@keystrokehq/platform 0.1.24 → 0.1.26

package/dist/{start-Bkcu3Xyf.mjs → start-BopA4OXE.mjs}

@@ -1,21 +1,22 @@
-import { $ as CreateProjectArtifactResponseSchema, $n as mapProjectMember, $t as ProjectSlugAvailabilityResponseSchema, A as PublicHttpUrlError, An as UserPreferencesPatchSchema, At as ListProjectMembersResponseSchema, B as AgentSummarySchema, Bn as agentMemoryFileId, Bt as PROJECT_SLUG_TAKEN_MESSAGE, C as defaultSchedulerPlugin, Cn as UpdateProjectMemberResponseSchema, Ct as ListAppsResponseSchema, D as discoverGraphqlApp, Dn as UploadProjectSourceResponseSchema, Dt as ListOrganizationsResponseSchema, E as decodeOAuthState, En as UploadProjectSourceManifestRequestSchema, Et as ListOrganizationMembersResponseSchema, F as AcceptOrganizationInvitationResponseSchema, Fn as WorkspaceTriggerDetailSchema, Ft as OpenApiDiscoverRequestSchema, G as CreateApiKeyRequestSchema, Gn as displayCredentialAppName, Gt as PresignProjectSourceRequestSchema, H as AppSlugAvailabilityQuerySchema, Hn as buildCredentialInstanceLabel, Ht as PresignChatAttachmentResponseSchema, I as ActiveOrganizationResponseSchema, In as WorkspaceTriggerFileSchema, It as OpenApiDiscoverResponseSchema, J as CreateCredentialsResponseSchema, Jn as mapOrganizationInvitation, Jt as PresignUserAvatarResponseSchema, K as CreateApiKeyResponseSchema, Kn as isAllowedChatAttachmentMediaType, Kt as PresignProjectSourceResponseSchema, L as AgentMemoryFileSummarySchema, Ln as WorkspaceTriggerListResponseSchema, Lt as OrganizationSidebarBrandingPatchSchema, M as readCredentialInstanceSecret, Mn as WorkflowSummaryDetailResponseSchema, Mt as ListProjectsResponseSchema, N as setCredentialInstanceSecret, Nn as WorkflowSummaryListResponseSchema, Nt as McpDiscoverRequestSchema, O as discoverMcpApp, On as UserAvatarPatchSchema, Ot as ListProjectDeploymentsResponseSchema, P as ACTIVE_ORG_HEADER, Pn as WorkflowSummarySchema, Pt as McpDiscoverResponseSchema, Q as CreateOrganizationResponseSchema, Qn as mapProjectDeployment, Qt as ProjectSlugAvailabilityQuerySchema, R as AgentSummaryDetailResponseSchema, Rn as WorkspaceTriggerOverviewSchema, Rt as OrganizationSidebarBrandingSchema, S as createJobQueue, Sn as UpdateProjectMemberRequestSchema, St as ListApiKeysResponseSchema, T as completeMcpOAuthConnect, Tn as UpdateProjectSettingsRequestSchema, Tt as ListOrganizationInvitationsResponseSchema, U as AppSlugAvailabilityResponseSchema, Un as chatAttachmentExtension, Ut as PresignOrgLogoRequestSchema, V as AgentWorkspaceFileSummarySchema, Vn as agentWorkspaceFileId, Vt as PresignChatAttachmentRequestSchema, W as CompleteProjectArtifactResponseSchema, Wn as deriveCredentialInstanceSlug, Wt as PresignOrgLogoResponseSchema, X as CreateCustomAppResponseSchema, Xn as mapProject, Xt as ProjectResponseSchema, Y as CreateCustomAppRequestSchema, Yn as mapOrganizationMember, Yt as ProjectReachabilityResponseSchema, Z as CreateOrganizationRequestSchema, Zn as mapProjectArtifact, Zt as ProjectSettingsResponseSchema, _ as orgLogoStorageKey, _n as TriggerRunListQuerySchema, _t as InviteOrganizationMembersResponseSchema, a as extractRouteManifestFromArtifact, an as SkillSummaryListResponseSchema, ar as organizationSlugErrorCodeFromMessage, at as DownloadActiveProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as UpdateOrganizationMemberResponseSchema, bt as ListAgentMemoryFilesResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as SlugAvailabilityResponseSchema, cr as projectFileId, ct as GetCredentialResponseSchema, d as isStorageNotFoundError$1, dn as StoredProjectSourceManifestSchema, dr as validateCredentialValueAgainstFields, dt as GraphqlDiscoverResponseSchema, en as ProjectSourceResourcesSchema, er as mapProjectSettings, et as CreateProjectRequestSchema, f as isUserAvatarStorageKey, fn as SubmitMarketingContactRequestSchema, fr as validationErrorResponse, ft as HistoryRunCancelResponseSchema, gn as TriggerAttachmentUpdateRequestSchema, gt as InviteOrganizationMembersRequestSchema, h as loadProjectSourceFiles, hn as SubmitTeamRequestResponseSchema, ht as HistoryRunListResponseSchema, i as ensureKeystrokeAssetsBucket, in as SkillSummaryDetailResponseSchema, ir as organizationInvitationAcceptPath, it as DeclineOrganizationInvitationResponseSchema, j as deleteCredentialInstanceSecret, jn as UserPreferencesSchema, jt as ListProjectMetricsResponseSchema, k as discoverOpenApiApp, kn as UserAvatarSchema, kt as ListProjectFilesResponseSchema, l as isOrgLogoStorageKey, ln as StartMcpOAuthConnectionInputSchema, lr as resolveExternalPlatformOrigin, lt as GetCustomAppResponseSchema, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as SubmitTeamRequestRequestSchema, mr as pingProjectTarget, mt as HistoryRunListQuerySchema, n as chatAttachmentStorageKey, nn as RecentResourceListResponseSchema, nr as mergeUserPreferences, nt as DEFAULT_CLOUD_PLATFORM_ORIGIN, o as isChatAttachmentStorageKey, on as SkillSummarySchema, or as parseAppSlug, ot as DownloadActiveProjectSourceResponseSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as SubmitMarketingContactResponseSchema, pt as HistoryRunDetailResponseSchema, q as CreateCredentialsRequestSchema, qn as listenPortFromPublicUrl, qt as PresignUserAvatarRequestSchema, r as createAssetsStorageClient, rn as RecentResourceSchema, rr as normalizeUserPreferences, rt as DEFAULT_TRIGGER_OVERVIEW_MODEL, s as isKeystrokeAssetsAvatarPublicUrl, sn as SlugAvailabilityQuerySchema, sr as parseStoredRouteManifest, st as ErrorResponseSchema, t as RouteManifestNotFoundError, tn as PublicModelsResponseSchema, tr as mapUserOrganization, tt as CreateProjectResponseSchema, u as isStorageBucketNotFoundError, un as StartMcpOAuthConnectionResultSchema, ur as resolveUniqueCredentialInstanceLabel, ut as GraphqlDiscoverRequestSchema, v as projectArtifactKey, vn as UpdateCredentialRequestSchema, vt as InviteProjectMembersRequestSchema, w as beginMcpOAuthConnect, wn as UpdateProjectRequestSchema, wt as ListCredentialsResponseSchema, x as userAvatarStorageKey, xn as UpdateOrganizationRequestSchema, xt as ListAgentWorkspaceFilesResponseSchema, y as projectSourceBlobKey, yn as UpdateOrganizationMemberRequestSchema, yt as InviteProjectMembersResponseSchema, z as AgentSummaryListResponseSchema, zn as WorkspaceTriggerRunListResponseSchema, zt as PLATFORM_RESOURCE_UNSUPPORTED_TEXT } from "./dist-DEUmH1sy.mjs";
+import { $ as CreateOrganizationRequestSchema, $n as chatAttachmentExtension, $t as ProjectReachabilityResponseSchema, A as discoverOpenApiApp, An as UploadProjectSourceManifestRequestSchema, At as ListOrganizationMembersResponseSchema, B as AgentSummaryDetailResponseSchema, Bn as WorkflowRunInputsSchema, Bt as OpenApiDiscoverResponseSchema, C as defaultSchedulerPlugin, Cn as UpdateOrganizationMemberRequestSchema, Cr as validateWorkflowRunInputValues, Ct as InviteProjectMembersResponseSchema, D as describeCredentialBinding, Dn as UpdateProjectMemberResponseSchema, Dt as ListAppsResponseSchema, E as decodeOAuthState, En as UpdateProjectMemberRequestSchema, Er as pingProjectTarget, Et as ListApiKeysResponseSchema, F as setCredentialInstanceSecret, Fn as UserPreferencesSchema, Ft as ListProjectMetricsResponseSchema, G as AppSlugAvailabilityResponseSchema, Gn as WorkspaceTriggerFileSchema, Gt as PresignChatAttachmentRequestSchema, H as AgentSummarySchema, Hn as WorkflowSummaryListResponseSchema, Ht as OrganizationSidebarBrandingSchema, I as ACTIVE_ORG_HEADER, In as WorkflowCanvasCredentialBindingsSchema, It as ListProjectsResponseSchema, J as CreateApiKeyResponseSchema, Jn as WorkspaceTriggerRunListResponseSchema, Jt as PresignOrgLogoResponseSchema, K as CompleteProjectArtifactResponseSchema, Kn as WorkspaceTriggerListResponseSchema, Kt as PresignChatAttachmentResponseSchema, L as AcceptOrganizationInvitationResponseSchema, Ln as WorkflowCanvasRunSchema, Lt as McpDiscoverRequestSchema, M as PublicHttpUrlError, Mn as UserAvatarPatchSchema, Mt as ListProjectDeploymentsResponseSchema, N as deleteCredentialInstanceSecret, Nn as UserAvatarSchema, Nt as ListProjectFilesResponseSchema, O as discoverGraphqlApp, On as UpdateProjectRequestSchema, Ot as ListCredentialsResponseSchema, P as readCredentialInstanceSecret, Pn as UserPreferencesPatchSchema, Pt as ListProjectMembersResponseSchema, Q as CreateCustomAppResponseSchema, Qn as buildCredentialInstanceLabel, Qt as PresignUserAvatarResponseSchema, R as ActiveOrganizationResponseSchema, Rn as WorkflowCanvasSchema, Rt as McpDiscoverResponseSchema, S as createJobQueue, Sn as UpdateCredentialRequestSchema, Sr as validateCredentialValueAgainstFields, St as InviteProjectMembersRequestSchema, T as completeMcpOAuthConnect, Tn as UpdateOrganizationRequestSchema, Tt as ListAgentWorkspaceFilesResponseSchema, U as AgentWorkspaceFileSummarySchema, Un as WorkflowSummarySchema, Ut as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, V as AgentSummaryListResponseSchema, Vn as WorkflowSummaryDetailResponseSchema, Vt as OrganizationSidebarBrandingPatchSchema, W as AppSlugAvailabilityQuerySchema, Wn as WorkspaceTriggerDetailSchema, Wt as PROJECT_SLUG_TAKEN_MESSAGE, X as CreateCredentialsResponseSchema, Xn as agentMemoryFileId, Xt as PresignProjectSourceResponseSchema, Y as CreateCredentialsRequestSchema, Yn as WorkspaceWorkflowOverviewSchema, Yt as PresignProjectSourceRequestSchema, Z as CreateCustomAppRequestSchema, Zn as agentWorkspaceFileId, Zt as PresignUserAvatarRequestSchema, _ as orgLogoStorageKey, _n as SubmitMarketingContactResponseSchema, _r as parseAppSlug, _t as HistoryRunDetailResponseSchema, a as extractRouteManifestFromArtifact, an as PublicModelsResponseSchema, ar as mapOrganizationInvitation, at as DEFAULT_TRIGGER_OVERVIEW_MODEL, b as publicKeystrokeAssetsObjectUrl, bn as TriggerAttachmentUpdateRequestSchema, br as resolveExternalPlatformOrigin, bt as InviteOrganizationMembersRequestSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as SkillSummaryDetailResponseSchema, cr as mapProjectArtifact, ct as DeclineOrganizationInvitationResponseSchema, d as isStorageNotFoundError$1, dn as SlugAvailabilityQuerySchema, dr as mapProjectSettings, dt as ErrorResponseSchema, en as ProjectResponseSchema, er as deriveCredentialInstanceSlug, et as CreateOrganizationResponseSchema, f as isUserAvatarStorageKey, fn as SlugAvailabilityResponseSchema, fr