npm - decocms - Versions diffs - 4.113.2 → 4.113.3 - Mend

decocms 4.113.2 → 4.113.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (234) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2796,7 +2796,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var _81,VC,d44,R_$,C81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",m44,c$,u$,Z6,T_$=24,CC,vJ;var C_$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(_81||(_81={}));(function($){var Z=function(h,m){this.hi=h|0,this.lo=m|0},G=function(h){var m,u=new Float64Array(16);if(h)for(m=0;m<h.length;m++)u[m]=h[m];return u},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,m){return h<<m|h>>>32-m}function D(h,m){var u=h[m+3]&255;return u=u<<8|h[m+2]&255,u=u<<8|h[m+1]&255,u<<8|h[m+0]&255}function E(h,m){var u=h[m]<<24|h[m+1]<<16|h[m+2]<<8|h[m+3],o=h[m+4]<<24|h[m+5]<<16|h[m+6]<<8|h[m+7];return new Z(u,o)}function L(h,m,u){var o;for(o=0;o<4;o++)h[m+o]=u&255,u>>>=8}function z(h,m,u){h[m]=u.hi>>24&255,h[m+1]=u.hi>>16&255,h[m+2]=u.hi>>8&255,h[m+3]=u.hi&255,h[m+4]=u.lo>>24&255,h[m+5]=u.lo>>16&255,h[m+6]=u.lo>>8&255,h[m+7]=u.lo&255}function j(h,m,u,o,Y0){var K0,f0=0;for(K0=0;K0<Y0;K0++)f0|=h[m+K0]^u[o+K0];return(1&f0-1>>>8)-1}function P(h,m,u,o){return j(h,m,u,o,16)}function A(h,m,u,o){return j(h,m,u,o,32)}function I(h,m,u,o,Y0){var K0=new Uint32Array(16),f0=new Uint32Array(16),m0=new Uint32Array(16),A0=new Uint32Array(4),S0,P0,y0;for(S0=0;S0<4;S0++)f0[5*S0]=D(o,4*S0),f0[1+S0]=D(u,4*S0),f0[6+S0]=D(m,4*S0),f0[11+S0]=D(u,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=f0[S0];for(S0=0;S0<20;S0++){for(P0=0;P0<4;P0++){for(y0=0;y0<4;y0++)A0[y0]=f0[(5*P0+4*y0)%16];A0[1]^=B(A0[0]+A0[3]|0,7),A0[2]^=B(A0[1]+A0[0]|0,9),A0[3]^=B(A0[2]+A0[1]|0,13),A0[0]^=B(A0[3]+A0[2]|0,18);for(y0=0;y0<4;y0++)K0[4*P0+(P0+y0)%4]=A0[y0]}for(y0=0;y0<16;y0++)f0[y0]=K0[y0]}if(Y0){for(S0=0;S0<16;S0++)f0[S0]=f0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)f0[5*S0]=f0[5*S0]-D(o,4*S0)|0,f0[6+S0]=f0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,f0[5*S0]),L(h,16+4*S0,f0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,f0[S0]+m0[S0]|0)}function S(h,m,u,o){return I(h,m,u,o,!1),0}function M(h,m,u,o){return I(h,m,u,o,!0),0}var C=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function l(h,m,u,o,Y0,K0,f0){var m0=new Uint8Array(16),A0=new Uint8Array(64),S0,P0;if(!Y0)return 0;for(P0=0;P0<16;P0++)m0[P0]=0;for(P0=0;P0<8;P0++)m0[P0]=K0[P0];while(Y0>=64){S(A0,m0,f0,C);for(P0=0;P0<64;P0++)h[m+P0]=(u?u[o+P0]:0)^A0[P0];S0=1;for(P0=8;P0<16;P0++)S0=S0+(m0[P0]&255)|0,m0[P0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,u)o+=64}if(Y0>0){S(A0,m0,f0,C);for(P0=0;P0<Y0;P0++)h[m+P0]=(u?u[o+P0]:0)^A0[P0]}return 0}function b(h,m,u,o,Y0){return l(h,m,null,0,u,o,Y0)}function v(h,m,u,o,Y0){var K0=new Uint8Array(32);return M(K0,o,Y0,C),b(h,m,u,o.subarray(16),K0)}function s(h,m,u,o,Y0,K0,f0){var m0=new Uint8Array(32);return M(m0,K0,f0,C),l(h,m,u,o,Y0,K0.subarray(16),m0)}function n(h,m){var u,o=0;for(u=0;u<17;u++)o=o+(h[u]+m[u]|0)|0,h[u]=o&255,o>>>=8}var W0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,m,u,o,Y0,K0){var f0,m0,A0,S0,P0=new Uint32Array(17),y0=new Uint32Array(17),a0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(A0=0;A0<17;A0++)y0[A0]=a0[A0]=0;for(A0=0;A0<16;A0++)y0[A0]=K0[A0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(A0=0;A0<17;A0++)Z1[A0]=0;for(A0=0;A0<16&&A0<Y0;++A0)Z1[A0]=u[o+A0];Z1[A0]=1,o+=A0,Y0-=A0,n(a0,Z1);for(m0=0;m0<17;m0++){P0[m0]=0;for(A0=0;A0<17;A0++)P0[m0]=P0[m0]+a0[A0]*(A0<=m0?y0[m0-A0]:320*y0[m0+17-A0]|0)|0|0}for(m0=0;m0<17;m0++)a0[m0]=P0[m0];S0=0;for(A0=0;A0<16;A0++)S0=S0+a0[A0]|0,a0[A0]=S0&255,S0>>>=8;S0=S0+a0[16]|0,a0[16]=S0&3,S0=5*(S0>>>2)|0;for(A0=0;A0<16;A0++)S0=S0+a0[A0]|0,a0[A0]=S0&255,S0>>>=8;S0=S0+a0[16]|0,a0[16]=S0}for(A0=0;A0<17;A0++)w1[A0]=a0[A0];n(a0,W0),f0=-(a0[16]>>>7)|0;for(A0=0;A0<17;A0++)a0[A0]^=f0&(w1[A0]^a0[A0]);for(A0=0;A0<16;A0++)Z1[A0]=K0[A0+16];Z1[16]=0,n(a0,Z1);for(A0=0;A0<16;A0++)h[m+A0]=a0[A0];return 0}function J0(h,m,u,o,Y0,K0){var f0=new Uint8Array(16);return D0(f0,0,u,o,Y0,K0),P(h,m,f0,0)}function X0(h,m,u,o,Y0){var K0;if(u<32)return-1;s(h,0,m,0,u,o,Y0),D0(h,16,h,32,u-32,h);for(K0=0;K0<16;K0++)h[K0]=0;return 0}function a(h,m,u,o,Y0){var K0,f0=new Uint8Array(32);if(u<32)return-1;if(v(f0,0,32,o,Y0),J0(m,16,m,32,u-32,f0)!==0)return-1;s(h,0,m,0,u,o,Y0);for(K0=0;K0<32;K0++)h[K0]=0;return 0}function E0(h,m){var u;for(u=0;u<16;u++)h[u]=m[u]|0}function U0(h){var m,u;for(u=0;u<16;u++)h[u]+=65536,m=Math.floor(h[u]/65536),h[(u+1)*(u<15?1:0)]+=m-1+37*(m-1)*(u===15?1:0),h[u]-=m*65536}function v0(h,m,u){var o,Y0=~(u-1);for(var K0=0;K0<16;K0++)o=Y0&(h[K0]^m[K0]),h[K0]^=o,m[K0]^=o}function d0(h,m){var u,o,Y0,K0=G(),f0=G();for(u=0;u<16;u++)f0[u]=m[u];U0(f0),U0(f0),U0(f0);for(o=0;o<2;o++){K0[0]=f0[0]-65517;for(u=1;u<15;u++)K0[u]=f0[u]-65535-(K0[u-1]>>16&1),K0[u-1]&=65535;K0[15]=f0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,v0(f0,K0,1-Y0)}for(u=0;u<16;u++)h[2*u]=f0[u]&255,h[2*u+1]=f0[u]>>8}function i0(h,m){var u=new Uint8Array(32),o=new Uint8Array(32);return d0(u,h),d0(o,m),A(u,0,o,0)}function n0(h){var m=new Uint8Array(32);return d0(m,h),m[0]&1}function F0(h,m){var u;for(u=0;u<16;u++)h[u]=m[2*u]+(m[2*u+1]<<8);h[15]&=32767}function C0(h,m,u){var o;for(o=0;o<16;o++)h[o]=m[o]+u[o]|0}function R0(h,m,u){var o;for(o=0;o<16;o++)h[o]=m[o]-u[o]|0}function B0(h,m,u){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*u[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)h[o]=K0[o];U0(h),U0(h)}function Q0(h,m){B0(h,m,m)}function G0(h,m){var u=G(),o;for(o=0;o<16;o++)u[o]=m[o];for(o=253;o>=0;o--)if(Q0(u,u),o!==2&&o!==4)B0(u,u,m);for(o=0;o<16;o++)h[o]=u[o]}function V0(h,m){var u=G(),o;for(o=0;o<16;o++)u[o]=m[o];for(o=250;o>=0;o--)if(Q0(u,u),o!==1)B0(u,u,m);for(o=0;o<16;o++)h[o]=u[o]}function p(h,m,u){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,f0,m0=G(),A0=G(),S0=G(),P0=G(),y0=G(),a0=G();for(f0=0;f0<31;f0++)o[f0]=m[f0];o[31]=m[31]&127|64,o[0]&=248,F0(Y0,u);for(f0=0;f0<16;f0++)A0[f0]=Y0[f0],P0[f0]=m0[f0]=S0[f0]=0;m0[0]=P0[0]=1;for(f0=254;f0>=0;--f0)K0=o[f0>>>3]>>>(f0&7)&1,v0(m0,A0,K0),v0(S0,P0,K0),C0(y0,m0,S0),R0(m0,m0,S0),C0(S0,A0,P0),R0(A0,A0,P0),Q0(P0,y0),Q0(a0,m0),B0(m0,S0,m0),B0(S0,A0,y0),C0(y0,m0,S0),R0(m0,m0,S0),Q0(A0,m0),R0(S0,P0,a0),B0(m0,S0,K),C0(m0,m0,P0),B0(S0,S0,m0),B0(m0,P0,a0),B0(P0,A0,Y0),Q0(A0,y0),v0(m0,A0,K0),v0(S0,P0,K0);for(f0=0;f0<16;f0++)Y0[f0+16]=m0[f0],Y0[f0+32]=S0[f0],Y0[f0+48]=A0[f0],Y0[f0+64]=P0[f0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return G0(Z1,Z1),B0(w1,w1,Z1),d0(h,w1),0}function $0(h,m){return p(h,m,Q)}function r0(h,m){return X(m,32),$0(h,m)}function q0(h,m,u){var o=new Uint8Array(32);return p(o,u,m),M(h,Y,o,C)}var M0=X0,g=a;function H0(h,m,u,o,Y0,K0){var f0=new Uint8Array(32);return q0(f0,Y0,K0),M0(h,m,u,o,f0)}function b0(h,m,u,o,Y0,K0){var f0=new Uint8Array(32);return q0(f0,Y0,K0),g(h,m,u,o,f0)}function e0(){var h=0,m=0,u=0,o=0,Y0=65535,K0,f0,m0;for(m0=0;m0<arguments.length;m0++)K0=arguments[m0].lo,f0=arguments[m0].hi,h+=K0&Y0,m+=K0>>>16,u+=f0&Y0,o+=f0>>>16;return m+=h>>>16,u+=m>>>16,o+=u>>>16,new Z(u&Y0|o<<16,h&Y0|m<<16)}function u0(h,m){return new Z(h.hi>>>m,h.lo>>>m|h.hi<<32-m)}function T1(){var h=0,m=0,u;for(u=0;u<arguments.length;u++)h^=arguments[u].lo,m^=arguments[u].hi;return new Z(m,h)}function e1(h,m){var u,o,Y0=32-m;if(m<32)u=h.hi>>>m|h.lo<<Y0,o=h.lo>>>m|h.hi<<Y0;else if(m<64)u=h.lo>>>m|h.hi<<Y0,o=h.hi>>>m|h.lo<<Y0;return new Z(u,o)}function L6(h,m,u){var o=h.hi&m.hi^~h.hi&u.hi,Y0=h.lo&m.lo^~h.lo&u.lo;return new Z(o,Y0)}function Q4(h,m,u){var o=h.hi&m.hi^h.hi&u.hi^m.hi&u.hi,Y0=h.lo&m.lo^h.lo&u.lo^m.lo&u.lo;return new Z(o,Y0)}function c5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function e(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function o$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function P9(h,m,u){var o=[],Y0=[],K0=[],f0=[],m0,A0,S0;for(A0=0;A0<8;A0++)o[A0]=K0[A0]=E(h,8*A0);var P0=0;while(u>=128){for(A0=0;A0<16;A0++)f0[A0]=E(m,8*A0+P0);for(A0=0;A0<80;A0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];m0=e0(K0[7],e(K0[4]),L6(K0[4],K0[5],K0[6]),a$[A0],f0[A0%16]),Y0[7]=e0(m0,c5(K0[0]),Q4(K0[0],K0[1],K0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(A0%16===15)for(S0=0;S0<16;S0++)f0[S0]=e0(f0[S0],f0[(S0+9)%16],K1(f0[(S0+1)%16]),o$(f0[(S0+14)%16]))}for(A0=0;A0<8;A0++)K0[A0]=e0(K0[A0],o[A0]),o[A0]=K0[A0];P0+=128,u-=128}for(A0=0;A0<8;A0++)z(h,8*A0,o[A0]);return u}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function M8(h,m,u){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,f0=u;for(K0=0;K0<64;K0++)o[K0]=lG[K0];P9(o,m,u),u%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<u;K0++)Y0[K0]=m[f0-u+K0];Y0[u]=128,u=256-128*(u<112?1:0),Y0[u-9]=0,z(Y0,u-8,new Z(f0/536870912|0,f0<<3)),P9(o,Y0,u);for(K0=0;K0<64;K0++)h[K0]=o[K0];return 0}function C6(h,m){var u=G(),o=G(),Y0=G(),K0=G(),f0=G(),m0=G(),A0=G(),S0=G(),P0=G();R0(u,h[1],h[0]),R0(P0,m[1],m[0]),B0(u,u,P0),C0(o,h[0],h[1]),C0(P0,m[0],m[1]),B0(o,o,P0),B0(Y0,h[3],m[3]),B0(Y0,Y0,U),B0(K0,h[2],m[2]),C0(K0,K0,K0),R0(f0,o,u),R0(m0,K0,Y0),C0(A0,K0,Y0),C0(S0,o,u),B0(h[0],f0,m0),B0(h[1],S0,A0),B0(h[2],A0,m0),B0(h[3],f0,S0)}function $5(h,m,u){var o;for(o=0;o<4;o++)v0(h[o],m[o],u)}function R5(h,m){var u=G(),o=G(),Y0=G();G0(Y0,m[2]),B0(u,m[0],Y0),B0(o,m[1],Y0),d0(h,o),h[31]^=n0(u)<<7}function Q9(h,m,u){var o,Y0;E0(h[0],J),E0(h[1],W),E0(h[2],W),E0(h[3],J);for(Y0=255;Y0>=0;--Y0)o=u[Y0/8|0]>>(Y0&7)&1,$5(h,m,o),C6(m,h),C6(h,h),$5(h,m,o)}function A9(h,m){var u=[G(),G(),G(),G()];E0(u[0],F),E0(u[1],H),E0(u[2],W),B0(u[3],F,H),Q9(h,u,m)}function v1(h,m,u){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!u)X(m,32);M8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,A9(Y0,o),R5(h,Y0);for(K0=0;K0<32;K0++)m[K0+32]=h[K0];return 0}var k8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function S8(h,m){var u,o,Y0,K0;for(o=63;o>=32;--o){u=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=u-16*m[o]*k8[Y0-(o-32)],u=Math.floor((m[Y0]+128)/256),m[Y0]-=u*256;m[Y0]+=u,m[o]=0}u=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=u-(m[31]>>4)*k8[Y0],u=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=u*k8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,h[o]=m[o]&255}function G6(h){var m=new Float64Array(64),u;for(u=0;u<64;u++)m[u]=h[u];for(u=0;u<64;u++)h[u]=0;S8(h,m)}function f$(h,m,u,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),f0=new Uint8Array(64),m0,A0,S0=new Float64Array(64),P0=[G(),G(),G(),G()];M8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=u+64;for(m0=0;m0<u;m0++)h[64+m0]=m[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];M8(f0,h.subarray(32),u+32),G6(f0),A9(P0,f0),R5(h,P0);for(m0=32;m0<64;m0++)h[m0]=o[m0];M8(K0,h,u+64),G6(K0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=f0[m0];for(m0=0;m0<32;m0++)for(A0=0;A0<32;A0++)S0[m0+A0]+=K0[m0]*Y0[A0];return S8(h.subarray(32),S0),y0}function F8(h,m){var u=G(),o=G(),Y0=G(),K0=G(),f0=G(),m0=G(),A0=G();if(E0(h[2],W),F0(h[1],m),Q0(Y0,h[1]),B0(K0,Y0,w),R0(Y0,Y0,h[2]),C0(K0,h[2],K0),Q0(f0,K0),Q0(m0,f0),B0(A0,m0,f0),B0(u,A0,Y0),B0(u,u,K0),V0(u,u),B0(u,u,Y0),B0(u,u,K0),B0(u,u,K0),B0(h[0],u,K0),Q0(o,h[0]),B0(o,o,K0),i0(o,Y0))B0(h[0],h[0],N);if(Q0(o,h[0]),B0(o,o,K0),i0(o,Y0))return-1;if(n0(h[0])===m[31]>>7)R0(h[0],J,h[0]);return B0(h[3],h[0],h[1]),0}function j7(h,m,u,o){var Y0,K0=new Uint8Array(32),f0=new Uint8Array(64),m0=[G(),G(),G(),G()],A0=[G(),G(),G(),G()];if(u<64)return-1;if(F8(A0,o))return-1;for(Y0=0;Y0<u;Y0++)h[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=o[Y0];if(M8(f0,h,u),G6(f0),Q9(m0,A0,f0),A9(A0,m.subarray(32)),C6(m0,A0),R5(K0,m0),u-=64,A(m,0,K0,0)){for(Y0=0;Y0<u;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<u;Y0++)h[Y0]=m[Y0+64];return u}var k$=32,n6=24,e6=32,r8=16,Z5=32,V=32,d=32,c=32,R=32,r=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,f1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:M,crypto_stream_xor:s,crypto_stream:v,crypto_stream_salsa20_xor:l,crypto_stream_salsa20:b,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:X0,crypto_secretbox_open:a,crypto_scalarmult:p,crypto_scalarmult_base:$0,crypto_box_beforenm:q0,crypto_box_afternm:M0,crypto_box:H0,crypto_box_open:b0,crypto_box_keypair:r0,crypto_hash:M8,crypto_sign:f$,crypto_sign_keypair:v1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:V,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:R,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:f1,crypto_hash_BYTES:Y8,gf:G,D:w,L:k8,pack25519:d0,unpack25519:F0,M:B0,A:C0,S:Q0,Z:R0,pow2523:V0,add:C6,set25519:E0,modL:S8,scalarmult:Q9,scalarbase:A9};function c1(h,m){if(h.length!==k$)throw Error("bad key size");if(m.length!