z.object({ 
-/** Storage key returned from presign; null removes the custom override. */
-storageKey: zod.z.string().min(1).nullable() });
-const PresignUserAvatarRequestSchema = zod.z.object({ contentType: zod.z.string().trim().min(1) });
-const PresignUserAvatarResponseSchema = zod.z.object({
-	uploadUrl: zod.z.url(),
-	storageKey: zod.z.string().min(1)
-});
-const UserInterfaceThemeSchema = zod.z.enum([
-	"system",
-	"light",
-	"dark"
-]);
-const UserSurfaceContrastSchema = zod.z.enum(["off", "on"]);
-const UserWorkspaceLayoutModeSchema = zod.z.enum(["default", "linear"]);
-const UserWorkspaceFontSizeSchema = zod.z.enum(["default", "large"]);
-const UserSidebarNavIconVisibilitySchema = zod.z.enum(["hidden", "visible"]);
-const UserSidebarFooterChatRowVisibilitySchema = zod.z.enum(["hidden", "visible"]);
-const UserWorkspaceFavoriteKindSchema = zod.z.enum([
-	"agent",
-	"workflow",
-	"skill",
-	"run"
-]);
-const UserWorkspaceFavoriteSchema = zod.z.object({
-	kind: UserWorkspaceFavoriteKindSchema,
-	resourceId: zod.z.string().min(1)
-});
-const UserSidebarPreferencesSchema = zod.z.object({
-	navIconVisibility: UserSidebarNavIconVisibilitySchema,
-	footerChatRowVisibility: UserSidebarFooterChatRowVisibilitySchema,
-	hiddenNavItemIds: zod.z.array(zod.z.string()),
-	topNavItemOrderIds: zod.z.array(zod.z.string()),
-	workspaceNavItemOrderIds: zod.z.array(zod.z.string())
-});
-const UserPreferencesSchema = zod.z.object({
-	interfaceTheme: UserInterfaceThemeSchema,
-	surfaceContrast: UserSurfaceContrastSchema,
-	layoutMode: UserWorkspaceLayoutModeSchema,
-	fontSize: UserWorkspaceFontSizeSchema,
-	sidebar: UserSidebarPreferencesSchema,
-	favorites: zod.z.array(UserWorkspaceFavoriteSchema),
-	projectOrderIds: zod.z.array(zod.z.string()),
-	projectDotColors: zod.z.record(zod.z.string(), zod.z.string()),
-	onboardingTabVisible: zod.z.boolean()
-});
-const UserSidebarPreferencesPatchSchema = zod.z.object({
-	navIconVisibility: UserSidebarNavIconVisibilitySchema.optional(),
-	footerChatRowVisibility: UserSidebarFooterChatRowVisibilitySchema.optional(),
-	hiddenNavItemIds: zod.z.array(zod.z.string()).optional(),
-	topNavItemOrderIds: zod.z.array(zod.z.string()).optional(),
-	workspaceNavItemOrderIds: zod.z.array(zod.z.string()).optional()
-});
-const UserPreferencesPatchSchema = zod.z.object({
-	interfaceTheme: UserInterfaceThemeSchema.optional(),
-	surfaceContrast: UserSurfaceContrastSchema.optional(),
-	layoutMode: UserWorkspaceLayoutModeSchema.optional(),
-	fontSize: UserWorkspaceFontSizeSchema.optional(),
-	sidebar: UserSidebarPreferencesPatchSchema.optional(),
-	favorites: zod.z.array(UserWorkspaceFavoriteSchema).optional(),
-	projectOrderIds: zod.z.array(zod.z.string()).optional(),
-	projectDotColors: zod.z.record(zod.z.string(), zod.z.string()).optional(),
-	onboardingTabVisible: zod.z.boolean().optional()
-}).refine((value) => value.interfaceTheme !== void 0 || value.surfaceContrast !== void 0 || value.layoutMode !== void 0 || value.fontSize !== void 0 || value.sidebar !== void 0 || value.favorites !== void 0 || value.projectOrderIds !== void 0 || value.projectDotColors !== void 0 || value.onboardingTabVisible !== void 0, { message: "At least one preference field is required" });
-const DEFAULT_USER_SIDEBAR_PREFERENCES = {
-	navIconVisibility: "visible",
-	footerChatRowVisibility: "visible",
-	hiddenNavItemIds: ["registry"],
-	topNavItemOrderIds: [],
-	workspaceNavItemOrderIds: []
-};
-const DEFAULT_USER_PREFERENCES = {
-	interfaceTheme: "system",
-	surfaceContrast: "on",
-	layoutMode: "linear",
-	fontSize: "default",
-	sidebar: DEFAULT_USER_SIDEBAR_PREFERENCES,
-	favorites: [],
-	projectOrderIds: [],
-	projectDotColors: {},
-	onboardingTabVisible: true
-};
-function normalizeInterfaceTheme(value) {
-	if (value === "light" || value === "dark") return value;
-	return "system";
-}
-function normalizeSurfaceContrast(value) {
-	return value === "off" ? "off" : "on";
-}
-function normalizeLayoutMode(value) {
-	return value === "default" ? "default" : "linear";
-}
-function normalizeFontSize(value) {
-	return value === "large" ? "large" : "default";
-}
-function normalizeStringList(value) {
-	if (!Array.isArray(value)) return [];
-	return Array.from(new Set(value.filter((item) => typeof item === "string")));
-}
-function normalizeHiddenNavItemIds(value) {
-	if (!Array.isArray(value)) return DEFAULT_USER_SIDEBAR_PREFERENCES.hiddenNavItemIds;
-	return normalizeStringList(value);
-}
-function normalizeSidebarPreferences(value) {
-	if (!value || typeof value !== "object") return DEFAULT_USER_SIDEBAR_PREFERENCES;
-	const sidebar = value;
-	return {
-		navIconVisibility: sidebar.navIconVisibility === "visible" ? "visible" : "hidden",
-		footerChatRowVisibility: sidebar.footerChatRowVisibility === "hidden" ? "hidden" : "visible",
-		hiddenNavItemIds: normalizeHiddenNavItemIds(sidebar.hiddenNavItemIds),
-		topNavItemOrderIds: normalizeStringList(sidebar.topNavItemOrderIds),
-		workspaceNavItemOrderIds: normalizeStringList(sidebar.workspaceNavItemOrderIds)
-	};
-}
-function isWorkspaceFavoriteKind(value) {
-	return value === "agent" || value === "workflow" || value === "skill" || value === "run";
-}
-function normalizeFavorites(value) {
-	if (!Array.isArray(value)) return [];
-	const seenKeys = /* @__PURE__ */ new Set();
-	const favorites = [];
-	for (const item of value) {
-		if (!item || typeof item !== "object") continue;
-		const favorite = item;
-		if (typeof favorite.kind !== "string" || !isWorkspaceFavoriteKind(favorite.kind) || typeof favorite.resourceId !== "string" || favorite.resourceId.length === 0) continue;
-		const key = `${favorite.kind}:${favorite.resourceId}`;
-		if (seenKeys.has(key)) continue;
-		seenKeys.add(key);
-		favorites.push({
-			kind: favorite.kind,
-			resourceId: favorite.resourceId
-		});
-	}
-	return favorites;
-}
-function normalizeProjectDotColors(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-	return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[0] === "string" && typeof entry[1] === "string"));
-}
-function normalizeOnboardingTabVisible(value) {
-	return typeof value === "boolean" ? value : DEFAULT_USER_PREFERENCES.onboardingTabVisible;
-}
-function normalizeUserPreferences(value) {
-	if (!value || typeof value !== "object") return DEFAULT_USER_PREFERENCES;
-	const preferences = value;
