decocms 2.389.2 → 2.389.3

package/dist/server/server.js

@@ -2991,7 +2991,7 @@ Hint: Configure a valid Google account email in Monitor Configuration > Contexto
 `);let G=X.pax;if(G)for(let Q in G)Y+=uA0(" "+Q+"="+G[Q]+`
 `);return p8.from(Y)};Wf8.decodePax=function(X){let Y={};while(X.length){let G=0;while(G<X.length&&X[G]!==32)G++;let Q=parseInt(p8.toString(X.subarray(0,G)),10);if(!Q)return Y;let J=p8.toString(X.subarray(G+1,Q-1)),Z=J.indexOf("=");if(Z===-1)return Y;Y[J.slice(0,Z)]=J.slice(Z+1),X=X.subarray(Q)}return Y};Wf8.encode=function(X){let Y=p8.alloc(512),G=X.name,Q="";if(X.typeflag===5&&G[G.length-1]!=="/")G+="/";if(p8.byteLength(G)!==G.length)return null;while(p8.byteLength(G)>100){let J=G.indexOf("/");if(J===-1)return null;Q+=Q?"/"+G.slice(0,J):G.slice(0,J),G=G.slice(J+1)}if(p8.byteLength(G)>100||p8.byteLength(Q)>155)return null;if(X.linkname&&p8.byteLength(X.linkname)>100)return null;if(p8.write(Y,G),p8.write(Y,IP(X.mode&4095,6),100),p8.write(Y,IP(X.uid,6),108),p8.write(Y,IP(X.gid,6),116),Jf8(X.size,Y,124),p8.write(Y,IP(X.mtime.getTime()/1000|0,11),136),Y[156]=48+Gf8(X.type),X.linkname)p8.write(Y,X.linkname,157);if(p8.copy(UF6,Y,257),p8.copy(ab8,Y,263),X.uname)p8.write(Y,X.uname,265);if(X.gname)p8.write(Y,X.gname,297);if(p8.write(Y,IP(X.devmajor||0,6),329),p8.write(Y,IP(X.devminor||0,6),337),Q)p8.write(Y,Q,345);return p8.write(Y,IP(NF6(Y),6),148),Y};Wf8.decode=function(X,Y,G){let Q=X[156]===0?0:X[156]-48,J=Bt(X,0,100,Y),Z=MP(X,100,8),W=MP(X,108,8),K=MP(X,116,8),F=MP(X,124,12),U=MP(X,136,12),B=Yf8(Q),N=X[157]===0?null:Bt(X,157,100,Y),w=Bt(X,265,32),z=Bt(X,297,32),O=MP(X,329,8),L=MP(X,337,8),j=NF6(X);if(j===256)return null;if(j!==MP(X,148,8))throw Error("Invalid tar header. Maybe the tar is corrupted or it needs to be gunzipped?");if(eb8(X)){if(X[345])J=Bt(X,345,155,Y)+"/"+J}else if($f8(X));else if(!G)throw Error("Invalid tar header: unknown format.");if(Q===0&&J&&J[J.length-1]==="/")Q=5;return{name:J,mode:Z,uid:W,gid:K,size:F,mtime:new Date(1000*U),type:B,linkname:N,uname:w,gname:z,devmajor:O,devminor:L,pax:null}};function eb8($){return p8.equals(UF6,$.subarray(257,263))}function $f8($){return p8.equals(ob8,$.subarray(257,263))&&p8.equals(sb8,$.subarray(263,265))}function Xf8($,X,Y){if(typeof $!=="number")return Y;if($=~~$,$>=X)return X;if($>=0)return $;if($+=X,$>=0)return $;return 0}function Yf8($){switch($){case 0:return"file";case 1:return"link";case 2:return"symlink";case 3:return"character-device";case 4:return"block-device";case 5:return"directory";case 6:return"fifo";case 7:return"contiguous-file";case 72:return"pax-header";case 55:return"pax-global-header";case 27:return"gnu-long-link-path";case 28:case 30:return"gnu-long-path"}return null}function Gf8($){switch($){case"file":return 0;case"link":return 1;case"symlink":return 2;case"character-device":return 3;case"block-device":return 4;case"directory":return 5;case"fifo":return 6;case"contiguous-file":return 7;case"pax-header":return 72}return 0}function BF6($,X,Y,G){for(;Y<G;Y++)if($[Y]===X)return Y;return G}function NF6($){let X=256;for(let Y=0;Y<148;Y++)X+=$[Y];for(let Y=156;Y<512;Y++)X+=$[Y];return X}function IP($,X){if($=$.toString(8),$.length>X)return"7777777777777777777".slice(0,X)+" ";return"0000000000000000000".slice(0,X-$.length)+$+" "}function Qf8($,X,Y){X[Y]=128;for(let G=11;G>0;G--)X[Y+G]=$&255,$=Math.floor($/256)}function Jf8($,X,Y){if($.toString(8).length>11)Qf8($,X,Y);else p8.write(X,IP($,11),Y)}function Zf8($){let X;if($[0]===128)X=!0;else if($[0]===255)X=!1;else return null;let Y=[],G;for(G=$.length-1;G>0;G--){let Z=$[G];if(X)Y.push(Z);else Y.push(255-Z)}let Q=0,J=Y.length;for(G=0;G<J;G++)Q+=Y[G]*Math.pow(256,G);return X?Q:-1*Q}function MP($,X,Y){if($=$.subarray(X,X+Y),X=0,$[X]&128)return Zf8($);else{while(X<$.length&&$[X]===32)X++;let G=Xf8(BF6($,32,X,$.length),$.length,$.length);while(X<G&&$[X]===0)X++;if(G===X)return 0;return parseInt(p8.toString($.subarray(X,G)),8)}}function Bt($,X,Y,G){return p8.toString($.subarray(X,BF6($,0,X,X+Y)),G)}function uA0($){let X=p8.byteLength($),Y=Math.floor(Math.log(X)/Math.log(10))+1;if(X+Y>=Math.pow(10,Y))Y++;return X+Y+$}});var PF6=h((dcY,jF6)=>{var{Writable:Nf8,Readable:wf8,getStreamError:wF6}=hA0(),zf8=_A0(),zF6=Ut(),Nt=mA0(),Df8=zF6.alloc(0);class DF6{constructor(){this.buffered=0,this.shifted=0,this.queue=new zf8,this._offset=0}push($){this.buffered+=$.byteLength,this.queue.push($)}shiftFirst($){return this._buffered===0?null:this._next($)}shift($){if($>this.buffered)return null;if($===0)return Df8;let X=this._next($);if($===X.byteLength)return X;let Y=[X];while(($-=X.byteLength)>0)X=this._next($),Y.push(X);return zF6.concat(Y)}_next($){let X=this.queue.peek(),Y=X.byteLength-this._offset;if($>=Y){let G=this._offset?X.subarray(this._offset,X.byteLength):X;return this.queue.shift(),this._offset=0,this.buffered-=Y,this.shifted+=Y,G}return this.buffered-=$,this.shifted+=$,X.subarray(this._offset,this._offset+=$)}}class OF6 extends wf8{constructor($,X,Y){super();this.header=X,this.offset=Y,this._parent=$}_read($){if(this.header.size===0)this.push(null);if(this._parent._stream===this)this._parent._update();$(null)}_predestroy(){this._parent.destroy(wF6(this))}_detach(){if(this._parent._stream===this)this._parent._stream=null,this._parent._missing=EF6(this.header.size),this._parent._update()}_destroy($){this._detach(),$(null)}}class LF6 extends Nf8{constructor($){super($);if(!$)$={};this._buffer=new DF6,this._offset=0,this._header=null,this._stream=null,this._missing=0,this._longHeader=!1,this._callback=lA0,this._locked=!1,this._finished=!1,this._pax=null,this._paxGlobal=null,this._gnuLongPath=null,this._gnuLongLinkPath=null,this._filenameEncoding=$.filenameEncoding||"utf-8",this._allowUnknownFormat=!!$.allowUnknownFormat,this._unlockBound=this._unlock.bind(this)}_unlock($){if(this._locked=!1,$){this.destroy($),this._continueWrite($);return}this._update()}_consumeHeader(){if(this._locked)return!1;this._offset=this._buffer.shifted;try{this._header=Nt.decode(this._buffer.shift(512),this._filenameEncoding,this._allowUnknownFormat)}catch($){return this._continueWrite($),!1}if(!this._header)return!0;switch(this._header.type){case"gnu-long-path":case"gnu-long-link-path":case"pax-global-header":case"pax-header":return this._longHeader=!0,this._missing=this._header.size,!0}if(this._locked=!0,this._applyLongHeaders(),this._header.size===0||this._header.type==="directory")return this.emit("entry",this._header,this._createStream(),this._unlockBound),!0;return this._stream=this._createStream(),this._missing=this._header.size,this.emit("entry",this._header,this._stream,this._unlockBound),!0}_applyLongHeaders(){if(this._gnuLongPath)this._header.name=this._gnuLongPath,this._gnuLongPath=null;if(this._gnuLongLinkPath)this._header.linkname=this._gnuLongLinkPath,this._gnuLongLinkPath=null;if(this._pax){if(this._pax.path)this._header.name=this._pax.path;if(this._pax.linkpath)this._header.linkname=this._pax.linkpath;if(this._pax.size)this._header.size=parseInt(this._pax.size,10);this._header.pax=this._pax,this._pax=null}}_decodeLongHeader($){switch(this._header.type){case"gnu-long-path":this._gnuLongPath=Nt.decodeLongPath($,this._filenameEncoding);break;case"gnu-long-link-path":this._gnuLongLinkPath=Nt.decodeLongPath($,this._filenameEncoding);break;case"pax-global-header":this._paxGlobal=Nt.decodePax($);break;case"pax-header":this._pax=this._paxGlobal===null?Nt.decodePax($):Object.assign({},this._paxGlobal,Nt.decodePax($));break}}_consumeLongHeader(){this._longHeader=!1,this._missing=EF6(this._header.size);let $=this._buffer.shift(this._header.size);try{this._decodeLongHeader($)}catch(X){return this._continueWrite(X),!1}return!0}_consumeStream(){let $=this._buffer.shiftFirst(this._missing);if($===null)return!1;this._missing-=$.byteLength;let X=this._stream.push($);if(this._missing===0){if(this._stream.push(null),X)this._stream._detach();return X&&this._locked===!1}return X}_createStream(){return new OF6(this,this._header,this._offset)}_update(){while(this._buffer.buffered>0&&!this.destroying){if(this._missing>0){if(this._stream!==null){if(this._consumeStream()===!1)return;continue}if(this._longHeader===!0){if(this._missing>this._buffer.buffered)break;if(this._consumeLongHeader()===!1)return!1;continue}let $=this._buffer.shiftFirst(this._missing);if($!==null)this._missing-=$.byteLength;continue}if(this._buffer.buffered<512)break;if(this._stream!==null||this._consumeHeader()===!1)return}this._continueWrite(null)}_continueWrite($){let X=this._callback;this._callback=lA0,X($)}_write($,X){this._callback=X,this._buffer.push($),this._update()}_final($){this._finished=this._missing===0&&this._buffer.buffered===0,$(this._finished?null:Error("Unexpected end of data"))}_predestroy(){this._continueWrite(null)}_destroy($){if(this._stream)this._stream.destroy(wF6(this));$(null)}[Symbol.asyncIterator](){let $=null,X=null,Y=null,G=null,Q=null,J=this;return this.on("entry",K),this.on("error",(B)=>{$=B}),this.on("close",F),{[Symbol.asyncIterator](){return this},next(){return new Promise(W)},return(){return U(null)},throw(B){return U(B)}};function Z(B){if(!Q)return;let N=Q;Q=null,N(B)}function W(B,N){if($)return N($);if(G){B({value:G,done:!1}),G=null;return}if(X=B,Y=N,Z(null),J._finished&&X)X({value:void 0,done:!0}),X=Y=null}function K(B,N,w){if(Q=w,N.on("error",lA0),X)X({value:N,done:!1}),X=Y=null;else G=N}function F(){if(Z($),!X)return;if($)Y($);else X({value:void 0,done:!0});X=Y=null}function U(B){return J.destroy(B),Z(B),new Promise((N,w)=>{if(J.destroyed)return N({value:void 0,done:!0});J.once("close",function(){if(B)w(B);else N({value:void 0,done:!0})})})}}}jF6.exports=function(X){return new LF6(X)};function lA0(){}function EF6($){return $&=511,$&&512-$}});var AF6=h((icY,cA0)=>{var qF6={S_IFMT:61440,S_IFDIR:16384,S_IFCHR:8192,S_IFBLK:24576,S_IFIFO:4096,S_IFLNK:40960};try{cA0.exports=z1("fs").constants||qF6}catch{cA0.exports=qF6}});var kF6=h((pcY,SF6)=>{var{Readable:Of8,Writable:Lf8,getStreamError:TF6}=hA0(),_h=Ut(),wt=AF6(),zg1=mA0(),VF6=_h.alloc(1024);class MF6 extends Lf8{constructor($,X,Y){super({mapWritable:jf8,eagerOpen:!0});if(this.written=0,this.header=X,this._callback=Y,this._linkname=null,this._isLinkname=X.type==="symlink"&&!X.linkname,this._isVoid=X.type!=="file"&&X.type!=="contiguous-file",this._finished=!1,this._pack=$,this._openCallback=null,this._pack._stream===null)this._pack._stream=this;else this._pack._pending.push(this)}_open($){if(this._openCallback=$,this._pack._stream===this)this._continueOpen()}_continuePack($){if(this._callback===null)return;let X=this._callback;this._callback=null,X($)}_continueOpen(){if(this._pack._stream===null)this._pack._stream=this;let $=this._openCallback;if(this._openCallback=null,$===null)return;if(this._pack.destroying)return $(Error("pack stream destroyed"));if(this._pack._finalized)return $(Error("pack stream is already finalized"));if(this._pack._stream=this,!this._isLinkname)this._pack._encode(this.header);if(this._isVoid)this._finish(),this._continuePack(null);$(null)}_write($,X){if(this._isLinkname)return this._linkname=this._linkname?_h.concat([this._linkname,$]):$,X(null);if(this._isVoid){if($.byteLength>0)return X(Error("No body allowed for this entry"));return X()}if(this.written+=$.byteLength,this._pack.push($))return X();this._pack._drain=X}_finish(){if(this._finished)return;if(this._finished=!0,this._isLinkname)this.header.linkname=this._linkname?_h.toString(this._linkname,"utf-8"):"",this._pack._encode(this.header);RF6(this._pack,this.header.size),this._pack._done(this)}_final($){if(this.written!==this.header.size)return $(Error("Size mismatch"));this._finish(),$(null)}_getError(){return TF6(this)||Error("tar entry destroyed")}_predestroy(){this._pack.destroy(this._getError())}_destroy($){this._pack._done(this),this._continuePack(this._finished?null:this._getError()),$()}}class IF6 extends Of8{constructor($){super($);this._drain=dA0,this._finalized=!1,this._finalizing=!1,this._pending=[],this._stream=null}entry($,X,Y){if(this._finalized||this.destroying)throw Error("already finalized or destroyed");if(typeof X==="function")Y=X,X=null;if(!Y)Y=dA0;if(!$.size||$.type==="symlink")$.size=0;if(!$.type)$.type=Ef8($.mode);if(!$.mode)$.mode=$.type==="directory"?493:420;if(!$.uid)$.uid=0;if(!$.gid)$.gid=0;if(!$.mtime)$.mtime=new Date;if(typeof X==="string")X=_h.from(X);let G=new MF6(this,$,Y);if(_h.isBuffer(X))return $.size=X.byteLength,G.write(X),G.end(),G;if(G._isVoid)return G;return G}finalize(){if(this._stream||this._pending.length>0){this._finalizing=!0;return}if(this._finalized)return;this._finalized=!0,this.push(VF6),this.push(null)}_done($){if($!==this._stream)return;if(this._stream=null,this._finalizing)this.finalize();if(this._pending.length)this._pending.shift()._continueOpen()}_encode($){if(!$.pax){let X=zg1.encode($);if(X){this.push(X);return}}this._encodePax($)}_encodePax($){let X=zg1.encodePax({name:$.name,linkname:$.linkname,pax:$.pax}),Y={name:"PaxHeader",mode:$.mode,uid:$.uid,gid:$.gid,size:X.byteLength,mtime:$.mtime,type:"pax-header",linkname:$.linkname&&"PaxHeader",uname:$.uname,gname:$.gname,devmajor:$.devmajor,devminor:$.devminor};this.push(zg1.encode(Y)),this.push(X),RF6(this,X.byteLength),Y.size=$.size,Y.type=$.type,this.push(zg1.encode(Y))}_doDrain(){let $=this._drain;this._drain=dA0,$()}_predestroy(){let $=TF6(this);if(this._stream)this._stream.destroy($);while(this._pending.length){let X=this._pending.shift();X.destroy($),X._continueOpen()}this._doDrain()}_read($){this._doDrain(),$()}}SF6.exports=function(X){return new IF6(X)};function Ef8($){switch($&wt.S_IFMT){case wt.S_IFBLK:return"block-device";case wt.S_IFCHR:return"character-device";case wt.S_IFDIR:return"directory";case wt.S_IFIFO:return"fifo";case wt.S_IFLNK:return"symlink"}return"file"}function dA0(){}function RF6($,X){if(X&=511,X)$.push(VF6.subarray(0,512-X))}function jf8($){return _h.isBuffer($)?$:_h.from($)}});var CF6=h((Pf8)=>{Pf8.extract=PF6();Pf8.pack=kF6()});var bF6=h((rcY,_F6)=>{_F6.exports=vF6;function vF6($,X){if($&&X)return vF6($)(X);if(typeof $!=="function")throw TypeError("need wrapper function");return Object.keys($).forEach(function(G){Y[G]=$[G]}),Y;function Y(){var G=Array(arguments.length);for(var Q=0;Q<G.length;Q++)G[Q]=arguments[Q];var J=$.apply(this,G),Z=G[G.length-1];if(typeof J==="function"&&J!==Z)Object.keys(Z).forEach(function(W){J[W]=Z[W]});return J}}});var pA0=h((tcY,iA0)=>{var fF6=bF6();iA0.exports=fF6(Dg1);iA0.exports.strict=fF6(yF6);Dg1.proto=Dg1(function(){Object.defineProperty(Function.prototype,"once",{value:function(){return Dg1(this)},configurable:!0}),Object.defineProperty(Function.prototype,"onceStrict",{value:function(){return yF6(this)},configurable:!0})});function Dg1($){var X=function(){if(X.called)return X.value;return X.called=!0,X.value=$.apply(this,arguments)};return X.called=!1,X}function yF6($){var X=function(){if(X.called)throw Error(X.onceError);return X.called=!0,X.value=$.apply(this,arguments)},Y=$.name||"Function wrapped with `once`";return X.onceError=Y+" shouldn't be called more than once",X.called=!1,X}});var hF6=h((acY,gF6)=>{var Tf8=pA0(),Vf8=function(){},Mf8=global.Bare?queueMicrotask:process.nextTick.bind(process),If8=function($){return $.setHeader&&typeof $.abort==="function"},Rf8=function($){return $.stdio&&Array.isArray($.stdio)&&$.stdio.length===3},xF6=function($,X,Y){if(typeof X==="function")return xF6($,null,X);if(!X)X={};Y=Tf8(Y||Vf8);var{_writableState:G,_readableState:Q}=$,J=X.readable||X.readable!==!1&&$.readable,Z=X.writable||X.writable!==!1&&$.writable,W=!1,K=function(){if(!$.writable)F()},F=function(){if(Z=!1,!J)Y.call($)},U=function(){if(J=!1,!Z)Y.call($)},B=function(L){Y.call($,L?Error("exited with error code: "+L):null)},N=function(L){Y.call($,L)},w=function(){Mf8(z)},z=function(){if(W)return;if(J&&!(Q&&(Q.ended&&!Q.destroyed)))return Y.call($,Error("premature close"));if(Z&&!(G&&(G.ended&&!G.destroyed)))return Y.call($,Error("premature close"))},O=function(){$.req.on("finish",F)};if(If8($))if($.on("complete",F),$.on("abort",w),$.req)O();else $.on("request",O);else if(Z&&!G)$.on("end",K),$.on("close",K);if(Rf8($))$.on("exit",B);if($.on("end",U),$.on("finish",F),X.error!==!1)$.on("error",N);return $.on("close",w),function(){if(W=!0,$.removeListener("complete",F),$.removeListener("abort",w),$.removeListener("request",O),$.req)$.req.removeListener("finish",F);$.removeListener("end",K),$.removeListener("close",K),$.removeListener("finish",F),$.removeListener("exit",B),$.removeListener("end",U),$.removeListener("error",N),$.removeListener("close",w)}};gF6.exports=xF6});var lF6=h((ocY,mF6)=>{var Sf8=pA0(),kf8=hF6(),Og1;try{Og1=z1("fs")}catch($){}var K71=function(){},Cf8=typeof process>"u"?!1:/^v?\.0/.test(process.version),Lg1=function($){return typeof $==="function"},vf8=function($){if(!Cf8)return!1;if(!Og1)return!1;return($ instanceof(Og1.ReadStream||K71)||$ instanceof(Og1.WriteStream||K71))&&Lg1($.close)},_f8=function($){return $.setHeader&&Lg1($.abort)},bf8=function($,X,Y,G){G=Sf8(G);var Q=!1;$.on("close",function(){Q=!0}),kf8($,{readable:X,writable:Y},function(Z){if(Z)return G(Z);Q=!0,G()});var J=!1;return function(Z){if(Q)return;if(J)return;if(J=!0,vf8($))return $.close(K71);if(_f8($))return $.abort();if(Lg1($.destroy))return $.destroy();G(Z||Error("stream was destroyed"))}},uF6=function($){$()},ff8=function($,X){return $.pipe(X)},yf8=function(){var $=Array.prototype.slice.call(arguments),X=Lg1($[$.length-1]||K71)&&$.pop()||K71;if(Array.isArray($[0]))$=$[0];if($.length<2)throw Error("pump requires two streams per minimum");var Y,G=$.map(function(Q,J){var Z=J<$.length-1,W=J>0;return bf8(Q,Z,W,function(K){if(!Y)Y=K;if(K)G.forEach(uF6);if(Z)return;G.forEach(uF6),X(Y)})});return $.reduce(ff8)};mF6.exports=yf8});var oF6=h((uf8)=>{var cF6=CF6(),dF6=lF6(),iF6=z1("fs"),$Y=z1("path"),H71=(global.Bare?global.Bare.platform:process.platform)==="win32";uf8.pack=function(X,Y){if(!X)X=".";if(!Y)Y={};let G=Y.fs||iF6,Q=Y.ignore||Y.filter||F71,J=Y.mapStream||tF6,Z=hf8(G,Y.dereference?G.stat:G.lstat,X,Q,Y.entries,Y.sort),W=Y.strict!==!1,K=typeof Y.umask==="number"?~Y.umask:~pF6(),F=Y.pack||cF6.pack(),U=Y.finish||F71,B=Y.map||F71,N=typeof Y.dmode==="number"?Y.dmode:0,w=typeof Y.fmode==="number"?Y.fmode:0;if(Y.strip)B=aF6(B,Y.strip);if(Y.readable)N|=parseInt(555,8),w|=parseInt(444,8);if(Y.writable)N|=parseInt(333,8),w|=parseInt(222,8);L();function z(j,P){G.readlink($Y.join(X,j),function(T,I){if(T)return F.destroy(T);P.linkname=nA0(I),F.entry(P,L)})}function O(j,P,T){if(F.destroyed)return;if(j)return F.destroy(j);if(!P){if(Y.finalize!==!1)F.finalize();return U(F)}if(T.isSocket())return L();let I={name:nA0(P),mode:(T.mode|(T.isDirectory()?N:w))&K,mtime:T.mtime,size:T.size,type:"file",uid:T.uid,gid:T.gid};if(T.isDirectory())return I.size=0,I.type="directory",I=B(I)||I,F.entry(I,L);if(T.isSymbolicLink())return I.size=0,I.type="symlink",I=B(I)||I,z(P,I);if(I=B(I)||I,!T.isFile()){if(W)return F.destroy(Error("unsupported type for "+P));return L()}let V=F.entry(I,L),R=J(G.createReadStream($Y.join(X,P),{start:0,end:I.size>0?I.size-1:I.size}),I);R.on("error",function(v){V.destroy(v)}),dF6(R,V)}function L(j){if(j)return F.destroy(j);Z(O)}return F};function xf8($){return $.length?$[$.length-1]:null}function gf8(){return!global.Bare&&process.getuid?process.getuid():-1}function pF6(){return!global.Bare&&process.umask?process.umask():0}uf8.extract=function(X,Y){if(!X)X=".";if(!Y)Y={};X=$Y.resolve(X);let G=Y.fs||iF6,Q=Y.ignore||Y.filter||F71,J=Y.mapStream||tF6,Z=Y.chown!==!1&&!H71&&gf8()===0,W=Y.extract||cF6.extract(),K=[],F=new Date,U=typeof Y.umask==="number"?~Y.umask:~pF6(),B=Y.strict!==!1,N=Y.validateSymlinks!==!1,w=Y.map||F71,z=typeof Y.dmode==="number"?Y.dmode:0,O=typeof Y.fmode==="number"?Y.fmode:0;if(Y.strip)w=aF6(w,Y.strip);if(Y.readable)z|=parseInt(555,8),O|=parseInt(444,8);if(Y.writable)z|=parseInt(333,8),O|=parseInt(222,8);if(W.on("entry",L),Y.finish)W.on("finish",Y.finish);return W;function L(V,R,v){V=w(V)||V,V.name=nA0(V.name);let S=$Y.join(X,$Y.join("/",V.name));if(Q(S,V))return R.resume(),v();let _=$Y.join(S,".")===$Y.join(X,".")?X:$Y.dirname(S);rF6(G,_,$Y.join(X,"."),function(c,t){if(c)return v(c);if(!t)return v(Error(_+" is not a valid path"));if(V.type==="directory")return K.push([S,V.mtime]),I(S,{fs:G,own:Z,uid:V.uid,gid:V.gid,mode:V.mode},y);I(_,{fs:G,own:Z,uid:V.uid,gid:V.gid,mode:493},function(e){if(e)return v(e);switch(V.type){case"file":return b();case"link":return l();case"symlink":return f()}if(B)return v(Error("unsupported type for "+S+" ("+V.type+")"));R.resume(),v()})});function y(c){if(c)return v(c);P(S,V,function(t){if(t)return v(t);if(H71)return v();T(S,V,v)})}function f(){if(H71)return v();G.unlink(S,function(){let c=$Y.resolve($Y.dirname(S),V.linkname);if(!d(c)&&N)return v(Error(S+" is not a valid symlink"));nF6(G,c,$Y.join(X,"."),function(t,e){if(t)return v(t);if(!e&&N)return v(Error(S+" is not a valid symlink"));G.symlink(V.linkname,S,y)})})}function l(){if(H71)return v();G.unlink(S,function(){let c=$Y.join(X,$Y.join("/",V.linkname));G.realpath(c,function(t,e){if(t||!d(e))return v(Error(S+" is not a valid hardlink"));G.link(e,S,function(W1){if(W1&&W1.code==="EPERM"&&Y.hardlinkAsFilesFallback)return R=G.createReadStream(e),b();y(W1)})})})}function d(c){return c===X||c.startsWith(X+$Y.sep)}function b(){let c=G.createWriteStream(S),t=J(R,V);c.on("error",function(e){t.destroy(e)}),dF6(t,c,function(e){if(e)return v(e);c.on("close",y)})}}function j(V,R){let v;while((v=xf8(K))&&V.slice(0,v[0].length)!==v[0])K.pop();if(!v)return R();G.utimes(v[0],F,v[1],R)}function P(V,R,v){if(Y.utimes===!1)return v();if(R.type==="directory")return G.utimes(V,F,R.mtime,v);if(R.type==="symlink")return j(V,v);G.utimes(V,F,R.mtime,function(S){if(S)return v(S);j(V,v)})}function T(V,R,v){let S=R.type==="symlink",_=S?G.lchmod:G.chmod,y=S?G.lchown:G.chown;if(!_)return v();let f=(R.mode|(R.type==="directory"?z:O))&U;if(y&&Z)y.call(G,V,R.uid,R.gid,l);else l(null);function l(d){if(d)return v(d);if(!_)return v();_.call(G,V,f,v)}}function I(V,R,v){G.stat(V,function(S){if(!S)return v(null);if(S.code!=="ENOENT")return v(S);G.mkdir(V,{mode:R.mode,recursive:!0},function(_,y){if(_)return v(_);T(V,R,v)})})}};function nF6($,X,Y,G){if(X===Y)return G(null,!0);if(!X.startsWith(Y+$Y.sep))return G(null,!1);$.lstat(X,function(Q,J){if(Q&&Q.code!=="ENOENT"&&Q.code!=="EPERM")return G(Q);if(Q||!J.isSymbolicLink())return nF6($,$Y.join(X,".."),Y,G);G(null,!1)})}function rF6($,X,Y,G){if(X===Y)return G(null,!0);$.lstat(X,function(Q,J){if(Q&&Q.code!=="ENOENT"&&Q.code!=="EPERM")return G(Q);if(Q||J.isDirectory())return rF6($,$Y.join(X,".."),Y,G);G(null,!1)})}function F71(){}function tF6($){return $}function nA0($){return H71?$.replace(/\\/g,"/").replace(/[:?<>|]/g,"_"):$}function hf8($,X,Y,G,Q,J){if(!Q)Q=["."];let Z=Q.slice(0);return function(K){if(!Z.length)return K(null);let F=Z.shift(),U=$Y.join(Y,F);X.call($,U,function(B,N){if(B)return K(Q.indexOf(F)===-1&&B.code==="ENOENT"?null:B);if(!N.isDirectory())return K(null,F,N);$.readdir(U,function(w,z){if(w)return K(w);if(J)z.sort();for(let O=0;O<z.length;O++)if(!G($Y.join(Y,F,z[O])))Z.push($Y.join(F,z[O]));K(null,F,N)})})}}function aF6($,X){return function(Y){Y.name=Y.name.split("/").slice(X).join("/");let G=Y.linkname;if(G&&(Y.type==="link"||$Y.isAbsolute(G)))Y.linkname=G.split("/").slice(X).join("/");return $(Y)}}});var cf8,df8;var sF6=D(()=>{CA0();cf8=G1(hH6(),1),df8=G1(oF6(),1)});var Eg1=()=>{};var eF6=D(()=>{_x1()});var $U6=D(()=>{Zg1();Jg1();Eg1()});var XU6=()=>{};var YU6=()=>{};var rA0=D(()=>{jH6();SA0();Zg1();VH6();IA0();CA0();MH6();IH6();RH6();SH6();RA0();kH6();sF6();Eg1();eF6();$U6();XU6();YU6();Eg1()});var a7,mY,bh,U71;var B71=D(()=>{a7={CLAIM_API_GROUP:"extensions.agents.x-k8s.io",CLAIM_API_VERSION:"v1alpha1",CLAIM_PLURAL:"sandboxclaims",SANDBOX_API_GROUP:"agents.x-k8s.io",SANDBOX_API_VERSION:"v1alpha1",SANDBOX_PLURAL:"sandboxes",POD_NAME_ANNOTATION:"agents.x-k8s.io/pod-name"};mY=class mY extends Error{cause;constructor($,X){super($);if(this.name="SandboxError",this.cause=X,X instanceof Error&&X.stack)this.stack=`${this.stack}
