@keystrokehq/platform 0.1.3 → 0.1.4

package/dist/{dist-70NUfApd.mjs → dist-u6HScFsc.mjs}

@@ -6,10 +6,10 @@ import { DEFAULT_DATABASE_URL, claimNextJob, clearCredentialInstanceDefaults, cr
 import { z } from "zod";
 import { join } from "node:path";
 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { AsyncLocalStorage } from "node:async_hooks";
 import "node:url";
 import { tmpdir } from "node:os";
 import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID } from "node:crypto";
-import { AsyncLocalStorage } from "node:async_hooks";
 import { deleteSecretValuesForRef, getOrganizationScopeId, selectSecretValue, upsertSecretValue } from "@keystrokehq/platform-database";
 import "zod/v3";
 import "zod/v4-mini";
@@ -54,6 +54,10 @@ const PROJECT_SERVER_HEALTH = {
 	path: "/health",
 	port: PROJECT_SERVER_PORT
 };
+/** Builds base64 `KEYSTROKE_ORG_ARTIFACTS` payload for org worker containers. */
+function encodeOrgArtifacts(artifacts) {
+	return Buffer.from(JSON.stringify(artifacts)).toString("base64");
+}
 const RUNTIME_ENV_KEYS = [
 	"BETTER_AUTH_SECRET",
 	"PUBLIC_SERVER_URL",
@@ -84,28 +88,26 @@ function projectDatabaseRuntimeEnv(database) {
 	};
 }
 /**
-* Builds the launch spec for a single project server. `artifactStorageKey` is the
-* object key for that deploy's built `dist` tarball in the org bucket — there is
-* no base image, so it is required.
+* Builds the launch spec for an org worker. Each deploy artifact is encoded in
+* `KEYSTROKE_ORG_ARTIFACTS` — there is no base image, so at least one artifact is required.
 */
-function resolveRuntimeLaunch(options, artifactStorageKey, database, extraEnv) {
-	if (!artifactStorageKey) throw new Error("Cannot start a project server without an artifact storage key");
+function resolveRuntimeLaunch(options, artifacts, database, extraEnv) {
+	if (artifacts.length === 0) throw new Error("Cannot start an org worker without at least one artifact");
 	const env = options.env ?? process.env;
 	return {
 		image: resolveProjectServerImage(env, options.image),
-		env: buildRuntimeEnv(env, artifactStorageKey, database, extraEnv),
+		env: buildRuntimeEnv(env, artifacts, database, extraEnv),
 		port: PROJECT_SERVER_PORT,
 		health: PROJECT_SERVER_HEALTH
 	};
 }
-/** Env vars passed into the project server container/machine. */
-function buildRuntimeEnv(source, artifactStorageKey, database, extraEnv) {
+/** Env vars passed into the org worker container/machine. */
+function buildRuntimeEnv(source, artifacts, database, extraEnv) {
 	const entries = new Map([
 		["PORT", String(PROJECT_SERVER_PORT)],
 		["KEYSTROKE_ROOT", PROJECT_SERVER_ROOT],
 		["KEYSTROKE_RUNTIME_NODE_MODULES", PROJECT_SERVER_FRAMEWORK_NODE_MODULES],
-		["ARTIFACT_STORAGE_KEY", artifactStorageKey],
-		["PROJECT_ID", database.projectId],
+		["KEYSTROKE_ORG_ARTIFACTS", encodeOrgArtifacts(artifacts)],
 		["ORGANIZATION_ID", database.organizationId],
 		["TENANT_ID", database.organizationId]
 	]);
@@ -208,15 +210,19 @@ const MINIO_DOCKER_NETWORK = process.env.MINIO_DOCKER_NETWORK ?? "keystroke";
 function createDockerRuntime(options = {}) {
 	const docker = options.docker ?? new Docker();
 	return { async start(input) {
-		const launch = resolveRuntimeLaunch(options, input.artifactStorageKey, input.database, input.env);
+		if (input.projects.length === 0) throw new Error("Docker org runtime requires at least one project deploy");
+		const launch = resolveRuntimeLaunch(options, input.projects.map((project) => ({
+			projectId: project.projectId,
+			artifactStorageKey: project.artifactStorageKey
+		})), input.database, input.env);
 		await ensureImage(docker, launch.image);
-		await removeExistingContainer(docker, input.projectId);
+		await removeExistingContainer(docker, input.organizationId);
 		const container = await docker.createContainer({
 			Image: launch.image,
-			name: containerName(input.projectId),
+			name: containerName(input.organizationId),
 			Labels: {
-				"keystroke.project.id": input.projectId,
-				"keystroke.project.name": input.name
+				"keystroke.organization.id": input.organizationId,
+				"keystroke.project.ids": input.projects.map((project) => project.projectId).join(",")
 			},
 			ExposedPorts: { [`${launch.port}/tcp`]: {} },
 			HostConfig: {
@@ -229,7 +235,7 @@ function createDockerRuntime(options = {}) {
 		await container.start();
 		const inspect = await container.inspect();
 		const binding = inspect.NetworkSettings.Ports?.[`${launch.port}/tcp`]?.[0];
-		if (!binding?.HostPort) throw new Error("Failed to resolve project container host port");
+		if (!binding?.HostPort) throw new Error("Failed to resolve org container host port");
 		const baseUrl = `http://127.0.0.1:${binding.HostPort}`;