-	return UserPreferencesSchema.parse({
-		interfaceTheme: normalizeInterfaceTheme(preferences.interfaceTheme),
-		surfaceContrast: normalizeSurfaceContrast(preferences.surfaceContrast),
-		layoutMode: normalizeLayoutMode(preferences.layoutMode),
-		fontSize: normalizeFontSize(preferences.fontSize),
-		sidebar: normalizeSidebarPreferences(preferences.sidebar),
-		favorites: normalizeFavorites(preferences.favorites),
-		projectOrderIds: normalizeStringList(preferences.projectOrderIds),
-		projectDotColors: normalizeProjectDotColors(preferences.projectDotColors),
-		onboardingTabVisible: normalizeOnboardingTabVisible(preferences.onboardingTabVisible)
-	});
-}
-function mergeUserPreferences(current, patch) {
-	return normalizeUserPreferences({
-		...current,
-		...patch,
-		sidebar: patch.sidebar ? {
-			...current.sidebar,
-			...patch.sidebar
-		} : current.sidebar
-	});
-}
-const OrganizationLogoVariantSchema = zod.z.enum(["light", "dark"]);
-const OrganizationSidebarBrandingSchema = zod.z.object({
-	customLogoEnabled: zod.z.boolean(),
-	customLogoExplicitlyDisabled: zod.z.boolean(),
-	logoLightUrl: zod.z.url().nullable(),
-	logoDarkUrl: zod.z.url().nullable(),
-	logoHeightPx: zod.z.number().int().min(14).max(32)
-});
-const OrganizationSidebarBrandingPatchSchema = zod.z.object({
-	customLogoEnabled: zod.z.boolean().optional(),
-	customLogoExplicitlyDisabled: zod.z.boolean().optional(),
-	logoLightStorageKey: zod.z.string().min(1).nullable().optional(),
-	logoDarkStorageKey: zod.z.string().min(1).nullable().optional(),
-	logoHeightPx: zod.z.number().int().min(14).max(32).optional()
-}).refine((value) => value.customLogoEnabled !== void 0 || value.customLogoExplicitlyDisabled !== void 0 || value.logoLightStorageKey !== void 0 || value.logoDarkStorageKey !== void 0 || value.logoHeightPx !== void 0, { message: "At least one branding field is required" });
-const PresignOrgLogoRequestSchema = zod.z.object({
-	variant: OrganizationLogoVariantSchema,
-	contentType: zod.z.string().trim().min(1)
-});
-const PresignOrgLogoResponseSchema = zod.z.object({
-	uploadUrl: zod.z.url(),
-	storageKey: zod.z.string().min(1)
-});
-const ProjectArtifactStatusSchema = zod.z.enum(["pending", "ready"]);
-const isoDateTime$1 = zod.z.string().datetime();
-const ProjectArtifactSchema = zod.z.object({
-	id: zod.z.string(),
-	projectId: zod.z.string(),
-	storageKey: zod.z.string(),
-	status: ProjectArtifactStatusSchema,
-	createdAt: isoDateTime$1,
-	updatedAt: isoDateTime$1
-});
-const CreateProjectArtifactResponseSchema = zod.z.object({
-	artifact: ProjectArtifactSchema,
-	uploadUrl: zod.z.string().url(),
-	expiresInSeconds: zod.z.number().int().positive()
-});
-const CompleteProjectArtifactResponseSchema = zod.z.object({
-	artifact: ProjectArtifactSchema,
-	project: ProjectSchema
-});
-const DownloadActiveProjectArtifactResponseSchema = zod.z.object({
-	artifactId: zod.z.string(),
-	downloadUrl: zod.z.string().url(),
-	expiresInSeconds: zod.z.number().int().positive()
-});
-const ProjectDeploymentSchema = zod.z.object({
-	id: zod.z.string(),
-	projectId: zod.z.string(),
-	version: zod.z.number().int().positive(),
-	deployedBy: zod.z.string().nullable(),
-	deployedByEmail: zod.z.string().optional(),
-	deployedByAvatarUrl: zod.z.string().optional(),
-	createdAt: isoDateTime$1,
-	active: zod.z.boolean()
-});
-const ListProjectDeploymentsResponseSchema = zod.z.object({ deployments: zod.z.array(ProjectDeploymentSchema) });
-const PLATFORM_RESOURCE_UNSUPPORTED_TEXT = "Not Supported";
-const optionalCount = zod.z.number().int().nonnegative().nullable().optional();
-const optionalTimestamp = zod.z.string().nullable().optional();
-const AgentSummarySchema = zod.z.object({
-	id: zod.z.string().min(1),
-	slug: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	projectId: zod.z.string().min(1),
-	updatedAt: zod.z.string().min(1),
-	description: zod.z.string().optional(),
-	sourcePath: zod.z.string().min(1).optional(),
-	model: zod.z.string().optional(),
-	toolCount: optionalCount,
-	credentialCount: optionalCount,
-	lastRunAt: optionalTimestamp
-});
-const WorkflowSummarySchema = zod.z.object({
-	id: zod.z.string().min(1),
-	slug: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	projectId: zod.z.string().min(1),
-	updatedAt: zod.z.string().min(1),
-	description: zod.z.string().optional(),
-	sourcePath: zod.z.string().min(1).optional(),
-	lastRunAt: optionalTimestamp
-});
-const SkillSummarySchema = zod.z.object({
-	id: zod.z.string().min(1),
-	slug: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	projectId: zod.z.string().min(1),
-	updatedAt: zod.z.string().min(1),
-	description: zod.z.string().optional(),
-	sourcePath: zod.z.string().min(1).optional()
-});
-const AgentSummaryListResponseSchema = zod.z.array(AgentSummarySchema);
-const AgentSummaryDetailResponseSchema = AgentSummarySchema.nullable();
-const WorkflowSummaryListResponseSchema = zod.z.array(WorkflowSummarySchema);
-const WorkflowSummaryDetailResponseSchema = WorkflowSummarySchema.nullable();
-const SkillSummaryListResponseSchema = zod.z.array(SkillSummarySchema);
-const SkillSummaryDetailResponseSchema = SkillSummarySchema.nullable();
-const RecentResourceKindSchema = zod.z.enum([
-	"agent",
-	"workflow",
-	"skill"
-]);
-const RecentResourceSourceSchema = zod.z.enum(["owned", "shared"]);
-const RecentResourceSchema = zod.z.object({
-	id: zod.z.string().min(1),
-	resourceKind: RecentResourceKindSchema,
-	resourceId: zod.z.string().min(1),
-	name: zod.z.string().min(1),
-	description: zod.z.string().optional(),
-	projectId: zod.z.string().min(1),
-	projectName: zod.z.string().min(1),
-	sourcePath: zod.z.string().min(1).optional(),
-	source: RecentResourceSourceSchema,
-	lastOpenedAt: zod.z.string().min(1),
-	lastModifiedAt: zod.z.string().min(1)
-});
-const RecentResourceListResponseSchema = zod.z.array(RecentResourceSchema);
-const isoDateTime = zod.z.string().datetime();
-const sha256Hex = zod.z.string().regex(/^[a-f0-9]{64}$/, "Expected a lowercase hex sha256 digest");
-/**
-* A single entry in a deploy's file tree, as served to the dashboard. Carries
-* no contents: `id` is a stable, path-derived handle used for selection and
-* `?file=` deep links; `hash` is the content address used to fetch the bytes
-* lazily and to cache them immutably in the browser.
