npm - decocms - Versions diffs - 2.348.2 → 2.349.1 - Mend

decocms 2.348.2 → 2.349.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1091) hide show

package/dist/client/index.html CHANGED Viewed

@@ -27,8 +27,8 @@
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <link rel="manifest" href="/manifest.webmanifest" />
     <meta name="theme-color" content="#D0EC1A" />
-    <script type="module" crossorigin src="/assets/index-CRD1iOrS.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DJ7CiM9c.css">
+    <script type="module" crossorigin src="/assets/index-CMuBHS3H.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-GIj-12tq.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/server/cli.js CHANGED Viewed

@@ -75255,7 +75255,7 @@ AS SELECT
 FROM monitoring_metrics
 GROUP BY organization_id, name, bucket, connection_id, tool_name, status
 `}),console.log("[clickhouse-schema] monitoring_metrics_rollup_1m_mv view ready")}finally{await f.close()}}catch(u){console.error("[clickhouse-schema] Failed to create rollup DDL (queries will fall back to raw table):",u)}}async function bN0($){let u={...process.env},f=KY0($,u),X=f.settings.encryptionKey;console.log(`[settings] ENCRYPTION_KEY = ${JSON.stringify(X)} (${X.length} chars)`);let{ensureServices:J}=await Promise.resolve().then(() => (Cx(),qx)),{outputs:w,services:E}=await J({home:f.settings.dataDir,externalDatabaseUrl:f.externalDatabaseUrl,externalNatsUrl:f.externalNatsUrl});if(!f.skipMigrations){let{migrateBetterAuth:Y}=await Promise.resolve().then(() => (Jf1(),DE4));await Y(w.databaseUrl);let{createDatabase:Z}=await Promise.resolve().then(() => (xY(),YE4)),{migrateToLatest:W}=await Promise.resolve().then(() => (lO4(),xO4)),G=Z(w.databaseUrl);await W({keepOpen:!0,database:G,skipBetterAuth:!0})}if(f.settings.clickhouseUrl){let{ensureClickHouseRollup:Y}=await Promise.resolve().then(() => cK4);await Y(f.settings.clickhouseUrl)}let Q={...f.settings,databaseUrl:w.databaseUrl,natsUrls:w.natsUrls};return bV1(Q),{settings:Q,services:E.map((Y)=>({name:Y.name==="PostgreSQL"?"Postgres":Y.name,port:Y.port})),managedServiceNames:E.filter((Y)=>Y.owner==="managed").map((Y)=>Y.name)}}var eE1=U(()=>{Ba0();O5()});var lN0={};Y1(lN0,{updateService:()=>mP,toggleViewMode:()=>uQ1,toggleVibeState:()=>XQ1,toggleLogFlow:()=>fQ1,subscribeCliState:()=>Vu0,setVibe:()=>DV6,setTuiConsoleIntercepted:()=>iN0,setServerUrl:()=>iu0,setMigrationsDone:()=>bu0,setEnv:()=>xu0,setDevMode:()=>QV6,setDataDir:()=>YV6,isTuiConsoleIntercepted:()=>xN0,getCliState:()=>hu0,addLogEntry:()=>ZB});function o2(){for(let $ of $Q1)$()}function hu0(){return J5}function Vu0($){return $Q1.add($),()=>$Q1.delete($)}function mP($){J5={...J5,services:J5.services.map((u)=>u.name===$.name?$:u)},o2()}function bu0(){J5={...J5,migrationsStatus:"done"},o2()}function iu0($){J5={...J5,serverUrl:$},o2()}function xu0($){J5={...J5,env:$},o2()}function ZB($){let u=[...J5.logs,$];J5={...J5,logs:u.length>500?u.slice(-500):u},o2()}function QV6($={}){J5={...J5,services:[...J5.services,{name:"Vite",status:"pending",port:0},...$.localSandboxProvider?[{name:"Sandbox",status:"pending",port:0}]:[]]},o2()}function uQ1(){J5={...J5,viewMode:J5.viewMode==="requests"?"config":"requests"},o2()}function fQ1(){J5={...J5,logFlow:!J5.logFlow},o2()}function YV6($){J5={...J5,dataDir:$},o2()}function DV6($){J5={...J5,vibe:$},o2()}function XQ1(){J5={...J5,vibe:!J5.vibe},o2()}function iN0($){dK4=$}function xN0(){return dK4}var J5,$Q1,dK4=!1;var NG=U(()=>{J5={services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,env:null,logs:[],viewMode:"requests",logFlow:!1,vibe:!1,dataDir:null},$Q1=new Set});import{createServer as mK4}from"net";function ZV6($){return new Promise((u)=>{let f=mK4();f.once("error",()=>u(!1)),f.listen($,"0.0.0.0",()=>{f.close(()=>u(!0))})})}async function cN0($){if(await ZV6($))return $;let u=await new Promise((f,X)=>{let J=mK4();J.once("error",X),J.listen(0,"0.0.0.0",()=>{let w=J.address(),E=typeof w==="object"&&w?w.port:0;J.close(()=>f(E))})});return console.warn(`Port ${$} is in use, using port ${u} instead.`),u}var JQ1=()=>{};import{createServer as WV6}from"net";async function FV6($){for(let u of GV6)if(await vV6(u,$))return u;return null}async function wQ1($,{intervalMs:u=1000}={}){for(;;){let f=await FV6($);if(f)return f;await new Promise((X)=>setTimeout(X,u))}}function vV6($,u){return new Promise((f)=>{let X=WV6();X.once("error",(J)=>{f(J.code==="EADDRINUSE")}),X.listen(u,$,()=>{X.close(()=>f(!1))})})}var GV6;var nK4=U(()=>{GV6=["localhost","127.0.0.1","0.0.0.0"]});var EQ1={};Y1(EQ1,{startDevServer:()=>NV6});import{existsSync as BV6}from"fs";import{tmpdir as UV6}from"os";import{join as dN0}from"path";function tK4($){return $.replace(/\x1b\[[0-9;]*m/g,"")}function mN0($){let u=$.getReader(),f=new TextDecoder,X="";function J(){let w=X.split(`
-`);X=w.pop()??"";for(let E of w){let Q=tK4(E).replace(/^\[\d+\]\s*/,"").trim();if(!Q)continue;ZB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:Q})}}(async()=>{for(;;){let{done:w,value:E}=await u.read();if(w)break;X+=f.decode(E,{stream:!0}),J()}if(X.trim()){let w=tK4(X).replace(/^\[\d+\]\s*/,"").trim();if(w)ZB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:w})}})()}async function NV6($){let{vitePort:u,baseUrl:f,noTui:X}=$,J=await cN0(Number($.port)),{settings:w,services:E,managedServiceNames:Q}=await bN0({port:String(J),home:$.home,baseUrl:$.baseUrl,localMode:$.localMode,skipMigrations:$.skipMigrations,noTui:$.noTui,vitePort:$.vitePort});for(let O of E)mP({name:O.name,status:"ready",port:O.port});xu0(w),bu0();let Y=dN0(import.meta.dir,"..","..","..","..",".."),Z=process.env.WORKTREE_SLUG??process.env.CONDUCTOR_WORKSPACE_NAME??"default",W=dN0(UV6(),`decocms-dev-link-${Z}`),G=X===!0,F=Bun.spawn(["bun","run","--cwd=apps/mesh","dev:servers"],{cwd:Y,env:{...process.env,PORT:String(w.port),VITE_PORT:String(u),DATABASE_URL:w.databaseUrl,NATS_URL:w.natsUrls.join(","),NODE_ENV:w.nodeEnv,DECOCMS_LOCAL_MODE:String(w.localMode),DECOCMS_HOME:w.dataDir,DATA_DIR:w.dataDir,DECO_CLI:"1",MESH_ALLOW_LOCALHOST_LINKS:"1",DEV_LINK_SESSION_PATH:dN0(W,"session.json"),...w.baseUrl?{BASE_URL:w.baseUrl}:{}},stdio:["inherit",G?"inherit":"pipe",G?"inherit":"pipe"]});if(!G)mN0(F.stdout),mN0(F.stderr);let v=f||`http://localhost:${w.port}`;iu0(v),mP({name:"Vite",status:"ready",port:Number(u)});let B=!$.localSandboxProvider?Promise.resolve(null):(async()=>{let{ensureLink:O}=await Promise.resolve().then(() => (Cx(),qx));try{let{info:K,proc:H}=await O({home:w.dataDir,clusterUrl:v,linkDataDir:W,repoRoot:Y,stdio:["inherit",G?"inherit":"pipe",G?"inherit":"pipe"],onSpawn:(P)=>{if(G)return;mN0(P.stdout),mN0(P.stderr)},beforeSpawn:async()=>{await wQ1(Number(w.port),{intervalMs:500});let P=dN0(W,"session.json"),A=Date.now()+60000;while(!BV6(P)){if(Date.now()>A)throw Error(`dev-link session not written to ${P} within 60s`);await new Promise((T)=>setTimeout(T,500))}}});return wQ1(K.port,{intervalMs:500}).then(()=>{mP({name:"Sandbox",status:"ready",port:K.port})}).catch(()=>{}),H}catch(K){return ZB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:`[link] failed to start: ${K instanceof Error?K.message:String(K)}`}),null}})(),N=async(O)=>{if(await B.catch(()=>null),$.localSandboxProvider){let{stopLink:K}=await Promise.resolve().then(() => (Cx(),qx));try{await K(w.dataDir)}catch{}}if(F.kill(O),await F.exited,Q.length>0){let{stopServices:K}=await Promise.resolve().then(() => (Cx(),qx));await K(w.dataDir)}};return process.on("SIGINT",()=>N("SIGINT")),process.on("SIGTERM",()=>N("SIGTERM")),{port:Number(w.port),process:F}}var QQ1=U(()=>{eE1();NG();JQ1();nK4()});import{Box as YQ1,Text as DQ1}from"ink";import{jsx as aK4,jsxs as nN0}from"react/jsx-runtime";function rK4($){if(!$)return"not set";try{let u=new URL($);if(u.password)u.password="***";if(u.username&&u.username.length>3)u.username=u.username.slice(0,3)+"***";return u.pathname="/",u.search="",u.hash="",u.toString()}catch{if($.length<=10)return $;return $.slice(0,6)+"***"+$.slice(-4)}}function KV6($,u){if(OV6.has($))return u?{text:"\u25CF\u25CF\u25CF\u25CF\u25CF\u25CF",dimColor:!0}:{text:"not set",dimColor:!0};if(zV6.has($)){if(Array.isArray(u)){if(u.length===0)return{text:"not set",dimColor:!0};return{text:u.map((w)=>rK4(w)).join(", "),color:"cyan"}}let X=rK4(u);return X==="not set"?{text:X,dimColor:!0}:{text:X,color:"cyan"}}if(u===void 0||u===null||u==="")return{text:"not set",dimColor:!0};let f=String(u);if(f==="true")return{text:f,color:"green"};if(f==="false")return{text:f,color:"yellow"};try{return new URL(f),{text:f,color:"cyan"}}catch{return{text:f}}}function HV6($){return[{title:"Core",entries:[{key:"NODE_ENV",value:$.nodeEnv},{key:"PORT",value:$.port},{key:"BASE_URL",value:$.baseUrl??`http://localhost:${$.port}`},{key:"DATA_DIR",value:$.dataDir}]},{title:"Database",entries:[{key:"DATABASE_URL",value:$.databaseUrl},{key:"DATABASE_PG_SSL",value:$.databasePgSsl}]},{title:"Auth & Secrets",entries:[{key:"BETTER_AUTH_SECRET",value:$.betterAuthSecret},{key:"ENCRYPTION_KEY",value:$.encryptionKey},{key:"MESH_JWT_SECRET",value:$.meshJwtSecret},{key:"STUDIO_PROVISION_SECRET_KEY",value:$.studioProvisionSecretKey},{key:"DISABLE_RATE_LIMIT",value:$.disableRateLimit}]},{title:"Auth Providers",entries:[{key:"AUTH_EMAIL_PASSWORD_ENABLED",value:process.env.AUTH_EMAIL_PASSWORD_ENABLED??"true"},{key:"AUTH_GOOGLE_CLIENT_ID",value:!!process.env.AUTH_GOOGLE_CLIENT_ID},{key:"AUTH_GITHUB_CLIENT_ID",value:!!process.env.AUTH_GITHUB_CLIENT_ID},{key:"AUTH_RESEND_API_KEY",value:!!process.env.AUTH_RESEND_API_KEY},{key:"AUTH_SENDGRID_API_KEY",value:!!process.env.AUTH_SENDGRID_API_KEY},{key:"AUTH_SSO_MS_CLIENT_ID",value:!!process.env.AUTH_SSO_MS_CLIENT_ID},{key:"AUTH_SSO_GOOGLE_CLIENT_ID",value:!!process.env.AUTH_SSO_GOOGLE_CLIENT_ID},{key:"AUTH_MAGIC_LINK_ENABLED",value:process.env.AUTH_MAGIC_LINK_ENABLED==="true"},{key:"AUTH_EMAIL_OTP_ENABLED",value:process.env.AUTH_EMAIL_OTP_ENABLED==="true"}]},{title:"Observability",entries:[{key:"CLICKHOUSE_URL",value:$.clickhouseUrl},{key:"OTEL_SERVICE_NAME",value:$.otelServiceName}]},{title:"Event Bus & Networking",entries:[{key:"NATS_URL",value:$.natsUrls}]},{title:"Config Files",entries:[{key:"CONFIG_PATH",value:$.configPath}]},{title:"AI Gateway",entries:[{key:"DECO_AI_GATEWAY_ENABLED",value:$.aiGatewayEnabled},{key:"DECO_AI_GATEWAY_URL",value:$.aiGatewayUrl}]}]}function pK4({env:$}){let u=HV6($);return aK4(YQ1,{flexDirection:"column",children:u.map((f)=>nN0(YQ1,{flexDirection:"column",marginTop:1,children:[nN0(DQ1,{dimColor:!0,children:["  ","\u2500\u2500 ",f.title," ","\u2500".repeat(Math.max(0,38-f.title.length))]}),f.entries.map(({key:X,value:J})=>{let w=KV6(X,J);return nN0(YQ1,{children:[nN0(DQ1,{dimColor:!0,children:["  ",X.padEnd(36)]}),aK4(DQ1,{color:w.color,dimColor:w.dimColor,children:w.text})]},X)})]},f.title))})}var OV6,zV6;var oK4=U(()=>{OV6=new Set(["BETTER_AUTH_SECRET","ENCRYPTION_KEY","MESH_JWT_SECRET","STUDIO_PROVISION_SECRET_KEY"]),zV6=new Set(["DATABASE_URL","CLICKHOUSE_URL","NATS_URL"])});var ZQ1;var sK4=U(()=>{ZQ1={name:"decocms",version:"2.348.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"bun --bun vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:e2e":"playwright test","test:e2e:ui":"playwright test --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.2.141","@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^3.0.77","@ai-sdk/google":"^3.0.73","@ai-sdk/openai":"^3.0.63","@anthropic-ai/sdk":"^0.96.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.17.6","@deco-cx/warp-node":"^0.3.23","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@openrouter/ai-sdk-provider":"^2.9.0","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","ai-sdk-provider-claude-code":"^3.4.4","ai-sdk-provider-codex-cli":"^1.1.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12",nats:"^2.29.3","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.184","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/vite-plugin":"workspace:*","@electric-sql/pglite":"^0.3.15","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/core":"^6.1.2","@rjsf/shadcn":"^6.1.2","@rjsf/utils":"^6.1.2","@rjsf/validator-ajv8":"^6.1.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-mention":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.182","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","kysely-pglite":"^0.6.1","lucide-react":"^0.468.0",marked:"^15.0.6","@decocms/sandbox":"workspace:*","mesh-plugin-workflows":"workspace:*",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0",zustand:"^5.0.9"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});import{Box as s2,Text as kf}from"ink";import{Spinner as jV6}from"@inkjs/ui";import{useSyncExternalStore as eK4}from"react";import{jsx as P8,jsxs as xX}from"react/jsx-runtime";function IV6($,u){if(!$||!AV6.has($))return $;let f=WQ1[u]??WQ1[WQ1.length-1];return $==="#875f00"?f[0]:f[1]}function $H4({status:$}){if($==="pending")return P8(jV6,{label:""});return P8(kf,{color:"green",children:"\u2713"})}function uH4({services:$,migrationsStatus:u,home:f,serverUrl:X,vibe:J}){let w=eK4(LV1,PV1),E=eK4(RV1,kV1);return xX(s2,{flexDirection:"column",paddingBottom:1,children:[J?xX(s2,{flexDirection:"column",children:[w.map((Q,Y)=>{let Z=E[Y],W=Q.reduce((F,v)=>F+v.text.length,0),G=Math.max(0,TV6-W);return xX(s2,{flexDirection:"row",children:[Q.map((F,v)=>{let B=IV6(F.color,Y);return B?P8(kf,{color:B,children:F.text},v):P8(kf,{children:F.text},v)}),P8(kf,{children:" ".repeat(G+2)}),Z?.map((F,v)=>F.color?P8(kf,{color:F.color,children:F.char},v):P8(kf,{children:F.char},v))]},Y)}),xX(kf,{dimColor:!0,children:[" v",ZQ1.version]})]}):xX(s2,{flexDirection:"column",marginTop:1,children:[PV6.map((Q,Y)=>P8(kf,{color:LV6[Y],children:Q},Y)),xX(kf,{dimColor:!0,children:[" v",ZQ1.version]})]}),P8(s2,{marginBottom:1,children:P8(kf,{dimColor:!0,children:"\u2500".repeat(80)})}),P8(s2,{children:xX(kf,{dimColor:!0,children:["Home: ",f]})}),xX(s2,{gap:2,children:[$.map((Q)=>xX(s2,{gap:1,children:[xX(kf,{children:[Q.name," :",Q.port||"...."]}),P8($H4,{status:Q.status})]},Q.name)),xX(s2,{gap:1,children:[P8(kf,{children:"Migrations"}),P8($H4,{status:u})]})]}),P8(s2,{children:X?xX(kf,{children:["Open in browser: ",P8(kf,{color:"cyan",children:X})]}):P8(kf,{dimColor:!0,children:"Starting..."})}),xX(s2,{gap:2,children:[xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"K"})," ","toggle config"]}),xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"L"})," ","toggle log flow"]}),xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"V"})," ","toggle vibe ",J?"\u266A Nihilore \xB7 CC BY 4.0":""]}),J&&xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"N"})," ","skip song"]})]})]})}var PV6,LV6,WQ1,TV6=30,AV6;var fH4=U(()=>{sK4();Ja0();Za0();PV6=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],LV6=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"],WQ1=[["#00ff64","#00cc50"],["#00f060","#00c04c"],["#00e05c","#00b448"],["#00d058","#00a844"],["#00c054","#009c40"],["#00b050","#00903c"],["#00a04c","#008438"],["#009048","#007834"],["#008044","#006c30"],["#007040","#00602c"],["#00603c","#005428"]],AV6=new Set(["#875f00","#5f3800"])});import{useSyncExternalStore as SV6}from"react";function kV6(){let $=process.stdout.rows||24,u=process.stdout.columns||80;if($!