@keystrokehq/platform 0.1.147 → 0.1.148

package/dist/{config-C6cH3hkY.d.cts → config-5iRrZjyK.d.cts}

@@ -4,6 +4,224 @@ import { OrganizationRow, OrganizationUserRole, ProjectRow } from "@keystrokehq/
 import { Context, MiddlewareHandler } from "hono";
 import { McpProviderPlugin, McpProviderPlugin as McpProviderPlugin$1 } from "@keystrokehq/http";
 
+//#region ../../packages/shared/dist/tool-result-content-CLQY8ta0.d.mts
+declare const StoredRouteManifestSchema: z.ZodObject<{
+  version: z.ZodLiteral<2>;
+  entries: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"health">;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"agent">;
+    slug: z.ZodString;
+    moduleFile: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    model: z.ZodString;
+    compactionModel: z.ZodOptional<z.ZodString>;
+    systemPrompt: z.ZodString;
+    toolCount: z.ZodNumber;
+    credentialCount: z.ZodNumber;
+    appSlugs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    toolSlugs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    toolRequirements: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+      key: z.ZodString;
+      kind: z.ZodEnum<{
+        api_key: "api_key";
+        oauth_managed: "oauth_managed";
+        keystroke: "keystroke";
+      }>;
+      scope: z.ZodOptional<z.ZodEnum<{
+        organization: "organization";
+        project: "project";
+        user: "user";
+      }>>;
+    }, z.core.$strip>>>>;
+    sandboxRequirements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      key: z.ZodString;
+      kind: z.ZodEnum<{
+        api_key: "api_key";
+        oauth_managed: "oauth_managed";
+        keystroke: "keystroke";
+      }>;
+      scope: z.ZodOptional<z.ZodEnum<{
+        organization: "organization";
+        project: "project";
+        user: "user";
+      }>>;
+    }, z.core.$strip>>>;
+    sandboxSetup: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"action">;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    moduleFile: z.ZodString;
+    appSlug: z.ZodOptional<z.ZodString>;
+    inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    outputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    requirements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      key: z.ZodString;
+      kind: z.ZodEnum<{
+        api_key: "api_key";
+        oauth_managed: "oauth_managed";
+        keystroke: "keystroke";
+      }>;
+      scope: z.ZodOptional<z.ZodEnum<{
+        organization: "organization";
+        project: "project";
+        user: "user";
+      }>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"workflow">;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    subscribable: z.ZodBoolean;
+    moduleFile: z.ZodString;
+    requestSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    responseSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    flowGraph: z.ZodOptional<z.ZodObject<{
+      nodes: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        nodeType: z.ZodEnum<{
+          error: "error";
+          entry: "entry";
+          exit: "exit";
+          step: "step";
+          "code-block": "code-block";
+          decision: "decision";
+          merge: "merge";
+          loop: "loop";
+          parallel: "parallel";
+          "loop-start": "loop-start";
+          "trigger-source": "trigger-source";
+        }>;
+        data: z.ZodObject<{
+          label: z.ZodString;
+          groupKind: z.ZodOptional<z.ZodEnum<{
+            loop: "loop";
+            parallel: "parallel";
+            conditional: "conditional";
+          }>>;
+          description: z.ZodOptional<z.ZodString>;
+          callKind: z.ZodOptional<z.ZodString>;
+          appSlug: z.ZodOptional<z.ZodString>;
+          triggerType: z.ZodOptional<z.ZodString>;
+          outputs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+          }, z.core.$strip>>>;
+          slug: z.ZodOptional<z.ZodString>;
+          containedCallSiteIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+          inputBindings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            tokens: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+              kind: z.ZodLiteral<"text">;
+              text: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+              kind: z.ZodLiteral<"reference">;
+              sourceNodeId: z.ZodOptional<z.ZodString>;
+              field: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+              kind: z.ZodLiteral<"variable">;
+              text: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+              kind: z.ZodLiteral<"call">;
+              name: z.ZodString;
+            }, z.core.$strip>], "kind">>;
+            multiline: z.ZodOptional<z.ZodBoolean>;
+          }, z.core.$strip>>>;
+          llmOptions: z.ZodOptional<z.ZodObject<{
+            model: z.ZodOptional<z.ZodString>;
+            maxTokens: z.ZodOptional<z.ZodNumber>;
+            temperature: z.ZodOptional<z.ZodNumber>;
+            thinkingLevel: z.ZodOptional<z.ZodString>;
+            hasSystemPrompt: z.ZodOptional<z.ZodBoolean>;
+            hasOutputSchema: z.ZodOptional<z.ZodBoolean>;
+          }, z.core.$strip>>;
+        }, z.core.$strip>;
+        parentId: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>>;
+      edges: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodString;
+        target: z.ZodString;
+        type: z.ZodOptional<z.ZodString>;
+        label: z.ZodOptional<z.ZodString>;
+        sourceHandle: z.ZodOptional<z.ZodString>;
+        targetHandle: z.ZodOptional<z.ZodString>;
+        data: z.ZodOptional<z.ZodObject<{
+          branchKind: z.ZodOptional<z.ZodEnum<{
+            error: "error";
+            then: "then";
+            else: "else";
+            "parallel-branch": "parallel-branch";
+          }>>;
+        }, z.core.$strip>>;
+      }, z.core.$strip>>;
+      constants: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+    }, z.core.$strip>>;
+    flowGraphSourceHash: z.ZodOptional<z.ZodString>;
+    flowGraphHash: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"trigger-webhook">;
+    endpoint: z.ZodString;
+    attachmentIds: z.ZodArray<z.ZodString>;
+    moduleFile: z.ZodString;
+    sourceHash: z.ZodOptional<z.ZodString>;
+    attachmentSchemas: z.ZodRecord<z.ZodString, z.ZodObject<{
+      requestSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+      filterSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    attachmentMeta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+      name: z.ZodString;
+      description: z.ZodString;
+    }, z.core.$strip>>>;
+    attachmentModuleFiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"trigger-poll">;
+    attachmentId: z.ZodString;
+    attachmentIds: z.ZodArray<z.ZodString>;
+    moduleFile: z.ZodString;
+    sourceHash: z.ZodOptional<z.ZodString>;
+    schedule: z.ZodString;
+    timezone: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    description: z.ZodString;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"trigger-poll-group">;
+    pollId: z.ZodString;
+    attachmentIds: z.ZodArray<z.ZodString>;
+    moduleFile: z.ZodString;
+    schedule: z.ZodString;
+    timezone: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"cron-schedule">;
+    attachmentId: z.ZodString;
+    attachmentIds: z.ZodArray<z.ZodString>;
+    moduleFile: z.ZodString;
+    sourceHash: z.ZodOptional<z.ZodString>;
+    schedule: z.ZodString;
+    timezone: z.ZodOptional<z.ZodString>;
+    payload: z.ZodOptional<z.ZodUnknown>;
+    name: z.ZodString;
+    description: z.ZodString;
+  }, z.core.$strip>], "kind">>;
+  skills: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    moduleFile: z.ZodString;
+  }, z.core.$strip>>>;
+  integrations: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+type StoredRouteManifest = z.infer<typeof StoredRouteManifestSchema>;
+/**
+ * Parse a stored route manifest. Only the strict v2 schema is supported: the
+ * builder always emits v2 and every deploy regenerates the manifest, so there is
+ * no legacy upcasting. (The pre-v2 `normalizeEntryToV2` path was removed once the
+ * data tables were truncated and all artifacts redeployed.)
+ */
+//#endregion
 //#region ../../packages/shared/dist/index.d.mts
 declare const PrepareManagedDeployRequestSchema: z.ZodObject<{
   mainSha: z.ZodString;
@@ -254,6 +472,59 @@ declare const ProjectFileSummarySchema: z.ZodObject<{
 type ProjectFileSummary = z.infer<typeof ProjectFileSummarySchema>;
 /** Maps a runtime resource slug (agent/workflow/skill) to its source file path. */
 //#endregion
+//#region src/schemas/agent-env-image.d.ts
+declare const AgentEnvImageSnapshotResponseSchema: z.ZodObject<{
+  agentSlug: z.ZodString;
+  setupHash: z.ZodString;
+  status: z.ZodEnum<{
+    queued: "queued";
+    failed: "failed";
+    ready: "ready";
+    building: "building";
+  }>;
+  modalImageId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  lastError: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+type AgentEnvImageSnapshotResponse = z.infer<typeof AgentEnvImageSnapshotResponseSchema>; //#endregion
+//#region src/schemas/workflow-canvas.d.ts
+/**
+ * Structural workflow-canvas graph contract.
