@keystrokehq/platform 0.1.166 → 0.1.168

package/dist/{start-BSdlkNvT.cjs → start-DJpQnemk.cjs}

@@ -1,6 +1,6 @@
-const require_dist = require("./dist-CxLFGi8f.cjs");
-const require_project_draft_notifier = require("./project-draft-notifier-DC4Y9tX6.cjs");
-const require_with_project_scope = require("./with-project-scope-CJpio_8X.cjs");
+const require_dist = require("./dist-B-9Ett8s.cjs");
+const require_project_draft_notifier = require("./project-draft-notifier-CKUXuRRs.cjs");
+const require_with_project_scope = require("./with-project-scope-BTYjLtM0.cjs");
 require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");
 const require_chunk_TN7HHBQW = require("./chunk-TN7HHBQW-D_SK6w5n.cjs");
 const require_lib_public_models = require("./lib/public-models.cjs");
@@ -28,6 +28,8 @@ require("node:url");
 require("typescript");
 require("hono/route");
 let resend = require("resend");
+let _aws_crypto_sha256_js = require("@aws-crypto/sha256-js");
+let _smithy_signature_v4 = require("@smithy/signature-v4");
 let _hono_node_server_conninfo = require("@hono/node-server/conninfo");
 //#region src/auth/mount.ts
 function mountAuth(app, auth) {
@@ -76,6 +78,29 @@ function authorizePayload(schema, allow) {
 	};
 }
 //#endregion
+//#region src/auth/require-verified-account-organization.ts
+const ORGANIZATION_PATH = /^\/organizations\/[^/]+$/;
+function isPendingOrganizationRoute(method, path) {
+	return method === "GET" && (path === "/organizations" || path === "/organizations/slug-available" || ORGANIZATION_PATH.test(path)) || method === "POST" && (path === "/organizations" || path === "/team-requests");
+}
+/** Blocks authenticated account APIs except the minimum pending-organization flow. */
+function requireVerifiedAccountOrganization() {
+	const requireOrg = require_with_project_scope.requireOrganization();
+	const requireVerifiedOrg = require_with_project_scope.requireVerifiedOrganization();
+	return async (c, next) => {
+		const path = c.req.path.replace(/^\/api(?=\/|$)/, "");
+		if (isPendingOrganizationRoute(c.req.method, path)) {
+			await next();
+			return;
+		}
+		let response = void 0;
+		await requireOrg(c, async () => {
+			response = await requireVerifiedOrg(c, next);
+		});
+		return response;
+	};
+}
+//#endregion
 //#region src/auth/require-organization-param.ts
 function requireOrganizationParam() {
 	return async (c, next) => {
@@ -23045,43 +23070,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await Promise.resolve().then(() => require("./cat-TSFMZVYS-Bh2gnYBW.cjs"))).catCommand
+		load: async () => (await Promise.resolve().then(() => require("./cat-TSFMZVYS-BAUQE77c.cjs"))).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await Promise.resolve().then(() => require("./printf-TWGXF445-ButxWeMu.cjs"))).printfCommand
+		load: async () => (await Promise.resolve().then(() => require("./printf-TWGXF445-B9GaO6Ul.cjs"))).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await Promise.resolve().then(() => require("./ls-ZJGQER7M-o0ElIEXz.cjs"))).lsCommand
+		load: async () => (await Promise.resolve().then(() => require("./ls-ZJGQER7M-zgYoyWTJ.cjs"))).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await Promise.resolve().then(() => require("./mkdir-MEPGZOB6-Ba_HhiuS.cjs"))).mkdirCommand
+		load: async () => (await Promise.resolve().then(() => require("./mkdir-MEPGZOB6-CDd4BISx.cjs"))).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await Promise.resolve().then(() => require("./rmdir-OC4ZLPYA-6vOSTCwS.cjs"))).rmdirCommand
