@keystrokehq/platform 0.1.6 → 0.1.9

package/dist/{dist-BB6Y_75v.mjs → dist-DQZABv1_.mjs}

@@ -1,7 +1,8 @@
 import { createRequire } from "node:module";
 import Docker from "dockerode";
 import { mkdir } from "node:fs/promises";
-import { DEFAULT_DATABASE_URL, claimNextJob, clearCredentialInstanceDefaults, createPostgresCancelChannel, decryptCredentialPayload, encryptCredentialPayload, enqueueJob, ensureOAuthCredentialInstance, failWorkflowRun, getProjectScopeId, inferDialect, markJobComplete, markJobFailed, requeueExpiredLeases, resolvePostgresUrlFromEnv, resolveProjectDatabaseUrlFromEnv, scheduleJobRetry, selectCredentialInstancesForScope, upsertCredentialInstance } from "@keystrokehq/database";
+import { DEFAULT_DATABASE_URL, claimDueTriggers, claimDueTriggersForOrg, claimNextJob, clearCredentialInstanceDefaults, createPostgresCancelChannel, decryptCredentialPayload, disableAllTriggerSchedules, disableTriggerSchedulesNotInSlugs, encryptCredentialPayload, enqueueJob, ensureOAuthCredentialInstance, failWorkflowRun, getProjectScopeId, inferDialect, listEnabledScheduledTriggers, listExecutableAttachmentsByTriggerIds, markJobComplete, markJobFailed, requeueExpiredLeases, resolvePostgresUrlFromEnv, resolveProjectDatabaseUrlFromEnv, scheduleJobRetry, selectActiveEphemeralScheduledTriggerSlugs, selectCredentialInstancesForScope, selectTriggerBySlug, setTriggerScheduleEnabled, upsertCredentialInstance, upsertTriggerScheduleFields } from "@keystrokehq/database";
+import EventEmitter$1, { EventEmitter } from "node:events";
 import { z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { deleteSecretValuesForRef, ensureOAuthApp, getOrganizationScopeId, saveOAuthConnection, selectSecretValue, upsertSecretValue } from "@keystrokehq/platform-database";
@@ -10,7 +11,6 @@ import "zod/v3";
 import * as z4mini from "zod/v4-mini";
 import * as z$1 from "zod/v4";
 import process$1 from "node:process";
-import EventEmitter$1, { EventEmitter } from "node:events";
 import assert, { notStrictEqual } from "node:assert";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import pg from "pg";
@@ -5270,18 +5270,19 @@ object({
 	source: _enum([
 		"custom",
 		"mcp",
-		"openapi"
+		"openapi",
+		"graphql"
 	]).default("custom"),
-	mcpUrl: string().url().optional(),
+	url: string().url().optional(),
 	authKind: AppAuthKindSchema$1.optional(),
 	fields: optionalCredentialFieldsSchema$1.optional(),
 	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	oauthScopes: array(OAuthScopeOptionSchema$1).optional()
 }).superRefine((data, ctx) => {
-	if (data.source === "mcp" && !data.mcpUrl) ctx.addIssue({
+	if ((data.source === "mcp" || data.source === "openapi" || data.source === "graphql") && !data.url) ctx.addIssue({
 		code: "custom",
-		message: "mcpUrl is required for MCP apps",
-		path: ["mcpUrl"]
+		message: "url is required for this app source",
+		path: ["url"]
 	});
 	if (!(data.authKind ?? (data.source === "custom" ? "api_key" : void 0))) {
 		ctx.addIssue({
@@ -5307,7 +5308,7 @@ object({
 	category: string().min(1),
 	authKind: AppAuthKindSchema$1,
 	source: AppSourceSchema$1,
-	mcpUrl: string().url().nullable().optional(),
+	url: string().url().nullable().optional(),
 	credentialFields: optionalCredentialFieldsSchema$1.optional(),
 	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	oauthScopes: array(OAuthScopeOptionSchema$1).optional(),
@@ -5327,7 +5328,7 @@ object({
 	source: AppSourceSchema$1,
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
 	credentialScheme: AppCredentialSchemeSchema$1.optional(),
-	mcpUrl: string().url().nullable().optional(),
+	url: string().url().nullable().optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5346,8 +5347,8 @@ object({
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
 	/** Composio auth scheme when credentialFields are present. */
 	credentialScheme: AppCredentialSchemeSchema$1.optional(),
-	/** Direct MCP server URL when source is mcp. */
-	mcpUrl: string().url().nullable().optional(),
+	/** Endpoint URL for MCP, OpenAPI, or GraphQL custom apps. */
+	url: string().url().nullable().optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema$1.optional()
 });
@@ -5381,7 +5382,7 @@ object({
 		credentialFields: record(string(), AppCredentialFieldSchema$1).optional(),
 		credentialScheme: AppCredentialSchemeSchema$1.optional(),
 		oauthScopes: array(OAuthScopeOptionSchema$1),
-		mcpUrl: string().url(),
+		url: string().url(),
 		oauth: McpAuthProbeOAuthSchema$1.optional(),
 		serverName: string().optional(),
 		serverDescription: string().optional()
@@ -5405,7 +5406,21 @@ object({
 		credentialFields: record(string(), AppCredentialFieldSchema$1).optional(),
 		credentialScheme: AppCredentialSchemeSchema$1.optional(),
 		oauthScopes: array(OAuthScopeOptionSchema$1),
-		openapiUrl: string().url(),
+		url: string().url(),
+		name: string().optional(),
+		description: string().optional(),
+		homepageUrl: string().optional()
+	})
+});
+object({ url: string().url() });
+object({
+	detected: boolean(),
+	template: object({
+		authKind: AppAuthKindSchema$1,
+		credentialFields: record(string(), AppCredentialFieldSchema$1).optional(),
+		credentialScheme: AppCredentialSchemeSchema$1.optional(),
+		oauthScopes: array(OAuthScopeOptionSchema$1),
+		url: string().url(),
 		name: string().optional(),
 		description: string().optional(),
 		homepageUrl: string().optional()
@@ -6969,11 +6984,11 @@ async function waitForHealth(baseUrl, options = {}) {
 		try {
 			if ((await fetchImpl(url, { signal: AbortSignal.timeout(2e3) })).ok) return;
 		} catch {}
-		await sleep$1(intervalMs);
+		await sleep$2(intervalMs);
 	}
 	throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);
 }
-function sleep$1(ms) {
+function sleep$2(ms) {
 	return new Promise((resolve) => {
 		setTimeout(resolve, ms);
 	});
@@ -8707,18 +8722,19 @@ const CreateCustomAppRequestSchema = z.object({
 	source: z.enum([
 		"custom",
 		"mcp",
-		"openapi"
+		"openapi",
+		"graphql"
 	]).default("custom"),
-	mcpUrl: z.string().url().optional(),
+	url: z.string().url().optional(),
 	authKind: AppAuthKindSchema.optional(),
