@keystrokehq/hosting 0.1.16 → 0.1.18

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { a as ProjectRuntimeDatabase, c as ProjectRuntimeInput, d as encodeOrgArtifacts, f as parseOrgArtifactsFromEnv, i as ProjectRuntime, l as ProjectRuntimeReconcileInput, n as OrgProjectDeploy, o as ProjectRuntimeDestroyInput, r as ProjectPingTarget, s as ProjectRuntimeHosting, t as OrgArtifactSpec, u as ProjectRuntimeResult } from "./runtime-B0jF0oMv.mjs";
-import { a as WorkerRuntimeConfig, i as OrganizationHostingResult, n as HostingPlugin, o as WorkerRuntimeConfigError, r as OrganizationHostingInput, s as resolveWorkerRuntimeConfig, t as HostingOptions } from "./plugin-qEl5Sx4m.mjs";
+import { a as ProjectRuntimeDatabase, c as ProjectRuntimeInput, d as ProjectRuntimeSleepInput, f as ProjectRuntimeWakeInput, i as ProjectRuntime, l as ProjectRuntimeReconcileInput, m as parseOrgArtifactsFromEnv, n as OrgProjectDeploy, o as ProjectRuntimeDestroyInput, p as encodeOrgArtifacts, r as ProjectPingTarget, s as ProjectRuntimeHosting, t as OrgArtifactSpec, u as ProjectRuntimeResult } from "./runtime-Cp906goK.mjs";
+import { a as WorkerRuntimeConfig, i as OrganizationHostingResult, n as HostingPlugin, o as WorkerRuntimeConfigError, r as OrganizationHostingInput, s as resolveWorkerRuntimeConfig, t as HostingOptions } from "./plugin-eiAXqE7P.mjs";
 
 //#region src/constants.d.ts
 declare const PROJECT_SERVER_IMAGE = "keystroke/project-server:local";
@@ -16,9 +16,41 @@ declare const PROJECT_SERVER_DEPLOY_STATUS: {
   readonly port: 3000;
 };
 //#endregion
+//#region src/runtime-control.d.ts
+declare const PROJECT_SERVER_CONTROL: {
+  readonly load: "/control/projects/load";
+  readonly promote: "/control/projects/promote";
+  readonly unload: "/control/projects/unload";
+  readonly port: 3000;
+};
+type LoadProjectOnRuntimeInput = {
+  projectId: string;
+  artifactId: string;
+  artifactVersion: number;
+  storageKey: string;
+  activate?: boolean;
+};
+type RuntimeControlOptions = {
+  fetchImpl?: typeof fetch;
+  timeoutMs?: number; /** Bearer token — typically the org's WORKER_INTERNAL_TOKEN. */
+  workerToken?: string;
+};
+declare function loadProjectOnRuntime(baseUrl: string, input: LoadProjectOnRuntimeInput, options?: RuntimeControlOptions): Promise<void>;
+declare function promoteProjectOnRuntime(baseUrl: string, input: {
+  projectId: string;
+  artifactId: string;
+}, options?: RuntimeControlOptions): Promise<void>;
+declare function unloadProjectOnRuntime(baseUrl: string, input: {
+  projectId: string;
+  artifactId: string;
+  force?: boolean;
+}, options?: RuntimeControlOptions): Promise<void>;
+/** True when the org runtime answers /health. */
+declare function pingRuntimeHealth(baseUrl: string, options?: RuntimeControlOptions): Promise<boolean>;
+//#endregion
 //#region src/runtime-env.d.ts
 /** Env keys that must never be forwarded into untrusted org workers. */
-declare const FORBIDDEN_WORKER_ENV_KEYS: readonly ["BETTER_AUTH_SECRET", "DATABASE_URL", "POSTHOG_API_KEY", "POSTGRES_PASSWORD", "PLATFORM_WORKER_TOKEN", "STRIPE_SECRET_KEY", "CREDENTIAL_ENCRYPTION_KEY"];
+declare const FORBIDDEN_WORKER_ENV_KEYS: readonly ["BETTER_AUTH_SECRET", "DATABASE_URL", "POSTHOG_API_KEY", "POSTGRES_PASSWORD", "PLATFORM_WORKER_TOKEN", "STRIPE_SECRET_KEY", "CREDENTIAL_ENCRYPTION_KEY", "TURNSTILE_SECRET"];
 /** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */
 declare const DEV_PLATFORM_WORKER_TOKEN = "dev-platform-worker-token";
 type RuntimeLaunchSpec = {
@@ -93,19 +125,57 @@ type ProjectDeployStatus = {
   ok: boolean;
   error?: string;
 };
+type VersionDeployStatus = {
+  projectId: string;
+  artifactId: string;
+  state: "active" | "resident" | "indexed";
+  ok: boolean;
+  activeJobCount?: number;
+  error?: string;
+};
 type DeployStatusResponse = {
   projects: ProjectDeployStatus[];
+  versions?: VersionDeployStatus[];
 };
 type FetchDeployStatusOptions = {
   fetchImpl?: typeof fetch;
   timeoutMs?: number;
 };
+type WaitForDeployStatusOptions = {
+  fetchImpl?: typeof fetch;
+  timeoutMs?: number;
+  intervalMs?: number;
+};
 /**
  * Ask a running org machine which projects bootstrapped and which failed.
- * Best-effort: returns undefined on any error so callers can fall back to
- * treating every project as healthy (preserving pre-existing behavior).
+ * Returns undefined when the endpoint is unreachable, non-OK, times out, or
+ * returns an unusable payload — callers must treat that as non-affirmative
+ * health for every pending project (never promote on silence).
  */
 declare function fetchDeployStatus(baseUrl: string, options?: FetchDeployStatusOptions): Promise<DeployStatusResponse | undefined>;
+/**
+ * Poll `/deploy-status` until the real worker returns a usable payload or the
+ * deadline expires. Retries only transient unavailability (network errors,
+ * non-2xx including early-health 404, timeouts, malformed bodies). Any valid
+ * `{ projects: [...] }` response — including empty or explicit failures — is
+ * terminal so genuine bootstrap errors surface immediately.
+ */
+declare function waitForDeployStatus(baseUrl: string, options?: WaitForDeployStatusOptions): Promise<DeployStatusResponse | undefined>;
+type DeployHealthVerdict = {
+  ok: true;
+} | {
+  ok: false;
+  error: string;
+};
+/**
+ * Require an explicit `{ projectId, ok: true }` entry for each candidate.
+ * Missing entries, `ok: false`, empty `projects`, or an unavailable status
+ * response all fail closed for that project.
+ */
+declare function classifyDeployHealth(input: {
+  projectIds: string[];
+  deployStatus: DeployStatusResponse | undefined;
+}): Map<string, DeployHealthVerdict>;
 //#endregion
-export { DEV_PLATFORM_WORKER_TOKEN, type DeployStatusResponse, FORBIDDEN_WORKER_ENV_KEYS, type FetchDeployStatusOptions, type HostingOptions, type HostingPlugin, type OrgArtifactSpec, type OrgProjectDeploy, type OrganizationHostingInput, type OrganizationHostingResult, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, type PingProjectOptions, type ProjectDeployStatus, type ProjectPingTarget, type ProjectRuntime, type ProjectRuntimeDatabase, type ProjectRuntimeDestroyInput, type ProjectRuntimeHosting, type ProjectRuntimeInput, type ProjectRuntimeReconcileInput, type ProjectRuntimeResult, RUNTIME_PING_TIMEOUT_MS, type RuntimeLaunchSpec, type VerifiedOrgWorkerToken, type WaitForHealthOptions, type WorkerRuntimeConfig, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, verifyOrgWorkerToken, waitForHealth };
+export { DEV_PLATFORM_WORKER_TOKEN, type DeployHealthVerdict, type DeployStatusResponse, FORBIDDEN_WORKER_ENV_KEYS, type FetchDeployStatusOptions, type HostingOptions, type HostingPlugin, type LoadProjectOnRuntimeInput, type OrgArtifactSpec, type OrgProjectDeploy, type OrganizationHostingInput, type OrganizationHostingResult, PROJECT_SERVER_CONTROL, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, type PingProjectOptions, type ProjectDeployStatus, type ProjectPingTarget, type ProjectRuntime, type ProjectRuntimeDatabase, type ProjectRuntimeDestroyInput, type ProjectRuntimeHosting, type ProjectRuntimeInput, type ProjectRuntimeReconcileInput, type ProjectRuntimeResult, type ProjectRuntimeSleepInput, type ProjectRuntimeWakeInput, RUNTIME_PING_TIMEOUT_MS, type RuntimeControlOptions, type RuntimeLaunchSpec, type VerifiedOrgWorkerToken, type VersionDeployStatus, type WaitForDeployStatusOptions, type WaitForHealthOptions, type WorkerRuntimeConfig, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, classifyDeployHealth, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, loadProjectOnRuntime, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, pingRuntimeHealth, promoteProjectOnRuntime, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, unloadProjectOnRuntime, verifyOrgWorkerToken, waitForDeployStatus, waitForHealth };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/constants.ts","../src/runtime-env.ts","../src/org-worker-token.ts","../src/wait-for-health.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts","../src/deploy-status.ts"],"mappings":";;;;cAAa,oBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,6BAAA;AAAA,cAEA,qCAAA;AAAA,cAEA,qBAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;AAAA,cAEG,4BAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;;;AAlBV;AAAA,cCyCa,yBAAA;;cAmBA,yBAAA;AAAA,KAED,iBAAA;EACV,KAAA;EACA,GAAA,EAAK,MAAA;EACL,IAAA;EACA,MAAA,SAAe,qBAAqB;AAAA;AD9DtC;;;;AAAA,iBCqEgB,oBAAA,CACd,OAAA,EAAS,cAAA,EACT,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,iBAAA;;iBAsCa,eAAA,CACd,MAAA,EAAQ,MAAA,CAAO,UAAA,EACf,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,MAAA;AAAA,iBA2Da,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;;iBAezB,wBAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;;iBAczB,mBAAA,CAAoB,IAAY;AAAA,iBAQhC,kBAAA,CAAmB,GAAW;;iBAW9B,eAAA,CAAgB,GAA2B,EAAtB,MAAM;AAAA,iBAI3B,yBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAwB,EACpC,QAAA;;;;;;;AD5OF;iBEWgB,kBAAA,CAAmB,MAAA,UAAgB,cAAsB;AAAA,KAI7D,sBAAA;EACV,cAAc;AAAA;AAAA,iBAGA,oBAAA,CACd,MAAA,sBACA,KAAA,uBACC,sBAAsB;;;KCjBb,oBAAA;EACV,SAAA;EACA,UAAA;EACA,SAAA,UAAmB,KAAK;AAAA;AAAA,iBAGJ,aAAA,CACpB,OAAA,UACA,OAAA,GAAS,oBAAA,GACR,OAAO;;;;cCbG,uBAAA;;;KCGD,kBAAA;EACV,SAAA;EACA,SAAA,UAAmB,KAAA;EACnB,SAAA;EACA,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA;AAAA,iBAGM,WAAA,CACpB,OAAA,UACA,OAAA,GAAS,kBAAA,GACR,OAAO;;;iBCVM,oBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,MAAA,GAAS,IAAA,CAAK,aAAA,qBACb,MAAA;EAAY,OAAA;EAAiB,SAAA;AAAA;AAAA,iBAQV,iBAAA,CACpB,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAS,kBAAA;EACP,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA,IAEf,OAAA;;;;KChBS,mBAAA;EACV,SAAA;EACA,EAAA;EACA,KAAA;AAAA;AAAA,KAGU,oBAAA;EACV,QAAA,EAAU,mBAAmB;AAAA;AAAA,KAGnB,wBAAA;EACV,SAAA,UAAmB,KAAK;EACxB,SAAA;AAAA;APd8B;AAEhC;;;;AAFgC,iBOsBV,iBAAA,CACpB,OAAA,UACA,OAAA,GAAS,wBAAA,GACR,OAAA,CAAQ,oBAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/constants.ts","../src/runtime-control.ts","../src/runtime-env.ts","../src/org-worker-token.ts","../src/wait-for-health.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts","../src/deploy-status.ts"],"mappings":";;;;cAAa,oBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,6BAAA;AAAA,cAEA,qCAAA;AAAA,cAEA,qBAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;AAAA,cAEG,4BAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;;;cCfG,sBAAA;EAAA;;;;;KAOD,yBAAA;EACV,SAAA;EACA,UAAA;EACA,eAAA;EACA,UAAA;EACA,QAAA;AAAA;AAAA,KAGU,qBAAA;EACV,SAAA,UAAmB,KAAK;EACxB,SAAA;EAEA,WAAA;AAAA;AAAA,iBAoCoB,oBAAA,CACpB,OAAA,UACA,KAAA,EAAO,yBAAA,EACP,OAAA,GAAS,qBAAA,GACR,OAAA;AAAA,iBAImB,uBAAA,CACpB,OAAA,UACA,KAAA;EAAS,SAAA;EAAmB,UAAA;AAAA,GAC5B,OAAA,GAAS,qBAAA,GACR,OAAO;AAAA,iBAIY,sBAAA,CACpB,OAAA,UACA,KAAA;EAAS,SAAA;EAAmB,UAAA;EAAoB,KAAA;AAAA,GAChD,OAAA,GAAS,qBAAA,GACR,OAAO;ADpEV;AAAA,iBCyEsB,iBAAA,CACpB,OAAA,UACA,OAAA,GAAS,qBAAA,GACR,OAAO;;;ADtFV;AAAA,cEyCa,yBAAA;;cAoBA,yBAAA;AAAA,KAED,iBAAA;EACV,KAAA;EACA,GAAA,EAAK,MAAA;EACL,IAAA;EACA,MAAA,SAAe,qBAAqB;AAAA;AF/DtC;;;;AAAA,iBEsEgB,oBAAA,CACd,OAAA,EAAS,cAAA,EACT,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,iBAAA;;iBAsCa,eAAA,CACd,MAAA,EAAQ,MAAA,CAAO,UAAA,EACf,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,MAAA;AAAA,iBA2Da,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;;iBAezB,wBAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;;iBAczB,mBAAA,CAAoB,IAAY;AAAA,iBAQhC,kBAAA,CAAmB,GAAW;;iBAW9B,eAAA,CAAgB,GAA2B,EAAtB,MAAM;AAAA,iBAI3B,yBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAwB,EACpC,QAAA;;;;;;;AF7OF;iBGWgB,kBAAA,CAAmB,MAAA,UAAgB,cAAsB;AAAA,KAI7D,sBAAA;EACV,cAAc;AAAA;AAAA,iBAGA,oBAAA,CACd,MAAA,sBACA,KAAA,uBACC,sBAAsB;;;KCjBb,oBAAA;EACV,SAAA;EACA,UAAA;EACA,SAAA,UAAmB,KAAK;AAAA;AAAA,iBAGJ,aAAA,CACpB,OAAA,UACA,OAAA,GAAS,oBAAA,GACR,OAAO;;;;cCbG,uBAAA;;;KCGD,kBAAA;EACV,SAAA;EACA,SAAA,UAAmB,KAAA;EACnB,SAAA;EACA,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA;AAAA,iBAGM,WAAA,CACpB,OAAA,UACA,OAAA,GAAS,kBAAA,GACR,OAAO;;;iBCVM,oBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,MAAA,GAAS,IAAA,CAAK,aAAA,qBACb,MAAA;EAAY,OAAA;EAAiB,SAAA;AAAA;AAAA,iBAQV,iBAAA,CACpB,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAS,kBAAA;EACP,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA,IAEf,OAAA;;;;KCZS,mBAAA;EACV,SAAA;EACA,EAAA;EACA,KAAA;AAAA;AAAA,KAGU,mBAAA;EACV,SAAA;EACA,UAAA;EACA,KAAA;EACA,EAAA;EACA,cAAA;EACA,KAAA;AAAA;AAAA,KAGU,oBAAA;EACV,QAAA,EAAU,mBAAA;EACV,QAAA,GAAW,mBAAmB;AAAA;AAAA,KAGpB,wBAAA;EACV,SAAA,UAAmB,KAAK;EACxB,SAAA;AAAA;AAAA,KAGU,0BAAA;EACV,SAAA,UAAmB,KAAK;EACxB,SAAA;EACA,UAAA;AAAA;;AR5BgD;AAElD;;;;iBQmCsB,iBAAA,CACpB,OAAA,UACA,OAAA,GAAS,wBAAA,GACR,OAAA,CAAQ,oBAAA;ARjCX;;;;;;;AAAA,iBQiEsB,mBAAA,CACpB,OAAA,UACA,OAAA,GAAS,0BAAA,GACR,OAAA,CAAQ,oBAAA;AAAA,KA+BC,mBAAA;EAAwB,EAAA;AAAA;EAAe,EAAA;EAAW,KAAA;AAAA;;;;;APxG9D;iBO+GgB,oBAAA,CAAqB,KAAA;EACnC,UAAA;EACA,YAAA,EAAc,oBAAA;AAAA,IACZ,GAAA,SAAY,mBAAA"}