 Caused by: ${X.stack}`}};bh=class bh extends mY{constructor($,X){super($,X);this.name="SandboxTimeoutError"}};U71=class U71 extends mY{constructor($,X){super($,X);this.name="SandboxAlreadyExistsError"}}});async function if8($){let X=$.getCurrentCluster();if(!X)throw new mY("No active cluster in kubeconfig");let Y={};await $.applyToHTTPSOptions(Y);let G={},Q=Y.headers??{};for(let[J,Z]of Object.entries(Q))if(Array.isArray(Z))G[J]=Z.join(", ");else if(Z!==void 0)G[J]=String(Z);if(typeof Y.auth==="string"&&!G.Authorization)G.Authorization=`Basic ${Buffer.from(Y.auth).toString("base64")}`;return{server:X.server.replace(/\/+$/,""),headers:G,tls:{cert:tA0(Y.cert),key:tA0(Y.key),ca:tA0(Y.ca),rejectUnauthorized:X.skipTLSVerify?!1:void 0}}}function tA0($){if($==null)return;if(typeof $==="string")return $;if(Buffer.isBuffer($))return $.toString("utf8");return String($)}async function fh($,X){let Y=await if8($),G={...Y.headers,...X.headers};if(X.method==="PATCH")G["content-type"]=X.patchType==="apply"?"application/apply-patch+yaml":X.patchType==="strategic-merge"?"application/strategic-merge-patch+json":"application/merge-patch+json";else if(X.body!==void 0&&!("content-type"in G))G["content-type"]="application/json";let Q={method:X.method,headers:G,body:X.body===void 0?void 0:JSON.stringify(X.body),signal:X.signal,tls:Y.tls};return fetch(`${Y.server}${X.path}`,Q)}async function oA0($){try{return await $.json()}catch{return null}}async function sA0($,X){if($.ok)return;let Y=await oA0($),G=Y?.message??`${X} failed: ${$.status} ${$.statusText}`;throw new aA0($.status,Y,G)}async function N71($,X,Y,G,Q="none"){try{let J=await fh($,X);if(J.status===404)return null;if(await sA0(J,Y),Q==="json")return await J.json();return null}catch(J){throw new mY(G,J)}}async function w71($,X,Y){let G=`${GU6}/${encodeURIComponent(X)}/${a7.CLAIM_PLURAL}`,Q;try{Q=await fh($,{method:"POST",path:G,body:Y})}catch(F){let U=F instanceof Error?F.message:String(F);throw console.warn(`[agent-sandbox/client] createSandboxClaim ${Y.metadata.name} transport error: ${U}`),new mY(`Failed to create SandboxClaim: ${Y.metadata.name} (transport error: ${U})`,F)}if(Q.ok)return;let J=await oA0(Q),Z=J?.reason?` ${J.reason}`:"",W=J?.message??Q.statusText,K=`Failed to create SandboxClaim: ${Y.metadata.name} (${Q.status}${Z}: ${W})`;if(console.warn(`[agent-sandbox/client] createSandboxClaim ${Y.metadata.name} rejected: status=${Q.status} reason=${J?.reason??"<none>"} message=${W}`),Q.status===409)throw new U71(K);throw new mY(K)}async function jg1($,X,Y,G=60000){let Q=Date.now()+G,J=500,Z;while(!0){let W=await SP($,X,Y).catch(()=>{return});if(!W)return;if(Z=W,Date.now()>=Q){let K=Z.metadata?.finalizers??[],F=Z.metadata?.deletionTimestamp??"<unknown>";throw new bh(`SandboxClaim ${Y} still terminating after ${G}ms (deletionTimestamp=${F}, finalizers=[${K.join(", ")}])`)}await new Promise((K)=>setTimeout(K,500))}}function eA0($,X){return`${GU6}/${encodeURIComponent($)}/${a7.CLAIM_PLURAL}/${encodeURIComponent(X)}`}async function QU6($,X,Y,G){await N71($,{method:"PATCH",path:eA0(X,Y),patchType:"merge",body:{spec:{lifecycle:{shutdownPolicy:"Delete",shutdownTime:G}}}},"patchSandboxClaimShutdown",`Failed to patch SandboxClaim shutdownTime: ${Y}`)}async function RP($,X,Y){await N71($,{method:"DELETE",path:eA0(X,Y)},"deleteSandboxClaim",`Failed to delete SandboxClaim: ${Y}`)}async function SP($,X,Y){return await N71($,{method:"GET",path:eA0(X,Y)},"getSandboxClaim",`Failed to get SandboxClaim: ${Y}`,"json")??void 0}async function JU6($,X,Y,G=60){let Q=Date.now()+G*1000,J=200;while(Date.now()<Q){let W=(await SP($,X,Y).catch(()=>{return}))?.status?.sandbox?.name;if(W)return W;await new Promise((K)=>setTimeout(K,200))}throw new bh(`SandboxClaim ${Y} did not record an adopted Sandbox (status.sandbox.name) within ${G}s`)}function HU6($,X){return`${KU6}/${encodeURIComponent($)}/${$20}/${encodeURIComponent(X)}`}function pf8($){return`${KU6}/${encodeURIComponent($)}/${$20}`}async function Pg1($,X,Y){try{let G=await fh($,{method:"POST",path:pf8(X),body:Y});if(G.status===409)return;await sA0(G,"createHttpRoute")}catch(G){if(G instanceof aA0&&G.status===409)return;throw new mY(`Failed to create HTTPRoute: ${Y.metadata.name}`,G)}}async function qg1($,X,Y){await N71($,{method:"DELETE",path:HU6(X,Y)},"deleteHttpRoute",`Failed to delete HTTPRoute: ${Y}`)}async function FU6($,X,Y){return await N71($,{method:"GET",path:HU6(X,Y)},"getHttpRoute",`Failed to get HTTPRoute: ${Y}`,"json")??void 0}async function UU6($,X,Y,G){let Q={apiVersion:"v1",kind:"Service",metadata:{name:Y},spec:{ports:[{name:G.name,port:G.port,targetPort:G.targetPort,protocol:G.protocol??"TCP"}]}},J=new URLSearchParams({fieldManager:nf8,force:"true"}),Z=`/api/v1/namespaces/${encodeURIComponent(X)}/services/${encodeURIComponent(Y)}?${J}`;try{let W=await fh($,{method:"PATCH",path:Z,patchType:"apply",body:Q});await sA0(W,"ensureServicePort")}catch(W){throw new mY(`Failed to apply Service ports: ${Y}`,W)}}function Ag1($,X,Y,G=180){let Q=`/apis/${a7.SANDBOX_API_GROUP}/${a7.SANDBOX_API_VERSION}/namespaces/${encodeURIComponent(X)}/${a7.SANDBOX_PLURAL}?watch=true&fieldSelector=${encodeURIComponent(`metadata.name=${Y}`)}`,{resolve:J,reject:Z,promise:W}=Promise.withResolvers(),K=new AbortController,F=!1,U=setTimeout(()=>{if(F)return;F=!0,K.abort(),Z(new bh(`Sandbox did not become ready within ${G} seconds`))},G*1000),B=(N)=>{if(F)return;F=!0,clearTimeout(U),K.abort(),N()};return(async()=>{let N;try{N=await fh($,{method:"GET",path:Q,signal:K.signal,headers:{accept:"application/json"}})}catch(w){B(()=>Z(new mY("Failed to start watch for sandbox readiness",w)));return}if(!N.ok||!N.body){let w=await oA0(N).catch(()=>null);B(()=>Z(new mY(`Watch handshake failed (${N.status}): ${w?.message??N.statusText}`)));return}try{for await(let w of X20(N.body)){if(F)return;if(w.type==="ERROR"){let P=w.object;B(()=>Z(new mY(`Watch stream error while waiting for sandbox: ${P.message??"unknown"}`)));return}if(w.type!=="ADDED"&&w.type!=="MODIFIED")continue;let z=w.object;if(!z.status?.conditions?.find((P)=>P.type==="Ready"&&P.status==="True"))continue;let L=z.metadata?.name;if(!L){B(()=>Z(new mY("Sandbox metadata or name is missing")));return}let j=z.metadata?.annotations?.[a7.POD_NAME_ANNOTATION]??L;B(()=>J({sandboxName:L,podName:j}));return}B(()=>Z(new mY("Watch stream closed before sandbox became ready")))}catch(w){if(F)return;if(w instanceof Error&&(w.name==="AbortError"||K.signal.aborted))return;B(()=>Z(new mY("Watch stream error while waiting for sandbox",w)))}})(),W}async function*X20($){let X=$.getReader(),Y=new TextDecoder,G="";try{while(!0){let{value:J,done:Z}=await X.read();if(Z)break;G+=Y.decode(J,{stream:!0});let W;while((W=G.indexOf(`
-`))>=0){let K=G.slice(0,W).trim();if(G=G.slice(W+1),!K)continue;yield JSON.parse(K)}}let Q=G.trim();if(Q)yield JSON.parse(Q)}finally{X.releaseLock()}}var aA0,GU6,ZU6="gateway.networking.k8s.io",WU6="v1",$20="httproutes",KU6,z71,nf8="mesh-sandbox-runner";var Tg1=D(()=>{B71();aA0=class aA0 extends Error{status;body;constructor($,X,Y){super(Y);this.status=$;this.body=X;this.name="KubeHttpError"}};GU6=`/apis/${a7.CLAIM_API_GROUP}/${a7.CLAIM_API_VERSION}/namespaces`;KU6=`/apis/${ZU6}/${WU6}/namespaces`;z71={API_GROUP:ZU6,API_VERSION:WU6,PLURAL:$20}});var BU6=D(()=>{kF()});async function Vg1($){try{let X=await fetch(`${$}/health`,{signal:AbortSignal.timeout(rf8)});if(!X.ok)return null;let Y=await X.json();if(typeof Y==="object"&&Y!==null&&typeof Y.bootId==="string"&&typeof Y.ready==="boolean"&&Y.setup&&typeof Y.setup.running==="boolean"&&typeof Y.setup.done==="boolean")return Y;return null}catch{return null}}async function zU6($){for(let X=0;X<NU6;X++){if(await Vg1($)!==null)return;let Y=(Math.random()*2-1)*af8;await J7(wU6+Y)}throw Error(`sandbox daemon at ${$} did not respond on /health within ${NU6*wU6/1000}s`)}async function Mg1($,X,Y,G){return of8($,X,"POST",Y,G)}async function of8($,X,Y,G,Q){let J={...G};if(Q&&Q.rotateToken!==void 0)J.auth=Q;let Z=await fetch(`${$}/_sandbox/config`,{method:Y,headers:{"Content-Type":"application/json",Authorization:`Bearer ${X}`},body:JSON.stringify(J),signal:AbortSignal.timeout(tf8)}),W=await Z.text();if(!Z.ok)throw Error(`sandbox daemon /_sandbox/config returned ${Z.status}: ${W}`);return JSON.parse(W)}async function Ig1($,X,Y,G){let Q=new Headers(G.headers);for(let W of sf8)Q.delete(W);Q.set("authorization",`Bearer ${X}`);let J=G.method!=="GET"&&G.method!=="HEAD",Z=`${$}${Y.startsWith("/")?Y:`/${Y}`}`;return fetch(Z,{method:G.method,headers:Q,body:J?G.body:void 0,redirect:"manual",signal:G.signal,duplex:J?"half":void 0})}var rf8=500,tf8=1e4,NU6=25,wU6=200,af8=50,sf8;var DU6=D(()=>{BU6();sf8=["cookie","host","connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","accept-encoding","content-length"]});async function*EU6($){let X=$.now??(()=>Date.now()),Y=X(),G=$.schedulingTimeoutMs??Xy8,Q={pod:{},sandbox:{},events:{hasPulling:!1,hasPulled:!1},startedAt:Y},J=[],Z=null,W=!1,K=(P)=>{if(W)return;if(Z){let T=Z;Z=null,T(P)}else J.push(P)},F=()=>{if(J.length>0)return Promise.resolve(J.shift());if(W)return Promise.resolve(null);return new Promise((P)=>{Z=P})},U=()=>{if(W)return;if(W=!0,Z){let P=Z;Z=null,P(null)}},B=new AbortController,N=()=>{B.abort(),U()};if($.signal)if($.signal.aborted)B.abort(),U();else $.signal.addEventListener("abort",N,{once:!0});let w=Math.max(0,G-(X()-Y)),z=setTimeout(()=>K("tick"),w+100),O,L=new Promise((P)=>{O=P}),j=Promise.allSettled([Yy8($.kc,$.namespace,$.claimName,B.signal,Q,K,X,O),Qy8($.kc,$.namespace,$.claimName,B.signal,Q,K),Jy8($.kc,$.namespace,$.claimName,L,B.signal,Q,K,X)]);try{let P=null,T=-1,I=OU6(Q,G,X);if(P=G20(I),!Y20(I))T=LU6(I);if(yield I,Y20(I))return;while(!W){if(await F()===null)break;let R=OU6(Q,G,X);if(Y20(R)){let _=G20(R);if(_!==P)P=_,yield R;return}let v=LU6(R);if(v<T)continue;let S=G20(R);if(S!==P)P=S,T=v,yield R}}finally{if(clearTimeout(z),B.abort(),$.signal)$.signal.removeEventListener("abort",N);U(),await j.catch(()=>{})}}function OU6($,X,Y){let{pod:G,sandbox:Q,events:J,startedAt:Z}=$;if(Q.ready)return{kind:"ready"};let W=G.containerWaitingReason;if(W==="ImagePullBackOff"||W==="ErrImagePull")return{kind:"failed",reason:"image-pull-backoff",message:"Sandbox image failed to download. The cluster may be missing pull credentials or the image tag may not exist."};if(W==="CrashLoopBackOff")return{kind:"failed",reason:"crash-loop-backoff",message:"Sandbox crashed during startup and is now in CrashLoopBackOff. Check pod logs."};if(!G.scheduled&&J.lastFailedSchedulingAt!==void 0&&Y()-Z>X)return{kind:"failed",reason:"scheduling-timeout",message:J.failedSchedulingMessage??`Pod could not be scheduled within ${Math.round(X/1000)}s.`};if(G.containerRunning&&!G.containerReady)return{kind:"warming-daemon",since:Z};if(J.hasPulling&&!J.hasPulled)return{kind:"pulling-image",since:Z};if(W==="ContainerCreating"||W==="PodInitializing"||G.scheduled&&!G.containerRunning)return{kind:"starting-container",since:Z};if(G.scheduledFalseReason==="Unschedulable"||J.lastFailedSchedulingAt!==void 0&&!G.scheduled)return{kind:"waiting-for-capacity",since:Z,message:J.failedSchedulingMessage??G.scheduledFalseMessage,nodeClaim:J.nominatedNodeClaim};return{kind:"claiming",since:Z}}function Y20($){return $.kind==="ready"||$.kind==="failed"}function LU6($){switch($.kind){case"claiming":return 0;case"waiting-for-capacity":return 1;case"pulling-image":return 2;case"starting-container":return 3;case"warming-daemon":return 4;case"ready":case"failed":return 99}}function G20($){switch($.kind){case"claiming":case"pulling-image":case"starting-container":case"warming-daemon":return $.kind;case"waiting-for-capacity":return`waiting-for-capacity:${$.message??""}:${$.nodeClaim??""}`;case"ready":return"ready";case"failed":return`failed:${$.reason}:${$.message}`}}async function Yy8($,X,Y,G,Q,J,Z,W){let K=`/api/v1/namespaces/${encodeURIComponent(X)}/pods?watch=true&labelSelector=${encodeURIComponent(`${ef8}=${Y}`)}`;return Q20({kc:$,path:K,signal:G,label:`pod/${Y}`,onEvent:(F)=>{if(F.type!=="ADDED"&&F.type!=="MODIFIED")return;let U=F.object;if(U.metadata?.name)W(U.metadata.name);Gy8(U,Q,Z),J("pod")}})}function Gy8($,X,Y){let Q=($.status?.conditions??[]).find((Z)=>Z.type==="PodScheduled");if(Q?.status==="True")X.pod.scheduled=!0,X.pod.scheduledFalseReason=void 0,X.pod.scheduledFalseMessage=void 0;else if(Q?.status==="False")X.pod.scheduled=!1,X.pod.scheduledFalseReason=Q.reason,X.pod.scheduledFalseMessage=Q.message;let J=($.status?.containerStatuses??[]).find((Z)=>Z.name===$y8);if(J)X.pod.containerWaitingReason=J.state?.waiting?.reason,X.pod.containerRunning=!!J.state?.running,X.pod.containerReady=J.ready===!0}async function Qy8($,X,Y,G,Q,J){let Z=`/apis/${a7.CLAIM_API_GROUP}/${a7.CLAIM_API_VERSION}/namespaces/${encodeURIComponent(X)}/${a7.CLAIM_PLURAL}?watch=true&fieldSelector=${encodeURIComponent(`metadata.name=${Y}`)}`;return Q20({kc:$,path:Z,signal:G,label:`sandboxclaim/${Y}`,onEvent:(W)=>{if(W.type!=="ADDED"&&W.type!=="MODIFIED")return;let F=W.object.status?.conditions?.find((U)=>U.type==="Ready");if(!F)return;if(F.status==="True")Q.sandbox.ready=!0,Q.sandbox.notReadyReason=void 0,Q.sandbox.notReadyMessage=void 0;else Q.sandbox.ready=!1,Q.sandbox.notReadyReason=F.reason,Q.sandbox.notReadyMessage=F.message;J("sandbox")}})}async function Jy8($,X,Y,G,Q,J,Z,W){let K=await Promise.race([G,new Promise((U)=>{if(Q.aborted){U(Y);return}Q.addEventListener("abort",()=>U(Y),{once:!0})})]);if(Q.aborted)return;let F=`/api/v1/namespaces/${encodeURIComponent(X)}/events?watch=true&fieldSelector=${encodeURIComponent(`involvedObject.name=${K},involvedObject.kind=Pod`)}`;return Q20({kc:$,path:F,signal:Q,label:`events/${Y}`,onEvent:(U)=>{if(U.type!=="ADDED"&&U.type!=="MODIFIED")return;let B=U.object,N=B.reason;if(!N)return;switch(N){case"Pulling":J.events.hasPulling=!0;break;case"Pulled":J.events.hasPulling=!0,J.events.hasPulled=!0;break;case"FailedScheduling":J.events.lastFailedSchedulingAt=W(),J.events.failedSchedulingMessage=B.message;break;case"Nominated":{let w=B.message?.match(/nodeclaim\/([\w-]+)/);if(w)J.events.nominatedNodeClaim=w[1];break}default:return}Z("event")}})}async function Q20($){let{kc:X,path:Y,signal:G,label:Q,onEvent:J}=$,Z=0;while(!G.aborted){try{let K=await fh(X,{method:"GET",path:Y,signal:G,headers:{accept:"application/json"}});if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}throw Error(`watch handshake failed: ${K.status} ${K.statusText}`)}Z=0;for await(let F of X20(K.body)){if(G.aborted)return;try{J(F)}catch(U){console.warn(`[lifecycle-watcher] ${Q} onEvent threw: ${U instanceof Error?U.message:String(U)}`)}}}catch(K){if(G.aborted)return;let F=K instanceof Error?K.message:String(K);console.warn(`[lifecycle-watcher] ${Q} watch ended: ${F}`)}if(G.aborted)return;let W=SF(5000,250,Z,2,0);Z+=1,await J7(W,{signal:G}).catch(()=>{})}}var ef8="studio.decocms.com/sandbox-handle",$y8="sandbox",Xy8=300000;var jU6=D(()=>{kF();B71();Tg1()});import{createHash as Zy8,randomBytes as Wy8,randomUUID as Ky8}from"crypto";import*as TU6 from"net";import{PassThrough as Hy8}from"stream";class F20{kind=x3;records=new Map;inflight=new s21;stateStore;previewUrlPattern;kubeConfig;portForward;namespace;sandboxTemplateName;envName;tokenGenerator;idleTtlMs;metrics;previewGateway;sentinelToken;closed=!1;constructor($={}){this.stateStore=$.stateStore??null,this.previewUrlPattern=$.previewUrlPattern??null,this.kubeConfig=$.kubeConfig??Ey8(),this.portForward=new vA0(this.kubeConfig),this.namespace=$.namespace??Fy8,this.sandboxTemplateName=$.sandboxTemplateName??Uy8,this.envName=Vy8($.envName),this.tokenGenerator=$.tokenGenerator??(()=>Wy8(Ny8).toString("hex")),this.idleTtlMs=$.idleTtlMs??zy8,this.metrics=$.meter?Ly8($.meter):null,this.previewGateway=$.previewGateway&&$.previewUrlPattern?{...$.previewGateway}:null;let X=$.sentinelToken?.trim()??"";this.sentinelToken=X.length>0?X:null}async ensure($,X={}){let Y=zP($,X.repo?.branch??null);return this.inflight.run(Y,()=>sP0(this.stateStore,$,x3,(G)=>this.ensureLocked($,Y,X,G)))}async delete($){let X=await this.getRecord($);if(this.records.delete($),X)this.closeForwarder(X.daemonForward),this.metrics?.active.add(-1,K20(X.tenant));if(await this.deleteHttpRouteIfManaged($).catch((Y)=>{console.warn(`[${rQ}] HTTPRoute delete failed for ${$}: ${Y instanceof Error?Y.message:String(Y)}`)}),await RP(this.kubeConfig,this.namespace,$),this.stateStore)if(X)await this.stateStore.delete(X.id,x3);else await this.stateStore.deleteByHandle(x3,$)}async alive($){return await SP(this.kubeConfig,this.namespace,$)!==void 0}watchClaimLifecycle($,X){return EU6({kc:this.kubeConfig,namespace:this.namespace,claimName:$,signal:X})}async getPreviewUrl($){let X=await this.getRecord($);if(!X)return null;return this.composePreviewUrl(X)}async proxyDaemonRequest($,X,Y){let G=await this.getRecord($);if(!G&&this.previewUrlPattern&&this.stateStore){let W=await this.stateStore.getByHandle(x3,$),K=W?.state,F=K?.token;if(W&&F){let B=`http://${K?.adoptedSandboxName??$}.${this.namespace}.svc.cluster.local:${kP}`;return Ig1(B,F,X,Y)}}if(!G)G=await this.resurrectByHandle($);if(!G)return new Response(JSON.stringify({error:"sandbox not found"}),{status:404,headers:{"content-type":"application/json"}});let Q=G,J=performance.now(),Z=0;try{let W=await Ig1(G.daemonUrl,G.token,X,Y);if(W.status===401&&!(Y.body instanceof ReadableStream)){this.invalidateRecord($);let K=await this.getRecord($).catch(()=>null);if(K)Q=K,W=await Ig1(K.daemonUrl,K.token,X,Y)}return Z=W.status,W}finally{this.recordProxyDuration("daemon",Z,Q,performance.now()-J)}}async resolvePreviewUpstreamUrl($){if(this.previewUrlPattern)return`http://${await this.resolveServiceNameForHandle($)}.${this.namespace}.svc.cluster.local:${kP}`;let X=await this.getRecord($);if(X)return X.daemonUrl;let Y=await this.resurrectByHandle($);return Y?Y.daemonUrl:null}async resolveServiceNameForHandle($){let X=this.records.get($);if(X)return X.adoptedSandboxName;if(this.stateStore){let G=(await this.stateStore.getByHandle(x3,$).catch(()=>null))?.state?.adoptedSandboxName;if(G)return G}return $}async proxyPreviewRequest($,X){let Y=performance.now(),G=this.records.get($)??null,Q=0;try{let J=await this.resolvePreviewUpstreamUrl($);if(!J){Q=404;let z=Z20(404,{error:"sandbox not found"});return z.headers.set(yh,"1"),z}let Z=new URL(X.url);if((Z.pathname==="/_sandbox"||Z.pathname.startsWith("/_sandbox/")||Z.pathname==="/_decopilot_vm"||Z.pathname.startsWith("/_decopilot_vm/"))&&X.method!=="GET")return Q=404,Z20(404,{error:"not found"});let K=(z)=>`${z}${Z.pathname}${Z.search}`,F=new Headers(X.headers);for(let z of Dy8)F.delete(z);let U=X.method!=="GET"&&X.method!=="HEAD",B={method:X.method,headers:F,body:U?X.body:void 0,redirect:"manual",signal:X.signal,duplex:U?"half":void 0},N;try{N=await fetch(K(J),B)}catch(z){let O=`${J}${Z.pathname}`;if(console.warn(`[${rQ}] preview fetch to ${O} failed: ${z instanceof Error?z.message:String(z)}`),X.method==="GET"||X.method==="HEAD"){if(this.invalidateRecord($),await this.resurrectByHandle($).catch(()=>null)){let P=await this.resolvePreviewUpstreamUrl($);if(P)try{N=await fetch(K(P),B);let T=new Headers;for(let[I,V]of N.headers.entries())if(!PU6.includes(I.toLowerCase()))T.set(I,V);return Q=N.status,new Response(N.body,{status:N.status,statusText:N.statusText,headers:T})}catch(T){console.warn(`[${rQ}] preview fetch retry to ${O} failed: ${T instanceof Error?T.message:String(T)}`)}}}else this.invalidateRecord($);Q=502;let L=Z20(502,{error:"sandbox daemon unreachable"});return L.headers.set(yh,"1"),L}let w=new Headers;for(let[z,O]of N.headers.entries())if(!PU6.includes(z.toLowerCase()))w.set(z,O);return Q=N.status,new Response(N.body,{status:N.status,statusText:N.statusText,headers:w})}finally{this.recordProxyDuration("preview",Q,G,performance.now()-Y,$)}}async ensureLocked($,X,Y,G){if(Y.image)console.warn(`[${rQ}] opts.image ignored (template ${this.sandboxTemplateName} pins image): got ${Y.image}`);if(G){let Z=await G.get($,x3);if(Z){let W=await this.rehydrate($,X,Z);if(W)return this.finish(W,G,!1,!0,"resume");await G.delete($,x3)}}let Q=await SP(this.kubeConfig,this.namespace,X).catch(()=>{return});if(Q)if(Q.metadata?.deletionTimestamp)await jg1(this.kubeConfig,this.namespace,X).catch((Z)=>{console.warn(`[${rQ}] wait for terminating claim ${X} failed: ${Z instanceof Error?Z.message:String(Z)}`)});else{let Z=await this.adopt($,X,Q).catch((W)=>{return console.warn(`[${rQ}] adopt ${X} failed, recreating: ${W instanceof Error?W.message:String(W)}`),null});if(Z)return this.finish(Z,G,!0,!0,"adopt");await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),await jg1(this.kubeConfig,this.namespace,X).catch((W)=>{console.warn(`[${rQ}] wait for deleted claim ${X} failed: ${W instanceof Error?W.message:String(W)}`)})}let J=await this.provision($,X,Y);return this.finish(J,G,!0,!1,"fresh")}async finish($,X,Y,G,Q){let J=this.records.has($.handle);if(this.records.set($.handle,$),Y)await this.persist(X,$);if(G)await QU6(this.kubeConfig,this.namespace,$.handle,this.computeShutdownTime()).catch((Z)=>console.warn(`[${rQ}] TTL refresh failed for ${$.handle}: ${Z instanceof Error?Z.message:String(Z)}`));if(this.metrics){let Z=K20($.tenant);if(this.metrics.ensureOutcome.add(1,{...Z,outcome:Q}),!J)this.metrics.active.add(1,Z)}return this.toSandbox($)}buildEnvMap($,X){let Y={},G=[];for(let[Q,J]of Object.entries($.env??{}))if(wy8.has(Q))G.push(Q);else Y[Q]=J;if(G.length>0)console.warn(`[${rQ}] opts.env keys overlap reserved bootstrap names and were dropped: ${G.join(",")}`);return{...Y,DAEMON_TOKEN:X.token,DAEMON_BOOT_ID:X.daemonBootId,APP_ROOT:X.workdir,PROXY_PORT:String(kP)}}buildClaim($,X,Y){let G=this.sentinelToken!