@keystrokehq/platform 0.1.74 → 0.1.76

package/dist/{start-D1LkkWPp.mjs → start-BJptN0n9.mjs}

@@ -1,15 +1,15 @@
-import { $ as CreateCredentialsRequestSchema, $n as WorkflowCanvasCredentialBindingsSchema, $t as OpenApiDiscoverResponseSchema, A as discoverMcpApp, An as SubmitMarketingContactResponseSchema, Ar as mapUserOrganization, At as InviteProjectMembersResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UpdateOrganizationMemberRequestSchema, Br as validateCredentialValueAgainstFields, Bt as ListOrganizationMembersPageQuerySchema, C as defaultSchedulerPlugin, Cn as SkillSummarySchema, Cr as mapOrganizationInvitation, Ct as HistoryRunCancelResponseSchema, D as decodeOAuthState, Dn as StartMcpOAuthConnectionResultSchema, Dr as mapProjectDeployment, Dt as InviteOrganizationMembersRequestSchema, E as completeMcpOAuthConnect, En as StartMcpOAuthConnectionInputSchema, Er as mapProjectArtifact, Et as HistoryRunListResponseSchema, F as deleteManagedServiceCredential$1, Fn as TriggerInvokeRequestSchema, Fr as parseAppSlug, Ft as ListChannelPlatformsResponseSchema, G as AgentWorkspaceFileSummarySchema, Gn as UpdateProjectRequestSchema, Gt as ListProjectMembersResponseSchema, H as AgentSummaryDetailResponseSchema, Hn as UpdateOrganizationRequestSchema, Hr as validationErrorResponse, Ht as ListOrganizationsResponseSchema, I as setCredentialInstanceSecret, In as TriggerInvokeResponseSchema, Ir as parseStoredRouteManifest, It as ListCredentialsPageQuerySchema, J as ChannelPlatformSchema, Jn as UploadProjectSourceResponseSchema, Jt as ManagedServiceCredentialSchema, K as AppSlugAvailabilityQuerySchema, Kn as UpdateProjectSettingsRequestSchema, Kt as ListProjectMetricsResponseSchema, L as setManagedServiceCredential, Ln as TriggerRunListQuerySchema, Lr as projectFileId, Lt as ListCredentialsPageResponseSchema, M as withCredentialAssignments, Mn as SubmitTeamRequestResponseSchema, Mr as normalizeUserPreferences, Mt as ListAgentWorkspaceFilesResponseSchema, N as PublicHttpUrlError, Nn as TriggerAttachmentUpdateRequestSchema, Nr as organizationInvitationAcceptPath, Nt as ListApiKeysResponseSchema, O as describeCredentialBindings, On as StoredProjectSourceManifestSchema, Or as mapProjectMember, Ot as InviteOrganizationMembersResponseSchema, P as deleteCredentialInstanceSecret, Pn as TriggerInvokeInputsSchema, Pr as organizationSlugErrorCodeFromMessage, Pt as ListAppsResponseSchema, Q as CreateApiKeyResponseSchema, Qn as UserPreferencesSchema, Qt as OpenApiDiscoverRequestSchema, R as ACTIVE_ORG_HEADER, Rn as UpdateCredentialRequestSchema, Rr as resolveExternalPlatformOrigin, Rt as ListManagedServiceCredentialsResponseSchema, S as createJobQueue, Sn as SkillSummaryListResponseSchema, Sr as listenPortFromPublicUrl, St as GraphqlDiscoverResponseSchema, T as beginMcpOAuthConnect, Tn as SlugAvailabilityResponseSchema, Tr as mapProject, Tt as HistoryRunListQuerySchema, U as AgentSummaryListResponseSchema, Un as UpdateProjectMemberRequestSchema, Ut as ListProjectDeploymentsResponseSchema, V as AgentMemoryFileSummarySchema, Vn as UpdateOrganizationMemberResponseSchema, Vr as validateWorkflowRunInputValues, Vt as ListOrganizationMembersPageResponseSchema, W as AgentSummarySchema, Wn as UpdateProjectMemberResponseSchema, Wt as ListProjectFilesResponseSchema, X as ConnectManagedServiceCredentialRequestSchema, Xn as UserAvatarSchema, Xt as McpDiscoverRequestSchema, Y as CompleteProjectArtifactResponseSchema, Yn as UserAvatarPatchSchema, Yt as ManagedServiceKindSchema, Z as CreateApiKeyRequestSchema, Zn as UserPreferencesPatchSchema, Zt as McpDiscoverResponseSchema, _ as orgLogoStorageKey, _n as ProjectSourceResourcesSchema, _r as deriveCredentialInstanceSlug, _t as ErrorResponseSchema, a as extractRouteManifestFromArtifact, an as PresignChatAttachmentResponseSchema, ar as WorkflowSummaryListResponseSchema, at as CreateProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as RecentResourceSchema, br as isLlmProviderSlug, bt as GetCustomAppResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as PresignProjectSourceRequestSchema, cr as WorkspaceTriggerFileSchema, ct as DEFAULT_CLOUD_PLATFORM_ORIGIN, d as isStorageNotFoundError$1, dn as PresignUserAvatarResponseSchema, dr as WorkspaceTriggerRunListResponseSchema, dt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, en as OrganizationSidebarBrandingPatchSchema, er as WorkflowCanvasRunSchema, et as CreateCredentialsResponseSchema, f as isUserAvatarStorageKey, fn as ProjectReachabilityResponseSchema, fr as WorkspaceWorkflowOverviewSchema, ft as DbProxyMigrateRequestSchema, gn as ProjectSlugAvailabilityResponseSchema, gr as chatAttachmentExtension, gt as DownloadActiveProjectSourceResponseSchema, h as loadProjectSourceFiles, hn as ProjectSlugAvailabilityQuerySchema, hr as buildCredentialInstanceLabel, ht as DownloadActiveProjectArtifactResponseSchema, i as ensureKeystrokeAssetsBucket, in as PresignChatAttachmentRequestSchema, ir as WorkflowSummaryDetailResponseSchema, it as CreateOrganizationResponseSchema, j as discoverOpenApiApp, jn as SubmitTeamRequestRequestSchema, jr as mergeUserPreferences, jt as ListAgentMemoryFilesResponseSchema, k as discoverGraphqlApp, kn as SubmitMarketingContactRequestSchema, kr as mapProjectSettings, kt as InviteProjectMembersRequestSchema, l as