@keystrokehq/platform 0.1.53 → 0.1.55

package/dist/{start-QEtcBRLF.mjs → start-Hl5Ax0pS.mjs}

@@ -1,4 +1,4 @@
-import { $ as CreateOrganizationRequestSchema, $n as chatAttachmentExtension, $t as ProjectReachabilityResponseSchema, A as discoverOpenApiApp, An as UploadProjectSourceManifestRequestSchema, At as ListOrganizationMembersResponseSchema, B as AgentSummaryDetailResponseSchema, Bn as WorkflowRunInputsSchema, Bt as OpenApiDiscoverResponseSchema, C as defaultSchedulerPlugin, Cn as UpdateOrganizationMemberRequestSchema, Cr as validateWorkflowRunInputValues, Ct as InviteProjectMembersResponseSchema, D as describeCredentialBinding, Dn as UpdateProjectMemberResponseSchema, Dr as pingProjectTarget, Dt as ListAppsResponseSchema, E as decodeOAuthState, En as UpdateProjectMemberRequestSchema, Er as fetchDeployStatus, Et as ListApiKeysResponseSchema, F as setCredentialInstanceSecret, Fn as UserPreferencesSchema, Ft as ListProjectMetricsResponseSchema, G as AppSlugAvailabilityResponseSchema, Gn as WorkspaceTriggerFileSchema, Gt as PresignChatAttachmentRequestSchema, H as AgentSummarySchema, Hn as WorkflowSummaryListResponseSchema, Ht as OrganizationSidebarBrandingSchema, I as ACTIVE_ORG_HEADER, In as WorkflowCanvasCredentialBindingsSchema, It as ListProjectsResponseSchema, J as CreateApiKeyResponseSchema, Jn as WorkspaceTriggerRunListResponseSchema, Jt as PresignOrgLogoResponseSchema, K as CompleteProjectArtifactResponseSchema, Kn as WorkspaceTriggerListResponseSchema, Kt as PresignChatAttachmentResponseSchema, L as AcceptOrganizationInvitationResponseSchema, Ln as WorkflowCanvasRunSchema, Lt as McpDiscoverRequestSchema, M as PublicHttpUrlError, Mn as UserAvatarPatchSchema, Mt as ListProjectDeploymentsResponseSchema, N as deleteCredentialInstanceSecret, Nn as UserAvatarSchema, Nt as ListProjectFilesResponseSchema, O as discoverGraphqlApp, On as UpdateProjectRequestSchema, Ot as ListCredentialsResponseSchema, P as readCredentialInstanceSecret, Pn as UserPreferencesPatchSchema, Pt as ListProjectMembersResponseSchema, Q as CreateCustomAppResponseSchema, Qn as buildCredentialInstanceLabel, Qt as PresignUserAvatarResponseSchema, R as ActiveOrganizationResponseSchema, Rn as WorkflowCanvasSchema, Rt as McpDiscoverResponseSchema, S as createJobQueue, Sn as UpdateCredentialRequestSchema, Sr as validateCredentialValueAgainstFields, St as InviteProjectMembersRequestSchema, T as completeMcpOAuthConnect, Tn as UpdateOrganizationRequestSchema, Tt as ListAgentWorkspaceFilesResponseSchema, U as AgentWorkspaceFileSummarySchema, Un as WorkflowSummarySchema, Ut as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, V as AgentSummaryListResponseSchema, Vn as WorkflowSummaryDetailResponseSchema, Vt as OrganizationSidebarBrandingPatchSchema, W as AppSlugAvailabilityQuerySchema, Wn as WorkspaceTriggerDetailSchema, Wt as PROJECT_SLUG_TAKEN_MESSAGE, X as CreateCredentialsResponseSchema, Xn as agentMemoryFileId, Xt as PresignProjectSourceResponseSchema, Y as CreateCredentialsRequestSchema, Yn as WorkspaceWorkflowOverviewSchema, Yt as PresignProjectSourceRequestSchema, Z as CreateCustomAppRequestSchema, Zn as agentWorkspaceFileId, Zt as PresignUserAvatarRequestSchema, _ as orgLogoStorageKey, _n as SubmitMarketingContactResponseSchema, _r as parseAppSlug, _t as HistoryRunDetailResponseSchema, a as extractRouteManifestFromArtifact, an as PublicModelsResponseSchema, ar as mapOrganizationInvitation, at as DEFAULT_TRIGGER_OVERVIEW_MODEL, b as publicKeystrokeAssetsObjectUrl, bn as TriggerAttachmentUpdateRequestSchema, br as resolveExternalPlatformOrigin, bt as InviteOrganizationMembersRequestSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as SkillSummaryDetailResponseSchema, cr as mapProjectArtifact, ct as DeclineOrganizationInvitationResponseSchema, d as isStorageNotFoundError$1, dn as SlugAvailabilityQuerySchema, dr as mapProjectSettings, dt as ErrorResponseSchema, en as ProjectResponseSchema, er as deriveCredentialInstanceSlug, et as CreateOrganizationResponseSchema, f as isUserAvatarStorageKey, fn as SlugAvailabilityResponseSchema, fr as mapUserOrganization, ft as GetCredentialResponseSchema, gn as SubmitMarketingContactRequestSchema, gr as organizationSlugErrorCodeFromMessage, gt as HistoryRunCancelResponseSchema, h as loadProjectSourceFiles, hn as StoredProjectSourceManifestSchema, hr as organizationInvitationAcceptPath, ht as GraphqlDiscoverResponseSchema, i as ensureKeystrokeAssetsBucket, in as ProjectSourceResourcesSchema, ir as listenPortFromPublicUrl, it as DEFAULT_CLOUD_PLATFORM_ORIGIN, j as withCredentialAssignments, jn as UploadProjectSourceResponseSchema, jt as ListOrganizationsResponseSchema, k as discoverMcpApp, kn as UpdateProjectSettingsRequestSchema, kt as ListOrganizationInvitationsResponseSchema, l as isOrgLogoStorageKey, ln as SkillSummaryListResponseSchema, lr as mapProjectDeployment, lt as DownloadActiveProjectArtifactResponseSchema, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as StartMcpOAuthConnectionResultSchema, mr as normalizeUserPreferences, mt as GraphqlDiscoverRequestSchema, n as chatAttachmentStorageKey, nn as ProjectSlugAvailabilityQuerySchema, nr as isAllowedChatAttachmentMediaType, nt as CreateProjectRequestSchema, o as isChatAttachmentStorageKey, on as RecentResourceListResponseSchema, or as mapOrganizationMember, ot as DEFAULT_WORKFLOW_CANVAS_MODEL, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as StartMcpOAuthConnectionInputSchema, pr as mergeUserPreferences, pt as GetCustomAppResponseSchema, q as CreateApiKeyRequestSchema, qn as WorkspaceTriggerOverviewSchema, qt as PresignOrgLogoRequestSchema, r as createAssetsStorageClient, rn as ProjectSlugAvailabilityResponseSchema, rr as jsonSchemaToWorkflowInputSchema, rt as CreateProjectResponseSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as RecentResourceSchema, sr as mapProject, st as DEFAULT_WORKFLOW_OVERVIEW_MODEL, t as RouteManifestNotFoundError, tn as ProjectSettingsResponseSchema, tr as displayCredentialAppName, tt as CreateProjectArtifactResponseSchema, u as isStorageBucketNotFoundError, un as SkillSummarySchema, ur as mapProjectMember, ut as DownloadActiveProjectSourceResponseSchema, v as projectArtifactKey, vn as SubmitTeamRequestRequestSchema, vr as parseStoredRouteManifest, vt as HistoryRunListQuerySchema, w as beginMcpOAuthConnect, wn as UpdateOrganizationMemberResponseSchema, wr as validationErrorResponse, wt as ListAgentMemoryFilesResponseSchema, x as userAvatarStorageKey, xn as TriggerRunListQuerySchema, xr as resolveUniqueCredentialInstanceLabel, xt as InviteOrganizationMembersResponseSchema, y as projectSourceBlobKey, yn as SubmitTeamRequestResponseSchema, yr as projectFileId, yt as HistoryRunListResponseSchema, z as AgentMemoryFileSummarySchema, zn as WorkflowRunInputsPutBodySchema, zt as OpenApiDiscoverRequestSchema } from "./dist-BqQHu3dS.mjs";
+import { $ as CreateCredentialsResponseSchema, $n as WorkspaceTriggerListResponseSchema, $t as PresignOrgLogoRequestSchema, A as discoverOpenApiApp, An as UpdateOrganizationMemberRequestSchema, Ar as validateCredentialValueAgainstFields, At as ListAppsResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UserAvatarSchema, Bt as ListProjectsResponseSchema, C as defaultSchedulerPlugin, Cn as SubmitMarketingContactResponseSchema, Cr as organizationInvitationAcceptPath, Ct as InviteOrganizationMembersRequestSchema, D as describeCredentialBinding, Dn as TriggerRunListQuerySchema, Dr as projectFileId, Dt as ListAgentMemoryFilesResponseSchema, E as decodeOAuthState, En as TriggerAttachmentUpdateRequestSchema, Er as parseStoredRouteManifest, Et as InviteProjectMembersResponseSchema, F as readCredentialInstanceSecret, Fn as UpdateProjectRequestSchema, Fr as pingProjectTarget, Ft as ListOrganizationsResponseSchema, G as AgentWorkspaceFileSummarySchema, Gn as WorkflowCanvasSchema, Gt as OpenApiDiscoverRequestSchema, H as AgentSummaryDetailResponseSchema, Hn as UserPreferencesSchema, Ht as ManagedServiceKindSchema, I as setCredentialInstanceSecret, In as UpdateProjectSettingsRequestSchema, It as ListProjectDeploymentsResponseSchema, J as CompleteProjectArtifactResponseSchema, Jn as WorkflowSummaryDetailResponseSchema, Jt as OrganizationSidebarBrandingSchema, K as AppSlugAvailabilityQuerySchema, Kn as WorkflowRunInputsPutBodySchema, Kt as OpenApiDiscoverResponseSchema, L as setManagedServiceCredential, Ln as UploadProjectSourceManifestRequestSchema, Lt as ListProjectFilesResponseSchema, M as PublicHttpUrlError, Mn as UpdateOrganizationRequestSchema, Mr as validationErrorResponse, Mt as ListManagedServiceCredentialsResponseSchema, N as deleteCredentialInstanceSecret, Nn as UpdateProjectMemberRequestSchema, Nt as ListOrganizationInvitationsResponseSchema, O as discoverGraphqlApp, On as UpdateCredentialRequestSchema, Or as resolveExternalPlatformOrigin, Ot as ListAgentWorkspaceFilesResponseSchema, P as deleteManagedServiceCredential$1, Pn as UpdateProjectMemberResponseSchema, Pr as fetchDeployStatus, Pt as ListOrganizationMembersResponseSchema, Q as CreateCredentialsRequestSchema, Qn as WorkspaceTriggerFileSchema, Qt as PresignChatAttachmentResponseSchema, R as ACTIVE_ORG_HEADER, Rn as UploadProjectSourceResponseSchema, Rt as ListProjectMembersResponseSchema, S as createJobQueue, Sn as SubmitMarketingContactRequestSchema, Sr