package/dist/index.mjs

@@ -1,9 +1,49 @@
-import { S as PROJECT_SERVER_ROOT, _ as PROJECT_SERVER_FRAMEWORK_NODE_MODULES, a as formatDockerEnv, b as PROJECT_SERVER_IMAGE, c as resolveRuntimeLaunch, d as rewriteLoopbackUrl, f as mintOrgWorkerToken, g as PROJECT_SERVER_DEPLOY_STATUS, h as resolveWorkerRuntimeConfig, i as buildRuntimeEnv, l as resolveWorkerPlatformUrl, m as WorkerRuntimeConfigError, n as DEV_PLATFORM_WORKER_TOKEN, o as resolvePlatformWorkerToken, p as verifyOrgWorkerToken, r as FORBIDDEN_WORKER_ENV_KEYS, s as resolveProjectServerImage, t as waitForHealth, u as rewriteLoopbackHost, v as PROJECT_SERVER_FRAMEWORK_ROOT, x as PROJECT_SERVER_PORT, y as PROJECT_SERVER_HEALTH } from "./wait-for-health-XEzPPQIO.mjs";
+import { S as PROJECT_SERVER_ROOT, _ as PROJECT_SERVER_FRAMEWORK_NODE_MODULES, a as formatDockerEnv, b as PROJECT_SERVER_IMAGE, c as resolveRuntimeLaunch, d as rewriteLoopbackUrl, f as mintOrgWorkerToken, g as PROJECT_SERVER_DEPLOY_STATUS, h as resolveWorkerRuntimeConfig, i as buildRuntimeEnv, l as resolveWorkerPlatformUrl, m as WorkerRuntimeConfigError, n as DEV_PLATFORM_WORKER_TOKEN, o as resolvePlatformWorkerToken, p as verifyOrgWorkerToken, r as FORBIDDEN_WORKER_ENV_KEYS, s as resolveProjectServerImage, t as waitForHealth, u as rewriteLoopbackHost, v as PROJECT_SERVER_FRAMEWORK_ROOT, x as PROJECT_SERVER_PORT, y as PROJECT_SERVER_HEALTH } from "./wait-for-health-B4-AM1NR.mjs";
 import { n as parseOrgArtifactsFromEnv, t as encodeOrgArtifacts } from "./runtime-BmfsHLrk.mjs";
 //#region src/runtime-constants.ts
 /** Timeout for a single project runtime `/health` probe. */
 const RUNTIME_PING_TIMEOUT_MS = 15e3;
 //#endregion
+//#region src/runtime-control.ts
+const PROJECT_SERVER_CONTROL = {
+	load: "/control/projects/load",
+	promote: "/control/projects/promote",
+	unload: "/control/projects/unload",
+	port: PROJECT_SERVER_PORT
+};
+async function postControl(baseUrl, path, body, options = {}) {
+	const timeoutMs = options.timeoutMs ?? 15e3;
+	const headers = { "content-type": "application/json" };
+	if (options.workerToken) headers.authorization = `Bearer ${options.workerToken}`;
+	const response = await (options.fetchImpl ?? fetch)(new URL(path, baseUrl), {
+		method: "POST",
+		headers,
+		body: JSON.stringify(body),
+		signal: AbortSignal.timeout(timeoutMs)
+	});
+	const data = await response.json().catch(() => ({}));
+	if (!response.ok || data.ok === false) throw new Error(typeof data.error === "string" ? data.error : `Runtime control ${path} failed (${response.status})`);
+	return data;
+}
+async function loadProjectOnRuntime(baseUrl, input, options = {}) {
+	await postControl(baseUrl, PROJECT_SERVER_CONTROL.load, input, options);
+}
+async function promoteProjectOnRuntime(baseUrl, input, options = {}) {
+	await postControl(baseUrl, PROJECT_SERVER_CONTROL.promote, input, options);
+}
+async function unloadProjectOnRuntime(baseUrl, input, options = {}) {
+	await postControl(baseUrl, PROJECT_SERVER_CONTROL.unload, input, options);
+}
+/** True when the org runtime answers /health. */
+async function pingRuntimeHealth(baseUrl, options = {}) {
+	const timeoutMs = options.timeoutMs ?? 15e3;
+	try {
+		return (await (options.fetchImpl ?? fetch)(new URL("/health", baseUrl), { signal: AbortSignal.timeout(timeoutMs) })).ok;
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/ping-project.ts
 async function pingProject(baseUrl, options = {}) {
 	const timeoutMs = options.timeoutMs ?? 15e3;
@@ -32,10 +72,14 @@ async function pingProjectTarget(target, options = {}) {
 }
 //#endregion
 //#region src/deploy-status.ts
+const DEFAULT_WAIT_TIMEOUT_MS = 12e4;
+const DEFAULT_WAIT_INTERVAL_MS = 500;
+const REQUEST_TIMEOUT_MS = 2e3;
 /**
 * Ask a running org machine which projects bootstrapped and which failed.
-* Best-effort: returns undefined on any error so callers can fall back to
-* treating every project as healthy (preserving pre-existing behavior).
+* Returns undefined when the endpoint is unreachable, non-OK, times out, or
+* returns an unusable payload — callers must treat that as non-affirmative
+* health for every pending project (never promote on silence).
 */
 async function fetchDeployStatus(baseUrl, options = {}) {
 	const timeoutMs = options.timeoutMs ?? 15e3;
@@ -50,7 +94,70 @@ async function fetchDeployStatus(baseUrl, options = {}) {
 		return;
 	}
 }
+/**
+* Poll `/deploy-status` until the real worker returns a usable payload or the
+* deadline expires. Retries only transient unavailability (network errors,
+* non-2xx including early-health 404, timeouts, malformed bodies). Any valid
+* `{ projects: [...] }` response — including empty or explicit failures — is
+* terminal so genuine bootstrap errors surface immediately.
+*/
+async function waitForDeployStatus(baseUrl, options = {}) {
+	const timeoutMs = options.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
+	const intervalMs = options.intervalMs ?? DEFAULT_WAIT_INTERVAL_MS;
+	const deadline = Date.now() + timeoutMs;
+	while (Date.now() < deadline) {
+		const remainingMs = deadline - Date.now();
+		const requestTimeoutMs = Math.min(REQUEST_TIMEOUT_MS, Math.max(1, remainingMs));
+		const status = await fetchDeployStatus(baseUrl, {
+			fetchImpl: options.fetchImpl,
+			timeoutMs: requestTimeoutMs
+		});
+		if (status) return status;
+		if (Date.now() + intervalMs >= deadline) break;
+		await sleep(intervalMs);
+	}
+}
+function sleep(ms) {
+	return new Promise((resolve) => {
+		setTimeout(resolve, ms);
+	});
+}
+/**
+* Require an explicit `{ projectId, ok: true }` entry for each candidate.
+* Missing entries, `ok: false`, empty `projects`, or an unavailable status
+* response all fail closed for that project.
+*/
+function classifyDeployHealth(input) {
+	const verdicts = /* @__PURE__ */ new Map();
+	if (!input.deployStatus) {
+		for (const projectId of input.projectIds) verdicts.set(projectId, {
+			ok: false,
+			error: "Deploy health status unavailable"
+		});
+		return verdicts;
+	}
+	const byId = new Map(input.deployStatus.projects.filter((entry) => typeof entry?.projectId === "string" && entry.projectId.length > 0).map((entry) => [entry.projectId, entry]));
+	for (const projectId of input.projectIds) {
+		const entry = byId.get(projectId);
+		if (!entry) {
+			verdicts.set(projectId, {
+				ok: false,
+				error: "Deploy health status omitted project"
+			});
+			continue;
+		}
+		if (entry.ok !== true) {
+			verdicts.set(projectId, {
+				ok: false,
+				error: entry.error?.trim() || "Project failed to start"
+			});
+			continue;
+		}
+		verdicts.set(projectId, { ok: true });
+	}
+	return verdicts;
+}
 //#endregion
-export { DEV_PLATFORM_WORKER_TOKEN, FORBIDDEN_WORKER_ENV_KEYS, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, RUNTIME_PING_TIMEOUT_MS, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, verifyOrgWorkerToken, waitForHealth };
+export { DEV_PLATFORM_WORKER_TOKEN, FORBIDDEN_WORKER_ENV_KEYS, PROJECT_SERVER_CONTROL, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, RUNTIME_PING_TIMEOUT_MS, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, classifyDeployHealth, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, loadProjectOnRuntime, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, pingRuntimeHealth, promoteProjectOnRuntime, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, unloadProjectOnRuntime, verifyOrgWorkerToken, waitForDeployStatus, waitForHealth };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts","../src/deploy-status.ts"],"sourcesContent":["/** Timeout for a single project runtime `/health` probe. */\nexport const RUNTIME_PING_TIMEOUT_MS = 15_000;\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\nimport type { HostingPlugin } from \"./plugin\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport type PingProjectOptions = {\n  runtimeId?: string | null;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  plugin?: Pick<HostingPlugin, \"pingRequestHeaders\">;\n};\n\nexport async function pingProject(\n  baseUrl: string,\n  options: PingProjectOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_HEALTH.path, baseUrl),\n      {\n        signal: AbortSignal.timeout(timeoutMs),\n        headers,\n      },\n    );\n\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport type { ProjectPingTarget } from \"./runtime\";\nimport { pingProject, type PingProjectOptions } from \"./ping-project\";\n\nexport function canPingProjectTarget(\n  target: ProjectPingTarget,\n  plugin?: Pick<HostingPlugin, \"canPingTarget\">,\n): target is { baseUrl: string; runtimeId: string | null } {\n  if (plugin?.canPingTarget) {\n    return plugin.canPingTarget(target);\n  }\n\n  return !!target.baseUrl;\n}\n\nexport async function pingProjectTarget(\n  target: ProjectPingTarget,\n  options: PingProjectOptions & {\n    plugin?: Pick<HostingPlugin, \"canPingTarget\" | \"pingRequestHeaders\">;\n  } = {},\n): Promise<boolean> {\n  if (!canPingProjectTarget(target, options.plugin)) {\n    return false;\n  }\n\n  return pingProject(target.baseUrl, {\n    ...options,\n    runtimeId: target.runtimeId,\n  });\n}\n","import { PROJECT_SERVER_DEPLOY_STATUS } from \"./constants\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\n/** Per-project bootstrap outcome reported by an org runtime machine. */\nexport type ProjectDeployStatus = {\n  projectId: string;\n  ok: boolean;\n  error?: string;\n};\n\nexport type DeployStatusResponse = {\n  projects: ProjectDeployStatus[];\n};\n\nexport type FetchDeployStatusOptions = {\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n};\n\n/**\n * Ask a running org machine which projects bootstrapped and which failed.\n * Best-effort: returns undefined on any error so callers can fall back to\n * treating every project as healthy (preserving pre-existing behavior).\n */\nexport async function fetchDeployStatus(\n  baseUrl: string,\n  options: FetchDeployStatusOptions = {},\n): Promise<DeployStatusResponse | undefined> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_DEPLOY_STATUS.path, baseUrl),\n      { signal: AbortSignal.timeout(timeoutMs) },\n    );\n\n    if (!response.ok) {\n      return undefined;\n    }\n\n    const data = (await response.json()) as DeployStatusResponse;\n    if (!data || !Array.isArray(data.projects)) {\n      return undefined;\n    }\n\n    return data;\n  } catch (error) {\n    // Best-effort: fall back to promote-all, but log so a consistently\n    // unreachable /deploy-status (port/6PN/version skew) is diagnosable rather\n    // than silently re-creating the pre-fix behavior.