isOrgLogoStorageKey, ln as PresignProjectSourceResponseSchema, lr as WorkspaceTriggerListResponseSchema, lt as DEFAULT_TRIGGER_OVERVIEW_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as ProjectSettingsResponseSchema, mr as agentWorkspaceFileId, mt as DeclineOrganizationInvitationResponseSchema, n as chatAttachmentStorageKey, nn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, nr as WorkflowRunInputsPutBodySchema, nt as CreateCustomAppResponseSchema, o as isChatAttachmentStorageKey, on as PresignOrgLogoRequestSchema, or as WorkflowSummarySchema, ot as CreateProjectRequestSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as ProjectResponseSchema, pr as agentMemoryFileId, pt as DbProxyQueryRequestSchema, q as AppSlugAvailabilityResponseSchema, qn as UploadProjectSourceManifestRequestSchema, qt as ListProjectsResponseSchema, r as createAssetsStorageClient, rn as PROJECT_SLUG_TAKEN_MESSAGE, rr as WorkflowRunInputsSchema, rt as CreateOrganizationRequestSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as PresignOrgLogoResponseSchema, sr as WorkspaceTriggerDetailSchema, st as CreateProjectResponseSchema, t as RouteManifestNotFoundError, tn as OrganizationSidebarBrandingSchema, tr as WorkflowCanvasSchema, tt as CreateCustomAppRequestSchema, u as isStorageBucketNotFoundError, un as PresignUserAvatarRequestSchema, ur as WorkspaceTriggerOverviewSchema, ut as DEFAULT_WORKFLOW_CANVAS_MODEL, v as projectArtifactKey, vn as PublicModelsResponseSchema, vr as displayCredentialAppName, vt as GetAppCatalogEntryResponseSchema, w as cronPayloadSchema, wn as SlugAvailabilityQuerySchema, wr as mapOrganizationMember, wt as HistoryRunDetailResponseSchema, x as userAvatarStorageKey, xn as SkillSummaryDetailResponseSchema, xr as jsonSchemaToWorkflowInputSchema, xt as GraphqlDiscoverRequestSchema, y as projectSourceBlobKey, yn as RecentResourceListResponseSchema, yr as isAllowedChatAttachmentMediaType, yt as GetCredentialResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UpdateManagedServiceCredentialRequestSchema, zr as resolveUniqueCredentialInstanceLabel, zt as ListOrganizationInvitationsResponseSchema } from "./dist-BmM6Z3VT.mjs";
-import { a as verifyOrgWorkerToken, i as pingProjectTarget, n as fetchDeployStatus, r as mintOrgWorkerToken } from "./dist-BbRaJ7qu.mjs";
+import { $ as CreateCredentialsRequestSchema, $n as WorkflowCanvasCredentialBindingsSchema, $t as OpenApiDiscoverResponseSchema, A as discoverMcpApp, An as SubmitMarketingContactResponseSchema, Ar as mapUserOrganization, At as ListAgentMemoryFilesResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UpdateOrganizationMemberRequestSchema, Br as validateCredentialValueAgainstFields, Bt as ListOrganizationMembersPageResponseSchema, C as defaultSchedulerPlugin, Cn as SkillSummarySchema, Cr as mapOrganizationInvitation, Ct as HistoryRunDetailResponseSchema, D as decodeOAuthState, Dn as StartMcpOAuthConnectionResultSchema, Dr as mapProjectDeployment, Dt as InviteOrganizationMembersResponseSchema, E as completeMcpOAuthConnect, En as StartMcpOAuthConnectionInputSchema, Er as mapProjectArtifact, Et as InviteOrganizationMembersRequestSchema, F as deleteManagedServiceCredential$1, Fn as TriggerInvokeRequestSchema, Fr as parseAppSlug, Ft as ListCredentialsPageQuerySchema, G as AgentWorkspaceFileSummarySchema, Gn as UpdateProjectRequestSchema, Gt as ListProjectMetricsResponseSchema, H as AgentSummaryDetailResponseSchema, Hn as UpdateOrganizationRequestSchema, Hr as validationErrorResponse, Ht as ListProjectDeploymentsResponseSchema, I as setCredentialInstanceSecret, In as TriggerInvokeResponseSchema, Ir as parseStoredRouteManifest, It as ListCredentialsPageResponseSchema, J as ChannelPlatformSchema, Jn as UploadProjectSourceResponseSchema, Jt as ManagedServiceCredentialSchema, K as AppSlugAvailabilityQuerySchema, Kn as UpdateProjectSettingsRequestSchema, Kt as ListProjectsResponseSchema, L as setManagedServiceCredential, Ln as TriggerRunListQuerySchema, Lr as projectFileId, Lt as ListManagedServiceCredentialsResponseSchema, M as withCredentialAssignments, Mn as SubmitTeamRequestResponseSchema, Mr as normalizeUserPreferences, Mt as ListApiKeysResponseSchema, N as PublicHttpUrlError, Nn as TriggerAttachmentUpdateRequestSchema, Nr as organizationInvitationAcceptPath, Nt as ListAppsResponseSchema, O as describeCredentialBindings, On as StoredProjectSourceManifestSchema, Or as mapProjectMember, Ot as InviteProjectMembersRequestSchema, P as deleteCredentialInstanceSecret, Pn as TriggerInvokeInputsSchema, Pr as organizationSlugErrorCodeFromMessage, Pt as ListChannelPlatformsResponseSchema, Q as CreateApiKeyResponseSchema, Qn as UserPreferencesSchema, Qt as OpenApiDiscoverRequestSchema, R as ACTIVE_ORG_HEADER, Rn as UpdateCredentialRequestSchema, Rr as resolveExternalPlatformOrigin, Rt as ListOrganizationInvitationsResponseSchema, S as createJobQueue, Sn as SkillSummaryListResponseSchema, Sr as listenPortFromPublicUrl, St as HistoryRunCancelResponseSchema, T as beginMcpOAuthConnect, Tn as SlugAvailabilityResponseSchema, Tr as mapProject, Tt as HistoryRunListResponseSchema, U as AgentSummaryListResponseSchema, Un as UpdateProjectMemberRequestSchema, Ut as ListProjectFilesResponseSchema, V as AgentMemoryFileSummarySchema, Vn as UpdateOrganizationMemberResponseSchema, Vr