@keystrokehq/platform 0.1.89 → 0.1.91

package/dist/{start-cGM9WLRm.mjs → start-CcW6585G.mjs}

@@ -1,4 +1,4 @@
-import { $ as CreateCredentialsRequestSchema, $n as UserPreferencesSchema, $t as OpenApiDiscoverRequestSchema, A as discoverMcpApp, An as SubmitMarketingContactRequestSchema, Ar as mapProjectSettings, At as InviteProjectMembersResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UpdateManagedServiceCredentialRequestSchema, Br as resolveUniqueCredentialInstanceLabel, Bt as ListOrganizationMembersPageQuerySchema, C as defaultSchedulerPlugin, Cn as SkillSummaryListResponseSchema, Cr as listenPortFromPublicUrl, Ct as HistoryRunCancelResponseSchema, D as decodeOAuthState, Dn as StartMcpOAuthConnectionInputSchema, Dr as mapProjectArtifact, Dt as InviteOrganizationMembersRequestSchema, E as completeMcpOAuthConnect, En as SlugAvailabilityResponseSchema, Er as mapProject, Et as HistoryRunListResponseSchema, F as deleteManagedServiceCredential$1, Fn as TriggerInvokeInputsSchema, Fr as organizationSlugErrorCodeFromMessage, Ft as ListChannelPlatformsResponseSchema, G as AgentWorkspaceFileSummarySchema, Gn as UpdateProjectMemberResponseSchema, Gt as ListProjectMembersResponseSchema, H as AgentSummaryDetailResponseSchema, Hn as UpdateOrganizationMemberResponseSchema, Hr as validateWorkflowRunInputValues, Ht as ListOrganizationsResponseSchema, I as setCredentialInstanceSecret, In as TriggerInvokeRequestSchema, Ir as parseAppSlug, It as ListCredentialsPageQuerySchema, J as ChannelPlatformSchema, Jn as UploadProjectSourceManifestRequestSchema, Jt as MICRO_CREDITS_PER_CREDIT, K as AppSlugAvailabilityQuerySchema, Kn as UpdateProjectRequestSchema, Kt as ListProjectMetricsResponseSchema, L as setManagedServiceCredential, Ln as TriggerInvokeResponseSchema, Lr as parseStoredRouteManifest, Lt as ListCredentialsPageResponseSchema, M as withCredentialAssignments, Mn as SubmitTeamRequestRequestSchema, Mr as mergeUserPreferences, Mt as ListAgentWorkspaceFilesResponseSchema, N as PublicHttpUrlError, Nn as SubmitTeamRequestResponseSchema, Nr as normalizeUserPreferences, Nt as ListApiKeysResponseSchema, O as describeCredentialBindings, On as StartMcpOAuthConnectionResultSchema, Or as mapProjectDeployment, Ot as InviteOrganizationMembersResponseSchema, P as deleteCredentialInstanceSecret, Pn as TriggerAttachmentUpdateRequestSchema, Pr as organizationInvitationAcceptPath, Pt as ListAppsResponseSchema, Q as CreateApiKeyResponseSchema, Qn as UserPreferencesPatchSchema, Qt as McpDiscoverResponseSchema, R as ACTIVE_ORG_HEADER, Rn as TriggerRunListQuerySchema, Rr as projectFileId, Rt as ListManagedServiceCredentialsResponseSchema, S as createJobQueue, Sn as SkillSummaryDetailResponseSchema, Sr as jsonSchemaToWorkflowInputSchema, St as GraphqlDiscoverResponseSchema, T as beginMcpOAuthConnect, Tn as SlugAvailabilityQuerySchema, Tr as mapOrganizationMember, Tt as HistoryRunListQuerySchema, U as AgentSummaryListResponseSchema, Un as UpdateOrganizationRequestSchema, Ur as validationErrorResponse, Ut as ListProjectDeploymentsResponseSchema, V as AgentMemoryFileSummarySchema, Vn as UpdateOrganizationMemberRequestSchema, Vr as validateCredentialValueAgainstFields, Vt as ListOrganizationMembersPageResponseSchema, W as AgentSummarySchema, Wn as UpdateProjectMemberRequestSchema, Wt as ListProjectFilesResponseSchema, X as ConnectManagedServiceCredentialRequestSchema, Xn as UserAvatarPatchSchema, Xt as ManagedServiceKindSchema, Y as CompleteProjectArtifactResponseSchema, Yn as UploadProjectSourceResponseSchema, Yt as ManagedServiceCredentialSchema, Z as CreateApiKeyRequestSchema, Zn as UserAvatarSchema, Zt as McpDiscoverRequestSchema, _ as orgLogoStorageKey, _n as ProjectSlugAvailabilityResponseSchema, _r as chatAttachmentExtension, _t