npm - decocms - Versions diffs - 4.102.0 → 4.103.0 - Mend

decocms 4.102.0 → 4.103.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (244) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2744,7 +2744,7 @@ Do NOT require review (requiresReview = false) when the changes are low-risk, su
 When unsure between the two, lean toward NOT requiring review for small frontend-only diffs, and toward requiring it for anything backend or large.
-Respond with the structured verdict and a short reason.`,EC$;var zC$=O(()=>{W6();qE();H81();_64=N81.object({requiresReview:N81.boolean().describe("true if the changes should go through pull-request review"),reason:N81.string().describe("One short sentence explaining the decision (max ~120 chars)")});EC$={requiresReview:!1,reason:""}});function v64($){if(!$||$.includes(".."))return!1;return x64.test($)}function jC$($){let Z=typeof $.__resolveType==="string"?$.__resolveType:null;if(!Z||!v64(Z))return null;let{__resolveType:G,...X}=$;return{resolveType:Z,payload:X}}function PC$($,Z){return`${$.replace(/\/+$/,"")}/deco/invoke/${Z}`}var x64;var AC$=O(()=>{x64=/^[\w./@-]+$/});function B81($){let Z;try{Z=new URL($)}catch{return null}if(!Z.hostname.endsWith(".localhost"))return null;let G=Z.host;return Z.hostname="127.0.0.1",{url:Z.toString(),hostHeader:G}}function TC$($,Z){let G=$?.githubRepo;if(!G?.owner||!G?.name)return null;if(!G.connectionId)return G;if(!Z.includes(G.connectionId))return null;return G}async function IC$($,Z,G,X){if(!X.connectionId)throw new _g("Push requires a connected GitHub account. Connect mcp-github for this project and restart the sandbox.");let Y=$.organization?.id;if(!Y)throw new _g(i7);await Vv({ctx:$,connectionId:X.connectionId,organizationId:Y,forceRefresh:!0,onLegacyMintError:(w)=>{let F=w instanceof Error?w.message:i7;throw new _g(F)}});let{cloneUrl:Q,gitUserName:J,gitUserEmail:W}=await kN(X.connectionId,X.owner,X.name,$.db,$.vault),K=oL0($),U=await Z.proxyDaemonRequest(G,"/_sandbox/config",{method:"PUT",headers:new Headers({"content-type":"application/json"}),body:JSON.stringify({git:{repository:{cloneUrl:Q},identity:{userName:J,userEmail:W}},...K?{operator:K}:{}})});if(!U.ok){let w=await U.text().catch(()=>U.statusText);throw Error(`Failed to refresh sandbox git credentials (${U.status}): ${w}`)}}var _g;var RC$=O(()=>{XN();Q81();Mn();_g=class _g extends Error{constructor($){super($);this.name="GitPushAuthError"}}});function g64($){let Z=$.startsWith("thread:")?$.slice(7):$;if(!Z||Z.length>255||Z.includes("..")||Z.startsWith("/")||Z.endsWith("/")||Z.endsWith(".lock")||!y64.test(Z))throw Error(`Invalid branch name: ${$}`)}function PC($){return AbortSignal.any([$.req.raw.signal,AbortSignal.timeout(c64)])}function AC($){let{runner:Z}=$.get("vmClaim");if(!Z)return $.json({error:"No sandbox runner configured"},503);return Z}async function fZ($,Z,G){let X=AC($);if(X instanceof Response)return X;let{claimName:Y,userId:Q,projectRef:J}=$.get("vmClaim"),W=G?.method??"POST",K=null,U=new Headers;if(G?.jsonBody!==void 0)K=G.jsonBody,U.set("content-type","application/json");else if(G?.forwardJsonBody)K=await $.req.text(),U.set("content-type","application/json");let w=G?.signal,F={method:W,headers:U,body:K,...w?{signal:w}:{}},H=async()=>{let N=await X.proxyDaemonRequest(Y,Z,F);if(G?.map404to410&&N.status===404){try{await N.body?.cancel()}catch{}if(await X.adoptLiveClaim?.({userId:Q,projectRef:J},Y))N=await X.proxyDaemonRequest(Y,Z,F);if(N.status===404){try{await N.body?.cancel()}catch{}return new Response(JSON.stringify({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."}),{status:410,headers:{"content-type":"application/json",...mY}})}}let B=await N.text(),D=G?.redactRepoDirUnlessDesktop&&X.kind!=="user-desktop"?d64(B):B,E=N.headers.get("content-type")??"application/json";return new Response(D,{status:N.status,headers:{"content-type":E,...mY}})};try{if(w){let N=H();return N.catch(()=>{}),await Promise.race([N,new Promise((D,E)=>{if(w.aborted)return E(w.reason);w.addEventListener("abort",()=>E(w.reason),{once:!0})})])}return await H()}catch(N){let B=N instanceof Error?N.message:String(N);return $.json({error:`Daemon unreachable: ${B}`},502)}}function d64($){try{let Z=JSON.parse($);if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&"repoDir"in Z)return JSON.stringify({...Z,repoDir:null})}catch{}return $}async function aL0($,Z,G,X="GET",Y){let Q=await $.proxyDaemonRequest(Z,G,{method:X,headers:new Headers,body:null});if(Q.status===404&&Y){try{await Q.body?.cancel()}catch{}if(await $.adoptLiveClaim?.(Y,Z))Q=await $.proxyDaemonRequest(Z,G,{method:X,headers:new Headers,body:null})}if(Q.status===404){try{await Q.body?.cancel()}catch{}throw Error("SANDBOX_GONE")}let J=await Q.text();if(!Q.ok)try{let W=JSON.parse(J);throw Error(W.error??`Daemon error (${Q.status})`)}catch(W){if(W instanceof Error&&W.message!==J)throw W;throw Error(`Daemon error (${Q.status})`)}return JSON.parse(J)}function l64($){return kC$.includes($)}var y64,qC$=524288,h64=65536,c64=1e4,MC$=2000,u64,mY,kC$,SC$=()=>{let $=new V1;return $.use("/:virtualMcpId/:branch/*",u64),$.post("/:virtualMcpId/:branch/write",(Z)=>fZ(Z,"/_sandbox/write",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/unlink",(Z)=>fZ(Z,"/_sandbox/unlink",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/mkdir",(Z)=>fZ(Z,"/_sandbox/mkdir",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/rename",(Z)=>fZ(Z,"/_sandbox/rename",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/read",(Z)=>fZ(Z,"/_sandbox/read",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/glob",(Z)=>fZ(Z,"/_sandbox/glob",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/grep",(Z)=>fZ(Z,"/_sandbox/grep",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/exec/:script",(Z)=>{let G=Z.req.param("script");if(!G)return Z.json({error:"missing script name"},400);return fZ(Z,`/_sandbox/exec/${encodeURIComponent(G)}`)}),$.post("/:virtualMcpId/:branch/exec/:script/kill",(Z)=>{let G=Z.req.param("script");if(!G)return Z.json({error:"missing script name"},400);return fZ(Z,`/_sandbox/exec/${encodeURIComponent(G)}/kill`)}),$.get("/:virtualMcpId/:branch/config",(Z)=>fZ(Z,"/_sandbox/config",{method:"GET",map404to410:!0,redactRepoDirUnlessDesktop:!0})),$.put("/:virtualMcpId/:branch/config",(Z)=>fZ(Z,"/_sandbox/config",{method:"PUT",forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/setup/:step",async(Z)=>{let G=Z.req.param("step");if(!G||!l64(G))return Z.json({error:`step must be one of: ${kC$.join(", ")}`},400);if(G==="start"){let X=Z.get("vmClaim");if(X.runner){let Y=O0(Z.var.studioContext),Q=VN0(X.virtualMcpMetadata);try{await _N0({ctx:Z.var.studioContext,runner:X.runner,handle:X.claimName,orgId:Y.id,userId:X.userId,entries:Q})}catch(J){let W=J instanceof Error?J.message:String(J);return Z.json({error:`Failed to push env to daemon: ${W}`},502)}}}return fZ(Z,`/_sandbox/setup/${G}`,{signal:Z.req.raw.signal,map404to410:!0})}),$.get("/:virtualMcpId/:branch/events",(Z)=>{let G=Z.get("vmClaim");if(!G.runner)return aQ(Z,async(X)=>{await X.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:"No sandbox runner configured on this studio instance."})})});return FC$(Z,{ctx:Z.var.studioContext,claimName:G.claimName,runner:G.runner,virtualMcpId:G.virtualMcpId,branch:G.branch,userId:G.userId,projectRef:G.projectRef,virtualMcpMetadata:G.virtualMcpMetadata})}),$.get("/:virtualMcpId/:branch/git/status",(Z)=>fZ(Z,"/_sandbox/git/status",{method:"GET",map404to410:!0,signal:AbortSignal.any([Z.req.raw.signal,AbortSignal.timeout(MC$)])})),$.post("/:virtualMcpId/:branch/git/status",(Z)=>fZ(Z,"/_sandbox/git/status",{map404to410:!0,signal:AbortSignal.any([Z.req.raw.signal,AbortSignal.timeout(MC$)])})),$.post("/:virtualMcpId/:branch/git/diff",(Z)=>fZ(Z,"/_sandbox/git/diff",{forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/git/publish",async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X,virtualMcpMetadata:Y,connectionIds:Q}=Z.get("vmClaim"),J=Z.var.studioContext;try{await J81(J,G,X);let W=TC$(Y,Q);if(W)await IC$(J,G,X,W)}catch(W){if(W instanceof _g)return Z.json({error:W.message},403,mY);let K=W instanceof Error?W.message:String(W);return Z.json({error:K},502,mY)}return fZ(Z,"/_sandbox/git/publish",{forwardJsonBody:!0,map404to410:!0})}),$.post("/:virtualMcpId/:branch/git/discard",(Z)=>fZ(Z,"/_sandbox/git/discard",{forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/git/rebase",async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X}=Z.get("vmClaim"),Y=Z.var.studioContext;try{await J81(Y,G,X)}catch(Q){let J=Q instanceof Error?Q.message:String(Q);return Z.json({error:J},502,mY)}return fZ(Z,"/_sandbox/git/rebase",{forwardJsonBody:!0,map404to410:!0})}),$.post("/:virtualMcpId/:branch/git/suggest-commit",uG({maxSize:qC$,onError:(Z)=>Z.json({error:"Payload too large"},413,mY)}),async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X,userId:Y,projectRef:Q}=Z.get("vmClaim"),J=Z.var.studioContext;try{let W=await Z.req.json().catch(()=>({})),K=W.status,U=W.diff,w=U!=null&&typeof U.diffs==="object"&&U.diffs!==null,[F,H]=U81(K)&&w?[K,U]:await Promise.all([aL0(G,X,"/_sandbox/git/status","GET",{userId:Y,projectRef:Q}),aL0(G,X,"/_sandbox/git/diff","GET",{userId:Y,projectRef:Q})]),N=await DC$(J,F,H);return Z.json(N,200,mY)}catch(W){let K=W instanceof Error?W.message:String(W);if(K==="SANDBOX_GONE")return Z.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,mY);return Z.json({error:K},502,mY)}}),$.post("/:virtualMcpId/:branch/git/judge-review",uG({maxSize:qC$,onError:(Z)=>Z.json({error:"Payload too large"},413,mY)}),async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X,userId:Y,projectRef:Q}=Z.get("vmClaim"),J=Z.var.studioContext;try{let W=await Z.req.json().catch(()=>({})),K=W.status,U=W.diff,w=U!=null&&typeof U.diffs==="object"&&U.diffs!==null,[F,H]=U81(K)&&w?[K,U]:await Promise.all([aL0(G,X,"/_sandbox/git/status","GET",{userId:Y,projectRef:Q}),aL0(G,X,"/_sandbox/git/diff","GET",{userId:Y,projectRef:Q})]),N=await LC$(J,F,H,typeof W.language==="string"?W.language:void 0);return Z.json(N,200,mY)}catch(W){let K=W instanceof Error?W.message:String(W);if(K==="SANDBOX_GONE")return Z.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,mY);return Z.json({error:K},502,mY)}}),$.get("/:virtualMcpId/:branch/preview-fetch",async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X}=Z.get("vmClaim"),Y=Z.req.query("path");if(Y!=="/.decofile")return Z.json({error:"Path not allowed"},403);let Q;try{Q=await G.getPreviewUrl(X)}catch{return Z.json({error:"Preview not available"},502)}if(!Q)return Z.json({error:"Preview not available"},502);let J=Q.replace(/\/+$/,""),W=B81(`${J}${Y}`),K;try{K=await fetch(W?.url??`${J}${Y}`,{...W?{headers:{host:W.hostHeader}}:{}})}catch{return Z.json({error:"Preview unreachable"},502)}let U;try{U=await K.text()}catch{return Z.json({error:"Preview unreachable"},502)}return new Response(U,{status:K.status,headers:{"content-type":K.headers.get("content-type")??"application/json"}})}),$.post("/:virtualMcpId/:branch/preview-invoke",uG({maxSize:h64,onError:(Z)=>Z.json({error:"Payload too large"},413)}),async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X}=Z.get("vmClaim"),Y;try{Y=await G.getPreviewUrl(X)}catch{return Z.json({error:"Preview not available"},502)}if(!Y)return Z.json({error:"Preview not available"},502);let Q;try{Q=await Z.req.json()}catch{return Z.json({error:"Invalid JSON body"},400)}if(!Q||typeof Q!=="object"||Array.isArray(Q))return Z.json({error:"Invalid JSON body"},400);let J=jC$(Q);if(!J)return Z.json({error:"Invalid or missing __resolveType"},400);let W=PC$(Y,J.resolveType),K=B81(W),U;try{U=await fetch(K?.url??W,{method:"POST",headers:{"content-type":"application/json",...K?{host:K.hostHeader}:{}},body:JSON.stringify(J.payload),signal:AbortSignal.timeout(30000)})}catch{return Z.json({error:"Preview unreachable"},502)}let w;try{w=await U.text()}catch{return Z.json({error:"Preview unreachable"},502)}return new Response(w,{status:U.status,headers:{"content-type":U.headers.get("content-type")??"application/json"}})}),$};var VC$=O(()=>{o8();Og();jC();UC$();kY();dE0();TV();wC$();HC$();gp0();pv();H81();zC$();AC$();RC$();y64=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;u64=KC$(async($,Z)=>{let G=$.var.studioContext;try{M0(G)}catch{return $.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return $.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return $.json({error:"Organization scope required"},403)}let Q=$.req.param("virtualMcpId"),J=$.req.param("branch");if(!Q||!J)return $.json({error:"virtualMcpId and branch are required"},400);try{g64(J)}catch(H){let N=H instanceof Error?H.message:String(H);return $.json({error:N},400)}let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return $.json({error:"Virtual MCP not found"},404);let K=Xw({orgId:Y.id,virtualMcpId:Q,branch:J}),U=Xg({userId:X,projectRef:K},J),w=W.metadata??null,F;try{F=(await bY(G,{userId:X,branch:J,virtualMcpMetadata:w})).provider}catch{F=null}if(!F)return $.json({error:"No sandbox runner found"},404);return $.set("vmClaim",{claimName:U,runner:F,virtualMcpId:Q,branch:J,userId:X,projectRef:K,virtualMcpMetadata:w,connectionIds:W.connections?.map((H)=>H.connection_id)??[]}),Z()});mY={"Cache-Control":"no-store, no-cache, must-revalidate",Pragma:"no-cache"};kC$=["clone","install","start"]});var CC$=($)=>{let Z=new V1;if(Z.use("*",FC),Z.route("/",NL0()),Z.route("/",oM$()),Z.route("/",rV$()),Z.route("/",pV$()),Z.route("/",pL0()),Z.route("/tools",GC$()),Z.route("/",eV$()),Z.route("/",_V$({kvStorage:$.kvStorage})),Z.route("/",VV$()),Z.route("/fs",dV$({getConnection:$.getNatsConnection})),Z.route("/sandbox",SC$()),Z.route("/",mV$()),Z.route("/deco-sites",OL0()),Z.route("/sso",yE0()),Z.route("/",tL0({tokenStorage:$.tokenStorage,automationEventDispatcher:$.automationEventDispatcher})),Z.route("/webhooks",lM$()),$.mountDevAssets)Z.route("/dev-assets",DL0({orgFromPath:!0}));return Z.use("/mcp/:connectionId?",$.mcpAuth),Z.use("/mcp/:connectionId/ui-resource",$.mcpAuth),Z.use("/mcp/gateway/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/virtual-mcp/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/self",$.mcpAuth),Z.route("/",Es1()),Z.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",$.betterAuthProtectedResourceHandler),Z.get("/mcp/.well-known/oauth-protected-resource",$.betterAuthProtectedResourceHandler),Z.route("/mcp",EB0()),Z.route("/mcp/self",nL0()),Z.route("/mcp",jB0()),Z.all("/oauth-proxy/:connectionId/*",$.oauthProxyHandler),Z.get("/watch",$.watchHandler),Z};var _C$=O(()=>{o8();q11();mM$();C11();EL0();ut();I11();CV$();bV$();lV$();bi();k01();PB0();s$1();iV$();tV$();oV$();$C$();$81();XC$();Z81();LB0();VC$()});var m64,i64=($)=>{let Z="";for(let G of $)Z+=String.fromCharCode(G);return btoa(Z).replaceAll("+","-").replaceAll("/","_").replace(/=+$/u,"")},Br=($)=>{if($.trim().length===0)throw TypeError("subject token value must not be empty");return i64(new TextEncoder().encode($))},bC$=($)=>{let Z=new URL($ instanceof Request?$.url:$);if(Z.protocol!=="tunnel:")throw TypeError(`expected tunnel: URL, got ${Z.protocol}`);if(Z.hostname.trim().length===0)throw TypeError("tunnel URL hostname must not be empty");return{url:Z,hostname:Z.hostname,pathWithSearch:`${Z.pathname}${Z.search}`}},fC$=($,Z)=>{if($.trim().length===0)throw TypeError("hostname must not be empty");if(!m64.test(Z))throw TypeError("invalid requestId: expected only A-Z, a-z, 0-9, '_' or '-'");let G=Br($),X=`tunnel.v1.host.${G}`,Y=`${X}.req.${Z}`;return{hostToken:G,request:`${X}.request`,body:`${Y}.body`,reply:`${Y}.reply`,abort:`${Y}.abort`}};var sL0=O(()=>{m64=/^[A-Za-z0-9_-]+$/});function CJ($){return`user-${Br($)}.link`}var Or=O(()=>{sL0()});import{z as AB}from"zod";function xC$($){let Z=Br($),G=`tunnel.v1.host.${Z}`;return{subscribe:{allow:[`${G}.request`,`${G}.req.*.body`,`${G}.req.*.abort`,`_INBOX.${Z}.>`]},publish:{allow:[`${G}.req.*.reply`,"decopilot.stream.*"]}}}function vC$({publicUrl:$,userId:Z,ttlSeconds:G,credentials:X,token:Y}){return{connection:{urls:$.split(",").map((Q)=>Q.trim()).filter(Boolean),...X?{credentials:X}:{},...Y?{token:Y}:{}},expiresAt:new Date(Date.now()+G*1000).toISOString(),tunnelHostname:CJ(Z)}}var U7Z;var yC$=O(()=>{sL0();Or();U7Z=AB.object({connection:AB.object({urls:AB.array(AB.string().min(1)).min(1),credentials:AB.string().optional(),token:AB.string().optional()}),expiresAt:AB.string().min(1),tunnelHostname:AB.string().min(1)})});class $z0{static encode($){if(typeof $==="string")return btoa($);let Z=Array.from($);return btoa(String.fromCharCode(...Z))}static decode($,Z=!1){let G=atob($);if(!Z)return G;let X=new Uint8Array(G.length);for(let Y=0;Y<G.length;Y++)X[Y]=G.charCodeAt(Y);return X}}class xw{static encode($){return xw.toB64URLEncoding($z0.encode($))}static decode($,Z=!1){return $z0.decode(xw.fromB64URLEncoding($),Z)}static toB64URLEncoding($){return $=$.replace(/=/g,""),$=$.replace(/\+/g,"-"),$.replace(/\//g,"_")}static fromB64URLEncoding($){return $=$.replace(/_/g,"/"),$=$.replace(/-/g,"+"),$}}function p64($){hC$=$}function sQ(){return hC$}class Zz0{static encode($){let Z=0,G=0,X=new Uint8Array($),Y=new Uint8Array($.byteLength*2),Q=0;for(let J=0;J<X.byteLength;J++){G=G<<8|X[J],Z+=8;while(Z>=5){let W=G>>>Z-5&31;Y[Q++]=O81.charAt(W).charCodeAt(0),Z-=5}}if(Z>0){let J=G<<5-Z&31;Y[Q++]=O81.charAt(J).charCodeAt(0)}return Y.slice(0,Q)}static decode($){let Z=0,G=0,X=0,Y=new Uint8Array($),Q=new Uint8Array(Y.byteLength*5/8|0);for(let J=0;J<Y.byteLength;J++){let W=String.fromCharCode(Y[J]),K=O81.indexOf(W);if(K===-1)throw Error("Illegal Base32 character: "+Y[J]);if(G=G<<5|K,Z+=5,Z>=8)Q[X++]=G>>>Z-8&255,Z-=8}return Q.slice(0,X)}}class Dr{static checksum($){let Z=0;for(let G=0;G<$.byteLength;G++){let X=$[G];Z=Z<<8&65535^t64[(Z>>8^X)&255]}return Z}static validate($,Z){return Dr.checksum($)==Z}}function cC$(){return r64(Z6.User)}class RC{static isValidPublicPrefix($){return $==Z6.Server||$==Z6.Operator||$==Z6.Cluster||$==Z6.Account||$==Z6.User||$==Z6.Curve}static startsWithValidPrefix($){let Z=$[0];return Z=="S"||Z=="P"||Z=="O"||Z=="N"||Z=="C"||Z=="A"||Z=="U"||Z=="X"}static isValidPrefix($){return this.parsePrefix($)!==Z6.Unknown}static parsePrefix($){switch($){case Z6.Seed:return Z6.Seed;case Z6.Private:return Z6.Private;case Z6.Operator:return Z6.Operator;case Z6.Server:return Z6.Server;case Z6.Cluster:return Z6.Cluster;case Z6.Account:return Z6.Account;case Z6.User:return Z6.User;case Z6.Curve:return Z6.Curve;default:return Z6.Unknown}}}class FZ{static encode($,Z){if(!Z||!