@keystrokehq/platform 0.1.70 → 0.1.72

package/dist/{start-anmOyXx4.mjs → start-BBwx09TY.mjs}

@@ -1,4 +1,4 @@
-import { $ as CreateCredentialsRequestSchema, $n as WorkflowCanvasCredentialBindingsSchema, $t as OpenApiDiscoverResponseSchema, A as discoverMcpApp, An as SubmitMarketingContactResponseSchema, Ar as mapUserOrganization, At as InviteProjectMembersResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UpdateOrganizationMemberRequestSchema, Br as validateCredentialValueAgainstFields, Bt as ListOrganizationMembersPageQuerySchema, C as defaultSchedulerPlugin, Cn as SkillSummarySchema, Cr as mapOrganizationInvitation, Ct as HistoryRunCancelResponseSchema, D as decodeOAuthState, Dn as StartMcpOAuthConnectionResultSchema, Dr as mapProjectDeployment, Dt as InviteOrganizationMembersRequestSchema, E as completeMcpOAuthConnect, En as StartMcpOAuthConnectionInputSchema, Er as mapProjectArtifact, Et as HistoryRunListResponseSchema, F as deleteManagedServiceCredential$1, Fn as TriggerInvokeRequestSchema, Fr as parseAppSlug, Ft as ListChannelPlatformsResponseSchema, G as AgentWorkspaceFileSummarySchema, Gn as UpdateProjectRequestSchema, Gt as ListProjectMembersResponseSchema, H as AgentSummaryDetailResponseSchema, Hn as UpdateOrganizationRequestSchema, Hr as validationErrorResponse, Ht as ListOrganizationsResponseSchema, I as setCredentialInstanceSecret, In as TriggerInvokeResponseSchema, Ir as parseStoredRouteManifest, It as ListCredentialsPageQuerySchema, J as ChannelPlatformSchema, Jn as UploadProjectSourceResponseSchema, Jt as ManagedServiceCredentialSchema, K as AppSlugAvailabilityQuerySchema, Kn as UpdateProjectSettingsRequestSchema, Kt as ListProjectMetricsResponseSchema, L as setManagedServiceCredential, Ln as TriggerRunListQuerySchema, Lr as projectFileId, Lt as ListCredentialsPageResponseSchema, M as withCredentialAssignments, Mn as SubmitTeamRequestResponseSchema, Mr as normalizeUserPreferences, Mt as ListAgentWorkspaceFilesResponseSchema, N as PublicHttpUrlError, Nn as TriggerAttachmentUpdateRequestSchema, Nr as organizationInvitationAcceptPath, Nt as ListApiKeysResponseSchema, O as describeCredentialBindings, On as StoredProjectSourceManifestSchema, Or as mapProjectMember, Ot as InviteOrganizationMembersResponseSchema, P as deleteCredentialInstanceSecret, Pn as TriggerInvokeInputsSchema, Pr as organizationSlugErrorCodeFromMessage, Pt as ListAppsResponseSchema, Q as CreateApiKeyResponseSchema, Qn as UserPreferencesSchema, Qt as OpenApiDiscoverRequestSchema, R as ACTIVE_ORG_HEADER, Rn as UpdateCredentialRequestSchema, Rr as resolveExternalPlatformOrigin, Rt as ListManagedServiceCredentialsResponseSchema, S as createJobQueue, Sn as SkillSummaryListResponseSchema, Sr as listenPortFromPublicUrl, St as GraphqlDiscoverResponseSchema, T as beginMcpOAuthConnect, Tn as SlugAvailabilityResponseSchema, Tr as mapProject, Tt as HistoryRunListQuerySchema, U as AgentSummaryListResponseSchema, Un as UpdateProjectMemberRequestSchema, Ut as ListProjectDeploymentsResponseSchema, V as AgentMemoryFileSummarySchema, Vn as UpdateOrganizationMemberResponseSchema, Vr as validateWorkflowRunInputValues, Vt as ListOrganizationMembersPageResponseSchema, W as AgentSummarySchema, Wn as UpdateProjectMemberResponseSchema, Wt as ListProjectFilesResponseSchema, X as ConnectManagedServiceCredentialRequestSchema, Xn as UserAvatarSchema, Xt as McpDiscoverRequestSchema, Y as CompleteProjectArtifactResponseSchema, Yn as UserAvatarPatchSchema, Yt as ManagedServiceKindSchema, Z as CreateApiKeyRequestSchema, Zn as UserPreferencesPatchSchema, Zt as McpDiscoverResponseSchema, _ as orgLogoStorageKey, _n as ProjectSourceResourcesSchema, _r as deriveCredentialInstanceSlug, _t as ErrorResponseSchema, a as extractRouteManifestFromArtifact, an as PresignChatAttachmentResponseSchema, ar as WorkflowSummaryListResponseSchema, at as CreateProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as RecentResourceSchema, br as isLlmProviderSlug, bt as GetCustomAppResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as PresignProjectSourceRequestSchema, cr as WorkspaceTriggerFileSchema, ct as DEFAULT_CLOUD_PLATFORM_ORIGIN, d as isStorageNotFoundError$1, dn as PresignUserAvatarResponseSchema, dr as WorkspaceTriggerRunListResponseSchema, dt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, en as OrganizationSidebarBrandingPatchSchema, er as WorkflowCanvasRunSchema, et as CreateCredentialsResponseSchema, f as isUserAvatarStorageKey, fn as ProjectReachabilityResponseSchema, fr as WorkspaceWorkflowOverviewSchema, ft as DbProxyMigrateRequestSchema, gn as ProjectSlugAvailabilityResponseSchema, gr as chatAttachmentExtension, gt as DownloadActiveProjectSourceResponseSchema, h as loadProjectSourceFiles, hn as ProjectSlugAvailabilityQuerySchema, hr as buildCredentialInstanceLabel, ht as DownloadActiveProjectArtifactResponseSchema, i as ensureKeystrokeAssetsBucket, in as PresignChatAttachmentRequestSchema, ir as WorkflowSummaryDetailResponseSchema, it as CreateOrganizationResponseSchema, j as discoverOpenApiApp, jn as SubmitTeamRequestRequestSchema, jr as mergeUserPreferences, jt as ListAgentMemoryFilesResponseSchema, k as discoverGraphqlApp, kn as SubmitMarketingContactRequestSchema, kr as mapProjectSettings, kt as InviteProjectMembersRequestSchema, l as isOrgLogoStorageKey, ln as PresignProjectSourceResponseSchema, lr as WorkspaceTriggerListResponseSchema, lt as DEFAULT_TRIGGER_OVERVIEW_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as ProjectSettingsResponseSchema, mr as agentWorkspaceFileId, mt as DeclineOrganizationInvitationResponseSchema, n as chatAttachmentStorageKey, nn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, nr as WorkflowRunInputsPutBodySchema, nt as CreateCustomAppResponseSchema, o as isChatAttachmentStorageKey, on as PresignOrgLogoRequestSchema, or as WorkflowSummarySchema, ot as CreateProjectRequestSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as ProjectResponseSchema, pr as agentMemoryFileId, pt as DbProxyQueryRequestSchema, q as AppSlugAvailabilityResponseSchema, qn as UploadProjectSourceManifestRequestSchema, qt as ListProjectsResponseSchema, r as createAssetsStorageClient, rn as PROJECT_SLUG_TAKEN_MESSAGE, rr as WorkflowRunInputsSchema, rt as CreateOrganizationRequestSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as PresignOrgLogoResponseSchema, sr as WorkspaceTriggerDetailSchema, st as CreateProjectResponseSchema, t as RouteManifestNotFoundError, tn as OrganizationSidebarBrandingSchema, tr as WorkflowCanvasSchema, tt as CreateCustomAppRequestSchema, u as isStorageBucketNotFoundError, un as PresignUserAvatarRequestSchema, ur as WorkspaceTriggerOverviewSchema, ut as DEFAULT_WORKFLOW_CANVAS_MODEL, v as projectArtifactKey, vn as PublicModelsResponseSchema, vr as displayCredentialAppName, vt as GetAppCatalogEntryResponseSchema, w as cronPayloadSchema, wn as SlugAvailabilityQuerySchema, wr as mapOrganizationMember, wt as HistoryRunDetailResponseSchema, x as userAvatarStorageKey, xn as SkillSummaryDetailResponseSchema, xr as jsonSchemaToWorkflowInputSchema, xt as GraphqlDiscoverRequestSchema, y as projectSourceBlobKey, yn as RecentResourceListResponseSchema, yr as isAllowedChatAttachmentMediaType, yt as GetCredentialResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UpdateManagedServiceCredentialRequestSchema, zr as resolveUniqueCredentialInstanceLabel, zt as ListOrganizationInvitationsResponseSchema } from "./dist-Bz7umCNr.mjs";
+import { $ as CreateCredentialsRequestSchema, $n as WorkflowCanvasCredentialBindingsSchema, $t as OpenApiDiscoverResponseSchema, A as discoverMcpApp, An as SubmitMarketingContactResponseSchema, Ar as mapUserOrganization, At as InviteProjectMembersResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UpdateOrganizationMemberRequestSchema, Br as validateCredentialValueAgainstFields, Bt as ListOrganizationMembersPageQuerySchema, C as defaultSchedulerPlugin, Cn as SkillSummarySchema, Cr as mapOrganizationInvitation, Ct as HistoryRunCancelResponseSchema, D as decodeOAuthState, Dn as StartMcpOAuthConnectionResultSchema, Dr as mapProjectDeployment, Dt as InviteOrganizationMembersRequestSchema, E as completeMcpOAuthConnect, En as StartMcpOAuthConnectionInputSchema, Er as mapProjectArtifact, Et as HistoryRunListResponseSchema, F as deleteManagedServiceCredential$1, Fn as TriggerInvokeRequestSchema, Fr as parseAppSlug, Ft as ListChannelPlatformsResponseSchema, G as AgentWorkspaceFileSummarySchema, Gn as UpdateProjectRequestSchema, Gt as ListProjectMembersResponseSchema, H as AgentSummaryDetailResponseSchema, Hn as UpdateOrganizationRequestSchema, Hr as validationErrorResponse, Ht as ListOrganizationsResponseSchema, I as setCredentialInstanceSecret, In as TriggerInvokeResponseSchema, Ir as parseStoredRouteManifest, It as ListCredentialsPageQuerySchema, J as ChannelPlatformSchema, Jn as UploadProjectSourceResponseSchema, Jt as ManagedServiceCredentialSchema, K as AppSlugAvailabilityQuerySchema, Kn as UpdateProjectSettingsRequestSchema, Kt as ListProjectMetricsResponseSchema, L as setManagedServiceCredential, Ln as TriggerRunListQuerySchema, Lr as projectFileId, Lt as ListCredentialsPageResponseSchema, M as withCredentialAssignments, Mn as SubmitTeamRequestResponseSchema, Mr as normalizeUserPreferences, Mt as ListAgentWorkspaceFilesResponseSchema, N as PublicHttpUrlError, Nn as TriggerAttachmentUpdateRequestSchema, Nr as organizationInvitationAcceptPath, Nt as ListApiKeysResponseSchema, O as describeCredentialBindings, On as StoredProjectSourceManifestSchema, Or as mapProjectMember, Ot as InviteOrganizationMembersResponseSchema, P as deleteCredentialInstanceSecret, Pn as TriggerInvokeInputsSchema, Pr