@keystrokehq/cli 0.1.147 → 0.1.149

package/dist/dist-CyKcvwuI.mjs

@@ -1,816 +0,0 @@
-#!/usr/bin/env node
-import { H as computeCallSiteIds, J as readKeystrokeIgnoreDirective, Q as packAssetDirs, U as diagnoseWorkflowSource, V as classifyCall, W as locateWorkflow, Y as shouldSkipKeystrokeModuleFile, a as buildStoredRouteManifestForProject, q as entryIdFromFile } from "./dist-B72RPrho.mjs";
-import { isBuiltin } from "node:module";
-import { dirname, join, relative, resolve, sep } from "node:path";
-import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { createHash } from "node:crypto";
-import { build, mergeConfig } from "tsdown";
-import ts from "typescript";
-//#region ../../packages/build/dist/walk-project-eIHZ7A1f.mjs
-function toPosix$1$1(path) {
-	return path.split(sep).join("/");
-}
-function projectRelativePath(root, filePath) {
-	return toPosix$1$1(relative(root, normalizeBuildFilePath(filePath)));
-}
-/** Normalize paths so /var and /private/var compare equal on macOS. */
-function normalizeBuildFilePath(filePath) {
-	const absolute = resolve(filePath);
-	try {
-		return realpathSync.native(absolute);
-	} catch {
-		return absolute;
-	}
-}
-function normalizeModuleId(id, root) {
-	if (id.startsWith("\0")) return null;
-	const normalized = normalizeBuildFilePath(id.startsWith("file://") ? fileURLToPath(id) : id);
-	if (!normalized.startsWith(normalizeBuildFilePath(root))) return null;
-	return normalized;
-}
-function formatImportGuardError(root, ignoredPath, importer) {
-	const ignored = projectRelativePath(root, ignoredPath);
-	if (importer) return `Cannot import "${ignored}" (@keystroke ignore) from "${projectRelativePath(root, importer)}". Remove the directive or stop importing it from a shipped module.`;
-	return `Cannot import "${ignored}" (@keystroke ignore). Remove the directive or stop importing it from a shipped module.`;
-}
-/** Throw when a built module imports a `@keystroke ignore` source file. */
-function keystrokeIgnoreGuardPlugin(options) {
-	const root = normalizeBuildFilePath(options.root);
-	const ignoredFiles = new Set(options.ignoredFiles.map((filePath) => normalizeBuildFilePath(filePath)));
-	function assertNotIgnored(filePath, importer) {
-		const normalized = normalizeBuildFilePath(filePath);
-		if (!ignoredFiles.has(normalized)) return;
-		throw new Error(formatImportGuardError(root, normalized, importer));
-	}
-	return {
-		name: "keystroke-ignore-guard",
-		async resolveId(source, importer, resolveOptions) {
-			if (resolveOptions?.isEntry || !importer) return null;
-			const resolved = await this.resolve(source, importer, {
-				...resolveOptions,
-				skipSelf: true
-			});
-			if (!resolved) return null;
-			assertNotIgnored(typeof resolved === "string" ? resolved : resolved.id, importer);
-			return null;
-		},
-		load(id) {
-			const normalized = normalizeModuleId(id, root);
-			if (!normalized) return null;
-			assertNotIgnored(normalized);
-			return null;
-		}
-	};
-}
-const IGNORED_DIRS = new Set([
-	"node_modules",
-	"dist",
-	".git",
-	".turbo",
-	"build",
-	"coverage",
-	".keystroke",
-	".cache",
-	"tmp"
-]);
-const IGNORED_ENV_FILE = /\.env/;
-const IGNORED_LOG_FILE = /\.log$/;
-function isIgnoredFile(name) {
-	return IGNORED_ENV_FILE.test(name) || IGNORED_LOG_FILE.test(name);
-}
-function toPosix$3(path) {
-	return path.split(sep).join("/");
-}
-function isProbablyBinary(buffer) {
-	const sampleLength = Math.min(buffer.length, 8e3);
-	for (let index = 0; index < sampleLength; index += 1) if (buffer[index] === 0) return true;
-	return false;
-}
-function classifyBuildEntry(root, srcRoot, filePath) {