(Z instanceof Uint8Array))throw new u$(c$.SerializationError);if(!RC.isValidPrefix($))throw new u$(c$.InvalidPrefixByte);return FZ._encode(!1,$,Z)}static encodeSeed($,Z){if(!Z)throw new u$(c$.ApiError);if(!RC.isValidPublicPrefix($))throw new u$(c$.InvalidPrefixByte);if(Z.byteLength!==32)throw new u$(c$.InvalidSeedLen);return FZ._encode(!0,$,Z)}static decode($,Z){if(!RC.isValidPrefix($))throw new u$(c$.InvalidPrefixByte);let G=FZ._decode(Z);if(G[0]!==$)throw new u$(c$.InvalidPrefixByte);return G.slice(1)}static decodeSeed($){let Z=FZ._decode($),G=FZ._decodePrefix(Z);if(G[0]!=Z6.Seed)throw new u$(c$.InvalidSeed);if(!RC.isValidPublicPrefix(G[1]))throw new u$(c$.InvalidPrefixByte);return{buf:Z.slice(2),prefix:G[1]}}static _encode($,Z,G){let X=$?2:1,Y=G.byteLength,Q=X+Y+2,J=X+Y,W=new Uint8Array(Q);if($){let w=FZ._encodePrefix(Z6.Seed,Z);W.set(w)}else W[0]=Z;W.set(G,X);let K=Dr.checksum(W.slice(0,J));return new DataView(W.buffer).setUint16(J,K,!0),Zz0.encode(W)}static _decode($){if($.byteLength<4)throw new u$(c$.InvalidEncoding);let Z;try{Z=Zz0.decode($)}catch(J){throw new u$(c$.InvalidEncoding,J)}let G=Z.byteLength-2,Y=new DataView(Z.buffer).getUint16(G,!0),Q=Z.slice(0,G);if(!Dr.validate(Q,Y))throw new u$(c$.InvalidChecksum);return Q}static _encodePrefix($,Z){let G=$|Z>>5,X=(Z&31)<<3;return new Uint8Array([G,X])}static _decodePrefix($){let Z=$[0]&248,G=($[0]&7)<<5|($[1]&248)>>3;return new Uint8Array([Z,G])}}class E81{seed;constructor($){this.seed=$}getRawSeed(){if(!this.seed)throw new u$(c$.ClearedPair);return FZ.decodeSeed(this.seed).buf}getSeed(){if(!this.seed)throw new u$(c$.ClearedPair);return this.seed}getPublicKey(){if(!this.seed)throw new u$(c$.ClearedPair);let $=FZ.decodeSeed(this.seed),Z=sQ().fromSeed(this.getRawSeed()),G=FZ.encode($.prefix,Z.publicKey);return new TextDecoder().decode(G)}getPrivateKey(){if(!this.seed)throw new u$(c$.ClearedPair);let $=sQ().fromSeed(this.getRawSeed());return FZ.encode(Z6.Private,$.secretKey)}sign($){if(!this.seed)throw new u$(c$.ClearedPair);let Z=sQ().fromSeed(this.getRawSeed());return sQ().sign($,Z.secretKey)}verify($,Z){if(!this.seed)throw new u$(c$.ClearedPair);let G=sQ().fromSeed(this.getRawSeed());return sQ().verify($,Z,G.publicKey)}clear(){if(!this.seed)return;this.seed.fill(0),this.seed=void 0}seal($,Z,G){throw new u$(c$.InvalidNKeyOperation)}open($,Z){throw new u$(c$.InvalidNKeyOperation)}}class L81{seed;constructor($){this.seed=$}clear(){if(!this.seed)return;this.seed.fill(0),this.seed=void 0}getPrivateKey(){if(!this.seed)throw new u$(c$.ClearedPair);return FZ.encode(Z6.Private,this.seed)}getPublicKey(){if(!this.seed)throw new u$(c$.ClearedPair);let $=sQ().scalarBaseMultiply(this.seed),Z=FZ.encode(Z6.Curve,$);return new TextDecoder().decode(Z)}getSeed(){if(!this.seed)throw new u$(c$.ClearedPair);return FZ.encodeSeed(Z6.Curve,this.seed)}sign(){throw new u$(c$.InvalidCurveOperation)}verify(){throw new u$(c$.InvalidCurveOperation)}decodePubCurveKey($){try{let Z=Zz0.decode(new TextEncoder().encode($));if(Z.byteLength!==35)throw new u$(c$.InvalidCurveKey);if(Z[0]!==Z6.Curve)throw new u$(c$.InvalidPublicKey);let G=Z.byteLength-2,Y=new DataView(Z.buffer).getUint16(G,!0),Q=Z.slice(0,G);if(!Dr.validate(Q,Y))throw new u$(c$.InvalidChecksum);return Q.slice(1)}catch(Z){throw new u$(c$.InvalidRecipient,Z)}}seal($,Z,G){if(!this.seed)throw new u$(c$.ClearedPair);if(!G)G=sQ().randomBytes(gC$);let X=this.decodePubCurveKey(Z),Y=new Uint8Array(IC.length+24);Y.set(IC,0),Y.set(G,IC.length);let Q=sQ().seal($,G,X,this.seed),J=new Uint8Array(Y.length+Q.length);return J.set(Y),J.set(Q,Y.length),J}open($,Z){if(!this.seed)throw new u$(c$.ClearedPair);if($.length<=24+IC.length)throw new u$(c$.InvalidEncrypted);for(let Y=0;Y<IC.length;Y++)if($[Y]!==IC[Y])throw new u$(c$.InvalidEncrypted);let G=this.decodePubCurveKey(Z);$=$.slice(IC.length);let X=$.slice(0,24);return $=$.slice(gC$),sQ().open($,X,G,this.seed)}}function r64($){let Z=$===Z6.Curve?32:32,G=sQ().randomBytes(Z),X=FZ.encodeSeed($,new Uint8Array(G));return $===Z6.Curve?new L81(new Uint8Array(G)):new E81(X)}class uC${publicKey;constructor($){this.publicKey=$}getPublicKey(){if(!this.publicKey)throw new u$(c$.ClearedPair);return new TextDecoder().decode(this.publicKey)}getPrivateKey(){if(!this.publicKey)throw new u$(c$.ClearedPair);throw new u$(c$.PublicKeyOnly)}getSeed(){if(!this.publicKey)throw new u$(c$.ClearedPair);throw new u$(c$.PublicKeyOnly)}sign($){if(!this.publicKey)throw new u$(c$.ClearedPair);throw new u$(c$.CannotSign)}verify($,Z){if(!this.publicKey)throw new u$(c$.ClearedPair);let G=FZ._decode(this.publicKey);return sQ().verify($,Z,G.slice(1))}clear(){if(!this.publicKey)return;this.publicKey.fill(0),this.publicKey=void 0}seal($,Z,G){throw new u$(c$.InvalidNKeyOperation)}open($,Z){throw new u$(c$.InvalidNKeyOperation)}}function z81($){let Z=new TextEncoder().encode($),G=FZ._decode(Z),X=RC.parsePrefix(G[0]);if(RC.isValidPublicPrefix(X))return new uC$(Z);throw new u$(c$.InvalidPublicKey)}function o64($){let Z=FZ.decodeSeed($);if(Z.prefix!==Z6.Curve)throw new u$(c$.InvalidCurveSeed);if(Z.buf.byteLength!==32)throw new u$(c$.InvalidSeedLen);return new L81(Z.buf)}function j81($){if(FZ.decodeSeed($).prefix===Z6.Curve)return o64($);return new E81($)}function a64($){if($ instanceof Uint8Array)$=new TextDecoder().decode($);if($.charAt(0)==="S")return j81(new TextEncoder().encode($));return z81($)}function eL0($,Z="",G=!1){let X=typeof $==="string"||$ instanceof Uint8Array?a64($):$,Y=X.getPublicKey(),Q=[];if(!Array.isArray(Z)){if(Z!=="")Q.push(Z)}else Q.push(...Z);if(Z.length>0&&Q.indexOf(Y.charAt(0))===-1)throw Error(`unexpected type ${Y.charAt(0)} - wanted ${Q}`);if(G)X.getPrivateKey();return X}function s64($={}){return dC$({data:-1,payload:-1,subs:-1},$)}function dC$($,...Z){for(let G=0;G<Z.length;G++){let X=Z[G];Object.assign($,X)}return $}function e64($){let{exp:Z,nbf:G,aud:X}=$;return dC$({},{exp:Z,nbf:G,aud:X})}function $44($={}){if(!$.algorithm)$.algorithm=_J.v2;return $}async function lC$($,Z,G,X={},Y={}){G=eL0(G,"A",!Y.signer);let Q=G;if(Y.signer)Q=eL0(Y.signer,"A",!0);Z=eL0(Z,"U");let J=e64(Y);if(J.name=$,J.sub=Z.getPublicKey(),J.nats=Y.scopedUser?X:s64(X),Y.signer)J.nats.issuer_account=G.getPublicKey();let W=$44(Y);return Z44(W.algorithm,D81.User,J),await Y44(W.algorithm,J,Q)}function Z44($,Z,G){if(G.aud=G.aud||"NATS",$===_J.v2)G.nats.type=Z;else G.type=Z}function mC$($){let Z=$.split(".");if(Z.length!==3)throw Error(`invalid jwt - ${Z.length} chunks: ${$}`);let G=JSON.parse(xw.decode(Z[0]));if(G.typ!=="jwt"&&G.typ!=="JWT")throw Error(`not a nats jwt - typ ${G.type}`);if(G.alg!==_J.v1&&G.alg!==_J.v2)throw Error(`not a nats jwt - alg ${G.alg}`);let X=JSON.parse(xw.decode(Z[1])),Y=eL0(X.iss),Q=xw.decode(Z[2],!0),J=new TextEncoder,W=G.alg===_J.v2?`${Z[0]}.${Z[1]}`:Z[1];if(!Y.verify(J.encode(W),Q))throw Error("sig verification failed");return X}function G44($){for(let Z=0;Z<$.length;Z++)$[Z]=Math.floor(Math.random()*255)}function X44(){let $=new Uint8Array(12);G44($);let Z=Array.from($);return btoa(String.fromCharCode(...Z))}async function Y44($,Z,G){Z.iss=G.getPublicKey(),Z.iat=Math.floor(Date.now()/1000);let X=Z;if($===_J.v2)X.nats.version=2;let Y=new TextEncoder,Q=Y.encode(JSON.stringify(Z));if(globalThis.crypto&&globalThis.crypto.subtle){let F=await globalThis.crypto.subtle.digest("SHA-512",Q);Z.jti=$z0.encode(new Uint8Array(F))}else Z.jti=X44();let J={typ:"JWT",alg:$},W=xw.encode(JSON.stringify(J)),K=xw.encode(JSON.stringify(Z)),U=$===_J.v2?`${W}.${K}`:K,w=xw.encode(G.sign(Y.encode(U)));return`${W}.${K}.${w}`}function iC$($,Z){let G=new TextDecoder().decode(Z.getSeed()),X=`-----BEGIN NATS USER JWT-----
+Respond with the structured verdict and a short reason.`,EC$;var zC$=O(()=>{W6();qE();H81();_64=N81.object({requiresReview:N81.boolean().describe("true if the changes should go through pull-request review"),reason:N81.string().describe("One short sentence explaining the decision (max ~120 chars)")});EC$={requiresReview:!1,reason:""}});function v64($){if(!$||$.includes(".."))return!1;return x64.test($)}function jC$($){let Z=typeof $.__resolveType==="string"?$.__resolveType:null;if(!Z||!v64(Z))return null;let{__resolveType:G,...X}=$;return{resolveType:Z,payload:X}}function PC$($,Z){return`${$.replace(/\/+$/,"")}/deco/invoke/${Z}`}var x64;var AC$=O(()=>{x64=/^[\w./@-]+$/});function B81($){let Z;try{Z=new URL($)}catch{return null}if(!Z.hostname.endsWith(".localhost"))return null;let G=Z.host;return Z.hostname="127.0.0.1",{url:Z.toString(),hostHeader:G}}function TC$($,Z){let G=$?.githubRepo;if(!G?.owner||!G?.name)return null;if(!G.connectionId)return G;if(!Z.includes(G.connectionId))return null;return G}async function IC$($,Z,G,X){if(!X.connectionId)throw new _g("Push requires a connected GitHub account. Connect mcp-github for this project and restart the sandbox.");let Y=$.organization?.id;if(!Y)throw new _g(i7);await Vv({ctx:$,connectionId:X.connectionId,organizationId:Y,forceRefresh:!0,onLegacyMintError:(w)=>{let F=w instanceof Error?w.message:i7;throw new _g(F)}});let{cloneUrl:Q,gitUserName:J,gitUserEmail:W}=await kN(X.connectionId,X.owner,X.name,$.db,$.vault),K=oL0($),U=await Z.proxyDaemonRequest(G,"/_sandbox/config",{method:"PUT",headers:new Headers({"content-type":"application/json"}),body:JSON.stringify({git:{repository:{cloneUrl:Q},identity:{userName:J,userEmail:W}},...K?{operator:K}:{}})});if(!U.ok){let w=await U.text().catch(()=>U.statusText);throw Error(`Failed to refresh sandbox git credentials (${U.status}): ${w}`)}}var _g;var RC$=O(()=>{XN();Q81();Mn();_g=class _g extends Error{constructor($){super($);this.name="GitPushAuthError"}}});function g64($){let Z=$.startsWith("thread:")?$.slice(7):$;if(!Z||Z.length>255||Z.includes("..")||Z.startsWith("/")||Z.endsWith("/")||Z.endsWith(".lock")||!y64.test(Z))throw Error(`Invalid branch name: ${$}`)}function PC($){return AbortSignal.any([$.req.raw.signal,AbortSignal.timeout(c64)])}function AC($){let{runner:Z}=$.get("vmClaim");if(!Z)return $.json({error:"No sandbox runner configured"},503);return Z}async function fZ($,Z,G){let X=AC($);if(X instanceof Response)return X;let{claimName:Y,userId:Q,projectRef:J}=$.get("vmClaim"),W=G?.method??"POST",K=null,U=new Headers;if(G?.jsonBody!==void 0)K=G.jsonBody,U.set("content-type","application/json");else if(G?.forwardJsonBody)K=await $.req.text(),U.set("content-type","application/json");let w=G?.signal,F={method:W,headers:U,body:K,...w?{signal:w}:{}},H=async()=>{let N=await X.proxyDaemonRequest(Y,Z,F);if(G?.map404to410&&N.status===404){try{await N.body?.cancel()}catch{}if(await X.adoptLiveClaim?.({userId:Q,projectRef:J},Y))N=await X.proxyDaemonRequest(Y,Z,F);if(N.status===404){try{await N.body?.cancel()}catch{}return new Response(JSON.stringify({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."}),{status:410,headers:{"content-type":"application/json",...mY}})}}let B=await N.text(),D=G?.redactRepoDirUnlessDesktop&&X.kind!=="user-desktop"?d64(B):B,E=N.headers.get("content-type")??"application/json";return new Response(D,{status:N.status,headers:{"content-type":E,...mY}})};try{if(w){let N=H();return N.catch(()=>{}),await Promise.race([N,new Promise((D,E)=>{if(w.aborted)return E(w.reason);w.addEventListener("abort",()=>E(w.reason),{once:!0})})])}return await H()}catch(N){let B=N instanceof Error?N.message:String(N);return $.json({error:`Daemon unreachable: ${B}`},502)}}function d64($){try{let Z=JSON.parse($);if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&"repoDir"in Z)return JSON.stringify({...Z,repoDir:null})}catch{}return $}async function aL0($,Z,G,X="GET",Y){let Q=await $.proxyDaemonRequest(Z,G,{method:X,headers:new Headers,body:null});if(Q.status===404&&Y){try{await Q.body?.cancel()}catch{}if(await $.adoptLiveClaim?.(Y,Z))Q=await $.proxyDaemonRequest(Z,G,{method:X,headers:new Headers,body:null})}if(Q.status===404){try{await Q.body?.cancel()}catch{}throw Error("SANDBOX_GONE")}let J=await Q.text();if(!Q.ok)try{let W=JSON.parse(J);throw Error(W.error??`Daemon error (${Q.status})`)}catch(W){if(W instanceof Error&&W.message!==J)throw W;throw Error(`Daemon error (${Q.status})`)}return JSON.parse(J)}function l64($){return kC$.includes($)}var y64,qC$=524288,h64=65536,c64=1e4,MC$=2000,u64,mY,kC$,SC$=()=>{let $=new V1;return $.use("/:virtualMcpId/:branch/*",u64),$.post("/:virtualMcpId/:branch/write",(Z)=>fZ(Z,"/_sandbox/write",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/unlink",(Z)=>fZ(Z,"/_sandbox/unlink",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/mkdir",(Z)=>fZ(Z,"/_sandbox/mkdir",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/rename",(Z)=>fZ(Z,"/_sandbox/rename",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/read",(Z)=>fZ(Z,"/_sandbox/read",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/glob",(Z)=>fZ(Z,"/_sandbox/glob",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/grep",(Z)=>fZ(Z,"/_sandbox/grep",{forwardJsonBody:!0,signal:PC(Z)})),$.post("/:virtualMcpId/:branch/exec/:script",(Z)=>{let G=Z.req.param("script");if(!G)return Z.json({error:"missing script name"},400);return fZ(Z,`/_sandbox/exec/${encodeURIComponent(G)}`)}),$.post("/:virtualMcpId/:branch/exec/:script/kill",(Z)=>{let G=Z.req.param("script");if(!G)return Z.json({error:"missing script name"},400);return fZ(Z,`/_sandbox/exec/${encodeURIComponent(G)}/kill`)}),$.get("/:virtualMcpId/:branch/config",(Z)=>fZ(Z,"/_sandbox/config",{method:"GET",map404to410:!0,redactRepoDirUnlessDesktop:!0})),$.put("/:virtualMcpId/:branch/config",(Z)=>fZ(Z,"/_sandbox/config",{method:"PUT",forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/setup/:step",async(Z)=>{let G=Z.req.param("step");if(!G||!l64(G))return Z.json({error:`step must be one of: ${kC$.join(", ")}`},400);if(G==="start"){let X=Z.get("vmClaim");if(X.runner){let Y=O0(Z.var.studioContext),Q=VN0(X.virtualMcpMetadata);try{await _N0({ctx:Z.var.studioContext,runner:X.runner,handle:X.claimName,orgId:Y.id,userId:X.userId,entries:Q})}catch(J){let W=J instanceof Error?J.message:String(J);return Z.json({error:`Failed to push env to daemon: ${W}`},502)}}}return fZ(Z,`/_sandbox/setup/${G}`,{signal:Z.req.raw.signal,map404to410:!0})}),$.get("/:virtualMcpId/:branch/events",(Z)=>{let G=Z.get("vmClaim");if(!G.runner)return aQ(Z,async(X)=>{await X.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:"No sandbox runner configured on this studio instance."})})});return FC$(Z,{ctx:Z.var.studioContext,claimName:G.claimName,runner:G.runner,virtualMcpId:G.virtualMcpId,branch:G.branch,userId:G.userId,projectRef:G.projectRef,virtualMcpMetadata:G.virtualMcpMetadata})}),$.get("/:virtualMcpId/:branch/git/status",(Z)=>fZ(Z,"/_sandbox/git/status",{method:"GET",map404to410:!0,signal:AbortSignal.any([Z.req.raw.signal,AbortSignal.timeout(MC$)])})),$.post("/:virtualMcpId/:branch/git/status",(Z)=>fZ(Z,"/_sandbox/git/status",{map404to410:!0,signal:AbortSignal.any([Z.req.raw.signal,AbortSignal.timeout(MC$)])})),$.post("/:virtualMcpId/:branch/git/diff",(Z)=>fZ(Z,"/_sandbox/git/diff",{forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/git/publish",async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X,virtualMcpMetadata:Y,connectionIds:Q}=Z.get("vmClaim"),J=Z.var.studioContext;try{await J81(J,G,X);let W=TC$(Y,Q);if(W)await IC$(J,G,X,W)}catch(W){if(W instanceof _g)return Z.json({error:W.message},403,mY);let K=W instanceof Error?W.message:String(W);return Z.json({error:K},502,mY)}return fZ(Z,"/_sandbox/git/publish",{forwardJsonBody:!0,map404to410:!0})}),$.post("/:virtualMcpId/:branch/git/discard",(Z)=>fZ(Z,"/_sandbox/git/discard",{forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/git/rebase",async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X}=Z.get("vmClaim"),Y=Z.var.studioContext;try{await J81(Y,G,X)}catch(Q){let J=Q instanceof Error?Q.message:String(Q);return Z.json({error:J},502,mY)}return fZ(Z,"/_sandbox/git/rebase",{forwardJsonBody:!0,map404to410:!0})}),$.post("/:virtualMcpId/:branch/git/suggest-commit",uG({maxSize:qC$,onError:(Z)=>Z.json({error:"Payload too large"},413,mY)}),async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X,userId:Y,projectRef:Q}=Z.get("vmClaim"),J=Z.var.studioContext;try{let W=await Z.req.json().catch(()=>({})),K=W.status,U=W.diff,w=U!=null&&typeof U.diffs==="object"&&U.diffs!==null,[F,H]=U81(K)&&w?[K,U]:await Promise.all([aL0(G,X,"/_sandbox/git/status","GET",{userId:Y,projectRef:Q}),aL0(G,X,"/_sandbox/git/diff","GET",{userId:Y,projectRef:Q})]),N=await DC$(J,F,H);return Z.json(N,200,mY)}catch(W){let K=W instanceof Error?W.message:String(W);if(K==="SANDBOX_GONE")return Z.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,mY);return Z.json({error:K},502,mY)}}),$.post("/:virtualMcpId/:branch/git/judge-review",uG({maxSize:qC$,onError:(Z)=>Z.json({error:"Payload too large"},413,mY)}),async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X,userId:Y,projectRef:Q}=Z.get("vmClaim"),J=Z.var.studioContext;try{let W=await Z.req.json().catch(()=>({})),K=W.status,U=W.diff,w=U!=null&&typeof U.diffs==="object"&&U.diffs!==null,[F,H]=U81(K)&&w?[K,U]:await Promise.all([aL0(G,X,"/_sandbox/git/status","GET",{userId:Y,projectRef:Q}),aL0(G,X,"/_sandbox/git/diff","GET",{userId:Y,projectRef:Q})]),N=await LC$(J,F,H,typeof W.language==="string"?W.language:void 0);return Z.json(N,200,mY)}catch(W){let K=W instanceof Error?W.message:String(W);if(K==="SANDBOX_GONE")return Z.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,mY);return Z.json({error:K},502,mY)}}),$.get("/:virtualMcpId/:branch/preview-fetch",async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X}=Z.get("vmClaim"),Y=Z.req.query("path");if(!Y||!Y.startsWith("/")||Y.startsWith("//")||Y.includes("..")||Y.includes("\\"))return Z.json({error:"Path not allowed"},403);let Q;try{Q=await G.getPreviewUrl(X)}catch{return Z.json({error:"Preview not available"},502)}if(!Q)return Z.json({error:"Preview not available"},502);let J=Q.replace(/\/+$/,""),W=B81(`${J}${Y}`),K;try{K=await fetch(W?.url??`${J}${Y}`,{...W?{headers:{host:W.hostHeader}}:{}})}catch{return Z.json({error:"Preview unreachable"},502)}let U;try{U=await K.text()}catch{return Z.json({error:"Preview unreachable"},502)}return new Response(U,{status:K.status,headers:{"content-type":K.headers.get("content-type")??"application/json"}})}),$.post("/:virtualMcpId/:branch/preview-invoke",uG({maxSize:h64,onError:(Z)=>Z.json({error:"Payload too large"},413)}),async(Z)=>{let G=AC(Z);if(G instanceof Response)return G;let{claimName:X}=Z.get("vmClaim"),Y;try{Y=await G.getPreviewUrl(X)}catch{return Z.json({error:"Preview not available"},502)}if(!Y)return Z.json({error:"Preview not available"},502);let Q;try{Q=await Z.req.json()}catch{return Z.json({error:"Invalid JSON body"},400)}if(!Q||typeof Q!