as organizationSlugErrorCodeFromMessage, Pt as ListAppsResponseSchema, Q as CreateApiKeyResponseSchema, Qn as UserPreferencesSchema, Qt as OpenApiDiscoverRequestSchema, R as ACTIVE_ORG_HEADER, Rn as UpdateCredentialRequestSchema, Rr as resolveExternalPlatformOrigin, Rt as ListManagedServiceCredentialsResponseSchema, S as createJobQueue, Sn as SkillSummaryListResponseSchema, Sr as listenPortFromPublicUrl, St as GraphqlDiscoverResponseSchema, T as beginMcpOAuthConnect, Tn as SlugAvailabilityResponseSchema, Tr as mapProject, Tt as HistoryRunListQuerySchema, U as AgentSummaryListResponseSchema, Un as UpdateProjectMemberRequestSchema, Ut as ListProjectDeploymentsResponseSchema, V as AgentMemoryFileSummarySchema, Vn as UpdateOrganizationMemberResponseSchema, Vr as validateWorkflowRunInputValues, Vt as ListOrganizationMembersPageResponseSchema, W as AgentSummarySchema, Wn as UpdateProjectMemberResponseSchema, Wt as ListProjectFilesResponseSchema, X as ConnectManagedServiceCredentialRequestSchema, Xn as UserAvatarSchema, Xt as McpDiscoverRequestSchema, Y as CompleteProjectArtifactResponseSchema, Yn as UserAvatarPatchSchema, Yt as ManagedServiceKindSchema, Z as CreateApiKeyRequestSchema, Zn as UserPreferencesPatchSchema, Zt as McpDiscoverResponseSchema, _ as orgLogoStorageKey, _n as ProjectSourceResourcesSchema, _r as deriveCredentialInstanceSlug, _t as ErrorResponseSchema, a as extractRouteManifestFromArtifact, an as PresignChatAttachmentResponseSchema, ar as WorkflowSummaryListResponseSchema, at as CreateProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as RecentResourceSchema, br as isLlmProviderSlug, bt as GetCustomAppResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as PresignProjectSourceRequestSchema, cr as WorkspaceTriggerFileSchema, ct as DEFAULT_CLOUD_PLATFORM_ORIGIN, d as isStorageNotFoundError$1, dn as PresignUserAvatarResponseSchema, dr as WorkspaceTriggerRunListResponseSchema, dt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, en as OrganizationSidebarBrandingPatchSchema, er as WorkflowCanvasRunSchema, et as CreateCredentialsResponseSchema, f as isUserAvatarStorageKey, fn as ProjectReachabilityResponseSchema, fr as WorkspaceWorkflowOverviewSchema, ft as DbProxyMigrateRequestSchema, gn as ProjectSlugAvailabilityResponseSchema, gr as chatAttachmentExtension, gt as DownloadActiveProjectSourceResponseSchema, h as loadProjectSourceFiles, hn as ProjectSlugAvailabilityQuerySchema, hr as buildCredentialInstanceLabel, ht as DownloadActiveProjectArtifactResponseSchema, i as ensureKeystrokeAssetsBucket, in as PresignChatAttachmentRequestSchema, ir as WorkflowSummaryDetailResponseSchema, it as CreateOrganizationResponseSchema, j as discoverOpenApiApp, jn as SubmitTeamRequestRequestSchema, jr as mergeUserPreferences, jt as ListAgentMemoryFilesResponseSchema, k as discoverGraphqlApp, kn as SubmitMarketingContactRequestSchema, kr as mapProjectSettings, kt as InviteProjectMembersRequestSchema, l as isOrgLogoStorageKey, ln as PresignProjectSourceResponseSchema, lr as WorkspaceTriggerListResponseSchema, lt as DEFAULT_TRIGGER_OVERVIEW_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as ProjectSettingsResponseSchema, mr as agentWorkspaceFileId, mt as DeclineOrganizationInvitationResponseSchema, n as chatAttachmentStorageKey, nn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, nr as WorkflowRunInputsPutBodySchema, nt as CreateCustomAppResponseSchema, o as isChatAttachmentStorageKey, on as PresignOrgLogoRequestSchema, or as WorkflowSummarySchema, ot as CreateProjectRequestSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as ProjectResponseSchema, pr as agentMemoryFileId, pt as DbProxyQueryRequestSchema, q as AppSlugAvailabilityResponseSchema, qn as UploadProjectSourceManifestRequestSchema, qt as ListProjectsResponseSchema, r as createAssetsStorageClient, rn as PROJECT_SLUG_TAKEN_MESSAGE, rr as WorkflowRunInputsSchema, rt as CreateOrganizationRequestSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as PresignOrgLogoResponseSchema, sr as WorkspaceTriggerDetailSchema, st as CreateProjectResponseSchema, t as RouteManifestNotFoundError, tn as OrganizationSidebarBrandingSchema, tr as WorkflowCanvasSchema, tt as CreateCustomAppRequestSchema, u as isStorageBucketNotFoundError, un as PresignUserAvatarRequestSchema, ur as WorkspaceTriggerOverviewSchema, ut as DEFAULT_WORKFLOW_CANVAS_MODEL, v as projectArtifactKey, vn as PublicModelsResponseSchema, vr as displayCredentialAppName, vt as GetAppCatalogEntryResponseSchema, w as cronPayloadSchema, wn as SlugAvailabilityQuerySchema, wr as mapOrganizationMember, wt as HistoryRunDetailResponseSchema, x as userAvatarStorageKey, xn as SkillSummaryDetailResponseSchema, xr as jsonSchemaToWorkflowInputSchema, xt as GraphqlDiscoverRequestSchema, y as projectSourceBlobKey, yn as RecentResourceListResponseSchema, yr as isAllowedChatAttachmentMediaType, yt as GetCredentialResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UpdateManagedServiceCredentialRequestSchema, zr as resolveUniqueCredentialInstanceLabel, zt as ListOrganizationInvitationsResponseSchema } from "./dist-vqdQgBVK.mjs";
 import { a as verifyOrgWorkerToken, i as pingProjectTarget, n as fetchDeployStatus, r as mintOrgWorkerToken } from "./dist-DXrzDzt8.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
@@ -18,7 +18,7 @@ import { AUTH_API_PATH, createAuth, createDefaultAuthJwtVerifier, extractWebhook
 import { buildWebhookUrl, createCredentialMaterializeHandler, enqueueWebhookIngress, enqueueWorkflowRunByKey, extractWebhookRoutesFromManifest, formatIssuesDetail, matchWebhookPayload, seedOAuthAppsFromEnvForAllOrganizations, seedOAuthAppsFromEnvForOrganization, syncRegistryFromStoredManifest, webhookAttachmentSchemasFromStoredSource, withProjectId } from "@keystrokehq/runtime";
 import "node:url";
 import "typescript";
-import { createApp, externalPlatformOrigin, getProjectScheduler, platformWebhookOrigin, postTeamSlackWebhook, resolveMcpEntityId } from "@keystrokehq/http";
+import { createApp, externalPlatformOrigin, getProjectScheduler, platformWebhookOrigin, postPipelineSlackWebhook, postTeamSlackWebhook, resolveMcpEntityId } from "@keystrokehq/http";
 import { Hono } from "hono";
 import { Resend } from "resend";
 import { getConnInfo } from "@hono/node-server/conninfo";
@@ -22872,43 +22872,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-DpvCD5jL.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-BthzUlhY.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-TI4R6l6o.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-CTCWw8v-.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-CxeUdJy-.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-CBKKNxe5.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-LjFjTRB_.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-BFsBDpoC.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-C3MQypHr.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-F2lgNOB-.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-ClQ5ZWdr.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-Bc4NVi4v.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-DW1lkC4X.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-I2m6Alra.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-DmEKO6zv.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-D7pKL5XA.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-N2f4g3X1.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-DrNLqf6E.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-B7CS9Efo.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-CcC8oAay.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22924,15 +22924,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-Ddx-O96Z.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-Drtu6BR1.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-Cspbla5y.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-tMWQyXPx.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-B24oySis.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-BIUrjovr.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -22940,95 +22940,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-CNGCZY0I.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-D_WdHf4R.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-CNGCZY0I.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-D_WdHf4R.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-CNGCZY0I.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-D_WdHf4R.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-Db2lsnmX.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-fElsZtNI.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-BYNG3C6h.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-pAnVKoY_.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-CYGnVzHS.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-BVDeDi7o.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-DoWC_Y1l.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-Cu3qxG8w.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-COe3fQcb.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-DNLw03Vi.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-Bm8Lscgf.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-Bf4rjWWh.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-DwT7mbWx.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-CB1fVYpF.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-YPlvjW1p.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-BwpjdFdY.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-Dj0l2XuW.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-Cmpv8tkZ.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-CyPoCenM.