as mapUserOrganization, ft as GetCredentialResponseSchema, gn as SubmitMarketingContactRequestSchema, gr as organizationSlugErrorCodeFromMessage, gt as HistoryRunCancelResponseSchema, h as loadProjectSourceFiles, hn as StoredProjectSourceManifestSchema, hr as organizationInvitationAcceptPath, ht as GraphqlDiscoverResponseSchema, i as ensureKeystrokeAssetsBucket, in as ProjectSourceResourcesSchema, ir as listenPortFromPublicUrl, it as DEFAULT_CLOUD_PLATFORM_ORIGIN, j as withCredentialAssignments, jn as UploadProjectSourceResponseSchema, jt as ListOrganizationsResponseSchema, k as discoverMcpApp, kn as UpdateProjectSettingsRequestSchema, kt as ListOrganizationInvitationsResponseSchema, l as isOrgLogoStorageKey, ln as SkillSummaryListResponseSchema, lr as mapProjectDeployment, lt as DownloadActiveProjectArtifactResponseSchema, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as StartMcpOAuthConnectionResultSchema, mr as normalizeUserPreferences, mt as GraphqlDiscoverRequestSchema, n as chatAttachmentStorageKey, nn as ProjectSlugAvailabilityQuerySchema, nr as isAllowedChatAttachmentMediaType, nt as CreateProjectRequestSchema, o as isChatAttachmentStorageKey, on as RecentResourceListResponseSchema, or as mapOrganizationMember, ot as DEFAULT_WORKFLOW_CANVAS_MODEL, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as StartMcpOAuthConnectionInputSchema, pr as mergeUserPreferences, pt as GetCustomAppResponseSchema, q as CreateApiKeyRequestSchema, qn as WorkspaceTriggerOverviewSchema, qt as PresignOrgLogoRequestSchema, r as createAssetsStorageClient, rn as ProjectSlugAvailabilityResponseSchema, rr as jsonSchemaToWorkflowInputSchema, rt as CreateProjectResponseSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as RecentResourceSchema, sr as mapProject, st as DEFAULT_WORKFLOW_OVERVIEW_MODEL, t as RouteManifestNotFoundError, tn as ProjectSettingsResponseSchema, tr as displayCredentialAppName, tt as CreateProjectArtifactResponseSchema, u as isStorageBucketNotFoundError, un as SkillSummarySchema, ur as mapProjectMember, ut as DownloadActiveProjectSourceResponseSchema, v as projectArtifactKey, vn as SubmitTeamRequestRequestSchema, vr as parseStoredRouteManifest, vt as HistoryRunListQuerySchema, w as beginMcpOAuthConnect, wn as UpdateOrganizationMemberResponseSchema, wr as validationErrorResponse, wt as ListAgentMemoryFilesResponseSchema, x as userAvatarStorageKey, xn as TriggerRunListQuerySchema, xr as resolveUniqueCredentialInstanceLabel, xt as InviteOrganizationMembersResponseSchema, y as projectSourceBlobKey, yn as SubmitTeamRequestResponseSchema, yr as projectFileId, yt as HistoryRunListResponseSchema, z as AgentMemoryFileSummarySchema, zn as WorkflowRunInputsPutBodySchema, zt as OpenApiDiscoverRequestSchema } from "./dist-Dfoa0fsU.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
 import { t as withProjectScope } from "./with-project-scope-DWwbN8Qs.mjs";
 import { createRequire } from "node:module";
 import "node:fs/promises";
-import { buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, deleteCredentialInstanceById, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listTriggersByIds, listWorkspaceTriggerRunRows, listWorkspaceTriggers, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectTriggerById, selectWorkflowLastRunAtByIds, selectWorkflowRunById, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, storedTriggerSourceFromRow, touchResourceActivity, updateTriggerOverview, upsertCredentialInstance } from "@keystrokehq/database";
+import { buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, deleteCredentialInstanceById, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listReplayEvents, listTriggersByIds, listWorkspaceTriggerRunRows, listWorkspaceTriggers, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectTriggerById, selectWorkflowCanvasAnnotations, selectWorkflowLastRunAtByIds, selectWorkflowOverview, selectWorkflowRunById, selectWorkflowRunForWorkflow, selectWorkflowRunInputValues, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, setWorkflowCanvasAnnotationsGenerating, setWorkflowOverviewGenerating, storedTriggerSourceFromRow, touchResourceActivity, updateTriggerOverview, updateWorkflowCanvasAnnotations, updateWorkflowOverview, updateWorkflowRunInputValues, upsertCredentialInstance } from "@keystrokehq/database";
 import { ZodError, z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listWebhookApiKeys, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
-import "node:crypto";
+import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listWebhookApiKeys, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
+import { createHash } from "node:crypto";
 import "node:fs";
 import { basename, join, normalize, relative, resolve } from "node:path";
 import { tmpdir } from "node:os";
 import { serve } from "@hono/node-server";
 import { AUTH_API_PATH, createAuth, createDefaultAuthJwtVerifier, extractWebhookApiKeyFromRequest, handleAuthRequest, resolveAuthEmailFrom, resolveRequestAuth } from "@keystrokehq/auth";
-import { buildWebhookUrl, createCredentialMaterializeHandler, extractWebhookRoutesFromManifest, seedOAuthAppsFromEnvForAllOrganizations, seedOAuthAppsFromEnvForOrganization, syncRegistryFromStoredManifest } from "@keystrokehq/runtime";
+import { buildWebhookUrl, createCredentialMaterializeHandler, enqueueWorkflowRunByKey, extractWebhookRoutesFromManifest, seedOAuthAppsFromEnvForAllOrganizations, seedOAuthAppsFromEnvForOrganization, syncRegistryFromStoredManifest } from "@keystrokehq/runtime";
 import "node:url";
+import "typescript";
 import { createApp, externalPlatformOrigin, getProjectScheduler, platformWebhookOrigin, resolveMcpEntityId } from "@keystrokehq/http";
 import { Hono } from "hono";
 import { Resend } from "resend";
@@ -22870,43 +22871,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-BR3SDCDa.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-CXlrdMsd.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-BlhAZROi.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-XVD9Mxrm.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-BeJZta9T.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-VlE8NU2n.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-X9vy2RCy.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-DKhEU_mo.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-B91oqgzk.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-CbUJDjKj.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-D-0iV3bm.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-D8fHlx6X.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-0mxnhARQ.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-Jci5Ip6D.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-CpbLLWK0.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-ptJev1Ed.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-D6ALdw02.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-wEz7EErl.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-Dn6vKThL.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-C8uxwN4w.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22922,15 +22923,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-BQswaDJF.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-BUT7-OAn.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-BYcpWm-i.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-BXsd_oGy.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-DhNBsFLd.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-B3_zHGUI.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -22938,95 +22939,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-BZCEkiLT.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-D2erCIt8.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BZCEkiLT.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-D2erCIt8.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BZCEkiLT.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-D2erCIt8.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-BV530Cw5.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-z2oeRO1P.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-Bn1VT3VJ.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-DMSLNP6f.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-DsFCxrAn.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-DeBBkGI5.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-BYbDNrah.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-BlCI4ke5.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-CWAKZmGl.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-B5Bk1TsC.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-Cxkv2cbu.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-NATbHp7x.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-Co1hDP2h.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-CAXXP7Q-.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-Bji1Bpv0.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-BNyYBkM9.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-DSKHB_Nc.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-DkmoHg-J.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-CI_VGXqm.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-DhVvFoTy.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-DyeXenY-.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-BxQfwu-N.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-GT1iyvMw.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-W2QBLbOw.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-COLerElO.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-CyEF3l9T.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-CAimwjsv.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-Bhs2BUQ5.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-DghW6u1V.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-CQhR5NWI.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-DaVNgVyU.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-DInsLVFn.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-CKCd9cj4.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-5YutVL6D.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-mMKbGeyt.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-DX7NMuzt.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-DArfnCcS.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-HOwDepoa.