\n    console.warn(`[deploy-status] failed to fetch from ${baseUrl}:`, error);\n    return undefined;\n  }\n}\n"],"mappings":";;;;AACA,MAAa,0BAA0B;;;ACUvC,eAAsB,YACpB,SACA,UAA8B,CAAC,GACb;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAU,QAAQ,QAAQ,qBAAqB,QAAQ,aAAa,IAAI,KAAK,CAAC;CAEpF,IAAI;EASF,QAAO,OARiB,QAAQ,aAAa,OAC3C,IAAI,IAAI,sBAAsB,MAAM,OAAO,GAC3C;GACE,QAAQ,YAAY,QAAQ,SAAS;GACrC;EACF,CACF,GAEgB;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;AC3BA,SAAgB,qBACd,QACA,QACyD;CACzD,IAAI,QAAQ,eACV,OAAO,OAAO,cAAc,MAAM;CAGpC,OAAO,CAAC,CAAC,OAAO;AAClB;AAEA,eAAsB,kBACpB,QACA,UAEI,CAAC,GACa;CAClB,IAAI,CAAC,qBAAqB,QAAQ,QAAQ,MAAM,GAC9C,OAAO;CAGT,OAAO,YAAY,OAAO,SAAS;EACjC,GAAG;EACH,WAAW,OAAO;CACpB,CAAC;AACH;;;;;;;;ACLA,eAAsB,kBACpB,SACA,UAAoC,CAAC,GACM;CAC3C,MAAM,YAAY,QAAQ,aAAA;CAE1B,IAAI;EACF,MAAM,WAAW,OAAO,QAAQ,aAAa,OAC3C,IAAI,IAAI,6BAA6B,MAAM,OAAO,GAClD,EAAE,QAAQ,YAAY,QAAQ,SAAS,EAAE,CAC3C;EAEA,IAAI,CAAC,SAAS,IACZ;EAGF,MAAM,OAAQ,MAAM,SAAS,KAAK;EAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,QAAQ,GACvC;EAGF,OAAO;CACT,SAAS,OAAO;EAId,QAAQ,KAAK,wCAAwC,QAAQ,IAAI,KAAK;EACtE;CACF;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/runtime-constants.ts","../src/runtime-control.ts","../src/ping-project.ts","../src/ping-project-target.ts","../src/deploy-status.ts"],"sourcesContent":["/** Timeout for a single project runtime `/health` probe. */\nexport const RUNTIME_PING_TIMEOUT_MS = 15_000;\n","import { PROJECT_SERVER_PORT } from \"./constants\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport const PROJECT_SERVER_CONTROL = {\n  load: \"/control/projects/load\",\n  promote: \"/control/projects/promote\",\n  unload: \"/control/projects/unload\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n\nexport type LoadProjectOnRuntimeInput = {\n  projectId: string;\n  artifactId: string;\n  artifactVersion: number;\n  storageKey: string;\n  activate?: boolean;\n};\n\nexport type RuntimeControlOptions = {\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  /** Bearer token — typically the org's WORKER_INTERNAL_TOKEN. */\n  workerToken?: string;\n};\n\nasync function postControl<T>(\n  baseUrl: string,\n  path: string,\n  body: unknown,\n  options: RuntimeControlOptions = {},\n): Promise<T> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers: Record<string, string> = {\n    \"content-type\": \"application/json\",\n  };\n  if (options.workerToken) {\n    headers.authorization = `Bearer ${options.workerToken}`;\n  }\n\n  const response = await (options.fetchImpl ?? fetch)(new URL(path, baseUrl), {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify(body),\n    signal: AbortSignal.timeout(timeoutMs),\n  });\n\n  const data = (await response.json().catch(() => ({}))) as T & { ok?: boolean; error?: string };\n  if (!response.ok || data.ok === false) {\n    throw new Error(\n      typeof data.error === \"string\"\n        ? data.error\n        : `Runtime control ${path} failed (${response.status})`,\n    );\n  }\n\n  return data;\n}\n\nexport async function loadProjectOnRuntime(\n  baseUrl: string,\n  input: LoadProjectOnRuntimeInput,\n  options: RuntimeControlOptions = {},\n): Promise<void> {\n  await postControl(baseUrl, PROJECT_SERVER_CONTROL.load, input, options);\n}\n\nexport async function promoteProjectOnRuntime(\n  baseUrl: string,\n  input: { projectId: string; artifactId: string },\n  options: RuntimeControlOptions = {},\n): Promise<void> {\n  await postControl(baseUrl, PROJECT_SERVER_CONTROL.promote, input, options);\n}\n\nexport async function unloadProjectOnRuntime(\n  baseUrl: string,\n  input: { projectId: string; artifactId: string; force?: boolean },\n  options: RuntimeControlOptions = {},\n): Promise<void> {\n  await postControl(baseUrl, PROJECT_SERVER_CONTROL.unload, input, options);\n}\n\n/** True when the org runtime answers /health. */\nexport async function pingRuntimeHealth(\n  baseUrl: string,\n  options: RuntimeControlOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  try {\n    const response = await (options.fetchImpl ?? fetch)(new URL(\"/health\", baseUrl), {\n      signal: AbortSignal.timeout(timeoutMs),\n    });\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\nimport type { HostingPlugin } from \"./plugin\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport type PingProjectOptions = {\n  runtimeId?: string | null;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  plugin?: Pick<HostingPlugin, \"pingRequestHeaders\">;\n};\n\nexport async function pingProject(\n  baseUrl: string,\n  options: PingProjectOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_HEALTH.path, baseUrl),\n      {\n        signal: AbortSignal.timeout(timeoutMs),\n        headers,\n      },\n    );\n\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport type { ProjectPingTarget } from \"./runtime\";\nimport { pingProject, type PingProjectOptions } from \"./ping-project\";\n\nexport function canPingProjectTarget(\n  target: ProjectPingTarget,\n  plugin?: Pick<HostingPlugin, \"canPingTarget\">,\n): target is { baseUrl: string; runtimeId: string | null } {\n  if (plugin?.canPingTarget) {\n    return plugin.canPingTarget(target);\n  }\n\n  return !!target.baseUrl;\n}\n\nexport async function pingProjectTarget(\n  target: ProjectPingTarget,\n  options: PingProjectOptions & {\n    plugin?: Pick<HostingPlugin, \"canPingTarget\" | \"pingRequestHeaders\">;\n  } = {},\n): Promise<boolean> {\n  if (!canPingProjectTarget(target, options.plugin)) {\n    return false;\n  }\n\n  return pingProject(target.baseUrl, {\n    ...options,\n    runtimeId: target.runtimeId,\n  });\n}\n","import { PROJECT_SERVER_DEPLOY_STATUS } from \"./constants\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nconst DEFAULT_WAIT_TIMEOUT_MS = 120_000;\nconst DEFAULT_WAIT_INTERVAL_MS = 500;\nconst REQUEST_TIMEOUT_MS = 2_000;\n\n/** Per-project bootstrap outcome reported by an org runtime machine. */\nexport type ProjectDeployStatus = {\n  projectId: string;\n  ok: boolean;\n  error?: string;\n};\n\nexport type VersionDeployStatus = {\n  projectId: string;\n  artifactId: string;\n  state: \"active\" | \"resident\" | \"indexed\";\n  ok: boolean;\n  activeJobCount?: number;\n  error?: string;\n};\n\nexport type DeployStatusResponse = {\n  projects: ProjectDeployStatus[];\n  versions?: VersionDeployStatus[];\n};\n\nexport type FetchDeployStatusOptions = {\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n};\n\nexport type WaitForDeployStatusOptions = {\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  intervalMs?: number;\n};\n\n/**\n * Ask a running org machine which projects bootstrapped and which failed.\n * Returns undefined when the endpoint is unreachable, non-OK, times out, or\n * returns an unusable payload — callers must treat that as non-affirmative\n * health for every pending project (never promote on silence).\n */\nexport async function fetchDeployStatus(\n  baseUrl: string,\n  options: FetchDeployStatusOptions = {},\n): Promise<DeployStatusResponse | undefined> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_DEPLOY_STATUS.path, baseUrl),\n      { signal: AbortSignal.timeout(timeoutMs) },\n    );\n\n    if (!response.ok) {\n      return undefined;\n    }\n\n    const data = (await response.json()) as DeployStatusResponse;\n    if (!data || !Array.isArray(data.projects)) {\n      return undefined;\n    }\n\n    return data;\n  } catch (error) {\n    console.warn(`[deploy-status] failed to fetch from ${baseUrl}:`, error);\n    return undefined;\n  }\n}\n\n/**\n * Poll `/deploy-status` until the real worker returns a usable payload or the\n * deadline expires. Retries only transient unavailability (network errors,\n * non-2xx including early-health 404, timeouts, malformed bodies). Any valid\n * `{ projects: [...] }` response — including empty or explicit failures — is\n * terminal so genuine bootstrap errors surface immediately.\n */\nexport async function waitForDeployStatus(\n  baseUrl: string,\n  options: WaitForDeployStatusOptions = {},\n): Promise<DeployStatusResponse | undefined> {\n  const timeoutMs = options.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;\n  const intervalMs = options.intervalMs ?? DEFAULT_WAIT_INTERVAL_MS;\n  const deadline = Date.now() + timeoutMs;\n\n  while (Date.now() < deadline) {\n    const remainingMs = deadline - Date.now();\n    const requestTimeoutMs = Math.min(REQUEST_TIMEOUT_MS, Math.max(1, remainingMs));\n    const status = await fetchDeployStatus(baseUrl, {\n      fetchImpl: options.fetchImpl,\n      timeoutMs: requestTimeoutMs,\n    });\n    if (status) {\n      return status;\n    }\n\n    if (Date.now() + intervalMs >= deadline) {\n      break;\n    }\n    await sleep(intervalMs);\n  }\n\n  return undefined;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\nexport type DeployHealthVerdict = { ok: true } | { ok: false; error: string };\n\n/**\n * Require an explicit `{ projectId, ok: true }` entry for each candidate.\n * Missing entries, `ok: false`, empty `projects`, or an unavailable status\n * response all fail closed for that project.\n */\nexport function classifyDeployHealth(input: {\n  projectIds: string[];\n  deployStatus: DeployStatusResponse | undefined;\n}): Map<string, DeployHealthVerdict> {\n  const verdicts = new Map<string, DeployHealthVerdict>();\n\n  if (!input.deployStatus) {\n    for (const projectId of input.projectIds) {\n      verdicts.set(projectId, {\n        ok: false,\n        error: \"Deploy health status unavailable\",\n      });\n    }\n    return verdicts;\n  }\n\n  const byId = new Map(\n    input.deployStatus.projects\n      .filter((entry) => typeof entry?.projectId === \"string\" && entry.projectId.length > 0)\n      .map((entry) => [entry.projectId, entry]),\n  );\n\n  for (const projectId of input.projectIds) {\n    const entry = byId.get(projectId);\n    if (!entry) {\n      verdicts.set(projectId, {\n        ok: false,\n        error: \"Deploy health status omitted project\",\n      });\n      continue;\n    }\n    if (entry.ok !== true) {\n      verdicts.set(projectId, {\n        ok: false,\n        error: entry.error?.trim() || \"Project failed to start\",\n      });\n      continue;\n    }\n    verdicts.set(projectId, { ok: true });\n  }\n\n  return verdicts;\n}\n"],"mappings":";;;;AACA,MAAa,0BAA0B;;;ACEvC,MAAa,yBAAyB;CACpC,MAAM;CACN,SAAS;CACT,QAAQ;CACR,MAAM;AACR;AAiBA,eAAe,YACb,SACA,MACA,MACA,UAAiC,CAAC,GACtB;CACZ,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAkC,EACtC,gBAAgB,mBAClB;CACA,IAAI,QAAQ,aACV,QAAQ,gBAAgB,UAAU,QAAQ;CAG5C,MAAM,WAAW,OAAO,QAAQ,aAAa,OAAO,IAAI,IAAI,MAAM,OAAO,GAAG;EAC1E,QAAQ;EACR;EACA,MAAM,KAAK,UAAU,IAAI;EACzB,QAAQ,YAAY,QAAQ,SAAS;CACvC,CAAC;CAED,MAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,aAAa,CAAC,EAAE;CACpD,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAC9B,MAAM,IAAI,MACR,OAAO,KAAK,UAAU,WAClB,KAAK,QACL,mBAAmB,KAAK,WAAW,SAAS,OAAO,EACzD;CAGF,OAAO;AACT;AAEA,eAAsB,qBACpB,SACA,OACA,UAAiC,CAAC,GACnB;CACf,MAAM,YAAY,SAAS,uBAAuB,MAAM,OAAO,OAAO;AACxE;AAEA,eAAsB,wBACpB,SACA,OACA,UAAiC,CAAC,GACnB;CACf,MAAM,YAAY,SAAS,uBAAuB,SAAS,OAAO,OAAO;AAC3E;AAEA,eAAsB,uBACpB,SACA,OACA,UAAiC,CAAC,GACnB;CACf,MAAM,YAAY,SAAS,uBAAuB,QAAQ,OAAO,OAAO;AAC1E;;AAGA,eAAsB,kBACpB,SACA,UAAiC,CAAC,GAChB;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,IAAI;EAIF,QAAO,OAHiB,QAAQ,aAAa,OAAO,IAAI,IAAI,WAAW,OAAO,GAAG,EAC/E,QAAQ,YAAY,QAAQ,SAAS,EACvC,CAAC,GACe;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;ACrFA,eAAsB,YACpB,SACA,UAA8B,CAAC,GACb;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAU,QAAQ,QAAQ,qBAAqB,QAAQ,aAAa,IAAI,KAAK,CAAC;CAEpF,IAAI;EASF,QAAO,OARiB,QAAQ,aAAa,OAC3C,IAAI,IAAI,sBAAsB,MAAM,OAAO,GAC3C;GACE,QAAQ,YAAY,QAAQ,SAAS;GACrC;EACF,CACF,GAEgB;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;AC3BA,SAAgB,qBACd,QACA,QACyD;CACzD,IAAI,QAAQ,eACV,OAAO,OAAO,cAAc,MAAM;CAGpC,OAAO,CAAC,CAAC,OAAO;AAClB;AAEA,eAAsB,kBACpB,QACA,UAEI,CAAC,GACa;CAClB,IAAI,CAAC,qBAAqB,QAAQ,QAAQ,MAAM,GAC9C,OAAO;CAGT,OAAO,YAAY,OAAO,SAAS;EACjC,GAAG;EACH,WAAW,OAAO;CACpB,CAAC;AACH;;;AC1BA,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AACjC,MAAM,qBAAqB;;;;;;;AAwC3B,eAAsB,kBACpB,SACA,UAAoC,CAAC,GACM;CAC3C,MAAM,YAAY,QAAQ,aAAA;CAE1B,IAAI;EACF,MAAM,WAAW,OAAO,QAAQ,aAAa,OAC3C,IAAI,IAAI,6BAA6B,MAAM,OAAO,GAClD,EAAE,QAAQ,YAAY,QAAQ,SAAS,EAAE,CAC3C;EAEA,IAAI,CAAC,SAAS,IACZ;EAGF,MAAM,OAAQ,MAAM,SAAS,KAAK;EAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,QAAQ,GACvC;EAGF,OAAO;CACT,SAAS,OAAO;EACd,QAAQ,KAAK,wCAAwC,QAAQ,IAAI,KAAK;EACtE;CACF;AACF;;;;;;;;AASA,eAAsB,oBACpB,SACA,UAAsC,CAAC,GACI;CAC3C,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,KAAK,IAAI,IAAI;CAE9B,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,MAAM,cAAc,WAAW,KAAK,IAAI;EACxC,MAAM,mBAAmB,KAAK,IAAI,oBAAoB,KAAK,IAAI,GAAG,WAAW,CAAC;EAC9E,MAAM,SAAS,MAAM,kBAAkB,SAAS;GAC9C,WAAW,QAAQ;GACnB,WAAW;EACb,CAAC;EACD,IAAI,QACF,OAAO;EAGT,IAAI,KAAK,IAAI,IAAI,cAAc,UAC7B;EAEF,MAAM,MAAM,UAAU;CACxB;AAGF;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY;EAC9B,WAAW,SAAS,EAAE;CACxB,CAAC;AACH;;;;;;AASA,SAAgB,qBAAqB,OAGA;CACnC,MAAM,2BAAW,IAAI,IAAiC;CAEtD,IAAI,CAAC,MAAM,cAAc;EACvB,KAAK,MAAM,aAAa,MAAM,YAC5B,SAAS,IAAI,WAAW;GACtB,IAAI;GACJ,OAAO;EACT,CAAC;EAEH,OAAO;CACT;CAEA,MAAM,OAAO,IAAI,IACf,MAAM,aAAa,SAChB,QAAQ,UAAU,OAAO,OAAO,cAAc,YAAY,MAAM,UAAU,SAAS,CAAC,EACpF,KAAK,UAAU,CAAC,MAAM,WAAW,KAAK,CAAC,CAC5C;CAEA,KAAK,MAAM,aAAa,MAAM,YAAY;EACxC,MAAM,QAAQ,KAAK,IAAI,SAAS;EAChC,IAAI,CAAC,OAAO;GACV,SAAS,IAAI,WAAW;IACtB,IAAI;IACJ,OAAO;GACT,CAAC;GACD;EACF;EACA,IAAI,MAAM,OAAO,MAAM;GACrB,SAAS,IAAI,WAAW;IACtB,IAAI;IACJ,OAAO,MAAM,OAAO,KAAK,KAAK;GAChC,CAAC;GACD;EACF;EACA,SAAS,IAAI,WAAW,EAAE,IAAI,KAAK,CAAC;CACtC;CAEA,OAAO;AACT"}