 		await waitForHealth(baseUrl, {
 			fetchImpl: options.fetchImpl,
@@ -241,12 +247,12 @@ function createDockerRuntime(options = {}) {
 		};
 	} };
 }
-function containerName(projectId) {
-	return `keystroke-project-${projectId}`;
+function containerName(organizationId) {
+	return `keystroke-org-${organizationId}`;
 }
-async function removeExistingContainer(docker, projectId) {
+async function removeExistingContainer(docker, organizationId) {
 	try {
-		const existing = docker.getContainer(containerName(projectId));
+		const existing = docker.getContainer(containerName(organizationId));
 		await existing.stop({ t: 5 }).catch(() => void 0);
 		await existing.remove({ force: true });
 	} catch {}
@@ -980,7 +986,7 @@ _Object_({
 	content: String$1({ description: "Content to write to the file" })
 });
 //#endregion
-//#region ../../packages/sandbox/dist/files-DJf_h8XJ.mjs
+//#region ../../packages/sandbox/dist/files-XxiqkzS0.mjs
 const SandboxFileContentSchema = z.object({
 	path: z.string(),
 	file: z.string()
@@ -997,6 +1003,7 @@ const SandboxDefinitionSchema = z.object({
 	key: z.string().optional(),
 	files: z.array(SandboxFileSchema).optional()
 });
+new AsyncLocalStorage();
 //#endregion
 //#region ../../node_modules/.pnpm/just-bash@3.0.1/node_modules/just-bash/dist/bundle/chunks/chunk-4RUAZWKT.js
 createRequire(import.meta.url);
@@ -23799,43 +23806,43 @@ var tt = [
 	},
 	{
 		name: "cat",
-		load: async () => (await import("./cat-TSFMZVYS-B-Qi4MIN.mjs")).catCommand
+		load: async () => (await import("./cat-TSFMZVYS-HIG335Ji.mjs")).catCommand
 	},
 	{
 		name: "printf",
-		load: async () => (await import("./printf-TWGXF445-BlwG6dD2.mjs")).printfCommand
+		load: async () => (await import("./printf-TWGXF445-B8Sf39v5.mjs")).printfCommand
 	},
 	{
 		name: "ls",
-		load: async () => (await import("./ls-ZJGQER7M-DMYpsOhX.mjs")).lsCommand
+		load: async () => (await import("./ls-ZJGQER7M-Bcrhni0D.mjs")).lsCommand
 	},
 	{
 		name: "mkdir",
-		load: async () => (await import("./mkdir-MEPGZOB6-BoeUbSt6.mjs")).mkdirCommand
+		load: async () => (await import("./mkdir-MEPGZOB6-BhU6Z4rR.mjs")).mkdirCommand
 	},
 	{
 		name: "rmdir",
-		load: async () => (await import("./rmdir-OC4ZLPYA-BZ86Q3Wr.mjs")).rmdirCommand
+		load: async () => (await import("./rmdir-OC4ZLPYA-BiT5sPTn.mjs")).rmdirCommand
 	},
 	{
 		name: "touch",
-		load: async () => (await import("./touch-UA33VN3N-OcSMUASX.mjs")).touchCommand
+		load: async () => (await import("./touch-UA33VN3N-CLRU8dwp.mjs")).touchCommand
 	},
 	{
 		name: "rm",
-		load: async () => (await import("./rm-SSGETQVQ-D0Grjo65.mjs")).rmCommand
+		load: async () => (await import("./rm-SSGETQVQ-DVySAmdO.mjs")).rmCommand
 	},
 	{
 		name: "cp",
-		load: async () => (await import("./cp-BISAAS7A-CMVh32j_.mjs")).cpCommand
+		load: async () => (await import("./cp-BISAAS7A-DKr1SlBP.mjs")).cpCommand
 	},
 	{
 		name: "mv",
-		load: async () => (await import("./mv-W5BIQ646-ee9iH5gF.mjs")).mvCommand
+		load: async () => (await import("./mv-W5BIQ646-DYHSL0LU.mjs")).mvCommand
 	},
 	{
 		name: "ln",
-		load: async () => (await import("./ln-4LGSXXGD-Cy8gNPMC.mjs")).lnCommand
+		load: async () => (await import("./ln-4LGSXXGD-C-x9d2b0.mjs")).lnCommand
 	},
 	{
 		name: "chmod",
@@ -23851,15 +23858,15 @@ var tt = [
 	},
 	{
 		name: "head",
-		load: async () => (await import("./head-442HYESI-BGRcjEMI.mjs")).headCommand
+		load: async () => (await import("./head-442HYESI-DDn9puS-.mjs")).headCommand
 	},
 	{
 		name: "tail",
-		load: async () => (await import("./tail-R4PCA2C4-7wsnh20i.mjs")).tailCommand
+		load: async () => (await import("./tail-R4PCA2C4-BqXHf0GQ.mjs")).tailCommand
 	},
 	{
 		name: "wc",
-		load: async () => (await import("./wc-LF7NU4LA-CPMTeSun.mjs")).wcCommand
+		load: async () => (await import("./wc-LF7NU4LA-D2NJbTrF.mjs")).wcCommand
 	},
 	{
 		name: "stat",
@@ -23867,95 +23874,95 @@ var tt = [
 	},
 	{
 		name: "grep",
-		load: async () => (await import("./grep-V3LQVMRQ-BLwElJ9a.mjs")).grepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-Q9iHVtcz.mjs")).grepCommand
 	},
 	{
 		name: "fgrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BLwElJ9a.mjs")).fgrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-Q9iHVtcz.mjs")).fgrepCommand
 	},
 	{
 		name: "egrep",
-		load: async () => (await import("./grep-V3LQVMRQ-BLwElJ9a.mjs")).egrepCommand
+		load: async () => (await import("./grep-V3LQVMRQ-Q9iHVtcz.mjs")).egrepCommand
 	},
 	{
 		name: "rg",
-		load: async () => (await import("./rg-S4FXYXWB-b3jjC2M6.mjs")).rgCommand
+		load: async () => (await import("./rg-S4FXYXWB-vO1CwZd4.mjs")).rgCommand
 	},
 	{
 		name: "sed",
-		load: async () => (await import("./sed-S5UIK574-C0ikpRUI.mjs")).sedCommand