-	const relativePath = toPosix$3(relative(root, filePath));
-	const agentsPrefix = `${toPosix$3(relative(root, join(srcRoot, "agents")))}/`;
-	const workflowsPrefix = `${toPosix$3(relative(root, join(srcRoot, "workflows")))}/`;
-	const triggersPrefix = `${toPosix$3(relative(root, join(srcRoot, "triggers")))}/`;
-	const actionsPrefix = `${toPosix$3(relative(root, join(srcRoot, "actions")))}/`;
-	if (relativePath.startsWith(agentsPrefix) && /\.(ts|mts)$/.test(relativePath) && !/\.(int\.)?test\.(ts|mts)$/.test(relativePath)) {
-		const id = entryIdFromFile(join(srcRoot, "agents"), filePath, { nestedEntry: "agent" });
-		return id ? {
-			entryKey: `agents/${id}`,
-			entryPath: filePath
-		} : null;
-	}
-	if (relativePath.startsWith(actionsPrefix) && /\.(ts|mts)$/.test(relativePath) && !/\.(int\.)?test\.(ts|mts)$/.test(relativePath)) {
-		const id = entryIdFromFile(join(srcRoot, "actions"), filePath, { nestedEntry: "action" });
-		return id ? {
-			entryKey: `actions/${id}`,
-			entryPath: filePath
-		} : null;
-	}
-	if (relativePath.startsWith(workflowsPrefix) && /\.(ts|mts)$/.test(relativePath) && !/\.(int\.)?test\.(ts|mts)$/.test(relativePath)) {
-		const id = entryIdFromFile(join(srcRoot, "workflows"), filePath, { nestedEntry: "workflow" });
-		return id ? {
-			entryKey: `workflows/${id}`,
-			entryPath: filePath
-		} : null;
-	}
-	if (relativePath.startsWith(triggersPrefix) && /\.(ts|mts)$/.test(relativePath) && !/\.(int\.)?test\.(ts|mts)$/.test(relativePath)) {
-		const id = entryIdFromFile(join(srcRoot, "triggers"), filePath, { nestedEntry: "trigger" });
-		return id ? {
-			entryKey: `triggers/${id}`,
-			entryPath: filePath
-		} : null;
-	}
-	return null;
-}
-function shouldSkipIgnoredModule(filePath, phase) {
-	return shouldSkipKeystrokeModuleFile(readKeystrokeIgnoreDirective(filePath), phase);
-}
-function isSrcTypeScriptFile(srcRoot, filePath) {
-	const relativePath = toPosix$3(relative(srcRoot, filePath));
-	if (relativePath.startsWith("..")) return false;
-	return /\.(ts|mts)$/.test(relativePath);
-}
-function walkTree(root, dir, srcRoot, phase, collectSources, sourceFiles, buildEntries, ignoredFiles, totals) {
-	for (const name of readdirSync(dir).sort()) {
-		if (collectSources && (sourceFiles.length >= 2e3 || totals.bytes >= 8388608)) return;
-		const absolute = join(dir, name);
-		const stats = statSync(absolute);
-		if (stats.isDirectory()) {
-			if (IGNORED_DIRS.has(name)) continue;
-			walkTree(root, absolute, srcRoot, phase, collectSources, sourceFiles, buildEntries, ignoredFiles, totals);
-			continue;
-		}
-		if (!stats.isFile()) continue;
-		const isUnderSrc = isSrcTypeScriptFile(srcRoot, absolute);
-		const skipIgnored = isUnderSrc ? shouldSkipIgnoredModule(absolute, phase) : false;
-		if (isUnderSrc && skipIgnored) ignoredFiles.push(normalizeBuildFilePath(absolute));
-		const buildEntry = classifyBuildEntry(root, srcRoot, absolute);
-		if (buildEntry && !skipIgnored) buildEntries[buildEntry.entryKey] = buildEntry.entryPath;
-		if (!collectSources) continue;
-		if (stats.size > 262144 || isIgnoredFile(name)) continue;
-		const buffer = readFileSync(absolute);
-		if (isProbablyBinary(buffer)) continue;
-		totals.bytes += buffer.byteLength;
-		sourceFiles.push({
-			path: toPosix$3(relative(root, absolute)),
-			contents: buffer.toString("utf8"),
-			hash: createHash("sha256").update(buffer).digest("hex")
-		});
-	}
-}
-/**
-* One full-tree walk of the project: classifies tsdown entries and optionally
-* collects deploy source files (path + contents + hash) under snapshot limits.