package/dist/org-artifacts.d.cts

@@ -1,2 +1,2 @@
-import { a as ProjectRuntimeDatabase, c as ProjectRuntimeInput, d as encodeOrgArtifacts, f as parseOrgArtifactsFromEnv, i as ProjectRuntime, l as ProjectRuntimeReconcileInput, n as OrgProjectDeploy, o as ProjectRuntimeDestroyInput, r as ProjectPingTarget, s as ProjectRuntimeHosting, t as OrgArtifactSpec, u as ProjectRuntimeResult } from "./runtime-B0jF0oMv.cjs";
+import { a as ProjectRuntimeDatabase, c as ProjectRuntimeInput, i as ProjectRuntime, l as ProjectRuntimeReconcileInput, m as parseOrgArtifactsFromEnv, n as OrgProjectDeploy, o as ProjectRuntimeDestroyInput, p as encodeOrgArtifacts, r as ProjectPingTarget, s as ProjectRuntimeHosting, t as OrgArtifactSpec, u as ProjectRuntimeResult } from "./runtime-Cp906goK.cjs";
 export { type OrgArtifactSpec, type OrgProjectDeploy, type ProjectPingTarget, type ProjectRuntime, type ProjectRuntimeDatabase, type ProjectRuntimeDestroyInput, type ProjectRuntimeHosting, type ProjectRuntimeInput, type ProjectRuntimeReconcileInput, type ProjectRuntimeResult, encodeOrgArtifacts, parseOrgArtifactsFromEnv };

package/dist/org-artifacts.d.mts

@@ -1,2 +1,2 @@
-import { a as ProjectRuntimeDatabase, c as ProjectRuntimeInput, d as encodeOrgArtifacts, f as parseOrgArtifactsFromEnv, i as ProjectRuntime, l as ProjectRuntimeReconcileInput, n as OrgProjectDeploy, o as ProjectRuntimeDestroyInput, r as ProjectPingTarget, s as ProjectRuntimeHosting, t as OrgArtifactSpec, u as ProjectRuntimeResult } from "./runtime-B0jF0oMv.mjs";
+import { a as ProjectRuntimeDatabase, c as ProjectRuntimeInput, i as ProjectRuntime, l as ProjectRuntimeReconcileInput, m as parseOrgArtifactsFromEnv, n as OrgProjectDeploy, o as ProjectRuntimeDestroyInput, p as encodeOrgArtifacts, r as ProjectPingTarget, s as ProjectRuntimeHosting, t as OrgArtifactSpec, u as ProjectRuntimeResult } from "./runtime-Cp906goK.mjs";
 export { type OrgArtifactSpec, type OrgProjectDeploy, type ProjectPingTarget, type ProjectRuntime, type ProjectRuntimeDatabase, type ProjectRuntimeDestroyInput, type ProjectRuntimeHosting, type ProjectRuntimeInput, type ProjectRuntimeReconcileInput, type ProjectRuntimeResult, encodeOrgArtifacts, parseOrgArtifactsFromEnv };

package/dist/{plugin-is5oPt6x.d.cts → plugin-4cuXkf42.d.cts}

@@ -1,4 +1,4 @@
-import { i as ProjectRuntime, r as ProjectPingTarget } from "./runtime-B0jF0oMv.cjs";
+import { i as ProjectRuntime, r as ProjectPingTarget } from "./runtime-Cp906goK.cjs";
 
 //#region src/worker-runtime-config.d.ts
 /** Resolved platform ↔ project-server worker auth contract. */
@@ -41,4 +41,4 @@ type HostingPlugin = {
 };
 //#endregion
 export { WorkerRuntimeConfig as a, OrganizationHostingResult as i, HostingPlugin as n, WorkerRuntimeConfigError as o, OrganizationHostingInput as r, resolveWorkerRuntimeConfig as s, HostingOptions as t };
-//# sourceMappingURL=plugin-is5oPt6x.d.cts.map
+//# sourceMappingURL=plugin-4cuXkf42.d.cts.map

package/dist/{plugin-is5oPt6x.d.cts.map → plugin-4cuXkf42.d.cts.map}

@@ -1 +1 @@
-{"version":3,"file":"plugin-is5oPt6x.d.cts","names":[],"sources":["../src/worker-runtime-config.ts","../src/plugin.ts"],"mappings":";;;;KAGY,mBAAA;yEAEV,WAAA,UAF6B;EAI7B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UDP6B;ECS7B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA"}
+{"version":3,"file":"plugin-4cuXkf42.d.cts","names":[],"sources":["../src/worker-runtime-config.ts","../src/plugin.ts"],"mappings":";;;;KAGY,mBAAA;yEAEV,WAAA,UAF6B;EAI7B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UDP6B;ECS7B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA"}

package/dist/{plugin-qEl5Sx4m.d.mts → plugin-eiAXqE7P.d.mts}

@@ -1,4 +1,4 @@
-import { i as ProjectRuntime, r as ProjectPingTarget } from "./runtime-B0jF0oMv.mjs";
+import { i as ProjectRuntime, r as ProjectPingTarget } from "./runtime-Cp906goK.mjs";
 
 //#region src/worker-runtime-config.d.ts
 /** Resolved platform ↔ project-server worker auth contract. */
@@ -41,4 +41,4 @@ type HostingPlugin = {
 };
 //#endregion
 export { WorkerRuntimeConfig as a, OrganizationHostingResult as i, HostingPlugin as n, WorkerRuntimeConfigError as o, OrganizationHostingInput as r, resolveWorkerRuntimeConfig as s, HostingOptions as t };
-//# sourceMappingURL=plugin-qEl5Sx4m.d.mts.map
+//# sourceMappingURL=plugin-eiAXqE7P.d.mts.map

package/dist/{plugin-qEl5Sx4m.d.mts.map → plugin-eiAXqE7P.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"plugin-qEl5Sx4m.d.mts","names":[],"sources":["../src/worker-runtime-config.ts","../src/plugin.ts"],"mappings":";;;;KAGY,mBAAA;yEAEV,WAAA,UAF6B;EAI7B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UDP6B;ECS7B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA"}
+{"version":3,"file":"plugin-eiAXqE7P.d.mts","names":[],"sources":["../src/worker-runtime-config.ts","../src/plugin.ts"],"mappings":";;;;KAGY,mBAAA;yEAEV,WAAA,UAF6B;EAI7B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UDP6B;ECS7B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA"}

package/dist/runtime-BmfsHLrk.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-BmfsHLrk.mjs","names":[],"sources":["../src/runtime.ts"],"sourcesContent":["export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n  artifactVersion: number;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n  artifactId: string;\n  /** Monotonic per-project artifact version from the platform database. */\n  artifactVersion: number;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactVersion !== \"number\"\n    ) {\n      throw new Error(\n        \"KEYSTROKE_ORG_ARTIFACTS entries require projectId, artifactStorageKey, artifactId, and artifactVersion\",\n      );\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeReconcileInput = {\n  organizationId: string;\n  /** The runtime to keep — every other runtime belonging to this org should be destroyed. */\n  keepRuntimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n  /**\n   * Sweep away every runtime for this org except `keepRuntimeId`, retrying\n   * transient failures instead of giving up after one attempt. This catches\n   * orphans that a single {@link destroy} call missed (e.g. a previous deploy's\n   * destroy failed silently), not just the one runtime recorded as \"previous.\"\n   */\n  reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n"],"mappings":";;AA4CA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,YACzD,OAAQ,MAA0B,eAAe,YACjD,OAAQ,MAA0B,oBAAoB,UAEtD,MAAM,IAAI,MACR,wGACF;EAGF,OAAO;CACT,CAAC;AACH"}
+{"version":3,"file":"runtime-BmfsHLrk.mjs","names":[],"sources":["../src/runtime.ts"],"sourcesContent":["export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n  artifactVersion: number;\n  /** Require an affirmative artifact-specific health record before promotion. */\n  requiresArtifactHealth?: boolean;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n  artifactId: string;\n  /** Monotonic per-project artifact version from the platform database. */\n  artifactVersion: number;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactVersion !== \"number\"\n    ) {\n      throw new Error(\n        \"KEYSTROKE_ORG_ARTIFACTS entries require projectId, artifactStorageKey, artifactId, and artifactVersion\",\n      );\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeReconcileInput = {\n  organizationId: string;\n  /** The runtime to keep — every other runtime belonging to this org should be destroyed. */\n  keepRuntimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntimeSleepInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeWakeInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n  /**\n   * Sweep away every runtime for this org except `keepRuntimeId`, retrying\n   * transient failures instead of giving up after one attempt. This catches\n   * orphans that a single {@link destroy} call missed (e.g. a previous deploy's\n   * destroy failed silently), not just the one runtime recorded as \"previous.\"\n   */\n  reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;\n  /**\n   * Put an existing runtime to sleep without destroying it (e.g. Docker stop,\n   * Fly suspend). Provider-specific; omit when unsupported.\n   */\n  sleep?(input: ProjectRuntimeSleepInput): Promise<void>;\n  /**\n   * Resume a sleeping runtime. May return a fresh {@link ProjectRuntimeResult}\n   * when the base URL can change (e.g. Docker host port remap).\n   */\n  wake?(input: ProjectRuntimeWakeInput): Promise<ProjectRuntimeResult | void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n"],"mappings":";;AA8CA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,YACzD,OAAQ,MAA0B,eAAe,YACjD,OAAQ,MAA0B,oBAAoB,UAEtD,MAAM,IAAI,MACR,wGACF;EAGF,OAAO;CACT,CAAC;AACH"}