==tN0.rows||u!==tN0.columns)tN0={rows:$,columns:u};return tN0}function RV6($){return process.stdout.on("resize",$),()=>{process.stdout.off("resize",$)}}function XH4(){return SV6(RV6,kV6)}var tN0;var JH4=U(()=>{tN0={rows:process.stdout.rows||24,columns:process.stdout.columns||80}});import{Box as qV6,Text as lu0}from"ink";import{useSyncExternalStore as CV6}from"react";import{jsx as GQ1,jsxs as FQ1}from"react/jsx-runtime";function MV6($){if($>=500)return"red";if($>=400)return"yellow";if($>=300)return"cyan";return"green"}function wH4({logs:$,headerHeight:u}){let{rows:f}=XH4(),{logFlow:X}=CV6(Vu0,hu0),J=Math.max(1,f-u-1),w=X?$:$.slice(-J);return GQ1(qV6,{flexDirection:"column",children:w.map((E,Q)=>{if(E.rawLine)return GQ1(lu0,{dimColor:!0,children:E.rawLine},Q);let Y=E.duration<1000?`${E.duration}ms`:`${(E.duration/1000).toFixed(1)}s`;return FQ1(lu0,{children:[FQ1(lu0,{dimColor:!0,children:[E.method.padEnd(6)," ",E.path.padEnd(30)," "]}),GQ1(lu0,{color:MV6(E.status),children:E.status}),FQ1(lu0,{dimColor:!0,children:[" ",Y.padStart(8)]})]},Q)})})}var EH4=U(()=>{NG();JH4()});var vQ1={};Y1(vQ1,{App:()=>xV6});import{Box as yV6,Text as gV6,useInput as hV6}from"ink";import{useSyncExternalStore as VV6}from"react";import{jsx as rN0,jsxs as lV6}from"react/jsx-runtime";function xV6({home:$}){let u=VV6(Vu0,hu0);return hV6((f)=>{if(f==="k"||f==="K")uQ1();if(f==="l"||f==="L")fQ1();if((f==="v"||f==="V")&&u.dataDir)va0(u.dataDir),XQ1();if((f==="n"||f==="N")&&u.vibe)Fa0()}),lV6(yV6,{flexDirection:"column",children:[rN0(uH4,{services:u.services,migrationsStatus:u.migrationsStatus,home:$,serverUrl:u.serverUrl,vibe:u.vibe}),u.viewMode==="config"?u.env?rN0(pK4,{env:u.env}):rN0(gV6,{dimColor:!0,children:"Loading configuration..."}):rN0(wH4,{logs:u.logs,headerHeight:u.vibe?iV6:bV6})]})}var bV6=15,iV6=19;var BQ1=U(()=>{oK4();fH4();EH4();NG();Fl()});var nP=x((rV6)=>{rV6.HttpAuthLocation=void 0;(function($){$.HEADER="header",$.QUERY="query"})(rV6.HttpAuthLocation||(rV6.HttpAuthLocation={}));rV6.HttpApiKeyAuthLocation=void 0;(function($){$.HEADER="header",$.QUERY="query"})(rV6.HttpApiKeyAuthLocation||(rV6.HttpApiKeyAuthLocation={}));rV6.EndpointURLScheme=void 0;(function($){$.HTTP="http",$.HTTPS="https"})(rV6.EndpointURLScheme||(rV6.EndpointURLScheme={}));rV6.AlgorithmId=void 0;(function($){$.MD5="md5",$.CRC32="crc32",$.CRC32C="crc32c",$.SHA1="sha1",$.SHA256="sha256"})(rV6.AlgorithmId||(rV6.AlgorithmId={}));var cV6=($)=>{let u=[];if($.sha256!==void 0)u.push({algorithmId:()=>rV6.AlgorithmId.SHA256,checksumConstructor:()=>$.sha256});if($.md5!=null)u.push({algorithmId:()=>rV6.AlgorithmId.MD5,checksumConstructor:()=>$.md5});return{addChecksumAlgorithm(f){u.push(f)},checksumAlgorithms(){return u}}},dV6=($)=>{let u={};return $.checksumAlgorithms().forEach((f)=>{u[f.algorithmId()]=f.checksumConstructor()}),u},mV6=($)=>{return cV6($)},nV6=($)=>{return dV6($)};rV6.FieldPosition=void 0;(function($){$[$.HEADER=0]="HEADER",$[$.TRAILER=1]="TRAILER"})(rV6.FieldPosition||(rV6.FieldPosition={}));var tV6="__smithy_context";rV6.IniSectionType=void 0;(function($){$.PROFILE="profile",$.SSO_SESSION="sso-session",$.SERVICES="services"})(rV6.IniSectionType||(rV6.IniSectionType={}));rV6.RequestHandlerProtocol=void 0;(function($){$.HTTP_0_9="http/0.9",$.HTTP_1_0="http/1.0",$.TDS_8_0="tds/8.0"})(rV6.RequestHandlerProtocol||(rV6.RequestHandlerProtocol={}));rV6.SMITHY_CONTEXT_KEY=tV6;rV6.getDefaultClientConfiguration=mV6;rV6.resolveDefaultRuntimeConfig=nV6});var m5=x((Xb6)=>{var sV6=nP(),eV6=($)=>{return{setHttpHandler(u){$.httpHandler=u},httpHandler(){return $.httpHandler},updateHttpClientConfig(u,f){$.httpHandler?.updateHttpClientConfig(u,f)},httpHandlerConfigs(){return $.httpHandler.httpHandlerConfigs()}}},$b6=($)=>{return{httpHandler:$.httpHandler()}};class QH4{name;kind;values;constructor({name:$,kind:u=sV6.FieldPosition.HEADER,values:f=[]}){this.name=$,this.kind=u,this.values=f}add($){this.values.push($)}set($){this.values=$}remove($){this.values=this.values.filter((u)=>u!==$)}toString(){return this.values.map(($)=>$.includes(",")||$.includes(" ")?`"${$}"`:$).join(", ")}get(){return this.values}}class YH4{entries={};encoding;constructor({fields:$=[],encoding:u="utf-8"}){$.forEach(this.setField.bind(this)),this.encoding=u}setField($){this.entries[$.name.toLowerCase()]=$}getField($){return this.entries[$.toLowerCase()]}removeField($){delete this.entries[$.toLowerCase()]}getByType($){return Object.values(this.entries).filter((u)=>u.kind===$)}}class aN0{method;protocol;hostname;port;path;query;headers;username;password;fragment;body;constructor($){this.method=$.method||"GET",this.hostname=$.hostname||"localhost",this.port=$.port,this.query=$.query||{},this.headers=$.headers||{},this.body=$.body,this.protocol=$.protocol?$.protocol.slice(-1)!==":"?`${$.protocol}:`:$.protocol:"https:",this.path=$.path?$.path.charAt(0)!=="/"?`/${$.path}`:$.path:"/",this.username=$.username,this.password=$.password,this.fragment=$.fragment}static clone($){let u=new aN0({...$,headers:{...$.headers}});if(u.query)u.query=ub6(u.query);return u}static isInstance($){if(!$)return!1;let u=$;return"method"in u&&"protocol"in u&&"hostname"in u&&"path"in u&&typeof u.query==="object"&&typeof u.headers==="object"}clone(){return aN0.clone(this)}}function ub6($){return Object.keys($).reduce((u,f)=>{let X=$[f];return{...u,[f]:Array.isArray(X)?[...X]:X}},{})}class DH4{statusCode;reason;headers;body;constructor($){this.statusCode=$.statusCode,this.reason=$.reason,this.headers=$.headers||{},this.body=$.body}static isInstance($){if(!$)return!1;let u=$;return typeof u.statusCode==="number"&&typeof u.headers==="object"}}function fb6($){return/^[a-z0-9][a-z0-9\.\-]*[a-z0-9]$/.test($)}Xb6.Field=QH4;Xb6.Fields=YH4;Xb6.HttpRequest=aN0;Xb6.HttpResponse=DH4;Xb6.getHttpHandlerExtensionConfiguration=eV6;Xb6.isValidHostname=fb6;Xb6.resolveHttpHandlerRuntimeConfig=$b6});function Wb6($){return(u)=>async(f)=>{let{request:X}=f;if($.expectContinueHeader!==!1&&ZH4.HttpRequest.isInstance(X)&&X.body&&$.runtime==="node"&&$.requestHandler?.constructor?.name!=="FetchHttpHandler"){let J=!0;if(typeof $.expectContinueHeader==="number")try{J=(Number(X.headers?.["content-length"])??$.bodyLengthChecker?.(X.body)??1/0)>=$.expectContinueHeader}catch(w){}else J=!!$.expectContinueHeader;if(J)X.headers.Expect="100-continue"}return u({...f,request:X})}}var ZH4,Gb6,WH4=($)=>({applyToStack:(u)=>{u.add(Wb6($),Gb6)}});var GH4=U(()=>{ZH4=D0(m5(),1);Gb6={step:"build",tags:["SET_EXPECT_HEADER","EXPECT_HEADER"],name:"addExpectContinueMiddleware",override:!0}});var eY,pN0,tP,oN0,j3,FH4,du0;var $D=U(()=>{eY={WHEN_SUPPORTED:"WHEN_SUPPORTED",WHEN_REQUIRED:"WHEN_REQUIRED"},pN0=eY.WHEN_SUPPORTED,tP={WHEN_SUPPORTED:"WHEN_SUPPORTED",WHEN_REQUIRED:"WHEN_REQUIRED"},oN0=eY.WHEN_SUPPORTED;(function($){$.MD5="MD5",$.CRC32="CRC32",$.CRC32C="CRC32C",$.CRC64NVME="CRC64NVME",$.SHA1="SHA1",$.SHA256="SHA256"})(j3||(j3={}));(function($){$.HEADER="header",$.TRAILER="trailer"})(FH4||(FH4={}));du0=j3.CRC32});var Zz,sn=($,u,f,X)=>{if(!(u in $))return;let J=$[u].toUpperCase();if(!Object.values(f).includes(J))throw TypeError(`Cannot load ${X} '${u}'. Expected one of ${Object.values(f)}, got '${$[u]}'.`);return J};var _Q1=U(()=>{(function($){$.ENV="env",$.CONFIG="shared config entry"})(Zz||(Zz={}))});var Fb6="AWS_REQUEST_CHECKSUM_CALCULATION",vb6="request_checksum_calculation",vH4;var BH4=U(()=>{$D();_Q1();vH4={environmentVariableSelector:($)=>sn($,Fb6,eY,Zz.ENV),configFileSelector:($)=>sn($,vb6,eY,Zz.CONFIG),default:pN0}});var Bb6="AWS_RESPONSE_CHECKSUM_VALIDATION",Ub6="response_checksum_validation",UH4;var NH4=U(()=>{$D();_Q1();UH4={environmentVariableSelector:($)=>sn($,Bb6,tP,Zz.ENV),configFileSelector:($)=>sn($,Ub6,tP,Zz.CONFIG),default:oN0}});var PQ1=x((Tb6)=>{var Nb6=["AuthFailure","InvalidSignatureException","RequestExpired","RequestInTheFuture","RequestTimeTooSkewed","SignatureDoesNotMatch"],Ob6=["BandwidthLimitExceeded","EC2ThrottledException","LimitExceededException","PriorRequestNotComplete","ProvisionedThroughputExceededException","RequestLimitExceeded","RequestThrottled","RequestThrottledException","SlowDown","ThrottledException","Throttling","ThrottlingException","TooManyRequestsException","TransactionInProgressException"],zb6=["TimeoutError","RequestTimeout","RequestTimeoutException"],Kb6=[500,502,503,504],Hb6=["ECONNRESET","ECONNREFUSED","EPIPE","ETIMEDOUT"],_b6=["EHOSTUNREACH","ENETUNREACH","ENOTFOUND"],OH4=($)=>$?.$retryable!==void 0,jb6=($)=>Nb6.includes($.name),zH4=($)=>$.$metadata?.clockSkewCorrected,KH4=($)=>{let u=new Set(["Failed to fetch","NetworkError when attempting to fetch resource","The Internet connection appears to be offline","Load failed","Network request failed"]);if(!($&&$ instanceof TypeError))return!1;return u.has($.message)},Pb6=($)=>$.$metadata?.httpStatusCode===429||Ob6.includes($.name)||$.$retryable?.throttling==!0,jQ1=($,u=0)=>OH4($)||zH4($)||$.name==="InvalidSignatureException"&&$.message?.includes("Signature expired")||zb6.includes($.name)||Hb6.includes($?.code||"")||_b6.includes($?.code||"")||Kb6.includes($.$metadata?.httpStatusCode||0)||KH4($)||HH4($)||$.cause!==void 0&&u<=10&&jQ1($.cause,u+1),Lb6=($)=>{if($.$metadata?.httpStatusCode!==void 0){let u=$.$metadata.httpStatusCode;if(500<=u&&u<=599&&!jQ1($))return!0;return!1}return!1};function HH4($){return $.code==="ERR_HTTP2_STREAM_ERROR"&&$.message.includes("NGHTTP2_REFUSED_STREAM")}Tb6.isBrowserNetworkError=KH4;Tb6.isClockSkewCorrectedError=zH4;Tb6.isClockSkewError=jb6;Tb6.isNodeJsHttp2TransientError=HH4;Tb6.isRetryableByTrait=OH4;Tb6.isServerError=Lb6;Tb6.isThrottlingError=Pb6;Tb6.isTransientError=jQ1});var WB=x((cb6)=>{var yb6=PQ1();cb6.RETRY_MODES=void 0;(function($){$.STANDARD="standard",$.ADAPTIVE="adaptive"})(cb6.RETRY_MODES||(cb6.RETRY_MODES={}));var eN0=3,gb6=cb6.RETRY_MODES.STANDARD;class $O0{static setTimeoutFn=setTimeout;beta;minCapacity;minFillRate;scaleConstant;smooth;enabled=!1;availableTokens=0;lastMaxRate=0;measuredTxRate=0;requestCount=0;fillRate;lastThrottleTime;lastTimestamp=0;lastTxRateBucket;maxCapacity;timeWindow=0;constructor($){this.beta=$?.beta??0.7,this.minCapacity=$?.minCapacity??1,this.minFillRate=$?.minFillRate??0.5,this.scaleConstant=$?.scaleConstant??0.4,this.smooth=$?.smooth??0.8,this.lastThrottleTime=this.getCurrentTimeInSeconds(),this.lastTxRateBucket=Math.floor(this.getCurrentTimeInSeconds()),this.fillRate=this.minFillRate,this.maxCapacity=this.minCapacity}async getSendToken(){return this.acquireTokenBucket(1)}updateClientSendingRate($){let u;this.updateMeasuredRate();let f=$;if(f?.errorType==="THROTTLING"||yb6.isThrottlingError(f?.error??$)){let w=!this.enabled?this.measuredTxRate:Math.min(this.measuredTxRate,this.fillRate);this.lastMaxRate=w,this.calculateTimeWindow(),this.lastThrottleTime=this.getCurrentTimeInSeconds(),u=this.cubicThrottle(w),this.enableTokenBucket()}else this.calculateTimeWindow(),u=this.cubicSuccess(this.getCurrentTimeInSeconds());let J=Math.min(u,2*this.measuredTxRate);this.updateTokenBucketRate(J)}getCurrentTimeInSeconds(){return Date.now()/1000}async acquireTokenBucket($){if(!this.enabled)return;if(this.refillTokenBucket(),$>this.availableTokens){let u=($-this.availableTokens)/this.fillRate*1000;await new Promise((f)=>$O0.setTimeoutFn(f,u))}this.availableTokens=this.availableTokens-$}refillTokenBucket(){let $=this.getCurrentTimeInSeconds();if(!this.lastTimestamp){this.lastTimestamp=$;return}let u=($-this.lastTimestamp)*this.fillRate;this.availableTokens=Math.min(this.maxCapacity,this.availableTokens+u),this.lastTimestamp=$}calculateTimeWindow(){this.timeWindow=this.getPrecise(Math.pow(this.lastMaxRate*(1-this.beta)/this.scaleConstant,0.3333333333333333))}cubicThrottle($){return this.getPrecise($*this.beta)}cubicSuccess($){return this.getPrecise(this.scaleConstant*Math.pow($-this.lastThrottleTime-this.timeWindow,3)+this.lastMaxRate)}enableTokenBucket(){this.enabled=!0}updateTokenBucketRate($){this.refillTokenBucket(),this.fillRate=Math.max($,this.minFillRate),this.maxCapacity=Math.max($,this.minCapacity),this.availableTokens=Math.min(this.availableTokens,this.maxCapacity)}updateMeasuredRate(){let $=this.getCurrentTimeInSeconds(),u=Math.floor($*2)/2;if(this.requestCount++,u>this.lastTxRateBucket){let f=this.requestCount/(u-this.lastTxRateBucket);this.measuredTxRate=this.getPrecise(f*this.smooth+this.measuredTxRate*(1-this.smooth)),this.requestCount=0,this.lastTxRateBucket=u}}getPrecise($){return parseFloat($.toFixed(8))}}var hb6=100,AQ1=20000,Vb6=500,LQ1=500,bb6=5,ib6=10,_H4=1,xb6="amz-sdk-invocation-id",lb6="amz-sdk-request";class lX{static v2026=typeof process<"u"&&process.env?.SMITHY_NEW_RETRIES_2026==="true";static delay(){return lX.v2026?50:100}static throttlingDelay(){return lX.v2026?1000:500}static cost(){return lX.v2026?14:5}static throttlingCost(){return lX.v2026?5:10}static modifiedCostType(){return lX.v2026?"THROTTLING":"TRANSIENT"}}class jH4{x=lX.delay();computeNextBackoffDelay($){let u=Math.random(),f=2,X=u*Math.min(this.x*2**$,AQ1);return Math.floor(X)}setDelayBase($){this.x=$}}class TQ1{delay;count;cost;longPoll;constructor($,u,f,X){this.delay=$,this.count=u,this.cost=f,this.longPoll=X}getRetryCount(){return this.count}getRetryDelay(){return Math.min(AQ1,this.delay)}getRetryCost(){return this.cost}isLongPoll(){return this.longPoll}}var sN0={incompatible:1,attempts:2,capacity:3};class mu0{mode=cb6.RETRY_MODES.STANDARD;capacity=LQ1;retryBackoffStrategy;maxAttemptsProvider;baseDelay;constructor($){if(typeof $==="number")this.maxAttemptsProvider=async()=>$;else if(typeof $==="function")this.maxAttemptsProvider=$;else if($&&typeof $==="object")this.maxAttemptsProvider=async()=>$.maxAttempts,this.baseDelay=$.baseDelay,this.retryBackoffStrategy=$.backoff;this.maxAttemptsProvider??=async()=>eN0,this.baseDelay??=lX.delay(),this.retryBackoffStrategy??=new jH4}async acquireInitialRetryToken($){return new TQ1(lX.delay(),0,void 0,lX.v2026&&$.includes(":longpoll"))}async refreshRetryTokenForRetry($,u){let f=await this.getMaxAttempts(),X=this.retryCode($,u,f),J=X===0,w=$.isLongPoll?.();if(J||w){let E=u.errorType;this.retryBackoffStrategy.setDelayBase(E==="THROTTLING"?lX.throttlingDelay():this.baseDelay);let Q=this.retryBackoffStrategy.computeNextBackoffDelay($.getRetryCount()),Y=Q;if(u.retryAfterHint instanceof Date)Y=Math.max(Q,Math.min(u.retryAfterHint.getTime()-Date.now(),Q+5000));if(!J)throw Object.assign(Error("No retry token available"),{$backoff:lX.v2026&&X===sN0.capacity&&w?Y:0});else{let Z=this.getCapacityCost(E);return this.capacity-=Z,new TQ1(Y,$.getRetryCount()+1,Z,$.isLongPoll?.()??!1)}}throw Error("No retry token available")}recordSuccess($){this.capacity=Math.min(LQ1,this.capacity+($.getRetryCost()??