 	fields: optionalCredentialFieldsSchema.optional(),
 	credentialScheme: AppCredentialSchemeSchema.optional(),
 	oauthScopes: z.array(OAuthScopeOptionSchema).optional()
 }).superRefine((data, ctx) => {
-	if (data.source === "mcp" && !data.mcpUrl) ctx.addIssue({
+	if ((data.source === "mcp" || data.source === "openapi" || data.source === "graphql") && !data.url) ctx.addIssue({
 		code: "custom",
-		message: "mcpUrl is required for MCP apps",
-		path: ["mcpUrl"]
+		message: "url is required for this app source",
+		path: ["url"]
 	});
 	if (!(data.authKind ?? (data.source === "custom" ? "api_key" : void 0))) {
 		ctx.addIssue({
@@ -8745,7 +8761,7 @@ const CustomAppDetailSchema = z.object({
 	category: z.string().min(1),
 	authKind: AppAuthKindSchema,
 	source: AppSourceSchema,
-	mcpUrl: z.string().url().nullable().optional(),
+	url: z.string().url().nullable().optional(),
 	credentialFields: optionalCredentialFieldsSchema.optional(),
 	credentialScheme: AppCredentialSchemeSchema.optional(),
 	oauthScopes: z.array(OAuthScopeOptionSchema).optional(),
@@ -8767,7 +8783,7 @@ z.object({
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
 	credentialScheme: AppCredentialSchemeSchema.optional(),
-	mcpUrl: z.string().url().nullable().optional(),
+	url: z.string().url().nullable().optional(),
 	createdAt: z.string().min(1),
 	updatedAt: z.string().min(1)
 });
@@ -8790,8 +8806,8 @@ const AppCatalogEntrySchema = z.object({
 	credentialFields: AppCredentialFieldsSchema.optional(),
 	/** Composio auth scheme when credentialFields are present. */
 	credentialScheme: AppCredentialSchemeSchema.optional(),
-	/** Direct MCP server URL when source is mcp. */
-	mcpUrl: z.string().url().nullable().optional(),
+	/** Endpoint URL for MCP, OpenAPI, or GraphQL custom apps. */
+	url: z.string().url().nullable().optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -8826,7 +8842,7 @@ const McpDiscoverResponseSchema = z.object({
 		credentialFields: z.record(z.string(), AppCredentialFieldSchema).optional(),
 		credentialScheme: AppCredentialSchemeSchema.optional(),
 		oauthScopes: z.array(OAuthScopeOptionSchema),
-		mcpUrl: z.string().url(),
+		url: z.string().url(),
 		oauth: McpAuthProbeOAuthSchema.optional(),
 		serverName: z.string().optional(),
 		serverDescription: z.string().optional()
@@ -8843,7 +8859,7 @@ const StartMcpOAuthConnectionInputSchema = z.object({
 });
 const StartMcpOAuthConnectionResultSchema = z.object({ authorizeUrl: z.string().url() });
 function mcpProbeToAppTemplate(probe) {
-	const mcpUrl = probe.url;
+	const url = probe.url;
 	if (probe.mode === "oauth" && probe.oauth) return {
 		authKind: "oauth",
 		oauthScopes: probe.oauth.scopes.map((name) => ({
@@ -8851,7 +8867,7 @@ function mcpProbeToAppTemplate(probe) {
 			description: name,
 			defaultSelected: true
 		})),
-		mcpUrl,
+		url,
 		oauth: probe.oauth
 	};
 	if (probe.mode === "token") return {
@@ -8862,32 +8878,32 @@ function mcpProbeToAppTemplate(probe) {
 			label: "Token"
 		} },
 		oauthScopes: [],
-		mcpUrl
+		url
 	};
 	return {
 		authKind: "api_key",
 		credentialFields: {},
 		oauthScopes: [],
-		mcpUrl
+		url
 	};
 }
-function isRecord$1(value) {
+function isRecord$1$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function trimString(value) {
+function trimString$1(value) {
 	if (typeof value !== "string") return;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
 }
 function securitySchemesFromSpec(spec) {
-	if (isRecord$1(spec.components) && isRecord$1(spec.components.securitySchemes)) return spec.components.securitySchemes;
-	if (isRecord$1(spec.securityDefinitions)) return spec.securityDefinitions;
+	if (isRecord$1$1(spec.components) && isRecord$1$1(spec.components.securitySchemes)) return spec.components.securitySchemes;
+	if (isRecord$1$1(spec.securityDefinitions)) return spec.securityDefinitions;
 }
 function primarySecuritySchemeName(spec) {
 	const security = spec.security;
 	if (Array.isArray(security) && security.length > 0) {
 		const first = security[0];
-		if (isRecord$1(first)) {
+		if (isRecord$1$1(first)) {
 			const keys = Object.keys(first);
 			if (keys.length > 0) return keys[0];
 		}
@@ -8902,28 +8918,28 @@ function homepageUrlFromSpec(spec) {
 	const servers = spec.servers;
 	if (Array.isArray(servers) && servers.length > 0) {
 		const first = servers[0];
-		if (isRecord$1(first)) {
-			const url = trimString(first.url);
+		if (isRecord$1$1(first)) {
+			const url = trimString$1(first.url);
 			if (url) return url.replace(/\/+$/, "");
 		}
 	}
 	if (typeof spec.swagger === "string") {
 		const schemes = spec.schemes;
 		const scheme = Array.isArray(schemes) && typeof schemes[0] === "string" ? schemes[0] : "https";
-		const host = trimString(spec.host);
+		const host = trimString$1(spec.host);
 		const basePath = typeof spec.basePath === "string" ? spec.basePath : "";
 		if (host) return `${scheme}://${host}${basePath}`.replace(/\/+$/, "");
 	}
 }
 function oauthScopesFromOas3Scheme(scheme) {
 	const flows = scheme.flows;
-	if (!isRecord$1(flows)) return [];
+	if (!isRecord$1$1(flows)) return [];
 	const scopes = [];
-	for (const flow of Object.values(flows)) if (isRecord$1(flow) && isRecord$1(flow.scopes)) scopes.push(...Object.keys(flow.scopes));
+	for (const flow of Object.values(flows)) if (isRecord$1$1(flow) && isRecord$1$1(flow.scopes)) scopes.push(...Object.keys(flow.scopes));
 	return scopes;
 }
 function oauthScopesFromSwagger2Scheme(scheme) {
-	if (!isRecord$1(scheme.scopes)) return [];
+	if (!isRecord$1$1(scheme.scopes)) return [];
 	return Object.keys(scheme.scopes);
 }
 function oauthScopeOptions(scopeNames) {
@@ -8934,7 +8950,7 @@ function oauthScopeOptions(scopeNames) {
 	}));
 }
 function apiKeyPlacement(scheme) {
-	const name = trimString(scheme.name) ?? "api_key";
+	const name = trimString$1(scheme.name) ?? "api_key";
 	if ((typeof scheme.in === "string" ? scheme.in.toLowerCase() : "header") === "query") return {
 		kind: "query",
 		name
@@ -8976,7 +8992,7 @@ function mapSecurityScheme(scheme) {
 		credentialScheme: "API_KEY",
 		credentialFields: { token: {
 			secret: true,
-			label: trimString(scheme.name) ?? "API Key",