as normalizeUserPreferences, St as HistoryRunListResponseSchema, T as completeMcpOAuthConnect, Tn as SubmitTeamRequestResponseSchema, Tr as parseAppSlug, Tt as InviteProjectMembersRequestSchema, U as AgentSummaryListResponseSchema, Un as WorkflowCanvasCredentialBindingsSchema, Ut as McpDiscoverRequestSchema, V as AgentMemoryFileSummarySchema, Vn as UserPreferencesPatchSchema, Vt as ManagedServiceCredentialSchema, W as AgentSummarySchema, Wn as WorkflowCanvasRunSchema, Wt as McpDiscoverResponseSchema, X as CreateApiKeyRequestSchema, Xn as WorkflowSummarySchema, Xt as PROJECT_SLUG_TAKEN_MESSAGE, Y as ConnectManagedServiceCredentialRequestSchema, Yn as WorkflowSummaryListResponseSchema, Yt as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, Z as CreateApiKeyResponseSchema, Zn as WorkspaceTriggerDetailSchema, Zt as PresignChatAttachmentRequestSchema, _ as orgLogoStorageKey, _n as SlugAvailabilityQuerySchema, _r as mapProjectDeployment, _t as GraphqlDiscoverRequestSchema, a as extractRouteManifestFromArtifact, an as ProjectReachabilityResponseSchema, ar as buildCredentialInstanceLabel, at as CreateProjectRequestSchema, b as publicKeystrokeAssetsObjectUrl, bn as StartMcpOAuthConnectionResultSchema, br as mapUserOrganization, bt as HistoryRunDetailResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as ProjectSlugAvailabilityQuerySchema, cr as displayCredentialAppName, ct as DEFAULT_TRIGGER_OVERVIEW_MODEL, d as isStorageNotFoundError$1, dn as PublicModelsResponseSchema, dr as jsonSchemaToWorkflowInputSchema, dt as DeclineOrganizationInvitationResponseSchema, en as PresignOrgLogoResponseSchema, er as WorkspaceTriggerOverviewSchema, et as CreateCustomAppRequestSchema, f as isUserAvatarStorageKey, fn as RecentResourceListResponseSchema, fr as listenPortFromPublicUrl, ft as DownloadActiveProjectArtifactResponseSchema, gn as SkillSummarySchema, gr as mapProjectArtifact, gt as GetCustomAppResponseSchema, h as loadProjectSourceFiles, hn as SkillSummaryListResponseSchema, hr as mapProject, ht as GetCredentialResponseSchema, i as ensureKeystrokeAssetsBucket, in as PresignUserAvatarResponseSchema, ir as agentWorkspaceFileId, it as CreateProjectArtifactResponseSchema, j as withCredentialAssignments, jn as UpdateOrganizationMemberResponseSchema, jr as validateWorkflowRunInputValues, jt as ListCredentialsResponseSchema, k as discoverMcpApp, kn as UpdateManagedServiceCredentialRequestSchema, kr as resolveUniqueCredentialInstanceLabel, kt as ListApiKeysResponseSchema, l as isOrgLogoStorageKey, ln as ProjectSlugAvailabilityResponseSchema, lr as isAllowedChatAttachmentMediaType, lt as DEFAULT_WORKFLOW_CANVAS_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as SkillSummaryDetailResponseSchema, mr as mapOrganizationMember, mt as ErrorResponseSchema, n as chatAttachmentStorageKey, nn as PresignProjectSourceResponseSchema, nr as WorkspaceWorkflowOverviewSchema, nt as CreateOrganizationRequestSchema, o as isChatAttachmentStorageKey, on as ProjectResponseSchema, or as chatAttachmentExtension, ot as CreateProjectResponseSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as RecentResourceSchema, pr as mapOrganizationInvitation, pt as DownloadActiveProjectSourceResponseSchema, q as AppSlugAvailabilityResponseSchema, qn as WorkflowRunInputsSchema, qt as OrganizationSidebarBrandingPatchSchema, r as createAssetsStorageClient, rn as PresignUserAvatarRequestSchema, rr as agentMemoryFileId, rt as CreateOrganizationResponseSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as ProjectSettingsResponseSchema, sr as deriveCredentialInstanceSlug, st as DEFAULT_CLOUD_PLATFORM_ORIGIN, t as RouteManifestNotFoundError, tn as PresignProjectSourceRequestSchema, tr as WorkspaceTriggerRunListResponseSchema, tt as CreateCustomAppResponseSchema, u as isStorageBucketNotFoundError, un as ProjectSourceResourcesSchema, ur as isLlmProviderSlug, ut as DEFAULT_WORKFLOW_OVERVIEW_MODEL, v as projectArtifactKey, vn as SlugAvailabilityResponseSchema, vr as mapProjectMember, vt as GraphqlDiscoverResponseSchema, w as beginMcpOAuthConnect, wn as SubmitTeamRequestRequestSchema, wr as organizationSlugErrorCodeFromMessage, wt as InviteOrganizationMembersResponseSchema, x as userAvatarStorageKey, xn as StoredProjectSourceManifestSchema, xr as mergeUserPreferences, xt as HistoryRunListQuerySchema, y as projectSourceBlobKey, yn as StartMcpOAuthConnectionInputSchema, yr as mapProjectSettings, yt as HistoryRunCancelResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UserAvatarPatchSchema, zt as ListProjectMetricsResponseSchema } from "./dist-DEchoiQF.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
 import { t as withProjectScope } from "./with-project-scope-DWwbN8Qs.mjs";
@@ -7,7 +7,7 @@ import "node:fs/promises";
 import { buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, deleteCredentialInstanceById, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listReplayEvents, listTriggersByIds, listWorkspaceTriggerRunRows, listWorkspaceTriggers, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectTriggerById, selectWorkflowCanvasAnnotations, selectWorkflowLastRunAtByIds, selectWorkflowOverview, selectWorkflowRunById, selectWorkflowRunForWorkflow, selectWorkflowRunInputValues, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, setWorkflowCanvasAnnotationsGenerating, setWorkflowOverviewGenerating, storedTriggerSourceFromRow, touchResourceActivity, updateTriggerOverview, updateWorkflowCanvasAnnotations, updateWorkflowOverview, updateWorkflowRunInputValues, upsertCredentialInstance } from "@keystrokehq/database";
 import { ZodError, z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listWebhookApiKeys, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectFailed, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
+import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listWebhookApiKeys, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectFailed, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
 import { createHash } from "node:crypto";
 import "node:fs";
 import { basename, join, normalize, relative, resolve } from "node:path";
@@ -22871,43 +22871,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-BwrIKo9e.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-R4Cnns5F.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-mB6DM5c9.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-DCXEuFt0.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-ClskqCYY.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-5rs5x0RT.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-Cpa3AKzE.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-6O0HyoA-.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-KDLgDXFM.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-tv9LWHhK.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-B6NcRSyF.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-CNpyQxF3.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-C-GBqC9s.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-6CvPBOow.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-CPspMPNT.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-BYJ6_SMN.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-qW-7oQyg.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-CQE2v88e.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-CNYwrR4-.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-B8W7nfo9.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22923,15 +22923,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-Wzr2-n4M.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-B4acjLPZ.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-C_LU44mK.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-CKcny9gR.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-DH7iDqD9.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-DI9u_nAF.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -22939,95 +22939,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-BstDqZ38.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ--lMJFlzb.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BstDqZ38.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ--lMJFlzb.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BstDqZ38.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ--lMJFlzb.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-_FIAtZQw.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-C6rEEtX-.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-Df7kpiv6.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-DYBGdACW.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-BnMdAE-x.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-BjVEbBN6.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-BnN2ISqX.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-CxBIgUMj.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-DGNDNI8a.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-n7N_bj6W.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-Mwt2Su5e.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-ZMIlxOzJ.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-BG4iW9Wt.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-Z5nm_icw.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-DLMKx3yo.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-DZvlDPNb.