@keystrokehq/hosting 1.0.2 → 1.0.3

package/dist/index.cjs

@@ -23,6 +23,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 //#endregion
 let dockerode = require("dockerode");
 dockerode = __toESM(dockerode, 1);
+let node_fs_promises = require("node:fs/promises");
 //#region src/constants.ts
 const PROJECT_SERVER_IMAGE = "keystroke/project-server:local";
 const PROJECT_SERVER_PORT = 3e3;
@@ -218,10 +219,21 @@ function createDockerRuntime(options = {}) {
 	const docker = options.docker ?? new dockerode.default();
 	return { async start(input) {
 		if (input.projects.length === 0) throw new Error("Docker org runtime requires at least one project deploy");
-		const launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({
+		let launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({
 			projectId: project.projectId,
 			artifactStorageKey: project.artifactStorageKey
 		})), input.database, input.env);
+		if (options.workspacesMount) {
+			const { hostPath, containerPath } = options.workspacesMount;
+			await (0, node_fs_promises.mkdir)(hostPath, { recursive: true });
+			launch = {
+				...launch,
+				env: {
+					...launch.env,
+					KEYSTROKE_WORKSPACES_ROOT: containerPath
+				}
+			};
+		}
 		await ensureImage(docker, launch.image);
 		await removeExistingContainer(docker, input.organizationId);
 		const container = await docker.createContainer({
@@ -234,7 +246,8 @@ function createDockerRuntime(options = {}) {
 			ExposedPorts: { [`${launch.port}/tcp`]: {} },
 			HostConfig: {
 				ExtraHosts: ["host.docker.internal:host-gateway"],
-				PortBindings: { [`${launch.port}/tcp`]: [{ HostPort: "0" }] }
+				PortBindings: { [`${launch.port}/tcp`]: [{ HostPort: "0" }] },
+				...options.workspacesMount ? { Binds: [`${options.workspacesMount.hostPath}:${options.workspacesMount.containerPath}`] } : {}
 			},
 			NetworkingConfig: { EndpointsConfig: { [MINIO_DOCKER_NETWORK]: {} } },
 			Env: formatDockerEnv(launch.env)

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["Docker"],"sources":["../src/constants.ts","../src/runtime.ts","../src/runtime-env.ts","../src/worker-runtime-config.ts","../src/wait-for-health.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"sourcesContent":["export const PROJECT_SERVER_IMAGE = \"keystroke/project-server:local\";\n\nexport const PROJECT_SERVER_PORT = 3000;\n\nexport const PROJECT_SERVER_ROOT = \"/app\";\n\nexport const PROJECT_SERVER_FRAMEWORK_ROOT = \"/opt/keystroke\";\n\nexport const PROJECT_SERVER_FRAMEWORK_NODE_MODULES = `${PROJECT_SERVER_FRAMEWORK_ROOT}/node_modules`;\n\nexport const PROJECT_SERVER_HEALTH = {\n  path: \"/health\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n","export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\"\n    ) {\n      throw new Error(\"KEYSTROKE_ORG_ARTIFACTS entries require projectId and artifactStorageKey\");\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n","import type { ProjectRuntimeDatabase } from \"./runtime\";\nimport { encodeOrgArtifacts, type OrgArtifactSpec } from \"./runtime\";\nimport {\n  PROJECT_SERVER_FRAMEWORK_NODE_MODULES,\n  PROJECT_SERVER_HEALTH,\n  PROJECT_SERVER_IMAGE,\n  PROJECT_SERVER_PORT,\n  PROJECT_SERVER_ROOT,\n} from \"./constants\";\nimport type { HostingOptions } from \"./plugin\";\nimport { resolveWorkerRuntimeConfig } from \"./worker-runtime-config\";\n\nconst RUNTIME_ENV_KEYS = [\n  \"BETTER_AUTH_SECRET\",\n  \"PUBLIC_SERVER_URL\",\n  \"PUBLIC_WEB_URL\",\n  \"POSTGRES_SSL\",\n  \"UPSTASH_REDIS_URL\",\n  \"REDIS_URL\",\n  \"KEYSTROKE_QUEUE_PREFIX\",\n] as const;\n\n/** Provider and gateway env forwarded from the platform into project servers. */\nconst PROVIDER_ENV_KEYS = [\n  \"ANTHROPIC_API_KEY\",\n  \"OPENAI_API_KEY\",\n  \"AI_GATEWAY_API_KEY\",\n  \"AI_GATEWAY_BASE_URL\",\n] as const;\n\n/** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */\nexport const DEV_PLATFORM_WORKER_TOKEN = \"dev-platform-worker-token\";\n\nexport const PROJECT_DATABASE_ENV_KEYS = [\n  \"POSTGRES_HOST\",\n  \"POSTGRES_PORT\",\n  \"POSTGRES_DB\",\n  \"POSTGRES_USER\",\n  \"POSTGRES_PASSWORD\",\n  \"DATABASE_SEARCH_PATH\",\n] as const;\n\nexport type RuntimeLaunchSpec = {\n  image: string;\n  env: Record<string, string>;\n  port: number;\n  health: typeof PROJECT_SERVER_HEALTH;\n};\n\n/** Per-project postgres env injected into every project server container/machine. */\nexport function projectDatabaseRuntimeEnv(\n  database: ProjectRuntimeDatabase,\n): Record<(typeof PROJECT_DATABASE_ENV_KEYS)[number], string> {\n  return {\n    POSTGRES_HOST: rewriteLoopbackHost(database.host),\n    POSTGRES_PORT: String(database.port),\n    POSTGRES_DB: database.database,\n    POSTGRES_USER: database.user,\n    POSTGRES_PASSWORD: database.password,\n    DATABASE_SEARCH_PATH: database.searchPath,\n  };\n}\n\n/**\n * Builds the launch spec for an org worker. Each deploy artifact is encoded in\n * `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.\n */\nexport function resolveRuntimeLaunch(\n  options: HostingOptions,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  if (artifacts.length === 0) {\n    throw new Error(\"Cannot start an org worker without at least one artifact\");\n  }\n\n  const env = options.env ?? process.env;\n\n  return {\n    image: resolveProjectServerImage(env, options.image),\n    env: buildRuntimeEnv(env, artifacts, database, extraEnv),\n    port: PROJECT_SERVER_PORT,\n    health: PROJECT_SERVER_HEALTH,\n  };\n}\n\n/** @deprecated Single-project launch — prefer org {@link resolveRuntimeLaunch}. */\nexport function resolveSingleProjectRuntimeLaunch(\n  options: HostingOptions,\n  artifactStorageKey: string,\n  database: ProjectRuntimeDatabase & { projectId: string },\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  return resolveRuntimeLaunch(\n    options,\n    [{ projectId: database.projectId, artifactStorageKey }],\n    database,\n    extraEnv,\n  );\n}\n\n/** Env vars passed into the org worker container/machine. */\nexport function buildRuntimeEnv(\n  source: NodeJS.ProcessEnv,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): Record<string, string> {\n  const entries = new Map<string, string>([\n    [\"PORT\", String(PROJECT_SERVER_PORT)],\n    [\"KEYSTROKE_ROOT\", PROJECT_SERVER_ROOT],\n    [\"KEYSTROKE_RUNTIME_NODE_MODULES\", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],\n    [\"KEYSTROKE_ORG_ARTIFACTS\", encodeOrgArtifacts(artifacts)],\n    [\"ORGANIZATION_ID\", database.organizationId],\n    [\"TENANT_ID\", database.organizationId],\n  ]);\n\n  for (const key of RUNTIME_ENV_KEYS) {\n    const value = source[key]?.trim();\n    if (!value) {\n      if (key === \"POSTGRES_SSL\") {\n        throw new Error(\"POSTGRES_SSL is required\");\n      }\n      continue;\n    }\n    entries.set(key, value);\n  }\n\n  // OSS self-host: forward BYO provider/gateway env. Cloud llmProxy supplies extraEnv instead.\n  if (!extraEnv) {\n    for (const key of PROVIDER_ENV_KEYS) {\n      const value = source[key]?.trim();\n      if (value) {\n        entries.set(key, value);\n      }\n    }\n  }\n\n  // Project containers always run as workers: they resolve credentials/secrets through\n  // the platform internal API and are deliberately never given the decryption key.\n  const worker = resolveWorkerRuntimeConfig(source);\n  entries.set(\"PLATFORM_URL\", worker.platformUrl);\n  entries.set(\"WORKER_INTERNAL_TOKEN\", worker.workerToken);\n\n  for (const [key, value] of Object.entries(projectDatabaseRuntimeEnv(database))) {\n    entries.set(key, value);\n  }\n\n  if (extraEnv) {\n    for (const [key, value] of Object.entries(extraEnv)) {\n      entries.set(key, value);\n    }\n  }\n\n  return Object.fromEntries(entries);\n}\n\nexport function resolvePlatformWorkerToken(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const explicit = source.PLATFORM_WORKER_TOKEN?.trim() ?? source.WORKER_INTERNAL_TOKEN?.trim();\n  if (explicit) {\n    return explicit;\n  }\n\n  if (source.NODE_ENV === \"production\") {\n    return undefined;\n  }\n\n  return DEV_PLATFORM_WORKER_TOKEN;\n}\n\n/** Platform API URL reachable from a project-server container. */\nconst DEV_PLATFORM_URL = \"http://localhost:3002\";\n\nexport function resolveWorkerPlatformUrl(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const raw =\n    source.PLATFORM_URL?.trim() ??\n    source.PUBLIC_PLATFORM_URL?.trim() ??\n    (source.NODE_ENV === \"production\" ? undefined : DEV_PLATFORM_URL);\n  if (!raw) {\n    return undefined;\n  }\n\n  return rewriteLoopbackUrl(raw);\n}\n\n/** Rewrite loopback hosts so containers can reach Postgres and other host services. */\nexport function rewriteLoopbackHost(host: string): string {\n  if (host === \"localhost\" || host === \"127.0.0.1\") {\n    return \"host.docker.internal\";\n  }\n\n  return host;\n}\n\nexport function rewriteLoopbackUrl(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.hostname = rewriteLoopbackHost(parsed.hostname);\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return url;\n  }\n}\n\n/** dockerode expects `KEY=value` strings. */\nexport function formatDockerEnv(env: Record<string, string>): string[] {\n  return Object.entries(env).map(([key, value]) => `${key}=${value}`);\n}\n\nexport function resolveProjectServerImage(\n  env: NodeJS.ProcessEnv = process.env,\n  override?: string,\n): string {\n  return override ?? env.PROJECT_DOCKER_IMAGE ?? env.TENANT_DOCKER_IMAGE ?? PROJECT_SERVER_IMAGE;\n}\n","import { resolvePlatformWorkerToken, resolveWorkerPlatformUrl } from \"./runtime-env\";\n\n/** Resolved platform ↔ project-server worker auth contract. */\nexport type WorkerRuntimeConfig = {\n  /** Platform API base URL reachable from the project-server runtime. */\n  platformUrl: string;\n  /** Bearer token for platform `/internal` routes. */\n  workerToken: string;\n};\n\nexport class WorkerRuntimeConfigError extends Error {\n  readonly missing: readonly string[];\n\n  constructor(missing: string[]) {\n    super(\n      `Worker runtime config incomplete (missing: ${missing.join(\", \")}). ` +\n        \"In production set PLATFORM_WORKER_TOKEN and PUBLIC_PLATFORM_URL (or PLATFORM_URL).\",\n    );\n    this.name = \"WorkerRuntimeConfigError\";\n    this.missing = missing;\n  }\n}\n\n/** Fail fast when the platform cannot start worker-mode project servers. */\nexport function resolveWorkerRuntimeConfig(\n  source: NodeJS.ProcessEnv = process.env,\n): WorkerRuntimeConfig {\n  const platformUrl = resolveWorkerPlatformUrl(source);\n  const workerToken = resolvePlatformWorkerToken(source);\n  const missing: string[] = [];\n\n  if (!platformUrl) {\n    missing.push(\"PUBLIC_PLATFORM_URL or PLATFORM_URL\");\n  }\n\n  if (!workerToken) {\n    missing.push(\"PLATFORM_WORKER_TOKEN\");\n  }\n\n  if (missing.length > 0) {\n    throw new WorkerRuntimeConfigError(missing);\n  }\n\n  return { platformUrl: platformUrl!, workerToken: workerToken! };\n}\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_INTERVAL_MS = 500;\n\nexport type WaitForHealthOptions = {\n  timeoutMs?: number;\n  intervalMs?: number;\n  fetchImpl?: typeof fetch;\n};\n\nexport async function waitForHealth(\n  baseUrl: string,\n  options: WaitForHealthOptions = {},\n): Promise<void> {\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;\n  const deadline = Date.now() + timeoutMs;\n  const url = new URL(PROJECT_SERVER_HEALTH.path, baseUrl);\n\n  while (Date.now() < deadline) {\n    try {\n      const response = await fetchImpl(url, { signal: AbortSignal.timeout(2_000) });\n      if (response.ok) {\n        return;\n      }\n    } catch {\n      // retry until timeout\n    }\n\n    await sleep(intervalMs);\n  }\n\n  throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import Docker from \"dockerode\";\n\nimport type { ProjectRuntime } from \"../runtime\";\n\nimport type { HostingOptions } from \"../plugin\";\nimport { formatDockerEnv, resolveRuntimeLaunch } from \"../runtime-env\";\nimport { waitForHealth } from \"../wait-for-health\";\n\nexport type DockerPluginOptions = HostingOptions & {\n  docker?: Docker;\n};\n\nconst MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? \"keystroke\";\n\nexport function createDockerRuntime(options: DockerPluginOptions = {}): ProjectRuntime {\n  const docker = options.docker ?? new Docker();\n\n  return {\n    async start(input) {\n      if (input.projects.length === 0) {\n        throw new Error(\"Docker org runtime requires at least one project deploy\");\n      }\n\n      const launch = resolveRuntimeLaunch(\n        options,\n        input.projects.map((project) => ({\n          projectId: project.projectId,\n          artifactStorageKey: project.artifactStorageKey,\n        })),\n        input.database,\n        input.env,\n      );\n      await ensureImage(docker, launch.image);\n      await removeExistingContainer(docker, input.organizationId);\n\n      const container = await docker.createContainer({\n        Image: launch.image,\n        name: containerName(input.organizationId),\n        Labels: {\n          \"keystroke.organization.id\": input.organizationId,\n          \"keystroke.project.ids\": input.projects.map((project) => project.projectId).join(\",\"),\n        },\n        ExposedPorts: {\n          [`${launch.port}/tcp`]: {},\n        },\n        HostConfig: {\n          ExtraHosts: [\"host.docker.internal:host-gateway\"],\n          PortBindings: {\n            [`${launch.port}/tcp`]: [{ HostPort: \"0\" }],\n          },\n        },\n        NetworkingConfig: {\n          EndpointsConfig: {\n            [MINIO_DOCKER_NETWORK]: {},\n          },\n        },\n        Env: formatDockerEnv(launch.env),\n      });\n\n      await container.start();\n\n      const inspect = await container.inspect();\n      const binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];\n      if (!binding?.HostPort) {\n        throw new