+		load: async () => (await Promise.resolve().then(() => require("./rmdir-OC4ZLPYA-DiGCUu1D.cjs"))).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await Promise.resolve().then(() => require("./touch-UA33VN3N-BOdAJXIW.cjs"))).touchCommand
+		load: async () => (await Promise.resolve().then(() => require("./touch-UA33VN3N-MP95An0I.cjs"))).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await Promise.resolve().then(() => require("./rm-SSGETQVQ-Bk2Oj0k4.cjs"))).rmCommand
+		load: async () => (await Promise.resolve().then(() => require("./rm-SSGETQVQ-BE_7z24o.cjs"))).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await Promise.resolve().then(() => require("./cp-BISAAS7A-CYNa09Ne.cjs"))).cpCommand
+		load: async () => (await Promise.resolve().then(() => require("./cp-BISAAS7A-1gNNO0h6.cjs"))).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await Promise.resolve().then(() => require("./mv-W5BIQ646-BnmhrSj9.cjs"))).mvCommand
+		load: async () => (await Promise.resolve().then(() => require("./mv-W5BIQ646-DVmcIlDp.cjs"))).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await Promise.resolve().then(() => require("./ln-4LGSXXGD-B8uy1jXL.cjs"))).lnCommand
+		load: async () => (await Promise.resolve().then(() => require("./ln-4LGSXXGD-BH-7lQqg.cjs"))).lnCommand
 	},
 	{
 		name: "chmod",
@@ -23097,15 +23122,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await Promise.resolve().then(() => require("./head-442HYESI-DxHAzd18.cjs"))).headCommand
+		load: async () => (await Promise.resolve().then(() => require("./head-442HYESI-DinGCrQh.cjs"))).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await Promise.resolve().then(() => require("./tail-R4PCA2C4-CQun61tp.cjs"))).tailCommand
+		load: async () => (await Promise.resolve().then(() => require("./tail-R4PCA2C4-DCGIcGfI.cjs"))).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await Promise.resolve().then(() => require("./wc-LF7NU4LA-BG2BrZkh.cjs"))).wcCommand
+		load: async () => (await Promise.resolve().then(() => require("./wc-LF7NU4LA-Cs6w0u5W.cjs"))).wcCommand
 	},
 	{
 		name: "stat",
@@ -23113,95 +23138,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-CdG0dYLF.cjs"))).grepCommand
+		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-DUHw1d1s.cjs"))).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-CdG0dYLF.cjs"))).fgrepCommand
+		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-DUHw1d1s.cjs"))).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-CdG0dYLF.cjs"))).egrepCommand
+		load: async () => (await Promise.resolve().then(() => require("./grep-V3LQVMRQ-DUHw1d1s.cjs"))).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await Promise.resolve().then(() => require("./rg-S4FXYXWB-CaiVpLso.cjs"))).rgCommand
+		load: async () => (await Promise.resolve().then(() => require("./rg-S4FXYXWB-Cna2KlmW.cjs"))).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await Promise.resolve().then(() => require("./sed-S5UIK574-Bn5K5TWG.cjs"))).sedCommand
+		load: async () => (await Promise.resolve().then(() => require("./sed-S5UIK574-BgY8Ihh0.cjs"))).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await Promise.resolve().then(() => require("./awk2-LA3USKJP-Ce_qTV3m.cjs"))).awkCommand2
+		load: async () => (await Promise.resolve().then(() => require("./awk2-LA3USKJP-yg6LFatr.cjs"))).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await Promise.resolve().then(() => require("./sort-SW2YEO5B-Bb3LA-Jj.cjs"))).sortCommand
+		load: async () => (await Promise.resolve().then(() => require("./sort-SW2YEO5B-Dzu0tLNc.cjs"))).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await Promise.resolve().then(() => require("./uniq-XSIZR6PB-BWPUOKz1.cjs"))).uniqCommand