package/dist/runtime-CV7pSfMl.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-CV7pSfMl.cjs","names":[],"sources":["../src/runtime.ts"],"sourcesContent":["export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n  artifactVersion: number;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n  artifactId: string;\n  /** Monotonic per-project artifact version from the platform database. */\n  artifactVersion: number;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactVersion !== \"number\"\n    ) {\n      throw new Error(\n        \"KEYSTROKE_ORG_ARTIFACTS entries require projectId, artifactStorageKey, artifactId, and artifactVersion\",\n      );\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeReconcileInput = {\n  organizationId: string;\n  /** The runtime to keep — every other runtime belonging to this org should be destroyed. */\n  keepRuntimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n  /**\n   * Sweep away every runtime for this org except `keepRuntimeId`, retrying\n   * transient failures instead of giving up after one attempt. This catches\n   * orphans that a single {@link destroy} call missed (e.g. a previous deploy's\n   * destroy failed silently), not just the one runtime recorded as \"previous.\"\n   */\n  reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n"],"mappings":";;AA4CA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,YACzD,OAAQ,MAA0B,eAAe,YACjD,OAAQ,MAA0B,oBAAoB,UAEtD,MAAM,IAAI,MACR,wGACF;EAGF,OAAO;CACT,CAAC;AACH"}
+{"version":3,"file":"runtime-CV7pSfMl.cjs","names":[],"sources":["../src/runtime.ts"],"sourcesContent":["export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n  artifactVersion: number;\n  /** Require an affirmative artifact-specific health record before promotion. */\n  requiresArtifactHealth?: boolean;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n  artifactId: string;\n  /** Monotonic per-project artifact version from the platform database. */\n  artifactVersion: number;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactVersion !== \"number\"\n    ) {\n      throw new Error(\n        \"KEYSTROKE_ORG_ARTIFACTS entries require projectId, artifactStorageKey, artifactId, and artifactVersion\",\n      );\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeReconcileInput = {\n  organizationId: string;\n  /** The runtime to keep — every other runtime belonging to this org should be destroyed. */\n  keepRuntimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntimeSleepInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeWakeInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n  /**\n   * Sweep away every runtime for this org except `keepRuntimeId`, retrying\n   * transient failures instead of giving up after one attempt. This catches\n   * orphans that a single {@link destroy} call missed (e.g. a previous deploy's\n   * destroy failed silently), not just the one runtime recorded as \"previous.\"\n   */\n  reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;\n  /**\n   * Put an existing runtime to sleep without destroying it (e.g. Docker stop,\n   * Fly suspend). Provider-specific; omit when unsupported.\n   */\n  sleep?(input: ProjectRuntimeSleepInput): Promise<void>;\n  /**\n   * Resume a sleeping runtime. May return a fresh {@link ProjectRuntimeResult}\n   * when the base URL can change (e.g. Docker host port remap).\n   */\n  wake?(input: ProjectRuntimeWakeInput): Promise<ProjectRuntimeResult | void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n"],"mappings":";;AA8CA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,YACzD,OAAQ,MAA0B,eAAe,YACjD,OAAQ,MAA0B,oBAAoB,UAEtD,MAAM,IAAI,MACR,wGACF;EAGF,OAAO;CACT,CAAC;AACH"}

package/dist/{runtime-B0jF0oMv.d.cts → runtime-Cp906goK.d.cts}

@@ -14,7 +14,8 @@ type OrgProjectDeploy = {
   name: string;
   artifactId: string;
   artifactStorageKey: string;
-  artifactVersion: number;
+  artifactVersion: number; /** Require an affirmative artifact-specific health record before promotion. */
+  requiresArtifactHealth?: boolean;
 };
 type OrgArtifactSpec = {
   projectId: string;
@@ -49,6 +50,14 @@ type ProjectRuntimeResult = {
   runtimeId: string;
   baseUrl: string;
 };
+type ProjectRuntimeSleepInput = {
+  runtimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
+type ProjectRuntimeWakeInput = {
+  runtimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
 type ProjectRuntime = {
   start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;
   destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;
@@ -59,11 +68,21 @@ type ProjectRuntime = {
    * destroy failed silently), not just the one runtime recorded as "previous."
    */
   reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;
+  /**
+   * Put an existing runtime to sleep without destroying it (e.g. Docker stop,
+   * Fly suspend). Provider-specific; omit when unsupported.
+   */
+  sleep?(input: ProjectRuntimeSleepInput): Promise<void>;
+  /**
+   * Resume a sleeping runtime. May return a fresh {@link ProjectRuntimeResult}
+   * when the base URL can change (e.g. Docker host port remap).
+   */
+  wake?(input: ProjectRuntimeWakeInput): Promise<ProjectRuntimeResult | void>;
 };
 type ProjectPingTarget = {
   baseUrl: string | null;
   runtimeId: string | null;
 };
 //#endregion
-export { ProjectRuntimeDatabase as a, ProjectRuntimeInput as c, encodeOrgArtifacts as d, parseOrgArtifactsFromEnv as f, ProjectRuntime as i, ProjectRuntimeReconcileInput as l, OrgProjectDeploy as n, ProjectRuntimeDestroyInput as o, ProjectPingTarget as r, ProjectRuntimeHosting as s, OrgArtifactSpec as t, ProjectRuntimeResult as u };
-//# sourceMappingURL=runtime-B0jF0oMv.d.cts.map
+export { ProjectRuntimeDatabase as a, ProjectRuntimeInput as c, ProjectRuntimeSleepInput as d, ProjectRuntimeWakeInput as f, ProjectRuntime as i, ProjectRuntimeReconcileInput as l, parseOrgArtifactsFromEnv as m, OrgProjectDeploy as n, ProjectRuntimeDestroyInput as o, encodeOrgArtifacts as p, ProjectPingTarget as r, ProjectRuntimeHosting as s, OrgArtifactSpec as t, ProjectRuntimeResult as u };
+//# sourceMappingURL=runtime-Cp906goK.d.cts.map

package/dist/runtime-Cp906goK.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-Cp906goK.d.cts","names":[],"sources":["../src/runtime.ts"],"mappings":";KAAY,sBAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,UAAA;EACA,cAAA,UAHA;EAKA,SAAA;AAAA;AAAA,KAGU,gBAAA;EACV,SAAA;EACA,IAAA;EACA,UAAA;EACA,kBAAA;EACA,eAAA;EAEA,sBAAA;AAAA;AAAA,KAGU,eAAA;EACV,SAAA;EACA,kBAAA;EACA,UAAA,UANA;EAQA,eAAA;AAAA;AAAA,KAGU,qBAAA;EACV,OAAO;AAAA;AAAA,KAGG,mBAAA;EACV,cAAA;EACA,QAAA,EAAU,gBAAA;EACV,QAAA,EAAU,sBAAA;EACV,OAAA,GAAU,qBAAA,EAXK;EAaf,GAAA,GAAM,MAAA,kBAVI;EAYV,iBAAA;AAAA;;iBAIc,kBAAA,CAAmB,SAA4B,EAAjB,eAAe;AAAA,iBAI7C,wBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAA,GACX,eAAe;AAAA,KA6BN,0BAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,4BAAA;EACV,cAAA,UA/CY;EAiDZ,aAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,oBAAA;EACV,SAAA;EACA,OAAO;AAAA;AAAA,KAGG,wBAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,uBAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,cAAA;EACV,KAAA,CAAM,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,oBAAA;EAC3C,OAAA,EAAS,KAAA,EAAO,0BAAA,GAA6B,OAAA;EA5D/B;;;;;;EAmEd,SAAA,EAAW,KAAA,EAAO,4BAAA,GAA+B,OAAA;EAjEhD;;AAAe;AA6BlB;EAyCE,KAAA,EAAO,KAAA,EAAO,wBAAA,GAA2B,OAAA;;;;;EAKzC,IAAA,EAAM,KAAA,EAAO,uBAAA,GAA0B,OAAA,CAAQ,oBAAA;AAAA;AAAA,KAGrC,iBAAA;EACV,OAAA;EACA,SAAS;AAAA"}

package/dist/{runtime-B0jF0oMv.d.mts → runtime-Cp906goK.d.mts}

@@ -14,7 +14,8 @@ type OrgProjectDeploy = {
   name: string;
   artifactId: string;
   artifactStorageKey: string;
-  artifactVersion: number;
+  artifactVersion: number; /** Require an affirmative artifact-specific health record before promotion. */
+  requiresArtifactHealth?: boolean;
 };
 type OrgArtifactSpec = {
   projectId: string;
@@ -49,6 +50,14 @@ type ProjectRuntimeResult = {
   runtimeId: string;
   baseUrl: string;
 };
+type ProjectRuntimeSleepInput = {
+  runtimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
+type ProjectRuntimeWakeInput = {
+  runtimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
 type ProjectRuntime = {
   start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;
   destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;
@@ -59,11 +68,21 @@ type ProjectRuntime = {
    * destroy failed silently), not just the one runtime recorded as "previous."
    */
   reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;
+  /**
+   * Put an existing runtime to sleep without destroying it (e.g. Docker stop,
+   * Fly suspend). Provider-specific; omit when unsupported.
+   */
+  sleep?(input: ProjectRuntimeSleepInput): Promise<void>;
+  /**
+   * Resume a sleeping runtime. May return a fresh {@link ProjectRuntimeResult}
+   * when the base URL can change (e.g. Docker host port remap).
+   */
+  wake?(input: ProjectRuntimeWakeInput): Promise<ProjectRuntimeResult | void>;
 };
 type ProjectPingTarget = {
   baseUrl: string | null;
   runtimeId: string | null;
 };
 //#endregion
-export { ProjectRuntimeDatabase as a, ProjectRuntimeInput as c, encodeOrgArtifacts as d, parseOrgArtifactsFromEnv as f, ProjectRuntime as i, ProjectRuntimeReconcileInput as l, OrgProjectDeploy as n, ProjectRuntimeDestroyInput as o, ProjectPingTarget as r, ProjectRuntimeHosting as s, OrgArtifactSpec as t, ProjectRuntimeResult as u };
-//# sourceMappingURL=runtime-B0jF0oMv.d.mts.map
+export { ProjectRuntimeDatabase as a, ProjectRuntimeInput as c, ProjectRuntimeSleepInput as d, ProjectRuntimeWakeInput as f, ProjectRuntime as i, ProjectRuntimeReconcileInput as l, parseOrgArtifactsFromEnv as m, OrgProjectDeploy as n, ProjectRuntimeDestroyInput as o, encodeOrgArtifacts as p, ProjectPingTarget as r, ProjectRuntimeHosting as s, OrgArtifactSpec as t, ProjectRuntimeResult as u };
+//# sourceMappingURL=runtime-Cp906goK.d.mts.map

package/dist/runtime-Cp906goK.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-Cp906goK.d.mts","names":[],"sources":["../src/runtime.ts"],"mappings":";KAAY,sBAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,UAAA;EACA,cAAA,UAHA;EAKA,SAAA;AAAA;AAAA,KAGU,gBAAA;EACV,SAAA;EACA,IAAA;EACA,UAAA;EACA,kBAAA;EACA,eAAA;EAEA,sBAAA;AAAA;AAAA,KAGU,eAAA;EACV,SAAA;EACA,kBAAA;EACA,UAAA,UANA;EAQA,eAAA;AAAA;AAAA,KAGU,qBAAA;EACV,OAAO;AAAA;AAAA,KAGG,mBAAA;EACV,cAAA;EACA,QAAA,EAAU,gBAAA;EACV,QAAA,EAAU,sBAAA;EACV,OAAA,GAAU,qBAAA,EAXK;EAaf,GAAA,GAAM,MAAA,kBAVI;EAYV,iBAAA;AAAA;;iBAIc,kBAAA,CAAmB,SAA4B,EAAjB,eAAe;AAAA,iBAI7C,wBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAA,GACX,eAAe;AAAA,KA6BN,0BAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,4BAAA;EACV,cAAA,UA/CY;EAiDZ,aAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,oBAAA;EACV,SAAA;EACA,OAAO;AAAA;AAAA,KAGG,wBAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,uBAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,cAAA;EACV,KAAA,CAAM,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,oBAAA;EAC3C,OAAA,EAAS,KAAA,EAAO,0BAAA,GAA6B,OAAA;EA5D/B;;;;;;EAmEd,SAAA,EAAW,KAAA,EAAO,4BAAA,GAA+B,OAAA;EAjEhD;;AAAe;AA6BlB;EAyCE,KAAA,EAAO,KAAA,EAAO,wBAAA,GAA2B,OAAA;;;;;EAKzC,IAAA,EAAM,KAAA,EAAO,uBAAA,GAA0B,OAAA,CAAQ,oBAAA;AAAA;AAAA,KAGrC,iBAAA;EACV,OAAA;EACA,SAAS;AAAA"}

