@keystrokehq/platform 1.0.25 → 1.0.27

package/dist/{dist-CnDbAcWA.mjs → dist-DCDJn81K.mjs}

@@ -4956,7 +4956,7 @@ object({ reachable: boolean() });
 /** Org-custom app slug segment (the part after `{orgSlug}/`). Same format as project slugs. */
 const AppSlugSchema$1 = ProjectSlugSchema$1;
 /** Reads `PUBLIC_PLATFORM_URL` when explicitly set. */
-function resolveExplicitPublicPlatformOrigin(env = process.env) {
+function resolveExplicitPublicPlatformOrigin$1(env = process.env) {
 	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
 }
 const StoredRouteManifestSkillSchema$1 = object({
@@ -5002,13 +5002,17 @@ const storedRouteManifestEntryV2Schema$1 = discriminatedUnion("kind", [
 		endpoint: string(),
 		attachmentIds: array(string()),
 		moduleFile: string(),
+		/** sha256 of the trigger source file, baked at build time for overview change-detection. */
+		sourceHash: string().optional(),
 		attachmentSchemas: attachmentSchemasSchema$1,
 		attachmentMeta: attachmentMetaSchema$1.optional()
 	}),
 	object({
 		kind: literal("trigger-poll"),
 		attachmentId: string(),
+		attachmentIds: array(string()),
 		moduleFile: string(),
+		sourceHash: string().optional(),
 		schedule: string(),
 		name: string().optional(),
 		description: string().optional()
@@ -5023,7 +5027,9 @@ const storedRouteManifestEntryV2Schema$1 = discriminatedUnion("kind", [
 	object({
 		kind: literal("cron-schedule"),
 		attachmentId: string(),
+		attachmentIds: array(string()),
 		moduleFile: string(),
+		sourceHash: string().optional(),
 		schedule: string(),
 		name: string().optional(),
 		description: string().optional()
@@ -5177,7 +5183,9 @@ object({ patch: object({
 const AppCredentialFieldSchema$1 = object({
 	label: string().trim().min(1).optional(),
 	secret: boolean().optional(),
-	optional: boolean().optional()
+	optional: boolean().optional(),
+	description: string().trim().min(1).optional(),
+	default: string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema$1 = record(string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema$1).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -5194,6 +5202,13 @@ const AppAuthKindSchema$1 = _enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema$1 = _enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -5207,7 +5222,11 @@ object({
 	logo: string().url().optional(),
 	authKind: AppAuthKindSchema$1,
 	oauthScopes: array(OAuthScopeOptionSchema$1)
-}).extend({ source: AppSourceSchema$1 });
+}).extend({
+	source: AppSourceSchema$1,
+	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional()
+});
 const customAppNameSchema$1 = string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema$1 = ProjectSlugAvailabilityReasonSchema$1;
 object({
@@ -5247,6 +5266,7 @@ object({
 	oauthScopes: array(OAuthScopeOptionSchema$1),
 	source: AppSourceSchema$1,
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	createdAt: string().min(1),
 	updatedAt: string().min(1)
 });
@@ -5263,6 +5283,8 @@ object({
 	source: AppSourceSchema$1,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema$1.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema$1.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema$1.optional()
 });
@@ -5352,7 +5374,7 @@ object({
 });
 const credentialSecretValueSchema$1 = record(string(), unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget$1(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue$1(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -5367,7 +5389,9 @@ const CredentialTargetsFieldsSchema$1 = object({
 	createOrganizationCredential: boolean().default(false),
 	createUserProvidedCredential: boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: string().trim().min(1).optional()
+	label: string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
@@ -5378,14 +5402,20 @@ object({
 	status: _enum(["connected", "redirecting"]),
 	authorizeUrl: string().url().nullable()
 });
-CredentialTargetsFieldsSchema$1.extend({ app: string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema$1.extend({
+	app: string().trim().min(1),
+	value: credentialSecretValueSchema$1.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget$1(input)) addMissingCredentialTargetIssue$1(ctx);
 });
-object({
-	status: _enum(["redirecting"]),
+discriminatedUnion("status", [object({
+	status: literal("connected"),
+	connectionId: string().min(1)
+}), object({
+	status: literal("redirecting"),
 	authorizeUrl: string().url(),
-	connectionId: string()
-});
+	connectionId: string().min(1)
+})]);
 CredentialTargetsFieldsSchema$1.extend({
 	appId: string().min(1),
 	connectionKind: AppCredentialConnectionKindSchema$1,
@@ -5481,6 +5511,14 @@ object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: string().trim().min(1).optional()
 });
+object({
+	error: _enum([
+		"not_found",
+		"forbidden",
+		"mcp_execute_failed"
+	]),
+	message: string()
+});
 object({
 	type: _enum([
 		"org-deletion",
@@ -6084,6 +6122,18 @@ const TriggerRunTypeSchema$1 = _enum([
 	"webhook",
 	"poll"
 ]);
+const TriggerRunOutcomeSchema$1 = _enum([
+	"dispatched",
+	"skipped",
+	"failed"
+]);
+const TriggerRunReasonSchema$1 = _enum([
+	"filter_rejected",
+	"transform_undefined",
+	"invalid_payload",
+	"source_error",
+	"handler_error"
+]);
 const TriggerRunWorkflowSummarySchema$1 = object({
 	id: string(),
 	status: WorkflowRunStatusSchema$1,
@@ -6098,8 +6148,13 @@ const TriggerRunSummarySchema$1 = object({
 	triggerType: TriggerRunTypeSchema$1,
 	triggeredAt: string(),
 	sourcePath: string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema$1.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema$1.nullable()
+	outcome: TriggerRunOutcomeSchema$1,
+	reason: TriggerRunReasonSchema$1.nullable(),
+	detail: string().nullable(),
+	/** Workflow runs dispatched by this fire (fan-out → one per matched workflow attachment). */