-*/
-function walkProject(root, srcDirOrOptions = "src", maybeOptions) {
-	const srcDir = typeof srcDirOrOptions === "string" ? srcDirOrOptions : srcDirOrOptions.srcDir ?? "src";
-	const options = typeof srcDirOrOptions === "string" ? maybeOptions ?? {} : srcDirOrOptions;
-	const collectSources = options.collectSources ?? false;
-	const phase = options.phase ?? "build";
-	const sourceFiles = [];
-	const buildEntries = {};
-	const ignoredFiles = [];
-	walkTree(root, root, join(root, srcDir), phase, collectSources, sourceFiles, buildEntries, ignoredFiles, { bytes: 0 });
-	return {
-		sourceFiles,
-		buildEntries,
-		ignoredFiles
-	};
-}
-//#endregion
-//#region ../../packages/tsdown-config/deps.js
-/** Native addons kept external — resolved from the CLI runtime at app start. */
-const NATIVE_RUNTIME_DEPS = [
-	"pg",
-	"better-sqlite3",
-	"@parcel/watcher"
-];
-/**
-* Framework/runtime `@keystrokehq/*` shipped in the project-server image, so user-app builds
-* keep them external and resolve them from the runtime at boot. Everything else under the scope
-* (Composio catalog integrations like `@keystrokehq/posthog`, …) is bundled into the artifact.
-*
-* This set MUST equal the `@keystrokehq/*` dependency closure of `@keystrokehq/project-runtime`
-* (the deploy image) — `deps.test.ts` enforces it. To change what stays external, change what the
-* runtime image depends on; do not edit this list by hand. `exa` is the only integration
-* package the framework imports directly (web search); `gateway` ships Slack and other channel
-* adapters in the runtime image.
-*/
-const RUNTIME_KEYSTROKE_PACKAGES = new Set([
-	"access-control",
-	"action",
-	"agent",
-	"app",
-	"auth",
-	"build",
-	"config",
-	"credentials",
-	"database",
-	"exa",
-	"gateway",
-	"hosting",
-	"http",
-	"keystroke",
-	"manifest",
-	"mcp",
-	"memory",
-	"oauth",
-	"platform-database",
-	"project-runtime",
-	"projects",
-	"runtime",
-	"sandbox",
-	"scheduler",
-	"sdk",
-	"secrets",
-	"shared",
-	"storage",
-	"telemetry",
-	"tracing",
-	"trigger",
-	"tsdown-config",
-	"web-search",
-	"worker",
-	"workflow",
-	"workflow-canvas"
-]);
-/** Matches framework/runtime `@keystrokehq/*` kept external during user-app builds. */
-const FRAMEWORK_KEYSTROKE_EXTERNAL = new RegExp(`^@keystrokehq\\/(?:${[...RUNTIME_KEYSTROKE_PACKAGES].sort().join("|")})(?:\\/|$)`);
-function keystrokePackageName(name) {
-	if (!name.startsWith("@keystrokehq/")) return null;
-	return name.slice(13).split("/")[0] ?? null;
-}
-function isRuntimeKeystrokePackage(name) {
-	const pkg = keystrokePackageName(name);
-	return pkg !== null && RUNTIME_KEYSTROKE_PACKAGES.has(pkg);
-}
-/**
-* Kept external so .d.ts emission does not inline internal/inferred types.
-*
-* `typescript` is external because the TS compiler cannot be cleanly bundled into
-* ESM — it mixes `require()`/`__filename` with top-level await, which Node rejects
-* with `ERR_AMBIGUOUS_MODULE_SYNTAX` on load. Packages that use the compiler
-* (`workflow-canvas`, `manifest`, `build`) declare it as a dependency, so it
-* resolves from `node_modules` at runtime instead of being inlined.
