decocms 3.75.2 → 3.76.1

package/dist/server/migrate.js

@@ -948,7 +948,7 @@ var Si=Object.defineProperty;var Xi=(t)=>t;function Fi(t,e){this[t]=Xi.bind(null
     CREATE UNIQUE INDEX idx_connection_workload_tokens_active_unique
     ON connection_workload_tokens (organization_id, subject_connection_id, name)
     WHERE revoked_at IS NULL
-  `.execute(t),await t.schema.createTable("connection_credential_grants").addColumn("id","text",(e)=>e.primaryKey()).addColumn("organization_id","text",(e)=>e.notNull().references("organization.id").onDelete("cascade")).addColumn("subject_connection_id","text",(e)=>e.notNull().references("connections.id").onDelete("cascade")).addColumn("target_connection_id","text",(e)=>e.notNull().references("connections.id").onDelete("cascade")).addColumn("scope","text",(e)=>e.notNull()).addColumn("created_by","text",(e)=>e.notNull()).addColumn("created_at","timestamptz",(e)=>e.notNull().defaultTo(H`CURRENT_TIMESTAMP`)).addColumn("updated_at","timestamptz",(e)=>e.notNull().defaultTo(H`CURRENT_TIMESTAMP`)).execute(),await t.schema.createIndex("idx_connection_credential_grants_subject").on("connection_credential_grants").columns(["organization_id","subject_connection_id"]).execute(),await t.schema.createIndex("idx_connection_credential_grants_target").on("connection_credential_grants").columns(["organization_id","target_connection_id"]).execute(),await t.schema.createIndex("idx_connection_credential_grants_unique").on("connection_credential_grants").columns(["organization_id","subject_connection_id","target_connection_id","scope"]).unique().execute()}async function Hm(t){await t.schema.dropTable("connection_credential_grants").ifExists().execute(),await t.schema.dropTable("connection_workload_tokens").ifExists().execute()}var Ym={"001-initial-schema":rt,"002-organization-settings":ct,"003-connection-schema-align":yt,"004-remove-models-binding":st,"005-connection-configuration":ft,"006-add-views-to-settings":Tt,"007-monitoring-logs":pt,"008-event-bus":wt,"009-drop-audit-logs":Ct,"010-gateways":Nt,"011-gateway-icon":ht,"012-gateway-tool-selection-mode":Et,"013-monitoring-user-agent-gateway":Kt,"014-gateway-resources-prompts":kt,"015-monitoring-properties":Pt,"016-downstream-token-client-info":zt,"017-downstream-token-remove-userid":Ut,"018-drop-gateway-tool-selection-strategy":Dt,"019-remove-gateway-is-default":Lt,"020-enabled-plugins":gt,"021-threads":Rt,"022-rename-gateway-to-virtual-mcp":Jt,"023-optimize-thread-indexes":jt,"024-consolidate-virtual-mcp":At,"025-add-monitoring-virtual-mcp-id":Wt,"026-restrict-child-connection-delete":$t,"027-update-management-mcp-url":Xt,"028-update-management-mcp-to-self":Mt,"029-add-updated-by-to-connections":Qt,"030-member-tags":Ot,"031-add-dependency-mode":Zt,"032-projects":Ht,"033-thread-status":Yt,"034-monitoring-dashboards":It,"035-project-connections":Bt,"036-update-registry-url":Gt,"037-ai-provider-keys":vt,"038-oauth-pkce-states":Vt,"039-automations":qt,"040-replace-next-run-at-with-last-run-at":lt,"041-ai-provider-keys-unique-constraint":dt,"042-rename-mesh-mcp-to-cms-mcp":bt,"043-rename-cms-mcp-to-deco-cms":te,"044-drop-connections-tools-column":ee,"045-thread-context-start-message":ne,"046-remove-object-storage-plugin":ae,"047-add-next-run-at":ue,"048-merge-projects-agents":_e,"049-remove-org-admin-projects":me,"050-durable-agent-runs":xe,"051-org-sso":ce,"052-thread-agent-ids":ye,"053-registry-config":se,"054-connection-slug":Te,"055-spaces":pe,"056-automation-project-scope":we,"057-thread-virtual-mcp-id":Ce,"058-trigger-callback-tokens":Ne,"059-kv":he,"060-member-index":Ee,"061-downstream-token-connection-index":Ke,"062-private-registry":ke,"063-event-subscriptions-enabled-boolean":Pe,"064-brand-context":ze,"065-organization-domains":Ue,"066-brand-context-structured":De,"067-threads-metadata":Le,"068-threads-branch":ge,"