==n6)throw Error("bad nonce size")}function z$(h,m){if(h.length!==d)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(h){for(var m=0;m<h.length;m++)h[m]=0}$.randomBytes=function(h){var m=new Uint8Array(h);return X(m,h),m},$.secretbox=function(h,m,u){Y$(h,m,u),c1(u,m);var o=new Uint8Array(e6+h.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<h.length;K0++)o[K0+e6]=h[K0];return X0(Y0,o,o.length,m,u),Y0.subarray(r8)},$.secretbox.open=function(h,m,u){Y$(h,m,u),c1(u,m);var o=new Uint8Array(r8+h.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<h.length;K0++)o[K0+r8]=h[K0];if(o.length<32)return null;if(a(Y0,o,o.length,m,u)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,m){if(Y$(h,m),h.length!==V)throw Error("bad n size");if(m.length!==Z5)throw Error("bad p size");var u=new Uint8Array(Z5);return p(u,h,m),u},$.scalarMult.base=function(h){if(Y$(h),h.length!==V)throw Error("bad n size");var m=new Uint8Array(Z5);return $0(m,h),m},$.scalarMult.scalarLength=V,$.scalarMult.groupElementLength=Z5,$.box=function(h,m,u,o){var Y0=$.box.before(u,o);return $.secretbox(h,m,Y0)},$.box.before=function(h,m){Y$(h,m),z$(h,m);var u=new Uint8Array(R);return q0(u,h,m),u},$.box.after=$.secretbox,$.box.open=function(h,m,u,o){var Y0=$.box.before(u,o);return $.secretbox.open(h,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),m=new Uint8Array(c);return r0(h,m),{publicKey:h,secretKey:m}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==c)throw Error("bad secret key size");var m=new Uint8Array(d);return $0(m,h),{publicKey:m,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=c,$.box.sharedKeyLength=R,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,m){if(Y$(h,m),m.length!==g1)throw Error("bad secret key size");var u=new Uint8Array(W1+h.length);return f$(u,h,h.length,m),u},$.sign.open=function(h,m){if(Y$(h,m),m.length!==F1)throw Error("bad public key size");var u=new Uint8Array(h.length),o=j7(u,h,h.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=u[K0];return Y0},$.sign.detached=function(h,m){var u=$.sign(h,m),o=new Uint8Array(W1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=u[Y0];return o},$.sign.detached.verify=function(h,m,u){if(Y$(h,m,u),m.length!==W1)throw Error("bad signature size");if(u.length!==F1)throw Error("bad public key size");var o=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),K0;for(K0=0;K0<W1;K0++)o[K0]=m[K0];for(K0=0;K0<h.length;K0++)o[K0+W1]=h[K0];return j7(Y0,o,o.length,u)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),m=new Uint8Array(g1);return v1(h,m),{publicKey:h,secretKey:m}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var m=new Uint8Array(F1);for(var u=0;u<m.length;u++)m[u]=h[32+u];return{publicKey:m,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==f1)throw Error("bad seed size");var m=new Uint8Array(F1),u=new Uint8Array(g1);for(var o=0;o<32;o++)u[o]=h[o];return v1(m,u,!0),{publicKey:m,secretKey:u}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=f1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var m=new Uint8Array(Y8);return M8(m,h,h.length),m},$.hash.hashLength=Y8,$.verify=function(h,m){if(Y$(h,m),h.length===0||m.length===0)return!1;if(h.length!==m.length)return!1;return j(h,0,m,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var m=65536;$.setPRNG(function(u,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)h.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)u[Y0]=K0[Y0];v$(K0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(u,o){var Y0,K0=h.randomBytes(o);for(Y0=0;Y0<o;Y0++)u[Y0]=K0[Y0];v$(K0)})}()})(typeof hg<"u"&&MGZ?MGZ:globalThis.nacl=globalThis.nacl||{});VC=typeof hg<"u"&&MGZ?MGZ:globalThis.nacl,d44={fromSeed:VC.sign.keyPair.fromSeed,sign:VC.sign.detached,verify:VC.sign.detached.verify,randomBytes:VC.randomBytes,scalarBaseMultiply:VC.scalarMult.base,seal:VC.box,open:VC.box.open};m44=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));CC=[120,107,118,49];l44(d44);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(vJ||(vJ={}))});function y81($){try{$?.clear?.()}catch{}}async function __$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=S_$($),W=x81(J.sub),K=v81(new TextEncoder().encode(Z)),w=I_$();try{let U=await k_$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:vJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(V_$(U,w))}finally{y81(w),y81(K),y81(W)}}var f_$=O(()=>{C_$()});function Z54($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function b_$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=B1();if(!Y.natsTunnelPublicEnabled)return Z.json(g81(),503);if(!Y.natsPublicUrl)return Z.json(g81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(g81(),503)}let Q=xJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await __$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:j_$(Q),userId:X,allowedConnectionTypes:Z54(Y.natsPublicUrl)})}return Z.json(P_$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var g81=()=>({error:"link session unavailable"});var x_$=O(()=>{d8();J8();A_$();f_$()});async function Y54($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function v_$($){let{ctx:Z,runner:G,claimName:X,sandboxId:Y,organizationId:Q,virtualMcpId:J,branch:W}=$;if(Y.scope==="shared"){let K={organizationId:Q,virtualMcpId:J,branch:W};try{let w=await Z.storage.agentSandboxSessions.withLock(K,(U)=>U.beginReap(K,X));if(!w)return;try{await G.delete(X,Y)}finally{await Z.storage.agentSandboxSessions.withLock(K,(U)=>U.completeReap(K,w.generation,X))}}catch(w){console.warn(`[vm-events] shared cleanup failed for ${J}/${W}: ${w instanceof Error?w.message:String(w)}`)}return}try{await G.delete(X,Y)}catch(K){console.warn(`[vm-events] runner.delete failed for ${X}: ${K instanceof Error?K.message:String(K)}`)}}async function Q54($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},G54),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=fn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function J54($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<y_$){await O8(g_$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<y_$){await O8(g_$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var G54=90000,X54=15000,h_$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{T0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=b1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=jX({orgId:Y.id,virtualMcpId:Q,branch:J}),w=W.metadata??null,U,F=null,H=null;try{let z=await fX(G,{userId:X,branch:J,virtualMcpId:Q,virtualMcpMetadata:w});U=z.provider,F=z.kind}catch(z){H=z instanceof Error?z:Error(String(z)),U=null}let N=F==="agent-sandbox"?vQ(K):ME(X,K),B=mW(N,J),D=N.scope==="shared"?await G.storage.agentSandboxSessions.find({organizationId:Y.id,virtualMcpId:Q,branch:J}):null,E=N.scope==="shared"?D?.sandboxHandle&&D.status==="ready"?{sandboxHandle:D.sandboxHandle,sandboxProviderKind:"agent-sandbox"}:null:F&&$K(v5(w),X,J,F),L=!!E&&E.sandboxHandle===B;if(!U)return Z3(Z,async(z)=>{await z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:H?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),Z3(Z,async(z)=>{let j=new AbortController,P=setInterval(()=>{z.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(P)})},X54);z.onAbort(()=>{j.abort(),clearInterval(P)});try{if(N.scope==="shared"&&D?.desiredState==="stopped"){if(D.status==="stopping"||D.status==="deleting"){let I=D.status,S=!0;try{let M=D.sandboxHandle??(I==="deleting"?B:null);if(M)await U.delete(M,N)}catch(M){S=!1,console.warn(`[vm-events] failed to resume shared stop for ${Q}/${J}: ${M instanceof Error?M.message:String(M)}`)}finally{if(I!=="deleting"||S){let M={organizationId:Y.id,virtualMcpId:Q,branch:J};await G.storage.agentSandboxSessions.withLock(M,(C)=>I==="deleting"?C.completeDelete(M,D.generation):C.completeStop(M,D.generation))}}}await z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(N.scope==="shared"&&D?.status==="reaping"&&D.sandboxHandle){await v_$({ctx:G,runner:U,claimName:D.sandboxHandle,sandboxId:N,organizationId:Y.id,virtualMcpId:Q,branch:J}),await z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(L&&F){if(await Y54(U,B)){await v_$({ctx:G,runner:U,claimName:B,sandboxId:N,organizationId:Y.id,virtualMcpId:Q,branch:J}),await z.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await Q54({stream:z,claimName:B,runner:U,signal:j.signal})||j.signal.aborted)return;await J54({stream:z,runner:U,claimName:B,signal:j.signal})}finally{clearInterval(P)}})}),$},y_$=60000,g_$=500;var u_$=O(()=>{d8();MC();IY();d5();bv();fv();SV();xY()});function K54($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function w54($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(W54)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var W54=1e4,U54=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},c_$=()=>{let $=new V1;return $.use("*",U54),$.get("/",async(Z)=>{let G=B1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await w54(X,Y);return Z.json({apps:K54(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var d_$=O(()=>{d8();J8()});import{z as h1}from"zod";function IK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function j54($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function P54($,Z,G){try{return JSON.parse($)}catch{throw new i_$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function A54($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:P54(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function T54($){let Z=$.map((G)=>{let X=G.function.parameters?EY(G.function.parameters):EY({type:"object",properties:{}});return[G.function.name,b$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function R54($){if(!$)return;return{openai:{response_format:$}}}function I54(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function l_$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function m_$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var F54=256,H54,N54,B54,O54,D54,E54,L54,z54,i_$,n_$,p_$;var t_$=O(()=>{K6();d8();MC();H54=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),N54=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),B54=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(N54).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),O54=h1.object({type:h1.literal("text")}),D54=h1.object({type:h1.literal("json_object")}),E54=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),L54=h1.union([O54,D54,E54]),z54=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(B54),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(H54).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:L54.optional(),user:h1.string().optional()});i_$=class i_$ extends Error{constructor($){super($);this.name="MessageConversionError"}};n_$=new V1;n_$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(IK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(IK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(IK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=z54.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(IK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=j54(Q.model);if(!J)return $.json(IK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(IK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(IK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=A54(Q.messages),H=Q.tools?T54(Q.tools):void 0,N=R54(Q.response_format),B=I54(),D=Math.floor(Date.now()/1000);if(Q.stream)return Z3($,async(E)=>{let L=l_$(U,F,H,Q,N,$.req.raw.signal);try{let z=dQ(L),j=!1,P=0,A="",I=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=F54)await I()}else if(S.type==="tool-call"){await I();let M=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await I(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:m_$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await I(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=l_$(U,F,H,Q,N,$.req.raw.signal),L=await xN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:m_$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(IK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(IK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(IK(Y.message,"server_error"),500)}});p_$=n_$});var o_$;var r_$=O(()=>{o_$={name:"decocms",version:"4.113.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","driver.js":"^1.8.