+		load: async () => (await Promise.resolve().then(() => require("./uniq-XSIZR6PB-CGtin2DU.cjs"))).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await Promise.resolve().then(() => require("./comm-VV2LDX2J-C8QlzA3-.cjs"))).commCommand
+		load: async () => (await Promise.resolve().then(() => require("./comm-VV2LDX2J-Drpn_mN9.cjs"))).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await Promise.resolve().then(() => require("./cut-OKARJCCV-Aam6kRtv.cjs"))).cutCommand
+		load: async () => (await Promise.resolve().then(() => require("./cut-OKARJCCV-DXYElVoa.cjs"))).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await Promise.resolve().then(() => require("./paste-7JC6S4DX-CzbP4Evv.cjs"))).pasteCommand
+		load: async () => (await Promise.resolve().then(() => require("./paste-7JC6S4DX-xTLkFI_t.cjs"))).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await Promise.resolve().then(() => require("./tr-36LHWFRQ-paQ7L-fo.cjs"))).trCommand
+		load: async () => (await Promise.resolve().then(() => require("./tr-36LHWFRQ-DPk3QW_J.cjs"))).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await Promise.resolve().then(() => require("./rev-5EHFX4EJ-tPt3-Mci.cjs"))).rev
+		load: async () => (await Promise.resolve().then(() => require("./rev-5EHFX4EJ-CHXZSzu8.cjs"))).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await Promise.resolve().then(() => require("./nl-WSDW7I4O-BXlUMrEM.cjs"))).nl
+		load: async () => (await Promise.resolve().then(() => require("./nl-WSDW7I4O-GwrWejkj.cjs"))).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await Promise.resolve().then(() => require("./fold-4TQNYMSW-BVQ5dqaL.cjs"))).fold
+		load: async () => (await Promise.resolve().then(() => require("./fold-4TQNYMSW-Zmo5Qeka.cjs"))).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await Promise.resolve().then(() => require("./expand-JSPG6VOP-2cp-e2oK.cjs"))).expand
+		load: async () => (await Promise.resolve().then(() => require("./expand-JSPG6VOP-WZMnJom_.cjs"))).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await Promise.resolve().then(() => require("./unexpand-CADSA4VO-B37aYl99.cjs"))).unexpand
+		load: async () => (await Promise.resolve().then(() => require("./unexpand-CADSA4VO-OSe0hJph.cjs"))).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await Promise.resolve().then(() => require("./strings-6WDHLGMX-7sqQ6vNV.cjs"))).strings
+		load: async () => (await Promise.resolve().then(() => require("./strings-6WDHLGMX-WeTtDcOe.cjs"))).strings
 	},
 	{
 		name: "split",
-		load: async () => (await Promise.resolve().then(() => require("./split-4KKZZXXE-DEfhite5.cjs"))).split
+		load: async () => (await Promise.resolve().then(() => require("./split-4KKZZXXE-wihAs93T.cjs"))).split
 	},
 	{
 		name: "column",
-		load: async () => (await Promise.resolve().then(() => require("./column-XT6UFXNQ--yjHs-sc.cjs"))).column
+		load: async () => (await Promise.resolve().then(() => require("./column-XT6UFXNQ-MddXdKrv.cjs"))).column
 	},
 	{
 		name: "join",
-		load: async () => (await Promise.resolve().then(() => require("./join-TBRGI3LQ-B82QvTWj.cjs"))).join
+		load: async () => (await Promise.resolve().then(() => require("./join-TBRGI3LQ-0iwzHVFQ.cjs"))).join
 	},
 	{
 		name: "tee",
-		load: async () => (await Promise.resolve().then(() => require("./tee-YUZ2FKCJ-DKpvqMxW.cjs"))).teeCommand
+		load: async () => (await Promise.resolve().then(() => require("./tee-YUZ2FKCJ-BHBp-D0n.cjs"))).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await Promise.resolve().then(() => require("./find-INTH3OLC-B5OVxPdH.cjs"))).findCommand