_H4))}getCapacity(){return this.capacity}async maxAttempts(){return this.maxAttemptsProvider()}async getMaxAttempts(){try{return await this.maxAttemptsProvider()}catch($){return console.warn(`Max attempts provider could not resolve. Using default of ${eN0}`),eN0}}retryCode($,u,f){let X=$.getRetryCount()+1,J=this.isRetryableError(u.errorType)?0:sN0.incompatible,w=X<f?0:sN0.attempts,E=this.capacity>=this.getCapacityCost(u.errorType)?0:sN0.capacity;return J||w||E}getCapacityCost($){return $===lX.modifiedCostType()?lX.throttlingCost():lX.cost()}isRetryableError($){return $==="THROTTLING"||$==="TRANSIENT"}}class PH4{mode=cb6.RETRY_MODES.ADAPTIVE;rateLimiter;standardRetryStrategy;constructor($,u){let{rateLimiter:f}=u??{};this.rateLimiter=f??new $O0,this.standardRetryStrategy=u?new mu0({maxAttempts:typeof $==="number"?$:3,...u}):new mu0($)}async acquireInitialRetryToken($){return await this.rateLimiter.getSendToken(),this.standardRetryStrategy.acquireInitialRetryToken($)}async refreshRetryTokenForRetry($,u){return this.rateLimiter.updateClientSendingRate(u),this.standardRetryStrategy.refreshRetryTokenForRetry($,u)}recordSuccess($){this.rateLimiter.updateClientSendingRate({}),this.standardRetryStrategy.recordSuccess($)}async maxAttemptsProvider(){return this.standardRetryStrategy.maxAttempts()}}class LH4 extends mu0{computeNextBackoffDelay;constructor($,u=lX.delay()){super(typeof $==="function"?$:async()=>$);if(typeof u==="number")this.computeNextBackoffDelay=()=>u;else this.computeNextBackoffDelay=u}async refreshRetryTokenForRetry($,u){let f=await super.refreshRetryTokenForRetry($,u);return f.getRetryDelay=()=>this.computeNextBackoffDelay(f.getRetryCount()),f}}cb6.AdaptiveRetryStrategy=PH4;cb6.ConfiguredRetryStrategy=LH4;cb6.DEFAULT_MAX_ATTEMPTS=eN0;cb6.DEFAULT_RETRY_DELAY_BASE=hb6;cb6.DEFAULT_RETRY_MODE=gb6;cb6.DefaultRateLimiter=$O0;cb6.INITIAL_RETRY_TOKENS=LQ1;cb6.INVOCATION_ID_HEADER=xb6;cb6.MAXIMUM_RETRY_DELAY=AQ1;cb6.NO_RETRY_INCREMENT=_H4;cb6.REQUEST_HEADER=lb6;cb6.RETRY_COST=bb6;cb6.Retry=lX;cb6.StandardRetryStrategy=mu0;cb6.THROTTLING_RETRY_DELAY_BASE=Vb6;cb6.TIMEOUT_RETRY_COST=ib6});var Zf=x((vi6)=>{var Ei6=WB(),IQ1={warningEmitted:!1},Qi6=($)=>{if($&&!IQ1.warningEmitted&&parseInt($.substring(1,$.indexOf(".")))<20)IQ1.warningEmitted=!0,process.emitWarning(`NodeDeprecationWarning: The AWS SDK for JavaScript (v3) will
+`);X=w.pop()??"";for(let E of w){let Q=tK4(E).replace(/^\[\d+\]\s*/,"").trim();if(!Q)continue;ZB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:Q})}}(async()=>{for(;;){let{done:w,value:E}=await u.read();if(w)break;X+=f.decode(E,{stream:!0}),J()}if(X.trim()){let w=tK4(X).replace(/^\[\d+\]\s*/,"").trim();if(w)ZB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:w})}})()}async function NV6($){let{vitePort:u,baseUrl:f,noTui:X}=$,J=await cN0(Number($.port)),{settings:w,services:E,managedServiceNames:Q}=await bN0({port:String(J),home:$.home,baseUrl:$.baseUrl,localMode:$.localMode,skipMigrations:$.skipMigrations,noTui:$.noTui,vitePort:$.vitePort});for(let O of E)mP({name:O.name,status:"ready",port:O.port});xu0(w),bu0();let Y=dN0(import.meta.dir,"..","..","..","..",".."),Z=process.env.WORKTREE_SLUG??process.env.CONDUCTOR_WORKSPACE_NAME??"default",W=dN0(UV6(),`decocms-dev-link-${Z}`),G=X===!0,F=Bun.spawn(["bun","run","--cwd=apps/mesh","dev:servers"],{cwd:Y,env:{...process.env,PORT:String(w.port),VITE_PORT:String(u),DATABASE_URL:w.databaseUrl,NATS_URL:w.natsUrls.join(","),NODE_ENV:w.nodeEnv,DECOCMS_LOCAL_MODE:String(w.localMode),DECOCMS_HOME:w.dataDir,DATA_DIR:w.dataDir,DECO_CLI:"1",MESH_ALLOW_LOCALHOST_LINKS:"1",DEV_LINK_SESSION_PATH:dN0(W,"session.json"),...w.baseUrl?{BASE_URL:w.baseUrl}:{}},stdio:["inherit",G?"inherit":"pipe",G?"inherit":"pipe"]});if(!G)mN0(F.stdout),mN0(F.stderr);let v=f||`http://localhost:${w.port}`;iu0(v),mP({name:"Vite",status:"ready",port:Number(u)});let B=!$.localSandboxProvider?Promise.resolve(null):(async()=>{let{ensureLink:O}=await Promise.resolve().then(() => (Cx(),qx));try{let{info:K,proc:H}=await O({home:w.dataDir,clusterUrl:v,linkDataDir:W,repoRoot:Y,stdio:["inherit",G?"inherit":"pipe",G?"inherit":"pipe"],onSpawn:(P)=>{if(G)return;mN0(P.stdout),mN0(P.stderr)},beforeSpawn:async()=>{await wQ1(Number(w.port),{intervalMs:500});let P=dN0(W,"session.json"),A=Date.now()+60000;while(!BV6(P)){if(Date.now()>A)throw Error(`dev-link session not written to ${P} within 60s`);await new Promise((T)=>setTimeout(T,500))}}});return wQ1(K.port,{intervalMs:500}).then(()=>{mP({name:"Sandbox",status:"ready",port:K.port})}).catch(()=>{}),H}catch(K){return ZB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:`[link] failed to start: ${K instanceof Error?K.message:String(K)}`}),null}})(),N=async(O)=>{if(await B.catch(()=>null),$.localSandboxProvider){let{stopLink:K}=await Promise.resolve().then(() => (Cx(),qx));try{await K(w.dataDir)}catch{}}if(F.kill(O),await F.exited,Q.length>0){let{stopServices:K}=await Promise.resolve().then(() => (Cx(),qx));await K(w.dataDir)}};return process.on("SIGINT",()=>N("SIGINT")),process.on("SIGTERM",()=>N("SIGTERM")),{port:Number(w.port),process:F}}var QQ1=U(()=>{eE1();NG();JQ1();nK4()});import{Box as YQ1,Text as DQ1}from"ink";import{jsx as aK4,jsxs as nN0}from"react/jsx-runtime";function rK4($){if(!$)return"not set";try{let u=new URL($);if(u.password)u.password="***";if(u.username&&u.username.length>3)u.username=u.username.slice(0,3)+"***";return u.pathname="/",u.search="",u.hash="",u.toString()}catch{if($.length<=10)return $;return $.slice(0,6)+"***"+$.slice(-4)}}function KV6($,u){if(OV6.has($))return u?{text:"\u25CF\u25CF\u25CF\u25CF\u25CF\u25CF",dimColor:!0}:{text:"not set",dimColor:!0};if(zV6.has($)){if(Array.isArray(u)){if(u.length===0)return{text:"not set",dimColor:!0};return{text:u.map((w)=>rK4(w)).join(", "),color:"cyan"}}let X=rK4(u);return X==="not set"?{text:X,dimColor:!0}:{text:X,color:"cyan"}}if(u===void 0||u===null||u==="")return{text:"not set",dimColor:!0};let f=String(u);if(f==="true")return{text:f,color:"green"};if(f==="false")return{text:f,color:"yellow"};try{return new URL(f),{text:f,color:"cyan"}}catch{return{text:f}}}function HV6($){return[{title:"Core",entries:[{key:"NODE_ENV",value:$.nodeEnv},{key:"PORT",value:$.port},{key:"BASE_URL",value:$.baseUrl??`http://localhost:${$.port}`},{key:"DATA_DIR",value:$.dataDir}]},{title:"Database",entries:[{key:"DATABASE_URL",value:$.databaseUrl},{key:"DATABASE_PG_SSL",value:$.databasePgSsl}]},{title:"Auth & Secrets",entries:[{key:"BETTER_AUTH_SECRET",value:$.betterAuthSecret},{key:"ENCRYPTION_KEY",value:$.encryptionKey},{key:"MESH_JWT_SECRET",value:$.meshJwtSecret},{key:"STUDIO_PROVISION_SECRET_KEY",value:$.studioProvisionSecretKey},{key:"DISABLE_RATE_LIMIT",value:$.disableRateLimit}]},{title:"Auth Providers",entries:[{key:"AUTH_EMAIL_PASSWORD_ENABLED",value:process.env.AUTH_EMAIL_PASSWORD_ENABLED??"true"},{key:"AUTH_GOOGLE_CLIENT_ID",value:!!process.env.AUTH_GOOGLE_CLIENT_ID},{key:"AUTH_GITHUB_CLIENT_ID",value:!!process.env.AUTH_GITHUB_CLIENT_ID},{key:"AUTH_RESEND_API_KEY",value:!!process.env.AUTH_RESEND_API_KEY},{key:"AUTH_SENDGRID_API_KEY",value:!!process.env.AUTH_SENDGRID_API_KEY},{key:"AUTH_SSO_MS_CLIENT_ID",value:!!process.env.AUTH_SSO_MS_CLIENT_ID},{key:"AUTH_SSO_GOOGLE_CLIENT_ID",value:!!process.env.AUTH_SSO_GOOGLE_CLIENT_ID},{key:"AUTH_MAGIC_LINK_ENABLED",value:process.env.AUTH_MAGIC_LINK_ENABLED==="true"},{key:"AUTH_EMAIL_OTP_ENABLED",value:process.env.AUTH_EMAIL_OTP_ENABLED==="true"}]},{title:"Observability",entries:[{key:"CLICKHOUSE_URL",value:$.clickhouseUrl},{key:"OTEL_SERVICE_NAME",value:$.otelServiceName}]},{title:"Event Bus & Networking",entries:[{key:"NATS_URL",value:$.natsUrls}]},{title:"Config Files",entries:[{key:"CONFIG_PATH",value:$.configPath}]},{title:"AI Gateway",entries:[{key:"DECO_AI_GATEWAY_ENABLED",value:$.aiGatewayEnabled},{key:"DECO_AI_GATEWAY_URL",value:$.aiGatewayUrl}]}]}function pK4({env:$}){let u=HV6($);return aK4(YQ1,{flexDirection:"column",children:u.map((f)=>nN0(YQ1,{flexDirection:"column",marginTop:1,children:[nN0(DQ1,{dimColor:!0,children:["  ","\u2500\u2500 ",f.title," ","\u2500".repeat(Math.max(0,38-f.title.length))]}),f.entries.map(({key:X,value:J})=>{let w=KV6(X,J);return nN0(YQ1,{children:[nN0(DQ1,{dimColor:!0,children:["  ",X.padEnd(36)]}),aK4(DQ1,{color:w.color,dimColor:w.dimColor,children:w.text})]},X)})]},f.title))})}var OV6,zV6;var oK4=U(()=>{OV6=new Set(["BETTER_AUTH_SECRET","ENCRYPTION_KEY","MESH_JWT_SECRET","STUDIO_PROVISION_SECRET_KEY"]),zV6=new Set(["DATABASE_URL","CLICKHOUSE_URL","NATS_URL"])});var ZQ1;var sK4=U(()=>{ZQ1={name:"decocms",version:"2.349.1",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"bun --bun vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:e2e":"playwright test","test:e2e:ui":"playwright test --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.2.141","@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^3.0.77","@ai-sdk/google":"^3.0.73","@ai-sdk/openai":"^3.0.63","@anthropic-ai/sdk":"^0.96.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.17.6","@deco-cx/warp-node":"^0.3.23","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@openrouter/ai-sdk-provider":"^2.9.0","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","ai-sdk-provider-claude-code":"^3.4.4","ai-sdk-provider-codex-cli":"^1.1.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12",nats:"^2.29.3","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.184","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/vite-plugin":"workspace:*","@electric-sql/pglite":"^0.3.15","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/core":"^6.1.2","@rjsf/shadcn":"^6.1.2","@rjsf/utils":"^6.1.2","@rjsf/validator-ajv8":"^6.1.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-mention":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.182","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","kysely-pglite":"^0.6.1","lucide-react":"^0.468.0",marked:"^15.0.6","@decocms/sandbox":"workspace:*","mesh-plugin-workflows":"workspace:*",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0",zustand:"^5.0.9"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});import{Box as s2,Text as kf}from"ink";import{Spinner as jV6}from"@inkjs/ui";import{useSyncExternalStore as eK4}from"react";import{jsx as P8,jsxs as xX}from"react/jsx-runtime";function IV6($,u){if(!$||!AV6.has($))return $;let f=WQ1[u]??WQ1[WQ1.length-1];return $==="#875f00"?f[0]:f[1]}function $H4({status:$}){if($==="pending")return P8(jV6,{label:""});return P8(kf,{color:"green",children:"\u2713"})}function uH4({services:$,migrationsStatus:u,home:f,serverUrl:X,vibe:J}){let w=eK4(LV1,PV1),E=eK4(RV1,kV1);return xX(s2,{flexDirection:"column",paddingBottom:1,children:[J?xX(s2,{flexDirection:"column",children:[w.map((Q,Y)=>{let Z=E[Y],W=Q.reduce((F,v)=>F+v.text.length,0),G=Math.max(0,TV6-W);return xX(s2,{flexDirection:"row",children:[Q.map((F,v)=>{let B=IV6(F.color,Y);return B?P8(kf,{color:B,children:F.text},v):P8(kf,{children:F.text},v)}),P8(kf,{children:" ".repeat(G+2)}),Z?.map((F,v)=>F.color?P8(kf,{color:F.color,children:F.char},v):P8(kf,{children:F.char},v))]},Y)}),xX(kf,{dimColor:!0,children:[" v",ZQ1.version]})]}):xX(s2,{flexDirection:"column",marginTop:1,children:[PV6.map((Q,Y)=>P8(kf,{color:LV6[Y],children:Q},Y)),xX(kf,{dimColor:!0,children:[" v",ZQ1.version]})]}),P8(s2,{marginBottom:1,children:P8(kf,{dimColor:!0,children:"\u2500".repeat(80)})}),P8(s2,{children:xX(kf,{dimColor:!0,children:["Home: ",f]})}),xX(s2,{gap:2,children:[$.map((Q)=>xX(s2,{gap:1,children:[xX(kf,{children:[Q.name," :",Q.port||"...."]}),P8($H4,{status:Q.status})]},Q.name)),xX(s2,{gap:1,children:[P8(kf,{children:"Migrations"}),P8($H4,{status:u})]})]}),P8(s2,{children:X?xX(kf,{children:["Open in browser: ",P8(kf,{color:"cyan",children:X})]}):P8(kf,{dimColor:!0,children:"Starting..."})}),xX(s2,{gap:2,children:[xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"K"})," ","toggle config"]}),xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"L"})," ","toggle log flow"]}),xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"V"})," ","toggle vibe ",J?"\u266A Nihilore \xB7 CC BY 4.0":""]}),J&&xX(kf,{dimColor:!0,children:[P8(kf,{bold:!0,dimColor:!0,children:"N"})," ","skip song"]})]})]})}var PV6,LV6,WQ1,TV6=30,AV6;var fH4=U(()=>{sK4();Ja0();Za0();PV6=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],LV6=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"],WQ1=[["#00ff64","#00cc50"],["#00f060","#00c04c"],["#00e05c","#00b448"],["#00d058","#00a844"],["#00c054","#009c40"],["#00b050","#00903c"],["#00a04c","#008438"],["#009048","#007834"],["#008044","#006c30"],["#007040","#00602c"],["#00603c","#005428"]],AV6=new Set(["#875f00","#5f3800"])});import{useSyncExternalStore as SV6}from"react";function kV6(){let $=process.stdout.rows||24,u=process.stdout.columns||80;if($!==tN0.rows||u!==tN0.columns)tN0={rows:$,columns:u};return tN0}function RV6($){return process.stdout.on("resize",$),()=>{process.stdout.off("resize",$)}}function XH4(){return SV6(RV6,kV6)}var tN0;var JH4=U(()=>{tN0={rows:process.stdout.rows||24,columns:process.stdout.columns||80}});import{Box as qV6,Text as lu0}from"ink";import{useSyncExternalStore as CV6}from"react";import{jsx as GQ1,jsxs as FQ1}from"react/jsx-runtime";function MV6($){if($>=500)return"red";if($>=400)return"yellow";if($>=300)return"cyan";return"green"}function wH4({logs:$,headerHeight:u}){let{rows:f}=XH4(),{logFlow:X}=CV6(Vu0,hu0),J=Math.max(1,f-u-1),w=X?$:$.slice(-J);return GQ1(qV6,{flexDirection:"column",children:w.map((E,Q)=>{if(E.rawLine)return GQ1(lu0,{dimColor:!0,children:E.rawLine},Q);let Y=E.duration<1000?`${E.duration}ms`:`${(E.duration/1000).toFixed(1)}s`;return FQ1(lu0,{children:[FQ1(lu0,{dimColor:!0,children:[E.method.padEnd(6)," ",E.path.padEnd(30)," "]}),GQ1(lu0,{color:MV6(E.status),children:E.status}),FQ1(lu0,{dimColor:!0,children:[" ",Y.padStart(8)]})]},Q)})})}var EH4=U(()=>{NG();JH4()});var vQ1={};Y1(vQ1,{App:()=>xV6});import{Box as yV6,Text as gV6,useInput as hV6}from"ink";import{useSyncExternalStore as VV6}from"react";import{jsx as rN0,jsxs as lV6}from"react/jsx-runtime";function xV6({home:$}){let u=VV6(Vu0,hu0);return hV6((f)=>{if(f==="k"||f==="K")uQ1();if(f==="l"||f==="L")fQ1();if((f==="v"||f==="V")&&u.dataDir)va0(u.dataDir),XQ1();if((f==="n"||f==="N")&&u.vibe)Fa0()}),lV6(yV6,{flexDirection:"column",children:[rN0(uH4,{services:u.services,migrationsStatus:u.migrationsStatus,home:$,serverUrl:u.serverUrl,vibe:u.vibe}),u.viewMode==="config"?u.env?rN0(pK4,{env:u.env}):rN0(gV6,{dimColor:!0,children:"Loading configuration..."}):rN0(wH4,{logs:u.logs,headerHeight:u.vibe?iV6:bV6})]})}var bV6=15,iV6=19;var BQ1=U(()=>{oK4();fH4();EH4();NG();Fl()});var nP=x((rV6)=>{rV6.HttpAuthLocation=void 0;(function($){$.HEADER="header",$.QUERY="query"})(rV6.HttpAuthLocation||(rV6.HttpAuthLocation={}));rV6.HttpApiKeyAuthLocation=void 0;(function($){$.HEADER="header",$.QUERY="query"})(rV6.HttpApiKeyAuthLocation||(rV6.HttpApiKeyAuthLocation={}));rV6.EndpointURLScheme=void 0;(function($){$.HTTP="http",$.HTTPS="https"})(rV6.EndpointURLScheme||(rV6.EndpointURLScheme={}));rV6.AlgorithmId=void 0;(function($){$.MD5="md5",$.CRC32="crc32",$.CRC32C="crc32c",$.SHA1="sha1",$.SHA256="sha256"})(rV6.AlgorithmId||(rV6.AlgorithmId={}));var cV6=($)=>{let u=[];if($.sha256!