package/dist/{wait-for-health-XEzPPQIO.mjs → wait-for-health-B4-AM1NR.mjs}

@@ -91,7 +91,8 @@ const FORBIDDEN_WORKER_ENV_KEYS = [
 	"POSTGRES_PASSWORD",
 	"PLATFORM_WORKER_TOKEN",
 	"STRIPE_SECRET_KEY",
-	"CREDENTIAL_ENCRYPTION_KEY"
+	"CREDENTIAL_ENCRYPTION_KEY",
+	"TURNSTILE_SECRET"
 ];
 /** Provider and gateway env forwarded from the platform into project servers. */
 const PROVIDER_ENV_KEYS = [
@@ -206,4 +207,4 @@ function sleep(ms) {
 //#endregion
 export { PROJECT_SERVER_ROOT as S, PROJECT_SERVER_FRAMEWORK_NODE_MODULES as _, formatDockerEnv as a, PROJECT_SERVER_IMAGE as b, resolveRuntimeLaunch as c, rewriteLoopbackUrl as d, mintOrgWorkerToken as f, PROJECT_SERVER_DEPLOY_STATUS as g, resolveWorkerRuntimeConfig as h, buildRuntimeEnv as i, resolveWorkerPlatformUrl as l, WorkerRuntimeConfigError as m, DEV_PLATFORM_WORKER_TOKEN as n, resolvePlatformWorkerToken as o, verifyOrgWorkerToken as p, FORBIDDEN_WORKER_ENV_KEYS as r, resolveProjectServerImage as s, waitForHealth as t, rewriteLoopbackHost as u, PROJECT_SERVER_FRAMEWORK_ROOT as v, PROJECT_SERVER_PORT as x, PROJECT_SERVER_HEALTH as y };
 
-//# sourceMappingURL=wait-for-health-XEzPPQIO.mjs.map
+//# sourceMappingURL=wait-for-health-B4-AM1NR.mjs.map

