@keystrokehq/platform 0.1.81 → 0.1.85

package/LICENSE

@@ -1,21 +1,13 @@
-MIT License
+Copyright 2026 Sprint Labs, Inc. All rights reserved.
 
-Copyright (c) 2026 Dallin
+This private canonical monorepo contains materials under different terms:
 
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+- The downstream public projection described by `oss/` is made available under
+  the Elastic License 2.0 in `oss/LICENSE`.
+- Code and materials in paths containing an exact `cloud` segment are
+  proprietary and governed by the nearest applicable proprietary license.
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+Access to this private repository does not itself grant a license to use, copy,
+modify, distribute, make available, or create derivative works from its
+contents. Sprint Labs employees, contractors, customers, and partners receive
+rights only under their applicable written agreements.

package/README.md

@@ -1,44 +1,63 @@
-# @keystrokehq/platform
+# `@keystrokehq/platform`
 
-Platform control plane — config API and HTTP server.
+Keystroke's open-source platform control plane: organizations, projects,
+deployments, credentials, authentication, and the HTTP server that backs the
+web dashboard and CLI.
 
-## Dev
+The package exposes configuration and startup APIs. Hosting, scheduling,
+storage, billing, and other deployment-specific behavior plug in through
+neutral interfaces.
+
+## Development
+
+Run from the monorepo root:
 
 ```bash
 pnpm --filter @keystrokehq/platform dev
 ```
 
-## Cloud
+The platform database migrations are embedded at build time.
+`@keystrokehq/http`, `@keystrokehq/runtime`, and `@keystrokehq/database`
+remain runtime dependencies so the platform bundle does not duplicate shared
+runtime symbols.
 
-Production runs via `@keystroke-cloud/platform` ([`packages/cloud/platform`](../../packages/cloud/platform)) in this monorepo, which imports **`@keystrokehq/platform/start`** and wires cloud plugins (e.g. `@keystroke-cloud/fly-io-plugin`):
+## Embedding
 
-```ts
+```typescript
 import { definePlatformConfig } from "@keystrokehq/platform";
 import { startPlatformServer } from "@keystrokehq/platform/start";
 
-await startPlatformServer(definePlatformConfig({ hosting: flyPlugin({ ... }) }));
+const config = definePlatformConfig({
+  // Optional hosting, scheduler, storage, and runtime adapters.
+});
+
+await startPlatformServer(config);
 ```
 
-`@keystrokehq/platform-database` is bundled into the platform build; migrations are embedded at library build time and ship inside the bundle. `@keystrokehq/http`, `@keystrokehq/runtime`, and `@keystrokehq/database` stay external (resolved from `node_modules` at runtime) so Rolldown can bundle the platform entry without duplicate chunk symbols.
+Use plugin hooks instead of importing deployment-specific implementations into
+this package. Public wire shapes belong in `@keystrokehq/shared`; clients access
+them through `@keystrokehq/sdk/platform`.
 
-## Team requests
+## Public endpoints
 
-`POST /api/team-requests` posts org-scoped user requests (contact, org deletion, enterprise upgrade, Slack Connect) to the internal team Slack channel. Configure `TEAM_SLACK_WEBHOOK_URL` with a Slack incoming webhook URL (`https://hooks.slack.com/services/...`). When unset, delivery is skipped so local dev works without the secret. Slack Connect requests use the same plain-text format as signup pipeline notifications (name, email, org).
+- `GET /api/public/models` returns valid AI Gateway model IDs for authoring
+  validation.
+- `POST /api/public/contact` accepts rate-limited contact requests.
+- `GET /.well-known/oauth-client-metadata` serves OAuth Client ID Metadata for
+  connecting to compatible MCP authorization servers.
 
 ## Signup notifications
 
-`POST /api/organizations` posts a **New Website Sign Up** message to the internal `#pipeline` Slack channel after a user creates their first organization. Configure `PIPELINE_SLACK_WEBHOOK_URL` with an incoming webhook scoped to `#pipeline`. When unset, delivery is skipped so local dev works without the secret. Slack delivery failures are logged but do not fail org creation.
-
-## Marketing contact
-
-`POST /api/public/contact` accepts unauthenticated marketing contact form submissions and posts them to the same `TEAM_SLACK_WEBHOOK_URL` channel with a **Contact Team/Sales Request** heading. Rate-limited per IP; includes a honeypot field (`companyWebsite`) that silently succeeds when filled.
-
-## Public models catalog
-
-`GET /api/public/models` returns `{ models: string[] }` — valid AI Gateway model ids for agent validation. Cached from the public Vercel catalog (`https://ai-gateway.vercel.sh/v1/models`); no auth required.
-
-## Outbound MCP OAuth client metadata (CIMD)
+Website sign-up (Better Auth user creation via OAuth, magic link, or password)
+posts a **New Website Sign Up** message to the internal `#pipeline` Slack
+channel. Configure `PIPELINE_SLACK_WEBHOOK_URL` with an incoming webhook scoped
+to `#pipeline`. When unset, delivery is skipped so local dev works without the
+secret. Slack delivery failures are logged but do not fail sign-up. Invited
+users created via `findOrCreateUserByEmail` do not trigger this notification.
 
-`GET /.well-known/oauth-client-metadata` returns Keystroke's OAuth Client ID Metadata Document for connecting to third-party MCP servers. No auth required. Authorization servers that advertise `client_id_metadata_document_supported` fetch this URL and use it as `client_id` (no Dynamic Client Registration).
+## Boundaries
 
-The document's `client_id` and `redirect_uris` are built from `PUBLIC_PLATFORM_PROXY_URL` (preferred) or `PUBLIC_PLATFORM_URL`. Prod uses CIMD when the AS supports it. Local/dev with `http://localhost` falls back to DCR automatically (CIMD requires a fetchable HTTPS URL). Set `PUBLIC_PLATFORM_PROXY_URL` only if you need to exercise the CIMD path against a remote AS from localhost.
+- No imports from `@keystroke-cloud/*` or exact `cloud` paths.
+- No web-dashboard implementation code; `apps/web` uses the platform SDK.
+- No provider-specific hosting or scheduler logic; implement the public plugin
+  contracts instead.

package/dist/{awk2-LA3USKJP-BCt-Yzxt.mjs → awk2-LA3USKJP-C5LsncRx.mjs}

@@ -1,4 +1,4 @@
-import { S as r1, b as b$1, c as a, f as r$1, s as x$1, u as x, x as I1 } from "./start-Da0pKC0U.mjs";
+import { S as r1, b as b$1, c as a, f as r$1, s as x$1, u as x, x as I1 } from "./start-bzcD0alo.mjs";
 import "./chunk-BZUGFHVS-B2NchobP.mjs";
 import { n as d } from "./chunk-TN7HHBQW-B8PYcKz5.mjs";
 import { n as r$2, r as s, t as o } from "./chunk-QAYAQNCG-B1r1SmqS.mjs";
@@ -2729,4 +2729,4 @@ createRequire(import.meta.url);
 //#endregion
 export { zn as awkCommand2 };
 
-//# sourceMappingURL=awk2-LA3USKJP-BCt-Yzxt.mjs.map
+//# sourceMappingURL=awk2-LA3USKJP-C5LsncRx.mjs.map