Error(\"Failed to resolve org container host port\");\n      }\n\n      const baseUrl = `http://127.0.0.1:${binding.HostPort}`;\n      await waitForHealth(baseUrl, {\n        fetchImpl: options.fetchImpl,\n        timeoutMs: options.healthTimeoutMs,\n      });\n\n      return {\n        runtimeId: inspect.Id,\n        baseUrl,\n      };\n    },\n  };\n}\n\nfunction containerName(organizationId: string): string {\n  return `keystroke-org-${organizationId}`;\n}\n\nasync function removeExistingContainer(docker: Docker, organizationId: string): Promise<void> {\n  try {\n    const existing = docker.getContainer(containerName(organizationId));\n    await existing.stop({ t: 5 }).catch(() => undefined);\n    await existing.remove({ force: true });\n  } catch {\n    // no existing container\n  }\n}\n\nasync function ensureImage(docker: Docker, image: string): Promise<void> {\n  try {\n    await docker.getImage(image).inspect();\n    return;\n  } catch {\n    // pull below\n  }\n\n  await new Promise<void>((resolvePromise, reject) => {\n    docker.pull(image, (error: Error | null, stream: NodeJS.ReadableStream | undefined) => {\n      if (error) {\n        reject(error);\n        return;\n      }\n\n      if (!stream) {\n        reject(new Error(`Failed to pull image ${image}`));\n        return;\n      }\n\n      docker.modem.followProgress(stream, (progressError: Error | null) => {\n        if (progressError) {\n          reject(progressError);\n          return;\n        }\n\n        resolvePromise();\n      });\n    });\n  });\n}\n","import type { HostingPlugin } from \"../plugin\";\nimport { resolveWorkerRuntimeConfig } from \"../worker-runtime-config\";\n\nimport { createDockerRuntime } from \"./create-docker-runtime\";\nimport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport function dockerPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  const env = options.env ?? process.env;\n\n  return {\n    name: \"docker\",\n    workerRuntime: resolveWorkerRuntimeConfig(env),\n    createRuntime: () => createDockerRuntime({ ...options, env }),\n  };\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport { dockerPlugin, type DockerPluginOptions } from \"./docker/plugin\";\n\n/** Local Docker hosting — default for platform and dev. */\nexport function defaultHostingPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  return dockerPlugin(options);\n}\n","/** Timeout for a single project runtime `/health` probe. */\nexport const RUNTIME_PING_TIMEOUT_MS = 15_000;\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\nimport type { HostingPlugin } from \"./plugin\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport type PingProjectOptions = {\n  runtimeId?: string | null;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  plugin?: Pick<HostingPlugin, \"pingRequestHeaders\">;\n};\n\nexport async function pingProject(\n  baseUrl: string,\n  options: PingProjectOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_HEALTH.path, baseUrl),\n      {\n        signal: AbortSignal.timeout(timeoutMs),\n        headers,\n      },\n    );\n\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport type { ProjectPingTarget } from \"./runtime\";\nimport { pingProject, type PingProjectOptions } from \"./ping-project\";\n\nexport function canPingProjectTarget(\n  target: ProjectPingTarget,\n  plugin?: Pick<HostingPlugin, \"canPingTarget\">,\n): target is { baseUrl: string; runtimeId: string | null } {\n  if (plugin?.canPingTarget) {\n    return plugin.canPingTarget(target);\n  }\n\n  return !!target.baseUrl;\n}\n\nexport async function pingProjectTarget(\n  target: ProjectPingTarget,\n  options: PingProjectOptions & {\n    plugin?: Pick<HostingPlugin, \"canPingTarget\" | \"pingRequestHeaders\">;\n  } = {},\n): Promise<boolean> {\n  if (!canPingProjectTarget(target, options.plugin)) {\n    return false;\n  }\n\n  return pingProject(target.baseUrl, {\n    ...options,\n    runtimeId: target.runtimeId,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAa,uBAAuB;AAEpC,MAAa,sBAAsB;AAEnC,MAAa,sBAAsB;AAEnC,MAAa,gCAAgC;AAE7C,MAAa,wCAAwC,GAAG,8BAA8B;AAEtF,MAAa,wBAAwB;CACnC,MAAM;CACN,MAAM;AACR;;;;AC2BA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,UAEzD,MAAM,IAAI,MAAM,0EAA0E;EAG5F,OAAO;CACT,CAAC;AACH;;;ACzDA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;AACF;;AAGA,MAAa,4BAA4B;AAEzC,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;CACA;CACA;AACF;;AAUA,SAAgB,0BACd,UAC4D;CAC5D,OAAO;EACL,eAAe,oBAAoB,SAAS,IAAI;EAChD,eAAe,OAAO,SAAS,IAAI;EACnC,aAAa,SAAS;EACtB,eAAe,SAAS;EACxB,mBAAmB,SAAS;EAC5B,sBAAsB,SAAS;CACjC;AACF;;;;;AAMA,SAAgB,qBACd,SACA,WACA,UACA,UACmB;CACnB,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,MAAM,0DAA0D;CAG5E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,OAAO,0BAA0B,KAAK,QAAQ,KAAK;EACnD,KAAK,gBAAgB,KAAK,WAAW,UAAU,QAAQ;EACvD,MAAM;EACN,QAAQ;CACV;AACF;;AAkBA,SAAgB,gBACd,QACA,WACA,UACA,UACwB;CACxB,MAAM,UAAU,IAAI,IAAoB;EACtC,CAAC,QAAQ,OAAO,mBAAmB,CAAC;EACpC,CAAC,kBAAkB,mBAAmB;EACtC,CAAC,kCAAkC,qCAAqC;EACxE,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;EACzD,CAAC,mBAAmB,SAAS,cAAc;EAC3C,CAAC,aAAa,SAAS,cAAc;CACvC,CAAC;CAED,KAAK,MAAM,OAAO,kBAAkB;EAClC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,CAAC,OAAO;GACV,IAAI,QAAQ,gBACV,MAAM,IAAI,MAAM,0BAA0B;GAE5C;EACF;EACA,QAAQ,IAAI,KAAK,KAAK;CACxB;CAGA,IAAI,CAAC,UACH,KAAK,MAAM,OAAO,mBAAmB;EACnC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,OACF,QAAQ,IAAI,KAAK,KAAK;CAE1B;CAKF,MAAM,SAAS,2BAA2B,MAAM;CAChD,QAAQ,IAAI,gBAAgB,OAAO,WAAW;CAC9C,QAAQ,IAAI,yBAAyB,OAAO,WAAW;CAEvD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,0BAA0B,QAAQ,CAAC,GAC3E,QAAQ,IAAI,KAAK,KAAK;CAGxB,IAAI,UACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,QAAQ,IAAI,KAAK,KAAK;CAI1B,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAgB,2BACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,WAAW,OAAO,uBAAuB,KAAK,KAAK,OAAO,uBAAuB,KAAK;CAC5F,IAAI,UACF,OAAO;CAGT,IAAI,OAAO,aAAa,cACtB;CAGF,OAAO;AACT;;AAGA,MAAM,mBAAmB;AAEzB,SAAgB,yBACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,MACJ,OAAO,cAAc,KAAK,KAC1B,OAAO,qBAAqB,KAAK,MAChC,OAAO,aAAa,eAAe,KAAA,IAAY;CAClD,IAAI,CAAC,KACH;CAGF,OAAO,mBAAmB,GAAG;AAC/B;;AAGA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,SAAS,eAAe,SAAS,aACnC,OAAO;CAGT,OAAO;AACT;AAEA,SAAgB,mBAAmB,KAAqB;CACtD,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,WAAW,oBAAoB,OAAO,QAAQ;EACrD,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;CAC5C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,gBAAgB,KAAuC;CACrE,OAAO,OAAO,QAAQ,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO;AACpE;AAEA,SAAgB,0BACd,MAAyB,QAAQ,KACjC,UACQ;CACR,OAAO,YAAY,IAAI,wBAAwB,IAAI,uBAAA;AACrD;;;ACjNA,IAAa,2BAAb,cAA8C,MAAM;CAClD;CAEA,YAAY,SAAmB;EAC7B,MACE,8CAA8C,QAAQ,KAAK,IAAI,EAAE,sFAEnE;EACA,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;;AAGA,SAAgB,2BACd,SAA4B,QAAQ,KACf;CACrB,MAAM,cAAc,yBAAyB,MAAM;CACnD,MAAM,cAAc,2BAA2B,MAAM;CACrD,MAAM,UAAoB,CAAC;CAE3B,IAAI,CAAC,aACH,QAAQ,KAAK,qCAAqC;CAGpD,IAAI,CAAC,aACH,QAAQ,KAAK,uBAAuB;CAGtC,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,yBAAyB,OAAO;CAG5C,OAAO;EAAe;EAA2B;CAAa;AAChE;;;AC1CA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAQ5B,eAAsB,cACpB,SACA,UAAgC,CAAC,GAClB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB,MAAM,OAAO;CAEvD,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,IAAI;GAEF,KAAI,MADmB,UAAU,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC,GAC/D,IACX;EAEJ,QAAQ,CAER;EAEA,MAAM,MAAM,UAAU;CACxB;CAEA,MAAM,IAAI,MAAM,+CAA+C,UAAU,MAAM,IAAI,EAAE;AACvF;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY;EAC9B,WAAW,SAAS,EAAE;CACxB,CAAC;AACH;;;AC7BA,MAAM,uBAAuB,QAAQ,IAAI,wBAAwB;AAEjE,SAAgB,oBAAoB,UAA+B,CAAC,GAAmB;CACrF,MAAM,SAAS,QAAQ,UAAU,IAAIA,UAAAA,QAAO;CAE5C,OAAO,EACL,MAAM,MAAM,OAAO;EACjB,IAAI,MAAM,SAAS,WAAW,GAC5B,MAAM,IAAI,MAAM,yDAAyD;EAG3E,MAAM,SAAS,qBACb,SACA,MAAM,SAAS,KAAK,aAAa;GAC/B,WAAW,QAAQ;GACnB,oBAAoB,QAAQ;EAC9B,EAAE,GACF,MAAM,UACN,MAAM,GACR;EACA,MAAM,YAAY,QAAQ,OAAO,KAAK;EACtC,MAAM,wBAAwB,QAAQ,MAAM,cAAc;EAE1D,MAAM,YAAY,MAAM,OAAO,gBAAgB;GAC7C,OAAO,OAAO;GACd,MAAM,cAAc,MAAM,cAAc;GACxC,QAAQ;IACN,6BAA6B,MAAM;IACnC,yBAAyB,MAAM,SAAS,KAAK,YAAY,QAAQ,SAAS,EAAE,KAAK,GAAG;GACtF;GACA,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAC3B;GACA,YAAY;IACV,YAAY,CAAC,mCAAmC;IAChD,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAC5C;GACF;GACA,kBAAkB,EAChB,iBAAiB,GACd,uBAAuB,CAAC,EAC3B,EACF;GACA,KAAK,gBAAgB,OAAO,GAAG;EACjC,CAAC;EAED,MAAM,UAAU,MAAM;EAEtB,MAAM,UAAU,MAAM,UAAU,QAAQ;EACxC,MAAM,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,OAAO,KAAK,SAAS;EACxE,IAAI,CAAC,SAAS,UACZ,MAAM,IAAI,MAAM,2CAA2C;EAG7D,MAAM,UAAU,oBAAoB,QAAQ;EAC5C,MAAM,cAAc,SAAS;GAC3B,WAAW,QAAQ;GACnB,WAAW,QAAQ;EACrB,CAAC;EAED,OAAO;GACL,WAAW,QAAQ;GACnB;EACF;CACF,EACF;AACF;AAEA,SAAS,cAAc,gBAAgC;CACrD,OAAO,iBAAiB;AAC1B;AAEA,eAAe,wBAAwB,QAAgB,gBAAuC;CAC5F,IAAI;EACF,MAAM,WAAW,OAAO,aAAa,cAAc,cAAc,CAAC;EAClE,MAAM,SAAS,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,KAAA,CAAS;EACnD,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,CAAC;CACvC,QAAQ,CAER;AACF;AAEA,eAAe,YAAY,QAAgB,OAA8B;CACvE,IAAI;EACF,MAAM,OAAO,SAAS,KAAK,EAAE,QAAQ;EACrC;CACF,QAAQ,CAER;CAEA,MAAM,IAAI,SAAe,gBAAgB,WAAW;EAClD,OAAO,KAAK,QAAQ,OAAqB,WAA8C;GACrF,IAAI,OAAO;IACT,OAAO,KAAK;IACZ;GACF;GAEA,IAAI,CAAC,QAAQ;IACX,uBAAO,IAAI,MAAM,wBAAwB,OAAO,CAAC;IACjD;GACF;GAEA,OAAO,MAAM,eAAe,SAAS,kBAAgC;IACnE,IAAI,eAAe;KACjB,OAAO,aAAa;KACpB;IACF;IAEA,eAAe;GACjB,CAAC;EACH,CAAC;CACH,CAAC;AACH;;;ACrHA,SAAgB,aAAa,UAA+B,CAAC,GAAkB;CAC7E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,MAAM;EACN,eAAe,2BAA2B,GAAG;EAC7C,qBAAqB,oBAAoB;GAAE,GAAG;GAAS;EAAI,CAAC;CAC9D;AACF;;;;ACZA,SAAgB,qBAAqB,UAA+B,CAAC,GAAkB;CACrF,OAAO,aAAa,OAAO;AAC7B;;;;ACLA,MAAa,0BAA0B;;;ACUvC,eAAsB,YACpB,SACA,UAA8B,CAAC,GACb;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAU,QAAQ,QAAQ,qBAAqB,QAAQ,aAAa,IAAI,KAAK,CAAC;CAEpF,IAAI;EASF,QAAO,OARiB,QAAQ,aAAa,OAC3C,IAAI,IAAI,sBAAsB,MAAM,OAAO,GAC3C;GACE,QAAQ,YAAY,QAAQ,SAAS;GACrC;EACF,CACF,GAEgB;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;AC3BA,SAAgB,qBACd,QACA,QACyD;CACzD,IAAI,QAAQ,eACV,OAAO,OAAO,cAAc,MAAM;CAGpC,OAAO,CAAC,CAAC,OAAO;AAClB;AAEA,eAAsB,kBACpB,QACA,UAEI,CAAC,GACa;CAClB,IAAI,CAAC,qBAAqB,QAAQ,QAAQ,MAAM,GAC9C,OAAO;CAGT,OAAO,YAAY,OAAO,SAAS;EACjC,GAAG;EACH,WAAW,OAAO;CACpB,CAAC;AACH"}
+{"version":3,"file":"index.cjs","names":["Docker"],"sources":["../src/constants.ts","../src/runtime.ts","../src/runtime-env.ts","../src/worker-runtime-config.ts","../src/wait-for-health.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"sourcesContent":["export const PROJECT_SERVER_IMAGE = \"keystroke/project-server:local\";\n\nexport const PROJECT_SERVER_PORT = 3000;\n\nexport const PROJECT_SERVER_ROOT = \"/app\";\n\nexport const PROJECT_SERVER_FRAMEWORK_ROOT = \"/opt/keystroke\";\n\nexport const PROJECT_SERVER_FRAMEWORK_NODE_MODULES = `${PROJECT_SERVER_FRAMEWORK_ROOT}/node_modules`;\n\nexport const PROJECT_SERVER_HEALTH = {\n  path: \"/health\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n","export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\"\n    ) {\n      throw new Error(\"KEYSTROKE_ORG_ARTIFACTS entries require projectId and artifactStorageKey\");\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n","import type { ProjectRuntimeDatabase } from \"./runtime\";\nimport { encodeOrgArtifacts, type OrgArtifactSpec } from \"./runtime\";\nimport {\n  PROJECT_SERVER_FRAMEWORK_NODE_MODULES,\n  PROJECT_SERVER_HEALTH,\n  PROJECT_SERVER_IMAGE,\n  PROJECT_SERVER_PORT,\n  PROJECT_SERVER_ROOT,\n} from \"./constants\";\nimport type { HostingOptions } from \"./plugin\";\nimport { resolveWorkerRuntimeConfig } from \"./worker-runtime-config\";\n\nconst RUNTIME_ENV_KEYS = [\n  \"BETTER_AUTH_SECRET\",\n  \"PUBLIC_SERVER_URL\",\n  \"PUBLIC_WEB_URL\",\n  \"POSTGRES_SSL\",\n  \"UPSTASH_REDIS_URL\",\n  \"REDIS_URL\",\n  \"KEYSTROKE_QUEUE_PREFIX\",\n] as const;\n\n/** Provider and gateway env forwarded from the platform into project servers. */\nconst PROVIDER_ENV_KEYS = [\n  \"ANTHROPIC_API_KEY\",\n  \"OPENAI_API_KEY\",\n  \"AI_GATEWAY_API_KEY\",\n  \"AI_GATEWAY_BASE_URL\",\n] as const;\n\n/** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */\nexport const DEV_PLATFORM_WORKER_TOKEN = \"dev-platform-worker-token\";\n\nexport const PROJECT_DATABASE_ENV_KEYS = [\n  \"POSTGRES_HOST\",\n  \"POSTGRES_PORT\",\n  \"POSTGRES_DB\",\n  \"POSTGRES_USER\",\n  \"POSTGRES_PASSWORD\",\n  \"DATABASE_SEARCH_PATH\",\n] as const;\n\nexport type RuntimeLaunchSpec = {\n  image: string;\n  env: Record<string, string>;\n  port: number;\n  health: typeof PROJECT_SERVER_HEALTH;\n};\n\n/** Per-project postgres env injected into every project server container/machine. */\nexport function projectDatabaseRuntimeEnv(\n  database: ProjectRuntimeDatabase,\n): Record<(typeof PROJECT_DATABASE_ENV_KEYS)[number], string> {\n  return {\n    POSTGRES_HOST: rewriteLoopbackHost(database.host),\n    POSTGRES_PORT: String(database.port),\n    POSTGRES_DB: database.database,\n    POSTGRES_USER: database.user,\n    POSTGRES_PASSWORD: database.password,\n    DATABASE_SEARCH_PATH: database.searchPath,\n  };\n}\n\n/**\n * Builds the launch spec for an org worker. Each deploy artifact is encoded in\n * `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.