package/dist/wait-for-health-B4-AM1NR.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait-for-health-B4-AM1NR.mjs","names":[],"sources":["../src/constants.ts","../src/worker-runtime-config.ts","../src/org-worker-token.ts","../src/runtime-env.ts","../src/wait-for-health.ts"],"sourcesContent":["export const PROJECT_SERVER_IMAGE = \"keystroke/project-server:local\";\n\nexport const PROJECT_SERVER_PORT = 3000;\n\nexport const PROJECT_SERVER_ROOT = \"/app\";\n\nexport const PROJECT_SERVER_FRAMEWORK_ROOT = \"/opt/keystroke\";\n\nexport const PROJECT_SERVER_FRAMEWORK_NODE_MODULES = `${PROJECT_SERVER_FRAMEWORK_ROOT}/node_modules`;\n\nexport const PROJECT_SERVER_HEALTH = {\n  path: \"/health\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n\nexport const PROJECT_SERVER_DEPLOY_STATUS = {\n  path: \"/deploy-status\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n","import { resolvePlatformWorkerToken, resolveWorkerPlatformUrl } from \"./runtime-env\";\n\n/** Resolved platform ↔ project-server worker auth contract. */\nexport type WorkerRuntimeConfig = {\n  /** Platform API base URL reachable from the project-server runtime. */\n  platformUrl: string;\n  /** Bearer token for platform `/internal` routes. */\n  workerToken: string;\n};\n\nexport class WorkerRuntimeConfigError extends Error {\n  readonly missing: readonly string[];\n\n  constructor(missing: string[]) {\n    super(\n      `Worker runtime config incomplete (missing: ${missing.join(\", \")}). ` +\n        \"In production set PLATFORM_WORKER_TOKEN and PUBLIC_PLATFORM_URL (or PLATFORM_URL).\",\n    );\n    this.name = \"WorkerRuntimeConfigError\";\n    this.missing = missing;\n  }\n}\n\n/** Fail fast when the platform cannot start worker-mode project servers. */\nexport function resolveWorkerRuntimeConfig(\n  source: NodeJS.ProcessEnv = process.env,\n): WorkerRuntimeConfig {\n  const platformUrl = resolveWorkerPlatformUrl(source);\n  const workerToken = resolvePlatformWorkerToken(source);\n  const missing: string[] = [];\n\n  if (!platformUrl) {\n    missing.push(\"PUBLIC_PLATFORM_URL or PLATFORM_URL\");\n  }\n\n  if (!workerToken) {\n    missing.push(\"PLATFORM_WORKER_TOKEN\");\n  }\n\n  if (missing.length > 0) {\n    throw new WorkerRuntimeConfigError(missing);\n  }\n\n  return { platformUrl: platformUrl!, workerToken: workerToken! };\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\n\nfunction sign(secret: string, organizationId: string): string {\n  return createHmac(\"sha256\", secret).update(`org-worker:${organizationId}`).digest(\"base64url\");\n}\n\n/**\n * Per-org worker token: `{organizationId}.{hmac}`. Self-describing so the\n * platform can tell which org a machine is calling as, and stateless — verified\n * by re-signing with the shared `PLATFORM_WORKER_TOKEN` secret.\n */\nexport function mintOrgWorkerToken(secret: string, organizationId: string): string {\n  return `${organizationId}.${sign(secret, organizationId)}`;\n}\n\nexport type VerifiedOrgWorkerToken = {\n  organizationId: string;\n};\n\nexport function verifyOrgWorkerToken(\n  secret: string | undefined,\n  token: string | undefined,\n): VerifiedOrgWorkerToken | undefined {\n  if (!secret || !token) {\n    return undefined;\n  }\n\n  // The signature is base64url (no dots), so the last dot ends the org id.\n  const separator = token.lastIndexOf(\".\");\n  if (separator <= 0) {\n    return undefined;\n  }\n\n  const organizationId = token.slice(0, separator);\n  const signature = Buffer.from(token.slice(separator + 1));\n  const expected = Buffer.from(sign(secret, organizationId));\n  if (signature.length !== expected.length || !timingSafeEqual(signature, expected)) {\n    return undefined;\n  }\n\n  return { organizationId };\n}\n","import {\n  LOCAL_PLATFORM_ORIGIN,\n  resolveExplicitPublicPlatformOrigin,\n} from \"@keystrokehq/shared/platform-origin\";\n\nimport type { ProjectRuntimeDatabase } from \"./runtime\";\nimport { encodeOrgArtifacts, type OrgArtifactSpec } from \"./runtime\";\nimport {\n  PROJECT_SERVER_FRAMEWORK_NODE_MODULES,\n  PROJECT_SERVER_HEALTH,\n  PROJECT_SERVER_IMAGE,\n  PROJECT_SERVER_PORT,\n  PROJECT_SERVER_ROOT,\n} from \"./constants\";\nimport type { HostingOptions } from \"./plugin\";\nimport { resolveWorkerRuntimeConfig } from \"./worker-runtime-config\";\nimport { mintOrgWorkerToken } from \"./org-worker-token\";\n\n/** Non-secret runtime config forwarded into org workers. Never include platform secrets. */\nconst RUNTIME_ENV_KEYS = [\n  \"PUBLIC_PLATFORM_URL\",\n  \"PUBLIC_PLATFORM_PROXY_URL\",\n  \"PUBLIC_WEB_URL\",\n  \"UPSTASH_REDIS_URL\",\n  \"REDIS_URL\",\n  \"KEYSTROKE_QUEUE_PREFIX\",\n] as const;\n\n/**\n * Observability ingest config for org workers (PostHog error tracking + crash reports).\n * Ingest tokens only — never forward `POSTHOG_API_KEY` (management) into workers.\n */\nconst OBSERVABILITY_ENV_KEYS = [\n  \"POSTHOG_PROJECT_TOKEN\",\n  \"POSTHOG_HOST\",\n  \"POSTHOG_FLUSH_MODE\",\n  \"KEYSTROKE_ENVIRONMENT\",\n  \"KEYSTROKE_RELEASE\",\n] as const;\n\n/** Env keys that must never be forwarded into untrusted org workers. */\nexport const FORBIDDEN_WORKER_ENV_KEYS = [\n  \"BETTER_AUTH_SECRET\",\n  \"DATABASE_URL\",\n  \"POSTHOG_API_KEY\",\n  \"POSTGRES_PASSWORD\",\n  \"PLATFORM_WORKER_TOKEN\",\n  \"STRIPE_SECRET_KEY\",\n  \"CREDENTIAL_ENCRYPTION_KEY\",\n  \"TURNSTILE_SECRET\",\n] as const;\n\n/** Provider and gateway env forwarded from the platform into project servers. */\nconst PROVIDER_ENV_KEYS = [\n  \"ANTHROPIC_API_KEY\",\n  \"OPENAI_API_KEY\",\n  \"AI_GATEWAY_API_KEY\",\n  \"AI_GATEWAY_BASE_URL\",\n] as const;\n\n/** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */\nexport const DEV_PLATFORM_WORKER_TOKEN = \"dev-platform-worker-token\";\n\nexport type RuntimeLaunchSpec = {\n  image: string;\n  env: Record<string, string>;\n  port: number;\n  health: typeof PROJECT_SERVER_HEALTH;\n};\n\n/**\n * Builds the launch spec for an org worker. Each deploy artifact is encoded in\n * `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.\n */\nexport function resolveRuntimeLaunch(\n  options: HostingOptions,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  if (artifacts.length === 0) {\n    throw new Error(\"Cannot start an org worker without at least one artifact\");\n  }\n\n  const env = options.env ?? process.env;\n\n  return {\n    image: resolveProjectServerImage(env, options.image),\n    env: buildRuntimeEnv(env, artifacts, database, extraEnv),\n    port: PROJECT_SERVER_PORT,\n    health: PROJECT_SERVER_HEALTH,\n  };\n}\n\n/** @deprecated Single-project launch — prefer org {@link resolveRuntimeLaunch}. */\nexport function resolveSingleProjectRuntimeLaunch(\n  options: HostingOptions,\n  artifact: { storageKey: string; artifactId: string; artifactVersion: number },\n  database: ProjectRuntimeDatabase & { projectId: string },\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  return resolveRuntimeLaunch(\n    options,\n    [\n      {\n        projectId: database.projectId,\n        artifactStorageKey: artifact.storageKey,\n        artifactId: artifact.artifactId,\n        artifactVersion: artifact.artifactVersion,\n      },\n    ],\n    database,\n    extraEnv,\n  );\n}\n\n/** Env vars passed into the org worker container/machine. */\nexport function buildRuntimeEnv(\n  source: NodeJS.ProcessEnv,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): Record<string, string> {\n  const entries = new Map<string, string>([\n    [\"PORT\", String(PROJECT_SERVER_PORT)],\n    [\"KEYSTROKE_ROOT\", PROJECT_SERVER_ROOT],\n    [\"KEYSTROKE_RUNTIME_NODE_MODULES\", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],\n    [\"KEYSTROKE_ORG_ARTIFACTS\", encodeOrgArtifacts(artifacts)],\n    [\"ORGANIZATION_ID\", database.organizationId],\n    [\"TENANT_ID\", database.organizationId],\n  ]);\n\n  for (const key of RUNTIME_ENV_KEYS) {\n    const value = source[key]?.trim();\n    if (!value) {\n      continue;\n    }\n    entries.set(key, value);\n  }\n\n  for (const key of OBSERVABILITY_ENV_KEYS) {\n    const value = source[key]?.trim();\n    if (!value) {\n      continue;\n    }\n    entries.set(key, value);\n  }\n\n  // OSS self-host: forward BYO provider/gateway env. Cloud llmProxy supplies extraEnv instead.