@keystrokehq/platform 1.0.25 → 1.0.27

package/dist/{dist-CXr-QoFY.cjs → dist-BOUnkJqi.cjs}

@@ -4961,7 +4961,7 @@ object({ reachable: boolean() });
 /** Org-custom app slug segment (the part after `{orgSlug}/`). Same format as project slugs. */
 const AppSlugSchema$1 = ProjectSlugSchema$1;
 /** Reads `PUBLIC_PLATFORM_URL` when explicitly set. */
-function resolveExplicitPublicPlatformOrigin(env = process.env) {
+function resolveExplicitPublicPlatformOrigin$1(env = process.env) {
 	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
 }
 const StoredRouteManifestSkillSchema$1 = object({
@@ -5007,13 +5007,17 @@ const storedRouteManifestEntryV2Schema$1 = discriminatedUnion("kind", [
 		endpoint: string(),
 		attachmentIds: array(string()),
 		moduleFile: string(),
+		/** sha256 of the trigger source file, baked at build time for overview change-detection. */
+		sourceHash: string().optional(),
 		attachmentSchemas: attachmentSchemasSchema$1,
 		attachmentMeta: attachmentMetaSchema$1.optional()
 	}),
 	object({
 		kind: literal("trigger-poll"),
 		attachmentId: string(),
+		attachmentIds: array(string()),
 		moduleFile: string(),
+		sourceHash: string().optional(),
 		schedule: string(),
 		name: string().optional(),
 		description: string().optional()
@@ -5028,7 +5032,9 @@ const storedRouteManifestEntryV2Schema$1 = discriminatedUnion("kind", [
 	object({
 		kind: literal("cron-schedule"),
 		attachmentId: string(),
+		attachmentIds: array(string()),
 		moduleFile: string(),
+		sourceHash: string().optional(),
 		schedule: string(),
 		name: string().optional(),
 		description: string().optional()
@@ -5182,7 +5188,9 @@ object({ patch: object({
 const AppCredentialFieldSchema$1 = object({
 	label: string().trim().min(1).optional(),
 	secret: boolean().optional(),
-	optional: boolean().optional()
+	optional: boolean().optional(),
+	description: string().trim().min(1).optional(),
+	default: string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema$1 = record(string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema$1).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -5199,6 +5207,13 @@ const AppAuthKindSchema$1 = _enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema$1 = _enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -5212,7 +5227,11 @@ object({
 	logo: string().url().optional(),
 	authKind: AppAuthKindSchema$1,
 	oauthScopes: array(OAuthScopeOptionSchema$1)
-}).extend({ source: AppSourceSchema$1 });
+}).extend({
+	source: AppSourceSchema$1,
+	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional()
+});
 const customAppNameSchema$1 = string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema$1 = ProjectSlugAvailabilityReasonSchema$1;
 object({
@@ -5252,6 +5271,7 @@ object({
 	oauthScopes: array(OAuthScopeOptionSchema$1),
 	source: AppSourceSchema$1,
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5268,6 +5288,8 @@ object({
 	source: AppSourceSchema$1,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema$1.optional()
 });
@@ -5357,7 +5379,7 @@ object({
 });
 const credentialSecretValueSchema$1 = record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget$1(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue$1(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -5372,7 +5394,9 @@ const CredentialTargetsFieldsSchema$1 = object({
 	createOrganizationCredential: boolean().default(false),
 	createUserProvidedCredential: boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: string().trim().min(1).optional()
+	label: string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
@@ -5383,14 +5407,20 @@ object({
 	status: _enum(["connected", "redirecting"]),
 	authorizeUrl: string().url().nullable()
 });
-CredentialTargetsFieldsSchema$1.extend({ app: string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema$1.extend({
+	app: string().trim().min(1),