==null,Q=G?[]:Object.entries(this.buildEnvMap(X,Y)).sort(([J],[Z])=>J<Z?-1:J>Z?1:0).map(([J,Z])=>({name:J,value:Z}));return{apiVersion:`${a7.CLAIM_API_GROUP}/${a7.CLAIM_API_VERSION}`,kind:"SandboxClaim",metadata:{name:$,namespace:this.namespace,labels:{"app.kubernetes.io/name":"studio-sandbox","app.kubernetes.io/managed-by":"studio",...this.envName?{[ZU.env]:this.envName}:{},...W20(X.tenant)}},spec:{sandboxTemplateRef:{name:this.sandboxTemplateName},additionalPodMetadata:{labels:W20(X.tenant,{[ZU.role]:"claimed",[ZU.sandboxHandle]:$,...this.envName?{[ZU.env]:this.envName}:{}})},env:Q,warmpool:G?"default":"none",lifecycle:{shutdownPolicy:"Delete",shutdownTime:this.computeShutdownTime()}}}}async provision($,X,Y){let G=this.tokenGenerator(),Q=Ky8(),J=J20,Z=this.buildClaim(X,Y,{token:G,daemonBootId:Q,workdir:J});try{await w71(this.kubeConfig,this.namespace,Z)}catch(N){if(N instanceof U71)await jg1(this.kubeConfig,this.namespace,X),await w71(this.kubeConfig,this.namespace,Z);else throw N}let W;try{W=await JU6(this.kubeConfig,this.namespace,X),await Ag1(this.kubeConfig,this.namespace,W)}catch(N){throw await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),N}try{await this.ensureServicePortForAdoptedSandbox(W),await this.ensureHttpRouteForHandle(X,W,Y.tenant??null)}catch(N){throw await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),N}let K=await this.openForwarder(W,kP,X),F=`http://127.0.0.1:${K.localPort}`,U=this.workloadConfigPayload(Y),B=Q;try{if(await zU6(F),this.sentinelToken!==null){let N=await Vg1(F);if(N)B=N.bootId;await Mg1(F,this.sentinelToken,U??{},{rotateToken:G})}else if(U)await Mg1(F,G,U)}catch(N){throw this.closeForwarder(K),await this.deleteHttpRouteIfManaged(X).catch(()=>{}),await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),N}return{id:$,handle:X,adoptedSandboxName:W,token:G,workdir:J,daemonUrl:F,daemonForward:K,workload:Y.workload??null,daemonBootId:B,tenant:Y.tenant??null,ensureOpts:Iy8(Y)}}workloadConfigPayload($){return eP0({runtime:$?.workload?.runtime??"node",packageManager:$?.workload?.packageManager?{name:$.workload.packageManager,...$.workload.packageManagerPath?{path:$.workload.packageManagerPath}:{}}:null,repo:$?.repo??null,port:$?.workload?.devPort??By8})}async rebootstrapDaemon($,X,Y){if(this.sentinelToken===null)return!1;try{return await Mg1($,this.sentinelToken,this.workloadConfigPayload(Y)??{},{rotateToken:X}),!0}catch(G){return console.warn(`[${rQ}] re-bootstrap failed: ${G instanceof Error?G.message:String(G)}`),!1}}async ensureServicePortForAdoptedSandbox($){if(!this.previewGateway||!this.previewUrlPattern)return;await UU6(this.kubeConfig,this.namespace,$,{name:"daemon",port:kP,targetPort:kP})}async ensureHttpRouteForHandle($,X,Y){if(!this.previewGateway||!this.previewUrlPattern)return;let G=Ry8(this.previewUrlPattern,$);if(!G)throw new mY(`Unable to derive preview hostname for ${$} from pattern: ${this.previewUrlPattern}`);let Q={apiVersion:`${z71.API_GROUP}/${z71.API_VERSION}`,kind:"HTTPRoute",metadata:{name:$,namespace:this.namespace,labels:W20(Y??void 0,{[ZU.role]:"claimed",[ZU.sandboxHandle]:$,"app.kubernetes.io/name":"studio-sandbox","app.kubernetes.io/managed-by":"studio",...this.envName?{[ZU.env]:this.envName}:{}})},spec:{parentRefs:[{kind:"Gateway",group:"gateway.networking.k8s.io",name:this.previewGateway.name,namespace:this.previewGateway.namespace}],hostnames:[G],rules:[{backendRefs:[{group:"",kind:"Service",name:X,port:kP}]}]}};await Pg1(this.kubeConfig,this.namespace,Q)}async deleteHttpRouteIfManaged($){if(!this.previewGateway)return;await qg1(this.kubeConfig,this.namespace,$)}async rehydrate($,X,Y){let G=Y.state;if(!G.adoptedSandboxName&&!G.podName||!G.token)return null;let Q=await SP(this.kubeConfig,this.namespace,X).catch(()=>{return});if(!Q||!qU6(Q))return null;let J=Q.status?.sandbox?.name??G.adoptedSandboxName??G.podName??X,Z=await this.openAndProbeDaemon(J,X);if(!Z)return null;if(G.daemonBootId&&G.daemonBootId!==Z.bootId){if(this.sentinelToken!==null){if(!await this.rebootstrapDaemon(Z.daemonUrl,G.token,G.ensureOpts??null))return this.closeForwarder(Z.daemonForward),null}else console.warn(`[${rQ}] daemon restart detected (handle=${X}): stored bootId=${G.daemonBootId} live bootId=${Z.bootId}`);await this.stateStore?.put($,x3,{handle:X,state:{...G,daemonBootId:Z.bootId}}).catch((W)=>console.warn(`[${rQ}] bootId persist failed for ${X}: ${W instanceof Error?W.message:String(W)}`))}return{id:$,handle:X,adoptedSandboxName:J,token:G.token,workdir:G.workdir??J20,daemonUrl:Z.daemonUrl,daemonForward:Z.daemonForward,workload:G.workload??null,daemonBootId:Z.bootId,tenant:G.tenant??null,ensureOpts:G.ensureOpts??null}}async adopt($,X,Y){if(!qU6(Y))return null;let G=Y.status?.sandbox?.name??X;if(this.sentinelToken!==null)return null;let Q=jy8(Y);if(!Q)return null;let J=await this.openAndProbeDaemon(G,X);if(!J)return null;let Z=My8(Y);if(this.previewGateway)await this.ensureServicePortForAdoptedSandbox(G).catch((W)=>{console.warn(`[${rQ}] Service port backfill failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}),await this.ensureHttpRouteForHandle(X,G,Z).catch((W)=>{console.warn(`[${rQ}] HTTPRoute backfill failed for ${X}: ${W instanceof Error?W.message:String(W)}`)});return{id:$,handle:X,adoptedSandboxName:G,token:Q,workdir:J20,daemonUrl:J.daemonUrl,daemonForward:J.daemonForward,workload:null,daemonBootId:J.bootId,tenant:Z,ensureOpts:null}}async openAndProbeDaemon($,X){let Y=await this.openForwarder($,kP,X).catch(()=>null);if(!Y)return null;let G=`http://127.0.0.1:${Y.localPort}`,Q=await Vg1(G);if(!Q)return this.closeForwarder(Y),null;return{daemonForward:Y,daemonUrl:G,bootId:Q.bootId}}async getRecord($){let X=this.records.get($);if(X)return X;if(!this.stateStore)return null;let Y=await this.stateStore.getByHandle(x3,$);if(!Y)return null;let G=await this.rehydrate(Y.id,$,Y);if(G)this.records.set($,G);return G}async resurrectByHandle($){if(!this.stateStore)return null;let X=await this.stateStore.getByHandle(x3,$);if(!X)return null;let Y=X.state.ensureOpts;if(!Y)return null;return await this.ensure(X.id,Y),this.records.get($)??null}invalidateRecord($){let X=this.records.get($);if(!X)return;this.records.delete($),this.closeForwarder(X.daemonForward)}recordProxyDuration($,X,Y,G,Q){if(!this.metrics)return;this.metrics.proxyDurationMs.record(G,{...K20(Y?.tenant??null),source:$,sandbox_handle:Y?.handle??Q??"",status_code:X||0})}composePreviewUrl($){if(this.previewUrlPattern)return e21(this.previewUrlPattern,$.handle);return`http://127.0.0.1:${$.daemonForward.localPort}/`}toSandbox($){return{handle:$.handle,workdir:$.workdir,previewUrl:this.composePreviewUrl($)}}async persist($,X){if(!$)return;let Y={adoptedSandboxName:X.adoptedSandboxName,token:X.token,workdir:X.workdir,workload:X.workload,daemonBootId:X.daemonBootId,tenant:X.tenant,...X.ensureOpts?{ensureOpts:X.ensureOpts}:{}};await $.put(X.id,x3,{handle:X.handle,state:Y})}computeShutdownTime(){return new Date(Date.now()+this.idleTtlMs).toISOString()}openForwarder($,X,Y=$){let G=Py8(Y,X);return new Promise((Q,J)=>{let Z=(W,K)=>{let F=TU6.createServer((U)=>this.handleForwardedConnection(U,$,X,Y));F.once("error",(U)=>{if(U.code==="EADDRINUSE"&&K<Oy8){try{F.close()}catch{}let B=H20+(W-H20+1)%VU6;Z(B,K+1);return}J(U)}),F.listen(W,"127.0.0.1",()=>{let U=F.address();if(!U||typeof U==="string"){F.close(),J(Error("port-forward listener failed to bind"));return}Q({server:F,localPort:U.port})})};Z(G,0)})}handleForwardedConnection($,X,Y,G){let Q=new Hy8,J=null,Z=!1,W=()=>{if(Z)return;if(Z=!0,Q.destroy(),J)try{J.close()}catch{}if(!$.destroyed)$.destroy()};$.pipe(Q),$.on("error",W),$.on("close",W),this.portForward.portForward(this.namespace,X,[Y],$,null,Q).then((K)=>{let F=typeof K==="function"?K():K;if(!F){W();return}if(J=F,J.on("close",W),J.on("error",()=>{this.invalidateRecord(G),W()}),Z)try{J.close()}catch{}}).catch((K)=>{console.warn(`[${rQ}] port-forward to ${X}:${Y} failed: ${K instanceof Error?K.message:String(K)}`),this.invalidateRecord(G),W()})}closeForwarder($){$.server.close((X)=>{if(X)console.warn(`[${rQ}] port-forward close on :${$.localPort} errored: ${X instanceof Error?X.message:String(X)}`)})}close(){if(this.closed)return;this.closed=!0;for(let $ of this.records.values())this.closeForwarder($.daemonForward);this.records.clear()}}function Ly8($){return{active:$.createUpDownCounter("studio.sandbox.active",{description:"Active sandbox count, by runner kind and owning org. Cross-checks the cAdvisor-derived count from the cluster \u2014 divergence between the two indicates orphaned claims (mesh deleted but K8s didn't reap) or unattributed pods.",unit:"{sandbox}"}),ensureOutcome:$.createCounter("studio.sandbox.ensure.outcome",{description:"Outcome of each ensure() call: fresh provision, resume from state-store after restart, or adopt of a cluster-side claim mesh didn't know about. Cold-start ratio is the primary input for warm-pool sizing.",unit:"{call}"}),proxyDurationMs:$.createHistogram("studio.sandbox.proxy.duration_ms",{description:"Wall-clock latency of mesh-mediated requests to the sandbox daemon: tool exec proxies (source=daemon) and preview iframe traffic (source=preview).",unit:"ms"})}}function Ey8(){let $=new Ft;return $.loadFromDefault(),$}function qU6($){return Boolean($.status?.conditions?.some((X)=>X.type==="Ready"&&X.status==="True"))}function jy8($){let X=$.spec?.env;if(!X)return null;for(let Y of X)if(Y.name==="DAEMON_TOKEN"&&Y.value)return Y.value;return null}function Py8($,X){let Y=Zy8("sha256").update(`${$}:${X}`).digest();return H20+Y.readUInt32BE(0)%VU6}function Z20($,X){return new Response(JSON.stringify(X),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function AU6($){let X=$.slice(0,Ay8);return qy8.test(X)?X:""}function Vy8($){if($===void 0)return null;let X=$.trim();if(X==="")return null;if(!Ty8.test(X))throw Error(`AgentSandboxProvider: envName=${JSON.stringify(X)} is not a valid DNS-label-safe environment name (lowercase alphanumeric or '-', starts with a letter, ends alphanumeric, \u226432 chars). Mesh sets this from STUDIO_ENV; check the studio chart's configMap.`);return X}function W20($,X={}){let Y={...X};if($){let G=AU6($.orgId),Q=AU6($.userId);if(G)Y[ZU.orgId]=G;if(Q)Y[ZU.userId]=Q}return Y}function My8($){let X=$.metadata?.labels;if(!X)return null;let Y=X[ZU.orgId],G=X[ZU.userId];if(!Y||!G)return null;return{orgId:Y,userId:G}}function K20($){return{org_id:$?.orgId??"",user_id:$?.userId??"",runner_kind:x3}}function Iy8($){let X={};if($.repo)X.repo=$.repo;if($.workload)X.workload=$.workload;if($.env&&Object.keys($.env).length>0)X.env=$.env;if($.tenant)X.tenant=$.tenant;return Object.keys(X).length>0?X:null}function Ry8($,X){try{return new URL(e21($,X)).hostname||null}catch{return null}}var x3="cluster",rQ="AgentSandboxProvider",yh="x-sandbox-preview-not-ready",Fy8="agent-sandbox-system",Uy8="studio-sandbox",kP=9000,By8=3000,J20="/app",Ny8=32,wy8,zy8=900000,Dy8,PU6,H20=40000,VU6=1e4,Oy8=256,ZU,qy8,Ay8=63,Ty8;var MU6=D(()=>{rA0();DU6();$T1();Tg1();B71();jU6();wy8=new Set(["DAEMON_TOKEN","DAEMON_BOOT_ID","APP_ROOT","PROXY_PORT"]),Dy8=["cookie","host","connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","accept-encoding","content-length","upgrade"],PU6=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];ZU={role:"studio.decocms.com/role",sandboxHandle:"studio.decocms.com/sandbox-handle",orgId:"studio.decocms.com/org-id",userId:"studio.decocms.com/user-id",env:"studio.decocms.com/env"},qy8=/^([A-Za-z0-9]([-A-Za-z0-9_.]*[A-Za-z0-9])?)?$/;Ty8=/^[a-z]([a-z0-9-]{0,30}[a-z0-9])?$/});var IU6={};g6(IU6,{waitForSandboxReady:()=>Ag1,getSandboxClaim:()=>SP,getHttpRoute:()=>FU6,deleteSandboxClaim:()=>RP,deleteHttpRoute:()=>qg1,createSandboxClaim:()=>w71,createHttpRoute:()=>Pg1,SandboxTimeoutError:()=>bh,SandboxError:()=>mY,PREVIEW_NOT_READY_HEADER:()=>yh,KubeConfig:()=>Ft,K8S_CONSTANTS:()=>a7,HTTPROUTE_CONSTANTS:()=>z71,AgentSandboxProvider:()=>F20});var U20=D(()=>{rA0();B71();Tg1();MU6()});class Rg1{kind=CP;userSub;dispatch;stateStore;records=new Map;constructor($){if(!$.userSub)throw Error("DesktopSandboxProvider requires userSub");if(!$.dispatch)throw Error("DesktopSandboxProvider requires dispatch");this.userSub=$.userSub,this.dispatch=$.dispatch,this.stateStore=$.stateStore??null}async ensure($,X={}){let Y=zP($,X.repo?.branch),G=this.records.get(Y);if(G){if(await this.probeHealth(Y))return this.toSandbox(G);if(this.records.delete(Y),this.stateStore)await this.stateStore.deleteByHandle(CP,Y).catch(()=>{})}else if(this.stateStore){let U=(await this.stateStore.getByHandle(CP,Y))?.state,B=U?.sandboxApiUrl;if(B){if(await this.probeHealth(Y)){let N={handle:Y,sandboxApiUrl:B,previewUrl:U?.previewUrl??B};return this.records.set(Y,N),this.toSandbox(N)}await this.stateStore.deleteByHandle(CP,Y).catch(()=>{})}}let Q=JSON.stringify({handle:Y,repo:X.repo,branch:X.repo?.branch,...X.workload?{workload:X.workload}:{},...X.offloadAllowedHosts?{offloadAllowedHosts:X.offloadAllowedHosts}:{},...X.offloadAllowSameHostDev!==void 0?{offloadAllowSameHostDev:X.offloadAllowSameHostDev}:{}}),J=await this.dispatchJson("POST","/api/sandboxes",Q),Z=JSON.parse(J);if(typeof Z.sandboxApiUrl!=="string")throw Error("desktop ensure: daemon did not return a sandboxApiUrl string");let W=typeof Z.previewUrl==="string"?Z.previewUrl:Z.sandboxApiUrl,K={handle:Y,sandboxApiUrl:Z.sandboxApiUrl,previewUrl:W};if(this.records.set(Y,K),this.stateStore)await this.stateStore.put($,CP,{handle:Y,state:{handle:Y,sandboxApiUrl:Z.sandboxApiUrl,previewUrl:W}});return this.toSandbox(K)}async proxyDaemonRequest($,X,Y){let G=X.startsWith("/")?X:`/${X}`,Q=G.startsWith("/_sandbox/")?G.slice(9):G,J=`/_sandbox/${encodeURIComponent($)}${Q}`,Z=new Headers(Y.headers);for(let j of["host","cookie","connection","keep-alive","transfer-encoding","upgrade","authorization"])Z.delete(j);let W={};Z.forEach((j,P)=>{W[P]=j});let K;if(Y.body!=null)K=await Sy8(Y.body);let U=this.dispatch(this.userSub,{method:Y.method,path:J,headers:W,body:K},{signal:Y.signal})[Symbol.asyncIterator](),B=200,N={"content-type":"application/octet-stream"},w=[];try{while(!0){let j=await U.next();if(j.done)break;let P=j.value;if(P.headers){B=P.headers.status,N=P.headers.headers;break}if(P.data!=null)w.push(P.data)}}catch(j){let P=j instanceof Error?j.message:"dispatch error";return new Response(JSON.stringify({error:P}),{status:502,headers:{"content-type":"application/json"}})}let z=!1,O=new TextEncoder,L=new ReadableStream({async start(j){for(let P of w)j.enqueue(O.encode(P))},async pull(j){try{let P=await U.next();if(z)return;if(P.done){j.close();return}let T=P.value;if(T.data!=null)j.enqueue(O.encode(T.data))}catch(P){if(!z)j.error(P)}},cancel(){z=!0,U.return?.()}});return new Response(L,{status:B,headers:N})}async alive($){return this.probeHealth($)}async probeHealth($){let X=new AbortController,Y=setTimeout(()=>X.abort(),1500);try{return await this.dispatchJson("GET",`/api/sandboxes/${encodeURIComponent($)}`,void 0,X.signal),!0}catch{return!1}finally{clearTimeout(Y)}}async forgetHandle($){if(this.records.delete($),this.stateStore)await this.stateStore.deleteByHandle(CP,$).catch(()=>{})}async delete($){if(this.records.delete($),this.stateStore)await this.stateStore.deleteByHandle(CP,$).catch(()=>{});try{await this.dispatchJson("DELETE",`/api/sandboxes/${encodeURIComponent($)}`)}catch(X){if(!(X instanceof Error?X.message:String(X)).includes("404"))throw X}}async getPreviewUrl($){return(await this.resolveRecord($))?.previewUrl??null}async localWorkdir($){return null}async*watchClaimLifecycle($,X){yield{kind:"ready"}}toSandbox($){return{handle:$.handle,workdir:$.sandboxApiUrl,previewUrl:$.previewUrl}}async resolveRecord($){let X=this.records.get($);if(X)return X;if(!this.stateStore)return null;let G=(await this.stateStore.getByHandle(CP,$))?.state,Q=G?.sandboxApiUrl;if(!Q)return null;let J={handle:$,sandboxApiUrl:Q,previewUrl:G?.previewUrl??Q};return this.records.set($,J),J}async dispatchJson($,X,Y,G){let Q={accept:"application/json"};if(Y!==void 0)Q["content-type"]="application/json";let J=this.dispatch(this.userSub,{method:$,path:X,headers:Q,body:Y},{signal:G}),Z=null,W="";for await(let K of J)if(K.headers)Z=K.headers.status;else if(K.data!=null)W+=K.data;if(Z!=null&&(Z<200||Z>=300))throw Error(`daemon returned ${Z}: ${W}`);return W}}function RU6($){return new Rg1($)}async function Sy8($){if(typeof $==="string")return $;if($ instanceof ArrayBuffer)return Buffer.from($).toString("utf8");if(ArrayBuffer.isView($))return Buffer.from($.buffer,$.byteOffset,$.byteLength).toString("utf8");if($ instanceof URLSearchParams)return $.toString();return await new Response($).text()}var CP="user-desktop";var SU6=D(()=>{$T1()});var kU6={};g6(kU6,{createDesktopProvider:()=>RU6,DesktopSandboxProvider:()=>Rg1});var CU6=D(()=>{SU6()});var xU6={};g6(xU6,{subscribeLifecycle:()=>O71,getSandboxProviderByKind:()=>D71,getOrInitSharedRunner:()=>xy8,buildDesktopProvider:()=>zt,__resetSharedLifecyclesForTesting:()=>ly8});function fU6($,X){let Y=vU6[$];if(Y)return Promise.resolve(Y);let G=B20[$];if(G)return G;let Q=X().then((J)=>{return vU6[$]=J,J}).finally(()=>{delete B20[$]});return B20[$]=Q,Q}function vy8(){let $=process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN;return $&&$.trim()!==""?$:void 0}function _y8(){let $=process.env.STUDIO_SANDBOX_TEMPLATE_NAME;return $&&$.trim()!==""?$:void 0}function by8(){let $=process.env.STUDIO_ENV;return $&&$.trim()!==""?$:void 0}function fy8(){let $=process.env.STUDIO_SANDBOX_SENTINEL_TOKEN;return $&&$.trim()!==""?$:void 0}function yy8(){let $=process.env.STUDIO_SANDBOX_PREVIEW_GATEWAY_NAME?.trim(),X=process.env.STUDIO_SANDBOX_PREVIEW_GATEWAY_NAMESPACE?.trim();if(!$&&!X)return;if(!$||!X)throw Error("STUDIO_SANDBOX_PREVIEW_GATEWAY_NAME and STUDIO_SANDBOX_PREVIEW_GATEWAY_NAMESPACE must both be set, or both unset. Half-configured per-claim HTTPRoute routing would silently fail to attach.");return{name:$,namespace:X}}async function yU6($,X){let Y=new OP(X),G=vy8();switch($){case"cluster":{let{AgentSandboxProvider:Q}=await Promise.resolve().then(() => (U20(),IU6));return new Q({stateStore:Y,previewUrlPattern:G,sandboxTemplateName:_y8(),envName:by8(),previewGateway:yy8(),sentinelToken:fy8(),meter:CW})}case"user-desktop":throw Error("user-desktop runner cannot be instantiated without a per-run link claim \u2014 call resolveSandboxProvider, which binds the link before constructing the provider.");default:throw Error(`Unknown runner kind: ${String($)}`)}}async function zt($,X){let{DesktopSandboxProvider:Y}=await Promise.resolve().then(() => (CU6(),kU6)),{getDispatch:G}=await Promise.resolve().then(() => (w20(),N20)),Q=new OP($.db);if(!X)throw Error("buildDesktopProvider: userSub must be a non-empty string");return new Y({userSub:X,dispatch:G(),stateStore:Q})}function D71($,X){return fU6(X,()=>yU6(X,$.db))}async function xy8(){let $;try{$=DN()}catch(Y){return console.warn("[lifecycle] cannot resolve sandbox runner:",Y instanceof Error?Y.message:String(Y)),null}return await fU6($,()=>yU6($,q5().db))}function O71($,X,Y){let G=vP.get(X);if(G){if(G.terminated){if(G.lastPhase)try{Y(G.lastPhase)}catch{}return{unsubscribe:uy8}}if(G.listeners.add(Y),G.lastPhase)try{Y(G.lastPhase)}catch{}return _U6(X,G,Y)}let Q=new AbortController,J={lastPhase:null,terminated:!1,listeners:new Set([Y]),abort:Q};return vP.set(X,J),my8($,X,J),_U6(X,J,Y)}function uy8(){}function _U6($,X,Y){return{unsubscribe(){if(vP.get($)!==X)return;if(X.listeners.delete(Y),X.listeners.size===0)vP.delete($),X.abort.abort()}}}async function my8($,X,Y){let G=null;try{for await(let Q of $.watchClaimLifecycle(X,Y.abort.signal)){if(Y.abort.signal.aborted)break;Y.lastPhase=Q;let J=Q.kind==="ready"||Q.kind==="failed";if(J)Y.terminated=!0;let Z=Array.from(Y.listeners);for(let W of Z)try{W(Q)}catch{}if(J)break}}catch(Q){G=Q}finally{if(!Y.terminated&&!Y.abort.signal.aborted&&Y.listeners.size>0){let Q={kind:"failed",reason:"unknown",message:G instanceof Error?G.message:"Lifecycle watcher ended unexpectedly"};Y.lastPhase=Q,Y.terminated=!0;for(let J of Array.from(Y.listeners))try{J(Q)}catch{}}if(vP.get(X)===Y)vP.delete(X)}}function ly8(){for(let $ of vP.values())$.abort.abort();vP.clear()}var ky8,Cy8,bU6,vU6,B20,gy8,hy8,vP;var xh=D(()=>{ID();CB();ZZ();QT1();ky8=Symbol.for("decocms.sandbox.lifecycle.runners"),Cy8=Symbol.for("decocms.sandbox.lifecycle.inflight"),bU6=globalThis,vU6=bU6[ky8]??={},B20=bU6[Cy8]??={};gy8=Symbol.for("decocms.sandbox.lifecycle.shared-lifecycles"),hy8=globalThis,vP=hy8[gy8]??=new Map});async function Sg1($,X){if(await X.linkClaimRegistry.get($))return"user-desktop";return X.resolveEnvKind()}async function fD($,X){let{userId:Y,branch:G,virtualMcpMetadata:Q,explicitKind:J}=X;if(J)return{provider:await kg1($,Y,J),kind:J};if($.sandboxPreference==="user-desktop"&&$.linkForCurrentRun)return{provider:await zt($,Y),kind:"user-desktop"};if($.sandboxPreference==="cluster-default"){let U=DN();return{provider:await kg1($,Y,U),kind:U}}let[Z,...W]=cy8(Q,Y,G);if(Z){let U=W.length===0?Z:await dy8($,Y,Z,W);return{provider:await kg1($,Y,U),kind:U}}let K=await gU6($,Y);return{provider:await kg1($,Y,K),kind:K}}function cy8($,X,Y){let G=ZH($)[X]?.[Y];if(!G)return[];let Q=kw(G);return Object.keys(Q)}async function dy8($,X,Y,G){let Q=await gU6($,X);if(Q===Y||G.includes(Q))return Q;return Y}async function gU6($,X){if(!$.linkClaimRegistry)return DN();return Sg1(X,{linkClaimRegistry:$.linkClaimRegistry,resolveEnvKind:DN})}async function kg1($,X,Y){if(Y!=="user-desktop")return D71($,Y);if(!$.linkClaimRegistry)throw Error("user-desktop sandbox provider requires ctx.linkClaimRegistry to be wired (set on MeshContextConfig).");if(!await $.linkClaimRegistry.get(X))throw Error(`No link daemon registered for user "${X}". Start one with \`deco link\` (or run \`bun run dev --local-sandbox-provider\` for dev).`);return zt($,X)}var L71=D(()=>{b$();ID();RD();xh()});async function hU6($,X){if(!$)return{hosts:[],allowSameHostDev:!1};let Y;try{Y=await $.presignedGetUrl("link-dispatch/_allowlist_probe",60,{requireFetchable:!0})}catch{return{hosts:[],allowSameHostDev:!1}}let G;try{G=new URL(Y)}catch{return{hosts:[],allowSameHostDev:!1}}if(G.protocol!=="https:"&&G.protocol!=="http:")return{hosts:[],allowSameHostDev:!1};let Q=G.hostname,J=iy8.has(Q);return{hosts:[Q],allowSameHostDev:J&&!X.isProduction}}var iy8;var uU6=D(()=>{iy8=new Set(["127.0.0.1","localhost","::1","[::1]","0.0.0.0"])});async function Cg1($,X){G0(X);let Y=r1(X),G=K6(X);if(!G)throw Error("User ID required");let Q=await X.storage.virtualMcps.findById($.virtualMcpId);if(!Q||Q.organization_id!==Y.id)throw Error("Virtual MCP not found");let J=Q.metadata??