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-BajjlHWQ.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-D88uEPPQ.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-BJB_kuMK.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-DLyPOCGB.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-ziL3L6Jj.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-CUCKYi5P.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-C_86st90.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-BR-GlrvU.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-C6MkGw7D.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-cF75DNPd.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-Co4JzXuN.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-DNT_bInL.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-OnKKzW7i.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ--y-3PCOI.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-3gRhWmLI.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-DGAasNBV.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-M75dE-Zz.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-Cg2u7mIi.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-VDnX2t7r.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-BId86hIF.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-COWqruIv.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23040,19 +23040,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-C-hnq6JB.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-B63OXTS2.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-DSegCJB_.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-CUd1XKLY.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-C6fswd3z.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-BrAOsQEV.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-C6fswd3z.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-BrAOsQEV.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23068,7 +23068,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-DF9TPELl.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-B7TPRZ7i.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23084,23 +23084,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-BaWz2i9y.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-DsD6AV_B.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-BaWz2i9y.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-DsD6AV_B.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-DLFrEwta.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-78BOpS6Q.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-BSuPrrQH.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-DDcKt2o7.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-B2Z_UNbE.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-42h76h6P.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23108,15 +23108,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-DWb-qljV.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-DHO33uGs.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-Mr8A8nY1.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-DmkRXEdq.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-CmLQhlYa.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-CTn1Sh6I.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23124,19 +23124,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-DmPznQe2.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-CIfzomse.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-DqtA2NqT.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-6tBiopTd.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-BmToFgVm.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-CPmlbBAZ.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-Cev990cR.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-BpnpORhl.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23144,11 +23144,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-Cmbal3wt.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-CJXUXm6e.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-9wUzdqWF.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-Bt16EAsg.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23156,7 +23156,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-DSi1FNzA.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-kd437kTC.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23168,49 +23168,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-ByyLZy-E.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-CYiv7a5T.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BfmVZFp9.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CFOuL6wJ.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BfmVZFp9.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CFOuL6wJ.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-BfmVZFp9.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CFOuL6wJ.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-C7uxt82q.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-DVbObmOU.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-DVkU6qDv.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-Bdyt9wte.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-DePeZoBR.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-BEY47Usy.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-BhnZGPAy.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-BKK0KJ8v.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-YXaSuZll.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-MjTQXwRV.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-YXaSuZll.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-MjTQXwRV.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-Bk6zF-fy.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-BV27RcUK.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-Bk6zF-fy.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-BV27RcUK.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -24587,6 +24587,35 @@ function mountAuth(app, auth) {
 	app.on(["POST", "GET"], AUTH_API_PATH, (c) => handleAuthRequest(auth, c.req.raw));
 }
 //#endregion
+//#region src/oauth-client-metadata.ts
+/** Canonical path for Keystroke's outbound MCP OAuth Client ID Metadata Document. */
+const OAUTH_CLIENT_METADATA_PATH = "/.well-known/oauth-client-metadata";
+/** Outbound MCP OAuth callback path (must stay in sync with account mount). */
+const MCP_OAUTH_CALLBACK_PATH = "/api/mcp/oauth/callback";
+/** HTTPS URL of the CIMD document for the current external platform origin. */
+function resolveOAuthClientMetadataUrl(env = process.env) {
+	const origin = resolveExternalPlatformOrigin(env)?.replace(/\/+$/, "");
+	if (!origin) return;
+	return `${origin}${OAUTH_CLIENT_METADATA_PATH}`;
+}
+/** HTTPS redirect URI used for outbound MCP OAuth connects. */
+function resolveMcpOAuthCallbackUrl(env = process.env) {
+	const origin = resolveExternalPlatformOrigin(env)?.replace(/\/+$/, "");
+	if (!origin) return;
+	return `${origin}${MCP_OAUTH_CALLBACK_PATH}`;
+}
+/** Build the CIMD JSON body. `client_id` must exactly match the document URL. */
+function buildOAuthClientMetadataDocument(clientMetadataUrl, redirectUri) {
+	return {
+		client_id: clientMetadataUrl,
+		client_name: "Keystroke",
+		redirect_uris: [redirectUri],
+		grant_types: ["authorization_code", "refresh_token"],
+		response_types: ["code"],
+		token_endpoint_auth_method: "none"
+	};
+}
+//#endregion
 //#region ../../packages/access-control/dist/index.mjs
 const apiKeysActions = {
 	read: "apiKeys:read",
@@ -24966,7 +24995,7 @@ function withOrganizationProjectDatabase() {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/GET.ts
-const handler$99 = async (c) => {
+const handler$100 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserAvatarSchema.parse({ url: dbUser.image ?? null }));
@@ -24985,7 +25014,7 @@ function avatarExtensionForContentType(contentType) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/presign/POST.ts
-const handler$98 = async (c) => {
+const handler$99 = async (c) => {
 	const parsed = PresignUserAvatarRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25025,7 +25054,7 @@ async function deleteStoredImageIfOwned(input) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/PATCH.ts
-const handler$97 = async (c) => {
+const handler$98 = async (c) => {
 	const parsed = UserAvatarPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar update" }), 400);
 	const user = c.get("user");
@@ -25067,14 +25096,14 @@ const handler$97 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/GET.ts
-const handler$96 = async (c) => {
+const handler$97 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserPreferencesSchema.parse(normalizeUserPreferences(dbUser.preferences)));
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/PATCH.ts
-const handler$95 = async (c) => {
+const handler$96 = async (c) => {
 	const parsed = UserPreferencesPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid preferences update" }), 400);
 	const user = c.get("user");
@@ -25089,7 +25118,7 @@ const handler$95 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/GET.ts
-const handler$94 = async (c) => {
+const handler$95 = async (c) => {
 	const memberships = await selectUserOrganizations(c.get("user").id);
 	return c.json(ListOrganizationsResponseSchema.parse(memberships.map(mapUserOrganization)));
 };
@@ -25135,6 +25164,32 @@ async function createOrganizationWithHosting(deps, userId, name, preferredSlug)
 	}
 }
 //#endregion
+//#region src/lib/signup-slack.ts
+/**
+* Escape the three characters Slack treats as control sequences in `mrkdwn`
+* text. Signup fields are user-controlled and must not inject links or mentions.