+			label: trimString$1(scheme.name) ?? "API Key",
 			placement: apiKeyPlacement(scheme)
 		} },
 		oauthScopes: []
@@ -9008,18 +9024,18 @@ function mapSecurityScheme(scheme) {
 	};
 }
 /** Map a parsed OpenAPI/Swagger document to a custom app template. */
-function openApiSpecToAppTemplate(spec, openapiUrl) {
-	if (!isRecord$1(spec)) throw new Error("Invalid OpenAPI spec");
-	const info = isRecord$1(spec.info) ? spec.info : {};
-	const name = trimString(info.title);
-	const description = trimString(info.description);
+function openApiSpecToAppTemplate(spec, url) {
+	if (!isRecord$1$1(spec)) throw new Error("Invalid OpenAPI spec");
+	const info = isRecord$1$1(spec.info) ? spec.info : {};
+	const name = trimString$1(info.title);
+	const description = trimString$1(info.description);
 	const homepageUrl = homepageUrlFromSpec(spec);
 	const schemes = securitySchemesFromSpec(spec);
 	const schemeName = primarySecuritySchemeName(spec);
 	let authPart = mapSecurityScheme({ type: "none" });
-	if (schemeName && schemes && isRecord$1(schemes[schemeName])) authPart = mapSecurityScheme(schemes[schemeName]);
+	if (schemeName && schemes && isRecord$1$1(schemes[schemeName])) authPart = mapSecurityScheme(schemes[schemeName]);
 	return {
-		openapiUrl,
+		url,
 		name,
 		description,
 		homepageUrl,
@@ -9037,7 +9053,125 @@ const OpenApiDiscoverResponseSchema = z.object({
 		credentialFields: z.record(z.string(), AppCredentialFieldSchema).optional(),
 		credentialScheme: AppCredentialSchemeSchema.optional(),
 		oauthScopes: z.array(OAuthScopeOptionSchema),
-		openapiUrl: z.string().url(),
+		url: z.string().url(),
+		name: z.string().optional(),
+		description: z.string().optional(),
+		homepageUrl: z.string().optional()
+	})
+});
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function trimString(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+}
+function displayNameFromUrl(value) {
+	try {
+		const hostname = new URL(value).hostname.replace(/^www\./, "");
+		const parts = hostname.split(".").filter(Boolean);
+		let label = parts[0] ?? hostname;
+		if ((label === "mcp" || label === "api" || label === "graphql") && parts.length > 1) label = parts[1] ?? label;
+		if (!label) return;
+		return label.charAt(0).toUpperCase() + label.slice(1);
+	} catch {
+		return;
+	}
+}
+function homepageUrlFromEndpoint(endpointUrl) {
+	try {
+		return new URL(endpointUrl).origin;
+	} catch {
+		return;
+	}
+}
+function typeDescription(schema) {
+	if (!schema) return;
+	return trimString(schema.description);
+}
+function authFromProbe(authProbe) {
+	if (authProbe === "basic") return {
+		authKind: "api_key",
+		credentialScheme: "BASIC",
+		credentialFields: {
+			username: { label: "Username" },
+			password: {
+				secret: true,
+				label: "Password"
+			}
+		},
+		oauthScopes: []
+	};
+	if (authProbe === "none") return {
+		authKind: "api_key",
+		credentialFields: {},
+		oauthScopes: []
+	};
+	return {
+		authKind: "api_key",
+		credentialScheme: "BEARER_TOKEN",
+		credentialFields: { token: {
+			secret: true,
+			label: "Token",
+			placement: DEFAULT_MCP_API_KEY_PLACEMENT
+		} },
+		oauthScopes: []
+	};
+}
+/** Infer auth requirements from an unauthenticated probe response. */
+function inferGraphqlAuthFromProbe(status, wwwAuthenticate, body) {
+	if (status === 401) {
+		if ((wwwAuthenticate?.toLowerCase() ?? "").includes("basic")) return "basic";
+		return "bearer";
+	}
+	if (status === 403) return "bearer";
+	if (isGraphqlAuthError(body)) return "bearer";
+	return "none";
+}
+const AUTH_ERROR_PATTERN = /auth|unauthorized|unauthenticated|access token|credentials|not authenticated/i;
+function isGraphqlAuthError(body) {
+	if (!isRecord(body) || !Array.isArray(body.errors)) return false;
+	return body.errors.some((error) => {
+		if (!isRecord(error)) return false;
+		const message = typeof error.message === "string" ? error.message : "";
+		const extensions = isRecord(error.extensions) ? error.extensions : void 0;
+		const extensionHint = extensions ? `${extensions.code ?? ""} ${extensions.type ?? ""}` : "";
+		return AUTH_ERROR_PATTERN.test(message) || /AUTH/i.test(extensionHint);
+	});
+}
+/** Map a GraphQL introspection result to a custom app template. */
+function graphqlIntrospectionToAppTemplate(introspection, endpointUrl, authProbe = "bearer") {
+	const root = isRecord(introspection) ? introspection : {};
+	const data = isRecord(root.data) ? root.data : root;
+	const schema = isRecord(data.__schema) ? data.__schema : void 0;
+	const queryType = schema && isRecord(schema.queryType) ? schema.queryType : void 0;
+	const mutationType = schema && isRecord(schema.mutationType) ? schema.mutationType : void 0;
+	const queryName = trimString(queryType?.name);
+	const name = queryName === "Query" ? displayNameFromUrl(endpointUrl) : queryName;
+	const description = typeDescription(queryType) || typeDescription(mutationType) || (name ? `GraphQL API for ${name}.` : void 0);
+	const homepageUrl = homepageUrlFromEndpoint(endpointUrl);
+	const authPart = authFromProbe(authProbe);
+	return {
+		url: endpointUrl,
+		name,
+		description,
+		homepageUrl,
+		authKind: authPart.authKind,
+		credentialFields: authPart.credentialFields,
+		credentialScheme: authPart.credentialScheme,
+		oauthScopes: authPart.oauthScopes
+	};
+}
+const GraphqlDiscoverRequestSchema = z.object({ url: z.string().url() });
+const GraphqlDiscoverResponseSchema = z.object({
+	detected: z.boolean(),
+	template: z.object({
+		authKind: AppAuthKindSchema,
+		credentialFields: z.record(z.string(), AppCredentialFieldSchema).optional(),
+		credentialScheme: AppCredentialSchemeSchema.optional(),
+		oauthScopes: z.array(OAuthScopeOptionSchema),
+		url: z.string().url(),
 		name: z.string().optional(),
 		description: z.string().optional(),
 		homepageUrl: z.string().optional()
@@ -29693,9 +29827,9 @@ async function discoverMcpApp(url) {
 	};
 }
 async function beginMcpOAuthConnect(options) {
-	const mcpUrl = options.app.mcpUrl?.trim();
-	if (!mcpUrl || options.app.source !== "mcp" || options.app.authKind !== "oauth") throw new Error("App is not a direct MCP OAuth app");