+	workflowRuns: array(TriggerRunWorkflowSummarySchema$1),
+	/** Agent sessions dispatched by this fire (fan-out → one per matched agent attachment). */
+	agentSessions: array(TriggerRunAgentSessionSummarySchema$1)
 });
 const TriggerRunRecordSchema$1 = object({
 	id: string(),
@@ -6107,6 +6162,9 @@ const TriggerRunRecordSchema$1 = object({
 	attachmentSlug: string(),
 	triggerType: TriggerRunTypeSchema$1,
 	sourcePath: string().nullable(),
+	outcome: TriggerRunOutcomeSchema$1,
+	reason: TriggerRunReasonSchema$1.nullable(),
+	detail: string().nullable(),
 	payload: unknown().nullable(),
 	triggeredAt: string()
 });
@@ -6141,11 +6199,15 @@ const TriggerTypeSchema$1 = _enum([
 	"cron"
 ]);
 const TriggerTargetKindSchema$1 = _enum(["workflow", "agent"]);
+const TriggerStatusSchema$1 = _enum(["active", "disabled"]);
 object({ triggers: array(object({
 	slug: string(),
 	name: string().optional(),
 	description: string().optional(),
 	type: TriggerTypeSchema$1,
+	status: TriggerStatusSchema$1.optional(),
+	schedule: string().nullable().optional(),
+	sourcePath: string().optional(),
 	route: string().optional(),
 	webhookUrl: string().url().optional(),
 	targetKind: TriggerTargetKindSchema$1,
@@ -6153,6 +6215,128 @@ object({ triggers: array(object({
 	agentKey: string().optional()
 })) });
 object({ endpoint: string().min(1).optional() });
+const TriggerAssignmentSchema$1 = object({
+	kind: TriggerTargetKindSchema$1,
+	id: string(),
+	slug: string(),
+	name: string()
+});
+/** Status of the downstream run/session a dispatched fire produced. */
+const WorkspaceTriggerRunStatusSchema$1 = _enum([
+	"completed",
+	"running",
+	"failed"
+]);
+/**
+* Categorical reason a fire was recorded but produced no downstream run. These map
+* from the persisted `trigger_runs.reason` enum onto the labels the UI renders.
+*/
+const WorkspaceTriggerSkipReasonSchema$1 = _enum([
+	"filtered",
+	"no_new_data",
+	"transform_undefined"
+]);
+/**
+* A single downstream run/session a dispatched fire produced. A fan-out fire can
+* dispatch several of these (multiple workflows and/or agents off one source event).
+*/
+const WorkspaceTriggerRunTargetSchema$1 = discriminatedUnion("kind", [object({
+	kind: literal("workflow"),
+	runId: string(),
+	workflowId: string(),
+	status: WorkspaceTriggerRunStatusSchema$1,
+	name: string()
+}), object({
+	kind: literal("agent"),
+	sessionId: string(),
+	agentId: string(),
+	status: WorkspaceTriggerRunStatusSchema$1,
+	name: string()
+})]);
+/**
+* Outcome of a single trigger fire — drives the run-history row presentation. Every
+* recorded fire either dispatched one or more workflow/agent targets, was skipped by
+* trigger logic, or failed before any target ran.
+*/
+const WorkspaceTriggerRunOutcomeSchema$1 = discriminatedUnion("kind", [
+	object({
+		kind: literal("dispatched"),
+		targets: array(WorkspaceTriggerRunTargetSchema$1)
+	}),
+	object({
+		kind: literal("skipped"),
+		reason: WorkspaceTriggerSkipReasonSchema$1
+	}),
+	object({
+		kind: literal("failed"),
+		error: string()
+	})
+]);
+object({
+	/** `triggers.id` UUID for the trigger row. */
+	id: string(),
+	slug: string(),
+	name: string(),
+	description: string().nullable(),
+	type: TriggerTypeSchema$1,
+	status: TriggerStatusSchema$1,
+	projectId: string(),
+	projectName: string(),
+	/** Webhook ingress URL (webhook triggers only). */
+	webhookUrl: string().nullable(),
+	/** Cron expression or poll cadence label (cron/poll triggers only). */
+	schedule: string().nullable(),
+	/** Workflows + agents currently bound to this source. */
+	assignments: array(TriggerAssignmentSchema$1),
+	lastFiredAt: string().nullable(),
+	fireCount: number$1().int().nonnegative(),
+	createdAt: string()
+}).extend({ 
+/** Source module file path, relative to the project root. */
+sourcePath: string() });
+object({
+	items: array(object({
+		id: string(),
+		triggerType: TriggerTypeSchema$1,
+		triggeredAt: string(),
+		/** Poll/webhook source path or endpoint that produced the fire. */
+		sourcePath: string().nullable(),
+		outcome: WorkspaceTriggerRunOutcomeSchema$1
+	})),
+	nextCursor: string().nullable()
+});
+object({
+	path: string(),
+	contents: string()
+});
+object({
+	status: _enum([
+		"generating",
+		"ready",
+		"failed"
+	]),
+	markdown: string(),
+	hash: string(),
+	generatedAt: string().nullable(),
+	model: string()
+});
+/** Inputs the worker feeds the LLM to generate a trigger overview. */
+const TriggerOverviewInputSchema$1 = object({
+	name: string(),
+	description: string().nullable(),
+	type: TriggerTypeSchema$1,
+	schedule: string().nullable(),
+	sourcePath: string(),
+	sourceContents: string(),
+	assignments: array(TriggerAssignmentSchema$1)
+});
+object({
+	triggerId: string(),
+	projectId: string(),
+	triggerHash: string(),
+	model: string(),
+	input: TriggerOverviewInputSchema$1
+});
 const OrganizationMemberRoleSchema$1 = _enum([
 	"owner",
 	"admin",
@@ -6596,7 +6780,7 @@ function resolvePlatformWorkerToken(source = process.env) {
 }
 /** Platform API URL reachable from a project-server container. */
 function resolveWorkerPlatformUrl(source = process.env) {
-	const raw = source.PLATFORM_URL?.trim() ?? resolveExplicitPublicPlatformOrigin(source) ?? (source.NODE_ENV === "production" ? void 0 : "http://localhost:3002");
+	const raw = source.PLATFORM_URL?.trim() ?? resolveExplicitPublicPlatformOrigin$1(source) ?? (source.NODE_ENV === "production" ? void 0 : "http://localhost:3002");
 	if (!raw) return;
 	return rewriteLoopbackUrl(raw);
 }
@@ -7882,6 +8066,23 @@ function listenPortFromPublicUrl(value, fallback) {
 		return fallback;
 	}
 }
+/** Reads `PUBLIC_PLATFORM_URL` when explicitly set. */
+function resolveExplicitPublicPlatformOrigin(env = process.env) {
+	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
+}
+/**
+* Provider-facing platform origin (OAuth redirect URIs, webhook intake URLs).