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-CZJwhn7l.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-BcssH53Z.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23038,19 +23039,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-BWhZ09Ar.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-xjlCOZ0t.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-BN--uF4D.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-dXgrmb6w.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-D69jRYN4.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-D_IGqT9p.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-D69jRYN4.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-D_IGqT9p.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23066,7 +23067,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-BH-SyQsU.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-BdScic0s.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23082,23 +23083,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-BvR1blQy.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-rOVeZOAg.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-BvR1blQy.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-rOVeZOAg.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-BtVEt-iG.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-C58Dd7RS.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-BTfHxe6x.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-JuDjFqOp.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-Buur00F5.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-CvZCw_Zo.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23106,15 +23107,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-CbNXwoha.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-B-F8EJ1A.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-m0hOl9RU.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-CrDWh7NY.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-D0AgPrVU.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-DShdsFLL.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23122,19 +23123,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-Bq-liRWE.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-BjSLGpzH.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-CSOni4rN.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-D9FkR68Z.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-DL_UeFqk.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-BvcG60rc.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-CmnB6TL1.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-DVH9Rp51.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23142,11 +23143,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-bFXHY2YJ.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-D77ZtAkg.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-CyQGg7tY.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-BNhOdIlA.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23154,7 +23155,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-dyBrgE3g.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-DPVvOOFh.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23166,49 +23167,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-C4rrBoz_.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-BMjM1Vpo.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BRUoPm0T.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CqxUEEM2.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BRUoPm0T.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CqxUEEM2.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-BRUoPm0T.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CqxUEEM2.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-FTWsSEpr.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-DTf5Ifnn.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-CY_mBr2e.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-BvkjygaH.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-DN7DU1ab.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-9KChSctb.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-DWuK8T1P.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-DdQnH7sK.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-DR8mqMXh.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-Dnqvkl59.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-DR8mqMXh.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-Dnqvkl59.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-yV-xrF3D.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-PxuNBAca.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-yV-xrF3D.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-PxuNBAca.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -24226,11 +24227,12 @@ function normalizeLegacySlugFields(value) {
 	return next;
 }
 const slugField = z.string().trim().min(1);
-const optionalTextField = z.string().optional();
+const requiredTextField = z.string().trim().min(1);
+const optionalTextField = z.string().trim().min(1).optional();
 const baseSourceShape = {
 	slug: slugField,
-	name: optionalTextField,
-	description: optionalTextField,
+	name: requiredTextField,
+	description: requiredTextField,
 	attach: z.function()
 };
 const webhookSourceSchema = z.object({
@@ -24848,7 +24850,7 @@ function withOrganizationProjectDatabase() {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/GET.ts
-const handler$83 = async (c) => {
+const handler$91 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserAvatarSchema.parse({ url: dbUser.image ?? null }));
@@ -24867,7 +24869,7 @@ function avatarExtensionForContentType(contentType) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/presign/POST.ts
-const handler$82 = async (c) => {
+const handler$90 = async (c) => {
 	const parsed = PresignUserAvatarRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -24907,7 +24909,7 @@ async function deleteStoredImageIfOwned(input) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/PATCH.ts
-const handler$81 = async (c) => {
+const handler$89 = async (c) => {
 	const parsed = UserAvatarPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar update" }), 400);
 	const user = c.get("user");
@@ -24949,14 +24951,14 @@ const handler$81 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/GET.ts
-const handler$80 = async (c) => {
+const handler$88 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserPreferencesSchema.parse(normalizeUserPreferences(dbUser.preferences)));
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/PATCH.ts
-const handler$79 = async (c) => {
+const handler$87 = async (c) => {
 	const parsed = UserPreferencesPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid preferences update" }), 400);
 	const user = c.get("user");
@@ -24971,7 +24973,7 @@ const handler$79 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/GET.ts
-const handler$78 = async (c) => {
+const handler$86 = async (c) => {
 	const memberships = await selectUserOrganizations(c.get("user").id);
 	return c.json(ListOrganizationsResponseSchema.parse(memberships.map(mapUserOrganization)));
 };
@@ -25049,7 +25051,7 @@ function createOrganizationHandler(deps) {
 }
 //#endregion
 //#region src/routes/account/organizations/slug-available/GET.ts
-const handler$77 = async (c) => {
+const handler$85 = async (c) => {
 	const parsed = SlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
 		excludeOrganizationId: c.req.query("excludeOrganizationId")
@@ -25060,7 +25062,7 @@ const handler$77 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/GET.ts
-const handler$76 = async (c) => {
+const handler$84 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const membership = await selectUserOrganizationMembership(c.get("user").id, organizationId);
 	if (!membership) throw new Error(`Organization membership missing after param guard: ${organizationId}`);
@@ -25068,7 +25070,7 @@ const handler$76 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/PATCH.ts
-const handler$75 = async (c) => {
+const handler$83 = async (c) => {
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
 	const parsed = UpdateOrganizationRequestSchema.safeParse(body);
@@ -25093,7 +25095,7 @@ const handler$75 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/GET.ts
-const handler$74 = async (c) => {
+const handler$82 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
 	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
@@ -25142,7 +25144,7 @@ async function finalizeOrgLogoVariant(input) {
 		publicUrl: finalized.publicUrl
 	};
 }
-const handler$73 = async (c) => {
+const handler$81 = async (c) => {
 	const parsed = OrganizationSidebarBrandingPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid branding update" }), 400);
 	const { organizationId } = c.get("organization");
@@ -25170,7 +25172,7 @@ const handler$73 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/logo/presign/POST.ts
-const handler$72 = async (c) => {
+const handler$80 = async (c) => {
 	const parsed = PresignOrgLogoRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid logo upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25271,7 +25273,7 @@ async function attachRanAsToDetail(detail, ranByUserId) {
 }
 //#endregion
 //#region src/routes/account/history/GET.ts
-const handler$71 = async (c) => {
+const handler$79 = async (c) => {
 	const organization = c.get("organization");
 	const ctx = accessContext(c);
 	const query = HistoryRunListQuerySchema.parse({
@@ -25294,7 +25296,7 @@ const handler$71 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/history/[runId]/GET.ts
-const handler$70 = async (c) => {
+const handler$78 = async (c) => {
 	const runId = c.req.param("runId") ?? "";
 	if (!runId) return c.json(null, 404);
 	const core = await findHistoryRunCore(runId);
@@ -25329,11 +25331,12 @@ function formatModel(model) {
 	return model;
 }
 function toAgentSummary(row, options) {
+	const name = row.name?.trim() || titleCaseKey(row.slug);
 	return AgentSummarySchema.parse({
 		id: row.id,
 		slug: row.slug,
-		name: row.name?.trim() || titleCaseKey(row.slug),
-		description: row.description ?? void 0,
+		name,
+		description: row.description?.trim() || name,
 		projectId: row.projectId,
 		updatedAt: row.updatedAt.toISOString(),