{},Z=DP(ZH(J),G,$.branch,$.sandboxProviderKind),W=$.sandboxProviderKind,{provider:K}=await fD(X,{userId:G,branch:$.branch,virtualMcpMetadata:J,explicitKind:W});if(Z){if(W!=="user-desktop")return Z;if(await K.alive(Z.sandboxHandle).catch(()=>!1))return Z;await er(X.storage.virtualMcps,$.virtualMcpId,G,G,$.branch,W).catch((N)=>{console.warn("[ensureSandbox] failed to reap stale user-desktop entry",N)})}let F=J.githubRepo??null,{entry:U}=await mU6({ctx:X,userId:G,orgId:Y.id,virtualMcpId:$.virtualMcpId,branch:$.branch,metadata:J,githubRepo:F,existing:null,providerKind:W,runner:K});return U}async function mU6($){let{ctx:X,userId:Y,orgId:G,virtualMcpId:Q,branch:J,metadata:Z,githubRepo:W,existing:K,runner:F}=$,{runtime:U,packageManager:B,port:N,packageManagerPath:w}=OJ6(Z),z;if(W){let{cloneUrl:f,gitUserName:l,gitUserEmail:d}=W.connectionId?await EJ6(W.connectionId,W.owner,W.name,X.db,X.vault):LJ6(W.owner,W.name);if(!B){let b=W.connectionId?await AJ6(W.connectionId,W.owner,W.name,X.db,X.vault):await TJ6(W.owner,W.name);if(b)B=b.packageManager,U=pY1[b.packageManager].runtime,N=b.devPort??N,await py8(X,Q,Y,b.packageManager,b.devPort)}z={cloneUrl:f,userName:l,userEmail:d,branch:J,displayName:`${W.owner}/${W.name}`}}let O=U&&B?{runtime:U,packageManager:B,...N!==null?{devPort:Number(N)}:{},...w?{packageManagerPath:w}:{}}:void 0,L=ZM({orgId:G,virtualMcpId:Q,branch:J}),j=F.kind==="user-desktop"?await hU6(X.objectStorage,{isProduction:_4().nodeEnv==="production"}):null,P=await F.ensure({userId:Y,projectRef:L},{repo:z,workload:O,tenant:{orgId:G,userId:Y},...j?{offloadAllowedHosts:j.hosts,offloadAllowSameHostDev:j.allowSameHostDev}:{}}),T=Z.runtime?.env??null;await GT1({ctx:X,runner:F,handle:P.handle,orgId:G,userId:Y,entries:T});let V=!!K&&K.sandboxHandle===P.handle&&K?.createdAt?K.createdAt:Date.now(),R=Z.runtime?.selected??null,v=Z.runtime?.port??null,S=Z.runtime?.path??null,_={sandboxHandle:P.handle,previewUrl:P.previewUrl,sandboxApiUrl:P.previewUrl,sandboxProviderKind:F.kind,createdAt:V,startedWith:{packageManager:R,port:v,path:S}};await zJ6(X.storage.virtualMcps,Q,Y,Y,J,$.providerKind,_);let y=!K||K.sandboxHandle!==P.handle;return{entry:_,isNewVm:y}}async function py8($,X,Y,G,Q){let J=await $.storage.virtualMcps.findById(X);if(!J)return;let Z=J.metadata??{};await $.storage.virtualMcps.update(X,Y,{metadata:{...Z,runtime:{selected:G,port:Q}}})}var z20;var vg1=D(()=>{d1();ID();k0();YT1();Xq0();RD();jJ6();MJ6();PE0();$q0();L71();uU6();F5();RD();z20=f1({name:"SANDBOX_START",description:"Start a sandbox with the connected GitHub repo and dev server.",annotations:{title:"Start VM Preview",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:H.object({virtualMcpId:H.string().describe("Virtual MCP ID"),branch:H.string().min(1).optional().describe("Optional git branch to check out. When omitted the handler generates `deco/<adjective>-<noun>` and uses it. The resolved branch is returned in the response so callers can persist it."),sandboxProviderKind:H.enum(["cluster","user-desktop"]).optional().describe("Explicit runtime choice. When omitted, defaults to `user-desktop` if the acting user's link daemon is online, else the cluster env kind.")}),outputSchema:H.object({previewUrl:H.string().nullable(),sandboxHandle:H.string(),branch:H.string(),isNewVm:H.boolean(),sandboxProviderKind:H.enum(["cluster","user-desktop"])}),handler:async($,X)=>{G0(X);let Y=$.branch??tA1(),G=K6(X);if(!G)throw Error("User ID required");let{provider:Q,kind:J}=await fD(X,{userId:G,branch:Y,virtualMcpMetadata:null,explicitKind:$.sandboxProviderKind}),{metadata:Z,userId:W,organization:K,entry:F}=await XT1({virtualMcpId:$.virtualMcpId,branch:Y,sandboxProviderKind:J},X),U=Z.githubRepo??null,{entry:B,isNewVm:N}=await mU6({ctx:X,userId:W,orgId:K.id,virtualMcpId:$.virtualMcpId,branch:Y,metadata:Z,githubRepo:U,existing:F,providerKind:J,runner:Q});return{...B,branch:Y,isNewVm:N,sandboxProviderKind:J}}})});var D20;var lU6=D(()=>{d1();k0();YT1();xh();RD();D20=f1({name:"SANDBOX_DELETE",description:"Delete a sandbox.",annotations:{title:"Delete VM Preview",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:H.object({virtualMcpId:H.string().describe("Virtual MCP ID that owns this VM"),branch:H.string().min(1).describe("Branch whose vm should be deleted (sandboxMap[userId][branch])"),sandboxProviderKind:H.enum(["cluster","user-desktop"]).describe("Kind of sandbox provider the VM was started with. Used to locate the correct 3-level sandboxMap entry.")}),outputSchema:H.object({success:H.boolean()}),handler:async($,X)=>{let Y=$.sandboxProviderKind,G;try{G=await XT1($,X)}catch(W){if(W instanceof Error&&W.message==="Virtual MCP not found")return{success:!0};throw W}let{entry:Q,userId:J}=G;if(!Q)return{success:!0};return await er(X.storage.virtualMcps,$.virtualMcpId,J,J,$.branch,Y),await(await D71(X,Y)).delete(Q.sandboxHandle).catch((W)=>console.error(`[SANDBOX_DELETE] ${Y} ${Q.sandboxHandle}: ${W instanceof Error?W.message:String(W)}`)),{success:!0}}})});var cU6=D(()=>{vg1();lU6()});var ry8="https://api.github.com",O20;var dU6=D(()=>{d1();k0();DP1();XP();O20=f1({name:"GITHUB_LIST_USER_ORGS",description:"List GitHub App installations (orgs/accounts) accessible to the authenticated user.",annotations:{title:"List GitHub User Orgs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:H.object({connectionId:H.string().describe("ID of the mcp-github connection to use")}),outputSchema:H.object({installations:H.array(H.object({installationId:H.number(),login:H.string(),avatarUrl:H.string(),type:H.string()})),appSlug:H.string().optional()}),handler:async($,X)=>{await X.access.check();let Y=new dG(X.db,X.vault),G=await Y.get($.connectionId);if(!G)throw Error("No GitHub token found. Ensure the mcp-github connection is authenticated.");let Q=G.accessToken;if(A91(G)&&Y.isExpired(G,zP1)){let U=await T91(G,Y);if(!U)throw Error(eT);Q=U,G=await Y.get($.connectionId)??G}let J=[],Z,W=1,K=100,F=async(U)=>fetch(`${ry8}/user/installations?per_page=${K}&page=${W}`,{headers:{Authorization:`Bearer ${U}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"}});while(!0){let U=await F(Q);if(U.status===401){let N=await Y.get($.connectionId);if(!N||!A91(N))throw Error(eT);let w=await T91(N,Y);if(!w)throw Error(eT);if(Q=w,U=await F(Q),U.status===401)throw Error(eT)}if(!U.ok)throw Error(`GitHub /user/installations failed: ${U.status}`);let B=await U.json();for(let N of B.installations){if(!Z)Z=N.app_slug??N.app?.slug;J.push({installationId:N.id,login:N.account.login,avatarUrl:N.account.avatar_url,type:N.account.type})}if(B.installations.length<K)break;W++}return{installations:J,...Z?{appSlug:Z}:{}}}})});var iU6=D(()=>{dU6()});var L20,pU6,nU6,ay8,oy8,siY;var E20=D(()=>{d1();L20=H.enum(["claude-code","codex","decopilot-sandbox","body-offload"]),pU6=H.array(H.string()).catch([]).transform(($)=>$.filter((X)=>L20.safeParse(X).success)),nU6=H.discriminatedUnion("type",[H.object({type:H.literal("ui-message-chunk"),chunk:H.unknown()}),H.object({type:H.literal("error"),code:H.string(),message:H.string()}),H.object({type:H.literal("done")})]),ay8=H.record(H.string(),H.unknown()),oy8=H.object({credentialId:H.string(),thinking:H.object({id:H.string(),title:H.string(),provider:H.string().optional()}),coding:H.object({id:H.string(),title:H.string()}).optional(),fast:H.object({id:H.string(),title:H.string()}).optional(),image:H.object({id:H.string(),title:H.string()}).optional(),deepResearch:H.object({id:H.string(),title:H.string()}).optional()}),siY=H.object({threadId:H.string(),runId:H.string(),taskId:H.string(),resumeSessionRef:H.string().optional(),messages:H.array(ay8),models:oy8,mcp:H.object({url:H.string().url(),headers:H.record(H.string(),H.string()),expiresAt:H.number().int().positive()}),mode:H.string(),temperature:H.number(),toolApprovalLevel:H.string(),user:H.object({id:H.string(),email:H.string()}),organizationId:H.string(),organizationSlug:H.string().optional(),virtualMcp:H.record(H.string(),H.unknown()),agent:H.object({id:H.string()}),branch:H.string().nullable().optional(),triggerId:H.string().optional(),currentThreadTitle:H.string().optional(),traceparent:H.string().optional()}).strip()});var rU6=()=>{};var j20=D(()=>{rU6();E20()});var P20;var tU6=D(()=>{d1();j20();k0();P20=f1({name:"LINK_CURRENT_GET",description:"Return the calling user's currently registered desktop link, or `online: false` if no link is registered or the TTL has expired.",inputSchema:s1.object({}),outputSchema:s1.object({online:s1.boolean(),machineId:s1.string().optional(),hostname:s1.string().optional(),cliVersion:s1.string().optional(),capabilities:s1.array(L20).default([])}),handler:async($,X)=>{G0(X),await X.access.check();let Y=X.linkClaimRegistry;if(!Y)return{online:!1,capabilities:[]};let G=await Y.get(X.auth.user.id);if(!G)return{online:!1,capabilities:[]};return{online:!0,machineId:G.machineId,hostname:G.hostname,cliVersion:G.cliVersion,capabilities:G.capabilities}}})});var aU6=D(()=>{tU6()});function oU6($){if(!$)return"";return typeof $==="string"?$:$.toISOString()}var $x8,Xx8,Yx8,Gx8,Qx8,q20;var sU6=D(()=>{d1();k0();$x8=["thread"],Xx8=H.object({type:H.literal("thread"),id:H.string(),title:H.string(),created_at:H.string(),updated_at:H.string(),virtual_mcp_id:H.string().nullable(),run_config:H.record(H.string(),H.unknown()).nullable(),status:H.string().nullable()}),Yx8=H.discriminatedUnion("type",[Xx8]),Gx8=H.object({query:H.string().min(1).describe("Free-text search query."),limit:H.number().int().min(1).max(50).optional().describe("Maximum results per resource type (default: 20)."),types:H.array(H.enum($x8)).optional().describe("Restrict the search to specific resource types. Omit to search across all available types.")}),Qx8=H.object({items:H.array(Yx8),totalCount:H.number()});q20=f1({name:"GLOBAL_SEARCH",description:"Search across organization resources by free-text query. Returns a typed union of matches (currently: threads). New resource types may be added over time without changes to the call shape.",annotations:{title:"Global Search",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Gx8,outputSchema:Qx8,handler:async($,X)=>{await X.access.check(),r1(X);let Y=$.limit??20,G=$.types?.length?new Set($.types):null,Q=!G||G.has("thread"),J=[],Z=0;if(Q){let{threads:W,total:K}=await X.storage.threads.list(void 0,{limit:Y,offset:0,search:$.query,includeArchived:!1});Z+=K;for(let F of W)J.push({type:"thread",id:F.id,title:F.title??"",created_at:oU6(F.created_at),updated_at:oU6(F.updated_at),virtual_mcp_id:F.virtual_mcp_id??null,run_config:F.run_config??null,status:F.status??null})}return{items:J,totalCount:Z}}})});var eU6=D(()=>{sU6()});var dA1={};g6(dA1,{managementMCP:()=>gr,listManagementTools:()=>Kx8,ALL_TOOLS:()=>$B6});async function Kx8($){let X=await gr($),[Y,G]=h81.createLinkedPair();await X.connect(G);let Q=new AY({name:"tools-hydration",version:"1.0.0"});try{return await Q.connect(Y),(await Q.listTools()).tools}finally{await Q.close().catch(()=>{})}}var Zx8,Wx8,$B6,gr=async($)=>{let X=null;if($.organization){let Z=await $.storage.organizationSettings.get($.organization.id),W=await $.storage.virtualMcps.list($.organization.id),K=new Set(Z?.enabled_plugins??[]);for(let F of W){let U=F.metadata?.enabled_plugins;if(U&&Array.isArray(U))for(let B of U)K.add(B)}X=K.size>0?[...K]:null}let Y=Fm4($B6,X),G=new vw({name:"mcp-cms-management",version:"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}}});for(let Z of Y){let W=Z.inputSchema&&typeof Z.inputSchema==="object"&&"shape"in Z.inputSchema?Z.inputSchema:H.object({}),K=Z.outputSchema&&typeof Z.outputSchema==="object"&&"shape"in Z.outputSchema?Z.outputSchema:void 0,F=W.shape,U=K?.shape;G.registerTool(Z.name,{description:Z.description??"",inputSchema:F,outputSchema:U,annotations:Z.annotations,_meta:Z._meta},async(B)=>{$.access.setToolName(Z.name);try{let N=await Z.execute(B,$);return{content:[{type:"text",text:Z.modelSummary?Z.modelSummary(N):JSON.stringify(N)}],structuredContent:N}}catch(N){return{content:[{type:"text",text:`Error: ${N.message}`}],isError:!0}}})}let Q=j21();for(let Z of Q){let W=Z.arguments?.length?Object.fromEntries(Z.arguments.map((K)=>{let F=K.required?H.string():H.string().optional();return[K.name,K.description?F.describe(K.description):F]})):void 0;G.registerPrompt(Z.name,{title:Z.title,description:Z.description,...W?{argsSchema:W}:{}},(K)=>{return{messages:[{role:"user",content:{type:"text",text:typeof Z.text==="function"?Z.text(K??{}):Z.text}}]}})}if($.organization?.id){let Z=await $.storage.brandContext.list($.organization.id),W=new Set;for(let K of Z){let F=K.name.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-|-$/g,""),U=F?`brand-${F}`:`brand-${K.id}`;if(W.has(U))U=`${U}-${K.id.slice(0,8)}`;W.add(U);let B=[`# Brand: ${K.name}`,"",`**Domain:** ${K.domain}`,"","## Overview",K.overview];if(K.colors){let w=Object.entries(K.colors).filter(([,z])=>z);if(w.length>0){B.push("","## Colors");for(let[z,O]of w)B.push(`- **${z}:** ${O}`)}}if(K.fonts){let w=Object.entries(K.fonts).filter(([,z])=>z);if(w.length>0){B.push("","## Fonts");for(let[z,O]of w)B.push(`- ${O} (${z})`)}}if(K.logo)B.push("",`**Logo:** ${K.logo}`);if(K.favicon)B.push(`**Favicon:** ${K.favicon}`);if(K.ogImage)B.push(`**OG Image:** ${K.ogImage}`);if(K.images&&K.images.length>0){B.push("","## Images");for(let w of K.images){let z=Object.entries(w).map(([O,L])=>`${O}: ${L}`).join(", ");B.push(`- ${z}`)}}let N=B.join(`
+`))>=0){let K=G.slice(0,W).trim();if(G=G.slice(W+1),!K)continue;yield JSON.parse(K)}}let Q=G.trim();if(Q)yield JSON.parse(Q)}finally{X.releaseLock()}}var aA0,GU6,ZU6="gateway.networking.k8s.io",WU6="v1",$20="httproutes",KU6,z71,nf8="mesh-sandbox-runner";var Tg1=D(()=>{B71();aA0=class aA0 extends Error{status;body;constructor($,X,Y){super(Y);this.status=$;this.body=X;this.name="KubeHttpError"}};GU6=`/apis/${a7.CLAIM_API_GROUP}/${a7.CLAIM_API_VERSION}/namespaces`;KU6=`/apis/${ZU6}/${WU6}/namespaces`;z71={API_GROUP:ZU6,API_VERSION:WU6,PLURAL:$20}});var BU6=D(()=>{kF()});async function Vg1($){try{let X=await fetch(`${$}/health`,{signal:AbortSignal.timeout(rf8)});if(!X.ok)return null;let Y=await X.json();if(typeof Y==="object"&&Y!==null&&typeof Y.bootId==="string"&&typeof Y.ready==="boolean"&&Y.setup&&typeof Y.setup.running==="boolean"&&typeof Y.setup.done==="boolean")return Y;return null}catch{return null}}async function zU6($){for(let X=0;X<NU6;X++){if(await Vg1($)!==null)return;let Y=(Math.random()*2-1)*af8;await J7(wU6+Y)}throw Error(`sandbox daemon at ${$} did not respond on /health within ${NU6*wU6/1000}s`)}async function Mg1($,X,Y,G){return of8($,X,"POST",Y,G)}async function of8($,X,Y,G,Q){let J={...G};if(Q&&Q.rotateToken!==void 0)J.auth=Q;let Z=await fetch(`${$}/_sandbox/config`,{method:Y,headers:{"Content-Type":"application/json",Authorization:`Bearer ${X}`},body:JSON.stringify(J),signal:AbortSignal.timeout(tf8)}),W=await Z.text();if(!Z.ok)throw Error(`sandbox daemon /_sandbox/config returned ${Z.status}: ${W}`);return JSON.parse(W)}async function Ig1($,X,Y,G){let Q=new Headers(G.headers);for(let W of sf8)Q.delete(W);Q.set("authorization",`Bearer ${X}`);let J=G.method!=="GET"&&G.method!=="HEAD",Z=`${$}${Y.startsWith("/")?Y:`/${Y}`}`;return fetch(Z,{method:G.method,headers:Q,body:J?G.body:void 0,redirect:"manual",signal:G.signal,duplex:J?"half":void 0})}var rf8=500,tf8=1e4,NU6=25,wU6=200,af8=50,sf8;var DU6=D(()=>{BU6();sf8=["cookie","host","connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","accept-encoding","content-length"]});async function*EU6($){let X=$.now??(()=>Date.now()),Y=X(),G=$.schedulingTimeoutMs??Xy8,Q={pod:{},sandbox:{},events:{hasPulling:!1,hasPulled:!1},startedAt:Y},J=[],Z=null,W=!1,K=(P)=>{if(W)return;if(Z){let T=Z;Z=null,T(P)}else J.push(P)},F=()=>{if(J.length>0)return Promise.resolve(J.shift());if(W)return Promise.resolve(null);return new Promise((P)=>{Z=P})},U=()=>{if(W)return;if(W=!0,Z){let P=Z;Z=null,P(null)}},B=new AbortController,N=()=>{B.abort(),U()};if($.signal)if($.signal.aborted)B.abort(),U();else $.signal.addEventListener("abort",N,{once:!0});let w=Math.max(0,G-(X()-Y)),z=setTimeout(()=>K("tick"),w+100),O,L=new Promise((P)=>{O=P}),j=Promise.allSettled([Yy8($.kc,$.namespace,$.claimName,B.signal,Q,K,X,O),Qy8($.kc,$.namespace,$.claimName,B.signal,Q,K),Jy8($.kc,$.namespace,$.claimName,L,B.signal,Q,K,X)]);try{let P=null,T=-1,I=OU6(Q,G,X);if(P=G20(I),!Y20(I))T=LU6(I);if(yield I,Y20(I))return;while(!W){if(await F()===null)break;let R=OU6(Q,G,X);if(Y20(R)){let _=G20(R);if(_!==P)P=_,yield R;return}let v=LU6(R);if(v<T)continue;let S=G20(R);if(S!==P)P=S,T=v,yield R}}finally{if(clearTimeout(z),B.abort(),$.signal)$.signal.removeEventListener("abort",N);U(),await j.catch(()=>{})}}function OU6($,X,Y){let{pod:G,sandbox:Q,events:J,startedAt:Z}=$;if(Q.ready)return{kind:"ready"};let W=G.containerWaitingReason;if(W==="ImagePullBackOff"||W==="ErrImagePull")return{kind:"failed",reason:"image-pull-backoff",message:"Sandbox image failed to download. The cluster may be missing pull credentials or the image tag may not exist."};if(W==="CrashLoopBackOff")return{kind:"failed",reason:"crash-loop-backoff",message:"Sandbox crashed during startup and is now in CrashLoopBackOff. Check pod logs."};if(!G.scheduled&&J.lastFailedSchedulingAt!==void 0&&Y()-Z>X)return{kind:"failed",reason:"scheduling-timeout",message:J.failedSchedulingMessage??`Pod could not be scheduled within ${Math.round(X/1000)}s.`};if(G.containerRunning&&!G.containerReady)return{kind:"warming-daemon",since:Z};if(J.hasPulling&&!J.hasPulled)return{kind:"pulling-image",since:Z};if(W==="ContainerCreating"||W==="PodInitializing"||G.scheduled&&!G.containerRunning)return{kind:"starting-container",since:Z};if(G.scheduledFalseReason==="Unschedulable"||J.lastFailedSchedulingAt!==void 0&&!G.scheduled)return{kind:"waiting-for-capacity",since:Z,message:J.failedSchedulingMessage??G.scheduledFalseMessage,nodeClaim:J.nominatedNodeClaim};return{kind:"claiming",since:Z}}function Y20($){return $.kind==="ready"||$.kind==="failed"}function LU6($){switch($.kind){case"claiming":return 0;case"waiting-for-capacity":return 1;case"pulling-image":return 2;case"starting-container":return 3;case"warming-daemon":return 4;case"ready":case"failed":return 99}}function G20($){switch($.kind){case"claiming":case"pulling-image":case"starting-container":case"warming-daemon":return $.kind;case"waiting-for-capacity":return`waiting-for-capacity:${$.message??""}:${$.nodeClaim??""}`;case"ready":return"ready";case"failed":return`failed:${$.reason}:${$.message}`}}async function Yy8($,X,Y,G,Q,J,Z,W){let K=`/api/v1/namespaces/${encodeURIComponent(X)}/pods?watch=true&labelSelector=${encodeURIComponent(`${ef8}=${Y}`)}`;return Q20({kc:$,path:K,signal:G,label:`pod/${Y}`,onEvent:(F)=>{if(F.type!=="ADDED"&&F.type!=="MODIFIED")return;let U=F.object;if(U.metadata?.name)W(U.metadata.name);Gy8(U,Q,Z),J("pod")}})}function Gy8($,X,Y){let Q=($.status?.conditions??[]).find((Z)=>Z.type==="PodScheduled");if(Q?.status==="True")X.pod.scheduled=!0,X.pod.scheduledFalseReason=void 0,X.pod.scheduledFalseMessage=void 0;else if(Q?.status==="False")X.pod.scheduled=!1,X.pod.scheduledFalseReason=Q.reason,X.pod.scheduledFalseMessage=Q.message;let J=($.status?.containerStatuses??[]).find((Z)=>Z.name===$y8);if(J)X.pod.containerWaitingReason=J.state?.waiting?.reason,X.pod.containerRunning=!!J.state?.running,X.pod.containerReady=J.ready===!0}async function Qy8($,X,Y,G,Q,J){let Z=`/apis/${a7.CLAIM_API_GROUP}/${a7.CLAIM_API_VERSION}/namespaces/${encodeURIComponent(X)}/${a7.CLAIM_PLURAL}?watch=true&fieldSelector=${encodeURIComponent(`metadata.name=${Y}`)}`;return Q20({kc:$,path:Z,signal:G,label:`sandboxclaim/${Y}`,onEvent:(W)=>{if(W.type!=="ADDED"&&W.type!=="MODIFIED")return;let F=W.object.status?.conditions?.find((U)=>U.type==="Ready");if(!F)return;if(F.status==="True")Q.sandbox.ready=!0,Q.sandbox.notReadyReason=void 0,Q.sandbox.notReadyMessage=void 0;else Q.sandbox.ready=!1,Q.sandbox.notReadyReason=F.reason,Q.sandbox.notReadyMessage=F.message;J("sandbox")}})}async function Jy8($,X,Y,G,Q,J,Z,W){let K=await Promise.race([G,new Promise((U)=>{if(Q.aborted){U(Y);return}Q.addEventListener("abort",()=>U(Y),{once:!0})})]);if(Q.aborted)return;let F=`/api/v1/namespaces/${encodeURIComponent(X)}/events?watch=true&fieldSelector=${encodeURIComponent(`involvedObject.name=${K},involvedObject.kind=Pod`)}`;return Q20({kc:$,path:F,signal:Q,label:`events/${Y}`,onEvent:(U)=>{if(U.type!=="ADDED"&&U.type!=="MODIFIED")return;let B=U.object,N=B.reason;if(!N)return;switch(N){case"Pulling":J.events.hasPulling=!0;break;case"Pulled":J.events.hasPulling=!0,J.events.hasPulled=!0;break;case"FailedScheduling":J.events.lastFailedSchedulingAt=W(),J.events.failedSchedulingMessage=B.message;break;case"Nominated":{let w=B.message?.match(/nodeclaim\/([\w-]+)/);if(w)J.events.nominatedNodeClaim=w[1];break}default:return}Z("event")}})}async function Q20($){let{kc:X,path:Y,signal:G,label:Q,onEvent:J}=$,Z=0;while(!G.aborted){try{let K=await fh(X,{method:"GET",path:Y,signal:G,headers:{accept:"application/json"}});if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}throw Error(`watch handshake failed: ${K.status} ${K.statusText}`)}Z=0;for await(let F of X20(K.body)){if(G.aborted)return;try{J(F)}catch(U){console.warn(`[lifecycle-watcher] ${Q} onEvent threw: ${U instanceof Error?U.message:String(U)}`)}}}catch(K){if(G.aborted)return;let F=K instanceof Error?K.message:String(K);console.warn(`[lifecycle-watcher] ${Q} watch ended: ${F}`)}if(G.aborted)return;let W=SF(5000,250,Z,2,0);Z+=1,await J7(W,{signal:G}).catch(()=>{})}}var ef8="studio.decocms.com/sandbox-handle",$y8="sandbox",Xy8=300000;var jU6=D(()=>{kF();B71();Tg1()});import{createHash as Zy8,randomBytes as Wy8,randomUUID as Ky8}from"crypto";import*as TU6 from"net";import{PassThrough as Hy8}from"stream";class F20{kind=x3;records=new Map;inflight=new s21;stateStore;previewUrlPattern;kubeConfig;portForward;namespace;sandboxTemplateName;envName;tokenGenerator;idleTtlMs;metrics;previewGateway;sentinelToken;closed=!1;constructor($={}){this.stateStore=$.stateStore??null,this.previewUrlPattern=$.previewUrlPattern??null,this.kubeConfig=$.kubeConfig??Ey8(),this.portForward=new vA0(this.kubeConfig),this.namespace=$.namespace??Fy8,this.sandboxTemplateName=$.sandboxTemplateName??Uy8,this.envName=Vy8($.envName),this.tokenGenerator=$.tokenGenerator??(()=>Wy8(Ny8).toString("hex")),this.idleTtlMs=$.idleTtlMs??zy8,this.metrics=$.meter?Ly8($.meter):null,this.previewGateway=$.previewGateway&&$.previewUrlPattern?{...$.previewGateway}:null;let X=$.sentinelToken?.trim()??"";this.sentinelToken=X.length>0?X:null}async ensure($,X={}){let Y=zP($,X.branch??X.repo?.branch??null);return this.inflight.run(Y,()=>sP0(this.stateStore,$,x3,(G)=>this.ensureLocked($,Y,X,G)))}async delete($){let X=await this.getRecord($);if(this.records.delete($),X)this.closeForwarder(X.daemonForward),this.metrics?.active.add(-1,K20(X.tenant));if(await this.deleteHttpRouteIfManaged($).catch((Y)=>{console.warn(`[${rQ}] HTTPRoute delete failed for ${$}: ${Y instanceof Error?Y.message:String(Y)}`)}),await RP(this.kubeConfig,this.namespace,$),this.stateStore)if(X)await this.stateStore.delete(X.id,x3);else await this.stateStore.deleteByHandle(x3,$)}async alive($){return await SP(this.kubeConfig,this.namespace,$)!