+*
+* When the platform runs on localhost but is exposed through an HTTPS tunnel
+* (e.g. cloudflared), set `PUBLIC_PLATFORM_PROXY_URL` to the tunnel origin so external
+* providers get reachable HTTPS URLs while `PUBLIC_PLATFORM_URL` stays on localhost
+* for browser auth/CORS. Requires an explicit platform URL (no localhost fallback).
+*/
+function resolveExternalPlatformOrigin(env = process.env) {
+	const proxy = env.PUBLIC_PLATFORM_PROXY_URL?.replace(/\/$/, "");
+	if (proxy) return proxy;
+	return resolveExplicitPublicPlatformOrigin(env);
+}
 /** On-disk path under the project root (packed in deploy artifacts when present). */
 const ROUTE_MANIFEST_REL_PATH = "dist/.keystroke/route-manifest.json";
 const StoredRouteManifestSkillSchema = z.object({
@@ -7927,13 +8128,17 @@ const storedRouteManifestEntryV2Schema = z.discriminatedUnion("kind", [
 		endpoint: z.string(),
 		attachmentIds: z.array(z.string()),
 		moduleFile: z.string(),
+		/** sha256 of the trigger source file, baked at build time for overview change-detection. */
+		sourceHash: z.string().optional(),
 		attachmentSchemas: attachmentSchemasSchema,
 		attachmentMeta: attachmentMetaSchema.optional()
 	}),
 	z.object({
 		kind: z.literal("trigger-poll"),
 		attachmentId: z.string(),
+		attachmentIds: z.array(z.string()),
 		moduleFile: z.string(),
+		sourceHash: z.string().optional(),
 		schedule: z.string(),
 		name: z.string().optional(),
 		description: z.string().optional()
@@ -7948,7 +8153,9 @@ const storedRouteManifestEntryV2Schema = z.discriminatedUnion("kind", [
 	z.object({
 		kind: z.literal("cron-schedule"),
 		attachmentId: z.string(),
+		attachmentIds: z.array(z.string()),
 		moduleFile: z.string(),
+		sourceHash: z.string().optional(),
 		schedule: z.string(),
 		name: z.string().optional(),
 		description: z.string().optional()
@@ -8023,6 +8230,7 @@ function normalizeEntryToV2(entry) {
 			endpoint,
 			attachmentIds: entry.attachmentIds,
 			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
 			attachmentSchemas: entry.attachmentSchemas && typeof entry.attachmentSchemas === "object" ? entry.attachmentSchemas : {},
 			...entry.attachmentMeta && typeof entry.attachmentMeta === "object" ? { attachmentMeta: entry.attachmentMeta } : {}
 		};
@@ -8032,7 +8240,9 @@ function normalizeEntryToV2(entry) {
 		return {
 			kind: "trigger-poll",
 			attachmentId: entry.attachmentId,
+			attachmentIds: Array.isArray(entry.attachmentIds) ? entry.attachmentIds : [entry.attachmentId],
 			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
 			schedule: entry.schedule,
 			...typeof entry.name === "string" ? { name: entry.name } : {},
 			...typeof entry.description === "string" ? { description: entry.description } : {}
@@ -8053,7 +8263,9 @@ function normalizeEntryToV2(entry) {
 		return {
 			kind: "cron-schedule",
 			attachmentId: entry.attachmentId,
+			attachmentIds: Array.isArray(entry.attachmentIds) ? entry.attachmentIds : [entry.attachmentId],
 			moduleFile: entry.moduleFile,
+			...typeof entry.sourceHash === "string" ? { sourceHash: entry.sourceHash } : {},
 			schedule: entry.schedule,
 			...typeof entry.name === "string" ? { name: entry.name } : {},
 			...typeof entry.description === "string" ? { description: entry.description } : {}
@@ -8069,7 +8281,17 @@ function normalizeV2ManifestInput(value) {
 	return {
 		...raw,
 		entries: raw.entries.map((entry) => {
-			if (!entry || typeof entry !== "object" || entry.kind !== "agent") return entry;
+			if (!entry || typeof entry !== "object") return entry;
+			const kind = entry.kind;
+			if (kind === "trigger-poll" || kind === "cron-schedule" || kind === "trigger-webhook" || kind === "trigger-poll-group") {
+				const trigger = entry;
+				if (Array.isArray(trigger.attachmentIds)) return entry;
+				return {
+					...trigger,
+					attachmentIds: typeof trigger.attachmentId === "string" ? [trigger.attachmentId] : []
+				};
+			}
+			if (kind !== "agent") return entry;
 			const agent = entry;
 			if (Array.isArray(agent.appSlugs)) return entry;
 			const appSlugs = legacyAgentAppSlugs(agent);
@@ -8251,7 +8473,9 @@ z.object({ patch: z.object({
 const AppCredentialFieldSchema = z.object({
 	label: z.string().trim().min(1).optional(),
 	secret: z.boolean().optional(),
-	optional: z.boolean().optional()
+	optional: z.boolean().optional(),
+	description: z.string().trim().min(1).optional(),
+	default: z.string().optional()
 });
 /** Credential template keyed by vault field name. */
 const AppCredentialFieldsSchema = z.record(z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/), AppCredentialFieldSchema).refine((fields) => Object.keys(fields).length > 0, { message: "At least one credential field is required" }).refine((fields) => Object.values(fields).some((field) => field.optional !== true), { message: "At least one credential field must be required" });
@@ -8283,6 +8507,13 @@ const AppAuthKindSchema = z.enum([
 	"api_key",
 	"keystroke"
 ]);
+/** Composio auth scheme for API-key style connections. */
+const AppCredentialSchemeSchema = z.enum([
+	"API_KEY",
+	"BEARER_TOKEN",
+	"BASIC",
+	"BASIC_WITH_JWT"
+]);
 /**
 * Where app metadata and execution are sourced (e.g. native, composio, pipedream, custom).