069-sandbox-runner-state":Re,"070-model-categories":Je,"071-default-home-agents":je,"072-ai-provider-key-preset-id":Ae,"073-backfill-basic-usage-roles":We,"074-sandbox-runner-state-handle-nonunique":$e,"075-thread-inflight-async-jobs":Se,"076-automations-drop-agent-json":Xe,"077-tier-only-model-selection":Me,"078-automation-tool-call-kind":Qe,"079-strip-legacy-freestyle-vm-map-entries":Oe,"080-async-research-jobs":Ze,"081-async-research-jobs-result-content":He,"082-secrets":Ye,"083-thread-run-locally":Ie,"084-drop-host-sandbox-rows":Be,"085-rename-runner-kind":Ge,"086-thread-pins-and-vm-map-rekey":ve,"087-fix-vm-map-rekey":Ve,"088-purge-cli-activate-keys":qe,"089-rename-remote-user-to-desktop":le,"090-automation-webhook-triggers":de,"091-organization-domains-allow-multi":be,"092-sandbox-naming-uniformization":tn,"093-backfill-global-search-basic-usage":en,"094-org-file-configs":an,"095-remove-automation-tool-call-kind":un,"096-org-file-configs-public-url-base":on,"097-drop-local-docker-sandbox-state":mn,"098-thread-message-parts":xn,"099-run-fence":rn,"100-link-transport":cn,"101-cancel-requested-at":yn,"102-observational-agent":sn,"103-revert-observational-agent":fn,"104-agent-sandbox-provider-kind":pn,"105-org-fs":wn,"106-automation-tools":Cn,"107-org-fs-public-org":Nn,"108-automation-max-agent-steps":hn,"109-thread-message-parts-per-message-seq":En,"110-backfill-ghs-token-expiry":Kn,"111-org-fs-thread-id":kn,"112-org-file-configs-credential-type":Pn,"113-thread-failure-reason":zn,"114-run-acked-seq":Un,"115-thread-projected-seq":Dn,"116-org-sites":Ln,"117-org-file-configs-site-slug":gn,"118-organization-domains-multi-verify":Rn,"119-organization-join-requests":Jn,"120-org-fs-read-public":jn,"121-org-fs-share-password":An,"122-split-web-research-tier":Sn,"123-connection-credential-vault":Xn},Fn=Ym;import{getMigrations as Kx}from"better-auth/db";import{sso as kx}from"@better-auth/sso";import{organization as Px}from"@decocms/better-auth/plugins";import{admin as zx,apiKey as Ux,jwt as Dx,magicLink as Lx,mcp as gx,openAPI as Rx}from"better-auth/plugins";import{emailOTP as Jx}from"better-auth/plugins/email-otp";import{Kysely as Tx,PostgresDialect as Di}from"kysely";import{Pool as Li}from"pg";import{homedir as Im}from"os";var Bm=new Set(["all","worker","api"]);function Gm(t){let e=(t??"").trim();return Bm.has(e)?e:"all"}function A(t){return t==="true"||t==="1"}function vm(t){if(t===void 0||t==="")return;return A(t)}function Vm(t,e,n){if(e===void 0||e==="")return n;let u=Number(e);if(!Number.isSafeInteger(u)||u<=0)throw Error(`${t} must be a positive integer`);return u}function qm(t,e){if(t===void 0||t==="")return e;return t==="true"||t==="1"}function wi(t){if(!t)return null;try{let n=new URL(t).hostname;if(n==="localhost"||n==="127.0.0.1"||n==="::1")return null;return t}catch{return null}}var lm=new Set(["agent-sandbox","user-desktop"]);function dm(t){let e=t&&t.length>0?t:"user-desktop";if(e==="cluster")return"agent-sandbox";if(!lm.has(e))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return e}function Ci(t,e){let n=t.home||e.DATA_DIR||e.DECOCMS_HOME||`${Im()}/deco`,u=t.localMode,i=t.nodeEnv||e.NODE_ENV||"development",o=e.NATS_URL||"nats://localhost:4222",m=vm(e.NATS_TUNNEL_PUBLIC_ENABLED)??!!e.NATS_PUBLIC_URL;return{settings:{nodeEnv:i,port:Number(t.port)||Number(e.PORT)||3000,baseUrl:t.baseUrl||e.BASE_URL,dataDir:n,databasePgSsl:A(e.DATABASE_PG_SSL),databasePoolMax:Number(e.DATABASE_POOL_MAX)||5,betterAuthSecret:e.BETTER_AUTH_SECRET||"",encryptionKey:e.ENCRYPTION_KEY||"",meshJwtSecret:e.MESH_JWT_SECRET,localMode:u,disableRateLimit:A(e.DISABLE_RATE_LIMIT),studioProvisionSecretKey:e.STUDIO_PROVISION_SECRET_KEY,clickhouseUrl:e.