diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/.gitignore b/apps/sarah-s-app-fri-aug-21-11-53-20-am/.gitignore
new file mode 100644
index 0000000..6dde684
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/.gitignore
@@ -0,0 +1,28 @@
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+
+# Environment variables
+.env
+.env.local
+.env.*.local
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/AGENTS.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/AGENTS.md
new file mode 100644
index 0000000..a0cd71d
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/AGENTS.md
@@ -0,0 +1,44 @@
+# sarah-s-app-fri-aug-21-11-53-20-am
+
+This is a Datadog App scaffolded with `npm create @datadog/apps`.
+
+Datadog Apps are React + TypeScript applications bundled by Vite and embedded in the Datadog product experience. Frontend code runs in the browser. Backend functions live in `*.backend.*` files and execute through Datadog's managed runtime.
+
+## DRUIDS components
+
+This app uses the published `@datadog/druids` package. In scaffolded apps, import components from `@datadog/druids/[category]/[Component]`; do not import private web-ui paths like `@druids/ui/...`.
+
+- The scaffold already wraps the app in `DruidsEnvironment` and imports `@datadog/druids/styles.css` at the React root. Keep that setup in place if you restructure the root.
+- Discover available components by browsing the installed package. Treat the `exports` map in `node_modules/@datadog/druids/package.json` as the source of truth for public entry points, and explore the corresponding category directories under `node_modules/@datadog/druids/dist` instead of relying on a hard-coded component list.
+- After choosing an exported component, inspect its TypeScript definitions under `node_modules/@datadog/druids/dist/**/*.d.mts` before inventing props or imports. For icons, only use entry points that are present in the installed package.
+- Start with the [DRUIDS docs](https://druids.datadoghq.com/), especially [Foundations](https://druids.datadoghq.com/foundations), [Spacing & Layout](https://druids.datadoghq.com/foundations/spacing-and-layout), [Typography](https://druids.datadoghq.com/foundations/typography), and [Components](https://druids.datadoghq.com/components). The docs cover the full internal DRUIDS library; the public `@datadog/druids` package exposes only a subset for Datadog Apps.
+- Use the docs after confirming the local API to understand design intent, layout guidance, examples, and component selection tradeoffs.
+- Prefer appropriate DRUIDS layout and typography components over ad hoc HTML wrappers or inline CSS. Use component props and design tokens for spacing, size, and variants.
+
+## Read relevant guides
+
+- For embedded Datadog app context, routing, navigation, browser storage, or parent-page constraints, read `docs/agents/runtime-context.md`.
+- For writing backend functions in `*.backend.ts` or `*.backend.js` files, or for calling backend functions from frontend code, read `docs/agents/backend-functions.md`.
+- For local development, auth, deploy, publish, `DD_APPS_PUBLISH`, or deploy troubleshooting, read `docs/agents/build-upload-auth.md`.
+- For GitHub Actions CI/CD setup, read `docs/agents/cicd.md`.
+- For choosing between DDSQL and Action Catalog, configuring Connections, or querying app datastores, read `docs/agents/data.md`.
+- For triggering or polling a Workflow Automation workflow from a backend function, read `docs/agents/workflow-automation.md`.
+- For upgrading `@datadog/vite-plugin` or `@datadog/action-catalog`, read `docs/agents/upgrading.md`.
+
+## General rules
+
+- Keep privileged Datadog API calls, third-party calls, and secret-dependent work in backend functions.
+- Do not hardcode API keys, app keys, OAuth tokens, passwords, or third-party credentials.
+- Set the `apps.name` and `apps.description` fields in the `datadogVitePlugin` configuration in `vite.config.ts` to concise, user-facing values that describe the app.
+- Prefer the generated npm scripts in `package.json`; this scaffold uses npm.
+- Never change `apps.identifier` in `vite.config.ts`. It is this app's permanent identity, not the app's UUID from App Builder — changing it makes the next upload create a duplicate app.
+- Before inventing package imports or component props, inspect installed package exports and TypeScript definitions.
+
+## Broader Datadog Apps guidance
+
+- For scaffolding a new app from scratch, use the Datadog Apps agent skill when it is available.
+- Use Playwright when available for browser validation, including screenshots for visual design changes.
+- Use the Datadog `pup` CLI (https://github.com/DataDog/pup) when available for Datadog API inspection and troubleshooting.
+- Use Datadog MCP tools when available for Datadog-specific lookup, diagnostics, or API-backed workflows.
+
+Primary docs: https://docs.datadoghq.com/actions/datadog_apps/
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/CLAUDE.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/CLAUDE.md
new file mode 100644
index 0000000..43c994c
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/CLAUDE.md
@@ -0,0 +1 @@
+@AGENTS.md
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/backend-functions.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/backend-functions.md
new file mode 100644
index 0000000..cf5f067
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/backend-functions.md
@@ -0,0 +1,91 @@
+# Backend Functions
+
+Backend functions are Datadog-managed server-side functions. They do not ship to the browser.