+ *
+ * This is the deterministic skeleton the deploy-time AST producer emits for a
+ * workflow (nodes + edges), plus the manifest-derived trigger-source nodes. It
+ * is the single source of truth shared by:
+ * - the AST producer (emits it at deploy, stored with the manifest),
+ * - the platform route that serves the canvas, and
+ * - the SDK / web client that renders it (React Flow).
+ *
+ * Only the structural skeleton lives here. The LLM enrichment + run-overlay
+ * envelope types live in `workflow-canvas-envelope.ts`; the SDK re-exports them.
+ * See WORKFLOW.md (§4 grammar, §8 node ids, §9 caching).
+ */
+/**
+ * Canvas node taxonomy — the single discriminator for every canvas node. The
+ * client derives the React Flow component, icon, and per-node treatment from it
+ * (no parallel `type` / `data.kind` fields), and the producer + fixtures emit it
+ * directly, so the structural contract can never silently diverge across the
+ * deploy → render boundary.
+ * - Boundaries: `entry` (Start, owns input) · `exit` (Output, owns output) ·
+ *   `error` (a terminal `throw` — an error output that ends the run on a branch)
+ * - Callable: `step` (action / agent / llm / hook / child-workflow invocation) —
+ *   the invocation flavor lives in {@link WorkflowCanvasCallKind}
+ * - Structural control flow: `code-block` · `decision` · `merge` · `loop` ·
+ *   `parallel` (group containers) · `loop-start` (the group body's entry marker,
+ *   shared by loop + parallel)
+ * - Upstream of entry: `trigger-source` (one per manifest trigger attachment)
+ *
+ * `Promise.all([...])` is modeled as a `parallel` group container: the branches
+ * are stacked inside and the container itself is the single prong leaving the
+ * wrapper (there is no separate fork/join pair).
+ *
+ * `exit` and `error` are both terminals: a `return` flows to the shared `exit`
+ * (the workflow output), while a `throw` gets its own `error` terminal off the
+ * branch so guard clauses (`if (bad) throw …`) read as a visible dead-end.
+ */
+//#endregion
 //#region src/types/org-rate-limit.d.ts
 /** Scope for per-org API rate limits (separate token buckets). */
 type OrgRateLimitScope = "api" | "mcp";
@@ -270,9 +541,9 @@ type OrgRateLimitResult = {
 type OrgRateLimit = (scope: OrgRateLimitScope, organizationId: string) => Promise<OrgRateLimitResult>; //#endregion
 //#region src/types/openapi.d.ts
 //#endregion
-//#region ../../packages/scheduler/dist/contract-DUoMR12k.d.mts
+//#region ../../packages/scheduler/dist/contract-BKZC5l8b.d.mts
 //#region src/types.d.ts
-type JobKind = "workflow" | "agent" | "trigger" | "trigger-overview" | "workflow-canvas-annotations" | "workflow-overview" | "runtime" | "maintenance" | "platform-agent" | "image-rollout" | "wake" | "sleep";
+type JobKind = "workflow" | "agent" | "trigger" | "trigger-overview" | "workflow-canvas-annotations" | "workflow-overview" | "runtime" | "maintenance" | "platform-agent" | "image-rollout" | "project-agent-sandbox-grace" | "project-agent-env-image" | "wake" | "sleep";
 type JobTrigger = "api" | "cron" | "webhook" | "poll" | "retry" | "prompt";
 /**
  * Identifies a run that dispatched this job as a child. The parent metadata
@@ -877,6 +1148,23 @@ type DraftCommandRunnerPlugin = {
     commitSha?: string;
   }>;
 };
+/**
+ * Persistent agent `/workspace/agent` listing for the dashboard.
+ * Cloud injects Modal Volume listing; OSS falls back to org agent object storage.
+ */
+type AgentWorkspaceFilesPlugin = {
+  listFiles(input: {
+    organizationId: string;
+    agentId: string;
+  }): Promise<{
+    paths: string[];
+  }>;
+  getFileContent(input: {
+    organizationId: string;
+    agentId: string;
+    path: string;
+  }): Promise<Uint8Array>;
+};
 type PlatformWorkerEnvContext = {
   platformUrl: string; /** Per-org worker token for the org being launched. */
   workerToken: string;
@@ -903,6 +1191,11 @@ type PlatformConfigInput = {
    * (OSS / local without `SPRITES_TOKEN`).
    */
   draftCommandRunner?: DraftCommandRunnerPlugin;
+  /**
+   * Agent workspace file listing for the dashboard File system tab.
+   * Cloud injects Modal Volume access; omit to use org agent object storage.
+   */
+  agentWorkspaceFiles?: AgentWorkspaceFilesPlugin;
   /**
    * Transient draft tip fan-out for SSE. Defaults to an in-process notifier
    * (OSS / single replica). Cloud injects a Redis-backed implementation when
@@ -922,6 +1215,43 @@ type PlatformConfigInput = {
    * Unset (standalone default) means such jobs are ignored.
    */
   imageRolloutJobHandler?: (payload: JobPayload) => Promise<void>;
+  /**
+   * Handler for `project-agent-sandbox-grace` jobs (Modal project-agent dispose grace).
+   * Unset (standalone default) means such jobs are ignored.
+   */
+  projectAgentSandboxGraceJobHandler?: (payload: JobPayload) => Promise<void>;
+  /**
+   * Handler for `project-agent-env-image` jobs (org-scoped Modal env Image builds).
+   * Unset (standalone default) means such jobs are ignored.
+   */
+  projectAgentEnvImageJobHandler?: (payload: JobPayload) => Promise<void>;
+  /**
+   * After a project deploy promotes, enqueue env Image builds from the manifest.
+   * Cloud sets this when Redis + Modal are available.
+   */
+  afterPromoteProjectDeploy?: (input: {
+    organizationId: string;
+    projectId: string;
+    artifactId: string;
+    manifest: StoredRouteManifest;
+  }) => Promise<void>;
+  /**
+   * Snapshot / enqueue an org-scoped env Image for an agent's `sandboxSetup`.
+   * Cloud sets this when Redis is available.
+   */
+  snapshotAgentEnvImage?: (input: {
+    organizationId: string;
+    projectId: string;
+    agentSlug: string;
+  }) => Promise<{
+    ok: true;
+    body: AgentEnvImageSnapshotResponse;
+    httpStatus?: number;
+  } | {
+    ok: false;
+    error: string;
+    httpStatus: number;
+  }>;
   /**
    * Cloud-only platform-agent (Build tab) plugin: mounts organization routes and
    * handles `platform-agent` jobs on the shared platform queue.
