create-ailk 0.1.0

package/templates/apps/mcp/src/tools/list_pages.ts

@@ -0,0 +1,72 @@
+/**
+ * list_pages — returns published content pages, optionally filtered by type.
+ *
+ * Pure read: imports the MDX adapter from @working-theory/content-adapters (ADR 0011).
+ * No auth, no side effects, no network. The adapter reads from the filesystem.
+ *
+ * Phase 3 S3: optional `locale` parameter. Validated against `readLocales()`
+ * allowlist; invalid or unknown values silently fall back to the project's
+ * default locale (AC-i18n-07). Lists are locale-scoped — pages must exist in
+ * the requested locale's directory to be enumerated.
+ *
+ * Input:  { type?: SchemaOrgType, locale?: string }
+ * Output: { pages: Array<{ slug, type, title, description? }> }
+ * Session/scope: none — read-only public content.
+ */
+
+import { join } from "node:path";
+
+import {
+  createMdxAdapter,
+  SCHEMA_ORG_TYPES,
+  type SchemaOrgType,
+} from "@working-theory/content-adapters";
+import {
+  listPagesInputSchema,
+  listPagesOutputSchema,
+  type ListPagesInput,
+  type ListPagesOutput,
+} from "@working-theory/validation";
+
+import { resolveLocale } from "../lib/resolve-locale.js";
+
+export { listPagesInputSchema, listPagesOutputSchema };
+export type { ListPagesInput, ListPagesOutput };
+
+/**
+ * list_pages handler.
+ *
+ * Accepts an optional `contentRoot` override for testing (avoids coupling
+ * unit tests to the deployed filesystem layout). When omitted, resolves the
+ * content root relative to this file at call time (supports ESM runtime).
+ */
+export async function ailkListPages(
+  input: ListPagesInput,
+  contentRoot?: string,
+): Promise<ListPagesOutput> {
+  listPagesInputSchema.parse(input);
+
+  // Default: resolve content/ relative to cwd (works in ESM and jest/commonjs).
+  const root = contentRoot ?? join(process.cwd(), "content");
+  const locale = resolveLocale(input.locale);
+  const adapter = createMdxAdapter({ contentRoot: root, defaultLocale: locale });
+
+  const types: readonly SchemaOrgType[] = input.type
+    ? [input.type]
+    : SCHEMA_ORG_TYPES;
+
+  const perType = await Promise.all(
+    types.map((type) => adapter.listPages(type, locale)),
+  );
+
+  const pages: ListPagesOutput["pages"] = perType.flatMap((results) =>
+    results.map((page) => ({
+      slug: page.slug,
+      type: page.type,
+      title: page.title,
+      ...(page.description !== undefined && { description: page.description }),
+    })),
+  );
+
+  return listPagesOutputSchema.parse({ pages });
+}