\n  if (!extraEnv) {\n    for (const key of PROVIDER_ENV_KEYS) {\n      const value = source[key]?.trim();\n      if (value) {\n        entries.set(key, value);\n      }\n    }\n  }\n\n  // Project containers always run as workers: they resolve credentials/secrets through\n  // the platform internal API and are deliberately never given the decryption key.\n  // The token is minted per org so the platform knows which org a machine calls as.\n  const worker = resolveWorkerRuntimeConfig(source);\n  entries.set(\"PLATFORM_URL\", worker.platformUrl);\n  entries.set(\n    \"WORKER_INTERNAL_TOKEN\",\n    mintOrgWorkerToken(worker.workerToken, database.organizationId),\n  );\n\n  if (extraEnv) {\n    for (const [key, value] of Object.entries(extraEnv)) {\n      entries.set(key, value);\n    }\n  }\n\n  for (const key of FORBIDDEN_WORKER_ENV_KEYS) {\n    entries.delete(key);\n  }\n\n  return Object.fromEntries(entries);\n}\n\nexport function resolvePlatformWorkerToken(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const explicit = source.PLATFORM_WORKER_TOKEN?.trim() ?? source.WORKER_INTERNAL_TOKEN?.trim();\n  if (explicit) {\n    return explicit;\n  }\n\n  if (source.NODE_ENV === \"production\") {\n    return undefined;\n  }\n\n  return DEV_PLATFORM_WORKER_TOKEN;\n}\n\n/** Platform API URL reachable from a project-server container. */\nexport function resolveWorkerPlatformUrl(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const raw =\n    source.PLATFORM_URL?.trim() ??\n    resolveExplicitPublicPlatformOrigin(source) ??\n    (source.NODE_ENV === \"production\" ? undefined : LOCAL_PLATFORM_ORIGIN);\n  if (!raw) {\n    return undefined;\n  }\n\n  return rewriteLoopbackUrl(raw);\n}\n\n/** Rewrite loopback hosts so containers can reach Postgres and other host services. */\nexport function rewriteLoopbackHost(host: string): string {\n  if (host === \"localhost\" || host === \"127.0.0.1\") {\n    return \"host.docker.internal\";\n  }\n\n  return host;\n}\n\nexport function rewriteLoopbackUrl(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.hostname = rewriteLoopbackHost(parsed.hostname);\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return url;\n  }\n}\n\n/** dockerode expects `KEY=value` strings. */\nexport function formatDockerEnv(env: Record<string, string>): string[] {\n  return Object.entries(env).map(([key, value]) => `${key}=${value}`);\n}\n\nexport function resolveProjectServerImage(\n  env: NodeJS.ProcessEnv = process.env,\n  override?: string,\n): string {\n  return override ?? env.PROJECT_DOCKER_IMAGE ?? env.TENANT_DOCKER_IMAGE ?? PROJECT_SERVER_IMAGE;\n}\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_INTERVAL_MS = 500;\n\nexport type WaitForHealthOptions = {\n  timeoutMs?: number;\n  intervalMs?: number;\n  fetchImpl?: typeof fetch;\n};\n\nexport async function waitForHealth(\n  baseUrl: string,\n  options: WaitForHealthOptions = {},\n): Promise<void> {\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;\n  const deadline = Date.now() + timeoutMs;\n  const url = new URL(PROJECT_SERVER_HEALTH.path, baseUrl);\n\n  while (Date.now() < deadline) {\n    try {\n      const response = await fetchImpl(url, { signal: AbortSignal.timeout(2_000) });\n      if (response.ok) {\n        return;\n      }\n    } catch {\n      // retry until timeout\n    }\n\n    await sleep(intervalMs);\n  }\n\n  throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n"],"mappings":";;;;AAAA,MAAa,uBAAuB;AAEpC,MAAa,sBAAsB;AAEnC,MAAa,sBAAsB;AAEnC,MAAa,gCAAgC;AAE7C,MAAa,wCAAwC,GAAG,8BAA8B;AAEtF,MAAa,wBAAwB;CACnC,MAAM;CACN,MAAM;AACR;AAEA,MAAa,+BAA+B;CAC1C,MAAM;CACN,MAAM;AACR;;;ACRA,IAAa,2BAAb,cAA8C,MAAM;CAClD;CAEA,YAAY,SAAmB;EAC7B,MACE,8CAA8C,QAAQ,KAAK,IAAI,EAAE,sFAEnE;EACA,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;;AAGA,SAAgB,2BACd,SAA4B,QAAQ,KACf;CACrB,MAAM,cAAc,yBAAyB,MAAM;CACnD,MAAM,cAAc,2BAA2B,MAAM;CACrD,MAAM,UAAoB,CAAC;CAE3B,IAAI,CAAC,aACH,QAAQ,KAAK,qCAAqC;CAGpD,IAAI,CAAC,aACH,QAAQ,KAAK,uBAAuB;CAGtC,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,yBAAyB,OAAO;CAG5C,OAAO;EAAe;EAA2B;CAAa;AAChE;;;AC1CA,SAAS,KAAK,QAAgB,gBAAgC;CAC5D,OAAO,WAAW,UAAU,MAAM,EAAE,OAAO,cAAc,gBAAgB,EAAE,OAAO,WAAW;AAC/F;;;;;;AAOA,SAAgB,mBAAmB,QAAgB,gBAAgC;CACjF,OAAO,GAAG,eAAe,GAAG,KAAK,QAAQ,cAAc;AACzD;AAMA,SAAgB,qBACd,QACA,OACoC;CACpC,IAAI,CAAC,UAAU,CAAC,OACd;CAIF,MAAM,YAAY,MAAM,YAAY,GAAG;CACvC,IAAI,aAAa,GACf;CAGF,MAAM,iBAAiB,MAAM,MAAM,GAAG,SAAS;CAC/C,MAAM,YAAY,OAAO,KAAK,MAAM,MAAM,YAAY,CAAC,CAAC;CACxD,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ,cAAc,CAAC;CACzD,IAAI,UAAU,WAAW,SAAS,UAAU,CAAC,gBAAgB,WAAW,QAAQ,GAC9E;CAGF,OAAO,EAAE,eAAe;AAC1B;;;;ACtBA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;AACF;;AAGA,MAAa,4BAA4B;;;;;AAazC,SAAgB,qBACd,SACA,WACA,UACA,UACmB;CACnB,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,MAAM,0DAA0D;CAG5E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,OAAO,0BAA0B,KAAK,QAAQ,KAAK;EACnD,KAAK,gBAAgB,KAAK,WAAW,UAAU,QAAQ;EACvD,MAAM;EACN,QAAQ;CACV;AACF;;AAyBA,SAAgB,gBACd,QACA,WACA,UACA,UACwB;CACxB,MAAM,UAAU,IAAI,IAAoB;EACtC,CAAC,QAAQ,OAAO,mBAAmB,CAAC;EACpC,CAAC,kBAAkB,mBAAmB;EACtC,CAAC,kCAAkC,qCAAqC;EACxE,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;EACzD,CAAC,mBAAmB,SAAS,cAAc;EAC3C,CAAC,aAAa,SAAS,cAAc;CACvC,CAAC;CAED,KAAK,MAAM,OAAO,kBAAkB;EAClC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,CAAC,OACH;EAEF,QAAQ,IAAI,KAAK,KAAK;CACxB;CAEA,KAAK,MAAM,OAAO,wBAAwB;EACxC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,CAAC,OACH;EAEF,QAAQ,IAAI,KAAK,KAAK;CACxB;CAGA,IAAI,CAAC,UACH,KAAK,MAAM,OAAO,mBAAmB;EACnC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,OACF,QAAQ,IAAI,KAAK,KAAK;CAE1B;CAMF,MAAM,SAAS,2BAA2B,MAAM;CAChD,QAAQ,IAAI,gBAAgB,OAAO,WAAW;CAC9C,QAAQ,IACN,yBACA,mBAAmB,OAAO,aAAa,SAAS,cAAc,CAChE;CAEA,IAAI,UACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,QAAQ,IAAI,KAAK,KAAK;CAI1B,KAAK,MAAM,OAAO,2BAChB,QAAQ,OAAO,GAAG;CAGpB,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAgB,2BACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,WAAW,OAAO,uBAAuB,KAAK,KAAK,OAAO,uBAAuB,KAAK;CAC5F,IAAI,UACF,OAAO;CAGT,IAAI,OAAO,aAAa,cACtB;CAGF,OAAO;AACT;;AAGA,SAAgB,yBACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,MACJ,OAAO,cAAc,KAAK,KAC1B,oCAAoC,MAAM,MACzC,OAAO,aAAa,eAAe,KAAA,IAAY;CAClD,IAAI,CAAC,KACH;CAGF,OAAO,mBAAmB,GAAG;AAC/B;;AAGA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,SAAS,eAAe,SAAS,aACnC,OAAO;CAGT,OAAO;AACT;AAEA,SAAgB,mBAAmB,KAAqB;CACtD,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,WAAW,oBAAoB,OAAO,QAAQ;EACrD,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;CAC5C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,gBAAgB,KAAuC;CACrE,OAAO,OAAO,QAAQ,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO;AACpE;AAEA,SAAgB,0BACd,MAAyB,QAAQ,KACjC,UACQ;CACR,OAAO,YAAY,IAAI,wBAAwB,IAAI,uBAAA;AACrD;;;AC9OA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAQ5B,eAAsB,cACpB,SACA,UAAgC,CAAC,GAClB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB,MAAM,OAAO;CAEvD,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,IAAI;GAEF,KAAI,MADmB,UAAU,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC,GAC/D,IACX;EAEJ,QAAQ,CAER;EAEA,MAAM,MAAM,UAAU;CACxB;CAEA,MAAM,IAAI,MAAM,+CAA+C,UAAU,MAAM,IAAI,EAAE;AACvF;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY;EAC9B,WAAW,SAAS,EAAE;CACxB,CAAC;AACH"}

package/dist/{wait-for-health-DM55_NQh.cjs → wait-for-health-CObmNF8o.cjs}

@@ -91,7 +91,8 @@ const FORBIDDEN_WORKER_ENV_KEYS = [
 	"POSTGRES_PASSWORD",
 	"PLATFORM_WORKER_TOKEN",
 	"STRIPE_SECRET_KEY",
-	"CREDENTIAL_ENCRYPTION_KEY"
+	"CREDENTIAL_ENCRYPTION_KEY",
+	"TURNSTILE_SECRET"
 ];
 /** Provider and gateway env forwarded from the platform into project servers. */
 const PROVIDER_ENV_KEYS = [
@@ -337,4 +338,4 @@ Object.defineProperty(exports, "waitForHealth", {
 	}
 });
 
-//# sourceMappingURL=wait-for-health-DM55_NQh.cjs.map
+//# sourceMappingURL=wait-for-health-CObmNF8o.cjs.map