=="object"||Array.isArray(Q))return Z.json({error:"Invalid JSON body"},400);let J=jC$(Q);if(!J)return Z.json({error:"Invalid or missing __resolveType"},400);let W=PC$(Y,J.resolveType),K=B81(W),U;try{U=await fetch(K?.url??W,{method:"POST",headers:{"content-type":"application/json",...K?{host:K.hostHeader}:{}},body:JSON.stringify(J.payload),signal:AbortSignal.timeout(30000)})}catch{return Z.json({error:"Preview unreachable"},502)}let w;try{w=await U.text()}catch{return Z.json({error:"Preview unreachable"},502)}return new Response(w,{status:U.status,headers:{"content-type":U.headers.get("content-type")??"application/json"}})}),$};var VC$=O(()=>{o8();Og();jC();UC$();kY();dE0();TV();wC$();HC$();gp0();pv();H81();zC$();AC$();RC$();y64=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;u64=KC$(async($,Z)=>{let G=$.var.studioContext;try{M0(G)}catch{return $.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return $.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return $.json({error:"Organization scope required"},403)}let Q=$.req.param("virtualMcpId"),J=$.req.param("branch");if(!Q||!J)return $.json({error:"virtualMcpId and branch are required"},400);try{g64(J)}catch(H){let N=H instanceof Error?H.message:String(H);return $.json({error:N},400)}let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return $.json({error:"Virtual MCP not found"},404);let K=Xw({orgId:Y.id,virtualMcpId:Q,branch:J}),U=Xg({userId:X,projectRef:K},J),w=W.metadata??null,F;try{F=(await bY(G,{userId:X,branch:J,virtualMcpMetadata:w})).provider}catch{F=null}if(!F)return $.json({error:"No sandbox runner found"},404);return $.set("vmClaim",{claimName:U,runner:F,virtualMcpId:Q,branch:J,userId:X,projectRef:K,virtualMcpMetadata:w,connectionIds:W.connections?.map((H)=>H.connection_id)??[]}),Z()});mY={"Cache-Control":"no-store, no-cache, must-revalidate",Pragma:"no-cache"};kC$=["clone","install","start"]});var CC$=($)=>{let Z=new V1;if(Z.use("*",FC),Z.route("/",NL0()),Z.route("/",oM$()),Z.route("/",rV$()),Z.route("/",pV$()),Z.route("/",pL0()),Z.route("/tools",GC$()),Z.route("/",eV$()),Z.route("/",_V$({kvStorage:$.kvStorage})),Z.route("/",VV$()),Z.route("/fs",dV$({getConnection:$.getNatsConnection})),Z.route("/sandbox",SC$()),Z.route("/",mV$()),Z.route("/deco-sites",OL0()),Z.route("/sso",yE0()),Z.route("/",tL0({tokenStorage:$.tokenStorage,automationEventDispatcher:$.automationEventDispatcher})),Z.route("/webhooks",lM$()),$.mountDevAssets)Z.route("/dev-assets",DL0({orgFromPath:!0}));return Z.use("/mcp/:connectionId?",$.mcpAuth),Z.use("/mcp/:connectionId/ui-resource",$.mcpAuth),Z.use("/mcp/gateway/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/virtual-mcp/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/self",$.mcpAuth),Z.route("/",Es1()),Z.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",$.betterAuthProtectedResourceHandler),Z.get("/mcp/.well-known/oauth-protected-resource",$.betterAuthProtectedResourceHandler),Z.route("/mcp",EB0()),Z.route("/mcp/self",nL0()),Z.route("/mcp",jB0()),Z.all("/oauth-proxy/:connectionId/*",$.oauthProxyHandler),Z.get("/watch",$.watchHandler),Z};var _C$=O(()=>{o8();q11();mM$();C11();EL0();ut();I11();CV$();bV$();lV$();bi();k01();PB0();s$1();iV$();tV$();oV$();$C$();$81();XC$();Z81();LB0();VC$()});var m64,i64=($)=>{let Z="";for(let G of $)Z+=String.fromCharCode(G);return btoa(Z).replaceAll("+","-").replaceAll("/","_").replace(/=+$/u,"")},Br=($)=>{if($.trim().length===0)throw TypeError("subject token value must not be empty");return i64(new TextEncoder().encode($))},bC$=($)=>{let Z=new URL($ instanceof Request?$.url:$);if(Z.protocol!=="tunnel:")throw TypeError(`expected tunnel: URL, got ${Z.protocol}`);if(Z.hostname.trim().length===0)throw TypeError("tunnel URL hostname must not be empty");return{url:Z,hostname:Z.hostname,pathWithSearch:`${Z.pathname}${Z.search}`}},fC$=($,Z)=>{if($.trim().length===0)throw TypeError("hostname must not be empty");if(!m64.test(Z))throw TypeError("invalid requestId: expected only A-Z, a-z, 0-9, '_' or '-'");let G=Br($),X=`tunnel.v1.host.${G}`,Y=`${X}.req.${Z}`;return{hostToken:G,request:`${X}.request`,body:`${Y}.body`,reply:`${Y}.reply`,abort:`${Y}.abort`}};var sL0=O(()=>{m64=/^[A-Za-z0-9_-]+$/});function CJ($){return`user-${Br($)}.link`}var Or=O(()=>{sL0()});import{z as AB}from"zod";function xC$($){let Z=Br($),G=`tunnel.v1.host.${Z}`;return{subscribe:{allow:[`${G}.request`,`${G}.req.*.body`,`${G}.req.*.abort`,`_INBOX.${Z}.>`]},publish:{allow:[`${G}.req.*.reply`,"decopilot.stream.*"]}}}function vC$({publicUrl:$,userId:Z,ttlSeconds:G,credentials:X,token:Y}){return{connection:{urls:$.split(",").map((Q)=>Q.trim()).filter(Boolean),...X?{credentials:X}:{},...Y?{token:Y}:{}},expiresAt:new Date(Date.now()+G*1000).toISOString(),tunnelHostname:CJ(Z)}}var U7Z;var yC$=O(()=>{sL0();Or();U7Z=AB.object({connection:AB.object({urls:AB.array(AB.string().min(1)).min(1),credentials:AB.string().optional(),token:AB.string().optional()}),expiresAt:AB.string().min(1),tunnelHostname:AB.string().min(1)})});class $z0{static encode($){if(typeof $==="string")return btoa($);let Z=Array.from($);return btoa(String.fromCharCode(...Z))}static decode($,Z=!1){let G=atob($);if(!Z)return G;let X=new Uint8Array(G.length);for(let Y=0;Y<G.length;Y++)X[Y]=G.charCodeAt(Y);return X}}class xw{static encode($){return xw.toB64URLEncoding($z0.encode($))}static decode($,Z=!1){return $z0.decode(xw.fromB64URLEncoding($),Z)}static toB64URLEncoding($){return $=$.replace(/=/g,""),$=$.replace(/\+/g,"-"),$.replace(/\//g,"_")}static fromB64URLEncoding($){return $=$.replace(/_/g,"/"),$=$.replace(/-/g,"+"),$}}function p64($){hC$=$}function sQ(){return hC$}class Zz0{static encode($){let Z=0,G=0,X=new Uint8Array($),Y=new Uint8Array($.byteLength*2),Q=0;for(let J=0;J<X.byteLength;J++){G=G<<8|X[J],Z+=8;while(Z>=5){let W=G>>>Z-5&31;Y[Q++]=O81.charAt(W).charCodeAt(0),Z-=5}}if(Z>0){let J=G<<5-Z&31;Y[Q++]=O81.charAt(J).charCodeAt(0)}return Y.slice(0,Q)}static decode($){let Z=0,G=0,X=0,Y=new Uint8Array($),Q=new Uint8Array(Y.byteLength*5/8|0);for(let J=0;J<Y.byteLength;J++){let W=String.fromCharCode(Y[J]),K=O81.indexOf(W);if(K===-1)throw Error("Illegal Base32 character: "+Y[J]);if(G=G<<5|K,Z+=5,Z>=8)Q[X++]=G>>>Z-8&255,Z-=8}return Q.slice(0,X)}}class Dr{static checksum($){let Z=0;for(let G=0;G<$.byteLength;G++){let X=$[G];Z=Z<<8&65535^t64[(Z>>8^X)&255]}return Z}static validate($,Z){return Dr.checksum($)==Z}}function cC$(){return r64(Z6.User)}class RC{static isValidPublicPrefix($){return $==Z6.Server||$==Z6.Operator||$==Z6.Cluster||$==Z6.Account||$==Z6.User||$==Z6.Curve}static startsWithValidPrefix($){let Z=$[0];return Z=="S"||Z=="P"||Z=="O"||Z=="N"||Z=="C"||Z=="A"||Z=="U"||Z=="X"}static isValidPrefix($){return this.parsePrefix($)!==Z6.Unknown}static parsePrefix($){switch($){case Z6.Seed:return Z6.Seed;case Z6.Private:return Z6.Private;case Z6.Operator:return Z6.Operator;case Z6.Server:return Z6.Server;case Z6.Cluster:return Z6.Cluster;case Z6.Account:return Z6.Account;case Z6.User:return Z6.User;case Z6.Curve:return Z6.Curve;default:return Z6.Unknown}}}class FZ{static encode($,Z){if(!Z||!(Z instanceof Uint8Array))throw new u$(c$.SerializationError);if(!RC.isValidPrefix($))throw new u$(c$.InvalidPrefixByte);return FZ._encode(!1,$,Z)}static encodeSeed($,Z){if(!Z)throw new u$(c$.ApiError);if(!RC.isValidPublicPrefix($))throw new u$(c$.InvalidPrefixByte);if(Z.byteLength!==32)throw new u$(c$.InvalidSeedLen);return FZ._encode(!0,$,Z)}static decode($,Z){if(!RC.isValidPrefix($))throw new u$(c$.InvalidPrefixByte);let G=FZ._decode(Z);if(G[0]!==$)throw new u$(c$.InvalidPrefixByte);return G.slice(1)}static decodeSeed($){let Z=FZ._decode($),G=FZ._decodePrefix(Z);if(G[0]!=Z6.Seed)throw new u$(c$.InvalidSeed);if(!RC.isValidPublicPrefix(G[1]))throw new u$(c$.InvalidPrefixByte);return{buf:Z.slice(2),prefix:G[1]}}static _encode($,Z,G){let X=$?2:1,Y=G.byteLength,Q=X+Y+2,J=X+Y,W=new Uint8Array(Q);if($){let w=FZ._encodePrefix(Z6.Seed,Z);W.set(w)}else W[0]=Z;W.set(G,X);let K=Dr.checksum(W.slice(0,J));return new DataView(W.buffer).setUint16(J,K,!0),Zz0.encode(W)}static _decode($){if($.byteLength<4)throw new u$(c$.InvalidEncoding);let Z;try{Z=Zz0.decode($)}catch(J){throw new u$(c$.InvalidEncoding,J)}let G=Z.byteLength-2,Y=new DataView(Z.buffer).getUint16(G,!0),Q=Z.slice(0,G);if(!Dr.validate(Q,Y))throw new u$(c$.InvalidChecksum);return Q}static _encodePrefix($,Z){let G=$|Z>>5,X=(Z&31)<<3;return new Uint8Array([G,X])}static _decodePrefix($){let Z=$[0]&248,G=($[0]&7)<<5|($[1]&248)>>3;return new Uint8Array([Z,G])}}class E81{seed;constructor($){this.seed=$}getRawSeed(){if(!this.seed)throw new u$(c$.ClearedPair);return FZ.decodeSeed(this.seed).buf}getSeed(){if(!this.seed)throw new u$(c$.ClearedPair);return this.seed}getPublicKey(){if(!this.seed)throw new u$(c$.ClearedPair);let $=FZ.decodeSeed(this.seed),Z=sQ().fromSeed(this.getRawSeed()),G=FZ.encode($.prefix,Z.publicKey);return new TextDecoder().decode(G)}getPrivateKey(){if(!this.seed)throw new u$(c$.ClearedPair);let $=sQ().fromSeed(this.getRawSeed());return FZ.encode(Z6.Private,$.secretKey)}sign($){if(!this.seed)throw new u$(c$.ClearedPair);let Z=sQ().fromSeed(this.getRawSeed());return sQ().sign($,Z.secretKey)}verify($,Z){if(!this.seed)throw new u$(c$.ClearedPair);let G=sQ().fromSeed(this.getRawSeed());return sQ().verify($,Z,G.publicKey)}clear(){if(!this.seed)return;this.seed.fill(0),this.seed=void 0}seal($,Z,G){throw new u$(c$.InvalidNKeyOperation)}open($,Z){throw new u$(c$.InvalidNKeyOperation)}}class L81{seed;constructor($){this.seed=$}clear(){if(!this.seed)return;this.seed.fill(0),this.seed=void 0}getPrivateKey(){if(!this.seed)throw new u$(c$.ClearedPair);return FZ.encode(Z6.Private,this.seed)}getPublicKey(){if(!this.seed)throw new u$(c$.ClearedPair);let $=sQ().scalarBaseMultiply(this.seed),Z=FZ.encode(Z6.Curve,$);return new TextDecoder().decode(Z)}getSeed(){if(!this.seed)throw new u$(c$.ClearedPair);return FZ.encodeSeed(Z6.Curve,this.seed)}sign(){throw new u$(c$.InvalidCurveOperation)}verify(){throw new u$(c$.InvalidCurveOperation)}decodePubCurveKey($){try{let Z=Zz0.decode(new TextEncoder().encode($));if(Z.byteLength!==35)throw new u$(c$.InvalidCurveKey);if(Z[0]!==Z6.Curve)throw new u$(c$.InvalidPublicKey);let G=Z.byteLength-2,Y=new DataView(Z.buffer).getUint16(G,!0),Q=Z.slice(0,G);if(!Dr.validate(Q,Y))throw new u$(c$.InvalidChecksum);return Q.slice(1)}catch(Z){throw new u$(c$.InvalidRecipient,Z)}}seal($,Z,G){if(!this.seed)throw new u$(c$.ClearedPair);if(!G)G=sQ().randomBytes(gC$);let X=this.decodePubCurveKey(Z),Y=new Uint8Array(IC.length+24);Y.set(IC,0),Y.set(G,IC.length);let Q=sQ().seal($,G,X,this.seed),J=new Uint8Array(Y.length+Q.length);return J.set(Y),J.set(Q,Y.length),J}open($,Z){if(!this.seed)throw new u$(c$.ClearedPair);if($.length<=24+IC.length)throw new u$(c$.InvalidEncrypted);for(let Y=0;Y<IC.length;Y++)if($[Y]!==IC[Y])throw new u$(c$.InvalidEncrypted);let G=this.decodePubCurveKey(Z);$=$.slice(IC.length);let X=$.slice(0,24);return $=$.slice(gC$),sQ().open($,X,G,this.seed)}}function r64($){let Z=$===Z6.Curve?32:32,G=sQ().randomBytes(Z),X=FZ.encodeSeed($,new Uint8Array(G));return $===Z6.Curve?new L81(new Uint8Array(G)):new E81(X)}class uC${publicKey;constructor($){this.publicKey=$}getPublicKey(){if(!this.publicKey)throw new u$(c$.ClearedPair);return new TextDecoder().decode(this.publicKey)}getPrivateKey(){if(!this.publicKey)throw new u$(c$.ClearedPair);throw new u$(c$.PublicKeyOnly)}getSeed(){if(!this.publicKey)throw new u$(c$.ClearedPair);throw new u$(c$.PublicKeyOnly)}sign($){if(!this.publicKey)throw new u$(c$.ClearedPair);throw new u$(c$.CannotSign)}verify($,Z){if(!this.publicKey)throw new u$(c$.ClearedPair);let G=FZ._decode(this.publicKey);return sQ().verify($,Z,G.slice(1))}clear(){if(!this.publicKey)return;this.publicKey.fill(0),this.publicKey=void 0}seal($,Z,G){throw new u$(c$.InvalidNKeyOperation)}open($,Z){throw new u$(c$.InvalidNKeyOperation)}}function z81($){let Z=new TextEncoder().encode($),G=FZ._decode(Z),X=RC.parsePrefix(G[0]);if(RC.isValidPublicPrefix(X))return new uC$(Z);throw new u$(c$.InvalidPublicKey)}function o64($){let Z=FZ.decodeSeed($);if(Z.prefix!==Z6.Curve)throw new u$(c$.InvalidCurveSeed);if(Z.buf.byteLength!==32)throw new u$(c$.InvalidSeedLen);return new L81(Z.buf)}function j81($){if(FZ.decodeSeed($).prefix===Z6.Curve)return o64($);return new E81($)}function a64($){if($ instanceof Uint8Array)$=new TextDecoder().decode($);if($.charAt(0)==="S")return j81(new TextEncoder().encode($));return z81($)}function eL0($,Z="",G=!1){let X=typeof $==="string"||$ instanceof Uint8Array?a64($):$,Y=X.getPublicKey(),Q=[];if(!Array.isArray(Z)){if(Z!=="")Q.push(Z)}else Q.push(...Z);if(Z.length>0&&Q.indexOf(Y.charAt(0))===-1)throw Error(`unexpected type ${Y.charAt(0)} - wanted ${Q}`);if(G)X.getPrivateKey();return X}function s64($={}){return dC$({data:-1,payload:-1,subs:-1},$)}function dC$($,...Z){for(let G=0;G<Z.length;G++){let X=Z[G];Object.assign($,X)}return $}function e64($){let{exp:Z,nbf:G,aud:X}=$;return dC$({},{exp:Z,nbf:G,aud:X})}function $44($={}){if(!$.algorithm)$.algorithm=_J.v2;return $}async function lC$($,Z,G,X={},Y={}){G=eL0(G,"A",!Y.signer);let Q=G;if(Y.signer)Q=eL0(Y.signer,"A",!0);Z=eL0(Z,"U");let J=e64(Y);if(J.name=$,J.sub=Z.getPublicKey(),J.nats=Y.scopedUser?X:s64(X),Y.signer)J.nats.issuer_account=G.getPublicKey();let W=$44(Y);return Z44(W.algorithm,D81.User,J),await Y44(W.algorithm,J,Q)}function Z44($,Z,G){if(G.aud=G.aud||"NATS",$===_J.v2)G.nats.type=Z;else G.type=Z}function mC$($){let Z=$.split(".");if(Z.length!==3)throw Error(`invalid jwt - ${Z.length} chunks: ${$}`);let G=JSON.parse(xw.decode(Z[0]));if(G.typ!=="jwt"&&G.typ!=="JWT")throw Error(`not a nats jwt - typ ${G.type}`);if(G.alg!==_J.v1&&G.alg!==_J.v2)throw Error(`not a nats jwt - alg ${G.alg}`);let X=JSON.parse(xw.decode(Z[1])),Y=eL0(X.iss),Q=xw.decode(Z[2],!0),J=new TextEncoder,W=G.alg===_J.v2?`${Z[0]}.${Z[1]}`:Z[1];if(!Y.verify(J.encode(W),Q))throw Error("sig verification failed");return X}function G44($){for(let Z=0;Z<$.length;Z++)$[Z]=Math.floor(Math.random()*255)}function X44(){let $=new Uint8Array(12);G44($);let Z=Array.from($);return btoa(String.fromCharCode(...Z))}async function Y44($,Z,G){Z.iss=G.getPublicKey(),Z.iat=Math.floor(Date.now()/1000);let X=Z;if($===_J.v2)X.nats.version=2;let Y=new TextEncoder,Q=Y.encode(JSON.stringify(Z));if(globalThis.crypto&&globalThis.crypto.subtle){let F=await globalThis.crypto.subtle.digest("SHA-512",Q);Z.jti=$z0.encode(new Uint8Array(F))}else Z.jti=X44();let J={typ:"JWT",alg:$},W=xw.encode(JSON.stringify(J)),K=xw.encode(JSON.stringify(Z)),U=$===_J.v2?`${W}.${K}`:K,w=xw.encode(G.sign(Y.encode(U)));return`${W}.${K}.${w}`}function iC$($,Z){let G=new TextDecoder().decode(Z.getSeed()),X=`-----BEGIN NATS USER JWT-----
 ${$}
 ------END NATS USER JWT------
@@ -2755,7 +2755,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var D81,TC,n64,hC$,O81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",t64,u$,c$,Z6,gC$=24,IC,_J;var nC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(D81||(D81={}));(function($){var Z=function(h,m){this.hi=h|0,this.lo=m|0},G=function(h){var m,c=new Float64Array(16);if(h)for(m=0;m<h.length;m++)c[m]=h[m];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,m){return h<<m|h>>>32-m}function D(h,m){var c=h[m+3]&255;return c=c<<8|h[m+2]&255,c=c<<8|h[m+1]&255,c<<8|h[m+0]&255}function E(h,m){var c=h[m]<<24|h[m+1]<<16|h[m+2]<<8|h[m+3],o=h[m+4]<<24|h[m+5]<<16|h[m+6]<<8|h[m+7];return new Z(c,o)}function L(h,m,c){var o;for(o=0;o<4;o++)h[m+o]=c&255,c>>>=8}function z(h,m,c){h[m]=c.hi>>24&255,h[m+1]=c.hi>>16&255,h[m+2]=c.hi>>8&255,h[m+3]=c.hi&255,h[m+4]=c.lo>>24&255,h[m+5]=c.lo>>16&255,h[m+6]=c.lo>>8&255,h[m+7]=c.lo&255}function j(h,m,c,o,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[m+W0]^c[o+W0];return(1&b0-1>>>8)-1}function P(h,m,c,o){return j(h,m,c,o,16)}function A(h,m,c,o){return j(h,m,c,o,32)}function q(h,m,c,o,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,m,c,o){return q(h,m,c,o,!1),0}function M(h,m,c,o){return q(h,m,c,o,!0),0}var C=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function l(h,m,c,o,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,C);for(j0=0;j0<64;j0++)h[m+j0]=(c?c[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,c)o+=64}if(Y0>0){S(P0,m0,b0,C);for(j0=0;j0<Y0;j0++)h[m+j0]=(c?c[o+j0]:0)^P0[j0]}return 0}function f(h,m,c,o,Y0){return l(h,m,null,0,c,o,Y0)}function v(h,m,c,o,Y0){var W0=new Uint8Array(32);return M(W0,o,Y0,C),f(h,m,c,o.subarray(16),W0)}function $0(h,m,c,o,Y0,W0,b0){var m0=new Uint8Array(32);return M(m0,W0,b0,C),l(h,m,c,o,Y0,W0.subarray(16),m0)}function n(h,m){var c,o=0;for(c=0;c<17;c++)o=o+(h[c]+m[c]|0)|0,h[c]=o&255,o>>>=8}var F0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,m,c,o,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[o+P0];Z1[P0]=1,o+=P0,Y0-=P0,n(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];n(o0,F0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,n(o0,Z1);for(P0=0;P0<16;P0++)h[m+P0]=o0[P0];return 0}function J0(h,m,c,o,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,o,Y0,W0),P(h,m,b0,0)}function G0(h,m,c,o,Y0){var W0;if(c<32)return-1;$0(h,0,m,0,c,o,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,m,c,o,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,o,Y0),J0(m,16,m,32,c-32,b0)!==0)return-1;$0(h,0,m,0,c,o,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,m){var c;for(c=0;c<16;c++)h[c]=m[c]|0}function U0(h){var m,c;for(c=0;c<16;c++)h[c]+=65536,m=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=m-1+37*(m-1)*(c===15?1:0),h[c]-=m*65536}function v0(h,m,c){var o,Y0=~(c-1);for(var W0=0;W0<16;W0++)o=Y0&(h[W0]^m[W0]),h[W0]^=o,m[W0]^=o}function d0(h,m){var c,o,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=m[c];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,m){var c=new Uint8Array(32),o=new Uint8Array(32);return d0(c,h),d0(o,m),A(c,0,o,0)}function n0(h){var m=new Uint8Array(32);return d0(m,h),m[0]&1}function w0(h,m){var c;for(c=0;c<16;c++)h[c]=m[2*c]+(m[2*c+1]<<8);h[15]&=32767}function C0(h,m,c){var o;for(o=0;o<16;o++)h[o]=m[o]+c[o]|0}function T0(h,m,c){var o;for(o=0;o<16;o++)h[o]=m[o]-c[o]|0}function B0(h,m,c){var o,Y0,W0=new Float64Array(31);for(o=0;o<31;o++)W0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)W0[o+Y0]+=m[o]*c[Y0];for(o=0;o<15;o++)W0[o]+=38*W0[o+16];for(o=0;o<16;o++)h[o]=W0[o];U0(h),U0(h)}function Q0(h,m){B0(h,m,m)}function X0(h,m){var c=G(),o;for(o=0;o<16;o++)c[o]=m[o];for(o=253;o>=0;o--)if(Q0(c,c),o!