+	value: credentialSecretValueSchema$1.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget$1(input)) addMissingCredentialTargetIssue$1(ctx);
 });
-object({
-	status: _enum(["redirecting"]),
+discriminatedUnion("status", [object({
+	status: literal("connected"),
+	connectionId: string().min(1)
+}), object({
+	status: literal("redirecting"),
 	authorizeUrl: string().url(),
-	connectionId: string()
-});
+	connectionId: string().min(1)
+})]);
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
 	connectionKind: AppCredentialConnectionKindSchema$1,
@@ -5486,6 +5516,14 @@ object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: string().trim().min(1).optional()
 });
+object({
+	error: _enum([
+		"not_found",
+		"forbidden",
+		"mcp_execute_failed"
+	]),
+	message: string()
+});
 object({
 	type: _enum([
 		"org-deletion",
@@ -6089,6 +6127,18 @@ const TriggerRunTypeSchema$1 = _enum([
 	"webhook",
 	"poll"
 ]);
+const TriggerRunOutcomeSchema$1 = _enum([
+	"dispatched",
+	"skipped",
+	"failed"
+]);
+const TriggerRunReasonSchema$1 = _enum([
+	"filter_rejected",
+	"transform_undefined",
+	"invalid_payload",
+	"source_error",
+	"handler_error"
+]);
 const TriggerRunWorkflowSummarySchema$1 = object({
 	id: string(),
 	status: WorkflowRunStatusSchema$1,
@@ -6103,8 +6153,13 @@ const TriggerRunSummarySchema$1 = object({
 	triggerType: TriggerRunTypeSchema$1,
 	triggeredAt: string(),
 	sourcePath: string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema$1.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema$1.nullable()
+	outcome: TriggerRunOutcomeSchema$1,
+	reason: TriggerRunReasonSchema$1.nullable(),
+	detail: string().nullable(),
+	/** Workflow runs dispatched by this fire (fan-out → one per matched workflow attachment). */
+	workflowRuns: array(TriggerRunWorkflowSummarySchema$1),
+	/** Agent sessions dispatched by this fire (fan-out → one per matched agent attachment). */
+	agentSessions: array(TriggerRunAgentSessionSummarySchema$1)
 });
 const TriggerRunRecordSchema$1 = object({
 	id: string(),
@@ -6112,6 +6167,9 @@ const TriggerRunRecordSchema$1 = object({
 	attachmentSlug: string(),
 	triggerType: TriggerRunTypeSchema$1,
 	sourcePath: string().nullable(),
+	outcome: TriggerRunOutcomeSchema$1,
+	reason: TriggerRunReasonSchema$1.nullable(),
+	detail: string().nullable(),
 	payload: unknown().nullable(),
 	triggeredAt: string()
 });
@@ -6146,11 +6204,15 @@ const TriggerTypeSchema$1 = _enum([
 	"cron"
 ]);
 const TriggerTargetKindSchema$1 = _enum(["workflow", "agent"]);
+const TriggerStatusSchema$1 = _enum(["active", "disabled"]);
 object({ triggers: array(object({
 	slug: string(),
 	name: string().optional(),
 	description: string().optional(),
 	type: TriggerTypeSchema$1,
+	status: TriggerStatusSchema$1.optional(),
+	schedule: string().nullable().optional(),
+	sourcePath: string().optional(),
 	route: string().optional(),
 	webhookUrl: string().url().optional(),
 	targetKind: TriggerTargetKindSchema$1,
@@ -6158,6 +6220,128 @@ object({ triggers: array(object({
 	agentKey: string().optional()
 })) });
 object({ endpoint: string().min(1).optional() });
+const TriggerAssignmentSchema$1 = object({
+	kind: TriggerTargetKindSchema$1,
+	id: string(),
+	slug: string(),
+	name: string()
+});
+/** Status of the downstream run/session a dispatched fire produced. */
+const WorkspaceTriggerRunStatusSchema$1 = _enum([
+	"completed",
+	"running",
+	"failed"
+]);
+/**
+* Categorical reason a fire was recorded but produced no downstream run. These map
+* from the persisted `trigger_runs.reason` enum onto the labels the UI renders.
+*/
+const WorkspaceTriggerSkipReasonSchema$1 = _enum([
+	"filtered",
+	"no_new_data",
+	"transform_undefined"
+]);
+/**
+* A single downstream run/session a dispatched fire produced. A fan-out fire can
+* dispatch several of these (multiple workflows and/or agents off one source event).