package/templates/apps/mcp/src/tools/purchase.ts

@@ -0,0 +1,89 @@
+/**
+ * AGENT TOOL — purchase (`start_purchase`)
+ *
+ * DISABLED AT OSS CATALOG (S15a, 2026-05-12, issue #610).
+ *
+ * The implementation below is preserved for the eventual Phase 3 re-enable.
+ * The MCP catalog at `packages/metadata/src/mcp-tool-catalog.ts` filters this
+ * tool out via `OSS_DISABLED_TOOLS`, and `apps/mcp/src/server.ts` applies the
+ * same filter defensively so neither the discovery manifest nor the running
+ * server advertises it.
+ *
+ * Re-enablement requires the Phase 3 criteria documented at
+ * `docs/internal/roadmaps/phase-3-readiness.md`:
+ *
+ *   1. Identity verification confirmed at session level
+ *   2. Payment-authorization handshake with Stripe Connect (or equivalent)
+ *   3. Threat-model entry M_purchase reclassified from "Disabled" to
+ *      "Remediated"
+ *   4. Commercial-tier flag gating registered to allow re-enable only on
+ *      Pro / Agencies
+ *
+ * To re-enable: remove `"start_purchase"` from `OSS_DISABLED_TOOLS` in
+ * `packages/metadata/src/mcp-tool-catalog.ts`. The regression tests at
+ * `apps/mcp/__tests__/purchase-disabled.test.ts` and
+ * `packages/metadata/__tests__/purchase-not-in-catalog.test.ts` will fail
+ * loudly, forcing a deliberate review against the criteria above.
+ *
+ * --- Original Phase 3 U2 implementation notes ---
+ *
+ * Proxies POST /api/checkout/sessions and returns the Stripe hosted-checkout
+ * URL. Paired with the `purchaseAction` Server Action in apps/web per ADR 0013.
+ *
+ * Schemas live in `@working-theory/validation` per ADR 0013.
+ * Network calls go through `@working-theory/api-client` per architecture invariants
+ * (apps may not import from each other; shared HTTP surface lives in packages/).
+ */
+
+import { checkout } from "@working-theory/api-client";
+import {
+  purchaseInputSchema,
+  type PurchaseInput,
+  type PurchaseOutput,
+} from "@working-theory/validation";
+
+/**
+ * Export name `ailkPurchase` satisfies the parity-test naming convention
+ * (ailk<PascalVerb>) so the harness can discover it.
+ *
+ * Paired with `purchaseAction` Server Action in apps/web/app/dev/purchase/.
+ */
+export async function ailkPurchase(
+  input: PurchaseInput,
+): Promise<PurchaseOutput> {
+  // Validate input before any side effect (security requirement).
+  purchaseInputSchema.parse(input);
+
+  const baseUrl =
+    process.env.AILK_BASE_URL ||
+    process.env.NEXT_PUBLIC_BASE_URL ||
+    "http://localhost:3000";
+
+  const successUrl =
+    input.successUrl ?? `${baseUrl}/purchase/success`;
+  const cancelUrl =
+    input.cancelUrl ?? `${baseUrl}/purchase/cancel`;
+
+  const result = await checkout.createSession({
+    productCode: input.priceId,
+    ...(input.quantity !== undefined && { quantity: input.quantity }),
+    successUrl,
+    cancelUrl,
+  });
+
+  if (!result.ok) {
+    throw new Error(
+      `checkout-unavailable: POST /api/checkout/sessions returned ${result.status}`,
+    );
+  }
+
+  return { url: result.body.url };
+}
+
+// Re-export schemas/types from @working-theory/validation for barrel consumers.
+export {
+  purchaseInputSchema,
+  purchaseOutputSchema,
+  type PurchaseInput,
+  type PurchaseOutput,
+} from "@working-theory/validation";

package/templates/apps/mcp/src/tools/read_content.ts

@@ -0,0 +1,61 @@
+/**
+ * read_content — returns a single page's frontmatter + raw MDX body.
+ *
+ * Pure read: imports the MDX adapter from @working-theory/content-adapters (ADR 0011).
+ * Composes getPageBySlug (frontmatter) + getPageSource (body) into a single
+ * output shape. Returns null when the slug is not found — never throws for
+ * a missing page.
+ *
+ * Phase 3 S3: optional `locale` parameter. Validated against `readLocales()`
+ * allowlist; invalid or unknown values silently fall back to the project's
+ * default locale (AC-i18n-07). The adapter applies its own fallback chain.
+ *
+ * Input:  { type: SchemaOrgType, slug: string, locale?: string }
+ * Output: { slug, type, frontmatter, body } | null
+ * Session/scope: none — read-only public content.
+ */
+
+import { join } from "node:path";
+
+import { createMdxAdapter } from "@working-theory/content-adapters";
+import {
+  readContentInputSchema,
+  readContentOutputSchema,
+  type ReadContentInput,
+  type ReadContentOutput,
+} from "@working-theory/validation";
+
+import { resolveLocale } from "../lib/resolve-locale.js";
+
+export { readContentInputSchema, readContentOutputSchema };
+export type { ReadContentInput, ReadContentOutput };
+
+/**
+ * read_content handler.
+ *
+ * Accepts an optional `contentRoot` override for testing. When omitted,
+ * resolves the content root relative to this file at call time (supports
+ * ESM runtime).
+ */
+export async function ailkReadContent(
+  input: ReadContentInput,
+  contentRoot?: string,
+): Promise<ReadContentOutput> {
+  readContentInputSchema.parse(input);
+
+  // Default: resolve content/ relative to cwd (works in ESM and jest/commonjs).
+  const root = contentRoot ?? join(process.cwd(), "content");
+  const locale = resolveLocale(input.locale);
+
+  const adapter = createMdxAdapter({ contentRoot: root, defaultLocale: locale });
+
+  const source = await adapter.getPageSource(input.type, input.slug, locale);
+  if (source === null) return null;
+
+  return readContentOutputSchema.parse({
+    slug: source.frontmatter.slug,
+    type: source.frontmatter.type,
+    frontmatter: source.frontmatter as Record<string, unknown>,
+    body: source.body,
+  });
+}