-	const discovered = await discoverOAuthServerInfo(new URL(mcpUrl), {});
+	const appUrl = options.app.url?.trim();
+	if (!appUrl || options.app.source !== "mcp" || options.app.authKind !== "oauth") throw new Error("App is not a direct MCP OAuth app");
+	const discovered = await discoverOAuthServerInfo(new URL(appUrl), {});
 	const metadata = discovered.authorizationServerMetadata;
 	if (!metadata?.authorization_endpoint || !metadata.token_endpoint) throw new Error("MCP server does not expose OAuth authorization metadata");
 	const oauth = {
@@ -29726,9 +29860,9 @@ async function beginMcpOAuthConnect(options) {
 		tokenStrategy: "refresh",
 		clientId: clientInformation.client_id,
 		clientSecret: oauthClientSecretForStorage(clientInformation.client_secret),
-		metadata: oauthAppMetadata(oauth, mcpUrl, { tokenEndpointAuthMethod: clientInformation.token_endpoint_auth_method })
+		metadata: oauthAppMetadata(oauth, appUrl, { tokenEndpointAuthMethod: clientInformation.token_endpoint_auth_method })
 	});
-	const resourceUrl = oauth.resource ? new URL(oauth.resource) : new URL(mcpUrl);
+	const resourceUrl = oauth.resource ? new URL(oauth.resource) : new URL(appUrl);
 	const statePayload = {
 		codeVerifier: "",
 		appSlug: options.app.slug,
@@ -29741,7 +29875,7 @@ async function beginMcpOAuthConnect(options) {
 		authorizationServerUrl: discovered.authorizationServerUrl,
 		resource: oauth.resource,
 		oauthMetadata: oauth,
-		mcpUrl,
+		mcpUrl: appUrl,
 		redirectUri: options.redirectUri,
 		clientId: clientInformation.client_id,
 		clientSecret: clientInformation.client_secret,
@@ -29818,11 +29952,11 @@ async function completeMcpOAuthConnect(options) {
 	};
 }
 const MAX_SPEC_BYTES = 5 * 1024 * 1024;
-function isRecord(value) {
+function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isOpenApiSpec(value) {
-	return isRecord(value) && (typeof value.openapi === "string" || typeof value.swagger === "string");
+	return isRecord$1(value) && (typeof value.openapi === "string" || typeof value.swagger === "string");
 }
 async function discoverOpenApiApp(url) {
 	const response = await fetch(url, { redirect: "follow" });
@@ -29843,6 +29977,76 @@ async function discoverOpenApiApp(url) {
 		template: openApiSpecToAppTemplate(parsed, url)
 	};
 }
+const MAX_RESPONSE_BYTES = 5 * 1024 * 1024;
+const INTROSPECTION_QUERY = `query IntrospectionQuery {
+  __schema {
+    queryType { name description }
+    mutationType { name description }
+  }
+}`;
+const USAGE_AUTH_PROBE_QUERY = "query { __typename }";
+async function postGraphql(endpointUrl, query) {
+	const response = await fetch(endpointUrl, {
+		method: "POST",
+		redirect: "follow",
+		headers: {
+			"content-type": "application/json",
+			accept: "application/json"
+		},
+		body: JSON.stringify({ query })
+	});
+	const contentLength = response.headers.get("content-length");
+	if (contentLength && Number(contentLength) > MAX_RESPONSE_BYTES) throw new Error("GraphQL introspection response is too large");
+	const text = await response.text();
+	if (text.length > MAX_RESPONSE_BYTES) throw new Error("GraphQL introspection response is too large");
+	let body;
+	try {
+		body = JSON.parse(text);
+	} catch {
+		throw new Error("GraphQL endpoint did not return JSON");
+	}
+	return {
+		response,
+		body,
+		text
+	};
+}
+function introspectionDisabled(body) {
+	if (!isRecord(body) || !Array.isArray(body.errors)) return false;
+	return body.errors.some((error) => {
+		if (!isRecord(error)) return false;
+		return (typeof error.message === "string" ? error.message.toLowerCase() : "").includes("introspection");
+	});
+}
+function parseEndpointUrl(url) {
+	const trimmed = url.trim();
+	const parsed = new URL(trimmed);
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error("GraphQL endpoint must use http or https");
+	return parsed;
+}
+async function discoverGraphqlApp(url) {
+	const endpointUrl = parseEndpointUrl(url).toString();
+	const { response, body } = await postGraphql(endpointUrl, INTROSPECTION_QUERY);
+	const authProbe = inferGraphqlAuthFromProbe(response.status, response.headers.get("www-authenticate"), body);
+	if (!(isRecord(body) && isRecord(body.data) && isRecord(body.data.__schema))) {
+		if (response.status === 401 || response.status === 403) return {
+			detected: true,
+			template: graphqlIntrospectionToAppTemplate({ data: {} }, endpointUrl, authProbe)
+		};
+		if (response.ok && introspectionDisabled(body)) throw new Error("Introspection is disabled on this endpoint");
+		throw new Error(`Failed to introspect GraphQL endpoint (${response.status})`);
+	}
+	let resolvedAuthProbe = authProbe;
+	if (resolvedAuthProbe === "none") {
+		const usageProbe = await postGraphql(endpointUrl, USAGE_AUTH_PROBE_QUERY);
+		const usageAuth = inferGraphqlAuthFromProbe(usageProbe.response.status, usageProbe.response.headers.get("www-authenticate"), usageProbe.body);
+		if (usageAuth !== "none") resolvedAuthProbe = usageAuth;
+	}
+	return {
+		detected: true,
+		template: graphqlIntrospectionToAppTemplate(body, endpointUrl, resolvedAuthProbe)
+	};
+}
 //#endregion
 //#region ../../packages/workflow/dist/index.mjs
 const zodSchema$1 = z.custom((v) => v instanceof z.ZodType, "must be a Zod schema");
@@ -29887,6 +30091,18 @@ registerWorkflowRunGetter(() => {
 */
 const cronScheduleSchema = z.string().trim().min(1, "cron schedule must be a non-empty string").refine(isParseableCron, "must be a valid cron expression").brand();
 /**
+* Resolves the effective schedule for an attachment, applying overrides by
+* precedence: per-attachment override → global override → the authored
+* schedule. Pure string precedence — no cron parsing.
+*/
+function resolveCronSchedule(attachmentId, schedule, options) {
+	return options.attachmentScheduleOverrides?.[attachmentId] ?? options.cronScheduleOverride ?? schedule;
+}
+/** The next time the schedule fires at or after `from`. */
+function nextTriggerRunAt(schedule, from = /* @__PURE__ */ new Date()) {
+	return toCron(schedule).getNextDate(from);
+}
+/**
 * Single touchpoint for the `cron-schedule` library — every parse, validation,
 * and next-run calculation in this package goes through here.