+*/
+const WorkspaceTriggerRunTargetSchema$1 = discriminatedUnion("kind", [object({
+	kind: literal("workflow"),
+	runId: string(),
+	workflowId: string(),
+	status: WorkspaceTriggerRunStatusSchema$1,
+	name: string()
+}), object({
+	kind: literal("agent"),
+	sessionId: string(),
+	agentId: string(),
+	status: WorkspaceTriggerRunStatusSchema$1,
+	name: string()
+})]);
+/**
+* Outcome of a single trigger fire — drives the run-history row presentation. Every
+* recorded fire either dispatched one or more workflow/agent targets, was skipped by
+* trigger logic, or failed before any target ran.
+*/
+const WorkspaceTriggerRunOutcomeSchema$1 = discriminatedUnion("kind", [
+	object({
+		kind: literal("dispatched"),
+		targets: array(WorkspaceTriggerRunTargetSchema$1)
+	}),
+	object({
+		kind: literal("skipped"),
+		reason: WorkspaceTriggerSkipReasonSchema$1
+	}),
+	object({
+		kind: literal("failed"),
+		error: string()
+	})
+]);
+object({
+	/** `triggers.id` UUID for the trigger row. */
+	id: string(),
+	slug: string(),
+	name: string(),
+	description: string().nullable(),
+	type: TriggerTypeSchema$1,
+	status: TriggerStatusSchema$1,
+	projectId: string(),
+	projectName: string(),
+	/** Webhook ingress URL (webhook triggers only). */
+	webhookUrl: string().nullable(),
+	/** Cron expression or poll cadence label (cron/poll triggers only). */
+	schedule: string().nullable(),
+	/** Workflows + agents currently bound to this source. */
+	assignments: array(TriggerAssignmentSchema$1),
+	lastFiredAt: string().nullable(),
+	fireCount: number$1().int().nonnegative(),
+	createdAt: string()
+}).extend({ 
+/** Source module file path, relative to the project root. */
+sourcePath: string() });
+object({
+	items: array(object({
+		id: string(),
+		triggerType: TriggerTypeSchema$1,
+		triggeredAt: string(),
+		/** Poll/webhook source path or endpoint that produced the fire. */
+		sourcePath: string().nullable(),
+		outcome: WorkspaceTriggerRunOutcomeSchema$1
+	})),
+	nextCursor: string().nullable()
+});
+object({
+	path: string(),
+	contents: string()
+});
+object({
+	status: _enum([
+		"generating",
+		"ready",
+		"failed"
+	]),
+	markdown: string(),
+	hash: string(),
+	generatedAt: string().nullable(),
+	model: string()
+});
+/** Inputs the worker feeds the LLM to generate a trigger overview. */
+const TriggerOverviewInputSchema$1 = object({
+	name: string(),
+	description: string().nullable(),
+	type: TriggerTypeSchema$1,
+	schedule: string().nullable(),
+	sourcePath: string(),
+	sourceContents: string(),
+	assignments: array(TriggerAssignmentSchema$1)
+});
+object({
+	triggerId: string(),
+	projectId: string(),
+	triggerHash: string(),
+	model: string(),
+	input: TriggerOverviewInputSchema$1
+});
 const OrganizationMemberRoleSchema$1 = _enum([
 	"owner",
 	"admin",
@@ -6601,7 +6785,7 @@ function resolvePlatformWorkerToken(source = process.env) {
 }
 /** Platform API URL reachable from a project-server container. */
 function resolveWorkerPlatformUrl(source = process.env) {
-	const raw = source.PLATFORM_URL?.trim() ?? resolveExplicitPublicPlatformOrigin(source) ?? (source.NODE_ENV === "production" ? void 0 : "http://localhost:3002");
+	const raw = source.PLATFORM_URL?.trim() ?? resolveExplicitPublicPlatformOrigin$1(source) ?? (source.NODE_ENV === "production" ? void 0 : "http://localhost:3002");
 	if (!raw) return;
 	return rewriteLoopbackUrl(raw);
 }
@@ -7887,6 +8071,23 @@ function listenPortFromPublicUrl(value, fallback) {
 		return fallback;
 	}
 }
+/** Reads `PUBLIC_PLATFORM_URL` when explicitly set. */
+function resolveExplicitPublicPlatformOrigin(env = process.env) {
+	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
+}
+/**
+* Provider-facing platform origin (OAuth redirect URIs, webhook intake URLs).
+*
+* When the platform runs on localhost but is exposed through an HTTPS tunnel
+* (e.g. cloudflared), set `PUBLIC_PLATFORM_PROXY_URL` to the tunnel origin so external
+* providers get reachable HTTPS URLs while `PUBLIC_PLATFORM_URL` stays on localhost
+* for browser auth/CORS. Requires an explicit platform URL (no localhost fallback).