+
+## File and export conventions
+
+- Backend files match `*.backend.ts`, `*.backend.js`, `*.backend.tsx`, or `*.backend.jsx`.
+- Export named async functions from backend files.
+- Frontend code imports backend functions like normal ES modules.
+- The Datadog Vite plugin rewrites backend imports into proxy calls at build time.
+
+## Runtime behavior
+
+- Local development bundles backend functions through Vite middleware and executes them through Datadog preview infrastructure.
+- Deployed apps call backend functions through the embedded Datadog runtime bridge.
+- Backend functions do not run in the user's local Node.js process.
+
+## Backend helper library
+
+Datadog provides `@datadog/apps-backend`, a library of tools to make backend function development easier. Check it out when working on backend functions.
+
+## Security rules
+
+- Keep privileged Datadog API calls, third-party calls, and secret-dependent work in backend functions.
+- Never hardcode API keys, app keys, OAuth tokens, passwords, private keys, or third-party credentials.
+- Frontend code should not call Datadog APIs or other privileged services directly.
+- Validate frontend inputs before using them in backend function calls.
+
+## Action Catalog
+
+Prefer `@datadog/action-catalog` for supported Datadog, cloud, SaaS, and HTTP workflows. Check the installed package exports before generating imports; do not invent subpaths.
+
+```ts
+// src/listHosts.backend.ts
+import { listHosts, type ListHostsResponse } from '@datadog/action-catalog/dd/hosts';
+
+export async function getHosts(filter?: string): Promise<ListHostsResponse> {
+    return listHosts({
+        inputs: {
+            filter: filter ?? '*',
+            count: 10,
+            include_hosts_metadata: true,
+        },
+    });
+}
+```
+
+```tsx
+// src/App.tsx
+import { useQuery } from '@tanstack/react-query';
+
+import { getHosts } from './listHosts.backend';
+
+function HostCount() {
+    const hostsQuery = useQuery({
+        queryKey: ['hosts', '*'],
+        queryFn: () => getHosts('*'),
+    });
+
+    if (hostsQuery.isLoading) {
+        return <span>Loading hosts...</span>;
+    }
+
+    if (hostsQuery.isError) {
+        return <span>Unable to load hosts.</span>;
+    }
+
+    return <span>{hostsQuery.data?.host_list?.length ?? 0}</span>;
+}
+```
+
+Always wrap backend function proxies before passing them to React Query or
+another framework callback. Do not use `queryFn: getHosts`: React Query calls
+its callback with a context object containing an `AbortSignal`, and the
+embedded app bridge cannot structured-clone that object for a backend
+invocation. Pass only the cloneable arguments the backend function declares:
+
+```tsx
+// Correct
+queryFn: () => getHosts('*'),
+
+// Incorrect
+queryFn: getHosts,
+```
+
+The generated app wraps React in `QueryClientProvider` in `src/main.tsx`. Prefer React Query for backend function calls that need loading, error, caching, retry, refetch, or deduplication behavior.
+
+## Broader data workflows
+
+- For choosing between DDSQL and Action Catalog, configuring Connections, or querying app datastores, read `docs/agents/data.md`.
+- For triggering or polling a Workflow Automation workflow, read `docs/agents/workflow-automation.md`.
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/build-upload-auth.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/build-upload-auth.md
new file mode 100644
index 0000000..9b125b3
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/build-upload-auth.md
@@ -0,0 +1,156 @@
+# Build, Auth, Deploy, And Publish
+
+This scaffold uses npm. Prefer the scripts in `package.json` over ad hoc commands.
+
+## Scripts
+
+- `npm run dev` — start the local Vite dev server.
+- `npm run typecheck` — TypeScript check without emitting files. Use this for credential-free validation.
+- `npm run lint` / `npm run lint:fix` — run ESLint.
+- `npm run build` — production build (does not deploy by default).
+- `npm run deploy` — build, upload, and publish the app live.
+- `npm run publish` — publish the most recently uploaded version without rebuilding.
+
+## App identity (do not change)
+
+- `apps.identifier` in `vite.config.ts` is this app's permanent identity. It was generated once when the project was scaffolded.
+- Every upload updates the app that matches this identifier. **Never change it.** Changing it — including pasting the app's UUID from App Builder into it — makes the next upload create a brand-new duplicate app instead of updating the existing one.
+- `apps.identifier` is NOT the app UUID shown in App Builder. The UUID is assigned by Datadog; the identifier is a stable local key. Do not copy one into the other.
+
+## Auth
+
+Apps use **OAuth by default**. On first `npm run dev`, a browser window opens for Datadog login and the token is cached in the system keyring. No credentials needed in advance.
+
+**API key fallback** — use when OAuth isn't available (headless CI, restricted networks):
+
+1. Confirm `.env.local` is gitignored — the scaffold includes `*.local` in `.gitignore` by default.