+		load: async () => (await import("./sed-S5UIK574-DOl6PWt5.mjs")).sedCommand
 	},
 	{
 		name: "awk",
-		load: async () => (await import("./awk2-LA3USKJP-CU79F18c.mjs")).awkCommand2
+		load: async () => (await import("./awk2-LA3USKJP-DUeD84nt.mjs")).awkCommand2
 	},
 	{
 		name: "sort",
-		load: async () => (await import("./sort-SW2YEO5B-Njc26SUn.mjs")).sortCommand
+		load: async () => (await import("./sort-SW2YEO5B-DKjLTe-O.mjs")).sortCommand
 	},
 	{
 		name: "uniq",
-		load: async () => (await import("./uniq-XSIZR6PB-Byah97Ij.mjs")).uniqCommand
+		load: async () => (await import("./uniq-XSIZR6PB-DVI8BEWZ.mjs")).uniqCommand
 	},
 	{
 		name: "comm",
-		load: async () => (await import("./comm-VV2LDX2J-DEKxgGlr.mjs")).commCommand
+		load: async () => (await import("./comm-VV2LDX2J-CVpn9toT.mjs")).commCommand
 	},
 	{
 		name: "cut",
-		load: async () => (await import("./cut-OKARJCCV-CluNzLiu.mjs")).cutCommand
+		load: async () => (await import("./cut-OKARJCCV-BjKVWby5.mjs")).cutCommand
 	},
 	{
 		name: "paste",
-		load: async () => (await import("./paste-7JC6S4DX-DL9UawIf.mjs")).pasteCommand
+		load: async () => (await import("./paste-7JC6S4DX-tqwrEvYy.mjs")).pasteCommand
 	},
 	{
 		name: "tr",
-		load: async () => (await import("./tr-36LHWFRQ-BHhoJAPK.mjs")).trCommand
+		load: async () => (await import("./tr-36LHWFRQ--Lxi-rUi.mjs")).trCommand
 	},
 	{
 		name: "rev",
-		load: async () => (await import("./rev-5EHFX4EJ-Dxay6iFE.mjs")).rev
+		load: async () => (await import("./rev-5EHFX4EJ-Lno-pSvM.mjs")).rev
 	},
 	{
 		name: "nl",
-		load: async () => (await import("./nl-WSDW7I4O-DveMZ08l.mjs")).nl
+		load: async () => (await import("./nl-WSDW7I4O-Dkal6Jz6.mjs")).nl
 	},
 	{
 		name: "fold",
-		load: async () => (await import("./fold-4TQNYMSW-BVCyD8C0.mjs")).fold
+		load: async () => (await import("./fold-4TQNYMSW-DdElN4Da.mjs")).fold
 	},
 	{
 		name: "expand",
-		load: async () => (await import("./expand-JSPG6VOP-Cmm7S480.mjs")).expand
+		load: async () => (await import("./expand-JSPG6VOP-CjEvgYE7.mjs")).expand
 	},
 	{
 		name: "unexpand",
-		load: async () => (await import("./unexpand-CADSA4VO-CHiw_MI4.mjs")).unexpand
+		load: async () => (await import("./unexpand-CADSA4VO-CE8Q-7DI.mjs")).unexpand
 	},
 	{
 		name: "strings",
-		load: async () => (await import("./strings-6WDHLGMX-Dix-GFiu.mjs")).strings
+		load: async () => (await import("./strings-6WDHLGMX-DSFHiHo6.mjs")).strings
 	},
 	{
 		name: "split",
-		load: async () => (await import("./split-4KKZZXXE-C97QsnxB.mjs")).split
+		load: async () => (await import("./split-4KKZZXXE-DXwRJvCX.mjs")).split
 	},
 	{
 		name: "column",
-		load: async () => (await import("./column-XT6UFXNQ-B8RfIkpb.mjs")).column
+		load: async () => (await import("./column-XT6UFXNQ-D7U-7Zb_.mjs")).column
 	},
 	{
 		name: "join",
-		load: async () => (await import("./join-TBRGI3LQ-BU7FYSK3.mjs")).join
+		load: async () => (await import("./join-TBRGI3LQ-BPbb462M.mjs")).join
 	},
 	{
 		name: "tee",
-		load: async () => (await import("./tee-YUZ2FKCJ-6jGvzLuO.mjs")).teeCommand
+		load: async () => (await import("./tee-YUZ2FKCJ-DeL5TxOv.mjs")).teeCommand
 	},
 	{
 		name: "find",
-		load: async () => (await import("./find-INTH3OLC-D6wBmhsd.mjs")).findCommand
+		load: async () => (await import("./find-INTH3OLC-BuB0ASqa.mjs")).findCommand
 	},
 	{
 		name: "basename",
@@ -23967,19 +23974,19 @@ var tt = [
 	},
 	{
 		name: "tree",
-		load: async () => (await import("./tree-YLD52CNT-CuJMHpsw.mjs")).treeCommand
+		load: async () => (await import("./tree-YLD52CNT-BX10X2C8.mjs")).treeCommand
 	},
 	{
 		name: "du",
-		load: async () => (await import("./du-572XNP42-BTLDH4CK.mjs")).duCommand
+		load: async () => (await import("./du-572XNP42-D2LEmfx9.mjs")).duCommand
 	},
 	{
 		name: "env",
-		load: async () => (await import("./env-36M5BO7M-CjuGiDaW.mjs")).envCommand
+		load: async () => (await import("./env-36M5BO7M-CQz3heu4.mjs")).envCommand
 	},
 	{
 		name: "printenv",
-		load: async () => (await import("./env-36M5BO7M-CjuGiDaW.mjs")).printenvCommand
+		load: async () => (await import("./env-36M5BO7M-CQz3heu4.mjs")).printenvCommand
 	},
 	{
 		name: "alias",
@@ -23995,7 +24002,7 @@ var tt = [
 	},
 	{
 		name: "xargs",
-		load: async () => (await import("./xargs-MGZPH7AX-DDoz_2hL.mjs")).xargsCommand
+		load: async () => (await import("./xargs-MGZPH7AX-Da4TABeU.mjs")).xargsCommand
 	},
 	{
 		name: "true",
@@ -24011,23 +24018,23 @@ var tt = [
 	},
 	{
 		name: "bash",
-		load: async () => (await import("./bash-YZ33HQZQ-Tqw_IzZM.mjs")).bashCommand
+		load: async () => (await import("./bash-YZ33HQZQ-BPjbb6w0.mjs")).bashCommand
 	},
 	{
 		name: "sh",
-		load: async () => (await import("./bash-YZ33HQZQ-Tqw_IzZM.mjs")).shCommand