+*/
+function resolveExternalPlatformOrigin(env = process.env) {
+	const proxy = env.PUBLIC_PLATFORM_PROXY_URL?.replace(/\/$/, "");
+	if (proxy) return proxy;
+	return resolveExplicitPublicPlatformOrigin(env);
+}
 /** On-disk path under the project root (packed in deploy artifacts when present). */
 const ROUTE_MANIFEST_REL_PATH = "dist/.keystroke/route-manifest.json";
 const StoredRouteManifestSkillSchema = zod.z.object({
@@ -7932,13 +8133,17 @@ const storedRouteManifestEntryV2Schema = zod.z.discriminatedUnion("kind", [
 		endpoint: zod.z.string(),
 		attachmentIds: zod.z.array(zod.z.string()),
 		moduleFile: zod.z.string(),
+		/** sha256 of the trigger source file, baked at build time for overview change-detection. */
+		sourceHash: zod.z.string().optional(),
 		attachmentSchemas: attachmentSchemasSchema,
 		attachmentMeta: attachmentMetaSchema.optional()
 	}),
 	zod.z.object({
 		kind: zod.z.literal("trigger-poll"),
 		attachmentId: zod.z.string(),
+		attachmentIds: zod.z.array(zod.z.string()),
 		moduleFile: zod.z.string(),
+		sourceHash: zod.z.string().optional(),
 		schedule: zod.z.string(),
 		name: zod.z.string().optional(),
 		description: zod.z.string().optional()
@@ -7953,7 +8158,9 @@ const storedRouteManifestEntryV2Schema = zod.z.discriminatedUnion("kind", [
 	zod.z.object({
 		kind: zod.z.literal("cron-schedule"),
 		attachmentId: zod.z.string(),
+		attachmentIds: zod.z.array(zod.z.string()),
 		moduleFile: zod.z.string(),
+		sourceHash: zod.z.string().optional(),
 		schedule: zod.z.string(),
 		name: zod.z.string().optional(),
 		description: zod.z.string().optional()
@@ -8028,6 +8235,7 @@ function normalizeEntryToV2(entry) {
 			endpoint,
 			attachmentIds: entry.attachmentIds,
 			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
 			attachmentSchemas: entry.attachmentSchemas && typeof entry.attachmentSchemas === "object" ? entry.attachmentSchemas : {},
 			...entry.attachmentMeta && typeof entry.attachmentMeta === "object" ? { attachmentMeta: entry.attachmentMeta } : {}
 		};
@@ -8037,7 +8245,9 @@ function normalizeEntryToV2(entry) {
 		return {
 			kind: "trigger-poll",
 			attachmentId: entry.attachmentId,
+			attachmentIds: Array.isArray(entry.attachmentIds) ? entry.attachmentIds : [entry.attachmentId],
 			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
 			schedule: entry.schedule,
 			...typeof entry.name === "string" ? { name: entry.name } : {},
 			...typeof entry.description === "string" ? { description: entry.description } : {}
@@ -8058,7 +8268,9 @@ function normalizeEntryToV2(entry) {
 		return {
 			kind: "cron-schedule",
 			attachmentId: entry.attachmentId,
+			attachmentIds: Array.isArray(entry.attachmentIds) ? entry.attachmentIds : [entry.attachmentId],
 			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
 			schedule: entry.schedule,
 			...typeof entry.name === "string" ? { name: entry.name } : {},
 			...typeof entry.description === "string" ? { description: entry.description } : {}
@@ -8074,7 +8286,17 @@ function normalizeV2ManifestInput(value) {
 	return {
 		...raw,
 		entries: raw.entries.map((entry) => {
-			if (!entry || typeof entry !== "object" || entry.kind !== "agent") return entry;
+			if (!entry || typeof entry !== "object") return entry;
+			const kind = entry.kind;
+			if (kind === "trigger-poll" || kind === "cron-schedule" || kind === "trigger-webhook" || kind === "trigger-poll-group") {
+				const trigger = entry;
+				if (Array.isArray(trigger.attachmentIds)) return entry;
+				return {
+					...trigger,
+					attachmentIds: typeof trigger.attachmentId === "string" ? [trigger.attachmentId] : []
+				};
+			}
+			if (kind !== "agent") return entry;
 			const agent = entry;