==void 0)u.push({algorithmId:()=>rV6.AlgorithmId.SHA256,checksumConstructor:()=>$.sha256});if($.md5!=null)u.push({algorithmId:()=>rV6.AlgorithmId.MD5,checksumConstructor:()=>$.md5});return{addChecksumAlgorithm(f){u.push(f)},checksumAlgorithms(){return u}}},dV6=($)=>{let u={};return $.checksumAlgorithms().forEach((f)=>{u[f.algorithmId()]=f.checksumConstructor()}),u},mV6=($)=>{return cV6($)},nV6=($)=>{return dV6($)};rV6.FieldPosition=void 0;(function($){$[$.HEADER=0]="HEADER",$[$.TRAILER=1]="TRAILER"})(rV6.FieldPosition||(rV6.FieldPosition={}));var tV6="__smithy_context";rV6.IniSectionType=void 0;(function($){$.PROFILE="profile",$.SSO_SESSION="sso-session",$.SERVICES="services"})(rV6.IniSectionType||(rV6.IniSectionType={}));rV6.RequestHandlerProtocol=void 0;(function($){$.HTTP_0_9="http/0.9",$.HTTP_1_0="http/1.0",$.TDS_8_0="tds/8.0"})(rV6.RequestHandlerProtocol||(rV6.RequestHandlerProtocol={}));rV6.SMITHY_CONTEXT_KEY=tV6;rV6.getDefaultClientConfiguration=mV6;rV6.resolveDefaultRuntimeConfig=nV6});var m5=x((Xb6)=>{var sV6=nP(),eV6=($)=>{return{setHttpHandler(u){$.httpHandler=u},httpHandler(){return $.httpHandler},updateHttpClientConfig(u,f){$.httpHandler?.updateHttpClientConfig(u,f)},httpHandlerConfigs(){return $.httpHandler.httpHandlerConfigs()}}},$b6=($)=>{return{httpHandler:$.httpHandler()}};class QH4{name;kind;values;constructor({name:$,kind:u=sV6.FieldPosition.HEADER,values:f=[]}){this.name=$,this.kind=u,this.values=f}add($){this.values.push($)}set($){this.values=$}remove($){this.values=this.values.filter((u)=>u!==$)}toString(){return this.values.map(($)=>$.includes(",")||$.includes(" ")?`"${$}"`:$).join(", ")}get(){return this.values}}class YH4{entries={};encoding;constructor({fields:$=[],encoding:u="utf-8"}){$.forEach(this.setField.bind(this)),this.encoding=u}setField($){this.entries[$.name.toLowerCase()]=$}getField($){return this.entries[$.toLowerCase()]}removeField($){delete this.entries[$.toLowerCase()]}getByType($){return Object.values(this.entries).filter((u)=>u.kind===$)}}class aN0{method;protocol;hostname;port;path;query;headers;username;password;fragment;body;constructor($){this.method=$.method||"GET",this.hostname=$.hostname||"localhost",this.port=$.port,this.query=$.query||{},this.headers=$.headers||{},this.body=$.body,this.protocol=$.protocol?$.protocol.slice(-1)!==":"?`${$.protocol}:`:$.protocol:"https:",this.path=$.path?$.path.charAt(0)!=="/"?`/${$.path}`:$.path:"/",this.username=$.username,this.password=$.password,this.fragment=$.fragment}static clone($){let u=new aN0({...$,headers:{...$.headers}});if(u.query)u.query=ub6(u.query);return u}static isInstance($){if(!$)return!1;let u=$;return"method"in u&&"protocol"in u&&"hostname"in u&&"path"in u&&typeof u.query==="object"&&typeof u.headers==="object"}clone(){return aN0.clone(this)}}function ub6($){return Object.keys($).reduce((u,f)=>{let X=$[f];return{...u,[f]:Array.isArray(X)?[...X]:X}},{})}class DH4{statusCode;reason;headers;body;constructor($){this.statusCode=$.statusCode,this.reason=$.reason,this.headers=$.headers||{},this.body=$.body}static isInstance($){if(!$)return!1;let u=$;return typeof u.statusCode==="number"&&typeof u.headers==="object"}}function fb6($){return/^[a-z0-9][a-z0-9\.\-]*[a-z0-9]$/.test($)}Xb6.Field=QH4;Xb6.Fields=YH4;Xb6.HttpRequest=aN0;Xb6.HttpResponse=DH4;Xb6.getHttpHandlerExtensionConfiguration=eV6;Xb6.isValidHostname=fb6;Xb6.resolveHttpHandlerRuntimeConfig=$b6});function Wb6($){return(u)=>async(f)=>{let{request:X}=f;if($.expectContinueHeader!==!1&&ZH4.HttpRequest.isInstance(X)&&X.body&&$.runtime==="node"&&$.requestHandler?.constructor?.name!=="FetchHttpHandler"){let J=!0;if(typeof $.expectContinueHeader==="number")try{J=(Number(X.headers?.["content-length"])??$.bodyLengthChecker?.(X.body)??1/0)>=$.expectContinueHeader}catch(w){}else J=!!$.expectContinueHeader;if(J)X.headers.Expect="100-continue"}return u({...f,request:X})}}var ZH4,Gb6,WH4=($)=>({applyToStack:(u)=>{u.add(Wb6($),Gb6)}});var GH4=U(()=>{ZH4=D0(m5(),1);Gb6={step:"build",tags:["SET_EXPECT_HEADER","EXPECT_HEADER"],name:"addExpectContinueMiddleware",override:!0}});var eY,pN0,tP,oN0,j3,FH4,du0;var $D=U(()=>{eY={WHEN_SUPPORTED:"WHEN_SUPPORTED",WHEN_REQUIRED:"WHEN_REQUIRED"},pN0=eY.WHEN_SUPPORTED,tP={WHEN_SUPPORTED:"WHEN_SUPPORTED",WHEN_REQUIRED:"WHEN_REQUIRED"},oN0=eY.WHEN_SUPPORTED;(function($){$.MD5="MD5",$.CRC32="CRC32",$.CRC32C="CRC32C",$.CRC64NVME="CRC64NVME",$.SHA1="SHA1",$.SHA256="SHA256"})(j3||(j3={}));(function($){$.HEADER="header",$.TRAILER="trailer"})(FH4||(FH4={}));du0=j3.CRC32});var Zz,sn=($,u,f,X)=>{if(!(u in $))return;let J=$[u].toUpperCase();if(!Object.values(f).includes(J))throw TypeError(`Cannot load ${X} '${u}'. Expected one of ${Object.values(f)}, got '${$[u]}'.`);return J};var _Q1=U(()=>{(function($){$.ENV="env",$.CONFIG="shared config entry"})(Zz||(Zz={}))});var Fb6="AWS_REQUEST_CHECKSUM_CALCULATION",vb6="request_checksum_calculation",vH4;var BH4=U(()=>{$D();_Q1();vH4={environmentVariableSelector:($)=>sn($,Fb6,eY,Zz.ENV),configFileSelector:($)=>sn($,vb6,eY,Zz.CONFIG),default:pN0}});var Bb6="AWS_RESPONSE_CHECKSUM_VALIDATION",Ub6="response_checksum_validation",UH4;var NH4=U(()=>{$D();_Q1();UH4={environmentVariableSelector:($)=>sn($,Bb6,tP,Zz.ENV),configFileSelector:($)=>sn($,Ub6,tP,Zz.CONFIG),default:oN0}});var PQ1=x((Tb6)=>{var Nb6=["AuthFailure","InvalidSignatureException","RequestExpired","RequestInTheFuture","RequestTimeTooSkewed","SignatureDoesNotMatch"],Ob6=["BandwidthLimitExceeded","EC2ThrottledException","LimitExceededException","PriorRequestNotComplete","ProvisionedThroughputExceededException","RequestLimitExceeded","RequestThrottled","RequestThrottledException","SlowDown","ThrottledException","Throttling","ThrottlingException","TooManyRequestsException","TransactionInProgressException"],zb6=["TimeoutError","RequestTimeout","RequestTimeoutException"],Kb6=[500,502,503,504],Hb6=["ECONNRESET","ECONNREFUSED","EPIPE","ETIMEDOUT"],_b6=["EHOSTUNREACH","ENETUNREACH","ENOTFOUND"],OH4=($)=>$?.$retryable!==void 0,jb6=($)=>Nb6.includes($.name),zH4=($)=>$.$metadata?.clockSkewCorrected,KH4=($)=>{let u=new Set(["Failed to fetch","NetworkError when attempting to fetch resource","The Internet connection appears to be offline","Load failed","Network request failed"]);if(!($&&$ instanceof TypeError))return!1;return u.has($.message)},Pb6=($)=>$.$metadata?.httpStatusCode===429||Ob6.includes($.name)||$.$retryable?.throttling==!0,jQ1=($,u=0)=>OH4($)||zH4($)||$.name==="InvalidSignatureException"&&$.message?.includes("Signature expired")||zb6.includes($.name)||Hb6.includes($?.code||"")||_b6.includes($?.code||"")||Kb6.includes($.$metadata?.httpStatusCode||0)||KH4($)||HH4($)||$.cause!==void 0&&u<=10&&jQ1($.cause,u+1),Lb6=($)=>{if($.$metadata?.httpStatusCode!==void 0){let u=$.$metadata.httpStatusCode;if(500<=u&&u<=599&&!jQ1($))return!0;return!1}return!1};function HH4($){return $.code==="ERR_HTTP2_STREAM_ERROR"&&$.message.includes("NGHTTP2_REFUSED_STREAM")}Tb6.isBrowserNetworkError=KH4;Tb6.isClockSkewCorrectedError=zH4;Tb6.isClockSkewError=jb6;Tb6.isNodeJsHttp2TransientError=HH4;Tb6.isRetryableByTrait=OH4;Tb6.isServerError=Lb6;Tb6.isThrottlingError=Pb6;Tb6.isTransientError=jQ1});var WB=x((cb6)=>{var yb6=PQ1();cb6.RETRY_MODES=void 0;(function($){$.STANDARD="standard",$.ADAPTIVE="adaptive"})(cb6.RETRY_MODES||(cb6.RETRY_MODES={}));var eN0=3,gb6=cb6.RETRY_MODES.STANDARD;class $O0{static setTimeoutFn=setTimeout;beta;minCapacity;minFillRate;scaleConstant;smooth;enabled=!1;availableTokens=0;lastMaxRate=0;measuredTxRate=0;requestCount=0;fillRate;lastThrottleTime;lastTimestamp=0;lastTxRateBucket;maxCapacity;timeWindow=0;constructor($){this.beta=$?.beta??0.7,this.minCapacity=$?.minCapacity??1,this.minFillRate=$?.minFillRate??0.5,this.scaleConstant=$?.scaleConstant??0.4,this.smooth=$?.smooth??0.8,this.lastThrottleTime=this.getCurrentTimeInSeconds(),this.lastTxRateBucket=Math.floor(this.getCurrentTimeInSeconds()),this.fillRate=this.minFillRate,this.maxCapacity=this.minCapacity}async getSendToken(){return this.acquireTokenBucket(1)}updateClientSendingRate($){let u;this.updateMeasuredRate();let f=$;if(f?.errorType==="THROTTLING"||yb6.isThrottlingError(f?.error??$)){let w=!this.enabled?this.measuredTxRate:Math.min(this.measuredTxRate,this.fillRate);this.lastMaxRate=w,this.calculateTimeWindow(),this.lastThrottleTime=this.getCurrentTimeInSeconds(),u=this.cubicThrottle(w),this.enableTokenBucket()}else this.calculateTimeWindow(),u=this.cubicSuccess(this.getCurrentTimeInSeconds());let J=Math.min(u,2*this.measuredTxRate);this.updateTokenBucketRate(J)}getCurrentTimeInSeconds(){return Date.now()/1000}async acquireTokenBucket($){if(!this.enabled)return;if(this.refillTokenBucket(),$>this.availableTokens){let u=($-this.availableTokens)/this.fillRate*1000;await new Promise((f)=>$O0.setTimeoutFn(f,u))}this.availableTokens=this.availableTokens-$}refillTokenBucket(){let $=this.getCurrentTimeInSeconds();if(!this.lastTimestamp){this.lastTimestamp=$;return}let u=($-this.lastTimestamp)*this.fillRate;this.availableTokens=Math.min(this.maxCapacity,this.availableTokens+u),this.lastTimestamp=$}calculateTimeWindow(){this.timeWindow=this.getPrecise(Math.pow(this.lastMaxRate*(1-this.beta)/this.scaleConstant,0.3333333333333333))}cubicThrottle($){return this.getPrecise($*this.beta)}cubicSuccess($){return this.getPrecise(this.scaleConstant*Math.pow($-this.lastThrottleTime-this.timeWindow,3)+this.lastMaxRate)}enableTokenBucket(){this.enabled=!0}updateTokenBucketRate($){this.refillTokenBucket(),this.fillRate=Math.max($,this.minFillRate),this.maxCapacity=Math.max($,this.minCapacity),this.availableTokens=Math.min(this.availableTokens,this.maxCapacity)}updateMeasuredRate(){let $=this.getCurrentTimeInSeconds(),u=Math.floor($*2)/2;if(this.requestCount++,u>this.lastTxRateBucket){let f=this.requestCount/(u-this.lastTxRateBucket);this.measuredTxRate=this.getPrecise(f*this.smooth+this.measuredTxRate*(1-this.smooth)),this.requestCount=0,this.lastTxRateBucket=u}}getPrecise($){return parseFloat($.toFixed(8))}}var hb6=100,AQ1=20000,Vb6=500,LQ1=500,bb6=5,ib6=10,_H4=1,xb6="amz-sdk-invocation-id",lb6="amz-sdk-request";class lX{static v2026=typeof process<"u"&&process.env?.SMITHY_NEW_RETRIES_2026==="true";static delay(){return lX.v2026?50:100}static throttlingDelay(){return lX.v2026?1000:500}static cost(){return lX.v2026?14:5}static throttlingCost(){return lX.v2026?5:10}static modifiedCostType(){return lX.v2026?"THROTTLING":"TRANSIENT"}}class jH4{x=lX.delay();computeNextBackoffDelay($){let u=Math.random(),f=2,X=u*Math.min(this.x*2**$,AQ1);return Math.floor(X)}setDelayBase($){this.x=$}}class TQ1{delay;count;cost;longPoll;constructor($,u,f,X){this.delay=$,this.count=u,this.cost=f,this.longPoll=X}getRetryCount(){return this.count}getRetryDelay(){return Math.min(AQ1,this.delay)}getRetryCost(){return this.cost}isLongPoll(){return this.longPoll}}var sN0={incompatible:1,attempts:2,capacity:3};class mu0{mode=cb6.RETRY_MODES.STANDARD;capacity=LQ1;retryBackoffStrategy;maxAttemptsProvider;baseDelay;constructor($){if(typeof $==="number")this.maxAttemptsProvider=async()=>$;else if(typeof $==="function")this.maxAttemptsProvider=$;else if($&&typeof $==="object")this.maxAttemptsProvider=async()=>$.maxAttempts,this.baseDelay=$.baseDelay,this.retryBackoffStrategy=$.backoff;this.maxAttemptsProvider??=async()=>eN0,this.baseDelay??=lX.delay(),this.retryBackoffStrategy??=new jH4}async acquireInitialRetryToken($){return new TQ1(lX.delay(),0,void 0,lX.v2026&&$.includes(":longpoll"))}async refreshRetryTokenForRetry($,u){let f=await this.getMaxAttempts(),X=this.retryCode($,u,f),J=X===0,w=$.isLongPoll?.();if(J||w){let E=u.errorType;this.retryBackoffStrategy.setDelayBase(E==="THROTTLING"?lX.throttlingDelay():this.baseDelay);let Q=this.retryBackoffStrategy.computeNextBackoffDelay($.getRetryCount()),Y=Q;if(u.retryAfterHint instanceof Date)Y=Math.max(Q,Math.min(u.retryAfterHint.getTime()-Date.now(),Q+5000));if(!J)throw Object.assign(Error("No retry token available"),{$backoff:lX.v2026&&X===sN0.capacity&&w?Y:0});else{let Z=this.getCapacityCost(E);return this.capacity-=Z,new TQ1(Y,$.getRetryCount()+1,Z,$.isLongPoll?.()??!1)}}throw Error("No retry token available")}recordSuccess($){this.capacity=Math.min(LQ1,this.capacity+($.getRetryCost()??_H4))}getCapacity(){return this.capacity}async maxAttempts(){return this.maxAttemptsProvider()}async getMaxAttempts(){try{return await this.maxAttemptsProvider()}catch($){return console.warn(`Max attempts provider could not resolve. Using default of ${eN0}`),eN0}}retryCode($,u,f){let X=$.getRetryCount()+1,J=this.isRetryableError(u.errorType)?0:sN0.incompatible,w=X<f?0:sN0.attempts,E=this.capacity>=this.getCapacityCost(u.errorType)?0:sN0.capacity;return J||w||E}getCapacityCost($){return $===lX.modifiedCostType()?lX.throttlingCost():lX.cost()}isRetryableError($){return $==="THROTTLING"||$==="TRANSIENT"}}class PH4{mode=cb6.RETRY_MODES.ADAPTIVE;rateLimiter;standardRetryStrategy;constructor($,u){let{rateLimiter:f}=u??{};this.rateLimiter=f??new $O0,this.standardRetryStrategy=u?new mu0({maxAttempts:typeof $==="number"?$:3,...u}):new mu0($)}async acquireInitialRetryToken($){return await this.rateLimiter.getSendToken(),this.standardRetryStrategy.acquireInitialRetryToken($)}async refreshRetryTokenForRetry($,u){return this.rateLimiter.updateClientSendingRate(u),this.standardRetryStrategy.refreshRetryTokenForRetry($,u)}recordSuccess($){this.rateLimiter.updateClientSendingRate({}),this.standardRetryStrategy.recordSuccess($)}async maxAttemptsProvider(){return this.standardRetryStrategy.maxAttempts()}}class LH4 extends mu0{computeNextBackoffDelay;constructor($,u=lX.delay()){super(typeof $==="function"?$:async()=>$);if(typeof u==="number")this.computeNextBackoffDelay=()=>u;else this.computeNextBackoffDelay=u}async refreshRetryTokenForRetry($,u){let f=await super.refreshRetryTokenForRetry($,u);return f.getRetryDelay=()=>this.computeNextBackoffDelay(f.getRetryCount()),f}}cb6.AdaptiveRetryStrategy=PH4;cb6.ConfiguredRetryStrategy=LH4;cb6.DEFAULT_MAX_ATTEMPTS=eN0;cb6.DEFAULT_RETRY_DELAY_BASE=hb6;cb6.DEFAULT_RETRY_MODE=gb6;cb6.DefaultRateLimiter=$O0;cb6.INITIAL_RETRY_TOKENS=LQ1;cb6.INVOCATION_ID_HEADER=xb6;cb6.MAXIMUM_RETRY_DELAY=AQ1;cb6.NO_RETRY_INCREMENT=_H4;cb6.REQUEST_HEADER=lb6;cb6.RETRY_COST=bb6;cb6.Retry=lX;cb6.StandardRetryStrategy=mu0;cb6.THROTTLING_RETRY_DELAY_BASE=Vb6;cb6.TIMEOUT_RETRY_COST=ib6});var Zf=x((vi6)=>{var Ei6=WB(),IQ1={warningEmitted:!1},Qi6=($)=>{if($&&!IQ1.warningEmitted&&parseInt($.substring(1,$.indexOf(".")))<20)IQ1.warningEmitted=!0,process.emitWarning(`NodeDeprecationWarning: The AWS SDK for JavaScript (v3) will
 no longer support Node.js ${$} in January 2026.