-*/
-const LIBRARY_EXTERNAL_DEPS = [
-	"better-auth",
-	/^@better-auth\//,
-	/^better-auth\//,
-	"typescript"
-];
-/** Kept external when bundling published entry points (cli, keystroke, platform). */
-const BUNDLED_ENTRY_EXTERNAL_DEPS = [...[
-	...NATIVE_RUNTIME_DEPS,
-	"dockerode",
-	"ssh2",
-	"cpu-features",
-	"microsandbox",
-	/^@aws-sdk\//,
-	/^@napi-rs\//,
-	"hono",
-	/^@hono\//,
-	"undici"
-], ...LIBRARY_EXTERNAL_DEPS];
-/** Bundle into CLI — device login uses Better Auth client only. */
-const BETTER_AUTH_CLIENT_BUNDLE_PATTERNS = [/^better-auth\/client$/, /^better-auth\/client\//];
-function isNativeRuntimeDep(id) {
-	return NATIVE_RUNTIME_DEPS.some((dep) => id === dep || id.startsWith(`${dep}/`));
-}
-function packageName(id) {
-	if (id.startsWith("@")) {
-		const [scope, name] = id.split("/");
-		return name ? `${scope}/${name}` : id;
-	}
-	return id.split("/")[0] ?? id;
-}
-/** Zod ships in the project-runtime image; keep one copy out of user-app artifacts. */
-function isRuntimeSharedNpmDep(id) {
-	return packageName(id) === "zod";
-}
-function isRuntimeExternal(id) {
-	const name = packageName(id);
-	if (isNativeRuntimeDep(name)) return true;
-	if (isRuntimeSharedNpmDep(name)) return true;
-	if (name.startsWith("@keystrokehq/")) return isRuntimeKeystrokePackage(name);
-	if (name === "better-auth" || name.startsWith("@better-auth/")) return true;
-	return false;
-}
-/** Library packages resolve npm deps from node_modules at runtime. */
-function libraryBuildDepsConfig() {
-	return {
-		alwaysBundle: (_id) => null,
-		neverBundle: [
-			...NATIVE_RUNTIME_DEPS,
-			/^@keystrokehq\//,
-			...LIBRARY_EXTERNAL_DEPS
-		],
-		onlyBundle: false
-	};
-}
-/** Bundle npm deps into dist; resolve @keystrokehq/*, zod, and natives from the runtime. */
-function userAppBuildDepsConfig() {
-	return {
-		alwaysBundle: (id, _importer) => {
-			if (id.startsWith(".") || id.startsWith("/") || isBuiltin(id)) return null;
-			return isRuntimeExternal(id) ? null : true;
-		},
-		neverBundle: [
-			...NATIVE_RUNTIME_DEPS,
-			FRAMEWORK_KEYSTROKE_EXTERNAL,
-			/^zod(?:\/|$)/,
-			...LIBRARY_EXTERNAL_DEPS
-		],
-		onlyBundle: false
-	};
-}
-/**
-* Published entry packages (cli, keystroke, platform): declare bundled @keystrokehq/*
-* in dependencies (changesets release graph ignores devDependencies). Inlining is
-* driven by alwaysBundle below, not by dep kind. Runtime npm deps stay external.
-*/
-function bundledEntryDepsConfig() {
-	return {
-		alwaysBundle: [/^@keystrokehq\//],
-		neverBundle: [...BUNDLED_ENTRY_EXTERNAL_DEPS],
-		onlyBundle: false
-	};
-}
-[...BETTER_AUTH_CLIENT_BUNDLE_PATTERNS];
-//#endregion
-//#region ../../packages/tsdown-config/index.js
-const baseTsdownConfig = {
-	format: ["esm", "cjs"],
-	dts: true,
-	clean: true,
-	sourcemap: true,
-	target: "node20",
-	deps: libraryBuildDepsConfig()
-};
-bundledEntryDepsConfig();
-//#endregion
-//#region ../../packages/build/dist/index.mjs
-/**
-* Build-time injection of the deterministic structural `callSiteId` into every
-* durable step call in a workflow source file, so the runtime emits
-* `step:<callSiteId>#<occurrence>` correlation ids (and `step:<callSiteId>`
-* credential consumer ids) that line up 1:1 with the canvas graph nodes the
-* deploy-time producer mints from the same source. There is no user-authored
-* step id — identity is entirely internal and injected here.
-*
-* Injection shape by kind (the `callSiteId` is the same id `computeCallSiteIds`
-* returns, which equals the producer's step-node id):
-* - action/sub-workflow `x.run(i)` → `x.run(i).__site("<id>")`       (builder method)
-* - agent   `a.prompt(i, opts?)`  → `__site` merged into the prompt options
-* - llm     `promptLlm(i, opts?)` → `__site` merged into the options
-* - hook    `ctx.hook(opts?)`     → `__site` merged into the options
-* - sleep   `ctx.sleep(d, opts?)` → `__site` merged into a second options arg
-*/
-function injectCallSiteIds(code, fileName) {
-	const sourceFile = ts.createSourceFile(fileName, code, ts.ScriptTarget.Latest, true, ts.ScriptKind.TS);
-	const located = locateWorkflow(sourceFile);
-	if (!located) return code;
-	const ids = computeCallSiteIds(sourceFile);
-	if (ids.size === 0) return code;
-	const edits = [];
-	for (const [node, id] of ids) {
-		const info = classifyCall(node, located.ctxParamName);
-		if (!info) continue;
-		if (info.callKind === "workflow-step") {
-			edits.push({
-				pos: node.getEnd(),
-				text: `.__site(${JSON.stringify(id)})`
-			});
-			continue;
-		}
-		if (info.callKind === "agent" || info.callKind === "llm") {
-			pushOptionsEdit(edits, node, id);
-			continue;
-		}
-		if (info.callKind === "hook") {
-			pushHookOptionsEdit(edits, node, id);
-			continue;
-		}
-		if (info.callKind === "wait") pushSleepOptionsEdit(edits, node, id);
-	}
-	if (edits.length === 0) return code;
-	edits.sort((a, b) => b.pos - a.pos);
-	let out = code;
-	for (const edit of edits) out = out.slice(0, edit.pos) + edit.text + out.slice(edit.pos);
-	return out;
-}
-/**
-* Merge `__site: "<id>"` into a call's options argument (agents / promptLlm).