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function k54(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??M54}}var a_$,M54="https://ph.studio.decocms.com",s_$;var e_$=O(()=>{d8();Ab0();tN();S7();J8();g01();r_$();a_$=new V1;a_$.get("/",($)=>{let Z={version:o_$.version,theme:sf1(),...eO().logo&&{logo:eO().logo},...mQ()&&{internalUrl:L00()},...B1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!B1().firecrawlApiKey,auth:w2$(),posthog:k54(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!mQ()&&B1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});s_$=a_$});function Hz0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function Zf$($){return(Hz0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function Gf$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(Hz0($))}&sz=${Z}`}function $f$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function Xf$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?$f$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):$f$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as S54}from"path";function hU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function V54($){let Z=Hz0($),G=Zf$(Z),X=Gf$(Z,128),Q=`${(B1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=Xf$({brand:G,domain:Z});return[`<title>${hU(J)}</title>`,`<meta name="description" content="${hU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${hU(J)}" />`,`<meta property="og:description" content="${hU(W)}" />`,`<meta property="og:url" content="${hU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${hU(J)}" />`,`<meta name="twitter:description" content="${hU(W)}" />`,`<link rel="canonical" href="${hU(Q)}" />`,`<link rel="icon" href="${hU(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var _81,VC,d44,R_$,C81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",m44,c$,u$,Z6,T_$=24,CC,vJ;var C_$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(_81||(_81={}));(function($){var Z=function(h,m){this.hi=h|0,this.lo=m|0},G=function(h){var m,u=new Float64Array(16);if(h)for(m=0;m<h.length;m++)u[m]=h[m];return u},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,m){return h<<m|h>>>32-m}function D(h,m){var u=h[m+3]&255;return u=u<<8|h[m+2]&255,u=u<<8|h[m+1]&255,u<<8|h[m+0]&255}function E(h,m){var u=h[m]<<24|h[m+1]<<16|h[m+2]<<8|h[m+3],o=h[m+4]<<24|h[m+5]<<16|h[m+6]<<8|h[m+7];return new Z(u,o)}function L(h,m,u){var o;for(o=0;o<4;o++)h[m+o]=u&255,u>>>=8}function z(h,m,u){h[m]=u.hi>>24&255,h[m+1]=u.hi>>16&255,h[m+2]=u.hi>>8&255,h[m+3]=u.hi&255,h[m+4]=u.lo>>24&255,h[m+5]=u.lo>>16&255,h[m+6]=u.lo>>8&255,h[m+7]=u.lo&255}function j(h,m,u,o,Y0){var K0,f0=0;for(K0=0;K0<Y0;K0++)f0|=h[m+K0]^u[o+K0];return(1&f0-1>>>8)-1}function P(h,m,u,o){return j(h,m,u,o,16)}function A(h,m,u,o){return j(h,m,u,o,32)}function I(h,m,u,o,Y0){var K0=new Uint32Array(16),f0=new Uint32Array(16),m0=new Uint32Array(16),A0=new Uint32Array(4),S0,P0,y0;for(S0=0;S0<4;S0++)f0[5*S0]=D(o,4*S0),f0[1+S0]=D(u,4*S0),f0[6+S0]=D(m,4*S0),f0[11+S0]=D(u,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=f0[S0];for(S0=0;S0<20;S0++){for(P0=0;P0<4;P0++){for(y0=0;y0<4;y0++)A0[y0]=f0[(5*P0+4*y0)%16];A0[1]^=B(A0[0]+A0[3]|0,7),A0[2]^=B(A0[1]+A0[0]|0,9),A0[3]^=B(A0[2]+A0[1]|0,13),A0[0]^=B(A0[3]+A0[2]|0,18);for(y0=0;y0<4;y0++)K0[4*P0+(P0+y0)%4]=A0[y0]}for(y0=0;y0<16;y0++)f0[y0]=K0[y0]}if(Y0){for(S0=0;S0<16;S0++)f0[S0]=f0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)f0[5*S0]=f0[5*S0]-D(o,4*S0)|0,f0[6+S0]=f0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,f0[5*S0]),L(h,16+4*S0,f0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,f0[S0]+m0[S0]|0)}function S(h,m,u,o){return I(h,m,u,o,!1),0}function M(h,m,u,o){return I(h,m,u,o,!0),0}var C=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function l(h,m,u,o,Y0,K0,f0){var m0=new Uint8Array(16),A0=new Uint8Array(64),S0,P0;if(!Y0)return 0;for(P0=0;P0<16;P0++)m0[P0]=0;for(P0=0;P0<8;P0++)m0[P0]=K0[P0];while(Y0>=64){S(A0,m0,f0,C);for(P0=0;P0<64;P0++)h[m+P0]=(u?u[o+P0]:0)^A0[P0];S0=1;for(P0=8;P0<16;P0++)S0=S0+(m0[P0]&255)|0,m0[P0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,u)o+=64}if(Y0>0){S(A0,m0,f0,C);for(P0=0;P0<Y0;P0++)h[m+P0]=(u?u[o+P0]:0)^A0[P0]}return 0}function b(h,m,u,o,Y0){return l(h,m,null,0,u,o,Y0)}function v(h,m,u,o,Y0){var K0=new Uint8Array(32);return M(K0,o,Y0,C),b(h,m,u,o.subarray(16),K0)}function s(h,m,u,o,Y0,K0,f0){var m0=new Uint8Array(32);return M(m0,K0,f0,C),l(h,m,u,o,Y0,K0.subarray(16),m0)}function n(h,m){var u,o=0;for(u=0;u<17;u++)o=o+(h[u]+m[u]|0)|0,h[u]=o&255,o>>>=8}var W0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,m,u,o,Y0,K0){var f0,m0,A0,S0,P0=new Uint32Array(17),y0=new Uint32Array(17),a0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(A0=0;A0<17;A0++)y0[A0]=a0[A0]=0;for(A0=0;A0<16;A0++)y0[A0]=K0[A0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(A0=0;A0<17;A0++)Z1[A0]=0;for(A0=0;A0<16&&A0<Y0;++A0)Z1[A0]=u[o+A0];Z1[A0]=1,o+=A0,Y0-=A0,n(a0,Z1);for(m0=0;m0<17;m0++){P0[m0]=0;for(A0=0;A0<17;A0++)P0[m0]=P0[m0]+a0[A0]*(A0<=m0?y0[m0-A0]:320*y0[m0+17-A0]|0)|0|0}for(m0=0;m0<17;m0++)a0[m0]=P0[m0];S0=0;for(A0=0;A0<16;A0++)S0=S0+a0[A0]|0,a0[A0]=S0&255,S0>>>=8;S0=S0+a0[16]|0,a0[16]=S0&3,S0=5*(S0>>>2)|0;for(A0=0;A0<16;A0++)S0=S0+a0[A0]|0,a0[A0]=S0&255,S0>>>=8;S0=S0+a0[16]|0,a0[16]=S0}for(A0=0;A0<17;A0++)w1[A0]=a0[A0];n(a0,W0),f0=-(a0[16]>>>7)|0;for(A0=0;A0<17;A0++)a0[A0]^=f0&(w1[A0]^a0[A0]);for(A0=0;A0<16;A0++)Z1[A0]=K0[A0+16];Z1[16]=0,n(a0,Z1);for(A0=0;A0<16;A0++)h[m+A0]=a0[A0];return 0}function J0(h,m,u,o,Y0,K0){var f0=new Uint8Array(16);return D0(f0,0,u,o,Y0,K0),P(h,m,f0,0)}function X0(h,m,u,o,Y0){var K0;if(u<32)return-1;s(h,0,m,0,u,o,Y0),D0(h,16,h,32,u-32,h);for(K0=0;K0<16;K0++)h[K0]=0;return 0}function a(h,m,u,o,Y0){var K0,f0=new Uint8Array(32);if(u<32)return-1;if(v(f0,0,32,o,Y0),J0(m,16,m,32,u-32,f0)!==0)return-1;s(h,0,m,0,u,o,Y0);for(K0=0;K0<32;K0++)h[K0]=0;return 0}function E0(h,m){var u;for(u=0;u<16;u++)h[u]=m[u]|0}function U0(h){var m,u;for(u=0;u<16;u++)h[u]+=65536,m=Math.floor(h[u]/65536),h[(u+1)*(u<15?1:0)]+=m-1+37*(m-1)*(u===15?1:0),h[u]-=m*65536}function v0(h,m,u){var o,Y0=~(u-1);for(var K0=0;K0<16;K0++)o=Y0&(h[K0]^m[K0]),h[K0]^=o,m[K0]^=o}function d0(h,m){var u,o,Y0,K0=G(),f0=G();for(u=0;u<16;u++)f0[u]=m[u];U0(f0),U0(f0),U0(f0);for(o=0;o<2;o++){K0[0]=f0[0]-65517;for(u=1;u<15;u++)K0[u]=f0[u]-65535-(K0[u-1]>>16&1),K0[u-1]&=65535;K0[15]=f0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,v0(f0,K0,1-Y0)}for(u=0;u<16;u++)h[2*u]=f0[u]&255,h[2*u+1]=f0[u]>>8}function i0(h,m){var u=new Uint8Array(32),o=new Uint8Array(32);return d0(u,h),d0(o,m),A(u,0,o,0)}function n0(h){var m=new Uint8Array(32);return d0(m,h),m[0]&1}function F0(h,m){var u;for(u=0;u<16;u++)h[u]=m[2*u]+(m[2*u+1]<<8);h[15]&=32767}function C0(h,m,u){var o;for(o=0;o<16;o++)h[o]=m[o]+u[o]|0}function R0(h,m,u){var o;for(o=0;o<16;o++)h[o]=m[o]-u[o]|0}function B0(h,m,u){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*u[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)h[o]=K0[o];U0(h),U0(h)}function Q0(h,m){B0(h,m,m)}function G0(h,m){var u=G(),o;for(o=0;o<16;o++)u[o]=m[o];for(o=253;o>=0;o--)if(Q0(u,u),o!==2&&o!==4)B0(u,u,m);for(o=0;o<16;o++)h[o]=u[o]}function V0(h,m){var u=G(),o;for(o=0;o<16;o++)u[o]=m[o];for(o=250;o>=0;o--)if(Q0(u,u),o!==1)B0(u,u,m);for(o=0;o<16;o++)h[o]=u[o]}function p(h,m,u){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,f0,m0=G(),A0=G(),S0=G(),P0=G(),y0=G(),a0=G();for(f0=0;f0<31;f0++)o[f0]=m[f0];o[31]=m[31]&127|64,o[0]&=248,F0(Y0,u);for(f0=0;f0<16;f0++)A0[f0]=Y0[f0],P0[f0]=m0[f0]=S0[f0]=0;m0[0]=P0[0]=1;for(f0=254;f0>=0;--f0)K0=o[f0>>>3]>>>(f0&7)&1,v0(m0,A0,K0),v0(S0,P0,K0),C0(y0,m0,S0),R0(m0,m0,S0),C0(S0,A0,P0),R0(A0,A0,P0),Q0(P0,y0),Q0(a0,m0),B0(m0,S0,m0),B0(S0,A0,y0),C0(y0,m0,S0),R0(m0,m0,S0),Q0(A0,m0),R0(S0,P0,a0),B0(m0,S0,K),C0(m0,m0,P0),B0(S0,S0,m0),B0(m0,P0,a0),B0(P0,A0,Y0),Q0(A0,y0),v0(m0,A0,K0),v0(S0,P0,K0);for(f0=0;f0<16;f0++)Y0[f0+16]=m0[f0],Y0[f0+32]=S0[f0],Y0[f0+48]=A0[f0],Y0[f0+64]=P0[f0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return G0(Z1,Z1),B0(w1,w1,Z1),d0(h,w1),0}function $0(h,m){return p(h,m,Q)}function r0(h,m){return X(m,32),$0(h,m)}function q0(h,m,u){var o=new Uint8Array(32);return p(o,u,m),M(h,Y,o,C)}var M0=X0,g=a;function H0(h,m,u,o,Y0,K0){var f0=new Uint8Array(32);return q0(f0,Y0,K0),M0(h,m,u,o,f0)}function b0(h,m,u,o,Y0,K0){var f0=new Uint8Array(32);return q0(f0,Y0,K0),g(h,m,u,o,f0)}function e0(){var h=0,m=0,u=0,o=0,Y0=65535,K0,f0,m0;for(m0=0;m0<arguments.length;m0++)K0=arguments[m0].lo,f0=arguments[m0].hi,h+=K0&Y0,m+=K0>>>16,u+=f0&Y0,o+=f0>>>16;return m+=h>>>16,u+=m>>>16,o+=u>>>16,new Z(u&Y0|o<<16,h&Y0|m<<16)}function u0(h,m){return new Z(h.hi>>>m,h.lo>>>m|h.hi<<32-m)}function T1(){var h=0,m=0,u;for(u=0;u<arguments.length;u++)h^=arguments[u].lo,m^=arguments[u].hi;return new Z(m,h)}function e1(h,m){var u,o,Y0=32-m;if(m<32)u=h.hi>>>m|h.lo<<Y0,o=h.lo>>>m|h.hi<<Y0;else if(m<64)u=h.lo>>>m|h.hi<<Y0,o=h.hi>>>m|h.lo<<Y0;return new Z(u,o)}function L6(h,m,u){var o=h.hi&m.hi^~h.hi&u.hi,Y0=h.lo&m.lo^~h.lo&u.lo;return new Z(o,Y0)}function Q4(h,m,u){var o=h.hi&m.hi^h.hi&u.hi^m.hi&u.hi,Y0=h.lo&m.lo^h.lo&u.lo^m.lo&u.lo;return new Z(o,Y0)}function c5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function e(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function o$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function P9(h,m,u){var o=[],Y0=[],K0=[],f0=[],m0,A0,S0;for(A0=0;A0<8;A0++)o[A0]=K0[A0]=E(h,8*A0);var P0=0;while(u>=128){for(A0=0;A0<16;A0++)f0[A0]=E(m,8*A0+P0);for(A0=0;A0<80;A0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];m0=e0(K0[7],e(K0[4]),L6(K0[4],K0[5],K0[6]),a$[A0],f0[A0%16]),Y0[7]=e0(m0,c5(K0[0]),Q4(K0[0],K0[1],K0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(A0%16===15)for(S0=0;S0<16;S0++)f0[S0]=e0(f0[S0],f0[(S0+9)%16],K1(f0[(S0+1)%16]),o$(f0[(S0+14)%16]))}for(A0=0;A0<8;A0++)K0[A0]=e0(K0[A0],o[A0]),o[A0]=K0[A0];P0+=128,u-=128}for(A0=0;A0<8;A0++)z(h,8*A0,o[A0]);return u}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function M8(h,m,u){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,f0=u;for(K0=0;K0<64;K0++)o[K0]=lG[K0];P9(o,m,u),u%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<u;K0++)Y0[K0]=m[f0-u+K0];Y0[u]=128,u=256-128*(u<112?1:0),Y0[u-9]=0,z(Y0,u-8,new Z(f0/536870912|0,f0<<3)),P9(o,Y0,u);for(K0=0;K0<64;K0++)h[K0]=o[K0];return 0}function C6(h,m){var u=G(),o=G(),Y0=G(),K0=G(),f0=G(),m0=G(),A0=G(),S0=G(),P0=G();R0(u,h[1],h[0]),R0(P0,m[1],m[0]),B0(u,u,P0),C0(o,h[0],h[1]),C0(P0,m[0],m[1]),B0(o,o,P0),B0(Y0,h[3],m[3]),B0(Y0,Y0,U),B0(K0,h[2],m[2]),C0(K0,K0,K0),R0(f0,o,u),R0(m0,K0,Y0),C0(A0,K0,Y0),C0(S0,o,u),B0(h[0],f0,m0),B0(h[1],S0,A0),B0(h[2],A0,m0),B0(h[3],f0,S0)}function $5(h,m,u){var o;for(o=0;o<4;o++)v0(h[o],m[o],u)}function R5(h,m){var u=G(),o=G(),Y0=G();G0(Y0,m[2]),B0(u,m[0],Y0),B0(o,m[1],Y0),d0(h,o),h[31]^=n0(u)<<7}function Q9(h,m,u){var o,Y0;E0(h[0],J),E0(h[1],W),E0(h[2],W),E0(h[3],J);for(Y0=255;Y0>=0;--Y0)o=u[Y0/8|0]>>(Y0&7)&1,$5(h,m,o),C6(m,h),C6(h,h),$5(h,m,o)}function A9(h,m){var u=[G(),G(),G(),G()];E0(u[0],F),E0(u[1],H),E0(u[2],W),B0(u[3],F,H),Q9(h,u,m)}function v1(h,m,u){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!u)X(m,32);M8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,A9(Y0,o),R5(h,Y0);for(K0=0;K0<32;K0++)m[K0+32]=h[K0];return 0}var k8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function S8(h,m){var u,o,Y0,K0;for(o=63;o>=32;--o){u=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=u-16*m[o]*k8[Y0-(o-32)],u=Math.floor((m[Y0]+128)/256),m[Y0]-=u*256;m[Y0]+=u,m[o]=0}u=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=u-(m[31]>>4)*k8[Y0],u=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=u*k8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,h[o]=m[o]&255}function G6(h){var m=new Float64Array(64),u;for(u=0;u<64;u++)m[u]=h[u];for(u=0;u<64;u++)h[u]=0;S8(h,m)}function f$(h,m,u,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),f0=new Uint8Array(64),m0,A0,S0=new Float64Array(64),P0=[G(),G(),G(),G()];M8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=u+64;for(m0=0;m0<u;m0++)h[64+m0]=m[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];M8(f0,h.subarray(32),u+32),G6(f0),A9(P0,f0),R5(h,P0);for(m0=32;m0<64;m0++)h[m0]=o[m0];M8(K0,h,u+64),G6(K0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=f0[m0];for(m0=0;m0<32;m0++)for(A0=0;A0<32;A0++)S0[m0+A0]+=K0[m0]*Y0[A0];return S8(h.subarray(32),S0),y0}function F8(h,m){var u=G(),o=G(),Y0=G(),K0=G(),f0=G(),m0=G(),A0=G();if(E0(h[2],W),F0(h[1],m),Q0(Y0,h[1]),B0(K0,Y0,w),R0(Y0,Y0,h[2]),C0(K0,h[2],K0),Q0(f0,K0),Q0(m0,f0),B0(A0,m0,f0),B0(u,A0,Y0),B0(u,u,K0),V0(u,u),B0(u,u,Y0),B0(u,u,K0),B0(u,u,K0),B0(h[0],u,K0),Q0(o,h[0]),B0(o,o,K0),i0(o,Y0))B0(h[0],h[0],N);if(Q0(o,h[0]),B0(o,o,K0),i0(o,Y0))return-1;if(n0(h[0])===m[31]>>7)R0(h[0],J,h[0]);return B0(h[3],h[0],h[1]),0}function j7(h,m,u,o){var Y0,K0=new Uint8Array(32),f0=new Uint8Array(64),m0=[G(),G(),G(),G()],A0=[G(),G(),G(),G()];if(u<64)return-1;if(F8(A0,o))return-1;for(Y0=0;Y0<u;Y0++)h[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=o[Y0];if(M8(f0,h,u),G6(f0),Q9(m0,A0,f0),A9(A0,m.subarray(32)),C6(m0,A0),R5(K0,m0),u-=64,A(m,0,K0,0)){for(Y0=0;Y0<u;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<u;Y0++)h[Y0]=m[Y0+64];return u}var k$=32,n6=24,e6=32,r8=16,Z5=32,V=32,d=32,c=32,R=32,r=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,f1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:M,crypto_stream_xor:s,crypto_stream:v,crypto_stream_salsa20_xor:l,crypto_stream_salsa20:b,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:X0,crypto_secretbox_open:a,crypto_scalarmult:p,crypto_scalarmult_base:$0,crypto_box_beforenm:q0,crypto_box_afternm:M0,crypto_box:H0,crypto_box_open:b0,crypto_box_keypair:r0,crypto_hash:M8,crypto_sign:f$,crypto_sign_keypair:v1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:V,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:R,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:f1,crypto_hash_BYTES:Y8,gf:G,D:w,L:k8,pack25519:d0,unpack25519:F0,M:B0,A:C0,S:Q0,Z:R0,pow2523:V0,add:C6,set25519:E0,modL:S8,scalarmult:Q9,scalarbase:A9};function c1(h,m){if(h.length!