-*/
-const ProjectFileSummarySchema = zod.z.object({
-	id: zod.z.string(),
-	path: zod.z.string().min(1),
-	hash: sha256Hex
-});
-/** Maps a runtime resource slug (agent/workflow/skill) to its source file path. */
-const ProjectSourceResourceRefSchema = zod.z.object({
-	slug: zod.z.string().min(1),
-	path: zod.z.string().min(1)
-});
-const ProjectSourceResourcesSchema = zod.z.object({
-	agents: zod.z.array(ProjectSourceResourceRefSchema).default([]),
-	workflows: zod.z.array(ProjectSourceResourceRefSchema).default([]),
-	skills: zod.z.array(ProjectSourceResourceRefSchema).default([])
-});
-const emptyResources = () => ({
-	agents: [],
-	workflows: [],
-	skills: []
-});
-/** Response for the file-tree listing of a project's active deploy. */
-const ListProjectFilesResponseSchema = zod.z.object({
-	artifactId: zod.z.string().nullable(),
-	files: zod.z.array(ProjectFileSummarySchema),
-	resources: ProjectSourceResourcesSchema.default(emptyResources())
-});
-zod.z.object({
-	path: zod.z.string().min(1),
-	contents: zod.z.string(),
-	hash: sha256Hex
-});
-/** A blob the CLI may need to upload, keyed by content hash. */
-const SourceBlobRefSchema = zod.z.object({
-	hash: sha256Hex,
-	size: zod.z.number().int().nonnegative()
-});
-/** Request: ask the platform which blobs are missing and get presigned PUTs. */
-const PresignProjectSourceRequestSchema = zod.z.object({ blobs: zod.z.array(SourceBlobRefSchema) });
-const PresignedBlobUploadSchema = zod.z.object({
-	hash: sha256Hex,
-	url: zod.z.string().url()
-});
-/** Response: presigned PUTs for the subset of blobs not already stored. */
-const PresignProjectSourceResponseSchema = zod.z.object({ uploads: zod.z.array(PresignedBlobUploadSchema) });
-/** A file reference in a manifest upload: where the path's content lives. */
-const ManifestFileRefSchema = zod.z.object({
-	path: zod.z.string().min(1),
-	hash: sha256Hex
-});
-/** Request body the CLI sends to finalize a deploy's source manifest. */
-const UploadProjectSourceManifestRequestSchema = zod.z.object({ files: zod.z.array(ManifestFileRefSchema) });
-const UploadProjectSourceResponseSchema = zod.z.object({
-	ok: zod.z.literal(true),
-	fileCount: zod.z.number().int().nonnegative()
-});
-/** A file entry as persisted in the stored manifest (path-derived id added). */
-const StoredManifestFileSchema = zod.z.object({
-	id: zod.z.string(),
-	path: zod.z.string().min(1),
-	hash: sha256Hex
-});
-/** The immutable per-deploy manifest persisted to object storage. */
-const StoredProjectSourceManifestSchema = zod.z.object({
-	files: zod.z.array(StoredManifestFileSchema),
-	generatedAt: isoDateTime
-});
-/** Stable, path-derived file id (used by the web for selection + deep links). */
-function projectFileId(path) {
-	return `file-${path.trim().replace(/^\.?\/+/, "").replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "").toLowerCase()}`;
-}
-function mapOrganization(row) {
-	return OrganizationSchema.parse({
-		id: row.id,
-		name: row.name,
-		slug: row.slug,
-		createdAt: row.createdAt.toISOString(),
-		updatedAt: row.updatedAt.toISOString()
-	});
-}
-function mapProject(row) {
-	return ProjectSchema.parse({
-		id: row.id,
-		organizationId: row.organizationId,
-		name: row.name,
-		slug: row.slug,
-		description: row.description,
-		status: row.status,
-		baseUrl: row.baseUrl,
-		runtimeId: row.runtimeId,
-		lastError: row.lastError,
-		createdAt: row.createdAt.toISOString(),
-		updatedAt: row.updatedAt.toISOString()
-	});
-}
-function mapUserOrganization(row) {
-	return UserOrganizationSchema.parse({
-		organization: mapOrganization(row.organization),
-		role: row.role
-	});
-}
-function mapOrganizationMember(row) {
-	return OrganizationMemberSchema.parse({
-		id: row.id,
-		name: row.name,
-		email: row.email,
-		role: row.role,
-		status: row.status,
-		...row.image ? { avatarUrl: row.image } : {},
-		joinedAt: row.createdAt.toISOString(),
-		lastActiveAt: null
-	});
-}
-function mapOrganizationInvitation(row) {
-	return OrganizationInvitationSchema.parse({
-		id: row.id,
-		organizationName: row.organizationName,
-		organizationSlug: row.organizationSlug,
-		role: row.role,
-		...row.invitedByName ? { invitedByName: row.invitedByName } : {},
-		...row.invitedByEmail ? { invitedByEmail: row.invitedByEmail } : {}
-	});
-}
-function mapProjectMember(row, options) {
-	return ProjectMemberSchema.parse({
-		id: row.id,
-		projectId: row.projectId,
-		name: row.name,
-		email: row.email,
-		role: row.role,
-		status: row.status,
-		image: row.image,
-		createdAt: row.createdAt.toISOString(),
-		isCurrentUser: options?.isCurrentUser
-	});
-}
-function mapProjectSettings(row) {
-	return {
-		description: row.description ?? "",
-		defaultRole: row.defaultMemberRole,
-		invitePermission: row.invitePermission
-	};
-}
-function mapProjectArtifact(row) {
-	return ProjectArtifactSchema.parse({
-		id: row.id,
-		projectId: row.projectId,
-		storageKey: row.storageKey,
-		status: row.status,
-		createdAt: row.createdAt.toISOString(),
-		updatedAt: row.updatedAt.toISOString()
-	});
-}
-function mapProjectDeployment(row) {
-	return ProjectDeploymentSchema.parse({
-		id: row.id,
-		projectId: row.projectId,
-		version: row.version,
-		deployedBy: row.deployedByName,
-		...row.deployedByEmail ? { deployedByEmail: row.deployedByEmail } : {},