as FilePartSchema, a as extractRouteManifestFromArtifact, an as PresignChatAttachmentRequestSchema, ar as WorkflowSummaryDetailResponseSchema, at as CreateProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as RecentResourceListResponseSchema, br as isAllowedChatAttachmentMediaType, bt as GetCustomAppResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as PresignOrgLogoResponseSchema, cr as WorkspaceTriggerDetailSchema, ct as DEFAULT_CLOUD_PLATFORM_ORIGIN, d as isStorageNotFoundError$1, dn as PresignUserAvatarRequestSchema, dr as WorkspaceTriggerOverviewSchema, dt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, en as OpenApiDiscoverResponseSchema, er as WorkflowCanvasCredentialBindingsSchema, et as CreateCredentialsResponseSchema, f as isUserAvatarStorageKey, fn as PresignUserAvatarResponseSchema, fr as WorkspaceTriggerRunListResponseSchema, ft as DbProxyQueryRequestSchema, gn as ProjectSlugAvailabilityQuerySchema, gr as buildCredentialInstanceLabel, gt as ErrorResponseSchema, h as loadProjectSourceFiles, hn as ProjectSettingsResponseSchema, hr as agentWorkspaceFileId, ht as DownloadActiveProjectSourceResponseSchema, i as ensureKeystrokeAssetsBucket, in as PROJECT_SLUG_TAKEN_MESSAGE, ir as WorkflowRunInputsSchema, it as CreateOrganizationResponseSchema, j as discoverOpenApiApp, jn as SubmitMarketingContactResponseSchema, jr as mapUserOrganization, jt as ListAgentMemoryFilesResponseSchema, k as discoverGraphqlApp, kn as StoredProjectSourceManifestSchema, kr as mapProjectMember, kt as InviteProjectMembersRequestSchema, l as isOrgLogoStorageKey, ln as PresignProjectSourceRequestSchema, lr as WorkspaceTriggerFileSchema, lt as DEFAULT_TRIGGER_OVERVIEW_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as ProjectResponseSchema, mr as agentMemoryFileId, mt as DownloadActiveProjectArtifactResponseSchema, n as chatAttachmentStorageKey, nn as OrganizationSidebarBrandingSchema, nr as WorkflowCanvasSchema, nt as CreateCustomAppResponseSchema, o as isChatAttachmentStorageKey, on as PresignChatAttachmentResponseSchema, or as WorkflowSummaryListResponseSchema, ot as CreateProjectRequestSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as ProjectReachabilityResponseSchema, pr as WorkspaceWorkflowOverviewSchema, pt as DeclineOrganizationInvitationResponseSchema, q as AppSlugAvailabilityResponseSchema, qn as UpdateProjectSettingsRequestSchema, qt as ListProjectsResponseSchema, r as createAssetsStorageClient, rn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, rr as WorkflowRunInputsPutBodySchema, rt as CreateOrganizationRequestSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as PresignOrgLogoRequestSchema, sr as WorkflowSummarySchema, st as CreateProjectResponseSchema, t as RouteManifestNotFoundError, tn as OrganizationSidebarBrandingPatchSchema, tr as WorkflowCanvasRunSchema, tt as CreateCustomAppRequestSchema, u as isStorageBucketNotFoundError, un as PresignProjectSourceResponseSchema, ur as WorkspaceTriggerListResponseSchema, ut as DEFAULT_WORKFLOW_CANVAS_MODEL, v as projectArtifactKey, vn as ProjectSourceResourcesSchema, vr as deriveCredentialInstanceSlug, vt as GetAppCatalogEntryResponseSchema, w as cronPayloadSchema, wn as SkillSummarySchema, wr as mapOrganizationInvitation, wt as HistoryRunDetailResponseSchema, x as userAvatarStorageKey, xn as RecentResourceSchema, xr as isLlmProviderSlug, xt as GraphqlDiscoverRequestSchema, y as projectSourceBlobKey, yn as PublicModelsResponseSchema, yr as displayCredentialAppName, yt as GetCredentialResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UpdateCredentialRequestSchema, zr as resolveExternalPlatformOrigin, zt as ListOrganizationInvitationsResponseSchema } from "./dist-lnU7GO-O.mjs";