as validateWorkflowRunInputValues, Vt as ListOrganizationsResponseSchema, W as AgentSummarySchema, Wn as UpdateProjectMemberResponseSchema, Wt as ListProjectMembersResponseSchema, X as ConnectManagedServiceCredentialRequestSchema, Xn as UserAvatarSchema, Xt as McpDiscoverRequestSchema, Y as CompleteProjectArtifactResponseSchema, Yn as UserAvatarPatchSchema, Yt as ManagedServiceKindSchema, Z as CreateApiKeyRequestSchema, Zn as UserPreferencesPatchSchema, Zt as McpDiscoverResponseSchema, _ as orgLogoStorageKey, _n as ProjectSourceResourcesSchema, _r as deriveCredentialInstanceSlug, _t as GetAppCatalogEntryResponseSchema, a as extractRouteManifestFromArtifact, an as PresignChatAttachmentResponseSchema, ar as WorkflowSummaryListResponseSchema, at as CreateProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as RecentResourceSchema, br as isLlmProviderSlug, bt as GraphqlDiscoverRequestSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as PresignProjectSourceRequestSchema, cr as WorkspaceTriggerFileSchema, ct as DEFAULT_CLOUD_PLATFORM_ORIGIN, d as isStorageNotFoundError$1, dn as PresignUserAvatarResponseSchema, dr as WorkspaceTriggerRunListResponseSchema, dt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, en as OrganizationSidebarBrandingPatchSchema, er as WorkflowCanvasRunSchema, et as CreateCredentialsResponseSchema, f as isUserAvatarStorageKey, fn as ProjectReachabilityResponseSchema, fr as WorkspaceWorkflowOverviewSchema, ft as DbProxyQueryRequestSchema, gn as ProjectSlugAvailabilityResponseSchema, gr as chatAttachmentExtension, gt as ErrorResponseSchema, h as loadProjectSourceFiles, hn as ProjectSlugAvailabilityQuerySchema, hr as buildCredentialInstanceLabel, ht as DownloadActiveProjectSourceResponseSchema, i as ensureKeystrokeAssetsBucket, in as PresignChatAttachmentRequestSchema, ir as WorkflowSummaryDetailResponseSchema, it as CreateOrganizationResponseSchema, j as discoverOpenApiApp, jn as SubmitTeamRequestRequestSchema, jr as mergeUserPreferences, jt as ListAgentWorkspaceFilesResponseSchema, k as discoverGraphqlApp, kn as SubmitMarketingContactRequestSchema, kr as mapProjectSettings, kt as InviteProjectMembersResponseSchema, l as isOrgLogoStorageKey, ln as PresignProjectSourceResponseSchema, lr as WorkspaceTriggerListResponseSchema, lt as DEFAULT_TRIGGER_OVERVIEW_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as ProjectSettingsResponseSchema, mr as agentWorkspaceFileId, mt as DownloadActiveProjectArtifactResponseSchema, n as chatAttachmentStorageKey, nn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, nr as WorkflowRunInputsPutBodySchema, nt as CreateCustomAppResponseSchema, o as isChatAttachmentStorageKey, on as PresignOrgLogoRequestSchema, or as WorkflowSummarySchema, ot as CreateProjectRequestSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as ProjectResponseSchema, pr as agentMemoryFileId, pt as DeclineOrganizationInvitationResponseSchema, q as AppSlugAvailabilityResponseSchema, qn as UploadProjectSourceManifestRequestSchema, qt as MICRO_CREDITS_PER_CREDIT, r as createAssetsStorageClient, rn as PROJECT_SLUG_TAKEN_MESSAGE, rr as WorkflowRunInputsSchema, rt as CreateOrganizationRequestSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as PresignOrgLogoResponseSchema, sr as WorkspaceTriggerDetailSchema, st as CreateProjectResponseSchema, t as RouteManifestNotFoundError, tn as OrganizationSidebarBrandingSchema, tr as WorkflowCanvasSchema, tt as CreateCustomAppRequestSchema, u as isStorageBucketNotFoundError, un as PresignUserAvatarRequestSchema, ur as WorkspaceTriggerOverviewSchema, ut as DEFAULT_WORKFLOW_CANVAS_MODEL, v as projectArtifactKey, vn as PublicModelsResponseSchema, vr as displayCredentialAppName, vt as GetCredentialResponseSchema, w as cronPayloadSchema, wn as SlugAvailabilityQuerySchema, wr as mapOrganizationMember, wt as HistoryRunListQuerySchema, x as userAvatarStorageKey, xn as SkillSummaryDetailResponseSchema, xr as jsonSchemaToWorkflowInputSchema, xt as GraphqlDiscoverResponseSchema, y as projectSourceBlobKey, yn as RecentResourceListResponseSchema, yr as isAllowedChatAttachmentMediaType, yt as GetCustomAppResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UpdateManagedServiceCredentialRequestSchema, zr as resolveUniqueCredentialInstanceLabel, zt as ListOrganizationMembersPageQuerySchema } from "./dist-Pis_crfF.mjs";
+import { a as verifyOrgWorkerToken, i as pingProjectTarget, n as fetchDeployStatus, r as mintOrgWorkerToken } from "./dist-eQvgeo_o.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
-import { n as readWorkerTokenFromRequest, r as requireWorkerToken, t as withProjectScope } from "./with-project-scope-CpiOfuQm.mjs";
+import { n as readWorkerTokenFromRequest, r as requireWorkerToken, t as withProjectScope } from "./with-project-scope-BGQ41C3O.mjs";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import "node:fs/promises";