package/templates/apps/mcp/src/tools/request_callback.ts

@@ -0,0 +1,51 @@
+/**
+ * request_callback — schedule a callback request.
+ *
+ * Validates input via Zod, forwards to POST /api/leads/callback via
+ * @working-theory/api-client, and shapes the response into the MCP output schema.
+ * No business logic — orchestration lives in apps/api B6.
+ *
+ * Input:  { name, phone, preferredTime? }
+ * Output: { ok: true, id, persisted } | { ok: false, error: { kind, ... } }
+ * Session/scope: none — anonymous write, no auth required.
+ */
+
+import { apiClient } from "@working-theory/api-client";
+import {
+  requestCallbackInputSchema,
+  requestCallbackOutputSchema,
+  type RequestCallbackInput,
+  type RequestCallbackOutput,
+} from "@working-theory/validation";
+
+export { requestCallbackInputSchema, requestCallbackOutputSchema };
+export type { RequestCallbackInput, RequestCallbackOutput };
+
+export async function ailkRequestCallback(
+  input: RequestCallbackInput,
+): Promise<RequestCallbackOutput> {
+  const parsed = requestCallbackInputSchema.safeParse(input);
+  if (!parsed.success) {
+    return {
+      ok: false,
+      error: { kind: "invalid_input", issues: parsed.error.issues },
+    };
+  }
+
+  const { name, phone, preferredTime } = parsed.data;
+  const siteId = process.env.AILK_SITE_ID ?? "default";
+  const body = {
+    siteId,
+    name,
+    phone,
+    ...(preferredTime !== undefined && { preferredTime }),
+    payload: {},
+  };
+
+  const res = await apiClient.leads.callback(body);
+  if (!res.ok) {
+    return { ok: false, error: { kind: "api_error", status: res.status } };
+  }
+
+  return { ok: true, id: res.body.id, persisted: res.body.persisted };
+}