+		load: async () => (await Promise.resolve().then(() => require("./find-INTH3OLC-D8uFXLvt.cjs"))).findCommand
 	},
 	{
 		name: "basename",
@@ -23213,19 +23238,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await Promise.resolve().then(() => require("./tree-YLD52CNT-Cyh_iSZr.cjs"))).treeCommand
+		load: async () => (await Promise.resolve().then(() => require("./tree-YLD52CNT-q0MwJKtA.cjs"))).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await Promise.resolve().then(() => require("./du-572XNP42-D_iIUaIN.cjs"))).duCommand
+		load: async () => (await Promise.resolve().then(() => require("./du-572XNP42-D9XdZECd.cjs"))).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-Dla-bhJN.cjs"))).envCommand
+		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-D95XZQQM.cjs"))).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-Dla-bhJN.cjs"))).printenvCommand
+		load: async () => (await Promise.resolve().then(() => require("./env-36M5BO7M-D95XZQQM.cjs"))).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23241,7 +23266,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await Promise.resolve().then(() => require("./xargs-MGZPH7AX-DTp4JPS2.cjs"))).xargsCommand
+		load: async () => (await Promise.resolve().then(() => require("./xargs-MGZPH7AX-BGlxfG3j.cjs"))).xargsCommand
 	},
 	{
 		name: "true",
@@ -23257,23 +23282,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-C4NkL28R.cjs"))).bashCommand
+		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-Doy8tb9T.cjs"))).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-C4NkL28R.cjs"))).shCommand
+		load: async () => (await Promise.resolve().then(() => require("./bash-YZ33HQZQ-Doy8tb9T.cjs"))).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await Promise.resolve().then(() => require("./jq-4XLYLOS5-Wi3BLu19.cjs"))).jqCommand
+		load: async () => (await Promise.resolve().then(() => require("./jq-4XLYLOS5-ClcllT4a.cjs"))).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await Promise.resolve().then(() => require("./base64-C2AIWVNC-C8X1e2vD.cjs"))).base64Command
+		load: async () => (await Promise.resolve().then(() => require("./base64-C2AIWVNC-D3yeMMc-.cjs"))).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await Promise.resolve().then(() => require("./diff-MWJFIG7X-MEkXMdi-.cjs"))).diffCommand
+		load: async () => (await Promise.resolve().then(() => require("./diff-MWJFIG7X--FkUj0OX.cjs"))).diffCommand
 	},
 	{
 		name: "date",
@@ -23281,15 +23306,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await Promise.resolve().then(() => require("./sleep-X22JJINO-DBeP6V9U.cjs"))).sleepCommand
+		load: async () => (await Promise.resolve().then(() => require("./sleep-X22JJINO-CzulqD_N.cjs"))).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await Promise.resolve().then(() => require("./timeout-YDCRSLPQ-rvcdkTgb.cjs"))).timeoutCommand
+		load: async () => (await Promise.resolve().then(() => require("./timeout-YDCRSLPQ-ccVYsvS4.cjs"))).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await Promise.resolve().then(() => require("./time-D4LNBSWX-C-jF8GHE.cjs"))).timeCommand
+		load: async () => (await Promise.resolve().then(() => require("./time-D4LNBSWX-CF322RDB.cjs"))).timeCommand
 	},
 	{
 		name: "seq",
@@ -23297,19 +23322,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await Promise.resolve().then(() => require("./expr-5JAACS4X-F3jwFLMV.cjs"))).exprCommand
+		load: async () => (await Promise.resolve().then(() => require("./expr-5JAACS4X-CBRIPgGr.cjs"))).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await Promise.resolve().then(() => require("./md5sum-SPU24VSG-DPigWm9a.cjs"))).md5sumCommand