 			if (Array.isArray(agent.appSlugs)) return entry;
 			const appSlugs = legacyAgentAppSlugs(agent);
@@ -8256,7 +8478,9 @@ zod.z.object({ patch: zod.z.object({
 const AppCredentialFieldSchema = zod.z.object({
 	label: zod.z.string().trim().min(1).optional(),
 	secret: zod.z.boolean().optional(),
-	optional: zod.z.boolean().optional()
+	optional: zod.z.boolean().optional(),
+	description: zod.z.string().trim().min(1).optional(),
+	default: zod.z.string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = zod.z.record(zod.z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -8288,6 +8512,13 @@ const AppAuthKindSchema = zod.z.enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema = zod.z.enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -8301,7 +8532,11 @@ zod.z.object({
 	logo: zod.z.string().url().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
+}).extend({
+	source: AppSourceSchema,
+	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional()
+});
 const customAppNameSchema = zod.z.string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema = ProjectSlugAvailabilityReasonSchema;
 const AppSlugAvailabilityResponseSchema = zod.z.object({
@@ -8345,6 +8580,7 @@ zod.z.object({
 	oauthScopes: zod.z.array(OAuthScopeOptionSchema),
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	createdAt: zod.z.string().min(1),
 	updatedAt: zod.z.string().min(1)
 });
@@ -8365,6 +8601,8 @@ const AppCatalogEntrySchema = zod.z.object({
 	source: AppSourceSchema,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -8462,12 +8700,12 @@ function deriveCredentialInstanceSlug(options) {
 	if (fromName) {
 		const base = normalizeOrganizationNameToSlugBase(fromName) || options.appSlug;
 		if (!taken.has(base)) return base;
-		let suffix = 2;
+		let suffix = 1;
 		while (taken.has(`${base}-${suffix}`)) suffix += 1;
 		return `${base}-${suffix}`;
 	}
 	if (!taken.has(options.appSlug)) return options.appSlug;
-	let suffix = 2;
+	let suffix = 1;
 	while (taken.has(`${options.appSlug}-${suffix}`)) suffix += 1;
 	return `${options.appSlug}-${suffix}`;
 }
@@ -8524,7 +8762,7 @@ const AppCredentialSummarySchema = zod.z.object({
 });
 const credentialSecretValueSchema = zod.z.record(zod.z.string(), zod.z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -8539,7 +8777,9 @@ const CredentialTargetsFieldsSchema = zod.z.object({
 	createOrganizationCredential: zod.z.boolean().default(false),
 	createUserProvidedCredential: zod.z.boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: zod.z.string().trim().min(1).optional()
+	label: zod.z.string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: zod.z.string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema.extend({
 	appId: zod.z.string().min(1),
@@ -8550,14 +8790,22 @@ zod.z.object({
 	status: zod.z.enum(["connected", "redirecting"]),
 	authorizeUrl: zod.z.string().url().nullable()
 });
-CredentialTargetsFieldsSchema.extend({ app: zod.z.string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema.extend({
+	app: zod.z.string().trim().min(1),
+	value: credentialSecretValueSchema.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 });
-zod.z.object({
-	status: zod.z.enum(["redirecting"]),
+const connectedKeystrokeConnectionResultSchema = zod.z.object({
+	status: zod.z.literal("connected"),
+	connectionId: zod.z.string().min(1)
+});
+const redirectingKeystrokeConnectionResultSchema = zod.z.object({
+	status: zod.z.literal("redirecting"),
 	authorizeUrl: zod.z.string().url(),
-	connectionId: zod.z.string()
+	connectionId: zod.z.string().min(1)
 });
+zod.z.discriminatedUnion("status", [connectedKeystrokeConnectionResultSchema, redirectingKeystrokeConnectionResultSchema]);