+2. Create `.env.local` at the project root with placeholders:
+
+```
+DD_API_KEY=REPLACE_WITH_YOUR_API_KEY
+DD_APP_KEY=REPLACE_WITH_YOUR_APP_KEY
+```
+
+3. Open the file for editing — do not ask users to paste key values into the conversation:
+
+```bash
+cursor .env.local 2>/dev/null || code .env.local 2>/dev/null || open .env.local
+```
+
+4. Direct the user to replace the placeholders. Keys are at:
+   - API keys: `https://app.datadoghq.com/organization-settings/api-keys`
+   - Application keys: `https://app.datadoghq.com/organization-settings/application-keys` — the key needs **two scopes**: **Actions API Access** and **Apps**
+
+Vite reads `.env.local` automatically once real values are in place.
+
+**`.env.local` not being picked up** — the scaffolded `vite.config.ts` reads credentials via `process.env`, which does not include `.env.local` at config evaluation time. Fix with Vite's `loadEnv`:
+
+```ts
+import { defineConfig, loadEnv } from 'vite';
+
+export default defineConfig(({ mode }) => {
+    const env = loadEnv(mode, process.cwd(), '');
+    return {
+        plugins: [datadogVitePlugin({ auth: { apiKey: env.DD_API_KEY, appKey: env.DD_APP_KEY } })],
+    };
+});
+```
+
+Restart the dev server after updating `vite.config.ts`.
+
+## Non-US1 site
+
+Set `auth.site` in `vite.config.ts` so local dev and deploys target the right site:
+
+```ts
+datadogVitePlugin({ auth: { site: '<YOUR_DATADOG_SITE>' } });
+```
+
+## Deploy
+
+Build, upload, and publish in one command:
+
+```bash
+npm run deploy
+```
+
+With API keys (CI environments):
+
+```bash
+export DD_API_KEY="<YOUR_API_KEY>"
+export DD_APP_KEY="<YOUR_APPLICATION_KEY>"
+npm run deploy
+```
+
+A successful deploy prints a Datadog URL for the app.
+
+**Deploy without publishing** — upload as a draft without going live:
+
+```bash
+npm run deploy -- --no-publish
+# or
+DD_APPS_PUBLISH=false npm run deploy
+```
+
+`DD_APPS_PUBLISH=false` is useful in CI when publishing is a separate step.
+
+## Publish
+
+Publish the most recently uploaded version without rebuilding:
+
+```bash
+npm run publish
+```
+
+Publish a specific version by ID:
+
+```bash
+npm run publish -- --version <version-id>
+```
+
+When using `--version` without a cache file, set `DD_APPS_IDENTIFIER` to the app's identifier.
+
+**Older scaffolded projects** — if `deploy` and `publish` scripts are missing, add them to `package.json` (requires `@datadog/vite-plugin` >= 3.2.0):
+
+```json
+{ "scripts": { "deploy": "datadog-apps deploy", "publish": "datadog-apps publish" } }
+```
+
+## Troubleshooting
+
+**401 / missing authentication token / credentials not configured**
+
+- OAuth: if the browser window didn't open, the environment may not support it. Fall back to API keys.
+- API keys: verify `DD_API_KEY` and `DD_APP_KEY` are set and the application key has both **Actions API Access** and **Apps** scopes.
+- Check `auth.site` in `vite.config.ts` matches the credentials' Datadog site.
+
+**403 "you do not have access to this app" on upload**
+
+The application key needs both scopes enabled — not just one:
+
+1. **Actions API Access** — required for backend function execution.
+2. **Apps** (or **App Builder**) — required for uploading and publishing.
+
+Go to `https://app.datadoghq.com/organization-settings/application-keys`, confirm both scopes, or create a new key with both.
+
+**Build succeeds but nothing deploys**
+
+- Use `npm run deploy`, not `npm run build`, when the intent is to deploy.
+- Check whether `DD_APPS_PUBLISH` is set to `false` in the environment — the app uploads as a draft but does not go live. Unset the variable or run `npm run publish` separately.
+- Confirm `dryRun` in `vite.config.ts` is not `true`.
+- Confirm `DD_APPS_UPLOAD_ASSETS` is set — `npm run deploy` does this automatically.
+
+**Build fails with missing credentials**
+
+- Current scaffold versions may make `npm run build` exercise Datadog deploy behavior.
+- Cache OAuth credentials first (`npm run dev`), or set `DD_API_KEY` and `DD_APP_KEY`.
+- For credential-free validation, prefer `npm run typecheck`.
+
+**Node or scaffolding errors**
+
+- Check `package.json` `engines.node` for the supported Node.js versions.
+- Use Volta, nvm, or fnm to switch versions. Prefer a current Node 22 release when debugging.
+
+**Datadog site mismatch**
+
+- Inspect `vite.config.ts` for the configured site and confirm CI uses the same value.
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/cicd.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/cicd.md
new file mode 100644
index 0000000..8928185
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/cicd.md
@@ -0,0 +1,42 @@
+# CI/CD
+
+## GitHub Actions
+
+Use `DataDog/apps-github-action` to deploy on pushes to the deployment branch. Keep `app-directory` aligned with the app's path in the repository.