 */
@@ -42756,7 +42972,7 @@ function createDatabaseJobQueue() {
 				while (running) try {
 					const job = await claimNextJob(workerId);
 					if (!job) {
-						await sleep(pollIntervalMs);
+						await sleep$1(pollIntervalMs);
 						continue;
 					}
 					try {
@@ -42770,7 +42986,7 @@ function createDatabaseJobQueue() {
 						}
 					}
 				} catch {
-					await sleep(pollIntervalMs);
+					await sleep$1(pollIntervalMs);
 				}
 			};
 			loop();
@@ -42783,9 +42999,126 @@ function createDatabaseJobQueue() {
 		subscribeCancel: (handler) => cancelChannel.subscribeCancel(handler)
 	};
 }
+function sleep$1(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function enqueueTriggerJob(jobQueue, row, scheduledAt) {
+	const input = {
+		kind: "trigger",
+		targetId: row.slug,
+		runId: crypto.randomUUID(),
+		trigger: row.kind,
+		payload: {},
+		projectId: row.projectId
+	};
+	if (scheduledAt) input.scheduledAt = scheduledAt;
+	return jobQueue.enqueue(input);
+}
+async function claimDue(scope, asOf, resolveNextRunAt, limit) {
+	if (scope === "organization") return claimDueTriggersForOrg(asOf, resolveNextRunAt, limit);
+	return claimDueTriggers(asOf, resolveNextRunAt, limit).then((rows) => rows.map((row) => ({
+		...row,
+		projectId: getProjectScopeId()
+	})));
+}
+function createScheduleTicker(ctx) {
+	const pollIntervalMs = ctx.pollIntervalMs ?? 1e3;
+	const batchSize = ctx.batchSize ?? 10;
+	async function fireDueSchedules(asOf = /* @__PURE__ */ new Date()) {
+		const claimed = await claimDue(ctx.scope ?? "project", asOf, (schedule) => nextTriggerRunAt(schedule, asOf), batchSize);
+		for (const row of claimed) {
+			if (row.kind !== "cron" && row.kind !== "poll") continue;
+			await enqueueTriggerJob(ctx.jobQueue, {
+				slug: row.slug,
+				kind: row.kind,
+				projectId: row.projectId
+			}, asOf);
+		}
+		return claimed.length;
+	}
+	async function startScheduleTicker(options = {}) {
+		const intervalMs = options.pollIntervalMs ?? pollIntervalMs;
+		const limit = options.batchSize ?? batchSize;
+		const scope = options.scope ?? ctx.scope ?? "project";
+		let running = true;
+		const loop = async () => {
+			while (running) {
+				try {
+					const claimed = await claimDue(scope, /* @__PURE__ */ new Date(), (schedule) => nextTriggerRunAt(schedule, /* @__PURE__ */ new Date()), limit);
+					for (const row of claimed) {
+						if (row.kind !== "cron" && row.kind !== "poll") continue;
+						await enqueueTriggerJob(ctx.jobQueue, {
+							slug: row.slug,
+							kind: row.kind,
+							projectId: row.projectId
+						});
+					}
+				} catch {}
+				await sleep(intervalMs);
+			}
+		};
+		loop();
+		return async () => {
+			running = false;
+		};
+	}
+	return {
+		fireDueSchedules,
+		startScheduleTicker
+	};
+}
 function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function resolveTriggerSchedule(triggerSlug, schedule, overrides) {
+	return resolveCronSchedule(triggerSlug, schedule, {
+		cronScheduleOverride: overrides?.global,
+		attachmentScheduleOverrides: overrides?.byTrigger
+	});
+}
+async function syncTriggerSchedules(options) {
+	const now = /* @__PURE__ */ new Date();
+	const projectSlugs = options.schedules.map((schedule) => schedule.triggerSlug);
+	const ephemeralSlugs = await selectActiveEphemeralScheduledTriggerSlugs();
+	const slugs = [...projectSlugs, ...ephemeralSlugs];
+	if (slugs.length === 0) {
+		await disableAllTriggerSchedules(now);
+		return;
+	}
+	await disableTriggerSchedulesNotInSlugs(slugs, now);
+	for (const spec of options.schedules) {
+		const schedule = resolveTriggerSchedule(spec.triggerSlug, spec.schedule, options.scheduleOverrides);
+		const existing = await selectTriggerBySlug(spec.triggerSlug);
+		if (!existing) continue;
+		const nextRunAt = !(existing.schedule !== schedule) && existing.enabled === 1 ? existing.nextRunAt : nextTriggerRunAt(schedule, now);
+		const enabled = (await listExecutableAttachmentsByTriggerIds([existing.id])).length > 0;
+		await upsertTriggerScheduleFields({
+			triggerSlug: spec.triggerSlug,
+			schedule,
+			nextRunAt: nextRunAt ?? now,
+			enabled,
+			updatedAt: now
+		});
+	}
+}
+/** Postgres poll loop — default trigger scheduler for pg-boss, polling, and memory paths. */
+function createDatabaseTriggerScheduler(options) {
+	const ticker = createScheduleTicker({
+		jobQueue: options.jobQueue,
+		scope: options.scope,
+		pollIntervalMs: options.pollIntervalMs,
+		batchSize: options.batchSize
+	});
+	return {
+		sync: (syncOptions) => syncTriggerSchedules(syncOptions),
+		start: (startOptions) => ticker.startScheduleTicker(startOptions),
+		fireDue: (asOf) => ticker.fireDueSchedules(asOf),
+		async remove(triggerSlug) {
+			await setTriggerScheduleEnabled(triggerSlug, false, /* @__PURE__ */ new Date());
+		},
+		async upsert(_spec) {}
+	};
+}
 let boss;
 function resolveDatabaseUrl(url) {
 	const resolved = url ?? resolvePostgresUrlFromEnv(process.env);
@@ -42838,6 +43171,8 @@ function buildPgBossJobQueue(boss, options) {
 	const queueName = options.queueName ?? "keystroke";
 	const cancelChannel = createPostgresCancelChannel(options.connectionString, pgCancelChannelName(options.cancelScope ?? "platform", options.cancelScope === "organization" ? options.organizationId : options.projectId));
 	return {
+		boss,
+		queueName,
 		async enqueue(input) {
 			const jobId = await boss.send(queueName, {
 				...input,
@@ -42919,9 +43254,129 @@ async function createSharedPgBossJobQueue(boss, options) {
 		cancelScope: "platform"
 	});
 }
+/**
+* pg-boss schedule key for one trigger. Mirrors {@link bullmqTriggerSchedulerId}
+* so the firing backend is interchangeable: `trigger-<projectId>-<slug>`. pg-boss
+* keys allow hyphens, so colons (legal in ids) are swapped for `-`.