+		load: async () => (await import("./bash-YZ33HQZQ-BPjbb6w0.mjs")).shCommand
 	},
 	{
 		name: "jq",
-		load: async () => (await import("./jq-4XLYLOS5-tfCBGz19.mjs")).jqCommand
+		load: async () => (await import("./jq-4XLYLOS5-vNG15h8L.mjs")).jqCommand
 	},
 	{
 		name: "base64",
-		load: async () => (await import("./base64-C2AIWVNC-ESsdavRZ.mjs")).base64Command
+		load: async () => (await import("./base64-C2AIWVNC-DCgZ4OVw.mjs")).base64Command
 	},
 	{
 		name: "diff",
-		load: async () => (await import("./diff-MWJFIG7X-CuSut3C1.mjs")).diffCommand
+		load: async () => (await import("./diff-MWJFIG7X-BCHpDWKE.mjs")).diffCommand
 	},
 	{
 		name: "date",
@@ -24035,15 +24042,15 @@ var tt = [
 	},
 	{
 		name: "sleep",
-		load: async () => (await import("./sleep-X22JJINO-lQ5Wi1rP.mjs")).sleepCommand
+		load: async () => (await import("./sleep-X22JJINO-CyAkxQSD.mjs")).sleepCommand
 	},
 	{
 		name: "timeout",
-		load: async () => (await import("./timeout-YDCRSLPQ-D42ruxso.mjs")).timeoutCommand
+		load: async () => (await import("./timeout-YDCRSLPQ-CDHmK2ET.mjs")).timeoutCommand
 	},
 	{
 		name: "time",
-		load: async () => (await import("./time-D4LNBSWX-D7RWA_NU.mjs")).timeCommand
+		load: async () => (await import("./time-D4LNBSWX-BDvqGzoU.mjs")).timeCommand
 	},
 	{
 		name: "seq",
@@ -24051,19 +24058,19 @@ var tt = [
 	},
 	{
 		name: "expr",
-		load: async () => (await import("./expr-5JAACS4X-C3PXSs0i.mjs")).exprCommand
+		load: async () => (await import("./expr-5JAACS4X-CekL4kzy.mjs")).exprCommand
 	},
 	{
 		name: "md5sum",
-		load: async () => (await import("./md5sum-SPU24VSG-DDehVi3L.mjs")).md5sumCommand
+		load: async () => (await import("./md5sum-SPU24VSG-BikEaErI.mjs")).md5sumCommand
 	},
 	{
 		name: "sha1sum",
-		load: async () => (await import("./sha1sum-2PTOAFR6-hLKNluNQ.mjs")).sha1sumCommand
+		load: async () => (await import("./sha1sum-2PTOAFR6-GuPK_c0G.mjs")).sha1sumCommand
 	},
 	{
 		name: "sha256sum",
-		load: async () => (await import("./sha256sum-NS7D3IXX-c6RHEh31.mjs")).sha256sumCommand
+		load: async () => (await import("./sha256sum-NS7D3IXX-KDhoCBD7.mjs")).sha256sumCommand
 	},
 	{
 		name: "file",
@@ -24071,11 +24078,11 @@ var tt = [
 	},
 	{
 		name: "html-to-markdown",
-		load: async () => (await import("./html-to-markdown-JW4MSQZO-Dq7eYKW0.mjs")).htmlToMarkdownCommand
+		load: async () => (await import("./html-to-markdown-JW4MSQZO-BthuArNM.mjs")).htmlToMarkdownCommand
 	},
 	{
 		name: "help",
-		load: async () => (await import("./help-HZ6M2CKN-BCHt7Yu_.mjs")).helpCommand
+		load: async () => (await import("./help-HZ6M2CKN-lSoKoXl4.mjs")).helpCommand
 	},
 	{
 		name: "which",
@@ -24083,7 +24090,7 @@ var tt = [
 	},
 	{
 		name: "tac",
-		load: async () => (await import("./tac-2STMMJYW-Bm0D_YqQ.mjs")).tac
+		load: async () => (await import("./tac-2STMMJYW-ilclcuYi.mjs")).tac
 	},
 	{
 		name: "hostname",
@@ -24095,49 +24102,49 @@ var tt = [
 	},
 	{
 		name: "od",
-		load: async () => (await import("./od-WOKFDJTP-DCy3_AZ5.mjs")).od
+		load: async () => (await import("./od-WOKFDJTP-LkcVOtHj.mjs")).od
 	},
 	{
 		name: "gzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BjVFU42g.mjs")).gzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CQXRBTgw.mjs")).gzipCommand
 	},
 	{
 		name: "gunzip",
-		load: async () => (await import("./gzip-O5ASJAFY-BjVFU42g.mjs")).gunzipCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CQXRBTgw.mjs")).gunzipCommand
 	},
 	{
 		name: "zcat",
-		load: async () => (await import("./gzip-O5ASJAFY-BjVFU42g.mjs")).zcatCommand
+		load: async () => (await import("./gzip-O5ASJAFY-CQXRBTgw.mjs")).zcatCommand
 	}
 ];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (tt.push({
 	name: "tar",
-	load: async () => (await import("./tar-STHHZTZ6-gShA0vQ1.mjs")).tarCommand
+	load: async () => (await import("./tar-STHHZTZ6-DEQqPt4f.mjs")).tarCommand
 }), tt.push({
 	name: "yq",
-	load: async () => (await import("./yq-4QJW3EQG-mUhWBJBJ.mjs")).yqCommand
+	load: async () => (await import("./yq-4QJW3EQG-D785OqS8.mjs")).yqCommand
 }), tt.push({
 	name: "xan",
-	load: async () => (await import("./xan-Y6WF3IRG-CLfddWd-.mjs")).xanCommand
+	load: async () => (await import("./xan-Y6WF3IRG-BezI-KTd.mjs")).xanCommand
 }), tt.push({
 	name: "sqlite3",
-	load: async () => (await import("./sqlite3-CGOEFJAO-HGqCZYuu.mjs")).sqlite3Command
+	load: async () => (await import("./sqlite3-CGOEFJAO-CX7OvdMs.mjs")).sqlite3Command
 }));
 var Yt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Yt.push({
 	name: "python3",
-	load: async () => (await import("./python3-POMOR4OA-qY8EzVSe.mjs")).python3Command
+	load: async () => (await import("./python3-POMOR4OA-CQy0OWJW.mjs")).python3Command
 }), Yt.push({
