@keystrokehq/platform 0.1.88 → 0.1.91

package/dist/{start-CxvLGR_s.cjs → start-Cp9zFFDc.cjs}

@@ -1,5 +1,5 @@
 const require_dist = require("./dist-QIg3f1DP.cjs");
-const require_dist$1 = require("./dist-DXWcIK6r.cjs");
+const require_dist$1 = require("./dist-DLMpDCU8.cjs");
 require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");
 const require_chunk_TN7HHBQW = require("./chunk-TN7HHBQW-D_SK6w5n.cjs");
 const require_with_project_scope = require("./with-project-scope-Drmz2h2Z.cjs");
@@ -22933,43 +22933,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await Promise.resolve().then(() => require("./cat-TSFMZVYS-DWbT8elC.cjs"))).catCommand
+		load: async () => (await Promise.resolve().then(() => require("./cat-TSFMZVYS-D1n9Kfyj.cjs"))).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await Promise.resolve().then(() => require("./printf-TWGXF445-BIIv1lno.cjs"))).printfCommand
+		load: async () => (await Promise.resolve().then(() => require("./printf-TWGXF445-C2mbWgjB.cjs"))).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await Promise.resolve().then(() => require("./ls-ZJGQER7M-Cfjo1HaP.cjs"))).lsCommand
+		load: async () => (await Promise.resolve().then(() => require("./ls-ZJGQER7M-D_YNW_ul.cjs"))).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await Promise.resolve().then(() => require("./mkdir-MEPGZOB6-CbdJjwCB.cjs"))).mkdirCommand
+		load: async () => (await Promise.resolve().then(() => require("./mkdir-MEPGZOB6-B8ztm3e9.cjs"))).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await Promise.resolve().then(() => require("./rmdir-OC4ZLPYA-CjLM8bC9.cjs"))).rmdirCommand
+		load: async () => (await Promise.resolve().then(() => require("./rmdir-OC4ZLPYA-fpThYYja.cjs"))).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await Promise.resolve().then(() => require("./touch-UA33VN3N-CeDGKzsX.cjs"))).touchCommand
+		load: async () => (await Promise.resolve().then(() => require("./touch-UA33VN3N-Cgeo_PNb.cjs"))).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await Promise.resolve().then(() => require("./rm-SSGETQVQ-tGENazC9.cjs"))).rmCommand
+		load: async () => (await Promise.resolve().then(() => require("./rm-SSGETQVQ-CrWL2M7q.cjs"))).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await Promise.resolve().then(() => require("./cp-BISAAS7A-b4SAdo9U.cjs"))).cpCommand
+		load: async () => (await Promise.resolve().then(() => require("./cp-BISAAS7A-D8rmlynh.cjs"))).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await Promise.resolve().then(() => require("./mv-W5BIQ646-CXOuSF57.cjs"))).mvCommand
+		load: async () => (await Promise.resolve().then(() => require("./mv-W5BIQ646-Dh3xkAeb.cjs"))).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await Promise.resolve().then(() => require("./ln-4LGSXXGD-CK_H6uhn.cjs"))).lnCommand
+		load: async () => (await Promise.resolve().then(() => require("./ln-4LGSXXGD-DswI3FHE.cjs"))).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22985,15 +22985,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await Promise.resolve().then(() => require("./head-442HYESI-DUdcDmA6.cjs"))).headCommand
+		load: async () => (await Promise.resolve().then(() => require("./head-442HYESI-Dwm8xzxq.cjs"))).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await Promise.resolve().then(() => require("./tail-R4PCA2C4-DSCBhtlR.cjs"))).tailCommand
+		load: async () => (await Promise.resolve().then(() => require("./tail-R4PCA2C4-B0qwZCOu.cjs"))).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await Promise.resolve().then(() => require("./wc-LF7NU4LA-78TM2RJ1.cjs"))).wcCommand
+		load: async () => (await Promise.resolve().then(() => require("./wc-LF7NU4LA-Dw1Ur9yH.cjs"))).wcCommand
 	},
 	{
 		name: "stat",
@@ -23001,95 +23001,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-CkV8FRtQ.cjs"))).grepCommand
+		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-ioAsChCT.cjs"))).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-CkV8FRtQ.cjs"))).fgrepCommand
+		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-ioAsChCT.cjs"))).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-CkV8FRtQ.cjs"))).egrepCommand
+		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-ioAsChCT.cjs"))).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await Promise.resolve().then(() => require("./rg-S4FXYXWB-BUikCX4K.cjs"))).rgCommand