-		...row.deployedByAvatarUrl ? { deployedByAvatarUrl: row.deployedByAvatarUrl } : {},
-		createdAt: row.createdAt.toISOString(),
-		active: row.active
-	});
-}
-//#endregion
-//#region ../../packages/storage/dist/index.mjs
-function readEnv$1(env, ...keys) {
-	for (const key of keys) {
-		const value = env[key]?.trim();
-		if (value) return value;
-	}
-}
-function requireEnv(env, keys) {
-	const candidates = Array.isArray(keys) ? keys : [keys];
-	const value = readEnv$1(env, ...candidates);
-	if (!value) throw new Error(`${candidates[0]} is required`);
-	return value;
-}
-/** Admin S3 credentials for storage plugins (bucket is per-org, not from env). */
-function storageAdminConfigFromEnv(env = process.env) {
-	const accessKeyId = requireEnv(env, ["STORAGE_ACCESS_KEY_ID", "AWS_ACCESS_KEY_ID"]);
-	const secretAccessKey = requireEnv(env, ["STORAGE_SECRET_ACCESS_KEY", "AWS_SECRET_ACCESS_KEY"]);
-	const endpoint = requireEnv(env, [
-		"STORAGE_ENDPOINT",
-		"AWS_ENDPOINT_URL_S3",
-		"AWS_S3_ENDPOINT"
-	]);
-	return {
-		region: readEnv$1(env, "STORAGE_REGION", "AWS_REGION") ?? "us-east-1",
-		accessKeyId,
-		secretAccessKey,
-		endpoint,
-		forcePathStyle: env.STORAGE_FORCE_PATH_STYLE === void 0 ? true : env.STORAGE_FORCE_PATH_STYLE === "true"
-	};
-}
-const DEFAULT_PRESIGN_TTL_SECONDS = 900;
-function createStorage(config) {
-	const client = new _aws_sdk_client_s3.S3Client(toClientConfig(config));
-	return {
-		async putObject(input) {
-			await client.send(new _aws_sdk_client_s3.PutObjectCommand({
-				Bucket: config.bucket,
-				Key: input.key,
-				Body: input.body,
-				ContentType: input.contentType
-			}));
-		},
-		async getObject(key) {
-			const response = await client.send(new _aws_sdk_client_s3.GetObjectCommand({
-				Bucket: config.bucket,
-				Key: key
-			}));
-			if (!response.Body) throw new Error(`Object body missing for key ${key}`);
-			return response.Body.transformToByteArray();
-		},
-		async headObject(key) {
-			try {
-				return { contentLength: (await client.send(new _aws_sdk_client_s3.HeadObjectCommand({
-					Bucket: config.bucket,
-					Key: key
-				}))).ContentLength ?? 0 };
-			} catch (error) {
-				if (isNotFoundError(error)) return;
-				throw error;
-			}
-		},
-		async presignGet(input) {
-			return (0, _aws_sdk_s3_request_presigner.getSignedUrl)(client, new _aws_sdk_client_s3.GetObjectCommand({
-				Bucket: config.bucket,
-				Key: input.key
-			}), { expiresIn: input.expiresInSeconds ?? DEFAULT_PRESIGN_TTL_SECONDS });
-		},
-		async presignPut(input) {
-			return (0, _aws_sdk_s3_request_presigner.getSignedUrl)(client, new _aws_sdk_client_s3.PutObjectCommand({
-				Bucket: config.bucket,
-				Key: input.key,
-				ContentType: input.contentType ?? "application/gzip"
-			}), { expiresIn: input.expiresInSeconds ?? DEFAULT_PRESIGN_TTL_SECONDS });
-		},
-		async deleteObject(key) {
-			await client.send(new _aws_sdk_client_s3.DeleteObjectCommand({
-				Bucket: config.bucket,
-				Key: key
-			}));
-		}
-	};
-}
-function toClientConfig(config) {
-	return {
-		region: config.region,
-		credentials: {
-			accessKeyId: config.accessKeyId,
-			secretAccessKey: config.secretAccessKey
-		},
-		endpoint: config.endpoint,
-		forcePathStyle: config.forcePathStyle
-	};
-}
-function isNotFoundError(error) {
-	if (!error || typeof error !== "object") return false;
-	const name = "name" in error ? String(error.name) : "";
-	const status = "$metadata" in error ? error.$metadata : void 0;
-	return name === "NotFound" || name === "NoSuchKey" || status?.httpStatusCode === 404;
-}
-var RouteManifestNotFoundError = class extends Error {
-	constructor(message = `Route manifest missing in artifact (${ROUTE_MANIFEST_REL_PATH})`) {
-		super(message);
-		this.name = "RouteManifestNotFoundError";
-	}
-};
-/** Read `.keystroke/route-manifest.json` from a packed project artifact tarball. */
-function extractRouteManifestFromArtifact(archive) {
-	const tempDir = (0, node_fs.mkdtempSync)((0, node_path.join)((0, node_os.tmpdir)(), "keystroke-artifact-"));
-	const archivePath = (0, node_path.join)(tempDir, "artifact.tgz");
-	try {
-		(0, node_fs.writeFileSync)(archivePath, archive);
-		if ((0, node_child_process.spawnSync)("tar", [
-			"-xzf",
-			archivePath,
-			"-C",
-			tempDir,
-			"dist/.keystroke/route-manifest.json"
-		], { encoding: "utf8" }).status !== 0) throw new RouteManifestNotFoundError();
-		const raw = (0, node_fs.readFileSync)((0, node_path.join)(tempDir, ROUTE_MANIFEST_REL_PATH), "utf8");
-		return JSON.parse(raw);
-	} catch (error) {
-		if (error instanceof RouteManifestNotFoundError) throw error;
-		throw new RouteManifestNotFoundError(error instanceof Error ? error.message : "Failed to extract route manifest");
-	} finally {
-		(0, node_fs.rmSync)(tempDir, {
-			recursive: true,
-			force: true
-		});
-	}
-}
-/** Object key for a built project artifact tarball. */
-function projectArtifactKey(projectId, version) {
-	return `projects/${projectId}/artifacts/${version}.tgz`;
-}
-const SHA256_HEX = /^[a-f0-9]{64}$/;
-/** True when `hash` is a lowercase hex sha256 digest (64 chars). */
-function isSourceBlobHash(hash) {
-	return SHA256_HEX.test(hash);
-}
-/**
-* Content-addressed key for a single source file's contents, deduped across all
-* of a project's deploys. `hash` is a lowercase hex sha256 of the file bytes.