-* - no 2nd arg            → append `, { __site: "id" }`
-* - 2nd arg object literal → insert `__site: "id", ` after its `{`
-* - 2nd arg anything else  → wrap as `{ ...orig, __site: "id" }`
-*/
-function pushOptionsEdit(edits, call, id) {
-	const literal = JSON.stringify(id);
-	const optionsArg = call.arguments[1];
-	if (!optionsArg) {
-		const firstArg = call.arguments[0];
-		const insertAt = firstArg ? firstArg.getEnd() : call.getEnd() - 1;
-		edits.push({
-			pos: insertAt,
-			text: `, { __site: ${literal} }`
-		});
-		return;
-	}
-	if (ts.isObjectLiteralExpression(optionsArg)) {
-		edits.push({
-			pos: optionsArg.getStart() + 1,
-			text: ` __site: ${literal},`
-		});
-		return;
-	}
-	edits.push({
-		pos: optionsArg.getStart(),
-		text: "{ ..."
-	});
-	edits.push({
-		pos: optionsArg.getEnd(),
-		text: `, __site: ${literal} }`
-	});
-}
-/** Merge `__site` into `ctx.hook(opts?)` — options are the first (only) argument. */
-function pushHookOptionsEdit(edits, call, id) {
-	const literal = JSON.stringify(id);
-	const optionsArg = call.arguments[0];
-	if (!optionsArg) {
-		edits.push({
-			pos: call.getEnd() - 1,
-			text: `{ __site: ${literal} }`
-		});
-		return;
-	}
-	if (ts.isObjectLiteralExpression(optionsArg)) {
-		edits.push({
-			pos: optionsArg.getStart() + 1,
-			text: ` __site: ${literal},`
-		});
-		return;
-	}
-	edits.push({
-		pos: optionsArg.getStart(),
-		text: "{ ..."
-	});
-	edits.push({
-		pos: optionsArg.getEnd(),
-		text: `, __site: ${literal} }`
-	});
-}
-/** Append `{ __site }` as the second arg to `ctx.sleep(duration)`. */
-function pushSleepOptionsEdit(edits, call, id) {
-	const literal = JSON.stringify(id);
-	const durationArg = call.arguments[0];
-	const insertAt = durationArg ? durationArg.getEnd() : call.getEnd() - 1;
-	edits.push({
-		pos: insertAt,
-		text: `, { __site: ${literal} }`
-	});
-}
-function toPosix$2(path) {
-	return path.split(sep).join("/");
-}
-/**
-* Rolldown plugin that runs {@link injectCallSiteIds} over workflow source files
-* (and their same-file helpers) before transpile. Scoped to `src/workflows/` so
-* non-workflow modules are untouched; cross-file helpers stay unkeyed by design.
-*/
-function callSiteIdInjectionPlugin(options) {
-	const srcDir = options.srcDir ?? "src";
-	const workflowsPrefix = toPosix$2(`${options.root}/${srcDir}/workflows/`);
-	return {
-		name: "keystroke-call-site-ids",
-		transform(code, id) {
-			const normalized = toPosix$2(id);
-			if (!normalized.startsWith(workflowsPrefix) || !normalized.endsWith(".ts")) return null;
-			const transformed = injectCallSiteIds(code, normalized);
-			return transformed === code ? null : {
-				code: transformed,
-				map: null
-			};
-		}
-	};
-}
-const TEST_FILE = /\.(test|int\.test|spec)\.ts$/;
-function toPosix$1(path) {
-	return path.split(sep).join("/");
-}
-function collectTsFiles(dir, out) {
-	let entries;
-	try {
-		entries = readdirSync(dir);
-	} catch {
-		return;
-	}
-	for (const entry of entries) {
-		if (entry === "node_modules" || entry.startsWith(".")) continue;
-		const full = join(dir, entry);
-		if (statSync(full).isDirectory()) {
-			collectTsFiles(full, out);
-			continue;
-		}
-		if (entry.endsWith(".ts") && !TEST_FILE.test(entry)) out.push(full);
-	}
-}
-/**
-* Run the workflow-canvas reliability checks over every `src/**` module. Errors
-* (steps outside a workflow, steps nested as call arguments) block the build;
-* warnings (opaque code-blocks, dropped spread inputs) explain each degraded
-* construct. Best-effort per-file: an unparseable file is skipped, never fatal.