==void 0}watchClaimLifecycle($,X){return EU6({kc:this.kubeConfig,namespace:this.namespace,claimName:$,signal:X})}async getPreviewUrl($){let X=await this.getRecord($);if(!X)return null;return this.composePreviewUrl(X)}async proxyDaemonRequest($,X,Y){let G=await this.getRecord($);if(!G&&this.previewUrlPattern&&this.stateStore){let W=await this.stateStore.getByHandle(x3,$),K=W?.state,F=K?.token;if(W&&F){let B=`http://${K?.adoptedSandboxName??$}.${this.namespace}.svc.cluster.local:${kP}`;return Ig1(B,F,X,Y)}}if(!G)G=await this.resurrectByHandle($);if(!G)return new Response(JSON.stringify({error:"sandbox not found"}),{status:404,headers:{"content-type":"application/json"}});let Q=G,J=performance.now(),Z=0;try{let W=await Ig1(G.daemonUrl,G.token,X,Y);if(W.status===401&&!(Y.body instanceof ReadableStream)){this.invalidateRecord($);let K=await this.getRecord($).catch(()=>null);if(K)Q=K,W=await Ig1(K.daemonUrl,K.token,X,Y)}return Z=W.status,W}finally{this.recordProxyDuration("daemon",Z,Q,performance.now()-J)}}async resolvePreviewUpstreamUrl($){if(this.previewUrlPattern)return`http://${await this.resolveServiceNameForHandle($)}.${this.namespace}.svc.cluster.local:${kP}`;let X=await this.getRecord($);if(X)return X.daemonUrl;let Y=await this.resurrectByHandle($);return Y?Y.daemonUrl:null}async resolveServiceNameForHandle($){let X=this.records.get($);if(X)return X.adoptedSandboxName;if(this.stateStore){let G=(await this.stateStore.getByHandle(x3,$).catch(()=>null))?.state?.adoptedSandboxName;if(G)return G}return $}async proxyPreviewRequest($,X){let Y=performance.now(),G=this.records.get($)??null,Q=0;try{let J=await this.resolvePreviewUpstreamUrl($);if(!J){Q=404;let z=Z20(404,{error:"sandbox not found"});return z.headers.set(yh,"1"),z}let Z=new URL(X.url);if((Z.pathname==="/_sandbox"||Z.pathname.startsWith("/_sandbox/")||Z.pathname==="/_decopilot_vm"||Z.pathname.startsWith("/_decopilot_vm/"))&&X.method!=="GET")return Q=404,Z20(404,{error:"not found"});let K=(z)=>`${z}${Z.pathname}${Z.search}`,F=new Headers(X.headers);for(let z of Dy8)F.delete(z);let U=X.method!=="GET"&&X.method!=="HEAD",B={method:X.method,headers:F,body:U?X.body:void 0,redirect:"manual",signal:X.signal,duplex:U?"half":void 0},N;try{N=await fetch(K(J),B)}catch(z){let O=`${J}${Z.pathname}`;if(console.warn(`[${rQ}] preview fetch to ${O} failed: ${z instanceof Error?z.message:String(z)}`),X.method==="GET"||X.method==="HEAD"){if(this.invalidateRecord($),await this.resurrectByHandle($).catch(()=>null)){let P=await this.resolvePreviewUpstreamUrl($);if(P)try{N=await fetch(K(P),B);let T=new Headers;for(let[I,V]of N.headers.entries())if(!PU6.includes(I.toLowerCase()))T.set(I,V);return Q=N.status,new Response(N.body,{status:N.status,statusText:N.statusText,headers:T})}catch(T){console.warn(`[${rQ}] preview fetch retry to ${O} failed: ${T instanceof Error?T.message:String(T)}`)}}}else this.invalidateRecord($);Q=502;let L=Z20(502,{error:"sandbox daemon unreachable"});return L.headers.set(yh,"1"),L}let w=new Headers;for(let[z,O]of N.headers.entries())if(!PU6.includes(z.toLowerCase()))w.set(z,O);return Q=N.status,new Response(N.body,{status:N.status,statusText:N.statusText,headers:w})}finally{this.recordProxyDuration("preview",Q,G,performance.now()-Y,$)}}async ensureLocked($,X,Y,G){if(Y.image)console.warn(`[${rQ}] opts.image ignored (template ${this.sandboxTemplateName} pins image): got ${Y.image}`);if(G){let Z=await G.get($,x3);if(Z){let W=await this.rehydrate($,X,Z);if(W)return this.finish(W,G,!1,!0,"resume");await G.delete($,x3)}}let Q=await SP(this.kubeConfig,this.namespace,X).catch(()=>{return});if(Q)if(Q.metadata?.deletionTimestamp)await jg1(this.kubeConfig,this.namespace,X).catch((Z)=>{console.warn(`[${rQ}] wait for terminating claim ${X} failed: ${Z instanceof Error?Z.message:String(Z)}`)});else{let Z=await this.adopt($,X,Q).catch((W)=>{return console.warn(`[${rQ}] adopt ${X} failed, recreating: ${W instanceof Error?W.message:String(W)}`),null});if(Z)return this.finish(Z,G,!0,!0,"adopt");await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),await jg1(this.kubeConfig,this.namespace,X).catch((W)=>{console.warn(`[${rQ}] wait for deleted claim ${X} failed: ${W instanceof Error?W.message:String(W)}`)})}let J=await this.provision($,X,Y);return this.finish(J,G,!0,!1,"fresh")}async finish($,X,Y,G,Q){let J=this.records.has($.handle);if(this.records.set($.handle,$),Y)await this.persist(X,$);if(G)await QU6(this.kubeConfig,this.namespace,$.handle,this.computeShutdownTime()).catch((Z)=>console.warn(`[${rQ}] TTL refresh failed for ${$.handle}: ${Z instanceof Error?Z.message:String(Z)}`));if(this.metrics){let Z=K20($.tenant);if(this.metrics.ensureOutcome.add(1,{...Z,outcome:Q}),!J)this.metrics.active.add(1,Z)}return this.toSandbox($)}buildEnvMap($,X){let Y={},G=[];for(let[Q,J]of Object.entries($.env??{}))if(wy8.has(Q))G.push(Q);else Y[Q]=J;if(G.length>0)console.warn(`[${rQ}] opts.env keys overlap reserved bootstrap names and were dropped: ${G.join(",")}`);return{...Y,DAEMON_TOKEN:X.token,DAEMON_BOOT_ID:X.daemonBootId,APP_ROOT:X.workdir,PROXY_PORT:String(kP)}}buildClaim($,X,Y){let G=this.sentinelToken!==null,Q=G?[]:Object.entries(this.buildEnvMap(X,Y)).sort(([J],[Z])=>J<Z?-1:J>Z?1:0).map(([J,Z])=>({name:J,value:Z}));return{apiVersion:`${a7.CLAIM_API_GROUP}/${a7.CLAIM_API_VERSION}`,kind:"SandboxClaim",metadata:{name:$,namespace:this.namespace,labels:{"app.kubernetes.io/name":"studio-sandbox","app.kubernetes.io/managed-by":"studio",...this.envName?{[ZU.env]:this.envName}:{},...W20(X.tenant)}},spec:{sandboxTemplateRef:{name:this.sandboxTemplateName},additionalPodMetadata:{labels:W20(X.tenant,{[ZU.role]:"claimed",[ZU.sandboxHandle]:$,...this.envName?{[ZU.env]:this.envName}:{}})},env:Q,warmpool:G?"default":"none",lifecycle:{shutdownPolicy:"Delete",shutdownTime:this.computeShutdownTime()}}}}async provision($,X,Y){let G=this.tokenGenerator(),Q=Ky8(),J=J20,Z=this.buildClaim(X,Y,{token:G,daemonBootId:Q,workdir:J});try{await w71(this.kubeConfig,this.namespace,Z)}catch(N){if(N instanceof U71)await jg1(this.kubeConfig,this.namespace,X),await w71(this.kubeConfig,this.namespace,Z);else throw N}let W;try{W=await JU6(this.kubeConfig,this.namespace,X),await Ag1(this.kubeConfig,this.namespace,W)}catch(N){throw await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),N}try{await this.ensureServicePortForAdoptedSandbox(W),await this.ensureHttpRouteForHandle(X,W,Y.tenant??null)}catch(N){throw await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),N}let K=await this.openForwarder(W,kP,X),F=`http://127.0.0.1:${K.localPort}`,U=this.workloadConfigPayload(Y),B=Q;try{if(await zU6(F),this.sentinelToken!==null){let N=await Vg1(F);if(N)B=N.bootId;await Mg1(F,this.sentinelToken,U??{},{rotateToken:G})}else if(U)await Mg1(F,G,U)}catch(N){throw this.closeForwarder(K),await this.deleteHttpRouteIfManaged(X).catch(()=>{}),await RP(this.kubeConfig,this.namespace,X).catch(()=>{}),N}return{id:$,handle:X,adoptedSandboxName:W,token:G,workdir:J,daemonUrl:F,daemonForward:K,workload:Y.workload??null,daemonBootId:B,tenant:Y.tenant??null,ensureOpts:Iy8(Y)}}workloadConfigPayload($){return eP0({runtime:$?.workload?.runtime??"node",packageManager:$?.workload?.packageManager?{name:$.workload.packageManager,...$.workload.packageManagerPath?{path:$.workload.packageManagerPath}:{}}:null,repo:$?.repo??null,port:$?.workload?.devPort??By8})}async rebootstrapDaemon($,X,Y){if(this.sentinelToken===null)return!1;try{return await Mg1($,this.sentinelToken,this.workloadConfigPayload(Y)??{},{rotateToken:X}),!0}catch(G){return console.warn(`[${rQ}] re-bootstrap failed: ${G instanceof Error?G.message:String(G)}`),!1}}async ensureServicePortForAdoptedSandbox($){if(!this.previewGateway||!this.previewUrlPattern)return;await UU6(this.kubeConfig,this.namespace,$,{name:"daemon",port:kP,targetPort:kP})}async ensureHttpRouteForHandle($,X,Y){if(!this.previewGateway||!this.previewUrlPattern)return;let G=Ry8(this.previewUrlPattern,$);if(!G)throw new mY(`Unable to derive preview hostname for ${$} from pattern: ${this.previewUrlPattern}`);let Q={apiVersion:`${z71.API_GROUP}/${z71.API_VERSION}`,kind:"HTTPRoute",metadata:{name:$,namespace:this.namespace,labels:W20(Y??void 0,{[ZU.role]:"claimed",[ZU.sandboxHandle]:$,"app.kubernetes.io/name":"studio-sandbox","app.kubernetes.io/managed-by":"studio",...this.envName?{[ZU.env]:this.envName}:{}})},spec:{parentRefs:[{kind:"Gateway",group:"gateway.networking.k8s.io",name:this.previewGateway.name,namespace:this.previewGateway.namespace}],hostnames:[G],rules:[{backendRefs:[{group:"",kind:"Service",name:X,port:kP}]}]}};await Pg1(this.kubeConfig,this.namespace,Q)}async deleteHttpRouteIfManaged($){if(!this.previewGateway)return;await qg1(this.kubeConfig,this.namespace,$)}async rehydrate($,X,Y){let G=Y.state;if(!G.adoptedSandboxName&&!G.podName||!G.token)return null;let Q=await SP(this.kubeConfig,this.namespace,X).catch(()=>{return});if(!Q||!qU6(Q))return null;let J=Q.status?.sandbox?.name??G.adoptedSandboxName??G.podName??X,Z=await this.openAndProbeDaemon(J,X);if(!Z)return null;if(G.daemonBootId&&G.daemonBootId!==Z.bootId){if(this.sentinelToken!==null){if(!await this.rebootstrapDaemon(Z.daemonUrl,G.token,G.ensureOpts??null))return this.closeForwarder(Z.daemonForward),null}else console.warn(`[${rQ}] daemon restart detected (handle=${X}): stored bootId=${G.daemonBootId} live bootId=${Z.bootId}`);await this.stateStore?.put($,x3,{handle:X,state:{...G,daemonBootId:Z.bootId}}).catch((W)=>console.warn(`[${rQ}] bootId persist failed for ${X}: ${W instanceof Error?W.message:String(W)}`))}return{id:$,handle:X,adoptedSandboxName:J,token:G.token,workdir:G.workdir??J20,daemonUrl:Z.daemonUrl,daemonForward:Z.daemonForward,workload:G.workload??null,daemonBootId:Z.bootId,tenant:G.tenant??null,ensureOpts:G.ensureOpts??null}}async adopt($,X,Y){if(!qU6(Y))return null;let G=Y.status?.sandbox?.name??X;if(this.sentinelToken!==null)return null;let Q=jy8(Y);if(!Q)return null;let J=await this.openAndProbeDaemon(G,X);if(!J)return null;let Z=My8(Y);if(this.previewGateway)await this.ensureServicePortForAdoptedSandbox(G).catch((W)=>{console.warn(`[${rQ}] Service port backfill failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}),await this.ensureHttpRouteForHandle(X,G,Z).catch((W)=>{console.warn(`[${rQ}] HTTPRoute backfill failed for ${X}: ${W instanceof Error?W.message:String(W)}`)});return{id:$,handle:X,adoptedSandboxName:G,token:Q,workdir:J20,daemonUrl:J.daemonUrl,daemonForward:J.daemonForward,workload:null,daemonBootId:J.bootId,tenant:Z,ensureOpts:null}}async openAndProbeDaemon($,X){let Y=await this.openForwarder($,kP,X).catch(()=>null);if(!Y)return null;let G=`http://127.0.0.1:${Y.localPort}`,Q=await Vg1(G);if(!Q)return this.closeForwarder(Y),null;return{daemonForward:Y,daemonUrl:G,bootId:Q.bootId}}async getRecord($){let X=this.records.get($);if(X)return X;if(!this.stateStore)return null;let Y=await this.stateStore.getByHandle(x3,$);if(!Y)return null;let G=await this.rehydrate(Y.id,$,Y);if(G)this.records.set($,G);return G}async resurrectByHandle($){if(!this.stateStore)return null;let X=await this.stateStore.getByHandle(x3,$);if(!X)return null;let Y=X.state.ensureOpts;if(!Y)return null;return await this.ensure(X.id,Y),this.records.get($)??null}invalidateRecord($){let X=this.records.get($);if(!X)return;this.records.delete($),this.closeForwarder(X.daemonForward)}recordProxyDuration($,X,Y,G,Q){if(!this.metrics)return;this.metrics.proxyDurationMs.record(G,{...K20(Y?.tenant??null),source:$,sandbox_handle:Y?.handle??Q??"",status_code:X||0})}composePreviewUrl($){if(this.previewUrlPattern)return e21(this.previewUrlPattern,$.handle);return`http://127.0.0.1:${$.daemonForward.localPort}/`}toSandbox($){return{handle:$.handle,workdir:$.workdir,previewUrl:this.composePreviewUrl($)}}async persist($,X){if(!$)return;let Y={adoptedSandboxName:X.adoptedSandboxName,token:X.token,workdir:X.workdir,workload:X.workload,daemonBootId:X.daemonBootId,tenant:X.tenant,...X.ensureOpts?{ensureOpts:X.ensureOpts}:{}};await $.put(X.id,x3,{handle:X.handle,state:Y})}computeShutdownTime(){return new Date(Date.now()+this.idleTtlMs).toISOString()}openForwarder($,X,Y=$){let G=Py8(Y,X);return new Promise((Q,J)=>{let Z=(W,K)=>{let F=TU6.createServer((U)=>this.handleForwardedConnection(U,$,X,Y));F.once("error",(U)=>{if(U.code==="EADDRINUSE"&&K<Oy8){try{F.close()}catch{}let B=H20+(W-H20+1)%VU6;Z(B,K+1);return}J(U)}),F.listen(W,"127.0.0.1",()=>{let U=F.address();if(!U||typeof U==="string"){F.close(),J(Error("port-forward listener failed to bind"));return}Q({server:F,localPort:U.port})})};Z(G,0)})}handleForwardedConnection($,X,Y,G){let Q=new Hy8,J=null,Z=!1,W=()=>{if(Z)return;if(Z=!0,Q.destroy(),J)try{J.close()}catch{}if(!$.destroyed)$.destroy()};$.pipe(Q),$.on("error",W),$.on("close",W),this.portForward.portForward(this.namespace,X,[Y],$,null,Q).then((K)=>{let F=typeof K==="function"?K():K;if(!F){W();return}if(J=F,J.on("close",W),J.on("error",()=>{this.invalidateRecord(G),W()}),Z)try{J.close()}catch{}}).catch((K)=>{console.warn(`[${rQ}] port-forward to ${X}:${Y} failed: ${K instanceof Error?K.message:String(K)}`),this.invalidateRecord(G),W()})}closeForwarder($){$.server.close((X)=>{if(X)console.warn(`[${rQ}] port-forward close on :${$.localPort} errored: ${X instanceof Error?X.message:String(X)}`)})}close(){if(this.closed)return;this.closed=!0;for(let $ of this.records.values())this.closeForwarder($.daemonForward);this.records.clear()}}function Ly8($){return{active:$.createUpDownCounter("studio.sandbox.active",{description:"Active sandbox count, by runner kind and owning org. Cross-checks the cAdvisor-derived count from the cluster \u2014 divergence between the two indicates orphaned claims (mesh deleted but K8s didn't reap) or unattributed pods.",unit:"{sandbox}"}),ensureOutcome:$.createCounter("studio.sandbox.ensure.outcome",{description:"Outcome of each ensure() call: fresh provision, resume from state-store after restart, or adopt of a cluster-side claim mesh didn't know about. Cold-start ratio is the primary input for warm-pool sizing.",unit:"{call}"}),proxyDurationMs:$.createHistogram("studio.sandbox.proxy.duration_ms",{description:"Wall-clock latency of mesh-mediated requests to the sandbox daemon: tool exec proxies (source=daemon) and preview iframe traffic (source=preview).",unit:"ms"})}}function Ey8(){let $=new Ft;return $.loadFromDefault(),$}function qU6($){return Boolean($.status?.conditions?.some((X)=>X.type==="Ready"&&X.status==="True"))}function jy8($){let X=$.spec?.env;if(!X)return null;for(let Y of X)if(Y.name==="DAEMON_TOKEN"&&Y.value)return Y.value;return null}function Py8($,X){let Y=Zy8("sha256").update(`${$}:${X}`).digest();return H20+Y.readUInt32BE(0)%VU6}function Z20($,X){return new Response(JSON.stringify(X),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function AU6($){let X=$.slice(0,Ay8);return qy8.test(X)?X:""}function Vy8($){if($===void 0)return null;let X=$.trim();if(X==="")return null;if(!Ty8.test(X))throw Error(`AgentSandboxProvider: envName=${JSON.stringify(X)} is not a valid DNS-label-safe environment name (lowercase alphanumeric or '-', starts with a letter, ends alphanumeric, \u226432 chars). Mesh sets this from STUDIO_ENV; check the studio chart's configMap.`);return X}function W20($,X={}){let Y={...X};if($){let G=AU6($.orgId),Q=AU6($.userId);if(G)Y[ZU.orgId]=G;if(Q)Y[ZU.userId]=Q}return Y}function My8($){let X=$.metadata?.labels;if(!X)return null;let Y=X[ZU.orgId],G=X[ZU.userId];if(!Y||!G)return null;return{orgId:Y,userId:G}}function K20($){return{org_id:$?.orgId??"",user_id:$?.userId??"",runner_kind:x3}}function Iy8($){let X={};if($.repo)X.repo=$.repo;if($.workload)X.workload=$.workload;if($.env&&Object.keys($.env).length>0)X.env=$.env;if($.tenant)X.tenant=$.tenant;return Object.keys(X).length>0?X:null}function Ry8($,X){try{return new URL(e21($,X)).hostname||null}catch{return null}}var x3="cluster",rQ="AgentSandboxProvider",yh="x-sandbox-preview-not-ready",Fy8="agent-sandbox-system",Uy8="studio-sandbox",kP=9000,By8=3000,J20="/app",Ny8=32,wy8,zy8=900000,Dy8,PU6,H20=40000,VU6=1e4,Oy8=256,ZU,qy8,Ay8=63,Ty8;var MU6=D(()=>{rA0();DU6();$T1();Tg1();B71();jU6();wy8=new Set(["DAEMON_TOKEN","DAEMON_BOOT_ID","APP_ROOT","PROXY_PORT"]),Dy8=["cookie","host","connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","accept-encoding","content-length","upgrade"],PU6=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];ZU={role:"studio.decocms.com/role",sandboxHandle:"studio.decocms.com/sandbox-handle",orgId:"studio.decocms.com/org-id",userId:"studio.decocms.com/user-id",env:"studio.decocms.com/env"},qy8=/^([A-Za-z0-9]([-A-Za-z0-9_.]*[A-Za-z0-9])?)?$/;Ty8=/^[a-z]([a-z0-9-]{0,30}[a-z0-9])?$/});var IU6={};g6(IU6,{waitForSandboxReady:()=>Ag1,getSandboxClaim:()=>SP,getHttpRoute:()=>FU6,deleteSandboxClaim:()=>RP,deleteHttpRoute:()=>qg1,createSandboxClaim:()=>w71,createHttpRoute:()=>Pg1,SandboxTimeoutError:()=>bh,SandboxError:()=>mY,PREVIEW_NOT_READY_HEADER:()=>yh,KubeConfig:()=>Ft,K8S_CONSTANTS:()=>a7,HTTPROUTE_CONSTANTS:()=>z71,AgentSandboxProvider:()=>F20});var U20=D(()=>{rA0();B71();Tg1();MU6()});class Rg1{kind=CP;userSub;dispatch;stateStore;records=new Map;constructor($){if(!$.userSub)throw Error("DesktopSandboxProvider requires userSub");if(!$.dispatch)throw Error("DesktopSandboxProvider requires dispatch");this.userSub=$.userSub,this.dispatch=$.dispatch,this.stateStore=$.stateStore??null}async ensure($,X={}){let Y=X.branch??X.repo?.branch,G=zP($,Y),Q=this.records.get(G);if(Q){if(await this.probeHealth(G))return this.toSandbox(Q);if(this.records.delete(G),this.stateStore)await this.stateStore.deleteByHandle(CP,G).catch(()=>{})}else if(this.stateStore){let B=(await this.stateStore.getByHandle(CP,G))?.state,N=B?.sandboxApiUrl;if(N){if(await this.probeHealth(G)){let w={handle:G,sandboxApiUrl:N,previewUrl:B?.previewUrl??N};return this.records.set(G,w),this.toSandbox(w)}await this.stateStore.deleteByHandle(CP,G).catch(()=>{})}}let J=JSON.stringify({handle:G,repo:X.repo,branch:Y,...X.workload?{workload:X.workload}:{},...X.offloadAllowedHosts?{offloadAllowedHosts:X.offloadAllowedHosts}:{},...X.offloadAllowSameHostDev!==void 0?{offloadAllowSameHostDev:X.offloadAllowSameHostDev}:{}}),Z=await this.dispatchJson("POST","/api/sandboxes",J),W=JSON.parse(Z);if(typeof W.sandboxApiUrl!=="string")throw Error("desktop ensure: daemon did not return a sandboxApiUrl string");let K=typeof W.previewUrl==="string"?W.previewUrl:W.sandboxApiUrl,F={handle:G,sandboxApiUrl:W.sandboxApiUrl,previewUrl:K};if(this.records.set(G,F),this.stateStore)await this.stateStore.put($,CP,{handle:G,state:{handle:G,sandboxApiUrl:W.sandboxApiUrl,previewUrl:K}});return this.toSandbox(F)}async proxyDaemonRequest($,X,Y){let G=X.startsWith("/")?X:`/${X}`,Q=G.startsWith("/_sandbox/")?G.slice(9):G,J=`/_sandbox/${encodeURIComponent($)}${Q}`,Z=new Headers(Y.headers);for(let j of["host","cookie","connection","keep-alive","transfer-encoding","upgrade","authorization"])Z.delete(j);let W={};Z.forEach((j,P)=>{W[P]=j});let K;if(Y.body!=null)K=await Sy8(Y.body);let U=this.dispatch(this.userSub,{method:Y.method,path:J,headers:W,body:K},{signal:Y.signal})[Symbol.asyncIterator](),B=200,N={"content-type":"application/octet-stream"},w=[];try{while(!0){let j=await U.next();if(j.done)break;let P=j.value;if(P.headers){B=P.headers.status,N=P.headers.headers;break}if(P.data!=null)w.push(P.data)}}catch(j){let P=j instanceof Error?j.message:"dispatch error";return new Response(JSON.stringify({error:P}),{status:502,headers:{"content-type":"application/json"}})}let z=!1,O=new TextEncoder,L=new ReadableStream({async start(j){for(let P of w)j.enqueue(O.encode(P))},async pull(j){try{let P=await U.next();if(z)return;if(P.done){j.close();return}let T=P.value;if(T.data!=null)j.enqueue(O.encode(T.data))}catch(P){if(!z)j.error(P)}},cancel(){z=!0,U.return?.()}});return new Response(L,{status:B,headers:N})}async alive($){return this.probeHealth($)}async probeHealth($){let X=new AbortController,Y=setTimeout(()=>X.abort(),1500);try{return await this.dispatchJson("GET",`/api/sandboxes/${encodeURIComponent($)}`,void 0,X.signal),!0}catch{return!1}finally{clearTimeout(Y)}}async forgetHandle($){if(this.records.delete($),this.stateStore)await this.stateStore.deleteByHandle(CP,$).catch(()=>{})}async delete($){if(this.records.delete($),this.stateStore)await this.stateStore.deleteByHandle(CP,$).catch(()=>{});try{await this.dispatchJson("DELETE",`/api/sandboxes/${encodeURIComponent($)}`)}catch(X){if(!(X instanceof Error?X.message:String(X)).includes("404"))throw X}}async getPreviewUrl($){return(await this.resolveRecord($))?.previewUrl??null}async localWorkdir($){return null}async*watchClaimLifecycle($,X){yield{kind:"ready"}}toSandbox($){return{handle:$.handle,workdir:$.sandboxApiUrl,previewUrl:$.previewUrl}}async resolveRecord($){let X=this.records.get($);if(X)return X;if(!this.stateStore)return null;let G=(await this.stateStore.getByHandle(CP,$))?.state,Q=G?.sandboxApiUrl;if(!Q)return null;let J={handle:$,sandboxApiUrl:Q,previewUrl:G?.previewUrl??Q};return this.records.set($,J),J}async dispatchJson($,X,Y,G){let Q={accept:"application/json"};if(Y!==void 0)Q["content-type"]="application/json";let J=this.dispatch(this.userSub,{method:$,path:X,headers:Q,body:Y},{signal:G}),Z=null,W="";for await(let K of J)if(K.headers)Z=K.headers.status;else if(K.data!=null)W+=K.data;if(Z!=null&&(Z<200||Z>=300))throw Error(`daemon returned ${Z}: ${W}`);return W}}function RU6($){return new Rg1($)}async function Sy8($){if(typeof $==="string")return $;if($ instanceof ArrayBuffer)return Buffer.from($).toString("utf8");if(ArrayBuffer.isView($))return Buffer.from($.buffer,$.byteOffset,$.byteLength).toString("utf8");if($ instanceof URLSearchParams)return $.toString();return await new Response($).text()}var CP="user-desktop";var SU6=D(()=>{$T1()});var kU6={};g6(kU6,{createDesktopProvider:()=>RU6,DesktopSandboxProvider:()=>Rg1});var CU6=D(()=>{SU6()});var xU6={};g6(xU6,{subscribeLifecycle:()=>O71,getSandboxProviderByKind:()=>D71,getOrInitSharedRunner:()=>xy8,buildDesktopProvider:()=>zt,__resetSharedLifecyclesForTesting:()=>ly8});function fU6($,X){let Y=vU6[$];if(Y)return Promise.resolve(Y);let G=B20[$];if(G)return G;let Q=X().then((J)=>{return vU6[$]=J,J}).finally(()=>{delete B20[$]});return B20[$]=Q,Q}function vy8(){let $=process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN;return $&&$.trim()!==""?$:void 0}function _y8(){let $=process.env.STUDIO_SANDBOX_TEMPLATE_NAME;return $&&$.trim()!