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:Number(e.CLICKHOUSE_MAX_MEMORY_USAGE)||void 0,monitoringOtlpEndpoint:e.MONITORING_OTLP_ENDPOINT,otelServiceName:e.OTEL_SERVICE_NAME||"studio",natsPublicUrl:e.NATS_PUBLIC_URL,natsTunnelPublicEnabled:m,natsTunnelSessionTtlSeconds:Vm("NATS_TUNNEL_SESSION_TTL_SECONDS",e.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:e.NATS_OPERATOR_JWT,natsAccountJwt:e.NATS_ACCOUNT_JWT,natsAccountSigningKey:e.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:e.NATS_CREDS,configPath:e.CONFIG_PATH||"./config.json",aiGatewayEnabled:A(e.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:e.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",enableDecoImport:A(e.ENABLE_DECO_IMPORT),mcpCacheEnabled:qm(e.MCP_CACHE_ENABLED,i!=="development"),orgFsPublicSetsJson:e.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:A(e.DISABLE_ORGFS_MOUNTS),s3Endpoint:e.S3_ENDPOINT,s3Bucket:e.S3_BUCKET,s3Region:e.S3_REGION||"auto",s3AccessKeyId:e.S3_ACCESS_KEY_ID,s3SecretAccessKey:e.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:e.S3_FORCE_PATH_STYLE===void 0||e.S3_FORCE_PATH_STYLE===""||e.S3_FORCE_PATH_STYLE==="true"||e.S3_FORCE_PATH_STYLE==="1",monitoringS3Bucket:e.MONITORING_S3_BUCKET,monitoringS3Endpoint:e.MONITORING_S3_ENDPOINT,monitoringS3Region:e.MONITORING_S3_REGION,monitoringS3AccessKeyId:e.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:e.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:e.MONITORING_S3_PREFIX,duckdbExtensionDirectory:e.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:e.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:e.DUCKDB_THREADS?Number(e.DUCKDB_THREADS):void 0,isCli:!0,noTui:t.noTui===!0,podName:e.POD_NAME??crypto.randomUUID(),dispatchRole:Gm(e.MESH_DISPATCH_ROLE),sandboxProviderKind:dm(e.STUDIO_SANDBOX_PROVIDER),decoSupabaseUrl:e.DECO_SUPABASE_URL,decoSupabaseServiceKey:e.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:e.FIRECRAWL_API_KEY,s3TenantBucket:e.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:e.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:e.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:e.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:e.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:e.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:e.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:wi(e.DATABASE_URL),externalNatsUrl:wi(o),skipMigrations:t.skipMigrations}}var ut=null;function W(){if(!ut)bm();return ut}function bm(){if(ut)return;let t={...process.env},e=Ci({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);ut=Object.freeze({...e.settings,databaseUrl:t.DATABASE_URL??"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((n)=>n.trim()).filter(Boolean)})}import{createContextKey as ux,metrics as ox,propagation as Ly,ROOT_CONTEXT as gy,SpanStatusCode as Ry,trace as _x}from"@opentelemetry/api";import{logs as mx,SeverityNumber as Mn}from"@opentelemetry/api-logs";import{OTLPLogExporter as Ay}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as xx}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as Sy}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as Fy}from"@opentelemetry/instrumentation-runtime-node";import{context as Kc,propagation as kc,SpanKind as Pc,SpanStatusCode as zc}from"@opentelemetry/api";var Dc=globalThis.fetch;import{ExportResultCode as Mc}from"@opentelemetry/core";import{ExportResultCode as ot}from"@opentelemetry/core";import{mkdir as tx,rename as ex,writeFile as nx}from"fs/promises";import{join as _t}from"path";class mt{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let e=t.flushIntervalMs??60000;if(e>0&&e<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((n)=>{console.error("[NDJSONExporter] Timer flush failed:",n)})},e),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:ot.FAILED});for(let e of t){let n=JSON.stringify(e),u=this.partitionKey?this.partitionKey(e):"";this.bufferItems.push({partition:u,json:n}),this.bufferBytes+=Buffer.byteLength(n,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:ot.SUCCESS})).catch((e)=>{return console.error("[NDJSONExporter] Flush failed:",e),{code:ot.FAILED}});return Promise.resolve({code:ot.