 To continue receiving updates to AWS services, bug fixes, and security
@@ -76969,7 +76969,7 @@ Caused by: ${u.stack}`}};ri=class ri extends e8{constructor($,u){super($,u);this
           AND "organizationId" NOT IN (
             SELECT "organizationId" FROM "member" WHERE "userId" = ${Y.id}
           )
-      `.execute(Z),await J0`DELETE FROM "member" WHERE "userId" = ${u.id}`.execute(Z),await J0`DELETE FROM "user" WHERE "id" = ${u.id}`.execute(Z)})}catch(Z){console.error("[SSO] Failed to merge duplicate user:",Z)}}var B13=($)=>{return{trustEmailVerified:!0,provisionUser:N13,defaultSSO:[{domain:$.domain,providerId:$.providerId,oidcConfig:{issuer:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/v2.0`,pkce:!0,clientId:$.MS_CLIENT_ID,clientSecret:$.MS_CLIENT_SECRET,discoveryEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/v2.0/.well-known/openid-configuration`,authorizationEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/oauth2/v2.0/authorize`,tokenEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/oauth2/v2.0/token`,jwksEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/discovery/v2.0/keys`,userInfoEndpoint:"https://graph.microsoft.com/oidc/userinfo",tokenEndpointAuthentication:"client_secret_post",scopes:$.scopes,mapping:{id:"sub",email:"email",emailVerified:"email_verified",name:"name",image:"picture",extraFields:{emailVerified:"email_verified",oid:"oid"}}}}]}},U13=($)=>{return{trustEmailVerified:!0,defaultSSO:[{domain:$.domain,providerId:$.providerId,oidcConfig:{issuer:"https://accounts.google.com",pkce:!0,clientId:$.GOOGLE_CLIENT_ID,clientSecret:$.GOOGLE_CLIENT_SECRET,discoveryEndpoint:"https://accounts.google.com/.well-known/openid-configuration",authorizationEndpoint:"https://accounts.google.com/o/oauth2/v2/auth",tokenEndpoint:"https://oauth2.googleapis.com/token",jwksEndpoint:"https://www.googleapis.com/oauth2/v3/certs",userInfoEndpoint:"https://openidconnect.googleapis.com/v1/userinfo",tokenEndpointAuthentication:"client_secret_post",scopes:$.scopes,mapping:{id:"sub",email:"email",emailVerified:"email_verified",name:"name",image:"picture",extraFields:{emailVerified:"email_verified",hd:"hd"}}}}]}},dK$=($)=>{if($.providerId==="microsoft")return B13($);if($.providerId==="google")return U13($);throw Error(`Unsupported provider: ${$.providerId}`)};var mK$=U(()=>{p5();P4();xY()});var oK$={};Y1(oK$,{resetPasswordEnabled:()=>gx0,authConfig:()=>ou,auth:()=>Xf,GENERIC_EMAIL_DOMAINS:()=>QU});function O13($){return $.toLowerCase().trim().replace(/[^a-z0-9\s_-]+/g,"").replace(/[\s_-]+/g,"-").replace(/^-+|-+$/g,"")}function z13(){let $=Math.floor(Math.random()*tK$.length),u=Math.floor(Math.random()*nK$.length),f=tK$[$]??"deco",X=nK$[u]??"studio";return`${f}-${X}`}function I13(){let $=[L90];try{let u=new URL(L90);if(u.hostname==="localhost")$.push(L90.replace("localhost","127.0.0.1"));else if(u.hostname==="127.0.0.1")$.push(L90.replace("127.0.0.1","localhost"))}catch{}return $}var nK$,tK$,K13,H13,yx0,_13,j13,P13,rK$,ou,pK$=void 0,Nk1=void 0,gx0=!1,L13,QU,T13,A13,L90,aK$,Xf;var YU=U(()=>{O5();bU1();A41();O$1();T41();RG0();YG0();aW0();ot4();lU1();Gf();yB();Zp4();xY();Fp4();Y_0();Bp4();lK$();cK$();i80();mK$();nK$=["labs","agent","studio","workspace","systems","core","cloud","works"],tK$=["capybara","guarana","deco","samba","feijoada","capoeira","carnival"];K13=Object.values(N50()).map(($)=>$.map((u)=>u.name)).flat(),H13={...Kd,self:["*",...K13]},yx0=hW(H13),_13=yx0.newRole({self:["*"],...Hd.statements}),j13=yx0.newRole({self:["*"],...Hd.statements}),P13=yx0.newRole({self:["*"],...Hd.statements}),rK$=Object.values(N50()).map(($)=>$.map((u)=>`self:${u.name}`)).flat(),ou=iL().auth;if(ou.inviteEmailProviderId&&ou.emailProviders&&ou.emailProviders.length>0){let $=nL(ou.emailProviders,ou.inviteEmailProviderId);if($){let u=mL($);pK$=async(f)=>{let X=f.inviter.user?.name||f.inviter.user?.email,J=`${_E()}/auth/accept-invitation?invitationId=${f.invitation.id}&redirectTo=/${f.organization.slug}`;await u({to:f.email,subject:`You've been invited to join ${f.organization.name}`,html:tL({preheader:`${X} has invited you to join ${f.organization.name} on deco Studio.`,heading:"You've been invited",subheading:`<strong>${X}</strong> has invited you to join <strong>${f.organization.name}</strong> on deco Studio.`,body:I50("Accept invitation",J),footnote:"If you weren\u2019t expecting an invitation, you can safely ignore this email."})})}}}if(ou.resetPasswordEmailProviderId&&ou.emailProviders&&ou.emailProviders.length>0){let $=nL(ou.emailProviders,ou.resetPasswordEmailProviderId);if($){let u=mL($);gx0=!0,Nk1=async({user:f,url:X})=>{await u({to:f.email,subject:"Reset your password",html:tL({preheader:"We received a request to reset the password on your deco Studio account.",heading:"Reset your password",subheading:"We received a password reset request for your account. Click the button below to choose a new password.",body:I50("Reset password",X)+D_0("This link expires in 24\xA0hours. If you didn\u2019t request a password reset, no action is needed.",!0),footnote:"If you didn\u2019t request a password reset, you can safely ignore this email."})})}}}L13=[t10({organizationCreation:{afterCreate:async($)=>{await xK$($.organization.id,$.member.userId)}},ac:yx0,creatorRole:"owner",allowUserToCreateOrganization:!0,dynamicAccessControl:{enabled:!0,maximumRolesPerOrganization:500,enableCustomResources:!0,allowedRolesToCreateResources:Ta,resourceNameValidation:($)=>{return{valid:/^[a-zA-Z0-9-_]+$/.test($)}}},roles:{user:_13,admin:j13,owner:P13},sendInvitationEmail:pK$}),W40({loginPage:"/login",oidcConfig:{scopes:rK$,metadata:{scopes_supported:rK$},loginPage:"/login"}}),s10({enableMetadata:!0,maximumNameLength:64,keyExpiration:{minExpiresIn:0.003472222222222222},enableSessionForAPIKeys:!0,customAPIKeyGetter:($)=>{if($.headers?.get("X-MCP-Session-Auth")==="true")return null;let f=$.headers?.get("Authorization");if(f?.startsWith("Bearer "))return f.replace("Bearer ","").trim();return null},permissions:{defaultPermissions:{self:["ORGANIZATION_LIST","ORGANIZATION_GET","ORGANIZATION_MEMBER_LIST","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","API_KEY_CREATE","API_KEY_LIST"]}},rateLimit:{enabled:!1}}),Pd({defaultRole:"user",adminRoles:["admin","owner"],roles:{...gj,owner:tW0}}),F40(),Q40({jwt:{expirationTime:"5m"}}),GW0(ou.ssoConfig?dK$(ou.ssoConfig):void 0),...ou.magicLinkConfig?.enabled&&ou.emailProviders&&ou.emailProviders.length>0?[Y40(vp4(ou.magicLinkConfig,ou.emailProviders))]:[],...ou.emailOtpConfig?.enabled&&ou.emailProviders&&ou.emailProviders.length>0?[X40(Gp4(ou.emailOtpConfig,ou.emailProviders))]:[]],QU=new Set(["gmail.com","googlemail.com","outlook.com","hotmail.com","live.com","yahoo.com","yahoo.co.uk","icloud.com","me.com","mac.com","aol.com","protonmail.com","proton.me","zoho.com","yandex.com","mail.com","gmx.com","gmx.net","tutanota.com","fastmail.com"]),T13=kO(),A13=R$0(T13),L90=_E();aK$=b4(),Xf=L41({secret:aK$.betterAuthSecret||"deco-default-secret-k7x9m2p4q8w3n5v6",baseURL:L90,trustedOrigins:I13(),database:A13,socialProviders:ou.socialProviders,...ou.ssoConfig&&{account:{accountLinking:{trustedProviders:[ou.ssoConfig.providerId]}}},emailAndPassword:{enabled:ou.emailAndPassword.enabled,...Nk1&&{sendResetPassword:Nk1}},rateLimit:{enabled:!aK$.disableRateLimit,window:60,max:1e4},plugins:L13,databaseHooks:{user:{create:{after:async($)=>{if(Uk1({id:$.id,email:$.email,name:$.name??null,emailVerified:!!$.emailVerified}),P$.capture({distinctId:$.id,event:"user_signed_up",properties:{email:$.email,email_domain:$.email?.split("@")[1]?.toLowerCase()??null,email_verified:!!$.emailVerified,has_name:!!$.name}}),$.emailVerified){let X=$.email?.split("@")[1]?.toLowerCase();if(X&&!QU.has(X))return}if(iL().autoCreateOrganizationOnSignup===!1)return;let u=$.name?$.name.split(" ")[0]:$.email.split("@")[0],f=3;for(let X=0;X<f;X++){let J=`${u} ${z13()}`,w=O13(J);try{let Q=(await Xf.api.createOrganization({body:{name:J,slug:w,userId:$.id}}))?.id??void 0;if(Q)P$.groupIdentify({groupType:"organization",groupKey:Q,properties:{name:J,slug:w,created_at:new Date().toISOString(),created_via:"signup_default"}}),P$.capture({distinctId:$.id,event:"organization_created",groups:{organization:Q},properties:{organization_id:Q,organization_slug:w,created_via:"signup_default"}});return}catch(E){if(!(E instanceof Error&&("body"in E)&&E.body?.code==="ORGANIZATION_ALREADY_EXISTS")||X===f-1){console.error("Failed to create default organization:",E);return}}}}}},session:{create:{after:async($)=>{let u=await l5().db.selectFrom("user").select(["id","email","name","emailVerified"]).where("id","=",$.userId).executeTakeFirst();if(!u)return;Uk1({id:u.id,email:u.email,name:u.name??null,emailVerified:!!u.emailVerified})}}}}})});function Ok1($,u){return`${$}:${u}`}function sK$($){let u=$?.ttlMs??120000,f=$?.maxSize??1e4,X=new Map;function J(){if(X.size<=f)return;let w=Date.now();for(let[E,Q]of X)if(Q.expiresAt<=w)X.delete(E);if(X.size>f){let E=X.size-f,Q=0;for(let Y of X.keys()){if(Q>=E)break;X.delete(Y),Q++}}}return{get(w,E){let Q=Ok1(w,E),Y=X.get(Q);if(!Y)return;if(Y.expiresAt<=Date.now()){X.delete(Q);return}return Y.role},set(w,E,Q){let Y=Ok1(w,E);X.set(Y,{role:Q,expiresAt:Date.now()+u,organizationId:E}),J()},invalidate(w,E){X.delete(Ok1(w,E))},invalidateOrg(w){for(let[E,Q]of X)if(Q.organizationId===w)X.delete(E)}}}var eK$=()=>{};var zk1=()=>{};var $H$=()=>{};var S13,su7;var uH$=U(()=>{eK$();zk1();Vz();$H$();S13={br:".br",zstd:".zst",gzip:".gz"},su7=Object.keys(S13)});var fH$=U(()=>{uH$()});var XH$=()=>{};var JH$=U(()=>{XH$()});var wH$=()=>{};var EH$=U(()=>{TU1()});var Kk1=U(()=>{bz();EH$()});var Hk1="x-hono-disable-ssg",N37;var _k1=U(()=>{Kk1();N37=(()=>{try{return new Response("SSG is disabled",{status:404,headers:{[Hk1]:"true"}})}catch{return null}})()});var QH$=U(()=>{CH0()});var jk1=U(()=>{QH$()});var YH$=U(()=>{JH$();wH$();zk1();_k1();jk1();Kk1()});var DH$=U(()=>{_k1();jk1();YH$()});var e37;var ZH$=U(()=>{DH$();({write:e37}=Bun)});var q13=class{#$;constructor($){this.#$=$,this.raw=$.raw,this.url=$.url?new URL($.url):null,this.protocol=$.protocol??null}send($,u){this.#$.send($,u??{})}raw;binaryType="arraybuffer";get readyState(){return this.#$.readyState}url;protocol;close($,u){this.#$.close($,u)}},WH$=($)=>{return(...u)=>{if(typeof u[0]==="function"){let[f,X]=u;return async function(w,E){let Q=await f(w),Y=await $(w,Q,X);if(Y)return Y;await E()}}else{let[f,X,J]=u;return(async()=>{let w=await $(f,X,J);if(!w)throw Error("Failed to upgrade WebSocket");return w})()}}};var GH$=()=>{};var T90=($)=>("server"in $.env)?$.env.server:$.env;var hx0=()=>{};var C13;var FH$=U(()=>{GH$();hx0();C13=WH$(($,u)=>{let f=T90($);if(!f)throw TypeError("env has to include the 2nd argument of fetch.");if(f.upgrade($.req.raw,{data:{events:u,url:new URL($.req.url),protocol:$.req.url}}))return new Response(null);return})});var Pk1=($)=>{let u=T90($);if(!u)throw TypeError("env has to include the 2nd argument of fetch.");if(typeof u.requestIP!=="function")throw TypeError("server.requestIP is not a function.");let f=u.requestIP($.req.raw);if(!f)return{remote:{}};return{remote:{address:f.address,addressType:f.family==="IPv6"||f.family==="IPv4"?f.family:void 0,port:f.port}}};var vH$=U(()=>{hx0()});var BH$=U(()=>{fH$();ZH$();FH$();vH$();hx0()});var UH$;var NH$=U(()=>{UH$={google:{name:"Google",icon:"https://assets.decocache.com/webdraw/eb7480aa-a68b-4ce4-98ff-36aa121762a7/google.svg"},github:{name:"GitHub",icon:"https://assets.decocache.com/decocms/e02ce92e-6684-41a6-acfc-432977eb4878/github.png"},microsoft:{name:"Microsoft",icon:"https://assets.decocache.com/mcp/aa6f6e1a-6526-4bca-99cc-82e2ec38b0e4/microsoft.png"}}});var bx0={};Y1(bx0,{waitForSeed:()=>i13,seedLocalMode:()=>h13,markSeedComplete:()=>b13,isLocalMode:()=>pi,getLocalAdminUser:()=>Lk1,getLocalAdminPassword:()=>Vx0});import{userInfo as M13}from"os";async function Vx0(){return b4().betterAuthSecret||"local-mode-default"}function OH$(){try{return M13().username||"local"}catch{return"local"}}function y13($){return $.charAt(0).toUpperCase()+$.slice(1)}async function g13(){let $=l5(),u=await $.db.selectFrom("user").select($.db.fn.countAll().as("count")).executeTakeFirst();return Number(u?.count??0)===0}async function h13(){if(!await g13())return!1;let u=OH$(),f=`${u}@localhost.mesh`,X=y13(u),J=await Vx0(),w=await Xf.api.signUpEmail({body:{email:f,password:J,name:X}});if(!w?.user?.id)throw Error("Failed to create local admin user");let E=w.user.id,Q=l5();await Q.db.updateTable("user").set({role:"admin"}).where("id","=",E).execute();let Y=`${u}-local`.toLowerCase().replace(/[^a-z0-9-]/g,"-").replace(/-+/g,"-").replace(/^-|-$/g,""),Z=`${X} Local`;return await Q.db.updateTable("organization").set({name:Z,slug:Y}).where("id","in",(W)=>W.selectFrom("member").select("organizationId").where("userId","=",E)).execute(),!0}async function Lk1(){let $=l5(),u=`${OH$()}@localhost.mesh`;return $.db.selectFrom("user").where("email","=",u).selectAll().executeTakeFirst()}function pi(){return b4().localMode}function b13(){zH$()}function i13(){return V13}var zH$,V13;var xp=U(()=>{xY();O5();YU();V13=new Promise(($)=>{if(zH$=$,!pi())$()})});function KH$(){let $=Object.keys(ou.socialProviders??{}),u=$.length>0,f=$.map((J)=>({name:J,icon:UH$[J].icon})),X=b4().localMode;return{emailAndPassword:{enabled:ou.emailAndPassword?.enabled??!1},magicLink:{enabled:ou.magicLinkConfig?.enabled??!1},emailOtp:{enabled:ou.emailOtpConfig?.enabled??!1},resetPassword:{enabled:gx0},socialProviders:{enabled:u,providers:f},sso:ou.ssoConfig?{enabled:!0,providerId:ou.ssoConfig.providerId}:{enabled:!1},stdioEnabled:X,localMode:pi()}}var lp,HH$;var Tk1=U(()=>{Cf();BH$();Gf();O5();YU();xY();mP1();WH1();NH$();xp();lp=new Z$;lp.post("/local-session",async($)=>{if(!pi())return $.json({success:!1,error:"Local mode is not active"},403);let u;try{u=Pk1($).remote.address}catch{}if(!(u==="127.0.0.1"||u==="::1"||u==="::ffff:127.0.0.1"))return $.json({success:!1,error:"Forbidden"},403);try{let{waitForSeed:X}=await Promise.resolve().then(() => (xp(),bx0));await X();let{auth:J}=await Promise.resolve().then(() => (YU(),oK$)),w=await Lk1();if(!w)return $.json({success:!1,error:"Local admin user not found"},500);let E=await Vx0();return await J.api.signInEmail({body:{email:w.email,password:E},asResponse:!0})}catch(X){return console.error("Failed to create local session:",X),$.json({success:!1,error:X instanceof Error?X.message:"Failed to create local session"},500)}});lp.get("/domain-lookup",async($)=>{let u=await Xf.api.getSession({headers:$.req.raw.headers});if(!u?.user)return $.json({success:!1,error:"Authentication required"},401);if(!u.user.emailVerified)return $.json({found:!1,organizations:[]});let f=u.user.email?.split("@")[1]?.toLowerCase();if(!f||QU.has(f))return $.json({found:!1,organizations:[]});try{let J=await new AK(l5().db).getAllByDomain(f);if(J.length===0)return $.json({found:!1,organizations:[]});let w=await l5().db.selectFrom("organization").select(["id","name","slug","logo"]).where("id","in",J.map((Y)=>Y.organizationId)).execute(),E=new Map(w.map((Y)=>[Y.id,Y])),Q=J.map((Y)=>{let Z=E.get(Y.organizationId);if(!Z)return null;return{id:Z.id,name:Z.name,slug:Z.slug,logo:Z.logo,autoJoinEnabled:Y.autoJoinEnabled}}).filter((Y)=>Y!==null);return $.json({found:Q.length>0,organizations:Q})}catch(X){return console.error("[Auth] Domain lookup failed:",X),$.json({success:!1,error:"Domain lookup failed"},500)}});lp.post("/domain-join",async($)=>{let u=await Xf.api.getSession({headers:$.req.raw.headers});if(!u?.user)return $.json({success:!1,error:"Authentication required"},401);if(!u.user.emailVerified)return $.json({success:!1,error:"Email must be verified to join"},403);let f=u.user.email?.split("@")[1]?.toLowerCase();if(!f||QU.has(f))return $.json({success:!1,error:"Generic email domains cannot auto-join"},403);let X=await $.req.json().catch(()=>({})),J=typeof X.organizationSlug==="string"&&X.organizationSlug.trim()?X.organizationSlug.trim():null;try{let w=l5().db,Y=(await new AK(w).getAllByDomain(f)).filter((W)=>W.autoJoinEnabled);if(Y.length===0)return $.json({success:!1,error:"Auto-join is not available for this domain"},403);let Z;if(J){let W=await w.selectFrom("organization").select(["id","slug"]).where("slug","=",J).executeTakeFirst();if(!W||!Y.some((G)=>G.organizationId===W.id))return $.json({success:!1,error:"This organization is not available for auto-join with your email domain."},403);Z=W}else if(Y.length===1){let W=await w.selectFrom("organization").select(["id","slug"]).where("id","=",Y[0].organizationId).executeTakeFirst();if(!W)return $.json({success:!1,error:"Organization not found"},404);Z=W}else return $.json({success:!1,error:"Multiple organizations match this domain. Please pick one.",requiresSelection:!0},409);try{await Xf.api.addMember({body:{userId:u.user.id,role:"user",organizationId:Z.id}})}catch(W){if(!