 	name: "python",
-	load: async () => (await import("./python3-POMOR4OA-qY8EzVSe.mjs")).pythonCommand
+	load: async () => (await import("./python3-POMOR4OA-CQy0OWJW.mjs")).pythonCommand
 }));
 var Qt = [];
 (typeof __BROWSER__ > "u" || !__BROWSER__) && (Qt.push({
 	name: "js-exec",
-	load: async () => (await import("./js-exec-N5KEZBH7-C5C01q6k.mjs")).jsExecCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-az3ZblrQ.mjs")).jsExecCommand
 }), Qt.push({
 	name: "node",
-	load: async () => (await import("./js-exec-N5KEZBH7-C5C01q6k.mjs")).nodeStubCommand
+	load: async () => (await import("./js-exec-N5KEZBH7-az3ZblrQ.mjs")).nodeStubCommand
 }));
 new TextEncoder();
 Object.freeze({
@@ -25139,142 +25146,174 @@ const StoredRouteManifestSkillSchema = z.object({
 	description: z.string().optional(),
 	moduleFile: z.string()
 });
-const serializedRouteManifestEntrySchema = z.discriminatedUnion("kind", [
-	z.object({
-		kind: z.literal("health"),
-		method: z.literal("GET"),
-		path: z.literal("/health")
-	}),
+const attachmentSchemasSchema = z.record(z.string(), z.object({
+	requestSchema: z.record(z.string(), z.unknown()),
+	filterSchema: z.record(z.string(), z.unknown()).optional()
+}));
+const storedRouteManifestEntryV2Schema = z.discriminatedUnion("kind", [
+	z.object({ kind: z.literal("health") }),
 	z.object({
 		kind: z.literal("agent"),
-		method: z.literal("POST"),
-		path: z.string(),
-		agentSlug: z.string(),
+		slug: z.string(),
 		moduleFile: z.string(),
 		name: z.string().optional(),
 		description: z.string().optional(),
 		model: z.string(),
 		systemPrompt: z.string(),
 		toolCount: z.number().int().nonnegative(),
-		credentialCount: z.number().int().nonnegative(),
-		requestSchema: z.record(z.string(), z.unknown()),
-		responseSchema: z.record(z.string(), z.unknown())
-	}),
-	z.object({
-		kind: z.literal("agent-sessions-list"),
-		method: z.literal("GET"),
-		path: z.string(),
-		agentSlug: z.string(),
-		moduleFile: z.string()
-	}),
-	z.object({
-		kind: z.literal("agent-session-detail"),
-		method: z.literal("GET"),
-		path: z.string(),
-		agentSlug: z.string(),
-		moduleFile: z.string()
+		credentialCount: z.number().int().nonnegative()
 	}),
 	z.object({
 		kind: z.literal("workflow"),
-		method: z.literal("POST"),
-		path: z.string(),
-		workflowSlug: z.string(),
-		workflowName: z.string().optional(),
+		slug: z.string(),
+		name: z.string().optional(),
 		description: z.string().optional(),
 		subscribable: z.boolean(),
 		moduleFile: z.string(),
-		requestSchema: z.record(z.string(), z.unknown()),
-		responseSchema: z.record(z.string(), z.unknown())
-	}),
-	z.object({
-		kind: z.literal("workflow-runs-list"),
-		method: z.literal("GET"),
-		path: z.string(),
-		workflowSlug: z.string(),
-		workflowName: z.string().optional(),
-		moduleFile: z.string()
-	}),
-	z.object({
-		kind: z.literal("workflow-run-detail"),
-		method: z.literal("GET"),
-		path: z.string(),
-		workflowSlug: z.string(),
-		workflowName: z.string().optional(),
-		moduleFile: z.string()
+		requestSchema: z.record(z.string(), z.unknown())
 	}),
 	z.object({
 		kind: z.literal("trigger-webhook"),
-		method: z.literal("POST"),
-		path: z.string(),
+		endpoint: z.string(),
 		attachmentIds: z.array(z.string()),
 		moduleFile: z.string(),
-		requestSchema: z.record(z.string(), z.unknown()),
-		attachmentSchemas: z.record(z.string(), z.object({
-			requestSchema: z.record(z.string(), z.unknown()),
-			filterSchema: z.record(z.string(), z.unknown()).optional()
-		})),
-		responseSchema: z.record(z.string(), z.unknown())
+		attachmentSchemas: attachmentSchemasSchema
 	}),
 	z.object({
 		kind: z.literal("trigger-poll"),
-		method: z.literal("POST"),
-		path: z.string(),
 		attachmentId: z.string(),
 		moduleFile: z.string(),
-		schedule: z.string(),
-		responseSchema: z.record(z.string(), z.unknown())
+		schedule: z.string()
 	}),
 	z.object({
 		kind: z.literal("trigger-poll-group"),
-		method: z.literal("POST"),
-		path: z.string(),
 		pollId: z.string(),
 		attachmentIds: z.array(z.string()),
 		moduleFile: z.string(),
-		schedule: z.string(),
-		responseSchema: z.record(z.string(), z.unknown())
-	}),
-	z.object({
-		kind: z.literal("trigger-runs-list"),
-		method: z.literal("GET"),
-		path: z.string(),
-		attachmentId: z.string(),
-		moduleFile: z.string()
-	}),
-	z.object({
-		kind: z.literal("trigger-run-detail"),
-		method: z.literal("GET"),
-		path: z.string(),
-		attachmentId: z.string(),
-		moduleFile: z.string()
+		schedule: z.string()
 	}),
 	z.object({
 		kind: z.literal("cron-schedule"),
 		attachmentId: z.string(),
 		moduleFile: z.string(),
 		schedule: z.string()
-	}),
-	z.object({
-		kind: z.literal("plugin"),
-		method: z.enum([
-			"GET",