+import { $ as CreateCredentialsRequestSchema, $n as UserPreferencesSchema, $t as OpenApiDiscoverRequestSchema, A as discoverMcpApp, An as SubmitMarketingContactRequestSchema, Ar as mapProjectSettings, At as InviteProjectMembersResponseSchema, B as ActiveOrganizationResponseSchema, Bn as UpdateManagedServiceCredentialRequestSchema, Br as resolveUniqueCredentialInstanceLabel, Bt as ListOrganizationMembersPageQuerySchema, C as defaultSchedulerPlugin, Cn as SkillSummaryListResponseSchema, Cr as listenPortFromPublicUrl, Ct as HistoryRunCancelResponseSchema, D as decodeOAuthState, Dn as StartMcpOAuthConnectionInputSchema, Dr as mapProjectArtifact, Dt as InviteOrganizationMembersRequestSchema, E as completeMcpOAuthConnect, En as SlugAvailabilityResponseSchema, Er as mapProject, Et as HistoryRunListResponseSchema, F as deleteManagedServiceCredential$1, Fn as TriggerInvokeInputsSchema, Fr as organizationSlugErrorCodeFromMessage, Ft as ListChannelPlatformsResponseSchema, G as AgentWorkspaceFileSummarySchema, Gn as UpdateProjectMemberResponseSchema, Gt as ListProjectMembersResponseSchema, H as AgentSummaryDetailResponseSchema, Hn as UpdateOrganizationMemberResponseSchema, Hr as validateWorkflowRunInputValues, Ht as ListOrganizationsResponseSchema, I as setCredentialInstanceSecret, In as TriggerInvokeRequestSchema, Ir as parseAppSlug, It as ListCredentialsPageQuerySchema, J as ChannelPlatformSchema, Jn as UploadProjectSourceManifestRequestSchema, Jt as MICRO_CREDITS_PER_CREDIT, K as AppSlugAvailabilityQuerySchema, Kn as UpdateProjectRequestSchema, Kt as ListProjectMetricsResponseSchema, L as setManagedServiceCredential, Ln as TriggerInvokeResponseSchema, Lr as parseStoredRouteManifest, Lt as ListCredentialsPageResponseSchema, M as withCredentialAssignments, Mn as SubmitTeamRequestRequestSchema, Mr as mergeUserPreferences, Mt as ListAgentWorkspaceFilesResponseSchema, N as PublicHttpUrlError, Nn as SubmitTeamRequestResponseSchema, Nr as normalizeUserPreferences, Nt as ListApiKeysResponseSchema, O as describeCredentialBindings, On as StartMcpOAuthConnectionResultSchema, Or as mapProjectDeployment, Ot as InviteOrganizationMembersResponseSchema, P as deleteCredentialInstanceSecret, Pn as TriggerAttachmentUpdateRequestSchema, Pr as organizationInvitationAcceptPath, Pt as ListAppsResponseSchema, Q as CreateApiKeyResponseSchema, Qn as UserPreferencesPatchSchema, Qt as McpDiscoverResponseSchema, R as ACTIVE_ORG_HEADER, Rn as TriggerRunListQuerySchema, Rr as projectFileId, Rt as ListManagedServiceCredentialsResponseSchema, S as createJobQueue, Sn as SkillSummaryDetailResponseSchema, Sr as jsonSchemaToWorkflowInputSchema, St as GraphqlDiscoverResponseSchema, T as beginMcpOAuthConnect, Tn as SlugAvailabilityQuerySchema, Tr as mapOrganizationMember, Tt as HistoryRunListQuerySchema, U as AgentSummaryListResponseSchema, Un as UpdateOrganizationRequestSchema, Ur as validationErrorResponse, Ut as ListProjectDeploymentsResponseSchema, V as AgentMemoryFileSummarySchema, Vn as UpdateOrganizationMemberRequestSchema, Vr as validateCredentialValueAgainstFields, Vt as ListOrganizationMembersPageResponseSchema, W as AgentSummarySchema, Wn as UpdateProjectMemberRequestSchema, Wt as ListProjectFilesResponseSchema, X as ConnectManagedServiceCredentialRequestSchema, Xn as UserAvatarPatchSchema, Xt as ManagedServiceKindSchema, Y as CompleteProjectArtifactResponseSchema, Yn as UploadProjectSourceResponseSchema, Yt as ManagedServiceCredentialSchema, Z as CreateApiKeyRequestSchema, Zn as UserAvatarSchema, Zt as McpDiscoverRequestSchema, _ as orgLogoStorageKey, _n as ProjectSlugAvailabilityResponseSchema, _r as chatAttachmentExtension, _t as FilePartSchema, a as extractRouteManifestFromArtifact, an as PresignChatAttachmentRequestSchema, ar as WorkflowSummaryDetailResponseSchema, at