-import { acquireProjectDatabasePool, buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, deleteCredentialInstanceById, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, getWorkspaceTriggerById, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listAttachmentsByTriggerIds, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listReplayEvents, listTriggersByIds, listWorkspaceTriggerRunRows, listWorkspaceTriggers, releaseProjectDatabasePool, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectTriggerById, selectWorkflowCanvasAnnotations, selectWorkflowLastRunAtByIds, selectWorkflowOverview, selectWorkflowRunById, selectWorkflowRunForWorkflow, selectWorkflowRunInputValues, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, setWorkflowCanvasAnnotationsGenerating, setWorkflowOverviewGenerating, storedTriggerSourceFromRow, touchResourceActivity, updateTriggerOverview, updateWorkflowCanvasAnnotations, updateWorkflowOverview, updateWorkflowRunInputValues, upsertCredentialInstance } from "@keystrokehq/database";
+import { acquireProjectDatabasePool, buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, collectChildRunCancelTargets, deleteCredentialInstanceById, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, getWorkspaceTriggerById, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listAttachmentsByTriggerIds, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listReplayEvents, listTriggersByIds, listWorkspaceTriggerRunRows, listWorkspaceTriggers, releaseProjectDatabasePool, resolveMigrationsFolder, runMigrations, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectTriggerById, selectWorkflowCanvasAnnotations, selectWorkflowLastRunAtByIds, selectWorkflowOverview, selectWorkflowRunById, selectWorkflowRunForWorkflow, selectWorkflowRunInputValues, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, setWorkflowCanvasAnnotationsGenerating, setWorkflowOverviewGenerating, storedTriggerSourceFromRow, touchResourceActivity, updateTriggerOverview, updateWorkflowCanvasAnnotations, updateWorkflowOverview, updateWorkflowRunInputValues, upsertCredentialInstance } from "@keystrokehq/database";
 import { ZodError, z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectArtifactSourceManifestForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectFailed, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
+import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listUsageEventsForRuns, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgDatabaseUrl, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectArtifactSourceManifestForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, summarizeUsageForRuns, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectFailed, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
 import "node:fs";
 import { basename, join, normalize, relative, resolve } from "node:path";
 import { tmpdir } from "node:os";
@@ -22872,43 +22872,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-BENJBfED.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-D58fSE0b.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-Dj7pmE0N.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-Bh4hu3SM.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-Dq6_JJtH.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-JTc4YIyB.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-D5icrG6r.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-COkCWs1E.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-BiT0ZEYh.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-DJJoaYYp.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-Cbm2rxfg.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-BkbdGeCu.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-E0Eb27Ph.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-BCx0Ygdv.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-DaIjfP3i.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-DkEN26vd.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-BlAcKztS.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-DVOB-zJc.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-BiecMV-y.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-01AlErhf.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22924,15 +22924,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-BpyWp1jV.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-9LuVrRZa.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-CSyu07xP.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-DEEojAgW.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-YAHavNpR.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-QzbqV7V-.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -22940,95 +22940,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-CTMf3JlP.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-zUm4zQrM.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-CTMf3JlP.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-zUm4zQrM.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-CTMf3JlP.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-zUm4zQrM.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-BvMexM8v.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-CjVzt-5C.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-C4B-iM-j.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-CRHleNNO.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-BIOnTcJp.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-Bcs_odAA.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-BAk9CbQn.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-kWtmtME8.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-BQ2Tqu4P.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-B59yrysf.