@keystrokehq/platform 0.0.0-staging-20260714181321

package/dist/config-BO2sTtYA.d.mts

@@ -0,0 +1,324 @@
+import Docker from "dockerode";
+import { ZodError, z } from "zod";
+import { McpProviderPlugin, McpProviderPlugin as McpProviderPlugin$1 } from "@keystrokehq/http";
+import { Context } from "hono";
+
+//#region ../../packages/hosting/dist/index.d.mts
+//#endregion
+//#region src/runtime.d.ts
+type ProjectRuntimeDatabase = {
+  host: string;
+  port: number;
+  database: string;
+  user: string;
+  password: string;
+  searchPath: string;
+  organizationId: string; /** @deprecated Per-project workers only — org workers omit this. */
+  projectId?: string;
+};
+type OrgProjectDeploy = {
+  projectId: string;
+  name: string;
+  artifactId: string;
+  artifactStorageKey: string;
+};
+type ProjectRuntimeHosting = {
+  appName: string;
+};
+type ProjectRuntimeInput = {
+  organizationId: string;
+  projects: OrgProjectDeploy[];
+  database: ProjectRuntimeDatabase;
+  hosting?: ProjectRuntimeHosting; /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */
+  env?: Record<string, string>; /** Previous runtime to retire after a successful cutover. */
+  previousRuntimeId?: string | null;
+};
+/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */
+type ProjectRuntimeDestroyInput = {
+  runtimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
+type ProjectRuntimeReconcileInput = {
+  organizationId: string; /** The runtime to keep — every other runtime belonging to this org should be destroyed. */
+  keepRuntimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
+type ProjectRuntimeResult = {
+  runtimeId: string;
+  baseUrl: string;
+};
+type ProjectRuntime = {
+  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;
+  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;
+  /**
+   * Sweep away every runtime for this org except `keepRuntimeId`, retrying
+   * transient failures instead of giving up after one attempt. This catches
+   * orphans that a single {@link destroy} call missed (e.g. a previous deploy's
+   * destroy failed silently), not just the one runtime recorded as "previous."
+   */
+  reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;
+};
+type ProjectPingTarget = {
+  baseUrl: string | null;
+  runtimeId: string | null;
+}; //#endregion
+//#region src/worker-runtime-config.d.ts
+/** Resolved platform ↔ project-server worker auth contract. */
+type WorkerRuntimeConfig = {
+  /** Platform API base URL reachable from the project-server runtime. */platformUrl: string; /** Bearer token for platform `/internal` routes. */
+  workerToken: string;
+};
+//#endregion
+//#region src/plugin.d.ts
+type HostingOptions = {
+  image?: string;
+  env?: NodeJS.ProcessEnv;
+  fetchImpl?: typeof fetch;
+  healthTimeoutMs?: number;
+};
+type OrganizationHostingInput = {
+  organizationId: string;
+  name: string;
+};
+type OrganizationHostingResult = {
+  appName: string;
+};
+type HostingPlugin = {
+  name: string; /** Validated at plugin creation — shared by platform internal routes and project-server containers. */
+  workerRuntime: WorkerRuntimeConfig;
+  createRuntime(): ProjectRuntime;
+  provisionOrganization?(input: OrganizationHostingInput): Promise<OrganizationHostingResult>;
+  deprovisionOrganization?(result: OrganizationHostingResult): Promise<void>;
+  canPingTarget?(target: ProjectPingTarget): target is {
+    baseUrl: string;
+    runtimeId: string | null;
+  };
+  pingRequestHeaders?(runtimeId: string | null): Record<string, string>;
+}; //#endregion
+//#region src/docker/create-docker-runtime.d.ts
+//#endregion
+//#region ../../packages/scheduler/dist/contract-GpxHe4g6.d.mts
+//#region src/types.d.ts
+type JobKind = "workflow" | "agent" | "trigger" | "trigger-overview" | "workflow-canvas-annotations" | "workflow-overview" | "runtime" | "maintenance";
+type JobTrigger = "api" | "cron" | "webhook" | "poll" | "retry" | "prompt";
+/**
+ * Identifies a run that dispatched this job as a child. The parent metadata
+ * survives the queue boundary so the child can resume its parent at a terminal
+ * outcome without treating the child as a separately-billable dispatch.
