@keystrokehq/platform 1.0.24 → 1.0.26

package/dist/{start-BlSvUEPv.mjs → start-jdzDSqsd.mjs}

@@ -1,4 +1,4 @@
-import { $ as InviteOrganizationMembersResponseSchema, $t as UserAvatarSchema, A as AppSlugAvailabilityResponseSchema, At as RecentResourceListResponseSchema, B as CreateProjectArtifactResponseSchema, Bt as SubmitTeamRequestRequestSchema, C as AcceptOrganizationInvitationResponseSchema, Cn as projectFileId, Ct as PresignUserAvatarResponseSchema, D as AgentSummaryListResponseSchema, Dt as ProjectSlugAvailabilityQuerySchema, E as AgentSummaryDetailResponseSchema, En as validationErrorResponse, Et as ProjectSettingsResponseSchema, F as CreateCredentialsResponseSchema, Ft as SlugAvailabilityQuerySchema, G as ErrorResponseSchema, Gt as UpdateOrganizationRequestSchema, H as CreateProjectResponseSchema, Ht as UpdateCredentialRequestSchema, I as CreateCustomAppRequestSchema, It as SlugAvailabilityResponseSchema, J as HistoryRunCancelResponseSchema, Jt as UpdateProjectRequestSchema, K as GetCredentialResponseSchema, Kt as UpdateProjectMemberRequestSchema, L as CreateCustomAppResponseSchema, Lt as StoredProjectSourceManifestSchema, M as CreateApiKeyRequestSchema, Mt as SkillSummaryDetailResponseSchema, N as CreateApiKeyResponseSchema, Nt as SkillSummaryListResponseSchema, O as AgentSummarySchema, On as pingProjectTarget, Ot as ProjectSlugAvailabilityResponseSchema, P as CreateCredentialsRequestSchema, Pt as SkillSummarySchema, Q as InviteOrganizationMembersRequestSchema, Qt as UserAvatarPatchSchema, R as CreateOrganizationRequestSchema, Rt as SubmitMarketingContactRequestSchema, S as ACTIVE_ORG_HEADER, Sn as parseStoredRouteManifest, St as PresignUserAvatarRequestSchema, T as AgentMemoryFileSummarySchema, Tn as validateCredentialValueAgainstFields, Tt as ProjectResponseSchema, U as DeclineOrganizationInvitationResponseSchema, Ut as UpdateOrganizationMemberRequestSchema, V as CreateProjectRequestSchema, Vt as SubmitTeamRequestResponseSchema, W as DownloadActiveProjectArtifactResponseSchema, Wt as UpdateOrganizationMemberResponseSchema, X as HistoryRunListQuerySchema, Xt as UploadProjectSourceManifestRequestSchema, Y as HistoryRunDetailResponseSchema, Yt as UpdateProjectSettingsRequestSchema, Z as HistoryRunListResponseSchema, Zt as UploadProjectSourceResponseSchema, _ as createJobQueue, _n as mergeUserPreferences, _t as PROJECT_SLUG_TAKEN_MESSAGE, a as isKeystrokeAssetsAvatarPublicUrl, an as agentMemoryFileId, at as ListCredentialsResponseSchema, b as readCredentialInstanceSecret, bn as organizationSlugErrorCodeFromMessage, bt as PresignProjectSourceRequestSchema, c as isUserAvatarStorageKey, cn as listenPortFromPublicUrl, ct as ListOrganizationsResponseSchema, dn as mapProject, dt as ListProjectMembersResponseSchema, en as UserPreferencesPatchSchema, et as InviteProjectMembersRequestSchema, f as orgLogoStorageKey, fn as mapProjectArtifact, ft as ListProjectMetricsResponseSchema, g as userAvatarStorageKey, gn as mapUserOrganization, gt as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, h as publicKeystrokeAssetsObjectUrl, hn as mapProjectSettings, ht as OrganizationSidebarBrandingSchema, i as extractRouteManifestFromArtifact, in as WorkflowSummarySchema, it as ListAppsResponseSchema, j as CompleteProjectArtifactResponseSchema, jt as RecentResourceSchema, k as AppSlugAvailabilityQuerySchema, kt as ProjectSourceResourcesSchema, l as keystrokeAssetsAvatarKeyFromPublicUrl, ln as mapOrganizationInvitation, lt as ListProjectDeploymentsResponseSchema, m as projectSourceBlobKey, mn as mapProjectMember, mt as OrganizationSidebarBrandingPatchSchema, n as createAssetsStorageClient, nn as WorkflowSummaryDetailResponseSchema, nt as ListAgentMemoryFilesResponseSchema, o as isKeystrokeAssetsOrgLogoPublicUrl, on as buildCredentialInstanceLabel, ot as ListOrganizationInvitationsResponseSchema, p as projectArtifactKey, pn as mapProjectDeployment, pt as ListProjectsResponseSchema, q as GetCustomAppResponseSchema, qt as UpdateProjectMemberResponseSchema, r as ensureKeystrokeAssetsBucket, rn as WorkflowSummaryListResponseSchema, rt as ListApiKeysResponseSchema, s as isOrgLogoStorageKey, sn as displayCredentialAppName, st as ListOrganizationMembersResponseSchema, t as RouteManifestNotFoundError, tn as UserPreferencesSchema, tt as InviteProjectMembersResponseSchema, u as keystrokeAssetsOrgLogoKeyFromPublicUrl, un as mapOrganizationMember, ut as ListProjectFilesResponseSchema, v as defaultSchedulerPlugin, vn as normalizeUserPreferences, vt as PresignOrgLogoRequestSchema, w as ActiveOrganizationResponseSchema, wn as resolveUniqueCredentialInstanceLabel, wt as ProjectReachabilityResponseSchema, x as setCredentialInstanceSecret, xn as parseAppSlug, xt as PresignProjectSourceResponseSchema, y as deleteCredentialInstanceSecret, yn as organizationInvitationAcceptPath, yt as PresignOrgLogoResponseSchema, z as CreateOrganizationResponseSchema, zt as SubmitMarketingContactResponseSchema } from "./dist-SrbtrVa0.mjs";