==2&&o!==4)B0(c,c,m);for(o=0;o<16;o++)h[o]=c[o]}function V0(h,m){var c=G(),o;for(o=0;o<16;o++)c[o]=m[o];for(o=250;o>=0;o--)if(Q0(c,c),o!==1)B0(c,c,m);for(o=0;o<16;o++)h[o]=c[o]}function p(h,m,c){var o=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,w0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=o[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),B0(m0,S0,m0),B0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),B0(m0,S0,K),C0(m0,m0,j0),B0(S0,S0,m0),B0(m0,j0,o0),B0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),U1=Y0.subarray(16);return X0(Z1,Z1),B0(U1,U1,Z1),d0(h,U1),0}function e(h,m){return p(h,m,Q)}function t0(h,m){return X(m,32),e(h,m)}function R0(h,m,c){var o=new Uint8Array(32);return p(o,c,m),M(h,Y,o,C)}var q0=G0,g=a;function N0(h,m,c,o,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,m,c,o,b0)}function f0(h,m,c,o,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,m,c,o,b0)}function e0(){var h=0,m=0,c=0,o=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,m+=W0>>>16,c+=b0&Y0,o+=b0>>>16;return m+=h>>>16,c+=m>>>16,o+=c>>>16,new Z(c&Y0|o<<16,h&Y0|m<<16)}function c0(h,m){return new Z(h.hi>>>m,h.lo>>>m|h.hi<<32-m)}function T1(){var h=0,m=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,m^=arguments[c].hi;return new Z(m,h)}function e1(h,m){var c,o,Y0=32-m;if(m<32)c=h.hi>>>m|h.lo<<Y0,o=h.lo>>>m|h.hi<<Y0;else if(m<64)c=h.lo>>>m|h.hi<<Y0,o=h.hi>>>m|h.lo<<Y0;return new Z(c,o)}function L6(h,m,c){var o=h.hi&m.hi^~h.hi&c.hi,Y0=h.lo&m.lo^~h.lo&c.lo;return new Z(o,Y0)}function Q4(h,m,c){var o=h.hi&m.hi^h.hi&c.hi^m.hi&c.hi,Y0=h.lo&m.lo^h.lo&c.lo^m.lo&c.lo;return new Z(o,Y0)}function u5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),c0(h,7))}function o$(h){return T1(e1(h,19),e1(h,61),c0(h,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function P9(h,m,c){var o=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),L6(W0[4],W0[5],W0[6]),a$[P0],b0[P0%16]),Y0[7]=e0(m0,u5(W0[0]),Q4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),o$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],o[P0]),o[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,o[P0]);return c}var dG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function M8(h,m,c){var o=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)o[W0]=dG[W0];P9(o,m,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=m[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),P9(o,Y0,c);for(W0=0;W0<64;W0++)h[W0]=o[W0];return 0}function C6(h,m){var c=G(),o=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,m[1],m[0]),B0(c,c,j0),C0(o,h[0],h[1]),C0(j0,m[0],m[1]),B0(o,o,j0),B0(Y0,h[3],m[3]),B0(Y0,Y0,w),B0(W0,h[2],m[2]),C0(W0,W0,W0),T0(b0,o,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,o,c),B0(h[0],b0,m0),B0(h[1],S0,P0),B0(h[2],P0,m0),B0(h[3],b0,S0)}function $5(h,m,c){var o;for(o=0;o<4;o++)v0(h[o],m[o],c)}function R5(h,m){var c=G(),o=G(),Y0=G();X0(Y0,m[2]),B0(c,m[0],Y0),B0(o,m[1],Y0),d0(h,o),h[31]^=n0(c)<<7}function Q9(h,m,c){var o,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)o=c[Y0/8|0]>>(Y0&7)&1,$5(h,m,o),C6(m,h),C6(h,h),$5(h,m,o)}function A9(h,m){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),B0(c[3],F,H),Q9(h,c,m)}function x1(h,m,c){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(m,32);M8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,A9(Y0,o),R5(h,Y0);for(W0=0;W0<32;W0++)m[W0+32]=h[W0];return 0}var k8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function S8(h,m){var c,o,Y0,W0;for(o=63;o>=32;--o){c=0;for(Y0=o-32,W0=o-12;Y0<W0;++Y0)m[Y0]+=c-16*m[o]*k8[Y0-(o-32)],c=Math.floor((m[Y0]+128)/256),m[Y0]-=c*256;m[Y0]+=c,m[o]=0}c=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=c-(m[31]>>4)*k8[Y0],c=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=c*k8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,h[o]=m[o]&255}function G6(h){var m=new Float64Array(64),c;for(c=0;c<64;c++)m[c]=h[c];for(c=0;c<64;c++)h[c]=0;S8(h,m)}function b$(h,m,c,o){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];M8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=m[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];M8(b0,h.subarray(32),c+32),G6(b0),A9(j0,b0),R5(h,j0);for(m0=32;m0<64;m0++)h[m0]=o[m0];M8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return S8(h.subarray(32),S0),y0}function w8(h,m){var c=G(),o=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),w0(h[1],m),Q0(Y0,h[1]),B0(W0,Y0,U),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),B0(P0,m0,b0),B0(c,P0,Y0),B0(c,c,W0),V0(c,c),B0(c,c,Y0),B0(c,c,W0),B0(c,c,W0),B0(h[0],c,W0),Q0(o,h[0]),B0(o,o,W0),i0(o,Y0))B0(h[0],h[0],N);if(Q0(o,h[0]),B0(o,o,W0),i0(o,Y0))return-1;if(n0(h[0])===m[31]>>7)T0(h[0],J,h[0]);return B0(h[3],h[0],h[1]),0}function j7(h,m,c,o){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=o[Y0];if(M8(b0,h,c),G6(b0),Q9(m0,P0,b0),A9(P0,m.subarray(32)),C6(m0,P0),R5(W0,m0),c-=64,A(m,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=m[Y0+64];return c}var k$=32,n6=24,e6=32,t8=16,Z5=32,V=32,d=32,u=32,I=32,r=n6,x0=e6,l0=t8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:M,crypto_stream_xor:$0,crypto_stream:v,crypto_stream_salsa20_xor:l,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:p,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:N0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:M8,crypto_sign:b$,crypto_sign_keypair:x1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:t8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:V,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:U,L:k8,pack25519:d0,unpack25519:w0,M:B0,A:C0,S:Q0,Z:T0,pow2523:V0,add:C6,set25519:A0,modL:S8,scalarmult:Q9,scalarbase:A9};function u1(h,m){if(h.length!==k$)throw Error("bad key size");if(m.length!==n6)throw Error("bad nonce size")}function z$(h,m){if(h.length!==d)throw Error("bad public key size");if(m.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(h){for(var m=0;m<h.length;m++)h[m]=0}$.randomBytes=function(h){var m=new Uint8Array(h);return X(m,h),m},$.secretbox=function(h,m,c){Y$(h,m,c),u1(c,m);var o=new Uint8Array(e6+h.length),Y0=new Uint8Array(o.length);for(var W0=0;W0<h.length;W0++)o[W0+e6]=h[W0];return G0(Y0,o,o.length,m,c),Y0.subarray(t8)},$.secretbox.open=function(h,m,c){Y$(h,m,c),u1(c,m);var o=new Uint8Array(t8+h.length),Y0=new Uint8Array(o.length);for(var W0=0;W0<h.length;W0++)o[W0+t8]=h[W0];if(o.length<32)return null;if(a(Y0,o,o.length,m,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=t8,$.scalarMult=function(h,m){if(Y$(h,m),h.length!==V)throw Error("bad n size");if(m.length!==Z5)throw Error("bad p size");var c=new Uint8Array(Z5);return p(c,h,m),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==V)throw Error("bad n size");var m=new Uint8Array(Z5);return e(m,h),m},$.scalarMult.scalarLength=V,$.scalarMult.groupElementLength=Z5,$.box=function(h,m,c,o){var Y0=$.box.before(c,o);return $.secretbox(h,m,Y0)},$.box.before=function(h,m){Y$(h,m),z$(h,m);var c=new Uint8Array(I);return R0(c,h,m),c},$.box.after=$.secretbox,$.box.open=function(h,m,c,o){var Y0=$.box.before(c,o);return $.secretbox.open(h,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),m=new Uint8Array(u);return t0(h,m),{publicKey:h,secretKey:m}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var m=new Uint8Array(d);return e(m,h),{publicKey:m,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,m){if(Y$(h,m),m.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return b$(c,h,h.length,m),c},$.sign.open=function(h,m){if(Y$(h,m),m.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),o=j7(c,h,h.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,m){var c=$.sign(h,m),o=new Uint8Array(W1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=c[Y0];return o},$.sign.detached.verify=function(h,m,c){if(Y$(h,m,c),m.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var o=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)o[W0]=m[W0];for(W0=0;W0<h.length;W0++)o[W0+W1]=h[W0];return j7(Y0,o,o.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),m=new Uint8Array(g1);return x1(h,m),{publicKey:h,secretKey:m}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var m=new Uint8Array(F1);for(var c=0;c<m.length;c++)m[c]=h[32+c];return{publicKey:m,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var m=new Uint8Array(F1),c=new Uint8Array(g1);for(var o=0;o<32;o++)c[o]=h[o];return x1(m,c,!0),{publicKey:m,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var m=new Uint8Array(Y8);return M8(m,h,h.length),m},$.hash.hashLength=Y8,$.verify=function(h,m){if(Y$(h,m),h.length===0||m.length===0)return!1;if(h.length!==m.length)return!1;return j(h,0,m,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var m=65536;$.setPRNG(function(c,o){var Y0,W0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)c[Y0]=W0[Y0];v$(W0)})}else if(h=u0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,o){var Y0,W0=h.randomBytes(o);for(Y0=0;Y0<o;Y0++)c[Y0]=W0[Y0];v$(W0)})}()})(typeof bg<"u"&&F7Z?F7Z:globalThis.nacl=globalThis.nacl||{});TC=typeof bg<"u"&&F7Z?F7Z:globalThis.nacl,n64={fromSeed:TC.sign.keyPair.fromSeed,sign:TC.sign.detached,verify:TC.sign.detached.verify,randomBytes:TC.randomBytes,scalarBaseMultiply:TC.scalarMult.base,seal:TC.box,open:TC.box.open};t64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);u$=class u$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(c$||(c$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));IC=[120,107,118,49];p64(n64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function P81($){try{$?.clear?.()}catch{}}async function pC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=mC$($),W=z81(J.sub),K=j81(new TextEncoder().encode(Z)),U=cC$();try{let w=await lC$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(iC$(w,U))}finally{P81(U),P81(K),P81(W)}}var tC$=O(()=>{nC$()});function Q44($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function rC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(A81(),503);if(!Y.natsPublicUrl)return Z.json(A81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(A81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await pC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:xC$(Q),userId:X,allowedConnectionTypes:Q44(Y.natsPublicUrl)})}return Z.json(vC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var A81=()=>({error:"link session unavailable"});var oC$=O(()=>{o8();F8();yC$();tC$()});async function K44($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function U44($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new MN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function w44($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},J44),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=en(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function F44($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<aC$){await O8(sC$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<aC$){await O8(sC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var J44=90000,W44=15000,eC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=Xw({orgId:Y.id,virtualMcpId:Q,branch:J}),U=Xg({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:w});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&mW(w5(w),X,J,H),D=!!B&&B.sandboxHandle===U;if(!F)return aQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),aQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},W44);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await K44(F,U)){await U44({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await w44({stream:E,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await F44({stream:E,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},aC$=60000,sC$=500;var $_$=O(()=>{o8();jC();kY();d5();dE0();$p();TV();GZ0();qX()});function N44($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function B44($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(H44)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var H44=1e4,O44=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},Z_$=()=>{let $=new V1;return $.use("*",O44),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await B44(X,Y);return Z.json({apps:N44(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var G_$=O(()=>{o8();F8()});import{z as h1}from"zod";function jK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function R44($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function q44($,Z,G){try{return JSON.parse($)}catch{throw new Q_$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function M44($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:q44(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function k44($){let Z=$.map((G)=>{let X=G.function.parameters?OY(G.function.parameters):OY({type:"object",properties:{}});return[G.function.name,f$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function S44($){if(!$)return;return{openai:{response_format:$}}}function V44(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function X_$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function Y_$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var D44=256,E44,L44,z44,j44,P44,A44,T44,I44,Q_$,J_$,W_$;var K_$=O(()=>{W6();o8();jC();E44=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),L44=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),z44=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(L44).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),j44=h1.object({type:h1.literal("text")}),P44=h1.object({type:h1.literal("json_object")}),A44=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),T44=h1.union([j44,P44,A44]),I44=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(z44),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(E44).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:T44.optional(),user:h1.string().optional()});Q_$=class Q_$ extends Error{constructor($){super($);this.name="MessageConversionError"}};J_$=new V1;J_$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(jK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(jK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(jK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=I44.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(jK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=R44(Q.model);if(!J)return $.json(jK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(jK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(jK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=M44(Q.messages),H=Q.tools?k44(Q.tools):void 0,N=S44(Q.response_format),B=V44(),D=Math.floor(Date.now()/1000);if(Q.stream)return aQ($,async(E)=>{let L=X_$(w,F,H,Q,N,$.req.raw.signal);try{let z=vQ(L),j=!1,P=0,A="",q=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=D44)await q()}else if(S.type==="tool-call"){await q();let M=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await q(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:Y_$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await q(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=X_$(w,F,H,Q,N,$.req.raw.signal),L=await ON(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:Y_$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(jK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(jK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(jK(Y.message,"server_error"),500)}});W_$=J_$});var w_$;var U_$=O(()=>{w_$={name:"decocms",version:"4.102.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function b44(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??_44}}var F_$,_44="https://ph.studio.decocms.com",H_$;var N_$=O(()=>{o8();wf0();iN();S7();F8();T01();U_$();F_$=new V1;F_$.get("/",($)=>{let Z={version:w_$.version,theme:vb1(),...rO().logo&&{logo:rO().logo},...cQ()&&{internalUrl:W00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:MR$(),posthog:b44(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!cQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});H_$=F_$});function Gz0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function O_$($){return(Gz0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function D_$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(Gz0($))}&sz=${Z}`}function B_$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function E_$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?B_$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):B_$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as f44}from"path";function vw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function x44($){let Z=Gz0($),G=O_$(Z),X=D_$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=E_$({brand:G,domain:Z});return[`<title>${vw(J)}</title>`,`<meta name="description" content="${vw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${vw(J)}" />`,`<meta property="og:description" content="${vw(W)}" />`,`<meta property="og:url" content="${vw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${vw(J)}" />`,`<meta name="twitter:description" content="${vw(W)}" />`,`<link rel="canonical" href="${vw(Q)}" />`,`<link rel="icon" href="${vw(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var D81,TC,n64,hC$,O81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",t64,u$,c$,Z6,gC$=24,IC,_J;var nC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(D81||(D81={}));(function($){var Z=function(h,m){this.hi=h|0,this.lo=m|0},G=function(h){var m,c=new Float64Array(16);if(h)for(m=0;m<h.length;m++)c[m]=h[m];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,m){return h<<m|h>>>32-m}function D(h,m){var c=h[m+3]&255;return c=c<<8|h[m+2]&255,c=c<<8|h[m+1]&255,c<<8|h[m+0]&255}function E(h,m){var c=h[m]<<24|h[m+1]<<16|h[m+2]<<8|h[m+3],o=h[m+4]<<24|h[m+5]<<16|h[m+6]<<8|h[m+7];return new Z(c,o)}function L(h,m,c){var o;for(o=0;o<4;o++)h[m+o]=c&255,c>>>=8}function z(h,m,c){h[m]=c.hi>>24&255,h[m+1]=c.hi>>16&255,h[m+2]=c.hi>>8&255,h[m+3]=c.hi&255,h[m+4]=c.lo>>24&255,h[m+5]=c.lo>>16&255,h[m+6]=c.lo>>8&255,h[m+7]=c.lo&255}function j(h,m,c,o,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[m+W0]^c[o+W0];return(1&b0-1>>>8)-1}function P(h,m,c,o){return j(h,m,c,o,16)}function A(h,m,c,o){return j(h,m,c,o,32)}function q(h,m,c,o,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,m,c,o){return q(h,m,c,o,!1),0}function M(h,m,c,o){return q(h,m,c,o,!0),0}var C=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function l(h,m,c,o,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,C);for(j0=0;j0<64;j0++)h[m+j0]=(c?c[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,c)o+=64}if(Y0>0){S(P0,m0,b0,C);for(j0=0;j0<Y0;j0++)h[m+j0]=(c?c[o+j0]:0)^P0[j0]}return 0}function f(h,m,c,o,Y0){return l(h,m,null,0,c,o,Y0)}function v(h,m,c,o,Y0){var W0=new Uint8Array(32);return M(W0,o,Y0,C),f(h,m,c,o.subarray(16),W0)}function $0(h,m,c,o,Y0,W0,b0){var m0=new Uint8Array(32);return M(m0,W0,b0,C),l(h,m,c,o,Y0,W0.subarray(16),m0)}function n(h,m){var c,o=0;for(c=0;c<17;c++)o=o+(h[c]+m[c]|0)|0,h[c]=o&255,o>>>=8}var F0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,m,c,o,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[o+P0];Z1[P0]=1,o+=P0,Y0-=P0,n(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];n(o0,F0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,n(o0,Z1);for(P0=0;P0<16;P0++)h[m+P0]=o0[P0];return 0}function J0(h,m,c,o,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,o,Y0,W0),P(h,m,b0,0)}function G0(h,m,c,o,Y0){var W0;if(c<32)return-1;$0(h,0,m,0,c,o,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,m,c,o,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,o,Y0),J0(m,16,m,32,c-32,b0)!