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-ePFqNd67.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-Bbaoj3Pe.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-rmqFoDcj.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-inShT861.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-BSM8-ecS.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-JPqxGiC0.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-CQDarAcW.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-Ck2VUAZp.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-zV5HNGFR.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-dEmO_WQR.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-B5W8FvUb.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-B1WSTRhb.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-DUrclyBB.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-DVk5mdcQ.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-CudXhwwp.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-BjhU9zjR.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-90Fkf-mA.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-0v-T2Zgh.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-B2SsjP69.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-BnNJkQJY.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-DjTHzGzd.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-DQhdtx72.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-C0uDsVZ3.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-jFsimGN5.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23039,19 +23039,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-DEvRLNuK.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-D5Ldts9w.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-DSVqymZE.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-DQqXgCuU.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-Dh5etk1U.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-KKKJVyPf.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-Dh5etk1U.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-KKKJVyPf.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23067,7 +23067,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-_FupW1IJ.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-iWf36Dsu.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23083,23 +23083,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-BNYqUBa7.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-B_8Kmt-N.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-BNYqUBa7.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-B_8Kmt-N.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-Hdzu1uJt.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-WYETfFNn.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-Ce_bAP1H.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-By3d_F1e.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-BfcrtrOs.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-BmIll44b.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23107,15 +23107,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-DkJXCrmy.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-BcjySERh.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-Dne5mMaw.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-CwIUkhjH.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-BLvajVmO.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-BAt7fBsS.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23123,19 +23123,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-DFQahdyX.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-D4PfmiEZ.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-BlycuicI.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-CqpFEZFY.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-BEYnyAWP.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-DLP_UpcZ.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-DbNgtnUF.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-BjhiAkHR.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23143,11 +23143,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-DVPXCLoK.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-BuWlh-KG.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-U6OdCUmd.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-JdBD9Nl6.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23155,7 +23155,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-Dyv0HOZN.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-diMTeZlZ.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23167,49 +23167,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-q1SIAeyU.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-DLiOe4N2.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-CQnWxMO4.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DMxfeUUV.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-CQnWxMO4.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DMxfeUUV.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-CQnWxMO4.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DMxfeUUV.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-C07U8BTo.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-C5e6z6Me.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-BFW23g9z.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-CsDLK7RU.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-CYBKAETl.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-CngoETFG.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-BD8TPFQJ.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-q5dIDepW.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-BgIkDuOQ.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-Ce5EP5QO.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-BgIkDuOQ.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-Ce5EP5QO.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-FhbK70_Y.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-PTs9Ek8M.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-FhbK70_Y.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-PTs9Ek8M.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -24603,6 +24603,16 @@ const billingRoleGrants = {
 	admin: [billingActions.manage],
 	builder: []
 };
+const managedServicesActions = {
+	read: "managedServices:read",
+	manage: "managedServices:manage"
+};
+const managedServicesGrants = Object.values(managedServicesActions);
+const managedServicesRoleGrants = {
+	owner: [managedServicesActions.read, managedServicesActions.manage],
+	admin: [managedServicesActions.read, managedServicesActions.manage],
+	builder: [managedServicesActions.read]
+};
 const organizationActions = {
 	update: "organization:update",
 	delete: "organization:delete"
@@ -24637,6 +24647,7 @@ function mergeRoleGrants(role) {
 		...organizationRoleGrants[role],
 		...userRoleGrants[role],
 		...apiKeysRoleGrants[role],
+		...managedServicesRoleGrants[role],
 		...billingRoleGrants[role]
 	];
 }
@@ -24696,6 +24707,7 @@ function canReadApiKey(ctx, input) {
 	...organizationGrants,
 	...userGrants,
 	...apiKeysGrants,
+	...managedServicesGrants,
 	...projectGrants,
 	...billingGrants
 ];
@@ -24953,7 +24965,7 @@ function withOrganizationProjectDatabase() {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/GET.ts
-const handler$91 = async (c) => {
+const handler$95 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserAvatarSchema.parse({ url: dbUser.image ?? null }));
@@ -24972,7 +24984,7 @@ function avatarExtensionForContentType(contentType) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/presign/POST.ts
-const handler$90 = async (c) => {
+const handler$94 = async (c) => {
 	const parsed = PresignUserAvatarRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25012,7 +25024,7 @@ async function deleteStoredImageIfOwned(input) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/PATCH.ts
-const handler$89 = async (c) => {
+const handler$93 = async (c) => {
 	const parsed = UserAvatarPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar update" }), 400);
 	const user = c.get("user");
@@ -25054,14 +25066,14 @@ const handler$89 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/GET.ts
-const handler$88 = async (c) => {
+const handler$92 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserPreferencesSchema.parse(normalizeUserPreferences(dbUser.preferences)));
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/PATCH.ts
-const handler$87 = async (c) => {
+const handler$91 = async (c) => {
 	const parsed = UserPreferencesPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid preferences update" }), 400);
 	const user = c.get("user");
@@ -25076,7 +25088,7 @@ const handler$87 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/GET.ts
-const handler$86 = async (c) => {
+const handler$90 = async (c) => {
 	const memberships = await selectUserOrganizations(c.get("user").id);
 	return c.json(ListOrganizationsResponseSchema.parse(memberships.map(mapUserOrganization)));
 };
@@ -25154,7 +25166,7 @@ function createOrganizationHandler(deps) {
 }
 //#endregion
 //#region src/routes/account/organizations/slug-available/GET.ts
-const handler$85 = async (c) => {
+const handler$89 = async (c) => {
 	const parsed = SlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
 		excludeOrganizationId: c.req.query("excludeOrganizationId")