 * Opaque string — cloud/hosted entrypoints choose values; keystroke stays provider-agnostic.
@@ -8296,7 +8527,11 @@ z.object({
 	logo: z.string().url().optional(),
 	authKind: AppAuthKindSchema,
 	oauthScopes: z.array(OAuthScopeOptionSchema)
-}).extend({ source: AppSourceSchema });
+}).extend({
+	source: AppSourceSchema,
+	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional()
+});
 const customAppNameSchema = z.string().trim().min(1, "Name is required");
 const AppSlugAvailabilityReasonSchema = ProjectSlugAvailabilityReasonSchema;
 const AppSlugAvailabilityResponseSchema = z.object({
@@ -8340,6 +8575,7 @@ z.object({
 	oauthScopes: z.array(OAuthScopeOptionSchema),
 	source: AppSourceSchema,
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	createdAt: z.string().min(1),
 	updatedAt: z.string().min(1)
 });
@@ -8360,6 +8596,8 @@ const AppCatalogEntrySchema = z.object({
 	source: AppSourceSchema,
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
+	/** Composio auth scheme when credentialFields are present. */
+	credentialScheme: AppCredentialSchemeSchema.optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -8457,12 +8695,12 @@ function deriveCredentialInstanceSlug(options) {
 	if (fromName) {
 		const base = normalizeOrganizationNameToSlugBase(fromName) || options.appSlug;
 		if (!taken.has(base)) return base;
-		let suffix = 2;
+		let suffix = 1;
 		while (taken.has(`${base}-${suffix}`)) suffix += 1;
 		return `${base}-${suffix}`;
 	}
 	if (!taken.has(options.appSlug)) return options.appSlug;
-	let suffix = 2;
+	let suffix = 1;
 	while (taken.has(`${options.appSlug}-${suffix}`)) suffix += 1;
 	return `${options.appSlug}-${suffix}`;
 }
@@ -8519,7 +8757,7 @@ const AppCredentialSummarySchema = z.object({
 });
 const credentialSecretValueSchema = z.record(z.string(), z.unknown()).refine((value) => Object.keys(value).length > 0, { message: "value must be a non-empty object" });
 function hasCredentialTarget(input) {
-	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential;
+	return input.projects.length > 0 || input.createOrganizationCredential || input.createUserProvidedCredential || Boolean(input.credentialInstanceId?.trim());
 }
 function addMissingCredentialTargetIssue(ctx, path = ["projects"]) {
 	ctx.addIssue({
@@ -8534,7 +8772,9 @@ const CredentialTargetsFieldsSchema = z.object({
 	createOrganizationCredential: z.boolean().default(false),
 	createUserProvidedCredential: z.boolean().default(false),
 	/** Display label for created credential instances (apps table / detail page). */
-	label: z.string().trim().min(1).optional()
+	label: z.string().trim().min(1).optional(),
+	/** When set, update this credential instance in place (reconnect) instead of creating a new row. */
+	credentialInstanceId: z.string().trim().min(1).optional()
 });
 CredentialTargetsFieldsSchema.extend({
 	appId: z.string().min(1),
@@ -8545,14 +8785,22 @@ z.object({
 	status: z.enum(["connected", "redirecting"]),
 	authorizeUrl: z.string().url().nullable()
 });
-CredentialTargetsFieldsSchema.extend({ app: z.string().trim().min(1) }).superRefine((input, ctx) => {
+CredentialTargetsFieldsSchema.extend({
+	app: z.string().trim().min(1),
+	value: credentialSecretValueSchema.optional()
+}).superRefine((input, ctx) => {
 	if (!hasCredentialTarget(input)) addMissingCredentialTargetIssue(ctx);
 });
-z.object({
-	status: z.enum(["redirecting"]),
+const connectedKeystrokeConnectionResultSchema = z.object({
+	status: z.literal("connected"),
+	connectionId: z.string().min(1)
+});
+const redirectingKeystrokeConnectionResultSchema = z.object({
+	status: z.literal("redirecting"),
 	authorizeUrl: z.string().url(),
-	connectionId: z.string()
+	connectionId: z.string().min(1)
 });
+z.discriminatedUnion("status", [connectedKeystrokeConnectionResultSchema, redirectingKeystrokeConnectionResultSchema]);
 /** Request body for `POST /api/credentials` (manual api-key fan-out). */
 const CreateCredentialsRequestSchema = CredentialTargetsFieldsSchema.extend({
 	appId: z.string().min(1),
@@ -8656,6 +8904,15 @@ z.object({
 	/** Tool/step consumer id for assignment lookup (action slug or workflow step correlation id). */
 	consumerId: z.string().trim().min(1).optional()