-			"POST",
-			"PUT",
-			"PATCH",
-			"DELETE"
-		]),
-		path: z.string(),
-		plugin: z.string()
 	})
 ]);
-const StoredRouteManifestSchema = z.object({
-	version: z.literal(1),
-	entries: z.array(serializedRouteManifestEntrySchema),
+const storedRouteManifestV2Schema = z.object({
+	version: z.literal(2),
+	entries: z.array(storedRouteManifestEntryV2Schema),
 	skills: z.array(StoredRouteManifestSkillSchema).default([]),
 	integrations: z.array(z.string()).optional()
 });
+const DERIVED_ENTRY_KINDS = new Set([
+	"agent-sessions-list",
+	"agent-session-detail",
+	"workflow-runs-list",
+	"workflow-run-detail",
+	"trigger-runs-list",
+	"trigger-run-detail"
+]);
+function webhookEndpointFromPath(path) {
+	return path.replace(/^\/triggers\//, "").replace(/^\/+|\/+$/g, "");
+}
+/** TODO remove after all artifacts rebuilt — upcasts legacy v1 manifests to v2. */
+function normalizeEntryToV2(entry) {
+	const kind = entry.kind;
+	if (typeof kind !== "string") return null;
+	if (DERIVED_ENTRY_KINDS.has(kind) || kind === "plugin") return null;
+	if (kind === "health") return { kind: "health" };
+	if (kind === "agent") {
+		const slug = typeof entry.slug === "string" ? entry.slug : typeof entry.agentSlug === "string" ? entry.agentSlug : void 0;
+		if (!slug || typeof entry.moduleFile !== "string") return null;
+		return {
+			kind: "agent",
+			slug,
+			moduleFile: entry.moduleFile,
+			...typeof entry.name === "string" ? { name: entry.name } : {},
+			...typeof entry.description === "string" ? { description: entry.description } : {},
+			model: typeof entry.model === "string" ? entry.model : "",
+			systemPrompt: typeof entry.systemPrompt === "string" ? entry.systemPrompt : "",
+			toolCount: typeof entry.toolCount === "number" ? entry.toolCount : 0,
+			credentialCount: typeof entry.credentialCount === "number" ? entry.credentialCount : 0
+		};
+	}
+	if (kind === "workflow") {
+		const slug = typeof entry.slug === "string" ? entry.slug : typeof entry.workflowSlug === "string" ? entry.workflowSlug : void 0;
+		if (!slug || typeof entry.moduleFile !== "string") return null;
+		const name = typeof entry.name === "string" ? entry.name : typeof entry.workflowName === "string" ? entry.workflowName : void 0;
+		return {
+			kind: "workflow",
+			slug,
+			moduleFile: entry.moduleFile,
+			...name ? { name } : {},
+			...typeof entry.description === "string" ? { description: entry.description } : {},
+			subscribable: entry.subscribable === true,
+			requestSchema: entry.requestSchema && typeof entry.requestSchema === "object" ? entry.requestSchema : {}
+		};
+	}
+	if (kind === "trigger-webhook") {
+		if (typeof entry.moduleFile !== "string" || !Array.isArray(entry.attachmentIds)) return null;
+		const endpoint = typeof entry.endpoint === "string" ? entry.endpoint : typeof entry.path === "string" ? webhookEndpointFromPath(entry.path) : void 0;
+		if (!endpoint) return null;
+		return {
+			kind: "trigger-webhook",
+			endpoint,
+			attachmentIds: entry.attachmentIds,
+			moduleFile: entry.moduleFile,
+			attachmentSchemas: entry.attachmentSchemas && typeof entry.attachmentSchemas === "object" ? entry.attachmentSchemas : {}
+		};
+	}
+	if (kind === "trigger-poll") {
+		if (typeof entry.attachmentId !== "string" || typeof entry.moduleFile !== "string" || typeof entry.schedule !== "string") return null;
+		return {
+			kind: "trigger-poll",
+			attachmentId: entry.attachmentId,
+			moduleFile: entry.moduleFile,
+			schedule: entry.schedule
+		};
+	}
+	if (kind === "trigger-poll-group") {
+		if (typeof entry.pollId !== "string" || typeof entry.moduleFile !== "string" || typeof entry.schedule !== "string" || !Array.isArray(entry.attachmentIds)) return null;
+		return {
+			kind: "trigger-poll-group",
+			pollId: entry.pollId,
+			attachmentIds: entry.attachmentIds,
+			moduleFile: entry.moduleFile,
+			schedule: entry.schedule
+		};
+	}
+	if (kind === "cron-schedule") {
+		if (typeof entry.attachmentId !== "string" || typeof entry.moduleFile !== "string" || typeof entry.schedule !== "string") return null;
+		return {
+			kind: "cron-schedule",
+			attachmentId: entry.attachmentId,
+			moduleFile: entry.moduleFile,
+			schedule: entry.schedule
+		};
+	}
+	return null;
+}
+/** TODO remove after all artifacts rebuilt — upcasts legacy v1 manifests to v2. */
+function normalizeStoredRouteManifestToV2(value) {
+	if (!value || typeof value !== "object") throw new Error("Invalid route manifest");
+	const raw = value;
+	if (raw.version === 2) return storedRouteManifestV2Schema.parse(value);
+	const entriesRaw = Array.isArray(raw.entries) ? raw.entries : [];
+	const entries = [];
+	for (const entry of entriesRaw) {
+		if (!entry || typeof entry !== "object") continue;