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-BLaO0cpZ.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-BwBg6LHi.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-Cxuj_XTz.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-4Az4n0bE.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-T-C5mvfN.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-TGpGlhr_.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-1Rxcov7-.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-Dq108Yvd.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-BUj1W1bm.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-DzTRPgzH.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-BnGFHDb5.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-Davi3kHx.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-Py5ga6X_.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-C2p8b6jz.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-BsUHDSz-.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-BNb9k4mV.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-BCzLczna.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-CtXJ4rYC.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-DM975vTe.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-DCiR2Mlg.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-v79kVnbn.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-BsHm09fd.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-BJ9HocMf.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-BlK4ihrc.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-qCjy6X26.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-C1-mqcxf.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-CkioZo1W.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-DB2vtjBF.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-64qhADVA.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-Cn6j1Wx6.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23040,19 +23040,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-Dn8lg2AJ.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-DQ2u5tZB.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-BAiryCOR.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-D_ULPTk_.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-CWVCxFLH.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-Cy5g1sEz.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-CWVCxFLH.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-Cy5g1sEz.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23068,7 +23068,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-CDcOdQl2.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-CIQZ5Gtz.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23084,23 +23084,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-DBFVEGDm.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-DKBUC4Xp.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-DBFVEGDm.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-DKBUC4Xp.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-BelXfuAV.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-BPz0exF5.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-sKYaxkkv.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-BmJWm5H7.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-0RhugVpB.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-DO4qKmCR.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23108,15 +23108,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-o5-sYTXe.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-DfleZ9kN.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-CjHJCwNI.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-VUrGc02x.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-CTO2oMMN.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-BKY4T70y.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23124,19 +23124,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-DQtQecc2.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-DHQM4m90.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-BDSelU5V.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-D4SF1Fro.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-C5BPNK5T.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-D9SA5iJ8.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-CzhgzQzJ.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-CWsXYZk9.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23144,11 +23144,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-DkAgHa7d.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-BgiijGIN.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-Cqn3dNL7.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-jrDGmB5Y.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23156,7 +23156,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-BIGhwQ6x.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-Cp_zFGsN.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23168,49 +23168,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-CCvWPMvk.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-C-ZCkMob.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-U37mcdaT.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-uo5QISv-.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-U37mcdaT.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-uo5QISv-.