 		sourcePath: row.moduleFile,
@@ -25351,7 +25354,7 @@ function toAgentSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/agents/GET.ts
-const handler$69 = async (c) => {
+const handler$77 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, agentListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(AgentSummaryListResponseSchema.parse([]));
 	const rows = await listActiveAgents(filter);
@@ -25365,7 +25368,7 @@ function touchResourceActivityBestEffort(options) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/GET.ts
-const handler$68 = async (c) => {
+const handler$76 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(AgentSummaryDetailResponseSchema.parse(null));
@@ -25388,7 +25391,7 @@ const handler$68 = async (c) => {
 function relativePathsFromStorageKeys(prefix, keys) {
 	return keys.filter((key) => key.startsWith(prefix) && key.endsWith(".md")).map((key) => key.slice(prefix.length)).filter((path) => !path.startsWith(".") && !path.includes("/."));
 }
-const handler$67 = async (c) => {
+const handler$75 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentMemoryFilesResponseSchema.parse({ files: [] }), 404);
@@ -25413,7 +25416,7 @@ function isStorageNotFoundError(error) {
 	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
 	return name === "NoSuchKey" || code === "NoSuchKey" || code === "NotFound" || status === 404;
 }
-const handler$66 = async (c) => {
+const handler$74 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25467,7 +25470,7 @@ function workspaceRelativePathsFromStorageKeys(keys) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/GET.ts
-const handler$65 = async (c) => {
+const handler$73 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
@@ -25490,7 +25493,7 @@ const handler$65 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/content/GET.ts
-const handler$64 = async (c) => {
+const handler$72 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25539,15 +25542,15 @@ async function cancelHistoryRun(c, kind, cancel) {
 }
 //#endregion
 //#region src/routes/account/agents/sessions/[sessionId]/cancel/POST.ts
-const handler$63 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
+const handler$71 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
 //#endregion
 //#region src/routes/account/resources/workflows.ts
 function toWorkflowSummary(row, options) {
 	return WorkflowSummarySchema.parse({
 		id: row.id,
 		slug: row.slug,
-		name: row.name?.trim() || titleCaseKey(row.slug),
-		description: row.description ?? void 0,
+		name: row.name.trim(),
+		description: row.description.trim(),
 		projectId: row.projectId,
 		updatedAt: row.updatedAt.toISOString(),
 		sourcePath: row.moduleFile,
@@ -25556,7 +25559,7 @@ function toWorkflowSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/workflows/GET.ts
-const handler$62 = async (c) => {
+const handler$70 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, workflowListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(WorkflowSummaryListResponseSchema.parse([]));
 	const rows = await listActiveWorkflows(filter);
@@ -25565,7 +25568,7 @@ const handler$62 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/GET.ts
-const handler$61 = async (c) => {
+const handler$69 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const row = workflowId ? await selectActiveWorkflowById(workflowId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessWorkflow)) return c.json(WorkflowSummaryDetailResponseSchema.parse(null));
@@ -25579,16 +25582,985 @@ const handler$61 = async (c) => {
 	return c.json(WorkflowSummaryDetailResponseSchema.parse(toWorkflowSummary(row, { lastRunAt: lastRunAtById.get(row.id) ?? null })));
 };
 //#endregion
+//#region src/routes/account/workflows/resolve.ts
+async function resolveWorkflow(c, workflowId) {
+	const row = workflowId ? await selectActiveWorkflowById(workflowId) : void 0;
+	if (!row || !await canAccessProjectId(c, row.projectId, canAccessWorkflow)) return null;
+	return {
+		row,
+		projectId: row.projectId
+	};
+}
+/** Active deploy route-manifest entry for a workflow slug (input schema, flow graph, …). */
+async function loadWorkflowManifestEntry(projectId, slug) {
+	const manifestJson = await selectActiveArtifactManifestForProject(projectId);
+	if (!manifestJson) return null;
+	return parseStoredRouteManifest(manifestJson).entries.find((item) => item.kind === "workflow" && item.slug === slug) ?? null;
+}
+/** The full active-deploy route manifest for a project (canvas needs the whole entry set). */
+async function loadActiveManifest(projectId) {
+	const manifestJson = await selectActiveArtifactManifestForProject(projectId);
+	if (!manifestJson) return null;
+	return parseStoredRouteManifest(manifestJson);
+}
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/canvas/build-canvas.ts
+function indexManifest(entries) {
+	const actions = /* @__PURE__ */ new Map();
+	const agents = /* @__PURE__ */ new Map();
+	const workflows = /* @__PURE__ */ new Map();
+	for (const entry of entries) if (entry.kind === "action") actions.set(entry.slug, entry);
+	else if (entry.kind === "agent") agents.set(entry.slug, entry);
+	else if (entry.kind === "workflow") workflows.set(entry.slug, entry);
+	return {
+		actions,
+		agents,
+		workflows
+	};
+}
+function fieldsFromSchema(schema) {
+	return jsonSchemaToWorkflowInputSchema(schema ?? {}).fields;
+}
+/** A read-only inspector row showing a captured llm option as a literal value. */
+function llmOptionRow(key, label, value) {
+	return {
+		key,
+		label,
+		type: "string",
+		required: false,
+		binding: { tokens: [{
+			kind: "text",
+			text: value
+		}] }
+	};
+}
+/**
+* Fallback for manifests built before llm option bindings were captured: surface the
+* literal-only `llmOptions`. New deploys carry `data.inputBindings` on llm nodes and
+* use {@link llmOptionRowsFromBindings} instead.
+*/
+function llmOptionInputs(options) {
+	if (!options) return [];
+	const rows = [];
+	if (options.model) rows.push(llmOptionRow("model", "Model", options.model));
+	if (options.thinkingLevel) rows.push(llmOptionRow("thinkingLevel", "Thinking", options.thinkingLevel));
+	if (typeof options.maxTokens === "number") rows.push(llmOptionRow("maxTokens", "Max tokens", String(options.maxTokens)));
+	if (typeof options.temperature === "number") rows.push(llmOptionRow("temperature", "Temperature", String(options.temperature)));
+	if (options.hasSystemPrompt) rows.push(llmOptionRow("system", "System prompt", "Configured"));
+	if (options.hasOutputSchema) rows.push(llmOptionRow("outputSchema", "Output", "Structured"));
+	return rows;
+}
+/** Display labels + render order for known `promptLlm` options. */
+const LLM_OPTION_LABELS = {
+	model: "Model",
+	system: "System prompt",
+	outputSchema: "Output",
+	maxTokens: "Max tokens",
+	temperature: "Temperature",
+	thinkingLevel: "Thinking"
+};
+const LLM_OPTION_ORDER = Object.keys(LLM_OPTION_LABELS);
+/**
+* Render the producer-captured llm option bindings as visible inspector rows so
+* model/system/output appear with the same variable/call/reference chips as action
+* inputs (e.g. `model: CLASSIFY_MODEL` → a variable chip resolved to its const value).
+*/
+function llmOptionRowsFromBindings(rawBindings, labelByNodeId, constants) {
+	const rows = [];
+	const known = new Set(LLM_OPTION_ORDER);
+	for (const key of LLM_OPTION_ORDER) {
+		const raw = rawBindings[key];
+		if (!raw) continue;
+		rows.push({
+			key,
+			label: LLM_OPTION_LABELS[key] ?? key,
+			type: "string",
+			required: false,
+			binding: resolveBinding(raw, labelByNodeId, constants)
+		});
+	}
+	for (const [key, raw] of Object.entries(rawBindings)) {
+		if (known.has(key)) continue;
+		rows.push({
+			key,
+			label: key,
+			type: "string",
+			required: false,
+			additional: true,
+			binding: resolveBinding(raw, labelByNodeId, constants)
+		});
+	}
+	return rows;
+}
+/** The concrete value a binding resolves to, if it's a single literal/known-const token. */
+function resolvedScalar(raw, constants) {
+	if (!raw || raw.tokens.length !== 1) return;
+	const token = raw.tokens[0];
+	if (token.kind === "text") return token.text;
+	if (token.kind === "variable") {
+		const value = constants?.[token.text];
+		return value !== void 0 ? String(value) : void 0;
+	}
+}
+/** Resolve a raw producer binding into the inspector binding, filling source labels + const values. */
+function resolveBinding(raw, labelByNodeId, constants) {
+	return {
+		tokens: raw.tokens.map((token) => {
+			if (token.kind === "text") return {
+				kind: "text",
+				text: token.text
+			};
+			if (token.kind === "call") return {
+				kind: "call",
+				name: token.name
+			};
+			if (token.kind === "variable") {
+				const value = constants?.[token.text];
+				return {
+					kind: "variable",
+					text: token.text,
+					...value !== void 0 ? { resolvedValue: String(value) } : {}
+				};
+			}
+			const sourceLabel = token.sourceNodeId ? labelByNodeId.get(token.sourceNodeId) ?? token.sourceNodeId : "";
+			return {
+				kind: "reference",
+				...token.sourceNodeId ? { sourceNodeId: token.sourceNodeId } : {},
+				sourceLabel,
+				...token.field ? { field: token.field } : {}
+			};
+		}),
+		...raw.multiline ? { multiline: true } : {}
+	};
+}
+/** Attach call-site value bindings to a step's inspector inputs (returns a new inputs list). */
+function inputsWithBindings(inputs, rawBindings, labelByNodeId, constants) {
+	const matched = /* @__PURE__ */ new Set();
+	const result = inputs.map((field) => {
+		const raw = rawBindings[field.key];
+		if (!raw) return field;
+		matched.add(field.key);
+		return {
+			...field,
+			binding: resolveBinding(raw, labelByNodeId, constants)
+		};
+	});
+	for (const [key, raw] of Object.entries(rawBindings)) {
+		if (matched.has(key)) continue;
+		result.push({
+			key,
+			label: key,
+			type: "string",
+			required: false,
+			additional: true,
+			binding: resolveBinding(raw, labelByNodeId, constants)
+		});
+	}
+	return result;
+}
+/**
+* Authored metadata for a single `step` node, resolved from its deploy-time `data.slug`
+* + `data.callKind` against the manifest. v1 omits call-site input bindings (the producer
+* does not capture argument expressions yet). Returns null for steps the inspector can
+* describe from the graph alone (wait/hook) or that can't be resolved.