+ */
+type JobParent = {
+  kind: "workflow" | "agent";
+  runId: string;
+  targetId: string;
+  correlationId?: string;
+};
+type JobPayload = {
+  kind: JobKind;
+  targetId: string;
+  runId: string;
+  trigger: JobTrigger;
+  payload: unknown;
+  attempt: number;
+  maxAttempts: number; /** True when this delivery is the final retry attempt. */
+  exhaustedRetries?: boolean;
+  scheduledAt: Date;
+  jobId: string; /** Project scope for org-wide worker queues. */
+  projectId?: string; /** Parent run that dispatched this child job, when applicable. */
+  parent?: JobParent; /** Optional W3C trace context carrier (sibling of user payload). */
+  traceContext?: Record<string, string>;
+};
+type EnqueueInput = {
+  kind: JobKind;
+  targetId: string;
+  runId: string;
+  trigger: JobTrigger;
+  payload?: unknown;
+  scheduledAt?: Date;
+  attempt?: number;
+  maxAttempts?: number; /** Dedupe key — pg-boss singletonKey / BullMQ jobId. */
+  dedupeKey?: string; /** Project scope for org-wide worker queues. */
+  projectId?: string; /** Parent run that dispatched this child job, when applicable. */
+  parent?: JobParent; /** Optional W3C trace context carrier (sibling of user payload). */
+  traceContext?: Record<string, string>;
+};
+type JobHandler = (job: JobPayload) => Promise<void>;
+type CancelHandler = (runId: string) => void | Promise<void>;
+type StopFn = () => Promise<void> | void;
+type WorkerOptions = {
+  workerId?: string;
+  pollIntervalMs?: number;
+  leaseSweepIntervalMs?: number;
+};
+type JobQueue = {
+  enqueue(input: EnqueueInput): Promise<string>;
+  startWorker(handler: JobHandler, options?: WorkerOptions): Promise<StopFn>;
+  /**
+   * Temporarily lends a worker slot to a child while an agent job waits on it.
+   * Backends without a hard concurrency cap may omit it.
+   */
+  withLentSlot?<T>(fn: () => Promise<T>): Promise<T>;
+  publishCancel(runId: string): Promise<void>;
+  subscribeCancel(handler: CancelHandler): Promise<StopFn>;
+};
+//#endregion
+//#region src/contract.d.ts
+/**
+ * Inlined to keep the contract database-free — structurally identical to
+ * `@keystrokehq/database`'s `DatabaseDialect`. Importing it from the database
+ * package would re-introduce the dependency `./contract` exists to avoid.
+ */
+type DatabaseDialect = "postgres" | "sqlite";
+type SchedulerScope = "platform" | "project" | "organization";
+type SchedulerPluginContext = {
+  scope: SchedulerScope;
+  url?: string;
+  dialect?: DatabaseDialect;
+  projectId?: string;
+  organizationId?: string;
+};
+type TriggerScheduleSpec = {
+  triggerSlug: string;
+  kind: "cron" | "poll";
+  schedule: string; /** IANA timezone for schedule wall-clock fields. When omitted, UTC. */
+  timezone?: string; /** Project scope for org-wide worker queues. */
+  projectId?: string;
+};
+type TriggerScheduleSyncOptions = {
+  schedules: TriggerScheduleSpec[];
+  scheduleOverrides?: {
+    global?: string;
+    byTrigger?: Record<string, string>;
+  };
+};
+type TriggerSchedulerStartOptions = {
+  pollIntervalMs?: number;
+  batchSize?: number; /** When `organization`, claims due schedules across all projects in the org schema. */
+  scope?: "project" | "organization";
+};
+type TriggerScheduler = {
+  sync(options: TriggerScheduleSyncOptions): Promise<void>;
+  start(options?: TriggerSchedulerStartOptions): Promise<StopFn>; /** Register or refresh one trigger schedule in the firing backend. */
+  upsert?(spec: TriggerScheduleSpec, overrides?: TriggerScheduleSyncOptions["scheduleOverrides"]): Promise<void>;
+  remove?(triggerSlug: string, projectId?: string): Promise<void>;
+  fireDue?(asOf?: Date): Promise<number>;
+};
+type SchedulerPlugin = {
+  name: string;
+  createJobQueue(ctx: SchedulerPluginContext): Promise<JobQueue>;
+  createTriggerScheduler?(ctx: SchedulerPluginContext, queue: JobQueue): Promise<TriggerScheduler>;
+};
+//#endregion
+//#region ../../packages/shared/dist/index.d.mts
+//#endregion
+//#region src/types/org-rate-limit.d.ts
+/** Scope for per-org API rate limits (separate token buckets). */
+type OrgRateLimitScope = "api" | "mcp";
+type OrgRateLimitResult = {
+  allowed: true;
+} | {
+  allowed: false;
+  retryAfterSeconds: number;
+};
+/**
+ * Cloud-only rate limit check injected into the HTTP layer. Unset (standalone) =
+ * no rate limiting.