@@ -962,5 +1292,5 @@ type PlatformConfig = PlatformConfigInput & {
 };
 declare function definePlatformConfig(config?: PlatformConfigInput): PlatformConfig;
 //#endregion
-export { HeartbeatManagedDeployResponse as A, SessionVariables as C, CompleteManagedDeployArtifactResponse as D, CompleteManagedDeployArtifactRequest as E, PublishManagedDeployCandidateResponse as F, RenewManagedDeployUploadRequest as I, RenewManagedDeployUploadResponse as L, PrepareManagedDeployResponse as M, ProjectFileSummary as N, CreateDraftCommitRequest as O, PublishManagedDeployCandidateRequest as P, OrganizationVariables as S, CancelManagedDeployResponse as T, StoragePlugin as _, PlatformWorkerEnvContext as a, OrganizationHostingInput as b, createInProcessProjectDraftNotifier as c, LlmProxyPlugin as d, LlmProxyWorkerEnvContext as f, OrganizationStorageResult as g, OrganizationStorageInput as h, PlatformConfigInput as i, PrepareManagedDeployRequest as j, HeartbeatManagedDeployRequest as k, publishDraftUpdateBestEffort as l, ProjectGitRepository as m, McpProviderPlugin$1 as n, definePlatformConfig as o, ProjectGitProviderPlugin as p, PlatformConfig as r, ProjectDraftNotifier as s, DraftCommandRunnerPlugin as t, LlmProxyHandlerContext as u, HostingOptions as v, CancelManagedDeployRequest as w, OrganizationHostingResult as x, HostingPlugin as y };
-//# sourceMappingURL=config-C6cH3hkY.d.cts.map
+export { HeartbeatManagedDeployRequest as A, OrganizationVariables as C, CompleteManagedDeployArtifactRequest as D, CancelManagedDeployResponse as E, PublishManagedDeployCandidateRequest as F, PublishManagedDeployCandidateResponse as I, RenewManagedDeployUploadRequest as L, PrepareManagedDeployRequest as M, PrepareManagedDeployResponse as N, CompleteManagedDeployArtifactResponse as O, ProjectFileSummary as P, RenewManagedDeployUploadResponse as R, OrganizationHostingResult as S, CancelManagedDeployRequest as T, OrganizationStorageResult as _, PlatformConfigInput as a, HostingPlugin as b, ProjectDraftNotifier as c, LlmProxyHandlerContext as d, LlmProxyPlugin as f, OrganizationStorageInput as g, ProjectGitRepository as h, PlatformConfig as i, HeartbeatManagedDeployResponse as j, CreateDraftCommitRequest as k, createInProcessProjectDraftNotifier as l, ProjectGitProviderPlugin as m, DraftCommandRunnerPlugin as n, PlatformWorkerEnvContext as o, LlmProxyWorkerEnvContext as p, McpProviderPlugin$1 as r, definePlatformConfig as s, AgentWorkspaceFilesPlugin as t, publishDraftUpdateBestEffort as u, StoragePlugin as v, SessionVariables as w, OrganizationHostingInput as x, HostingOptions as y };
+//# sourceMappingURL=config-5iRrZjyK.d.cts.map

package/dist/{config-fUE8OVTA.cjs → config-6EMCmxRX.cjs}

@@ -1,5 +1,5 @@
-const require_dist = require("./dist-dqKnzRlA.cjs");
-const require_project_draft_notifier = require("./project-draft-notifier--S1bLicx.cjs");
+const require_dist = require("./dist-DWmnC5I9.cjs");
+const require_project_draft_notifier = require("./project-draft-notifier-CHPg2j-8.cjs");
 let node_fs_promises = require("node:fs/promises");
 //#region ../../packages/hosting/dist/docker.mjs
 const MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? "keystroke";
@@ -162,4 +162,4 @@ Object.defineProperty(exports, "definePlatformConfig", {
 	}
 });
 
-//# sourceMappingURL=config-fUE8OVTA.cjs.map
+//# sourceMappingURL=config-6EMCmxRX.cjs.map

package/dist/config-6EMCmxRX.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-6EMCmxRX.cjs","names":["resolveRuntimeLaunch","formatDockerEnv","waitForHealth","resolveWorkerRuntimeConfig","minioStoragePlugin","defaultSchedulerPlugin","createInProcessProjectDraftNotifier"],"sources":["../../../packages/hosting/dist/docker.mjs","../src/config.ts"],"sourcesContent":["import { a as formatDockerEnv, c as resolveRuntimeLaunch, h as resolveWorkerRuntimeConfig, t as waitForHealth } from \"./wait-for-health-CgCfteR7.mjs\";\nimport { mkdir } from \"node:fs/promises\";\n//#region src/docker/create-docker-runtime.ts\nconst MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? \"keystroke\";\nasync function resolveDocker(options) {\n\tif (options.docker) return options.docker;\n\tconst { default: DockerCtor } = await import(\"dockerode\");\n\treturn new DockerCtor();\n}\nfunction createDockerRuntime(options = {}) {\n\treturn {\n\t\tasync start(input) {\n\t\t\tif (input.projects.length === 0) throw new Error(\"Docker org runtime requires at least one project deploy\");\n\t\t\tconst docker = await resolveDocker(options);\n\t\t\tlet launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({\n\t\t\t\tprojectId: project.projectId,\n\t\t\t\tartifactStorageKey: project.artifactStorageKey,\n\t\t\t\tartifactId: project.artifactId,\n\t\t\t\tartifactVersion: project.artifactVersion\n\t\t\t})), input.database, input.env);\n\t\t\tif (options.workspacesMount) {\n\t\t\t\tconst { hostPath, containerPath } = options.workspacesMount;\n\t\t\t\tawait mkdir(hostPath, { recursive: true });\n\t\t\t\tlaunch = {\n\t\t\t\t\t...launch,\n\t\t\t\t\tenv: {\n\t\t\t\t\t\t...launch.env,\n\t\t\t\t\t\tKEYSTROKE_WORKSPACES_ROOT: containerPath\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t}\n\t\t\tawait ensureImage(docker, launch.image);\n\t\t\tawait removeExistingContainer(docker, input.organizationId);\n\t\t\tconst binds = [...options.workspacesMount ? [`${options.workspacesMount.hostPath}:${options.workspacesMount.containerPath}`] : [], ...options.extraBinds ?? []];\n\t\t\tconst container = await docker.createContainer({\n\t\t\t\tImage: launch.image,\n\t\t\t\tname: containerName(input.organizationId),\n\t\t\t\tLabels: {\n\t\t\t\t\t\"keystroke.organization.id\": input.organizationId,\n\t\t\t\t\t\"keystroke.project.ids\": input.projects.map((project) => project.projectId).join(\",\")\n\t\t\t\t},\n\t\t\t\tExposedPorts: { [`${launch.port}/tcp`]: {} },\n\t\t\t\tHostConfig: {\n\t\t\t\t\tExtraHosts: [\"host.docker.internal:host-gateway\"],\n\t\t\t\t\tPortBindings: { [`${launch.port}/tcp`]: [{ HostPort: \"0\" }] },\n\t\t\t\t\t...binds.length > 0 ? { Binds: binds } : {}\n\t\t\t\t},\n\t\t\t\tNetworkingConfig: { EndpointsConfig: { [MINIO_DOCKER_NETWORK]: {} } },\n\t\t\t\tEnv: formatDockerEnv(launch.env)\n\t\t\t});\n\t\t\tawait container.start();\n\t\t\tconst inspect = await container.inspect();\n\t\t\tconst binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];\n\t\t\tif (!binding?.HostPort) throw new Error(\"Failed to resolve org container host port\");\n\t\t\tconst baseUrl = `http://127.0.0.1:${binding.HostPort}`;\n\t\t\tawait waitForHealth(baseUrl, {\n\t\t\t\tfetchImpl: options.fetchImpl,\n\t\t\t\ttimeoutMs: options.healthTimeoutMs\n\t\t\t});\n\t\t\treturn {\n\t\t\t\truntimeId: inspect.Id,\n\t\t\t\tbaseUrl\n\t\t\t};\n\t\t},\n\t\tasync destroy(input) {\n\t\t\ttry {\n\t\t\t\tawait (await resolveDocker(options)).getContainer(input.runtimeId).remove({ force: true });\n\t\t\t} catch {}\n\t\t},\n\t\tasync sleep(input) {\n\t\t\tconst container = (await resolveDocker(options)).getContainer(input.runtimeId);\n\t\t\tconst inspect = await container.inspect().catch(() => null);\n\t\t\tif (!inspect) return;\n\t\t\tif (inspect.State.Running) await container.stop({ t: 10 });\n\t\t},\n\t\tasync wake(input) {\n\t\t\tconst container = (await resolveDocker(options)).getContainer(input.runtimeId);\n\t\t\tif (!