+*/
+function pgBossTriggerScheduleKey(spec) {
+	return `trigger-${(spec.projectId ?? getProjectScopeId()).replaceAll(":", "-")}-${spec.triggerSlug.replaceAll(":", "-")}`;
+}
+/** Key prefix scoping reconcile cleanup to the active project (org queues are shared). */
+function pgBossTriggerScheduleKeyPrefix(projectId) {
+	return `trigger-${(projectId ?? getProjectScopeId()).replaceAll(":", "-")}-`;
+}
+function triggerJobData(spec) {
+	return {
+		kind: "trigger",
+		targetId: spec.triggerSlug,
+		runId: "",
+		trigger: spec.kind,
+		payload: {},
+		projectId: spec.projectId ?? getProjectScopeId()
+	};
+}
+function rowToSpec(row) {
+	if (row.kind !== "cron" && row.kind !== "poll") return;
+	if (!row.schedule) return;
+	return {
+		triggerSlug: row.slug,
+		kind: row.kind,
+		schedule: row.schedule,
+		projectId: row.projectId
+	};
+}
+/**
+* Trigger scheduler backed by pg-boss native cron scheduling. Mirrors
+* {@link createBullmqTriggerScheduler}: `boss.schedule` registers a recurring job
+* onto the project/org queue (no per-second DB poll), and reconcile keeps the
+* `pgboss.schedule` table in sync with the `triggers` table (source of truth).
+*
+* Granularity: pg-boss cron is minute-level (it checks schedules every ~30s and
+* dedupes per minute), so sub-minute schedules effectively fire at most once per
+* minute — unlike the DB ticker's 1s loop.
+*/
+function createPgBossTriggerScheduler(_ctx, queue) {
+	async function upsertScheduler(spec, overrides) {
+		const schedule = resolveTriggerSchedule(spec.triggerSlug, spec.schedule, overrides);
+		const key = pgBossTriggerScheduleKey(spec);
+		await queue.boss.schedule(queue.queueName, schedule, triggerJobData({
+			...spec,
+			schedule
+		}), { key });
+	}
+	async function reconcileFromDatabase(overrides) {
+		const projectPrefix = pgBossTriggerScheduleKeyPrefix();
+		const rows = await listEnabledScheduledTriggers();
+		const expectedKeys = /* @__PURE__ */ new Set();
+		const failures = [];
+		for (const row of rows) {
+			const spec = rowToSpec(row);
+			if (!spec) continue;
+			expectedKeys.add(pgBossTriggerScheduleKey(spec));
+			try {
+				await upsertScheduler(spec, overrides);
+			} catch (error) {
+				failures.push({
+					triggerSlug: spec.triggerSlug,
+					error
+				});
+				console.error(`[pg-boss-trigger-scheduler] failed to schedule ${spec.triggerSlug}`, error);
+			}
+		}
+		const schedules = await queue.boss.getSchedules(queue.queueName);
+		for (const schedule of schedules) {
+			const key = schedule.key;
+			if (!key || !key.startsWith(projectPrefix)) continue;
+			if (!expectedKeys.has(key)) try {
+				await queue.boss.unschedule(queue.queueName, key);
+			} catch (error) {
+				failures.push({
+					triggerSlug: key,
+					error
+				});
+				console.error(`[pg-boss-trigger-scheduler] failed to unschedule stale ${key}`, error);
+			}
+		}
+		if (failures.length > 0) throw new Error(`pg-boss trigger scheduler reconcile failed for ${failures.length} trigger(s)`);
+	}
+	return {
+		async sync(syncOptions) {
+			await syncTriggerSchedules(syncOptions);
+			await reconcileFromDatabase(syncOptions.scheduleOverrides);
+		},
+		async start(_options) {
+			return async () => void 0;
+		},
+		fireDue: async () => 0,
+		upsert: upsertScheduler,
+		async remove(triggerSlug, projectId) {
+			await queue.boss.unschedule(queue.queueName, pgBossTriggerScheduleKey({
+				triggerSlug,
+				projectId
+			}));
+		}
+	};
+}
 function resolveUrl(ctx) {
 	return ctx.url ?? resolveProjectDatabaseUrlFromEnv(process.env) ?? DEFAULT_DATABASE_URL;
 }
+/** DB poll-loop trigger scheduler — used by the SQLite/self-host polling backend. */
+function createPollingTriggerScheduler(ctx, queue) {
+	const scope = ctx.scope === "organization" ? "organization" : "project";
+	return Promise.resolve(createDatabaseTriggerScheduler({
+		jobQueue: queue,
+		scope
+	}));
+}
+function isPgBossJobQueue(queue) {
+	return "boss" in queue && "queueName" in queue;
+}
+/** Native pg-boss cron scheduler; falls back to the DB ticker if the queue isn't pg-boss. */
+function createPgBossTriggerSchedulerForPlugin(ctx, queue) {
+	if (!isPgBossJobQueue(queue)) return createPollingTriggerScheduler(ctx, queue);
+	return Promise.resolve(createPgBossTriggerScheduler(ctx, queue));
+}
 /** Postgres pg-boss backend. Platform scope shares one queue; org scope gets one queue per org. */
 function pgBossSchedulerPlugin() {
 	return defineSchedulerPlugin({
@@ -42948,7 +43403,8 @@ function pgBossSchedulerPlugin() {
 				queueName: pgBossProjectQueueName(projectId),
 				projectId
 			});
-		}
+		},
+		createTriggerScheduler: createPgBossTriggerSchedulerForPlugin
 	});
 }
 /** DB-table queue (Drizzle `jobs`), for SQLite / self-host. */
@@ -42957,7 +43413,8 @@ function pollingSchedulerPlugin() {
 		name: "polling",
 		async createJobQueue() {
 			return createDatabaseJobQueue();
-		}
+		},
+		createTriggerScheduler: createPollingTriggerScheduler
 	});
 }
 /** Auto-selects pg-boss (postgres) or polling (sqlite) by dialect. */
@@ -42967,6 +43424,10 @@ function defaultSchedulerPlugin() {
 		async createJobQueue(ctx) {
 			if (inferDialect(resolveUrl(ctx), ctx.dialect) === "postgres") return pgBossSchedulerPlugin().createJobQueue(ctx);
 			return pollingSchedulerPlugin().createJobQueue(ctx);
+		},
+		async createTriggerScheduler(ctx, queue) {
+			if (inferDialect(resolveUrl(ctx), ctx.dialect) === "postgres") return pgBossSchedulerPlugin().createTriggerScheduler(ctx, queue);
+			return pollingSchedulerPlugin().createTriggerScheduler(ctx, queue);
 		}
 	});
 }
@@ -43371,6 +43832,6 @@ function minioStoragePlugin(options = {}) {
 	};
 }
 //#endregion