+*/
+function stepMeta(node, index) {
+	const slug = node.data.slug;
+	const callKind = node.data.callKind;
+	const appSlug = node.data.appSlug;
+	if (callKind === "agent") {
+		const agent = slug ? index.agents.get(slug) : void 0;
+		return {
+			kind: "agent",
+			slug: slug ?? node.data.label,
+			name: agent?.name ?? (node.data.label || "Agent"),
+			description: agent?.description ?? "",
+			...appSlug ? { appSlug } : {},
+			inputs: [],
+			outputs: [],
+			...agent?.appSlugs.length ? { requiredApps: agent.appSlugs } : {},
+			...agent?.model ? { model: agent.model } : {},
+			...agent ? { toolCount: agent.toolCount } : {}
+		};
+	}
+	if (callKind === "llm") return {
+		kind: "llm",
+		slug: slug ?? "llm",
+		name: node.data.label || "LLM prompt",
+		...node.data.llmOptions?.model ? { model: node.data.llmOptions.model } : {},
+		inputs: node.data.inputBindings ? [] : llmOptionInputs(node.data.llmOptions),
+		outputs: []
+	};
+	if (callKind === "workflow-step") {
+		const action = slug ? index.actions.get(slug) : void 0;
+		if (action) return {
+			kind: "action",
+			slug: action.slug,
+			name: action.name,
+			description: action.description,
+			...appSlug ? {
+				appSlug,
+				requiredApps: [appSlug]
+			} : {},
+			inputs: fieldsFromSchema(action.inputSchema),
+			outputs: fieldsFromSchema(action.outputSchema)
+		};
+		const childWorkflow = slug ? index.workflows.get(slug) : void 0;
+		if (childWorkflow) return {
+			kind: "workflow",
+			slug: childWorkflow.slug,
+			name: childWorkflow.name,
+			description: childWorkflow.description,
+			inputs: fieldsFromSchema(childWorkflow.requestSchema),
+			outputs: fieldsFromSchema(childWorkflow.responseSchema)
+		};
+		return {
+			kind: "action",
+			slug: slug ?? node.data.label,
+			name: node.data.label || slug || "Action",
+			...appSlug ? {
+				appSlug,
+				requiredApps: [appSlug]
+			} : {},
+			inputs: [],
+			outputs: []
+		};
+	}
+	return null;
+}
+/**
+* Assemble the read-only `WorkflowCanvas` deterministic part: the deploy-time AST skeleton
+* with manifest trigger-source node(s) prepended and the authored-metadata join keyed by
+* node id. Pure (no I/O) so it is unit-testable; the route gathers the manifest + workspace
+* triggers and the LLM annotation layer separately.
+*/
+function buildWorkflowCanvas(input) {
+	const { workflowSlug, workflowEntry, entries, triggers } = input;
+	const flowGraph = workflowEntry.flowGraph ?? {
+		nodes: [],
+		edges: []
+	};
+	const constants = flowGraph.constants;
+	const index = indexManifest(entries);
+	const nodeMetadata = {};
+	const attached = triggers.filter((trigger) => trigger.assignments.some((assignment) => assignment.kind === "workflow" && assignment.slug === workflowSlug));
+	const triggerNodes = [];
+	const triggerEdges = [];
+	const workflowInputFields = fieldsFromSchema(workflowEntry.requestSchema);
+	if (attached.length === 0) {
+		const id = "trigger-manual";
+		triggerNodes.push({
+			id,
+			nodeType: "trigger-source",
+			data: {
+				label: "Manual / API",
+				triggerType: "manual"
+			}
+		});
+		triggerEdges.push({
+			id: "edge-trigger-manual",
+			source: id,
+			target: "entry"
+		});
+		nodeMetadata[id] = {
+			kind: "trigger",
+			slug: "manual",
+			name: "Manual / API",
+			inputs: [],
+			outputs: workflowInputFields
+		};
+	} else attached.forEach((trigger, i) => {
+		const id = `trigger-${trigger.slug}`;
+		triggerNodes.push({
+			id,
+			nodeType: "trigger-source",
+			data: {
+				label: trigger.name,
+				triggerType: trigger.type
+			}
+		});
+		triggerEdges.push({
+			id: `edge-trigger-${i}`,
+			source: id,
+			target: "entry"
+		});
+		nodeMetadata[id] = {
+			kind: "trigger",
+			slug: trigger.slug,
+			name: trigger.name,
+			description: trigger.description,
+			inputs: [],
+			outputs: []
+		};
+	});
+	const codeBlocks = [];
+	for (const node of flowGraph.nodes) {
+		if (node.nodeType === "entry") {
+			nodeMetadata[node.id] = {
+				kind: "boundary",
+				slug: "entry",
+				name: "Start",
+				inputs: workflowInputFields,
+				outputs: workflowInputFields
+			};
+			continue;
+		}
+		if (node.nodeType === "exit") {
+			const outputFields = fieldsFromSchema(workflowEntry.responseSchema);
+			nodeMetadata[node.id] = {
+				kind: "boundary",
+				slug: "exit",
+				name: "Output",
+				inputs: outputFields,
+				outputs: outputFields
+			};
+			continue;
+		}
+		if (node.nodeType === "code-block") {
+			codeBlocks.push({
+				nodeId: node.id,
+				source: node.data.label
+			});
+			continue;
+		}
+		if (node.nodeType === "step") {
+			const meta = stepMeta(node, index);
+			if (meta) nodeMetadata[node.id] = meta;
+		}
+	}
+	const labelByNodeId = /* @__PURE__ */ new Map();
+	for (const [id, meta] of Object.entries(nodeMetadata)) labelByNodeId.set(id, meta.name);
+	for (const node of flowGraph.nodes) if (!labelByNodeId.has(node.id)) labelByNodeId.set(node.id, node.data.label);
+	for (const node of flowGraph.nodes) {
+		const rawBindings = node.data.inputBindings;
+		const meta = nodeMetadata[node.id];
+		if (node.nodeType !== "step" || !rawBindings || !meta) continue;
+		if (node.data.callKind === "llm") {
+			meta.inputs = llmOptionRowsFromBindings(rawBindings, labelByNodeId, constants);
+			if (!meta.model) {
+				const resolvedModel = resolvedScalar(rawBindings.model, constants);
+				if (resolvedModel) meta.model = resolvedModel;
+			}
+		} else meta.inputs = inputsWithBindings(meta.inputs, rawBindings, labelByNodeId, constants);
+	}
+	return {
+		graph: {
+			nodes: [...triggerNodes, ...flowGraph.nodes],
+			edges: [...triggerEdges, ...flowGraph.edges]
+		},
+		nodeMetadata,
+		codeBlocks
+	};
+}
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/canvas/GET.ts
+/** Bumped when the annotation prompt/model changes, so cached annotations invalidate. */
+const ANNOTATIONS_GENERATOR_VERSION = "wf-canvas-annotations-v1";
+const handler$68 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const manifest = await loadActiveManifest(projectId);
+	const workflowEntry = manifest?.entries.find((entry) => entry.kind === "workflow" && entry.slug === row.slug);
+	if (!workflowEntry || workflowEntry.kind !== "workflow" || !workflowEntry.flowGraph) return c.json(ErrorResponseSchema.parse({ error: "Canvas not available" }), 404);
+	const triggers = await listWorkspaceTriggers([projectId]);
+	const { graph, nodeMetadata, codeBlocks } = buildWorkflowCanvas({
+		workflowSlug: row.slug,
+		workflowEntry,
+		entries: manifest?.entries ?? [],
+		triggers
+	});
+	const model = DEFAULT_WORKFLOW_CANVAS_MODEL;
+	const graphHash = createHash("sha256").update(JSON.stringify(workflowEntry.flowGraph)).digest("hex");
+	const hash = createHash("sha256").update(JSON.stringify({
+		source: workflowEntry.flowGraphSourceHash ?? "",
+		graph: graphHash,
+		model,
+		version: ANNOTATIONS_GENERATOR_VERSION
+	})).digest("hex");
+	if (codeBlocks.length === 0) return c.json(WorkflowCanvasSchema.parse({
+		graph,
+		nodeMetadata,
+		annotations: {},
+		status: "ready",
+		hash,
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		model
+	}));
+	const cache = await runWithProjectScope(projectId, () => selectWorkflowCanvasAnnotations(workflowId));
+	const cached = cache?.annotations ?? {};
+	if (cache && cache.hash === hash) {
+		if (cache.status === "ready" || cache.status === "failed") return c.json(WorkflowCanvasSchema.parse({
+			graph,
+			nodeMetadata,
+			annotations: cached,
+			status: "ready",
+			hash,
+			generatedAt: cache.generatedAt ? cache.generatedAt.toISOString() : (/* @__PURE__ */ new Date()).toISOString(),
+			model: cache.model ?? model
+		}));
+		if (cache.status === "generating") return c.json(WorkflowCanvasSchema.parse({
+			graph,
+			nodeMetadata,
+			annotations: cached,
+			status: "generating",
+			hash,
+			generatedAt: null,
+			model: cache.model ?? model
+		}));
+	}
+	const organization = await selectOrganizationById(organizationId);
+	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+	await runWithProjectScope(projectId, () => setWorkflowCanvasAnnotationsGenerating(workflowId, hash));
+	try {
+		await (await getProjectScheduler(organization, projectId)).enqueue({
+			kind: "workflow-canvas-annotations",
+			targetId: workflowId,
+			runId: crypto.randomUUID(),
+			trigger: "api",
+			projectId,
+			dedupeKey: `workflow-canvas:${workflowId}:${hash}`,
+			payload: {
+				workflowId,
+				projectId,
+				hash,
+				model,
+				input: {
+					workflowName: row.name.trim(),
+					workflowDescription: row.description.trim(),
+					codeBlocks
+				}
+			}
+		});
+	} catch {
+		await runWithProjectScope(projectId, () => updateWorkflowCanvasAnnotations(workflowId, { status: "failed" }));
+		return c.json(WorkflowCanvasSchema.parse({
+			graph,
+			nodeMetadata,
+			annotations: {},
+			status: "ready",
+			hash,
+			generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			model
+		}));
+	}
+	return c.json(WorkflowCanvasSchema.parse({
+		graph,
+		nodeMetadata,
+		annotations: {},
+		status: "generating",
+		hash,
+		generatedAt: null,
+		model
+	}));
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/canvas/build-credential-requirements.ts
+/**
+* Collect each step node's credential requirements by joining its `data.slug` to
+* the manifest action (`requirements`) or agent (`toolRequirements`, flattened
+* and de-duped by key). Pure: the route resolves each requirement live. Nodes
+* with no requirement are omitted.