(W instanceof Error?W.message.toLowerCase():"").includes("already a member"))return console.error("[Auth] Domain join addMember failed:",W),$.json({success:!1,error:"Failed to join organization"},500)}return P$.capture({distinctId:u.user.id,event:"organization_domain_joined",groups:{organization:Z.id},properties:{organization_id:Z.id,organization_slug:Z.slug,email_domain:f}}),$.json({success:!0,slug:Z.slug})}catch(w){return P$.captureException(w,u.user.id),console.error("[Auth] Domain join failed:",w),$.json({success:!1,error:"Failed to join organization"},500)}});lp.post("/domain-setup",async($)=>{let u=await Xf.api.getSession({headers:$.req.raw.headers});if(!u?.user)return $.json({success:!1,error:"Authentication required"},401);if(!u.user.emailVerified)return $.json({success:!1,error:"Email must be verified"},403);let f=u.user.email?.split("@")[1]?.toLowerCase();if(!f||QU.has(f))return $.json({success:!1,error:"Corporate email required"},403);let X=await $.req.json().catch(()=>({})),J=typeof X.name==="string"&&X.name.trim().length>0?X.name.trim():null,w=typeof X.logo==="string"&&X.logo.length>0?X.logo:null,E=X.claimDomain!==!1;try{let Q=l5().db,Y=new AK(Q),Z=await Y.getAllByDomain(f);if(Z.length>0){let P=await Q.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.slug"]).where("member.userId","=",u.user.id).where("member.organizationId","in",Z.map((A)=>A.organizationId)).executeTakeFirst();if(P)return $.json({success:!0,slug:P.slug,alreadyExists:!0})}let W=f.split(".")[0]??f,G=J??W.charAt(0).toUpperCase()+W.slice(1),F=(J??W).toLowerCase().trim().replace(/[^a-z0-9\s_-]+/g,"").replace(/[\s_-]+/g,"-").replace(/^-+|-+$/g,"")||W.toLowerCase().replace(/[^a-z0-9-]/g,""),v=null;for(let A=0;A<3;A++){let T=A===0?"":`-${Math.random().toString(36).slice(2,6)}`,I=A===0?G:`${G}${T}`,S=`${F}${T}`;try{v=await Xf.api.createOrganization({body:{name:I,slug:S,userId:u.user.id}});break}catch(q){if(!(q instanceof Error&&("body"in q)&&q.body?.code==="ORGANIZATION_ALREADY_EXISTS")||A===2)throw q}}if(!v?.id)throw Error("Failed to create organization");let B=v.id;if(E)await Y.setDomain(B,f,!0);let N=!1,O=null,K=null;try{let P=b4().firecrawlApiKey;if(P){let A=await oL0(f,P,G);if(A){let T=new h80(l5().db),I=await T.create(B,A);if(await T.setDefault(I.id,B),N=!0,A.name&&A.name!==G)O=A.name;K=A.favicon??A.logo??null}}}catch(P){console.error("[Auth] Brand extraction failed (non-fatal):",P)}let H={};if(!J&&O)H.name=O;if(w)H.logo=w;else if(K)H.logo=K;if(Object.keys(H).length>0)try{await Xf.api.updateOrganization({headers:$.req.raw.headers,body:{organizationId:B,data:H}})}catch(P){console.error("[Auth] Org update failed (non-fatal):",P)}return P$.identify({distinctId:u.user.id,properties:{email:u.user.email,$set:{email:u.user.email},$set_once:{first_organization_created_at:new Date().toISOString()}}}),P$.groupIdentify({groupType:"organization",groupKey:B,properties:{name:v.slug??F,slug:v.slug??F,email_domain:f,brand_extracted:N,created_at:new Date().toISOString()}}),P$.capture({distinctId:u.user.id,event:"organization_created",groups:{organization:B},properties:{organization_id:B,organization_slug:v.slug??F,email_domain:f,brand_extracted:N}}),$.json({success:!0,slug:v.slug??F,brandExtracted:N})}catch(Q){return P$.captureException(Q,u.user?.id),console.error("[Auth] Domain setup failed:",Q),$.json({success:!1,error:"Failed to set up organization"},500)}});lp.get("/org-access-status/:slug",async($)=>{let u=$.req.param("slug"),f=await Xf.api.getSession({headers:$.req.raw.headers});if(!f?.user)return $.json({success:!1,error:"Authentication required"},401);let X=l5().db,J=await X.selectFrom("organization").select(["id","name","slug","logo"]).where("slug","=",u).executeTakeFirst();if(!J)return $.json({status:"not-found"});let w={id:J.id,name:J.name,slug:J.slug,logo:J.logo};if(await X.selectFrom("member").select(["id"]).where("userId","=",f.user.id).where("organizationId","=",J.id).executeTakeFirst())return $.json({status:"member",organization:w});try{let Q=await Xf.api.listUserInvitations({headers:$.req.raw.headers}),Y=Date.now(),Z=Q.find((W)=>W.organizationId===J.id&&W.status==="pending"&&new Date(W.expiresAt).getTime()>Y);if(Z)return $.json({status:"pending-invite",invitation:{id:Z.id},organization:w})}catch(Q){console.error("[Auth] listUserInvitations failed:",Q)}if(f.user.emailVerified){let Q=f.user.email?.split("@")[1]?.toLowerCase();if(Q&&!QU.has(Q)){let Y=await new AK(X).getByOrganizationId(J.id);if(Y?.autoJoinEnabled&&Y.domain===Q)return $.json({status:"auto-domain-join",organization:{...w,domain:Q}})}}return $.json({status:"no-access",organization:w})});HH$=lp});function x13($){$.get("/status",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!await Ik1(f,f.auth.user.id,X))return u.json({error:"Not a member of this organization"},403);let w=await f.storage.orgSsoConfig.getByOrgId(X);if(!w||!w.enforced)return u.json({ssoRequired:!1});let E=await f.storage.orgSsoSessions.isValid(f.auth.user.id,X);return u.json({ssoRequired:!0,authenticated:E,issuer:w.issuer,domain:w.domain})}),$.get("/authorize",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!await Ik1(f,f.auth.user.id,X))return u.json({error:"Not a member of this organization"},403);let w=await f.storage.orgSsoConfig.getByOrgId(X);if(!w)return u.json({error:"SSO not configured for this organization"},404);let E=await Ak1(w.issuer,w.discoveryEndpoint),Q=l13(),Y=await c13(Q),Z=crypto.randomUUID(),W=JSON.stringify({state:Z,codeVerifier:Q,orgId:X,userId:f.auth.user.id});MU1(u,"org_sso_state",W,{httpOnly:!0,secure:!0,sameSite:"Lax",path:"/api/org-sso/callback",maxAge:600});let G=new URLSearchParams({response_type:"code",client_id:w.clientId,redirect_uri:`${f.baseUrl}/api/org-sso/callback`,scope:w.scopes.join(" "),state:Z,code_challenge:Y,code_challenge_method:"S256"}),F=`${E.authorization_endpoint}?${G.toString()}`;return u.redirect(F)}),$.get("/callback",async(u)=>{let f=u.get("meshContext"),X=u.req.query("code"),J=u.req.query("state"),w=u.req.query("error");if(w)return u.redirect(`/?sso_error=${encodeURIComponent(w)}`);if(!X||!J)return u.redirect("/?sso_error=missing_code_or_state");let E=xH0(u,"org_sso_state");if(!E)return u.redirect("/?sso_error=state_expired");MU1(u,"org_sso_state","",{httpOnly:!0,secure:!0,sameSite:"Lax",path:"/api/org-sso/callback",maxAge:0});let Q;try{Q=JSON.parse(E)}catch{return u.redirect("/?sso_error=invalid_state")}if(Q.state!==J)return u.redirect("/?sso_error=state_mismatch");if(!f.auth.user||f.auth.user.id!==Q.userId)return u.redirect("/?sso_error=session_expired");let Y=await f.storage.orgSsoConfig.getByOrgId(Q.orgId);if(!Y)return u.redirect("/?sso_error=sso_not_configured");let Z=await Ak1(Y.issuer,Y.discoveryEndpoint),W=await fetch(Z.token_endpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:X,redirect_uri:`${f.baseUrl}/api/org-sso/callback`,client_id:Y.clientId,client_secret:Y.clientSecret,code_verifier:Q.codeVerifier})});if(!W.ok)return console.error("[org-sso] Token exchange failed:",await W.text()),u.redirect("/?sso_error=token_exchange_failed");let G=await W.json();if(!G.id_token)return u.redirect("/?sso_error=no_id_token");try{let B=Dv(new URL(Z.jwks_uri)),{payload:N}=await f3(G.id_token,B,{issuer:Y.issuer,audience:Y.clientId}),O=N.email?.toLowerCase(),K=f.auth.user.email?.toLowerCase();if(!O||O!==K)return console.error(`[org-sso] Email mismatch: token=${O}, user=${K}`),u.redirect("/?sso_error=email_mismatch")}catch(B){return console.error("[org-sso] ID token verification failed:",B),u.redirect("/?sso_error=token_verification_failed")}await f.storage.orgSsoSessions.upsert(f.auth.user.id,Q.orgId);let F=await Ik1(f,f.auth.user.id,Q.orgId),v=F?.orgSlug?`/${F.orgSlug}`:"/";return u.redirect(v)}),$.get("/config",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!d13(f))return u.json({error:"Admin role required"},403);let J=await f.storage.orgSsoConfig.getByOrgId(X);if(!J)return u.json({configured:!1});return u.json({configured:!0,config:f.storage.orgSsoConfig.toPublic(J)})}),$.post("/config",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!Sk1(f))return u.json({error:"Owner role required"},403);let J=await u.req.json();if(!J.issuer||!J.clientId||!J.domain)return u.json({error:"issuer, clientId, and domain are required"},400);let w=await f.storage.orgSsoConfig.getByOrgId(X);if(!w&&!J.clientSecret)return u.json({error:"clientSecret is required for initial SSO setup"},400);let E=J.clientSecret||w?.clientSecret||"";try{await Ak1(J.issuer,J.discoveryEndpoint)}catch(Y){return u.json({error:"Failed to reach OIDC discovery endpoint",details:Y instanceof Error?Y.message:String(Y)},400)}let Q=await f.storage.orgSsoConfig.upsert(X,{issuer:J.issuer,clientId:J.clientId,clientSecret:E,discoveryEndpoint:J.discoveryEndpoint,scopes:J.scopes,domain:J.domain,enforced:J.enforced});return u.json({success:!0,config:f.storage.orgSsoConfig.toPublic(Q)})}),$.post("/config/enforce",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!Sk1(f))return u.json({error:"Owner role required"},403);let J=await u.req.json();if(!await f.storage.orgSsoConfig.getByOrgId(X))return u.json({error:"SSO must be configured before enforcing"},400);return await f.storage.orgSsoConfig.setEnforced(X,J.enforced),u.json({success:!0,enforced:J.enforced})}),$.delete("/config",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!Sk1(f))return u.json({error:"Owner role required"},403);return await f.storage.orgSsoConfig.delete(X),u.json({success:!0})})}function ix0($){let u;try{u=new URL($)}catch{throw Error(`Invalid URL: ${$}`)}let f=b4().localMode;if(u.protocol!=="https:"&&!(f&&u.protocol==="http:"))throw Error(`OIDC URL must use HTTPS: ${$}`);let X=u.hostname,J=[/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\./,/^\[::1\]$/,/^\[fd/,/^\[fe80:/,/^localhost$/i],w=/^127\.|^\[::1\]$|^localhost$/i.test(X);if(f&&w)return;for(let E of J)if(E.test(X))throw Error(`OIDC URL must not point to a private network address: ${X}`)}async function Ak1($,u){let f=u||$,X=_H$.get(f);if(X&&X.expiresAt>Date.now())return X.doc;let J=u||`${$.replace(/\/$/,"")}/.well-known/openid-configuration`;ix0(J);let w=await fetch(J);if(!w.ok)throw Error(`OIDC discovery failed: ${w.status} ${w.statusText}`);let E=await w.json();if(!E.authorization_endpoint||!E.token_endpoint||!E.jwks_uri)throw Error("OIDC discovery document missing required endpoints");return ix0(E.authorization_endpoint),ix0(E.token_endpoint),ix0(E.jwks_uri),_H$.set(f,{doc:E,expiresAt:Date.now()+3600000}),E}function l13(){let $=new Uint8Array(32);return crypto.getRandomValues($),btoa(String.fromCharCode(...$)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function c13($){let f=new TextEncoder().encode($),X=await crypto.subtle.digest("SHA-256",f);return btoa(String.fromCharCode(...new Uint8Array(X))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Ik1($,u,f){return await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.slug as orgSlug","member.role"]).where("member.userId","=",u).where("member.organizationId","=",f).executeTakeFirst()??null}function d13($){let u=$.auth.user?.role;if(!u)return!1;return Ta.includes(u)}function Sk1($){return $.auth.user?.role==="owner"}var xx0=()=>{let $=new Z$;return x13($),$},_H$;var kk1=U(()=>{Cf();yU1();p5();O5();i80();_H$=new Map});function t13($){if($==="claude-code")return m13;if($==="codex")return n13;return null}function jH$($,u){return t13($)?.[u]??null}var m13,n13;var PH$=U(()=>{m13={fast:{modelId:"claude-code:haiku",label:"Haiku"},smart:{modelId:"claude-code:sonnet",label:"Sonnet"},thinking:{modelId:"claude-code:opus",label:"Opus"}},n13={fast:{modelId:"codex:gpt-5.4-mini",label:"GPT-5.4 Mini"},smart:{modelId:"codex:gpt-5.3-codex",label:"GPT-5.3 Codex"},thinking:{modelId:"codex:gpt-5.5",label:"GPT-5.5"}}});function LH$($){return $.type==="tool-call"&&$.toolName==="todo_write"&&typeof $.toolCallId==="string"}function r13($){return $.type==="tool-result"&&$.toolName==="todo_write"&&typeof $.toolCallId==="string"}function TH$($){let u=null;for(let X=$.length-1;X>=0&&u===null;X--){let w=$[X].content;if(!Array.isArray(w))continue;for(let E=w.length-1;E>=0;E--){let Q=w[E];if(LH$(Q)){u=Q.toolCallId;break}}}if(u===null)return $;let f=u;return $.map((X)=>{let J=X.content;if(!Array.isArray(J))return X;let w=J.filter((E)=>{if(LH$(E))return E.toolCallId===f;if(r13(E))return E.toolCallId===f;return!0});if(w.length===J.length)return X;return{...X,content:w}})}function AH$($){let u=$.filter((X)=>X.role==="system"),f=$.find((X)=>X.role!=="system");return{systemMessages:u,requestMessage:f}}function a13($){let u=!1,f=$.map((X)=>{if(X.role!=="assistant")return X;if(!X.parts.some((w)=>("state"in w)&&w.state==="approval-requested"))return X;return u=!0,{...X,parts:X.parts.map((w)=>{if(!("state"in w)||w.state!=="approval-requested"||!("approval"in w)||!w.approval)return w;return{...w,state:"output-denied",approval:{...w.approval,approved:!1,reason:"User sent a new message without approving this tool call."}}})}});return u?f:$}function p13($){let[u,f]=$.reduce((X,J)=>{if(J.role==="system")X[0].push(J);else X[1].push(J);return X},[[],[]]);return{systemMessages:u,messages:f}}async function o13($,u){return await $.loadHistory(u)}function s13($,u){let f=$.filter((w)=>w.parts&&w.parts.length>0);if(!u)return f;let X=f.findIndex((w)=>w.id===u.id);return X>=0?[...f.slice(0,X),u]:[...f,u]}async function IH$($,u,f,X){let J=await o13($,X),w=s13(J,u);return[...f,...w]}async function SH$($,u){let f=$.filter((G)=>G.role!=="assistant"||G.parts&&G.parts.length>0),X=await hX0({messages:f}),J=a13(X),w=await OA(J,{tools:u.tools,ignoreIncompleteToolCalls:!0}),{systemMessages:E,messages:Q}=p13(w),Y=TH$(Q),W=CA1({messages:Y,reasoning:"all",emptyMessages:"remove",toolCalls:"none"}).map((G)=>{if(G.role!=="assistant")return G;let F=Array.isArray(G.content)?G.content.filter((v)=>v.type!=="reasoning"&&v.type!=="thinking"&&v.type!=="redacted-reasoning").map((v)=>{let B=v;if("providerOptions"in B||"providerMetadata"in B){let{providerOptions:N,providerMetadata:O,...K}=B;if(B.type==="tool-call"){let H=O?.google,P=N?.google;return{...K,...H?{providerMetadata:{google:H}}:{},...P?{providerOptions:{google:P}}:{}}}return K}return v}):G.content;return{...G,content:Array.isArray(F)&&F.length===0?[{type:"text",text:""}]:F,providerOptions:void 0,providerMetadata:void 0}});return{systemMessages:E,messages:W,originalMessages:X}}var lx0=U(()=>{q5()});function rE($){return`mesh-storage://${$}`}function oi($){if(!$.startsWith("mesh-storage://"))return null;return $.slice(15)}function Rk1(){return/mesh-storage:\/\/([^\s"'<>[\]]+)/g}function e13($,u,f){return`${$}/api/${u}/files/${f}`}function u43($){return $.type==="file"&&"mediaType"in $&&typeof $.mediaType==="string"&&$43.has($.mediaType)}function kH$($){let u=$.match(/^data:([^;]+);base64,(.+)$/s);if(!u)return null;let[,f,X]=u;try{let J=atob(X),w=new Uint8Array(J.length);for(let E=0;E<J.length;E++)w[E]=J.charCodeAt(E);return{mimeType:f,bytes:w}}catch{return null}}function RH$($){return{"image/png":"png","image/jpeg":"jpg","image/gif":"gif","image/webp":"webp","image/svg+xml":"svg","application/pdf":"pdf","text/plain":"txt","text/html":"html","application/json":"json"}[$]??"bin"}async function qH$($,u,f,X){if(!X.objectStorage)return null;try{return await X.objectStorage.put(u,$,{contentType:f}),u}catch(J){return console.error("[file-materializer] Failed to upload file:",J),null}}async function si($,u){if(!u.objectStorage)return null;try{return await u.objectStorage.presignedGetUrl($,f43)}catch(f){return console.error("[file-materializer] Failed to generate presigned URL:",f),null}}async function CH$($,u){if(!u.organization)return $;let f=u.organization.slug;if(!f)return $;let X=$.findLastIndex((B)=>B.role==="user");if(X===-1)return $;let J=$[X],w=J.parts.filter((B)=>B.type==="file"&&("url"in B)&&typeof B.url==="string"&&B.url.startsWith("data:"));if(w.length===0)return $;let Q=(await Promise.all(w.map(async(B)=>{if(B.type!=="file"||!("url"in B)||typeof B.url!=="string")return null;let N=kH$(B.url);if(!N)return null;let O=RH$(N.mimeType),K=`chat-uploads/${crypto.randomUUID()}.${O}`,H=await qH$(N.bytes,K,N.mimeType,u);if(!H)return null;let P="filename"in B&&typeof B.filename==="string"?B.filename:K;return{dataUrl:B.url,meshStorageUrl:rE(H),redirectUrl:e13(u.baseUrl,f,H),filename:P}}))).filter((B)=>B!==null);if(Q.length===0)return $;let Z=`[Uploaded files \u2014 use these URLs when calling tools]
