Add /deeplink/* redirect route

Resolves the signed-in user's current organization, project and environment
and redirects to the canonical page, so /deeplink/apikeys lands on
/orgs/{org}/projects/{project}/env/{env}/apikeys.

Only the environment page segments navigation already knows about are
followed (derived from ENV_PAGE_META), so an unrecognised path redirects to
the environment root rather than becoming the redirect target. Deeper
segments and the query string are preserved.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MvNi2jRtYatPQdXFJRK9SW

Author: claude

.server-changes/deeplink-routes.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: feature
+---
+
+Short links like /deeplink/apikeys now take you straight to that page in your current project and environment, so you no longer need the full URL with your org, project and environment in it.

apps/webapp/app/components/navigation/favoritePages.tsx

@@ -237,6 +237,14 @@ const ENV_PAGE_META: Record<string, PageMeta> = {
   playground: { icon: "test", name: "Test", singular: "Test" },
 };
 
+/**
+ * The page segments that live under an environment ("apikeys", "runs", …), derived from the pages
+ * navigation knows about. Used by the /deeplink/* route to validate its redirect target.
+ */
+export const ENV_PAGE_SEGMENTS: ReadonlySet<string> = new Set(
+  Object.keys(ENV_PAGE_META).filter((segment) => segment.length > 0)
+);
+
 const ORG_SETTINGS_PAGE_META: Record<string, PageMeta> = {
   "": { icon: "org-settings", name: "Organization settings" },
   team: { icon: "team", name: "Team" },

apps/webapp/app/routes/deeplink.$.ts

@@ -0,0 +1,54 @@
+import { redirect, type LoaderFunctionArgs } from "@remix-run/server-runtime";
+import { ENV_PAGE_SEGMENTS } from "~/components/navigation/favoritePages";
+import { prisma } from "~/db.server";
+import { SelectBestEnvironmentPresenter } from "~/presenters/SelectBestEnvironmentPresenter.server";
+import { requireUser } from "~/services/session.server";
+import { newOrganizationPath, newProjectPath, v3EnvironmentPath } from "~/utils/pathBuilder";
+
+/**
+ * Stable links that don't name an org, project or environment: /deeplink/apikeys redirects to
+ * /orgs/{org}/projects/{project}/env/{env}/apikeys for whoever is signed in. Only pages the
+ * dashboard knows about are followed, so an unrecognised path can never become the redirect
+ * target — it lands on the resolved environment instead.
+ */
+export const loader = async ({ request, params }: LoaderFunctionArgs) => {
+  const user = await requireUser(request);
+
+  const segments = (params["*"] ?? "").split("/").filter(Boolean);
+  //deeper segments are kept, so /deeplink/runs/run_123 reaches the run
+  const page = ENV_PAGE_SEGMENTS.has(segments[0] ?? "") ? segments.join("/") : undefined;
+
+  const presenter = new SelectBestEnvironmentPresenter();
+  try {
+    const { project, organization, environment } = await presenter.call({ user });
+    const environmentPath = v3EnvironmentPath(organization, project, environment);
+
+    if (!page) {
+      return redirect(environmentPath);
+    }
+
+    const { search } = new URL(request.url);
+    return redirect(`${environmentPath}/${page}${search}`);
+  } catch (_e) {
+    //the presenter throws when the user has no projects, same as the dashboard index
+    const organization = await prisma.organization.findFirst({
+      where: {
+        members: {
+          some: {
+            userId: user.id,
+          },
+        },
+        deletedAt: null,
+      },
+      orderBy: {
+        createdAt: "desc",
+      },
+    });
+
+    if (organization) {
+      return redirect(newProjectPath(organization));
+    }
+
+    return redirect(newOrganizationPath());
+  }
+};