+import { $ as HistoryRunListQuerySchema, $t as UpdateProjectSettingsRequestSchema, A as AgentSummarySchema, An as resolveUniqueCredentialInstanceLabel, At as ProjectSettingsResponseSchema, B as CreateCustomAppResponseSchema, Bt as SlugAvailabilityResponseSchema, C as setCredentialInstanceSecret, Cn as mergeUserPreferences, Ct as PresignOrgLogoResponseSchema, D as AgentMemoryFileSummarySchema, Dn as parseAppSlug, Dt as PresignUserAvatarResponseSchema, E as ActiveOrganizationResponseSchema, En as organizationSlugErrorCodeFromMessage, Et as PresignUserAvatarRequestSchema, F as CreateApiKeyRequestSchema, Ft as RecentResourceSchema, G as CreateProjectResponseSchema, Gt as SubmitTeamRequestResponseSchema, H as CreateOrganizationResponseSchema, Ht as SubmitMarketingContactRequestSchema, I as CreateApiKeyResponseSchema, It as SkillSummaryDetailResponseSchema, J as ErrorResponseSchema, Jt as UpdateOrganizationMemberResponseSchema, K as DeclineOrganizationInvitationResponseSchema, Kt as UpdateCredentialRequestSchema, L as CreateCredentialsRequestSchema, Lt as SkillSummaryListResponseSchema, M as AppSlugAvailabilityQuerySchema, Mn as validationErrorResponse, Mt as ProjectSlugAvailabilityResponseSchema, N as AppSlugAvailabilityResponseSchema, Nt as ProjectSourceResourcesSchema, O as AgentSummaryDetailResponseSchema, On as parseStoredRouteManifest, Ot as ProjectReachabilityResponseSchema, P as CompleteProjectArtifactResponseSchema, Pn as pingProjectTarget, Pt as RecentResourceListResponseSchema, Q as HistoryRunDetailResponseSchema, Qt as UpdateProjectRequestSchema, R as CreateCredentialsResponseSchema, Rt as SkillSummarySchema, S as readCredentialInstanceSecret, Sn as mapUserOrganization, St as PresignOrgLogoRequestSchema, T as AcceptOrganizationInvitationResponseSchema, Tn as organizationInvitationAcceptPath, Tt as PresignProjectSourceResponseSchema, U as CreateProjectArtifactResponseSchema, Ut as SubmitMarketingContactResponseSchema, V as CreateOrganizationRequestSchema, Vt as StoredProjectSourceManifestSchema, W as CreateProjectRequestSchema, Wt as SubmitTeamRequestRequestSchema, X as GetCustomAppResponseSchema, Xt as UpdateProjectMemberRequestSchema, Y as GetCredentialResponseSchema, Yt as UpdateOrganizationRequestSchema, Z as HistoryRunCancelResponseSchema, Zt as UpdateProjectMemberResponseSchema, _ as publicKeystrokeAssetsObjectUrl, _n as mapProject, _t as ListProjectsResponseSchema, a as isKeystrokeAssetsAvatarPublicUrl, an as UserPreferencesSchema, at as ListAgentMemoryFilesResponseSchema, b as defaultSchedulerPlugin, bn as mapProjectMember, bt as PLATFORM_RESOURCE_UNSUPPORTED_TEXT, c as isStorageBucketNotFoundError, cn as WorkflowSummarySchema, ct as ListAppsResponseSchema, d as keystrokeAssetsAvatarKeyFromPublicUrl, dn as buildCredentialInstanceLabel, dt as ListOrganizationMembersResponseSchema, en as UploadProjectSourceManifestRequestSchema, et as HistoryRunListResponseSchema, f as keystrokeAssetsOrgLogoKeyFromPublicUrl, fn as deriveCredentialInstanceSlug, ft as ListOrganizationsResponseSchema, g as projectSourceBlobKey, gn as mapOrganizationMember, gt as ListProjectMetricsResponseSchema, h as projectArtifactKey, hn as mapOrganizationInvitation, ht as ListProjectMembersResponseSchema, i as extractRouteManifestFromArtifact, in as UserPreferencesPatchSchema, it as InviteProjectMembersResponseSchema, j as AgentWorkspaceFileSummarySchema, jn as validateCredentialValueAgainstFields, jt as ProjectSlugAvailabilityQuerySchema, k as AgentSummaryListResponseSchema, kn as projectFileId, kt as ProjectResponseSchema, l as isStorageNotFoundError$1, ln as agentMemoryFileId, lt as ListCredentialsResponseSchema, m as orgLogoStorageKey, mn as listenPortFromPublicUrl, mt as ListProjectFilesResponseSchema, n as createAssetsStorageClient, nn as UserAvatarPatchSchema, nt as InviteOrganizationMembersResponseSchema, o as isKeystrokeAssetsOrgLogoPublicUrl, on as WorkflowSummaryDetailResponseSchema, ot as ListAgentWorkspaceFilesResponseSchema, pn as displayCredentialAppName, pt as ListProjectDeploymentsResponseSchema, q as DownloadActiveProjectArtifactResponseSchema, qt as UpdateOrganizationMemberRequestSchema, r as ensureKeystrokeAssetsBucket, rn as UserAvatarSchema, rt as InviteProjectMembersRequestSchema, s as isOrgLogoStorageKey, sn as WorkflowSummaryListResponseSchema, st as ListApiKeysResponseSchema, t as RouteManifestNotFoundError, tn as UploadProjectSourceResponseSchema, tt as InviteOrganizationMembersRequestSchema, u as isUserAvatarStorageKey, un as agentWorkspaceFileId, ut as ListOrganizationInvitationsResponseSchema, v as userAvatarStorageKey, vn as mapProjectArtifact, vt as OrganizationSidebarBrandingPatchSchema, w as ACTIVE_ORG_HEADER, wn as normalizeUserPreferences, wt as PresignProjectSourceRequestSchema, x as deleteCredentialInstanceSecret, xn as mapProjectSettings, xt as PROJECT_SLUG_TAKEN_MESSAGE, y as createJobQueue, yn as mapProjectDeployment, yt as OrganizationSidebarBrandingSchema, z as CreateCustomAppRequestSchema, zt as SlugAvailabilityQuerySchema } from "./dist-CGVpWYbP.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d$4, t as _$1 } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
 import { t as withProjectScope } from "./with-project-scope-C6gaaB04.mjs";
@@ -7,7 +7,7 @@ import "node:fs/promises";
 import { buildHistoryAgentSessionDetail, buildHistoryWorkflowRunDetail, cancelAgentSession, cancelWorkflowRun, clearCredentialInstanceDefaults, deleteCredentialInstanceById, findHistoryRunCore, getServerTenantScopeId, inferDialect, listActiveAgents, listActiveSkills, listActiveWorkflows, listAllCredentialInstances, listCredentialInstancesByConnectionId, listHistoryRuns, listRecentResourceActivity, runWithProjectDatabase, runWithProjectScope, runWithTenantScope, selectActiveAgentById, selectActiveAgentsByIds, selectActiveSkillById, selectActiveSkillsByIds, selectActiveWorkflowById, selectActiveWorkflowsByIds, selectAgentLastRunAtByIds, selectAgentSessionById, selectCredentialInstanceById, selectCredentialInstancesForScope, selectEphemeralTriggerAttachments, selectProjectResourceCounts, selectWorkflowLastRunAtByIds, selectWorkflowRunById, touchResourceActivity, upsertCredentialInstance } from "@keystrokehq/database";
 import { ZodError, z } from "zod";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureOrgRuntimeMigrations, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgDatabaseUrl, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