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-U37mcdaT.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-uo5QISv-.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-BQfDC4CH.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-DifG1bu2.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-Bav39WmA.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-BigWgKXv.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-nWy0YzaW.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-wpVVzZs8.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-DsOy_Ubz.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-DugnR04K.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-DYoT3NRB.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-C6-oQsVx.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-DYoT3NRB.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-C6-oQsVx.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-B7cNGsQ3.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-BB1o3MFM.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-B7cNGsQ3.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-BB1o3MFM.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -23636,7 +23636,7 @@ JSON.stringify({
 	}
 });
 //#endregion
-//#region ../../packages/agent/dist/schemas-klJyQbd2.mjs
+//#region ../../packages/agent/dist/schemas-DDyTkszQ.mjs
 function capabilitiesFromGatewayTags(tags) {
 	const set = new Set(tags ?? []);
 	return {
@@ -23644,6 +23644,7 @@ function capabilitiesFromGatewayTags(tags) {
 		files: set.has("file-input")
 	};
 }
+new AsyncLocalStorage();
 const DEFAULT_GATEWAY_ORIGIN = "https://ai-gateway.vercel.sh";
 /** Resolve the model catalog URL for pricing metadata (via platform proxy when configured). */
 function resolveGatewayCatalogUrl(modelId) {
@@ -25453,8 +25454,9 @@ async function enrichHistoryRun(run, projectNameById) {
 		ranAs: await resolveHistoryRunActor(ranByUserId)
 	};
 }
-async function enrichHistoryRuns(runs, projectNameById) {
+async function enrichHistoryRuns(runs, projectNameById, organizationId) {
 	const actorByUserId = /* @__PURE__ */ new Map();
+	const platformUsageByRunId = await platformUsageByRunIdForRuns(organizationId, runs);
 	return Promise.all(runs.map(async (run) => {
 		const { ranByUserId, ...rest } = run;
 		let ranAs = null;
@@ -25464,6 +25466,11 @@ async function enrichHistoryRuns(runs, projectNameById) {
 		}
 		return {
 			...rest,
+			...platformUsageSummary(platformUsageByRunId.get(run.id), {
+				totalCostUsd: rest.totalCostUsd,
+				modelsUsed: rest.modelsUsed,
+				otherServicesUsed: rest.otherServicesUsed
+			}),
 			projectName: projectNameById.get(run.projectId) ?? "Project",
 			ranAs
 		};
@@ -25476,6 +25483,105 @@ async function attachRanAsToDetail(detail, ranByUserId) {
 		ranAs
 	};
 }
+function metadataRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function metadataString(metadata, key) {
+	const value = metadataRecord(metadata)?.[key];
+	return typeof value === "string" ? value : null;
+}
+function prettyMeterKey(meterKey) {
+	return meterKey.split("_").map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
+}
+function usageLabel(event) {
+	const metadata = metadataRecord(event.metadata);
+	return metadataString(metadataRecord(metadata?.legacy), "label") ?? metadataString(metadata, "model") ?? prettyMeterKey(event.meterKey);
+}
+function usageKind(event) {
+	return metadataString(metadataRecord(event.metadata)?.legacy, "kind") ?? event.meterKey;
+}
+function usageKeySource(event) {
+	return event.keySource === "byok" || event.keySource === "platform" ? event.keySource : null;
+}
+function billedUsd(event) {
+	return event.chargeMicroCredits / MICRO_CREDITS_PER_CREDIT;
+}
+/** One aggregate query for the whole list page — full event rows load only on detail. */
+async function platformUsageByRunIdForRuns(organizationId, runs) {
+	const rollups = await summarizeUsageForRuns({
+		organizationId,
+		runIds: runs.map((run) => run.id)
+	});
+	const byRunId = /* @__PURE__ */ new Map();
+	for (const rollup of rollups) byRunId.set(rollup.runId, [...byRunId.get(rollup.runId) ?? [], rollup]);
+	return byRunId;
+}
+function platformUsageSummary(rollups, fallback) {
+	if (!rollups?.length) return fallback;
+	const modelsUsed = /* @__PURE__ */ new Set();
+	const otherServicesUsed = /* @__PURE__ */ new Set();
+	let totalCostUsd = 0;
+	for (const rollup of rollups) {
+		totalCostUsd += rollup.chargeMicroCredits / MICRO_CREDITS_PER_CREDIT;
+		if (rollup.meterKey === "llm") modelsUsed.add(rollup.legacyLabel ?? rollup.model ?? prettyMeterKey(rollup.meterKey));
+		else otherServicesUsed.add(rollup.legacyKind ?? rollup.meterKey);
+	}
+	return {
+		totalCostUsd,
+		modelsUsed: [...modelsUsed],
+		otherServicesUsed: [...otherServicesUsed]
+	};
+}
+async function attachPlatformUsageToDetail(organizationId, detail) {
+	const runId = detail.kind === "workflow" ? detail.run.id : detail.runId;
+	const runKind = detail.kind;
+	const events = await listUsageEventsForRuns({
+		organizationId,
+		runIds: [runId],
+		runKind,
+		limit: 100
+	});
+	if (events.length === 0) return detail;
+	return {
+		...detail,
+		usage: buildPlatformHistoryUsage(events, detail.usage?.runDurationMs ?? null)
+	};
+}
+function buildPlatformHistoryUsage(events, durationMs) {