as CreateProjectArtifactResponseSchema, b as publicKeystrokeAssetsObjectUrl, bn as RecentResourceListResponseSchema, br as isAllowedChatAttachmentMediaType, bt as GetCustomAppResponseSchema, c as isKeystrokeAssetsOrgLogoPublicUrl, cn as PresignOrgLogoResponseSchema, cr as WorkspaceTriggerDetailSchema, ct as DEFAULT_CLOUD_PLATFORM_ORIGIN, d as isStorageNotFoundError$1, dn as PresignUserAvatarRequestSchema, dr as WorkspaceTriggerOverviewSchema, dt as DEFAULT_WORKFLOW_OVERVIEW_MODEL, en as OpenApiDiscoverResponseSchema, er as WorkflowCanvasCredentialBindingsSchema, et as CreateCredentialsResponseSchema, f as isUserAvatarStorageKey, fn as PresignUserAvatarResponseSchema, fr as WorkspaceTriggerRunListResponseSchema, ft as DbProxyQueryRequestSchema, gn as ProjectSlugAvailabilityQuerySchema, gr as buildCredentialInstanceLabel, gt as ErrorResponseSchema, h as loadProjectSourceFiles, hn as ProjectSettingsResponseSchema, hr as agentWorkspaceFileId, ht as DownloadActiveProjectSourceResponseSchema, i as ensureKeystrokeAssetsBucket, in as PROJECT_SLUG_TAKEN_MESSAGE, ir as WorkflowRunInputsSchema, it as CreateOrganizationResponseSchema, j as discoverOpenApiApp, jn as SubmitMarketingContactResponseSchema, jr as mapUserOrganization, jt as ListAgentMemoryFilesResponseSchema, k as discoverGraphqlApp, kn as StoredProjectSourceManifestSchema, kr as mapProjectMember, kt as InviteProjectMembersRequestSchema, l as isOrgLogoStorageKey, ln as PresignProjectSourceRequestSchema, lr as WorkspaceTriggerFileSchema, lt as DEFAULT_TRIGGER_OVERVIEW_MODEL, m as keystrokeAssetsOrgLogoKeyFromPublicUrl, mn as ProjectResponseSchema, mr as agentMemoryFileId, mt as DownloadActiveProjectArtifactResponseSchema, n as chatAttachmentStorageKey, nn as OrganizationSidebarBrandingSchema, nr as WorkflowCanvasSchema, nt as CreateCustomAppResponseSchema, o as isChatAttachmentStorageKey, on as PresignChatAttachmentResponseSchema, or as WorkflowSummaryListResponseSchema, ot as CreateProjectRequestSchema, p as keystrokeAssetsAvatarKeyFromPublicUrl, pn as ProjectReachabilityResponseSchema, pr as WorkspaceWorkflowOverviewSchema, pt as DeclineOrganizationInvitationResponseSchema, q as AppSlugAvailabilityResponseSchema, qn as UpdateProjectSettingsRequestSchema, qt as ListProjectsResponseSchema, r as createAssetsStorageClient, rn as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, rr as WorkflowRunInputsPutBodySchema, rt as CreateOrganizationRequestSchema, s as isKeystrokeAssetsAvatarPublicUrl, sn as PresignOrgLogoRequestSchema, sr as WorkflowSummarySchema, st as CreateProjectResponseSchema, t as RouteManifestNotFoundError, tn as OrganizationSidebarBrandingPatchSchema, tr as WorkflowCanvasRunSchema, tt as CreateCustomAppRequestSchema, u as isStorageBucketNotFoundError, un as PresignProjectSourceResponseSchema, ur as WorkspaceTriggerListResponseSchema, ut as DEFAULT_WORKFLOW_CANVAS_MODEL, v as projectArtifactKey, vn as ProjectSourceResourcesSchema, vr as deriveCredentialInstanceSlug, vt as GetAppCatalogEntryResponseSchema, w as cronPayloadSchema, wn as SkillSummarySchema, wr as mapOrganizationInvitation, wt as HistoryRunDetailResponseSchema, x as userAvatarStorageKey, xn as RecentResourceSchema, xr as isLlmProviderSlug, xt as GraphqlDiscoverRequestSchema, y as projectSourceBlobKey, yn as PublicModelsResponseSchema, yr as displayCredentialAppName, yt as GetCredentialResponseSchema, z as AcceptOrganizationInvitationResponseSchema, zn as UpdateCredentialRequestSchema, zr as resolveExternalPlatformOrigin, zt as ListOrganizationInvitationsResponseSchema } from "./dist-BZltNlNC.mjs";
 import { a as verifyOrgWorkerToken, i as pingProjectTarget, n as fetchDeployStatus, r as mintOrgWorkerToken } from "./dist-BdxWQmKK.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