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let e=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=e,e}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let e=new Map;for(let i of t){let o=e.get(i.partition);if(!o)o=[],e.set(i.partition,o);o.push(i.json)}let n=await Promise.allSettled(Array.from(e.entries()).map(([i,o])=>this.writeNDJSON(o,i).then(()=>i))),u=n.find((i)=>i.status==="rejected");if(u){let i=new Set;for(let m of n)if(m.status==="fulfilled")i.add(m.value);let o=t.filter((m)=>!i.has(m.partition));this.bufferItems=o.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw u.reason}}async writeNDJSON(t,e){let n=new Date,u=[String(n.getUTCFullYear()),String(n.getUTCMonth()+1).padStart(2,"0"),String(n.getUTCDate()).padStart(2,"0"),String(n.getUTCHours()).padStart(2,"0")],i=e?_t(this.basePath,e,...u):_t(this.basePath,...u);if(!this.knownDirs.has(i))await tx(i,{recursive:!0,mode:448}),this.knownDirs.add(i);let o=`${crypto.randomUUID()}.ndjson`,m=_t(i,`.${o}.tmp`),_=_t(i,o),x=t.join(`
+  `.execute(t),await t.schema.createTable("connection_credential_grants").addColumn("id","text",(e)=>e.primaryKey()).addColumn("organization_id","text",(e)=>e.notNull().references("organization.id").onDelete("cascade")).addColumn("subject_connection_id","text",(e)=>e.notNull().references("connections.id").onDelete("cascade")).addColumn("target_connection_id","text",(e)=>e.notNull().references("connections.id").onDelete("cascade")).addColumn("scope","text",(e)=>e.notNull()).addColumn("created_by","text",(e)=>e.notNull()).addColumn("created_at","timestamptz",(e)=>e.notNull().defaultTo(H`CURRENT_TIMESTAMP`)).addColumn("updated_at","timestamptz",(e)=>e.notNull().defaultTo(H`CURRENT_TIMESTAMP`)).execute(),await t.schema.createIndex("idx_connection_credential_grants_subject").on("connection_credential_grants").columns(["organization_id","subject_connection_id"]).execute(),await t.schema.createIndex("idx_connection_credential_grants_target").on("connection_credential_grants").columns(["organization_id","target_connection_id"]).execute(),await t.schema.createIndex("idx_connection_credential_grants_unique").on("connection_credential_grants").columns(["organization_id","subject_connection_id","target_connection_id","scope"]).unique().execute()}async function Hm(t){await t.schema.dropTable("connection_credential_grants").ifExists().execute(),await t.schema.dropTable("connection_workload_tokens").ifExists().execute()}var Ym={"001-initial-schema":rt,"002-organization-settings":ct,"003-connection-schema-align":yt,"004-remove-models-binding":st,"005-connection-configuration":ft,"006-add-views-to-settings":Tt,"007-monitoring-logs":pt,"008-event-bus":wt,"009-drop-audit-logs":Ct,"010-gateways":Nt,"011-gateway-icon":ht,"012-gateway-tool-selection-mode":Et,"013-monitoring-user-agent-gateway":Kt,"014-gateway-resources-prompts":kt,"015-monitoring-properties":Pt,"016-downstream-token-client-info":zt,"017-downstream-token-remove-userid":Ut,"018-drop-gateway-tool-selection-strategy":Dt,"019-remove-gateway-is-default":Lt,"020-enabled-plugins":gt,"021-threads":Rt,"022-rename-gateway-to-virtual-mcp":Jt,"023-optimize-thread-indexes":jt,"024-consolidate-virtual-mcp":At,"025-add-monitoring-virtual-mcp-id":Wt,"026-restrict-child-connection-delete":$t,"027-update-management-mcp-url":Xt,"028-update-management-mcp-to-self":Mt,"029-add-updated-by-to-connections":Qt,"030-member-tags":Ot,"031-add-dependency-mode":Zt,"032-projects":Ht,"033-thread-status":Yt,"034-monitoring-dashboards":It,"035-project-connections":Bt,"036-update-registry-url":Gt,"037-ai-provider-keys":vt,"038-oauth-pkce-states":Vt,"039-automations":qt,"040-replace-next-run-at-with-last