\n */\nexport function resolveRuntimeLaunch(\n  options: HostingOptions,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  if (artifacts.length === 0) {\n    throw new Error(\"Cannot start an org worker without at least one artifact\");\n  }\n\n  const env = options.env ?? process.env;\n\n  return {\n    image: resolveProjectServerImage(env, options.image),\n    env: buildRuntimeEnv(env, artifacts, database, extraEnv),\n    port: PROJECT_SERVER_PORT,\n    health: PROJECT_SERVER_HEALTH,\n  };\n}\n\n/** @deprecated Single-project launch — prefer org {@link resolveRuntimeLaunch}. */\nexport function resolveSingleProjectRuntimeLaunch(\n  options: HostingOptions,\n  artifactStorageKey: string,\n  database: ProjectRuntimeDatabase & { projectId: string },\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  return resolveRuntimeLaunch(\n    options,\n    [{ projectId: database.projectId, artifactStorageKey }],\n    database,\n    extraEnv,\n  );\n}\n\n/** Env vars passed into the org worker container/machine. */\nexport function buildRuntimeEnv(\n  source: NodeJS.ProcessEnv,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): Record<string, string> {\n  const entries = new Map<string, string>([\n    [\"PORT\", String(PROJECT_SERVER_PORT)],\n    [\"KEYSTROKE_ROOT\", PROJECT_SERVER_ROOT],\n    [\"KEYSTROKE_RUNTIME_NODE_MODULES\", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],\n    [\"KEYSTROKE_ORG_ARTIFACTS\", encodeOrgArtifacts(artifacts)],\n    [\"ORGANIZATION_ID\", database.organizationId],\n    [\"TENANT_ID\", database.organizationId],\n  ]);\n\n  for (const key of RUNTIME_ENV_KEYS) {\n    const value = source[key]?.trim();\n    if (!value) {\n      if (key === \"POSTGRES_SSL\") {\n        throw new Error(\"POSTGRES_SSL is required\");\n      }\n      continue;\n    }\n    entries.set(key, value);\n  }\n\n  // OSS self-host: forward BYO provider/gateway env. Cloud llmProxy supplies extraEnv instead.\n  if (!extraEnv) {\n    for (const key of PROVIDER_ENV_KEYS) {\n      const value = source[key]?.trim();\n      if (value) {\n        entries.set(key, value);\n      }\n    }\n  }\n\n  // Project containers always run as workers: they resolve credentials/secrets through\n  // the platform internal API and are deliberately never given the decryption key.\n  const worker = resolveWorkerRuntimeConfig(source);\n  entries.set(\"PLATFORM_URL\", worker.platformUrl);\n  entries.set(\"WORKER_INTERNAL_TOKEN\", worker.workerToken);\n\n  for (const [key, value] of Object.entries(projectDatabaseRuntimeEnv(database))) {\n    entries.set(key, value);\n  }\n\n  if (extraEnv) {\n    for (const [key, value] of Object.entries(extraEnv)) {\n      entries.set(key, value);\n    }\n  }\n\n  return Object.fromEntries(entries);\n}\n\nexport function resolvePlatformWorkerToken(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const explicit = source.PLATFORM_WORKER_TOKEN?.trim() ?? source.WORKER_INTERNAL_TOKEN?.trim();\n  if (explicit) {\n    return explicit;\n  }\n\n  if (source.NODE_ENV === \"production\") {\n    return undefined;\n  }\n\n  return DEV_PLATFORM_WORKER_TOKEN;\n}\n\n/** Platform API URL reachable from a project-server container. */\nconst DEV_PLATFORM_URL = \"http://localhost:3002\";\n\nexport function resolveWorkerPlatformUrl(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const raw =\n    source.PLATFORM_URL?.trim() ??\n    source.PUBLIC_PLATFORM_URL?.trim() ??\n    (source.NODE_ENV === \"production\" ? undefined : DEV_PLATFORM_URL);\n  if (!raw) {\n    return undefined;\n  }\n\n  return rewriteLoopbackUrl(raw);\n}\n\n/** Rewrite loopback hosts so containers can reach Postgres and other host services. */\nexport function rewriteLoopbackHost(host: string): string {\n  if (host === \"localhost\" || host === \"127.0.0.1\") {\n    return \"host.docker.internal\";\n  }\n\n  return host;\n}\n\nexport function rewriteLoopbackUrl(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.hostname = rewriteLoopbackHost(parsed.hostname);\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return url;\n  }\n}\n\n/** dockerode expects `KEY=value` strings. */\nexport function formatDockerEnv(env: Record<string, string>): string[] {\n  return Object.entries(env).map(([key, value]) => `${key}=${value}`);\n}\n\nexport function resolveProjectServerImage(\n  env: NodeJS.ProcessEnv = process.env,\n  override?: string,\n): string {\n  return override ?? env.PROJECT_DOCKER_IMAGE ?? env.TENANT_DOCKER_IMAGE ?? PROJECT_SERVER_IMAGE;\n}\n","import { resolvePlatformWorkerToken, resolveWorkerPlatformUrl } from \"./runtime-env\";\n\n/** Resolved platform ↔ project-server worker auth contract. */\nexport type WorkerRuntimeConfig = {\n  /** Platform API base URL reachable from the project-server runtime. */\n  platformUrl: string;\n  /** Bearer token for platform `/internal` routes. */\n  workerToken: string;\n};\n\nexport class WorkerRuntimeConfigError extends Error {\n  readonly missing: readonly string[];\n\n  constructor(missing: string[]) {\n    super(\n      `Worker runtime config incomplete (missing: ${missing.join(\", \")}). ` +\n        \"In production set PLATFORM_WORKER_TOKEN and PUBLIC_PLATFORM_URL (or PLATFORM_URL).\",\n    );\n    this.name = \"WorkerRuntimeConfigError\";\n    this.missing = missing;\n  }\n}\n\n/** Fail fast when the platform cannot start worker-mode project servers. */\nexport function resolveWorkerRuntimeConfig(\n  source: NodeJS.ProcessEnv = process.env,\n): WorkerRuntimeConfig {\n  const platformUrl = resolveWorkerPlatformUrl(source);\n  const workerToken = resolvePlatformWorkerToken(source);\n  const missing: string[] = [];\n\n  if (!platformUrl) {\n    missing.push(\"PUBLIC_PLATFORM_URL or PLATFORM_URL\");\n  }\n\n  if (!workerToken) {\n    missing.push(\"PLATFORM_WORKER_TOKEN\");\n  }\n\n  if (missing.length > 0) {\n    throw new WorkerRuntimeConfigError(missing);\n  }\n\n  return { platformUrl: platformUrl!, workerToken: workerToken! };\n}\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_INTERVAL_MS = 500;\n\nexport type WaitForHealthOptions = {\n  timeoutMs?: number;\n  intervalMs?: number;\n  fetchImpl?: typeof fetch;\n};\n\nexport async function waitForHealth(\n  baseUrl: string,\n  options: WaitForHealthOptions = {},\n): Promise<void> {\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;\n  const deadline = Date.now() + timeoutMs;\n  const url = new URL(PROJECT_SERVER_HEALTH.path, baseUrl);\n\n  while (Date.now() < deadline) {\n    try {\n      const response = await fetchImpl(url, { signal: AbortSignal.timeout(2_000) });\n      if (response.ok) {\n        return;\n      }\n    } catch {\n      // retry until timeout\n    }\n\n    await sleep(intervalMs);\n  }\n\n  throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import Docker from \"dockerode\";\nimport { mkdir } from \"node:fs/promises\";\n\nimport type { ProjectRuntime } from \"../runtime\";\n\nimport type { HostingOptions } from \"../plugin\";\nimport { formatDockerEnv, resolveRuntimeLaunch } from \"../runtime-env\";\nimport { waitForHealth } from \"../wait-for-health\";\n\nexport type WorkspacesMount = {\n  hostPath: string;\n  containerPath: string;\n};\n\nexport type DockerPluginOptions = HostingOptions & {\n  docker?: Docker;\n  /** Bind a shared host workspace dir into dev workers (VM sandbox proxy mount path). */\n  workspacesMount?: WorkspacesMount;\n};\n\nconst MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? \"keystroke\";\n\nexport function createDockerRuntime(options: DockerPluginOptions = {}): ProjectRuntime {\n  const docker = options.docker ?? new Docker();\n\n  return {\n    async start(input) {\n      if (input.projects.length === 0) {\n        throw new Error(\"Docker org runtime requires at least one project deploy\");\n      }\n\n      let launch = resolveRuntimeLaunch(\n        options,\n        input.projects.map((project) => ({\n          projectId: project.projectId,\n          artifactStorageKey: project.artifactStorageKey,\n        })),\n        input.database,\n        input.env,\n      );\n\n      if (options.workspacesMount) {\n        const { hostPath, containerPath } = options.workspacesMount;\n        await mkdir(hostPath, { recursive: true });\n        launch = {\n          ...launch,\n          env: {\n            ...launch.env,\n            KEYSTROKE_WORKSPACES_ROOT: containerPath,\n          },\n        };\n      }\n\n      await ensureImage(docker, launch.image);\n      await removeExistingContainer(docker, input.organizationId);\n\n      const container = await docker.createContainer({\n        Image: launch.image,\n        name: containerName(input.organizationId),\n        Labels: {\n          \"keystroke.organization.id\": input.organizationId,\n          \"keystroke.project.ids\": input.projects.map((project) => project.projectId).join(\",\"),\n        },\n        ExposedPorts: {\n          [`${launch.port}/tcp`]: {},\n        },\n        HostConfig: {\n          ExtraHosts: [\"host.docker.internal:host-gateway\"],\n          PortBindings: {\n            [`${launch.port}/tcp`]: [{ HostPort: \"0\" }],\n          },\n          ...(options.workspacesMount\n            ? {\n                Binds: [\n                  `${options.workspacesMount.hostPath}:${options.workspacesMount.containerPath}`,\n                ],\n              }\n            : {}),\n        },\n        NetworkingConfig: {\n          EndpointsConfig: {\n            [MINIO_DOCKER_NETWORK]: {},\n          },\n        },\n        Env: formatDockerEnv(launch.env),\n      });\n\n      await container.start();\n\n      const inspect = await container.inspect();\n      const binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];\n      if (!binding?.HostPort) {\n        throw new Error(\"Failed to resolve org container host port\");\n      }\n\n      const baseUrl = `http://127.0.0.1:${binding.HostPort}`;\n      await waitForHealth(baseUrl, {\n        fetchImpl: options.fetchImpl,\n        timeoutMs: options.healthTimeoutMs,\n      });\n\n      return {\n        runtimeId: inspect.Id,\n        baseUrl,\n      };\n    },\n  };\n}\n\nfunction containerName(organizationId: string): string {\n  return `keystroke-org-${organizationId}`;\n}\n\nasync function removeExistingContainer(docker: Docker, organizationId: string): Promise<void> {\n  try {\n    const existing = docker.getContainer(containerName(organizationId));\n    await existing.stop({ t: 5 }).catch(() => undefined);\n    await existing.remove({ force: true });\n  } catch {\n    // no existing container\n  }\n}\n\nasync function ensureImage(docker: Docker, image: string): Promise<void> {\n  try {\n    await docker.getImage(image).inspect();\n    return;\n  } catch {\n    // pull below\n  }\n\n  await new Promise<void>((resolvePromise, reject) => {\n    docker.pull(image, (error: Error | null, stream: NodeJS.ReadableStream | undefined) => {\n      if (error) {\n        reject(error);\n        return;\n      }\n\n      if (!stream) {\n        reject(new Error(`Failed to pull image ${image}`));\n        return;\n      }\n\n      docker.modem.followProgress(stream, (progressError: Error | null) => {\n        if (progressError) {\n          reject(progressError);\n          return;\n        }\n\n        resolvePromise();\n      });\n    });\n  });\n}\n","import type { HostingPlugin } from \"../plugin\";\nimport { resolveWorkerRuntimeConfig } from \"../worker-runtime-config\";\n\nimport { createDockerRuntime } from \"./create-docker-runtime\";\nimport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport function dockerPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  const env = options.env ?? process.env;\n\n  return {\n    name: \"docker\",\n    workerRuntime: resolveWorkerRuntimeConfig(env),\n    createRuntime: () => createDockerRuntime({ ...options, env }),\n  };\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport { dockerPlugin, type DockerPluginOptions } from \"./docker/plugin\";\n\n/** Local Docker hosting — default for platform and dev. */\nexport function defaultHostingPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  return dockerPlugin(options);\n}\n","/** Timeout for a single project runtime `/health` probe. */\nexport const RUNTIME_PING_TIMEOUT_MS = 15_000;\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\nimport type { HostingPlugin } from \"./plugin\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport type PingProjectOptions = {\n  runtimeId?: string | null;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  plugin?: Pick<HostingPlugin, \"pingRequestHeaders\">;\n};\n\nexport async function pingProject(\n  baseUrl: string,\n  options: PingProjectOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_HEALTH.path, baseUrl),\n      {\n        signal: AbortSignal.timeout(timeoutMs),\n        headers,\n      },\n    );\n\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport type { ProjectPingTarget } from \"./runtime\";\nimport { pingProject, type PingProjectOptions } from \"./ping-project\";\n\nexport function canPingProjectTarget(\n  target: ProjectPingTarget,\n  plugin?: Pick<HostingPlugin, \"canPingTarget\">,\n): target is { baseUrl: string; runtimeId: string | null } {\n  if (plugin?.canPingTarget) {\n    return plugin.canPingTarget(target);\n  }\n\n  return !!target.baseUrl;\n}\n\nexport async function pingProjectTarget(\n  target: ProjectPingTarget,\n  options: PingProjectOptions & {\n    plugin?: Pick<HostingPlugin, \"canPingTarget\" | \"pingRequestHeaders\">;\n  } = {},\n): Promise<boolean> {\n  if (!canPingProjectTarget(target, options.plugin)) {\n    return false;\n  }\n\n  return pingProject(target.baseUrl, {\n    ...options,\n    runtimeId: target.runtimeId,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAa,uBAAuB;AAEpC,MAAa,sBAAsB;AAEnC,MAAa,sBAAsB;AAEnC,MAAa,gCAAgC;AAE7C,MAAa,wCAAwC,GAAG,8BAA8B;AAEtF,MAAa,wBAAwB;CACnC,MAAM;CACN,MAAM;AACR;;;;AC2BA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,UAEzD,MAAM,IAAI,MAAM,0EAA0E;EAG5F,OAAO;CACT,CAAC;AACH;;;ACzDA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;AACF;;AAGA,MAAa,4BAA4B;AAEzC,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;CACA;CACA;AACF;;AAUA,SAAgB,0BACd,UAC4D;CAC5D,OAAO;EACL,eAAe,oBAAoB,SAAS,IAAI;EAChD,eAAe,OAAO,SAAS,IAAI;EACnC,aAAa,SAAS;EACtB,eAAe,SAAS;EACxB,mBAAmB,SAAS;EAC5B,sBAAsB,SAAS;CACjC;AACF;;;;;AAMA,SAAgB,qBACd,SACA,WACA,UACA,UACmB;CACnB,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,MAAM,0DAA0D;CAG5E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,OAAO,0BAA0B,KAAK,QAAQ,KAAK;EACnD,KAAK,gBAAgB,KAAK,WAAW,UAAU,QAAQ;EACvD,MAAM;EACN,QAAQ;CACV;AACF;;AAkBA,SAAgB,gBACd,QACA,WACA,UACA,UACwB;CACxB,MAAM,UAAU,IAAI,IAAoB;EACtC,CAAC,QAAQ,OAAO,mBAAmB,CAAC;EACpC,CAAC,kBAAkB,mBAAmB;EACtC,CAAC,kCAAkC,qCAAqC;EACxE,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;EACzD,CAAC,mBAAmB,SAAS,cAAc;EAC3C,CAAC,aAAa,SAAS,cAAc;CACvC,CAAC;CAED,KAAK,MAAM,OAAO,kBAAkB;EAClC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,CAAC,OAAO;GACV,IAAI,QAAQ,gBACV,MAAM,IAAI,MAAM,0BAA0B;GAE5C;EACF;EACA,QAAQ,IAAI,KAAK,KAAK;CACxB;CAGA,IAAI,CAAC,UACH,KAAK,MAAM,OAAO,mBAAmB;EACnC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,OACF,QAAQ,IAAI,KAAK,KAAK;CAE1B;CAKF,MAAM,SAAS,2BAA2B,MAAM;CAChD,QAAQ,IAAI,gBAAgB,OAAO,WAAW;CAC9C,QAAQ,IAAI,yBAAyB,OAAO,WAAW;CAEvD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,0BAA0B,QAAQ,CAAC,GAC3E,QAAQ,IAAI,KAAK,KAAK;CAGxB,IAAI,UACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,QAAQ,IAAI,KAAK,KAAK;CAI1B,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAgB,2BACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,WAAW,OAAO,uBAAuB,KAAK,KAAK,OAAO,uBAAuB,KAAK;CAC5F,IAAI,UACF,OAAO;CAGT,IAAI,OAAO,aAAa,cACtB;CAGF,OAAO;AACT;;AAGA,MAAM,mBAAmB;AAEzB,SAAgB,yBACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,MACJ,OAAO,cAAc,KAAK,KAC1B,OAAO,qBAAqB,KAAK,MAChC,OAAO,aAAa,eAAe,KAAA,IAAY;CAClD,IAAI,CAAC,KACH;CAGF,OAAO,mBAAmB,GAAG;AAC/B;;AAGA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,SAAS,eAAe,SAAS,aACnC,OAAO;CAGT,OAAO;AACT;AAEA,SAAgB,mBAAmB,KAAqB;CACtD,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,WAAW,oBAAoB,OAAO,QAAQ;EACrD,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;CAC5C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,gBAAgB,KAAuC;CACrE,OAAO,OAAO,QAAQ,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO;AACpE;AAEA,SAAgB,0BACd,MAAyB,QAAQ,KACjC,UACQ;CACR,OAAO,YAAY,IAAI,wBAAwB,IAAI,uBAAA;AACrD;;;ACjNA,IAAa,2BAAb,cAA8C,MAAM;CAClD;CAEA,YAAY,SAAmB;EAC7B,MACE,8CAA8C,QAAQ,KAAK,IAAI,EAAE,sFAEnE;EACA,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;;AAGA,SAAgB,2BACd,SAA4B,QAAQ,KACf;CACrB,MAAM,cAAc,yBAAyB,MAAM;CACnD,MAAM,cAAc,2BAA2B,MAAM;CACrD,MAAM,UAAoB,CAAC;CAE3B,IAAI,CAAC,aACH,QAAQ,KAAK,qCAAqC;CAGpD,IAAI,CAAC,aACH,QAAQ,KAAK,uBAAuB;CAGtC,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,yBAAyB,OAAO;CAG5C,OAAO;EAAe;EAA2B;CAAa;AAChE;;;AC1CA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAQ5B,eAAsB,cACpB,SACA,UAAgC,CAAC,GAClB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB,MAAM,OAAO;CAEvD,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,IAAI;GAEF,KAAI,MADmB,UAAU,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC,GAC/D,IACX;EAEJ,QAAQ,CAER;EAEA,MAAM,MAAM,UAAU;CACxB;CAEA,MAAM,IAAI,MAAM,+CAA+C,UAAU,MAAM,IAAI,EAAE;AACvF;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY;EAC9B,WAAW,SAAS,EAAE;CACxB,CAAC;AACH;;;ACrBA,MAAM,uBAAuB,QAAQ,IAAI,wBAAwB;AAEjE,SAAgB,oBAAoB,UAA+B,CAAC,GAAmB;CACrF,MAAM,SAAS,QAAQ,UAAU,IAAIA,UAAAA,QAAO;CAE5C,OAAO,EACL,MAAM,MAAM,OAAO;EACjB,IAAI,MAAM,SAAS,WAAW,GAC5B,MAAM,IAAI,MAAM,yDAAyD;EAG3E,IAAI,SAAS,qBACX,SACA,MAAM,SAAS,KAAK,aAAa;GAC/B,WAAW,QAAQ;GACnB,oBAAoB,QAAQ;EAC9B,EAAE,GACF,MAAM,UACN,MAAM,GACR;EAEA,IAAI,QAAQ,iBAAiB;GAC3B,MAAM,EAAE,UAAU,kBAAkB,QAAQ;GAC5C,OAAA,GAAA,iBAAA,OAAY,UAAU,EAAE,WAAW,KAAK,CAAC;GACzC,SAAS;IACP,GAAG;IACH,KAAK;KACH,GAAG,OAAO;KACV,2BAA2B;IAC7B;GACF;EACF;EAEA,MAAM,YAAY,QAAQ,OAAO,KAAK;EACtC,MAAM,wBAAwB,QAAQ,MAAM,cAAc;EAE1D,MAAM,YAAY,MAAM,OAAO,gBAAgB;GAC7C,OAAO,OAAO;GACd,MAAM,cAAc,MAAM,cAAc;GACxC,QAAQ;IACN,6BAA6B,MAAM;IACnC,yBAAyB,MAAM,SAAS,KAAK,YAAY,QAAQ,SAAS,EAAE,KAAK,GAAG;GACtF;GACA,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAC3B;GACA,YAAY;IACV,YAAY,CAAC,mCAAmC;IAChD,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAC5C;IACA,GAAI,QAAQ,kBACR,EACE,OAAO,CACL,GAAG,QAAQ,gBAAgB,SAAS,GAAG,QAAQ,gBAAgB,eACjE,EACF,IACA,CAAC;GACP;GACA,kBAAkB,EAChB,iBAAiB,GACd,uBAAuB,CAAC,EAC3B,EACF;GACA,KAAK,gBAAgB,OAAO,GAAG;EACjC,CAAC;EAED,MAAM,UAAU,MAAM;EAEtB,MAAM,UAAU,MAAM,UAAU,QAAQ;EACxC,MAAM,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,OAAO,KAAK,SAAS;EACxE,IAAI,CAAC,SAAS,UACZ,MAAM,IAAI,MAAM,2CAA2C;EAG7D,MAAM,UAAU,oBAAoB,QAAQ;EAC5C,MAAM,cAAc,SAAS;GAC3B,WAAW,QAAQ;GACnB,WAAW,QAAQ;EACrB,CAAC;EAED,OAAO;GACL,WAAW,QAAQ;GACnB;EACF;CACF,EACF;AACF;AAEA,SAAS,cAAc,gBAAgC;CACrD,OAAO,iBAAiB;AAC1B;AAEA,eAAe,wBAAwB,QAAgB,gBAAuC;CAC5F,IAAI;EACF,MAAM,WAAW,OAAO,aAAa,cAAc,cAAc,CAAC;EAClE,MAAM,SAAS,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,KAAA,CAAS;EACnD,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,CAAC;CACvC,QAAQ,CAER;AACF;AAEA,eAAe,YAAY,QAAgB,OAA8B;CACvE,IAAI;EACF,MAAM,OAAO,SAAS,KAAK,EAAE,QAAQ;EACrC;CACF,QAAQ,CAER;CAEA,MAAM,IAAI,SAAe,gBAAgB,WAAW;EAClD,OAAO,KAAK,QAAQ,OAAqB,WAA8C;GACrF,IAAI,OAAO;IACT,OAAO,KAAK;IACZ;GACF;GAEA,IAAI,CAAC,QAAQ;IACX,uBAAO,IAAI,MAAM,wBAAwB,OAAO,CAAC;IACjD;GACF;GAEA,OAAO,MAAM,eAAe,SAAS,kBAAgC;IACnE,IAAI,eAAe;KACjB,OAAO,aAAa;KACpB;IACF;IAEA,eAAe;GACjB,CAAC;EACH,CAAC;CACH,CAAC;AACH;;;ACjJA,SAAgB,aAAa,UAA+B,CAAC,GAAkB;CAC7E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,MAAM;EACN,eAAe,2BAA2B,GAAG;EAC7C,qBAAqB,oBAAoB;GAAE,GAAG;GAAS;EAAI,CAAC;CAC9D;AACF;;;;ACZA,SAAgB,qBAAqB,UAA+B,CAAC,GAAkB;CACrF,OAAO,aAAa,OAAO;AAC7B;;;;ACLA,MAAa,0BAA0B;;;ACUvC,eAAsB,YACpB,SACA,UAA8B,CAAC,GACb;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAU,QAAQ,QAAQ,qBAAqB,QAAQ,aAAa,IAAI,KAAK,CAAC;CAEpF,IAAI;EASF,QAAO,OARiB,QAAQ,aAAa,OAC3C,IAAI,IAAI,sBAAsB,MAAM,OAAO,GAC3C;GACE,QAAQ,YAAY,QAAQ,SAAS;GACrC;EACF,CACF,GAEgB;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;AC3BA,SAAgB,qBACd,QACA,QACyD;CACzD,IAAI,QAAQ,eACV,OAAO,OAAO,cAAc,MAAM;CAGpC,OAAO,CAAC,CAAC,OAAO;AAClB;AAEA,eAAsB,kBACpB,QACA,UAEI,CAAC,GACa;CAClB,IAAI,CAAC,qBAAqB,QAAQ,QAAQ,MAAM,GAC9C,OAAO;CAGT,OAAO,YAAY,OAAO,SAAS;EACjC,GAAG;EACH,WAAW,OAAO;CACpB,CAAC;AACH"}

package/dist/index.d.cts

@@ -104,8 +104,13 @@ type HostingPlugin = {
 };
 //#endregion
 //#region src/docker/create-docker-runtime.d.ts
+type WorkspacesMount = {
+  hostPath: string;
+  containerPath: string;
+};
 type DockerPluginOptions = HostingOptions & {
-  docker?: Docker;
+  docker?: Docker; /** Bind a shared host workspace dir into dev workers (VM sandbox proxy mount path). */
+  workspacesMount?: WorkspacesMount;
 };
 //#endregion
 //#region src/docker/plugin.d.ts

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/constants.ts","../src/runtime.ts","../src/worker-runtime-config.ts","../src/plugin.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-env.ts","../src/wait-for-health.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"mappings":";;;cAAa,oBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,6BAAA;AAAA,cAEA,qCAAA;AAAA,cAEA,qBAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;;;KCbE,sBAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,UAAA;EACA,cAAA,UDLW;ECOX,SAAA;AAAA;AAAA,KAGU,gBAAA;EACV,SAAA;EACA,IAAA;EACA,UAAA;EACA,kBAAA;AAAA;AAAA,KAGU,eAAA;EACV,SAAA;EACA,kBAAkB;AAAA;AAAA,KAGR,qBAAA;EACV,OAAO;AAAA;AAAA,KAGG,mBAAA;EACV,cAAA;EACA,QAAA,EAAU,gBAAA;EACV,QAAA,EAAU,sBAAA;EACV,OAAA,GAAU,qBAAA,EDnBF;ECqBR,GAAA,GAAM,MAAA,kBDrBE;ECuBR,iBAAA;AAAA;;iBAIc,kBAAA,CAAmB,SAA4B,EAAjB,eAAe;AAAA,iBAI7C,wBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAA,GACX,eAAe;AAAA,KAyBN,0BAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,oBAAA;EACV,SAAA;EACA,OAAO;AAAA;AAAA,KAGG,cAAA;EACV,KAAA,CAAM,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,oBAAA;EAC3C,OAAA,EAAS,KAAA,EAAO,0BAAA,GAA6B,OAAA;AAAA;AAAA,KAGnC,iBAAA;EACV,OAAA;EACA,SAAS;AAAA;;;;KCrFC,mBAAA;yEAEV,WAAA,UFL+B;EEO/B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UHhB8B;EGkB9B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA;;;KCrBrC,mBAAA,GAAsB,cAAA;EAChC,MAAA,GAAS,MAAM;AAAA;;;iBCDD,YAAA,CAAa,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;iBCJ9D,oBAAA,CAAqB,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;cC2BzE,yBAAA;AAAA,cAEA,yBAAA;AAAA,KASD,iBAAA;EACV,KAAA;EACA,GAAA,EAAK,MAAA;EACL,IAAA;EACA,MAAA,SAAe,qBAAqB;AAAA;AP1CtC;AAAA,iBO8CgB,yBAAA,CACd,QAAA,EAAU,sBAAA,GACT,MAAA,SAAe,yBAAA;;;APhDc;AAEhC;iBO6DgB,oBAAA,CACd,OAAA,EAAS,cAAA,EACT,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,iBAAA;;iBA+Ba,eAAA,CACd,MAAA,EAAQ,MAAA,CAAO,UAAA,EACf,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,MAAA;AAAA,iBAkDa,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;AAAA,iBAiBzB,wBAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;APvKzC;AAAA,iBOqLgB,mBAAA,CAAoB,IAAY;AAAA,iBAQhC,kBAAA,CAAmB,GAAW;;iBAW9B,eAAA,CAAgB,GAA2B,EAAtB,MAAM;AAAA,iBAI3B,yBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAwB,EACpC,QAAA;;;KCnNU,oBAAA;EACV,SAAA;EACA,UAAA;EACA,SAAA,UAAmB,KAAK;AAAA;AAAA,iBAGJ,aAAA,CACpB,OAAA,UACA,OAAA,GAAS,oBAAA,GACR,OAAO;;;;cCbG,uBAAA;;;KCGD,kBAAA;EACV,SAAA;EACA,SAAA,UAAmB,KAAA;EACnB,SAAA;EACA,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA;AAAA,iBAGM,WAAA,CACpB,OAAA,UACA,OAAA,GAAS,kBAAA,GACR,OAAO;;;iBCVM,oBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,MAAA,GAAS,IAAA,CAAK,aAAA,qBACb,MAAA;EAAY,OAAA;EAAiB,SAAA;AAAA;AAAA,iBAQV,iBAAA,CACpB,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAS,kBAAA;EACP,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA,IAEf,OAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/constants.ts","../src/runtime.ts","../src/worker-runtime-config.ts","../src/plugin.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-env.ts","../src/wait-for-health.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"mappings":";;;cAAa,oBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,6BAAA;AAAA,cAEA,qCAAA;AAAA,cAEA,qBAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;;;KCbE,sBAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,UAAA;EACA,cAAA,UDLW;ECOX,SAAA;AAAA;AAAA,KAGU,gBAAA;EACV,SAAA;EACA,IAAA;EACA,UAAA;EACA,kBAAA;AAAA;AAAA,KAGU,eAAA;EACV,SAAA;EACA,kBAAkB;AAAA;AAAA,KAGR,qBAAA;EACV,OAAO;AAAA;AAAA,KAGG,mBAAA;EACV,cAAA;EACA,QAAA,EAAU,gBAAA;EACV,QAAA,EAAU,sBAAA;EACV,OAAA,GAAU,qBAAA,EDnBF;ECqBR,GAAA,GAAM,MAAA,kBDrBE;ECuBR,iBAAA;AAAA;;iBAIc,kBAAA,CAAmB,SAA4B,EAAjB,eAAe;AAAA,iBAI7C,wBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAA,GACX,eAAe;AAAA,KAyBN,0BAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,oBAAA;EACV,SAAA;EACA,OAAO;AAAA;AAAA,KAGG,cAAA;EACV,KAAA,CAAM,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,oBAAA;EAC3C,OAAA,EAAS,KAAA,EAAO,0BAAA,GAA6B,OAAA;AAAA;AAAA,KAGnC,iBAAA;EACV,OAAA;EACA,SAAS;AAAA;;;;KCrFC,mBAAA;yEAEV,WAAA,UFL+B;EEO/B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UHhB8B;EGkB9B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA;;;KCpBrC,eAAA;EACV,QAAA;EACA,aAAa;AAAA;AAAA,KAGH,mBAAA,GAAsB,cAAA;EAChC,MAAA,GAAS,MAAA,EJbqB;EIe9B,eAAA,GAAkB,eAAA;AAAA;;;iBCTJ,YAAA,CAAa,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;iBCJ9D,oBAAA,CAAqB,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;cC2BzE,yBAAA;AAAA,cAEA,yBAAA;AAAA,KASD,iBAAA;EACV,KAAA;EACA,GAAA,EAAK,MAAA;EACL,IAAA;EACA,MAAA,SAAe,qBAAqB;AAAA;AP1CtC;AAAA,iBO8CgB,yBAAA,CACd,QAAA,EAAU,sBAAA,GACT,MAAA,SAAe,yBAAA;;;APhDc;AAEhC;iBO6DgB,oBAAA,CACd,OAAA,EAAS,cAAA,EACT,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,iBAAA;;iBA+Ba,eAAA,CACd,MAAA,EAAQ,MAAA,CAAO,UAAA,EACf,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,MAAA;AAAA,iBAkDa,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;AAAA,iBAiBzB,wBAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;APvKzC;AAAA,iBOqLgB,mBAAA,CAAoB,IAAY;AAAA,iBAQhC,kBAAA,CAAmB,GAAW;;iBAW9B,eAAA,CAAgB,GAA2B,EAAtB,MAAM;AAAA,iBAI3B,yBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAwB,EACpC,QAAA;;;KCnNU,oBAAA;EACV,SAAA;EACA,UAAA;EACA,SAAA,UAAmB,KAAK;AAAA;AAAA,iBAGJ,aAAA,CACpB,OAAA,UACA,OAAA,GAAS,oBAAA,GACR,OAAO;;;;cCbG,uBAAA;;;KCGD,kBAAA;EACV,SAAA;EACA,SAAA,UAAmB,KAAA;EACnB,SAAA;EACA,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA;AAAA,iBAGM,WAAA,CACpB,OAAA,UACA,OAAA,GAAS,kBAAA,GACR,OAAO;;;iBCVM,oBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,MAAA,GAAS,IAAA,CAAK,aAAA,qBACb,MAAA;EAAY,OAAA;EAAiB,SAAA;AAAA;AAAA,iBAQV,iBAAA,CACpB,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAS,kBAAA;EACP,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA,IAEf,OAAA"}

package/dist/index.d.mts

@@ -104,8 +104,13 @@ type HostingPlugin = {
 };
 //#endregion
 //#region src/docker/create-docker-runtime.d.ts
+type WorkspacesMount = {
+  hostPath: string;
+  containerPath: string;
+};
 type DockerPluginOptions = HostingOptions & {
-  docker?: Docker;
+  docker?: Docker; /** Bind a shared host workspace dir into dev workers (VM sandbox proxy mount path). */
+  workspacesMount?: WorkspacesMount;
 };
 //#endregion
 //#region src/docker/plugin.d.ts