==0)return-1;$0(h,0,m,0,c,o,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,m){var c;for(c=0;c<16;c++)h[c]=m[c]|0}function U0(h){var m,c;for(c=0;c<16;c++)h[c]+=65536,m=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=m-1+37*(m-1)*(c===15?1:0),h[c]-=m*65536}function v0(h,m,c){var o,Y0=~(c-1);for(var W0=0;W0<16;W0++)o=Y0&(h[W0]^m[W0]),h[W0]^=o,m[W0]^=o}function d0(h,m){var c,o,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=m[c];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,m){var c=new Uint8Array(32),o=new Uint8Array(32);return d0(c,h),d0(o,m),A(c,0,o,0)}function n0(h){var m=new Uint8Array(32);return d0(m,h),m[0]&1}function w0(h,m){var c;for(c=0;c<16;c++)h[c]=m[2*c]+(m[2*c+1]<<8);h[15]&=32767}function C0(h,m,c){var o;for(o=0;o<16;o++)h[o]=m[o]+c[o]|0}function T0(h,m,c){var o;for(o=0;o<16;o++)h[o]=m[o]-c[o]|0}function B0(h,m,c){var o,Y0,W0=new Float64Array(31);for(o=0;o<31;o++)W0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)W0[o+Y0]+=m[o]*c[Y0];for(o=0;o<15;o++)W0[o]+=38*W0[o+16];for(o=0;o<16;o++)h[o]=W0[o];U0(h),U0(h)}function Q0(h,m){B0(h,m,m)}function X0(h,m){var c=G(),o;for(o=0;o<16;o++)c[o]=m[o];for(o=253;o>=0;o--)if(Q0(c,c),o!==2&&o!==4)B0(c,c,m);for(o=0;o<16;o++)h[o]=c[o]}function V0(h,m){var c=G(),o;for(o=0;o<16;o++)c[o]=m[o];for(o=250;o>=0;o--)if(Q0(c,c),o!==1)B0(c,c,m);for(o=0;o<16;o++)h[o]=c[o]}function p(h,m,c){var o=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,w0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=o[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),B0(m0,S0,m0),B0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),B0(m0,S0,K),C0(m0,m0,j0),B0(S0,S0,m0),B0(m0,j0,o0),B0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),U1=Y0.subarray(16);return X0(Z1,Z1),B0(U1,U1,Z1),d0(h,U1),0}function e(h,m){return p(h,m,Q)}function t0(h,m){return X(m,32),e(h,m)}function R0(h,m,c){var o=new Uint8Array(32);return p(o,c,m),M(h,Y,o,C)}var q0=G0,g=a;function N0(h,m,c,o,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,m,c,o,b0)}function f0(h,m,c,o,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,m,c,o,b0)}function e0(){var h=0,m=0,c=0,o=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,m+=W0>>>16,c+=b0&Y0,o+=b0>>>16;return m+=h>>>16,c+=m>>>16,o+=c>>>16,new Z(c&Y0|o<<16,h&Y0|m<<16)}function c0(h,m){return new Z(h.hi>>>m,h.lo>>>m|h.hi<<32-m)}function T1(){var h=0,m=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,m^=arguments[c].hi;return new Z(m,h)}function e1(h,m){var c,o,Y0=32-m;if(m<32)c=h.hi>>>m|h.lo<<Y0,o=h.lo>>>m|h.hi<<Y0;else if(m<64)c=h.lo>>>m|h.hi<<Y0,o=h.hi>>>m|h.lo<<Y0;return new Z(c,o)}function L6(h,m,c){var o=h.hi&m.hi^~h.hi&c.hi,Y0=h.lo&m.lo^~h.lo&c.lo;return new Z(o,Y0)}function Q4(h,m,c){var o=h.hi&m.hi^h.hi&c.hi^m.hi&c.hi,Y0=h.lo&m.lo^h.lo&c.lo^m.lo&c.lo;return new Z(o,Y0)}function u5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),c0(h,7))}function o$(h){return T1(e1(h,19),e1(h,61),c0(h,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function P9(h,m,c){var o=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),L6(W0[4],W0[5],W0[6]),a$[P0],b0[P0%16]),Y0[7]=e0(m0,u5(W0[0]),Q4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),o$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],o[P0]),o[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,o[P0]);return c}var dG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function M8(h,m,c){var o=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)o[W0]=dG[W0];P9(o,m,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=m[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),P9(o,Y0,c);for(W0=0;W0<64;W0++)h[W0]=o[W0];return 0}function C6(h,m){var c=G(),o=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,m[1],m[0]),B0(c,c,j0),C0(o,h[0],h[1]),C0(j0,m[0],m[1]),B0(o,o,j0),B0(Y0,h[3],m[3]),B0(Y0,Y0,w),B0(W0,h[2],m[2]),C0(W0,W0,W0),T0(b0,o,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,o,c),B0(h[0],b0,m0),B0(h[1],S0,P0),B0(h[2],P0,m0),B0(h[3],b0,S0)}function $5(h,m,c){var o;for(o=0;o<4;o++)v0(h[o],m[o],c)}function R5(h,m){var c=G(),o=G(),Y0=G();X0(Y0,m[2]),B0(c,m[0],Y0),B0(o,m[1],Y0),d0(h,o),h[31]^=n0(c)<<7}function Q9(h,m,c){var o,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)o=c[Y0/8|0]>>(Y0&7)&1,$5(h,m,o),C6(m,h),C6(h,h),$5(h,m,o)}function A9(h,m){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),B0(c[3],F,H),Q9(h,c,m)}function x1(h,m,c){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(m,32);M8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,A9(Y0,o),R5(h,Y0);for(W0=0;W0<32;W0++)m[W0+32]=h[W0];return 0}var k8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function S8(h,m){var c,o,Y0,W0;for(o=63;o>=32;--o){c=0;for(Y0=o-32,W0=o-12;Y0<W0;++Y0)m[Y0]+=c-16*m[o]*k8[Y0-(o-32)],c=Math.floor((m[Y0]+128)/256),m[Y0]-=c*256;m[Y0]+=c,m[o]=0}c=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=c-(m[31]>>4)*k8[Y0],c=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=c*k8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,h[o]=m[o]&255}function G6(h){var m=new Float64Array(64),c;for(c=0;c<64;c++)m[c]=h[c];for(c=0;c<64;c++)h[c]=0;S8(h,m)}function b$(h,m,c,o){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];M8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=m[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];M8(b0,h.subarray(32),c+32),G6(b0),A9(j0,b0),R5(h,j0);for(m0=32;m0<64;m0++)h[m0]=o[m0];M8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return S8(h.subarray(32),S0),y0}function w8(h,m){var c=G(),o=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),w0(h[1],m),Q0(Y0,h[1]),B0(W0,Y0,U),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),B0(P0,m0,b0),B0(c,P0,Y0),B0(c,c,W0),V0(c,c),B0(c,c,Y0),B0(c,c,W0),B0(c,c,W0),B0(h[0],c,W0),Q0(o,h[0]),B0(o,o,W0),i0(o,Y0))B0(h[0],h[0],N);if(Q0(o,h[0]),B0(o,o,W0),i0(o,Y0))return-1;if(n0(h[0])===m[31]>>7)T0(h[0],J,h[0]);return B0(h[3],h[0],h[1]),0}function j7(h,m,c,o){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=o[Y0];if(M8(b0,h,c),G6(b0),Q9(m0,P0,b0),A9(P0,m.subarray(32)),C6(m0,P0),R5(W0,m0),c-=64,A(m,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=m[Y0+64];return c}var k$=32,n6=24,e6=32,t8=16,Z5=32,V=32,d=32,u=32,I=32,r=n6,x0=e6,l0=t8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:M,crypto_stream_xor:$0,crypto_stream:v,crypto_stream_salsa20_xor:l,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:p,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:N0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:M8,crypto_sign:b$,crypto_sign_keypair:x1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:t8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:V,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:U,L:k8,pack25519:d0,unpack25519:w0,M:B0,A:C0,S:Q0,Z:T0,pow2523:V0,add:C6,set25519:A0,modL:S8,scalarmult:Q9,scalarbase:A9};function u1(h,m){if(h.length!==k$)throw Error("bad key size");if(m.length!==n6)throw Error("bad nonce size")}function z$(h,m){if(h.length!==d)throw Error("bad public key size");if(m.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(h){for(var m=0;m<h.length;m++)h[m]=0}$.randomBytes=function(h){var m=new Uint8Array(h);return X(m,h),m},$.secretbox=function(h,m,c){Y$(h,m,c),u1(c,m);var o=new Uint8Array(e6+h.length),Y0=new Uint8Array(o.length);for(var W0=0;W0<h.length;W0++)o[W0+e6]=h[W0];return G0(Y0,o,o.length,m,c),Y0.subarray(t8)},$.secretbox.open=function(h,m,c){Y$(h,m,c),u1(c,m);var o=new Uint8Array(t8+h.length),Y0=new Uint8Array(o.length);for(var W0=0;W0<h.length;W0++)o[W0+t8]=h[W0];if(o.length<32)return null;if(a(Y0,o,o.length,m,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=t8,$.scalarMult=function(h,m){if(Y$(h,m),h.length!==V)throw Error("bad n size");if(m.length!==Z5)throw Error("bad p size");var c=new Uint8Array(Z5);return p(c,h,m),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==V)throw Error("bad n size");var m=new Uint8Array(Z5);return e(m,h),m},$.scalarMult.scalarLength=V,$.scalarMult.groupElementLength=Z5,$.box=function(h,m,c,o){var Y0=$.box.before(c,o);return $.secretbox(h,m,Y0)},$.box.before=function(h,m){Y$(h,m),z$(h,m);var c=new Uint8Array(I);return R0(c,h,m),c},$.box.after=$.secretbox,$.box.open=function(h,m,c,o){var Y0=$.box.before(c,o);return $.secretbox.open(h,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),m=new Uint8Array(u);return t0(h,m),{publicKey:h,secretKey:m}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var m=new Uint8Array(d);return e(m,h),{publicKey:m,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,m){if(Y$(h,m),m.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return b$(c,h,h.length,m),c},$.sign.open=function(h,m){if(Y$(h,m),m.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),o=j7(c,h,h.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,m){var c=$.sign(h,m),o=new Uint8Array(W1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=c[Y0];return o},$.sign.detached.verify=function(h,m,c){if(Y$(h,m,c),m.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var o=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)o[W0]=m[W0];for(W0=0;W0<h.length;W0++)o[W0+W1]=h[W0];return j7(Y0,o,o.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),m=new Uint8Array(g1);return x1(h,m),{publicKey:h,secretKey:m}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var m=new Uint8Array(F1);for(var c=0;c<m.length;c++)m[c]=h[32+c];return{publicKey:m,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var m=new Uint8Array(F1),c=new Uint8Array(g1);for(var o=0;o<32;o++)c[o]=h[o];return x1(m,c,!0),{publicKey:m,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var m=new Uint8Array(Y8);return M8(m,h,h.length),m},$.hash.hashLength=Y8,$.verify=function(h,m){if(Y$(h,m),h.length===0||m.length===0)return!1;if(h.length!==m.length)return!1;return j(h,0,m,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var m=65536;$.setPRNG(function(c,o){var Y0,W0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)c[Y0]=W0[Y0];v$(W0)})}else if(h=u0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,o){var Y0,W0=h.randomBytes(o);for(Y0=0;Y0<o;Y0++)c[Y0]=W0[Y0];v$(W0)})}()})(typeof bg<"u"&&F7Z?F7Z:globalThis.nacl=globalThis.nacl||{});TC=typeof bg<"u"&&F7Z?F7Z:globalThis.nacl,n64={fromSeed:TC.sign.keyPair.fromSeed,sign:TC.sign.detached,verify:TC.sign.detached.verify,randomBytes:TC.randomBytes,scalarBaseMultiply:TC.scalarMult.base,seal:TC.box,open:TC.box.open};t64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);u$=class u$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(c$||(c$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));IC=[120,107,118,49];p64(n64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function P81($){try{$?.clear?.()}catch{}}async function pC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=mC$($),W=z81(J.sub),K=j81(new TextEncoder().encode(Z)),U=cC$();try{let w=await lC$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(iC$(w,U))}finally{P81(U),P81(K),P81(W)}}var tC$=O(()=>{nC$()});function Q44($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function rC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(A81(),503);if(!Y.natsPublicUrl)return Z.json(A81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(A81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await pC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:xC$(Q),userId:X,allowedConnectionTypes:Q44(Y.natsPublicUrl)})}return Z.json(vC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var A81=()=>({error:"link session unavailable"});var oC$=O(()=>{o8();F8();yC$();tC$()});async function K44($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function U44($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new MN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function w44($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},J44),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=en(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function F44($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<aC$){await O8(sC$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<aC$){await O8(sC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var J44=90000,W44=15000,eC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=Xw({orgId:Y.id,virtualMcpId:Q,branch:J}),U=Xg({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:w});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&mW(w5(w),X,J,H),D=!!B&&B.sandboxHandle===U;if(!F)return aQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),aQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},W44);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await K44(F,U)){await U44({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await w44({stream:E,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await F44({stream:E,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},aC$=60000,sC$=500;var $_$=O(()=>{o8();jC();kY();d5();dE0();$p();TV();GZ0();qX()});function N44($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function B44($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(H44)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var H44=1e4,O44=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},Z_$=()=>{let $=new V1;return $.use("*",O44),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await B44(X,Y);return Z.json({apps:N44(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var G_$=O(()=>{o8();F8()});import{z as h1}from"zod";function jK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function R44($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function q44($,Z,G){try{return JSON.parse($)}catch{throw new Q_$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function M44($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:q44(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function k44($){let Z=$.map((G)=>{let X=G.function.parameters?OY(G.function.parameters):OY({type:"object",properties:{}});return[G.function.name,f$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function S44($){if(!$)return;return{openai:{response_format:$}}}function V44(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function X_$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function Y_$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var D44=256,E44,L44,z44,j44,P44,A44,T44,I44,Q_$,J_$,W_$;var K_$=O(()=>{W6();o8();jC();E44=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),L44=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),z44=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(L44).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),j44=h1.object({type:h1.literal("text")}),P44=h1.object({type:h1.literal("json_object")}),A44=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),T44=h1.union([j44,P44,A44]),I44=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(z44),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(E44).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:T44.optional(),user:h1.string().optional()});Q_$=class Q_$ extends Error{constructor($){super($);this.name="MessageConversionError"}};J_$=new V1;J_$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(jK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(jK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(jK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=I44.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(jK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=R44(Q.model);if(!J)return $.json(jK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(jK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(jK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=M44(Q.messages),H=Q.tools?k44(Q.tools):void 0,N=S44(Q.response_format),B=V44(),D=Math.floor(Date.now()/1000);if(Q.stream)return aQ($,async(E)=>{let L=X_$(w,F,H,Q,N,$.req.raw.signal);try{let z=vQ(L),j=!1,P=0,A="",q=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=D44)await q()}else if(S.type==="tool-call"){await q();let M=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await q(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:Y_$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await q(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=X_$(w,F,H,Q,N,$.req.raw.signal),L=await ON(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:Y_$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(jK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(jK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(jK(Y.message,"server_error"),500)}});W_$=J_$});var w_$;var U_$=O(()=>{w_$={name:"decocms",version:"4.103.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function b44(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??_44}}var F_$,_44="https://ph.studio.decocms.com",H_$;var N_$=O(()=>{o8();wf0();iN();S7();F8();T01();U_$();F_$=new V1;F_$.get("/",($)=>{let Z={version:w_$.version,theme:vb1(),...rO().logo&&{logo:rO().logo},...cQ()&&{internalUrl:W00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:MR$(),posthog:b44(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!cQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});H_$=F_$});function Gz0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function O_$($){return(Gz0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function D_$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(Gz0($))}&sz=${Z}`}function B_$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function E_$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?B_$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):B_$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as f44}from"path";function vw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function x44($){let Z=Gz0($),G=O_$(Z),X=D_$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=E_$({brand:G,domain:Z});return[`<title>${vw(J)}</title>`,`<meta name="description" content="${vw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${vw(J)}" />`,`<meta property="og:description" content="${vw(W)}" />`,`<meta property="og:url" content="${vw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${vw(J)}" />`,`<meta name="twitter:description" content="${vw(W)}" />`,`<link rel="canonical" href="${vw(Q)}" />`,`<link rel="icon" href="${vw(X)}" sizes="any" />`].join(`