 });
+const ExecuteKeystrokeToolErrorCodeSchema = z.enum([
+	"not_found",
+	"forbidden",
+	"mcp_execute_failed"
+]);
+z.object({
+	error: ExecuteKeystrokeToolErrorCodeSchema,
+	message: z.string()
+});
 const TeamRequestTypeSchema = z.enum([
 	"org-deletion",
 	"contact",
@@ -9288,6 +9545,18 @@ const TriggerRunTypeSchema = z.enum([
 	"webhook",
 	"poll"
 ]);
+const TriggerRunOutcomeSchema = z.enum([
+	"dispatched",
+	"skipped",
+	"failed"
+]);
+const TriggerRunReasonSchema = z.enum([
+	"filter_rejected",
+	"transform_undefined",
+	"invalid_payload",
+	"source_error",
+	"handler_error"
+]);
 const TriggerRunWorkflowSummarySchema = z.object({
 	id: z.string(),
 	status: WorkflowRunStatusSchema,
@@ -9302,8 +9571,13 @@ const TriggerRunSummarySchema = z.object({
 	triggerType: TriggerRunTypeSchema,
 	triggeredAt: z.string(),
 	sourcePath: z.string().nullable(),
-	workflowRun: TriggerRunWorkflowSummarySchema.nullable(),
-	agentSession: TriggerRunAgentSessionSummarySchema.nullable()
+	outcome: TriggerRunOutcomeSchema,
+	reason: TriggerRunReasonSchema.nullable(),
+	detail: z.string().nullable(),
+	/** Workflow runs dispatched by this fire (fan-out → one per matched workflow attachment). */
+	workflowRuns: z.array(TriggerRunWorkflowSummarySchema),
+	/** Agent sessions dispatched by this fire (fan-out → one per matched agent attachment). */
+	agentSessions: z.array(TriggerRunAgentSessionSummarySchema)
 });
 const TriggerRunRecordSchema = z.object({
 	id: z.string(),
@@ -9311,10 +9585,13 @@ const TriggerRunRecordSchema = z.object({
 	attachmentSlug: z.string(),
 	triggerType: TriggerRunTypeSchema,
 	sourcePath: z.string().nullable(),
+	outcome: TriggerRunOutcomeSchema,
+	reason: TriggerRunReasonSchema.nullable(),
+	detail: z.string().nullable(),
 	payload: z.unknown().nullable(),
 	triggeredAt: z.string()
 });
-z.object({
+const TriggerRunListQuerySchema = z.object({
 	limit: z.coerce.number().int().min(1).max(100).optional().default(20),
 	cursor: z.string().min(1).optional(),
 	triggerType: TriggerRunTypeSchema.optional()
@@ -9345,11 +9622,15 @@ const TriggerTypeSchema = z.enum([
 	"cron"
 ]);
 const TriggerTargetKindSchema = z.enum(["workflow", "agent"]);
+const TriggerStatusSchema = z.enum(["active", "disabled"]);
 const TriggerListItemSchema = z.object({
 	slug: z.string(),
 	name: z.string().optional(),
 	description: z.string().optional(),
 	type: TriggerTypeSchema,
+	status: TriggerStatusSchema.optional(),
+	schedule: z.string().nullable().optional(),
+	sourcePath: z.string().optional(),
 	route: z.string().optional(),
 	webhookUrl: z.string().url().optional(),
 	targetKind: TriggerTargetKindSchema,
@@ -9358,6 +9639,136 @@ const TriggerListItemSchema = z.object({
 });
 z.object({ triggers: z.array(TriggerListItemSchema) });
 z.object({ endpoint: z.string().min(1).optional() });
+const TriggerAssignmentSchema = z.object({
+	kind: TriggerTargetKindSchema,
+	id: z.string(),
+	slug: z.string(),
+	name: z.string()
+});
+/** Status of the downstream run/session a dispatched fire produced. */
+const WorkspaceTriggerRunStatusSchema = z.enum([
+	"completed",
+	"running",
+	"failed"
+]);
+/**
+* Categorical reason a fire was recorded but produced no downstream run. These map
+* from the persisted `trigger_runs.reason` enum onto the labels the UI renders.
+*/
+const WorkspaceTriggerSkipReasonSchema = z.enum([
+	"filtered",
+	"no_new_data",
+	"transform_undefined"
+]);
+/**
+* A single downstream run/session a dispatched fire produced. A fan-out fire can
+* dispatch several of these (multiple workflows and/or agents off one source event).
+*/
+const WorkspaceTriggerRunTargetSchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("workflow"),
+	runId: z.string(),
+	workflowId: z.string(),
+	status: WorkspaceTriggerRunStatusSchema,
+	name: z.string()
+}), z.object({
+	kind: z.literal("agent"),
+	sessionId: z.string(),
+	agentId: z.string(),
+	status: WorkspaceTriggerRunStatusSchema,
+	name: z.string()
+})]);
+/**
+* Outcome of a single trigger fire — drives the run-history row presentation. Every
+* recorded fire either dispatched one or more workflow/agent targets, was skipped by
+* trigger logic, or failed before any target ran.