==""?$:void 0}function by8(){let $=process.env.STUDIO_ENV;return $&&$.trim()!==""?$:void 0}function fy8(){let $=process.env.STUDIO_SANDBOX_SENTINEL_TOKEN;return $&&$.trim()!==""?$:void 0}function yy8(){let $=process.env.STUDIO_SANDBOX_PREVIEW_GATEWAY_NAME?.trim(),X=process.env.STUDIO_SANDBOX_PREVIEW_GATEWAY_NAMESPACE?.trim();if(!$&&!X)return;if(!$||!X)throw Error("STUDIO_SANDBOX_PREVIEW_GATEWAY_NAME and STUDIO_SANDBOX_PREVIEW_GATEWAY_NAMESPACE must both be set, or both unset. Half-configured per-claim HTTPRoute routing would silently fail to attach.");return{name:$,namespace:X}}async function yU6($,X){let Y=new OP(X),G=vy8();switch($){case"cluster":{let{AgentSandboxProvider:Q}=await Promise.resolve().then(() => (U20(),IU6));return new Q({stateStore:Y,previewUrlPattern:G,sandboxTemplateName:_y8(),envName:by8(),previewGateway:yy8(),sentinelToken:fy8(),meter:CW})}case"user-desktop":throw Error("user-desktop runner cannot be instantiated without a per-run link claim \u2014 call resolveSandboxProvider, which binds the link before constructing the provider.");default:throw Error(`Unknown runner kind: ${String($)}`)}}async function zt($,X){let{DesktopSandboxProvider:Y}=await Promise.resolve().then(() => (CU6(),kU6)),{getDispatch:G}=await Promise.resolve().then(() => (w20(),N20)),Q=new OP($.db);if(!X)throw Error("buildDesktopProvider: userSub must be a non-empty string");return new Y({userSub:X,dispatch:G(),stateStore:Q})}function D71($,X){return fU6(X,()=>yU6(X,$.db))}async function xy8(){let $;try{$=DN()}catch(Y){return console.warn("[lifecycle] cannot resolve sandbox runner:",Y instanceof Error?Y.message:String(Y)),null}return await fU6($,()=>yU6($,q5().db))}function O71($,X,Y){let G=vP.get(X);if(G){if(G.terminated){if(G.lastPhase)try{Y(G.lastPhase)}catch{}return{unsubscribe:uy8}}if(G.listeners.add(Y),G.lastPhase)try{Y(G.lastPhase)}catch{}return _U6(X,G,Y)}let Q=new AbortController,J={lastPhase:null,terminated:!1,listeners:new Set([Y]),abort:Q};return vP.set(X,J),my8($,X,J),_U6(X,J,Y)}function uy8(){}function _U6($,X,Y){return{unsubscribe(){if(vP.get($)!==X)return;if(X.listeners.delete(Y),X.listeners.size===0)vP.delete($),X.abort.abort()}}}async function my8($,X,Y){let G=null;try{for await(let Q of $.watchClaimLifecycle(X,Y.abort.signal)){if(Y.abort.signal.aborted)break;Y.lastPhase=Q;let J=Q.kind==="ready"||Q.kind==="failed";if(J)Y.terminated=!0;let Z=Array.from(Y.listeners);for(let W of Z)try{W(Q)}catch{}if(J)break}}catch(Q){G=Q}finally{if(!Y.terminated&&!Y.abort.signal.aborted&&Y.listeners.size>0){let Q={kind:"failed",reason:"unknown",message:G instanceof Error?G.message:"Lifecycle watcher ended unexpectedly"};Y.lastPhase=Q,Y.terminated=!0;for(let J of Array.from(Y.listeners))try{J(Q)}catch{}}if(vP.get(X)===Y)vP.delete(X)}}function ly8(){for(let $ of vP.values())$.abort.abort();vP.clear()}var ky8,Cy8,bU6,vU6,B20,gy8,hy8,vP;var xh=D(()=>{ID();CB();ZZ();QT1();ky8=Symbol.for("decocms.sandbox.lifecycle.runners"),Cy8=Symbol.for("decocms.sandbox.lifecycle.inflight"),bU6=globalThis,vU6=bU6[ky8]??={},B20=bU6[Cy8]??={};gy8=Symbol.for("decocms.sandbox.lifecycle.shared-lifecycles"),hy8=globalThis,vP=hy8[gy8]??=new Map});async function Sg1($,X){if(await X.linkClaimRegistry.get($))return"user-desktop";return X.resolveEnvKind()}async function fD($,X){let{userId:Y,branch:G,virtualMcpMetadata:Q,explicitKind:J}=X;if(J)return{provider:await kg1($,Y,J),kind:J};if($.sandboxPreference==="user-desktop"&&$.linkForCurrentRun)return{provider:await zt($,Y),kind:"user-desktop"};if($.sandboxPreference==="cluster-default"){let U=DN();return{provider:await kg1($,Y,U),kind:U}}let[Z,...W]=cy8(Q,Y,G);if(Z){let U=W.length===0?Z:await dy8($,Y,Z,W);return{provider:await kg1($,Y,U),kind:U}}let K=await gU6($,Y);return{provider:await kg1($,Y,K),kind:K}}function cy8($,X,Y){let G=ZH($)[X]?.[Y];if(!G)return[];let Q=kw(G);return Object.keys(Q)}async function dy8($,X,Y,G){let Q=await gU6($,X);if(Q===Y||G.includes(Q))return Q;return Y}async function gU6($,X){if(!$.linkClaimRegistry)return DN();return Sg1(X,{linkClaimRegistry:$.linkClaimRegistry,resolveEnvKind:DN})}async function kg1($,X,Y){if(Y!=="user-desktop")return D71($,Y);if(!$.linkClaimRegistry)throw Error("user-desktop sandbox provider requires ctx.linkClaimRegistry to be wired (set on MeshContextConfig).");if(!await $.linkClaimRegistry.get(X))throw Error(`No link daemon registered for user "${X}". Start one with \`deco link\` (or run \`bun run dev --local-sandbox-provider\` for dev).`);return zt($,X)}var L71=D(()=>{b$();ID();RD();xh()});async function hU6($,X){if(!$)return{hosts:[],allowSameHostDev:!1};let Y;try{Y=await $.presignedGetUrl("link-dispatch/_allowlist_probe",60,{requireFetchable:!0})}catch{return{hosts:[],allowSameHostDev:!1}}let G;try{G=new URL(Y)}catch{return{hosts:[],allowSameHostDev:!1}}if(G.protocol!=="https:"&&G.protocol!=="http:")return{hosts:[],allowSameHostDev:!1};let Q=G.hostname,J=iy8.has(Q);return{hosts:[Q],allowSameHostDev:J&&!X.isProduction}}var iy8;var uU6=D(()=>{iy8=new Set(["127.0.0.1","localhost","::1","[::1]","0.0.0.0"])});async function Cg1($,X){G0(X);let Y=r1(X),G=K6(X);if(!G)throw Error("User ID required");let Q=await X.storage.virtualMcps.findById($.virtualMcpId);if(!Q||Q.organization_id!==Y.id)throw Error("Virtual MCP not found");let J=Q.metadata??{},Z=DP(ZH(J),G,$.branch,$.sandboxProviderKind),W=$.sandboxProviderKind,{provider:K}=await fD(X,{userId:G,branch:$.branch,virtualMcpMetadata:J,explicitKind:W});if(Z){if(W!=="user-desktop")return Z;if(await K.alive(Z.sandboxHandle).catch(()=>!1))return Z;await er(X.storage.virtualMcps,$.virtualMcpId,G,G,$.branch,W).catch((N)=>{console.warn("[ensureSandbox] failed to reap stale user-desktop entry",N)})}let F=J.githubRepo??null,{entry:U}=await mU6({ctx:X,userId:G,orgId:Y.id,virtualMcpId:$.virtualMcpId,branch:$.branch,metadata:J,githubRepo:F,existing:null,providerKind:W,runner:K});return U}async function mU6($){let{ctx:X,userId:Y,orgId:G,virtualMcpId:Q,branch:J,metadata:Z,githubRepo:W,existing:K,runner:F}=$,{runtime:U,packageManager:B,port:N,packageManagerPath:w}=OJ6(Z),z;if(W){let{cloneUrl:f,gitUserName:l,gitUserEmail:d}=W.connectionId?await EJ6(W.connectionId,W.owner,W.name,X.db,X.vault):LJ6(W.owner,W.name);if(!B){let b=W.connectionId?await AJ6(W.connectionId,W.owner,W.name,X.db,X.vault):await TJ6(W.owner,W.name);if(b)B=b.packageManager,U=pY1[b.packageManager].runtime,N=b.devPort??N,await py8(X,Q,Y,b.packageManager,b.devPort)}z={cloneUrl:f,userName:l,userEmail:d,branch:J,displayName:`${W.owner}/${W.name}`}}let O=U&&B?{runtime:U,packageManager:B,...N!==null?{devPort:Number(N)}:{},...w?{packageManagerPath:w}:{}}:void 0,L=ZM({orgId:G,virtualMcpId:Q,branch:J}),j=F.kind==="user-desktop"?await hU6(X.objectStorage,{isProduction:_4().nodeEnv==="production"}):null,P=await F.ensure({userId:Y,projectRef:L},{branch:J,repo:z,workload:O,tenant:{orgId:G,userId:Y},...j?{offloadAllowedHosts:j.hosts,offloadAllowSameHostDev:j.allowSameHostDev}:{}}),T=Z.runtime?.env??null;await GT1({ctx:X,runner:F,handle:P.handle,orgId:G,userId:Y,entries:T});let V=!!K&&K.sandboxHandle===P.handle&&K?.createdAt?K.createdAt:Date.now(),R=Z.runtime?.selected??null,v=Z.runtime?.port??null,S=Z.runtime?.path??null,_={sandboxHandle:P.handle,previewUrl:P.previewUrl,sandboxApiUrl:P.previewUrl,sandboxProviderKind:F.kind,createdAt:V,startedWith:{packageManager:R,port:v,path:S}};await zJ6(X.storage.virtualMcps,Q,Y,Y,J,$.providerKind,_);let y=!K||K.sandboxHandle!==P.handle;return{entry:_,isNewVm:y}}async function py8($,X,Y,G,Q){let J=await $.storage.virtualMcps.findById(X);if(!J)return;let Z=J.metadata??{};await $.storage.virtualMcps.update(X,Y,{metadata:{...Z,runtime:{selected:G,port:Q}}})}var z20;var vg1=D(()=>{d1();ID();k0();YT1();Xq0();RD();jJ6();MJ6();PE0();$q0();L71();uU6();F5();RD();z20=f1({name:"SANDBOX_START",description:"Start a sandbox with the connected GitHub repo and dev server.",annotations:{title:"Start VM Preview",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:H.object({virtualMcpId:H.string().describe("Virtual MCP ID"),branch:H.string().min(1).optional().describe("Optional git branch to check out. When omitted the handler generates `deco/<adjective>-<noun>` and uses it. The resolved branch is returned in the response so callers can persist it."),sandboxProviderKind:H.enum(["cluster","user-desktop"]).optional().describe("Explicit runtime choice. When omitted, defaults to `user-desktop` if the acting user's link daemon is online, else the cluster env kind.")}),outputSchema:H.object({previewUrl:H.string().nullable(),sandboxHandle:H.string(),branch:H.string(),isNewVm:H.boolean(),sandboxProviderKind:H.enum(["cluster","user-desktop"])}),handler:async($,X)=>{G0(X);let Y=$.branch??tA1(),G=K6(X);if(!G)throw Error("User ID required");let{provider:Q,kind:J}=await fD(X,{userId:G,branch:Y,virtualMcpMetadata:null,explicitKind:$.sandboxProviderKind}),{metadata:Z,userId:W,organization:K,entry:F}=await XT1({virtualMcpId:$.virtualMcpId,branch:Y,sandboxProviderKind:J},X),U=Z.githubRepo??null,{entry:B,isNewVm:N}=await mU6({ctx:X,userId:W,orgId:K.id,virtualMcpId:$.virtualMcpId,branch:Y,metadata:Z,githubRepo:U,existing:F,providerKind:J,runner:Q});return{...B,branch:Y,isNewVm:N,sandboxProviderKind:J}}})});var D20;var lU6=D(()=>{d1();k0();YT1();xh();RD();D20=f1({name:"SANDBOX_DELETE",description:"Delete a sandbox.",annotations:{title:"Delete VM Preview",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:H.object({virtualMcpId:H.string().describe("Virtual MCP ID that owns this VM"),branch:H.string().min(1).describe("Branch whose vm should be deleted (sandboxMap[userId][branch])"),sandboxProviderKind:H.enum(["cluster","user-desktop"]).describe("Kind of sandbox provider the VM was started with. Used to locate the correct 3-level sandboxMap entry.")}),outputSchema:H.object({success:H.boolean()}),handler:async($,X)=>{let Y=$.sandboxProviderKind,G;try{G=await XT1($,X)}catch(W){if(W instanceof Error&&W.message==="Virtual MCP not found")return{success:!0};throw W}let{entry:Q,userId:J}=G;if(!Q)return{success:!0};return await er(X.storage.virtualMcps,$.virtualMcpId,J,J,$.branch,Y),await(await D71(X,Y)).delete(Q.sandboxHandle).catch((W)=>console.error(`[SANDBOX_DELETE] ${Y} ${Q.sandboxHandle}: ${W instanceof Error?W.message:String(W)}`)),{success:!0}}})});var cU6=D(()=>{vg1();lU6()});var ry8="https://api.github.com",O20;var dU6=D(()=>{d1();k0();DP1();XP();O20=f1({name:"GITHUB_LIST_USER_ORGS",description:"List GitHub App installations (orgs/accounts) accessible to the authenticated user.",annotations:{title:"List GitHub User Orgs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:H.object({connectionId:H.string().describe("ID of the mcp-github connection to use")}),outputSchema:H.object({installations:H.array(H.object({installationId:H.number(),login:H.string(),avatarUrl:H.string(),type:H.string()})),appSlug:H.string().optional()}),handler:async($,X)=>{await X.access.check();let Y=new dG(X.db,X.vault),G=await Y.get($.connectionId);if(!G)throw Error("No GitHub token found. Ensure the mcp-github connection is authenticated.");let Q=G.accessToken;if(A91(G)&&Y.isExpired(G,zP1)){let U=await T91(G,Y);if(!U)throw Error(eT);Q=U,G=await Y.get($.connectionId)??G}let J=[],Z,W=1,K=100,F=async(U)=>fetch(`${ry8}/user/installations?per_page=${K}&page=${W}`,{headers:{Authorization:`Bearer ${U}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"}});while(!0){let U=await F(Q);if(U.status===401){let N=await Y.get($.connectionId);if(!N||!A91(N))throw Error(eT);let w=await T91(N,Y);if(!w)throw Error(eT);if(Q=w,U=await F(Q),U.status===401)throw Error(eT)}if(!U.ok)throw Error(`GitHub /user/installations failed: ${U.status}`);let B=await U.json();for(let N of B.installations){if(!Z)Z=N.app_slug??N.app?.slug;J.push({installationId:N.id,login:N.account.login,avatarUrl:N.account.avatar_url,type:N.account.type})}if(B.installations.length<K)break;W++}return{installations:J,...Z?{appSlug:Z}:{}}}})});var iU6=D(()=>{dU6()});var L20,pU6,nU6,ay8,oy8,siY;var E20=D(()=>{d1();L20=H.enum(["claude-code","codex","decopilot-sandbox","body-offload"]),pU6=H.array(H.string()).catch([]).transform(($)=>$.filter((X)=>L20.safeParse(X).success)),nU6=H.discriminatedUnion("type",[H.object({type:H.literal("ui-message-chunk"),chunk:H.unknown()}),H.object({type:H.literal("error"),code:H.string(),message:H.string()}),H.object({type:H.literal("done")})]),ay8=H.record(H.string(),H.unknown()),oy8=H.object({credentialId:H.string(),thinking:H.object({id:H.string(),title:H.string(),provider:H.string().optional()}),coding:H.object({id:H.string(),title:H.string()}).optional(),fast:H.object({id:H.string(),title:H.string()}).optional(),image:H.object({id:H.string(),title:H.string()}).optional(),deepResearch:H.object({id:H.string(),title:H.string()}).optional()}),siY=H.object({threadId:H.string(),runId:H.string(),taskId:H.string(),resumeSessionRef:H.string().optional(),messages:H.array(ay8),models:oy8,mcp:H.object({url:H.string().url(),headers:H.record(H.string(),H.string()),expiresAt:H.number().int().positive()}),mode:H.string(),temperature:H.number(),toolApprovalLevel:H.string(),user:H.object({id:H.string(),email:H.string()}),organizationId:H.string(),organizationSlug:H.string().optional(),virtualMcp:H.record(H.string(),H.unknown()),agent:H.object({id:H.string()}),branch:H.string().nullable().optional(),triggerId:H.string().optional(),currentThreadTitle:H.string().optional(),traceparent:H.string().optional()}).strip()});var rU6=()=>{};var j20=D(()=>{rU6();E20()});var P20;var tU6=D(()=>{d1();j20();k0();P20=f1({name:"LINK_CURRENT_GET",description:"Return the calling user's currently registered desktop link, or `online: false` if no link is registered or the TTL has expired.",inputSchema:s1.object({}),outputSchema:s1.object({online:s1.boolean(),machineId:s1.string().optional(),hostname:s1.string().optional(),cliVersion:s1.string().optional(),capabilities:s1.array(L20).default([])}),handler:async($,X)=>{G0(X),await X.access.check();let Y=X.linkClaimRegistry;if(!Y)return{online:!1,capabilities:[]};let G=await Y.get(X.auth.user.id);if(!G)return{online:!1,capabilities:[]};return{online:!0,machineId:G.machineId,hostname:G.hostname,cliVersion:G.cliVersion,capabilities:G.capabilities}}})});var aU6=D(()=>{tU6()});function oU6($){if(!$)return"";return typeof $==="string"?$:$.toISOString()}var $x8,Xx8,Yx8,Gx8,Qx8,q20;var sU6=D(()=>{d1();k0();$x8=["thread"],Xx8=H.object({type:H.literal("thread"),id:H.string(),title:H.string(),created_at:H.string(),updated_at:H.string(),virtual_mcp_id:H.string().nullable(),run_config:H.record(H.string(),H.unknown()).nullable(),status:H.string().nullable()}),Yx8=H.discriminatedUnion("type",[Xx8]),Gx8=H.object({query:H.string().min(1).describe("Free-text search query."),limit:H.number().int().min(1).max(50).optional().describe("Maximum results per resource type (default: 20)."),types:H.array(H.enum($x8)).optional().describe("Restrict the search to specific resource types. Omit to search across all available types.")}),Qx8=H.object({items:H.array(Yx8),totalCount:H.number()});q20=f1({name:"GLOBAL_SEARCH",description:"Search across organization resources by free-text query. Returns a typed union of matches (currently: threads). New resource types may be added over time without changes to the call shape.",annotations:{title:"Global Search",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Gx8,outputSchema:Qx8,handler:async($,X)=>{await X.access.check(),r1(X);let Y=$.limit??20,G=$.types?.length?new Set($.types):null,Q=!G||G.has("thread"),J=[],Z=0;if(Q){let{threads:W,total:K}=await X.storage.threads.list(void 0,{limit:Y,offset:0,search:$.query,includeArchived:!1});Z+=K;for(let F of W)J.push({type:"thread",id:F.id,title:F.title??"",created_at:oU6(F.created_at),updated_at:oU6(F.updated_at),virtual_mcp_id:F.virtual_mcp_id??null,run_config:F.run_config??null,status:F.status??null})}return{items:J,totalCount:Z}}})});var eU6=D(()=>{sU6()});var dA1={};g6(dA1,{managementMCP:()=>gr,listManagementTools:()=>Kx8,ALL_TOOLS:()=>$B6});async function Kx8($){let X=await gr($),[Y,G]=h81.createLinkedPair();await X.connect(G);let Q=new AY({name:"tools-hydration",version:"1.0.0"});try{return await Q.connect(Y),(await Q.listTools()).tools}finally{await Q.close().catch(()=>{})}}var Zx8,Wx8,$B6,gr=async($)=>{let X=null;if($.organization){let Z=await $.storage.organizationSettings.get($.organization.id),W=await $.storage.virtualMcps.list($.organization.id),K=new Set(Z?.enabled_plugins??[]);for(let F of W){let U=F.metadata?.enabled_plugins;if(U&&Array.isArray(U))for(let B of U)K.add(B)}X=K.size>0?[...K]:null}let Y=Fm4($B6,X),G=new vw({name:"mcp-cms-management",version:"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}}});for(let Z of Y){let W=Z.inputSchema&&typeof Z.inputSchema==="object"&&"shape"in Z.inputSchema?Z.inputSchema:H.object({}),K=Z.outputSchema&&typeof Z.outputSchema==="object"&&"shape"in Z.outputSchema?Z.outputSchema:void 0,F=W.shape,U=K?.shape;G.registerTool(Z.name,{description:Z.description??"",inputSchema:F,outputSchema:U,annotations:Z.annotations,_meta:Z._meta},async(B)=>{$.access.setToolName(Z.name);try{let N=await Z.execute(B,$);return{content:[{type:"text",text:Z.modelSummary?Z.modelSummary(N):JSON.stringify(N)}],structuredContent:N}}catch(N){return{content:[{type:"text",text:`Error: ${N.message}`}],isError:!0}}})}let Q=j21();for(let Z of Q){let W=Z.arguments?.length?Object.fromEntries(Z.arguments.map((K)=>{let F=K.required?H.string():H.string().optional();return[K.name,K.description?F.describe(K.description):F]})):void 0;G.registerPrompt(Z.name,{title:Z.title,description:Z.description,...W?{argsSchema:W}:{}},(K)=>{return{messages:[{role:"user",content:{type:"text",text:typeof Z.text==="function"?Z.text(K??{}):Z.text}}]}})}if($.organization?.id){let Z=await $.storage.brandContext.list($.organization.id),W=new Set;for(let K of Z){let F=K.name.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-|-$/g,""),U=F?`brand-${F}`:`brand-${K.id}`;if(W.has(U))U=`${U}-${K.id.slice(0,8)}`;W.add(U);let B=[`# Brand: ${K.name}`,"",`**Domain:** ${K.domain}`,"","## Overview",K.overview];if(K.colors){let w=Object.entries(K.colors).filter(([,z])=>z);if(w.length>0){B.push("","## Colors");for(let[z,O]of w)B.push(`- **${z}:** ${O}`)}}if(K.fonts){let w=Object.entries(K.fonts).filter(([,z])=>z);if(w.length>0){B.push("","## Fonts");for(let[z,O]of w)B.push(`- ${O} (${z})`)}}if(K.logo)B.push("",`**Logo:** ${K.logo}`);if(K.favicon)B.push(`**Favicon:** ${K.favicon}`);if(K.ogImage)B.push(`**OG Image:** ${K.ogImage}`);if(K.images&&K.images.length>0){B.push("","## Images");for(let w of K.images){let z=Object.entries(w).map(([O,L])=>`${O}: ${L}`).join(", ");B.push(`- ${z}`)}}let N=B.join(`
 `);G.prompt(U,`Brand context for ${K.name}`,()=>({messages:[{role:"user",content:{type:"text",text:N}}]}))}}let J=e96();for(let Z of J)G.resource(Z.name,Z.uri,{description:Z.description,mimeType:Z.mimeType??"text/markdown"},async(W)=>{return{contents:[{uri:typeof W==="string"?W:W.href,mimeType:Z.mimeType??"text/markdown",text:Z.text}]}});return G};var vr=D(()=>{sE1();hU();w01();d1();km4();s66();Y$6();B$6();T$6();R$6();a$6();Y86();O86();r86();a86();L96();P96();k96();Vj0();T56();NJ6();cU6();iU6();aU6();eU6();Zx8=[pL0,nL0,rL0,tL0,aL0,oL0,sL0,eL0,$E0,XE0,YE0,GE0,JE0,ZE0,WE0,KE0,HE0,FE0,UE0,BE0,NE0,wE0,zE0,TN0,jL0,PL0,qL0,AL0,TL0,_L0,fL0,yL0,xL0,gL0,X$6,cL0,dL0,iL0,bU0,yU0,xU0,fU0,VL0,ML0,IL0,RL0,SL0,kL0,CL0,sE0,qE0,AE0,TE0,VE0,ME0,IE0,DE0,OE0,LE0,EE0,jE0,RE0,SE0,kE0,pE0,nE0,rE0,tE0,aE0,oE0,hL0,uL0,mL0,lL0,eE0,Yj0,Gj0,Qj0,Jj0,Zj0,Wj0,Kj0,Hj0,Fj0,Uj0,Bj0,Nj0,zj0,Dj0,Oj0,Lj0,Ej0,jj0,Tj0,Mj0,Ij0,Rj0,Sj0,kj0,Cj0,...BJ6,z20,D20,O20,P20,q20],Wx8=Um4(),$B6=[...Zx8,...Wx8]});function Hx8($){return[{permissions:{self:["*"]},getTools:async()=>{let{ALL_TOOLS:X}=await Promise.resolve().then(() => (vr(),dA1));return X.map((Y)=>{return{name:Y.name,inputSchema:H.toJSONSchema(Y.inputSchema,{unrepresentable:"any"}),outputSchema:Y.outputSchema?H.toJSONSchema(Y.outputSchema,{unrepresentable:"any"}):void 0,description:Y.description}})},data:D50(aZ(),$)},{data:z50()},{data:w50($)}]}async function XB6($,X){try{let Y=q5(),G=_4(),Q=new zT(G.encryptionKey),J=new n$1(Y.db,Q),Z=Hx8($);await Promise.all(Z.map(async(W)=>{let K=null;if(W.permissions)K=(await Z5.api.createApiKey({body:{name:`${W.data.app_name??crypto.randomUUID()}-mcp`,userId:X,permissions:W.permissions,rateLimitEnabled:!1,metadata:{organization:{id:$},purpose:"default-org-connections"}}}))?.key;let F=await cE({id:"pending",title:W.data.title,connection_type:W.data.connection_type,connection_url:W.data.connection_url,connection_token:W.data.connection_token??K,connection_headers:W.data.connection_headers}).catch(()=>null),U=await W.getTools?.()??F?.tools??null,B=F?.scopes?.length?F.scopes:null,N=W.data.id?W.data.id.startsWith(`${$}_`)?W.data.id:`${$}_${W.data.id}`:void 0;await J.create({...W.data,id:N,tools:U,configuration_scopes:B,organization_id:$,created_by:X,connection_token:W.data.connection_token??K})}));try{await RH0({orgId:$,createdBy:X})}catch(W){console.error("Failed to enqueue studio pack install:",W)}if(G.aiGatewayEnabled&&G.studioProvisionSecretKey&&d$1.provisionKey)try{let W=await dE(X),K=await d$1.provisionKey(W,$);await new p$1(Y.db,Q).upsert({providerId:"deco",label:"Auto-provisioned",apiKey:K,organizationId:$,createdBy:X})}catch(W){console.error("Failed to auto-provision Deco AI Gateway key:",W)}}catch(Y){console.error("Error creating default MCP connections:",Y)}}var YB6=D(()=>{b$();$H0();kz();CB();lL1();YH0();GH0();$81();d1();F5();TD();oL1();jT()});function Fx8($,X){let Y=$.email.split("@")[1]?.toLowerCase()??null;return{distinctId:$.id,properties:{$set:{email:$.email,name:$.name,email_verified:$.emailVerified},$set_once:{first_seen_at:X.toISOString(),signup_email_domain:Y}}}}function A20($){E6.identify(Fx8($,new Date))}var GB6=D(()=>{YX()});async function Nx8($){let{user:X,token:Y}=$;if(!Y?.idToken)return;let G;try{G=F8(Y.idToken)}catch{return}let{preferred_username:Q,upn:J}=G,Z=[Q,J].filter((F)=>typeof F==="string"&&F.length>0&&F.toLowerCase()!==X.email.toLowerCase()).map((F)=>F.toLowerCase());if(Z.length===0)return;let{db:W}=q5(),K=await W.selectFrom("user").selectAll().where("email","in",Z).where("id","!=",X.id).executeTakeFirst();if(!K)return;try{await W.transaction().execute(async(F)=>{await p1`UPDATE "account" SET "userId" = ${K.id} WHERE "userId" = ${X.id}`.execute(F),await p1`UPDATE "session" SET "userId" = ${K.id} WHERE "userId" = ${X.id}`.execute(F),await p1`
         UPDATE "member" SET "userId" = ${K.id}
         WHERE "userId" = ${X.id}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "decocms",
-  "version": "2.389.2",
+  "version": "2.389.3",
   "description": "Deco CMS — Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "repository": {