package/templates/apps/mcp/src/tools/scaffold.ts

@@ -0,0 +1,119 @@
+/**
+ * scaffold — creates an AI Launch Kit starter project via create-ailk.
+ *
+ * Agent-only: no web Server Action equivalent. Scaffolding is an
+ * orchestration-layer action that only makes sense for an agent driving a
+ * project setup flow.
+ *
+ * Implementation: spawns the `create-ailk` CLI binary via Node's spawnSync.
+ * `apps/mcp` does NOT import `create-ailk` directly — the package is not on
+ * the apps/mcp allow-list in architecture.yaml (it is a standalone CLI, not a
+ * side-effect-free read library per ADR 0011). Spawning the built CLI binary
+ * is the architecturally correct delegation pattern.
+ *
+ * The CLI binary path defaults to `<cwd>/packages/create-ailk/dist/cli.js`.
+ * The MCP server runs from the repo root (cwd = repo root), so this resolves
+ * correctly in production and in integration tests.
+ *
+ * Input:  { targetDir, projectName, preset? }
+ *   targetDir   — absolute or relative path to scaffold into; must not exist
+ *                 or must be empty (enforced by create-ailk ValidationError)
+ *   projectName — project name used in README and package.json
+ *   preset      — permissive string; reserved for Phase 3 U6 named starters
+ *                 // TODO(U6): narrow to z.enum([...]) once named presets land
+ *
+ * Output: { targetDir, filesCreated }
+ *   targetDir    — resolved absolute path that was scaffolded
+ *   filesCreated — number of files written
+ *
+ * Session/scope: none — scaffolding is a write to the local filesystem
+ * initiated by the agent; no auth required for the tool itself.
+ */
+
+import { spawnSync } from "node:child_process";
+import { existsSync, readdirSync } from "node:fs";
+import { join, resolve } from "node:path";
+
+import {
+  scaffoldInputSchema,
+  scaffoldOutputSchema,
+  type ScaffoldInput,
+  type ScaffoldOutput,
+} from "@working-theory/validation";
+
+export { scaffoldInputSchema, scaffoldOutputSchema };
+export type { ScaffoldInput, ScaffoldOutput };
+
+/**
+ * Resolve the path to the create-ailk CLI binary.
+ *
+ * Uses process.cwd() — the MCP server always starts from the repo root.
+ * Accepts an override for tests.
+ */
+function resolveCliBin(override?: string): string {
+  if (override) return override;
+  return join(process.cwd(), "packages/create-ailk/dist/cli.js");
+}
+
+/**
+ * Count all files recursively under a directory.
+ */
+function countFiles(dir: string): number {
+  if (!existsSync(dir)) return 0;
+  let count = 0;
+  const stack: string[] = [dir];
+  while (stack.length > 0) {
+    const current = stack.pop()!;
+    for (const entry of readdirSync(current, { withFileTypes: true })) {
+      if (entry.isDirectory()) {
+        stack.push(`${current}/${entry.name}`);
+      } else {
+        count++;
+      }
+    }
+  }
+  return count;
+}
+
+/**
+ * ailkScaffold handler.
+ *
+ * Spawns the create-ailk CLI binary to scaffold a starter project into
+ * targetDir. The binary must be pre-built (`pnpm --filter create-ailk build`).
+ *
+ * Accepts an optional `cliBin` override for testing (mirrors the contentRoot
+ * override pattern in ailkAudit).
+ */
+export async function ailkScaffold(
+  input: ScaffoldInput,
+  cliBin?: string,
+): Promise<ScaffoldOutput> {
+  scaffoldInputSchema.parse(input);
+
+  const bin = resolveCliBin(cliBin);
+  const targetAbs = resolve(input.targetDir);
+
+  // Spawn the CLI synchronously — no network, no async I/O needed.
+  // Hard-coded node invocation; only targetDir flows through user input.
+  const result = spawnSync("node", [bin, targetAbs], {
+    stdio: ["ignore", "pipe", "pipe"],
+    shell: false,
+    encoding: "utf8",
+  });
+
+  if (result.status !== 0) {
+    // Extract the error message from stderr (CLI writes "[create-ailk] <msg>").
+    const stderr = (result.stderr ?? "").trim();
+    const msg = stderr.replace(/^\[create-ailk\]\s*/, "") || "scaffold failed";
+    throw new Error(msg);
+  }
+
+  const filesCreated = countFiles(targetAbs);
+
+  const output: ScaffoldOutput = {
+    targetDir: targetAbs,
+    filesCreated,
+  };
+
+  return scaffoldOutputSchema.parse(output);
+}

package/templates/apps/mcp/src/tools/search_content.ts

@@ -0,0 +1,59 @@
+/**
+ * search_content — full-text search across published content pages.
+ *
+ * Pure read: imports the MDX adapter from @working-theory/content-adapters (ADR 0011).
+ * Delegates to adapter.searchPages which scores by title/description/body match.
+ * Limit defaults to 10; max 50. Query capped at 200 chars (enforced by Zod).
+ *
+ * Phase 3 S3: optional `locale` parameter. Search is locale-scoped — only the
+ * requested locale's content directory is searched. Invalid or unknown values
+ * silently fall back to the project's default locale (AC-i18n-07).
+ *
+ * Input:  { query: string, type?: SchemaOrgType, limit?: number, locale?: string }
+ * Output: { results: Array<{ slug, type, title, snippet, score }> }
+ * Session/scope: none — read-only public content.
+ */
+
+import { join } from "node:path";
+
+import { createMdxAdapter } from "@working-theory/content-adapters";
+import {
+  searchContentInputSchema,
+  searchContentOutputSchema,
+  type SearchContentInput,
+  type SearchContentOutput,
+} from "@working-theory/validation";
+
+import { resolveLocale } from "../lib/resolve-locale.js";
+
+export { searchContentInputSchema, searchContentOutputSchema };
+export type { SearchContentInput, SearchContentOutput };
+
+const DEFAULT_LIMIT = 10;
+
+/**
+ * search_content handler.
+ *
+ * Accepts an optional `contentRoot` override for testing. When omitted,
+ * resolves the content root relative to cwd (supports ESM runtime).
+ */
+export async function ailkSearchContent(
+  input: SearchContentInput,
+  contentRoot?: string,
+): Promise<SearchContentOutput> {
+  searchContentInputSchema.parse(input);
+
+  const root = contentRoot ?? join(process.cwd(), "content");
+  const locale = resolveLocale(input.locale);
+  const adapter = createMdxAdapter({ contentRoot: root, defaultLocale: locale });
+
+  const options = {
+    limit: input.limit ?? DEFAULT_LIMIT,
+    ...(input.type !== undefined && { type: input.type }),
+    locale,
+  };
+
+  const rawResults = await adapter.searchPages(input.query, options);
+
+  return searchContentOutputSchema.parse({ results: rawResults });
+}