+*/
+const WorkspaceTriggerRunOutcomeSchema = z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("dispatched"),
+		targets: z.array(WorkspaceTriggerRunTargetSchema)
+	}),
+	z.object({
+		kind: z.literal("skipped"),
+		reason: WorkspaceTriggerSkipReasonSchema
+	}),
+	z.object({
+		kind: z.literal("failed"),
+		error: z.string()
+	})
+]);
+const WorkspaceTriggerSummarySchema = z.object({
+	/** `triggers.id` UUID for the trigger row. */
+	id: z.string(),
+	slug: z.string(),
+	name: z.string(),
+	description: z.string().nullable(),
+	type: TriggerTypeSchema,
+	status: TriggerStatusSchema,
+	projectId: z.string(),
+	projectName: z.string(),
+	/** Webhook ingress URL (webhook triggers only). */
+	webhookUrl: z.string().nullable(),
+	/** Cron expression or poll cadence label (cron/poll triggers only). */
+	schedule: z.string().nullable(),
+	/** Workflows + agents currently bound to this source. */
+	assignments: z.array(TriggerAssignmentSchema),
+	lastFiredAt: z.string().nullable(),
+	fireCount: z.number().int().nonnegative(),
+	createdAt: z.string()
+});
+const WorkspaceTriggerDetailSchema = WorkspaceTriggerSummarySchema.extend({ 
+/** Source module file path, relative to the project root. */
+sourcePath: z.string() });
+const WorkspaceTriggerListResponseSchema = z.array(WorkspaceTriggerSummarySchema);
+const WorkspaceTriggerRunSummarySchema = z.object({
+	id: z.string(),
+	triggerType: TriggerTypeSchema,
+	triggeredAt: z.string(),
+	/** Poll/webhook source path or endpoint that produced the fire. */
+	sourcePath: z.string().nullable(),
+	outcome: WorkspaceTriggerRunOutcomeSchema
+});
+const WorkspaceTriggerRunListResponseSchema = z.object({
+	items: z.array(WorkspaceTriggerRunSummarySchema),
+	nextCursor: z.string().nullable()
+});
+const WorkspaceTriggerFileSchema = z.object({
+	path: z.string(),
+	contents: z.string()
+});
+/** Default gateway model for trigger overviews — a cheap model, same as session-title generation. */
+const DEFAULT_TRIGGER_OVERVIEW_MODEL = "deepseek/deepseek-v4-flash";
+/** Whether the LLM overview is still being produced, finished, or errored. */
+const WorkspaceTriggerOverviewStatusSchema = z.enum([
+	"generating",
+	"ready",
+	"failed"
+]);
+/** LLM-generated markdown overview envelope served to the web dashboard. */
+const WorkspaceTriggerOverviewSchema = z.object({
+	status: WorkspaceTriggerOverviewStatusSchema,
+	markdown: z.string(),
+	hash: z.string(),
+	generatedAt: z.string().nullable(),
+	model: z.string()
+});
+/** Inputs the worker feeds the LLM to generate a trigger overview. */
+const TriggerOverviewInputSchema = z.object({
+	name: z.string(),
+	description: z.string().nullable(),
+	type: TriggerTypeSchema,
+	schedule: z.string().nullable(),
+	sourcePath: z.string(),
+	sourceContents: z.string(),
+	assignments: z.array(TriggerAssignmentSchema)
+});
+z.object({
+	triggerId: z.string(),
+	projectId: z.string(),
+	triggerHash: z.string(),
+	model: z.string(),
+	input: TriggerOverviewInputSchema
+});
 const OrganizationMemberRoleSchema = z.enum([
 	"owner",
 	"admin",
@@ -32414,6 +32825,6 @@ function minioStoragePlugin(options = {}) {
 	};
 }
 //#endregion
-export { HistoryRunListQuerySchema as $, UpdateProjectSettingsRequestSchema as $t, AgentSummarySchema as A, validateCredentialValueAgainstFields as An, ProjectSettingsResponseSchema as At, CreateCustomAppResponseSchema as B, SlugAvailabilityResponseSchema as Bt, setCredentialInstanceSecret as C, normalizeUserPreferences as Cn, PresignOrgLogoResponseSchema as Ct, AgentMemoryFileSummarySchema as D, parseStoredRouteManifest as Dn, PresignUserAvatarResponseSchema as Dt, ActiveOrganizationResponseSchema as E, parseAppSlug as En, PresignUserAvatarRequestSchema as Et, CreateApiKeyRequestSchema as F, __require as Fn, RecentResourceSchema as Ft, CreateProjectResponseSchema as G, SubmitTeamRequestResponseSchema as Gt, CreateOrganizationResponseSchema as H, SubmitMarketingContactRequestSchema as Ht, CreateApiKeyResponseSchema as I, __toESM as In, SkillSummaryDetailResponseSchema as It, ErrorResponseSchema as J, UpdateOrganizationMemberResponseSchema as Jt, DeclineOrganizationInvitationResponseSchema as K, UpdateCredentialRequestSchema as Kt, CreateCredentialsRequestSchema as L, SkillSummaryListResponseSchema as Lt, AppSlugAvailabilityQuerySchema as M, defaultHostingPlugin as Mn, ProjectSlugAvailabilityResponseSchema as Mt, AppSlugAvailabilityResponseSchema as N, pingProjectTarget as Nn, ProjectSourceResourcesSchema as Nt, AgentSummaryDetailResponseSchema as O, projectFileId as On, ProjectReachabilityResponseSchema as