==k$)throw Error("bad key size");if(m.length!==n6)throw Error("bad nonce size")}function z$(h,m){if(h.length!==d)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(h){for(var m=0;m<h.length;m++)h[m]=0}$.randomBytes=function(h){var m=new Uint8Array(h);return X(m,h),m},$.secretbox=function(h,m,u){Y$(h,m,u),c1(u,m);var o=new Uint8Array(e6+h.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<h.length;K0++)o[K0+e6]=h[K0];return X0(Y0,o,o.length,m,u),Y0.subarray(r8)},$.secretbox.open=function(h,m,u){Y$(h,m,u),c1(u,m);var o=new Uint8Array(r8+h.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<h.length;K0++)o[K0+r8]=h[K0];if(o.length<32)return null;if(a(Y0,o,o.length,m,u)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,m){if(Y$(h,m),h.length!==V)throw Error("bad n size");if(m.length!==Z5)throw Error("bad p size");var u=new Uint8Array(Z5);return p(u,h,m),u},$.scalarMult.base=function(h){if(Y$(h),h.length!==V)throw Error("bad n size");var m=new Uint8Array(Z5);return $0(m,h),m},$.scalarMult.scalarLength=V,$.scalarMult.groupElementLength=Z5,$.box=function(h,m,u,o){var Y0=$.box.before(u,o);return $.secretbox(h,m,Y0)},$.box.before=function(h,m){Y$(h,m),z$(h,m);var u=new Uint8Array(R);return q0(u,h,m),u},$.box.after=$.secretbox,$.box.open=function(h,m,u,o){var Y0=$.box.before(u,o);return $.secretbox.open(h,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),m=new Uint8Array(c);return r0(h,m),{publicKey:h,secretKey:m}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==c)throw Error("bad secret key size");var m=new Uint8Array(d);return $0(m,h),{publicKey:m,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=c,$.box.sharedKeyLength=R,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,m){if(Y$(h,m),m.length!==g1)throw Error("bad secret key size");var u=new Uint8Array(W1+h.length);return f$(u,h,h.length,m),u},$.sign.open=function(h,m){if(Y$(h,m),m.length!==F1)throw Error("bad public key size");var u=new Uint8Array(h.length),o=j7(u,h,h.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=u[K0];return Y0},$.sign.detached=function(h,m){var u=$.sign(h,m),o=new Uint8Array(W1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=u[Y0];return o},$.sign.detached.verify=function(h,m,u){if(Y$(h,m,u),m.length!==W1)throw Error("bad signature size");if(u.length!==F1)throw Error("bad public key size");var o=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),K0;for(K0=0;K0<W1;K0++)o[K0]=m[K0];for(K0=0;K0<h.length;K0++)o[K0+W1]=h[K0];return j7(Y0,o,o.length,u)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),m=new Uint8Array(g1);return v1(h,m),{publicKey:h,secretKey:m}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var m=new Uint8Array(F1);for(var u=0;u<m.length;u++)m[u]=h[32+u];return{publicKey:m,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==f1)throw Error("bad seed size");var m=new Uint8Array(F1),u=new Uint8Array(g1);for(var o=0;o<32;o++)u[o]=h[o];return v1(m,u,!0),{publicKey:m,secretKey:u}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=f1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var m=new Uint8Array(Y8);return M8(m,h,h.length),m},$.hash.hashLength=Y8,$.verify=function(h,m){if(Y$(h,m),h.length===0||m.length===0)return!1;if(h.length!==m.length)return!1;return j(h,0,m,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var m=65536;$.setPRNG(function(u,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)h.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)u[Y0]=K0[Y0];v$(K0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(u,o){var Y0,K0=h.randomBytes(o);for(Y0=0;Y0<o;Y0++)u[Y0]=K0[Y0];v$(K0)})}()})(typeof hg<"u"&&MGZ?MGZ:globalThis.nacl=globalThis.nacl||{});VC=typeof hg<"u"&&MGZ?MGZ:globalThis.nacl,d44={fromSeed:VC.sign.keyPair.fromSeed,sign:VC.sign.detached,verify:VC.sign.detached.verify,randomBytes:VC.randomBytes,scalarBaseMultiply:VC.scalarMult.base,seal:VC.box,open:VC.box.open};m44=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));CC=[120,107,118,49];l44(d44);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(vJ||(vJ={}))});function y81($){try{$?.clear?.()}catch{}}async function __$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=S_$($),W=x81(J.sub),K=v81(new TextEncoder().encode(Z)),w=I_$();try{let U=await k_$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:vJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(V_$(U,w))}finally{y81(w),y81(K),y81(W)}}var f_$=O(()=>{C_$()});function Z54($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function b_$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=B1();if(!Y.natsTunnelPublicEnabled)return Z.json(g81(),503);if(!Y.natsPublicUrl)return Z.json(g81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(g81(),503)}let Q=xJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await __$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:j_$(Q),userId:X,allowedConnectionTypes:Z54(Y.natsPublicUrl)})}return Z.json(P_$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var g81=()=>({error:"link session unavailable"});var x_$=O(()=>{d8();J8();A_$();f_$()});async function Y54($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function v_$($){let{ctx:Z,runner:G,claimName:X,sandboxId:Y,organizationId:Q,virtualMcpId:J,branch:W}=$;if(Y.scope==="shared"){let K={organizationId:Q,virtualMcpId:J,branch:W};try{let w=await Z.storage.agentSandboxSessions.withLock(K,(U)=>U.beginReap(K,X));if(!w)return;try{await G.delete(X,Y)}finally{await Z.storage.agentSandboxSessions.withLock(K,(U)=>U.completeReap(K,w.generation,X))}}catch(w){console.warn(`[vm-events] shared cleanup failed for ${J}/${W}: ${w instanceof Error?w.message:String(w)}`)}return}try{await G.delete(X,Y)}catch(K){console.warn(`[vm-events] runner.delete failed for ${X}: ${K instanceof Error?K.message:String(K)}`)}}async function Q54($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},G54),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=fn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function J54($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<y_$){await O8(g_$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<y_$){await O8(g_$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var G54=90000,X54=15000,h_$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{T0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=b1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=jX({orgId:Y.id,virtualMcpId:Q,branch:J}),w=W.metadata??null,U,F=null,H=null;try{let z=await fX(G,{userId:X,branch:J,virtualMcpId:Q,virtualMcpMetadata:w});U=z.provider,F=z.kind}catch(z){H=z instanceof Error?z:Error(String(z)),U=null}let N=F==="agent-sandbox"?vQ(K):ME(X,K),B=mW(N,J),D=N.scope==="shared"?await G.storage.agentSandboxSessions.find({organizationId:Y.id,virtualMcpId:Q,branch:J}):null,E=N.scope==="shared"?D?.sandboxHandle&&D.status==="ready"?{sandboxHandle:D.sandboxHandle,sandboxProviderKind:"agent-sandbox"}:null:F&&$K(v5(w),X,J,F),L=!!E&&E.sandboxHandle===B;if(!U)return Z3(Z,async(z)=>{await z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:H?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),Z3(Z,async(z)=>{let j=new AbortController,P=setInterval(()=>{z.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(P)})},X54);z.onAbort(()=>{j.abort(),clearInterval(P)});try{if(N.scope==="shared"&&D?.desiredState==="stopped"){if(D.status==="stopping"||D.status==="deleting"){let I=D.status,S=!0;try{let M=D.sandboxHandle??(I==="deleting"?B:null);if(M)await U.delete(M,N)}catch(M){S=!1,console.warn(`[vm-events] failed to resume shared stop for ${Q}/${J}: ${M instanceof Error?M.message:String(M)}`)}finally{if(I!=="deleting"||S){let M={organizationId:Y.id,virtualMcpId:Q,branch:J};await G.storage.agentSandboxSessions.withLock(M,(C)=>I==="deleting"?C.completeDelete(M,D.generation):C.completeStop(M,D.generation))}}}await z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(N.scope==="shared"&&D?.status==="reaping"&&D.sandboxHandle){await v_$({ctx:G,runner:U,claimName:D.sandboxHandle,sandboxId:N,organizationId:Y.id,virtualMcpId:Q,branch:J}),await z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(L&&F){if(await Y54(U,B)){await v_$({ctx:G,runner:U,claimName:B,sandboxId:N,organizationId:Y.id,virtualMcpId:Q,branch:J}),await z.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await Q54({stream:z,claimName:B,runner:U,signal:j.signal})||j.signal.aborted)return;await J54({stream:z,runner:U,claimName:B,signal:j.signal})}finally{clearInterval(P)}})}),$},y_$=60000,g_$=500;var u_$=O(()=>{d8();MC();IY();d5();bv();fv();SV();xY()});function K54($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function w54($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(W54)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var W54=1e4,U54=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},c_$=()=>{let $=new V1;return $.use("*",U54),$.get("/",async(Z)=>{let G=B1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await w54(X,Y);return Z.json({apps:K54(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var d_$=O(()=>{d8();J8()});import{z as h1}from"zod";function IK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function j54($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function P54($,Z,G){try{return JSON.parse($)}catch{throw new i_$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function A54($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:P54(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function T54($){let Z=$.map((G)=>{let X=G.function.parameters?EY(G.function.parameters):EY({type:"object",properties:{}});return[G.function.name,b$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function R54($){if(!$)return;return{openai:{response_format:$}}}function I54(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function l_$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function m_$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var F54=256,H54,N54,B54,O54,D54,E54,L54,z54,i_$,n_$,p_$;var t_$=O(()=>{K6();d8();MC();H54=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),N54=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),B54=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(N54).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),O54=h1.object({type:h1.literal("text")}),D54=h1.object({type:h1.literal("json_object")}),E54=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),L54=h1.union([O54,D54,E54]),z54=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(B54),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(H54).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:L54.optional(),user:h1.string().optional()});i_$=class i_$ extends Error{constructor($){super($);this.name="MessageConversionError"}};n_$=new V1;n_$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(IK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(IK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(IK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=z54.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(IK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=j54(Q.model);if(!J)return $.json(IK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(IK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(IK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=A54(Q.messages),H=Q.tools?T54(Q.tools):void 0,N=R54(Q.response_format),B=I54(),D=Math.floor(Date.now()/1000);if(Q.stream)return Z3($,async(E)=>{let L=l_$(U,F,H,Q,N,$.req.raw.signal);try{let z=dQ(L),j=!1,P=0,A="",I=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=F54)await I()}else if(S.type==="tool-call"){await I();let M=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await I(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:m_$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await I(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=l_$(U,F,H,Q,N,$.req.raw.signal),L=await xN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:m_$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(IK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(IK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(IK(Y.message,"server_error"),500)}});p_$=n_$});var o_$;var r_$=O(()=>{o_$={name:"decocms",version:"4.113.3",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","driver.js":"^1.8.