+ */
+type OrgRateLimit = (scope: OrgRateLimitScope, organizationId: string) => Promise<OrgRateLimitResult>; //#endregion
+//#region src/types/credential-runtime.d.ts
+//#endregion
+//#region ../../packages/storage/dist/index.d.mts
+//#endregion
+//#region src/provision/plugin.d.ts
+type OrganizationStorageInput = {
+  organizationId: string;
+  name: string;
+};
+type OrganizationStorageResult = {
+  bucket: string;
+  endpoint: string;
+  accessKeyId: string;
+  secretAccessKey: string;
+  region?: string;
+  forcePathStyle?: boolean;
+};
+type StoragePlugin = {
+  provisionOrganization(input: OrganizationStorageInput): Promise<OrganizationStorageResult>;
+  deprovisionOrganization(result: OrganizationStorageResult): Promise<void>;
+}; //#endregion
+//#region src/provision/names.d.ts
+/** Deterministic bucket segment; keeps short test ids readable, hashes UUID-length ids. */
+//#endregion
+//#region src/llm-proxy-plugin.d.ts
+type LlmProxyHandlerContext = {
+  organizationId: string;
+  projectId: string;
+  pathSuffix: string;
+};
+type LlmProxyWorkerEnvContext = {
+  platformUrl: string; /** Per-org worker token for the org being launched. */
+  workerToken: string;
+};
+/** Optional platform plugin for managed LLM gateway proxying (e.g. Vercel AI Gateway on cloud). */
+type LlmProxyPlugin = {
+  name: string; /** Runs inside org/project DB scope behind worker-token auth. */
+  handler(c: Context, ctx: LlmProxyHandlerContext): Promise<Response>; /** Extra env injected into worker project servers. */
+  workerEnv(ctx: LlmProxyWorkerEnvContext): Record<string, string>;
+};
+//#endregion
+//#region src/config.d.ts
+type PlatformWorkerEnvContext = {
+  platformUrl: string; /** Per-org worker token for the org being launched. */
+  workerToken: string;
+};
+type PlatformConfigInput = {
+  /** Defaults to Docker via {@link defaultHostingPlugin}. */hosting?: HostingPlugin;
+  /**
+   * Per-org object storage. Defaults to {@link minioStoragePlugin} (S3 API against local MinIO).
+   * MinIO is the dev default, not AWS S3 — same `@aws-sdk/client-s3` client works for any S3-compatible
+   * backend; hosted platform swaps in a cloud plugin (e.g. Tigris).
+   */
+  storage?: StoragePlugin;
+  /**
+   * Managed LLM gateway proxy. Omit for BYO provider keys or a direct gateway URL on the platform env.
+   */
+  llmProxy?: LlmProxyPlugin; /** Managed universal MCP plugin. Omit when self-hosting without a provider. */
+  mcp?: McpProviderPlugin; /** Queue backend for platform runtime routes. Defaults to pg-boss (Postgres) or DB polling (SQLite). */
+  scheduler?: SchedulerPlugin; /** Extra env merged into project worker containers at deploy (cloud hosting plugins). */
+  workerEnv?: (ctx: PlatformWorkerEnvContext) => Record<string, string>;
+  /**
+   * Handler for `maintenance` jobs on the platform queue (cloud injects the
+   * billing daily pass). Unset (standalone default) means such jobs — which
+   * only cloud schedules — are ignored.
+   */
+  maintenanceHandler?: (payload: JobPayload) => Promise<void>;
+  /**
+   * Pre-enqueue credit check for interactive agent prompts / workflow runs
+   * (cloud injects the billing wallet check). Unset = never blocked.
+   */
+  promptCreditGate?: (organizationId: string) => Promise<{
+    allow: true;
+  } | {
+    allow: false;
+    reason: string;
+  }>;
+  /**
+   * Max-projects check for `POST /projects` (cloud injects plan quota).
+   * Unset = unlimited (standalone / OSS).