+		load: async () => (await Promise.resolve().then(() => require("./md5sum-SPU24VSG-DYg94Bx3.cjs"))).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await Promise.resolve().then(() => require("./sha1sum-2PTOAFR6-D8gY6Iq6.cjs"))).sha1sumCommand
+		load: async () => (await Promise.resolve().then(() => require("./sha1sum-2PTOAFR6-44Xivyc4.cjs"))).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await Promise.resolve().then(() => require("./sha256sum-NS7D3IXX-BveliEYa.cjs"))).sha256sumCommand
+		load: async () => (await Promise.resolve().then(() => require("./sha256sum-NS7D3IXX-D9tuCyEG.cjs"))).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -23317,11 +23342,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await Promise.resolve().then(() => require("./html-to-markdown-JW4MSQZO-CuEXaFWn.cjs"))).htmlToMarkdownCommand
+		load: async () => (await Promise.resolve().then(() => require("./html-to-markdown-JW4MSQZO-CENAiLSt.cjs"))).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await Promise.resolve().then(() => require("./help-HZ6M2CKN-CgbyeiPX.cjs"))).helpCommand
+		load: async () => (await Promise.resolve().then(() => require("./help-HZ6M2CKN-BU2WU0qs.cjs"))).helpCommand
 	},
 	{
 		name: "which",
@@ -23329,7 +23354,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await Promise.resolve().then(() => require("./tac-2STMMJYW-ZOFJmXlO.cjs"))).tac
+		load: async () => (await Promise.resolve().then(() => require("./tac-2STMMJYW-O3tnf5A7.cjs"))).tac
 	},
 	{
 		name: "hostname",
@@ -23341,49 +23366,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await Promise.resolve().then(() => require("./od-WOKFDJTP-BJLSXIJr.cjs"))).od
+		load: async () => (await Promise.resolve().then(() => require("./od-WOKFDJTP-DTdzSZ41.cjs"))).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-CWRW-90F.cjs"))).gzipCommand
+		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-X2gA4kr-.cjs"))).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-CWRW-90F.cjs"))).gunzipCommand
+		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-X2gA4kr-.cjs"))).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-CWRW-90F.cjs"))).zcatCommand
+		load: async () => (await Promise.resolve().then(() => require("./gzip-O5ASJAFY-X2gA4kr-.cjs"))).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await Promise.resolve().then(() => require("./tar-STHHZTZ6-BeSfCYW6.cjs"))).tarCommand
+	load: async () => (await Promise.resolve().then(() => require("./tar-STHHZTZ6-CzXuqzLX.cjs"))).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await Promise.resolve().then(() => require("./yq-4QJW3EQG-B7i6-J_P.cjs"))).yqCommand
+	load: async () => (await Promise.resolve().then(() => require("./yq-4QJW3EQG-Bp59VwJ7.cjs"))).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await Promise.resolve().then(() => require("./xan-Y6WF3IRG-Doo-gfOs.cjs"))).xanCommand
+	load: async () => (await Promise.resolve().then(() => require("./xan-Y6WF3IRG-DPjZ1KOe.cjs"))).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await Promise.resolve().then(() => require("./sqlite3-CGOEFJAO-DO9N3ePX.cjs"))).sqlite3Command
+	load: async () => (await Promise.resolve().then(() => require("./sqlite3-CGOEFJAO-DbShBO-b.cjs"))).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-CKl1Vn_s.cjs"))).python3Command
+	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-CYK0AGCW.cjs"))).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-CKl1Vn_s.cjs"))).pythonCommand
+	load: async () => (await Promise.resolve().then(() => require("./python3-POMOR4OA-CYK0AGCW.cjs"))).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-Butd2yg0.cjs"))).jsExecCommand