+*/
+function collectStepCredentialRequirements(flowGraph, entries) {
+	const actions = /* @__PURE__ */ new Map();
+	const agents = /* @__PURE__ */ new Map();
+	for (const entry of entries) if (entry.kind === "action") actions.set(entry.slug, entry);
+	else if (entry.kind === "agent") agents.set(entry.slug, entry);
+	const result = [];
+	for (const node of flowGraph.nodes) {
+		if (node.nodeType !== "step" || !node.data.slug) continue;
+		let requirements;
+		if (node.data.callKind === "agent") {
+			const agent = agents.get(node.data.slug);
+			requirements = agent?.toolRequirements ? dedupeByKey(Object.values(agent.toolRequirements).flat()) : void 0;
+		} else requirements = actions.get(node.data.slug)?.requirements;
+		if (requirements && requirements.length > 0) result.push({
+			nodeId: node.id,
+			requirements
+		});
+	}
+	return result;
+}
+function dedupeByKey(requirements) {
+	const byKey = /* @__PURE__ */ new Map();
+	for (const requirement of requirements) if (!byKey.has(requirement.key)) byKey.set(requirement.key, requirement);
+	return [...byKey.values()];
+}
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/canvas/credentials/GET.ts
+function toResolvedCredential(row) {
+	return {
+		id: row.id,
+		name: row.name ?? row.label ?? row.appSlug,
+		scope: row.scopeType,
+		appSlug: row.appSlug,
+		isDefault: Boolean(row.isDefault),
+		...row.scopeType === "project" && row.scopeId ? { projectId: row.scopeId } : {}
+	};
+}
+function toBinding(key, description) {
+	const base = {
+		credentialKey: key,
+		label: key,
+		appSlug: key
+	};
+	if (description.policy === "unresolved") return {
+		...base,
+		policy: "unresolved",
+		reason: description.reason,
+		...description.pinnedScope ? { pinnedScope: description.pinnedScope } : {}
+	};
+	if (description.policy === "scope-pinned") return {
+		...base,
+		policy: "scope-pinned",
+		pinnedScope: description.pinnedScope,
+		instance: toResolvedCredential(description.row)
+	};
+	return {
+		...base,
+		policy: description.policy,
+		instance: toResolvedCredential(description.row)
+	};
+}
+/**
+* Live credential overlay: for each step node, resolve which credential instance
+* each of its requirements currently binds to (read-only, no decryption). Not
+* content-hash cached — credential state changes without a redeploy.
+*/
+const handler$67 = async (c) => {
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const manifest = await loadActiveManifest(projectId);
+	const workflowEntry = manifest?.entries.find((entry) => entry.kind === "workflow" && entry.slug === row.slug);
+	if (!workflowEntry || workflowEntry.kind !== "workflow" || !workflowEntry.flowGraph) return c.json(ErrorResponseSchema.parse({ error: "Canvas not available" }), 404);
+	const nodeRequirements = collectStepCredentialRequirements(workflowEntry.flowGraph, manifest?.entries ?? []);
+	const userId = c.get("user").id;
+	const bindings = await runWithProjectScope(projectId, async () => {
+		const context = await withCredentialAssignments({
+			orgId: getServerTenantScopeId(),
+			projectId: getProjectScopeId(),
+			userId,
+			selection: {}
+		}, {
+			targetType: "workflow",
+			targetKey: row.slug
+		});
+		const result = {};
+		for (const { nodeId, requirements } of nodeRequirements) {
+			const consumerId = `step:${nodeId}`;
+			const nodeBindings = [];
+			for (const requirement of requirements) {
+				const description = await describeCredentialBinding({
+					key: requirement.key,
+					...requirement.scope ? { scope: requirement.scope } : {},
+					consumerId,
+					context
+				});
+				nodeBindings.push(toBinding(requirement.key, description));
+			}
+			if (nodeBindings.length > 0) result[nodeId] = nodeBindings;
+		}
+		return result;
+	});
+	return c.json(WorkflowCanvasCredentialBindingsSchema.parse(bindings));
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/canvas/build-run-overlay.ts
+const STEP_PREFIX = "step:";
+/**
+* `step:<callSiteId>#<occurrence>` → `<callSiteId>` (the canvas node id). The
+* build-injected call-site id IS the node id, so stripping the `step:` prefix and
+* the `#<occurrence>` suffix lands a run event on its graph node 1:1.
+*/
+function nodeIdFromCorrelation(correlationId) {
+	if (!correlationId.startsWith(STEP_PREFIX)) return null;
+	const rest = correlationId.slice(5);
+	const hash = rest.lastIndexOf("#");
+	return hash === -1 ? rest : rest.slice(0, hash);
+}
+function loopTotal(counts) {
+	return counts.reduce((max, n) => n > max ? n : max, 0);
+}
+/**
+* Project a workflow run's durable event log onto the canvas skeleton: a per-node
+* `WorkflowCanvasNodeRunState` keyed by the SAME node ids as the graph. Pure (no
+* I/O) so it is unit-testable; the route supplies the graph, events, and status.
+*
+* Overlay policy (v1 — step-exact, structure-conservative):
+* - **Steps** (incl. hook/sleep): exact from replay events.
+* - **Decision / merge / loop-start / trigger-source**: neutral — no run state.
+* - **Exit nodes**: succeeded only when the graph has a single Output terminal
+*   and the run succeeded (high confidence). Multiple outputs stay neutral until
+*   path telemetry lands — we do not infer branch-taken paths heuristically.
+*
+* Step rules:
+* - `step_completed` → that node `succeeded`; repeated completions (loop body)
+*   fold onto the one node with an `iteration` counter.
+* - a step that only `step_failed`/`step_retrying` (never completed) on a
+*   non-succeeded run → `failed`.
+* - same-file `code-block` nodes light from their `containedCallSiteIds`.
+* - on a succeeded run, never-executed step/code-block/loop nodes → `skipped`
+*   (a not-taken branch). On failed/canceled/running runs, unreached nodes are
+*   left neutral (we can't yet distinguish not-taken from not-yet-reached).