+   */
+  projectQuotaGate?: (organizationId: string) => Promise<{
+    allow: true;
+  } | {
+    allow: false;
+    reason: string;
+  }>; /** Per-org API/MCP rate limits (cloud injects Redis token bucket). Unset = unlimited. */
+  orgRateLimit?: OrgRateLimit;
+};
+type PlatformConfig = PlatformConfigInput & {
+  hosting: HostingPlugin;
+  storage: StoragePlugin;
+  scheduler: SchedulerPlugin;
+};
+declare function definePlatformConfig(config?: PlatformConfigInput): PlatformConfig;
+//#endregion
+export { definePlatformConfig as a, LlmProxyWorkerEnvContext as c, StoragePlugin as d, HostingOptions as f, OrganizationHostingResult as h, PlatformWorkerEnvContext as i, OrganizationStorageInput as l, OrganizationHostingInput as m, PlatformConfig as n, LlmProxyHandlerContext as o, HostingPlugin as p, PlatformConfigInput as r, LlmProxyPlugin as s, McpProviderPlugin$1 as t, OrganizationStorageResult as u };
+//# sourceMappingURL=config-BO2sTtYA.d.mts.map

package/dist/config-DahIeWeM.d.cts

@@ -0,0 +1,322 @@
+import { Context } from "hono";
+import { McpProviderPlugin, McpProviderPlugin as McpProviderPlugin$1 } from "@keystrokehq/http";
+
+//#region ../../packages/hosting/dist/index.d.mts
+//#endregion
+//#region src/runtime.d.ts
+type ProjectRuntimeDatabase = {
+  host: string;
+  port: number;
+  database: string;
+  user: string;
+  password: string;
+  searchPath: string;
+  organizationId: string; /** @deprecated Per-project workers only — org workers omit this. */
+  projectId?: string;
+};
+type OrgProjectDeploy = {
+  projectId: string;
+  name: string;
+  artifactId: string;
+  artifactStorageKey: string;
+};
+type ProjectRuntimeHosting = {
+  appName: string;
+};
+type ProjectRuntimeInput = {
+  organizationId: string;
+  projects: OrgProjectDeploy[];
+  database: ProjectRuntimeDatabase;
+  hosting?: ProjectRuntimeHosting; /** Extra env merged into the project server launch spec (e.g. from an llmProxy plugin). */
+  env?: Record<string, string>; /** Previous runtime to retire after a successful cutover. */
+  previousRuntimeId?: string | null;
+};
+/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */
+type ProjectRuntimeDestroyInput = {
+  runtimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
+type ProjectRuntimeReconcileInput = {
+  organizationId: string; /** The runtime to keep — every other runtime belonging to this org should be destroyed. */
+  keepRuntimeId: string;
+  hosting?: ProjectRuntimeHosting;
+};
+type ProjectRuntimeResult = {
+  runtimeId: string;
+  baseUrl: string;
+};
+type ProjectRuntime = {
+  start(input: ProjectRuntimeInput): Promise<ProjectRuntimeResult>;
+  destroy?(input: ProjectRuntimeDestroyInput): Promise<void>;
+  /**
+   * Sweep away every runtime for this org except `keepRuntimeId`, retrying
+   * transient failures instead of giving up after one attempt. This catches
+   * orphans that a single {@link destroy} call missed (e.g. a previous deploy's
+   * destroy failed silently), not just the one runtime recorded as "previous."
+   */
+  reconcile?(input: ProjectRuntimeReconcileInput): Promise<void>;
+};
+type ProjectPingTarget = {
+  baseUrl: string | null;
+  runtimeId: string | null;
+}; //#endregion
+//#region src/worker-runtime-config.d.ts
+/** Resolved platform ↔ project-server worker auth contract. */
+type WorkerRuntimeConfig = {
+  /** Platform API base URL reachable from the project-server runtime. */platformUrl: string; /** Bearer token for platform `/internal` routes. */
+  workerToken: string;
+};
+//#endregion
+//#region src/plugin.d.ts
+type HostingOptions = {
+  image?: string;
+  env?: NodeJS.ProcessEnv;
+  fetchImpl?: typeof fetch;
+  healthTimeoutMs?: number;
+};
+type OrganizationHostingInput = {
+  organizationId: string;
+  name: string;
+};
+type OrganizationHostingResult = {
+  appName: string;
+};
+type HostingPlugin = {
+  name: string; /** Validated at plugin creation — shared by platform internal routes and project-server containers. */
+  workerRuntime: WorkerRuntimeConfig;
+  createRuntime(): ProjectRuntime;
+  provisionOrganization?(input: OrganizationHostingInput): Promise<OrganizationHostingResult>;
+  deprovisionOrganization?(result: OrganizationHostingResult): Promise<void>;
+  canPingTarget?(target: ProjectPingTarget): target is {
+    baseUrl: string;
+    runtimeId: string | null;
+  };
+  pingRequestHeaders?(runtimeId: string | null): Record<string, string>;
+}; //#endregion
+//#region src/docker/create-docker-runtime.d.ts
+//#endregion
+//#region ../../packages/scheduler/dist/contract-GpxHe4g6.d.mts
+//#region src/types.d.ts
+type JobKind = "workflow" | "agent" | "trigger" | "trigger-overview" | "workflow-canvas-annotations" | "workflow-overview" | "runtime" | "maintenance";
+type JobTrigger = "api" | "cron" | "webhook" | "poll" | "retry" | "prompt";
+/**
+ * Identifies a run that dispatched this job as a child. The parent metadata
+ * survives the queue boundary so the child can resume its parent at a terminal
+ * outcome without treating the child as a separately-billable dispatch.