@@ -9,7 +9,7 @@ import "node:fs/promises";
 import { acquireProjectDatabasePool, buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, collectChildRunCancelTargets, deleteCredentialInstanceById, findHistoryRunCore, getProjectScopeId, getServerTenantScopeId, getWorkspaceTriggerById, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listAttachmentsByTriggerIds, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, listReplayEvents, listTriggersByIds, listWorkspaceTriggerRunRows, listWorkspaceTriggers, releaseProjectDatabasePool, resolveMigrationsFolder, runMigrations, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentBySlug, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectTriggerById, selectWorkflowCanvasAnnotations, selectWorkflowLastRunAtByIds, selectWorkflowOverview, selectWorkflowRunById, selectWorkflowRunForWorkflow, selectWorkflowRunInputValues, setTriggerAttachmentEnabledState, setTriggerOverviewGenerating, setWorkflowCanvasAnnotationsGenerating, setWorkflowOverviewGenerating, storedTriggerSourceFromRow, touchResourceActivity, updateTriggerOverview, updateWorkflowCanvasAnnotations, updateWorkflowOverview, updateWorkflowRunInputValues, upsertCredentialInstance } from "@keystrokehq/database";
 import { ZodError, z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listUsageEventsForRuns, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgDatabaseUrl, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectArtifactSourceManifestForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, summarizeUsageForRuns, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectFailed, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
+import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, getManagedServiceCredential, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listManagedServiceCredentialsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, listUsageEventsForRuns, listWebhookApiKeysForProject, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, migrateAllOrgSchemas, orgSchedulerRuntimeEnv, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgDatabaseUrl, resolveOrgProjectDatabaseOptions, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactManifestForProject, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectManagedServiceCredentialById, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectArtifactSourceManifestForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, summarizeUsageForRuns, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectFailed, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
 import "node:fs";
 import { basename, join, normalize, relative, resolve } from "node:path";
 import { tmpdir } from "node:os";
@@ -24,6 +24,63 @@ import "hono/http-exception";
 import "hono/route";
 import { Resend } from "resend";
 import { getConnInfo } from "@hono/node-server/conninfo";
+//#region ../../packages/telemetry/dist/index.mjs
+const storage$1 = new AsyncLocalStorage();
+function getTelemetryContext() {
+	return storage$1.getStore();
+}
+/** Patch the active store when present (no-op outside `runWithTelemetryContext`). */
+function setTelemetryContext(patch) {
+	const current = storage$1.getStore();
+	if (!current) return;
+	if (patch.actorId !== void 0) current.actorId = patch.actorId;
+	if (patch.analyticsId !== void 0) current.analyticsId = patch.analyticsId;
+	if (patch.organizationId !== void 0) current.organizationId = patch.organizationId;
+	if (patch.projectId !== void 0) current.projectId = patch.projectId;
+	if (patch.sessionId !== void 0) current.sessionId = patch.sessionId;
+}
+/**
+* Returns true when an error is an expected client/control-flow failure that
+* should not become an Error Tracking issue.