+
+```yaml
+name: Continuous Deployment
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  deploy-app:
+    name: Deploy Datadog App
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+
+      - name: Deploy
+        uses: DataDog/apps-github-action@v0.0.2
+        with:
+          datadog-api-key: ${{ secrets.DATADOG_API_KEY }}
+          datadog-app-key: ${{ secrets.DATADOG_APP_KEY }}
+          app-directory: .
+```
+
+Store `DATADOG_API_KEY` and `DATADOG_APP_KEY` as [encrypted secrets](https://docs.github.com/en/actions/security-for-github-actions/security-guides/using-secrets-in-github-actions) in the repository or organization settings. The application key needs both **Actions API Access** and **Apps** scopes.
+
+For non-US1 organizations, configure the Datadog site in `vite.config.ts` and ensure CI and local config are aligned.
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/data.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/data.md
new file mode 100644
index 0000000..9be21be
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/data.md
@@ -0,0 +1,61 @@
+# Data Access
+
+Backend functions have two primary data access paths: DDSQL and Action Catalog.
+
+## Choosing a path
+
+| Situation | Use |
+| --- | --- |
+| Read from Datadog-visible data (logs, metrics, hosts, spans, etc.) and need filtering, projection, joins, aggregation, or pagination | DDSQL |
+| Mutation — create, update, delete, trigger, invoke, send | Action Catalog |
+| Product workflow that maps to an existing typed action | Action Catalog |
+| Simple single-record read where the typed action response is exactly what the UI needs | Action Catalog |
+| External system or integration that is not DDSQL-visible | Action Catalog |
+| Read from an app datastore | DDSQL (prefer for queries) or datastore actions (for simple reads/writes) |
+
+## DDSQL
+
+DDSQL-visible datasets include logs, APM spans, RUM events, hosts, containers, services, cloud inventory, audit trail, CI pipelines, and more. Check the [DDSQL Data Directory](https://docs.datadoghq.com/ddsql_reference/data_directory/) for the full list.
+
+Before writing queries:
+
+- Confirm the table name, columns, and types with a small bounded probe before writing app code.
+- Verify the exact DDSQL execution API or action import against installed package exports — do not invent subpaths.
+- Use fixed SQL templates. Do not accept raw frontend SQL or raw `ORDER BY` fields.
+- Clamp limits and use `LIMIT` in all list queries.
+
+### App datastores
+
+Datastores are queryable via DDSQL. Confirm the datastore ID and column schema with a bounded probe first:
+
+```sql
+SELECT key, summary, status
+FROM dd.actions_datastores(
+  id => '<datastore-id>',
+  columns => ARRAY ['key', 'summary', 'status']
+) AS (
+  key VARCHAR,
+  summary VARCHAR,
+  status VARCHAR
+)
+WHERE status = 'Open'
+ORDER BY key
+LIMIT 100;
+```
+
+For writes and deletes, use datastore actions from `@datadog/action-catalog` directly.
+
+Public docs: [Datastores](https://docs.datadoghq.com/actions/datastores/), [DDSQL Reference](https://docs.datadoghq.com/ddsql_reference/)
+
+## Connections
+
+Connections are reusable auth configuration for Action Catalog actions that need credentials (custom HTTP, integrations without a Datadog tile, etc.).
+
+- Find or create connections at `https://app.datadoghq.com/actions/connections`.
+- Copy the Connection ID from the connection details — treat it as configuration, not a secret.
+- Do not ask users to paste API keys, passwords, OAuth secrets, or private keys into an AI conversation.
+- Have a human create or update connections in the Datadog UI.
+
+Integrations such as GitHub, Jira, Slack, PagerDuty, and Statuspage may inherit credentials from their Datadog integration tile and may not need an explicit connection.
+
+Public docs: [Connections](https://docs.datadoghq.com/actions/connections/), [Action Catalog](https://docs.datadoghq.com/actions/action_interface/)
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/runtime-context.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/runtime-context.md
new file mode 100644
index 0000000..6d30e71
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/runtime-context.md
@@ -0,0 +1,30 @@
+# Runtime Context
+
+Datadog Apps are embedded inside the Datadog UI. Treat this app as iframe-hosted browser code with Datadog-managed backend execution.
+
+## Iframe embedding
+
+- The app runs inside an iframe owned by the Datadog UI.
+- The current App Builder iframe sandbox allows scripts, popups, popups escaping the sandbox, same-origin access, forms, and top navigation only by user activation.
+- Do not assume app code can control, read, or directly navigate the parent Datadog page.
+- Prefer hash-based routing for in-app routes. Avoid `BrowserRouter` and routers that depend on reliable top-level History API behavior.
+- In-app links should use hash URLs such as `href="#/details"`.
+- External URLs can open popups or top-level navigation only through browser-supported, user-initiated flows.
+- Verify the current Datadog embedding sandbox before relying on a specific browser capability. Datadog controls the sandbox attributes and may change them.