+*
+* @see https://api.slack.com/reference/surfaces/formatting#escaping
+*/
+function escapeSlackText$1(value) {
+	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function buildSignupSlackText(input) {
+	const name = escapeSlackText$1(input.user.name.trim());
+	const email = escapeSlackText$1(input.user.email.trim());
+	const orgName = escapeSlackText$1(input.org.name.trim());
+	const slug = escapeSlackText$1(input.org.slug.trim());
+	return [
+		"*New Website Sign Up* :boom:",
+		`*Name:* ${name}`,
+		`*Email:* ${email}`,
+		`*Org:* ${orgName} (\`${slug}\`)`
+	].join("\n");
+}
+async function postSignupToSlack(input) {
+	await postPipelineSlackWebhook({ text: buildSignupSlackText(input) });
+}
+//#endregion
 //#region src/routes/account/organizations/slug-errors.ts
 function organizationSlugErrorBody(error) {
 	if (error instanceof OrganizationSlugTakenError) return {
@@ -25156,7 +25211,20 @@ function createOrganizationHandler(deps) {
 		const parsed = CreateOrganizationRequestSchema.safeParse(body);
 		if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid organization request" }), 400);
 		try {
+			const hadOrganizations = (await selectUserOrganizations(user.id)).length > 0;
 			const membership = await createOrganizationWithHosting(deps, user.id, parsed.data.name, parsed.data.slug);
+			if (!hadOrganizations) postSignupToSlack({
+				user: {
+					name: user.name,
+					email: user.email
+				},
+				org: {
+					name: membership.organization.name,
+					slug: membership.organization.slug
+				}
+			}).catch((error) => {
+				console.error("Failed to deliver signup notification to Slack", error);
+			});
 			return c.json(CreateOrganizationResponseSchema.parse(mapUserOrganization(membership)), 201);
 		} catch (error) {
 			if (error instanceof OrganizationSlugTakenError$1) return c.json(ErrorResponseSchema.parse(organizationSlugErrorBody(error)), 409);
@@ -25167,7 +25235,7 @@ function createOrganizationHandler(deps) {
 }
 //#endregion
 //#region src/routes/account/organizations/slug-available/GET.ts
-const handler$93 = async (c) => {
+const handler$94 = async (c) => {
 	const parsed = SlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
 		excludeOrganizationId: c.req.query("excludeOrganizationId")
@@ -25178,7 +25246,7 @@ const handler$93 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/GET.ts
-const handler$92 = async (c) => {
+const handler$93 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const membership = await selectUserOrganizationMembership(c.get("user").id, organizationId);
 	if (!membership) throw new Error(`Organization membership missing after param guard: ${organizationId}`);
@@ -25186,7 +25254,7 @@ const handler$92 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/PATCH.ts
-const handler$91 = async (c) => {
+const handler$92 = async (c) => {
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
 	const parsed = UpdateOrganizationRequestSchema.safeParse(body);
@@ -25211,7 +25279,7 @@ const handler$91 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/GET.ts
-const handler$90 = async (c) => {
+const handler$91 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
 	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
@@ -25260,7 +25328,7 @@ async function finalizeOrgLogoVariant(input) {
 		publicUrl: finalized.publicUrl
 	};
 }
-const handler$89 = async (c) => {
+const handler$90 = async (c) => {
 	const parsed = OrganizationSidebarBrandingPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid branding update" }), 400);
 	const { organizationId } = c.get("organization");
@@ -25288,7 +25356,7 @@ const handler$89 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/logo/presign/POST.ts
-const handler$88 = async (c) => {
+const handler$89 = async (c) => {
 	const parsed = PresignOrgLogoRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid logo upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -25393,7 +25461,7 @@ async function attachRanAsToDetail(detail, ranByUserId) {
 }
 //#endregion
 //#region src/routes/account/history/GET.ts
-const handler$87 = async (c) => {
+const handler$88 = async (c) => {
 	const organization = c.get("organization");
 	const ctx = accessContext(c);
 	const query = HistoryRunListQuerySchema.parse({
@@ -25418,7 +25486,7 @@ const handler$87 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/history/[runId]/GET.ts
-const handler$86 = async (c) => {
+const handler$87 = async (c) => {
 	const runId = c.req.param("runId") ?? "";
 	if (!runId) return c.json(null, 404);
 	const core = await findHistoryRunCore(runId);
@@ -25476,7 +25544,7 @@ function toAgentSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/agents/GET.ts
-const handler$85 = async (c) => {
+const handler$86 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, agentListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(AgentSummaryListResponseSchema.parse([]));
 	const rows = await listActiveAgents(filter);
@@ -25490,7 +25558,7 @@ function touchResourceActivityBestEffort(options) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/GET.ts
-const handler$84 = async (c) => {
+const handler$85 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(AgentSummaryDetailResponseSchema.parse(null));
@@ -25513,7 +25581,7 @@ const handler$84 = async (c) => {
 function relativePathsFromStorageKeys(prefix, keys) {
 	return keys.filter((key) => key.startsWith(prefix) && key.endsWith(".md")).map((key) => key.slice(prefix.length)).filter((path) => !path.startsWith(".") && !path.includes("/."));
 }
-const handler$83 = async (c) => {
+const handler$84 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentMemoryFilesResponseSchema.parse({ files: [] }), 404);
@@ -25538,7 +25606,7 @@ function isStorageNotFoundError(error) {
 	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
 	return name === "NoSuchKey" || code === "NoSuchKey" || code === "NotFound" || status === 404;
 }
-const handler$82 = async (c) => {
+const handler$83 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25592,7 +25660,7 @@ function workspaceRelativePathsFromStorageKeys(keys) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/GET.ts
-const handler$81 = async (c) => {
+const handler$82 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
@@ -25615,7 +25683,7 @@ const handler$81 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/agents/[agentId]/workspace/files/content/GET.ts
-const handler$80 = async (c) => {
+const handler$81 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25664,7 +25732,7 @@ async function cancelHistoryRun(c, kind, cancel) {
 }
 //#endregion
 //#region src/routes/account/agents/sessions/[sessionId]/cancel/POST.ts
-const handler$79 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
+const handler$80 = (c) => cancelHistoryRun(c, "agent", cancelAgentSession);
 //#endregion
 //#region src/routes/account/resources/workflows.ts
 function toWorkflowSummary(row, options) {
@@ -25681,7 +25749,7 @@ function toWorkflowSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/workflows/GET.ts
-const handler$78 = async (c) => {
+const handler$79 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, workflowListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(WorkflowSummaryListResponseSchema.parse([]));
 	const rows = await listActiveWorkflows(filter);
@@ -25690,7 +25758,7 @@ const handler$78 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/GET.ts
-const handler$77 = async (c) => {
+const handler$78 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const row = workflowId ? await selectActiveWorkflowById(workflowId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessWorkflow)) return c.json(WorkflowSummaryDetailResponseSchema.parse(null));
@@ -26130,7 +26198,7 @@ function buildWorkflowCanvas(input) {
 //#region src/routes/account/workflows/[workflowId]/canvas/GET.ts
 /** Bumped when the annotation prompt/model changes, so cached annotations invalidate. */
 const ANNOTATIONS_GENERATOR_VERSION = "wf-canvas-annotations-v1";
-const handler$76 = async (c) => {
+const handler$77 = async (c) => {
 	const organization = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -26303,7 +26371,7 @@ function toBinding(key, description) {
 * each of its requirements currently binds to (read-only, no decryption). Not
 * content-hash cached — credential state changes without a redeploy.
 */
-const handler$75 = async (c) => {
+const handler$76 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26462,7 +26530,7 @@ function toCanvasRunStatus(status) {
 	if (status === "canceled") return "canceled";
 	return "running";
 }
-const handler$74 = async (c) => {
+const handler$75 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	const runId = c.req.param("runId") ?? "";
 	if (!workflowId.trim() || !runId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow or run id" }), 400);
@@ -26517,7 +26585,7 @@ async function loadWorkflowSource(organization, projectId, sourcePath) {
 		return null;
 	}
 }
-const handler$73 = async (c) => {
+const handler$74 = async (c) => {
 	const organization = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -26618,7 +26686,7 @@ const handler$73 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/run-inputs/GET.ts
-const handler$72 = async (c) => {
+const handler$73 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26633,7 +26701,7 @@ const handler$72 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/run-inputs/PUT.ts
-const handler$71 = async (c) => {
+const handler$72 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26665,7 +26733,7 @@ function parseRunInput(requestSchema, input) {
 * the active deploy's request schema, creates a pending run, and enqueues it on
 * the project's queue (drained by the project runtime worker). Returns the run id.
 */
-const handler$70 = async (c) => {
+const handler$71 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
@@ -26702,7 +26770,7 @@ const handler$70 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/[workflowId]/runs/GET.ts
-const handler$69 = async (c) => {
+const handler$70 = async (c) => {
 	const workflowId = c.req.param("workflowId") ?? "";
 	if (!workflowId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid workflow id" }), 400);
 	const resolved = await resolveWorkflow(c, workflowId);
@@ -26725,7 +26793,7 @@ const handler$69 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/workflows/runs/[runId]/cancel/POST.ts
-const handler$68 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
+const handler$69 = (c) => cancelHistoryRun(c, "workflow", cancelWorkflowRun);
 //#endregion
 //#region src/routes/account/resources/skills.ts
 function toSkillSummary(row) {
@@ -26742,7 +26810,7 @@ function toSkillSummary(row) {
 }
 //#endregion
 //#region src/routes/account/skills/GET.ts
-const handler$67 = async (c) => {
+const handler$68 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, skillListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(SkillSummaryListResponseSchema.parse([]));
 	const rows = await listActiveSkills(filter);
@@ -26750,7 +26818,7 @@ const handler$67 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/skills/[skillId]/GET.ts
-const handler$66 = async (c) => {
+const handler$67 = async (c) => {
 	const skillId = c.req.param("skillId") ?? "";
 	const row = skillId ? await selectActiveSkillById(skillId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessSkill)) return c.json(SkillSummaryDetailResponseSchema.parse(null));
@@ -26859,7 +26927,7 @@ function toWorkspaceTriggerRunSummary(item, assignments) {
 }
 //#endregion
 //#region src/routes/account/triggers/GET.ts
-const handler$65 = async (c) => {
+const handler$66 = async (c) => {
 	const organization = c.get("organization");
 	const scope = listScope(c, projectListScope(accessContext(c)));
 	const filter = await resolveListProjectIds(c, scope, c.req.query("projectId"));
@@ -26871,7 +26939,7 @@ const handler$65 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/GET.ts
-const handler$64 = async (c) => {
+const handler$65 = async (c) => {
 	const organization = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -26887,7 +26955,7 @@ const handler$64 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/runs/GET.ts
-const handler$63 = async (c) => {
+const handler$64 = async (c) => {
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
 	const filter = await resolveListProjectIds(c, listScope(c, projectListScope(accessContext(c))));
@@ -26916,7 +26984,7 @@ const handler$63 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/file/GET.ts
-const handler$62 = async (c) => {
+const handler$63 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -26953,7 +27021,7 @@ function envelope(row, status, hash) {
 		model: row.overviewModel ?? "deepseek/deepseek-v4-flash"
 	});
 }
-const handler$61 = async (c) => {
+const handler$62 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -27013,7 +27081,7 @@ const handler$61 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/triggers/[triggerId]/attachments/[attachmentId]/PATCH.ts
-const handler$60 = async (c) => {
+const handler$61 = async (c) => {
 	const organization = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	const attachmentId = c.req.param("attachmentId") ?? "";
@@ -27083,7 +27151,7 @@ var InvokeHttpError = class extends Error {
 * Manually invoke a trigger from the dashboard or CLI. Validates webhook input against
 * stored attachment schemas, then enqueues a trigger job on the project's queue.