 /** Request body for `POST /api/credentials` (manual api-key fan-out). */
 const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
 	appId: zod.z.string().min(1),
@@ -8661,6 +8909,15 @@ zod.z.object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: zod.z.string().trim().min(1).optional()
 });
+const ExecuteKeystrokeToolErrorCodeSchema = zod.z.enum([
+	"not_found",
+	"forbidden",
+	"mcp_execute_failed"
+]);
+zod.z.object({
+	error: ExecuteKeystrokeToolErrorCodeSchema,
+	message: zod.z.string()
+});
 const TeamRequestTypeSchema = zod.z.enum([
 	"org-deletion",
 	"contact",
@@ -9293,6 +9550,18 @@ const TriggerRunTypeSchema = zod.z.enum([
 	"webhook",
 	"poll"
 ]);
+const TriggerRunOutcomeSchema = zod.z.enum([
+	"dispatched",
+	"skipped",
+	"failed"
+]);
+const TriggerRunReasonSchema = zod.z.enum([
+	"filter_rejected",
+	"transform_undefined",
+	"invalid_payload",
+	"source_error",
+	"handler_error"
+]);
 const TriggerRunWorkflowSummarySchema = zod.z.object({
 	id: zod.z.string(),
 	status: WorkflowRunStatusSchema,
@@ -9307,8 +9576,13 @@ const TriggerRunSummarySchema = zod.z.object({
 	triggerType: TriggerRunTypeSchema,
 	triggeredAt: zod.z.string(),
 	sourcePath: zod.z.string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema.nullable()
+	outcome: TriggerRunOutcomeSchema,
+	reason: TriggerRunReasonSchema.nullable(),
+	detail: zod.z.string().nullable(),
+	/** Workflow runs dispatched by this fire (fan-out → one per matched workflow attachment). */
+	workflowRuns: zod.z.array(TriggerRunWorkflowSummarySchema),
+	/** Agent sessions dispatched by this fire (fan-out → one per matched agent attachment). */
+	agentSessions: zod.z.array(TriggerRunAgentSessionSummarySchema)
 });
 const TriggerRunRecordSchema = zod.z.object({
 	id: zod.z.string(),
@@ -9316,10 +9590,13 @@ const TriggerRunRecordSchema = zod.z.object({
 	attachmentSlug: zod.z.string(),
 	triggerType: TriggerRunTypeSchema,
 	sourcePath: zod.z.string().nullable(),
+	outcome: TriggerRunOutcomeSchema,
+	reason: TriggerRunReasonSchema.nullable(),
+	detail: zod.z.string().nullable(),
 	payload: zod.z.unknown().nullable(),
 	triggeredAt: zod.z.string()
 });
-zod.z.object({
+const TriggerRunListQuerySchema = zod.z.object({
 	limit: zod.z.coerce.number().int().min(1).max(100).optional().default(20),
 	cursor: zod.z.string().min(1).optional(),
 	triggerType: TriggerRunTypeSchema.optional()
@@ -9350,11 +9627,15 @@ const TriggerTypeSchema = zod.z.enum([
 	"cron"
 ]);
 const TriggerTargetKindSchema = zod.z.enum(["workflow", "agent"]);
+const TriggerStatusSchema = zod.z.enum(["active", "disabled"]);
 const TriggerListItemSchema = zod.z.object({
 	slug: zod.z.string(),
 	name: zod.z.string().optional(),
 	description: zod.z.string().optional(),
 	type: TriggerTypeSchema,
+	status: TriggerStatusSchema.optional(),
+	schedule: zod.z.string().nullable().optional(),
+	sourcePath: zod.z.string().optional(),
 	route: zod.z.string().optional(),
 	webhookUrl: zod.z.string().url().optional(),
 	targetKind: TriggerTargetKindSchema,
@@ -9363,6 +9644,136 @@ const TriggerListItemSchema = zod.z.object({
 });
 zod.z.object({ triggers: zod.z.array(TriggerListItemSchema) });
 zod.z.object({ endpoint: zod.z.string().min(1).optional() });
+const TriggerAssignmentSchema = zod.z.object({
+	kind: TriggerTargetKindSchema,
+	id: zod.z.string(),
+	slug: zod.z.string(),
+	name: zod.z.string()
+});
+/** Status of the downstream run/session a dispatched fire produced. */
+const WorkspaceTriggerRunStatusSchema = zod.z.enum([
+	"completed",
+	"running",
+	"failed"
+]);
+/**
+* Categorical reason a fire was recorded but produced no downstream run. These map
+* from the persisted `trigger_runs.reason` enum onto the labels the UI renders.