-*/
-function projectSourceBlobKey(projectId, hash) {
-	if (!isSourceBlobHash(hash)) throw new Error("Invalid source blob hash");
-	return `projects/${projectId}/sources/blobs/${hash}`;
-}
-const AVATAR_EXTENSION = /^[a-z0-9]+$/;
-/** Object key for a user's custom profile avatar in the shared keystroke-users bucket. */
-function userAvatarStorageKey(userId, extension) {
-	const ext = extension.replace(/^\./, "").toLowerCase();
-	if (!AVATAR_EXTENSION.test(ext)) throw new Error("Invalid avatar extension");
-	return `avatars/${userId}/avatar.${ext}`;
-}
-/** True when `key` is the canonical avatar object for `userId`. */
-function isUserAvatarStorageKey(key, userId) {
-	const prefix = `avatars/${userId}/avatar.`;
-	if (!key.startsWith(prefix)) return false;
-	const ext = key.slice(prefix.length);
-	return AVATAR_EXTENSION.test(ext);
-}
-/** Object key for an org logo in the shared keystroke-assets bucket. */
-function orgLogoStorageKey(organizationId, variant, extension) {
-	const ext = extension.replace(/^\./, "").toLowerCase();
-	if (!AVATAR_EXTENSION.test(ext)) throw new Error("Invalid org logo extension");
-	return `org-logos/${organizationId}/logo-${variant}.${ext}`;
-}
-/** True when `key` is the canonical logo object for `organizationId` and `variant`. */
-function isOrgLogoStorageKey(key, organizationId, variant) {
-	const prefix = `org-logos/${organizationId}/logo-${variant}.`;
-	if (!key.startsWith(prefix)) return false;
-	const ext = key.slice(prefix.length);
-	return AVATAR_EXTENSION.test(ext);
-}
-function isBucketAlreadyExistsError(error) {
-	if (!error || typeof error !== "object") return false;
-	const name = "name" in error ? String(error.name) : "";
-	const code = "Code" in error ? String(error.Code) : "";
-	return name === "BucketAlreadyOwnedByYou" || code === "BucketAlreadyOwnedByYou" || name === "BucketAlreadyExists" || code === "BucketAlreadyExists";
-}
-/** Shared bucket for cross-org public assets (avatars, org sidebar logos). */
-const KEYSTROKE_ASSETS_BUCKET = "keystroke-assets";
-/** Env var for the browser-facing origin of public asset objects (no trailing slash). */
-const KEYSTROKE_ASSETS_PUBLIC_URL_BASE_ENV = "KEYSTROKE_ASSETS_PUBLIC_URL_BASE";
-const KEYSTROKE_ASSETS_AVATAR_PREFIX = "avatars/";
-const KEYSTROKE_ASSETS_ORG_LOGO_PREFIX = "org-logos/";
-function readEnv(env, key) {
-	return env[key]?.trim() || void 0;
-}
-/** Default path-style base when `KEYSTROKE_ASSETS_PUBLIC_URL_BASE` is unset (local MinIO). */
-function defaultKeystrokeAssetsPublicUrlBase(env = process.env) {
-	return `${storageAdminConfigFromEnv(env).endpoint.replace(/\/+$/, "")}/${KEYSTROKE_ASSETS_BUCKET}`;
-}
-/** Public URL prefix for asset objects — configured base or local path-style default. */
-function keystrokeAssetsPublicUrlBase(env = process.env) {
-	const configured = readEnv(env, KEYSTROKE_ASSETS_PUBLIC_URL_BASE_ENV);
-	if (configured) return configured.replace(/\/+$/, "");
-	return defaultKeystrokeAssetsPublicUrlBase(env);
-}
-function keystrokeAssetsPublicUrlPrefixes(env = process.env) {
-	const prefixes = [keystrokeAssetsPublicUrlBase(env)];
-	if (readEnv(env, "KEYSTROKE_ASSETS_PUBLIC_URL_BASE")) prefixes.push(defaultKeystrokeAssetsPublicUrlBase(env));
-	return [...new Set(prefixes)];
-}
-function createAssetsStorageClient(env = process.env) {
-	return createStorage({
-		...storageAdminConfigFromEnv(env),
-		bucket: KEYSTROKE_ASSETS_BUCKET
-	});
-}
-/** Stable public URL for an object in the keystroke-assets bucket. */
-function publicKeystrokeAssetsObjectUrl(key, env = process.env) {
-	return `${keystrokeAssetsPublicUrlBase(env)}/${key}`;
-}
-/** Extract the object key from a public keystroke-assets URL when it matches `requiredPrefix`. */
-function keystrokeAssetsKeyFromPublicUrl(url, requiredPrefix, env = process.env) {
-	for (const prefix of keystrokeAssetsPublicUrlPrefixes(env)) {
-		const normalizedPrefix = `${prefix.replace(/\/+$/, "")}/`;
-		if (!url.startsWith(normalizedPrefix)) continue;
-		const key = decodeURIComponent(url.slice(normalizedPrefix.length).split("?")[0] ?? "");
-		if (key.startsWith(requiredPrefix)) return key;
-	}
-	return null;
-}
-function isKeystrokeAssetsAvatarPublicUrl(url, env = process.env) {
-	return keystrokeAssetsKeyFromPublicUrl(url, KEYSTROKE_ASSETS_AVATAR_PREFIX, env) !== null;
-}
-function keystrokeAssetsAvatarKeyFromPublicUrl(url, env = process.env) {
-	return keystrokeAssetsKeyFromPublicUrl(url, KEYSTROKE_ASSETS_AVATAR_PREFIX, env);
-}
-function isKeystrokeAssetsOrgLogoPublicUrl(url, env = process.env) {
-	return keystrokeAssetsKeyFromPublicUrl(url, KEYSTROKE_ASSETS_ORG_LOGO_PREFIX, env) !== null;
-}
-function keystrokeAssetsOrgLogoKeyFromPublicUrl(url, env = process.env) {
-	return keystrokeAssetsKeyFromPublicUrl(url, KEYSTROKE_ASSETS_ORG_LOGO_PREFIX, env);
-}
-async function ensureKeystrokeAssetsBucket(env = process.env) {
-	const adminConfig = storageAdminConfigFromEnv(env);
-	const adminClient = new _aws_sdk_client_s3.S3Client({
-		region: adminConfig.region,
-		credentials: {
-			accessKeyId: adminConfig.accessKeyId,
-			secretAccessKey: adminConfig.secretAccessKey
-		},
-		endpoint: adminConfig.endpoint,
-		forcePathStyle: adminConfig.forcePathStyle
-	});
-	await createAssetsBucketIfNeeded(adminClient, KEYSTROKE_ASSETS_BUCKET);
-	await applyPublicAssetsBucketAcl(adminClient, KEYSTROKE_ASSETS_BUCKET);
-	await applyPublicAssetsBucketPolicy(adminClient, KEYSTROKE_ASSETS_BUCKET);
-}
-async function createAssetsBucketIfNeeded(adminClient, bucket) {
-	try {
-		await adminClient.send(new _aws_sdk_client_s3.CreateBucketCommand({
-			Bucket: bucket,
-			ACL: "public-read"
-		}));
-		return;
-	} catch (error) {
-		if (isBucketAlreadyExistsError(error)) return;
-	}
-	try {
-		await adminClient.send(new _aws_sdk_client_s3.CreateBucketCommand({ Bucket: bucket }));
-	} catch (error) {
-		if (!isBucketAlreadyExistsError(error)) throw error;
-	}
-}
-async function applyPublicAssetsBucketAcl(adminClient, bucket) {
-	try {
-		await adminClient.send(new _aws_sdk_client_s3.PutBucketAclCommand({
-			Bucket: bucket,
-			ACL: "public-read"
-		}));
-	} catch (error) {
-		if (!isUnsupportedStorageFeatureError(error)) console.warn("[storage] PutBucketAcl failed (continuing):", error);
-	}
-}
-async function applyPublicAssetsBucketPolicy(adminClient, bucket) {
-	try {
-		await adminClient.send(new _aws_sdk_client_s3.PutBucketPolicyCommand({
-			Bucket: bucket,
-			Policy: JSON.stringify({
-				Version: "2012-10-17",
-				Statement: [{
-					Effect: "Allow",
-					Principal: "*",
-					Action: ["s3:GetObject"],
-					Resource: [`arn:aws:s3:::${bucket}/${KEYSTROKE_ASSETS_AVATAR_PREFIX}*`, `arn:aws:s3:::${bucket}/${KEYSTROKE_ASSETS_ORG_LOGO_PREFIX}*`]
-				}]
-			})
-		}));
-	} catch (error) {