+*/
+function isExpectedError(error) {
+	if (!error || typeof error !== "object") return false;
+	const status = readStatus(error);
+	if (status !== void 0 && (status === 0 || status >= 400 && status < 500)) return true;
+	if ("name" in error && typeof error.name === "string") {
+		if (error.name === "AbortError" || error.name === "CanceledError" || error.name === "CancelledError" || error.name === "RunTimeoutError") return true;
+	}
+	return false;
+}
+function readStatus(error) {
+	if ("status" in error && typeof error.status === "number") return error.status;
+	if ("statusCode" in error && typeof error.statusCode === "number") return error.statusCode;
+}
+let sink;
+async function captureException(input) {
+	if (isExpectedError(input.error) || true) return;
+	const context = getTelemetryContext();
+	const actorId = input.actorId ?? context?.actorId;
+	const analyticsId = input.analyticsId ?? context?.analyticsId;
+	const organizationId = input.organizationId ?? context?.organizationId;
+	const projectId = input.projectId ?? context?.projectId;
+	const sessionId = input.sessionId ?? context?.sessionId;
+	const enriched = {
+		error: input.error,
+		...actorId ? { actorId } : {},
+		...analyticsId ? { analyticsId } : {},
+		...organizationId ? { organizationId } : {},
+		...projectId ? { projectId } : {},
+		...sessionId ? { sessionId } : {},
+		...input.operation ? { operation: input.operation } : {},
+		...input.properties ? { properties: input.properties } : {}
+	};
+	try {
+		await sink.captureException(enriched);
+	} catch (error) {
+		console.error("[telemetry] captureException sink failed", error);
+	}
+}
 const replaceEditSchema = z.object({
 	oldText: z.string().describe("Exact text to replace. Must be unique in the file and must not overlap other edits in this call."),
 	newText: z.string().describe("Replacement text")
@@ -22874,43 +22931,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-DHNG8vxH.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-BVrUSSJ2.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-CPWsLoIF.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-CJ0yCZUn.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-BRlp9SBJ.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-BaPWVTpJ.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-Cw1dg2iu.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-BGM2wWjh.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-CE_UL-UN.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-DpFgOAPk.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-B0lHRylM.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-D41v5J2_.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-DrTCkIR-.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-Cx3gUYUS.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-Dp6w8p3Z.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-HQh5sLZZ.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-Cpm-NInY.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-0jzaXHDl.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-Dmbe160C.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-CdzgcNvt.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -22926,15 +22983,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-Cr4vUjZo.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-Cvuz9J3o.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4--q57VrHP.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-B-9TZnws.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-BmTM6zi_.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-DdJokWNK.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -22942,95 +22999,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-Dk74sqlP.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-CT7kJoH8.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-Dk74sqlP.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-CT7kJoH8.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-Dk74sqlP.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-CT7kJoH8.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-DWs8w6bl.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-DHZi1czr.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-DJKlkN9t.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-BvB-LN0l.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-BrOJVMnW.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-C0ZYLAmo.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-DQR03TsT.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-BTuer7UR.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-DmxSoY3E.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-zWF5eTCe.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-BDMZTVrS.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-Cxtez-Bh.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-DEgfPRDw.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-DsNLvTw5.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-XEAhoYyI.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-BNj1Tdgt.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-BlhpRWz1.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-B_leYvHh.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-ev3ppTR5.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-D7bbpI3a.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-Cmxmw4mz.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-jDuSrADs.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-BO4s4vUL.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-BnHb5XrD.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-Cxyfhu-Y.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-BOMOIUZz.