package/templates/apps/mcp/src/tools/subscribe_newsletter.ts

@@ -0,0 +1,47 @@
+/**
+ * subscribe_newsletter — add an email to the newsletter list.
+ *
+ * Validates input via Zod, forwards to POST /api/leads/subscribe via
+ * @working-theory/api-client, and shapes the response into the MCP output schema.
+ * No business logic — orchestration lives in apps/api B6.
+ *
+ * Input:  { email, firstName? }
+ * Output: { ok: true, id, persisted } | { ok: false, error: { kind, ... } }
+ * Session/scope: none — anonymous write, no auth required.
+ */
+
+import { apiClient } from "@working-theory/api-client";
+import {
+  subscribeNewsletterInputSchema,
+  subscribeNewsletterOutputSchema,
+  type SubscribeNewsletterInput,
+  type SubscribeNewsletterOutput,
+} from "@working-theory/validation";
+
+export { subscribeNewsletterInputSchema, subscribeNewsletterOutputSchema };
+export type { SubscribeNewsletterInput, SubscribeNewsletterOutput };
+
+export async function ailkSubscribeNewsletter(
+  input: SubscribeNewsletterInput,
+): Promise<SubscribeNewsletterOutput> {
+  const parsed = subscribeNewsletterInputSchema.safeParse(input);
+  if (!parsed.success) {
+    return {
+      ok: false,
+      error: { kind: "invalid_input", issues: parsed.error.issues },
+    };
+  }
+
+  const { email } = parsed.data;
+  // firstName is not part of the canonical subscribeSchema (no payload field);
+  // it is accepted by the MCP input but dropped here for now.
+  const siteId = process.env.AILK_SITE_ID ?? "default";
+  const body = { siteId, email, source: "mcp" };
+
+  const res = await apiClient.leads.subscribe(body);
+  if (!res.ok) {
+    return { ok: false, error: { kind: "api_error", status: res.status } };
+  }
+
+  return { ok: true, id: res.body.id, persisted: res.body.persisted };
+}

package/templates/apps/mcp/src/tools/update_page.ts

@@ -0,0 +1,91 @@
+/**
+ * update_page — Paid-tier MCP tool for revising an existing content page.
+ *
+ * D14a Stage 1 Unit C — wires McpServer update_page to ContentAdapter.updatePage.
+ * Mandatory optimistic locking: caller supplies `ifMatch` (version token from a
+ * prior read or write); stale or missing tokens yield canonical conflict bodies.
+ *
+ * Validation strategy mirrors create_page — strict parse via
+ * FrontmatterSchema.extend({ body, ifMatch }) inside the handler so bad
+ * frontmatter surfaces as validation_failed (the Stage 0 catalog uses a
+ * permissive outer shape because @working-theory/metadata cannot import
+ * @working-theory/content-adapters).
+ */
+
+import { join } from "node:path";
+
+import {
+  FrontmatterSchema,
+  createMdxAdapter,
+  mapAdapterError,
+  type ContentAdapter,
+} from "@working-theory/content-adapters";
+import { z } from "zod";
+
+import { validationError, type ErrorBody } from "../lib/errors.js";
+import { requirePaidTier } from "../lib/require-paid-tier.js";
+
+const UpdatePageInputSchema = FrontmatterSchema.extend({
+  body: z.string().min(1),
+  ifMatch: z.string().min(1),
+});
+
+interface UpdatePageSuccess {
+  page: Record<string, unknown>;
+  version: string;
+}
+
+export type UpdatePageResult = UpdatePageSuccess | ErrorBody;
+
+export interface UpdatePageInput {
+  type: string;
+  slug: string;
+  page: Record<string, unknown>;
+  body: string;
+  ifMatch: string;
+}
+
+export async function ailkUpdatePage(
+  input: UpdatePageInput,
+  adapter?: ContentAdapter,
+): Promise<UpdatePageResult> {
+  const guard = await requirePaidTier();
+  if (guard) return guard;
+
+  const parsed = UpdatePageInputSchema.safeParse({
+    ...input.page,
+    type: input.type,
+    slug: input.slug,
+    body: input.body,
+    ifMatch: input.ifMatch,
+  });
+
+  if (!parsed.success) {
+    return validationError(
+      "Invalid frontmatter, body, or ifMatch for update_page.",
+      { issues: parsed.error.issues },
+    );
+  }
+
+  const { ifMatch, ...pageWithBody } = parsed.data;
+  const resolved =
+    adapter ??
+    createMdxAdapter({ contentRoot: join(process.cwd(), "content") });
+
+  try {
+    const result = await resolved.updatePage(
+      pageWithBody.type,
+      pageWithBody.slug,
+      pageWithBody,
+      { ifMatch },
+    );
+    return { page: result.page, version: result.version };
+  } catch (err) {
+    const mapped = mapAdapterError(err, {
+      type: pageWithBody.type,
+      slug: pageWithBody.slug,
+    });
+    if (mapped) return mapped;
+    throw err;
+  }
+}