 */
-const handler$59 = async (c) => {
+const handler$60 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
@@ -27156,7 +27224,7 @@ const handler$59 = async (c) => {
 * Form metadata for the dashboard invoke popover: webhook request schemas and
 * cron's read-only static payload.
 */
-const handler$58 = async (c) => {
+const handler$59 = async (c) => {
 	const triggerId = c.req.param("triggerId") ?? "";
 	if (!triggerId.trim()) return c.json(ErrorResponseSchema.parse({ error: "Invalid trigger id" }), 400);
 	const filter = await resolveListProjectIds(c, listScope(c, projectListScope(accessContext(c))));
@@ -27222,7 +27290,7 @@ function latestRecentInteractionAt(recent) {
 //#endregion
 //#region src/routes/account/recents/GET.ts
 const RECENTS_LIMIT = 50;
-const handler$57 = async (c) => {
+const handler$58 = async (c) => {
 	const userId = c.get("user").id;
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, { kind: "member-only" });
@@ -27248,7 +27316,7 @@ const handler$57 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/GET.ts
-const handler$56 = async (c) => {
+const handler$57 = async (c) => {
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, listScope(c, projectListScope(accessContext(c))));
 	const projects = await selectProjectsByOrganizationId(organization.organizationId, { grantedProjectIds: grantedProjectIdsList });
@@ -27274,7 +27342,7 @@ function mergeProjectListMetrics(input) {
 }
 //#endregion
 //#region src/routes/account/projects/metrics/GET.ts
-const handler$55 = async (c) => {
+const handler$56 = async (c) => {
 	const organization = c.get("organization");
 	const grantedProjectIdsList = await grantedProjectIds(c, listScope(c, projectListScope(accessContext(c))));
 	const [resourceCounts, lastDeploymentAtByProject] = await Promise.all([selectProjectResourceCounts(grantedProjectIdsList !== void 0 ? { projectIds: grantedProjectIdsList } : void 0), selectLastDeploymentAtByProject(organization.organizationId)]);
@@ -27290,7 +27358,7 @@ const handler$55 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/POST.ts
-const handler$54 = async (c) => {
+const handler$55 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const body = await c.req.json().catch(() => null);
@@ -27301,7 +27369,7 @@ const handler$54 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/slug-available/GET.ts
-const handler$53 = async (c) => {
+const handler$54 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = ProjectSlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
@@ -27313,12 +27381,12 @@ const handler$53 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/GET.ts
-const handler$52 = async (c) => {
+const handler$53 = async (c) => {
 	return c.json(ProjectResponseSchema.parse(routeProject(c.get("project"))));
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/PATCH.ts
-const handler$51 = async (c) => {
+const handler$52 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -27336,7 +27404,7 @@ const handler$51 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/DELETE.ts
-const handler$50 = async (c) => {
+const handler$51 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	if (!await deleteProjectForOrganization(organization.organizationId, project.id)) return c.json(ErrorResponseSchema.parse({ error: "Project not found" }), 404);
@@ -27344,7 +27412,7 @@ const handler$50 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/deployments/GET.ts
-const handler$49 = async (c) => {
+const handler$50 = async (c) => {
 	const rows = await selectProjectDeployments(c.get("project").id);
 	return c.json(ListProjectDeploymentsResponseSchema.parse(rows.map(mapProjectDeployment)));
 };
@@ -27352,7 +27420,7 @@ const handler$49 = async (c) => {
 //#region src/routes/account/projects/[projectId]/artifacts/POST.ts
 const DEFAULT_PRESIGN_TTL_SECONDS$1 = 900;
 const ARTIFACT_CONTENT_TYPE = "application/gzip";
-const handler$48 = async (c) => {
+const handler$49 = async (c) => {
 	const project = c.get("project");
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
@@ -27380,7 +27448,7 @@ const handler$48 = async (c) => {
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/active/download/GET.ts
 const DEFAULT_PRESIGN_TTL_SECONDS = 900;
-const handler$47 = async (c) => {
+const handler$48 = async (c) => {
 	const project = c.get("project");
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
@@ -27399,7 +27467,7 @@ const handler$47 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/active/source/GET.ts
-const handler$46 = async (c) => {
+const handler$47 = async (c) => {
 	const project = c.get("project");
 	const active = await selectActiveArtifactSourceManifestForProject(project.id);
 	if (!active?.sourceManifestJson) return c.json(ErrorResponseSchema.parse({ error: "No active source for project" }), 404);
@@ -27422,7 +27490,7 @@ const handler$46 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/complete/POST.ts
-const handler$45 = async (c) => {
+const handler$46 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27462,7 +27530,7 @@ const handler$45 = async (c) => {
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/source/presign/POST.ts
 const SOURCE_BLOB_CONTENT_TYPE = "text/plain; charset=utf-8";
-const handler$44 = async (c) => {
+const handler$45 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27490,7 +27558,7 @@ const handler$44 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/source/manifest/POST.ts
-const handler$43 = async (c) => {
+const handler$44 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27522,7 +27590,7 @@ function extensionFromUpload(contentType, filename) {
 	if (fromName && /^[a-z0-9]+$/.test(fromName)) return fromName;
 	return chatAttachmentExtension(contentType) ?? "bin";
 }
-const handler$42 = async (c) => {
+const handler$43 = async (c) => {
 	const project = c.get("project");
 	const slug = c.req.param("slug");
 	if (!slug) return c.json(ErrorResponseSchema.parse({ error: "Agent slug is required" }), 400);
@@ -27547,7 +27615,7 @@ const handler$42 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/agents/[slug]/attachments/[...key]/GET.ts
-const handler$41 = async (c) => {
+const handler$42 = async (c) => {
 	const project = c.get("project");
 	const slug = c.req.param("slug");
 	const keyParam = c.req.param("key");
@@ -27593,7 +27661,7 @@ function resolveSourcePaths(rows, kindDir, filePaths) {
 		}] : [];
 	});
 }
-const handler$40 = async (c) => {
+const handler$41 = async (c) => {
 	const project = c.get("project");
 	const active = await selectActiveArtifactSourceManifestForProject(project.id);
 	if (!active || !active.sourceManifestJson) return c.json(ListProjectFilesResponseSchema.parse({
@@ -27638,7 +27706,7 @@ function ifNoneMatchMatches(ifNoneMatch, etag) {
 }
 //#endregion
 //#region src/routes/account/projects/[projectId]/artifacts/[artifactId]/files/content/GET.ts
-const handler$39 = async (c) => {
+const handler$40 = async (c) => {
 	const project = c.get("project");
 	const artifactId = c.req.param("artifactId");
 	if (!artifactId) return c.json(ErrorResponseSchema.parse({ error: "Artifact id is required" }), 400);
@@ -27684,7 +27752,7 @@ function createProjectReachabilityHandler(hosting) {
 }
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/GET.ts
-const handler$38 = async (c) => {
+const handler$39 = async (c) => {
 	const project = c.get("project");
 	const currentUserId = c.get("user").id;
 	const members = await selectProjectMembers(project.id);
@@ -27692,7 +27760,7 @@ const handler$38 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/POST.ts
-const handler$37 = async (c) => {
+const handler$38 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -27708,7 +27776,7 @@ const handler$37 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/[userId]/PATCH.ts
-const handler$36 = async (c) => {
+const handler$37 = async (c) => {
 	const project = c.get("project");
 	const userId = c.req.param("userId");
 	const body = await c.req.json().catch(() => null);
@@ -27725,7 +27793,7 @@ const handler$36 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/[userId]/DELETE.ts
-const handler$35 = async (c) => {
+const handler$36 = async (c) => {
 	const project = c.get("project");
 	const userId = c.req.param("userId");
 	if (!userId) return c.json(ErrorResponseSchema.parse({ error: "User id is required" }), 400);
@@ -27739,7 +27807,7 @@ const handler$35 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/members/me/DELETE.ts
-const handler$34 = async (c) => {
+const handler$35 = async (c) => {
 	const project = c.get("project");
 	const userId = c.get("user").id;
 	try {
@@ -27752,13 +27820,13 @@ const handler$34 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/settings/GET.ts
-const handler$33 = async (c) => {
+const handler$34 = async (c) => {
 	const project = c.get("project");
 	return c.json(ProjectSettingsResponseSchema.parse(mapProjectSettings(project)));
 };
 //#endregion
 //#region src/routes/account/projects/[projectId]/settings/PATCH.ts
-const handler$32 = async (c) => {
+const handler$33 = async (c) => {
 	const organization = c.get("organization");
 	const project = c.get("project");
 	const body = await c.req.json().catch(() => null);
@@ -27880,7 +27948,7 @@ async function enrichCredentialInstances(rows, organizationId) {
 }
 //#endregion
 //#region src/routes/account/credentials/GET.ts
-const handler$31 = async (c) => {
+const handler$32 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const query = ListCredentialsPageQuerySchema.parse({
@@ -27909,7 +27977,7 @@ function withTargetScope(target, fn) {