@@ -25165,7 +25177,7 @@ const handler$85 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/GET.ts
-const handler$84 = async (c) => {
+const handler$88 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const membership = await selectUserOrganizationMembership(c.get("user").id, organizationId);
 	if (!membership) throw new Error(`Organization membership missing after param guard: ${organizationId}`);
@@ -25173,7 +25185,7 @@ const handler$84 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/PATCH.ts
-const handler$83 = async (c) => {
+const handler$87 = async (c) => {
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
 	const parsed = UpdateOrganizationRequestSchema.safeParse(body);
@@ -25198,7 +25210,7 @@ const handler$83 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/GET.ts
-const handler$82 = async (c) => {
+const handler$86 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
 	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
@@ -25247,7 +25259,7 @@ async function finalizeOrgLogoVariant(input) {
 		publicUrl: finalized.publicUrl
 	};
 }
-const handler$81 = async (c) => {
+const handler$85 = async (c) => {
 	const parsed = OrganizationSidebarBrandingPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid branding update" }), 400);
 	const { organizationId } = c.get("organization");
@@ -25275,7 +25287,7 @@ const handler$81 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/logo/presign/POST.ts
-const handler$80 = async (c) => {
+const handler$84 = async (c) => {
 	const parsed = PresignOrgLogoRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid logo upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25376,7 +25388,7 @@ async function attachRanAsToDetail(detail, ranByUserId) {
 }
 //#endregion
 //#region src/routes/account/history/GET.ts
-const handler$79 = async (c) => {
+const handler$83 = async (c) => {
 	const organization = c.get("organization");
 	const ctx = accessContext(c);
 	const query = HistoryRunListQuerySchema.parse({
@@ -25399,7 +25411,7 @@ const handler$79 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/history/[runId]/GET.ts
-const handler$78 = async (c) => {
+const handler$82 = async (c) => {
 	const runId = c.req.param("runId") ?? "";
 	if (!runId) return c.json(null, 404);
 	const core = await findHistoryRunCore(runId);
@@ -25457,7 +25469,7 @@ function toAgentSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/agents/GET.ts
-const handler$77 = async (c) => {
+const handler$81 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, agentListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(AgentSummaryListResponseSchema.parse([]));
 	const rows = await listActiveAgents(filter);
@@ -25471,7 +25483,7 @@ function touchResourceActivityBestEffort(options) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/GET.ts
-const handler$76 = async (c) => {
+const handler$80 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(AgentSummaryDetailResponseSchema.parse(null));
@@ -25494,7 +25506,7 @@ const handler$76 = async (c) => {
 function relativePathsFromStorageKeys(prefix, keys) {
 	return keys.filter((key) => key.startsWith(prefix) && key.endsWith(".md")).map((key) => key.slice(prefix.length)).filter((path) => !path.startsWith(".") && !path.includes("/."));
 }
-const handler$75 = async (c) => {
+const handler$79 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentMemoryFilesResponseSchema.parse({ files: [] }), 404);
@@ -25519,7 +25531,7 @@ function isStorageNotFoundError(error) {
 	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
 	return name === "NoSuchKey" || code === "NoSuchKey" || code === "NotFound" || status === 404;
 }
-const handler$74 = async (c) => {
+const handler$78 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25573,7 +25585,7 @@ function workspaceRelativePathsFromStorageKeys(keys) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/GET.ts
-const handler$73 = async (c) => {
+const handler$77 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
@@ -25596,7 +25608,7 @@ const handler$73 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/content/GET.ts
-const handler$72 = async (c) => {
+const handler$76 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25645,7 +25657,7 @@ async function cancelHistoryRun(c, kind, cancel) {
 }
 //#endregion
 //#region src/routes/account/agents/sessions/[sessionId]/cancel/POST.ts
-const handler$71 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
+const handler$75 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
 //#endregion
 //#region src/routes/account/resources/workflows.ts
 function toWorkflowSummary(row, options) {
@@ -25662,7 +25674,7 @@ function toWorkflowSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/workflows/GET.ts
-const handler$70 = async (c) => {
+const handler$74 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, workflowListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(WorkflowSummaryListResponseSchema.parse([]));
 	const rows = await listActiveWorkflows(filter);
@@ -25671,7 +25683,7 @@ const handler$70 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/GET.ts
-const handler$69 = async (c) => {
+const handler$73 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const row = workflowId ? await selectActiveWorkflowById(workflowId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessWorkflow)) return c.json(WorkflowSummaryDetailResponseSchema.parse(null));
@@ -26059,7 +26071,7 @@ function buildWorkflowCanvas(input) {
 //#region src/routes/account/workflows/[workflowId]/canvas/GET.ts
 /** Bumped when the annotation prompt/model changes, so cached annotations invalidate. */
 const ANNOTATIONS_GENERATOR_VERSION = "wf-canvas-annotations-v1";
-const handler$68 = async (c) => {
+const handler$72 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -26234,7 +26246,7 @@ function toBinding(key, description) {
 * each of its requirements currently binds to (read-only, no decryption). Not
 * content-hash cached — credential state changes without a redeploy.
 */
-const handler$67 = async (c) => {
+const handler$71 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26389,7 +26401,7 @@ function toCanvasRunStatus(status) {
 	if (status === "canceled") return "canceled";
 	return "running";
 }
-const handler$66 = async (c) => {
+const handler$70 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const runId = c.req.param("runId") ?? "";
 	if (!workflowId.trim() || !runId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow or run id" }), 400);
@@ -26444,7 +26456,7 @@ async function loadWorkflowSource(organization, projectId, sourcePath) {
 		return null;
 	}
 }
-const handler$65 = async (c) => {
+const handler$69 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -26547,7 +26559,7 @@ const handler$65 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/run-inputs/GET.ts
-const handler$64 = async (c) => {
+const handler$68 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26562,7 +26574,7 @@ const handler$64 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/run-inputs/PUT.ts
-const handler$63 = async (c) => {
+const handler$67 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26594,7 +26606,7 @@ function parseRunInput(requestSchema, input) {
 * the active deploy's request schema, creates a pending run, and enqueues it on
 * the project's queue (drained by the project runtime worker). Returns the run id.
 */
-const handler$62 = async (c) => {
+const handler$66 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -26631,7 +26643,7 @@ const handler$62 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/runs/GET.ts
-const handler$61 = async (c) => {
+const handler$65 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26654,7 +26666,7 @@ const handler$61 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/runs/[runId]/cancel/POST.ts
-const handler$60 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
+const handler$64 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
 //#endregion
 //#region src/routes/account/resources/skills.ts
 function toSkillSummary(row) {
@@ -26671,7 +26683,7 @@ function toSkillSummary(row) {
 }
 //#endregion
 //#region src/routes/account/skills/GET.ts
-const handler$59 = async (c) => {
+const handler$63 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, skillListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(SkillSummaryListResponseSchema.parse([]));
 	const rows = await listActiveSkills(filter);
@@ -26679,7 +26691,7 @@ const handler$59 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/skills/[skillId]/GET.ts
-const handler$58 = async (c) => {
+const handler$62 = async (c) => {
 	const skillId = c.req.param("skillId") ?? "";
 	const row = skillId ? await selectActiveSkillById(skillId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessSkill)) return c.json(SkillSummaryDetailResponseSchema.parse(null));
@@ -26786,7 +26798,7 @@ function toWorkspaceTriggerRunSummary(item, assignments) {
 }
 //#endregion
 //#region src/routes/account/triggers/GET.ts
-const handler$57 = async (c) => {
+const handler$61 = async (c) => {
 	const organization = c.get("organization");
 	const scope = listScope(c, projectListScope(accessContext(c)));
 	const filter = await resolveListProjectIds(c, scope, c.req.query("projectId"));