+import { CannotModifyOwnerError, OrgAppSlugTakenError, OrgPlatformApiKeyNotFoundError, OrganizationInvitationExpiredError, OrganizationInvitationForbiddenError, OrganizationInvitationNotFoundError, OrganizationMemberNotFoundError, OrganizationSlugTakenError, OrganizationSlugTakenError as OrganizationSlugTakenError$1, ProjectMemberNotFoundError, ProjectSlugTakenError, acceptInvitation, checkOrgAppSlugAvailability, checkOrganizationSlugAvailability, checkProjectSlugAvailability, completeProjectArtifact, createOrgAgentStorageClient, createOrgApp, createOrgPlatformApiKey, createOrgStorageClient, createOrganizationForUser, createProjectForOrganization, declineInvitation, deleteOAuthConnectionById, deleteProjectForOrganization, encryptCredentialPayload as encryptCredentialPayload$1, ensureOrgRuntimeMigrations, ensureProjectPgBossGrants, ensureWebhookApiKeyForRoute, ensureWebhookApiKeys, hasCredentialFieldTemplate, initDatabase, insertProjectArtifact, inviteOrganizationMembers, inviteProjectMembers, isOrganizationStorageBucketInUse, listAppsForOrganization, listOrgPlatformApiKeysForOrganization, listOrgPlatformApiKeysForUser, loadOrgPlatformApiKeyUser, mapOrgPlatformApiKeyCreator, mapOrgPlatformApiKeyCreatorOrDeleted, orgWorkspacesRuntimeEnv, organizationRowToSidebarBranding, promoteProjectArtifact, removeOrganizationMember, removeProjectMember, resolveNewOrganizationIdentity, resolveOrgDatabaseUrl, resolveOrgRuntimeDatabase, revokeOrgPlatformApiKey, runWithOrganizationScope, runWithWorkspaceContext, selectActiveArtifactSourceManifestForProject, selectActiveProjectArtifactForProject, selectAppForOrganization, selectLastDeploymentAtByProject, selectOAuthConnectionsByIds, selectOrgPlatformApiKeyForOrganization, selectOrganizationById, selectOrganizationMembers, selectPendingInvitationsForUser, selectProjectArtifactById, selectProjectArtifactForProject, selectProjectById, selectProjectDeployments, selectProjectForOrganization, selectProjectForOrganizationBySlug, selectProjectIdsForUser, selectProjectMembers, selectProjectsByOrganizationId, selectUserById, selectUserOrganizationMembership, selectUserOrganizations, selectUserProjectMembership, selectUsersByIds, updateOrganizationActive, updateOrganizationFailed, updateOrganizationMemberRole, updateOrganizationName, updateOrganizationSidebarBranding, updateOrganizationSlug, updateProjectActive, updateProjectArtifactManifest, updateProjectArtifactSourceManifest, updateProjectForOrganization, updateProjectMemberRole, updateProjectSettings, updateUserById, verifyOrgPlatformApiKeySecret } from "@keystrokehq/platform-database";
 import "node:crypto";
 import "node:fs";
 import { basename, join, normalize, relative, resolve } from "node:path";
@@ -23169,43 +23169,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-BoI1j0p3.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-K3wVLRlE.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-BX7ZUGN_.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-CREM5KZB.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-Cli3g9xO.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-LtGcsWXS.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-CMm1zzoj.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-Db7wRM4o.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-Dy-wfpgY.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-JbMWIR8B.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-DVHjYszF.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-LoP_ecyw.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-DKw836Us.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-EOCKLuHH.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-HKHCiGhm.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-B7ZMdQpE.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-FWxNCeX-.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-Dp_DR2Vw.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-BkdBaUtN.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-Bkmrkn0t.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -23221,15 +23221,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-B8dFCaAF.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-D-qTXLlG.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-BLZg2Dyg.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-D8bmcHW8.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-1CJJqRCl.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-CZC1TeaA.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -23237,95 +23237,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-DXFCesbQ.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-ClLB5su_.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-DXFCesbQ.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-ClLB5su_.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-DXFCesbQ.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-ClLB5su_.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-BzLLzx9d.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-Q-cgXk1y.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-CRCy4LfA.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-Bf7AkOOk.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-Cer6ueCF.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-DDFfkhbw.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-BOacX6as.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-BSr6pE6n.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-DFT2RHVe.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-tDav_TnS.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-fc2hOtbJ.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-BCQuGy1-.