+ */
+type JobParent = {
+  kind: "workflow" | "agent";
+  runId: string;
+  targetId: string;
+  correlationId?: string;
+};
+type JobPayload = {
+  kind: JobKind;
+  targetId: string;
+  runId: string;
+  trigger: JobTrigger;
+  payload: unknown;
+  attempt: number;
+  maxAttempts: number; /** True when this delivery is the final retry attempt. */
+  exhaustedRetries?: boolean;
+  scheduledAt: Date;
+  jobId: string; /** Project scope for org-wide worker queues. */
+  projectId?: string; /** Parent run that dispatched this child job, when applicable. */
+  parent?: JobParent; /** Optional W3C trace context carrier (sibling of user payload). */
+  traceContext?: Record<string, string>;
+};
+type EnqueueInput = {
+  kind: JobKind;
+  targetId: string;
+  runId: string;
+  trigger: JobTrigger;
+  payload?: unknown;
+  scheduledAt?: Date;
+  attempt?: number;
+  maxAttempts?: number; /** Dedupe key — pg-boss singletonKey / BullMQ jobId. */
+  dedupeKey?: string; /** Project scope for org-wide worker queues. */
+  projectId?: string; /** Parent run that dispatched this child job, when applicable. */
+  parent?: JobParent; /** Optional W3C trace context carrier (sibling of user payload). */
+  traceContext?: Record<string, string>;
+};
+type JobHandler = (job: JobPayload) => Promise<void>;
+type CancelHandler = (runId: string) => void | Promise<void>;
+type StopFn = () => Promise<void> | void;
+type WorkerOptions = {
+  workerId?: string;
+  pollIntervalMs?: number;
+  leaseSweepIntervalMs?: number;
+};
+type JobQueue = {
+  enqueue(input: EnqueueInput): Promise<string>;
+  startWorker(handler: JobHandler, options?: WorkerOptions): Promise<StopFn>;
+  /**
+   * Temporarily lends a worker slot to a child while an agent job waits on it.
+   * Backends without a hard concurrency cap may omit it.
+   */
+  withLentSlot?<T>(fn: () => Promise<T>): Promise<T>;
+  publishCancel(runId: string): Promise<void>;
+  subscribeCancel(handler: CancelHandler): Promise<StopFn>;
+};
+//#endregion
+//#region src/contract.d.ts
+/**
+ * Inlined to keep the contract database-free — structurally identical to
+ * `@keystrokehq/database`'s `DatabaseDialect`. Importing it from the database
+ * package would re-introduce the dependency `./contract` exists to avoid.
+ */
+type DatabaseDialect = "postgres" | "sqlite";
+type SchedulerScope = "platform" | "project" | "organization";
+type SchedulerPluginContext = {
+  scope: SchedulerScope;
+  url?: string;
+  dialect?: DatabaseDialect;
+  projectId?: string;
+  organizationId?: string;
+};
+type TriggerScheduleSpec = {
+  triggerSlug: string;
+  kind: "cron" | "poll";
+  schedule: string; /** IANA timezone for schedule wall-clock fields. When omitted, UTC. */
+  timezone?: string; /** Project scope for org-wide worker queues. */
+  projectId?: string;
+};
+type TriggerScheduleSyncOptions = {
+  schedules: TriggerScheduleSpec[];
+  scheduleOverrides?: {
+    global?: string;
+    byTrigger?: Record<string, string>;
+  };
+};
+type TriggerSchedulerStartOptions = {
+  pollIntervalMs?: number;
+  batchSize?: number; /** When `organization`, claims due schedules across all projects in the org schema. */
+  scope?: "project" | "organization";
+};
+type TriggerScheduler = {
+  sync(options: TriggerScheduleSyncOptions): Promise<void>;
+  start(options?: TriggerSchedulerStartOptions): Promise<StopFn>; /** Register or refresh one trigger schedule in the firing backend. */
+  upsert?(spec: TriggerScheduleSpec, overrides?: TriggerScheduleSyncOptions["scheduleOverrides"]): Promise<void>;
+  remove?(triggerSlug: string, projectId?: string): Promise<void>;
+  fireDue?(asOf?: Date): Promise<number>;
+};
+type SchedulerPlugin = {
+  name: string;
+  createJobQueue(ctx: SchedulerPluginContext): Promise<JobQueue>;
+  createTriggerScheduler?(ctx: SchedulerPluginContext, queue: JobQueue): Promise<TriggerScheduler>;
+};
+//#endregion
+//#region ../../packages/shared/dist/index.d.mts
+//#endregion
+//#region src/types/org-rate-limit.d.ts
+/** Scope for per-org API rate limits (separate token buckets). */
+type OrgRateLimitScope = "api" | "mcp";
+type OrgRateLimitResult = {
+  allowed: true;
+} | {
+  allowed: false;
+  retryAfterSeconds: number;
+};
+/**
+ * Cloud-only rate limit check injected into the HTTP layer. Unset (standalone) =
+ * no rate limiting.