+	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-DRksW_Rf.cjs"))).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-Butd2yg0.cjs"))).nodeStubCommand
+	load: async () => (await Promise.resolve().then(() => require("./js-exec-N5KEZBH7-DRksW_Rf.cjs"))).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -25502,6 +25527,10 @@ function createOrganizationHandler(deps) {
 		const body = await c.req.json().catch(() => null);
 		const parsed = require_project_draft_notifier.CreateOrganizationRequestSchema.safeParse(body);
 		if (!parsed.success) return c.json(require_project_draft_notifier.ErrorResponseSchema.parse({ error: "Invalid organization request" }), 400);
+		if ((await (0, _keystrokehq_platform_database.selectUserOrganizations)(user.id)).some(({ organization }) => organization.verifiedAt == null)) return c.json(require_project_draft_notifier.ErrorResponseSchema.parse({
+			error: "Your organization is pending verification",
+			code: "org_unverified"
+		}), 403);
 		try {
 			const membership = await createOrganizationWithHosting(deps, user.id, parsed.data.name, parsed.data.slug);
 			const organizationId = membership.organization.id;
@@ -32468,6 +32497,7 @@ const handler$5 = async (c) => {
 		const message = parsed.error.issues[0]?.message ?? "Invalid request body";
 		return c.json({ error: message }, 400);
 	}
+	if (!organizationContext.verified && parsed.data.type !== "verification") return c.json({ error: "This organization is pending verification" }, 403);
 	const organization = await (0, _keystrokehq_platform_database.selectOrganizationById)(organizationContext.organizationId);
 	if (!organization) return c.json({ error: "Organization not found" }, 404);
 	try {
@@ -32662,6 +32692,7 @@ function mountAccountRoutes(options) {
 	account.get("/oauth/slack-app/callback", handler$22);
 	account.get(keystrokeSlackOAuthProvider.routes.callback, completeKeystrokeSlackInstall);
 	account.use("/*", protect);
+	account.use("/*", requireVerifiedAccountOrganization());
 	orgScoped.use("/*", protect);
 	orgScoped.use("/*", require_with_project_scope.requireOrganization());
 	orgScoped.use("/*", require_with_project_scope.requireVerifiedOrganization());
@@ -33214,6 +33245,178 @@ function mountInternalRoutes(workerToken, tokenRefresh, llmProxy, mcp, brain) {
 	return internal;
 }
 //#endregion
+//#region src/routes/s3-gateway.ts
+const AUTH_RE = /^AWS4-HMAC-SHA256 Credential=([^/]+)\/([^/]+)\/([^/]+)\/([^/]+)\/aws4_request, SignedHeaders=([^,]+), Signature=([0-9a-f]+)$/i;
+function forbidden() {
+	return new Response("<?xml version=\"1.0\" encoding=\"UTF-8\"?><Error><Code>AccessDenied</Code><Message>Access denied</Message></Error>", {
+		status: 403,
+		headers: { "content-type": "application/xml" }
+	});
+}
+function parseAuth(request) {
+	const match = AUTH_RE.exec(request.headers.get("authorization") ?? "");
+	return match ? {
+		accessKeyId: match[1],
+		date: match[2],
+		region: match[3],
+		service: match[4],
+		signedHeaders: match[5],
+		signature: match[6]
+	} : void 0;
+}
+function organizationIdFromAccessKey(accessKeyId) {
+	return (accessKeyId.startsWith("ksw_") ? accessKeyId.slice(4) : void 0)?.trim() || void 0;
+}
+function bucketFromPath(pathname) {
+	const first = pathname.split("/").filter(Boolean)[0];
+	return first ? decodeURIComponent(first) : void 0;
+}
+function physicalBucket(bucket, orgBucket) {
+	if (bucket === "workspace") return orgBucket;
+	if (bucket?.startsWith("workspace-")) return `${orgBucket}${bucket.slice(9)}`;
+}