-run-at":lt,"041-ai-provider-keys-unique-constraint":dt,"042-rename-mesh-mcp-to-cms-mcp":bt,"043-rename-cms-mcp-to-deco-cms":te,"044-drop-connections-tools-column":ee,"045-thread-context-start-message":ne,"046-remove-object-storage-plugin":ae,"047-add-next-run-at":ue,"048-merge-projects-agents":_e,"049-remove-org-admin-projects":me,"050-durable-agent-runs":xe,"051-org-sso":ce,"052-thread-agent-ids":ye,"053-registry-config":se,"054-connection-slug":Te,"055-spaces":pe,"056-automation-project-scope":we,"057-thread-virtual-mcp-id":Ce,"058-trigger-callback-tokens":Ne,"059-kv":he,"060-member-index":Ee,"061-downstream-token-connection-index":Ke,"062-private-registry":ke,"063-event-subscriptions-enabled-boolean":Pe,"064-brand-context":ze,"065-organization-domains":Ue,"066-brand-context-structured":De,"067-threads-metadata":Le,"068-threads-branch":ge,"069-sandbox-runner-state":Re,"070-model-categories":Je,"071-default-home-agents":je,"072-ai-provider-key-preset-id":Ae,"073-backfill-basic-usage-roles":We,"074-sandbox-runner-state-handle-nonunique":$e,"075-thread-inflight-async-jobs":Se,"076-automations-drop-agent-json":Xe,"077-tier-only-model-selection":Me,"078-automation-tool-call-kind":Qe,"079-strip-legacy-freestyle-vm-map-entries":Oe,"080-async-research-jobs":Ze,"081-async-research-jobs-result-content":He,"082-secrets":Ye,"083-thread-run-locally":Ie,"084-drop-host-sandbox-rows":Be,"085-rename-runner-kind":Ge,"086-thread-pins-and-vm-map-rekey":ve,"087-fix-vm-map-rekey":Ve,"088-purge-cli-activate-keys":qe,"089-rename-remote-user-to-desktop":le,"090-automation-webhook-triggers":de,"091-organization-domains-allow-multi":be,"092-sandbox-naming-uniformization":tn,"093-backfill-global-search-basic-usage":en,"094-org-file-configs":an,"095-remove-automation-tool-call-kind":un,"096-org-file-configs-public-url-base":on,"097-drop-local-docker-sandbox-state":mn,"098-thread-message-parts":xn,"099-run-fence":rn,"100-link-transport":cn,"101-cancel-requested-at":yn,"102-observational-agent":sn,"103-revert-observational-agent":fn,"104-agent-sandbox-provider-kind":pn,"105-org-fs":wn,"106-automation-tools":Cn,"107-org-fs-public-org":Nn,"108-automation-max-agent-steps":hn,"109-thread-message-parts-per-message-seq":En,"110-backfill-ghs-token-expiry":Kn,"111-org-fs-thread-id":kn,"112-org-file-configs-credential-type":Pn,"113-thread-failure-reason":zn,"114-run-acked-seq":Un,"115-thread-projected-seq":Dn,"116-org-sites":Ln,"117-org-file-configs-site-slug":gn,"118-organization-domains-multi-verify":Rn,"119-organization-join-requests":Jn,"120-org-fs-read-public":jn,"121-org-fs-share-password":An,"122-split-web-research-tier":Sn,"123-connection-credential-vault":Xn},Fn=Ym;import{getMigrations as Kx}from"better-auth/db";import{sso as kx}from"@better-auth/sso";import{organization as Px}from"@decocms/better-auth/plugins";import{admin as zx,apiKey as Ux,jwt as Dx,magicLink as Lx,mcp as gx,openAPI as Rx}from"better-auth/plugins";import{emailOTP as Jx}from"better-auth/plugins/email-otp";import{Kysely as Tx,PostgresDialect as Di}from"kysely";import{Pool as Li}from"pg";import{homedir as Im}from"os";var Bm=new Set(["all","worker","api"]);function Gm(t){let e=(t??"").trim();return Bm.has(e)?e:"all"}function A(t){return t==="true"||t==="1"}function vm(t){if(t===void 0||t==="")return;return A(t)}function Vm(t,e,n){if(e===void 0||e==="")return n;let u=Number(e);if(!Number.isSafeInteger(u)||u<=0)throw Error(`${t} must be a positive integer`);return u}function qm(t,e){if(t===void 0||t==="")return e;return t==="true"||t==="1"}function wi(t){if(!t)return null;try{let n=new URL(t).hostname;if(n==="localhost"||n==="127.0.0.1"||n==="::1")return null;return t}catch{return null}}var lm=new Set(["agent-sandbox","user-desktop"]);function dm(t){let e=t&&t.length>0?t:"user-desktop";if(e==="cluster")return"agent-sandbox";if(!lm.has(e))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return