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function k54(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??M54}}var a_$,M54="https://ph.studio.decocms.com",s_$;var e_$=O(()=>{d8();Ab0();tN();S7();J8();g01();r_$();a_$=new V1;a_$.get("/",($)=>{let Z={version:o_$.version,theme:sf1(),...eO().logo&&{logo:eO().logo},...mQ()&&{internalUrl:L00()},...B1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!B1().firecrawlApiKey,auth:w2$(),posthog:k54(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!mQ()&&B1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});s_$=a_$});function Hz0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function Zf$($){return(Hz0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function Gf$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(Hz0($))}&sz=${Z}`}function $f$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function Xf$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?$f$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):$f$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as S54}from"path";function hU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function V54($){let Z=Hz0($),G=Zf$(Z),X=Gf$(Z,128),Q=`${(B1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=Xf$({brand:G,domain:Z});return[`<title>${hU(J)}</title>`,`<meta name="description" content="${hU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${hU(J)}" />`,`<meta property="og:description" content="${hU(W)}" />`,`<meta property="og:url" content="${hU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${hU(J)}" />`,`<meta name="twitter:description" content="${hU(W)}" />`,`<link rel="canonical" href="${hU(Q)}" />`,`<link rel="icon" href="${hU(X)}" sizes="any" />`].join(`
     `)}function C54($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function Yf$($){let Z=new V1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?S54($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=V54(X);return G.html(C54(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var Qf$=O(()=>{d8();J8()});import{z as Q1}from"zod";var fC,_54,f54,b54,x54,Jf$;var Wf$=O(()=>{fC=Q1.enum(["good","bad","neutral"]),_54=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:fC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),f54=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(_54)),b54={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},x54=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:fC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:fC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:fC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:fC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(f54).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:fC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:fC.optional()})).min(1)})]),Jf$=Q1.object({...b54,template:x54})});function Kf$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=Jf$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var wf$=O(()=>{Wf$()});function kr($,Z){return fetch(`${BD({})}${$}`,Z)}async function v54($,Z,G){let X=new URLSearchParams;if(Z)X.set("pw",Z);if(G)X.set("lang",G);let Y=X.toString()?`?${X.toString()}`:"",Q=await kr(`/api/v2/public/diagnostics/${encodeURIComponent($)}${Y}`,{headers:{Accept:"application/json"}});if(Q.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!Q.ok)throw Error(`report read HTTP ${Q.status}`);let J=await Q.json(),{deck:W,drops:K}=Kf$(J);return{status:W.slides.length?"ready":"empty",deck:W,scanned_at:J.scanned_at,drops:K}}var y54,bC,Uf$;var Ff$=O(()=>{d8();RY();Lb();wf$();y54=new Set(["complete","errored","terminated","unknown"]),bC=new V1;bC.use("*",async($,Z)=>{let G=await G8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});bC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0,X=$.req.query("lang")?.trim()||void 0;try{let Y=await v54(Z,G,X);return $.header("Cache-Control","private, no-store"),$.json(Y)}catch{return $.json({error:"report read failed"},502)}});bC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await kr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${OD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});bC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await kr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${OD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:y54.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});bC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await kr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});bC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await kr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});Uf$=bC});function Hf$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var Nf$,g54,h54,Bf$;var Of$=O(()=>{d8();c3();Wy();mf();Nf$=new V1,g54=["range","if-none-match","if-modified-since"],h54=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];Nf$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(jg($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await zp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&u3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return Hf$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of g54){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of h54){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),Hf$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});Bf$=Nf$});var Sr=_((xC)=>{var u54=xC&&xC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),c54=xC&&xC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))u54(Z,$,G)};Object.defineProperty(xC,"__esModule",{value:!0});c54(rX(),xC)});var Lf$=_((Df$)=>{Object.defineProperty(Df$,"__esModule",{value:!0});Df$.version=void 0;Df$.version="3.4.0"});var Pf$=_((qK)=>{var d54=qK&&qK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(qK,"__esModule",{value:!0});qK.NodeTransport=qK.VERSION=void 0;qK.nodeResolveHost=t54;var i4=Sr(),l54=c0("net"),h81=c0("tls"),m54=c0("path"),zf$=c0("fs"),i54=d54(c0("dns")),n54=Lf$();qK.VERSION=n54.version;var p54="nats.js";class jf${socket;version;lang;yields=[];signal=(0,i4.deferred)();closedNotification=(0,i4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=p54,this.version=qK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,i4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw i4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new i4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new i4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,i4.deferred)(),G,X=(0,l54.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,i4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=i4.DataBuffer.concat(...this.yields),Y=(0,i4.extractProtocolMessage)(X);if(Y!=="")try{let Q=i4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,i4.deferred)();try{if($=(0,m54.resolve)($),!(0,zf$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,zf$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,i4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,i4.deferred)();try{let Y=(0,h81.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,i4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,i4.deferred)();try{let X=(0,h81.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,i4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,i4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof h81.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,i4.render)($)}`);let Z=(0,i4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}qK.NodeTransport=jf$;function t54($){let Z=(0,i4.deferred)();return i54.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var qf$=_((If$)=>{Object.defineProperty(If$,"__esModule",{value:!0});If$.connect=r54;var Af$=Pf$(),Tf$=Sr(),Rf$=Sr();function r54($={}){if((0,Rf$.hasWsProtocol)($))return Promise.reject(Rf$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,Tf$.setTransportFactory)({factory:()=>{return new Af$.NodeTransport},dnsResolveFn:Af$.nodeResolveHost}),Tf$.NatsConnectionImpl.connect($)}});var Mf$=_((uU)=>{var a54=uU&&uU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),s54=uU&&uU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))a54(Z,$,G)};Object.defineProperty(uU,"__esModule",{value:!0});uU.connect=void 0;var e54=qf$();Object.defineProperty(uU,"connect",{enumerable:!0,get:function(){return e54.connect}});s54(Sr(),uU)});function Cf$($){let Z=$?.connectFn??X94,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:G94,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=mX(Z94,$94,B-1,2,0.5);await O8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?kf$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=Vf$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function X94($){return Sf$.connect($)}var kf$,Sf$,Vf$,$94=100,Z94=3000,G94=3000;var _f$=O(()=>{d5();kf$=k(Fh(),1),Sf$=k(Mf$(),1),Vf$=k(mB(),1)});function u81($,Z){return`${$}.${Z}`}class c81{cache;constructor($){this.cache=Jg({ttlMs:$?.ttlMs??Y94,maxSize:$?.maxSize??Q94})}async get($,Z){return this.cache.get(u81($,Z))??null}async set($,Z,G){this.cache.set(u81($,Z),G)}async invalidate($,Z){this.cache.delete(u81($,Z))}teardown(){this.cache.clear()}}var Y94=600000,Q94=5000;var ff$=()=>{};function Nz0($,Z){return`${$}:${Z}`}function d81($){let Z=Jg({ttlMs:$?.ttlMs??J94,maxSize:$?.maxSize??W94}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(bf$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(Nz0(K,w))},set(K,w,U){Z.set(Nz0(K,w),U)},invalidate(K,w){Z.delete(Nz0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(bf$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(Nz0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var bf$="studio.ai-provider-keys.invalidate",J94=30000,W94=5000;var xf$=()=>{};class l81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var vf$=($)=>{let Z;return()=>Z??=$()},m81,i81;var yf$=O(()=>{H5();m81=vf$(()=>D8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),i81=vf$(()=>D8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function B94(){return{name:HU,subjects:[`${in0}.>`],storage:yJ.StorageType.File,max_age:U94,max_bytes:H94,max_msgs_per_subject:N94,discard:yJ.DiscardPolicy.Old,retention:yJ.RetentionPolicy.Limits,duplicate_window:F94,num_replicas:1}}class uf${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function gf$($){let Z=hf$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function L94($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,w94().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class n81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await yJ.jetstreamManager($),G=B94();try{await Z.streams.info(HU),await Z.streams.update(HU,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(HU),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=L94(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=qQ$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=pn0(w,{runId:Z}),H=performance.now()-U;if(m81().record(H),i81().add(1,{"org.id":X??"unknown"}),E94?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?gf$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),D94)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=pn0(Z,{runId:$,dedup:G});if(m81().record(performance.now()-Y),i81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:gf$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=IQ$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?yJ.DeliverPolicy.New:yJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=yN($),W;try{W=await(await X.consumers.get(HU,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=HN0({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(wN0()).pipeThrough(UN0()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(HU,{filter:yN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var yJ,hf$,K94=($)=>{let Z;return()=>Z??