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/constants.ts","../src/runtime.ts","../src/worker-runtime-config.ts","../src/plugin.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-env.ts","../src/wait-for-health.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"mappings":";;;cAAa,oBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,6BAAA;AAAA,cAEA,qCAAA;AAAA,cAEA,qBAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;;;KCbE,sBAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,UAAA;EACA,cAAA,UDLW;ECOX,SAAA;AAAA;AAAA,KAGU,gBAAA;EACV,SAAA;EACA,IAAA;EACA,UAAA;EACA,kBAAA;AAAA;AAAA,KAGU,eAAA;EACV,SAAA;EACA,kBAAkB;AAAA;AAAA,KAGR,qBAAA;EACV,OAAO;AAAA;AAAA,KAGG,mBAAA;EACV,cAAA;EACA,QAAA,EAAU,gBAAA;EACV,QAAA,EAAU,sBAAA;EACV,OAAA,GAAU,qBAAA,EDnBF;ECqBR,GAAA,GAAM,MAAA,kBDrBE;ECuBR,iBAAA;AAAA;;iBAIc,kBAAA,CAAmB,SAA4B,EAAjB,eAAe;AAAA,iBAI7C,wBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAA,GACX,eAAe;AAAA,KAyBN,0BAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,oBAAA;EACV,SAAA;EACA,OAAO;AAAA;AAAA,KAGG,cAAA;EACV,KAAA,CAAM,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,oBAAA;EAC3C,OAAA,EAAS,KAAA,EAAO,0BAAA,GAA6B,OAAA;AAAA;AAAA,KAGnC,iBAAA;EACV,OAAA;EACA,SAAS;AAAA;;;;KCrFC,mBAAA;yEAEV,WAAA,UFL+B;EEO/B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UHhB8B;EGkB9B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA;;;KCrBrC,mBAAA,GAAsB,cAAA;EAChC,MAAA,GAAS,MAAM;AAAA;;;iBCDD,YAAA,CAAa,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;iBCJ9D,oBAAA,CAAqB,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;cC2BzE,yBAAA;AAAA,cAEA,yBAAA;AAAA,KASD,iBAAA;EACV,KAAA;EACA,GAAA,EAAK,MAAA;EACL,IAAA;EACA,MAAA,SAAe,qBAAqB;AAAA;AP1CtC;AAAA,iBO8CgB,yBAAA,CACd,QAAA,EAAU,sBAAA,GACT,MAAA,SAAe,yBAAA;;;APhDc;AAEhC;iBO6DgB,oBAAA,CACd,OAAA,EAAS,cAAA,EACT,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,iBAAA;;iBA+Ba,eAAA,CACd,MAAA,EAAQ,MAAA,CAAO,UAAA,EACf,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,MAAA;AAAA,iBAkDa,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;AAAA,iBAiBzB,wBAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;APvKzC;AAAA,iBOqLgB,mBAAA,CAAoB,IAAY;AAAA,iBAQhC,kBAAA,CAAmB,GAAW;;iBAW9B,eAAA,CAAgB,GAA2B,EAAtB,MAAM;AAAA,iBAI3B,yBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAwB,EACpC,QAAA;;;KCnNU,oBAAA;EACV,SAAA;EACA,UAAA;EACA,SAAA,UAAmB,KAAK;AAAA;AAAA,iBAGJ,aAAA,CACpB,OAAA,UACA,OAAA,GAAS,oBAAA,GACR,OAAO;;;;cCbG,uBAAA;;;KCGD,kBAAA;EACV,SAAA;EACA,SAAA,UAAmB,KAAA;EACnB,SAAA;EACA,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA;AAAA,iBAGM,WAAA,CACpB,OAAA,UACA,OAAA,GAAS,kBAAA,GACR,OAAO;;;iBCVM,oBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,MAAA,GAAS,IAAA,CAAK,aAAA,qBACb,MAAA;EAAY,OAAA;EAAiB,SAAA;AAAA;AAAA,iBAQV,iBAAA,CACpB,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAS,kBAAA;EACP,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA,IAEf,OAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/constants.ts","../src/runtime.ts","../src/worker-runtime-config.ts","../src/plugin.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-env.ts","../src/wait-for-health.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"mappings":";;;cAAa,oBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,mBAAA;AAAA,cAEA,6BAAA;AAAA,cAEA,qCAAA;AAAA,cAEA,qBAAA;EAAA,SAGH,IAAA;EAAA,SAAA,IAAA;AAAA;;;KCbE,sBAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,UAAA;EACA,cAAA,UDLW;ECOX,SAAA;AAAA;AAAA,KAGU,gBAAA;EACV,SAAA;EACA,IAAA;EACA,UAAA;EACA,kBAAA;AAAA;AAAA,KAGU,eAAA;EACV,SAAA;EACA,kBAAkB;AAAA;AAAA,KAGR,qBAAA;EACV,OAAO;AAAA;AAAA,KAGG,mBAAA;EACV,cAAA;EACA,QAAA,EAAU,gBAAA;EACV,QAAA,EAAU,sBAAA;EACV,OAAA,GAAU,qBAAA,EDnBF;ECqBR,GAAA,GAAM,MAAA,kBDrBE;ECuBR,iBAAA;AAAA;;iBAIc,kBAAA,CAAmB,SAA4B,EAAjB,eAAe;AAAA,iBAI7C,wBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAA,GACX,eAAe;AAAA,KAyBN,0BAAA;EACV,SAAA;EACA,OAAA,GAAU,qBAAqB;AAAA;AAAA,KAGrB,oBAAA;EACV,SAAA;EACA,OAAO;AAAA;AAAA,KAGG,cAAA;EACV,KAAA,CAAM,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,oBAAA;EAC3C,OAAA,EAAS,KAAA,EAAO,0BAAA,GAA6B,OAAA;AAAA;AAAA,KAGnC,iBAAA;EACV,OAAA;EACA,SAAS;AAAA;;;;KCrFC,mBAAA;yEAEV,WAAA,UFL+B;EEO/B,WAAW;AAAA;AAAA,cAGA,wBAAA,SAAiC,KAAK;EAAA,SACxC,OAAA;cAEG,OAAA;AAAA;;iBAWE,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAA,GACd,mBAAmB;;;KCvBV,cAAA;EACV,KAAA;EACA,GAAA,GAAM,MAAA,CAAO,UAAA;EACb,SAAA,UAAmB,KAAK;EACxB,eAAA;AAAA;AAAA,KAGU,wBAAA;EACV,cAAA;EACA,IAAI;AAAA;AAAA,KAGM,yBAAA;EACV,OAAO;AAAA;AAAA,KAGG,aAAA;EACV,IAAA,UHhB8B;EGkB9B,aAAA,EAAe,mBAAA;EACf,aAAA,IAAiB,cAAA;EACjB,qBAAA,EAAuB,KAAA,EAAO,wBAAA,GAA2B,OAAA,CAAQ,yBAAA;EACjE,uBAAA,EAAyB,MAAA,EAAQ,yBAAA,GAA4B,OAAA;EAC7D,aAAA,EACE,MAAA,EAAQ,iBAAA,GACP,MAAA;IAAY,OAAA;IAAiB,SAAA;EAAA;EAChC,kBAAA,EAAoB,SAAA,kBAA2B,MAAA;AAAA;;;KCpBrC,eAAA;EACV,QAAA;EACA,aAAa;AAAA;AAAA,KAGH,mBAAA,GAAsB,cAAA;EAChC,MAAA,GAAS,MAAA,EJbqB;EIe9B,eAAA,GAAkB,eAAA;AAAA;;;iBCTJ,YAAA,CAAa,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;iBCJ9D,oBAAA,CAAqB,OAAA,GAAS,mBAAA,GAA2B,aAAa;;;;cC2BzE,yBAAA;AAAA,cAEA,yBAAA;AAAA,KASD,iBAAA;EACV,KAAA;EACA,GAAA,EAAK,MAAA;EACL,IAAA;EACA,MAAA,SAAe,qBAAqB;AAAA;AP1CtC;AAAA,iBO8CgB,yBAAA,CACd,QAAA,EAAU,sBAAA,GACT,MAAA,SAAe,yBAAA;;;APhDc;AAEhC;iBO6DgB,oBAAA,CACd,OAAA,EAAS,cAAA,EACT,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,iBAAA;;iBA+Ba,eAAA,CACd,MAAA,EAAQ,MAAA,CAAO,UAAA,EACf,SAAA,EAAW,eAAA,IACX,QAAA,EAAU,sBAAA,EACV,QAAA,GAAW,MAAA,mBACV,MAAA;AAAA,iBAkDa,0BAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;AAAA,iBAiBzB,wBAAA,CACd,MAAA,GAAQ,MAAA,CAAO,UAAwB;APvKzC;AAAA,iBOqLgB,mBAAA,CAAoB,IAAY;AAAA,iBAQhC,kBAAA,CAAmB,GAAW;;iBAW9B,eAAA,CAAgB,GAA2B,EAAtB,MAAM;AAAA,iBAI3B,yBAAA,CACd,GAAA,GAAK,MAAA,CAAO,UAAwB,EACpC,QAAA;;;KCnNU,oBAAA;EACV,SAAA;EACA,UAAA;EACA,SAAA,UAAmB,KAAK;AAAA;AAAA,iBAGJ,aAAA,CACpB,OAAA,UACA,OAAA,GAAS,oBAAA,GACR,OAAO;;;;cCbG,uBAAA;;;KCGD,kBAAA;EACV,SAAA;EACA,SAAA,UAAmB,KAAA;EACnB,SAAA;EACA,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA;AAAA,iBAGM,WAAA,CACpB,OAAA,UACA,OAAA,GAAS,kBAAA,GACR,OAAO;;;iBCVM,oBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,MAAA,GAAS,IAAA,CAAK,aAAA,qBACb,MAAA;EAAY,OAAA;EAAiB,SAAA;AAAA;AAAA,iBAQV,iBAAA,CACpB,MAAA,EAAQ,iBAAA,EACR,OAAA,GAAS,kBAAA;EACP,MAAA,GAAS,IAAA,CAAK,aAAA;AAAA,IAEf,OAAA"}

package/dist/index.mjs

@@ -1,4 +1,5 @@
 import Docker from "dockerode";
+import { mkdir } from "node:fs/promises";
 //#region src/constants.ts
 const PROJECT_SERVER_IMAGE = "keystroke/project-server:local";
 const PROJECT_SERVER_PORT = 3e3;
@@ -194,10 +195,21 @@ function createDockerRuntime(options = {}) {
 	const docker = options.docker ?? new Docker();
 	return { async start(input) {
 		if (input.projects.length === 0) throw new Error("Docker org runtime requires at least one project deploy");
-		const launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({
+		let launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({
 			projectId: project.projectId,
 			artifactStorageKey: project.artifactStorageKey
 		})), input.database, input.env);
+		if (options.workspacesMount) {
+			const { hostPath, containerPath } = options.workspacesMount;
+			await mkdir(hostPath, { recursive: true });
+			launch = {
+				...launch,
+				env: {
+					...launch.env,
+					KEYSTROKE_WORKSPACES_ROOT: containerPath
+				}
+			};
+		}
 		await ensureImage(docker, launch.image);
 		await removeExistingContainer(docker, input.organizationId);
 		const container = await docker.createContainer({
@@ -210,7 +222,8 @@ function createDockerRuntime(options = {}) {
 			ExposedPorts: { [`${launch.port}/tcp`]: {} },
 			HostConfig: {
 				ExtraHosts: ["host.docker.internal:host-gateway"],
-				PortBindings: { [`${launch.port}/tcp`]: [{ HostPort: "0" }] }
+				PortBindings: { [`${launch.port}/tcp`]: [{ HostPort: "0" }] },
+				...options.workspacesMount ? { Binds: [`${options.workspacesMount.hostPath}:${options.workspacesMount.containerPath}`] } : {}
 			},
 			NetworkingConfig: { EndpointsConfig: { [MINIO_DOCKER_NETWORK]: {} } },
 			Env: formatDockerEnv(launch.env)

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/constants.ts","../src/runtime.ts","../src/runtime-env.ts","../src/worker-runtime-config.ts","../src/wait-for-health.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"sourcesContent":["export const PROJECT_SERVER_IMAGE = \"keystroke/project-server:local\";\n\nexport const PROJECT_SERVER_PORT = 3000;\n\nexport const PROJECT_SERVER_ROOT = \"/app\";\n\nexport const PROJECT_SERVER_FRAMEWORK_ROOT = \"/opt/keystroke\";\n\nexport const PROJECT_SERVER_FRAMEWORK_NODE_MODULES = `${PROJECT_SERVER_FRAMEWORK_ROOT}/node_modules`;\n\nexport const PROJECT_SERVER_HEALTH = {\n  path: \"/health\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n","export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\"\n    ) {\n      throw new Error(\"KEYSTROKE_ORG_ARTIFACTS entries require projectId and artifactStorageKey\");\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n","import type { ProjectRuntimeDatabase } from \"./runtime\";\nimport { encodeOrgArtifacts, type OrgArtifactSpec } from \"./runtime\";\nimport {\n  PROJECT_SERVER_FRAMEWORK_NODE_MODULES,\n  PROJECT_SERVER_HEALTH,\n  PROJECT_SERVER_IMAGE,\n  PROJECT_SERVER_PORT,\n  PROJECT_SERVER_ROOT,\n} from \"./constants\";\nimport type { HostingOptions } from \"./plugin\";\nimport { resolveWorkerRuntimeConfig } from \"./worker-runtime-config\";\n\nconst RUNTIME_ENV_KEYS = [\n  \"BETTER_AUTH_SECRET\",\n  \"PUBLIC_SERVER_URL\",\n  \"PUBLIC_WEB_URL\",\n  \"POSTGRES_SSL\",\n  \"UPSTASH_REDIS_URL\",\n  \"REDIS_URL\",\n  \"KEYSTROKE_QUEUE_PREFIX\",\n] as const;\n\n/** Provider and gateway env forwarded from the platform into project servers. */\nconst PROVIDER_ENV_KEYS = [\n  \"ANTHROPIC_API_KEY\",\n  \"OPENAI_API_KEY\",\n  \"AI_GATEWAY_API_KEY\",\n  \"AI_GATEWAY_BASE_URL\",\n] as const;\n\n/** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */\nexport const DEV_PLATFORM_WORKER_TOKEN = \"dev-platform-worker-token\";\n\nexport const PROJECT_DATABASE_ENV_KEYS = [\n  \"POSTGRES_HOST\",\n  \"POSTGRES_PORT\",\n  \"POSTGRES_DB\",\n  \"POSTGRES_USER\",\n  \"POSTGRES_PASSWORD\",\n  \"DATABASE_SEARCH_PATH\",\n] as const;\n\nexport type RuntimeLaunchSpec = {\n  image: string;\n  env: Record<string, string>;\n  port: number;\n  health: typeof PROJECT_SERVER_HEALTH;\n};\n\n/** Per-project postgres env injected into every project server container/machine. */\nexport function projectDatabaseRuntimeEnv(\n  database: ProjectRuntimeDatabase,\n): Record<(typeof PROJECT_DATABASE_ENV_KEYS)[number], string> {\n  return {\n    POSTGRES_HOST: rewriteLoopbackHost(database.host),\n    POSTGRES_PORT: String(database.port),\n    POSTGRES_DB: database.database,\n    POSTGRES_USER: database.user,\n    POSTGRES_PASSWORD: database.password,\n    DATABASE_SEARCH_PATH: database.searchPath,\n  };\n}\n\n/**\n * Builds the launch spec for an org worker. Each deploy artifact is encoded in\n * `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.\n */\nexport function resolveRuntimeLaunch(\n  options: HostingOptions,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  if (artifacts.length === 0) {\n    throw new Error(\"Cannot start an org worker without at least one artifact\");\n  }\n\n  const env = options.env ?? process.env;\n\n  return {\n    image: resolveProjectServerImage(env, options.image),\n    env: buildRuntimeEnv(env, artifacts, database, extraEnv),\n    port: PROJECT_SERVER_PORT,\n    health: PROJECT_SERVER_HEALTH,\n  };\n}\n\n/** @deprecated Single-project launch — prefer org {@link resolveRuntimeLaunch}. */\nexport function resolveSingleProjectRuntimeLaunch(\n  options: HostingOptions,\n  artifactStorageKey: string,\n  database: ProjectRuntimeDatabase & { projectId: string },\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  return resolveRuntimeLaunch(\n    options,\n    [{ projectId: database.projectId, artifactStorageKey }],\n    database,\n    extraEnv,\n  );\n}\n\n/** Env vars passed into the org worker container/machine. */\nexport function buildRuntimeEnv(\n  source: NodeJS.ProcessEnv,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): Record<string, string> {\n  const entries = new Map<string, string>([\n    [\"PORT\", String(PROJECT_SERVER_PORT)],\n    [\"KEYSTROKE_ROOT\", PROJECT_SERVER_ROOT],\n    [\"KEYSTROKE_RUNTIME_NODE_MODULES\", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],\n    [\"KEYSTROKE_ORG_ARTIFACTS\", encodeOrgArtifacts(artifacts)],\n    [\"ORGANIZATION_ID\", database.organizationId],\n    [\"TENANT_ID\", database.organizationId],\n  ]);\n\n  for (const key of RUNTIME_ENV_KEYS) {\n    const value = source[key]?.trim();\n    if (!value) {\n      if (key === \"POSTGRES_SSL\") {\n        throw new Error(\"POSTGRES_SSL is required\");\n      }\n      continue;\n    }\n    entries.set(key, value);\n  }\n\n  // OSS self-host: forward BYO provider/gateway env. Cloud llmProxy supplies extraEnv instead.\n  if (!extraEnv) {\n    for (const key of PROVIDER_ENV_KEYS) {\n      const value = source[key]?.trim();\n      if (value) {\n        entries.set(key, value);\n      }\n    }\n  }\n\n  // Project containers always run as workers: they resolve credentials/secrets through\n  // the platform internal API and are deliberately never given the decryption key.\n  const worker = resolveWorkerRuntimeConfig(source);\n  entries.set(\"PLATFORM_URL\", worker.platformUrl);\n  entries.set(\"WORKER_INTERNAL_TOKEN\", worker.workerToken);\n\n  for (const [key, value] of Object.entries(projectDatabaseRuntimeEnv(database))) {\n    entries.set(key, value);\n  }\n\n  if (extraEnv) {\n    for (const [key, value] of Object.entries(extraEnv)) {\n      entries.set(key, value);\n    }\n  }\n\n  return Object.fromEntries(entries);\n}\n\nexport function resolvePlatformWorkerToken(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const explicit = source.PLATFORM_WORKER_TOKEN?.trim() ?? source.WORKER_INTERNAL_TOKEN?.trim();\n  if (explicit) {\n    return explicit;\n  }\n\n  if (source.NODE_ENV === \"production\") {\n    return undefined;\n  }\n\n  return DEV_PLATFORM_WORKER_TOKEN;\n}\n\n/** Platform API URL reachable from a project-server container. */\nconst DEV_PLATFORM_URL = \"http://localhost:3002\";\n\nexport function resolveWorkerPlatformUrl(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const raw =\n    source.PLATFORM_URL?.trim() ??\n    source.PUBLIC_PLATFORM_URL?.trim() ??