e}function Ci(t,e){let n=t.home||e.DATA_DIR||e.DECOCMS_HOME||`${Im()}/deco`,u=t.localMode,i=t.nodeEnv||e.NODE_ENV||"development",o=e.NATS_URL||"nats://localhost:4222",m=vm(e.NATS_TUNNEL_PUBLIC_ENABLED)??!!e.NATS_PUBLIC_URL;return{settings:{nodeEnv:i,port:Number(t.port)||Number(e.PORT)||3000,baseUrl:t.baseUrl||e.BASE_URL,dataDir:n,databasePgSsl:A(e.DATABASE_PG_SSL),databasePoolMax:Number(e.DATABASE_POOL_MAX)||5,betterAuthSecret:e.BETTER_AUTH_SECRET||"",encryptionKey:e.ENCRYPTION_KEY||"",meshJwtSecret:e.MESH_JWT_SECRET,localMode:u,disableRateLimit:A(e.DISABLE_RATE_LIMIT),studioProvisionSecretKey:e.STUDIO_PROVISION_SECRET_KEY,clickhouseUrl:e.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:Number(e.CLICKHOUSE_MAX_MEMORY_USAGE)||void 0,monitoringOtlpEndpoint:e.MONITORING_OTLP_ENDPOINT,otelServiceName:e.OTEL_SERVICE_NAME||"studio",natsPublicUrl:e.NATS_PUBLIC_URL,natsTunnelPublicEnabled:m,natsTunnelSessionTtlSeconds:Vm("NATS_TUNNEL_SESSION_TTL_SECONDS",e.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:e.NATS_OPERATOR_JWT,natsAccountJwt:e.NATS_ACCOUNT_JWT,natsAccountSigningKey:e.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:e.NATS_CREDS,configPath:e.CONFIG_PATH||"./config.json",aiGatewayEnabled:A(e.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:e.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",enableDecoImport:A(e.ENABLE_DECO_IMPORT),mcpCacheEnabled:qm(e.MCP_CACHE_ENABLED,i!=="development"),orgFsPublicSetsJson:e.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:A(e.DISABLE_ORGFS_MOUNTS),s3Endpoint:e.S3_ENDPOINT,s3Bucket:e.S3_BUCKET,s3Region:e.S3_REGION||"auto",s3AccessKeyId:e.S3_ACCESS_KEY_ID,s3SecretAccessKey:e.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:e.S3_FORCE_PATH_STYLE===void 0||e.S3_FORCE_PATH_STYLE===""||e.S3_FORCE_PATH_STYLE==="true"||e.S3_FORCE_PATH_STYLE==="1",monitoringS3Bucket:e.MONITORING_S3_BUCKET,monitoringS3Endpoint:e.MONITORING_S3_ENDPOINT,monitoringS3Region:e.MONITORING_S3_REGION,monitoringS3AccessKeyId:e.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:e.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:e.MONITORING_S3_PREFIX,duckdbExtensionDirectory:e.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:e.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:e.DUCKDB_THREADS?Number(e.DUCKDB_THREADS):void 0,isCli:!0,noTui:t.noTui===!0,podName:e.POD_NAME??crypto.randomUUID(),dispatchRole:Gm(e.MESH_DISPATCH_ROLE),sandboxProviderKind:dm(e.STUDIO_SANDBOX_PROVIDER),decoSupabaseUrl:e.DECO_SUPABASE_URL,decoSupabaseServiceKey:e.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:e.FIRECRAWL_API_KEY,commerceDiscoveryInternalApiUrl:e.COMMERCE_DISCOVERY_INTERNAL_API_URL,commerceDiscoveryInternalApiKey:e.COMMERCE_DISCOVERY_INTERNAL_API_KEY,s3TenantBucket:e.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:e.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:e.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:e.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:e.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:e.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:e.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:wi(e.DATABASE_URL),externalNatsUrl:wi(o),skipMigrations:t.skipMigrations}}var ut=null;function W(){if(!ut)bm();return ut}function bm(){if(ut)return;let t={...process.env},e=Ci({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);ut=Object.freeze({...e.settings,databaseUrl:t.DATABASE_URL??"