-*/
-function collectWorkflowDiagnostics(root, srcDir = "src") {
-	const srcRoot = join(root, srcDir);
-	if (!existsSync(srcRoot)) return [];
-	const files = [];
-	collectTsFiles(srcRoot, files);
-	const diagnostics = [];
-	for (const file of files) {
-		const rel = toPosix$1(relative(root, file));
-		try {
-			const source = readFileSync(file, "utf8");
-			diagnostics.push(...diagnoseWorkflowSource(source, rel));
-		} catch {}
-	}
-	return diagnostics;
-}
-function formatDiagnostic(diagnostic) {
-	return `  ${diagnostic.line !== void 0 ? `${diagnostic.fileName}:${diagnostic.line}:${diagnostic.column ?? 1}` : diagnostic.fileName}\n    ${diagnostic.message}`;
-}
-/** Throw when any blocking (error-severity) diagnostic is found. */
-function assertWorkflowDiagnosticErrorsFrom(diagnostics) {
-	const errors = diagnostics.filter((d) => d.severity === "error");
-	if (errors.length > 0) throw new Error(`Workflow canvas: ${errors.length} unsupported construct(s) must be fixed before deploy:\n${errors.map(formatDiagnostic).join("\n")}\n`);
-}
-/** Print soft (warning-severity) diagnostics after a successful build. */
-function warnWorkflowDiagnosticsFrom(diagnostics) {
-	const warnings = diagnostics.filter((d) => d.severity === "warning");
-	if (warnings.length > 0) console.warn(`\n⚠ Workflow canvas: ${warnings.length} construct(s) will render as a degraded (opaque) canvas:\n${warnings.map(formatDiagnostic).join("\n")}\n`);
-}
-function packageRoot(nodeModules, scope, name) {
-	const direct = scope ? join(nodeModules, scope, name) : join(nodeModules, name);
-	if (existsSync(join(direct, "package.json"))) return direct;
-	const pnpmDir = join(nodeModules, ".pnpm");
-	if (!existsSync(pnpmDir)) return null;
-	for (const entry of readdirSync(pnpmDir)) {
-		const candidate = scope ? join(pnpmDir, entry, "node_modules", scope, name) : join(pnpmDir, entry, "node_modules", name);
-		if (existsSync(join(candidate, "package.json"))) return candidate;
-	}
-	return null;
-}
-/** Resolve a file shipped with `@keystrokehq/build` inside the CLI runtime. */
-function resolveRuntimeBuildArtifact(runtimeNodeModules, relativePath) {
-	const pkgRoot = packageRoot(runtimeNodeModules, "@keystrokehq", "build");
-	if (!pkgRoot) throw new Error("Keystroke runtime is missing @keystrokehq/build");
-	const artifact = join(pkgRoot, relativePath);
-	if (!existsSync(artifact)) throw new Error(`Keystroke runtime artifact not found: ${relativePath}`);
-	return artifact;
-}
-/** Resolve exact build-entry keys for a filtered deploy build. */
-function resolveBuildFilter(filter, buildEntries) {
-	if (filter.length === 0) throw new Error("At least one --filter entry is required");
-	const matched = {};
-	for (const key of [...new Set(filter)]) {
-		const entryPath = buildEntries[key];
-		if (!entryPath) throw new Error(`Unknown build entry "${key}". Use keys like agents/foo or workflows/bar from walkProject.`);
-		matched[key] = entryPath;
-	}
-	return matched;
-}
-function toPosix(path) {
-	return path.replace(/\\/g, "/");
-}
-function distRelativePath(entryKey) {
-	return `${entryKey}.mjs`;
-}
-function renderAssetModule$1(manifest) {
-	return `export default ${JSON.stringify(manifest)};\n`;
-}
-async function buildSingleEntry(root, entryKey, entryPath, ignoredFiles) {
-	mkdirSync(join(root, ".keystroke"), { recursive: true });
-	const scratchRoot = mkdtempSync(join(root, ".keystroke", "filter-build-"));
-	const outDir = join(scratchRoot, "dist");
-	const relativePath = distRelativePath(entryKey);
-	await build(mergeConfig(baseTsdownConfig, {