=$()},w94,U94=86400000000000,F94=120000000000,H94=4294967296,N94=500000,O94,D94,E94;var cf$=O(()=>{rn0();NN0();tn0();H5();yf$();yJ=k(mB(),1),hf$=k(Fh(),1),w94=K94(()=>D8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));O94=process.env.STREAM_ENCODE_TRACE==="1",D94=process.env.DECOPILOT_STREAM_TRACE==="1";E94=O94?new uf$:null});import{z as X8}from"zod";var df$,lf$,MK,p81,mf$,if$,nf$,pf$,z94,tf$,rf$,of$,af$,sf$,j94,ef$,aXZ,P94,A94=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},$b$=($)=>{return new TextEncoder().encode(JSON.stringify($))},Zb$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?P94[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${A94(Y.error)}`);return Y.data};var Gb$=O(()=>{df$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),lf$=X8.array(X8.tuple([X8.string(),X8.string()])),MK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),p81=X8.string().min(1),mf$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:MK,method:X8.string().min(1),url:X8.string().min(1),headers:lf$,replySubject:p81,bodySubject:p81.optional(),abortSubject:p81,deadlineUnixMs:X8.number().int().nonnegative().optional()}),if$=X8.object({type:X8.literal("request.chunk"),requestId:MK,seq:X8.number().int().nonnegative(),data:df$}),nf$=X8.object({type:X8.literal("request.end"),requestId:MK,seq:X8.number().int().nonnegative()}),pf$=X8.object({type:X8.literal("request.error"),requestId:MK,code:X8.string().min(1),message:X8.string()}),z94=X8.union([if$,nf$,pf$]),tf$=X8.object({type:X8.literal("response.ack"),requestId:MK}),rf$=X8.object({type:X8.literal("response.start"),requestId:MK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:lf$}),of$=X8.object({type:X8.literal("response.chunk"),requestId:MK,seq:X8.number().int().nonnegative(),data:df$}),af$=X8.object({type:X8.literal("response.end"),requestId:MK,seq:X8.number().int().nonnegative()}),sf$=X8.object({type:X8.literal("response.error"),requestId:MK,code:X8.string().min(1),message:X8.string()}),j94=X8.union([tf$,rf$,of$,af$,sf$]),ef$=X8.object({type:X8.literal("abort"),requestId:MK,reason:X8.string().optional()}),aXZ=X8.union([mf$,z94,j94,ef$]),P94={"request.start":mf$,"request.chunk":if$,"request.end":nf$,"request.error":pf$,"response.ack":tf$,"response.start":rf$,"response.chunk":of$,"response.end":af$,"response.error":sf$,abort:ef$}});var T94=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},R94=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},I94=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},q94=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},Xb$=($)=>{return T94(btoa(I94($)))},Yb$=($)=>{return q94(atob(R94($)))},M94;var Qb$=O(()=>{M94=class M94{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*y94($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class i94{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var k94=30000,S94=1000,V94=65536,X3,C94=($)=>{return"connection"in $},_94=($)=>{let Z=C94($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??k94,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??S94,maxChunkBytes:Z.maxChunkBytes??V94,diagnostics:Z.diagnostics}},Jb$=($)=>{return Array.from($.entries())},f94=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},b94=($,Z,G)=>{if(f94(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return Jb$(G.headers);return Jb$(G.headers)},Wb$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},x94=()=>{return crypto.randomUUID().replaceAll("-","")},v94=($)=>{try{$?.unsubscribe()}catch{}},g94=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},h94=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},qB=($,Z,G)=>{$.publish(Z,$b$(G))},u94=($)=>{return $.type.startsWith("response.")},t81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},c94=($)=>{if($==="idle")return new X3("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new X3("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},Kb$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(c94(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=Zb$(W.value.data);if(!u94(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},d94=async($)=>{let Z=!1;while(!0){let G=await Kb$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new X3("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new X3(G.value.code,G.value.message);throw new X3("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},l94=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){qB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of y94(J,$.maxChunkBytes)){if(X)return;qB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:Xb$(W)}),G++}}}catch(Q){if(X)return;qB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},m94=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await Kb$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new X3("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(Yb$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new X3(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){qB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},MB=($)=>{let Z=_94($);return g94(Z.maxChunkBytes),async(G,X)=>{let Y=L_$(G),Q=new Request(G,X),J=x94(),W=z_$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new X3("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,v94(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new X3("tunnel_aborted",t81(Q.signal));qB(Z.connection,W.abort,{type:"abort",requestId:J,reason:t81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new X3("tunnel_aborted",t81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new X3("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);qB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:b94(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};qB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)qB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?l94({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await d94({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(h94(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:Wb$(P.headers)});return new Response(m94({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:Wb$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var wb$=O(()=>{Gb$();Qb$();Kz0();X3=class X3 extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var Bz0=O(()=>{wb$()});function Ub$($){let Z=$.createFetch??n94,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return r81;let Q=xJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return r81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return r81}}}var r81,n94=($,Z)=>MB({connection:$,firstFrameTimeoutMs:Z});var Fb$=O(()=>{Bz0();qr();r81={online:!1,capabilities:[]}});async function*p94($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function Hb$($){let Z=$.createFetch??((G)=>MB({connection:G,idleTimeoutMs:t94}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=xJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*p94(U)}}var t94=45000;var Nb$=O(()=>{Bz0();qr()});import{z as gJ}from"zod";function Bb$($){return JSON.stringify($)}var qYZ;var Ob$=O(()=>{qYZ=gJ.discriminatedUnion("type",[gJ.object({type:gJ.literal("cancel"),runId:gJ.string()}),gJ.object({type:gJ.literal("cancel_req"),reqId:gJ.string()}),gJ.object({type:gJ.literal("keep_alive")}),gJ.object({type:gJ.literal("shutdown")})])});function Db$($){let Z=$.createFetch??((G)=>MB({connection:G,idleTimeoutMs:r94}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=xJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function Eb$($){let Z=$.createFetch??MB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=xJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:Bb$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var r94=45000;var Lb$=O(()=>{Bz0();Ob$();qr()});function Oz0($,Z,G,X){if(!X)return!1;return $.emit(Z,h3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var zb$=O(()=>{L8()});class o81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as o94,rm as Dz0}from"fs/promises";import{join as Ez0}from"path";async function Lz0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-a94),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await vC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await jb$($,Y,Z);else if(!Y.startsWith(".")){let Q=Ez0($,Y),J=await vC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await jb$(Q,K,Z)}if((await vC(Q)).length===0)await Dz0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function jb$($,Z,G){let X=0,Y=Ez0($,Z),Q=await vC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=Ez0(Y,W),w=await vC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=Ez0(K,F);await Dz0(N,{recursive:!0,force:!0}),X++}}if((await vC(K)).length===0)await Dz0(K,{recursive:!0,force:!0})}if((await vC(Y)).length===0)await Dz0(Y,{recursive:!0,force:!0});return X}async function vC($){try{return(await o94($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var a94=30;var a81=()=>{};import{DBOS as s81,SchedulerMode as s94}from"@dbos-inc/dbos-sdk";async function $Z4(){let $=[J3(),yC(),VK()],Z=0;for(let G of $)try{Z+=await Lz0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function ZZ4($,Z){await s81.runStep(()=>$Z4(),{name:"monitoringRetention"})}function Ab$(){if(Pb$)return;Pb$=!0;let $=s81.registerWorkflow(ZZ4,{name:"monitoringRetentionWorkflow"});s81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:e94,mode:s94.ExactlyOncePerIntervalWhenActive})}var e94="23 4 * * *",Pb$=!1;var Tb$=O(()=>{iX();a81()});function Rb$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await QN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await pc0($.db,Z,X.role);return Y.boundAuth=nc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new cD(G,void 0,Y.boundAuth,X.role,"self"),U50(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var Ib$=O(()=>{dD();yi()});function GZ4(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function YZ4(){for(let $ of XZ4)$()}function qb$($){let Z=[...e81.logs,$];e81={...e81,logs:Z.length>500?Z.slice(-500):Z},YZ4()}function $61(){return QZ4}var e81,XZ4,QZ4=!1;var Z61=O(()=>{e81=GZ4(),XZ4=new Set});import{EventEmitter as JZ4}from"events";var G61;var Mb$=O(()=>{Z61();G61=new JZ4;G61.on("request",($)=>{qb$($)})});function kb$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=ug(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>ug(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${e4.tool}${N}${e4.dim}(${E})${e4.reset}`}else if(H.method)Q=`${e4.dim}${ug(H.method)}${e4.reset}`}}catch{}}let W=ug(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${e4.mcp}${ug(U.slice(0,12))}\u2026${e4.reset}`}else if(Y==="/mcp")W=`${e4.mcp}/mcp${e4.reset}`;else if(Y==="/mcp/registry")W=`${e4.mcp}/mcp/registry${e4.reset}`;let K=KZ4(X),w=J?"\u25C0":"\u2190";if(!$61())console.log(`${e4.dim}${w}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=WZ4(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!$61())console.log(`${e4.dim}${B}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${e4.reset} ${e4.duration}${N}${e4.reset}`);G61.emit("request",{method:X,path:ug(Y),status:F,duration:U,timestamp:new Date})}}}var e4,WZ4=($)=>{if($>=500)return e4.serverError;if($>=400)return e4.clientError;if($>=300)return e4.redirect;return e4.ok},KZ4=($)=>{return e4[$]||e4.reset},ug=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var Sb$=O(()=>{Z61();Mb$();e4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as fb$}from"crypto";import{mkdir as wZ4,readdir as UZ4,rm as Vb$,stat as bb$}from"fs/promises";import{join as Y61,relative as FZ4}from"path";import{z as T$}from"zod";function vb$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return Y61(HZ4,Z)}function yb$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function X61($,Z){let G=vb$($),X=yb$(Z);return Y61(G,X)}function NZ4($,Z,G,X){let Y=B1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return fb$("sha256",Y).update(Q).digest("hex")}function _b$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=NZ4(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${yb$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function gb$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${fb$("md5","etag").update(X).digest("hex")}"`}async function hb$($,Z,G,X,Y){try{let Q=await UZ4($,{withFileTypes:!0});for(let J of Q){let W=Y61($,J.name),w=FZ4(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await hb$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await bb$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:gb$(W,U.mtime,U.size)})}catch{}}}}catch{}}function ub$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=vb$(X);await wZ4(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await hb$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=X61(X,Q.key),W=await bb$(J);return{contentType:t11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:gb$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??Cb$;return{url:_b$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??Cb$;return{url:_b$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=X61(X,Q.key);try{return await Vb$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=X61(X,K);try{await Vb$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function Q61($,Z,G){let X=ub$(Z,G),Y=new zw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:E5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new hY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),GK(Y,Q,$,"mcp:dev-assets")}async function cb$($,Z,G,X){let Q=ub$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var HZ4="./data/assets",Cb$=3600,xb$,db$;var lb$=O(()=>{J8();Tp();d8();mc();Fy();zG();qL0();xb$=new V1;xb$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return Q61($.req.raw,Z,X)});db$=xb$});var mb$={};X6(mb$,{mountDevRoutes:()=>BZ4});function BZ4($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return Q61(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await cb$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",db$);let G=new V1;G.use("*",$3({mountPath:"/api/dev-assets"})),G.route("/",IL0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var ib$=O(()=>{d8();u11();qL0();lb$()});import{sql as OZ4}from"kysely";import{randomUUID as nb$}from"crypto";import{z as DZ4}from"zod";async function LZ4($){let Z=new Date().toISOString(),G=nb$(),X=i6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:nb$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await OZ4`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function zZ4($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function jZ4($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",NC).