+*/
+const WorkspaceTriggerSkipReasonSchema = zod.z.enum([
+	"filtered",
+	"no_new_data",
+	"transform_undefined"
+]);
+/**
+* A single downstream run/session a dispatched fire produced. A fan-out fire can
+* dispatch several of these (multiple workflows and/or agents off one source event).
+*/
+const WorkspaceTriggerRunTargetSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
+	kind: zod.z.literal("workflow"),
+	runId: zod.z.string(),
+	workflowId: zod.z.string(),
+	status: WorkspaceTriggerRunStatusSchema,
+	name: zod.z.string()
+}), zod.z.object({
+	kind: zod.z.literal("agent"),
+	sessionId: zod.z.string(),
+	agentId: zod.z.string(),
+	status: WorkspaceTriggerRunStatusSchema,
+	name: zod.z.string()
+})]);
+/**
+* Outcome of a single trigger fire — drives the run-history row presentation. Every
+* recorded fire either dispatched one or more workflow/agent targets, was skipped by
+* trigger logic, or failed before any target ran.
+*/
+const WorkspaceTriggerRunOutcomeSchema = zod.z.discriminatedUnion("kind", [
+	zod.z.object({
+		kind: zod.z.literal("dispatched"),
+		targets: zod.z.array(WorkspaceTriggerRunTargetSchema)
+	}),
+	zod.z.object({
+		kind: zod.z.literal("skipped"),
+		reason: WorkspaceTriggerSkipReasonSchema
+	}),
+	zod.z.object({
+		kind: zod.z.literal("failed"),
+		error: zod.z.string()
+	})
+]);
+const WorkspaceTriggerSummarySchema = zod.z.object({
+	/** `triggers.id` UUID for the trigger row. */
+	id: zod.z.string(),
+	slug: zod.z.string(),
+	name: zod.z.string(),
+	description: zod.z.string().nullable(),
+	type: TriggerTypeSchema,
+	status: TriggerStatusSchema,
+	projectId: zod.z.string(),
+	projectName: zod.z.string(),
+	/** Webhook ingress URL (webhook triggers only). */
+	webhookUrl: zod.z.string().nullable(),
+	/** Cron expression or poll cadence label (cron/poll triggers only). */
+	schedule: zod.z.string().nullable(),
+	/** Workflows + agents currently bound to this source. */
+	assignments: zod.z.array(TriggerAssignmentSchema),
+	lastFiredAt: zod.z.string().nullable(),
+	fireCount: zod.z.number().int().nonnegative(),
+	createdAt: zod.z.string()
+});
+const WorkspaceTriggerDetailSchema = WorkspaceTriggerSummarySchema.extend({ 
+/** Source module file path, relative to the project root. */
+sourcePath: zod.z.string() });
+const WorkspaceTriggerListResponseSchema = zod.z.array(WorkspaceTriggerSummarySchema);
+const WorkspaceTriggerRunSummarySchema = zod.z.object({
+	id: zod.z.string(),
+	triggerType: TriggerTypeSchema,
+	triggeredAt: zod.z.string(),
+	/** Poll/webhook source path or endpoint that produced the fire. */
+	sourcePath: zod.z.string().nullable(),
+	outcome: WorkspaceTriggerRunOutcomeSchema
+});
+const WorkspaceTriggerRunListResponseSchema = zod.z.object({
+	items: zod.z.array(WorkspaceTriggerRunSummarySchema),
+	nextCursor: zod.z.string().nullable()
+});
+const WorkspaceTriggerFileSchema = zod.z.object({
+	path: zod.z.string(),
+	contents: zod.z.string()
+});
+/** Default gateway model for trigger overviews — a cheap model, same as session-title generation. */
+const DEFAULT_TRIGGER_OVERVIEW_MODEL = "deepseek/deepseek-v4-flash";
+/** Whether the LLM overview is still being produced, finished, or errored. */
+const WorkspaceTriggerOverviewStatusSchema = zod.z.enum([
+	"generating",
+	"ready",
+	"failed"
+]);
+/** LLM-generated markdown overview envelope served to the web dashboard. */
+const WorkspaceTriggerOverviewSchema = zod.z.object({
+	status: WorkspaceTriggerOverviewStatusSchema,
+	markdown: zod.z.string(),