Ot, CompleteProjectArtifactResponseSchema as P, __commonJSMin as Pn, RecentResourceListResponseSchema as Pt, HistoryRunDetailResponseSchema as Q, UpdateProjectRequestSchema as Qt, CreateCredentialsResponseSchema as R, SkillSummarySchema as Rt, readCredentialInstanceSecret as S, mergeUserPreferences as Sn, PresignOrgLogoRequestSchema as St, AcceptOrganizationInvitationResponseSchema as T, organizationSlugErrorCodeFromMessage as Tn, PresignProjectSourceResponseSchema as Tt, CreateProjectArtifactResponseSchema as U, SubmitMarketingContactResponseSchema as Ut, CreateOrganizationRequestSchema as V, StoredProjectSourceManifestSchema as Vt, CreateProjectRequestSchema as W, SubmitTeamRequestRequestSchema as Wt, GetCustomAppResponseSchema as X, UpdateProjectMemberRequestSchema as Xt, GetCredentialResponseSchema as Y, UpdateOrganizationRequestSchema as Yt, HistoryRunCancelResponseSchema as Z, UpdateProjectMemberResponseSchema as Zt, publicKeystrokeAssetsObjectUrl as _, mapProjectArtifact as _n, ListProjectsResponseSchema as _t, isKeystrokeAssetsAvatarPublicUrl as a, UserPreferencesSchema as an, ListAgentMemoryFilesResponseSchema as at, defaultSchedulerPlugin as b, mapProjectSettings as bn, PLATFORM_RESOURCE_UNSUPPORTED_TEXT as bt, isStorageBucketNotFoundError as c, WorkflowSummarySchema as cn, ListAppsResponseSchema as ct, keystrokeAssetsAvatarKeyFromPublicUrl as d, buildCredentialInstanceLabel as dn, ListOrganizationMembersResponseSchema as dt, UploadProjectSourceManifestRequestSchema as en, HistoryRunListResponseSchema as et, keystrokeAssetsOrgLogoKeyFromPublicUrl as f, displayCredentialAppName as fn, ListOrganizationsResponseSchema as ft, projectSourceBlobKey as g, mapProject as gn, ListProjectMetricsResponseSchema as gt, projectArtifactKey as h, mapOrganizationMember as hn, ListProjectMembersResponseSchema as ht, extractRouteManifestFromArtifact as i, UserPreferencesPatchSchema as in, InviteProjectMembersResponseSchema as it, AgentWorkspaceFileSummarySchema as j, validationErrorResponse as jn, ProjectSlugAvailabilityQuerySchema as jt, AgentSummaryListResponseSchema as k, resolveUniqueCredentialInstanceLabel as kn, ProjectResponseSchema as kt, isStorageNotFoundError as l, agentMemoryFileId as ln, ListCredentialsResponseSchema as lt, orgLogoStorageKey as m, mapOrganizationInvitation as mn, ListProjectFilesResponseSchema as mt, createAssetsStorageClient as n, UserAvatarPatchSchema as nn, InviteOrganizationMembersResponseSchema as nt, isKeystrokeAssetsOrgLogoPublicUrl as o, WorkflowSummaryDetailResponseSchema as on, ListAgentWorkspaceFilesResponseSchema as ot, minioStoragePlugin as p, listenPortFromPublicUrl as pn, ListProjectDeploymentsResponseSchema as pt, DownloadActiveProjectArtifactResponseSchema as q, UpdateOrganizationMemberRequestSchema as qt, ensureKeystrokeAssetsBucket as r, UserAvatarSchema as rn, InviteProjectMembersRequestSchema as rt, isOrgLogoStorageKey as s, WorkflowSummaryListResponseSchema as sn, ListApiKeysResponseSchema as st, RouteManifestNotFoundError as t, UploadProjectSourceResponseSchema as tn, InviteOrganizationMembersRequestSchema as tt, isUserAvatarStorageKey as u, agentWorkspaceFileId as un, ListOrganizationInvitationsResponseSchema as ut, userAvatarStorageKey as v, mapProjectDeployment as vn, OrganizationSidebarBrandingPatchSchema as vt, ACTIVE_ORG_HEADER as w, organizationInvitationAcceptPath as wn, PresignProjectSourceRequestSchema as wt, deleteCredentialInstanceSecret as x, mapUserOrganization as xn, PROJECT_SLUG_TAKEN_MESSAGE as xt, createJobQueue as y, mapProjectMember as yn, OrganizationSidebarBrandingSchema as yt, CreateCustomAppRequestSchema as z, SlugAvailabilityQuerySchema as zt };
+export { HistoryRunDetailResponseSchema as $, UpdateProjectMemberResponseSchema as $t, AgentSummarySchema as A, mergeUserPreferences as An, ProjectResponseSchema as At, CreateCustomAppResponseSchema as B, validationErrorResponse as Bn, SlugAvailabilityQuerySchema as Bt, setCredentialInstanceSecret as C, mapOrganizationMember as Cn, PresignOrgLogoRequestSchema as Ct, AgentMemoryFileSummarySchema as D, mapProjectMember as Dn, PresignUserAvatarRequestSchema as Dt, ActiveOrganizationResponseSchema as E, mapProjectDeployment as En, PresignProjectSourceResponseSchema as Et, CreateApiKeyRequestSchema as F, parseStoredRouteManifest as Fn, RecentResourceListResponseSchema as Ft, CreateProjectResponseSchema as G, __toESM as Gn, SubmitTeamRequestRequestSchema as Gt, CreateOrganizationResponseSchema as H, pingProjectTarget as Hn, StoredProjectSourceManifestSchema as Ht, CreateApiKeyResponseSchema as I, projectFileId as In, RecentResourceSchema