+ */
+type OrgRateLimit = (scope: OrgRateLimitScope, organizationId: string) => Promise<OrgRateLimitResult>; //#endregion
+//#region src/types/credential-runtime.d.ts
+//#endregion
+//#region ../../packages/storage/dist/index.d.mts
+//#endregion
+//#region src/provision/plugin.d.ts
+type OrganizationStorageInput = {
+  organizationId: string;
+  name: string;
+};
+type OrganizationStorageResult = {
+  bucket: string;
+  endpoint: string;
+  accessKeyId: string;
+  secretAccessKey: string;
+  region?: string;
+  forcePathStyle?: boolean;
+};
+type StoragePlugin = {
+  provisionOrganization(input: OrganizationStorageInput): Promise<OrganizationStorageResult>;
+  deprovisionOrganization(result: OrganizationStorageResult): Promise<void>;
+}; //#endregion
+//#region src/provision/names.d.ts
+/** Deterministic bucket segment; keeps short test ids readable, hashes UUID-length ids. */
+//#endregion
+//#region src/llm-proxy-plugin.d.ts
+type LlmProxyHandlerContext = {
+  organizationId: string;
+  projectId: string;
+  pathSuffix: string;
+};
+type LlmProxyWorkerEnvContext = {
+  platformUrl: string; /** Per-org worker token for the org being launched. */
+  workerToken: string;
+};
+/** Optional platform plugin for managed LLM gateway proxying (e.g. Vercel AI Gateway on cloud). */
+type LlmProxyPlugin = {
+  name: string; /** Runs inside org/project DB scope behind worker-token auth. */
+  handler(c: Context, ctx: LlmProxyHandlerContext): Promise<Response>; /** Extra env injected into worker project servers. */
+  workerEnv(ctx: LlmProxyWorkerEnvContext): Record<string, string>;
+};
+//#endregion
+//#region src/config.d.ts
+type PlatformWorkerEnvContext = {
+  platformUrl: string; /** Per-org worker token for the org being launched. */
+  workerToken: string;
+};
+type PlatformConfigInput = {
+  /** Defaults to Docker via {@link defaultHostingPlugin}. */hosting?: HostingPlugin;
+  /**
+   * Per-org object storage. Defaults to {@link minioStoragePlugin} (S3 API against local MinIO).
+   * MinIO is the dev default, not AWS S3 — same `@aws-sdk/client-s3` client works for any S3-compatible
+   * backend; hosted platform swaps in a cloud plugin (e.g. Tigris).
+   */
+  storage?: StoragePlugin;
+  /**
+   * Managed LLM gateway proxy. Omit for BYO provider keys or a direct gateway URL on the platform env.
+   */
+  llmProxy?: LlmProxyPlugin; /** Managed universal MCP plugin. Omit when self-hosting without a provider. */
+  mcp?: McpProviderPlugin; /** Queue backend for platform runtime routes. Defaults to pg-boss (Postgres) or DB polling (SQLite). */
+  scheduler?: SchedulerPlugin; /** Extra env merged into project worker containers at deploy (cloud hosting plugins). */
+  workerEnv?: (ctx: PlatformWorkerEnvContext) => Record<string, string>;
+  /**
+   * Handler for `maintenance` jobs on the platform queue (cloud injects the
+   * billing daily pass). Unset (standalone default) means such jobs — which
+   * only cloud schedules — are ignored.