(await container.inspect()).State.Running) await container.start();\n\t\t\tconst refreshed = await container.inspect();\n\t\t\tconst ports = refreshed.NetworkSettings.Ports ?? {};\n\t\t\tconst binding = Object.values(ports).flat().find((entry) => entry?.HostPort)?.HostPort;\n\t\t\tif (!binding) throw new Error(`Failed to resolve host port for container ${input.runtimeId}`);\n\t\t\tconst baseUrl = `http://127.0.0.1:${binding}`;\n\t\t\tawait waitForHealth(baseUrl, {\n\t\t\t\tfetchImpl: options.fetchImpl,\n\t\t\t\ttimeoutMs: options.healthTimeoutMs\n\t\t\t});\n\t\t\treturn {\n\t\t\t\truntimeId: refreshed.Id,\n\t\t\t\tbaseUrl\n\t\t\t};\n\t\t}\n\t};\n}\nfunction containerName(organizationId) {\n\treturn `keystroke-org-${organizationId}`;\n}\nasync function removeExistingContainer(docker, organizationId) {\n\ttry {\n\t\tconst existing = docker.getContainer(containerName(organizationId));\n\t\tawait existing.stop({ t: 5 }).catch(() => void 0);\n\t\tawait existing.remove({ force: true });\n\t} catch {}\n}\nasync function ensureImage(docker, image) {\n\ttry {\n\t\tawait docker.getImage(image).inspect();\n\t\treturn;\n\t} catch {}\n\tawait new Promise((resolvePromise, reject) => {\n\t\tdocker.pull(image, (error, stream) => {\n\t\t\tif (error) {\n\t\t\t\treject(error);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (!stream) {\n\t\t\t\treject(/* @__PURE__ */ new Error(`Failed to pull image ${image}`));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tdocker.modem.followProgress(stream, (progressError) => {\n\t\t\t\tif (progressError) {\n\t\t\t\t\treject(progressError);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tresolvePromise();\n\t\t\t});\n\t\t});\n\t});\n}\n//#endregion\n//#region src/docker/plugin.ts\nfunction dockerPlugin(options = {}) {\n\tconst env = options.env ?? process.env;\n\treturn {\n\t\tname: \"docker\",\n\t\tworkerRuntime: resolveWorkerRuntimeConfig(env),\n\t\tcreateRuntime: () => createDockerRuntime({\n\t\t\t...options,\n\t\t\tenv\n\t\t})\n\t};\n}\n//#endregion\n//#region src/default-plugin.ts\n/** Local Docker hosting — default for platform and dev. */\nfunction defaultHostingPlugin(options = {}) {\n\treturn dockerPlugin(options);\n}\n//#endregion\nexport { defaultHostingPlugin, dockerPlugin };\n\n//# sourceMappingURL=docker.mjs.map","import type { HostingPlugin } from \"@keystrokehq/hosting\";\nimport { defaultHostingPlugin } from \"@keystrokehq/hosting/docker\";\nimport {\n  defaultSchedulerPlugin,\n  type JobPayload,\n  type SchedulerPlugin,\n} from \"@keystrokehq/scheduler\";\nimport { minioStoragePlugin, type StoragePlugin } from \"@keystrokehq/storage\";\nimport type { ProjectGitProviderPlugin } from \"@keystrokehq/project-git\";\n\nimport type { OrgRateLimit } from \"@keystrokehq/shared\";\n\nimport type { LlmProxyPlugin } from \"./llm-proxy-plugin\";\nimport type { McpProviderPlugin } from \"@keystrokehq/http\";\nimport {\n  createInProcessProjectDraftNotifier,\n  type ProjectDraftNotifier,\n} from \"./services/project-draft-notifier\";\n\nexport type {\n  HostingOptions,\n  HostingPlugin,\n  OrganizationHostingInput,\n  OrganizationHostingResult,\n} from \"@keystrokehq/hosting\";\n\nexport type {\n  OrganizationStorageInput,\n  OrganizationStorageResult,\n  StoragePlugin,\n} from \"@keystrokehq/storage\";\n\nexport type {\n  LlmProxyHandlerContext,\n  LlmProxyPlugin,\n  LlmProxyWorkerEnvContext,\n} from \"./llm-proxy-plugin\";\n\nexport type { McpProviderPlugin } from \"@keystrokehq/http\";\n\nexport type { ProjectGitProviderPlugin } from \"@keystrokehq/project-git\";\n\nexport type { ProjectDraftNotifier } from \"./services/project-draft-notifier\";\nexport {\n  createInProcessProjectDraftNotifier,\n  publishDraftUpdateBestEffort,\n} from \"./services/project-draft-notifier\";\n\n/**\n * Run-scoped disposable Sprite draft command runner. Cloud injects an\n * implementation backed by `@keystroke-cloud/sprites`; OSS omits it.\n * MCP and platform-agent call this later — public platform never imports cloud.\n */\nexport type DraftCommandRunnerPlugin = {\n  run(input: {\n    remote: { url: string; username: string; password: string };\n    commitSha: string;\n    command: string;\n    /**\n     * Optional working directory relative to the disposable checkout root.\n     * Traversal outside the checkout is rejected by the runner.\n     */\n    cwd?: string;\n    /**\n     * Extra env for the caller command only (after credentials are stripped).\n     * Must not be used to restore Git remotes or askpass secrets — the runner\n     * always clears credential channels around the command.\n     */\n    env?: Record<string, string>;\n    timeoutMs?: number;\n    maxOutputBytes?: number;\n    signal?: AbortSignal;\n    spriteName?: string;\n    commitDiff?: (diff: Uint8Array) => Promise<{ commitSha: string }>;\n  }): Promise<{\n    spriteName: string;\n    exitCode: number;\n    output: string;\n    truncated: boolean;\n    diff: Uint8Array;\n    commitSha?: string;\n  }>;\n};\n\n/**\n * Persistent agent `/workspace/agent` listing for the dashboard.\n * Cloud injects Modal Volume listing; OSS falls back to org agent object storage.\n */\nexport type AgentWorkspaceFilesPlugin = {\n  listFiles(input: { organizationId: string; agentId: string }): Promise<{ paths: string[] }>;\n  getFileContent(input: {\n    organizationId: string;\n    agentId: string;\n    path: string;\n  }): Promise<Uint8Array>;\n};\n\nexport type PlatformWorkerEnvContext = {\n  platformUrl: string;\n  /** Per-org worker token for the org being launched. */\n  workerToken: string;\n};\n\nexport type PlatformConfigInput = {\n  /** Defaults to Docker via {@link defaultHostingPlugin}. */\n  hosting?: HostingPlugin;\n  /**\n   * Per-org object storage. Defaults to {@link minioStoragePlugin} (S3 API against local MinIO).\n   * MinIO is the dev default, not AWS S3 — same `@aws-sdk/client-s3` client works for any S3-compatible\n   * backend; hosted platform swaps in a cloud plugin (e.g. Tigris).\n   */\n  storage?: StoragePlugin;\n  /**\n   * Managed LLM gateway proxy. Omit for BYO provider keys or a direct gateway URL on the platform env.\n   */\n  llmProxy?: LlmProxyPlugin;\n  /** Managed universal MCP plugin. Omit when self-hosting without a provider. */\n  mcp?: McpProviderPlugin;\n  /**\n   * Managed project Git provider. Omit for standalone/local mode without Keystroke-managed repos.