package/dist/client/assets/AlertCircle-BujfdlJP.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M12 8v4m0 4h.01M22 12c0 5.523-4.477 10-10 10S2 17.523 2 12 6.477 2 12 2s10 4.477 10 10Z"}));i.displayName="AlertCircle";export{i};

package/dist/client/assets/ArrowUpRight-9qlN__uY.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M7 17 17 7m0 0H7m10 0v10"}));i.displayName="ArrowUpRight";export{i};

package/dist/client/assets/Check-AFi7eYy3.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M20 6 9 17l-5-5"}));i.displayName="Check";export{i};

package/dist/client/assets/CheckCircle-BURpfI4x.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"m7.5 12 3 3 6-6m5.5 3c0 5.523-4.477 10-10 10S2 17.523 2 12 6.477 2 12 2s10 4.477 10 10Z"}));i.displayName="CheckCircle";export{i};

package/dist/client/assets/ChevronDown-pPvvel7S.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const n=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"m6 9 6 6 6-6"}));n.displayName="ChevronDown";export{n as t};

package/dist/client/assets/ChevronRight-DdMgBfx3.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"m9 18 6-6-6-6"}));i.displayName="ChevronRight";export{i};

package/dist/client/assets/ChevronUp-x0aAQ6z1.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const n=({size:e=24,color:o="currentColor",...t})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...t},r.createElement("path",{d:"m18 15-6-6-6 6"}));n.displayName="ChevronUp";export{n};

package/dist/client/assets/Container-3y27YbHH.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const c=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M20.5 7.278 12 12m0 0L3.5 7.278M12 12v9.5m9-5.441V7.942c0-.343 0-.514-.05-.667a1 1 0 0 0-.215-.364c-.109-.119-.258-.202-.558-.368l-7.4-4.111c-.284-.158-.425-.237-.575-.267a1 1 0 0 0-.403 0c-.15.03-.292.11-.576.267l-7.4 4.11c-.3.167-.45.25-.558.369a1 1 0 0 0-.215.364C3 7.428 3 7.599 3 7.942v8.117c0 .342 0 .514.05.666a1 1 0 0 0 .215.364c.109.119.258.202.558.368l7.4 4.111c.284.158.425.237.576.268.133.027.27.027.402 0 .15-.031.292-.11.576-.268l7.4-4.11c.3-.167.45-.25.558-.369a.999.999 0 0 0 .215-.364c.05-.152.05-.324.05-.666Z"}));c.displayName="Container";export{c as n};

package/dist/client/assets/DotsVertical-f6FCuoKx.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const i=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M12 22c5.523 0 10-4.477 10-10S17.523 2 12 2 2 6.477 2 12s4.477 10 10 10Z"}));i.displayName="Circle";const a=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M12 13a1 1 0 1 0 0-2 1 1 0 0 0 0 2Zm0-7a1 1 0 1 0 0-2 1 1 0 0 0 0 2Zm0 14a1 1 0 1 0 0-2 1 1 0 0 0 0 2Z"}));a.displayName="DotsVertical";export{i as a,a as i};

package/dist/client/assets/FilterLines-CpC8dvui.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M6 12h12M3 6h18M9 18h6"}));i.displayName="FilterLines";export{i};

package/dist/client/assets/HardDrive-B_5DghEh.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M2.5 12h19M6 16h4M8.967 4h6.066c1.077 0 1.616 0 2.091.164a3 3 0 0 1 1.121.693c.36.352.6.833 1.082 1.796l2.166 4.333c.19.378.284.567.35.765.06.177.102.357.128.541.029.207.029.418.029.841V15.2c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C19.72 20 18.88 20 17.2 20H6.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C2 17.72 2 16.88 2 15.2v-2.067c0-.422 0-.634.029-.84.026-.184.068-.365.128-.541.066-.199.16-.388.35-.766l2.166-4.333c.482-.963.723-1.444 1.082-1.796a3 3 0 0 1 1.12-.693C7.352 4 7.89 4 8.968 4Z"}));a.displayName="HardDrive";export{a as i};

package/dist/client/assets/Key01-BirL6QWd.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M17 9a1.99 1.99 0 0 0-.586-1.414A1.994 1.994 0 0 0 15 7m0 8a6 6 0 1 0-5.946-5.193c.058.434.087.651.068.789a.853.853 0 0 1-.117.346c-.068.121-.187.24-.426.479l-5.11 5.11c-.173.173-.26.26-.322.36a1 1 0 0 0-.12.29C3 17.296 3 17.418 3 17.663V19.4c0 .56 0 .84.109 1.054a1 1 0 0 0 .437.437C3.76 21 4.04 21 4.6 21H7v-2h2v-2h2l1.58-1.58c.238-.238.357-.357.478-.425a.852.852 0 0 1 .346-.117c.138-.02.355.01.789.068.264.036.533.054.807.054Z"}));a.displayName="Key01";export{a as i};

package/dist/client/assets/LinkExternal01-DDY0Gryv.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const n=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M21 9V3m0 0h-6m6 0-8 8m-3-6H7.8c-1.68 0-2.52 0-3.162.327a3 3 0 0 0-1.311 1.311C3 7.28 3 8.12 3 9.8v6.4c0 1.68 0 2.52.327 3.162a3 3 0 0 0 1.311 1.311C5.28 21 6.12 21 7.8 21h6.4c1.68 0 2.52 0 3.162-.327a3 3 0 0 0 1.311-1.311C19 18.72 19 17.88 19 16.2V14"}));n.displayName="LinkExternal01";export{n};

package/dist/client/assets/Lock01-DO2oSngu.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M17 10V8A5 5 0 0 0 7 8v2m5 4.5v2M8.8 21h6.4c1.68 0 2.52 0 3.162-.327a3 3 0 0 0 1.311-1.311C20 18.72 20 17.88 20 16.2v-1.4c0-1.68 0-2.52-.327-3.162a3 3 0 0 0-1.311-1.311C17.72 10 16.88 10 15.2 10H8.8c-1.68 0-2.52 0-3.162.327a3 3 0 0 0-1.311 1.311C4 12.28 4 13.12 4 14.8v1.4c0 1.68 0 2.52.327 3.162a3 3 0 0 0 1.311 1.311C6.28 21 7.12 21 8.8 21Z"}));a.displayName="Lock01";export{a as i};

package/dist/client/assets/Monitor01-D0CnnsZY.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M8 21h8m-4-4v4m-5.2-4h10.4c1.68 0 2.52 0 3.162-.327a3 3 0 0 0 1.311-1.311C22 14.72 22 13.88 22 12.2V7.8c0-1.68 0-2.52-.327-3.162a3 3 0 0 0-1.311-1.311C19.72 3 18.88 3 17.2 3H6.8c-1.68 0-2.52 0-3.162.327a3 3 0 0 0-1.311 1.311C2 5.28 2 6.12 2 7.8v4.4c0 1.68 0 2.52.327 3.162a3 3 0 0 0 1.311 1.311C4.28 17 5.12 17 6.8 17Z"}));i.displayName="Monitor01";export{i};

package/dist/client/assets/Palette-DWKkC-mK.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const r=({size:e=24,color:a="currentColor",...c})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:a,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...c},t.createElement("path",{d:"m3.076 7.483 4.288 3.063c.223.159.335.239.451.257a.5.5 0 0 0 .301-.046c.106-.053.188-.163.353-.382l.906-1.208c.047-.063.07-.094.097-.12a.5.5 0 0 1 .08-.064c.032-.02.067-.036.138-.068l3.869-1.719c.16-.071.24-.107.3-.162a.5.5 0 0 0 .124-.177c.032-.076.037-.164.05-.339l.282-4.249M13.5 13.5l2.616 1.121c.303.13.455.195.536.303a.5.5 0 0 1 .098.33c-.009.134-.1.271-.284.546l-1.229 1.844c-.086.13-.13.195-.187.242a.5.5 0 0 1-.172.092c-.071.022-.15.022-.306.022h-1.995c-.208 0-.311 0-.4-.035a.5.5 0 0 1-.2-.144c-.061-.073-.094-.171-.16-.368l-.712-2.139a1.07 1.07 0 0 1-.063-.233.5.5 0 0 1 .01-.156c.014-.057.042-.112.096-.221l.542-1.083c.11-.22.165-.33.25-.399a.5.5 0 0 1 .26-.108c.108-.011.225.028.458.105l.842.281ZM22 12c0 5.523-4.477 10-10 10S2 17.523 2 12 6.477 2 12 2s10 4.477 10 10Z"}));r.displayName="Globe04";const o=({size:e=24,color:a="currentColor",...c})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:a,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...c},t.createElement("path",{d:"M2 12c0 5.523 4.477 10 10 10a3 3 0 0 0 3-3v-.5c0-.464 0-.697.026-.892a3 3 0 0 1 2.582-2.582c.195-.026.428-.026.892-.026h.5a3 3 0 0 0 3-3c0-5.523-4.477-10-10-10S2 6.477 2 12Z"}),t.createElement("path",{d:"M7 13a1 1 0 1 0 0-2 1 1 0 0 0 0 2Zm9-4a1 1 0 1 0 0-2 1 1 0 0 0 0 2Zm-6-1a1 1 0 1 0 0-2 1 1 0 0 0 0 2Z"}));o.displayName="Palette";export{o as a,r as t};

package/dist/client/assets/Play-CTCrKNE8.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M5 4.99c0-.972 0-1.457.202-1.725a1 1 0 0 1 .738-.395c.335-.02.74.25 1.548.788l10.515 7.01c.668.446 1.002.668 1.118.949a1 1 0 0 1 0 .766c-.116.28-.45.503-1.118.948l-10.515 7.01c-.809.54-1.213.809-1.548.789a1 1 0 0 1-.738-.395C5 20.467 5 19.98 5 19.01V4.99Z"}));a.displayName="Play";export{a as i};

package/dist/client/assets/Plus-ssLGg_XG.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M12 5v14m-7-7h14"}));i.displayName="Plus";export{i as s};

package/dist/client/assets/RefreshCcw01-CX9STw6q.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const a=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M19 12H5m0 0 7 7m-7-7 7-7"}));a.displayName="ArrowLeft";const i=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M5 15c-.932 0-1.398 0-1.765-.152a2 2 0 0 1-1.083-1.083C2 13.398 2 12.932 2 12V5.2c0-1.12 0-1.68.218-2.108a2 2 0 0 1 .874-.874C3.52 2 4.08 2 5.2 2H12c.932 0 1.398 0 1.765.152a2 2 0 0 1 1.083 1.083C15 3.602 15 4.068 15 5m-2.8 17h6.6c1.12 0 1.68 0 2.108-.218a2 2 0 0 0 .874-.874C22 20.48 22 19.92 22 18.8v-6.6c0-1.12 0-1.68-.218-2.108a2 2 0 0 0-.874-.874C20.48 9 19.92 9 18.8 9h-6.6c-1.12 0-1.68 0-2.108.218a2 2 0 0 0-.874.874C9 10.52 9 11.08 9 12.2v6.6c0 1.12 0 1.68.218 2.108a2 2 0 0 0 .874.874C10.52 22 11.08 22 12.2 22Z"}));i.displayName="Copy01";const n=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M10.743 5.092C11.149 5.032 11.569 5 12 5c5.105 0 8.455 4.505 9.58 6.287.137.215.205.323.243.49a1.16 1.16 0 0 1 0 .447c-.038.166-.107.274-.244.492-.3.474-.757 1.141-1.363 1.865M6.724 6.715c-2.162 1.467-3.63 3.504-4.303 4.57-.137.217-.205.325-.243.492a1.173 1.173 0 0 0 0 .446c.038.167.106.274.242.49C3.546 14.495 6.895 19 12 19c2.059 0 3.832-.732 5.289-1.723M3 3l18 18M9.88 9.879a3 3 0 1 0 4.243 4.243"}));n.displayName="EyeOff";const c=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M2.42 12.713c-.136-.215-.204-.323-.242-.49a1.173 1.173 0 0 1 0-.446c.038-.167.106-.274.242-.49C3.546 9.505 6.895 5 12 5s8.455 4.505 9.58 6.287c.137.215.205.323.243.49.029.125.029.322 0 .446-.038.167-.106.274-.242.49C20.455 14.495 17.105 19 12 19c-5.106 0-8.455-4.505-9.58-6.287Z"}),t.createElement("path",{d:"M12 15a3 3 0 1 0 0-6 3 3 0 0 0 0 6Z"}));c.displayName="Eye";const s=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M12.5 3H7.8c-1.68 0-2.52 0-3.162.327a3 3 0 0 0-1.311 1.311C3 5.28 3 6.12 3 7.8v8.4c0 1.68 0 2.52.327 3.162a3 3 0 0 0 1.311 1.311C5.28 21 6.12 21 7.8 21H17c.93 0 1.395 0 1.776-.102a3 3 0 0 0 2.122-2.122C21 18.395 21 17.93 21 17m-2-9V2m-3 3h6M10.5 8.5a2 2 0 1 1-4 0 2 2 0 0 1 4 0Zm4.49 3.418-8.459 7.69c-.476.433-.714.649-.735.836a.5.5 0 0 0 .167.431C6.105 21 6.426 21 7.07 21h9.387c1.44 0 2.159 0 2.724-.242a3 3 0 0 0 1.578-1.578c.242-.565.242-1.285.242-2.724 0-.484 0-.726-.053-.952a2.001 2.001 0 0 0-.374-.778c-.143-.182-.332-.333-.71-.636l-2.797-2.237c-.379-.303-.568-.454-.776-.508a1 1 0 0 0-.557.018c-.205.066-.384.23-.743.555Z"}));s.displayName="ImagePlus";const d=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M2 10s2.005-2.732 3.634-4.362A9 9 0 1 1 12 21a9.004 9.004 0 0 1-8.648-6.5M2 10V4m0 6h6"}));d.displayName="RefreshCcw01";export{i as a,n as b,d as c,s as d,a as i,c as s};