-export { DeclineOrganizationInvitationResponseSchema as $, validationErrorResponse as $n, StartMcpOAuthConnectionResultSchema as $t, ACTIVE_ORG_HEADER as A, agentWorkspaceFileId as An, OrganizationSidebarBrandingSchema as At, CompleteProjectArtifactResponseSchema as B, mapProjectMember as Bn, ProjectResponseSchema as Bt, decodeOAuthState as C, WorkflowSummarySchema as Cn, ListProjectMetricsResponseSchema as Ct, deleteCredentialInstanceSecret as D, WorkspaceTriggerOverviewSchema as Dn, OpenApiDiscoverRequestSchema as Dt, PublicHttpUrlError as E, WorkspaceTriggerListResponseSchema as En, McpDiscoverResponseSchema as Et, AgentSummaryListResponseSchema as F, mapOrganizationInvitation as Fn, PresignProjectSourceRequestSchema as Ft, CreateCustomAppRequestSchema as G, organizationInvitationAcceptPath as Gn, RecentResourceListResponseSchema as Gt, CreateApiKeyResponseSchema as H, mapUserOrganization as Hn, ProjectSlugAvailabilityQuerySchema as Ht, AgentSummarySchema as I, mapOrganizationMember as In, PresignProjectSourceResponseSchema as It, CreateOrganizationResponseSchema as J, parseStoredRouteManifest as Jn, SkillSummaryListResponseSchema as Jt, CreateCustomAppResponseSchema as K, organizationSlugErrorCodeFromMessage as Kn, RecentResourceSchema as Kt, AgentWorkspaceFileSummarySchema as L, mapProject as Ln, PresignUserAvatarRequestSchema as Lt, ActiveOrganizationResponseSchema as M, deriveCredentialInstanceSlug as Mn, PROJECT_SLUG_TAKEN_MESSAGE as Mt, AgentMemoryFileSummarySchema as N, displayCredentialAppName as Nn, PresignOrgLogoRequestSchema as Nt, readCredentialInstanceSecret as O, WorkspaceTriggerRunListResponseSchema as On, OpenApiDiscoverResponseSchema as Ot, AgentSummaryDetailResponseSchema as P, listenPortFromPublicUrl as Pn, PresignOrgLogoResponseSchema as Pt, DEFAULT_TRIGGER_OVERVIEW_MODEL as Q, validateCredentialValueAgainstFields as Qn, StartMcpOAuthConnectionInputSchema as Qt, AppSlugAvailabilityQuerySchema as R, mapProjectArtifact as Rn, PresignUserAvatarResponseSchema as Rt, completeMcpOAuthConnect as S, WorkflowSummaryListResponseSchema as Sn, ListProjectMembersResponseSchema as St, discoverOpenApiApp as T, WorkspaceTriggerFileSchema as Tn, McpDiscoverRequestSchema as Tt, CreateCredentialsRequestSchema as U, mergeUserPreferences as Un, ProjectSlugAvailabilityResponseSchema as Ut, CreateApiKeyRequestSchema as V, mapProjectSettings as Vn, ProjectSettingsResponseSchema as Vt, CreateCredentialsResponseSchema as W, normalizeUserPreferences as Wn, ProjectSourceResourcesSchema as Wt, CreateProjectRequestSchema as X, resolveExternalPlatformOrigin as Xn, SlugAvailabilityQuerySchema as Xt, CreateProjectArtifactResponseSchema as Y, projectFileId as Yn, SkillSummarySchema as Yt, CreateProjectResponseSchema as Z, resolveUniqueCredentialInstanceLabel as Zn, SlugAvailabilityResponseSchema as Zt, publicKeystrokeAssetsObjectUrl as _, UserAvatarPatchSchema as _n, ListOrganizationInvitationsResponseSchema as _t, isKeystrokeAssetsAvatarPublicUrl as a, TriggerAttachmentUpdateRequestSchema as an, HistoryRunDetailResponseSchema as at, defaultSchedulerPlugin as b, UserPreferencesSchema as bn, ListProjectDeploymentsResponseSchema as bt, isStorageBucketNotFoundError as c, UpdateOrganizationMemberRequestSchema as cn, InviteOrganizationMembersRequestSchema as ct, keystrokeAssetsAvatarKeyFromPublicUrl as d, UpdateProjectMemberRequestSchema as dn, InviteProjectMembersResponseSchema as dt, StoredProjectSourceManifestSchema as en, defaultHostingPlugin as er, DownloadActiveProjectArtifactResponseSchema as et, keystrokeAssetsOrgLogoKeyFromPublicUrl as f, UpdateProjectMemberResponseSchema as fn, ListAgentMemoryFilesResponseSchema as ft, projectSourceBlobKey as g, UploadProjectSourceResponseSchema as gn, ListCredentialsResponseSchema as gt, projectArtifactKey as h, UploadProjectSourceManifestRequestSchema as hn, ListAppsResponseSchema as ht, extractRouteManifestFromArtifact as i, SubmitTeamRequestResponseSchema as in, __toESM as ir, HistoryRunCancelResponseSchema as it, AcceptOrganizationInvitationResponseSchema as j, buildCredentialInstanceLabel as jn, PLATFORM_RESOURCE_UNSUPPORTED_TEXT as jt, setCredentialInstanceSecret as k, agentMemoryFileId as kn, OrganizationSidebarBrandingPatchSchema as kt, isStorageNotFoundError as l, UpdateOrganizationMemberResponseSchema as ln, InviteOrganizationMembersResponseSchema as lt, orgLogoStorageKey as m, UpdateProjectSettingsRequestSchema as mn, ListApiKeysResponseSchema as mt, createAssetsStorageClient as n, SubmitMarketingContactResponseSchema as nn, __commonJSMin as nr, GetCredentialResponseSchema as nt, isKeystrokeAssetsOrgLogoPublicUrl as o, TriggerRunListQuerySchema as on, HistoryRunListQuerySchema as ot, minioStoragePlugin as p, UpdateProjectRequestSchema as pn, ListAgentWorkspaceFilesResponseSchema as pt, CreateOrganizationRequestSchema as q, parseAppSlug as qn, SkillSummaryDetailResponseSchema as qt, ensureKeystrokeAssetsBucket as r, SubmitTeamRequestRequestSchema as rn, __require as rr, GetCustomAppResponseSchema as rt, isOrgLogoStorageKey as s, UpdateCredentialRequestSchema as sn, HistoryRunListResponseSchema as st, RouteManifestNotFoundError as t, SubmitMarketingContactRequestSchema as tn, pingProjectTarget as tr, ErrorResponseSchema as tt, isUserAvatarStorageKey as u, UpdateOrganizationRequestSchema as un, InviteProjectMembersRequestSchema as ut, userAvatarStorageKey as v, UserAvatarSchema as vn, ListOrganizationMembersResponseSchema as vt, discoverMcpApp as w, WorkspaceTriggerDetailSchema as wn, ListProjectsResponseSchema as wt, beginMcpOAuthConnect as x, WorkflowSummaryDetailResponseSchema as xn, ListProjectFilesResponseSchema as xt, createJobQueue as y, UserPreferencesPatchSchema as yn, ListOrganizationsResponseSchema as yt, AppSlugAvailabilityResponseSchema as z, mapProjectDeployment as zn, ProjectReachabilityResponseSchema as zt };