-		if (!isUnsupportedStorageFeatureError(error)) console.warn("[storage] PutBucketPolicy failed (continuing):", error);
-	}
-}
-function isUnsupportedStorageFeatureError(error) {
-	if (!error || typeof error !== "object") return false;
-	const name = "name" in error ? String(error.name) : "";
-	const code = "Code" in error ? String(error.Code) : "";
-	return name === "NotImplemented" || code === "NotImplemented" || code === "NotSupported";
-}
-const DEFAULT_BUCKET_NAME_PREFIX = "ks";
-function orgStorageBucketName(input, prefix = DEFAULT_BUCKET_NAME_PREFIX) {
-	return `${prefix.trim().replace(/-+$/g, "")}-${input.organizationId.toLowerCase()}`;
-}
-function minioStoragePlugin(options = {}) {
-	const adminConfig = storageAdminConfigFromEnv(options.env ?? process.env);
-	const adminClient = new _aws_sdk_client_s3.S3Client({
-		region: adminConfig.region,
-		credentials: {
-			accessKeyId: adminConfig.accessKeyId,
-			secretAccessKey: adminConfig.secretAccessKey
-		},
-		endpoint: adminConfig.endpoint,
-		forcePathStyle: adminConfig.forcePathStyle
-	});
-	return {
-		async provisionOrganization(input) {
-			const bucket = orgStorageBucketName(input, options.bucketNamePrefix);
-			try {
-				await adminClient.send(new _aws_sdk_client_s3.CreateBucketCommand({ Bucket: bucket }));
-			} catch (error) {
-				if (!isBucketAlreadyExistsError(error)) throw error;
-			}
-			return {
-				bucket,
-				endpoint: adminConfig.endpoint,
-				accessKeyId: adminConfig.accessKeyId,
-				secretAccessKey: adminConfig.secretAccessKey,
-				region: adminConfig.region,
-				forcePathStyle: adminConfig.forcePathStyle
-			};
-		},
-		async deprovisionOrganization(result) {
-			const client = new _aws_sdk_client_s3.S3Client({
-				region: result.region ?? adminConfig.region,
-				credentials: {
-					accessKeyId: result.accessKeyId,
-					secretAccessKey: result.secretAccessKey
-				},
-				endpoint: result.endpoint,
-				forcePathStyle: result.forcePathStyle ?? true
-			});
-			if (((await client.send(new _aws_sdk_client_s3.ListObjectsV2Command({
-				Bucket: result.bucket,
-				MaxKeys: 1
-			}))).KeyCount ?? 0) > 0) throw new Error(`Refusing to delete non-empty storage bucket ${result.bucket}`);
-			await client.send(new _aws_sdk_client_s3.DeleteBucketCommand({ Bucket: result.bucket }));
-		}
-	};
-}
-//#endregion
-Object.defineProperty(exports, "ACTIVE_ORG_HEADER", {
-	enumerable: true,
-	get: function() {
-		return ACTIVE_ORG_HEADER;
-	}
-});
-Object.defineProperty(exports, "AcceptOrganizationInvitationResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return AcceptOrganizationInvitationResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ActiveOrganizationResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ActiveOrganizationResponseSchema;
-	}
-});
-Object.defineProperty(exports, "AgentSummaryDetailResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return AgentSummaryDetailResponseSchema;
-	}
-});
-Object.defineProperty(exports, "AgentSummaryListResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return AgentSummaryListResponseSchema;
-	}
-});
-Object.defineProperty(exports, "AgentSummarySchema", {
-	enumerable: true,
-	get: function() {
-		return AgentSummarySchema;
-	}
-});
-Object.defineProperty(exports, "CompleteProjectArtifactResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return CompleteProjectArtifactResponseSchema;
-	}
-});
-Object.defineProperty(exports, "CreateApiKeyRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateApiKeyRequestSchema;
-	}
-});
-Object.defineProperty(exports, "CreateApiKeyResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateApiKeyResponseSchema;
-	}
-});
-Object.defineProperty(exports, "CreateCredentialsRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateCredentialsRequestSchema;
-	}
-});
-Object.defineProperty(exports, "CreateCredentialsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateCredentialsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "CreateOrganizationRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateOrganizationRequestSchema;
-	}
-});
-Object.defineProperty(exports, "CreateOrganizationResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateOrganizationResponseSchema;
-	}
-});
-Object.defineProperty(exports, "CreateProjectArtifactResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateProjectArtifactResponseSchema;
-	}
-});
-Object.defineProperty(exports, "CreateProjectRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateProjectRequestSchema;
-	}
-});
-Object.defineProperty(exports, "CreateProjectResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return CreateProjectResponseSchema;
-	}
-});
-Object.defineProperty(exports, "DeclineOrganizationInvitationResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return DeclineOrganizationInvitationResponseSchema;
-	}
-});
-Object.defineProperty(exports, "DownloadActiveProjectArtifactResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return DownloadActiveProjectArtifactResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ErrorResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ErrorResponseSchema;
-	}
-});
-Object.defineProperty(exports, "GetCredentialResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return GetCredentialResponseSchema;
-	}
-});
-Object.defineProperty(exports, "HistoryRunCancelResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return HistoryRunCancelResponseSchema;
-	}
-});
-Object.defineProperty(exports, "HistoryRunDetailResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return HistoryRunDetailResponseSchema;
-	}
-});
-Object.defineProperty(exports, "HistoryRunListQuerySchema", {
-	enumerable: true,
-	get: function() {
-		return HistoryRunListQuerySchema;
-	}
-});
-Object.defineProperty(exports, "HistoryRunListResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return HistoryRunListResponseSchema;
-	}
-});
-Object.defineProperty(exports, "InviteOrganizationMembersRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return InviteOrganizationMembersRequestSchema;
-	}
-});
-Object.defineProperty(exports, "InviteOrganizationMembersResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return InviteOrganizationMembersResponseSchema;
-	}
-});
-Object.defineProperty(exports, "InviteProjectMembersRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return InviteProjectMembersRequestSchema;
-	}
-});