@@ -26802,7 +26814,7 @@ const handler$57 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/GET.ts
-const handler$56 = async (c) => {
+const handler$60 = async (c) => {
 	const organization = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -26818,7 +26830,7 @@ const handler$56 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/runs/GET.ts
-const handler$55 = async (c) => {
+const handler$59 = async (c) => {
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
 	const filter = await resolveListProjectIds(c, listScope(c, projectListScope(accessContext(c))));
@@ -26845,7 +26857,7 @@ const handler$55 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/file/GET.ts
-const handler$54 = async (c) => {
+const handler$58 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -26882,7 +26894,7 @@ function envelope(row, status, hash) {
 		model: row.overviewModel ?? "deepseek/deepseek-v4-flash"
 	});
 }
-const handler$53 = async (c) => {
+const handler$57 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -26942,7 +26954,7 @@ const handler$53 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/attachments/[attachmentId]/PATCH.ts
-const handler$52 = async (c) => {
+const handler$56 = async (c) => {
 	const organization = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	const attachmentId = c.req.param("attachmentId") ?? "";
@@ -27006,7 +27018,7 @@ function latestRecentInteractionAt(recent) {
 //#endregion
 //#region src/routes/account/recents/GET.ts
 const RECENTS_LIMIT = 50;
-const handler$51 = async (c) => {
+const handler$55 = async (c) => {
 	const userId = c.get("user").id;
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, { kind: "member-only" });
@@ -27032,7 +27044,7 @@ const handler$51 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/GET.ts
-const handler$50 = async (c) => {
+const handler$54 = async (c) => {
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, listScope(c, projectListScope(accessContext(c))));
 	const projects = await selectProjectsByOrganizationId(organization.organizationId, { grantedProjectIds: grantedProjectIdsList });
@@ -27058,7 +27070,7 @@ function mergeProjectListMetrics(input) {
 }
 //#endregion
 //#region src/routes/account/projects/metrics/GET.ts
-const handler$49 = async (c) => {
+const handler$53 = async (c) => {
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, listScope(c, projectListScope(accessContext(c))));
 	const [resourceCounts, lastDeploymentAtByProject] = await Promise.all([selectProjectResourceCounts(grantedProjectIdsList !== void 0 ? { projectIds: grantedProjectIdsList } : void 0), selectLastDeploymentAtByProject(organization.organizationId)]);
@@ -27074,7 +27086,7 @@ const handler$49 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/POST.ts
-const handler$48 = async (c) => {
+const handler$52 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const body = await c.req.json().catch(() => null);
@@ -27085,7 +27097,7 @@ const handler$48 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/slug-available/GET.ts
-const handler$47 = async (c) => {
+const handler$51 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = ProjectSlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
@@ -27097,12 +27109,12 @@ const handler$47 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/GET.ts
-const handler$46 = async (c) => {
+const handler$50 = async (c) => {
 	return c.json(ProjectResponseSchema.parse(routeProject(c.get("project"))));
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/PATCH.ts
-const handler$45 = async (c) => {
+const handler$49 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -27120,7 +27132,7 @@ const handler$45 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/DELETE.ts
-const handler$44 = async (c) => {
+const handler$48 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	if (!await deleteProjectForOrganization(organization.organizationId, project.id)) return c.json(ErrorResponseSchema.parse({ error: "Project not found" }), 404);
@@ -27128,7 +27140,7 @@ const handler$44 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/deployments/GET.ts
-const handler$43 = async (c) => {
+const handler$47 = async (c) => {
 	const rows = await selectProjectDeployments(c.get("project").id);
 	return c.json(ListProjectDeploymentsResponseSchema.parse(rows.map(mapProjectDeployment)));
 };
@@ -27136,7 +27148,7 @@ const handler$43 = async (c) => {
 //#region src/routes/account/projects/[projectId]/artifacts/POST.ts
 const DEFAULT_PRESIGN_TTL_SECONDS$1 = 900;
 const ARTIFACT_CONTENT_TYPE = "application/gzip";
-const handler$42 = async (c) => {
+const handler$46 = async (c) => {
 	const project = c.get("project");
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
@@ -27164,7 +27176,7 @@ const handler$42 = async (c) => {
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/active/download/GET.ts
 const DEFAULT_PRESIGN_TTL_SECONDS = 900;
-const handler$41 = async (c) => {
+const handler$45 = async (c) => {
 	const project = c.get("project");
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
@@ -27183,7 +27195,7 @@ const handler$41 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/active/source/GET.ts
-const handler$40 = async (c) => {
+const handler$44 = async (c) => {
 	const project = c.get("project");
 	const active = await selectActiveArtifactSourceManifestForProject(project.id);
 	if (!active?.sourceManifestJson) return c.json(ErrorResponseSchema.parse({ error: "No active source for project" }), 404);
@@ -27206,7 +27218,7 @@ const handler$40 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/complete/POST.ts
-const handler$39 = async (c) => {
+const handler$43 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27246,7 +27258,7 @@ const handler$39 = async (c) => {
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/source/presign/POST.ts
 const SOURCE_BLOB_CONTENT_TYPE = "text/plain; charset=utf-8";
-const handler$38 = async (c) => {
+const handler$42 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27274,7 +27286,7 @@ const handler$38 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/source/manifest/POST.ts
-const handler$37 = async (c) => {
+const handler$41 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27306,7 +27318,7 @@ function extensionFromUpload(contentType, filename) {
 	if (fromName && /^[a-z0-9]+$/.test(fromName)) return fromName;
 	return chatAttachmentExtension(contentType) ?? "bin";
 }
-const handler$36 = async (c) => {
+const handler$40 = async (c) => {
 	const project = c.get("project");
 	const slug = c.req.param("slug");
 	if (!slug) return c.json(ErrorResponseSchema.parse({ error: "Agent slug is required" }), 400);
@@ -27331,7 +27343,7 @@ const handler$36 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/agents/[slug]/attachments/[...key]/GET.ts
-const handler$35 = async (c) => {
+const handler$39 = async (c) => {
 	const project = c.get("project");
 	const slug = c.req.param("slug");
 	const keyParam = c.req.param("key");
@@ -27366,7 +27378,7 @@ function resolveSourcePaths(rows, kindDir, filePaths) {
 		}] : [];
 	});
 }
-const handler$34 = async (c) => {
+const handler$38 = async (c) => {
 	const project = c.get("project");
 	const active = await selectActiveArtifactSourceManifestForProject(project.id);
 	if (!active || !active.sourceManifestJson) return c.json(ListProjectFilesResponseSchema.parse({
@@ -27400,7 +27412,7 @@ const handler$34 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/files/content/GET.ts
-const handler$33 = async (c) => {
+const handler$37 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27439,7 +27451,7 @@ function createProjectReachabilityHandler(hosting) {
 }
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/GET.ts
-const handler$32 = async (c) => {
+const handler$36 = async (c) => {
 	const project = c.get("project");
 	const currentUserId = c.get("user").id;
 	const members = await selectProjectMembers(project.id);
@@ -27447,7 +27459,7 @@ const handler$32 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/POST.ts
-const handler$31 = async (c) => {
+const handler$35 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -27463,7 +27475,7 @@ const handler$31 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/[userId]/PATCH.ts
-const handler$30 = async (c) => {
+const handler$34 = async (c) => {
 	const project = c.get("project");
 	const userId = c.req.param("userId");
 	const body = await c.req.json().catch(() => null);
@@ -27480,7 +27492,7 @@ const handler$30 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/[userId]/DELETE.ts
-const handler$29 = async (c) => {
+const handler$33 = async (c) => {
 	const project = c.get("project");
 	const userId = c.req.param("userId");
 	if (!userId) return c.json(ErrorResponseSchema.parse({ error: "User id is required" }), 400);
@@ -27494,7 +27506,7 @@ const handler$29 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/me/DELETE.ts
-const handler$28 = async (c) => {
+const handler$32 = async (c) => {
 	const project = c.get("project");
 	const userId = c.get("user").id;
 	try {
@@ -27507,13 +27519,13 @@ const handler$28 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/settings/GET.ts
-const handler$27 = async (c) => {
+const handler$31 = async (c) => {
 	const project = c.get("project");
 	return c.json(ProjectSettingsResponseSchema.parse(mapProjectSettings(project)));