\n    (source.NODE_ENV === \"production\" ? undefined : DEV_PLATFORM_URL);\n  if (!raw) {\n    return undefined;\n  }\n\n  return rewriteLoopbackUrl(raw);\n}\n\n/** Rewrite loopback hosts so containers can reach Postgres and other host services. */\nexport function rewriteLoopbackHost(host: string): string {\n  if (host === \"localhost\" || host === \"127.0.0.1\") {\n    return \"host.docker.internal\";\n  }\n\n  return host;\n}\n\nexport function rewriteLoopbackUrl(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.hostname = rewriteLoopbackHost(parsed.hostname);\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return url;\n  }\n}\n\n/** dockerode expects `KEY=value` strings. */\nexport function formatDockerEnv(env: Record<string, string>): string[] {\n  return Object.entries(env).map(([key, value]) => `${key}=${value}`);\n}\n\nexport function resolveProjectServerImage(\n  env: NodeJS.ProcessEnv = process.env,\n  override?: string,\n): string {\n  return override ?? env.PROJECT_DOCKER_IMAGE ?? env.TENANT_DOCKER_IMAGE ?? PROJECT_SERVER_IMAGE;\n}\n","import { resolvePlatformWorkerToken, resolveWorkerPlatformUrl } from \"./runtime-env\";\n\n/** Resolved platform ↔ project-server worker auth contract. */\nexport type WorkerRuntimeConfig = {\n  /** Platform API base URL reachable from the project-server runtime. */\n  platformUrl: string;\n  /** Bearer token for platform `/internal` routes. */\n  workerToken: string;\n};\n\nexport class WorkerRuntimeConfigError extends Error {\n  readonly missing: readonly string[];\n\n  constructor(missing: string[]) {\n    super(\n      `Worker runtime config incomplete (missing: ${missing.join(\", \")}). ` +\n        \"In production set PLATFORM_WORKER_TOKEN and PUBLIC_PLATFORM_URL (or PLATFORM_URL).\",\n    );\n    this.name = \"WorkerRuntimeConfigError\";\n    this.missing = missing;\n  }\n}\n\n/** Fail fast when the platform cannot start worker-mode project servers. */\nexport function resolveWorkerRuntimeConfig(\n  source: NodeJS.ProcessEnv = process.env,\n): WorkerRuntimeConfig {\n  const platformUrl = resolveWorkerPlatformUrl(source);\n  const workerToken = resolvePlatformWorkerToken(source);\n  const missing: string[] = [];\n\n  if (!platformUrl) {\n    missing.push(\"PUBLIC_PLATFORM_URL or PLATFORM_URL\");\n  }\n\n  if (!workerToken) {\n    missing.push(\"PLATFORM_WORKER_TOKEN\");\n  }\n\n  if (missing.length > 0) {\n    throw new WorkerRuntimeConfigError(missing);\n  }\n\n  return { platformUrl: platformUrl!, workerToken: workerToken! };\n}\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_INTERVAL_MS = 500;\n\nexport type WaitForHealthOptions = {\n  timeoutMs?: number;\n  intervalMs?: number;\n  fetchImpl?: typeof fetch;\n};\n\nexport async function waitForHealth(\n  baseUrl: string,\n  options: WaitForHealthOptions = {},\n): Promise<void> {\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;\n  const deadline = Date.now() + timeoutMs;\n  const url = new URL(PROJECT_SERVER_HEALTH.path, baseUrl);\n\n  while (Date.now() < deadline) {\n    try {\n      const response = await fetchImpl(url, { signal: AbortSignal.timeout(2_000) });\n      if (response.ok) {\n        return;\n      }\n    } catch {\n      // retry until timeout\n    }\n\n    await sleep(intervalMs);\n  }\n\n  throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import Docker from \"dockerode\";\n\nimport type { ProjectRuntime } from \"../runtime\";\n\nimport type { HostingOptions } from \"../plugin\";\nimport { formatDockerEnv, resolveRuntimeLaunch } from \"../runtime-env\";\nimport { waitForHealth } from \"../wait-for-health\";\n\nexport type DockerPluginOptions = HostingOptions & {\n  docker?: Docker;\n};\n\nconst MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? \"keystroke\";\n\nexport function createDockerRuntime(options: DockerPluginOptions = {}): ProjectRuntime {\n  const docker = options.docker ?? new Docker();\n\n  return {\n    async start(input) {\n      if (input.projects.length === 0) {\n        throw new Error(\"Docker org runtime requires at least one project deploy\");\n      }\n\n      const launch = resolveRuntimeLaunch(\n        options,\n        input.projects.map((project) => ({\n          projectId: project.projectId,\n          artifactStorageKey: project.artifactStorageKey,\n        })),\n        input.database,\n        input.env,\n      );\n      await ensureImage(docker, launch.image);\n      await removeExistingContainer(docker, input.organizationId);\n\n      const container = await docker.createContainer({\n        Image: launch.image,\n        name: containerName(input.organizationId),\n        Labels: {\n          \"keystroke.organization.id\": input.organizationId,\n          \"keystroke.project.ids\": input.projects.map((project) => project.projectId).join(\",\"),\n        },\n        ExposedPorts: {\n          [`${launch.port}/tcp`]: {},\n        },\n        HostConfig: {\n          ExtraHosts: [\"host.docker.internal:host-gateway\"],\n          PortBindings: {\n            [`${launch.port}/tcp`]: [{ HostPort: \"0\" }],\n          },\n        },\n        NetworkingConfig: {\n          EndpointsConfig: {\n            [MINIO_DOCKER_NETWORK]: {},\n          },\n        },\n        Env: formatDockerEnv(launch.env),\n      });\n\n      await container.start();\n\n      const inspect = await container.inspect();\n      const binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];\n      if (!binding?.HostPort) {\n        throw new Error(\"Failed to resolve org container host port\");\n      }\n\n      const baseUrl = `http://127.0.0.1:${binding.HostPort}`;\n      await waitForHealth(baseUrl, {\n        fetchImpl: options.fetchImpl,\n        timeoutMs: options.healthTimeoutMs,\n      });\n\n      return {\n        runtimeId: inspect.Id,\n        baseUrl,\n      };\n    },\n  };\n}\n\nfunction containerName(organizationId: string): string {\n  return `keystroke-org-${organizationId}`;\n}\n\nasync function removeExistingContainer(docker: Docker, organizationId: string): Promise<void> {\n  try {\n    const existing = docker.getContainer(containerName(organizationId));\n    await existing.stop({ t: 5 }).catch(() => undefined);\n    await existing.remove({ force: true });\n  } catch {\n    // no existing container\n  }\n}\n\nasync function ensureImage(docker: Docker, image: string): Promise<void> {\n  try {\n    await docker.getImage(image).inspect();\n    return;\n  } catch {\n    // pull below\n  }\n\n  await new Promise<void>((resolvePromise, reject) => {\n    docker.pull(image, (error: Error | null, stream: NodeJS.ReadableStream | undefined) => {\n      if (error) {\n        reject(error);\n        return;\n      }\n\n      if (!stream) {\n        reject(new Error(`Failed to pull image ${image}`));\n        return;\n      }\n\n      docker.modem.followProgress(stream, (progressError: Error | null) => {\n        if (progressError) {\n          reject(progressError);\n          return;\n        }\n\n        resolvePromise();\n      });\n    });\n  });\n}\n","import type { HostingPlugin } from \"../plugin\";\nimport { resolveWorkerRuntimeConfig } from \"../worker-runtime-config\";\n\nimport { createDockerRuntime } from \"./create-docker-runtime\";\nimport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport function dockerPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  const env = options.env ?? process.env;\n\n  return {\n    name: \"docker\",\n    workerRuntime: resolveWorkerRuntimeConfig(env),\n    createRuntime: () => createDockerRuntime({ ...options, env }),\n  };\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport { dockerPlugin, type DockerPluginOptions } from \"./docker/plugin\";\n\n/** Local Docker hosting — default for platform and dev. */\nexport function defaultHostingPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  return dockerPlugin(options);\n}\n","/** Timeout for a single project runtime `/health` probe. */\nexport const RUNTIME_PING_TIMEOUT_MS = 15_000;\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\nimport type { HostingPlugin } from \"./plugin\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport type PingProjectOptions = {\n  runtimeId?: string | null;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  plugin?: Pick<HostingPlugin, \"pingRequestHeaders\">;\n};\n\nexport async function pingProject(\n  baseUrl: string,\n  options: PingProjectOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_HEALTH.path, baseUrl),\n      {\n        signal: AbortSignal.timeout(timeoutMs),\n        headers,\n      },\n    );\n\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport type { ProjectPingTarget } from \"./runtime\";\nimport { pingProject, type PingProjectOptions } from \"./ping-project\";\n\nexport function canPingProjectTarget(\n  target: ProjectPingTarget,\n  plugin?: Pick<HostingPlugin, \"canPingTarget\">,\n): target is { baseUrl: string; runtimeId: string | null } {\n  if (plugin?.canPingTarget) {\n    return plugin.canPingTarget(target);\n  }\n\n  return !!target.baseUrl;\n}\n\nexport async function pingProjectTarget(\n  target: ProjectPingTarget,\n  options: PingProjectOptions & {\n    plugin?: Pick<HostingPlugin, \"canPingTarget\" | \"pingRequestHeaders\">;\n  } = {},\n): Promise<boolean> {\n  if (!canPingProjectTarget(target, options.plugin)) {\n    return false;\n  }\n\n  return pingProject(target.baseUrl, {\n    ...options,\n    runtimeId: target.runtimeId,\n  });\n}\n"],"mappings":";;AAAA,MAAa,uBAAuB;AAEpC,MAAa,sBAAsB;AAEnC,MAAa,sBAAsB;AAEnC,MAAa,gCAAgC;AAE7C,MAAa,wCAAwC,GAAG,8BAA8B;AAEtF,MAAa,wBAAwB;CACnC,MAAM;CACN,MAAM;AACR;;;;AC2BA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,UAEzD,MAAM,IAAI,MAAM,0EAA0E;EAG5F,OAAO;CACT,CAAC;AACH;;;ACzDA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;AACF;;AAGA,MAAa,4BAA4B;AAEzC,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;CACA;CACA;AACF;;AAUA,SAAgB,0BACd,UAC4D;CAC5D,OAAO;EACL,eAAe,oBAAoB,SAAS,IAAI;EAChD,eAAe,OAAO,SAAS,IAAI;EACnC,aAAa,SAAS;EACtB,eAAe,SAAS;EACxB,mBAAmB,SAAS;EAC5B,sBAAsB,SAAS;CACjC;AACF;;;;;AAMA,SAAgB,qBACd,SACA,WACA,UACA,UACmB;CACnB,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,MAAM,0DAA0D;CAG5E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,OAAO,0BAA0B,KAAK,QAAQ,KAAK;EACnD,KAAK,gBAAgB,KAAK,WAAW,UAAU,QAAQ;EACvD,MAAM;EACN,QAAQ;CACV;AACF;;AAkBA,SAAgB,gBACd,QACA,WACA,UACA,UACwB;CACxB,MAAM,UAAU,IAAI,IAAoB;EACtC,CAAC,QAAQ,OAAO,mBAAmB,CAAC;EACpC,CAAC,kBAAkB,mBAAmB;EACtC,CAAC,kCAAkC,qCAAqC;EACxE,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;EACzD,CAAC,mBAAmB,SAAS,cAAc;EAC3C,CAAC,aAAa,SAAS,cAAc;CACvC,CAAC;CAED,KAAK,MAAM,OAAO,kBAAkB;EAClC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,CAAC,OAAO;GACV,IAAI,QAAQ,gBACV,MAAM,IAAI,MAAM,0BAA0B;GAE5C;EACF;EACA,QAAQ,IAAI,KAAK,KAAK;CACxB;CAGA,IAAI,CAAC,UACH,KAAK,MAAM,OAAO,mBAAmB;EACnC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,OACF,QAAQ,IAAI,KAAK,KAAK;CAE1B;CAKF,MAAM,SAAS,2BAA2B,MAAM;CAChD,QAAQ,IAAI,gBAAgB,OAAO,WAAW;CAC9C,QAAQ,IAAI,yBAAyB,OAAO,WAAW;CAEvD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,0BAA0B,QAAQ,CAAC,GAC3E,QAAQ,IAAI,KAAK,KAAK;CAGxB,IAAI,UACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,QAAQ,IAAI,KAAK,KAAK;CAI1B,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAgB,2BACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,WAAW,OAAO,uBAAuB,KAAK,KAAK,OAAO,uBAAuB,KAAK;CAC5F,IAAI,UACF,OAAO;CAGT,IAAI,OAAO,aAAa,cACtB;CAGF,OAAO;AACT;;AAGA,MAAM,mBAAmB;AAEzB,SAAgB,yBACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,MACJ,OAAO,cAAc,KAAK,KAC1B,OAAO,qBAAqB,KAAK,MAChC,OAAO,aAAa,eAAe,KAAA,IAAY;CAClD,IAAI,CAAC,KACH;CAGF,OAAO,mBAAmB,GAAG;AAC/B;;AAGA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,SAAS,eAAe,SAAS,aACnC,OAAO;CAGT,OAAO;AACT;AAEA,SAAgB,mBAAmB,KAAqB;CACtD,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,WAAW,oBAAoB,OAAO,QAAQ;EACrD,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;CAC5C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,gBAAgB,KAAuC;CACrE,OAAO,OAAO,QAAQ,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO;AACpE;AAEA,SAAgB,0BACd,MAAyB,QAAQ,KACjC,UACQ;CACR,OAAO,YAAY,IAAI,wBAAwB,IAAI,uBAAA;AACrD;;;ACjNA,IAAa,2BAAb,cAA8C,MAAM;CAClD;CAEA,YAAY,SAAmB;EAC7B,MACE,8CAA8C,QAAQ,KAAK,IAAI,EAAE,sFAEnE;EACA,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;;AAGA,SAAgB,2BACd,SAA4B,QAAQ,KACf;CACrB,MAAM,cAAc,yBAAyB,MAAM;CACnD,MAAM,cAAc,2BAA2B,MAAM;CACrD,MAAM,UAAoB,CAAC;CAE3B,IAAI,CAAC,aACH,QAAQ,KAAK,qCAAqC;CAGpD,IAAI,CAAC,aACH,QAAQ,KAAK,uBAAuB;CAGtC,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,yBAAyB,OAAO;CAG5C,OAAO;EAAe;EAA2B;CAAa;AAChE;;;AC1CA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAQ5B,eAAsB,cACpB,SACA,UAAgC,CAAC,GAClB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB,MAAM,OAAO;CAEvD,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,IAAI;GAEF,KAAI,MADmB,UAAU,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC,GAC/D,IACX;EAEJ,QAAQ,CAER;EAEA,MAAM,MAAM,UAAU;CACxB;CAEA,MAAM,IAAI,MAAM,+CAA+C,UAAU,MAAM,IAAI,EAAE;AACvF;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY;EAC9B,WAAW,SAAS,EAAE;CACxB,CAAC;AACH;;;AC7BA,MAAM,uBAAuB,QAAQ,IAAI,wBAAwB;AAEjE,SAAgB,oBAAoB,UAA+B,CAAC,GAAmB;CACrF,MAAM,SAAS,QAAQ,UAAU,IAAI,OAAO;CAE5C,OAAO,EACL,MAAM,MAAM,OAAO;EACjB,IAAI,MAAM,SAAS,WAAW,GAC5B,MAAM,IAAI,MAAM,yDAAyD;EAG3E,MAAM,SAAS,qBACb,SACA,MAAM,SAAS,KAAK,aAAa;GAC/B,WAAW,QAAQ;GACnB,oBAAoB,QAAQ;EAC9B,EAAE,GACF,MAAM,UACN,MAAM,GACR;EACA,MAAM,YAAY,QAAQ,OAAO,KAAK;EACtC,MAAM,wBAAwB,QAAQ,MAAM,cAAc;EAE1D,MAAM,YAAY,MAAM,OAAO,gBAAgB;GAC7C,OAAO,OAAO;GACd,MAAM,cAAc,MAAM,cAAc;GACxC,QAAQ;IACN,6BAA6B,MAAM;IACnC,yBAAyB,MAAM,SAAS,KAAK,YAAY,QAAQ,SAAS,EAAE,KAAK,GAAG;GACtF;GACA,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAC3B;GACA,YAAY;IACV,YAAY,CAAC,mCAAmC;IAChD,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAC5C;GACF;GACA,kBAAkB,EAChB,iBAAiB,GACd,uBAAuB,CAAC,EAC3B,EACF;GACA,KAAK,gBAAgB,OAAO,GAAG;EACjC,CAAC;EAED,MAAM,UAAU,MAAM;EAEtB,MAAM,UAAU,MAAM,UAAU,QAAQ;EACxC,MAAM,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,OAAO,KAAK,SAAS;EACxE,IAAI,CAAC,SAAS,UACZ,MAAM,IAAI,MAAM,2CAA2C;EAG7D,MAAM,UAAU,oBAAoB,QAAQ;EAC5C,MAAM,cAAc,SAAS;GAC3B,WAAW,QAAQ;GACnB,WAAW,QAAQ;EACrB,CAAC;EAED,OAAO;GACL,WAAW,QAAQ;GACnB;EACF;CACF,EACF;AACF;AAEA,SAAS,cAAc,gBAAgC;CACrD,OAAO,iBAAiB;AAC1B;AAEA,eAAe,wBAAwB,QAAgB,gBAAuC;CAC5F,IAAI;EACF,MAAM,WAAW,OAAO,aAAa,cAAc,cAAc,CAAC;EAClE,MAAM,SAAS,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,KAAA,CAAS;EACnD,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,CAAC;CACvC,QAAQ,CAER;AACF;AAEA,eAAe,YAAY,QAAgB,OAA8B;CACvE,IAAI;EACF,MAAM,OAAO,SAAS,KAAK,EAAE,QAAQ;EACrC;CACF,QAAQ,CAER;CAEA,MAAM,IAAI,SAAe,gBAAgB,WAAW;EAClD,OAAO,KAAK,QAAQ,OAAqB,WAA8C;GACrF,IAAI,OAAO;IACT,OAAO,KAAK;IACZ;GACF;GAEA,IAAI,CAAC,QAAQ;IACX,uBAAO,IAAI,MAAM,wBAAwB,OAAO,CAAC;IACjD;GACF;GAEA,OAAO,MAAM,eAAe,SAAS,kBAAgC;IACnE,IAAI,eAAe;KACjB,OAAO,aAAa;KACpB;IACF;IAEA,eAAe;GACjB,CAAC;EACH,CAAC;CACH,CAAC;AACH;;;ACrHA,SAAgB,aAAa,UAA+B,CAAC,GAAkB;CAC7E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,MAAM;EACN,eAAe,2BAA2B,GAAG;EAC7C,qBAAqB,oBAAoB;GAAE,GAAG;GAAS;EAAI,CAAC;CAC9D;AACF;;;;ACZA,SAAgB,qBAAqB,UAA+B,CAAC,GAAkB;CACrF,OAAO,aAAa,OAAO;AAC7B;;;;ACLA,MAAa,0BAA0B;;;ACUvC,eAAsB,YACpB,SACA,UAA8B,CAAC,GACb;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAU,QAAQ,QAAQ,qBAAqB,QAAQ,aAAa,IAAI,KAAK,CAAC;CAEpF,IAAI;EASF,QAAO,OARiB,QAAQ,aAAa,OAC3C,IAAI,IAAI,sBAAsB,MAAM,OAAO,GAC3C;GACE,QAAQ,YAAY,QAAQ,SAAS;GACrC;EACF,CACF,GAEgB;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;AC3BA,SAAgB,qBACd,QACA,QACyD;CACzD,IAAI,QAAQ,eACV,OAAO,OAAO,cAAc,MAAM;CAGpC,OAAO,CAAC,CAAC,OAAO;AAClB;AAEA,eAAsB,kBACpB,QACA,UAEI,CAAC,GACa;CAClB,IAAI,CAAC,qBAAqB,QAAQ,QAAQ,MAAM,GAC9C,OAAO;CAGT,OAAO,YAAY,OAAO,SAAS;EACjC,GAAG;EACH,WAAW,OAAO;CACpB,CAAC;AACH"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/constants.ts","../src/runtime.ts","../src/runtime-env.ts","../src/worker-runtime-config.ts","../src/wait-for-health.ts","../src/docker/create-docker-runtime.ts","../src/docker/plugin.ts","../src/default-plugin.ts","../src/runtime-constants.ts","../src/ping-project.ts","../src/ping-project-target.ts"],"sourcesContent":["export