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((n)=>n.trim()).filter(Boolean)})}import{createContextKey as ux,metrics as ox,propagation as Ly,ROOT_CONTEXT as gy,SpanStatusCode as Ry,trace as _x}from"@opentelemetry/api";import{logs as mx,SeverityNumber as Mn}from"@opentelemetry/api-logs";import{OTLPLogExporter as Ay}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as xx}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as Sy}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as Fy}from"@opentelemetry/instrumentation-runtime-node";import{context as Kc,propagation as kc,SpanKind as Pc,SpanStatusCode as zc}from"@opentelemetry/api";var Dc=globalThis.fetch;import{ExportResultCode as Mc}from"@opentelemetry/core";import{ExportResultCode as ot}from"@opentelemetry/core";import{mkdir as tx,rename as ex,writeFile as nx}from"fs/promises";import{join as _t}from"path";class mt{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let e=t.flushIntervalMs??60000;if(e>0&&e<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((n)=>{console.error("[NDJSONExporter] Timer flush failed:",n)})},e),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:ot.FAILED});for(let e of t){let n=JSON.stringify(e),u=this.partitionKey?this.partitionKey(e):"";this.bufferItems.push({partition:u,json:n}),this.bufferBytes+=Buffer.byteLength(n,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:ot.SUCCESS})).catch((e)=>{return console.error("[NDJSONExporter] Flush failed:",e),{code:ot.FAILED}});return Promise.resolve({code:ot.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let e=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=e,e}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let e=new Map;for(let i of t){let o=e.get(i.partition);if(!o)o=[],e.set(i.partition,o);o.push(i.json)}let n=await Promise.allSettled(Array.from(e.entries()).map(([i,o])=>this.writeNDJSON(o,i).then(()=>i))),u=n.find((i)=>i.status==="rejected");if(u){let i=new Set;for(let m of n)if(m.status==="fulfilled")i.add(m.value);let o=t.filter((m)=>!i.has(m.partition));this.bufferItems=o.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw u.reason}}async writeNDJSON(t,e){let n=new Date,u=[String(n.getUTCFullYear()),String(n.getUTCMonth()+1).padStart(2,"0"),String(n.getUTCDate()).padStart(2,"0"),String(n.getUTCHours()).padStart(2,"0")],i=e?_t(this.basePath,e,...u):_t(this.basePath,...u);if(!this.knownDirs.has(i))await tx(i,{recursive:!0,mode:448}),this.knownDirs.add(i);let o=`${crypto.randomUUID()}.ndjson`,m=_t(i,`.${o}.tmp`),_=_t(i,o),x=t.join(`
 `)+`
 `;await nx(m,x,{mode:384}),await ex(m,_)}}import{ExportResultCode as Yc}from"@opentelemetry/core";import{AggregationTemporality as Bc,DataPointType as Gc}from"@opentelemetry/sdk-metrics";import{ExportResultCode as bc}from"@opentelemetry/core";var iy=Buffer.byteLength("... [TRUNCATED]","utf8");import{BatchLogRecordProcessor as Gy,LoggerProvider as vy}from"@opentelemetry/sdk-logs";import{detectResources as qy,envDetector as ly,hostDetector as dy,osDetector as by,processDetector as ts,resourceFromAttributes as es}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as is}from"@opentelemetry/sdk-metrics";import{NOOP_LOGGER as oy}from"@opentelemetry/api-logs";import{NodeSDK as os}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as ms,SamplingDecision as $}from"@opentelemetry/sdk-trace-base";import{SpanStatusCode as cy}from"@opentelemetry/api";var rx="__d",cx=ux("Current request"),yx=1;var hi=(t)=>{let n=new URL(t.url).searchParams.get(rx);if(n==="")return crypto.randomUUID();if(!n)n=t.headers.get("x-trace-debug-id");return n};class Ei{inner;constructor(t){this.inner=t}shouldSample(t,e,n,u,i,o){let m=t.getValue(cx);if(!m){if(this.inner)return this.inner.shouldSample(t,e,n,u,i,o);return{decision:$.RECORD_AND_SAMPLED}}let _=hi(m);if(_)return{decision:$.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":_}};if(this.inner){let x=this.inner.shouldSample(t,e,n,u,i,o);if(x.decision===$.RECORD_AND_SAMPLED){let r=crypto.randomUUID();x.attributes={...x.attributes??{},"trace.debug.id":r}}return x}return{decision:$.NOT_RECORD}}toString(){return"DebugSampler"}}class Ki{ratio;constructor(t){this.ratio=t}shouldSample(){if(Math.random()<this.ratio)return{decision:$.RECORD_AND_SAMPLED};return{decision:$.