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/settings/PATCH.ts
-const handler$26 = async (c) => {
+const handler$30 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -27664,7 +27676,7 @@ async function enrichCredentialInstances(rows, organizationId) {
 }
 //#endregion
 //#region src/routes/account/credentials/GET.ts
-const handler$25 = async (c) => {
+const handler$29 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const [rows, granted] = await Promise.all([listAllCredentialInstances(), grantedProjectIds(c, listScope(c, credentialListScope(accessContext(c))))]);
@@ -27681,7 +27693,7 @@ function withTargetScope(target, fn) {
 	if (target.projectScope) return runWithProjectScope(target.projectScope, fn);
 	return fn();
 }
-const handler$24 = async (c) => {
+const handler$28 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const parsed = CreateCredentialsRequestSchema.safeParse(await c.req.json().catch(() => null));
@@ -27762,7 +27774,7 @@ const handler$24 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/credentials/[credentialId]/GET.ts
-const handler$23 = async (c) => {
+const handler$27 = async (c) => {
 	const organization = c.get("organization");
 	const credentialId = c.req.param("credentialId") ?? "";
 	const row = credentialId ? await selectCredentialInstanceById(credentialId) : void 0;
@@ -27772,7 +27784,7 @@ const handler$23 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/credentials/[credentialId]/PATCH.ts
-const handler$22 = async (c) => {
+const handler$26 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const credentialId = c.req.param("credentialId") ?? "";
@@ -27870,7 +27882,7 @@ function createDeleteCredentialHandler(options = {}) {
 }
 //#endregion
 //#region src/routes/account/members/GET.ts
-const handler$21 = async (c) => {
+const handler$25 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const members = await selectOrganizationMembers(organizationId);
 	return c.json(ListOrganizationMembersResponseSchema.parse(members.map(mapOrganizationMember)));
@@ -27918,7 +27930,7 @@ async function sendOrganizationInviteEmail(payload, resend) {
 }
 //#endregion
 //#region src/routes/account/members/invitations/POST.ts
-const handler$20 = async (c) => {
+const handler$24 = async (c) => {
 	const user = c.get("user");
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
@@ -27944,7 +27956,7 @@ const handler$20 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/members/[userId]/PATCH.ts
-const handler$19 = async (c) => {
+const handler$23 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const userId = c.req.param("userId");
 	const body = await c.req.json().catch(() => null);
@@ -27961,7 +27973,7 @@ const handler$19 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/members/[userId]/DELETE.ts
-const handler$18 = async (c) => {
+const handler$22 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const userId = c.req.param("userId");
 	if (!userId) return c.json(ErrorResponseSchema.parse({ error: "User id is required" }), 400);
@@ -27975,13 +27987,13 @@ const handler$18 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/invitations/GET.ts
-const handler$17 = async (c) => {
+const handler$21 = async (c) => {
 	const invitations = await selectPendingInvitationsForUser(c.get("user").id);
 	return c.json(ListOrganizationInvitationsResponseSchema.parse(invitations.map(mapOrganizationInvitation)));
 };
 //#endregion
 //#region src/routes/account/invitations/[invitationId]/accept/POST.ts
-const handler$16 = async (c) => {
+const handler$20 = async (c) => {
 	const user = c.get("user");
 	const invitationId = c.req.param("invitationId");
 	if (!invitationId) return c.json(ErrorResponseSchema.parse({ error: "Invitation id is required" }), 400);
@@ -27997,7 +28009,7 @@ const handler$16 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/invitations/[invitationId]/decline/POST.ts
-const handler$15 = async (c) => {
+const handler$19 = async (c) => {
 	const user = c.get("user");
 	const invitationId = c.req.param("invitationId");
 	if (!invitationId) return c.json(ErrorResponseSchema.parse({ error: "Invitation id is required" }), 400);
@@ -28076,13 +28088,13 @@ function appRowToCustomAppDetail(row) {
 }
 //#endregion
 //#region src/routes/account/apps/GET.ts
-const handler$14 = async (c) => {
+const handler$18 = async (c) => {
 	const apps = (await listAppsForOrganization(c.get("organization").organizationId)).map(appRowToCatalogEntry);
 	return c.json(ListAppsResponseSchema.parse(apps));
 };
 //#endregion
 //#region src/routes/account/apps/POST.ts
-const handler$13 = async (c) => {
+const handler$17 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = CreateCustomAppRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) {
@@ -28115,7 +28127,7 @@ const handler$13 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/discover/POST.ts
-const handler$12 = async (c) => {
+const handler$16 = async (c) => {
 	const parsed = McpDiscoverRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	try {
@@ -28129,7 +28141,7 @@ const handler$12 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/discover-openapi/POST.ts
-const handler$11 = async (c) => {
+const handler$15 = async (c) => {
 	const parsed = OpenApiDiscoverRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	try {
@@ -28142,7 +28154,7 @@ const handler$11 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/discover-graphql/POST.ts
-const handler$10 = async (c) => {
+const handler$14 = async (c) => {
 	const parsed = GraphqlDiscoverRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	try {
@@ -28155,7 +28167,7 @@ const handler$10 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/[slug]/mcp/oauth/connections/POST.ts
-const handler$9 = async (c) => {
+const handler$13 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const appSlug = c.req.param("slug")?.trim();
@@ -28213,7 +28225,7 @@ function buildOAuthWebLandingUrl(webOrigin, params) {
 }
 //#endregion
 //#region src/routes/account/mcp/oauth/callback/GET.ts
-const handler$8 = async (c) => {
+const handler$12 = async (c) => {
 	const code = c.req.query("code")?.trim();
 	const state = c.req.query("state")?.trim();
 	const oauthError = c.req.query("error")?.trim();
@@ -28261,7 +28273,7 @@ const handler$8 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/slug-available/GET.ts
-const handler$7 = async (c) => {
+const handler$11 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = AppSlugAvailabilityQuerySchema.safeParse({ slug: c.req.query("slug") });
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid slug query" }), 400);
@@ -28272,7 +28284,7 @@ const handler$7 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/[slug]/GET.ts
-const handler$6 = async (c) => {
+const handler$10 = async (c) => {
 	const organization = c.get("organization");
 	const slug = c.req.param("slug") ?? "";
 	if (!slug) return c.json(ErrorResponseSchema.parse({ error: "App not found" }), 404);
@@ -28286,7 +28298,7 @@ const handler$6 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/api-keys/GET.ts
-const handler$5 = async (c) => {
+const handler$9 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const records = apiKeyListScope(accessContext(c)).kind === "all" ? await listOrgPlatformApiKeysForOrganization(organizationId) : await listOrgPlatformApiKeysForUser(organizationId, user.id);
@@ -28303,7 +28315,7 @@ const handler$5 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/api-keys/POST.ts
-const handler$4 = async (c) => {
+const handler$8 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const body = CreateApiKeyRequestSchema.parse(await c.req.json());
@@ -28326,7 +28338,7 @@ const handler$4 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/api-keys/[apiKeyId]/DELETE.ts
-const handler$3 = async (c) => {
+const handler$7 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const apiKeyId = c.req.param("apiKeyId");
@@ -28350,6 +28362,97 @@ const handler$3 = async (c) => {
 	}
 };
 //#endregion
+//#region src/routes/account/managed-service-credentials/GET.ts
+const handler$6 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const user = c.get("user");
+	const kindParam = c.req.query("kind");
+	const records = await listManagedServiceCredentialsForOrganization(organizationId, kindParam ? ManagedServiceKindSchema.parse(kindParam) : void 0);
+	const creators = await selectUsersByIds([...new Set(records.map((record) => record.createdByUserId))]);
+	const creatorsById = new Map(creators.map((creator) => [creator.id, creator]));
+	return c.json(ListManagedServiceCredentialsResponseSchema.parse(records.map((record) => ({
+		id: record.id,
+		kind: record.kind,
+		provider: record.provider,
+		keyPreview: record.keyPreview,
+		createdAt: record.createdAt.toISOString(),
+		updatedAt: record.updatedAt.toISOString(),
+		createdBy: mapOrgPlatformApiKeyCreatorOrDeleted(record.createdByUserId, creatorsById.get(record.createdByUserId)),
+		isCreatedByCurrentUser: record.createdByUserId === user.id
+	}))));
+};
+//#endregion
+//#region src/routes/account/managed-service-credentials/POST.ts
+const handler$5 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const user = c.get("user");
+	const body = ConnectManagedServiceCredentialRequestSchema.parse(await c.req.json());