+
+## Storage and cookies
+
+- Browser storage is scoped to the app's origin and is not shared with the parent Datadog UI.
+- Storage can differ between standalone local development and embedded runtime because modern browsers partition storage by top-level site and iframe origin.
+- Third-party cookies are unreliable for durable app state.
+- For durable server-side state, use backend functions and a Datadog-supported durable storage mechanism.
+
+## Backend call transport
+
+Frontend code imports backend functions like normal ES modules, but those imports are rewritten by the Datadog Vite plugin. The function body does not run in the browser.
+
+- In local dev, backend calls go through Vite middleware and Datadog preview infrastructure.
+- In deployed apps, backend calls go through the Datadog iframe/runtime bridge.
+- Do not build app logic that depends on backend functions running in the local Node.js process.
+
+For backend implementation details, read `backend-functions.md`.
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/upgrading.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/upgrading.md
new file mode 100644
index 0000000..19b5c4e
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/upgrading.md
@@ -0,0 +1,63 @@
+# Upgrading
+
+## Primary packages
+
+- `@datadog/vite-plugin`: Vite integration for local development, build, and deploy.
+- `@datadog/action-catalog`: typed Action Catalog client for backend functions.
+- `@datadog/apps-backend`: Datadog-provided helpers for backend function development.
+
+Preserve the existing package manager and lockfile style.
+
+## Before upgrading
+
+Check release notes before changing versions:
+
+```bash
+npm view @datadog/vite-plugin version repository.url homepage
+npm view @datadog/action-catalog version repository.url homepage
+npm view @datadog/apps-backend version repository.url homepage
+```
+
+Inspect the current app:
+
+```bash
+npm outdated @datadog/vite-plugin @datadog/action-catalog @datadog/apps-backend
+npm ls @datadog/vite-plugin @datadog/action-catalog @datadog/apps-backend
+```
+
+## Upgrade
+
+```bash
+npm install @datadog/action-catalog@latest
+npm install @datadog/apps-backend@latest
+npm install -D @datadog/vite-plugin@latest
+```
+
+After upgrading, verify:
+
+- `vite.config.ts` Datadog plugin config, especially `auth.site`.
+- `package.json` scripts — check for new `deploy` and `publish` scripts added in `@datadog/vite-plugin` 3.2.0+.
+- Backend function imports from `@datadog/action-catalog/...`.
+- Project-local instructions in `AGENTS.md`.
+
+## Compare against a fresh scaffold
+
+To pull in changes from the latest scaffolder without guessing:
+
+```bash
+tmp_dir="$(mktemp -d)"
+npm create @datadog/apps@latest -- "$tmp_dir/base-app" --template vite-react -y --skip-post-scaffold
+diff -ru "$tmp_dir/base-app/package.json" package.json
+diff -ru "$tmp_dir/base-app/vite.config.ts" vite.config.ts
+diff -ru "$tmp_dir/base-app/src" src
+```
+
+Port only the specific changes needed. Do not replace the app wholesale.
+
+## Verify
+
+```bash
+npm run typecheck
+npm run lint
+npm run build
+```
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/workflow-automation.md b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/workflow-automation.md
new file mode 100644
index 0000000..2ec9bcd
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/docs/agents/workflow-automation.md
@@ -0,0 +1,150 @@
+# Workflow Automation
+
+Use this when a backend function needs to trigger a Datadog Workflow Automation workflow and poll for the result.
+
+## Requirements
+
+- Use a backend function, not frontend code. Backend functions can call `@datadog/action-catalog`.
+- Use the generic HTTP action from `@datadog/action-catalog/http/http`.
+- The HTTP action requires a Connection ID for an HTTP connection configured in your Datadog org. Find or create one at `https://app.datadoghq.com/actions/connections`.
+- The target workflow must be published and must include an API trigger (`apiTrigger` in the workflow spec).
+- Workflow inputs must match the workflow input schema exactly.
+
+## Inspect the workflow first
+
+Before wiring an app to a workflow, confirm its published shape:
+
+```bash
+workflow_id="<WORKFLOW_ID>"
+curl -sS --fail-with-body \
+  "https://api.datadoghq.com/api/v2/workflows/${workflow_id}" \
+  -H "DD-API-KEY: ${DD_API_KEY}" \
+  -H "DD-APPLICATION-KEY: ${DD_APP_KEY}" \
+  -H "Accept: application/json" \
+| jq "{
+    id: .data.id,
+    name: .data.attributes.name,
+    published: .data.attributes.published,
+    inputSchema: .data.attributes.spec.inputSchema,
+    outputSchema: .data.attributes.spec.outputSchema,
+    hasApiTrigger: any(.data.attributes.spec.triggers[]?; has(\"apiTrigger\"))
+  }"
+```
+
+Confirm `published` is `true`, `hasApiTrigger` is `true`, and `inputSchema.parameters` matches the inputs the app will send.
+
+## Trigger and poll pattern
+
+Inputs go under `meta.payload`. Replace `YOUR_HTTP_CONNECTION_ID` with the ID from your Datadog org.