-Object.defineProperty(exports, "InviteProjectMembersResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return InviteProjectMembersResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListApiKeysResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListApiKeysResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListAppsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListAppsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListCredentialsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListCredentialsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListOrganizationInvitationsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListOrganizationInvitationsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListOrganizationMembersResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListOrganizationMembersResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListOrganizationsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListOrganizationsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListProjectDeploymentsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListProjectDeploymentsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListProjectFilesResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListProjectFilesResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListProjectMembersResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListProjectMembersResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListProjectMetricsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListProjectMetricsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ListProjectsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ListProjectsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "OrganizationSidebarBrandingPatchSchema", {
-	enumerable: true,
-	get: function() {
-		return OrganizationSidebarBrandingPatchSchema;
-	}
-});
-Object.defineProperty(exports, "OrganizationSidebarBrandingSchema", {
-	enumerable: true,
-	get: function() {
-		return OrganizationSidebarBrandingSchema;
-	}
-});
-Object.defineProperty(exports, "PLATFORM_RESOURCE_UNSUPPORTED_TEXT", {
-	enumerable: true,
-	get: function() {
-		return PLATFORM_RESOURCE_UNSUPPORTED_TEXT;
-	}
-});
-Object.defineProperty(exports, "PROJECT_SLUG_TAKEN_MESSAGE", {
-	enumerable: true,
-	get: function() {
-		return PROJECT_SLUG_TAKEN_MESSAGE;
-	}
-});
-Object.defineProperty(exports, "PresignOrgLogoRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return PresignOrgLogoRequestSchema;
-	}
-});
-Object.defineProperty(exports, "PresignOrgLogoResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return PresignOrgLogoResponseSchema;
-	}
-});
-Object.defineProperty(exports, "PresignProjectSourceRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return PresignProjectSourceRequestSchema;
-	}
-});
-Object.defineProperty(exports, "PresignProjectSourceResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return PresignProjectSourceResponseSchema;
-	}
-});
-Object.defineProperty(exports, "PresignUserAvatarRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return PresignUserAvatarRequestSchema;
-	}
-});
-Object.defineProperty(exports, "PresignUserAvatarResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return PresignUserAvatarResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ProjectReachabilityResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ProjectReachabilityResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ProjectResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ProjectResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ProjectSettingsResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ProjectSettingsResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ProjectSlugAvailabilityQuerySchema", {
-	enumerable: true,
-	get: function() {
-		return ProjectSlugAvailabilityQuerySchema;
-	}
-});
-Object.defineProperty(exports, "ProjectSlugAvailabilityResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return ProjectSlugAvailabilityResponseSchema;
-	}
-});
-Object.defineProperty(exports, "ProjectSourceResourcesSchema", {
-	enumerable: true,
-	get: function() {
-		return ProjectSourceResourcesSchema;
-	}
-});
-Object.defineProperty(exports, "RecentResourceListResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return RecentResourceListResponseSchema;
-	}
-});
-Object.defineProperty(exports, "RecentResourceSchema", {
-	enumerable: true,
-	get: function() {
-		return RecentResourceSchema;
-	}
-});
-Object.defineProperty(exports, "RouteManifestNotFoundError", {
-	enumerable: true,
-	get: function() {
-		return RouteManifestNotFoundError;
-	}
-});
-Object.defineProperty(exports, "SkillSummaryDetailResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return SkillSummaryDetailResponseSchema;
-	}
-});
-Object.defineProperty(exports, "SkillSummaryListResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return SkillSummaryListResponseSchema;
-	}
-});
-Object.defineProperty(exports, "SkillSummarySchema", {
-	enumerable: true,
-	get: function() {
-		return SkillSummarySchema;
-	}
-});
-Object.defineProperty(exports, "SlugAvailabilityQuerySchema", {
-	enumerable: true,
-	get: function() {
-		return SlugAvailabilityQuerySchema;
-	}
-});
-Object.defineProperty(exports, "SlugAvailabilityResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return SlugAvailabilityResponseSchema;
-	}
-});
-Object.defineProperty(exports, "StoredProjectSourceManifestSchema", {
-	enumerable: true,
-	get: function() {
-		return StoredProjectSourceManifestSchema;
-	}
-});
-Object.defineProperty(exports, "SubmitTeamRequestRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return SubmitTeamRequestRequestSchema;
-	}
-});
-Object.defineProperty(exports, "SubmitTeamRequestResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return SubmitTeamRequestResponseSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateCredentialRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateCredentialRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateOrganizationMemberRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateOrganizationMemberRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateOrganizationMemberResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateOrganizationMemberResponseSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateOrganizationRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateOrganizationRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateProjectMemberRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateProjectMemberRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateProjectMemberResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateProjectMemberResponseSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateProjectRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateProjectRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UpdateProjectSettingsRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UpdateProjectSettingsRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UploadProjectSourceManifestRequestSchema", {
-	enumerable: true,
-	get: function() {
-		return UploadProjectSourceManifestRequestSchema;
-	}
-});
-Object.defineProperty(exports, "UploadProjectSourceResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return UploadProjectSourceResponseSchema;