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-3Hl_LfrA.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-BRvHps2j.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-CXzWzuwm.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-CGCM0G18.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-BWscZaNr.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-CmxLyVqZ.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-Cy-XZPg8.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-vQlJ4GmA.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-BtSbyYEn.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-u3rgB_sT.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-BSQlUfHz.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-v3V0CkzS.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-Cr35rkmV.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-By0IOdAB.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23042,19 +23099,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-D3sTfr7B.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-DBbomUbU.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-BV-U6uvT.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-CiakCRHz.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-BLdYzA-I.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-BqVHI5Hx.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-BLdYzA-I.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-BqVHI5Hx.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23070,7 +23127,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-CMqJ7R_M.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-HWzOIZT7.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23086,23 +23143,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-Cb3XYO9_.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-CGbgDjOv.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-Cb3XYO9_.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-CGbgDjOv.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-D5AOcEQ1.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-D9UItzhv.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-BdpVvQCG.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-DuKvslqY.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-C7MR2MXV.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-DW6sInXS.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23110,15 +23167,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-BlJEmP07.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-NtYwa-u1.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-B93yB5Us.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-BuFD1uG9.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-CP3RRaPJ.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-C1Tt9J-a.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23126,19 +23183,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-SYYSyqw9.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-D-koiUoU.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-CObeH38x.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-CT3EjvNb.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-Dt83QGu0.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-BJEUnRJ6.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-CtJwtIJK.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-2WlIgvW5.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23146,11 +23203,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-wIbdJdg6.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-Bav-zRFy.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-53-jdHf_.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-CUsnmRYd.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23158,7 +23215,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-Bh3Q5HWG.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-CWXvtumn.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23170,49 +23227,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-9-Frojmg.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-9JwVr6eR.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BRN2UO9f.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CkeHhaPt.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BRN2UO9f.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CkeHhaPt.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-BRN2UO9f.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CkeHhaPt.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-DHygHVmD.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-DUwY7BBa.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-Dpg7cFrO.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-BvY0TDhh.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-Cjrd8Neo.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-UwFxegEX.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-BHanls9z.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-DlIOzqFO.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-CeeRiQlN.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-BStjhSEm.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-CeeRiQlN.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-BStjhSEm.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-DR9awvO3.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-DPGltVh9.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-DR9awvO3.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-DPGltVh9.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -24807,19 +24864,6 @@ function getProjectInvitePermission(c) {
 	return c.get("project").invitePermission;
 }
 //#endregion
-//#region ../../packages/telemetry/dist/index.mjs
-const storage = new AsyncLocalStorage();