+
+```ts
+import { request } from '@datadog/action-catalog/http/http';
+
+const DATADOG_HTTP_CONNECTION_ID = '<YOUR_HTTP_CONNECTION_ID>';
+const DATADOG_API_BASE_URL = 'https://api.datadoghq.com';
+const DEFAULT_POLL_TIMEOUT_MS = 120_000;
+const INITIAL_POLL_DELAY_MS = 250;
+const POLL_DELAY_MULTIPLIER = 1.05;
+
+const jsonHeaders = [
+    { key: 'Accept', value: ['application/json'] },
+    { key: 'Content-Type', value: ['application/json'] },
+];
+
+type WorkflowInstanceResponse = {
+    data?: {
+        id?: string;
+        attributes?: {
+            endTimestamp?: string | null;
+            outputs?: unknown;
+            instanceStatus?: { detailsKind?: string; displayName?: string };
+        };
+    };
+};
+
+type WorkflowRunResult = {
+    instanceId?: string;
+    statusKind?: string;
+    displayStatus?: string;
+    outputs?: unknown;
+    body: unknown;
+};
+
+function workflowInstancesUrl(workflowId: string) {
+    return `${DATADOG_API_BASE_URL}/api/v2/workflows/${workflowId}/instances`;
+}
+
+function isRunningStatus(statusKind?: string) {
+    return !statusKind || statusKind === 'IN_PROGRESS';
+}
+
+function toRunResult(body: unknown): WorkflowRunResult {
+    const response = body as WorkflowInstanceResponse | undefined;
+    return {
+        instanceId: response?.data?.id,
+        statusKind: response?.data?.attributes?.instanceStatus?.detailsKind,
+        displayStatus: response?.data?.attributes?.instanceStatus?.displayName,
+        outputs: response?.data?.attributes?.outputs,
+        body,
+    };
+}
+
+export async function triggerWorkflow(
+    workflowId: string,
+    payload: Record<string, unknown>,
+): Promise<WorkflowRunResult> {
+    const response = await request({
+        connectionId: DATADOG_HTTP_CONNECTION_ID,
+        inputs: {
+            verb: 'POST',
+            url: workflowInstancesUrl(workflowId),
+            requestHeaders: jsonHeaders,
+            responseParsing: 'json',
+            errorOnStatus: ['400-599'],
+            body: JSON.stringify({ meta: { payload } }),
+        },
+    });
+    return toRunResult(response.body);
+}
+
+export async function pollWorkflowInstance(
+    workflowId: string,
+    instanceId: string,
+    timeoutMs = DEFAULT_POLL_TIMEOUT_MS,
+): Promise<WorkflowRunResult> {
+    const expiresAt = Date.now() + timeoutMs;
+    let delay = INITIAL_POLL_DELAY_MS / POLL_DELAY_MULTIPLIER;
+
+    while (Date.now() < expiresAt) {
+        delay *= POLL_DELAY_MULTIPLIER;
+        const jitter = delay * 0.4 * (Math.random() - 0.5);
+        await new Promise<void>((resolve) => setTimeout(resolve, delay + jitter));
+
+        const response = await request({
+            connectionId: DATADOG_HTTP_CONNECTION_ID,
+            inputs: {
+                verb: 'GET',
+                url: `${workflowInstancesUrl(workflowId)}/${instanceId}`,
+                requestHeaders: jsonHeaders,
+                responseParsing: 'json',
+                errorOnStatus: ['400-599'],
+            },
+        });
+
+        const result = toRunResult(response.body);
+        if (!isRunningStatus(result.statusKind)) {
+            return result;
+        }
+    }
+
+    throw new Error(`Workflow instance ${instanceId} did not finish in time`);
+}
+```
+
+Treat `statusKind === "SUCCEEDED"` as success. All other terminal statuses (`INSTANCE_ERROR`, `STEP_ERROR`, `CANCELED`) are failures — return the full response body so the caller can inspect `errorDetail` and partial outputs.
+
+## Troubleshooting
+
+- `input parameter not in workflow input schema`: update `meta.payload` keys to match `inputSchema.parameters`.
+- `Expected trigger type TRIGGER_TYPE_API not found`: add and publish an API trigger on the workflow.
+- 401/403: confirm `DD_API_KEY` and `DD_APP_KEY` are set with Actions API Access, and the app site matches the API host.