+		const normalized = normalizeEntryToV2(entry);
+		if (normalized) entries.push(normalized);
+	}
+	return storedRouteManifestV2Schema.parse({
+		version: 2,
+		entries,
+		skills: raw.skills ?? [],
+		integrations: raw.integrations
+	});
+}
 function parseStoredRouteManifest(value) {
-	return StoredRouteManifestSchema.parse(value);
+	return normalizeStoredRouteManifestToV2(value);
 }
 /** Messaging platforms that support agent gateway bindings. */
 const ChannelPlatformKeySchema = z.enum(["slack"]);
@@ -48823,9 +48862,10 @@ function getPgBoss() {
 	return boss;
 }
 /** Postgres NOTIFY channel — lowercase identifier (project ids are UUIDs, well under 63 chars). */
-function pgCancelChannelName(scope, projectId) {
+function pgCancelChannelName(scope, id) {
 	if (scope === "platform") return "keystroke_cancel_platform";
-	return `keystroke_cancel_${(projectId ?? "default").replace(/[^a-z0-9_]/gi, "_").toLowerCase()}`;
+	if (scope === "organization") return `keystroke_cancel_org_${(id ?? "default").replace(/[^a-z0-9_]/gi, "_").toLowerCase()}`;
+	return `keystroke_cancel_${(id ?? "default").replace(/[^a-z0-9_]/gi, "_").toLowerCase()}`;
 }
 /** Shared queue name for the platform control-plane scope. */
 const DEFAULT_QUEUE_NAME = "keystroke";
@@ -48841,12 +48881,20 @@ function pgBossProjectQueueName(projectId) {
 	if (name.length <= 50) return name;
 	return `${DEFAULT_QUEUE_NAME}_${createHash("sha1").update(projectId).digest("hex").slice(0, 40)}`;
 }
+function pgBossOrgQueueName(organizationId) {
+	const name = `${DEFAULT_QUEUE_NAME}_org_${organizationId.replace(/[^a-zA-Z0-9_]/g, "_")}`;
+	if (name.length <= 50) return name;
+	return `${DEFAULT_QUEUE_NAME}_org_${createHash("sha1").update(organizationId).digest("hex").slice(0, 36)}`;
+}
 function buildPgBossJobQueue(boss, options) {
 	const queueName = options.queueName ?? "keystroke";
-	const cancelChannel = createPostgresCancelChannel(options.connectionString, pgCancelChannelName(options.cancelScope ?? "platform", options.projectId));
+	const cancelChannel = createPostgresCancelChannel(options.connectionString, pgCancelChannelName(options.cancelScope ?? "platform", options.cancelScope === "organization" ? options.organizationId : options.projectId));
 	return {
 		async enqueue(input) {
-			const jobId = await boss.send(queueName, input, {
+			const jobId = await boss.send(queueName, {
+				...input,
+				payload: input.payload
+			}, {
 				retryLimit: (input.maxAttempts ?? 3) - 1,
 				retryDelay: Math.ceil(retryDelayMs(1) / 1e3),
 				startAfter: input.scheduledAt,
@@ -48880,7 +48928,8 @@ function buildPgBossJobQueue(boss, options) {
 					attempt,
 					maxAttempts,
 					exhaustedRetries: attempt >= maxAttempts,
-					scheduledAt: data.scheduledAt ? new Date(data.scheduledAt) : /* @__PURE__ */ new Date()
+					scheduledAt: data.scheduledAt ? new Date(data.scheduledAt) : /* @__PURE__ */ new Date(),
+					projectId: data.projectId
 				});
 			});
 			return async () => {
@@ -48908,8 +48957,9 @@ async function createPgBossQueue(options) {
 		stopBossOnWorkerStop: true,
 		queueName,
 		connectionString: options.connectionString,
-		cancelScope: "project",
-		projectId: options.projectId
+		cancelScope: options.cancelScope ?? "project",
+		projectId: options.projectId,
+		organizationId: options.organizationId
 	});
 }
 async function createSharedPgBossJobQueue(boss, options) {
@@ -48924,7 +48974,7 @@ async function createSharedPgBossJobQueue(boss, options) {
 function resolveUrl(ctx) {
 	return ctx.url ?? resolveProjectDatabaseUrlFromEnv(process.env) ?? DEFAULT_DATABASE_URL;
 }
-/** Postgres pg-boss backend. Platform scope shares one queue; project scope gets a per-project queue. */
+/** Postgres pg-boss backend. Platform scope shares one queue; org scope gets one queue per org. */
 function pgBossSchedulerPlugin() {
 	return defineSchedulerPlugin({
 		name: "pg-boss",
@@ -48934,6 +48984,16 @@ function pgBossSchedulerPlugin() {
 				await startPgBoss(url);
 				return createSharedPgBossJobQueue(getPgBoss(), { connectionString: url });
 			}
+			if (ctx.scope === "organization") {
+				const organizationId = ctx.organizationId;
+				if (!organizationId) throw new Error("organizationId is required for organization-scoped pg-boss queue");
+				return createPgBossQueue({
+					connectionString: url,
+					queueName: pgBossOrgQueueName(organizationId),
+					cancelScope: "organization",
+					organizationId
+				});
+			}
 			const projectId = ctx.projectId ?? getProjectScopeId();
 			return createPgBossQueue({
 				connectionString: url,
@@ -49330,4 +49390,4 @@ function minioStoragePlugin(options = {}) {
 //#endregion