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-Bm0SBaFQ.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-BEkT2F33.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-DNw2Wstk.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-DWOBVa90.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-4h3hV6t7.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ-Dm_eVoz3.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-B6Xb-1dU.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-BlRbMI2y.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-B2sXhpNi.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-z1NZxY5J.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-DdFepkxs.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-uicK7W4j.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-B85x0k7a.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-Dz07RzbM.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-CVF3y1Eb.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-CGpFXg9Y.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-Dupv9KP1.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-CnvvExI5.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-B0q-LUXq.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-TfIO_2wC.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-D-2o6xkX.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-BOp23PRf.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-DeqyOkAF.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-BgVESKox.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-b5VJ8I70.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-MDhg_eXe.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-CwB-fYl4.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-DaBu8VBw.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23337,19 +23337,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-BHLZmcQ5.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-DOZRkqYg.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-CSJxNoLE.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-Cfe-0SGm.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-CzEEj2ZX.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-DG6zcNeH.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-CzEEj2ZX.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-DG6zcNeH.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23365,7 +23365,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-ZxNdcUhG.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-BVO3SvRy.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -23381,23 +23381,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-CgOYS8jm.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-CQsa9589.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-CgOYS8jm.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-CQsa9589.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-DMlILpfW.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-B7FI8zxk.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-CU68ITwY.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-BR3wqizv.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-DyLBsrip.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-k1xLGfid.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -23405,15 +23405,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-hkMZ4Gtf.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-xaklIsRR.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-D0HyzChf.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-oIauVsq-.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-ydk1gl9w.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-vmyK6OHj.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -23421,19 +23421,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-DhEijyvF.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-DCqJOSFh.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-BYXr9nOF.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-6S4qxfZG.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-DhYKMDst.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-BoYrKHFo.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-DQ_ylRLU.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-n8LjQEse.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23441,11 +23441,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-DMifokCp.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-D4zzn7jo.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-Dn-Lpv7a.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-CQCa_lpF.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -23453,7 +23453,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-DDszXyT4.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-Cqp230pV.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -23465,49 +23465,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-BB6h1Dek.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-By3vBHVu.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-CZRq8jP4.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DaostFUk.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-CZRq8jP4.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DaostFUk.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-CZRq8jP4.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-DaostFUk.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-C7_hlLA1.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-CjqOTV5u.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-Cx4h6XAo.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-Vtb9HS9C.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-BQTxreuQ.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-BMHyvFje.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-CXPRlq_m.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-smKIkpwM.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-CQZRSzKI.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-8S59hOVw.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-CQZRSzKI.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-8S59hOVw.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-jQzaz5w-.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-CZHhF3pS.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-jQzaz5w-.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-CZHhF3pS.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -24576,7 +24576,7 @@ function withOrganizationProjectDatabase() {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/GET.ts