const PROJECT_SERVER_IMAGE = \"keystroke/project-server:local\";\n\nexport const PROJECT_SERVER_PORT = 3000;\n\nexport const PROJECT_SERVER_ROOT = \"/app\";\n\nexport const PROJECT_SERVER_FRAMEWORK_ROOT = \"/opt/keystroke\";\n\nexport const PROJECT_SERVER_FRAMEWORK_NODE_MODULES = `${PROJECT_SERVER_FRAMEWORK_ROOT}/node_modules`;\n\nexport const PROJECT_SERVER_HEALTH = {\n  path: \"/health\",\n  port: PROJECT_SERVER_PORT,\n} as const;\n","export type ProjectRuntimeDatabase = {\n  host: string;\n  port: number;\n  database: string;\n  user: string;\n  password: string;\n  searchPath: string;\n  organizationId: string;\n  /** @deprecated Per-project workers only — org workers omit this. */\n  projectId?: string;\n};\n\nexport type OrgProjectDeploy = {\n  projectId: string;\n  name: string;\n  artifactId: string;\n  artifactStorageKey: string;\n};\n\nexport type OrgArtifactSpec = {\n  projectId: string;\n  artifactStorageKey: string;\n};\n\nexport type ProjectRuntimeHosting = {\n  appName: string;\n};\n\nexport type ProjectRuntimeInput = {\n  organizationId: string;\n  projects: OrgProjectDeploy[];\n  database: ProjectRuntimeDatabase;\n  hosting?: ProjectRuntimeHosting;\n  /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */\n  env?: Record<string, string>;\n  /** Previous runtime to retire after a successful cutover. */\n  previousRuntimeId?: string | null;\n};\n\n/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */\nexport function encodeOrgArtifacts(artifacts: OrgArtifactSpec[]): string {\n  return Buffer.from(JSON.stringify(artifacts)).toString(\"base64\");\n}\n\nexport function parseOrgArtifactsFromEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): OrgArtifactSpec[] | undefined {\n  const raw = env.KEYSTROKE_ORG_ARTIFACTS?.trim();\n  if (!raw) {\n    return undefined;\n  }\n\n  const parsed = JSON.parse(Buffer.from(raw, \"base64\").toString(\"utf8\")) as unknown;\n  if (!Array.isArray(parsed)) {\n    throw new Error(\"KEYSTROKE_ORG_ARTIFACTS must decode to a JSON array\");\n  }\n\n  return parsed.map((entry) => {\n    if (\n      !entry ||\n      typeof entry !== \"object\" ||\n      typeof (entry as OrgArtifactSpec).projectId !== \"string\" ||\n      typeof (entry as OrgArtifactSpec).artifactStorageKey !== \"string\"\n    ) {\n      throw new Error(\"KEYSTROKE_ORG_ARTIFACTS entries require projectId and artifactStorageKey\");\n    }\n\n    return entry as OrgArtifactSpec;\n  });\n}\n\nexport type ProjectRuntimeDestroyInput = {\n  runtimeId: string;\n  hosting?: ProjectRuntimeHosting;\n};\n\nexport type ProjectRuntimeResult = {\n  runtimeId: string;\n  baseUrl: string;\n};\n\nexport type ProjectRuntime = {\n  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;\n  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;\n};\n\nexport type ProjectPingTarget = {\n  baseUrl: string | null;\n  runtimeId: string | null;\n};\n","import type { ProjectRuntimeDatabase } from \"./runtime\";\nimport { encodeOrgArtifacts, type OrgArtifactSpec } from \"./runtime\";\nimport {\n  PROJECT_SERVER_FRAMEWORK_NODE_MODULES,\n  PROJECT_SERVER_HEALTH,\n  PROJECT_SERVER_IMAGE,\n  PROJECT_SERVER_PORT,\n  PROJECT_SERVER_ROOT,\n} from \"./constants\";\nimport type { HostingOptions } from \"./plugin\";\nimport { resolveWorkerRuntimeConfig } from \"./worker-runtime-config\";\n\nconst RUNTIME_ENV_KEYS = [\n  \"BETTER_AUTH_SECRET\",\n  \"PUBLIC_SERVER_URL\",\n  \"PUBLIC_WEB_URL\",\n  \"POSTGRES_SSL\",\n  \"UPSTASH_REDIS_URL\",\n  \"REDIS_URL\",\n  \"KEYSTROKE_QUEUE_PREFIX\",\n] as const;\n\n/** Provider and gateway env forwarded from the platform into project servers. */\nconst PROVIDER_ENV_KEYS = [\n  \"ANTHROPIC_API_KEY\",\n  \"OPENAI_API_KEY\",\n  \"AI_GATEWAY_API_KEY\",\n  \"AI_GATEWAY_BASE_URL\",\n] as const;\n\n/** Shared dev token when `PLATFORM_WORKER_TOKEN` is unset (non-production only). */\nexport const DEV_PLATFORM_WORKER_TOKEN = \"dev-platform-worker-token\";\n\nexport const PROJECT_DATABASE_ENV_KEYS = [\n  \"POSTGRES_HOST\",\n  \"POSTGRES_PORT\",\n  \"POSTGRES_DB\",\n  \"POSTGRES_USER\",\n  \"POSTGRES_PASSWORD\",\n  \"DATABASE_SEARCH_PATH\",\n] as const;\n\nexport type RuntimeLaunchSpec = {\n  image: string;\n  env: Record<string, string>;\n  port: number;\n  health: typeof PROJECT_SERVER_HEALTH;\n};\n\n/** Per-project postgres env injected into every project server container/machine. */\nexport function projectDatabaseRuntimeEnv(\n  database: ProjectRuntimeDatabase,\n): Record<(typeof PROJECT_DATABASE_ENV_KEYS)[number], string> {\n  return {\n    POSTGRES_HOST: rewriteLoopbackHost(database.host),\n    POSTGRES_PORT: String(database.port),\n    POSTGRES_DB: database.database,\n    POSTGRES_USER: database.user,\n    POSTGRES_PASSWORD: database.password,\n    DATABASE_SEARCH_PATH: database.searchPath,\n  };\n}\n\n/**\n * Builds the launch spec for an org worker. Each deploy artifact is encoded in\n * `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.\n */\nexport function resolveRuntimeLaunch(\n  options: HostingOptions,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  if (artifacts.length === 0) {\n    throw new Error(\"Cannot start an org worker without at least one artifact\");\n  }\n\n  const env = options.env ?? process.env;\n\n  return {\n    image: resolveProjectServerImage(env, options.image),\n    env: buildRuntimeEnv(env, artifacts, database, extraEnv),\n    port: PROJECT_SERVER_PORT,\n    health: PROJECT_SERVER_HEALTH,\n  };\n}\n\n/** @deprecated Single-project launch — prefer org {@link resolveRuntimeLaunch}. */\nexport function resolveSingleProjectRuntimeLaunch(\n  options: HostingOptions,\n  artifactStorageKey: string,\n  database: ProjectRuntimeDatabase & { projectId: string },\n  extraEnv?: Record<string, string>,\n): RuntimeLaunchSpec {\n  return resolveRuntimeLaunch(\n    options,\n    [{ projectId: database.projectId, artifactStorageKey }],\n    database,\n    extraEnv,\n  );\n}\n\n/** Env vars passed into the org worker container/machine. */\nexport function buildRuntimeEnv(\n  source: NodeJS.ProcessEnv,\n  artifacts: OrgArtifactSpec[],\n  database: ProjectRuntimeDatabase,\n  extraEnv?: Record<string, string>,\n): Record<string, string> {\n  const entries = new Map<string, string>([\n    [\"PORT\", String(PROJECT_SERVER_PORT)],\n    [\"KEYSTROKE_ROOT\", PROJECT_SERVER_ROOT],\n    [\"KEYSTROKE_RUNTIME_NODE_MODULES\", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],\n    [\"KEYSTROKE_ORG_ARTIFACTS\", encodeOrgArtifacts(artifacts)],\n    [\"ORGANIZATION_ID\", database.organizationId],\n    [\"TENANT_ID\", database.organizationId],\n  ]);\n\n  for (const key of RUNTIME_ENV_KEYS) {\n    const value = source[key]?.trim();\n    if (!value) {\n      if (key === \"POSTGRES_SSL\") {\n        throw new Error(\"POSTGRES_SSL is required\");\n      }\n      continue;\n    }\n    entries.set(key, value);\n  }\n\n  // OSS self-host: forward BYO provider/gateway env. Cloud llmProxy supplies extraEnv instead.\n  if (!extraEnv) {\n    for (const key of PROVIDER_ENV_KEYS) {\n      const value = source[key]?.trim();\n      if (value) {\n        entries.set(key, value);\n      }\n    }\n  }\n\n  // Project containers always run as workers: they resolve credentials/secrets through\n  // the platform internal API and are deliberately never given the decryption key.\n  const worker = resolveWorkerRuntimeConfig(source);\n  entries.set(\"PLATFORM_URL\", worker.platformUrl);\n  entries.set(\"WORKER_INTERNAL_TOKEN\", worker.workerToken);\n\n  for (const [key, value] of Object.entries(projectDatabaseRuntimeEnv(database))) {\n    entries.set(key, value);\n  }\n\n  if (extraEnv) {\n    for (const [key, value] of Object.entries(extraEnv)) {\n      entries.set(key, value);\n    }\n  }\n\n  return Object.fromEntries(entries);\n}\n\nexport function resolvePlatformWorkerToken(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const explicit = source.PLATFORM_WORKER_TOKEN?.trim() ?? source.WORKER_INTERNAL_TOKEN?.trim();\n  if (explicit) {\n    return explicit;\n  }\n\n  if (source.NODE_ENV === \"production\") {\n    return undefined;\n  }\n\n  return DEV_PLATFORM_WORKER_TOKEN;\n}\n\n/** Platform API URL reachable from a project-server container. */\nconst DEV_PLATFORM_URL = \"http://localhost:3002\";\n\nexport function resolveWorkerPlatformUrl(\n  source: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n  const raw =\n    source.PLATFORM_URL?.trim() ??\n    source.PUBLIC_PLATFORM_URL?.trim() ??\n    (source.NODE_ENV === \"production\" ? undefined : DEV_PLATFORM_URL);\n  if (!raw) {\n    return undefined;\n  }\n\n  return rewriteLoopbackUrl(raw);\n}\n\n/** Rewrite loopback hosts so containers can reach Postgres and other host services. */\nexport function rewriteLoopbackHost(host: string): string {\n  if (host === \"localhost\" || host === \"127.0.0.1\") {\n    return \"host.docker.internal\";\n  }\n\n  return host;\n}\n\nexport function rewriteLoopbackUrl(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.hostname = rewriteLoopbackHost(parsed.hostname);\n    return parsed.toString().replace(/\\/$/, \"\");\n  } catch {\n    return url;\n  }\n}\n\n/** dockerode expects `KEY=value` strings. */\nexport function formatDockerEnv(env: Record<string, string>): string[] {\n  return Object.entries(env).map(([key, value]) => `${key}=${value}`);\n}\n\nexport function resolveProjectServerImage(\n  env: NodeJS.ProcessEnv = process.env,\n  override?: string,\n): string {\n  return override ?? env.PROJECT_DOCKER_IMAGE ?? env.TENANT_DOCKER_IMAGE ?? PROJECT_SERVER_IMAGE;\n}\n","import { resolvePlatformWorkerToken, resolveWorkerPlatformUrl } from \"./runtime-env\";\n\n/** Resolved platform ↔ project-server worker auth contract. */\nexport type WorkerRuntimeConfig = {\n  /** Platform API base URL reachable from the project-server runtime. */\n  platformUrl: string;\n  /** Bearer token for platform `/internal` routes. */\n  workerToken: string;\n};\n\nexport class WorkerRuntimeConfigError extends Error {\n  readonly missing: readonly string[];\n\n  constructor(missing: string[]) {\n    super(\n      `Worker runtime config incomplete (missing: ${missing.join(\", \")}). ` +\n        \"In production set PLATFORM_WORKER_TOKEN and PUBLIC_PLATFORM_URL (or PLATFORM_URL).\",\n    );\n    this.name = \"WorkerRuntimeConfigError\";\n    this.missing = missing;\n  }\n}\n\n/** Fail fast when the platform cannot start worker-mode project servers. */\nexport function resolveWorkerRuntimeConfig(\n  source: NodeJS.ProcessEnv = process.env,\n): WorkerRuntimeConfig {\n  const platformUrl = resolveWorkerPlatformUrl(source);\n  const workerToken = resolvePlatformWorkerToken(source);\n  const missing: string[] = [];\n\n  if (!platformUrl) {\n    missing.push(\"PUBLIC_PLATFORM_URL or PLATFORM_URL\");\n  }\n\n  if (!workerToken) {\n    missing.push(\"PLATFORM_WORKER_TOKEN\");\n  }\n\n  if (missing.length > 0) {\n    throw new WorkerRuntimeConfigError(missing);\n  }\n\n  return { platformUrl: platformUrl!, workerToken: workerToken! };\n}\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_INTERVAL_MS = 500;\n\nexport type WaitForHealthOptions = {\n  timeoutMs?: number;\n  intervalMs?: number;\n  fetchImpl?: typeof fetch;\n};\n\nexport async function waitForHealth(\n  baseUrl: string,\n  options: WaitForHealthOptions = {},\n): Promise<void> {\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;\n  const deadline = Date.now() + timeoutMs;\n  const url = new URL(PROJECT_SERVER_HEALTH.path, baseUrl);\n\n  while (Date.now() < deadline) {\n    try {\n      const response = await fetchImpl(url, { signal: AbortSignal.timeout(2_000) });\n      if (response.ok) {\n        return;\n      }\n    } catch {\n      // retry until timeout\n    }\n\n    await sleep(intervalMs);\n  }\n\n  throw new Error(`Project server health check timed out after ${timeoutMs}ms (${url})`);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n","import Docker from \"dockerode\";\nimport { mkdir } from \"node:fs/promises\";\n\nimport type { ProjectRuntime } from \"../runtime\";\n\nimport type { HostingOptions } from \"../plugin\";\nimport { formatDockerEnv, resolveRuntimeLaunch } from \"../runtime-env\";\nimport { waitForHealth } from \"../wait-for-health\";\n\nexport type WorkspacesMount = {\n  hostPath: string;\n  containerPath: string;\n};\n\nexport type DockerPluginOptions = HostingOptions & {\n  docker?: Docker;\n  /** Bind a shared host workspace dir into dev workers (VM sandbox proxy mount path). */\n  workspacesMount?: WorkspacesMount;\n};\n\nconst MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? \"keystroke\";\n\nexport function createDockerRuntime(options: DockerPluginOptions = {}): ProjectRuntime {\n  const docker = options.docker ?? new Docker();\n\n  return {\n    async start(input) {\n      if (input.projects.length === 0) {\n        throw new Error(\"Docker org runtime requires at least one project deploy\");\n      }\n\n      let launch = resolveRuntimeLaunch(\n        options,\n        input.projects.map((project) => ({\n          projectId: project.projectId,\n          artifactStorageKey: project.artifactStorageKey,\n        })),\n        input.database,\n        input.env,\n      );\n\n      if (options.workspacesMount) {\n        const { hostPath, containerPath } = options.workspacesMount;\n        await mkdir(hostPath, { recursive: true });\n        launch = {\n          ...launch,\n          env: {\n            ...launch.env,\n            KEYSTROKE_WORKSPACES_ROOT: containerPath,\n          },\n        };\n      }\n\n      await ensureImage(docker, launch.image);\n      await removeExistingContainer(docker, input.organizationId);\n\n      const container = await docker.createContainer({\n        Image: launch.image,\n        name: containerName(input.organizationId),\n        Labels: {\n          \"keystroke.organization.id\": input.organizationId,\n          \"keystroke.project.ids\": input.projects.map((project) => project.projectId).join(\",\"),\n        },\n        ExposedPorts: {\n          [`${launch.port}/tcp`]: {},\n        },\n        HostConfig: {\n          ExtraHosts: [\"host.docker.internal:host-gateway\"],\n          PortBindings: {\n            [`${launch.port}/tcp`]: [{ HostPort: \"0\" }],\n          },\n          ...