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):tb$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?pb$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:pb$,rateLimitWindow:EZ4,rateLimitMax:tb$}}async function PZ4($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function AZ4($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function rb$($){let{db:Z,db:G}=$,X=new Lx(G),Y=new zx(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await zZ4(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await jZ4(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await PZ4(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=HT$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:DZ4.treeifyError(U.error)},400);let F=await AZ4(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await LZ4({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var pb$=!0,EZ4="hour",tb$=100;var ob$=O(()=>{I4();L8();Kg();Pg0();Ag0();Y9()});var ab$={};X6(ab$,{createPublishRequestHandler:()=>rb$,createPublicMCPHandler:()=>LT$});var sb$=O(()=>{Wg();ob$()});var am0={};X6(am0,{watchHandler:()=>Qx$,resolveCorsOrigin:()=>Yx$,isSsoExemptPath:()=>Xx$,getProxyDispatch:()=>qZ4,createApp:()=>xZ4});import{readFileSync as TZ4}from"fs";import{PrometheusSerializer as RZ4}from"@opentelemetry/exporter-prometheus";import{DBOS as cg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as VZ4,oAuthProtectedResourceMetadata as CZ4}from"better-auth/plugins";async function IZ4($){let Z=$.connect(),G;try{G=await Promise.race([Z,$x$(eb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),$x$(eb$)]),G.release(),!0}catch{return G.release(!0),!1}}function $x$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function qZ4(){if(!J61)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return J61}async function MZ4($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${Xf1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function kZ4($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}function Xx$($){return $.startsWith("/api/org-sso/")||$.startsWith("/api/auth/")||$.startsWith("/api/tools/management")||$.startsWith("/oauth-proxy/")||/^\/api\/[^/]+\/oauth-proxy\//.test($)||$.startsWith(`${h01}/`)}function Yx$($,{baseUrl:Z,requestOrigin:G}){let X;try{X=new URL($).hostname}catch{return null}if(X==="localhost"||X==="127.0.0.1")return $;let Y=Z??G;try{if(new URL(Y).origin===$)return $}catch{}return null}async function xZ4($={}){let Z=$.database??H6(),G=!1;Z9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new c81,J,W,K,w,U,F=null;if($.disableNats)J=d81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Rp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let H0=g.getReader();try{while(!0){let{done:b0}=await H0.read();if(b0)break}}catch{}finally{H0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=Cf$();let g=B1().natsCredsPath,H0;if(g)try{H0=TZ4(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(B1().natsUrls,H0?{creds:H0}:void 0);let b0=kg0()?new zv0({getJetStream:()=>F.getJetStream()}):null;b0?.init().catch(()=>{}),X=b0;let e0=new nt0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=d81({getConnection:()=>F.getConnection()}),W=new l81({getConnection:()=>F.getConnection()}),K=new n81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=Ub$({getConnection:()=>F.getConnection()}),U=Db$({getConnection:()=>F.getConnection()});let u0=Eb$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,L6)=>{u0.publishControlFrame(e1,L6).catch((Q4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",Q4)})},stop:()=>T1.stop()},lI$(F),F.onReady(()=>{b0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Gn1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(dg)await dg();jv0(X),pt0(Y);let N={storage:new Ix(Z.db),sseHub:Z9},B=new Qp0(N),D=new wm(Z.db),E=new o81(D);E.start(),W.start((g)=>{SN0(g),B.execute({type:"CANCEL",taskId:g}).catch((H0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",H0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),dg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Xn1(),Y.teardown(),jv0(null),pt0(null)};let L=new V1;if(L.use("*",Db0({enabled:(g)=>tf(g,"debug")==="1"})),L.use("*",gz0),L.use("/*",df1({origin:(g,H0)=>Yx$(g,{baseUrl:B1().baseUrl,requestOrigin:new URL(H0.req.url).origin}),credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,H0)=>{if(await H0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!B1().noTui)L.use("*",kb$());L.use("*",async(g,H0)=>{if(await H0(),ng(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let H0={};if(H0.postgres={status:await IZ4(Z.pool)?"up":"down"},F)H0.nats=F.isConnected()?{status:"up"}:{status:"down"};else H0.nats={status:"down"};let b0=H0.postgres.status==="up",e0=b0?200:503;return g.json({status:b0?"ready":"not_ready",services:H0},e0)}),L.get(xZ.METRICS,async(g)=>{try{let H0=await dz0.collect(),b0=SZ4.serialize(H0.resourceMetrics);return g.text(b0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(H0){return console.error("Failed to collect metrics:",H0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let H0=g.req.param("queueName");if(!_Z4.has(H0))return g.json({error:`Unknown queue: ${H0}`},404);let b0=await cg.listQueuedWorkflows({queueName:H0,status:"ENQUEUED"});return g.json({queue_length:b0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:H0,pending:b0,max:e0}=Z3$();return g.json({pending:b0,active:H0,max:e0})}),L.route("/api/config",s_$),L.route("/api/_reports",Uf$),L.route("/report",Yf$($.clientDir)),L.route("/api/auth/custom",U2$),L.route("/api/auth/desktop",H2$),L.all("/api/auth/admin/*",D2$),L.all("/api/auth/*",async(g)=>{return await G8.handler(g.req.raw)});let z=vs1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",EC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",EC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",gi),L.route("/",us1()),L.use("/oauth-proxy/:connectionId/*",EC),L.all("/oauth-proxy/:connectionId/*",Zx$);let j=async(g)=>{let b0=await fZ4()(g.req.raw),e0=await b0.json();return Response.json(e0,b0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",EC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let b0=await bZ4()(g.req.raw),e0=await b0.json();return Response.json(e0,b0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=dI$({ttlMs:120000}),I=await Ps1({db:Z.db,auth:G8,encryption:{key:B1().encryptionKey},observability:{tracer:dU,meter:D8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(g,H0)=>W.publishControlFrame(g,H0)});QN.set(I);let S=new qw(B1().encryptionKey);r21({db:Z.db,baseUrl:M3()});let M=A60(Z.db),C=new $m(Z.db),l=Rb$({db:Z.db});ct0({storage:M,studioContextFactory:l}),zp0({studioContextFactory:l,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9},prepareLinkWorkFn:Kk$,workPublisher:U}),Bp0({dispatchRunFn:Jk$,studioContextFactory:l,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9}});let b=new Ix(Z.db),v=new iD(Z.db);gQ$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await Gx$.jetstreamManager(g):null},messageParts:b.messageParts(),resolveRun:async(g)=>{let H0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return H0?{orgId:H0.organization_id,createdBy:H0.created_by,version:H0.message_storage_version??1,status:H0.status,runFenceToken:H0.run_fence_token,title:H0.title??null}:null},completeRunIfNotCompleted:async(g,H0)=>{let b0=await b.completeRunIfNotCompleted(g,H0);if(Oz0(Z9,H0,g,b0),b0)await Fp0(v,g,H0);return b0},markRunRequiresAction:async(g,H0)=>{let b0=await b.requiresActionIfInProgress(g,H0);return Oz0(Z9,H0,g,b0),b0},markRunFailed:async(g,H0,b0,e0)=>{let u0=await b.markRunFailed(g,H0,b0,e0);if(Oz0(Z9,H0,g,u0),u0)await Fp0(v,g,H0);return u0},clearSynthesizedError:async(g,H0)=>{await b.messageParts().replaceMessageParts(g,gN(g,H0),[])},persistTitle:(g,H0,b0)=>b.update(g,H0,{title:b0}),onTitleUpdated:async({runId:g,orgId:H0,title:b0})=>{let e0=await b.get(g,H0).catch(()=>null);Z9.emit(H0,h3(g,e0?.status??"in_progress",{title:b0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:H0})=>{await b.bumpProgress(g,H0)},recordCompleted:async({runId:g,orgId:H0,distinctId:b0,usage:e0})=>{i1.capture({distinctId:b0,event:"chat_message_completed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:H0,distinctId:b0,reason:e0,kind:u0})=>{i1.capture({distinctId:b0,event:"chat_message_failed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",error_category:u0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),ZK$({studioContextFactory:l,systemDatabaseUrl:Hv1(B1().databaseUrl,B1().databasePgSsl),streamBuffer:K}),Ab$(),o21();let s=async(g,H0,b0)=>{let e0=await M.findById(g,H0);if(!e0)throw Error("Automation not found");return mt0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},n=new Ag(M,({automation:g,trigger:H0,contextMessages:b0,idempotencyKey:e0})=>Ap({automationId:g.id,organizationId:g.organization_id,triggerId:H0.id,contextMessages:b0},{idempotencyKey:e0})),W0=[J3(),yC(),VK()];for(let g of W0)Lz0(g).then(()=>{}).catch((H0)=>console.error("[monitoring] Retention cleanup failed:",H0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,H0)=>{if(vz0(g.req.path))return H0();let b0={measure:async(u0,T1)=>{NQ(g,u0);try{return await T1()}finally{WY(g,u0)}}},e0=await QN.create(g.req.raw,{timings:b0});e0.automationRunner=s,g.set("studioContext",e0);try{await H0()}finally{let u0=e0.pendingRevalidations;if(u0.length>0)Promise.race([Promise.allSettled(u0),O8(30000)]).catch((e1)=>console.error("[studio] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",LC),L.use("/api/:org/v1/*",LC),L.use("/api/:org/files/*",LC),L.use("*",async(g,H0)=>{if(Xx$(g.req.path))return H0();let b0=g.get("studioContext");if(!b0?.organization?.id||!b0?.auth?.user?.id)return H0();if(!(await b0.storage.orgSsoConfig.getByOrgId(b0.organization.id))?.enforced)return H0();if(!await b0.storage.orgSsoSessions.isValid(b0.auth.user.id,b0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return H0()});let J0=new V1;J0.use("*",$3({mountPath:"/api/org-sso"})),J0.route("/",pE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:Lb0,grouped:sO()})}),L.use("/mcp/*",async(g,H0)=>{NQ(g,"mcp");try{return await H0()}finally{WY(g,"mcp")}});let X0=async(g,H0)=>{let b0=g.var.studioContext;if(!b0.auth.user?.id&&!b0.auth.apiKey?.id){let e0=new URL(g.req.url),u0=g.req.header("x-forwarded-proto")?.split(",")[0]?.trim(),T1=u0?`${u0}://${e0.host}`:e0.origin;return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${T1}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await H0()};if(L.use("/mcp/:connectionId?",X0),L.use("/mcp/gateway/:virtualMcpId?",X0),L.use("/mcp/virtual-mcp/:virtualMcpId?",X0),L.use("/mcp/self",X0),u3()){let{mountDevRoutes:g}=(ib$(),Rz0(mb$));g(L,X0)}let a=new V1;a.use("*",$3({mountPath:"/mcp"})),a.route("/",MB0()),L.route("/mcp",a);let E0=new V1;E0.use("*",$3({mountPath:"/mcp/self"})),E0.route("/",Zz0()),L.route("/mcp/self",E0);let U0=new V1;U0.use("*",$3({mountPath:"/mcp"})),U0.route("/",VB0()),L.route("/mcp",U0),L.use("/api/:org/models/*",async(g,H0)=>{NQ(g,"llm_models");try{return await H0()}finally{WY(g,"llm_models")}});let v0=g11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",v0),F!