+*/
+function buildRunOverlay(input) {
+	const { graph, events, runStatus } = input;
+	const succeeded = runStatus === "succeeded";
+	const completions = /* @__PURE__ */ new Map();
+	const retried = /* @__PURE__ */ new Set();
+	const waiting = /* @__PURE__ */ new Set();
+	for (const event of events) {
+		if (!event.correlationId) continue;
+		const nodeId = nodeIdFromCorrelation(event.correlationId);
+		if (!nodeId) continue;
+		if (event.type === "step_completed" || event.type === "hook_resumed" || event.type === "sleep_completed") completions.set(nodeId, (completions.get(nodeId) ?? 0) + 1);
+		else if (event.type === "step_failed" || event.type === "step_retrying") retried.add(nodeId);
+		else if (event.type === "hook_created" || event.type === "sleep_scheduled") waiting.add(nodeId);
+	}
+	const isFailed = (nodeId) => !succeeded && retried.has(nodeId) && !completions.has(nodeId);
+	const states = {};
+	const childrenByParent = /* @__PURE__ */ new Map();
+	for (const node of graph.nodes) if (node.parentId) {
+		const bucket = childrenByParent.get(node.parentId) ?? [];
+		bucket.push(node.id);
+		childrenByParent.set(node.parentId, bucket);
+	}
+	for (const node of graph.nodes) {
+		if (node.nodeType === "entry") {
+			states[node.id] = { status: "succeeded" };
+			continue;
+		}
+		if (node.nodeType === "step") {
+			const count = completions.get(node.id) ?? 0;
+			if (count > 0) states[node.id] = count > 1 ? {
+				status: "succeeded",
+				iteration: {
+					index: count - 1,
+					total: count
+				}
+			} : { status: "succeeded" };
+			else if (isFailed(node.id)) states[node.id] = { status: "failed" };
+			else if (waiting.has(node.id)) states[node.id] = { status: "running" };
+			else if (succeeded) states[node.id] = { status: "skipped" };
+			continue;
+		}
+		if (node.nodeType === "code-block") {
+			const contained = node.data.containedCallSiteIds ?? [];
+			const ran = contained.some((id) => completions.has(id));
+			if (contained.some((id) => isFailed(id))) states[node.id] = { status: "failed" };
+			else if (ran) states[node.id] = { status: "succeeded" };
+			else if (succeeded) states[node.id] = { status: "skipped" };
+			continue;
+		}
+		if (node.nodeType === "loop" || node.nodeType === "parallel") {
+			const children = childrenByParent.get(node.id) ?? [];
+			const total = loopTotal(children.map((id) => completions.get(id) ?? 0));
+			if (children.some((id) => isFailed(id))) states[node.id] = { status: "failed" };
+			else if (total > 0) states[node.id] = node.nodeType === "loop" && total > 1 ? {
+				status: "succeeded",
+				iteration: {
+					index: total - 1,
+					total
+				}
+			} : { status: "succeeded" };
+			else if (succeeded) states[node.id] = { status: "skipped" };
+			continue;
+		}
+	}
+	const exits = graph.nodes.filter((node) => node.nodeType === "exit");
+	if (succeeded && exits.length === 1) states[exits[0].id] = { status: "succeeded" };
+	return states;
+}
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/canvas/runs/[runId]/GET.ts
+function toCanvasRunStatus(status) {
+	if (status === "completed") return "succeeded";
+	if (status === "failed") return "failed";
+	if (status === "canceled") return "canceled";
+	return "running";
+}
+const handler$66 = async (c) => {
+	const workflowId = c.req.param("workflowId") ?? "";
+	const runId = c.req.param("runId") ?? "";
+	if (!workflowId.trim() || !runId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow or run id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const run = await runWithProjectScope(projectId, () => selectWorkflowRunForWorkflow(row.slug, runId));
+	if (!run) return c.json(ErrorResponseSchema.parse({ error: "Run not found" }), 404);
+	const manifest = await loadActiveManifest(projectId);
+	const workflowEntry = manifest?.entries.find((entry) => entry.kind === "workflow" && entry.slug === row.slug);
+	if (!workflowEntry || workflowEntry.kind !== "workflow" || !workflowEntry.flowGraph) return c.json(ErrorResponseSchema.parse({ error: "Canvas not available" }), 404);
+	const triggers = await listWorkspaceTriggers([projectId]);
+	const { graph } = buildWorkflowCanvas({
+		workflowSlug: row.slug,
+		workflowEntry,
+		entries: manifest?.entries ?? [],
+		triggers
+	});
+	const events = await runWithProjectScope(projectId, () => listReplayEvents(runId));
+	const runStatus = toCanvasRunStatus(run.status);
+	const nodeStates = buildRunOverlay({
+		graph,
+		events,
+		runStatus
+	});
+	return c.json(WorkflowCanvasRunSchema.parse({
+		runId,
+		status: runStatus,
+		startedAt: (run.startedAt ?? run.triggeredAt).toISOString(),
+		finishedAt: run.finishedAt ? run.finishedAt.toISOString() : null,
+		nodeStates
+	}));
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/overview/GET.ts
+/** Bumped when the overview prompt/model changes, so cached overviews invalidate. */
+const OVERVIEW_GENERATOR_VERSION = "wf-overview-v1";
+/**
+* Best-effort read of the workflow's source from the active deploy's source snapshot, resolving
+* path → hash via the manifest so only files that belong to the deploy are served. Returns null
+* for dist-only deploys / missing source so the overview still generates from the structured graph.
+*/
+async function loadWorkflowSource(organization, projectId, sourcePath) {
+	try {
+		const artifact = await selectActiveProjectArtifactForProject(projectId);
+		if (!artifact?.sourceManifestJson) return null;
+		const file = StoredProjectSourceManifestSchema.parse(artifact.sourceManifestJson).files.find((entry) => entry.path === sourcePath);
+		if (!file) return null;
+		const bytes = await createOrgStorageClient(organization).getObject(projectSourceBlobKey(projectId, file.hash));
+		return new TextDecoder().decode(bytes);
+	} catch {
+		return null;
+	}
+}
+const handler$65 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const manifest = await loadActiveManifest(projectId);
+	const workflowEntry = manifest?.entries.find((entry) => entry.kind === "workflow" && entry.slug === row.slug);
+	if (!workflowEntry || workflowEntry.kind !== "workflow" || !workflowEntry.flowGraph) return c.json(ErrorResponseSchema.parse({ error: "Overview not available" }), 404);
+	const triggers = await listWorkspaceTriggers([projectId]);
+	const { graph, nodeMetadata } = buildWorkflowCanvas({
+		workflowSlug: row.slug,
+		workflowEntry,
+		entries: manifest?.entries ?? [],
+		triggers
+	});
+	const triggerLabels = graph.nodes.filter((node) => node.nodeType === "trigger-source").map((node) => node.data.label);
+	const nodes = graph.nodes.map((node) => {
+		const meta = nodeMetadata[node.id];
+		const inputs = meta?.inputs.map((field) => field.key) ?? [];
+		const outputs = meta?.outputs.map((field) => field.key) ?? [];
+		return {
+			nodeId: node.id,
+			label: meta?.name ?? node.data.label,
+			kind: meta?.kind ?? node.nodeType,
+			...meta?.description ? { description: meta.description } : {},
+			...meta?.appSlug ? { appSlug: meta.appSlug } : {},
+			...inputs.length > 0 ? { inputs } : {},
+			...outputs.length > 0 ? { outputs } : {},
+			...meta?.model ? { model: meta.model } : {},
+			...meta?.toolCount !== void 0 ? { toolCount: meta.toolCount } : {}
+		};
+	});
+	const model = DEFAULT_WORKFLOW_OVERVIEW_MODEL;
+	const graphHash = createHash("sha256").update(JSON.stringify(workflowEntry.flowGraph)).digest("hex");
+	const hash = createHash("sha256").update(JSON.stringify({
+		source: workflowEntry.flowGraphSourceHash ?? "",
+		graph: graphHash,
+		triggers: triggerLabels,
+		model,
+		version: OVERVIEW_GENERATOR_VERSION
+	})).digest("hex");
+	const cache = await runWithProjectScope(projectId, () => selectWorkflowOverview(workflowId));
+	const cachedPhases = cache?.phases ?? [];
+	if (cache && cache.hash === hash) {
+		if (cache.status === "ready" || cache.status === "failed") return c.json(WorkspaceWorkflowOverviewSchema.parse({
+			status: "ready",
+			summary: cache.summary ?? "",
+			phases: cachedPhases,
+			hash,
+			generatedAt: cache.generatedAt ? cache.generatedAt.toISOString() : (/* @__PURE__ */ new Date()).toISOString(),
+			model: cache.model ?? model
+		}));
+		if (cache.status === "generating") return c.json(WorkspaceWorkflowOverviewSchema.parse({
+			status: "generating",
+			summary: cache.summary ?? "",
+			phases: [],
+			hash,
+			generatedAt: null,
+			model: cache.model ?? model
+		}));
+	}
+	const organization = await selectOrganizationById(organizationId);
+	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+	await runWithProjectScope(projectId, () => setWorkflowOverviewGenerating(workflowId, hash));
+	const source = await loadWorkflowSource(organization, projectId, workflowEntry.moduleFile);
+	try {
+		await (await getProjectScheduler(organization, projectId)).enqueue({
+			kind: "workflow-overview",
+			targetId: workflowId,
+			runId: crypto.randomUUID(),
+			trigger: "api",
+			projectId,
+			dedupeKey: `workflow-overview:${workflowId}:${hash}`,
+			payload: {
+				workflowId,
+				projectId,
+				hash,
+				model,
+				input: {
+					workflowName: row.name.trim(),
+					workflowDescription: row.description.trim(),
+					triggers: triggerLabels,
+					nodes,
+					source
+				}
+			}
+		});
+	} catch {
+		await runWithProjectScope(projectId, () => updateWorkflowOverview(workflowId, { status: "failed" }));
+	}
+	return c.json(WorkspaceWorkflowOverviewSchema.parse({
+		status: "generating",
+		summary: "",
+		phases: [],
+		hash,
+		generatedAt: null,
+		model
+	}));
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/run-inputs/GET.ts
+const handler$64 = async (c) => {
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const schema = jsonSchemaToWorkflowInputSchema((await loadWorkflowManifestEntry(projectId, row.slug))?.requestSchema ?? {});
+	const values = await runWithProjectScope(projectId, () => selectWorkflowRunInputValues(workflowId));
+	return c.json(WorkflowRunInputsSchema.parse({
+		schema,
+		values
+	}));
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/run-inputs/PUT.ts
+const handler$63 = async (c) => {
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	let body;
+	try {
+		body = WorkflowRunInputsPutBodySchema.parse(await c.req.json());
+	} catch {
+		return c.json(ErrorResponseSchema.parse({ error: "Invalid request body" }), 400);
+	}
+	const { row, projectId } = resolved;
+	const schema = jsonSchemaToWorkflowInputSchema((await loadWorkflowManifestEntry(projectId, row.slug))?.requestSchema ?? {});
+	const validation = validateWorkflowRunInputValues(schema, body);
+	if (!validation.ok) return c.json(ErrorResponseSchema.parse({ error: validation.error }), 400);
+	await runWithProjectScope(projectId, () => updateWorkflowRunInputValues(workflowId, body));
+	return c.json(WorkflowRunInputsSchema.parse({
+		schema,
+		values: body
+	}));
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/run/POST.ts
+function parseRunInput(requestSchema, input) {
+	if (typeof z.fromJSONSchema === "function") return z.fromJSONSchema(requestSchema).parse(input ?? {});
+	return z.record(z.string(), z.unknown()).parse(input ?? {});
+}
+/**
+* Manually start a workflow run from the dashboard. Validates the input against
+* the active deploy's request schema, creates a pending run, and enqueues it on
+* the project's queue (drained by the project runtime worker). Returns the run id.