as It, DownloadActiveProjectArtifactResponseSchema as J, UpdateCredentialRequestSchema as Jt, DEFAULT_TRIGGER_OVERVIEW_MODEL as K, SubmitTeamRequestResponseSchema as Kt, CreateCredentialsRequestSchema as L, resolveExternalPlatformOrigin as Ln, SkillSummaryDetailResponseSchema as Lt, AppSlugAvailabilityQuerySchema as M, organizationInvitationAcceptPath as Mn, ProjectSlugAvailabilityQuerySchema as Mt, AppSlugAvailabilityResponseSchema as N, organizationSlugErrorCodeFromMessage as Nn, ProjectSlugAvailabilityResponseSchema as Nt, AgentSummaryDetailResponseSchema as O, mapProjectSettings as On, PresignUserAvatarResponseSchema as Ot, CompleteProjectArtifactResponseSchema as P, parseAppSlug as Pn, ProjectSourceResourcesSchema as Pt, HistoryRunCancelResponseSchema as Q, UpdateProjectMemberRequestSchema as Qt, CreateCredentialsResponseSchema as R, resolveUniqueCredentialInstanceLabel as Rn, SkillSummaryListResponseSchema as Rt, readCredentialInstanceSecret as S, mapOrganizationInvitation as Sn, PROJECT_SLUG_TAKEN_MESSAGE as St, AcceptOrganizationInvitationResponseSchema as T, mapProjectArtifact as Tn, PresignProjectSourceRequestSchema as Tt, CreateProjectArtifactResponseSchema as U, __commonJSMin as Un, SubmitMarketingContactRequestSchema as Ut, CreateOrganizationRequestSchema as V, defaultHostingPlugin as Vn, SlugAvailabilityResponseSchema as Vt, CreateProjectRequestSchema as W, __require as Wn, SubmitMarketingContactResponseSchema as Wt, GetCredentialResponseSchema as X, UpdateOrganizationMemberResponseSchema as Xt, ErrorResponseSchema as Y, UpdateOrganizationMemberRequestSchema as Yt, GetCustomAppResponseSchema as Z, UpdateOrganizationRequestSchema as Zt, publicKeystrokeAssetsObjectUrl as _, agentWorkspaceFileId as _n, ListProjectMetricsResponseSchema as _t, isKeystrokeAssetsAvatarPublicUrl as a, UserAvatarSchema as an, InviteProjectMembersResponseSchema as at, defaultSchedulerPlugin as b, displayCredentialAppName as bn, OrganizationSidebarBrandingSchema as bt, isStorageBucketNotFoundError as c, WorkflowSummaryDetailResponseSchema as cn, ListApiKeysResponseSchema as ct, keystrokeAssetsAvatarKeyFromPublicUrl as d, WorkspaceTriggerDetailSchema as dn, ListOrganizationInvitationsResponseSchema as dt, UpdateProjectRequestSchema as en, HistoryRunListQuerySchema as et, keystrokeAssetsOrgLogoKeyFromPublicUrl as f, WorkspaceTriggerFileSchema as fn, ListOrganizationMembersResponseSchema as ft, projectSourceBlobKey as g, agentMemoryFileId as gn, ListProjectMembersResponseSchema as gt, projectArtifactKey as h, WorkspaceTriggerRunListResponseSchema as hn, ListProjectFilesResponseSchema as ht, extractRouteManifestFromArtifact as i, UserAvatarPatchSchema as in, InviteProjectMembersRequestSchema as it, AgentWorkspaceFileSummarySchema as j, normalizeUserPreferences as jn, ProjectSettingsResponseSchema as jt, AgentSummaryListResponseSchema as k, mapUserOrganization as kn, ProjectReachabilityResponseSchema as kt, isStorageNotFoundError as l, WorkflowSummaryListResponseSchema as ln, ListAppsResponseSchema as lt, orgLogoStorageKey as m, WorkspaceTriggerOverviewSchema as mn, ListProjectDeploymentsResponseSchema as mt, createAssetsStorageClient as n, UploadProjectSourceManifestRequestSchema as nn, InviteOrganizationMembersRequestSchema as nt, isKeystrokeAssetsOrgLogoPublicUrl as o, UserPreferencesPatchSchema as on, ListAgentMemoryFilesResponseSchema as ot, minioStoragePlugin as p, WorkspaceTriggerListResponseSchema as pn, ListOrganizationsResponseSchema as pt, DeclineOrganizationInvitationResponseSchema as q, TriggerRunListQuerySchema as qt, ensureKeystrokeAssetsBucket as r, UploadProjectSourceResponseSchema as rn, InviteOrganizationMembersResponseSchema as rt, isOrgLogoStorageKey as s, UserPreferencesSchema as sn, ListAgentWorkspaceFilesResponseSchema as st, RouteManifestNotFoundError as t, UpdateProjectSettingsRequestSchema as tn, HistoryRunListResponseSchema as tt, isUserAvatarStorageKey as u, WorkflowSummarySchema as un, ListCredentialsResponseSchema as ut, userAvatarStorageKey as v, buildCredentialInstanceLabel as vn, ListProjectsResponseSchema as vt, ACTIVE_ORG_HEADER as w, mapProject as wn, PresignOrgLogoResponseSchema as wt, deleteCredentialInstanceSecret as x, listenPortFromPublicUrl as xn, PLATFORM_RESOURCE_UNSUPPORTED_TEXT as xt, createJobQueue as y, deriveCredentialInstanceSlug as yn, OrganizationSidebarBrandingPatchSchema as yt, CreateCustomAppRequestSchema as z, validateCredentialValueAgainstFields as zn, SkillSummarySchema as zt };
 
-//# sourceMappingURL=dist-CnDbAcWA.mjs.map
+//# sourceMappingURL=dist-DCDJn81K.mjs.map