     `)}function v44($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function L_$($){let Z=new V1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?f44($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=x44(X);return G.html(v44(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var z_$=O(()=>{o8();F8()});import{z as Q1}from"zod";var qC,y44,g44,h44,c44,j_$;var P_$=O(()=>{qC=Q1.enum(["good","bad","neutral"]),y44=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:qC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),g44=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(y44)),h44={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},c44=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:qC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:qC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:qC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:qC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(g44).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:qC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:qC.optional()})).min(1)})]),j_$=Q1.object({...h44,template:c44})});function A_$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=j_$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var T_$=O(()=>{P_$()});function Er($,Z){return fetch(`${wD({})}${$}`,Z)}async function u44($,Z){let G=await Er(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=A_$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var d44,MC,I_$;var R_$=O(()=>{o8();AY();Ff();T_$();d44=new Set(["complete","errored","terminated","unknown"]),MC=new V1;MC.use("*",async($,Z)=>{let G=await G8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});MC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await u44(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});MC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await Er("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${FD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});MC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await Er(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${FD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:d44.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});MC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await Er(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});MC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await Er(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});I_$=MC});function q_$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var M_$,l44,m44,k_$;var S_$=O(()=>{o8();y3();$y();gb();M_$=new V1,l44=["range","if-none-match","if-modified-since"],m44=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];M_$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Bg($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Kp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&v3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,U,w]=K,F=Buffer.from(w,"base64"),H=new Headers({"Content-Type":U,"Cache-Control":"private, max-age=86400"});return q_$(H,U),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of l44){let U=$.req.header(K);if(U)Q.set(K,U)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of m44){let U=J.headers.get(K);if(U)W.set(K,U)}return W.set("Cache-Control","private, max-age=86400"),q_$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});k_$=M_$});var Lr=_((kC)=>{var i44=kC&&kC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),n44=kC&&kC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))i44(Z,$,G)};Object.defineProperty(kC,"__esModule",{value:!0});n44(tX(),kC)});var __$=_((V_$)=>{Object.defineProperty(V_$,"__esModule",{value:!0});V_$.version=void 0;V_$.version="3.4.0"});var x_$=_((PK)=>{var p44=PK&&PK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(PK,"__esModule",{value:!0});PK.NodeTransport=PK.VERSION=void 0;PK.nodeResolveHost=e44;var i4=Lr(),t44=u0("net"),T81=u0("tls"),r44=u0("path"),b_$=u0("fs"),o44=p44(u0("dns")),a44=__$();PK.VERSION=a44.version;var s44="nats.js";class f_${socket;version;lang;yields=[];signal=(0,i4.deferred)();closedNotification=(0,i4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=s44,this.version=PK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,i4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw i4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new i4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new i4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,i4.deferred)(),G,X=(0,t44.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,i4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=i4.DataBuffer.concat(...this.yields),Y=(0,i4.extractProtocolMessage)(X);if(Y!=="")try{let Q=i4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,i4.deferred)();try{if($=(0,r44.resolve)($),!(0,b_$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,b_$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,i4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,i4.deferred)();try{let Y=(0,T81.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,i4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,i4.deferred)();try{let X=(0,T81.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,i4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,i4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof T81.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,i4.render)($)}`);let Z=(0,i4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}PK.NodeTransport=f_$;function e44($){let Z=(0,i4.deferred)();return o44.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var c_$=_((h_$)=>{Object.defineProperty(h_$,"__esModule",{value:!0});h_$.connect=$54;var v_$=x_$(),y_$=Lr(),g_$=Lr();function $54($={}){if((0,g_$.hasWsProtocol)($))return Promise.reject(g_$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,y_$.setTransportFactory)({factory:()=>{return new v_$.NodeTransport},dnsResolveFn:v_$.nodeResolveHost}),y_$.NatsConnectionImpl.connect($)}});var u_$=_((yw)=>{var G54=yw&&yw.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),X54=yw&&yw.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))G54(Z,$,G)};Object.defineProperty(yw,"__esModule",{value:!0});yw.connect=void 0;var Y54=c_$();Object.defineProperty(yw,"connect",{enumerable:!0,get:function(){return Y54.connect}});X54(Lr(),yw)});function i_$($){let Z=$?.connectFn??K54,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function U(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function w(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,U()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:W54,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,w(G),U();return}catch{B++;let D=lX(J54,Q54,B-1,2,0.5);await O8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?d_$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=m_$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function K54($){return l_$.connect($)}var d_$,l_$,m_$,Q54=100,J54=3000,W54=3000;var n_$=O(()=>{d5();d_$=k(Qh(),1),l_$=k(u_$(),1),m_$=k(cB(),1)});function I81($,Z){return`${$}.${Z}`}class R81{cache;constructor($){this.cache=ey({ttlMs:$?.ttlMs??U54,maxSize:$?.maxSize??w54})}async get($,Z){return this.cache.get(I81($,Z))??null}async set($,Z,G){this.cache.set(I81($,Z),G)}async invalidate($,Z){this.cache.delete(I81($,Z))}teardown(){this.cache.clear()}}var U54=600000,w54=5000;var p_$=()=>{};function Xz0($,Z){return`${$}:${Z}`}function q81($){let Z=ey({ttlMs:$?.ttlMs??F54,maxSize:$?.maxSize??H54}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,U){let w=G?.();if(!w)return;try{w.publish(t_$,Y.encode(JSON.stringify({organizationId:K,keyId:U,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,U){return Z.get(Xz0(K,U))},set(K,U,w){Z.set(Xz0(K,U),w)},invalidate(K,U){Z.delete(Xz0(K,U)),W(K,U)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(t_$),(async()=>{for await(let U of J)try{let w=JSON.parse(Q.decode(U.data));if(w.originId===X)continue;Z.delete(Xz0(w.organizationId,w.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var t_$="studio.ai-provider-keys.invalidate",F54=30000,H54=5000;var r_$=()=>{};class M81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var o_$=($)=>{let Z;return()=>Z??=$()},k81,S81;var a_$=O(()=>{N5();k81=o_$(()=>D8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),S81=o_$(()=>D8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function z54(){return{name:sU,subjects:[`${Nm0}.>`],storage:bJ.StorageType.File,max_age:O54,max_bytes:E54,max_msgs_per_subject:L54,discard:bJ.DiscardPolicy.Old,retention:bJ.RetentionPolicy.Limits,duplicate_window:D54,num_replicas:1}}class $b${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function s_$($){let Z=e_$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function T54($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,B54().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class V81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await bJ.jetstreamManager($),G=z54();try{await Z.streams.info(sU),await Z.streams.update(sU,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(sU),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=T54(Z,X),J=!1,W=()=>{if(J)return;J=!0;let U=M4$(Z);Y.publish(U.subject,U.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(U)=>{let w=performance.now(),F=Om0(U,{runId:Z}),H=performance.now()-w;if(k81().record(H),S81().add(1,{"org.id":X??"unknown"}),A54?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?s_$(N.headers):void 0)};return(async()=>{let U=$.getReader(),w=0,F=0,H;try{while(!0){let{done:N,value:B}=await U.read();if(N)break;if(K(B),F++,++w>=64)w=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(U.releaseLock(),W(),P54)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Om0(Z,{runId:$,dedup:G});if(k81().record(performance.now()-Y),S81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:s_$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=q4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?bJ.DeliverPolicy.New:bJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=EN($),W;try{W=await(await X.consumers.get(sU,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let w=P90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(L90()).pipeThrough(z90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{w.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),w.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await w.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(sU,{filter:EN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var bJ,e_$,N54=($)=>{let Z;return()=>Z??=$()},B54,O54=86400000000000,D54=120000000000,E54=4294967296,L54=500000,j54,P54,A54;var Zb$=O(()=>{Em0();A90();Dm0();N5();a_$();bJ=k(cB(),1),e_$=k(Qh(),1),B54=N54(()=>D8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));j54=process.env.STREAM_ENCODE_TRACE==="1",P54=process.env.DECOPILOT_STREAM_TRACE==="1";A54=j54?new $b$:null});import{z as X8}from"zod";var Gb$,Xb$,AK,C81,Yb$,Qb$,Jb$,Wb$,I54,Kb$,Ub$,wb$,Fb$,Hb$,R54,Nb$,vGZ,q54,M54=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},Bb$=($)=>{return new TextEncoder().encode(JSON.stringify($))},Ob$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?q54[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${M54(Y.error)}`);return Y.data};var Db$=O(()=>{Gb$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),Xb$=X8.array(X8.tuple([X8.string(),X8.string()])),AK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),C81=X8.string().min(1),Yb$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:AK,method:X8.string().min(1),url:X8.string().min(1),headers:Xb$,replySubject:C81,bodySubject:C81.optional(),abortSubject:C81,deadlineUnixMs:X8.number().int().nonnegative().optional()}),Qb$=X8.object({type:X8.literal("request.chunk"),requestId:AK,seq:X8.number().int().nonnegative(),data:Gb$}),Jb$=X8.object({type:X8.literal("request.end"),requestId:AK,seq:X8.number().int().nonnegative()}),Wb$=X8.object({type:X8.literal("request.error"),requestId:AK,code:X8.string().min(1),message:X8.string()}),I54=X8.union([Qb$,Jb$,Wb$]),Kb$=X8.object({type:X8.literal("response.ack"),requestId:AK}),Ub$=X8.object({type:X8.literal("response.start"),requestId:AK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:Xb$}),wb$=X8.object({type:X8.literal("response.chunk"),requestId:AK,seq:X8.number().int().nonnegative(),data:Gb$}),Fb$=X8.object({type:X8.literal("response.end"),requestId:AK,seq:X8.number().int().nonnegative()}),Hb$=X8.object({type:X8.literal("response.error"),requestId:AK,code:X8.string().min(1),message:X8.string()}),R54=X8.union([Kb$,Ub$,wb$,Fb$,Hb$]),Nb$=X8.object({type:X8.literal("abort"),requestId:AK,reason:X8.string().optional()}),vGZ=X8.union([Yb$,I54,R54,Nb$]),q54={"request.start":Yb$,"request.chunk":Qb$,"request.end":Jb$,"request.error":Wb$,"response.ack":Kb$,"response.start":Ub$,"response.chunk":wb$,"response.end":Fb$,"response.error":Hb$,abort:Nb$}});var k54=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},S54=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},V54=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},C54=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},Eb$=($)=>{return k54(btoa(V54($)))},Lb$=($)=>{return C54(atob(S54($)))},_54;var zb$=O(()=>{_54=class _54{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*d54($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class o54{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var b54=30000,f54=1000,x54=65536,eQ,v54=($)=>{return"connection"in $},y54=($)=>{let Z=v54($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??b54,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??f54,maxChunkBytes:Z.maxChunkBytes??x54,diagnostics:Z.diagnostics}},jb$=($)=>{return Array.from($.entries())},g54=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},h54=($,Z,G)=>{if(g54(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return jb$(G.headers);return jb$(G.headers)},Pb$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},c54=()=>{return crypto.randomUUID().replaceAll("-","")},u54=($)=>{try{$?.unsubscribe()}catch{}},l54=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},m54=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},TB=($,Z,G)=>{$.publish(Z,Bb$(G))},i54=($)=>{return $.type.startsWith("response.")},_81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},n54=($)=>{if($==="idle")return new eQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new eQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},Ab$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((U,w)=>{if(X.aborted){w(X.reason);return}let F=()=>w(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((U,w)=>{Q=setTimeout(()=>{w(n54(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=Ob$(W.value.data);if(!i54(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},p54=async($)=>{let Z=!1;while(!0){let G=await Ab$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new eQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new eQ(G.value.code,G.value.message);throw new eQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},t54=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){TB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of d54(J,$.maxChunkBytes)){if(X)return;TB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:Eb$(W)}),G++}}}catch(Q){if(X)return;TB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},r54=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await Ab$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new eQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(Lb$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new eQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){TB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},IB=($)=>{let Z=y54($);return l54(Z.maxChunkBytes),async(G,X)=>{let Y=bC$(G),Q=new Request(G,X),J=c54(),W=fC$(Y.hostname,J),K=new AbortController,U=new AbortController,w=!1,F,H,N,B,D=!1,E=(P=new eQ("tunnel_closed","tunnel request closed"))=>{if(w)return;if(w=!0,u54(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(U.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new eQ("tunnel_aborted",_81(Q.signal));TB(Z.connection,W.abort,{type:"abort",requestId:J,reason:_81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new eQ("tunnel_aborted",_81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new eQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);TB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:h54(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};TB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)TB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?t54({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:U.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await p54({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(m54(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:Pb$(P.headers)});return new Response(r54({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:Pb$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var Tb$=O(()=>{Db$();zb$();sL0();eQ=class eQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var Yz0=O(()=>{Tb$()});function Ib$($){let Z=$.createFetch??a54,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return b81;let Q=CJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return b81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return b81}}}var b81,a54=($,Z)=>IB({connection:$,firstFrameTimeoutMs:Z});var Rb$=O(()=>{Yz0();Or();b81={online:!1,capabilities:[]}});async function*s54($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function qb$($){let Z=$.createFetch??