 	if (target.projectScope) return runWithProjectScope(target.projectScope, fn);
 	return fn();
 }
-const handler$30 = async (c) => {
+const handler$31 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const parsed = CreateCredentialsRequestSchema.safeParse(await c.req.json().catch(() => null));
@@ -27990,7 +28058,7 @@ const handler$30 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/credentials/[credentialId]/GET.ts
-const handler$29 = async (c) => {
+const handler$30 = async (c) => {
 	const organization = c.get("organization");
 	const credentialId = c.req.param("credentialId") ?? "";
 	const row = credentialId ? await selectCredentialInstanceById(credentialId) : void 0;
@@ -28000,7 +28068,7 @@ const handler$29 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/credentials/[credentialId]/PATCH.ts
-const handler$28 = async (c) => {
+const handler$29 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const credentialId = c.req.param("credentialId") ?? "";
@@ -28098,7 +28166,7 @@ function createDeleteCredentialHandler(options = {}) {
 }
 //#endregion
 //#region src/routes/account/members/GET.ts
-const handler$27 = async (c) => {
+const handler$28 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const query = ListOrganizationMembersPageQuerySchema.parse({
 		limit: c.req.query("limit") || void 0,
@@ -28156,7 +28224,7 @@ async function sendOrganizationInviteEmail(payload, resend) {
 }
 //#endregion
 //#region src/routes/account/members/invitations/POST.ts
-const handler$26 = async (c) => {
+const handler$27 = async (c) => {
 	const user = c.get("user");
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
@@ -28182,7 +28250,7 @@ const handler$26 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/members/[userId]/PATCH.ts
-const handler$25 = async (c) => {
+const handler$26 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const userId = c.req.param("userId");
 	const body = await c.req.json().catch(() => null);
@@ -28199,7 +28267,7 @@ const handler$25 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/members/[userId]/DELETE.ts
-const handler$24 = async (c) => {
+const handler$25 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const userId = c.req.param("userId");
 	if (!userId) return c.json(ErrorResponseSchema.parse({ error: "User id is required" }), 400);
@@ -28213,13 +28281,13 @@ const handler$24 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/invitations/GET.ts
-const handler$23 = async (c) => {
+const handler$24 = async (c) => {
 	const invitations = await selectPendingInvitationsForUser(c.get("user").id);
 	return c.json(ListOrganizationInvitationsResponseSchema.parse(invitations.map(mapOrganizationInvitation)));
 };
 //#endregion
 //#region src/routes/account/invitations/[invitationId]/accept/POST.ts
-const handler$22 = async (c) => {
+const handler$23 = async (c) => {
 	const user = c.get("user");
 	const invitationId = c.req.param("invitationId");
 	if (!invitationId) return c.json(ErrorResponseSchema.parse({ error: "Invitation id is required" }), 400);
@@ -28235,7 +28303,7 @@ const handler$22 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/invitations/[invitationId]/decline/POST.ts
-const handler$21 = async (c) => {
+const handler$22 = async (c) => {
 	const user = c.get("user");
 	const invitationId = c.req.param("invitationId");
 	if (!invitationId) return c.json(ErrorResponseSchema.parse({ error: "Invitation id is required" }), 400);
@@ -28321,13 +28389,13 @@ function appRowToCustomAppDetail(row) {
 }
 //#endregion
 //#region src/routes/account/apps/GET.ts
-const handler$20 = async (c) => {
+const handler$21 = async (c) => {
 	const apps = (await listAppsForOrganization(c.get("organization").organizationId)).map(appRowToCatalogSummary);
 	return c.json(ListAppsResponseSchema.parse(apps));
 };
 //#endregion
 //#region src/routes/account/apps/POST.ts
-const handler$19 = async (c) => {
+const handler$20 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = CreateCustomAppRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) {
@@ -28360,7 +28428,7 @@ const handler$19 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/discover/POST.ts
-const handler$18 = async (c) => {
+const handler$19 = async (c) => {
 	const parsed = McpDiscoverRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	try {
@@ -28374,7 +28442,7 @@ const handler$18 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/discover-openapi/POST.ts
-const handler$17 = async (c) => {
+const handler$18 = async (c) => {
 	const parsed = OpenApiDiscoverRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	try {
@@ -28387,7 +28455,7 @@ const handler$17 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/discover-graphql/POST.ts
-const handler$16 = async (c) => {
+const handler$17 = async (c) => {
 	const parsed = GraphqlDiscoverRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	try {
@@ -28400,7 +28468,7 @@ const handler$16 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/[slug]/mcp/oauth/connections/POST.ts
-const handler$15 = async (c) => {
+const handler$16 = async (c) => {
 	const organization = c.get("organization");
 	const user = c.get("user");
 	const appSlug = c.req.param("slug")?.trim();
@@ -28412,8 +28480,9 @@ const handler$15 = async (c) => {
 	if (!parsed.success) return c.json({ error: "Invalid request body" }, 400);
 	const app = await selectAppForOrganization(organization.organizationId, appSlug);
 	if (!app || app.source !== "mcp" || app.authKind !== "oauth") return c.json({ error: "App not found" }, 404);
-	const platformOrigin = externalPlatformOrigin();
-	if (!platformOrigin) return c.json({ error: "PUBLIC_PLATFORM_URL is not configured" }, 500);
+	const redirectUri = resolveMcpOAuthCallbackUrl();
+	const clientMetadataUrl = resolveOAuthClientMetadataUrl();
+	if (!redirectUri) return c.json({ error: "PUBLIC_PLATFORM_URL is not configured" }, 500);
 	const projectIds = [];
 	const projectNamesById = {};
 	for (const slug of parsed.data.projects ?? []) {
@@ -28428,7 +28497,8 @@ const handler$15 = async (c) => {
 			input: parsed.data,
 			organizationId: organization.organizationId,
 			userId: user.id,
-			redirectUri: `${platformOrigin.replace(/\/+$/, "")}/api/mcp/oauth/callback`,
+			redirectUri,
+			clientMetadataUrl,
 			scopeTargets: {
 				projectIds,
 				projectNamesById,
@@ -28458,7 +28528,7 @@ function buildOAuthWebLandingUrl(webOrigin, params) {
 }
 //#endregion
 //#region src/routes/account/mcp/oauth/callback/GET.ts
-const handler$14 = async (c) => {
+const handler$15 = async (c) => {
 	const code = c.req.query("code")?.trim();
 	const state = c.req.query("state")?.trim();
 	const oauthError = c.req.query("error")?.trim();
@@ -28506,7 +28576,7 @@ const handler$14 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/slug-available/GET.ts
-const handler$13 = async (c) => {
+const handler$14 = async (c) => {
 	const organization = c.get("organization");
 	const parsed = AppSlugAvailabilityQuerySchema.safeParse({ slug: c.req.query("slug") });
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid slug query" }), 400);
@@ -28517,7 +28587,7 @@ const handler$13 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/apps/[slug]/GET.ts
-const handler$12 = async (c) => {
+const handler$13 = async (c) => {
 	const organization = c.get("organization");
 	const slug = c.req.param("slug") ?? "";
 	if (!slug) return c.json(ErrorResponseSchema.parse({ error: "App not found" }), 404);
@@ -28532,7 +28602,7 @@ const handler$12 = async (c) => {
 //#endregion
 //#region src/routes/account/apps/[slug]/catalog/GET.ts
 /** Full catalog entry (scopes + credential template) for connect UI. */
-const handler$11 = async (c) => {
+const handler$12 = async (c) => {
 	const organization = c.get("organization");
 	const slug = c.req.param("slug") ?? "";
 	if (!slug) return c.json(ErrorResponseSchema.parse({ error: "App not found" }), 404);
@@ -28565,14 +28635,14 @@ function projectChannelPlatform(row) {
 	});
 }
 /** Gateway platforms only — avoids downloading the full apps catalog. */
-const handler$10 = async (c) => {
+const handler$11 = async (c) => {
 	const organization = c.get("organization");
 	const platforms = (await Promise.all(Object.keys(GATEWAY_BY_APP_SLUG).map((slug) => selectAppForOrganization(organization.organizationId, slug)))).flatMap((row) => row ? [projectChannelPlatform(row)] : []);
 	return c.json(ListChannelPlatformsResponseSchema.parse(platforms));
 };
 //#endregion
 //#region src/routes/account/api-keys/GET.ts
-const handler$9 = async (c) => {
+const handler$10 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const records = apiKeyListScope(accessContext(c)).kind === "all" ? await listOrgPlatformApiKeysForOrganization(organizationId) : await listOrgPlatformApiKeysForUser(organizationId, user.id);
@@ -28589,7 +28659,7 @@ const handler$9 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/api-keys/POST.ts
-const handler$8 = async (c) => {
+const handler$9 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const body = CreateApiKeyRequestSchema.parse(await c.req.json());
@@ -28612,7 +28682,7 @@ const handler$8 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/api-keys/[apiKeyId]/DELETE.ts
-const handler$7 = async (c) => {
+const handler$8 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const apiKeyId = c.req.param("apiKeyId");
@@ -28637,7 +28707,7 @@ const handler$7 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/managed-service-credentials/GET.ts
-const handler$6 = async (c) => {
+const handler$7 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const kindParam = c.req.query("kind");