-		entry: { [entryKey]: entryPath },
-		format: ["esm"],
-		outDir,
-		clean: true,
-		dts: false,
-		loader: { ".md": "text" },
-		deps: userAppBuildDepsConfig(),
-		plugins: [keystrokeIgnoreGuardPlugin({
-			root,
-			ignoredFiles
-		})]
-	}));
-	return {
-		scratchRoot,
-		relativePath
-	};
-}
-async function manifestEntriesForBuiltModule(root, entryPath, relativePath, contents, sourceMap) {
-	const moduleFile = toPosix(relative(root, entryPath));
-	const distPath = join(root, "dist", relativePath);
-	const distMapPath = `${distPath}.map`;
-	const previousDist = existsSync(distPath) ? readFileSync(distPath) : void 0;
-	const hadMap = existsSync(distMapPath);
-	const previousMap = hadMap ? readFileSync(distMapPath) : void 0;
-	mkdirSync(dirname(distPath), { recursive: true });
-	writeFileSync(distPath, contents);
-	if (sourceMap) writeFileSync(distMapPath, sourceMap);
-	try {
-		return (await buildStoredRouteManifestForProject(root, { reloadModules: true })).entries.filter((entry) => "moduleFile" in entry && entry.moduleFile === moduleFile);
-	} finally {
-		if (previousDist) writeFileSync(distPath, previousDist);
-		else rmSync(distPath, { force: true });
-		if (previousMap) writeFileSync(distMapPath, previousMap);
-		else if (sourceMap || hadMap) rmSync(distMapPath, { force: true });
-	}
-}
-/** Build selected modules in isolation for a filtered deploy merge. */
-async function buildFilteredApp(options) {
-	const root = options.root ?? process.cwd();
-	const srcDir = options.srcDir ?? "src";
-	const phase = options.phase ?? "deploy";
-	const collectSources = options.collectSources ?? false;
-	const previous = process.cwd();
-	const workflowDiagnostics = collectWorkflowDiagnostics(root, srcDir);
-	assertWorkflowDiagnosticErrorsFrom(workflowDiagnostics);
-	const walked = walkProject(root, {
-		srcDir,
-		collectSources,
-		phase
-	});
-	const matched = resolveBuildFilter(options.filter, walked.buildEntries);
-	const files = [];
-	const manifestEntries = [];
-	try {
-		process.chdir(root);
-		for (const [entryKey, entryPath] of Object.entries(matched)) {
-			const { scratchRoot, relativePath } = await buildSingleEntry(root, entryKey, entryPath, walked.ignoredFiles);
-			try {
-				const builtPath = join(scratchRoot, "dist", relativePath);
-				const mapPath = `${builtPath}.map`;
-				const contents = readFileSync(builtPath);
-				const sourceMap = existsSync(mapPath) ? readFileSync(mapPath) : void 0;
-				files.push({
-					entryKey,
-					relativePath,
-					contents,
-					sourceMap
-				});
-				manifestEntries.push(...await manifestEntriesForBuiltModule(root, entryPath, relativePath, contents, sourceMap));
-			} finally {
-				rmSync(scratchRoot, {
-					recursive: true,
-					force: true
-				});
-			}
-		}
-		const assetsManifest = packAssetDirs(root, srcDir);
-		files.push({
-			entryKey: ".keystroke/assets",
-			relativePath: ".keystroke/assets.mjs",
-			contents: Buffer.from(renderAssetModule$1(assetsManifest), "utf8")
-		});
-	} finally {
-		warnWorkflowDiagnosticsFrom(workflowDiagnostics);
-		process.chdir(previous);
-	}
-	return {
-		files,
-		manifestEntries,
-		sourceFiles: walked.sourceFiles
-	};
-}
-const ASSETS_MODULE = "@keystrokehq/assets";
-const VIRTUAL_PREFIX = `\0${ASSETS_MODULE}:`;
-function renderAssetModule(manifest) {
-	return `export default ${JSON.stringify(manifest)};\n`;
-}
-/** Rolldown plugin: pack src/skills + src/files and expose `@keystrokehq/assets`. */
-function agentAssetsPlugin(options) {
-	const srcDir = options.srcDir ?? "src";
-	let manifest = null;
-	return {
-		name: "keystroke-assets",