((G)=>IB({connection:G,idleTimeoutMs:e54}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=CJ(X),K=Z(J),U={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)U.body=Y.body;let w=await K(`tunnel://${W}${Y.path}`,U);yield*s54(w)}}var e54=45000;var Mb$=O(()=>{Yz0();Or()});import{z as fJ}from"zod";function kb$($){return JSON.stringify($)}var FXZ;var Sb$=O(()=>{FXZ=fJ.discriminatedUnion("type",[fJ.object({type:fJ.literal("cancel"),runId:fJ.string()}),fJ.object({type:fJ.literal("cancel_req"),reqId:fJ.string()}),fJ.object({type:fJ.literal("keep_alive")}),fJ.object({type:fJ.literal("shutdown")})])});function Vb$($){let Z=$.createFetch??((G)=>IB({connection:G,idleTimeoutMs:$94}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function Cb$($){let Z=$.createFetch??IB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:kb$(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var $94=45000;var _b$=O(()=>{Yz0();Sb$();Or()});function Qz0($,Z,G,X){if(!X)return!1;return $.emit(Z,x3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var bb$=O(()=>{L8()});class f81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as Z94,rm as Jz0}from"fs/promises";import{join as Wz0}from"path";async function Kz0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-G94),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await SC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await fb$($,Y,Z);else if(!Y.startsWith(".")){let Q=Wz0($,Y),J=await SC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await fb$(Q,K,Z)}if((await SC(Q)).length===0)await Jz0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function fb$($,Z,G){let X=0,Y=Wz0($,Z),Q=await SC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=Wz0(Y,W),U=await SC(K);for(let F of U){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=Wz0(K,F);await Jz0(N,{recursive:!0,force:!0}),X++}}if((await SC(K)).length===0)await Jz0(K,{recursive:!0,force:!0})}if((await SC(Y)).length===0)await Jz0(Y,{recursive:!0,force:!0});return X}async function SC($){try{return(await Z94($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var G94=30;var x81=()=>{};import{DBOS as v81,SchedulerMode as X94}from"@dbos-inc/dbos-sdk";async function Q94(){let $=[G3(),CC(),RK()],Z=0;for(let G of $)try{Z+=await Kz0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function J94($,Z){await v81.runStep(()=>Q94(),{name:"monitoringRetention"})}function vb$(){if(xb$)return;xb$=!0;let $=v81.registerWorkflow(J94,{name:"monitoringRetentionWorkflow"});v81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:Y94,mode:X94.ExactlyOncePerIntervalWhenActive})}var Y94="23 4 * * *",xb$=!1;var yb$=O(()=>{mX();x81()});function gb$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await ZN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await xu0($.db,Z,X.role);return Y.boundAuth=fu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new yD(G,void 0,Y.boundAuth,X.role,"self"),e40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var hb$=O(()=>{gD();Vi()});function W94(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function U94(){for(let $ of K94)$()}function cb$($){let Z=[...y81.logs,$];y81={...y81,logs:Z.length>500?Z.slice(-500):Z},U94()}function g81(){return w94}var y81,K94,w94=!1;var h81=O(()=>{y81=W94(),K94=new Set});import{EventEmitter as F94}from"events";var c81;var ub$=O(()=>{h81();c81=new F94;c81.on("request",($)=>{cb$($)})});function db$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=fg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>fg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${e4.tool}${N}${e4.dim}(${E})${e4.reset}`}else if(H.method)Q=`${e4.dim}${fg(H.method)}${e4.reset}`}}catch{}}let W=fg(Y);if(Y.startsWith("/mcp/conn_")){let w=Y.split("/")[2]??"";W=`/mcp/${e4.mcp}${fg(w.slice(0,12))}\u2026${e4.reset}`}else if(Y==="/mcp")W=`${e4.mcp}/mcp${e4.reset}`;else if(Y==="/mcp/registry")W=`${e4.mcp}/mcp/registry${e4.reset}`;let K=N94(X),U=J?"\u25C0":"\u2190";if(!g81())console.log(`${e4.dim}${U}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let w=Date.now()-G,F=$.res.status,H=H94(F),N=w<1000?`${w}ms`:`${(w/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!g81())console.log(`${e4.dim}${B}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${e4.reset} ${e4.duration}${N}${e4.reset}`);c81.emit("request",{method:X,path:fg(Y),status:F,duration:w,timestamp:new Date})}}}var e4,H94=($)=>{if($>=500)return e4.serverError;if($>=400)return e4.clientError;if($>=300)return e4.redirect;return e4.ok},N94=($)=>{return e4[$]||e4.reset},fg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var lb$=O(()=>{h81();ub$();e4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as pb$}from"crypto";import{mkdir as B94,readdir as O94,rm as mb$,stat as tb$}from"fs/promises";import{join as d81,relative as D94}from"path";import{z as T$}from"zod";function ob$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return d81(E94,Z)}function ab$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function u81($,Z){let G=ob$($),X=ab$(Z);return d81(G,X)}function L94($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return pb$("sha256",Y).update(Q).digest("hex")}function nb$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=L94(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${ab$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function sb$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${pb$("md5","etag").update(X).digest("hex")}"`}async function eb$($,Z,G,X,Y){try{let Q=await O94($,{withFileTypes:!0});for(let J of Q){let W=d81($,J.name),U=D94(Z,W).replace(/\\/g,"/");if(G&&!U.startsWith(G))continue;if(J.isDirectory())if(X){let w=U+"/";if(!G||w.startsWith(G)){if(!(G?U.slice(G.length):U).includes("/"))Y.commonPrefixes.add(w)}}else await eb$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let w=U.slice(G.length);if(w.includes(X)){let F=w.indexOf(X),H=G+w.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let w=await tb$(W);Y.objects.push({key:U,size:w.size,lastModified:w.mtime.toISOString(),etag:sb$(W,w.mtime,w.size)})}catch{}}}}catch{}}function $f$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,U=Q.continuationToken,w=ob$(X);await B94(w,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await eb$(w,w,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(U){if(H=F.objects.findIndex((E)=>E.key>U),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=u81(X,Q.key),W=await tb$(J);return{contentType:b11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:sb$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??ib$;return{url:nb$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??ib$;return{url:nb$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=u81(X,Q.key);try{return await mb$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let U=u81(X,K);try{await mb$(U),J.push(K)}catch(w){W.push({key:K,message:w instanceof Error?w.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function l81($,Z,G){let X=$f$(Z,G),Y=new BU({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:L5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(U)=>{try{let w=await J.handler(U);return{content:[{type:"text",text:JSON.stringify(w)}],structuredContent:w}}catch(w){return{content:[{type:"text",text:`Error: ${w.message}`}],isError:!0}}})}let Q=new yY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),aW(Y,Q,$,"mcp:dev-assets")}async function Zf$($,Z,G,X){let Q=$f$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var E94="./data/assets",ib$=3600,rb$,Gf$;var Xf$=O(()=>{F8();Hp();o8();gu();Yy();LG();EL0();rb$=new V1;rb$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return l81($.req.raw,Z,X)});Gf$=rb$});var Yf$={};X6(Yf$,{mountDevRoutes:()=>z94});function z94($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return l81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),U=await Zf$(W,K,Y,J);if(U.isError)return X.json(U.content,500);return X.json(U.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",Gf$);let G=new V1;G.use("*",oQ({mountPath:"/api/dev-assets"})),G.route("/",DL0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var Qf$=O(()=>{o8();R11();EL0();Xf$()});import{sql as j94}from"kysely";import{randomUUID as Jf$}from"crypto";import{z as P94}from"zod";async function T94($){let Z=new Date().toISOString(),G=Jf$(),X=i6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:Jf$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await j94`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function I94($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function R94($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",JC).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):Kf$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?Wf$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:Wf$,rateLimitWindow:A94,rateLimitMax:Kf$}}async function q94($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function M94($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function Uf$($){let{db:Z,db:G}=$,X=new Hx(G),Y=new Nx(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await I94(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await R94(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await q94(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let U;try{U=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let w=VA$.safeParse(U);if(!w.success)return Q.json({error:"Invalid publish request payload",details:P94.treeifyError(w.error)},400);let F=await M94(G,W,w.data.data.id,w.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:w.data.data.id,title:w.data.data.title,description:w.data.data.description??null,_meta:w.data.data._meta,server:w.data.data.server,requester_name:w.data.requester?.name??null,requester_email:w.data.requester?.email??null});try{await T94({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:w.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:w.data.data.title,requester_email:w.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var Wf$=!0,A94="hour",Kf$=100;var wf$=O(()=>{R4();L8();Zg();Ug0();wg0();Y9()});var Ff$={};X6(Ff$,{createPublishRequestHandler:()=>Uf$,createPublicMCPHandler:()=>vA$});var Hf$=O(()=>{$g();wf$()});var xp0={};X6(xp0,{watchHandler:()=>Lf$,isSsoExemptPath:()=>Ef$,getProxyDispatch:()=>C94,createApp:()=>c94});import{readFileSync as k94}from"fs";import{PrometheusSerializer as S94}from"@opentelemetry/exporter-prometheus";import{DBOS as xg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as x94,oAuthProtectedResourceMetadata as v94}from"better-auth/plugins";async function V94($){let Z=$.connect(),G;try{G=await Promise.race([Z,Bf$(Nf$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),Bf$(Nf$)]),G.release(),!0}catch{return G.release(!0),!1}}function Bf$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function C94(){if(!m81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return m81}async function _94($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${u_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function b94($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}function Ef$($){return $.startsWith("/api/org-sso/")||$.startsWith("/api/auth/")||$.startsWith("/api/tools/management")||$.startsWith("/oauth-proxy/")||/^\/api\/[^/]+\/oauth-proxy\//.test($)||$.startsWith(`${I01}/`)}async function c94($={}){let Z=$.database??H6(),G=!1;$9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new R81,J,W,K,U,w,F=null;if($.disableNats)J=q81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Np,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},w=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let N0=g.getReader();try{while(!0){let{done:f0}=await N0.read();if(f0)break}}catch{}finally{N0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=i_$();let g=O1().natsCredsPath,N0;if(g)try{N0=k94(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,N0?{creds:N0}:void 0);let f0=Dg0()?new Wv0({getJetStream:()=>F.getJetStream()}):null;f0?.init().catch(()=>{}),X=f0;let e0=new Ct0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=q81({getConnection:()=>F.getConnection()}),W=new M81({getConnection:()=>F.getConnection()}),K=new V81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),U=Ib$({getConnection:()=>F.getConnection()}),w=Vb$({getConnection:()=>F.getConnection()});let c0=Cb$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,L6)=>{c0.publishControlFrame(e1,L6).catch((Q4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",Q4)})},stop:()=>T1.stop()},WR$(F),F.onReady(()=>{f0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),vi1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(vg)await vg();Kv0(X),_t0(Y);let N={storage:new zx(Z.db),sseHub:$9},B=new Mm0(N),D=new Xm(Z.db),E=new f81(D);E.start(),W.start((g)=>{m90(g),B.execute({type:"CANCEL",taskId:g}).catch((N0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",N0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),vg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),yi1(),Y.teardown(),Kv0(null),_t0(null)};let L=new V1;if(L.use("*",Yf0({enabled:(g)=>ub(g,"debug")==="1"})),L.use("*",Mz0),L.use("/*",qb1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,N0)=>{if(await N0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",db$());L.use("*",async(g,N0)=>{if(await N0(),cg(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let N0={};if(N0.postgres={status:await V94(Z.pool)?"up":"down"},F)N0.nats=F.isConnected()?{status:"up"}:{status:"down"};else N0.nats={status:"down"};let f0=N0.postgres.status==="up",e0=f0?200:503;return g.json({status:f0?"ready":"not_ready",services:N0},e0)}),L.get(xZ.METRICS,async(g)=>{try{let N0=await Cz0.collect(),f0=f94.serialize(N0.resourceMetrics);return g.text(f0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(N0){return console.error("Failed to collect metrics:",N0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let N0=g.req.param("queueName");if(!y94.has(N0))return g.json({error:`Unknown queue: ${N0}`},404);let f0=await xg.listQueuedWorkflows({queueName:N0,status:"ENQUEUED"});return g.json({queue_length:f0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:N0,pending:f0,max:e0}=G5$();return g.json({pending:f0,active:N0,max:e0})}),L.route("/api/config",H_$),L.route("/api/_reports",I_$),L.route("/report",L_$($.clientDir)),L.route("/api/auth/custom",kR$),L.route("/api/auth/desktop",VR$),L.all("/api/auth/admin/*",fR$),L.all("/api/auth/*",async(g)=>{return await G8.handler(g.req.raw)});let z=Ds1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",wC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",wC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Ci),L.route("/",js1()),L.use("/oauth-proxy/:connectionId/*",wC),L.all("/oauth-proxy/:connectionId/*",Of$);let j=async(g)=>{let f0=await g94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",wC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let f0=await h94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=JR$({ttlMs:120000}),q=await Zs1({db:Z.db,auth:G8,encryption:{key:O1().encryptionKey},observability:{tracer:hw,meter:D8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:U,publishLinkControlFrame:(g,N0)=>W.publishControlFrame(g,N0)});ZN.set(q);let S=new PU(O1().encryptionKey);b21({db:Z.db,baseUrl:T3()});let M=F60(Z.db),C=new tl(Z.db),l=gb$({db:Z.db});qt0({storage:M,studioContextFactory:l}),um0({studioContextFactory:l,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:$9},prepareLinkWorkFn:qM$,workPublisher:w}),vm0({dispatchRunFn:IM$,studioContextFactory:l,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:$9}});let f=new zx(Z.db),v=new uD(Z.db);h4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await Df$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let N0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return N0?{orgId:N0.organization_id,createdBy:N0.created_by,version:N0.message_storage_version??1,status:N0.status,runFenceToken:N0.run_fence_token,title:N0.title??null}:null},completeRunIfNotCompleted:async(g,N0)=>{let f0=await f.completeRunIfNotCompleted(g,N0);if(Qz0($9,N0,g,f0),f0)await bm0(v,g,N0);return f0},markRunRequiresAction:async(g,N0)=>{let f0=await f.requiresActionIfInProgress(g,N0);return Qz0($9,N0,g,f0),f0},markRunFailed:async(g,N0,f0,e0)=>{let c0=await f.markRunFailed(g,N0,f0,e0);if(Qz0($9,N0,g,c0),c0)await bm0(v,g,N0);return c0},clearSynthesizedError:async(g,N0)=>{await f.messageParts().replaceMessageParts(g,LN(g,N0),[])},persistTitle:(g,N0,f0)=>f.update(g,N0,{title:f0}),onTitleUpdated:async({runId:g,orgId:N0,title:f0})=>{let e0=await f.get(g,N0).catch(()=>null);$9.emit(N0,x3(g,e0?.status??"in_progress",{title:f0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:N0})=>{await f.bumpProgress(g,N0)},recordCompleted:async({runId:g,orgId:N0,distinctId:f0,usage:e0})=>{i1.capture({distinctId:f0,event:"chat_message_completed",groups:{organization:N0},properties:{organization_id:N0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:N0,distinctId:f0,reason:e0,kind:c0})=>{i1.capture({distinctId:f0,event:"chat_message_failed",groups:{organization:N0},properties:{organization_id:N0,thread_id:g,transport:"projector",error_category:c0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),jW$({studioContextFactory:l,systemDatabaseUrl:ox1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),vb$(),f21();let $0=async(g,N0,f0)=>{let e0=await M.findById(g,N0);if(!e0)throw Error("Automation not found");return St0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},n=new Dg(M,({automation:g,trigger:N0,contextMessages:f0,idempotencyKey:e0})=>Fp({automationId:g.id,organizationId:g.organization_id,triggerId:N0.id,contextMessages:f0},{idempotencyKey:e0})),F0=[G3(),CC(),RK()];for(let g of F0)Kz0(g).then(()=>{}).catch((N0)=>console.error("[monitoring] Retention cleanup failed:",N0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,N0)=>{if(Rz0(g.req.path))return N0();let f0={measure:async(c0,T1)=>{FQ(g,c0);try{return await T1()}finally{JY(g,c0)}}},e0=await ZN.create(g.req.raw,{timings:f0});e0.automationRunner=$0,g.set("studioContext",e0);try{await N0()}finally{let c0=e0.pendingRevalidations;if(c0.length>0)Promise.race([Promise.allSettled(c0),O8(30000)]).catch((e1)=>console.error("[studio] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",FC),L.use("/api/:org/v1/*",FC),L.use("/api/:org/files/*",FC),L.use("*",async(g,N0)=>{if(Ef$(g.req.path))return N0();let f0=g.get("studioContext");if(!f0?.organization?.id||!f0?.auth?.user?.id)return N0();if(!