+	hash: zod.z.string(),
+	generatedAt: zod.z.string().nullable(),
+	model: zod.z.string()
+});
+/** Inputs the worker feeds the LLM to generate a trigger overview. */
+const TriggerOverviewInputSchema = zod.z.object({
+	name: zod.z.string(),
+	description: zod.z.string().nullable(),
+	type: TriggerTypeSchema,
+	schedule: zod.z.string().nullable(),
+	sourcePath: zod.z.string(),
+	sourceContents: zod.z.string(),
+	assignments: zod.z.array(TriggerAssignmentSchema)
+});
+zod.z.object({
+	triggerId: zod.z.string(),
+	projectId: zod.z.string(),
+	triggerHash: zod.z.string(),
+	model: zod.z.string(),
+	input: TriggerOverviewInputSchema
+});
 const OrganizationMemberRoleSchema = zod.z.enum([
 	"owner",
 	"admin",
@@ -32551,6 +32962,12 @@ Object.defineProperty(exports, "CreateProjectResponseSchema", {
 		return CreateProjectResponseSchema;
 	}
 });
+Object.defineProperty(exports, "DEFAULT_TRIGGER_OVERVIEW_MODEL", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_TRIGGER_OVERVIEW_MODEL;
+	}
+});
 Object.defineProperty(exports, "DeclineOrganizationInvitationResponseSchema", {
 	enumerable: true,
 	get: function() {
@@ -32881,6 +33298,12 @@ Object.defineProperty(exports, "SubmitTeamRequestResponseSchema", {
 		return SubmitTeamRequestResponseSchema;
 	}
 });
+Object.defineProperty(exports, "TriggerRunListQuerySchema", {
+	enumerable: true,
+	get: function() {
+		return TriggerRunListQuerySchema;
+	}
+});
 Object.defineProperty(exports, "UpdateCredentialRequestSchema", {
 	enumerable: true,
 	get: function() {
@@ -32983,6 +33406,36 @@ Object.defineProperty(exports, "WorkflowSummarySchema", {
 		return WorkflowSummarySchema;
 	}
 });
+Object.defineProperty(exports, "WorkspaceTriggerDetailSchema", {
+	enumerable: true,
+	get: function() {
+		return WorkspaceTriggerDetailSchema;
+	}
+});
+Object.defineProperty(exports, "WorkspaceTriggerFileSchema", {
+	enumerable: true,
+	get: function() {
+		return WorkspaceTriggerFileSchema;
+	}
+});
+Object.defineProperty(exports, "WorkspaceTriggerListResponseSchema", {
+	enumerable: true,
+	get: function() {
+		return WorkspaceTriggerListResponseSchema;
+	}
+});
+Object.defineProperty(exports, "WorkspaceTriggerOverviewSchema", {
+	enumerable: true,
+	get: function() {
+		return WorkspaceTriggerOverviewSchema;
+	}
+});
+Object.defineProperty(exports, "WorkspaceTriggerRunListResponseSchema", {
+	enumerable: true,
+	get: function() {
+		return WorkspaceTriggerRunListResponseSchema;
+	}
+});
 Object.defineProperty(exports, "__commonJSMin", {
 	enumerable: true,
 	get: function() {
@@ -33043,6 +33496,12 @@ Object.defineProperty(exports, "deleteCredentialInstanceSecret", {
 		return deleteCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "deriveCredentialInstanceSlug", {
+	enumerable: true,
+	get: function() {
+		return deriveCredentialInstanceSlug;
+	}
+});
 Object.defineProperty(exports, "displayCredentialAppName", {
 	enumerable: true,
 	get: function() {
@@ -33247,6 +33706,12 @@ Object.defineProperty(exports, "readCredentialInstanceSecret", {
 		return readCredentialInstanceSecret;
 	}
 });
+Object.defineProperty(exports, "resolveExternalPlatformOrigin", {
+	enumerable: true,
+	get: function() {
+		return resolveExternalPlatformOrigin;
+	}
+});
 Object.defineProperty(exports, "resolveUniqueCredentialInstanceLabel", {
 	enumerable: true,
 	get: function() {
@@ -33278,4 +33743,4 @@ Object.defineProperty(exports, "validationErrorResponse", {
 	}
 });
 
-//# sourceMappingURL=dist-CXr-QoFY.cjs.map
+//# sourceMappingURL=dist-BOUnkJqi.cjs.map