+   */
+  maintenanceHandler?: (payload: JobPayload) => Promise<void>;
+  /**
+   * Pre-enqueue credit check for interactive agent prompts / workflow runs
+   * (cloud injects the billing wallet check). Unset = never blocked.
+   */
+  promptCreditGate?: (organizationId: string) => Promise<{
+    allow: true;
+  } | {
+    allow: false;
+    reason: string;
+  }>;
+  /**
+   * Max-projects check for `POST /projects` (cloud injects plan quota).
+   * Unset = unlimited (standalone / OSS).
+   */
+  projectQuotaGate?: (organizationId: string) => Promise<{
+    allow: true;
+  } | {
+    allow: false;
+    reason: string;
+  }>; /** Per-org API/MCP rate limits (cloud injects Redis token bucket). Unset = unlimited. */
+  orgRateLimit?: OrgRateLimit;
+};
+type PlatformConfig = PlatformConfigInput & {
+  hosting: HostingPlugin;
+  storage: StoragePlugin;
+  scheduler: SchedulerPlugin;
+};
+declare function definePlatformConfig(config?: PlatformConfigInput): PlatformConfig;
+//#endregion
+export { definePlatformConfig as a, LlmProxyWorkerEnvContext as c, StoragePlugin as d, HostingOptions as f, OrganizationHostingResult as h, PlatformWorkerEnvContext as i, OrganizationStorageInput as l, OrganizationHostingInput as m, PlatformConfig as n, LlmProxyHandlerContext as o, HostingPlugin as p, PlatformConfigInput as r, LlmProxyPlugin as s, McpProviderPlugin$1 as t, OrganizationStorageResult as u };
+//# sourceMappingURL=config-DahIeWeM.d.cts.map

package/dist/config.cjs

@@ -0,0 +1,16 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_dist = require("./dist-QIg3f1DP.cjs");
+const require_dist$1 = require("./dist-DCAFVLts.cjs");
+//#region src/config.ts
+function definePlatformConfig(config = {}) {
+	return {
+		...config,
+		hosting: config.hosting ?? require_dist.defaultHostingPlugin(),
+		storage: config.storage ?? require_dist$1.minioStoragePlugin(),
+		scheduler: config.scheduler ?? require_dist$1.defaultSchedulerPlugin()
+	};
+}
+//#endregion
+exports.definePlatformConfig = definePlatformConfig;
+
+//# sourceMappingURL=config.cjs.map

package/dist/config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.cjs","names":["defaultHostingPlugin","minioStoragePlugin","defaultSchedulerPlugin"],"sources":["../src/config.ts"],"sourcesContent":["import { defaultHostingPlugin, type HostingPlugin } from \"@keystrokehq/hosting\";\nimport {\n  defaultSchedulerPlugin,\n  type JobPayload,\n  type SchedulerPlugin,\n} from \"@keystrokehq/scheduler\";\nimport { minioStoragePlugin, type StoragePlugin } from \"@keystrokehq/storage\";\n\nimport type { OrgRateLimit } from \"@keystrokehq/shared\";\n\nimport type { LlmProxyPlugin } from \"./llm-proxy-plugin\";\nimport type { McpProviderPlugin } from \"@keystrokehq/http\";\n\nexport type {\n  HostingOptions,\n  HostingPlugin,\n  OrganizationHostingInput,\n  OrganizationHostingResult,\n} from \"@keystrokehq/hosting\";\n\nexport type {\n  OrganizationStorageInput,\n  OrganizationStorageResult,\n  StoragePlugin,\n} from \"@keystrokehq/storage\";\n\nexport type {\n  LlmProxyHandlerContext,\n  LlmProxyPlugin,\n  LlmProxyWorkerEnvContext,\n} from \"./llm-proxy-plugin\";\n\nexport type { McpProviderPlugin } from \"@keystrokehq/http\";\n\nexport type PlatformWorkerEnvContext = {\n  platformUrl: string;\n  /** Per-org worker token for the org being launched. */\n  workerToken: string;\n};\n\nexport type PlatformConfigInput = {\n  /** Defaults to Docker via {@link defaultHostingPlugin}. */\n  hosting?: HostingPlugin;\n  /**\n   * Per-org object storage. Defaults to {@link minioStoragePlugin} (S3 API against local MinIO).\n   * MinIO is the dev default, not AWS S3 — same `@aws-sdk/client-s3` client works for any S3-compatible\n   * backend; hosted platform swaps in a cloud plugin (e.g. Tigris).