(await f0.storage.orgSsoConfig.getByOrgId(f0.organization.id))?.enforced)return N0();if(!await f0.storage.orgSsoSessions.isValid(f0.auth.user.id,f0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return N0()});let J0=new V1;J0.use("*",oQ({mountPath:"/api/org-sso"})),J0.route("/",yE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:Jf0,grouped:tO()})}),L.use("/mcp/*",async(g,N0)=>{FQ(g,"mcp");try{return await N0()}finally{JY(g,"mcp")}});let G0=async(g,N0)=>{let f0=g.var.studioContext;if(!f0.auth.user?.id&&!f0.auth.apiKey?.id){let e0=new URL(g.req.url),c0=g.req.header("x-forwarded-proto")?.split(",")[0]?.trim(),T1=c0?`${c0}://${e0.host}`:e0.origin;return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${T1}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await N0()};if(L.use("/mcp/:connectionId?",G0),L.use("/mcp/gateway/:virtualMcpId?",G0),L.use("/mcp/virtual-mcp/:virtualMcpId?",G0),L.use("/mcp/self",G0),v3()){let{mountDevRoutes:g}=(Qf$(),Bz0(Yf$));g(L,G0)}let a=new V1;a.use("*",oQ({mountPath:"/mcp"})),a.route("/",EB0()),L.route("/mcp",a);let A0=new V1;A0.use("*",oQ({mountPath:"/mcp/self"})),A0.route("/",nL0()),L.route("/mcp/self",A0);let U0=new V1;U0.use("*",oQ({mountPath:"/mcp"})),U0.route("/",jB0()),L.route("/mcp",U0),L.use("/api/:org/models/*",async(g,N0)=>{FQ(g,"llm_models");try{return await N0()}finally{JY(g,"llm_models")}});let v0=T11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:U});if(L.route("/api",v0),F!=null)m81=qb$({getConnection:()=>F?.getConnection()??null});L.route("/api",rC$()),L.get("/api/links/me",async(g)=>{try{let N0=g.req.header("authorization")??"",f0=/^Bearer\s+(.+)$/i.exec(N0),e0=null;if(f0){let T1=(f0[1]??"").trim();e0=await fE0(T1,G8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let c0=U?await U(e0):{online:!1,capabilities:[]};if(!c0.online)return g.json(null);return g.json({hostname:c0.hostname,cliVersion:c0.cliVersion})}catch(N0){return console.error("[links/me] presence probe failed; reporting offline:",N0 instanceof Error?N0.message:String(N0)),g.json(null)}}),L.use("/api/:org/files/*",FC),L.route("/api",k_$);let d0=new V1;d0.use("*",oQ({mountPath:"/api"})),d0.route("/",pL0()),L.route("/api",d0),L.route("/api",W_$);let i0=new V1;i0.use("*",oQ({mountPath:"/api"})),i0.route("/",tL0({tokenStorage:C,automationEventDispatcher:n})),L.route("/api",i0);let n0=new ol(Z.db),w0=new V1;w0.use("*",oQ({mountPath:"/api"})),w0.route("/",NL0()),L.route("/api",w0),L.route("/api/deco-sites",tM$()),L.route("/api/deco-apps",Z_$());let C0=new V1;C0.use("*",oQ({mountPath:"/api/deco-sites"})),C0.route("/",OL0()),L.route("/api/deco-sites",C0);let T0=new V1;T0.use("*",oQ({mountPath:"/api/vm-events"})),T0.route("/",eC$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:B0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (Hf$(),Ff$)),X0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=B0(X0),p=Q0(X0);L.use("/org/:orgRef/registry/publish-request",wC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",wC),L.all("/org/:orgSlug/registry/*",p),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",p),L.route(I01,xR$());let e=CC$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:$9,cancelBroadcast:W,tokenStorage:C,automationEventDispatcher:n,mountDevAssets:v3(),mcpAuth:G0,oauthProxyHandler:Of$,watchHandler:Lf$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(xM$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([$9.stop(),vg?Promise.resolve(vg()).finally(()=>{vg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await nY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await sx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await xg.registerQueue(iY,{partitionQueue:!0,concurrency:Tt0,minPollingIntervalMs:It0}),await xg.registerQueue(Z3,{partitionQueue:!0,concurrency:cm0}),await xg.registerQueue(IK,{partitionQueue:!0,concurrency:xm0}),await xg.registerQueue(gw,{partitionQueue:!0,concurrency:zW$}),await M11(M),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>xg.deleteQueue(g))),await Rt0(Z.pool),Rh1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),x21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var Df$,Nf$=5000,m81=null,vg=null,Of$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await ZN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Gv(J.connection_url),K,U=new URL(J.connection_url),F=(typeof J.metadata?.oauthResource==="string"&&J.metadata.oauthResource.length>0?J.metadata.oauthResource:void 0)??J.connection_url;if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=U.origin;let H=await _i(K);if(!H.ok)return $.json({error:"Failed to get auth server metadata"},502);let N=await H.json(),B;if(X==="authorize")B=N.authorization_endpoint;else if(X==="token")B=N.token_endpoint;else if(X==="register")B=N.registration_endpoint;if(!B)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let D=new URL(B),E=new URL($.req.url);if(D.search=E.search,X==="authorize"){let l=D.searchParams.get("redirect_uri");if(l){let f=O1().baseUrl??E.origin;try{let v=new URL(l),$0=new URL(f);if(!(v.origin===$0.origin||v.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}D.searchParams.set("redirect_uri",l)}if(D.searchParams.has("resource"))D.searchParams.set("resource",F);if(d_1(J.connection_url))try{let f=await _94(Y,J.organization_id),v=b94(f);for(let[$0,n]of v)D.searchParams.set($0,n)}catch(f){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",f)}return $.redirect(D.toString(),302)}let L={Accept:$.req.header("Accept")||"application/json"},z=$.req.header("Content-Type");if(z)L["Content-Type"]=z;let j=$.req.header("Authorization");if(j)L.Authorization=j;let P,A=null,q=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&z?.includes("application/x-www-form-urlencoded")){if(j?.toLowerCase().startsWith("basic "))try{let n=atob(j.slice(6).trim()),F0=n.indexOf(":");if(F0!==-1){let D0=decodeURIComponent(n.slice(0,F0)),J0=decodeURIComponent(n.slice(F0+1));A=D0||null,q=J0||null}}catch{}let l=await $.req.formData();if(l.has("resource"))l.set("resource",F);let f=l.get("client_id"),v=l.get("client_secret");if(typeof f==="string"&&f)A=f;if(typeof v==="string"&&v)q=v;let $0=new URLSearchParams;for(let[n,F0]of l.entries())$0.append(n,F0.toString());P=$0.toString()}else if(X==="register"&&z?.toLowerCase().includes("application/json")){let l=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),f=await $.req.text(),v={};try{v=f?JSON.parse(f):{}}catch{P=f}let $0=typeof v==="object"&&v!==null&&!Array.isArray(v);if(P===void 0&&!$0)P=f;if(P===void 0){let n=v,F0=n.metadata&&typeof n.metadata==="object"?n.metadata:{};n.metadata={...F0,organization_id:J.organization_id,...l?.slug?{organization_slug:l.slug}:{},...l?.name?{organization_name:l.name}:{}},P=JSON.stringify(n),L["Content-Type"]="application/json"}}else P=$.req.raw.body??void 0;let S=await fetch(D.toString(),{method:$.req.method,headers:L,body:P,duplex:"half",redirect:"manual"}),M=new Headers,C=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[l,f]of S.headers.entries())if(!C.includes(l.toLowerCase()))M.set(l,f);if(X==="token"&&S.ok){let l=await S.text();try{let f=JSON.parse(l);if(typeof f.access_token==="string"&&f.access_token){let v=typeof f.expires_in==="number"?new Date(Date.now()+f.expires_in*1000):null,$0=null;try{$0=await Xv(J.connection_url)??B}catch{$0=B}let n={connectionId:Z,accessToken:f.access_token,refreshToken:typeof f.refresh_token==="string"?f.refresh_token:null,scope:typeof f.scope==="string"?f.scope:null,expiresAt:v,clientId:A,clientSecret:q,tokenEndpoint:$0};await new _5(Y.db,Y.vault).upsert(n)}}catch(f){console.error("[oauth-proxy] failed to persist downstream token:",f)}return new Response(l,{status:S.status,statusText:S.statusText,headers:M})}return new Response(S.body,{status:S.status,statusText:S.statusText,headers:M})},Lf$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return aQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!$9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(w)=>{W.writeSSE({id:w.id,event:w.type,data:JSON.stringify(w)}).catch(()=>{$9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let U=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(U)})},30000);await new Promise((w)=>{W.onAbort(()=>{clearInterval(U),$9.remove(X,J),w()})})})},f94,y94,g94=()=>v94(G8),h94=()=>x94(G8);var vp0=O(()=>{d5();F8();v21();S7();gb();L8();o8();K$0();Mb1();Qf0();AY();Vi();D01();BQ();N5();R4();T01();CR$();vR$();k01();bM$();I11();JJ();$50();R11();vM$();q11();_C$();oC$();$_$();C11();G_$();LB0();bi();K_$();PB0();Z81();N_$();z_$();R_$();S_$();$81();s$1();Sr();Dd();n_$();UY();V60();el();ft0();p_$();r_$();Zb$();Rb$();Mb$();_b$();km0();bb$();Sg0();h60();eU();fg0();yb$();X80();x81();mX();k11();Rv();_m0();Rm0();X80();z11();ey0();$g0();hb$();db();lb$();jC();D01();Zy();i90();Df$=k(cB(),1);f94=new S94,y94=new Set([iY,Z3,IK,gw])});var Af$={};X6(Af$,{resolveClientDir:()=>p94,resolveAssetPathWithTraversalCheck:()=>Pf$,isPathWithinDirectory:()=>jf$,createAssetHandler:()=>t94});import{resolve as zr,dirname as u94,join as d94,extname as l94,basename as m94,sep as zf$}from"path";function i94($,Z){if($===Z||m94($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${zf$}assets${zf$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function jf$($,Z){let G=zr(Z),X=zr($);return X===G||X.startsWith(G+"/")}function Pf$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=zr(Z,G);if(!jf$(X,Z))return null;return X}function p94($,Z="../client"){let G=new URL($),X=u94(G.pathname);return zr(X,Z)}function t94($={}){let{env:Z="production",clientDir:G=n94,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=Pf$({requestPath:W,clientDir:G});if(!K)return null;let U=d94(K,"index.html"),w=zr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(l94(K))?[U,w]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:i94(B,w)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var n94="./dist/client";var Tf$=()=>{};var If$={};X6(If$,{tryUpgradePreviewWs:()=>ZZ4,tryHandlePreviewHttp:()=>$Z4,previewWebSocketHandler:()=>GZ4,parsePreviewBaseDomain:()=>e94,isPreviewWsData:()=>Uz0,extractHandleFromHost:()=>i81});function a94($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function s94(){return new Response(o94,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function e94($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function i81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function $Z4($,Z){let G=i81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Pr(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(AV)&&a94($))return s94();return Y.headers.delete(AV),Y}function Pr($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function Uz0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function ZZ4($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=i81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Pr(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Pr(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Pr(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),U=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],w={kind:"preview",upstreamUrl:W,upstreamProtocols:U,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:w}))return Pr(426,"upgrade failed");return}function jr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var r94=256,o94='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',GZ4;var Rf$=O(()=>{Cp0();GZ4={open($){let Z=$.data;if(!Uz0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),jr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{jr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{jr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!Uz0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=r94){jr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!Uz0(Z))return;jr($,Z,1000,"")}}});var Sf$={};X6(Sf$,{printBanner:()=>YZ4,bannerLines:()=>kf$,BANNER_LINES:()=>qf$,BANNER_GRADIENT:()=>Mf$});function XZ4($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function kf$($){let Z=qf$.map((G,X)=>{let[Y,Q,J]=XZ4(Mf$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function YZ4($){console.log("");for(let Z of kf$($))console.log(Z);console.log("")}var qf$,Mf$;var Vf$=O(()=>{qf$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Mf$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var _f$={};X6(_f$,{bootstrapDevLinkSession:()=>NZ4});import{existsSync as QZ4}from"fs";import{chmod as JZ4,mkdir as WZ4,rename as KZ4,writeFile as UZ4}from"fs/promises";import{dirname as wZ4,join as Cf$}from"path";function FZ4($){return Cf$($,"dev-link")}function HZ4($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Cf$(FZ4($),"session.json")}async function NZ4($,Z){let G=HZ4($),X=H6().db,Y=cQ()?await Wp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(QZ4(G))try{let U=await Bun.file(G).json(),w=U.user?.sub,F=U.accessToken;if(w===Y.id&&typeof F==="string"){if(await G8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:w}}}catch{}let Q=null;try{Q=await G8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await WZ4(wZ4(G),{recursive:!0});let W=`${G}.tmp`;return await UZ4(W,JSON.stringify(J,null,2),{mode:384}),await JZ4(W,384),await KZ4(W,G),{path:G,userSub:Y.id}}var bf$=O(()=>{BQ();AY();iN()});d5();var G61="4";function X61($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:G61,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();Dz0();N5();function px$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function xz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function g61(){let $=px$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:xz0($,"--cpu-prof-dir")??process.cwd(),name:xz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(xz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}gz0();var _r;function p61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=MB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),_r=setInterval(()=>void Z().catch(()=>{}),$),_r.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(_r)clearInterval(_r)}}import*as ox$ from"bun:jsc";var{startSamplingProfiler:ax$,samplingProfilerStackTraces:sx$}=ox$;function t61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{ax$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=sx$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let w of W){let F=w.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??w.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let U=[...K.entries()].sort((w,F)=>F[1]-w[1]).slice(0,8).map(([w,F])=>({frame:w,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:U}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function r61(){g61();let $=[p61(),n61(),t61()];return()=>{for(let Z of $)Z()}}import{existsSync as PZ4}from"fs";var dX=O1();v61();var{DBOS:Ar,DBOSClient:BZ4}=await import("@dbos-inc/dbos-sdk");function gf$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var OZ4=[iY,Z3,IK,gw],DZ4=dX.dispatchRole==="worker"?OZ4:dX.dispatchRole==="api"?[]:void 0;Ar.setConfig(X61({systemDatabaseUrl:gf$(dX.databaseUrl,dX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:dX.podName,listenQueues:DZ4}));var{createApp:EZ4}=await Promise.resolve().then(() => (vp0(),xp0)),{isServerPath:LZ4}=await Promise.resolve().then(() => (Sr(),z61)),{createAssetHandler:zZ4,resolveClientDir:hf$}=await Promise.resolve().then(() => (Tf$(),Af$)),jZ4=dX.port,ff$=hf$(import.meta.url,"../client"),cf$=PZ4(ff$)?ff$:hf$(import.meta.url,"../dist/client"),AZ4=zZ4({clientDir:cf$,isServerPath:LZ4}),TZ4={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function IZ4($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(TZ4))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:RZ4,tryHandlePreviewHttp:qZ4,tryUpgradePreviewWs:MZ4,previewWebSocketHandler:n81,isPreviewWsData:p81}=await Promise.resolve().then(() => (Rf$(),If$)),{getOrInitSharedRunner:kZ4}=await Promise.resolve().then(() => ($p(),I3$)),uf$=RZ4(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),xf$={baseDomain:uf$??"",getRunner:kZ4},wz0=await EZ4({clientDir:cf$}),t81=process.env.DBOS_CONDUCTOR_KEY?.trim(),vf$=process.env.DBOS_CONDUCTOR_URL?.trim();await Ar.launch({...t81?{conductorKey:t81}:{},...t81&&vf$?{conductorURL:vf$}:{}});console.log(`[dbos] application version: ${Ar.applicationVersion}`);var r81=5,o81=0;await $3(async()=>{o81++;try{return await wz0.initDbos()}catch($){let Z=o81>=r81?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${o81}/${r81} failed, ${Z}`,$),$}},{maxAttempts:r81,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!dX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Vf$(),Sf$));console.log("");for(let Z of $())console.log(Z)}var SZ4=Bun.serve({idleTimeout:0,port:jZ4,hostname:"0.0.0.0",fetch:async($,Z)=>{if(uf$){let X=await MZ4($,Z,xf$);if(X===void 0)return;if(X)return X;let Y=await qZ4($,xf$);if(Y)return Y}let G=await AZ4($);if(G)return IZ4(G);return wz0.fetch($,{server:Z})},websocket:{open($){if(p81($.data))n81.open($)},message($,Z){if(p81($.data))n81.message($,Z)},close($){if(p81($.data))n81.close($)}},development:!1}),VZ4=r61();if(dX.localMode)Promise.resolve().then(() => (iN(),aN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (bf$(),_f$)),Y=dX.baseUrl??`http://localhost:${dX.port}`,Q=await X(dX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (iN(),aN0));Z()}catch{}});var yf$=!1;async function CZ4($){let Z;try{Z=await BZ4.create({systemDatabaseUrl:gf$(dX.databaseUrl,dX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:Z3,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:Z3}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function Fz0($){if(yf$)return;yf$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{VZ4(),wz0.markShuttingDown();let Q=Q61(dX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await O8(Q),await SZ4.stop(!0);let J=Ar.executorID;await Ar.shutdown(),await CZ4(J),await wz0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>Fz0("SIGTERM"));process.on("SIGINT",()=>Fz0("SIGINT"));process.on("SIGHUP",()=>Fz0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),Fz0("uncaughtException")});