(options.workspacesMount\n            ? {\n                Binds: [\n                  `${options.workspacesMount.hostPath}:${options.workspacesMount.containerPath}`,\n                ],\n              }\n            : {}),\n        },\n        NetworkingConfig: {\n          EndpointsConfig: {\n            [MINIO_DOCKER_NETWORK]: {},\n          },\n        },\n        Env: formatDockerEnv(launch.env),\n      });\n\n      await container.start();\n\n      const inspect = await container.inspect();\n      const binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];\n      if (!binding?.HostPort) {\n        throw new Error(\"Failed to resolve org container host port\");\n      }\n\n      const baseUrl = `http://127.0.0.1:${binding.HostPort}`;\n      await waitForHealth(baseUrl, {\n        fetchImpl: options.fetchImpl,\n        timeoutMs: options.healthTimeoutMs,\n      });\n\n      return {\n        runtimeId: inspect.Id,\n        baseUrl,\n      };\n    },\n  };\n}\n\nfunction containerName(organizationId: string): string {\n  return `keystroke-org-${organizationId}`;\n}\n\nasync function removeExistingContainer(docker: Docker, organizationId: string): Promise<void> {\n  try {\n    const existing = docker.getContainer(containerName(organizationId));\n    await existing.stop({ t: 5 }).catch(() => undefined);\n    await existing.remove({ force: true });\n  } catch {\n    // no existing container\n  }\n}\n\nasync function ensureImage(docker: Docker, image: string): Promise<void> {\n  try {\n    await docker.getImage(image).inspect();\n    return;\n  } catch {\n    // pull below\n  }\n\n  await new Promise<void>((resolvePromise, reject) => {\n    docker.pull(image, (error: Error | null, stream: NodeJS.ReadableStream | undefined) => {\n      if (error) {\n        reject(error);\n        return;\n      }\n\n      if (!stream) {\n        reject(new Error(`Failed to pull image ${image}`));\n        return;\n      }\n\n      docker.modem.followProgress(stream, (progressError: Error | null) => {\n        if (progressError) {\n          reject(progressError);\n          return;\n        }\n\n        resolvePromise();\n      });\n    });\n  });\n}\n","import type { HostingPlugin } from \"../plugin\";\nimport { resolveWorkerRuntimeConfig } from \"../worker-runtime-config\";\n\nimport { createDockerRuntime } from \"./create-docker-runtime\";\nimport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport type { DockerPluginOptions } from \"./create-docker-runtime\";\n\nexport function dockerPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  const env = options.env ?? process.env;\n\n  return {\n    name: \"docker\",\n    workerRuntime: resolveWorkerRuntimeConfig(env),\n    createRuntime: () => createDockerRuntime({ ...options, env }),\n  };\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport { dockerPlugin, type DockerPluginOptions } from \"./docker/plugin\";\n\n/** Local Docker hosting — default for platform and dev. */\nexport function defaultHostingPlugin(options: DockerPluginOptions = {}): HostingPlugin {\n  return dockerPlugin(options);\n}\n","/** Timeout for a single project runtime `/health` probe. */\nexport const RUNTIME_PING_TIMEOUT_MS = 15_000;\n","import { PROJECT_SERVER_HEALTH } from \"./constants\";\nimport type { HostingPlugin } from \"./plugin\";\nimport { RUNTIME_PING_TIMEOUT_MS } from \"./runtime-constants\";\n\nexport type PingProjectOptions = {\n  runtimeId?: string | null;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n  plugin?: Pick<HostingPlugin, \"pingRequestHeaders\">;\n};\n\nexport async function pingProject(\n  baseUrl: string,\n  options: PingProjectOptions = {},\n): Promise<boolean> {\n  const timeoutMs = options.timeoutMs ?? RUNTIME_PING_TIMEOUT_MS;\n  const headers = options.plugin?.pingRequestHeaders?.(options.runtimeId ?? null) ?? {};\n\n  try {\n    const response = await (options.fetchImpl ?? fetch)(\n      new URL(PROJECT_SERVER_HEALTH.path, baseUrl),\n      {\n        signal: AbortSignal.timeout(timeoutMs),\n        headers,\n      },\n    );\n\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n","import type { HostingPlugin } from \"./plugin\";\nimport type { ProjectPingTarget } from \"./runtime\";\nimport { pingProject, type PingProjectOptions } from \"./ping-project\";\n\nexport function canPingProjectTarget(\n  target: ProjectPingTarget,\n  plugin?: Pick<HostingPlugin, \"canPingTarget\">,\n): target is { baseUrl: string; runtimeId: string | null } {\n  if (plugin?.canPingTarget) {\n    return plugin.canPingTarget(target);\n  }\n\n  return !!target.baseUrl;\n}\n\nexport async function pingProjectTarget(\n  target: ProjectPingTarget,\n  options: PingProjectOptions & {\n    plugin?: Pick<HostingPlugin, \"canPingTarget\" | \"pingRequestHeaders\">;\n  } = {},\n): Promise<boolean> {\n  if (!canPingProjectTarget(target, options.plugin)) {\n    return false;\n  }\n\n  return pingProject(target.baseUrl, {\n    ...options,\n    runtimeId: target.runtimeId,\n  });\n}\n"],"mappings":";;;AAAA,MAAa,uBAAuB;AAEpC,MAAa,sBAAsB;AAEnC,MAAa,sBAAsB;AAEnC,MAAa,gCAAgC;AAE7C,MAAa,wCAAwC,GAAG,8BAA8B;AAEtF,MAAa,wBAAwB;CACnC,MAAM;CACN,MAAM;AACR;;;;AC2BA,SAAgB,mBAAmB,WAAsC;CACvE,OAAO,OAAO,KAAK,KAAK,UAAU,SAAS,CAAC,EAAE,SAAS,QAAQ;AACjE;AAEA,SAAgB,yBACd,MAAyB,QAAQ,KACF;CAC/B,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,IAAI,CAAC,KACH;CAGF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,MAAM,CAAC;CACrE,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,MAAM,qDAAqD;CAGvE,OAAO,OAAO,KAAK,UAAU;EAC3B,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAA0B,cAAc,YAChD,OAAQ,MAA0B,uBAAuB,UAEzD,MAAM,IAAI,MAAM,0EAA0E;EAG5F,OAAO;CACT,CAAC;AACH;;;ACzDA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;AACF;;AAGA,MAAa,4BAA4B;AAEzC,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;CACA;CACA;AACF;;AAUA,SAAgB,0BACd,UAC4D;CAC5D,OAAO;EACL,eAAe,oBAAoB,SAAS,IAAI;EAChD,eAAe,OAAO,SAAS,IAAI;EACnC,aAAa,SAAS;EACtB,eAAe,SAAS;EACxB,mBAAmB,SAAS;EAC5B,sBAAsB,SAAS;CACjC;AACF;;;;;AAMA,SAAgB,qBACd,SACA,WACA,UACA,UACmB;CACnB,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,MAAM,0DAA0D;CAG5E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,OAAO,0BAA0B,KAAK,QAAQ,KAAK;EACnD,KAAK,gBAAgB,KAAK,WAAW,UAAU,QAAQ;EACvD,MAAM;EACN,QAAQ;CACV;AACF;;AAkBA,SAAgB,gBACd,QACA,WACA,UACA,UACwB;CACxB,MAAM,UAAU,IAAI,IAAoB;EACtC,CAAC,QAAQ,OAAO,mBAAmB,CAAC;EACpC,CAAC,kBAAkB,mBAAmB;EACtC,CAAC,kCAAkC,qCAAqC;EACxE,CAAC,2BAA2B,mBAAmB,SAAS,CAAC;EACzD,CAAC,mBAAmB,SAAS,cAAc;EAC3C,CAAC,aAAa,SAAS,cAAc;CACvC,CAAC;CAED,KAAK,MAAM,OAAO,kBAAkB;EAClC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,CAAC,OAAO;GACV,IAAI,QAAQ,gBACV,MAAM,IAAI,MAAM,0BAA0B;GAE5C;EACF;EACA,QAAQ,IAAI,KAAK,KAAK;CACxB;CAGA,IAAI,CAAC,UACH,KAAK,MAAM,OAAO,mBAAmB;EACnC,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,OACF,QAAQ,IAAI,KAAK,KAAK;CAE1B;CAKF,MAAM,SAAS,2BAA2B,MAAM;CAChD,QAAQ,IAAI,gBAAgB,OAAO,WAAW;CAC9C,QAAQ,IAAI,yBAAyB,OAAO,WAAW;CAEvD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,0BAA0B,QAAQ,CAAC,GAC3E,QAAQ,IAAI,KAAK,KAAK;CAGxB,IAAI,UACF,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,QAAQ,IAAI,KAAK,KAAK;CAI1B,OAAO,OAAO,YAAY,OAAO;AACnC;AAEA,SAAgB,2BACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,WAAW,OAAO,uBAAuB,KAAK,KAAK,OAAO,uBAAuB,KAAK;CAC5F,IAAI,UACF,OAAO;CAGT,IAAI,OAAO,aAAa,cACtB;CAGF,OAAO;AACT;;AAGA,MAAM,mBAAmB;AAEzB,SAAgB,yBACd,SAA4B,QAAQ,KAChB;CACpB,MAAM,MACJ,OAAO,cAAc,KAAK,KAC1B,OAAO,qBAAqB,KAAK,MAChC,OAAO,aAAa,eAAe,KAAA,IAAY;CAClD,IAAI,CAAC,KACH;CAGF,OAAO,mBAAmB,GAAG;AAC/B;;AAGA,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,SAAS,eAAe,SAAS,aACnC,OAAO;CAGT,OAAO;AACT;AAEA,SAAgB,mBAAmB,KAAqB;CACtD,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,WAAW,oBAAoB,OAAO,QAAQ;EACrD,OAAO,OAAO,SAAS,EAAE,QAAQ,OAAO,EAAE;CAC5C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,gBAAgB,KAAuC;CACrE,OAAO,OAAO,QAAQ,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO;AACpE;AAEA,SAAgB,0BACd,MAAyB,QAAQ,KACjC,UACQ;CACR,OAAO,YAAY,IAAI,wBAAwB,IAAI,uBAAA;AACrD;;;ACjNA,IAAa,2BAAb,cAA8C,MAAM;CAClD;CAEA,YAAY,SAAmB;EAC7B,MACE,8CAA8C,QAAQ,KAAK,IAAI,EAAE,sFAEnE;EACA,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;;AAGA,SAAgB,2BACd,SAA4B,QAAQ,KACf;CACrB,MAAM,cAAc,yBAAyB,MAAM;CACnD,MAAM,cAAc,2BAA2B,MAAM;CACrD,MAAM,UAAoB,CAAC;CAE3B,IAAI,CAAC,aACH,QAAQ,KAAK,qCAAqC;CAGpD,IAAI,CAAC,aACH,QAAQ,KAAK,uBAAuB;CAGtC,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,yBAAyB,OAAO;CAG5C,OAAO;EAAe;EAA2B;CAAa;AAChE;;;AC1CA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAQ5B,eAAsB,cACpB,SACA,UAAgC,CAAC,GAClB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB,MAAM,OAAO;CAEvD,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,IAAI;GAEF,KAAI,MADmB,UAAU,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC,GAC/D,IACX;EAEJ,QAAQ,CAER;EAEA,MAAM,MAAM,UAAU;CACxB;CAEA,MAAM,IAAI,MAAM,+CAA+C,UAAU,MAAM,IAAI,EAAE;AACvF;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY;EAC9B,WAAW,SAAS,EAAE;CACxB,CAAC;AACH;;;ACrBA,MAAM,uBAAuB,QAAQ,IAAI,wBAAwB;AAEjE,SAAgB,oBAAoB,UAA+B,CAAC,GAAmB;CACrF,MAAM,SAAS,QAAQ,UAAU,IAAI,OAAO;CAE5C,OAAO,EACL,MAAM,MAAM,OAAO;EACjB,IAAI,MAAM,SAAS,WAAW,GAC5B,MAAM,IAAI,MAAM,yDAAyD;EAG3E,IAAI,SAAS,qBACX,SACA,MAAM,SAAS,KAAK,aAAa;GAC/B,WAAW,QAAQ;GACnB,oBAAoB,QAAQ;EAC9B,EAAE,GACF,MAAM,UACN,MAAM,GACR;EAEA,IAAI,QAAQ,iBAAiB;GAC3B,MAAM,EAAE,UAAU,kBAAkB,QAAQ;GAC5C,MAAM,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;GACzC,SAAS;IACP,GAAG;IACH,KAAK;KACH,GAAG,OAAO;KACV,2BAA2B;IAC7B;GACF;EACF;EAEA,MAAM,YAAY,QAAQ,OAAO,KAAK;EACtC,MAAM,wBAAwB,QAAQ,MAAM,cAAc;EAE1D,MAAM,YAAY,MAAM,OAAO,gBAAgB;GAC7C,OAAO,OAAO;GACd,MAAM,cAAc,MAAM,cAAc;GACxC,QAAQ;IACN,6BAA6B,MAAM;IACnC,yBAAyB,MAAM,SAAS,KAAK,YAAY,QAAQ,SAAS,EAAE,KAAK,GAAG;GACtF;GACA,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAC3B;GACA,YAAY;IACV,YAAY,CAAC,mCAAmC;IAChD,cAAc,GACX,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAC5C;IACA,GAAI,QAAQ,kBACR,EACE,OAAO,CACL,GAAG,QAAQ,gBAAgB,SAAS,GAAG,QAAQ,gBAAgB,eACjE,EACF,IACA,CAAC;GACP;GACA,kBAAkB,EAChB,iBAAiB,GACd,uBAAuB,CAAC,EAC3B,EACF;GACA,KAAK,gBAAgB,OAAO,GAAG;EACjC,CAAC;EAED,MAAM,UAAU,MAAM;EAEtB,MAAM,UAAU,MAAM,UAAU,QAAQ;EACxC,MAAM,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,OAAO,KAAK,SAAS;EACxE,IAAI,CAAC,SAAS,UACZ,MAAM,IAAI,MAAM,2CAA2C;EAG7D,MAAM,UAAU,oBAAoB,QAAQ;EAC5C,MAAM,cAAc,SAAS;GAC3B,WAAW,QAAQ;GACnB,WAAW,QAAQ;EACrB,CAAC;EAED,OAAO;GACL,WAAW,QAAQ;GACnB;EACF;CACF,EACF;AACF;AAEA,SAAS,cAAc,gBAAgC;CACrD,OAAO,iBAAiB;AAC1B;AAEA,eAAe,wBAAwB,QAAgB,gBAAuC;CAC5F,IAAI;EACF,MAAM,WAAW,OAAO,aAAa,cAAc,cAAc,CAAC;EAClE,MAAM,SAAS,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,KAAA,CAAS;EACnD,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,CAAC;CACvC,QAAQ,CAER;AACF;AAEA,eAAe,YAAY,QAAgB,OAA8B;CACvE,IAAI;EACF,MAAM,OAAO,SAAS,KAAK,EAAE,QAAQ;EACrC;CACF,QAAQ,CAER;CAEA,MAAM,IAAI,SAAe,gBAAgB,WAAW;EAClD,OAAO,KAAK,QAAQ,OAAqB,WAA8C;GACrF,IAAI,OAAO;IACT,OAAO,KAAK;IACZ;GACF;GAEA,IAAI,CAAC,QAAQ;IACX,uBAAO,IAAI,MAAM,wBAAwB,OAAO,CAAC;IACjD;GACF;GAEA,OAAO,MAAM,eAAe,SAAS,kBAAgC;IACnE,IAAI,eAAe;KACjB,OAAO,aAAa;KACpB;IACF;IAEA,eAAe;GACjB,CAAC;EACH,CAAC;CACH,CAAC;AACH;;;ACjJA,SAAgB,aAAa,UAA+B,CAAC,GAAkB;CAC7E,MAAM,MAAM,QAAQ,OAAO,QAAQ;CAEnC,OAAO;EACL,MAAM;EACN,eAAe,2BAA2B,GAAG;EAC7C,qBAAqB,oBAAoB;GAAE,GAAG;GAAS;EAAI,CAAC;CAC9D;AACF;;;;ACZA,SAAgB,qBAAqB,UAA+B,CAAC,GAAkB;CACrF,OAAO,aAAa,OAAO;AAC7B;;;;ACLA,MAAa,0BAA0B;;;ACUvC,eAAsB,YACpB,SACA,UAA8B,CAAC,GACb;CAClB,MAAM,YAAY,QAAQ,aAAA;CAC1B,MAAM,UAAU,QAAQ,QAAQ,qBAAqB,QAAQ,aAAa,IAAI,KAAK,CAAC;CAEpF,IAAI;EASF,QAAO,OARiB,QAAQ,aAAa,OAC3C,IAAI,IAAI,sBAAsB,MAAM,OAAO,GAC3C;GACE,QAAQ,YAAY,QAAQ,SAAS;GACrC;EACF,CACF,GAEgB;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;;AC3BA,SAAgB,qBACd,QACA,QACyD;CACzD,IAAI,QAAQ,eACV,OAAO,OAAO,cAAc,MAAM;CAGpC,OAAO,CAAC,CAAC,OAAO;AAClB;AAEA,eAAsB,kBACpB,QACA,UAEI,CAAC,GACa;CAClB,IAAI,CAAC,qBAAqB,QAAQ,QAAQ,MAAM,GAC9C,OAAO;CAGT,OAAO,YAAY,OAAO,SAAS;EACjC,GAAG;EACH,WAAW,OAAO;CACpB,CAAC;AACH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keystrokehq/hosting",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/keystrokehq/keystroke.git",