\n   */\n  storage?: StoragePlugin;\n  /**\n   * Managed LLM gateway proxy. Omit for BYO provider keys or a direct gateway URL on the platform env.\n   */\n  llmProxy?: LlmProxyPlugin;\n  /** Managed universal MCP plugin. Omit when self-hosting without a provider. */\n  mcp?: McpProviderPlugin;\n  /** Queue backend for platform runtime routes. Defaults to pg-boss (Postgres) or DB polling (SQLite). */\n  scheduler?: SchedulerPlugin;\n  /** Extra env merged into project worker containers at deploy (cloud hosting plugins). */\n  workerEnv?: (ctx: PlatformWorkerEnvContext) => Record<string, string>;\n  /**\n   * Handler for `maintenance` jobs on the platform queue (cloud injects the\n   * billing daily pass). Unset (standalone default) means such jobs — which\n   * only cloud schedules — are ignored.\n   */\n  maintenanceHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Pre-enqueue credit check for interactive agent prompts / workflow runs\n   * (cloud injects the billing wallet check). Unset = never blocked.\n   */\n  promptCreditGate?: (\n    organizationId: string,\n  ) => Promise<{ allow: true } | { allow: false; reason: string }>;\n  /**\n   * Max-projects check for `POST /projects` (cloud injects plan quota).\n   * Unset = unlimited (standalone / OSS).\n   */\n  projectQuotaGate?: (\n    organizationId: string,\n  ) => Promise<{ allow: true } | { allow: false; reason: string }>;\n  /** Per-org API/MCP rate limits (cloud injects Redis token bucket). Unset = unlimited. */\n  orgRateLimit?: OrgRateLimit;\n};\n\nexport type PlatformConfig = PlatformConfigInput & {\n  hosting: HostingPlugin;\n  storage: StoragePlugin;\n  scheduler: SchedulerPlugin;\n};\n\nexport function definePlatformConfig(config: PlatformConfigInput = {}): PlatformConfig {\n  return {\n    ...config,\n    hosting: config.hosting ?? defaultHostingPlugin(),\n    storage: config.storage ?? minioStoragePlugin(),\n    scheduler: config.scheduler ?? defaultSchedulerPlugin(),\n  };\n}\n"],"mappings":";;;;AAyFA,SAAgB,qBAAqB,SAA8B,CAAC,GAAmB;CACrF,OAAO;EACL,GAAG;EACH,SAAS,OAAO,WAAWA,aAAAA,qBAAqB;EAChD,SAAS,OAAO,WAAWC,eAAAA,mBAAmB;EAC9C,WAAW,OAAO,aAAaC,eAAAA,uBAAuB;CACxD;AACF"}

package/dist/config.d.cts

@@ -0,0 +1,2 @@
+import { a as definePlatformConfig, c as LlmProxyWorkerEnvContext, d as StoragePlugin, f as HostingOptions, h as OrganizationHostingResult, i as PlatformWorkerEnvContext, l as OrganizationStorageInput, m as OrganizationHostingInput, n as PlatformConfig, o as LlmProxyHandlerContext, p as HostingPlugin, r as PlatformConfigInput, s as LlmProxyPlugin, t as McpProviderPlugin, u as OrganizationStorageResult } from "./config-DahIeWeM.cjs";
+export { type HostingOptions, type HostingPlugin, type LlmProxyHandlerContext, type LlmProxyPlugin, type LlmProxyWorkerEnvContext, type McpProviderPlugin, type OrganizationHostingInput, type OrganizationHostingResult, type OrganizationStorageInput, type OrganizationStorageResult, PlatformConfig, PlatformConfigInput, PlatformWorkerEnvContext, type StoragePlugin, definePlatformConfig };

package/dist/config.d.mts

@@ -0,0 +1,2 @@
+import { a as definePlatformConfig, c as LlmProxyWorkerEnvContext, d as StoragePlugin, f as HostingOptions, h as OrganizationHostingResult, i as PlatformWorkerEnvContext, l as OrganizationStorageInput, m as OrganizationHostingInput, n as PlatformConfig, o as LlmProxyHandlerContext, p as HostingPlugin, r as PlatformConfigInput, s as LlmProxyPlugin, t as McpProviderPlugin, u as OrganizationStorageResult } from "./config-BO2sTtYA.mjs";
+export { type HostingOptions, type HostingPlugin, type LlmProxyHandlerContext, type LlmProxyPlugin, type LlmProxyWorkerEnvContext, type McpProviderPlugin, type OrganizationHostingInput, type OrganizationHostingResult, type OrganizationStorageInput, type OrganizationStorageResult, PlatformConfig, PlatformConfigInput, PlatformWorkerEnvContext, type StoragePlugin, definePlatformConfig };