+	if (body.kind === "llm" && !isLlmProviderSlug(body.provider)) return c.json(ErrorResponseSchema.parse({ error: "Unsupported LLM provider" }), 400);
+	if (await getManagedServiceCredential(organizationId, body.kind, body.provider)) return c.json(ErrorResponseSchema.parse({ error: "Managed service credential already connected" }), 409);
+	const { id } = await setManagedServiceCredential({
+		organizationId,
+		kind: body.kind,
+		provider: body.provider,
+		apiKey: body.apiKey,
+		createdByUserId: user.id
+	});
+	const row = await getManagedServiceCredential(organizationId, body.kind, body.provider);
+	const creator = await loadOrgPlatformApiKeyUser(user.id);
+	if (!row || !creator) return c.json(ErrorResponseSchema.parse({ error: "Failed to connect managed service" }), 500);
+	return c.json(ManagedServiceCredentialSchema.parse({
+		id,
+		kind: row.kind,
+		provider: row.provider,
+		keyPreview: row.keyPreview,
+		createdAt: row.createdAt.toISOString(),
+		updatedAt: row.updatedAt.toISOString(),
+		createdBy: mapOrgPlatformApiKeyCreator(creator),
+		isCreatedByCurrentUser: true
+	}), 201);
+};
+//#endregion
+//#region src/routes/account/managed-service-credentials/[id]/PATCH.ts
+const handler$4 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const user = c.get("user");
+	const credentialId = c.req.param("id");
+	const body = UpdateManagedServiceCredentialRequestSchema.parse(await c.req.json());
+	if (!credentialId) return c.json(ErrorResponseSchema.parse({ error: "Credential id is required" }), 400);
+	const existing = await selectManagedServiceCredentialById(credentialId);
+	if (!existing || existing.organizationId !== organizationId) return c.json(ErrorResponseSchema.parse({ error: "Managed service credential not found" }), 404);
+	await setManagedServiceCredential({
+		organizationId,
+		kind: existing.kind,
+		provider: existing.provider,
+		apiKey: body.apiKey,
+		createdByUserId: existing.createdByUserId
+	});
+	const row = await selectManagedServiceCredentialById(credentialId);
+	const creator = await loadOrgPlatformApiKeyUser(existing.createdByUserId);
+	if (!row || !creator) return c.json(ErrorResponseSchema.parse({ error: "Failed to update managed service" }), 500);
+	return c.json(ManagedServiceCredentialSchema.parse({
+		id: row.id,
+		kind: row.kind,
+		provider: row.provider,
+		keyPreview: row.keyPreview,
+		createdAt: row.createdAt.toISOString(),
+		updatedAt: row.updatedAt.toISOString(),
+		createdBy: mapOrgPlatformApiKeyCreator(creator),
+		isCreatedByCurrentUser: existing.createdByUserId === user.id
+	}));
+};
+//#endregion
+//#region src/routes/account/managed-service-credentials/[id]/DELETE.ts
+const handler$3 = async (c) => {
+	const { organizationId } = c.get("organization");
+	const credentialId = c.req.param("id");
+	if (!credentialId) return c.json(ErrorResponseSchema.parse({ error: "Credential id is required" }), 400);
+	const existing = await selectManagedServiceCredentialById(credentialId);
+	if (!existing || existing.organizationId !== organizationId) return c.json(ErrorResponseSchema.parse({ error: "Managed service credential not found" }), 404);
+	await deleteManagedServiceCredential$1(credentialId);
+	return c.body(null, 204);
+};
+//#endregion
 //#region src/lib/team-request-slack.ts
 /** Post an arbitrary Block Kit payload to the internal team/support Slack channel. */
 const postSlackWebhookPayload = postTeamSlackWebhook;
@@ -28448,7 +28551,7 @@ function mountAccountRoutes(options) {
 	const projectScoped = new Hono();
 	const protect = requireSession(createDefaultAuthJwtVerifier());
 	const deleteCredential = createDeleteCredentialHandler({ mcp: options.mcp });
-	account.get("/mcp/oauth/callback", handler$8);
+	account.get("/mcp/oauth/callback", handler$12);
 	account.use("/*", protect);
 	orgScoped.use("/*", protect);
 	orgScoped.use("/*", requireOrganization());
@@ -28460,6 +28563,8 @@ function mountAccountRoutes(options) {
 	const requireUserManage = authorize(userActions.manage);
 	const requireUserInvite = authorize(userActions.invite);
 	const requireApiKeyCreate = authorize(apiKeysActions.create);
+	const requireManagedServicesRead = authorize(managedServicesActions.read);
+	const requireManagedServicesManage = authorize(managedServicesActions.manage);
 	const requireInvitableRole = authorizePayload(InviteOrganizationMembersRequestSchema, ({ ctx, body }) => canInviteRole(ctx.orgRole, body.role));
 	const requireProjectMember = requireProjectMembership();
 	const requireProjectDeploy = authorize(projectActions.deploy);
@@ -28468,99 +28573,103 @@ function mountAccountRoutes(options) {
 	const requireProjectManageMembers = authorize(projectActions.manageMembers);
 	const requireInvitableProjectRole = authorizePayload(InviteProjectMembersRequestSchema, ({ c, ctx, body }) => canInviteToProject(ctx, { invitePermission: getProjectInvitePermission(c) }, body.role));
 	const requireOrgParam = requireOrganizationParam();
-	account.get("/organizations", handler$86);
-	account.get("/organizations/slug-available", handler$85);
+	account.get("/organizations", handler$90);
+	account.get("/organizations/slug-available", handler$89);
 	account.post("/organizations", createOrganizationHandler(options));
-	account.get("/organizations/:organizationId", requireOrgParam, handler$84);
-	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$83);
-	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$82);
-	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$81);
-	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$80);
-	account.get("/invitations", handler$17);
-	account.post("/invitations/:invitationId/accept", handler$16);
-	account.post("/invitations/:invitationId/decline", handler$15);
-	account.get("/users/me/avatar", handler$91);
-	account.post("/users/me/avatar/presign", handler$90);
-	account.patch("/users/me/avatar", handler$89);
-	account.get("/users/me/preferences", handler$88);
-	account.patch("/users/me/preferences", handler$87);
+	account.get("/organizations/:organizationId", requireOrgParam, handler$88);
+	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$87);
+	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$86);
+	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$85);
+	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$84);
+	account.get("/invitations", handler$21);
+	account.post("/invitations/:invitationId/accept", handler$20);
+	account.post("/invitations/:invitationId/decline", handler$19);
+	account.get("/users/me/avatar", handler$95);
+	account.post("/users/me/avatar/presign", handler$94);
+	account.patch("/users/me/avatar", handler$93);
+	account.get("/users/me/preferences", handler$92);
+	account.patch("/users/me/preferences", handler$91);
 	const withOrgDb = withOrganizationProjectDatabase();
-	orgScoped.get("/apps", handler$14);
-	orgScoped.get("/apps/slug-available", handler$7);
-	orgScoped.post("/apps/discover", requireOrgUpdate, handler$12);
-	orgScoped.post("/apps/discover-openapi", requireOrgUpdate, handler$11);
-	orgScoped.post("/apps/discover-graphql", requireOrgUpdate, handler$10);
-	orgScoped.post("/apps", requireOrgUpdate, handler$13);
-	orgScoped.post("/apps/:slug/mcp/oauth/connections", requireOrgUpdate, withOrgDb, handler$9);
-	orgScoped.get("/apps/:slug", handler$6);
+	orgScoped.get("/apps", handler$18);
+	orgScoped.get("/apps/slug-available", handler$11);
+	orgScoped.post("/apps/discover", requireOrgUpdate, handler$16);
+	orgScoped.post("/apps/discover-openapi", requireOrgUpdate, handler$15);
+	orgScoped.post("/apps/discover-graphql", requireOrgUpdate, handler$14);
+	orgScoped.post("/apps", requireOrgUpdate, handler$17);
+	orgScoped.post("/apps/:slug/mcp/oauth/connections", requireOrgUpdate, withOrgDb, handler$13);
+	orgScoped.get("/apps/:slug", handler$10);
 	account.post("/team-requests", requireOrganization(), handler$2);
-	orgScoped.get("/members", handler$21);
-	orgScoped.post("/members/invitations", requireUserInvite, requireInvitableRole, handler$20);
-	orgScoped.patch("/members/:userId", requireUserManage, handler$19);
-	orgScoped.delete("/members/:userId", requireUserManage, handler$18);
-	orgScoped.get("/api-keys", handler$5);
-	orgScoped.post("/api-keys", requireApiKeyCreate, handler$4);
-	orgScoped.delete("/api-keys/:apiKeyId", handler$3);
-	orgScoped.get("/agents", withOrgDb, handler$77);
-	orgScoped.get("/agents/:agentId", withOrgDb, handler$76);
-	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$75);
-	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$74);
-	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$73);
-	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$72);
-	orgScoped.get("/workflows", withOrgDb, handler$70);
-	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$69);
-	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$68);
-	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$67);
-	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$66);
-	orgScoped.get("/workflows/:workflowId/overview", withOrgDb, handler$65);
-	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$61);
-	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$64);
-	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$63);
-	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$62);
-	orgScoped.get("/skills", withOrgDb, handler$59);