\n   */\n  projectGit?: ProjectGitProviderPlugin;\n  /**\n   * Disposable Sprite draft command runner. Omit when Sprites are unavailable\n   * (OSS / local without `SPRITES_TOKEN`).\n   */\n  draftCommandRunner?: DraftCommandRunnerPlugin;\n  /**\n   * Agent workspace file listing for the dashboard File system tab.\n   * Cloud injects Modal Volume access; omit to use org agent object storage.\n   */\n  agentWorkspaceFiles?: AgentWorkspaceFilesPlugin;\n  /**\n   * Transient draft tip fan-out for SSE. Defaults to an in-process notifier\n   * (OSS / single replica). Cloud injects a Redis-backed implementation when\n   * Redis is available so multi-replica platforms share updates.\n   */\n  draftNotifier?: ProjectDraftNotifier;\n  /** Queue backend for platform runtime routes. Defaults to pg-boss (Postgres) or DB polling (SQLite). */\n  scheduler?: SchedulerPlugin;\n  /** Extra env merged into project worker containers at deploy (cloud hosting plugins). */\n  workerEnv?: (ctx: PlatformWorkerEnvContext) => Record<string, string>;\n  /**\n   * Handler for `maintenance` jobs on the platform queue (cloud injects the\n   * billing daily pass). Unset (standalone default) means such jobs — which\n   * only cloud schedules — are ignored.\n   */\n  maintenanceHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Handler for `image-rollout` jobs on the platform queue (cloud Fly fleet).\n   * Unset (standalone default) means such jobs are ignored.\n   */\n  imageRolloutJobHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Handler for `project-agent-sandbox-grace` jobs (Modal project-agent dispose grace).\n   * Unset (standalone default) means such jobs are ignored.\n   */\n  projectAgentSandboxGraceJobHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Handler for `project-agent-env-image` jobs (org-scoped Modal env Image builds).\n   * Unset (standalone default) means such jobs are ignored.\n   */\n  projectAgentEnvImageJobHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * After a project deploy promotes, enqueue env Image builds from the manifest.\n   * Cloud sets this when Redis + Modal are available.\n   */\n  afterPromoteProjectDeploy?: (input: {\n    organizationId: string;\n    projectId: string;\n    artifactId: string;\n    manifest: import(\"@keystrokehq/shared\").StoredRouteManifest;\n  }) => Promise<void>;\n  /**\n   * Snapshot / enqueue an org-scoped env Image for an agent's `sandboxSetup`.\n   * Cloud sets this when Redis is available.\n   */\n  snapshotAgentEnvImage?: (input: {\n    organizationId: string;\n    projectId: string;\n    agentSlug: string;\n  }) => Promise<\n    | {\n        ok: true;\n        body: import(\"@keystrokehq/shared\").AgentEnvImageSnapshotResponse;\n        httpStatus?: number;\n      }\n    | { ok: false; error: string; httpStatus: number }\n  >;\n  /**\n   * Cloud-only platform-agent (Build tab) plugin: mounts organization routes and\n   * handles `platform-agent` jobs on the shared platform queue.\n   */\n  platformAgent?: {\n    mountOrgRoutes: (\n      orgScoped: import(\"hono\").Hono<{\n        Variables: import(\"@keystrokehq/http/auth\").OrganizationVariables;\n      }>,\n    ) => void;\n    handleJob: (payload: JobPayload) => Promise<void>;\n    onCancel?: (runId: string) => void;\n  };\n  /**\n   * Pre-enqueue credit check for interactive agent prompts / workflow runs\n   * (cloud injects the billing wallet check). Unset = never blocked.\n   */\n  promptCreditGate?: (\n    organizationId: string,\n  ) => Promise<{ allow: true } | { allow: false; reason: string }>;\n  /**\n   * Max-projects check for `POST /projects` (cloud injects plan quota).\n   * Unset = unlimited (standalone / OSS).\n   */\n  projectQuotaGate?: (\n    organizationId: string,\n  ) => Promise<{ allow: true } | { allow: false; reason: string }>;\n  /** Per-org API/MCP rate limits (cloud injects Redis token bucket). Unset = unlimited. */\n  orgRateLimit?: OrgRateLimit;\n};\n\nexport type PlatformConfig = PlatformConfigInput & {\n  hosting: HostingPlugin;\n  storage: StoragePlugin;\n  scheduler: SchedulerPlugin;\n};\n\nexport function definePlatformConfig(config: PlatformConfigInput = {}): PlatformConfig {\n  return {\n    ...config,\n    hosting: config.hosting ?? defaultHostingPlugin(),\n    storage: config.storage ?? minioStoragePlugin(),\n    scheduler: config.scheduler ?? defaultSchedulerPlugin(),\n    draftNotifier: config.draftNotifier ?? createInProcessProjectDraftNotifier(),\n  };\n}\n"],"mappings":";;;;AAGA,MAAM,uBAAuB,QAAQ,IAAI,wBAAwB;AACjE,eAAe,cAAc,SAAS;CACrC,IAAI,QAAQ,QAAQ,OAAO,QAAQ;CACnC,MAAM,EAAE,SAAS,eAAe,MAAM,OAAO;CAC7C,OAAO,IAAI,WAAW;AACvB;AACA,SAAS,oBAAoB,UAAU,CAAC,GAAG;CAC1C,OAAO;EACN,MAAM,MAAM,OAAO;GAClB,IAAI,MAAM,SAAS,WAAW,GAAG,MAAM,IAAI,MAAM,yDAAyD;GAC1G,MAAM,SAAS,MAAM,cAAc,OAAO;GAC1C,IAAI,SAASA,+BAAAA,qBAAqB,SAAS,MAAM,SAAS,KAAK,aAAa;IAC3E,WAAW,QAAQ;IACnB,oBAAoB,QAAQ;IAC5B,YAAY,QAAQ;IACpB,iBAAiB,QAAQ;GAC1B,EAAE,GAAG,MAAM,UAAU,MAAM,GAAG;GAC9B,IAAI,QAAQ,iBAAiB;IAC5B,MAAM,EAAE,UAAU,kBAAkB,QAAQ;IAC5C,OAAA,GAAA,iBAAA,OAAY,UAAU,EAAE,WAAW,KAAK,CAAC;IACzC,SAAS;KACR,GAAG;KACH,KAAK;MACJ,GAAG,OAAO;MACV,2BAA2B;KAC5B;IACD;GACD;GACA,MAAM,YAAY,QAAQ,OAAO,KAAK;GACtC,MAAM,wBAAwB,QAAQ,MAAM,cAAc;GAC1D,MAAM,QAAQ,CAAC,GAAG,QAAQ,kBAAkB,CAAC,GAAG,QAAQ,gBAAgB,SAAS,GAAG,QAAQ,gBAAgB,eAAe,IAAI,CAAC,GAAG,GAAG,QAAQ,cAAc,CAAC,CAAC;GAC9J,MAAM,YAAY,MAAM,OAAO,gBAAgB;IAC9C,OAAO,OAAO;IACd,MAAM,cAAc,MAAM,cAAc;IACxC,QAAQ;KACP,6BAA6B,MAAM;KACnC,yBAAyB,MAAM,SAAS,KAAK,YAAY,QAAQ,SAAS,EAAE,KAAK,GAAG;IACrF;IACA,cAAc,GAAG,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE;IAC3C,YAAY;KACX,YAAY,CAAC,mCAAmC;KAChD,cAAc,GAAG,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE;KAC5D,GAAG,MAAM,SAAS,IAAI,EAAE,OAAO,MAAM,IAAI,CAAC;IAC3C;IACA,kBAAkB,EAAE,iBAAiB,GAAG,uBAAuB,CAAC,EAAE,EAAE;IACpE,KAAKC,+BAAAA,gBAAgB,OAAO,GAAG;GAChC,CAAC;GACD,MAAM,UAAU,MAAM;GACtB,MAAM,UAAU,MAAM,UAAU,QAAQ;GACxC,MAAM,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,OAAO,KAAK,SAAS;GACxE,IAAI,CAAC,SAAS,UAAU,MAAM,IAAI,MAAM,2CAA2C;GACnF,MAAM,UAAU,oBAAoB,QAAQ;GAC5C,MAAMC,+BAAAA,cAAc,SAAS;IAC5B,WAAW,QAAQ;IACnB,WAAW,QAAQ;GACpB,CAAC;GACD,OAAO;IACN,WAAW,QAAQ;IACnB;GACD;EACD;EACA,MAAM,QAAQ,OAAO;GACpB,IAAI;IACH,OAAO,MAAM,cAAc,OAAO,GAAG,aAAa,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC;GAC1F,QAAQ,CAAC;EACV;EACA,MAAM,MAAM,OAAO;GAClB,MAAM,aAAa,MAAM,cAAc,OAAO,GAAG,aAAa,MAAM,SAAS;GAC7E,MAAM,UAAU,MAAM,UAAU,QAAQ,EAAE,YAAY,IAAI;GAC1D,IAAI,CAAC,SAAS;GACd,IAAI,QAAQ,MAAM,SAAS,MAAM,UAAU,KAAK,EAAE,GAAG,GAAG,CAAC;EAC1D;EACA,MAAM,KAAK,OAAO;GACjB,MAAM,aAAa,MAAM,cAAc,OAAO,GAAG,aAAa,MAAM,SAAS;GAC7E,IAAI,EAAE,MAAM,UAAU,QAAQ,GAAG,MAAM,SAAS,MAAM,UAAU,MAAM;GACtE,MAAM,YAAY,MAAM,UAAU,QAAQ;GAC1C,MAAM,QAAQ,UAAU,gBAAgB,SAAS,CAAC;GAClD,MAAM,UAAU,OAAO,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,OAAO,QAAQ,GAAG;GAC9E,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,6CAA6C,MAAM,WAAW;GAC5F,MAAM,UAAU,oBAAoB;GACpC,MAAMA,+BAAAA,cAAc,SAAS;IAC5B,WAAW,QAAQ;IACnB,WAAW,QAAQ;GACpB,CAAC;GACD,OAAO;IACN,WAAW,UAAU;IACrB;GACD;EACD;CACD;AACD;AACA,SAAS,cAAc,gBAAgB;CACtC,OAAO,iBAAiB;AACzB;AACA,eAAe,wBAAwB,QAAQ,gBAAgB;CAC9D,IAAI;EACH,MAAM,WAAW,OAAO,aAAa,cAAc,cAAc,CAAC;EAClE,MAAM,SAAS,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,KAAK,CAAC;EAChD,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,CAAC;CACtC,QAAQ,CAAC;AACV;AACA,eAAe,YAAY,QAAQ,OAAO;CACzC,IAAI;EACH,MAAM,OAAO,SAAS,KAAK,EAAE,QAAQ;EACrC;CACD,QAAQ,CAAC;CACT,MAAM,IAAI,SAAS,gBAAgB,WAAW;EAC7C,OAAO,KAAK,QAAQ,OAAO,WAAW;GACrC,IAAI,OAAO;IACV,OAAO,KAAK;IACZ;GACD;GACA,IAAI,CAAC,QAAQ;IACZ,uBAAuB,IAAI,MAAM,wBAAwB,OAAO,CAAC;IACjE;GACD;GACA,OAAO,MAAM,eAAe,SAAS,kBAAkB;IACtD,IAAI,eAAe;KAClB,OAAO,aAAa;KACpB;IACD;IACA,eAAe;GAChB,CAAC;EACF,CAAC;CACF,CAAC;AACF;AAGA,SAAS,aAAa,UAAU,CAAC,GAAG;CACnC,MAAM,MAAM,QAAQ,OAAO,QAAQ;CACnC,OAAO;EACN,MAAM;EACN,eAAeC,+BAAAA,2BAA2B,GAAG;EAC7C,qBAAqB,oBAAoB;GACxC,GAAG;GACH;EACD,CAAC;CACF;AACD;;AAIA,SAAS,qBAAqB,UAAU,CAAC,GAAG;CAC3C,OAAO,aAAa,OAAO;AAC5B;;;AC+EA,SAAgB,qBAAqB,SAA8B,CAAC,GAAmB;CACrF,OAAO;EACL,GAAG;EACH,SAAS,OAAO,WAAW,qBAAqB;EAChD,SAAS,OAAO,WAAWC,+BAAAA,mBAAmB;EAC9C,WAAW,OAAO,aAAaC,aAAAA,uBAAuB;EACtD,eAAe,OAAO,iBAAiBC,+BAAAA,oCAAoC;CAC7E;AACF"}

package/dist/{config-DAIUglcc.mjs → config-BUnYziJI.mjs}

@@ -1,5 +1,5 @@
-import { t as defaultSchedulerPlugin } from "./dist-BIKIpPhu.mjs";
-import { C as minioStoragePlugin, Ca as resolveRuntimeLaunch, Ea as waitForHealth, t as createInProcessProjectDraftNotifier, wa as resolveWorkerRuntimeConfig, xa as formatDockerEnv } from "./project-draft-notifier-IV-0I5b0.mjs";
+import { t as defaultSchedulerPlugin } from "./dist-DH4cGe05.mjs";
+import { C as minioStoragePlugin, Da as waitForHealth, Sa as formatDockerEnv, Ta as resolveWorkerRuntimeConfig, t as createInProcessProjectDraftNotifier, wa as resolveRuntimeLaunch } from "./project-draft-notifier-CQH0Sf3F.mjs";
 import { mkdir } from "node:fs/promises";
 //#region ../../packages/hosting/dist/docker.mjs
 const MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? "keystroke";
@@ -157,4 +157,4 @@ function definePlatformConfig(config = {}) {
 //#endregion
 export { definePlatformConfig as t };
 
-//# sourceMappingURL=config-DAIUglcc.mjs.map
+//# sourceMappingURL=config-BUnYziJI.mjs.map

package/dist/config-BUnYziJI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-BUnYziJI.mjs","names":[],"sources":["../../../packages/hosting/dist/docker.mjs","../src/config.ts"],"sourcesContent":["import { a as formatDockerEnv, c as resolveRuntimeLaunch, h as resolveWorkerRuntimeConfig, t as waitForHealth } from \"./wait-for-health-CgCfteR7.mjs\";\nimport { mkdir } from \"node:fs/promises\";\n//#region src/docker/create-docker-runtime.ts\nconst MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? \"keystroke\";\nasync function resolveDocker(options) {\n\tif (options.docker) return options.docker;\n\tconst { default: DockerCtor } = await import(\"dockerode\");\n\treturn new DockerCtor();\n}\nfunction createDockerRuntime(options = {}) {\n\treturn {\n\t\tasync start(input) {\n\t\t\tif (input.projects.length === 0) throw new Error(\"Docker org runtime requires at least one project deploy\");\n\t\t\tconst docker = await resolveDocker(options);\n\t\t\tlet launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({\n\t\t\t\tprojectId: project.projectId,\n\t\t\t\tartifactStorageKey: project.artifactStorageKey,\n\t\t\t\tartifactId: project.artifactId,\n\t\t\t\tartifactVersion: project.artifactVersion\n\t\t\t})), input.database, input.env);\n\t\t\tif (options.workspacesMount) {\n\t\t\t\tconst { hostPath, containerPath } = options.workspacesMount;\n\t\t\t\tawait mkdir(hostPath, { recursive: true });\n\t\t\t\tlaunch = {\n\t\t\t\t\t...launch,\n\t\t\t\t\tenv: {\n\t\t\t\t\t\t...launch.env,\n\t\t\t\t\t\tKEYSTROKE_WORKSPACES_ROOT: containerPath\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t}\n\t\t\tawait ensureImage(docker, launch.image);\n\t\t\tawait removeExistingContainer(docker, input.organizationId);\n\t\t\tconst binds = [...options.workspacesMount ? [`${options.workspacesMount.hostPath}:${options.workspacesMount.containerPath}`] : [], ...options.extraBinds ?? []];\n\t\t\tconst container = await docker.createContainer({\n\t\t\t\tImage: launch.image,\n\t\t\t\tname: containerName(input.organizationId),\n\t\t\t\tLabels: {\n\t\t\t\t\t\"keystroke.organization.id\": input.organizationId,\n\t\t\t\t\t\"keystroke.project.ids\": input.projects.map((project) => project.projectId).join(\",\")\n\t\t\t\t},\n\t\t\t\tExposedPorts: { [`${launch.port}/tcp`]: {} },\n\t\t\t\tHostConfig: {\n\t\t\t\t\tExtraHosts: [\"host.docker.internal:host-gateway\"],\n\t\t\t\t\tPortBindings: { [`${launch.port}/tcp`]: [{ HostPort: \"0\" }] },\n\t\t\t\t\t...binds.length > 0 ? { Binds: binds } : {}\n\t\t\t\t},\n\t\t\t\tNetworkingConfig: { EndpointsConfig: { [MINIO_DOCKER_NETWORK]: {} } },\n\t\t\t\tEnv: formatDockerEnv(launch.env)\n\t\t\t});\n\t\t\tawait container.start();\n\t\t\tconst inspect = await container.inspect();\n\t\t\tconst binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];\n\t\t\tif (!binding?.HostPort) throw new Error(\"Failed to resolve org container host port\");\n\t\t\tconst baseUrl = `http://127.0.0.1:${binding.HostPort}`;\n\t\t\tawait waitForHealth(baseUrl, {\n\t\t\t\tfetchImpl: options.fetchImpl,\n\t\t\t\ttimeoutMs: options.healthTimeoutMs\n\t\t\t});\n\t\t\treturn {\n\t\t\t\truntimeId: inspect.Id,\n\t\t\t\tbaseUrl\n\t\t\t};\n\t\t},\n\t\tasync destroy(input) {\n\t\t\ttry {\n\t\t\t\tawait (await resolveDocker(options)).getContainer(input.runtimeId).remove({ force: true });\n\t\t\t} catch {}\n\t\t},\n\t\tasync sleep(input) {\n\t\t\tconst container = (await resolveDocker(options)).getContainer(input.runtimeId);\n\t\t\tconst inspect = await container.inspect().catch(() => null);\n\t\t\tif (!inspect) return;\n\t\t\tif (inspect.State.Running) await container.stop({ t: 10 });\n\t\t},\n\t\tasync wake(input) {\n\t\t\tconst container = (await resolveDocker(options)).getContainer(input.runtimeId);\n\t\t\tif (!