@@ -28657,7 +28727,7 @@ const handler$6 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/managed-service-credentials/POST.ts
-const handler$5 = async (c) => {
+const handler$6 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const body = ConnectManagedServiceCredentialRequestSchema.parse(await c.req.json());
@@ -28686,7 +28756,7 @@ const handler$5 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/managed-service-credentials/[id]/PATCH.ts
-const handler$4 = async (c) => {
+const handler$5 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const user = c.get("user");
 	const credentialId = c.req.param("id");
@@ -28717,7 +28787,7 @@ const handler$4 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/managed-service-credentials/[id]/DELETE.ts
-const handler$3 = async (c) => {
+const handler$4 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const credentialId = c.req.param("id");
 	if (!credentialId) return c.json(ErrorResponseSchema.parse({ error: "Credential id is required" }), 400);
@@ -28786,7 +28856,7 @@ async function postTeamRequestToSlack(input) {
 }
 //#endregion
 //#region src/routes/account/team-requests/POST.ts
-const handler$2 = async (c) => {
+const handler$3 = async (c) => {
 	const user = c.get("user");
 	const organizationContext = c.get("organization");
 	const parsed = SubmitTeamRequestRequestSchema.safeParse(await c.req.json().catch(() => null));
@@ -28825,7 +28895,7 @@ function mountAccountRoutes(options) {
 	const projectScoped = new Hono();
 	const protect = requireSession(createDefaultAuthJwtVerifier());
 	const deleteCredential = createDeleteCredentialHandler({ mcp: options.mcp });
-	account.get("/mcp/oauth/callback", handler$14);
+	account.get("/mcp/oauth/callback", handler$15);
 	account.use("/*", protect);
 	orgScoped.use("/*", protect);
 	orgScoped.use("/*", requireOrganization());
@@ -28847,107 +28917,107 @@ function mountAccountRoutes(options) {
 	const requireProjectManageMembers = authorize(projectActions.manageMembers);
 	const requireInvitableProjectRole = authorizePayload(InviteProjectMembersRequestSchema, ({ c, ctx, body }) => canInviteToProject(ctx, { invitePermission: getProjectInvitePermission(c) }, body.role));
 	const requireOrgParam = requireOrganizationParam();
-	account.get("/organizations", handler$94);
-	account.get("/organizations/slug-available", handler$93);
+	account.get("/organizations", handler$95);
+	account.get("/organizations/slug-available", handler$94);
 	account.post("/organizations", createOrganizationHandler(options));
-	account.get("/organizations/:organizationId", requireOrgParam, handler$92);
-	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$91);
-	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$90);
-	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$89);
-	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$88);
-	account.get("/invitations", handler$23);
-	account.post("/invitations/:invitationId/accept", handler$22);
-	account.post("/invitations/:invitationId/decline", handler$21);
-	account.get("/users/me/avatar", handler$99);
-	account.post("/users/me/avatar/presign", handler$98);
-	account.patch("/users/me/avatar", handler$97);
-	account.get("/users/me/preferences", handler$96);
-	account.patch("/users/me/preferences", handler$95);
+	account.get("/organizations/:organizationId", requireOrgParam, handler$93);
+	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$92);
+	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$91);
+	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$90);
+	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$89);
+	account.get("/invitations", handler$24);
+	account.post("/invitations/:invitationId/accept", handler$23);
+	account.post("/invitations/:invitationId/decline", handler$22);
+	account.get("/users/me/avatar", handler$100);
+	account.post("/users/me/avatar/presign", handler$99);
+	account.patch("/users/me/avatar", handler$98);
+	account.get("/users/me/preferences", handler$97);
+	account.patch("/users/me/preferences", handler$96);
 	const withOrgDb = withOrganizationProjectDatabase();
-	orgScoped.get("/apps", handler$20);
-	orgScoped.get("/apps/slug-available", handler$13);
-	orgScoped.get("/channel-platforms", handler$10);
-	orgScoped.post("/apps/discover", requireOrgUpdate, handler$18);
-	orgScoped.post("/apps/discover-openapi", requireOrgUpdate, handler$17);
-	orgScoped.post("/apps/discover-graphql", requireOrgUpdate, handler$16);
-	orgScoped.post("/apps", requireOrgUpdate, handler$19);
-	orgScoped.post("/apps/:slug/mcp/oauth/connections", requireOrgUpdate, withOrgDb, handler$15);
-	orgScoped.get("/apps/:slug/catalog", handler$11);
-	orgScoped.get("/apps/:slug", handler$12);
-	account.post("/team-requests", requireOrganization(), handler$2);
-	orgScoped.get("/members", handler$27);
-	orgScoped.post("/members/invitations", requireUserInvite, requireInvitableRole, handler$26);
-	orgScoped.patch("/members/:userId", requireUserManage, handler$25);
-	orgScoped.delete("/members/:userId", requireUserManage, handler$24);
-	orgScoped.get("/api-keys", handler$9);
-	orgScoped.post("/api-keys", requireApiKeyCreate, handler$8);
-	orgScoped.delete("/api-keys/:apiKeyId", handler$7);
-	orgScoped.get("/managed-service-credentials", requireManagedServicesRead, handler$6);
-	orgScoped.post("/managed-service-credentials", requireManagedServicesManage, handler$5);
-	orgScoped.patch("/managed-service-credentials/:id", requireManagedServicesManage, handler$4);
-	orgScoped.delete("/managed-service-credentials/:id", requireManagedServicesManage, handler$3);
-	orgScoped.get("/agents", withOrgDb, handler$85);
-	orgScoped.get("/agents/:agentId", withOrgDb, handler$84);
-	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$83);
-	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$82);
-	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$81);
-	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$80);
-	orgScoped.get("/workflows", withOrgDb, handler$78);
-	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$77);
-	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$76);
-	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$75);
-	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$74);
-	orgScoped.get("/workflows/:workflowId/overview", withOrgDb, handler$73);
-	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$69);
-	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$72);
-	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$71);
-	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$70);
-	orgScoped.get("/skills", withOrgDb, handler$67);
-	orgScoped.get("/skills/:skillId", withOrgDb, handler$66);
-	orgScoped.get("/triggers", withOrgDb, handler$65);
-	orgScoped.get("/triggers/:triggerId", withOrgDb, handler$64);
-	orgScoped.get("/triggers/:triggerId/runs", withOrgDb, handler$63);
-	orgScoped.get("/triggers/:triggerId/file", withOrgDb, handler$62);
-	orgScoped.get("/triggers/:triggerId/overview", withOrgDb, handler$61);
-	orgScoped.get("/triggers/:triggerId/invoke-inputs", withOrgDb, handler$58);
-	orgScoped.post("/triggers/:triggerId/invoke", withOrgDb, handler$59);
-	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$60);
-	orgScoped.get("/recents", withOrgDb, handler$57);
-	orgScoped.get("/history", withOrgDb, handler$87);
-	orgScoped.get("/history/:runId", withOrgDb, handler$86);
-	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$68);
-	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$79);
-	orgScoped.get("/credentials", withOrgDb, handler$31);
-	orgScoped.post("/credentials", withOrgDb, handler$30);
-	orgScoped.get("/credentials/:credentialId", withOrgDb, (c, next) => c.req.param("credentialId") === "instances" ? next() : handler$29(c, next));
-	orgScoped.patch("/credentials/:credentialId", withOrgDb, handler$28);
+	orgScoped.get("/apps", handler$21);
+	orgScoped.get("/apps/slug-available", handler$14);
+	orgScoped.get("/channel-platforms", handler$11);
+	orgScoped.post("/apps/discover", requireOrgUpdate, handler$19);
+	orgScoped.post("/apps/discover-openapi", requireOrgUpdate, handler$18);
+	orgScoped.post("/apps/discover-graphql", requireOrgUpdate, handler$17);
+	orgScoped.post("/apps", requireOrgUpdate, handler$20);
+	orgScoped.post("/apps/:slug/mcp/oauth/connections", requireOrgUpdate, withOrgDb, handler$16);
+	orgScoped.get("/apps/:slug/catalog", handler$12);
+	orgScoped.get("/apps/:slug", handler$13);
+	account.post("/team-requests", requireOrganization(), handler$3);
+	orgScoped.get("/members", handler$28);
+	orgScoped.post("/members/invitations", requireUserInvite, requireInvitableRole, handler$27);
+	orgScoped.patch("/members/:userId", requireUserManage, handler$26);
+	orgScoped.delete("/members/:userId", requireUserManage, handler$25);
+	orgScoped.get("/api-keys", handler$10);
+	orgScoped.post("/api-keys", requireApiKeyCreate, handler$9);
+	orgScoped.delete("/api-keys/:apiKeyId", handler$8);
+	orgScoped.get("/managed-service-credentials", requireManagedServicesRead, handler$7);
+	orgScoped.post("/managed-service-credentials", requireManagedServicesManage, handler$6);
+	orgScoped.patch("/managed-service-credentials/:id", requireManagedServicesManage, handler$5);
+	orgScoped.delete("/managed-service-credentials/:id", requireManagedServicesManage, handler$4);
+	orgScoped.get("/agents", withOrgDb, handler$86);
+	orgScoped.get("/agents/:agentId", withOrgDb, handler$85);
+	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$84);
+	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$83);