-const handler$66 = async (c) => {
+const handler$68 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserAvatarSchema.parse({ url: dbUser.image ?? null }));
@@ -24595,7 +24595,7 @@ function avatarExtensionForContentType(contentType) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/presign/POST.ts
-const handler$65 = async (c) => {
+const handler$67 = async (c) => {
 	const parsed = PresignUserAvatarRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -24635,7 +24635,7 @@ async function deleteStoredImageIfOwned(input) {
 }
 //#endregion
 //#region src/routes/account/users/me/avatar/PATCH.ts
-const handler$64 = async (c) => {
+const handler$66 = async (c) => {
 	const parsed = UserAvatarPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid avatar update" }), 400);
 	const user = c.get("user");
@@ -24677,14 +24677,14 @@ const handler$64 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/GET.ts
-const handler$63 = async (c) => {
+const handler$65 = async (c) => {
 	const dbUser = await selectUserById(c.get("user").id);
 	if (!dbUser) return c.json(ErrorResponseSchema.parse({ error: "User not found" }), 404);
 	return c.json(UserPreferencesSchema.parse(normalizeUserPreferences(dbUser.preferences)));
 };
 //#endregion
 //#region src/routes/account/users/me/preferences/PATCH.ts
-const handler$62 = async (c) => {
+const handler$64 = async (c) => {
 	const parsed = UserPreferencesPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid preferences update" }), 400);
 	const user = c.get("user");
@@ -24699,7 +24699,7 @@ const handler$62 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/GET.ts
-const handler$61 = async (c) => {
+const handler$63 = async (c) => {
 	const memberships = await selectUserOrganizations(c.get("user").id);
 	return c.json(ListOrganizationsResponseSchema.parse(memberships.map(mapUserOrganization)));
 };
@@ -24777,7 +24777,7 @@ function createOrganizationHandler(deps) {
 }
 //#endregion
 //#region src/routes/account/organizations/slug-available/GET.ts
-const handler$60 = async (c) => {
+const handler$62 = async (c) => {
 	const parsed = SlugAvailabilityQuerySchema.safeParse({
 		slug: c.req.query("slug"),
 		excludeOrganizationId: c.req.query("excludeOrganizationId")
@@ -24788,7 +24788,7 @@ const handler$60 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/GET.ts
-const handler$59 = async (c) => {
+const handler$61 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const membership = await selectUserOrganizationMembership(c.get("user").id, organizationId);
 	if (!membership) throw new Error(`Organization membership missing after param guard: ${organizationId}`);
@@ -24796,7 +24796,7 @@ const handler$59 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/PATCH.ts
-const handler$58 = async (c) => {
+const handler$60 = async (c) => {
 	const organization = c.get("organization");
 	const body = await c.req.json().catch(() => null);
 	const parsed = UpdateOrganizationRequestSchema.safeParse(body);
@@ -24821,7 +24821,7 @@ const handler$58 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/GET.ts
-const handler$57 = async (c) => {
+const handler$59 = async (c) => {
 	const { organizationId } = c.get("organization");
 	const organization = await selectOrganizationById(organizationId);
 	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
@@ -24870,7 +24870,7 @@ async function finalizeOrgLogoVariant(input) {
 		publicUrl: finalized.publicUrl
 	};
 }
-const handler$56 = async (c) => {
+const handler$58 = async (c) => {
 	const parsed = OrganizationSidebarBrandingPatchSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid branding update" }), 400);
 	const { organizationId } = c.get("organization");
@@ -24898,7 +24898,7 @@ const handler$56 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/organizations/[organizationId]/branding/logo/presign/POST.ts
-const handler$55 = async (c) => {
+const handler$57 = async (c) => {
 	const parsed = PresignOrgLogoRequestSchema.safeParse(await c.req.json().catch(() => null));
 	if (!parsed.success) return c.json(ErrorResponseSchema.parse({ error: "Invalid logo upload request" }), 400);
 	const extension = avatarExtensionForContentType(parsed.data.contentType);
@@ -24989,7 +24989,7 @@ async function attachRanAsToDetail(detail, ranByUserId) {
 }
 //#endregion
 //#region src/routes/account/history/GET.ts
-const handler$54 = async (c) => {
+const handler$56 = async (c) => {
 	const organization = c.get("organization");
 	const ctx = accessContext(c);
 	const query = HistoryRunListQuerySchema.parse({
@@ -25012,7 +25012,7 @@ const handler$54 = async (c) => {
 };
 //#endregion
 //#region src/routes/account/history/[runId]/GET.ts
-const handler$53 = async (c) => {
+const handler$55 = async (c) => {
 	const runId = c.req.param("runId") ?? "";
 	if (!runId) return c.json(null, 404);
 	const core = await findHistoryRunCore(runId);