+      `.execute(Z),await J0`DELETE FROM "member" WHERE "userId" = ${u.id}`.execute(Z),await J0`DELETE FROM "user" WHERE "id" = ${u.id}`.execute(Z)})}catch(Z){console.error("[SSO] Failed to merge duplicate user:",Z)}}var B13=($)=>{return{trustEmailVerified:!0,provisionUser:N13,defaultSSO:[{domain:$.domain,providerId:$.providerId,oidcConfig:{issuer:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/v2.0`,pkce:!0,clientId:$.MS_CLIENT_ID,clientSecret:$.MS_CLIENT_SECRET,discoveryEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/v2.0/.well-known/openid-configuration`,authorizationEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/oauth2/v2.0/authorize`,tokenEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/oauth2/v2.0/token`,jwksEndpoint:`https://login.microsoftonline.com/${$.MS_TENANT_ID}/discovery/v2.0/keys`,userInfoEndpoint:"https://graph.microsoft.com/oidc/userinfo",tokenEndpointAuthentication:"client_secret_post",scopes:$.scopes,mapping:{id:"sub",email:"email",emailVerified:"email_verified",name:"name",image:"picture",extraFields:{emailVerified:"email_verified",oid:"oid"}}}}]}},U13=($)=>{return{trustEmailVerified:!0,defaultSSO:[{domain:$.domain,providerId:$.providerId,oidcConfig:{issuer:"https://accounts.google.com",pkce:!0,clientId:$.GOOGLE_CLIENT_ID,clientSecret:$.GOOGLE_CLIENT_SECRET,discoveryEndpoint:"https://accounts.google.com/.well-known/openid-configuration",authorizationEndpoint:"https://accounts.google.com/o/oauth2/v2/auth",tokenEndpoint:"https://oauth2.googleapis.com/token",jwksEndpoint:"https://www.googleapis.com/oauth2/v3/certs",userInfoEndpoint:"https://openidconnect.googleapis.com/v1/userinfo",tokenEndpointAuthentication:"client_secret_post",scopes:$.scopes,mapping:{id:"sub",email:"email",emailVerified:"email_verified",name:"name",image:"picture",extraFields:{emailVerified:"email_verified",hd:"hd"}}}}]}},dK$=($)=>{if($.providerId==="microsoft")return B13($);if($.providerId==="google")return U13($);throw Error(`Unsupported provider: ${$.providerId}`)};var mK$=U(()=>{p5();P4();xY()});var oK$={};Y1(oK$,{resetPasswordEnabled:()=>gx0,authConfig:()=>ou,auth:()=>Xf,GENERIC_EMAIL_DOMAINS:()=>QU});function O13($){return $.toLowerCase().trim().replace(/[^a-z0-9\s_-]+/g,"").replace(/[\s_-]+/g,"-").replace(/^-+|-+$/g,"")}function z13(){let $=Math.floor(Math.random()*tK$.length),u=Math.floor(Math.random()*nK$.length),f=tK$[$]??"deco",X=nK$[u]??"studio";return`${f}-${X}`}function I13(){let $=[L90];try{let u=new URL(L90);if(u.hostname==="localhost")$.push(L90.replace("localhost","127.0.0.1"));else if(u.hostname==="127.0.0.1")$.push(L90.replace("127.0.0.1","localhost"))}catch{}return $}var nK$,tK$,K13,H13,yx0,_13,j13,P13,rK$,ou,pK$=void 0,Nk1=void 0,gx0=!1,L13,QU,T13,A13,L90,aK$,Xf;var YU=U(()=>{O5();bU1();A41();O$1();T41();RG0();YG0();aW0();ot4();lU1();Gf();yB();Zp4();xY();Fp4();Y_0();Bp4();lK$();cK$();i80();mK$();nK$=["labs","agent","studio","workspace","systems","core","cloud","works"],tK$=["capybara","guarana","deco","samba","feijoada","capoeira","carnival"];K13=Object.values(N50()).map(($)=>$.map((u)=>u.name)).flat(),H13={...Kd,self:["*",...K13]},yx0=hW(H13),_13=yx0.newRole({self:["*"],...Hd.statements}),j13=yx0.newRole({self:["*"],...Hd.statements}),P13=yx0.newRole({self:["*"],...Hd.statements}),rK$=Object.values(N50()).map(($)=>$.map((u)=>`self:${u.name}`)).flat(),ou=iL().auth;if(ou.inviteEmailProviderId&&ou.emailProviders&&ou.emailProviders.length>0){let $=nL(ou.emailProviders,ou.inviteEmailProviderId);if($){let u=mL($);pK$=async(f)=>{let X=f.inviter.user?.name||f.inviter.user?.email,J=`${_E()}/auth/accept-invitation?invitationId=${f.invitation.id}&redirectTo=/${f.organization.slug}`;await u({to:f.email,subject:`You've been invited to join ${f.organization.name}`,html:tL({preheader:`${X} has invited you to join ${f.organization.name} on deco Studio.`,heading:"You've been invited",subheading:`<strong>${X}</strong> has invited you to join <strong>${f.organization.name}</strong> on deco Studio.`,body:I50("Accept invitation",J),footnote:"If you weren\u2019t expecting an invitation, you can safely ignore this email."})})}}}if(ou.resetPasswordEmailProviderId&&ou.emailProviders&&ou.emailProviders.length>0){let $=nL(ou.emailProviders,ou.resetPasswordEmailProviderId);if($){let u=mL($);gx0=!0,Nk1=async({user:f,url:X})=>{await u({to:f.email,subject:"Reset your password",html:tL({preheader:"We received a request to reset the password on your deco Studio account.",heading:"Reset your password",subheading:"We received a password reset request for your account. Click the button below to choose a new password.",body:I50("Reset password",X)+D_0("This link expires in 24\xA0hours. If you didn\u2019t request a password reset, no action is needed.",!0),footnote:"If you didn\u2019t request a password reset, you can safely ignore this email."})})}}}L13=[t10({organizationCreation:{afterCreate:async($)=>{await xK$($.organization.id,$.member.userId)}},ac:yx0,creatorRole:"owner",allowUserToCreateOrganization:!0,dynamicAccessControl:{enabled:!0,maximumRolesPerOrganization:500,enableCustomResources:!0,allowedRolesToCreateResources:Ta,resourceNameValidation:($)=>{return{valid:/^[a-zA-Z0-9-_]+$/.test($)}}},roles:{user:_13,admin:j13,owner:P13},sendInvitationEmail:pK$}),W40({loginPage:"/login",oidcConfig:{scopes:rK$,metadata:{scopes_supported:rK$},loginPage:"/login"}}),s10({enableMetadata:!0,maximumNameLength:64,keyExpiration:{minExpiresIn:0.003472222222222222},enableSessionForAPIKeys:!0,customAPIKeyGetter:($)=>{if($.headers?.get("X-MCP-Session-Auth")==="true")return null;let f=$.headers?.get("Authorization");if(f?.startsWith("Bearer "))return f.replace("Bearer ","").trim();return null},permissions:{defaultPermissions:{self:["ORGANIZATION_LIST","ORGANIZATION_GET","ORGANIZATION_MEMBER_LIST","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","API_KEY_CREATE","API_KEY_LIST"]}},rateLimit:{enabled:!1}}),Pd({defaultRole:"user",adminRoles:["admin","owner"],roles:{...gj,owner:tW0}}),F40(),Q40({jwt:{expirationTime:"5m"}}),GW0(ou.ssoConfig?dK$(ou.ssoConfig):void 0),...ou.magicLinkConfig?.enabled&&ou.emailProviders&&ou.emailProviders.length>0?[Y40(vp4(ou.magicLinkConfig,ou.emailProviders))]:[],...ou.emailOtpConfig?.enabled&&ou.emailProviders&&ou.emailProviders.length>0?[X40(Gp4(ou.emailOtpConfig,ou.emailProviders))]:[]],QU=new Set(["gmail.com","googlemail.com","outlook.com","hotmail.com","live.com","yahoo.com","yahoo.co.uk","icloud.com","me.com","mac.com","aol.com","protonmail.com","proton.me","zoho.com","yandex.com","mail.com","gmx.com","gmx.net","tutanota.com","fastmail.com"]),T13=kO(),A13=R$0(T13),L90=_E();aK$=b4(),Xf=L41({secret:aK$.betterAuthSecret||"deco-default-secret-k7x9m2p4q8w3n5v6",baseURL:L90,trustedOrigins:I13(),database:A13,socialProviders:ou.socialProviders,...ou.ssoConfig&&{account:{accountLinking:{trustedProviders:[ou.ssoConfig.providerId]}}},emailAndPassword:{enabled:ou.emailAndPassword.enabled,...Nk1&&{sendResetPassword:Nk1}},rateLimit:{enabled:!aK$.disableRateLimit,window:60,max:1e4},plugins:L13,databaseHooks:{user:{create:{after:async($)=>{if(Uk1({id:$.id,email:$.email,name:$.name??null,emailVerified:!!$.emailVerified}),P$.capture({distinctId:$.id,event:"user_signed_up",properties:{email:$.email,email_domain:$.email?.split("@")[1]?.toLowerCase()??null,email_verified:!!$.emailVerified,has_name:!!$.name}}),$.emailVerified){let X=$.email?.split("@")[1]?.toLowerCase();if(X&&!QU.has(X))return}if(iL().autoCreateOrganizationOnSignup===!1)return;let u=$.name?$.name.split(" ")[0]:$.email.split("@")[0],f=3;for(let X=0;X<f;X++){let J=`${u} ${z13()}`,w=O13(J);try{let Q=(await Xf.api.createOrganization({body:{name:J,slug:w,userId:$.id}}))?.id??void 0;if(Q)P$.groupIdentify({groupType:"organization",groupKey:Q,properties:{name:J,slug:w,created_at:new Date().toISOString(),created_via:"signup_default"}}),P$.capture({distinctId:$.id,event:"organization_created",groups:{organization:Q},properties:{organization_id:Q,organization_slug:w,created_via:"signup_default"}});return}catch(E){if(!(E instanceof Error&&("body"in E)&&E.body?.code==="ORGANIZATION_ALREADY_EXISTS")||X===f-1){console.error("Failed to create default organization:",E);return}}}}}},session:{create:{after:async($)=>{let u=await l5().db.selectFrom("user").select(["id","email","name","emailVerified"]).where("id","=",$.userId).executeTakeFirst();if(!u)return;Uk1({id:u.id,email:u.email,name:u.name??null,emailVerified:!!u.emailVerified})}}}}})});function Ok1($,u){return`${$}:${u}`}function sK$($){let u=$?.ttlMs??120000,f=$?.maxSize??1e4,X=new Map;function J(){if(X.size<=f)return;let w=Date.now();for(let[E,Q]of X)if(Q.expiresAt<=w)X.delete(E);if(X.size>f){let E=X.size-f,Q=0;for(let Y of X.keys()){if(Q>=E)break;X.delete(Y),Q++}}}return{get(w,E){let Q=Ok1(w,E),Y=X.get(Q);if(!Y)return;if(Y.expiresAt<=Date.now()){X.delete(Q);return}return Y.role},set(w,E,Q){let Y=Ok1(w,E);X.set(Y,{role:Q,expiresAt:Date.now()+u,organizationId:E}),J()},invalidate(w,E){X.delete(Ok1(w,E))},invalidateOrg(w){for(let[E,Q]of X)if(Q.organizationId===w)X.delete(E)}}}var eK$=()=>{};var zk1=()=>{};var $H$=()=>{};var S13,su7;var uH$=U(()=>{eK$();zk1();Vz();$H$();S13={br:".br",zstd:".zst",gzip:".gz"},su7=Object.keys(S13)});var fH$=U(()=>{uH$()});var XH$=()=>{};var JH$=U(()=>{XH$()});var wH$=()=>{};var EH$=U(()=>{TU1()});var Kk1=U(()=>{bz();EH$()});var Hk1="x-hono-disable-ssg",N37;var _k1=U(()=>{Kk1();N37=(()=>{try{return new Response("SSG is disabled",{status:404,headers:{[Hk1]:"true"}})}catch{return null}})()});var QH$=U(()=>{CH0()});var jk1=U(()=>{QH$()});var YH$=U(()=>{JH$();wH$();zk1();_k1();jk1();Kk1()});var DH$=U(()=>{_k1();jk1();YH$()});var e37;var ZH$=U(()=>{DH$();({write:e37}=Bun)});var q13=class{#$;constructor($){this.#$=$,this.raw=$.raw,this.url=$.url?new URL($.url):null,this.protocol=$.protocol??null}send($,u){this.#$.send($,u??{})}raw;binaryType="arraybuffer";get readyState(){return this.#$.readyState}url;protocol;close($,u){this.#$.close($,u)}},WH$=($)=>{return(...u)=>{if(typeof u[0]==="function"){let[f,X]=u;return async function(w,E){let Q=await f(w),Y=await $(w,Q,X);if(Y)return Y;await E()}}else{let[f,X,J]=u;return(async()=>{let w=await $(f,X,J);if(!w)throw Error("Failed to upgrade WebSocket");return w})()}}};var GH$=()=>{};var T90=($)=>("server"in $.env)?$.env.server:$.env;var hx0=()=>{};var C13;var FH$=U(()=>{GH$();hx0();C13=WH$(($,u)=>{let f=T90($);if(!f)throw TypeError("env has to include the 2nd argument of fetch.");if(f.upgrade($.req.raw,{data:{events:u,url:new URL($.req.url),protocol:$.req.url}}))return new Response(null);return})});var Pk1=($)=>{let u=T90($);if(!u)throw TypeError("env has to include the 2nd argument of fetch.");if(typeof u.requestIP!=="function")throw TypeError("server.requestIP is not a function.");let f=u.requestIP($.req.raw);if(!f)return{remote:{}};return{remote:{address:f.address,addressType:f.family==="IPv6"||f.family==="IPv4"?f.family:void 0,port:f.port}}};var vH$=U(()=>{hx0()});var BH$=U(()=>{fH$();ZH$();FH$();vH$();hx0()});var UH$;var NH$=U(()=>{UH$={google:{name:"Google",icon:"https://assets.decocache.com/webdraw/eb7480aa-a68b-4ce4-98ff-36aa121762a7/google.svg"},github:{name:"GitHub",icon:"https://assets.decocache.com/decocms/e02ce92e-6684-41a6-acfc-432977eb4878/github.png"},microsoft:{name:"Microsoft",icon:"https://assets.decocache.com/mcp/aa6f6e1a-6526-4bca-99cc-82e2ec38b0e4/microsoft.png"}}});var bx0={};Y1(bx0,{waitForSeed:()=>i13,seedLocalMode:()=>h13,markSeedComplete:()=>b13,isLocalMode:()=>pi,getLocalAdminUser:()=>Lk1,getLocalAdminPassword:()=>Vx0});import{userInfo as M13}from"os";async function Vx0(){return b4().betterAuthSecret||"local-mode-default"}function OH$(){try{return M13().username||"local"}catch{return"local"}}function y13($){return $.charAt(0).toUpperCase()+$.slice(1)}async function g13(){let $=l5(),u=await $.db.selectFrom("user").select($.db.fn.countAll().as("count")).executeTakeFirst();return Number(u?.count??0)===0}async function h13(){if(!await g13())return!1;let u=OH$(),f=`${u}@localhost.mesh`,X=y13(u),J=await Vx0(),w=await Xf.api.signUpEmail({body:{email:f,password:J,name:X}});if(!w?.user?.id)throw Error("Failed to create local admin user");let E=w.user.id,Q=l5();await Q.db.updateTable("user").set({role:"admin"}).where("id","=",E).execute();let Y=`${u}-local`.toLowerCase().replace(/[^a-z0-9-]/g,"-").replace(/-+/g,"-").replace(/^-|-$/g,""),Z=`${X} Local`;return await Q.db.updateTable("organization").set({name:Z,slug:Y}).where("id","in",(W)=>W.selectFrom("member").select("organizationId").where("userId","=",E)).execute(),!0}async function Lk1(){let $=l5(),u=`${OH$()}@localhost.mesh`;return $.db.selectFrom("user").where("email","=",u).selectAll().executeTakeFirst()}function pi(){return b4().localMode}function b13(){zH$()}function i13(){return V13}var zH$,V13;var xp=U(()=>{xY();O5();YU();V13=new Promise(($)=>{if(zH$=$,!pi())$()})});function KH$(){let $=Object.keys(ou.socialProviders??{}),u=$.length>0,f=$.map((J)=>({name:J,icon:UH$[J].icon})),X=b4().localMode;return{emailAndPassword:{enabled:ou.emailAndPassword?.enabled??!1},magicLink:{enabled:ou.magicLinkConfig?.enabled??!1},emailOtp:{enabled:ou.emailOtpConfig?.enabled??!1},resetPassword:{enabled:gx0},socialProviders:{enabled:u,providers:f},sso:ou.ssoConfig?{enabled:!0,providerId:ou.ssoConfig.providerId}:{enabled:!1},stdioEnabled:X,localMode:pi()}}var lp,HH$;var Tk1=U(()=>{Cf();BH$();Gf();O5();YU();xY();mP1();WH1();NH$();xp();lp=new Z$;lp.post("/local-session",async($)=>{if(!pi())return $.json({success:!1,error:"Local mode is not active"},403);let u;try{u=Pk1($).remote.address}catch{}if(!(u==="127.0.0.1"||u==="::1"||u==="::ffff:127.0.0.1"))return $.json({success:!1,error:"Forbidden"},403);try{let{waitForSeed:X}=await Promise.resolve().then(() => (xp(),bx0));await X();let{auth:J}=await Promise.resolve().then(() => (YU(),oK$)),w=await Lk1();if(!w)return $.json({success:!1,error:"Local admin user not found"},500);let E=await Vx0();return await J.api.signInEmail({body:{email:w.email,password:E},asResponse:!0})}catch(X){return console.error("Failed to create local session:",X),$.json({success:!1,error:X instanceof Error?X.message:"Failed to create local session"},500)}});lp.get("/domain-lookup",async($)=>{let u=await Xf.api.getSession({headers:$.req.raw.headers});if(!u?.user)return $.json({success:!1,error:"Authentication required"},401);if(!u.user.emailVerified)return $.json({found:!1,organizations:[]});let f=u.user.email?.split("@")[1]?.toLowerCase();if(!f||QU.has(f))return $.json({found:!1,organizations:[]});try{let J=await new AK(l5().db).getAllByDomain(f);if(J.length===0)return $.json({found:!1,organizations:[]});let w=await l5().db.selectFrom("organization").select(["id","name","slug","logo"]).where("id","in",J.map((Y)=>Y.organizationId)).execute(),E=new Map(w.map((Y)=>[Y.id,Y])),Q=J.map((Y)=>{let Z=E.get(Y.organizationId);if(!Z)return null;return{id:Z.id,name:Z.name,slug:Z.slug,logo:Z.logo,autoJoinEnabled:Y.autoJoinEnabled}}).filter((Y)=>Y!==null);return $.json({found:Q.length>0,organizations:Q})}catch(X){return console.error("[Auth] Domain lookup failed:",X),$.json({success:!1,error:"Domain lookup failed"},500)}});lp.post("/domain-join",async($)=>{let u=await Xf.api.getSession({headers:$.req.raw.headers});if(!u?.user)return $.json({success:!1,error:"Authentication required"},401);if(!u.user.emailVerified)return $.json({success:!1,error:"Email must be verified to join"},403);let f=u.user.email?.split("@")[1]?.toLowerCase();if(!f||QU.has(f))return $.json({success:!1,error:"Generic email domains cannot auto-join"},403);let X=await $.req.json().catch(()=>({})),J=typeof X.organizationSlug==="string"&&X.organizationSlug.trim()?X.organizationSlug.trim():null;try{let w=l5().db,Y=(await new AK(w).getAllByDomain(f)).filter((W)=>W.autoJoinEnabled);if(Y.length===0)return $.json({success:!1,error:"Auto-join is not available for this domain"},403);let Z;if(J){let W=await w.selectFrom("organization").select(["id","slug"]).where("slug","=",J).executeTakeFirst();if(!W||!Y.some((G)=>G.organizationId===W.id))return $.json({success:!1,error:"This organization is not available for auto-join with your email domain."},403);Z=W}else if(Y.length===1){let W=await w.selectFrom("organization").select(["id","slug"]).where("id","=",Y[0].organizationId).executeTakeFirst();if(!W)return $.json({success:!1,error:"Organization not found"},404);Z=W}else return $.json({success:!1,error:"Multiple organizations match this domain. Please pick one.",requiresSelection:!0},409);try{await Xf.api.addMember({body:{userId:u.user.id,role:"user",organizationId:Z.id}})}catch(W){if(!(W instanceof Error?W.message.toLowerCase():"").includes("already a member"))return console.error("[Auth] Domain join addMember failed:",W),$.json({success:!1,error:"Failed to join organization"},500)}return P$.capture({distinctId:u.user.id,event:"organization_domain_joined",groups:{organization:Z.id},properties:{organization_id:Z.id,organization_slug:Z.slug,email_domain:f}}),$.json({success:!0,slug:Z.slug})}catch(w){return P$.captureException(w,u.user.id),console.error("[Auth] Domain join failed:",w),$.json({success:!1,error:"Failed to join organization"},500)}});lp.post("/domain-setup",async($)=>{let u=await Xf.api.getSession({headers:$.req.raw.headers});if(!u?.user)return $.json({success:!1,error:"Authentication required"},401);if(!u.user.emailVerified)return $.json({success:!1,error:"Email must be verified"},403);let f=u.user.email?.split("@")[1]?.toLowerCase();if(!f||QU.has(f))return $.json({success:!1,error:"Corporate email required"},403);let X=await $.req.json().catch(()=>({})),J=typeof X.name==="string"&&X.name.trim().length>0?X.name.trim():null,w=typeof X.logo==="string"&&X.logo.length>0?X.logo:null,E=X.claimDomain!