+		load: async () => (await Promise.resolve().then(() => require("./rg-S4FXYXWB-DhU3CWLe.cjs"))).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await Promise.resolve().then(() => require("./sed-S5UIK574-8zoiLT33.cjs"))).sedCommand
+		load: async () => (await Promise.resolve().then(() => require("./sed-S5UIK574-CIkrzoIM.cjs"))).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await Promise.resolve().then(() => require("./awk2-LA3USKJP-CQiT6coy.cjs"))).awkCommand2
+		load: async () => (await Promise.resolve().then(() => require("./awk2-LA3USKJP-CGSZfwCj.cjs"))).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await Promise.resolve().then(() => require("./sort-SW2YEO5B-DzrWJcIW.cjs"))).sortCommand
+		load: async () => (await Promise.resolve().then(() => require("./sort-SW2YEO5B-CCsTtwL0.cjs"))).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await Promise.resolve().then(() => require("./uniq-XSIZR6PB-C0xQGY3c.cjs"))).uniqCommand
+		load: async () => (await Promise.resolve().then(() => require("./uniq-XSIZR6PB-DG0FswFf.cjs"))).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await Promise.resolve().then(() => require("./comm-VV2LDX2J-Blv8RHKp.cjs"))).commCommand
+		load: async () => (await Promise.resolve().then(() => require("./comm-VV2LDX2J-CVZtrVId.cjs"))).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await Promise.resolve().then(() => require("./cut-OKARJCCV-Df9DaP3I.cjs"))).cutCommand
+		load: async () => (await Promise.resolve().then(() => require("./cut-OKARJCCV-DeRJKnkP.cjs"))).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await Promise.resolve().then(() => require("./paste-7JC6S4DX-EmRTDHUe.cjs"))).pasteCommand
+		load: async () => (await Promise.resolve().then(() => require("./paste-7JC6S4DX-Dvu1l-IE.cjs"))).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await Promise.resolve().then(() => require("./tr-36LHWFRQ-BU02f4HR.cjs"))).trCommand
+		load: async () => (await Promise.resolve().then(() => require("./tr-36LHWFRQ-CTM9j6K7.cjs"))).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await Promise.resolve().then(() => require("./rev-5EHFX4EJ-D2EVi_dJ.cjs"))).rev
+		load: async () => (await Promise.resolve().then(() => require("./rev-5EHFX4EJ-DwOaglsk.cjs"))).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await Promise.resolve().then(() => require("./nl-WSDW7I4O-1-x3K813.cjs"))).nl
+		load: async () => (await Promise.resolve().then(() => require("./nl-WSDW7I4O-miJmqBhB.cjs"))).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await Promise.resolve().then(() => require("./fold-4TQNYMSW-D5GpyWXc.cjs"))).fold
+		load: async () => (await Promise.resolve().then(() => require("./fold-4TQNYMSW-9fyhIEzB.cjs"))).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await Promise.resolve().then(() => require("./expand-JSPG6VOP-DLOi_wuk.cjs"))).expand
+		load: async () => (await Promise.resolve().then(() => require("./expand-JSPG6VOP-Biirr4bY.cjs"))).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await Promise.resolve().then(() => require("./unexpand-CADSA4VO-Ct0UnX8L.cjs"))).unexpand
+		load: async () => (await Promise.resolve().then(() => require("./unexpand-CADSA4VO-WyG_xNCT.cjs"))).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await Promise.resolve().then(() => require("./strings-6WDHLGMX-mKAHCgbw.cjs"))).strings
+		load: async () => (await Promise.resolve().then(() => require("./strings-6WDHLGMX-aXlm-XZh.cjs"))).strings
 	},
 	{
 		name: "split",
-		load: async () => (await Promise.resolve().then(() => require("./split-4KKZZXXE-BH5pSDml.cjs"))).split
+		load: async () => (await Promise.resolve().then(() => require("./split-4KKZZXXE-CKXJESMy.cjs"))).split
 	},
 	{
 		name: "column",
-		load: async () => (await Promise.resolve().then(() => require("./column-XT6UFXNQ-DObtKebG.cjs"))).column
+		load: async () => (await Promise.resolve().then(() => require("./column-XT6UFXNQ-BOyjiGZb.cjs"))).column
 	},
 	{
 		name: "join",
-		load: async () => (await Promise.resolve().then(() => require("./join-TBRGI3LQ-Qmf9u1ec.cjs"))).join
+		load: async () => (await Promise.resolve().then(() => require("./join-TBRGI3LQ-BrZ7zlGn.cjs"))).join
 	},
 	{
 		name: "tee",
-		load: async () => (await Promise.resolve().then(() => require("./tee-YUZ2FKCJ-BLpwF_eG.cjs"))).teeCommand
+		load: async () => (await Promise.resolve().then(() => require("./tee-YUZ2FKCJ-vSitsVtC.cjs"))).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await Promise.resolve().then(() => require("./find-INTH3OLC-BfKkfesm.cjs"))).findCommand