@@ -25068,7 +25068,7 @@ function toAgentSummary(row, options) {
 }
 //#endregion
 //#region src/routes/account/agents/GET.ts
-const handler$52 = async (c) => {
+const handler$54 = async (c) => {
 	const filter = await resolveListProjectIds(c, listScope(c, agentListScope(accessContext(c))), c.req.query("projectId"));
 	if (filter === "empty") return c.json(AgentSummaryListResponseSchema.parse([]));
 	const rows = await listActiveAgents(filter);
@@ -25082,7 +25082,7 @@ function touchResourceActivityBestEffort(options) {
 }
 //#endregion
 //#region src/routes/account/agents/[agentId]/GET.ts
-const handler$51 = async (c) => {
+const handler$53 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(AgentSummaryDetailResponseSchema.parse(null));
@@ -25169,7 +25169,7 @@ Union([
 function relativePathsFromStorageKeys(prefix, keys) {
 	return keys.filter((key) => key.startsWith(prefix) && key.endsWith(".md")).map((key) => key.slice(prefix.length)).filter((path) => !path.startsWith(".") && !path.includes("/."));
 }
-const handler$50 = async (c) => {
+const handler$52 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
 	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentMemoryFilesResponseSchema.parse({ files: [] }), 404);
@@ -25194,7 +25194,7 @@ function isStorageNotFoundError(error) {
 	const status = typeof record.$metadata === "object" && record.$metadata !== null ? record.$metadata.httpStatusCode : void 0;
 	return name === "NoSuchKey" || code === "NoSuchKey" || code === "NotFound" || status === 404;
 }
-const handler$49 = async (c) => {
+const handler$51 = async (c) => {
 	const agentId = c.req.param("agentId") ?? "";
 	const path = c.req.query("path");
 	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
@@ -25222,6 +25222,83 @@ const handler$49 = async (c) => {
 	return c.body(new TextDecoder().decode(bytes));
 };
 //#endregion
+//#region ../../packages/shared/dist/agent-workspace-paths.mjs
+/** Reject path traversal for workspace-relative object keys. */
+function resolveWorkspaceRelativePath(workspaceRoot, inputPath) {
+	const normalized = normalize(inputPath.replace(/^\.\/+/, ""));
+	if (normalized.startsWith("..") || normalized.includes("../")) throw new Error(`Path must stay within the workspace directory: ${inputPath}`);
+	const absolute = resolve(workspaceRoot, normalized);
+	const rel = relative(workspaceRoot, absolute);
+	if (rel.startsWith("..") || rel.includes("..")) throw new Error(`Path must stay within the workspace directory: ${inputPath}`);
+	return rel.length > 0 ? rel : basename(absolute);
+}
+/** Whether a workspace object key is safe to expose in the dashboard file tree. */
+function isBrowsableWorkspaceFile(relativePath) {
+	if (relativePath.length === 0 || relativePath.startsWith(".")) return false;
+	if (relativePath.includes("/.")) return false;
+	return !relativePath.endsWith("/");
+}
+/** Sort workspace paths for stable tree listing (lexicographic, directories implied by prefixes). */
+function orderWorkspaceRelativePaths(relativePaths) {
+	return relativePaths.filter(isBrowsableWorkspaceFile).sort((a, b) => a.localeCompare(b));
+}
+/** Map flat storage keys (no prefix) to browsable workspace-relative paths. */
+function workspaceRelativePathsFromStorageKeys(keys) {
+	return orderWorkspaceRelativePaths(keys);
+}
+//#endregion
+//#region src/routes/account/agents/[agentId]/workspace/files/GET.ts
+const handler$50 = async (c) => {
+	const agentId = c.req.param("agentId") ?? "";
+	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
+	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
+	const { organizationId } = c.get("organization");
+	const organization = await selectOrganizationById(organizationId);
+	if (!organization) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }), 404);
+	const storage = createOrgAgentStorageClient(organization, row.id);
+	let keys;
+	try {
+		keys = await storage.listObjects("");
+	} catch (error) {
+		if (isStorageBucketNotFoundError(error)) return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files: [] }));
+		throw error;
+	}
+	const files = workspaceRelativePathsFromStorageKeys(keys).map((path) => AgentWorkspaceFileSummarySchema.parse({
+		id: agentWorkspaceFileId(path),
+		path
+	}));
+	return c.json(ListAgentWorkspaceFilesResponseSchema.parse({ files }));
+};
+//#endregion
+//#region src/routes/account/agents/[agentId]/workspace/files/content/GET.ts
+const handler$49 = async (c) => {
+	const agentId = c.req.param("agentId") ?? "";
+	const path = c.req.query("path");
+	if (!path) return c.json(ErrorResponseSchema.parse({ error: "File path is required" }), 400);
+	const row = agentId ? await selectActiveAgentById(agentId) : void 0;
+	if (!row || !await canAccessProjectId(c, row.projectId, canAccessAgent)) return c.json(ErrorResponseSchema.parse({ error: "Agent not found" }), 404);
+	const { organizationId } = c.get("organization");
+	const organization = await selectOrganizationById(organizationId);
+	if (!organization) return c.json(ErrorResponseSchema.parse({ error: "Organization not found" }), 404);
+	let relativePath;
+	try {
+		relativePath = resolveWorkspaceRelativePath(join(tmpdir(), "agent-workspace"), path);
+	} catch (error) {
+		if ((error instanceof Error ? error.message : "Invalid file path").includes("must stay within")) return c.json(ErrorResponseSchema.parse({ error: "Invalid file path" }), 400);
+		throw error;
+	}
+	const storage = createOrgAgentStorageClient(organization, row.id);
+	let bytes;
+	try {
+		bytes = await storage.getObject(relativePath);
+	} catch (error) {
+		if (isStorageNotFoundError$1(error)) return c.json(ErrorResponseSchema.parse({ error: "File not found" }), 404);
+		throw error;
+	}