+	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$82);
+	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$81);
+	orgScoped.get("/workflows", withOrgDb, handler$79);
+	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$78);
+	orgScoped.get("/workflows/:workflowId/canvas", withOrgDb, handler$77);
+	orgScoped.get("/workflows/:workflowId/canvas/credentials", withOrgDb, handler$76);
+	orgScoped.get("/workflows/:workflowId/canvas/runs/:runId", withOrgDb, handler$75);
+	orgScoped.get("/workflows/:workflowId/overview", withOrgDb, handler$74);
+	orgScoped.get("/workflows/:workflowId/runs", withOrgDb, handler$70);
+	orgScoped.get("/workflows/:workflowId/run-inputs", withOrgDb, handler$73);
+	orgScoped.put("/workflows/:workflowId/run-inputs", withOrgDb, handler$72);
+	orgScoped.post("/workflows/:workflowId/run", withOrgDb, handler$71);
+	orgScoped.get("/skills", withOrgDb, handler$68);
+	orgScoped.get("/skills/:skillId", withOrgDb, handler$67);
+	orgScoped.get("/triggers", withOrgDb, handler$66);
+	orgScoped.get("/triggers/:triggerId", withOrgDb, handler$65);
+	orgScoped.get("/triggers/:triggerId/runs", withOrgDb, handler$64);
+	orgScoped.get("/triggers/:triggerId/file", withOrgDb, handler$63);
+	orgScoped.get("/triggers/:triggerId/overview", withOrgDb, handler$62);
+	orgScoped.get("/triggers/:triggerId/invoke-inputs", withOrgDb, handler$59);
+	orgScoped.post("/triggers/:triggerId/invoke", withOrgDb, handler$60);
+	orgScoped.patch("/triggers/:triggerId/attachments/:attachmentId", withOrgDb, handler$61);
+	orgScoped.get("/recents", withOrgDb, handler$58);
+	orgScoped.get("/history", withOrgDb, handler$88);
+	orgScoped.get("/history/:runId", withOrgDb, handler$87);
+	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$69);
+	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$80);
+	orgScoped.get("/credentials", withOrgDb, handler$32);
+	orgScoped.post("/credentials", withOrgDb, handler$31);
+	orgScoped.get("/credentials/:credentialId", withOrgDb, (c, next) => c.req.param("credentialId") === "instances" ? next() : handler$30(c, next));
+	orgScoped.patch("/credentials/:credentialId", withOrgDb, handler$29);
 	orgScoped.delete("/credentials/:credentialId", withOrgDb, deleteCredential);
-	orgScoped.get("/projects", handler$56);
-	orgScoped.get("/projects/slug-available", handler$53);
-	orgScoped.get("/projects/metrics", withOrgDb, handler$55);
-	orgScoped.post("/projects", handler$54);
-	projectScoped.get("/:projectId", requireProject(), requireProjectMember, handler$52);
-	projectScoped.patch("/:projectId", requireProject(), requireProjectMember, requireProjectUpdate, handler$51);
-	projectScoped.delete("/:projectId", requireProject(), requireProjectMember, requireProjectDelete, handler$50);
-	projectScoped.get("/:projectId/settings", requireProject(), requireProjectMember, handler$33);
-	projectScoped.patch("/:projectId/settings", requireProject(), requireProjectMember, requireProjectUpdate, handler$32);
-	projectScoped.get("/:projectId/members", requireProject(), requireProjectMember, handler$38);
-	projectScoped.post("/:projectId/members", requireProject(), requireProjectMember, requireInvitableProjectRole, handler$37);
-	projectScoped.patch("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$36);
-	projectScoped.delete("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$35);
-	projectScoped.delete("/:projectId/members/me", requireProject(), requireProjectMember, handler$34);
+	orgScoped.get("/projects", handler$57);
+	orgScoped.get("/projects/slug-available", handler$54);
+	orgScoped.get("/projects/metrics", withOrgDb, handler$56);
+	orgScoped.post("/projects", handler$55);
+	projectScoped.get("/:projectId", requireProject(), requireProjectMember, handler$53);
+	projectScoped.patch("/:projectId", requireProject(), requireProjectMember, requireProjectUpdate, handler$52);
+	projectScoped.delete("/:projectId", requireProject(), requireProjectMember, requireProjectDelete, handler$51);
+	projectScoped.get("/:projectId/settings", requireProject(), requireProjectMember, handler$34);
+	projectScoped.patch("/:projectId/settings", requireProject(), requireProjectMember, requireProjectUpdate, handler$33);
+	projectScoped.get("/:projectId/members", requireProject(), requireProjectMember, handler$39);
+	projectScoped.post("/:projectId/members", requireProject(), requireProjectMember, requireInvitableProjectRole, handler$38);
+	projectScoped.patch("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$37);
+	projectScoped.delete("/:projectId/members/:userId", requireProject(), requireProjectMember, requireProjectManageMembers, handler$36);
+	projectScoped.delete("/:projectId/members/me", requireProject(), requireProjectMember, handler$35);
 	projectScoped.get("/:projectId/reachability", requireProject(), requireProjectMember, createProjectReachabilityHandler(options.hosting));
-	projectScoped.get("/:projectId/files", requireProject(), requireProjectMember, withOrgDb, handler$40);
-	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$42);
-	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$41);
-	projectScoped.get("/:projectId/artifacts/:artifactId/files/content", requireProject(), requireProjectMember, handler$39);
-	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$49);
-	projectScoped.get("/:projectId/artifacts/active/download", requireProject(), requireProjectMember, requireProjectDeploy, handler$47);
-	projectScoped.get("/:projectId/artifacts/active/source", requireProject(), requireProjectMember, withOrgDb, handler$46);
-	projectScoped.post("/:projectId/artifacts", requireProject(), requireProjectMember, requireProjectDeploy, handler$48);
-	projectScoped.post("/:projectId/artifacts/:artifactId/complete", requireProject(), requireProjectMember, requireProjectDeploy, handler$45);
-	projectScoped.post("/:projectId/artifacts/:artifactId/source/presign", requireProject(), requireProjectMember, requireProjectDeploy, handler$44);
-	projectScoped.post("/:projectId/artifacts/:artifactId/source/manifest", requireProject(), requireProjectMember, requireProjectDeploy, handler$43);
+	projectScoped.get("/:projectId/files", requireProject(), requireProjectMember, withOrgDb, handler$41);
+	projectScoped.post("/:projectId/agents/:slug/attachments/presign", requireProject(), requireProjectMember, withOrgDb, handler$43);
+	projectScoped.get("/:projectId/agents/:slug/attachments/:key{.+}", requireProject(), requireProjectMember, withOrgDb, handler$42);
+	projectScoped.get("/:projectId/artifacts/:artifactId/files/content", requireProject(), requireProjectMember, handler$40);
+	projectScoped.get("/:projectId/deployments", requireProject(), requireProjectMember, handler$50);
+	projectScoped.get("/:projectId/artifacts/active/download", requireProject(), requireProjectMember, requireProjectDeploy, handler$48);
+	projectScoped.get("/:projectId/artifacts/active/source", requireProject(), requireProjectMember, withOrgDb, handler$47);
+	projectScoped.post("/:projectId/artifacts", requireProject(), requireProjectMember, requireProjectDeploy, handler$49);
+	projectScoped.post("/:projectId/artifacts/:artifactId/complete", requireProject(), requireProjectMember, requireProjectDeploy, handler$46);
+	projectScoped.post("/:projectId/artifacts/:artifactId/source/presign", requireProject(), requireProjectMember, requireProjectDeploy, handler$45);
+	projectScoped.post("/:projectId/artifacts/:artifactId/source/manifest", requireProject(), requireProjectMember, requireProjectDeploy, handler$44);
 	orgScoped.route("/projects", projectScoped);
 	account.route("/", orgScoped);
 	return account;
@@ -29213,7 +29283,7 @@ async function loadModelIds() {
 	})();
 	return pendingFetch;
 }
-async function handler$1(c) {
+async function handler$2(c) {
 	try {
 		const models = await loadModelIds();
 		return c.json(PublicModelsResponseSchema.parse({ models }));
@@ -29316,7 +29386,7 @@ function clientIp(c) {
 		return "unknown";
 	}
 }
-async function handler(c) {
+async function handler$1(c) {
 	if (!consumeContactRateLimit(clientIp(c))) return c.json({ error: "Too many requests" }, 429);
 	const parsed = SubmitMarketingContactRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) {
@@ -29338,6 +29408,16 @@ async function handler(c) {
 	return c.json(SubmitMarketingContactResponseSchema.parse({ ok: true }), 200);
 }
 //#endregion
+//#region src/routes/well-known/oauth-client-metadata/GET.ts
+/** Public CIMD document for outbound MCP OAuth (no session required). */
+async function handler(c) {
+	const clientMetadataUrl = resolveOAuthClientMetadataUrl();
+	const redirectUri = resolveMcpOAuthCallbackUrl();
+	if (!clientMetadataUrl || !redirectUri) return c.json({ error: "PUBLIC_PLATFORM_URL is not configured" }, 500);
+	const document = buildOAuthClientMetadataDocument(clientMetadataUrl, redirectUri);
+	return c.json(document, 200, { "Cache-Control": "public, max-age=3600" });
+}
+//#endregion
 //#region src/app.ts
 async function createApp$1(auth, options) {
 	return createApp({
@@ -29353,8 +29433,9 @@ async function createApp$1(auth, options) {
 			mountAuth(app, authInstance);
 		},
 		mountAccount: async (app) => {
-			app.post("/api/public/contact", handler);
-			app.get("/api/public/models", handler$1);
+			app.get(OAUTH_CLIENT_METADATA_PATH, handler);
+			app.post("/api/public/contact", handler$1);
+			app.get("/api/public/models", handler$2);
 			app.route("/api", mountAccountRoutes({
 				hosting: options.hosting,
 				storage: options.storage,
@@ -29459,4 +29540,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-anmOyXx4.mjs.map
+//# sourceMappingURL=start-BBwx09TY.mjs.map