(await container.inspect()).State.Running) await container.start();\n\t\t\tconst refreshed = await container.inspect();\n\t\t\tconst ports = refreshed.NetworkSettings.Ports ?? {};\n\t\t\tconst binding = Object.values(ports).flat().find((entry) => entry?.HostPort)?.HostPort;\n\t\t\tif (!binding) throw new Error(`Failed to resolve host port for container ${input.runtimeId}`);\n\t\t\tconst baseUrl = `http://127.0.0.1:${binding}`;\n\t\t\tawait waitForHealth(baseUrl, {\n\t\t\t\tfetchImpl: options.fetchImpl,\n\t\t\t\ttimeoutMs: options.healthTimeoutMs\n\t\t\t});\n\t\t\treturn {\n\t\t\t\truntimeId: refreshed.Id,\n\t\t\t\tbaseUrl\n\t\t\t};\n\t\t}\n\t};\n}\nfunction containerName(organizationId) {\n\treturn `keystroke-org-${organizationId}`;\n}\nasync function removeExistingContainer(docker, organizationId) {\n\ttry {\n\t\tconst existing = docker.getContainer(containerName(organizationId));\n\t\tawait existing.stop({ t: 5 }).catch(() => void 0);\n\t\tawait existing.remove({ force: true });\n\t} catch {}\n}\nasync function ensureImage(docker, image) {\n\ttry {\n\t\tawait docker.getImage(image).inspect();\n\t\treturn;\n\t} catch {}\n\tawait new Promise((resolvePromise, reject) => {\n\t\tdocker.pull(image, (error, stream) => {\n\t\t\tif (error) {\n\t\t\t\treject(error);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (!stream) {\n\t\t\t\treject(/* @__PURE__ */ new Error(`Failed to pull image ${image}`));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tdocker.modem.followProgress(stream, (progressError) => {\n\t\t\t\tif (progressError) {\n\t\t\t\t\treject(progressError);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tresolvePromise();\n\t\t\t});\n\t\t});\n\t});\n}\n//#endregion\n//#region src/docker/plugin.ts\nfunction dockerPlugin(options = {}) {\n\tconst env = options.env ?? process.env;\n\treturn {\n\t\tname: \"docker\",\n\t\tworkerRuntime: resolveWorkerRuntimeConfig(env),\n\t\tcreateRuntime: () => createDockerRuntime({\n\t\t\t...options,\n\t\t\tenv\n\t\t})\n\t};\n}\n//#endregion\n//#region src/default-plugin.ts\n/** Local Docker hosting — default for platform and dev. */\nfunction defaultHostingPlugin(options = {}) {\n\treturn dockerPlugin(options);\n}\n//#endregion\nexport { defaultHostingPlugin, dockerPlugin };\n\n//# sourceMappingURL=docker.mjs.map","import type { HostingPlugin } from \"@keystrokehq/hosting\";\nimport { defaultHostingPlugin } from \"@keystrokehq/hosting/docker\";\nimport {\n  defaultSchedulerPlugin,\n  type JobPayload,\n  type SchedulerPlugin,\n} from \"@keystrokehq/scheduler\";\nimport { minioStoragePlugin, type StoragePlugin } from \"@keystrokehq/storage\";\nimport type { ProjectGitProviderPlugin } from \"@keystrokehq/project-git\";\n\nimport type { OrgRateLimit } from \"@keystrokehq/shared\";\n\nimport type { LlmProxyPlugin } from \"./llm-proxy-plugin\";\nimport type { McpProviderPlugin } from \"@keystrokehq/http\";\nimport {\n  createInProcessProjectDraftNotifier,\n  type ProjectDraftNotifier,\n} from \"./services/project-draft-notifier\";\n\nexport type {\n  HostingOptions,\n  HostingPlugin,\n  OrganizationHostingInput,\n  OrganizationHostingResult,\n} from \"@keystrokehq/hosting\";\n\nexport type {\n  OrganizationStorageInput,\n  OrganizationStorageResult,\n  StoragePlugin,\n} from \"@keystrokehq/storage\";\n\nexport type {\n  LlmProxyHandlerContext,\n  LlmProxyPlugin,\n  LlmProxyWorkerEnvContext,\n} from \"./llm-proxy-plugin\";\n\nexport type { McpProviderPlugin } from \"@keystrokehq/http\";\n\nexport type { ProjectGitProviderPlugin } from \"@keystrokehq/project-git\";\n\nexport type { ProjectDraftNotifier } from \"./services/project-draft-notifier\";\nexport {\n  createInProcessProjectDraftNotifier,\n  publishDraftUpdateBestEffort,\n} from \"./services/project-draft-notifier\";\n\n/**\n * Run-scoped disposable Sprite draft command runner. Cloud injects an\n * implementation backed by `@keystroke-cloud/sprites`; OSS omits it.\n * MCP and platform-agent call this later — public platform never imports cloud.\n */\nexport type DraftCommandRunnerPlugin = {\n  run(input: {\n    remote: { url: string; username: string; password: string };\n    commitSha: string;\n    command: string;\n    /**\n     * Optional working directory relative to the disposable checkout root.\n     * Traversal outside the checkout is rejected by the runner.\n     */\n    cwd?: string;\n    /**\n     * Extra env for the caller command only (after credentials are stripped).\n     * Must not be used to restore Git remotes or askpass secrets — the runner\n     * always clears credential channels around the command.\n     */\n    env?: Record<string, string>;\n    timeoutMs?: number;\n    maxOutputBytes?: number;\n    signal?: AbortSignal;\n    spriteName?: string;\n    commitDiff?: (diff: Uint8Array) => Promise<{ commitSha: string }>;\n  }): Promise<{\n    spriteName: string;\n    exitCode: number;\n    output: string;\n    truncated: boolean;\n    diff: Uint8Array;\n    commitSha?: string;\n  }>;\n};\n\n/**\n * Persistent agent `/workspace/agent` listing for the dashboard.\n * Cloud injects Modal Volume listing; OSS falls back to org agent object storage.\n */\nexport type AgentWorkspaceFilesPlugin = {\n  listFiles(input: { organizationId: string; agentId: string }): Promise<{ paths: string[] }>;\n  getFileContent(input: {\n    organizationId: string;\n    agentId: string;\n    path: string;\n  }): Promise<Uint8Array>;\n};\n\nexport type PlatformWorkerEnvContext = {\n  platformUrl: string;\n  /** Per-org worker token for the org being launched. */\n  workerToken: string;\n};\n\nexport type PlatformConfigInput = {\n  /** Defaults to Docker via {@link defaultHostingPlugin}. */\n  hosting?: HostingPlugin;\n  /**\n   * Per-org object storage. Defaults to {@link minioStoragePlugin} (S3 API against local MinIO).\n   * MinIO is the dev default, not AWS S3 — same `@aws-sdk/client-s3` client works for any S3-compatible\n   * backend; hosted platform swaps in a cloud plugin (e.g. Tigris).\n   */\n  storage?: StoragePlugin;\n  /**\n   * Managed LLM gateway proxy. Omit for BYO provider keys or a direct gateway URL on the platform env.\n   */\n  llmProxy?: LlmProxyPlugin;\n  /** Managed universal MCP plugin. Omit when self-hosting without a provider. */\n  mcp?: McpProviderPlugin;\n  /**\n   * Managed project Git provider. Omit for standalone/local mode without Keystroke-managed repos.\n   */\n  projectGit?: ProjectGitProviderPlugin;\n  /**\n   * Disposable Sprite draft command runner. Omit when Sprites are unavailable\n   * (OSS / local without `SPRITES_TOKEN`).\n   */\n  draftCommandRunner?: DraftCommandRunnerPlugin;\n  /**\n   * Agent workspace file listing for the dashboard File system tab.\n   * Cloud injects Modal Volume access; omit to use org agent object storage.\n   */\n  agentWorkspaceFiles?: AgentWorkspaceFilesPlugin;\n  /**\n   * Transient draft tip fan-out for SSE. Defaults to an in-process notifier\n   * (OSS / single replica). Cloud injects a Redis-backed implementation when\n   * Redis is available so multi-replica platforms share updates.\n   */\n  draftNotifier?: ProjectDraftNotifier;\n  /** Queue backend for platform runtime routes. Defaults to pg-boss (Postgres) or DB polling (SQLite). */\n  scheduler?: SchedulerPlugin;\n  /** Extra env merged into project worker containers at deploy (cloud hosting plugins). */\n  workerEnv?: (ctx: PlatformWorkerEnvContext) => Record<string, string>;\n  /**\n   * Handler for `maintenance` jobs on the platform queue (cloud injects the\n   * billing daily pass). Unset (standalone default) means such jobs — which\n   * only cloud schedules — are ignored.