package/templates/apps/mcp/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "composite": true,
+    "types": ["node"]
+  },
+  "include": ["src"],
+  "exclude": ["node_modules", "dist"],
+  "references": [
+    { "path": "../../packages/aeo" },
+    { "path": "../../packages/api-client" },
+    { "path": "../../packages/content-adapters" },
+    { "path": "../../packages/metadata" },
+    { "path": "../../packages/schema" },
+    { "path": "../../packages/validation" }
+  ]
+}

package/templates/apps/web/.env.example

@@ -0,0 +1,47 @@
+# =============================================================================
+# AI Launch Kit Web Configuration
+# =============================================================================
+# Defaults are set inside the app where reasonable; this file documents the
+# overrides apps/web reads at runtime.
+
+# =============================================================================
+# Content backend
+# =============================================================================
+# Which content adapter apps/web uses.
+#   mdx             — reads /content/<Type>/<slug>.mdx (default)
+#   pro-cms         — separate adapter, not bundled with the OSS template
+CONTENT_BACKEND=mdx
+
+# Override the on-disk content root. Defaults to <repo-root>/content.
+# AILK_CONTENT_ROOT=
+
+# =============================================================================
+# Better Auth (apps/web)
+# =============================================================================
+# Base URL Better Auth uses for OAuth callback construction.
+# BETTER_AUTH_URL=http://localhost:3000
+# Secret used to sign session cookies. REQUIRED in production.
+# BETTER_AUTH_SECRET=
+#
+# OAuth provider env vars — set both id + secret to activate a provider.
+# Provider activation is checked at boot via apps/web/lib/auth-env.ts.
+# GOOGLE_CLIENT_ID=
+# GOOGLE_CLIENT_SECRET=
+# GITHUB_CLIENT_ID=
+# GITHUB_CLIENT_SECRET=
+
+# =============================================================================
+# Observability
+# =============================================================================
+# Sentry DSN for server-side error capture (apps/web/sentry.server.config.ts).
+# Gates enabled: !!process.env.SENTRY_DSN — unset means SDK is a no-op.
+# SENTRY_DSN=
+# Sentry DSN for browser-side error capture (apps/web/sentry.client.config.ts).
+# Gates enabled: !!process.env.NEXT_PUBLIC_SENTRY_DSN — unset means SDK is a no-op.
+# NEXT_PUBLIC_SENTRY_DSN=
+# Sentry auth token used by the Sentry webpack plugin to upload source maps.
+# Required for production source map uploads; unset disables source map upload.
+# SENTRY_AUTH_TOKEN=
+# Better Stack heartbeat URL — when set, pingHeartbeat() POSTs on cron/startup.
+# Unset means the heartbeat util is a no-op (apps/web/lib/observability/better-stack.ts).
+# BETTER_STACK_HEARTBEAT_URL=