+	c.header("Content-Type", "text/plain; charset=utf-8");
+	return c.body(new TextDecoder().decode(bytes));
+};
+//#endregion
 //#region src/routes/account/history/cancel-run.ts
 /** Shared body for the workflow-run and agent-session cancel endpoints. */
 async function cancelHistoryRun(c, kind, cancel) {
@@ -25865,35 +25942,58 @@ function ownerFields(owner) {
 		...owner.image && URL.canParse(owner.image) ? { ownerAvatarUrl: owner.image } : {}
 	};
 }
+function catalogSecretKeyPreviews(app) {
+	if (!hasCredentialFieldTemplate(app)) return null;
+	const credentialKeys = Object.keys(app.credentialFields);
+	if (credentialKeys.length === 0) return null;
+	return {
+		credentialKeys,
+		keyPreviews: Object.fromEntries(credentialKeys.map((key) => [key, "••••••••••••"]))
+	};
+}
+function resolveConnectionKind(row, app) {
+	if (row.authKind === "oauth_managed") return "oauth";
+	if (row.authKind === "keystroke") return app && hasCredentialFieldTemplate(app) ? "manual" : "oauth";
+	return "manual";
+}
 function uniqueIds(rows, pick) {
 	return [...new Set(rows.map(pick).filter((id) => Boolean(id)))];
 }
-/** Cross-database lookups: instances live in the org DB; projects/users/connections in the platform DB. */
+/** Cross-database lookups: instances live in the org DB; projects/users/connections/apps in the platform DB. */
 async function loadCredentialLookups(rows, organizationId) {
-	const [projects, owners, connections] = await Promise.all([
+	const [projects, owners, connections, apps] = await Promise.all([
 		selectProjectsByOrganizationId(organizationId),
 		selectUsersByIds(uniqueIds(rows, (row) => row.scopeType === "user" ? row.scopeId : null)),
-		selectOAuthConnectionsByIds(uniqueIds(rows, (row) => row.authKind === "oauth_managed" ? row.connectionId : null))
+		selectOAuthConnectionsByIds(uniqueIds(rows, (row) => row.authKind === "oauth_managed" ? row.connectionId : null)),
+		listAppsForOrganization(organizationId)
 	]);
 	return {
 		projectNameById: new Map(projects.map((project) => [project.id, project.name])),
 		ownersById: new Map(owners.map((owner) => [owner.id, owner])),
-		connectionsById: new Map(connections.map((connection) => [connection.id, connection]))
+		connectionsById: new Map(connections.map((connection) => [connection.id, connection])),
+		appsBySlug: new Map(apps.map((app) => [app.slug, app]))
 	};
 }
 async function toCredentialSummary(row, scope, lookups) {
 	const isOAuth = row.authKind === "oauth_managed";
 	const isKeystroke = row.authKind === "keystroke";
+	const app = lookups.appsBySlug.get(row.appSlug);
+	const connectionKind = resolveConnectionKind(row, app);
+	const usesOAuthConnection = connectionKind === "oauth";
 	const appName = displayAppName(row.appSlug);
 	const connection = row.connectionId ? lookups.connectionsById.get(row.connectionId) : void 0;
-	const secretKeys = isOAuth || isKeystroke ? null : await readSecretKeyPreviews(row.id);
+	let secretKeys = null;
+	if (!usesOAuthConnection) {
+		if (isKeystroke && app) secretKeys = catalogSecretKeyPreviews(app);
+		else if (!isKeystroke) secretKeys = await readSecretKeyPreviews(row.id);
+	}
 	const projectId = scope === "project" ? row.scopeId ?? row.projectId : void 0;
 	const projectName = projectId ? lookups.projectNameById.get(projectId) : void 0;
 	const grantedScopes = connection?.grantedScopes ?? row.grantedScopes;
 	return {
 		id: row.id,
 		appId: row.appSlug,
-		label: row.name ?? row.label ?? appName,
+		label: row.label ?? row.name ?? appName,
 		scope,
 		lastRefreshedAt: isOAuth ? connection?.updatedAt.toISOString() ?? null : null,
 		appName,
@@ -25901,11 +26001,11 @@ async function toCredentialSummary(row, scope, lookups) {
 		...projectName ? { projectName } : {},
 		status: isOAuth && !connection ? "Disconnected" : "Active",
 		createdAt: row.createdAt.toISOString(),
-		lastUsedAt: null,
+		lastUsedAt: row.lastUsedAt?.toISOString() ?? null,
 		isDefault: Boolean(row.isDefault),
-		connectionKind: isOAuth ? "oauth" : isKeystroke ? "oauth" : "manual",
+		connectionKind,
 		...scope === "user" && row.scopeId ? ownerFields(lookups.ownersById.get(row.scopeId)) : {},
-		...grantedScopes?.length ? { grantedScopes } : {},
+		...usesOAuthConnection && grantedScopes?.length ? { grantedScopes } : {},
 		...secretKeys ?? {},
 		...connection?.accessTokenExpiresAt ? { expiresAt: connection.accessTokenExpiresAt.toISOString() } : {}
 	};
@@ -26039,18 +26139,29 @@ const handler$16 = async (c) => {
 		return c.json({ error: message }, 400);
 	}
 	if (parsed.data.value && existing.authKind !== "api_key") return c.json({ error: "Only api-key credentials support secret rotation" }, 400);
-	const label = parsed.data.label !== void 0 ? parsed.data.label : existing.label;
+	const currentLabel = existing.label ?? existing.name ?? null;
+	const label = parsed.data.label !== void 0 ? parsed.data.label : currentLabel;
+	const labelChanged = parsed.data.label !== void 0 && parsed.data.label !== currentLabel;
 	const isDefault = parsed.data.isDefault !== void 0 ? parsed.data.isDefault : Boolean(existing.isDefault);
-	if (label !== existing.label) {
-		if ((await withCredentialRowScope(existing, () => selectCredentialInstancesForScope(existing.appSlug, existing.scopeType, existing.scopeId))).some((row) => row.id !== credentialId && (row.label ?? null) === label)) return c.json({ error: "A credential with this label already exists" }, 409);
+	let slug = existing.slug;
+	let name = existing.name;
+	if (labelChanged) {
+		const siblings = await withCredentialRowScope(existing, () => selectCredentialInstancesForScope(existing.appSlug, existing.scopeType, existing.scopeId));