 export { ListOrganizationInvitationsResponseSchema as $, mapOrganizationInvitation as $t, CreateApiKeyResponseSchema as A, o as An, StoredProjectSourceManifestSchema as At, ErrorResponseSchema as B, __toESM as Bn, UpdateProjectSettingsRequestSchema as Bt, AcceptOrganizationInvitationResponseSchema as C, x$1 as Cn, RecentResourceListResponseSchema as Ct, AgentSummarySchema as D, b as Dn, SkillSummarySchema as Dt, AgentSummaryListResponseSchema as E, r$1 as En, SkillSummaryListResponseSchema as Et, CreateProjectArtifactResponseSchema as F, r1 as Fn, UpdateOrganizationMemberResponseSchema as Ft, HistoryRunListResponseSchema as G, UserPreferencesPatchSchema as Gt, HistoryRunCancelResponseSchema as H, UploadProjectSourceResponseSchema as Ht, CreateProjectRequestSchema as I, defaultHostingPlugin as In, UpdateOrganizationRequestSchema as It, InviteProjectMembersRequestSchema as J, WorkflowSummaryListResponseSchema as Jt, InviteOrganizationMembersRequestSchema as K, UserPreferencesSchema as Kt, CreateProjectResponseSchema as L, pingProjectTarget as Ln, UpdateProjectMemberRequestSchema as Lt, CreateCredentialsResponseSchema as M, h as Mn, SubmitTeamRequestResponseSchema as Mt, CreateOrganizationRequestSchema as N, b$1 as Nn, UpdateCredentialRequestSchema as Nt, CompleteProjectArtifactResponseSchema as O, u as On, SlugAvailabilityQuerySchema as Ot, CreateOrganizationResponseSchema as P, I1 as Pn, UpdateOrganizationMemberRequestSchema as Pt, ListCredentialsResponseSchema as Q, listenPortFromPublicUrl as Qt, DeclineOrganizationInvitationResponseSchema as R, __commonJSMin as Rn, UpdateProjectMemberResponseSchema as Rt, ACTIVE_ORG_HEADER as S, d$1 as Sn, ProjectSourceResourcesSchema as St, AgentSummaryDetailResponseSchema as T, r as Tn, SkillSummaryDetailResponseSchema as Tt, HistoryRunDetailResponseSchema as U, UserAvatarPatchSchema as Ut, GetCredentialResponseSchema as V, UploadProjectSourceManifestRequestSchema as Vt, HistoryRunListQuerySchema as W, UserAvatarSchema as Wt, ListApiKeysResponseSchema as X, buildCredentialInstanceLabel as Xt, InviteProjectMembersResponseSchema as Y, WorkflowSummarySchema as Yt, ListAppsResponseSchema as Z, displayCredentialAppName as Zt, createJobQueue as _, n$1 as _n, ProjectReachabilityResponseSchema as _t, isKeystrokeAssetsAvatarPublicUrl as a, mapProjectSettings as an, ListProjectMetricsResponseSchema as at, readCredentialInstanceSecret as b, x as bn, ProjectSlugAvailabilityQuerySchema as bt, isUserAvatarStorageKey as c, normalizeUserPreferences as cn, OrganizationSidebarBrandingSchema as ct, minioStoragePlugin as d, parseStoredRouteManifest as dn, PresignOrgLogoRequestSchema as dt, mapOrganizationMember as en, ListOrganizationMembersResponseSchema as et, orgLogoStorageKey as f, projectFileId as fn, PresignOrgLogoResponseSchema as ft, userAvatarStorageKey as g, i as gn, PresignUserAvatarResponseSchema as gt, publicKeystrokeAssetsObjectUrl as h, n as hn, PresignUserAvatarRequestSchema as ht, extractRouteManifestFromArtifact as i, mapProjectMember as in, ListProjectMembersResponseSchema as it, CreateCredentialsRequestSchema as j, r$3 as jn, SubmitTeamRequestRequestSchema as jt, CreateApiKeyRequestSchema as k, e as kn, SlugAvailabilityResponseSchema as kt, keystrokeAssetsAvatarKeyFromPublicUrl as l, organizationInvitationAcceptPath as ln, PLATFORM_RESOURCE_UNSUPPORTED_TEXT as lt, projectSourceBlobKey as m, validationErrorResponse as mn, PresignProjectSourceResponseSchema as mt, createAssetsStorageClient as n, mapProjectArtifact as nn, ListProjectDeploymentsResponseSchema as nt, isKeystrokeAssetsOrgLogoPublicUrl as o, mapUserOrganization as on, ListProjectsResponseSchema as ot, projectArtifactKey as p, resolveUniqueCredentialInstanceLabel as pn, PresignProjectSourceRequestSchema as pt, InviteOrganizationMembersResponseSchema as q, WorkflowSummaryDetailResponseSchema as qt, ensureKeystrokeAssetsBucket as r, mapProjectDeployment as rn, ListProjectFilesResponseSchema as rt, isOrgLogoStorageKey as s, mergeUserPreferences as sn, OrganizationSidebarBrandingPatchSchema as st, RouteManifestNotFoundError as t, mapProject as tn, ListOrganizationsResponseSchema as tt, keystrokeAssetsOrgLogoKeyFromPublicUrl as u, organizationSlugErrorCodeFromMessage as un, PROJECT_SLUG_TAKEN_MESSAGE as ut, defaultSchedulerPlugin as v, c as vn, ProjectResponseSchema as vt, ActiveOrganizationResponseSchema as w, c$1 as wn, RecentResourceSchema as wt, setCredentialInstanceSecret as x, a$1 as xn, ProjectSlugAvailabilityResponseSchema as xt, deleteCredentialInstanceSecret as y, p as yn, ProjectSettingsResponseSchema as yt, DownloadActiveProjectArtifactResponseSchema as z, __require as zn, UpdateProjectRequestSchema as zt };
 
-//# sourceMappingURL=dist-70NUfApd.mjs.map
+//# sourceMappingURL=dist-u6HScFsc.mjs.map