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/eslint.config.mjs b/apps/sarah-s-app-fri-aug-21-11-53-20-am/eslint.config.mjs
new file mode 100644
index 0000000..83eea8d
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/eslint.config.mjs
@@ -0,0 +1,23 @@
+import js from '@eslint/js';
+import { defineConfig, globalIgnores } from 'eslint/config';
+import reactHooks from 'eslint-plugin-react-hooks';
+import reactRefresh from 'eslint-plugin-react-refresh';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+
+export default defineConfig([
+    globalIgnores(['dist']),
+    {
+        files: ['**/*.{ts,tsx}'],
+        extends: [
+            js.configs.recommended,
+            ...tseslint.configs.recommended,
+            reactHooks.configs.flat.recommended,
+            reactRefresh.configs.vite,
+        ],
+        languageOptions: {
+            ecmaVersion: 2020,
+            globals: globals.browser,
+        },
+    },
+]);
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/index.html b/apps/sarah-s-app-fri-aug-21-11-53-20-am/index.html
new file mode 100644
index 0000000..ede246d
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/index.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>sarah-s-app-fri-aug-21-11-53-20-am</title>
+</head>
+
+<body>
+    <div id="app"></div>
+    <script type="module" src="/src/main.tsx"></script>
+</body>
+
+</html>
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/package.json b/apps/sarah-s-app-fri-aug-21-11-53-20-am/package.json
new file mode 100644
index 0000000..2868f60
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/package.json
@@ -0,0 +1,43 @@
+{
+  "name": "sarah-s-app-fri-aug-21-11-53-20-am",
+  "version": "0.0.1",
+  "private": true,
+  "engines": {
+    "node": "^20.19.0 || >=22.12.0"
+  },
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "upload": "DD_APPS_UPLOAD_ASSETS=1 vite build",
+    "lint": "eslint . --report-unused-disable-directives --max-warnings 0",
+    "lint:fix": "eslint . --fix",
+    "preview": "vite preview",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@datadog/action-catalog": "^0.0.3",
+    "@datadog/apps-backend": "^0.0.1",
+    "@datadog/druids": "^0.0.7",
+    "@tanstack/react-query": "^5.101.2",
+    "react": "^19.2.3",
+    "react-dom": "^19.2.3"
+  },
+  "optionalDependencies": {
+    "@napi-rs/keyring": "^1.3.0"
+  },
+  "devDependencies": {
+    "@datadog/vite-plugin": "^3.2.1",
+    "@eslint/js": "^9.39.2",
+    "@types/node": "^24.12.2",
+    "@types/react": "^19.2.9",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^5.1.2",
+    "eslint": "^9.39.2",
+    "eslint-plugin-react-hooks": "^7.0.1",
+    "eslint-plugin-react-refresh": "^0.4.26",
+    "globals": "^16.5.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.54.0",
+    "vite": "^7.3.1"
+  }
+}
\ No newline at end of file
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/public/favicon.ico b/apps/sarah-s-app-fri-aug-21-11-53-20-am/public/favicon.ico
new file mode 100644
index 0000000..e04da3e
Binary files /dev/null and b/apps/sarah-s-app-fri-aug-21-11-53-20-am/public/favicon.ico differ
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/App.css b/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/App.css
new file mode 100644
index 0000000..a7e6367
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/App.css
@@ -0,0 +1,20 @@
+.chau-page {
+    align-items: center;
+    display: flex;
+    justify-content: center;
+    min-height: 100vh;
+    text-align: center;
+}
+
+.chau-title {
+    color: #f97316;
+    font-size: 72px;
+    line-height: 1;
+    margin: 0;
+}
+
+@media (max-width: 480px) {
+    .chau-title {
+        font-size: 48px;
+    }
+}
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/App.tsx b/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/App.tsx
new file mode 100644
index 0000000..cd3e01d
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/App.tsx
@@ -0,0 +1,16 @@
+import { Spacing } from '@datadog/druids/layout/Spacing';
+import { Text } from '@datadog/druids/typography/Text';
+
+import './App.css';
+
+function App() {
+    return (
+        <Spacing as="main" className="chau-page" padding="lg">
+            <Text as="h1" className="chau-title" overflowWrap="anywhere" weight="bold">
+                Chau
+            </Text>
+        </Spacing>
+    );
+}
+
+export default App;
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/main.tsx b/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/main.tsx
new file mode 100644
index 0000000..8f2c295
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/src/main.tsx
@@ -0,0 +1,24 @@
+import '@datadog/druids/styles.css';
+
+import { DruidsEnvironment } from '@datadog/druids/layout/DruidsEnvironment';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+
+import App from './App';
+
+const queryClient = new QueryClient();
+const appRoot = document.getElementById('app');
+if (appRoot) {
+    createRoot(appRoot).render(
+        <StrictMode>
+            <QueryClientProvider client={queryClient}>
+                <DruidsEnvironment backgroundColor="standard">
+                    <App />
+                </DruidsEnvironment>