+		if (siblings.some((row) => row.id !== credentialId && (row.label ?? row.name ?? null) === label)) return c.json({ error: "A credential with this label already exists" }, 409);
+		slug = deriveCredentialInstanceSlug({
+			appSlug: existing.appSlug,
+			name: label,
+			takenSlugs: siblings.filter((row) => row.id !== credentialId).map((row) => row.slug)
+		});
+		name = label;
 	}
 	await withCredentialRowScope(existing, async () => {
 		if (parsed.data.value) {
 			await setCredentialInstanceSecret({
 				id: existing.id,
 				key: existing.appSlug,
-				slug: existing.slug,
-				name: existing.name,
+				slug,
+				name,
 				scopeType: existing.scopeType,
 				scopeId: existing.scopeId,
 				label,
@@ -26068,8 +26179,8 @@ const handler$16 = async (c) => {
 		await upsertCredentialInstance({
 			id: existing.id,
 			appSlug: existing.appSlug,
-			slug: existing.slug,
-			name: existing.name,
+			slug,
+			name,
 			scopeType: existing.scopeType,
 			scopeId: existing.scopeId,
 			label,
@@ -26294,7 +26405,8 @@ function appRowToCatalogEntry(row) {
 		oauthScopes: row.oauthScopes,
 		source: row.source,
 		...gateway ? { gateway } : {},
-		...hasCredentialFieldTemplate(row) ? { credentialFields: row.credentialFields } : {}
+		...hasCredentialFieldTemplate(row) ? { credentialFields: row.credentialFields } : {},
+		...row.credentialScheme ? { credentialScheme: row.credentialScheme } : {}
 	};
 }
 function appRowToCustomAppDetail(row) {
@@ -26567,22 +26679,22 @@ function mountAccountRoutes(options) {
 	const requireProjectManageMembers = authorize(projectActions.manageMembers);
 	const requireInvitableProjectRole = authorizePayload(InviteProjectMembersRequestSchema, ({ c, ctx, body }) => canInviteToProject(ctx, { invitePermission: getProjectInvitePermission(c) }, body.role));
 	const requireOrgParam = requireOrganizationParam();
-	account.get("/organizations", handler$61);
-	account.get("/organizations/slug-available", handler$60);
+	account.get("/organizations", handler$63);
+	account.get("/organizations/slug-available", handler$62);
 	account.post("/organizations", createOrganizationHandler(options));
-	account.get("/organizations/:organizationId", requireOrgParam, handler$59);
-	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$58);
-	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$57);
-	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$56);
-	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$55);
+	account.get("/organizations/:organizationId", requireOrgParam, handler$61);
+	account.patch("/organizations/:organizationId", requireOrgParam, requireOrgUpdate, handler$60);
+	account.get("/organizations/:organizationId/branding", requireOrgParam, handler$59);
+	account.patch("/organizations/:organizationId/branding", requireOrgParam, requireOrgUpdate, handler$58);
+	account.post("/organizations/:organizationId/branding/logo/presign", requireOrgParam, requireOrgUpdate, handler$57);
 	account.get("/invitations", handler$11);
 	account.post("/invitations/:invitationId/accept", handler$10);
 	account.post("/invitations/:invitationId/decline", handler$9);
-	account.get("/users/me/avatar", handler$66);
-	account.post("/users/me/avatar/presign", handler$65);
-	account.patch("/users/me/avatar", handler$64);
-	account.get("/users/me/preferences", handler$63);
-	account.patch("/users/me/preferences", handler$62);
+	account.get("/users/me/avatar", handler$68);
+	account.post("/users/me/avatar/presign", handler$67);
+	account.patch("/users/me/avatar", handler$66);
+	account.get("/users/me/preferences", handler$65);
+	account.patch("/users/me/preferences", handler$64);
 	orgScoped.get("/apps", handler$8);
 	orgScoped.get("/apps/slug-available", handler$6);
 	orgScoped.post("/apps", requireOrgUpdate, handler$7);
@@ -26596,17 +26708,19 @@ function mountAccountRoutes(options) {
 	orgScoped.post("/api-keys", requireApiKeyCreate, handler$3);
 	orgScoped.delete("/api-keys/:apiKeyId", handler$2);
 	const withOrgDb = withOrganizationProjectDatabase();
-	orgScoped.get("/agents", withOrgDb, handler$52);
-	orgScoped.get("/agents/:agentId", withOrgDb, handler$51);
-	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$50);
-	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$49);
+	orgScoped.get("/agents", withOrgDb, handler$54);
+	orgScoped.get("/agents/:agentId", withOrgDb, handler$53);
+	orgScoped.get("/agents/:agentId/memory/files", withOrgDb, handler$52);
+	orgScoped.get("/agents/:agentId/memory/files/content", withOrgDb, handler$51);
+	orgScoped.get("/agents/:agentId/workspace/files", withOrgDb, handler$50);
+	orgScoped.get("/agents/:agentId/workspace/files/content", withOrgDb, handler$49);
 	orgScoped.get("/workflows", withOrgDb, handler$47);
 	orgScoped.get("/workflows/:workflowId", withOrgDb, handler$46);
 	orgScoped.get("/skills", withOrgDb, handler$44);
 	orgScoped.get("/skills/:skillId", withOrgDb, handler$43);
 	orgScoped.get("/recents", withOrgDb, handler$42);
-	orgScoped.get("/history", withOrgDb, handler$54);
-	orgScoped.get("/history/:runId", withOrgDb, handler$53);
+	orgScoped.get("/history", withOrgDb, handler$56);
+	orgScoped.get("/history/:runId", withOrgDb, handler$55);
 	orgScoped.post("/workflows/runs/:runId/cancel", withOrgDb, handler$45);
 	orgScoped.post("/agents/sessions/:sessionId/cancel", withOrgDb, handler$48);
 	orgScoped.get("/credentials", withOrgDb, handler$19);
@@ -26981,4 +27095,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { r1 as S, o as _, c as a, b$1 as b, a$1 as c, c$1 as d, r as f, e as g, u as h, n$1 as i, d$1 as l, b as m, n, p as o, r$1 as p, i as r, x as s, startPlatformServer as t, x$1 as u, r$3 as v, I1 as x, h as y };
 
-//# sourceMappingURL=start-BlSvUEPv.mjs.map
+//# sourceMappingURL=start-jdzDSqsd.mjs.map