-	}
-});
-Object.defineProperty(exports, "UserAvatarPatchSchema", {
-	enumerable: true,
-	get: function() {
-		return UserAvatarPatchSchema;
-	}
-});
-Object.defineProperty(exports, "UserAvatarSchema", {
-	enumerable: true,
-	get: function() {
-		return UserAvatarSchema;
-	}
-});
-Object.defineProperty(exports, "UserPreferencesPatchSchema", {
-	enumerable: true,
-	get: function() {
-		return UserPreferencesPatchSchema;
-	}
-});
-Object.defineProperty(exports, "UserPreferencesSchema", {
-	enumerable: true,
-	get: function() {
-		return UserPreferencesSchema;
-	}
-});
-Object.defineProperty(exports, "WorkflowSummaryDetailResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return WorkflowSummaryDetailResponseSchema;
-	}
-});
-Object.defineProperty(exports, "WorkflowSummaryListResponseSchema", {
-	enumerable: true,
-	get: function() {
-		return WorkflowSummaryListResponseSchema;
-	}
-});
-Object.defineProperty(exports, "WorkflowSummarySchema", {
-	enumerable: true,
-	get: function() {
-		return WorkflowSummarySchema;
-	}
-});
-Object.defineProperty(exports, "__commonJSMin", {
-	enumerable: true,
-	get: function() {
-		return __commonJSMin;
-	}
-});
-Object.defineProperty(exports, "__toESM", {
-	enumerable: true,
-	get: function() {
-		return __toESM;
-	}
-});
-Object.defineProperty(exports, "buildCredentialInstanceLabel", {
-	enumerable: true,
-	get: function() {
-		return buildCredentialInstanceLabel;
-	}
-});
-Object.defineProperty(exports, "createAssetsStorageClient", {
-	enumerable: true,
-	get: function() {
-		return createAssetsStorageClient;
-	}
-});
-Object.defineProperty(exports, "credentialInputSchema", {
-	enumerable: true,
-	get: function() {
-		return credentialInputSchema;
-	}
-});
-Object.defineProperty(exports, "defaultHostingPlugin", {
-	enumerable: true,
-	get: function() {
-		return defaultHostingPlugin;
-	}
-});
-Object.defineProperty(exports, "displayCredentialAppName", {
-	enumerable: true,
-	get: function() {
-		return displayCredentialAppName;
-	}
-});
-Object.defineProperty(exports, "ensureKeystrokeAssetsBucket", {
-	enumerable: true,
-	get: function() {
-		return ensureKeystrokeAssetsBucket;
-	}
-});
-Object.defineProperty(exports, "extractRouteManifestFromArtifact", {
-	enumerable: true,
-	get: function() {
-		return extractRouteManifestFromArtifact;
-	}
-});
-Object.defineProperty(exports, "isKeystrokeAssetsAvatarPublicUrl", {
-	enumerable: true,
-	get: function() {
-		return isKeystrokeAssetsAvatarPublicUrl;
-	}
-});
-Object.defineProperty(exports, "isKeystrokeAssetsOrgLogoPublicUrl", {
-	enumerable: true,
-	get: function() {
-		return isKeystrokeAssetsOrgLogoPublicUrl;
-	}
-});
-Object.defineProperty(exports, "isOrgLogoStorageKey", {
-	enumerable: true,
-	get: function() {
-		return isOrgLogoStorageKey;
-	}
-});
-Object.defineProperty(exports, "isUserAvatarStorageKey", {
-	enumerable: true,
-	get: function() {
-		return isUserAvatarStorageKey;
-	}
-});
-Object.defineProperty(exports, "keystrokeAssetsAvatarKeyFromPublicUrl", {
-	enumerable: true,
-	get: function() {
-		return keystrokeAssetsAvatarKeyFromPublicUrl;
-	}
-});
-Object.defineProperty(exports, "keystrokeAssetsOrgLogoKeyFromPublicUrl", {
-	enumerable: true,
-	get: function() {
-		return keystrokeAssetsOrgLogoKeyFromPublicUrl;
-	}
-});
-Object.defineProperty(exports, "listenPortFromPublicUrl", {
-	enumerable: true,
-	get: function() {
-		return listenPortFromPublicUrl;
-	}
-});
-Object.defineProperty(exports, "mapOrganizationInvitation", {
-	enumerable: true,
-	get: function() {
-		return mapOrganizationInvitation;
-	}
-});
-Object.defineProperty(exports, "mapOrganizationMember", {
-	enumerable: true,
-	get: function() {
-		return mapOrganizationMember;
-	}
-});
-Object.defineProperty(exports, "mapProject", {
-	enumerable: true,
-	get: function() {
-		return mapProject;
-	}
-});
-Object.defineProperty(exports, "mapProjectArtifact", {
-	enumerable: true,
-	get: function() {
-		return mapProjectArtifact;
-	}
-});
-Object.defineProperty(exports, "mapProjectDeployment", {
-	enumerable: true,
-	get: function() {
-		return mapProjectDeployment;
-	}
-});
-Object.defineProperty(exports, "mapProjectMember", {
-	enumerable: true,
-	get: function() {
-		return mapProjectMember;
-	}
-});
-Object.defineProperty(exports, "mapProjectSettings", {
-	enumerable: true,
-	get: function() {
-		return mapProjectSettings;
-	}
-});
-Object.defineProperty(exports, "mapUserOrganization", {
-	enumerable: true,
-	get: function() {
-		return mapUserOrganization;
-	}
-});
-Object.defineProperty(exports, "mergeUserPreferences", {
-	enumerable: true,
-	get: function() {
-		return mergeUserPreferences;
-	}
-});
-Object.defineProperty(exports, "minioStoragePlugin", {
-	enumerable: true,
-	get: function() {
-		return minioStoragePlugin;
-	}
-});
-Object.defineProperty(exports, "normalizeUserPreferences", {
-	enumerable: true,
-	get: function() {
-		return normalizeUserPreferences;
-	}
-});
-Object.defineProperty(exports, "orgLogoStorageKey", {
-	enumerable: true,
-	get: function() {
-		return orgLogoStorageKey;
-	}
-});
-Object.defineProperty(exports, "organizationInvitationAcceptPath", {
-	enumerable: true,
-	get: function() {
-		return organizationInvitationAcceptPath;
-	}
-});
-Object.defineProperty(exports, "organizationSlugErrorCodeFromMessage", {
-	enumerable: true,
-	get: function() {
-		return organizationSlugErrorCodeFromMessage;
-	}
-});
-Object.defineProperty(exports, "parseStoredRouteManifest", {
-	enumerable: true,
-	get: function() {
-		return parseStoredRouteManifest;
-	}
-});
-Object.defineProperty(exports, "pingProjectTarget", {
-	enumerable: true,
-	get: function() {
-		return pingProjectTarget;
-	}
-});
-Object.defineProperty(exports, "projectArtifactKey", {
-	enumerable: true,
-	get: function() {
-		return projectArtifactKey;
-	}
-});
-Object.defineProperty(exports, "projectFileId", {
-	enumerable: true,
-	get: function() {
-		return projectFileId;
-	}
-});
-Object.defineProperty(exports, "projectSourceBlobKey", {
-	enumerable: true,
-	get: function() {
-		return projectSourceBlobKey;
-	}
-});
-Object.defineProperty(exports, "publicKeystrokeAssetsObjectUrl", {
-	enumerable: true,
-	get: function() {
-		return publicKeystrokeAssetsObjectUrl;
-	}
-});
-Object.defineProperty(exports, "resolveUniqueCredentialInstanceLabel", {
-	enumerable: true,
-	get: function() {
-		return resolveUniqueCredentialInstanceLabel;
-	}
-});
-Object.defineProperty(exports, "userAvatarStorageKey", {
-	enumerable: true,
-	get: function() {
-		return userAvatarStorageKey;
-	}
-});
-Object.defineProperty(exports, "validationErrorResponse", {
-	enumerable: true,
-	get: function() {
-		return validationErrorResponse;
-	}
-});
-
-//# sourceMappingURL=dist-DvjFaP47.cjs.map