+	const grouped = /* @__PURE__ */ new Map();
+	for (const event of events) {
+		const keySource = usageKeySource(event);
+		const key = `${usageKind(event)}:${usageLabel(event)}:${keySource ?? "platform"}`;
+		const existing = grouped.get(key);
+		const providerCostUsd = event.meterKey === "llm" && keySource === "byok" ? event.providerCostUsd ?? 0 : null;
+		if (existing) {
+			existing.billedUsd += billedUsd(event);
+			if (providerCostUsd != null) existing.providerCostUsd = (existing.providerCostUsd ?? 0) + providerCostUsd;
+			continue;
+		}
+		grouped.set(key, {
+			label: usageLabel(event),
+			billedUsd: billedUsd(event),
+			providerCostUsd,
+			keySource
+		});
+	}
+	const lineItems = [...grouped.entries()].map(([id, item]) => ({
+		id,
+		label: item.label,
+		billedUsd: item.billedUsd,
+		...item.providerCostUsd != null ? { providerCostUsd: item.providerCostUsd } : {},
+		...item.keySource ? { keySource: item.keySource } : {}
+	}));
+	const totalBilledUsd = lineItems.reduce((sum, item) => sum + item.billedUsd, 0);
+	const externalProviderCostUsd = lineItems.reduce((sum, item) => sum + (item.providerCostUsd ?? 0), 0);
+	return {
+		runDurationMs: durationMs,
+		lineItems,
+		totalBilledUsd,
+		externalProviderCostUsd: externalProviderCostUsd > 0 ? externalProviderCostUsd : 0
+	};
+}
 //#endregion
 //#region src/routes/account/history/GET.ts
 const handler$88 = async (c) => {
@@ -25498,7 +25604,7 @@ const handler$88 = async (c) => {
 	});
 	const grantedProjectIdsList = await grantedProjectIds(c, scope);
 	const projects = await selectProjectsByOrganizationId(organization.organizationId, { grantedProjectIds: grantedProjectIdsList });
-	const historyRuns = await enrichHistoryRuns(runs, new Map(projects.map((project) => [project.id, project.name])));
+	const historyRuns = await enrichHistoryRuns(runs, new Map(projects.map((project) => [project.id, project.name])), organization.organizationId);
 	return c.json(HistoryRunListResponseSchema.parse(historyRuns));
 };
 //#endregion
@@ -25521,7 +25627,9 @@ const handler$87 = async (c) => {
 		return buildHistoryAgentSessionDetail(agent.slug, runId);
 	});
 	if (!detail) return c.json(null, 404);
-	return c.json(HistoryRunDetailResponseSchema.parse(await attachRanAsToDetail(detail, core.ranByUserId)));
+	const { organizationId } = c.get("organization");
+	const usageEnrichedDetail = await attachPlatformUsageToDetail(organizationId, detail);
+	return c.json(HistoryRunDetailResponseSchema.parse(await attachRanAsToDetail(usageEnrichedDetail, core.ranByUserId)));
 };
 //#endregion
 //#region src/routes/account/resources/common.ts
@@ -25737,11 +25845,14 @@ async function cancelHistoryRun(c, kind, cancel) {
 	const core = await findHistoryRunCore(id);
 	if (!core || core.kind !== kind) return c.json(null, 404);
 	if (!await canAccessProjectId(c, core.projectId, canAccessHistoryRun)) return c.json(null, 404);
+	const childTargets = await runWithProjectScope(core.projectId, () => collectChildRunCancelTargets(kind, id));
 	const run = await runWithProjectScope(core.projectId, () => cancel(id));
 	if (!run) return c.json(null, 404);
 	const organization = await selectOrganizationById(organizationContext.organizationId);
 	if (!organization) return c.json(null, 404);
-	await (await getProjectScheduler(organization, core.projectId)).publishCancel(id);
+	const scheduler = await getProjectScheduler(organization, core.projectId);
+	await scheduler.publishCancel(id);
+	await Promise.all(childTargets.map((child) => scheduler.publishCancel(child.id)));
 	const grantedProjectIdsList = await grantedProjectIds(c, historyListScope(accessContext(c)));
 	const projects = await selectProjectsByOrganizationId(organizationContext.organizationId, { grantedProjectIds: grantedProjectIdsList });
 	const historyRun = await enrichHistoryRun(run, new Map(projects.map((project) => [project.id, project.name])));
@@ -26806,7 +26917,7 @@ const handler$70 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const projects = await selectProjectsByOrganizationId(organizationId, { grantedProjectIds: await grantedProjectIds(c, scope) });
 	const projectNameById = new Map(projects.map((project) => [project.id, project.name]));
-	return c.json(HistoryRunListResponseSchema.parse(await enrichHistoryRuns(runs, projectNameById)));
+	return c.json(HistoryRunListResponseSchema.parse(await enrichHistoryRuns(runs, projectNameById, organizationId)));
 };
 //#endregion
 //#region src/routes/account/workflows/runs/[runId]/cancel/POST.ts
@@ -29084,53 +29195,64 @@ const EnsureWebhookRouteBodySchema = z.object({
 	route: z.string().trim().min(1),
 	attachmentSlugs: z.array(z.string().trim().min(1)).min(1)
 });
+/** Policy rejection of untrusted proxy SQL — reported as 400, not 500. */
+var DbProxyRejectedError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "DbProxyRejectedError";
+	}
+};
+/** Reject multi-statement SQL and explicit transaction/session control. */
+const FORBIDDEN_SQL = /\b(BEGIN|COMMIT|ROLLBACK|START\s+TRANSACTION|SET\s+ROLE|SET\s+SESSION|RESET\s+ROLE|SET\s+LOCAL\s+ROLE)\b/i;
+function assertSingleSafeStatement(sql) {
+	const trimmed = sql.trim();
+	if (!trimmed) throw new DbProxyRejectedError("Empty SQL is not allowed");