+*/
+const handler$62 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const workflowEntry = (await loadActiveManifest(projectId))?.entries.find((entry) => entry.kind === "workflow" && entry.slug === row.slug);
+	if (!workflowEntry || workflowEntry.kind !== "workflow") return c.json(ErrorResponseSchema.parse({ error: "Workflow not deployed" }), 404);
+	let body = {};
+	if ((c.req.header("content-type") ?? "").includes("application/json")) try {
+		body = await c.req.json();
+	} catch {
+		return c.json(ErrorResponseSchema.parse({ error: "Invalid JSON body" }), 400);
+	}
+	const organization = await selectOrganizationById(organizationId);
+	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+	const userId = c.get("user").id;
+	try {
+		const runId = await runWithProjectScope(projectId, async () => {
+			const scheduler = await getProjectScheduler(organization, projectId);
+			return enqueueWorkflowRunByKey({
+				workflowKey: row.slug,
+				input: body,
+				jobQueue: scheduler,
+				parseInput: (value) => parseRunInput(workflowEntry.requestSchema, value),
+				ranByUserId: userId
+			});
+		});
+		return c.json({ runId }, 202);
+	} catch (error) {
+		if (error instanceof ZodError) return c.json(validationErrorResponse(error, "Invalid workflow input"), 400);
+		throw error;
+	}
+};
+//#endregion
+//#region src/routes/account/workflows/[workflowId]/runs/GET.ts
+const handler$61 = async (c) => {
+	const workflowId = c.req.param("workflowId") ?? "";
+	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
+	const resolved = await resolveWorkflow(c, workflowId);
+	if (!resolved) return c.json(ErrorResponseSchema.parse({ error: "Workflow not found" }), 404);
+	const { row, projectId } = resolved;
+	const scope = listScope(c, projectListScope(accessContext(c)));
+	if (await resolveListProjectIds(c, scope, projectId) === "empty") return c.json(HistoryRunListResponseSchema.parse([]));
+	const runs = await listHistoryRuns({
+		kind: "workflow",
+		projectIds: [projectId],
+		workflow: {
+			projectId,
+			slug: row.slug
+		}
+	});
+	const { organizationId } = c.get("organization");
+	const projects = await selectProjectsByOrganizationId(organizationId, { grantedProjectIds: await grantedProjectIds(c, scope) });
+	const projectNameById = new Map(projects.map((project) => [project.id, project.name]));
+	return c.json(HistoryRunListResponseSchema.parse(await enrichHistoryRuns(runs, projectNameById)));
+};
+//#endregion
 //#region src/routes/account/workflows/runs/[runId]/cancel/POST.ts
 const handler$60 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
 //#endregion
 //#region src/routes/account/resources/skills.ts
 function toSkillSummary(row) {
+	const name = row.name?.trim() || titleCaseKey(row.slug);
 	return SkillSummarySchema.parse({
 		id: row.id,
 		slug: row.slug,
-		name: row.name?.trim() || titleCaseKey(row.slug),
-		description: row.description ?? void 0,
+		name,
+		description: row.description?.trim() || name,
 		projectId: row.projectId,
 		updatedAt: row.updatedAt.toISOString(),
 		sourcePath: row.moduleFile
@@ -27406,22 +28378,22 @@ function mountAccountRoutes(options) {
 	const requireProjectManageMembers = authorize(projectActions.manageMembers);
 	const requireInvitableProjectRole = authorizePayload(InviteProjectMembersRequestSchema, ({ c, ctx, body }) => canInviteToProject(ctx, { invitePermission: getProjectInvitePermission(c) }, body.role));
 	const requireOrgParam = requireOrganizationParam();
-	account.get("/organizations", handler$78);
-	account.get("/organizations/slug-available", handler$77);
+	account.get("/organizations", handler$86);
+	account.get("/organizations/slug-available", handler$85);
 	account.post("/organizations", createOrganizationHandler(options));
-	account.get("/organizations/:organizationId", requireOrgParam, handler$76);
-	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$75);
-	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$74);
-	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$73);
-	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$72);
+	account.get("/organizations/:organizationId", requireOrgParam, handler$84);
+	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$83);
+	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$82);
+	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$81);
+	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$80);
 	account.get("/invitations", handler$17);
 	account.post("/invitations/:invitationId/accept", handler$16);
 	account.post("/invitations/:invitationId/decline", handler$15);
-	account.get("/users/me/avatar", handler$83);
-	account.post("/users/me/avatar/presign", handler$82);
-	account.patch("/users/me/avatar", handler$81);
-	account.get("/users/me/preferences", handler$80);
-	account.patch("/users/me/preferences", handler$79);
+	account.get("/users/me/avatar", handler$91);
+	account.post("/users/me/avatar/presign", handler$90);
+	account.patch("/users/me/avatar", handler$89);
+	account.get("/users/me/preferences", handler$88);
+	account.patch("/users/me/preferences", handler$87);
 	const withOrgDb = withOrganizationProjectDatabase();
 	orgScoped.get("/apps", handler$14);
 	orgScoped.get("/apps/slug-available", handler$7);
@@ -27439,14 +28411,22 @@ function mountAccountRoutes(options) {
 	orgScoped.get("/api-keys", handler$5);
 	orgScoped.post("/api-keys", requireApiKeyCreate, handler$4);
 	orgScoped.delete("/api-keys/:apiKeyId", handler$3);
-	orgScoped.get("/agents", withOrgDb, handler$69);
-	orgScoped.get("/agents/:agentId", withOrgDb, handler$68);
-	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$67);
-	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$66);
-	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$65);
-	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$64);
-	orgScoped.get("/workflows", withOrgDb, handler$62);
-	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$61);
+	orgScoped.get("/agents", withOrgDb, handler$77);
+	orgScoped.get("/agents/:agentId", withOrgDb, handler$76);
+	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$75);
+	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$74);
+	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$73);
+	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$72);
+	orgScoped.get("/workflows", withOrgDb, handler$70);
+	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$69);
+	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$68);
+	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$67);
+	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$66);
+	orgScoped.get("/workflows/:workflowId/overview", withOrgDb, handler$65);
+	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$61);
+	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$64);
+	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$63);
+	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$62);
 	orgScoped.get("/skills", withOrgDb, handler$59);
 	orgScoped.get("/skills/:skillId", withOrgDb, handler$58);
 	orgScoped.get("/triggers", withOrgDb, handler$57);
@@ -27456,10 +28436,10 @@ function mountAccountRoutes(options) {
 	orgScoped.get("/triggers/:triggerId/overview", withOrgDb, handler$53);
 	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$52);
 	orgScoped.get("/recents", withOrgDb, handler$51);
-	orgScoped.get("/history", withOrgDb, handler$71);
-	orgScoped.get("/history/:runId", withOrgDb, handler$70);
+	orgScoped.get("/history", withOrgDb, handler$79);
+	orgScoped.get("/history/:runId", withOrgDb, handler$78);
 	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$60);
-	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$63);
+	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$71);
 	orgScoped.get("/credentials", withOrgDb, handler$25);
 	orgScoped.post("/credentials", withOrgDb, handler$24);
 	orgScoped.get("/credentials/:credentialId", withOrgDb, (c, next) => c.req.param("credentialId") === "instances" ? next() : handler$23(c, next));
@@ -27883,4 +28863,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-Bkcu3Xyf.mjs.map
+//# sourceMappingURL=start-BopA4OXE.mjs.map