+function copySourceBucket(request) {
+	const source = request.headers.get("x-amz-copy-source");
+	if (!source) return void 0;
+	try {
+		return bucketFromPath(new URL(source, "https://s3.invalid").pathname);
+	} catch {
+		return;
+	}
+}
+function safeEqual(left, right) {
+	const a = Buffer.from(left);
+	const b = Buffer.from(right);
+	return a.length === b.length && (0, node_crypto.timingSafeEqual)(a, b);
+}
+function requestForSigning(request) {
+	const url = new URL(request.url);
+	const query = {};
+	for (const [key, value] of url.searchParams) {
+		const current = query[key];
+		query[key] = current === void 0 ? value : Array.isArray(current) ? [...current, value] : [current, value];
+	}
+	const headers = Object.fromEntries(request.headers);
+	return {
+		method: request.method,
+		protocol: url.protocol,
+		hostname: url.hostname,
+		...url.port ? { port: Number(url.port) } : {},
+		path: url.pathname,
+		query,
+		headers
+	};
+}
+async function verifySigV4(request, secretAccessKey) {
+	const auth = parseAuth(request);
+	if (!auth || auth.service !== "s3") return false;
+	const amzDate = request.headers.get("x-amz-date") ?? "";
+	if (!amzDate.startsWith(auth.date)) return false;
+	const match = /^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})Z$/.exec(amzDate);
+	const timestamp = match ? Date.UTC(+match[1], +match[2] - 1, +match[3], +match[4], +match[5], +match[6]) : NaN;
+	if (!Number.isFinite(timestamp) || Math.abs(Date.now() - timestamp) > 15 * 6e4) return false;
+	const signed = await new _smithy_signature_v4.SignatureV4({
+		credentials: {
+			accessKeyId: auth.accessKeyId,
+			secretAccessKey
+		},
+		region: auth.region,
+		service: "s3",
+		sha256: _aws_crypto_sha256_js.Sha256,
+		uriEscapePath: false
+	}).sign(requestForSigning(request), {
+		signingDate: new Date(timestamp),
+		unsignableHeaders: new Set([...request.headers.keys()].map((header) => header.toLowerCase()).filter((header) => !auth.signedHeaders.split(";").includes(header)))
+	});
+	const expected = parseAuth(new Request(request.url, { headers: signed.headers }))?.signature;
+	return !!expected && safeEqual(expected, auth.signature);
+}
+function stripHopHeaders(headers) {
+	const next = new Headers(headers);
+	for (const name of [
+		"authorization",
+		"connection",
+		"expect",
+		"host",
+		"keep-alive",
+		"proxy-authenticate",
+		"proxy-authorization",
+		"te",
+		"trailer",
+		"transfer-encoding",
+		"upgrade",
+		"x-amz-date"
+	]) next.delete(name);
+	return next;
+}
+function mountS3GatewayRoutes(app, workerSecret, options = {}) {
+	app.all("/s3/*", async (c) => {
+		if (!workerSecret) return forbidden();
+		const incoming = c.req.raw;
+		const auth = parseAuth(incoming);
+		const organizationId = auth ? organizationIdFromAccessKey(auth.accessKeyId) : void 0;
+		if (!organizationId) return forbidden();
+		if (!await verifySigV4(incoming, require_project_draft_notifier.mintOrgWorkerToken(workerSecret, organizationId))) return forbidden();
+		const storage = options.resolveStorage ? await options.resolveStorage(organizationId) : await (0, _keystrokehq_platform_database.selectOrganizationById)(organizationId).then((organization) => organization ? (0, _keystrokehq_platform_database.resolveOrgStorageConfig)(organization) : void 0);
+		if (!storage) return forbidden();
+		const strippedPath = new URL(incoming.url).pathname.slice(3) || "/";
+		const bucket = bucketFromPath(strippedPath);
+		const mappedBucket = physicalBucket(bucket, storage.bucket);
+		const copyBucket = copySourceBucket(incoming);
+		const mappedCopyBucket = physicalBucket(copyBucket, storage.bucket);