+		load: async () => (await Promise.resolve().then(() => require("./find-INTH3OLC-Dl2I3-3s.cjs"))).findCommand
 	},
 	{
 		name: "basename",
@@ -23101,19 +23101,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await Promise.resolve().then(() => require("./tree-YLD52CNT-oFLWK_6a.cjs"))).treeCommand
+		load: async () => (await Promise.resolve().then(() => require("./tree-YLD52CNT-BFF4zbYh.cjs"))).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await Promise.resolve().then(() => require("./du-572XNP42-LyIvI4fR.cjs"))).duCommand
+		load: async () => (await Promise.resolve().then(() => require("./du-572XNP42-D0uyDNGe.cjs"))).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-BEvLmQpR.cjs"))).envCommand
+		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-tzKDzzl8.cjs"))).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-BEvLmQpR.cjs"))).printenvCommand
+		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-tzKDzzl8.cjs"))).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23129,7 +23129,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await Promise.resolve().then(() => require("./xargs-MGZPH7AX-C50YdpKY.cjs"))).xargsCommand
+		load: async () => (await Promise.resolve().then(() => require("./xargs-MGZPH7AX-D8PRAC8f.cjs"))).xargsCommand
 	},
 	{
 		name: "true",
@@ -23145,23 +23145,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-B6RzJuBl.cjs"))).bashCommand
+		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-Cww5kZnd.cjs"))).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-B6RzJuBl.cjs"))).shCommand
+		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-Cww5kZnd.cjs"))).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await Promise.resolve().then(() => require("./jq-4XLYLOS5-D5DawWwC.cjs"))).jqCommand
+		load: async () => (await Promise.resolve().then(() => require("./jq-4XLYLOS5-CMYu2tJa.cjs"))).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await Promise.resolve().then(() => require("./base64-C2AIWVNC-D1NwTDQ3.cjs"))).base64Command
+		load: async () => (await Promise.resolve().then(() => require("./base64-C2AIWVNC--cD8hODm.cjs"))).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await Promise.resolve().then(() => require("./diff-MWJFIG7X-pdy7xiqD.cjs"))).diffCommand
+		load: async () => (await Promise.resolve().then(() => require("./diff-MWJFIG7X-jPb9s-uD.cjs"))).diffCommand
 	},
 	{
 		name: "date",
@@ -23169,15 +23169,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await Promise.resolve().then(() => require("./sleep-X22JJINO-z3qwO9hZ.cjs"))).sleepCommand
+		load: async () => (await Promise.resolve().then(() => require("./sleep-X22JJINO-D_9xx9kV.cjs"))).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await Promise.resolve().then(() => require("./timeout-YDCRSLPQ-BPo5Dk-H.cjs"))).timeoutCommand
+		load: async () => (await Promise.resolve().then(() => require("./timeout-YDCRSLPQ-CWLPfd5M.cjs"))).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await Promise.resolve().then(() => require("./time-D4LNBSWX-BckiKOiK.cjs"))).timeCommand
+		load: async () => (await Promise.resolve().then(() => require("./time-D4LNBSWX-D3fXVolX.cjs"))).timeCommand
 	},
 	{
 		name: "seq",
@@ -23185,19 +23185,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await Promise.resolve().then(() => require("./expr-5JAACS4X-CueWIeox.cjs"))).exprCommand
+		load: async () => (await Promise.resolve().then(() => require("./expr-5JAACS4X-BucQyPMQ.cjs"))).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await Promise.resolve().then(() => require("./md5sum-SPU24VSG-t9TaDNig.cjs"))).md5sumCommand
+		load: async () => (await Promise.resolve().then(() => require("./md5sum-SPU24VSG-BefWlipP.cjs"))).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await Promise.resolve().then(() => require("./sha1sum-2PTOAFR6-CW2qYjtu.cjs"))).sha1sumCommand
+		load: async () => (await Promise.resolve().then(() => require("./sha1sum-2PTOAFR6-Dbwh3HsI.cjs"))).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await Promise.resolve().then(() => require("./sha256sum-NS7D3IXX-Dd3YfRAH.cjs"))).sha256sumCommand
+		load: async () => (await Promise.resolve().then(() => require("./sha256sum-NS7D3IXX-D-Sp9NbL.cjs"))).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23205,11 +23205,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await Promise.resolve().then(() => require("./html-to-markdown-JW4MSQZO-DH23_pWE.cjs"))).htmlToMarkdownCommand