package/dist/client/assets/SearchMd-CfUKoRZA.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"m21 21-4.35-4.35M19 11a8 8 0 1 1-16 0 8 8 0 0 1 16 0Z"}));i.displayName="SearchMd";export{i};

package/dist/client/assets/Settings02-Cy-nc8kY.js

@@ -1 +0,0 @@
-import{r as e}from"./index-CsB44jLk.js";const l=({size:a=24,color:t="currentColor",...r})=>e.createElement("svg",{viewBox:"0 0 24 24",width:a,height:a,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},e.createElement("path",{d:"m9.395 19.371.585 1.315a2.212 2.212 0 0 0 4.044 0l.584-1.315a2.426 2.426 0 0 1 2.47-1.423l1.43.152a2.212 2.212 0 0 0 2.023-3.502l-.847-1.164a2.428 2.428 0 0 1-.46-1.434c0-.513.163-1.014.464-1.429l.847-1.163a2.211 2.211 0 0 0-2.022-3.502l-1.43.152a2.433 2.433 0 0 1-1.47-.312 2.426 2.426 0 0 1-1-1.117l-.589-1.315a2.212 2.212 0 0 0-4.044 0L9.395 4.63c-.207.468-.557.86-1 1.117-.445.256-.96.365-1.47.312l-1.434-.152a2.212 2.212 0 0 0-2.023 3.502l.847 1.163a2.43 2.43 0 0 1 0 2.858l-.847 1.163a2.21 2.21 0 0 0 .786 3.273c.382.195.811.274 1.237.23l1.43-.153a2.434 2.434 0 0 1 2.474 1.43Z"}),e.createElement("path",{d:"M12 15a3 3 0 1 0 0-6 3 3 0 0 0 0 6Z"}));l.displayName="Settings02";export{l as a};

package/dist/client/assets/Shield01-DXxLqg_g.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M11.302 21.615c.221.129.332.194.488.227.122.026.298.026.42 0 .156-.034.267-.098.488-.227C14.646 20.478 20 16.908 20 12V7.217c0-.799 0-1.199-.13-1.542a2 2 0 0 0-.548-.79c-.275-.243-.65-.383-1.398-.664l-5.362-2.01c-.208-.078-.312-.117-.419-.133a1 1 0 0 0-.286 0c-.107.016-.21.055-.419.133L6.076 4.22c-.748.28-1.122.421-1.398.664a2 2 0 0 0-.547.79C4 6.018 4 6.418 4 7.217V12c0 4.908 5.354 8.478 7.302 9.615Z"}));i.displayName="Shield01";export{i};

package/dist/client/assets/Star01-DnX8my50.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const o=({size:e=24,color:c="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:c,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10m0-20a15.3 15.3 0 0 0-4 10 15.3 15.3 0 0 0 4 10m0-20C6.477 2 2 6.477 2 12s4.477 10 10 10m0-20c5.523 0 10 4.477 10 10s-4.477 10-10 10M2.5 9h19m-19 6h19"}));o.displayName="Globe02";const a=({size:e=24,color:c="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:c,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M11.283 3.453c.23-.467.345-.7.502-.775a.5.5 0 0 1 .43 0c.157.075.272.308.502.775l2.187 4.43c.068.138.102.207.152.26a.502.502 0 0 0 .155.114c.067.03.143.042.295.064l4.891.715c.515.075.773.113.892.238a.5.5 0 0 1 .133.41c-.023.172-.21.353-.582.716l-3.54 3.446c-.11.108-.165.162-.2.226a.5.5 0 0 0-.06.183c-.009.072.004.148.03.3l.835 4.867c.088.514.132.77.05.922a.5.5 0 0 1-.349.253c-.17.032-.4-.09-.862-.332l-4.373-2.3c-.136-.07-.204-.107-.276-.12a.498.498 0 0 0-.192 0c-.072.013-.14.05-.276.12l-4.373 2.3c-.461.243-.692.364-.862.332a.5.5 0 0 1-.348-.253c-.083-.152-.039-.409.05-.922l.834-4.867c.026-.152.039-.228.03-.3a.5.5 0 0 0-.06-.184c-.035-.063-.09-.117-.2-.225L3.16 10.4c-.373-.363-.56-.544-.582-.716a.5.5 0 0 1 .132-.41c.12-.125.377-.163.892-.238l4.891-.715c.152-.022.228-.034.295-.064a.5.5 0 0 0 .155-.113c.05-.054.084-.123.152-.26l2.187-4.43Z"}));a.displayName="Star01";export{o as s,a as t};

package/dist/client/assets/Stars02-DQjyKksh.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const i=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M2.5 12h3.382c.685 0 1.312.387 1.618 1 .306.613.933 1 1.618 1h5.764c.685 0 1.312-.387 1.618-1 .306-.613.933-1 1.618-1H21.5M8.967 4h6.066c1.077 0 1.616 0 2.091.164a3 3 0 0 1 1.121.693c.36.352.6.833 1.082 1.796l2.166 4.333c.19.378.284.567.35.765.06.177.102.357.128.541.029.207.029.418.029.841V15.2c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C19.72 20 18.88 20 17.2 20H6.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C2 17.72 2 16.88 2 15.2v-2.067c0-.422 0-.634.029-.84.026-.184.068-.365.128-.541.066-.199.16-.388.35-.766l2.166-4.333c.482-.963.723-1.444 1.082-1.796a3 3 0 0 1 1.12-.693C7.352 4 7.89 4 8.968 4Z"}));i.displayName="Inbox01";const a=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"m2 7 8.165 5.715c.661.463.992.695 1.351.784a2 2 0 0 0 .968 0c.36-.09.69-.32 1.351-.784L22 7M6.8 20h10.4c1.68 0 2.52 0 3.162-.327a3 3 0 0 0 1.311-1.311C22 17.72 22 16.88 22 15.2V8.8c0-1.68 0-2.52-.327-3.162a3 3 0 0 0-1.311-1.311C19.72 4 18.88 4 17.2 4H6.8c-1.68 0-2.52 0-3.162.327a3 3 0 0 0-1.311 1.311C2 6.28 2 7.12 2 8.8v6.4c0 1.68 0 2.52.327 3.162a3 3 0 0 0 1.311 1.311C4.28 20 5.12 20 6.8 20Z"}));a.displayName="Mail01";const n=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"m21 21-3.5-3.5m2.5-6a8.5 8.5 0 1 1-17 0 8.5 8.5 0 0 1 17 0Z"}));n.displayName="SearchLg";const c=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M4.5 22v-5m0-10V2M2 4.5h5m-5 15h5M13 3l-1.734 4.509c-.282.733-.423 1.1-.643 1.408a3 3 0 0 1-.706.707c-.308.219-.675.36-1.408.642L4 12l4.509 1.734c.733.282 1.1.423 1.408.643.273.194.512.433.707.706.219.308.36.675.642 1.408L13 21l1.734-4.509c.282-.733.423-1.1.643-1.408.194-.273.433-.512.706-.707.308-.219.675-.36 1.408-.642L22 12l-4.509-1.734c-.733-.282-1.1-.423-1.408-.642a3 3 0 0 1-.706-.707c-.22-.308-.36-.675-.643-1.408L13 3Z"}));c.displayName="Stars02";export{a,n as i,i as n,c as s};

package/dist/client/assets/Sun-BHThXpUW.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const n=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M22 15.844a10.424 10.424 0 0 1-4.306.925c-5.779 0-10.463-4.684-10.463-10.462 0-1.536.33-2.994.925-4.307A10.464 10.464 0 0 0 2 11.538C2 17.316 6.684 22 12.462 22c4.243 0 7.896-2.526 9.538-6.156Z"}));n.displayName="Moon01";const i=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M12 2v2m0 16v2M4 12H2m4.314-5.686L4.9 4.9m12.786 1.414L19.1 4.9M6.314 17.69 4.9 19.104m12.786-1.414 1.414 1.414M22 12h-2m-3 0a5 5 0 1 1-10 0 5 5 0 0 1 10 0Z"}));i.displayName="Sun";export{n as a,i as n};

package/dist/client/assets/SwitchHorizontal01-ClR7Lb-X.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const i=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M12 5v14m0 0 7-7m-7 7-7-7"}));i.displayName="ArrowDown";const a=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M12 19V5m0 0-7 7m7-7 7 7"}));a.displayName="ArrowUp";const n=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M8.4 3H4.6c-.56 0-.84 0-1.054.109a1 1 0 0 0-.437.437C3 3.76 3 4.04 3 4.6v3.8c0 .56 0 .84.109 1.054a1 1 0 0 0 .437.437C3.76 10 4.04 10 4.6 10h3.8c.56 0 .84 0 1.054-.109a1 1 0 0 0 .437-.437C10 9.24 10 8.96 10 8.4V4.6c0-.56 0-.84-.109-1.054a1 1 0 0 0-.437-.437C9.24 3 8.96 3 8.4 3Zm11 0h-3.8c-.56 0-.84 0-1.054.109a1 1 0 0 0-.437.437C14 3.76 14 4.04 14 4.6v3.8c0 .56 0 .84.109 1.054a1 1 0 0 0 .437.437C14.76 10 15.04 10 15.6 10h3.8c.56 0 .84 0 1.054-.109a1 1 0 0 0 .437-.437C21 9.24 21 8.96 21 8.4V4.6c0-.56 0-.84-.109-1.054a1 1 0 0 0-.437-.437C20.24 3 19.96 3 19.4 3Zm0 11h-3.8c-.56 0-.84 0-1.054.109a1 1 0 0 0-.437.437C14 14.76 14 15.04 14 15.6v3.8c0 .56 0 .84.109 1.054a1 1 0 0 0 .437.437C14.76 21 15.04 21 15.6 21h3.8c.56 0 .84 0 1.054-.109a1 1 0 0 0 .437-.437C21 20.24 21 19.96 21 19.4v-3.8c0-.56 0-.84-.109-1.054a1 1 0 0 0-.437-.437C20.24 14 19.96 14 19.4 14Zm-11 0H4.6c-.56 0-.84 0-1.054.109a1 1 0 0 0-.437.437C3 14.76 3 15.04 3 15.6v3.8c0 .56 0 .84.109 1.054a1 1 0 0 0 .437.437C3.76 21 4.04 21 4.6 21h3.8c.56 0 .84 0 1.054-.109a1 1 0 0 0 .437-.437C10 20.24 10 19.96 10 19.4v-3.8c0-.56 0-.84-.109-1.054a1 1 0 0 0-.437-.437C9.24 14 8.96 14 8.4 14Z"}));n.displayName="Grid01";const s=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M21 12H9m12-6H9m12 12H9m-4-6a1 1 0 1 1-2 0 1 1 0 0 1 2 0Zm0-6a1 1 0 1 1-2 0 1 1 0 0 1 2 0Zm0 12a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"}));s.displayName="List";const c=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M5 21v-7m0-4V3m7 18v-9m0-4V3m7 18v-5m0-4V3M2 14h6m1-6h6m1 8h6"}));c.displayName="Sliders01";const d=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M20 17H4m0 0 4-4m-4 4 4 4M4 7h16m0 0-4-4m4 4-4 4"}));d.displayName="SwitchHorizontal01";export{d as a,s as b,n as c,c as d,a as i,i as n};

package/dist/client/assets/Tool01-BwoAinA0.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const a=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M16 10H3m17-4H3m17 8H3m13 4H3"}));a.displayName="AlignLeft";const i=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"m7 15 5 5 5-5M7 9l5-5 5 5"}));i.displayName="ChevronSelectorVertical";const c=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M2.876 18.116c.046-.414.069-.62.131-.814a2 2 0 0 1 .234-.485c.111-.17.259-.317.553-.61L17 3a2.828 2.828 0 1 1 4 4L7.794 20.206c-.294.294-.442.442-.611.553a2 2 0 0 1-.485.233c-.193.063-.4.086-.814.132L2.5 21.5l.376-3.384Z"}));c.displayName="Edit01";const n=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M16.2 21H6.931c-.605 0-.908 0-1.049-.12a.5.5 0 0 1-.173-.42c.014-.183.228-.397.657-.826l8.503-8.503c.396-.396.594-.594.822-.668a1 1 0 0 1 .618 0c.228.074.426.272.822.668L21 15v1.2M16.2 21c1.68 0 2.52 0 3.162-.327a3 3 0 0 0 1.311-1.311C21 18.72 21 17.88 21 16.2M16.2 21H7.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C3 18.72 3 17.88 3 16.2V7.8c0-1.68 0-2.52.327-3.162a3 3 0 0 1 1.311-1.311C5.28 3 6.12 3 7.8 3h8.4c1.68 0 2.52 0 3.162.327a3 3 0 0 1 1.311 1.311C21 5.28 21 6.12 21 7.8v8.4M10.5 8.5a2 2 0 1 1-4 0 2 2 0 0 1 4 0Z"}));n.displayName="Image01";const l=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"m6.5 13 .784 1.569c.266.53.399.796.576 1.026a3 3 0 0 0 .545.545c.23.177.495.31 1.026.575L11 17.5l-1.569.785c-.53.265-.796.398-1.026.575a3 3 0 0 0-.545.545c-.177.23-.31.495-.576 1.026L6.5 22l-.784-1.569c-.266-.53-.399-.796-.576-1.026a3 3 0 0 0-.545-.545c-.23-.177-.495-.31-1.026-.575L2 17.5l1.569-.785c.53-.265.796-.398 1.026-.575a3 3 0 0 0 .545-.545c.177-.23.31-.495.576-1.026L6.5 13ZM15 2l1.179 3.064c.282.734.423 1.1.642 1.409a3 3 0 0 0 .706.706c.309.22.675.36 1.409.642L22 9l-3.064 1.179c-.734.282-1.1.423-1.409.642a3 3 0 0 0-.706.706c-.22.309-.36.675-.642 1.409L15 16l-1.179-3.064c-.282-.734-.423-1.1-.642-1.409a3 3 0 0 0-.706-.706c-.309-.22-.675-.36-1.409-.642L8 9l3.064-1.179c.734-.282 1.1-.423 1.409-.642a3 3 0 0 0 .706-.706c.22-.309.36-.675.642-1.409L15 2Z"}));l.displayName="Stars01";const s=({size:e=24,color:o="currentColor",...r})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:o,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...r},t.createElement("path",{d:"M15.631 7.631c-.396-.396-.594-.594-.668-.822a1 1 0 0 1 0-.618c.074-.228.272-.426.668-.822L18.47 2.53a6 6 0 0 0-8.3 6.895c.12.49.179.734.168.888a.849.849 0 0 1-.11.392c-.07.138-.207.274-.48.547L3.5 17.5a2.121 2.121 0 0 0 3 3l6.248-6.248c.273-.273.41-.41.547-.48a.849.849 0 0 1 .392-.11c.154-.011.399.049.888.168a6 6 0 0 0 6.895-8.3l-2.84 2.84c-.396.396-.594.594-.822.668a1 1 0 0 1-.618 0c-.228-.074-.426-.272-.822-.668l-.738-.738Z"}));s.displayName="Tool01";export{n as a,s as b,a as c,i as d,c as i,l as t};

package/dist/client/assets/Trash01-PCEnuUrl.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M16 6v-.8c0-1.12 0-1.68-.218-2.108a2 2 0 0 0-.874-.874C14.48 2 13.92 2 12.8 2h-1.6c-1.12 0-1.68 0-2.108.218a2 2 0 0 0-.874.874C8 3.52 8 4.08 8 5.2V6m2 5.5v5m4-5v5M3 6h18m-2 0v11.2c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C16.72 22 15.88 22 14.2 22H9.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C5 19.72 5 18.88 5 17.2V6"}));a.displayName="Trash01";export{a as s};

package/dist/client/assets/Upload01-BveDz2NI.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M21 15v1.2c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C18.72 21 17.88 21 16.2 21H7.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C3 18.72 3 17.88 3 16.2V15m14-7-5-5m0 0L7 8m5-5v12"}));i.displayName="Upload01";export{i};

package/dist/client/assets/User01-CnMMoieR.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M20 21c0-1.396 0-2.093-.172-2.661a4 4 0 0 0-2.667-2.667c-.568-.172-1.265-.172-2.661-.172h-5c-1.396 0-2.093 0-2.661.172a4 4 0 0 0-2.667 2.667C4 18.907 4 19.604 4 21M16.5 7.5a4.5 4.5 0 1 1-9 0 4.5 4.5 0 0 1 9 0Z"}));a.displayName="User01";export{a as s};

package/dist/client/assets/Users01-B3oMGRid.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const a=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M22 21v-2a4.002 4.002 0 0 0-3-3.874M15.5 3.291a4.001 4.001 0 0 1 0 7.418M17 21c0-1.864 0-2.796-.305-3.53a4 4 0 0 0-2.164-2.165C13.796 15 12.864 15 11 15H8c-1.864 0-2.796 0-3.53.305a4 4 0 0 0-2.166 2.164C2 18.204 2 19.136 2 21M13.5 7a4 4 0 1 1-8 0 4 4 0 0 1 8 0Z"}));a.displayName="Users01";export{a as t};

package/dist/client/assets/Users03-CLYRtaaa.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const a=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M15 21v-5.4c0-.56 0-.84-.109-1.054a1 1 0 0 0-.437-.437C14.24 14 13.96 14 13.4 14h-2.8c-.56 0-.84 0-1.054.109a1 1 0 0 0-.437.437C9 14.76 9 15.04 9 15.6V21M3 7a3 3 0 0 0 6 0 3 3 0 1 0 6 0 3 3 0 1 0 6 0M6.2 21h11.6c1.12 0 1.68 0 2.108-.218a2 2 0 0 0 .874-.874C21 19.48 21 18.92 21 17.8V6.2c0-1.12 0-1.68-.218-2.108a2 2 0 0 0-.874-.874C19.48 3 18.92 3 17.8 3H6.2c-1.12 0-1.68 0-2.108.218a2 2 0 0 0-.874.874C3 4.52 3 5.08 3 6.2v11.6c0 1.12 0 1.68.218 2.108a2 2 0 0 0 .874.874C4.52 21 5.08 21 6.2 21Z"}));a.displayName="Building02";const i=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M18 15.837c1.456.731 2.704 1.905 3.615 3.373.18.29.27.436.302.637.063.409-.216.912-.597 1.073-.188.08-.398.08-.82.08M16 11.532a4.5 4.5 0 0 0 0-8.064M14 7.5a4.5 4.5 0 1 1-9 0 4.5 4.5 0 0 1 9 0ZM2.56 18.938C4.153 16.545 6.67 15 9.5 15s5.346 1.545 6.94 3.938c.35.525.525.787.505 1.122-.016.26-.187.58-.396.738-.267.202-.635.202-1.371.202H3.822c-.736 0-1.104 0-1.372-.202a1.109 1.109 0 0 1-.395-.738c-.02-.335.155-.597.504-1.122Z"}));i.displayName="Users03";export{i as a,a as t};

package/dist/client/assets/X-DSVDaljC.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M17 7 7 17M7 7l10 10"}));i.displayName="X";export{i};

package/dist/client/assets/XCircle-Db8ofLDA.js

@@ -1 +0,0 @@
-import{r as t}from"./index-CsB44jLk.js";const a=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M20 12H4m0 0 6 6m-6-6 6-6"}));a.displayName="ArrowNarrowLeft";const i=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M5 12h14m0 0-7-7m7 7-7 7"}));i.displayName="ArrowRight";const n=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"m9 12 2 2 4.5-4.5m2.401-4.501a2.03 2.03 0 0 0 1.1 1.1l1.744.723a2.033 2.033 0 0 1 1.1 2.656l-.722 1.744a2.03 2.03 0 0 0 0 1.556l.722 1.744a2.033 2.033 0 0 1-1.1 2.656L19 17.901A2.033 2.033 0 0 0 17.9 19l-.723 1.745a2.032 2.032 0 0 1-2.656 1.1l-1.744-.722a2.032 2.032 0 0 0-1.555 0l-1.745.723a2.033 2.033 0 0 1-2.654-1.1L6.1 19.001A2.033 2.033 0 0 0 5 17.9l-1.744-.723a2.033 2.033 0 0 1-1.1-2.654l.721-1.744a2.033 2.033 0 0 0 0-1.556l-.722-1.746a2.033 2.033 0 0 1 1.1-2.657L5 6.098A2.03 2.03 0 0 0 6.1 5l.723-1.745a2.033 2.033 0 0 1 2.656-1.1l1.744.722a2.033 2.033 0 0 0 1.555-.001l1.746-.72a2.032 2.032 0 0 1 2.655 1.1l.723 1.746v-.003Z"}));n.displayName="CheckVerified02";const l=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M21 15v1.2c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C18.72 21 17.88 21 16.2 21H7.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C3 18.72 3 17.88 3 16.2V15m14-5-5 5m0 0-5-5m5 5V3"}));l.displayName="Download01";const c=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M2 12h20M2 12c0 5.523 4.477 10 10 10M2 12C2 6.477 6.477 2 12 2m10 10c0 5.523-4.477 10-10 10m10-10c0-5.523-4.477-10-10-10m0 0a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10m0-20a15.3 15.3 0 0 0-4 10 15.3 15.3 0 0 0 4 10"}));c.displayName="Globe01";const s=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"m12.708 18.364-1.415 1.414a5 5 0 1 1-7.07-7.07l1.413-1.415m12.728 1.414 1.415-1.414a5 5 0 0 0-7.071-7.071l-1.415 1.414M8.5 15.5l7-7"}));s.displayName="Link01";const d=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M10.5 9.002a2.248 2.248 0 0 1 4.369.75C14.869 11.25 12.62 12 12.62 12m.028 3h.01m-.16 5a8.5 8.5 0 1 0-8.056-5.783c.108.32.162.481.172.604a.899.899 0 0 1-.028.326c-.03.12-.098.245-.232.494l-1.636 3.027c-.233.432-.35.648-.324.815a.5.5 0 0 0 .234.35c.144.087.388.062.876.011l5.121-.529c.155-.016.233-.024.303-.021.07.002.12.009.187.024.069.016.155.05.329.116A8.478 8.478 0 0 0 12.5 20Z"}));d.displayName="MessageQuestionCircle";const h=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"M3 7.8c0-1.68 0-2.52.327-3.162a3 3 0 0 1 1.311-1.311C5.28 3 6.12 3 7.8 3h8.4c1.68 0 2.52 0 3.162.327a3 3 0 0 1 1.311 1.311C21 5.28 21 6.12 21 7.8v8.4c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C18.72 21 17.88 21 16.2 21H7.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C3 18.72 3 17.88 3 16.2V7.8Z"}),t.createElement("path",{d:"M8 9.6c0-.56 0-.84.109-1.054a1 1 0 0 1 .437-.437C8.76 8 9.04 8 9.6 8h4.8c.56 0 .84 0 1.054.109a1 1 0 0 1 .437.437C16 8.76 16 9.04 16 9.6v4.8c0 .56 0 .84-.109 1.054a1 1 0 0 1-.437.437C15.24 16 14.96 16 14.4 16H9.6c-.56 0-.84 0-1.054-.109a1 1 0 0 1-.437-.437C8 15.24 8 14.96 8 14.4V9.6Z"}));h.displayName="StopSquare";const m=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"m6 6 4.5 4.5M6 6H3L2 3l1-1 3 1v3Zm13.259-3.259-2.628 2.628c-.396.396-.594.594-.668.822a1 1 0 0 0 0 .618c.074.228.272.426.668.822l.238.238c.396.396.594.594.822.668a1 1 0 0 0 .618 0c.228-.074.426-.272.822-.668L21.59 5.41a5.5 5.5 0 0 1-6.16 7.485c-.485-.096-.729-.144-.876-.13a.836.836 0 0 0-.373.114c-.13.07-.261.201-.523.463L6.5 20.5a2.121 2.121 0 0 1-3-3l7.157-7.157c.262-.262.393-.393.463-.524a.836.836 0 0 0 .113-.372c.015-.148-.033-.39-.129-.877a5.5 5.5 0 0 1 8.155-5.83ZM12 15l5.5 5.5a2.121 2.121 0 0 0 3-3l-4.525-4.525a5.475 5.475 0 0 1-.934-.17c-.39-.107-.816-.03-1.101.255L12 15Z"}));m.displayName="Tool02";const k=({size:e=24,color:r="currentColor",...o})=>t.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:r,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},t.createElement("path",{d:"m15 9-6 6m0-6 6 6m7-3c0 5.523-4.477 10-10 10S2 17.523 2 12 6.477 2 12 2s10 4.477 10 10Z"}));k.displayName="XCircle";export{c as a,i as b,s as c,n as d,m as e,a as f,h as g,k as i,l as n,d as t};

package/dist/client/assets/XClose-BMd-ZHgQ.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M18 6 6 18M6 6l12 12"}));i.displayName="XClose";export{i as s};

package/dist/client/assets/Zap-CBO02hUg.js

@@ -1 +0,0 @@
-import{r}from"./index-CsB44jLk.js";const i=({size:e=24,color:t="currentColor",...o})=>r.createElement("svg",{viewBox:"0 0 24 24",width:e,height:e,stroke:t,strokeWidth:"2",fill:"none",strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",...o},r.createElement("path",{d:"M13 2 4.093 12.688c-.348.418-.523.628-.525.804a.5.5 0 0 0 .185.397c.138.111.41.111.955.111H12l-1 8 8.907-10.688c.348-.418.523-.628.525-.804a.5.5 0 0 0-.185-.397c-.138-.111-.41-.111-.955-.111H12l1-8Z"}));i.displayName="Zap";export{i};