-	orgScoped.get("/skills/:skillId", withOrgDb, handler$58);
-	orgScoped.get("/triggers", withOrgDb, handler$57);
-	orgScoped.get("/triggers/:triggerId", withOrgDb, handler$56);
-	orgScoped.get("/triggers/:triggerId/runs", withOrgDb, handler$55);
-	orgScoped.get("/triggers/:triggerId/file", withOrgDb, handler$54);
-	orgScoped.get("/triggers/:triggerId/overview", withOrgDb, handler$53);
-	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$52);
-	orgScoped.get("/recents", withOrgDb, handler$51);
-	orgScoped.get("/history", withOrgDb, handler$79);
-	orgScoped.get("/history/:runId", withOrgDb, handler$78);
-	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$60);
-	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$71);
-	orgScoped.get("/credentials", withOrgDb, handler$25);
-	orgScoped.post("/credentials", withOrgDb, handler$24);
-	orgScoped.get("/credentials/:credentialId", withOrgDb, (c, next) => c.req.param("credentialId") === "instances" ? next() : handler$23(c, next));
-	orgScoped.patch("/credentials/:credentialId", withOrgDb, handler$22);
+	orgScoped.get("/members", handler$25);
+	orgScoped.post("/members/invitations", requireUserInvite, requireInvitableRole, handler$24);
+	orgScoped.patch("/members/:userId", requireUserManage, handler$23);
+	orgScoped.delete("/members/:userId", requireUserManage, handler$22);
+	orgScoped.get("/api-keys", handler$9);
+	orgScoped.post("/api-keys", requireApiKeyCreate, handler$8);
+	orgScoped.delete("/api-keys/:apiKeyId", handler$7);
+	orgScoped.get("/managed-service-credentials", requireManagedServicesRead, handler$6);
+	orgScoped.post("/managed-service-credentials", requireManagedServicesManage, handler$5);
+	orgScoped.patch("/managed-service-credentials/:id", requireManagedServicesManage, handler$4);
+	orgScoped.delete("/managed-service-credentials/:id", requireManagedServicesManage, handler$3);
+	orgScoped.get("/agents", withOrgDb, handler$81);
+	orgScoped.get("/agents/:agentId", withOrgDb, handler$80);
+	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$79);
+	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$78);
+	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$77);
+	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$76);
+	orgScoped.get("/workflows", withOrgDb, handler$74);
+	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$73);
+	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$72);
+	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$71);
+	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$70);
+	orgScoped.get("/workflows/:workflowId/overview", withOrgDb, handler$69);
+	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$65);
+	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$68);
+	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$67);
+	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$66);
+	orgScoped.get("/skills", withOrgDb, handler$63);
+	orgScoped.get("/skills/:skillId", withOrgDb, handler$62);
+	orgScoped.get("/triggers", withOrgDb, handler$61);
+	orgScoped.get("/triggers/:triggerId", withOrgDb, handler$60);
+	orgScoped.get("/triggers/:triggerId/runs", withOrgDb, handler$59);
+	orgScoped.get("/triggers/:triggerId/file", withOrgDb, handler$58);
+	orgScoped.get("/triggers/:triggerId/overview", withOrgDb, handler$57);
+	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$56);
+	orgScoped.get("/recents", withOrgDb, handler$55);
+	orgScoped.get("/history", withOrgDb, handler$83);
+	orgScoped.get("/history/:runId", withOrgDb, handler$82);
+	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$64);
+	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$75);
+	orgScoped.get("/credentials", withOrgDb, handler$29);
+	orgScoped.post("/credentials", withOrgDb, handler$28);
+	orgScoped.get("/credentials/:credentialId", withOrgDb, (c, next) => c.req.param("credentialId") === "instances" ? next() : handler$27(c, next));
+	orgScoped.patch("/credentials/:credentialId", withOrgDb, handler$26);
 	orgScoped.delete("/credentials/:credentialId", withOrgDb, deleteCredential);
-	orgScoped.get("/projects", handler$50);
-	orgScoped.get("/projects/slug-available", handler$47);
-	orgScoped.get("/projects/metrics", withOrgDb, handler$49);
-	orgScoped.post("/projects", handler$48);
-	projectScoped.get("/:projectId", requireProject(), requireProjectMember, handler$46);
-	projectScoped.patch("/:projectId", requireProject(), requireProjectMember, requireProjectUpdate, handler$45);
-	projectScoped.delete("/:projectId", requireProject(), requireProjectMember, requireProjectDelete, handler$44);
-	projectScoped.get("/:projectId/settings", requireProject(), requireProjectMember, handler$27);
-	projectScoped.patch("/:projectId/settings", requireProject(), requireProjectMember, requireProjectUpdate, handler$26);
-	projectScoped.get("/:projectId/members", requireProject(), requireProjectMember, handler$32);
-	projectScoped.post("/:projectId/members", requireProject(), requireProjectMember, requireInvitableProjectRole, handler$31);
-	projectScoped.patch("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$30);
-	projectScoped.delete("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$29);
-	projectScoped.delete("/:projectId/members/me", requireProject(), requireProjectMember, handler$28);
+	orgScoped.get("/projects", handler$54);
+	orgScoped.get("/projects/slug-available", handler$51);
+	orgScoped.get("/projects/metrics", withOrgDb, handler$53);
+	orgScoped.post("/projects", handler$52);
+	projectScoped.get("/:projectId", requireProject(), requireProjectMember, handler$50);
+	projectScoped.patch("/:projectId", requireProject(), requireProjectMember, requireProjectUpdate, handler$49);
+	projectScoped.delete("/:projectId", requireProject(), requireProjectMember, requireProjectDelete, handler$48);
+	projectScoped.get("/:projectId/settings", requireProject(), requireProjectMember, handler$31);
+	projectScoped.patch("/:projectId/settings", requireProject(), requireProjectMember, requireProjectUpdate, handler$30);
+	projectScoped.get("/:projectId/members", requireProject(), requireProjectMember, handler$36);
+	projectScoped.post("/:projectId/members", requireProject(), requireProjectMember, requireInvitableProjectRole, handler$35);
+	projectScoped.patch("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$34);
+	projectScoped.delete("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$33);
+	projectScoped.delete("/:projectId/members/me", requireProject(), requireProjectMember, handler$32);
 	projectScoped.get("/:projectId/reachability", requireProject(), requireProjectMember, createProjectReachabilityHandler(options.hosting));
-	projectScoped.get("/:projectId/files", requireProject(), requireProjectMember, withOrgDb, handler$34);
-	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$36);
-	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$35);
-	projectScoped.get("/:projectId/artifacts/:artifactId/files/content", requireProject(), requireProjectMember, handler$33);
-	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$43);
-	projectScoped.get("/:projectId/artifacts/active/download", requireProject(), requireProjectMember, requireProjectDeploy, handler$41);
-	projectScoped.get("/:projectId/artifacts/active/source", requireProject(), requireProjectMember, withOrgDb, handler$40);
-	projectScoped.post("/:projectId/artifacts", requireProject(), requireProjectMember, requireProjectDeploy, handler$42);
-	projectScoped.post("/:projectId/artifacts/:artifactId/complete", requireProject(), requireProjectMember, requireProjectDeploy, handler$39);
-	projectScoped.post("/:projectId/artifacts/:artifactId/source/presign", requireProject(), requireProjectMember, requireProjectDeploy, handler$38);
-	projectScoped.post("/:projectId/artifacts/:artifactId/source/manifest", requireProject(), requireProjectMember, requireProjectDeploy, handler$37);
+	projectScoped.get("/:projectId/files", requireProject(), requireProjectMember, withOrgDb, handler$38);
+	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$40);
+	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$39);
+	projectScoped.get("/:projectId/artifacts/:artifactId/files/content", requireProject(), requireProjectMember, handler$37);
+	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$47);
+	projectScoped.get("/:projectId/artifacts/active/download", requireProject(), requireProjectMember, requireProjectDeploy, handler$45);
+	projectScoped.get("/:projectId/artifacts/active/source", requireProject(), requireProjectMember, withOrgDb, handler$44);
+	projectScoped.post("/:projectId/artifacts", requireProject(), requireProjectMember, requireProjectDeploy, handler$46);
+	projectScoped.post("/:projectId/artifacts/:artifactId/complete", requireProject(), requireProjectMember, requireProjectDeploy, handler$43);
+	projectScoped.post("/:projectId/artifacts/:artifactId/source/presign", requireProject(), requireProjectMember, requireProjectDeploy, handler$42);
+	projectScoped.post("/:projectId/artifacts/:artifactId/source/manifest", requireProject(), requireProjectMember, requireProjectDeploy, handler$41);
 	orgScoped.route("/projects", projectScoped);
 	account.route("/", orgScoped);
 	return account;
@@ -28962,4 +29071,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-QEtcBRLF.mjs.map
+//# sourceMappingURL=start-Hl5Ax0pS.mjs.map