+		load: async () => (await Promise.resolve().then(() => require("./html-to-markdown-JW4MSQZO-DVl0_5vh.cjs"))).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await Promise.resolve().then(() => require("./help-HZ6M2CKN-CXmtdYMa.cjs"))).helpCommand
+		load: async () => (await Promise.resolve().then(() => require("./help-HZ6M2CKN-D2LbwvmC.cjs"))).helpCommand
 	},
 	{
 		name: "which",
@@ -23217,7 +23217,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await Promise.resolve().then(() => require("./tac-2STMMJYW-ilGKSzTp.cjs"))).tac
+		load: async () => (await Promise.resolve().then(() => require("./tac-2STMMJYW-DSBwuAju.cjs"))).tac
 	},
 	{
 		name: "hostname",
@@ -23229,49 +23229,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await Promise.resolve().then(() => require("./od-WOKFDJTP-0dN09cqC.cjs"))).od
+		load: async () => (await Promise.resolve().then(() => require("./od-WOKFDJTP-BbuRYr9g.cjs"))).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-Ba2Fohdp.cjs"))).gzipCommand
+		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-DErB5mWZ.cjs"))).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-Ba2Fohdp.cjs"))).gunzipCommand
+		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-DErB5mWZ.cjs"))).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-Ba2Fohdp.cjs"))).zcatCommand
+		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-DErB5mWZ.cjs"))).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await Promise.resolve().then(() => require("./tar-STHHZTZ6-AclVIJlW.cjs"))).tarCommand
+	load: async () => (await Promise.resolve().then(() => require("./tar-STHHZTZ6-CMQG3qOq.cjs"))).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await Promise.resolve().then(() => require("./yq-4QJW3EQG-CfiM1PL2.cjs"))).yqCommand
+	load: async () => (await Promise.resolve().then(() => require("./yq-4QJW3EQG-B_-u193j.cjs"))).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await Promise.resolve().then(() => require("./xan-Y6WF3IRG-COwDynsE.cjs"))).xanCommand
+	load: async () => (await Promise.resolve().then(() => require("./xan-Y6WF3IRG-08wocC-A.cjs"))).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await Promise.resolve().then(() => require("./sqlite3-CGOEFJAO-BdhGXKJ2.cjs"))).sqlite3Command
+	load: async () => (await Promise.resolve().then(() => require("./sqlite3-CGOEFJAO-Bi5jzafW.cjs"))).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-BjpAc-N-.cjs"))).python3Command
+	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-BkzMt6UQ.cjs"))).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-BjpAc-N-.cjs"))).pythonCommand
+	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-BkzMt6UQ.cjs"))).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-BL5gacuD.cjs"))).jsExecCommand
+	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-DqCcDReZ.cjs"))).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-BL5gacuD.cjs"))).nodeStubCommand
+	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-DqCcDReZ.cjs"))).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -29018,7 +29018,7 @@ const handler$31 = async (c) => {
 	const resolvedProjects = [];
 	for (const slug of input.projects) {
 		const project = await (0, _keystrokehq_platform_database.selectProjectForOrganizationBySlug)(organization.organizationId, slug);
-		if (!project) return c.json({ error: `Project "${slug}" not found` }, 400);
+		if (!project || !await canAccessProjectId(c, project.id, canReadProject)) return c.json({ error: `Project "${slug}" not found` }, 400);
 		resolvedProjects.push({
 			id: project.id,
 			name: project.name
@@ -29079,12 +29079,30 @@ const handler$31 = async (c) => {
 	return c.json(require_dist$1.CreateCredentialsResponseSchema.parse(credentials), 201);
 };
 //#endregion
+//#region src/routes/account/credentials/access.ts
+/** Visibility for a known credential id (create/get/patch/delete) — org admins see all projects. */
+async function canAccessCredentialRow(c, row) {
+	if (row.scopeType === "project") {
+		const projectId = row.scopeId ?? row.projectId;
+		if (!projectId) return false;
+		return canAccessProjectId(c, projectId, canReadProject);
+	}
+	const user = c.get("user");
+	const granted = await grantedProjectIds(c, credentialListScope(accessContext(c)));
+	const projectIds = granted === void 0 ? "all" : new Set(granted);
+	return canViewCredential(row, {
+		userId: user.id,
+		projectIds
+	});
+}
+//#endregion
 //#region src/routes/account/credentials/[credentialId]/GET.ts