+export { DEFAULT_TRIGGER_OVERVIEW_MODEL as $, resolveExternalPlatformOrigin as $n, SlugAvailabilityQuerySchema as $t, setCredentialInstanceSecret as A, WorkspaceTriggerOverviewSchema as An, OpenApiDiscoverRequestSchema as At, AppSlugAvailabilityResponseSchema as B, mapProject as Bn, PresignUserAvatarRequestSchema as Bt, decodeOAuthState as C, UserPreferencesSchema as Cn, ListProjectDeploymentsResponseSchema as Ct, PublicHttpUrlError as D, WorkspaceTriggerDetailSchema as Dn, ListProjectsResponseSchema as Dt, discoverOpenApiApp as E, WorkflowSummarySchema as En, ListProjectMetricsResponseSchema as Et, AgentSummaryDetailResponseSchema as F, deriveCredentialInstanceSlug as Fn, PROJECT_SLUG_TAKEN_MESSAGE as Ft, CreateCredentialsResponseSchema as G, mapUserOrganization as Gn, ProjectSlugAvailabilityQuerySchema as Gt, CreateApiKeyRequestSchema as H, mapProjectDeployment as Hn, ProjectReachabilityResponseSchema as Ht, AgentSummaryListResponseSchema as I, displayCredentialAppName as In, PresignOrgLogoRequestSchema as It, CreateOrganizationRequestSchema as J, organizationInvitationAcceptPath as Jn, RecentResourceListResponseSchema as Jt, CreateCustomAppRequestSchema as K, mergeUserPreferences as Kn, ProjectSlugAvailabilityResponseSchema as Kt, AgentSummarySchema as L, listenPortFromPublicUrl as Ln, PresignOrgLogoResponseSchema as Lt, AcceptOrganizationInvitationResponseSchema as M, agentMemoryFileId as Mn, OrganizationSidebarBrandingPatchSchema as Mt, ActiveOrganizationResponseSchema as N, agentWorkspaceFileId as Nn, OrganizationSidebarBrandingSchema as Nt, deleteCredentialInstanceSecret as O, WorkspaceTriggerFileSchema as On, McpDiscoverRequestSchema as Ot, AgentMemoryFileSummarySchema as P, buildCredentialInstanceLabel as Pn, PLATFORM_RESOURCE_UNSUPPORTED_TEXT as Pt, CreateProjectResponseSchema as Q, projectFileId as Qn, SkillSummarySchema as Qt, AgentWorkspaceFileSummarySchema as R, mapOrganizationInvitation as Rn, PresignProjectSourceRequestSchema as Rt, completeMcpOAuthConnect as S, UserPreferencesPatchSchema as Sn, ListOrganizationsResponseSchema as St, discoverMcpApp as T, WorkflowSummaryListResponseSchema as Tn, ListProjectMembersResponseSchema as Tt, CreateApiKeyResponseSchema as U, mapProjectMember as Un, ProjectResponseSchema as Ut, CompleteProjectArtifactResponseSchema as V, mapProjectArtifact as Vn, PresignUserAvatarResponseSchema as Vt, CreateCredentialsRequestSchema as W, mapProjectSettings as Wn, ProjectSettingsResponseSchema as Wt, CreateProjectArtifactResponseSchema as X, parseAppSlug as Xn, SkillSummaryDetailResponseSchema as Xt, CreateOrganizationResponseSchema as Y, organizationSlugErrorCodeFromMessage as Yn, RecentResourceSchema as Yt, CreateProjectRequestSchema as Z, parseStoredRouteManifest as Zn, SkillSummaryListResponseSchema as Zt, publicKeystrokeAssetsObjectUrl as _, UpdateProjectSettingsRequestSchema as _n, ListApiKeysResponseSchema as _t, isKeystrokeAssetsAvatarPublicUrl as a, SubmitMarketingContactResponseSchema as an, __commonJSMin as ar, GraphqlDiscoverRequestSchema as at, defaultSchedulerPlugin as b, UserAvatarPatchSchema as bn, ListOrganizationInvitationsResponseSchema as bt, isStorageBucketNotFoundError as c, TriggerAttachmentUpdateRequestSchema as cn, HistoryRunDetailResponseSchema as ct, keystrokeAssetsAvatarKeyFromPublicUrl as d, UpdateOrganizationMemberRequestSchema as dn, InviteOrganizationMembersRequestSchema as dt, SlugAvailabilityResponseSchema as en, resolveUniqueCredentialInstanceLabel as er, DeclineOrganizationInvitationResponseSchema as et, keystrokeAssetsOrgLogoKeyFromPublicUrl as f, UpdateOrganizationMemberResponseSchema as fn, InviteOrganizationMembersResponseSchema as ft, projectSourceBlobKey as g, UpdateProjectRequestSchema as gn, ListAgentWorkspaceFilesResponseSchema as gt, projectArtifactKey as h, UpdateProjectMemberResponseSchema as hn, ListAgentMemoryFilesResponseSchema as ht, extractRouteManifestFromArtifact as i, SubmitMarketingContactRequestSchema as in, pingProjectTarget as ir, GetCustomAppResponseSchema as it, ACTIVE_ORG_HEADER as j, WorkspaceTriggerRunListResponseSchema as jn, OpenApiDiscoverResponseSchema as jt, readCredentialInstanceSecret as k, WorkspaceTriggerListResponseSchema as kn, McpDiscoverResponseSchema as kt, isStorageNotFoundError as l, TriggerRunListQuerySchema as ln, HistoryRunListQuerySchema as lt, orgLogoStorageKey as m, UpdateProjectMemberRequestSchema as mn, InviteProjectMembersResponseSchema as mt, createAssetsStorageClient as n, StartMcpOAuthConnectionResultSchema as nn, validationErrorResponse as nr, ErrorResponseSchema as nt, isKeystrokeAssetsOrgLogoPublicUrl as o, SubmitTeamRequestRequestSchema as on, __require as or, GraphqlDiscoverResponseSchema as ot, minioStoragePlugin as p, UpdateOrganizationRequestSchema as pn, InviteProjectMembersRequestSchema as pt, CreateCustomAppResponseSchema as q, normalizeUserPreferences as qn, ProjectSourceResourcesSchema as qt, ensureKeystrokeAssetsBucket as r, StoredProjectSourceManifestSchema as rn, defaultHostingPlugin as rr, GetCredentialResponseSchema as rt, isOrgLogoStorageKey as s, SubmitTeamRequestResponseSchema as sn, __toESM as sr, HistoryRunCancelResponseSchema as st, RouteManifestNotFoundError as t, StartMcpOAuthConnectionInputSchema as tn, validateCredentialValueAgainstFields as tr, DownloadActiveProjectArtifactResponseSchema as tt, isUserAvatarStorageKey as u, UpdateCredentialRequestSchema as un, HistoryRunListResponseSchema as ut, userAvatarStorageKey as v, UploadProjectSourceManifestRequestSchema as vn, ListAppsResponseSchema as vt, discoverGraphqlApp as w, WorkflowSummaryDetailResponseSchema as wn, ListProjectFilesResponseSchema as wt, beginMcpOAuthConnect as x, UserAvatarSchema as xn, ListOrganizationMembersResponseSchema as xt, createJobQueue as y, UploadProjectSourceResponseSchema as yn, ListCredentialsResponseSchema as yt, AppSlugAvailabilityQuerySchema as z, mapOrganizationMember as zn, PresignProjectSourceResponseSchema as zt };
 
-//# sourceMappingURL=dist-BB6Y_75v.mjs.map
+//# sourceMappingURL=dist-DQZABv1_.mjs.map