\n   */\n  maintenanceHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Handler for `image-rollout` jobs on the platform queue (cloud Fly fleet).\n   * Unset (standalone default) means such jobs are ignored.\n   */\n  imageRolloutJobHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Handler for `project-agent-sandbox-grace` jobs (Modal project-agent dispose grace).\n   * Unset (standalone default) means such jobs are ignored.\n   */\n  projectAgentSandboxGraceJobHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * Handler for `project-agent-env-image` jobs (org-scoped Modal env Image builds).\n   * Unset (standalone default) means such jobs are ignored.\n   */\n  projectAgentEnvImageJobHandler?: (payload: JobPayload) => Promise<void>;\n  /**\n   * After a project deploy promotes, enqueue env Image builds from the manifest.\n   * Cloud sets this when Redis + Modal are available.\n   */\n  afterPromoteProjectDeploy?: (input: {\n    organizationId: string;\n    projectId: string;\n    artifactId: string;\n    manifest: import(\"@keystrokehq/shared\").StoredRouteManifest;\n  }) => Promise<void>;\n  /**\n   * Snapshot / enqueue an org-scoped env Image for an agent's `sandboxSetup`.\n   * Cloud sets this when Redis is available.\n   */\n  snapshotAgentEnvImage?: (input: {\n    organizationId: string;\n    projectId: string;\n    agentSlug: string;\n  }) => Promise<\n    | {\n        ok: true;\n        body: import(\"@keystrokehq/shared\").AgentEnvImageSnapshotResponse;\n        httpStatus?: number;\n      }\n    | { ok: false; error: string; httpStatus: number }\n  >;\n  /**\n   * Cloud-only platform-agent (Build tab) plugin: mounts organization routes and\n   * handles `platform-agent` jobs on the shared platform queue.\n   */\n  platformAgent?: {\n    mountOrgRoutes: (\n      orgScoped: import(\"hono\").Hono<{\n        Variables: import(\"@keystrokehq/http/auth\").OrganizationVariables;\n      }>,\n    ) => void;\n    handleJob: (payload: JobPayload) => Promise<void>;\n    onCancel?: (runId: string) => void;\n  };\n  /**\n   * Pre-enqueue credit check for interactive agent prompts / workflow runs\n   * (cloud injects the billing wallet check). Unset = never blocked.\n   */\n  promptCreditGate?: (\n    organizationId: string,\n  ) => Promise<{ allow: true } | { allow: false; reason: string }>;\n  /**\n   * Max-projects check for `POST /projects` (cloud injects plan quota).\n   * Unset = unlimited (standalone / OSS).\n   */\n  projectQuotaGate?: (\n    organizationId: string,\n  ) => Promise<{ allow: true } | { allow: false; reason: string }>;\n  /** Per-org API/MCP rate limits (cloud injects Redis token bucket). Unset = unlimited. */\n  orgRateLimit?: OrgRateLimit;\n};\n\nexport type PlatformConfig = PlatformConfigInput & {\n  hosting: HostingPlugin;\n  storage: StoragePlugin;\n  scheduler: SchedulerPlugin;\n};\n\nexport function definePlatformConfig(config: PlatformConfigInput = {}): PlatformConfig {\n  return {\n    ...config,\n    hosting: config.hosting ?? defaultHostingPlugin(),\n    storage: config.storage ?? minioStoragePlugin(),\n    scheduler: config.scheduler ?? defaultSchedulerPlugin(),\n    draftNotifier: config.draftNotifier ?? createInProcessProjectDraftNotifier(),\n  };\n}\n"],"mappings":";;;;AAGA,MAAM,uBAAuB,QAAQ,IAAI,wBAAwB;AACjE,eAAe,cAAc,SAAS;CACrC,IAAI,QAAQ,QAAQ,OAAO,QAAQ;CACnC,MAAM,EAAE,SAAS,eAAe,MAAM,OAAO;CAC7C,OAAO,IAAI,WAAW;AACvB;AACA,SAAS,oBAAoB,UAAU,CAAC,GAAG;CAC1C,OAAO;EACN,MAAM,MAAM,OAAO;GAClB,IAAI,MAAM,SAAS,WAAW,GAAG,MAAM,IAAI,MAAM,yDAAyD;GAC1G,MAAM,SAAS,MAAM,cAAc,OAAO;GAC1C,IAAI,SAAS,qBAAqB,SAAS,MAAM,SAAS,KAAK,aAAa;IAC3E,WAAW,QAAQ;IACnB,oBAAoB,QAAQ;IAC5B,YAAY,QAAQ;IACpB,iBAAiB,QAAQ;GAC1B,EAAE,GAAG,MAAM,UAAU,MAAM,GAAG;GAC9B,IAAI,QAAQ,iBAAiB;IAC5B,MAAM,EAAE,UAAU,kBAAkB,QAAQ;IAC5C,MAAM,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;IACzC,SAAS;KACR,GAAG;KACH,KAAK;MACJ,GAAG,OAAO;MACV,2BAA2B;KAC5B;IACD;GACD;GACA,MAAM,YAAY,QAAQ,OAAO,KAAK;GACtC,MAAM,wBAAwB,QAAQ,MAAM,cAAc;GAC1D,MAAM,QAAQ,CAAC,GAAG,QAAQ,kBAAkB,CAAC,GAAG,QAAQ,gBAAgB,SAAS,GAAG,QAAQ,gBAAgB,eAAe,IAAI,CAAC,GAAG,GAAG,QAAQ,cAAc,CAAC,CAAC;GAC9J,MAAM,YAAY,MAAM,OAAO,gBAAgB;IAC9C,OAAO,OAAO;IACd,MAAM,cAAc,MAAM,cAAc;IACxC,QAAQ;KACP,6BAA6B,MAAM;KACnC,yBAAyB,MAAM,SAAS,KAAK,YAAY,QAAQ,SAAS,EAAE,KAAK,GAAG;IACrF;IACA,cAAc,GAAG,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE;IAC3C,YAAY;KACX,YAAY,CAAC,mCAAmC;KAChD,cAAc,GAAG,GAAG,OAAO,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE;KAC5D,GAAG,MAAM,SAAS,IAAI,EAAE,OAAO,MAAM,IAAI,CAAC;IAC3C;IACA,kBAAkB,EAAE,iBAAiB,GAAG,uBAAuB,CAAC,EAAE,EAAE;IACpE,KAAK,gBAAgB,OAAO,GAAG;GAChC,CAAC;GACD,MAAM,UAAU,MAAM;GACtB,MAAM,UAAU,MAAM,UAAU,QAAQ;GACxC,MAAM,UAAU,QAAQ,gBAAgB,QAAQ,GAAG,OAAO,KAAK,SAAS;GACxE,IAAI,CAAC,SAAS,UAAU,MAAM,IAAI,MAAM,2CAA2C;GACnF,MAAM,UAAU,oBAAoB,QAAQ;GAC5C,MAAM,cAAc,SAAS;IAC5B,WAAW,QAAQ;IACnB,WAAW,QAAQ;GACpB,CAAC;GACD,OAAO;IACN,WAAW,QAAQ;IACnB;GACD;EACD;EACA,MAAM,QAAQ,OAAO;GACpB,IAAI;IACH,OAAO,MAAM,cAAc,OAAO,GAAG,aAAa,MAAM,SAAS,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC;GAC1F,QAAQ,CAAC;EACV;EACA,MAAM,MAAM,OAAO;GAClB,MAAM,aAAa,MAAM,cAAc,OAAO,GAAG,aAAa,MAAM,SAAS;GAC7E,MAAM,UAAU,MAAM,UAAU,QAAQ,EAAE,YAAY,IAAI;GAC1D,IAAI,CAAC,SAAS;GACd,IAAI,QAAQ,MAAM,SAAS,MAAM,UAAU,KAAK,EAAE,GAAG,GAAG,CAAC;EAC1D;EACA,MAAM,KAAK,OAAO;GACjB,MAAM,aAAa,MAAM,cAAc,OAAO,GAAG,aAAa,MAAM,SAAS;GAC7E,IAAI,EAAE,MAAM,UAAU,QAAQ,GAAG,MAAM,SAAS,MAAM,UAAU,MAAM;GACtE,MAAM,YAAY,MAAM,UAAU,QAAQ;GAC1C,MAAM,QAAQ,UAAU,gBAAgB,SAAS,CAAC;GAClD,MAAM,UAAU,OAAO,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,OAAO,QAAQ,GAAG;GAC9E,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,6CAA6C,MAAM,WAAW;GAC5F,MAAM,UAAU,oBAAoB;GACpC,MAAM,cAAc,SAAS;IAC5B,WAAW,QAAQ;IACnB,WAAW,QAAQ;GACpB,CAAC;GACD,OAAO;IACN,WAAW,UAAU;IACrB;GACD;EACD;CACD;AACD;AACA,SAAS,cAAc,gBAAgB;CACtC,OAAO,iBAAiB;AACzB;AACA,eAAe,wBAAwB,QAAQ,gBAAgB;CAC9D,IAAI;EACH,MAAM,WAAW,OAAO,aAAa,cAAc,cAAc,CAAC;EAClE,MAAM,SAAS,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,KAAK,CAAC;EAChD,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,CAAC;CACtC,QAAQ,CAAC;AACV;AACA,eAAe,YAAY,QAAQ,OAAO;CACzC,IAAI;EACH,MAAM,OAAO,SAAS,KAAK,EAAE,QAAQ;EACrC;CACD,QAAQ,CAAC;CACT,MAAM,IAAI,SAAS,gBAAgB,WAAW;EAC7C,OAAO,KAAK,QAAQ,OAAO,WAAW;GACrC,IAAI,OAAO;IACV,OAAO,KAAK;IACZ;GACD;GACA,IAAI,CAAC,QAAQ;IACZ,uBAAuB,IAAI,MAAM,wBAAwB,OAAO,CAAC;IACjE;GACD;GACA,OAAO,MAAM,eAAe,SAAS,kBAAkB;IACtD,IAAI,eAAe;KAClB,OAAO,aAAa;KACpB;IACD;IACA,eAAe;GAChB,CAAC;EACF,CAAC;CACF,CAAC;AACF;AAGA,SAAS,aAAa,UAAU,CAAC,GAAG;CACnC,MAAM,MAAM,QAAQ,OAAO,QAAQ;CACnC,OAAO;EACN,MAAM;EACN,eAAe,2BAA2B,GAAG;EAC7C,qBAAqB,oBAAoB;GACxC,GAAG;GACH;EACD,CAAC;CACF;AACD;;AAIA,SAAS,qBAAqB,UAAU,CAAC,GAAG;CAC3C,OAAO,aAAa,OAAO;AAC5B;;;AC+EA,SAAgB,qBAAqB,SAA8B,CAAC,GAAmB;CACrF,OAAO;EACL,GAAG;EACH,SAAS,OAAO,WAAW,qBAAqB;EAChD,SAAS,OAAO,WAAW,mBAAmB;EAC9C,WAAW,OAAO,aAAa,uBAAuB;EACtD,eAAe,OAAO,iBAAiB,oCAAoC;CAC7E;AACF"}