-		buildStart() {
-			manifest = packAssetDirs(options.root, srcDir);
-		},
-		resolveId(source) {
-			if (source !== ASSETS_MODULE) return null;
-			return `${VIRTUAL_PREFIX}manifest`;
-		},
-		load(id) {
-			if (id !== `${VIRTUAL_PREFIX}manifest` || !manifest) return null;
-			return renderAssetModule(manifest);
-		},
-		buildEnd() {
-			if (!manifest) return;
-			const outDir = join(options.root, options.outDir ?? "dist", ".keystroke");
-			mkdirSync(outDir, { recursive: true });
-			writeFileSync(join(outDir, "assets.mjs"), renderAssetModule(manifest));
-		}
-	};
-}
-/** Full tsdown config for user keystroke apps (config + discovered modules only). */
-function createAppBuildConfig(options = {}, walked) {
-	const root = options.root ?? process.cwd();
-	const srcDir = options.srcDir ?? "src";
-	const outDir = options.outDir ?? "dist";
-	const configEntry = existsSync(join(root, "keystroke.config.ts")) ? join(root, "keystroke.config.ts") : void 0;
-	const walkedResult = walked ?? walkProject(root, {
-		srcDir,
-		phase: options.phase
-	});
-	const discovered = walkedResult.buildEntries;
-	const ignoredFiles = walkedResult.ignoredFiles;
-	const entries = {
-		...configEntry ? { config: configEntry } : {},
-		...discovered
-	};
-	if (Object.keys(entries).length === 0) throw new Error("Nothing to build — add keystroke.config.ts or modules under src/");
-	return mergeConfig(baseTsdownConfig, {
-		entry: entries,
-		format: ["esm"],
-		outDir: join(root, outDir),
-		clean: options.clean ?? true,
-		dts: false,
-		loader: { ".md": "text" },
-		deps: userAppBuildDepsConfig(),
-		plugins: [
-			keystrokeIgnoreGuardPlugin({
-				root,
-				ignoredFiles
-			}),
-			callSiteIdInjectionPlugin({
-				root,
-				srcDir
-			}),
-			agentAssetsPlugin({
-				root,
-				srcDir,
-				outDir
-			})
-		]
-	});
-}
-/** Build user agents, workflows, triggers, and config to `dist/`. */
-async function buildApp(options = {}) {
-	const root = options.root ?? process.cwd();
-	const srcDir = options.srcDir ?? "src";
-	const emitManifest = options.emitManifest ?? true;
-	const collectSources = options.collectSources ?? false;
-	const phase = options.phase ?? "build";
-	const previous = process.cwd();
-	const walked = walkProject(root, {
-		srcDir,
-		collectSources,
-		phase
-	});
-	try {
-		process.chdir(root);
-		const workflowDiagnostics = collectWorkflowDiagnostics(root, srcDir);
-		assertWorkflowDiagnosticErrorsFrom(workflowDiagnostics);
-		try {
-			await build(createAppBuildConfig({
-				...options,
-				root
-			}, {
-				buildEntries: walked.buildEntries,
-				ignoredFiles: walked.ignoredFiles
-			}));
-		} finally {
-			warnWorkflowDiagnosticsFrom(workflowDiagnostics);
-		}
-		if (emitManifest) {
-			const { emitStoredRouteManifestForProject } = await import("./dist-Duu6X1Sh.mjs");
-			await emitStoredRouteManifestForProject(root);
-		}
-	} finally {
-		process.chdir(previous);
-	}
-	return { sourceFiles: walked.sourceFiles };
-}
-/**
-* Watch `src/` and rebuild `dist/` on change.
-*
-* NOT true hot reload — each change runs a full tsdown rebuild. Callers should
-* restart the API server in `onRebuild` so discovery picks up new/changed modules.
-*/
-async function watchApp(options = {}) {
-	const { runWatchApp } = await import("./watch-app-DTIeKrbl-CSpsNzVG.mjs");
-	await runWatchApp((watchOptions) => buildApp({
-		...watchOptions,
-		emitManifest: false,
-		collectSources: false
-	}), options);
-}
-//#endregion
-export { buildApp, buildFilteredApp, resolveRuntimeBuildArtifact, watchApp };
-
-//# sourceMappingURL=dist-CyKcvwuI.mjs.map