+	const withoutLiterals = trimmed.replace(/'(?:''|[^'])*'/g, "''").replace(/\$\$[\s\S]*?\$\$/g, "''").replace(/\$[A-Za-z_][A-Za-z0-9_]*\$[\s\S]*?\$[A-Za-z_][A-Za-z0-9_]*\$/g, "''");
+	if (FORBIDDEN_SQL.test(withoutLiterals)) throw new DbProxyRejectedError("Transaction and role control statements are not allowed");
+	if (withoutLiterals.includes(";")) {
+		if (withoutLiterals.split(";").map((part) => part.trim()).filter(Boolean).length > 1) throw new DbProxyRejectedError("Only one SQL statement is allowed per proxy request");
+	}
+}
+function resolveUntrustedOrgProxyOptions(organization) {
+	return {
+		url: resolveOrgDatabaseUrl(organization),
+		searchPath: organization.dbSchema
+	};
+}
+async function resetProxySession(client) {
+	await client.query("ROLLBACK").catch(() => void 0);
+	await client.query("DISCARD ALL").catch(() => void 0);
+}
 async function runOrgDatabaseQuery(options, query) {
+	assertSingleSafeStatement(query.sql);
 	const handle = await acquireProjectDatabasePool(options);
 	try {
 		if (handle.dialect !== "postgres") throw new Error("DB proxy requires postgres");
-		return { rows: (await handle.pool.query({
-			text: query.sql,
-			values: query.params,
-			rowMode: query.method === "all" ? "array" : void 0
-		})).rows };
+		const client = await handle.pool.connect();
+		try {
+			return { rows: (await client.query({
+				text: query.sql,
+				values: query.params,
+				rowMode: query.method === "all" ? "array" : void 0
+			})).rows };
+		} finally {
+			await resetProxySession(client);
+			client.release();
+		}
 	} finally {
 		releaseProjectDatabasePool(options);
 	}
 }
-async function runOrgDatabaseMigrations(options, migrations, lockKey) {
+/**
+* Apply platform-owned org schema migrations. Worker-supplied SQL is ignored —
+* only embedded `@keystrokehq/database` migrations run under the org login.
+*/
+async function runOrgDatabaseMigrations(options) {
 	const handle = await acquireProjectDatabasePool(options);
 	try {
 		if (handle.dialect !== "postgres") throw new Error("DB proxy requires postgres");
-		const client = await handle.pool.connect();
-		try {
-			await client.query("BEGIN");
-			await client.query("SELECT pg_advisory_xact_lock(hashtext($1))", [lockKey]);
-			await client.query(`
-        CREATE TABLE IF NOT EXISTS "__drizzle_migrations" (
-          id SERIAL PRIMARY KEY,
-          hash text NOT NULL,
-          created_at numeric
-        )
-      `);
-			const journal = await client.query(`SELECT created_at FROM "__drizzle_migrations" ORDER BY created_at DESC LIMIT 1`);
-			const lastMigrationMillis = journal.rows[0]?.created_at === void 0 || journal.rows[0]?.created_at === null ? void 0 : Number(journal.rows[0].created_at);
-			const results = [];
-			for (const migration of migrations) {
-				if (lastMigrationMillis !== void 0 && lastMigrationMillis >= migration.folderMillis) continue;
-				for (const statement of migration.sql) {
-					const result = await client.query(statement);
-					results.push({ rows: result.rows });
-				}
-				await client.query(`INSERT INTO "__drizzle_migrations" ("hash", "created_at") VALUES ($1, $2)`, [migration.hash, migration.folderMillis]);
-			}
-			await client.query("COMMIT");
-			return results;
-		} catch (error) {
-			await client.query("ROLLBACK").catch(() => void 0);
-			throw error;
-		} finally {
-			client.release();
-		}
+		await runMigrations(handle, resolveMigrationsFolder("postgres"));
+		return [];
 	} finally {
 		releaseProjectDatabasePool(options);
 	}
@@ -29156,7 +29278,7 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp) {
 			error: "Invalid request body",
 			details: parsed.error.flatten()
 		}, 400);
-		const options = resolveOrgProjectDatabaseOptions(organization);
+		const options = resolveUntrustedOrgProxyOptions(organization);
 		try {
 			return c.json(await runOrgDatabaseQuery(options, parsed.data));
 		} catch (error) {
@@ -29165,6 +29287,10 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp) {
 				error
 			});
 			const message = error instanceof Error ? error.message : "Database proxy query failed.";
+			if (error instanceof DbProxyRejectedError) return c.json({
+				error: "db_proxy_query_rejected",
+				message
+			}, 400);
 			return c.json({
 				error: "db_proxy_query_failed",
 				message
@@ -29175,14 +29301,9 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp) {
 		const organizationId = c.req.param("organizationId");
 		const organization = await getCachedOrganization(organizationId);
 		if (!organization) return c.json({ error: "Organization not found" }, 404);
-		const parsed = DbProxyMigrateRequestSchema.safeParse(await c.req.json().catch(() => null));
-		if (!parsed.success) return c.json({
-			error: "Invalid request body",
-			details: parsed.error.flatten()
-		}, 400);
-		const options = resolveOrgProjectDatabaseOptions(organization);
+		const options = resolveUntrustedOrgProxyOptions(organization);
 		try {
-			return c.json({ results: await runOrgDatabaseMigrations(options, parsed.data.migrations, organizationId) });
+			return c.json({ results: await runOrgDatabaseMigrations(options) });
 		} catch (error) {
 			console.error("Database proxy migration failed", {
 				organizationId,
@@ -29557,4 +29678,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-D1LkkWPp.mjs.map
+//# sourceMappingURL=start-BJptN0n9.mjs.map