+		if (!mappedBucket || incoming.headers.has("x-amz-copy-source") && !mappedCopyBucket) return forbidden();
+		const upstream = new URL(incoming.url);
+		const endpoint = new URL(storage.endpoint);
+		upstream.protocol = endpoint.protocol;
+		upstream.hostname = endpoint.hostname;
+		upstream.port = endpoint.port;
+		upstream.pathname = strippedPath.replace(`/${bucket}`, `/${mappedBucket}`);
+		const headers = stripHopHeaders(incoming.headers);
+		if (mappedCopyBucket) {
+			const source = headers.get("x-amz-copy-source");
+			headers.set("x-amz-copy-source", source.replace(`/${copyBucket}`, `/${mappedCopyBucket}`));
+		}
+		headers.set("host", upstream.host);
+		const body = incoming.method === "GET" || incoming.method === "HEAD" ? void 0 : incoming.body;
+		const signed = await new _smithy_signature_v4.SignatureV4({
+			credentials: {
+				accessKeyId: storage.accessKeyId,
+				secretAccessKey: storage.secretAccessKey
+			},
+			region: storage.region,
+			service: "s3",
+			sha256: _aws_crypto_sha256_js.Sha256,
+			uriEscapePath: false
+		}).sign(requestForSigning(new Request(upstream, {
+			method: incoming.method,
+			headers
+		})));
+		try {
+			const response = await (options.fetch ?? fetch)(upstream, {
+				method: incoming.method,
+				headers: signed.headers,
+				body,
+				...body ? { duplex: "half" } : {}
+			});
+			return new Response(response.body, {
+				status: response.status,
+				headers: stripHopHeaders(response.headers)
+			});
+		} catch (error) {
+			console.error("S3 gateway upstream failed", {
+				organizationId,
+				method: incoming.method,
+				bucket: mappedBucket,
+				error
+			});
+			return new Response("<?xml version=\"1.0\" encoding=\"UTF-8\"?><Error><Code>ServiceUnavailable</Code><Message>Storage temporarily unavailable</Message></Error>", {
+				status: 503,
+				headers: { "content-type": "application/xml" }
+			});
+		}
+	});
+}
+//#endregion
 //#region src/routes/public/models/GET.ts
 async function handler$3(c) {
 	try {
@@ -33455,7 +33658,7 @@ async function handler(c) {
 //#region src/app.ts
 async function createApp(auth, options) {
 	const draftNotifier = options.draftNotifier ?? require_project_draft_notifier.createInProcessProjectDraftNotifier();
-	return (0, _keystrokehq_http.createApp)({
+	const app = await (0, _keystrokehq_http.createApp)({
 		mode: "platform",
 		webOrigin: options.webOrigin,
 		schedulerPlugin: options.scheduler,
@@ -33491,6 +33694,8 @@ async function createApp(auth, options) {
 			app.route("/internal", mountInternalRoutes(options.hosting.workerRuntime.workerToken, tokenRefresh, options.llmProxy, options.mcp, options.brain));
 		}
 	});
+	mountS3GatewayRoutes(app, options.hosting.workerRuntime.workerToken);
+	return app;
 }
 //#endregion
 //#region src/lib/signup-slack.ts
@@ -33672,7 +33877,10 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 					organizationId: job.organizationId
 				},
 				env: {
-					...(0, _keystrokehq_platform_database.orgWorkspacesRuntimeEnv)(organization, { containerEnv: process.env }),
+					...(0, _keystrokehq_platform_database.orgWorkspacesRuntimeEnv)(organization, {
+						platformUrl: workerRuntime.platformUrl,
+						workerToken: orgWorkerToken
+					}),
 					...(0, _keystrokehq_platform_database.orgSchedulerRuntimeEnv)(organization, process.env),
 					...platformConfig.llmProxy?.workerEnv({
 						platformUrl: workerRuntime.platformUrl,
@@ -33885,4 +34093,4 @@ Object.defineProperty(exports, "x$1", {
 	}
 });
 
-//# sourceMappingURL=start-BSdlkNvT.cjs.map
+//# sourceMappingURL=start-DJpQnemk.cjs.map