-/** Patch the active store when present (no-op outside `runWithTelemetryContext`). */
-function setTelemetryContext(patch) {
-	const current = storage.getStore();
-	if (!current) return;
-	if (patch.actorId !== void 0) current.actorId = patch.actorId;
-	if (patch.analyticsId !== void 0) current.analyticsId = patch.analyticsId;
-	if (patch.organizationId !== void 0) current.organizationId = patch.organizationId;
-	if (patch.projectId !== void 0) current.projectId = patch.projectId;
-	if (patch.sessionId !== void 0) current.sessionId = patch.sessionId;
-}
-//#endregion
 //#region ../../packages/http/dist/require-session-fERJkKuQ.mjs
 function resolveActiveOrganizationId(c) {
 	const header = c.req.header(ACTIVE_ORG_HEADER)?.trim();
@@ -28972,7 +29016,7 @@ const handler$31 = async (c) => {
 	const resolvedProjects = [];
 	for (const slug of input.projects) {
 		const project = await selectProjectForOrganizationBySlug(organization.organizationId, slug);
-		if (!project) return c.json({ error: `Project "${slug}" not found` }, 400);
+		if (!project || !await canAccessProjectId(c, project.id, canReadProject)) return c.json({ error: `Project "${slug}" not found` }, 400);
 		resolvedProjects.push({
 			id: project.id,
 			name: project.name
@@ -29033,12 +29077,30 @@ const handler$31 = async (c) => {
 	return c.json(CreateCredentialsResponseSchema.parse(credentials), 201);
 };
 //#endregion
+//#region src/routes/account/credentials/access.ts
+/** Visibility for a known credential id (create/get/patch/delete) — org admins see all projects. */
+async function canAccessCredentialRow(c, row) {
+	if (row.scopeType === "project") {
+		const projectId = row.scopeId ?? row.projectId;
+		if (!projectId) return false;
+		return canAccessProjectId(c, projectId, canReadProject);
+	}
+	const user = c.get("user");
+	const granted = await grantedProjectIds(c, credentialListScope(accessContext(c)));
+	const projectIds = granted === void 0 ? "all" : new Set(granted);
+	return canViewCredential(row, {
+		userId: user.id,
+		projectIds
+	});
+}
+//#endregion
 //#region src/routes/account/credentials/[credentialId]/GET.ts
 const handler$30 = async (c) => {
 	const organization = c.get("organization");
 	const credentialId = c.req.param("credentialId") ?? "";
 	const row = credentialId ? await selectCredentialInstanceById(credentialId) : void 0;
 	if (!row || toAppCredentialScope(row.scopeType) === null) return c.json({ error: "Credential not found" }, 404);
+	if (!await canAccessCredentialRow(c, row)) return c.json({ error: "Credential not found" }, 404);
 	const [credential] = await enrichCredentialInstances([row], organization.organizationId);
 	return c.json(GetCredentialResponseSchema.parse(credential));
 };
@@ -29050,7 +29112,7 @@ const handler$29 = async (c) => {
 	const credentialId = c.req.param("credentialId") ?? "";
 	const existing = credentialId ? await selectCredentialInstanceById(credentialId) : void 0;
 	if (!existing || toAppCredentialScope(existing.scopeType) === null) return c.json({ error: "Credential not found" }, 404);
-	if (!canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
+	if (!await canAccessCredentialRow(c, existing) || !canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
 	const parsed = UpdateCredentialRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) {
 		const message = parsed.error.issues[0]?.message ?? "Invalid request body";
@@ -29123,7 +29185,7 @@ function createDeleteCredentialHandler(options = {}) {
 		const credentialId = c.req.param("credentialId") ?? "";
 		const existing = credentialId ? await selectCredentialInstanceById(credentialId) : void 0;
 		if (!existing || toAppCredentialScope(existing.scopeType) === null) return c.json({ error: "Credential not found" }, 404);
-		if (!canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
+		if (!await canAccessCredentialRow(c, existing) || !canManageCredential(existing, user.id)) return c.json({ error: "Forbidden" }, 403);
 		if (existing.authKind === "oauth_managed") {
 			if (existing.connectionId) {
 				if ((await listCredentialInstancesByConnectionId(existing.connectionId)).every((row) => row.id === existing.id)) await deleteOAuthConnectionById(existing.connectionId);
@@ -30507,6 +30569,28 @@ function usesPgBossScheduler(platformConfig) {
 async function startPlatformServer(platformConfig, hooks = {}) {
 	const runtime = platformConfig.hosting.createRuntime();
 	await initDatabase();
+	migrateAllOrgSchemas({ tryLock: true }).then(async ({ organizationCount, migratedCount, failures, skipped }) => {
+		if (skipped) {
+			console.log("[platform] org schema migrate-all skipped (another machine holds the cluster lock)");
+			return;
+		}
+		console.log(`Applied org runtime migrations for ${migratedCount}/${organizationCount} organization(s).`);
+		for (const failure of failures) {
+			console.error(`[platform] org schema migration failed for ${failure.organizationId} (${failure.dbSchema})`, failure.error);
+			await captureException({
+				error: failure.error,
+				organizationId: failure.organizationId,
+				operation: "platform.migrate_org_schema",
+				properties: { db_schema: failure.dbSchema }
+			});
+		}
+	}).catch((error) => {
+		console.error("[platform] background org schema migrate-all failed", error);
+		captureException({
+			error,
+			operation: "platform.migrate_org_schema"
+		});
+	});
 	await ensureKeystrokeAssetsBucket();
 	await seedOAuthAppsFromEnvForAllOrganizations();
 	if (usesPgBossScheduler(platformConfig)) await ensureProjectPgBossGrants();
@@ -30587,4 +30671,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-cGM9WLRm.mjs.map
+//# sourceMappingURL=start-CcW6585G.mjs.map