 const handler$30 = async (c) => {
 	const organization = c.get("organization");
 	const credentialId = c.req.param("credentialId") ?? "";
 	const row = credentialId ? await (0, _keystrokehq_database.selectCredentialInstanceById)(credentialId) : void 0;
 	if (!row || toAppCredentialScope(row.scopeType) === null) return c.json({ error: "Credential not found" }, 404);
+	if (!await canAccessCredentialRow(c, row)) return c.json({ error: "Credential not found" }, 404);
 	const [credential] = await enrichCredentialInstances([row], organization.organizationId);
 	return c.json(require_dist$1.GetCredentialResponseSchema.parse(credential));
 };
@@ -29096,7 +29114,7 @@ const handler$29 = async (c) => {
 	const credentialId = c.req.param("credentialId") ?? "";
 	const existing = credentialId ? await (0, _keystrokehq_database.selectCredentialInstanceById)(credentialId) : void 0;
 	if (!existing || toAppCredentialScope(existing.scopeType) === null) return c.json({ error: "Credential not found" }, 404);
-	if (!canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
+	if (!await canAccessCredentialRow(c, existing) || !canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
 	const parsed = require_dist$1.UpdateCredentialRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) {
 		const message = parsed.error.issues[0]?.message ?? "Invalid request body";
@@ -29169,7 +29187,7 @@ function createDeleteCredentialHandler(options = {}) {
 		const credentialId = c.req.param("credentialId") ?? "";
 		const existing = credentialId ? await (0, _keystrokehq_database.selectCredentialInstanceById)(credentialId) : void 0;
 		if (!existing || toAppCredentialScope(existing.scopeType) === null) return c.json({ error: "Credential not found" }, 404);
-		if (!canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
+		if (!await canAccessCredentialRow(c, existing) || !canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
 		if (existing.authKind === "oauth_managed") {
 			if (existing.connectionId) {
 				if ((await (0, _keystrokehq_database.listCredentialInstancesByConnectionId)(existing.connectionId)).every((row) => row.id === existing.id)) await (0, _keystrokehq_platform_database.deleteOAuthConnectionById)(existing.connectionId);
@@ -30553,17 +30571,28 @@ function usesPgBossScheduler(platformConfig) {
 async function startPlatformServer(platformConfig, hooks = {}) {
 	const runtime = platformConfig.hosting.createRuntime();
 	await (0, _keystrokehq_platform_database.initDatabase)();
-	const { organizationCount, migratedCount, failures } = await (0, _keystrokehq_platform_database.migrateAllOrgSchemas)();
-	console.log(`Applied org runtime migrations for ${migratedCount}/${organizationCount} organization(s).`);
-	for (const failure of failures) {
-		console.error(`[platform] org schema migration failed for ${failure.organizationId} (${failure.dbSchema})`, failure.error);
-		await captureException({
-			error: failure.error,
-			organizationId: failure.organizationId,
-			operation: "platform.migrate_org_schema",
-			properties: { db_schema: failure.dbSchema }
+	(0, _keystrokehq_platform_database.migrateAllOrgSchemas)({ tryLock: true }).then(async ({ organizationCount, migratedCount, failures, skipped }) => {
+		if (skipped) {
+			console.log("[platform] org schema migrate-all skipped (another machine holds the cluster lock)");
+			return;
+		}
+		console.log(`Applied org runtime migrations for ${migratedCount}/${organizationCount} organization(s).`);
+		for (const failure of failures) {
+			console.error(`[platform] org schema migration failed for ${failure.organizationId} (${failure.dbSchema})`, failure.error);
+			await captureException({
+				error: failure.error,
+				organizationId: failure.organizationId,
+				operation: "platform.migrate_org_schema",
+				properties: { db_schema: failure.dbSchema }
+			});
+		}
+	}).catch((error) => {
+		console.error("[platform] background org schema migrate-all failed", error);
+		captureException({
+			error,
+			operation: "platform.migrate_org_schema"
 		});
-	}
+	});
 	await require_dist$1.ensureKeystrokeAssetsBucket();
 	await (0, _keystrokehq_runtime.seedOAuthAppsFromEnvForAllOrganizations)();
 	if (usesPgBossScheduler(platformConfig)) await (0, _keystrokehq_platform_database.ensureProjectPgBossGrants)();
@@ -30775,4 +30804,4 @@ Object.defineProperty(exports, "x$1", {
 	}
 });
 
-//# sourceMappingURL=start-CxvLGR_s.cjs.map
+//# sourceMappingURL=start-Cp9zFFDc.cjs.map