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}var rs=new xx({preventServerStart:!0}),cs=new Ei(new Ki(yx));var Ni=_x.getTracer("studio","1.0.0"),Y=ox.getMeter("studio","1.0.0"),sx=mx.getLogger("studio","1.0.0"),Qn=(t,e,n)=>{let u={},i=n,o=n[n.length-1];if(o!==null&&typeof o==="object"&&!Array.isArray(o)&&!(o instanceof Error)&&Object.getPrototypeOf(o)===Object.prototype)u=o,i=n.slice(0,-1);let m=i.map((_)=>{if(_ instanceof Error)return`${_.name}: ${_.message}`;if(typeof _==="object")try{return JSON.stringify(_)}catch{return"[Object]"}return String(_)}).join(" ");sx.emit({severityNumber:t,severityText:e,body:m,attributes:{"log.source":"console",...u}})},On={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...t)=>{Qn(Mn.ERROR,"ERROR",t),On.error(...t)};console.warn=(...t)=>{Qn(Mn.WARN,"WARN",t),On.warn(...t)};console.debug=(...t)=>{Qn(Mn.DEBUG,"DEBUG",t),On.debug(...t)};var Zn,ki=0,Hn=500;function fx(){if(Zn)return;let t=performance.now()+Hn;Zn=setInterval(()=>{let e=performance.now();ki=Math.max(0,e-t),t=e+Hn},Hn),Zn.unref?.()}function Pi(){return fx(),ki}var px=()=>Y.createHistogram("db.query.duration",{description:"Database query execution duration in milliseconds",unit:"ms"}),zi=()=>Y.createHistogram("db.pool.acquire.duration",{description:"Time spent waiting to acquire a connection from the pool",unit:"ms"}),Ui=400,wx=100,Cx=(t)=>(e)=>{let n={"db.statement":e.query.sql,"db.status":e.level==="error"?"error":"success"};if(e.queryDurationMillis>Ui){let u=Pi(),i=u>Ui/2;console.error(i?"Slow query measurement \u2014 likely event-loop lag, not slow SQL:":"Slow query detected:",{durationMs:e.queryDurationMillis,eventLoopLagMs:Math.round(u),sql:e.query.sql,pool:{total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:xt()}})}if(px().record(e.queryDurationMillis,n),e.level==="error")console.error("Query failed:",{durationMs:e.queryDurationMillis,error:e.error,sql:e.query.sql})};function Nx(t){let e=t.connect.bind(t);return t.connect=(n)=>{if(typeof n==="function")return e(n);let u=performance.now(),i=xt(),o=t.idleCount===0&&t.totalCount>=i,m=t.idleCount;return e().then((_)=>{let x=performance.now()-u;if(zi().record(x,{"db.pool.outcome":o?"contended":"available"}),x>wx)if(o)console.error("Slow db pool acquire \u2014 pool saturated:",{waitMs:x,total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:i});else console.warn("Slow db pool acquire \u2014 event-loop lag (not pool):",{waitMs:x,idleAtStart:m,total:t.totalCount,max:i});return _},(_)=>{throw zi().record(performance.now()-u,{"db.pool.outcome":"error"}),_})},t}var gi={keepAlive:!0,keepAliveInitialDelayMillis:1e4,idleTimeoutMillis:300000,connectionTimeoutMillis:30000,allowExitOnIdle:!0};function Ri(){try{return W().databasePgSsl}catch{return!1}}function xt(){try{return W().databasePoolMax}catch{return 10}}function hx(t){let e=Nx(new Li({connectionString:t,max:xt(),ssl:Ri(),...gi})),n=new Di({pool:e});return{type:"postgres",db:new Tx({dialect:n,log:Cx(e)}),pool:e}}function B(){return W().databaseUrl}function Ji(t){let e=t||B();return new Di({pool:new Li({connectionString:e,max:xt(),ssl:Ri(),...gi})})}function Ex(t){let e=t||B();return hx(e)}async function ji(t){if(await t.db.destroy(),!t.pool.ended)await t.pool.end();if(t===I)I=null}var I=null;function Yn(){if(!I)I=Ex(B());return I}async function Ai(t){let n={database:Ji(t||B()),plugins:[Px({dynamicAccessControl:{enabled:!0,enableCustomResources:!0}}),zx(),Ux(),Dx(),Rx(),gx({loginPage:"/login"}),kx(),Lx({sendMagicLink:async()=>{}}),Jx({sendVerificationOTP:async()=>{}})]},{toBeAdded:u,toBeCreated:i,runMigrations:o}=await Kx(n);if(!u.length&&!i.length)return"up to date";return await o(),`${i.length+u.length} table(s) migrated`}async function $i(t,e){return(await S`
     SELECT table_name FROM information_schema.tables