==!1;try{let Q=l5().db,Y=new AK(Q),Z=await Y.getAllByDomain(f);if(Z.length>0){let P=await Q.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.slug"]).where("member.userId","=",u.user.id).where("member.organizationId","in",Z.map((A)=>A.organizationId)).executeTakeFirst();if(P)return $.json({success:!0,slug:P.slug,alreadyExists:!0})}let W=f.split(".")[0]??f,G=J??W.charAt(0).toUpperCase()+W.slice(1),F=(J??W).toLowerCase().trim().replace(/[^a-z0-9\s_-]+/g,"").replace(/[\s_-]+/g,"-").replace(/^-+|-+$/g,"")||W.toLowerCase().replace(/[^a-z0-9-]/g,""),v=null;for(let A=0;A<3;A++){let T=A===0?"":`-${Math.random().toString(36).slice(2,6)}`,I=A===0?G:`${G}${T}`,S=`${F}${T}`;try{v=await Xf.api.createOrganization({body:{name:I,slug:S,userId:u.user.id}});break}catch(q){if(!(q instanceof Error&&("body"in q)&&q.body?.code==="ORGANIZATION_ALREADY_EXISTS")||A===2)throw q}}if(!v?.id)throw Error("Failed to create organization");let B=v.id;if(E)await Y.setDomain(B,f,!0);let N=!1,O=null,K=null;try{let P=b4().firecrawlApiKey;if(P){let A=await oL0(f,P,G);if(A){let T=new h80(l5().db),I=await T.create(B,A);if(await T.setDefault(I.id,B),N=!0,A.name&&A.name!==G)O=A.name;K=A.favicon??A.logo??null}}}catch(P){console.error("[Auth] Brand extraction failed (non-fatal):",P)}let H={};if(!J&&O)H.name=O;if(w)H.logo=w;else if(K)H.logo=K;if(Object.keys(H).length>0)try{await Xf.api.updateOrganization({headers:$.req.raw.headers,body:{organizationId:B,data:H}})}catch(P){console.error("[Auth] Org update failed (non-fatal):",P)}return P$.identify({distinctId:u.user.id,properties:{email:u.user.email,$set:{email:u.user.email},$set_once:{first_organization_created_at:new Date().toISOString()}}}),P$.groupIdentify({groupType:"organization",groupKey:B,properties:{name:v.slug??F,slug:v.slug??F,email_domain:f,brand_extracted:N,created_at:new Date().toISOString()}}),P$.capture({distinctId:u.user.id,event:"organization_created",groups:{organization:B},properties:{organization_id:B,organization_slug:v.slug??F,email_domain:f,brand_extracted:N}}),$.json({success:!0,slug:v.slug??F,brandExtracted:N})}catch(Q){return P$.captureException(Q,u.user?.id),console.error("[Auth] Domain setup failed:",Q),$.json({success:!1,error:"Failed to set up organization"},500)}});lp.get("/org-access-status/:slug",async($)=>{let u=$.req.param("slug"),f=await Xf.api.getSession({headers:$.req.raw.headers});if(!f?.user)return $.json({success:!1,error:"Authentication required"},401);let X=l5().db,J=await X.selectFrom("organization").select(["id","name","slug","logo"]).where("slug","=",u).executeTakeFirst();if(!J)return $.json({status:"not-found"});let w={id:J.id,name:J.name,slug:J.slug,logo:J.logo};if(await X.selectFrom("member").select(["id"]).where("userId","=",f.user.id).where("organizationId","=",J.id).executeTakeFirst())return $.json({status:"member",organization:w});try{let Q=await Xf.api.listUserInvitations({headers:$.req.raw.headers}),Y=Date.now(),Z=Q.find((W)=>W.organizationId===J.id&&W.status==="pending"&&new Date(W.expiresAt).getTime()>Y);if(Z)return $.json({status:"pending-invite",invitation:{id:Z.id},organization:w})}catch(Q){console.error("[Auth] listUserInvitations failed:",Q)}if(f.user.emailVerified){let Q=f.user.email?.split("@")[1]?.toLowerCase();if(Q&&!QU.has(Q)){let Y=await new AK(X).getByOrganizationId(J.id);if(Y?.autoJoinEnabled&&Y.domain===Q)return $.json({status:"auto-domain-join",organization:{...w,domain:Q}})}}return $.json({status:"no-access",organization:w})});HH$=lp});function x13($){$.get("/status",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!await Ik1(f,f.auth.user.id,X))return u.json({error:"Not a member of this organization"},403);let w=await f.storage.orgSsoConfig.getByOrgId(X);if(!w||!w.enforced)return u.json({ssoRequired:!1});let E=await f.storage.orgSsoSessions.isValid(f.auth.user.id,X);return u.json({ssoRequired:!0,authenticated:E,issuer:w.issuer,domain:w.domain})}),$.get("/authorize",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!await Ik1(f,f.auth.user.id,X))return u.json({error:"Not a member of this organization"},403);let w=await f.storage.orgSsoConfig.getByOrgId(X);if(!w)return u.json({error:"SSO not configured for this organization"},404);let E=await Ak1(w.issuer,w.discoveryEndpoint),Q=l13(),Y=await c13(Q),Z=crypto.randomUUID(),W=JSON.stringify({state:Z,codeVerifier:Q,orgId:X,userId:f.auth.user.id});MU1(u,"org_sso_state",W,{httpOnly:!0,secure:!0,sameSite:"Lax",path:"/api/org-sso/callback",maxAge:600});let G=new URLSearchParams({response_type:"code",client_id:w.clientId,redirect_uri:`${f.baseUrl}/api/org-sso/callback`,scope:w.scopes.join(" "),state:Z,code_challenge:Y,code_challenge_method:"S256"}),F=`${E.authorization_endpoint}?${G.toString()}`;return u.redirect(F)}),$.get("/callback",async(u)=>{let f=u.get("meshContext"),X=u.req.query("code"),J=u.req.query("state"),w=u.req.query("error");if(w)return u.redirect(`/?sso_error=${encodeURIComponent(w)}`);if(!X||!J)return u.redirect("/?sso_error=missing_code_or_state");let E=xH0(u,"org_sso_state");if(!E)return u.redirect("/?sso_error=state_expired");MU1(u,"org_sso_state","",{httpOnly:!0,secure:!0,sameSite:"Lax",path:"/api/org-sso/callback",maxAge:0});let Q;try{Q=JSON.parse(E)}catch{return u.redirect("/?sso_error=invalid_state")}if(Q.state!==J)return u.redirect("/?sso_error=state_mismatch");if(!f.auth.user||f.auth.user.id!==Q.userId)return u.redirect("/?sso_error=session_expired");let Y=await f.storage.orgSsoConfig.getByOrgId(Q.orgId);if(!Y)return u.redirect("/?sso_error=sso_not_configured");let Z=await Ak1(Y.issuer,Y.discoveryEndpoint),W=await fetch(Z.token_endpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:X,redirect_uri:`${f.baseUrl}/api/org-sso/callback`,client_id:Y.clientId,client_secret:Y.clientSecret,code_verifier:Q.codeVerifier})});if(!W.ok)return console.error("[org-sso] Token exchange failed:",await W.text()),u.redirect("/?sso_error=token_exchange_failed");let G=await W.json();if(!G.id_token)return u.redirect("/?sso_error=no_id_token");try{let B=Dv(new URL(Z.jwks_uri)),{payload:N}=await f3(G.id_token,B,{issuer:Y.issuer,audience:Y.clientId}),O=N.email?.toLowerCase(),K=f.auth.user.email?.toLowerCase();if(!O||O!==K)return console.error(`[org-sso] Email mismatch: token=${O}, user=${K}`),u.redirect("/?sso_error=email_mismatch")}catch(B){return console.error("[org-sso] ID token verification failed:",B),u.redirect("/?sso_error=token_verification_failed")}await f.storage.orgSsoSessions.upsert(f.auth.user.id,Q.orgId);let F=await Ik1(f,f.auth.user.id,Q.orgId),v=F?.orgSlug?`/${F.orgSlug}`:"/";return u.redirect(v)}),$.get("/config",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!d13(f))return u.json({error:"Admin role required"},403);let J=await f.storage.orgSsoConfig.getByOrgId(X);if(!J)return u.json({configured:!1});return u.json({configured:!0,config:f.storage.orgSsoConfig.toPublic(J)})}),$.post("/config",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!Sk1(f))return u.json({error:"Owner role required"},403);let J=await u.req.json();if(!J.issuer||!J.clientId||!J.domain)return u.json({error:"issuer, clientId, and domain are required"},400);let w=await f.storage.orgSsoConfig.getByOrgId(X);if(!w&&!J.clientSecret)return u.json({error:"clientSecret is required for initial SSO setup"},400);let E=J.clientSecret||w?.clientSecret||"";try{await Ak1(J.issuer,J.discoveryEndpoint)}catch(Y){return u.json({error:"Failed to reach OIDC discovery endpoint",details:Y instanceof Error?Y.message:String(Y)},400)}let Q=await f.storage.orgSsoConfig.upsert(X,{issuer:J.issuer,clientId:J.clientId,clientSecret:E,discoveryEndpoint:J.discoveryEndpoint,scopes:J.scopes,domain:J.domain,enforced:J.enforced});return u.json({success:!0,config:f.storage.orgSsoConfig.toPublic(Q)})}),$.post("/config/enforce",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!Sk1(f))return u.json({error:"Owner role required"},403);let J=await u.req.json();if(!await f.storage.orgSsoConfig.getByOrgId(X))return u.json({error:"SSO must be configured before enforcing"},400);return await f.storage.orgSsoConfig.setEnforced(X,J.enforced),u.json({success:!0,enforced:J.enforced})}),$.delete("/config",async(u)=>{let f=u.get("meshContext");if(!f.auth.user)return u.json({error:"Authentication required"},401);let X=f.organization?.id;if(!X)return u.json({error:"Organization context required"},400);if(!Sk1(f))return u.json({error:"Owner role required"},403);return await f.storage.orgSsoConfig.delete(X),u.json({success:!0})})}function ix0($){let u;try{u=new URL($)}catch{throw Error(`Invalid URL: ${$}`)}let f=b4().localMode;if(u.protocol!=="https:"&&!(f&&u.protocol==="http:"))throw Error(`OIDC URL must use HTTPS: ${$}`);let X=u.hostname,J=[/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\./,/^\[::1\]$/,/^\[fd/,/^\[fe80:/,/^localhost$/i],w=/^127\.|^\[::1\]$|^localhost$/i.test(X);if(f&&w)return;for(let E of J)if(E.test(X))throw Error(`OIDC URL must not point to a private network address: ${X}`)}async function Ak1($,u){let f=u||$,X=_H$.get(f);if(X&&X.expiresAt>Date.now())return X.doc;let J=u||`${$.replace(/\/$/,"")}/.well-known/openid-configuration`;ix0(J);let w=await fetch(J);if(!w.ok)throw Error(`OIDC discovery failed: ${w.status} ${w.statusText}`);let E=await w.json();if(!E.authorization_endpoint||!E.token_endpoint||!E.jwks_uri)throw Error("OIDC discovery document missing required endpoints");return ix0(E.authorization_endpoint),ix0(E.token_endpoint),ix0(E.jwks_uri),_H$.set(f,{doc:E,expiresAt:Date.now()+3600000}),E}function l13(){let $=new Uint8Array(32);return crypto.getRandomValues($),btoa(String.fromCharCode(...$)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function c13($){let f=new TextEncoder().encode($),X=await crypto.subtle.digest("SHA-256",f);return btoa(String.fromCharCode(...new Uint8Array(X))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Ik1($,u,f){return await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.slug as orgSlug","member.role"]).where("member.userId","=",u).where("member.organizationId","=",f).executeTakeFirst()??null}function d13($){let u=$.auth.user?.role;if(!u)return!1;return Ta.includes(u)}function Sk1($){return $.auth.user?.role==="owner"}var xx0=()=>{let $=new Z$;return x13($),$},_H$;var kk1=U(()=>{Cf();yU1();p5();O5();i80();_H$=new Map});function t13($){if($==="claude-code")return m13;if($==="codex")return n13;return null}function jH$($,u){return t13($)?.[u]??null}var m13,n13;var PH$=U(()=>{m13={fast:{modelId:"claude-code:haiku",label:"Haiku 4.5"},smart:{modelId:"claude-code:sonnet",label:"Sonnet 4.6"},thinking:{modelId:"claude-code:opus",label:"Opus 4.7"}},n13={fast:{modelId:"codex:gpt-5.4-mini",label:"GPT-5.4 Mini"},smart:{modelId:"codex:gpt-5.3-codex",label:"GPT-5.3 Codex"},thinking:{modelId:"codex:gpt-5.5",label:"GPT-5.5"}}});function LH$($){return $.type==="tool-call"&&$.toolName==="todo_write"&&typeof $.toolCallId==="string"}function r13($){return $.type==="tool-result"&&$.toolName==="todo_write"&&typeof $.toolCallId==="string"}function TH$($){let u=null;for(let X=$.length-1;X>=0&&u===null;X--){let w=$[X].content;if(!Array.isArray(w))continue;for(let E=w.length-1;E>=0;E--){let Q=w[E];if(LH$(Q)){u=Q.toolCallId;break}}}if(u===null)return $;let f=u;return $.map((X)=>{let J=X.content;if(!Array.isArray(J))return X;let w=J.filter((E)=>{if(LH$(E))return E.toolCallId===f;if(r13(E))return E.toolCallId===f;return!0});if(w.length===J.length)return X;return{...X,content:w}})}function AH$($){let u=$.filter((X)=>X.role==="system"),f=$.find((X)=>X.role!=="system");return{systemMessages:u,requestMessage:f}}function a13($){let u=!1,f=$.map((X)=>{if(X.role!=="assistant")return X;if(!X.parts.some((w)=>("state"in w)&&w.state==="approval-requested"))return X;return u=!0,{...X,parts:X.parts.map((w)=>{if(!("state"in w)||w.state!=="approval-requested"||!("approval"in w)||!w.approval)return w;return{...w,state:"output-denied",approval:{...w.approval,approved:!1,reason:"User sent a new message without approving this tool call."}}})}});return u?f:$}function p13($){let[u,f]=$.reduce((X,J)=>{if(J.role==="system")X[0].push(J);else X[1].push(J);return X},[[],[]]);return{systemMessages:u,messages:f}}async function o13($,u){return await $.loadHistory(u)}function s13($,u){let f=$.filter((w)=>w.parts&&w.parts.length>0);if(!u)return f;let X=f.findIndex((w)=>w.id===u.id);return X>=0?[...f.slice(0,X),u]:[...f,u]}async function IH$($,u,f,X){let J=await o13($,X),w=s13(J,u);return[...f,...w]}async function SH$($,u){let f=$.filter((G)=>G.role!=="assistant"||G.parts&&G.parts.length>0),X=await hX0({messages:f}),J=a13(X),w=await OA(J,{tools:u.tools,ignoreIncompleteToolCalls:!0}),{systemMessages:E,messages:Q}=p13(w),Y=TH$(Q),W=CA1({messages:Y,reasoning:"all",emptyMessages:"remove",toolCalls:"none"}).map((G)=>{if(G.role!=="assistant")return G;let F=Array.isArray(G.content)?G.content.filter((v)=>v.type!=="reasoning"&&v.type!=="thinking"&&v.type!=="redacted-reasoning").map((v)=>{let B=v;if("providerOptions"in B||"providerMetadata"in B){let{providerOptions:N,providerMetadata:O,...K}=B;if(B.type==="tool-call"){let H=O?.google,P=N?.google;return{...K,...H?{providerMetadata:{google:H}}:{},...P?{providerOptions:{google:P}}:{}}}return K}return v}):G.content;return{...G,content:Array.isArray(F)&&F.length===0?[{type:"text",text:""}]:F,providerOptions:void 0,providerMetadata:void 0}});return{systemMessages:E,messages:W,originalMessages:X}}var lx0=U(()=>{q5()});function rE($){return`mesh-storage://${$}`}function oi($){if(!$.startsWith("mesh-storage://"))return null;return $.slice(15)}function Rk1(){return/mesh-storage:\/\/([^\s"'<>[\]]+)/g}function e13($,u,f){return`${$}/api/${u}/files/${f}`}function u43($){return $.type==="file"&&"mediaType"in $&&typeof $.mediaType==="string"&&$43.has($.mediaType)}function kH$($){let u=$.match(/^data:([^;]+);base64,(.+)$/s);if(!u)return null;let[,f,X]=u;try{let J=atob(X),w=new Uint8Array(J.length);for(let E=0;E<J.length;E++)w[E]=J.charCodeAt(E);return{mimeType:f,bytes:w}}catch{return null}}function RH$($){return{"image/png":"png","image/jpeg":"jpg","image/gif":"gif","image/webp":"webp","image/svg+xml":"svg","application/pdf":"pdf","text/plain":"txt","text/html":"html","application/json":"json"}[$]??"bin"}async function qH$($,u,f,X){if(!X.objectStorage)return null;try{return await X.objectStorage.put(u,$,{contentType:f}),u}catch(J){return console.error("[file-materializer] Failed to upload file:",J),null}}async function si($,u){if(!u.objectStorage)return null;try{return await u.objectStorage.presignedGetUrl($,f43)}catch(f){return console.error("[file-materializer] Failed to generate presigned URL:",f),null}}async function CH$($,u){if(!u.organization)return $;let f=u.organization.slug;if(!f)return $;let X=$.findLastIndex((B)=>B.role==="user");if(X===-1)return $;let J=$[X],w=J.parts.filter((B)=>B.type==="file"&&("url"in B)&&typeof B.url==="string"&&B.url.startsWith("data:"));if(w.length===0)return $;let Q=(await Promise.all(w.map(async(B)=>{if(B.type!=="file"||!("url"in B)||typeof B.url!=="string")return null;let N=kH$(B.url);if(!N)return null;let O=RH$(N.mimeType),K=`chat-uploads/${crypto.randomUUID()}.${O}`,H=await qH$(N.bytes,K,N.mimeType,u);if(!H)return null;let P="filename"in B&&typeof B.filename==="string"?B.filename:K;return{dataUrl:B.url,meshStorageUrl:rE(H),redirectUrl:e13(u.baseUrl,f,H),filename:P}}))).filter((B)=>B!==null);if(Q.length===0)return $;let Z=`[Uploaded files \u2014 use these URLs when calling tools]
 ${Q.map((B)=>`- ${B.filename}: ${B.meshStorageUrl}`).join(`
 `)}`,W=new Map(Q.map((B)=>[B.dataUrl,B.meshStorageUrl])),G=J.parts.map((B)=>{if(B.type!=="file"||!("url"in B)||typeof B.url!=="string")return B;let N=W.get(B.url);if(!N)return B;return{...B,url:N}}),F=G.findIndex((B)=>B.type==="text"),v;if(F!==-1)v=G.map((B,N)=>{if(N!==F||B.type!=="text")return B;return{...B,text:`${Z}

package/dist/server/node_modules/@opentelemetry/core/LICENSE ADDED Viewed

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+   1. Definitions.
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+   END OF TERMS AND CONDITIONS
+   APPENDIX: How to apply the Apache License to your work.
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+   Copyright [yyyy] [name of copyright owner]
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+       http://www.apache.org/licenses/LICENSE-2.0
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.