+            </QueryClientProvider>
+        </StrictMode>,
+    );
+} else {
+    console.error('Missing #app div for createRoot.');
+}
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/tsconfig.json b/apps/sarah-s-app-fri-aug-21-11-53-20-am/tsconfig.json
new file mode 100644
index 0000000..7a01668
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/tsconfig.json
@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "useDefineForClassFields": true,
+    "lib": [
+      "ES2020",
+      "DOM",
+      "DOM.Iterable"
+    ],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": [
+    "src"
+  ]
+}
\ No newline at end of file
diff --git a/apps/sarah-s-app-fri-aug-21-11-53-20-am/vite.config.ts b/apps/sarah-s-app-fri-aug-21-11-53-20-am/vite.config.ts
new file mode 100644
index 0000000..d8fef98
--- /dev/null
+++ b/apps/sarah-s-app-fri-aug-21-11-53-20-am/vite.config.ts
@@ -0,0 +1,57 @@
+import { datadogVitePlugin } from '@datadog/vite-plugin';
+import react from '@vitejs/plugin-react';
+import { defineConfig } from 'vite';
+
+import { version } from './package.json';
+
+const hasDatadogApiKeys = Boolean(
+    (process.env.DD_API_KEY || process.env.DATADOG_API_KEY) &&
+        (process.env.DD_APP_KEY || process.env.DATADOG_APP_KEY),
+);
+const datadogSite = process.env.DATADOG_SITE || process.env.DD_SITE || 'datadoghq.com';
+
+process.env.DATADOG_SITE ||= datadogSite;
+process.env.DD_SITE ||= datadogSite;
+
+export default defineConfig({
+    base: './',
+    build: {
+        sourcemap: true,
+    },
+    plugins: [
+        react(),
+        datadogVitePlugin({
+            logLevel: 'debug',
+            auth: {
+                site: datadogSite,
+                apiKey: process.env.DD_API_KEY,
+                appKey: process.env.DD_APP_KEY,
+            },
+            apps: {
+                enable: true,
+                authOverrides: {
+                    method: hasDatadogApiKeys ? 'apiKey' : 'oauth',
+                },
+                // Stable identity for this app, generated once when the project was scaffolded.
+                // DO NOT change this value, and DO NOT set it to the app's UUID from App Builder.
+                // Every upload targets the app matching this identifier — changing it makes the
+                // next upload create a brand-new app instead of updating this one.
+                identifier: '017218f2-dcee-42cd-9dac-29db5456b4f7',
+            },
+            errorTracking: {
+                enable: hasDatadogApiKeys,
+                sourcemaps: {
+                    minifiedPathPrefix: '/',
+                    releaseVersion: version,
+                    service: 'sarah-s-app-fri-aug-21-11-53-20-am',
+                }
+            },
+            metadata: {
+                name: "Sarah's App Fri, Aug 21, 11:53:20 am",
+            },
+            metrics: {
+                enable: hasDatadogApiKeys,
+            },
+        }),
+    ],
+});
diff --git a/package-lock.json b/package-lock.json
index c955950..fa1bb3e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -43,7 +43,39 @@
         "@napi-rs/keyring": "^1.3.0"
       }
     },
-    "apps/my-first-app/node_modules/react": {
+    "apps/sarah-s-app-fri-aug-21-11-53-20-am": {
+      "version": "0.0.1",
+      "dependencies": {
+        "@datadog/action-catalog": "^0.0.3",
+        "@datadog/apps-backend": "^0.0.1",
+        "@datadog/druids": "^0.0.7",
+        "@tanstack/react-query": "^5.101.2",
+        "react": "^19.2.3",
+        "react-dom": "^19.2.3"
+      },
+      "devDependencies": {
+        "@datadog/vite-plugin": "^3.2.1",
+        "@eslint/js": "^9.39.2",
+        "@types/node": "^24.12.2",
+        "@types/react": "^19.2.9",
+        "@types/react-dom": "^19.2.3",
+        "@vitejs/plugin-react": "^5.1.2",
+        "eslint": "^9.39.2",
+        "eslint-plugin-react-hooks": "^7.0.1",
+        "eslint-plugin-react-refresh": "^0.4.26",
+        "globals": "^16.5.0",
+        "typescript": "^5.9.3",
+        "typescript-eslint": "^8.54.0",
+        "vite": "^7.3.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "optionalDependencies": {
+        "@napi-rs/keyring": "^1.3.0"
+      }
+    },
+    "apps/sarah-s-app-fri-aug-21-11-53-20-am/node_modules/react": {
       "version": "19.2.8",
       "resolved": "https://registry.npmjs.org/react/-/react-19.2.8.tgz",
       "integrity": "sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==",
@@ -52,7 +84,7 @@
         "node": ">=0.10.0"
       }
     },
-    "apps/my-first-app/node_modules/react-dom": {
+    "apps/sarah-s-app-fri-aug-21-11-53-20-am/node_modules/react-dom": {
       "version": "19.2.8",
       "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.8.tgz",
       "integrity": "sha512-rVprimfGBG3DR+Tq0IQG2DT5PxKth1WIGDmj5yPmlzr4YBe7uyE+Du4oVqTDXZSHGGGXRtTJEGSSePyQCMBglQ==",
@@ -4034,6 +4066,10 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/sarah-s-app-fri-aug-21-11-53-20-am": {
+      "resolved": "apps/sarah-s-app-fri-aug-21-11-53-20-am",
+      "link": true
+    },
     "node_modules/sarah-s-app-thu-aug-20-12-29-57-pm": {
       "resolved": "apps/sarah-s-app-thu-aug-20-12-29-57-pm",
       "link": true