=null)J61=Hb$({getConnection:()=>F?.getConnection()??null});L.route("/api",b_$()),L.get("/api/links/me",async(g)=>{try{let H0=g.req.header("authorization")??"",b0=/^Bearer\s+(.+)$/i.exec(H0),e0=null;if(b0){let T1=(b0[1]??"").trim();e0=await mE0(T1,G8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let u0=w?await w(e0):{online:!1,capabilities:[]};if(!u0.online)return g.json(null);return g.json({hostname:u0.hostname,cliVersion:u0.cliVersion})}catch(H0){return console.error("[links/me] presence probe failed; reporting offline:",H0 instanceof Error?H0.message:String(H0)),g.json(null)}}),L.use("/api/:org/files/*",LC),L.route("/api",Bf$);let d0=new V1;d0.use("*",$3({mountPath:"/api"})),d0.route("/",Gz0()),L.route("/api",d0),L.route("/api",p_$);let i0=new V1;i0.use("*",$3({mountPath:"/api"})),i0.route("/",Xz0({tokenStorage:C,automationEventDispatcher:n})),L.route("/api",i0);let n0=new Gm(Z.db),F0=new V1;F0.use("*",$3({mountPath:"/api"})),F0.route("/",AL0()),L.route("/api",F0),L.route("/api/deco-sites",Vk$()),L.route("/api/deco-apps",c_$());let C0=new V1;C0.use("*",$3({mountPath:"/api/deco-sites"})),C0.route("/",RL0()),L.route("/api/deco-sites",C0);let R0=new V1;R0.use("*",$3({mountPath:"/api/vm-events"})),R0.route("/",h_$()),L.route("/api/vm-events",R0);let{createPublishRequestHandler:B0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (sb$(),ab$)),G0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=B0(G0),p=Q0(G0);L.use("/org/:orgRef/registry/publish-request",EC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",EC),L.all("/org/:orgSlug/registry/*",p),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",p),L.route(h01,E2$());let $0=D_$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:Z9,cancelBroadcast:W,tokenStorage:C,automationEventDispatcher:n,mountDevAssets:u3(),mcpAuth:X0,oauthProxyHandler:Zx$,watchHandler:Qx$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",$0),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(Ek$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([Z9.stop(),dg?Promise.resolve(dg()).finally(()=>{dg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await tY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await Bv1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await cg.registerQueue(pY,{partitionQueue:!0,concurrency:gt0,minPollingIntervalMs:ht0}),await cg.registerQueue(Q3,{partitionQueue:!0,concurrency:Lp0}),await cg.registerQueue(SK,{partitionQueue:!0,concurrency:Np0}),await cg.registerQueue(cU,{partitionQueue:!0,concurrency:$K$}),await d11(M),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>cg.deleteQueue(g))),await ut0(Z.pool),ch1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),a21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var Gx$,eb$=5000,J61=null,dg=null,Zx$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await QN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Wv(J.connection_url),K,w=new URL(J.connection_url),F=(typeof J.metadata?.oauthResource==="string"&&J.metadata.oauthResource.length>0?J.metadata.oauthResource:void 0)??J.connection_url;if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let H=await hi(K);if(!H.ok)return $.json({error:"Failed to get auth server metadata"},502);let N=await H.json(),B;if(X==="authorize")B=N.authorization_endpoint;else if(X==="token")B=N.token_endpoint;else if(X==="register")B=N.registration_endpoint;if(!B)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let D=new URL(B),E=new URL($.req.url);if(D.search=E.search,X==="authorize"){let l=D.searchParams.get("redirect_uri");if(l){let b=B1().baseUrl??E.origin;try{let v=new URL(l),s=new URL(b);if(!(v.origin===s.origin||v.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}D.searchParams.set("redirect_uri",l)}if(D.searchParams.has("resource"))D.searchParams.set("resource",F);if(Yf1(J.connection_url))try{let b=await MZ4(Y,J.organization_id),v=kZ4(b);for(let[s,n]of v)D.searchParams.set(s,n)}catch(b){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",b)}return $.redirect(D.toString(),302)}let L={Accept:$.req.header("Accept")||"application/json"},z=$.req.header("Content-Type");if(z)L["Content-Type"]=z;let j=$.req.header("Authorization");if(j)L.Authorization=j;let P,A=null,I=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&z?.includes("application/x-www-form-urlencoded")){if(j?.toLowerCase().startsWith("basic "))try{let n=atob(j.slice(6).trim()),W0=n.indexOf(":");if(W0!==-1){let D0=decodeURIComponent(n.slice(0,W0)),J0=decodeURIComponent(n.slice(W0+1));A=D0||null,I=J0||null}}catch{}let l=await $.req.formData();if(l.has("resource"))l.set("resource",F);let b=l.get("client_id"),v=l.get("client_secret");if(typeof b==="string"&&b)A=b;if(typeof v==="string"&&v)I=v;let s=new URLSearchParams;for(let[n,W0]of l.entries())s.append(n,W0.toString());P=s.toString()}else if(X==="register"&&z?.toLowerCase().includes("application/json")){let l=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),b=await $.req.text(),v={};try{v=b?JSON.parse(b):{}}catch{P=b}let s=typeof v==="object"&&v!==null&&!Array.isArray(v);if(P===void 0&&!s)P=b;if(P===void 0){let n=v,W0=n.metadata&&typeof n.metadata==="object"?n.metadata:{};n.metadata={...W0,organization_id:J.organization_id,...l?.slug?{organization_slug:l.slug}:{},...l?.name?{organization_name:l.name}:{}},P=JSON.stringify(n),L["Content-Type"]="application/json"}}else P=$.req.raw.body??void 0;let S=await fetch(D.toString(),{method:$.req.method,headers:L,body:P,duplex:"half",redirect:"manual"}),M=new Headers,C=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[l,b]of S.headers.entries())if(!C.includes(l.toLowerCase()))M.set(l,b);if(X==="token"&&S.ok){let l=await S.text();try{let b=JSON.parse(l);if(typeof b.access_token==="string"&&b.access_token){let v=typeof b.expires_in==="number"?new Date(Date.now()+b.expires_in*1000):null,s=null;try{s=await Kv(J.connection_url)??B}catch{s=B}let n={connectionId:Z,accessToken:b.access_token,refreshToken:typeof b.refresh_token==="string"?b.refresh_token:null,scope:typeof b.scope==="string"?b.scope:null,expiresAt:v,clientId:A,clientSecret:I,tokenEndpoint:s};await new C5(Y.db,Y.vault).upsert(n)}}catch(b){console.error("[oauth-proxy] failed to persist downstream token:",b)}return new Response(l,{status:S.status,statusText:S.statusText,headers:M})}return new Response(S.body,{status:S.status,statusText:S.statusText,headers:M})},Qx$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return Z3($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!Z9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{Z9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),Z9.remove(X,J),U()})})})},SZ4,_Z4,fZ4=()=>CZ4(G8),bZ4=()=>VZ4(G8);var sm0=O(()=>{d5();J8();s21();S7();mf();L8();d8();z$0();lf1();Eb0();RY();yi();C01();DQ();H5();I4();g01();N2$();L2$();l01();Ok$();h11();UJ();F50();u11();Lk$();c11();E_$();x_$();u_$();n11();d_$();kB0();ui();t_$();CB0();D81();e_$();Qf$();Ff$();Of$();O81();N81();ur();Ad();_f$();UY();d60();Qm();rt0();ff$();xf$();cf$();Fb$();Nb$();Lb$();Jp0();zb$();cg0();o60();NU();ng0();Tb$();B80();a81();iX();l11();rv();Up0();Xp0();B80();b11();Fg0();Hg0();Ib$();rf();Sb$();MC();C01();Ky();VN0();Gx$=k(mB(),1);SZ4=new RZ4,_Z4=new Set([pY,Q3,SK,cU])});var wx$={};X6(wx$,{resolveClientDir:()=>dZ4,resolveAssetPathWithTraversalCheck:()=>Kx$,isPathWithinDirectory:()=>Wx$,createAssetHandler:()=>lZ4});import{resolve as Vr,dirname as vZ4,join as yZ4,extname as gZ4,basename as hZ4,sep as Jx$}from"path";function uZ4($,Z){if($===Z||hZ4($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${Jx$}assets${Jx$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function Wx$($,Z){let G=Vr(Z),X=Vr($);return X===G||X.startsWith(G+"/")}function Kx$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Vr(Z,G);if(!Wx$(X,Z))return null;return X}function dZ4($,Z="../client"){let G=new URL($),X=vZ4(G.pathname);return Vr(X,Z)}function lZ4($={}){let{env:Z="production",clientDir:G=cZ4,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=Kx$({requestPath:W,clientDir:G});if(!K)return null;let w=yZ4(K,"index.html"),U=Vr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(gZ4(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:uZ4(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var cZ4="./dist/client";var Ux$=()=>{};var Fx$={};X6(Fx$,{tryUpgradePreviewWs:()=>oZ4,tryHandlePreviewHttp:()=>rZ4,previewWebSocketHandler:()=>aZ4,parsePreviewBaseDomain:()=>tZ4,isPreviewWsData:()=>zz0,extractHandleFromHost:()=>W61});function nZ4($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function pZ4(){return new Response(iZ4,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function tZ4($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function W61($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function rZ4($,Z){let G=W61($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return _r(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(YV)&&nZ4($))return pZ4();return Y.headers.delete(YV),Y}function _r($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function zz0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function oZ4($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=W61($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return _r(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return _r(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return _r(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return _r(426,"upgrade failed");return}function Cr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var mZ4=256,iZ4='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',aZ4;var Hx$=O(()=>{tm0();aZ4={open($){let Z=$.data;if(!zz0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Cr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Cr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Cr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!zz0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=mZ4){Cr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!zz0(Z))return;Cr($,Z,1000,"")}}});var Dx$={};X6(Dx$,{printBanner:()=>eZ4,bannerLines:()=>Ox$,BANNER_LINES:()=>Nx$,BANNER_GRADIENT:()=>Bx$});function sZ4($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Ox$($){let Z=Nx$.map((G,X)=>{let[Y,Q,J]=sZ4(Bx$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function eZ4($){console.log("");for(let Z of Ox$($))console.log(Z);console.log("")}var Nx$,Bx$;var Ex$=O(()=>{Nx$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Bx$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var zx$={};X6(zx$,{bootstrapDevLinkSession:()=>K74});import{existsSync as $74}from"fs";import{chmod as Z74,mkdir as G74,rename as X74,writeFile as Y74}from"fs/promises";import{dirname as Q74,join as Lx$}from"path";function J74($){return Lx$($,"dev-link")}function W74($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Lx$(J74($),"session.json")}async function K74($,Z){let G=W74($),X=H6().db,Y=mQ()?await Lp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if($74(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await G8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await G8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await G74(Q74(G),{recursive:!0});let W=`${G}.tmp`;return await Y74(W,JSON.stringify(J,null,2),{mode:384}),await Z74(W,384),await X74(W,G),{path:G,userSub:Y.id}}var jx$=O(()=>{DQ();RY();tN()});d5();var L61="4";function z61($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:L61,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}J8();Mz0();H5();function fv$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function nz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function $41(){let $=fv$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:nz0($,"--cpu-prof-dir")??process.cwd(),name:nz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(nz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}rz0();var lr;function w41(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=CB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),lr=setInterval(()=>void Z().catch(()=>{}),$),lr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(lr)clearInterval(lr)}}import*as vv$ from"bun:jsc";var{startSamplingProfiler:yv$,samplingProfilerStackTraces:gv$}=vv$;function U41(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{yv$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=gv$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function F41(){$41();let $=[w41(),K41(),U41()];return()=>{for(let Z of $)Z()}}import{existsSync as D74}from"fs";var lX=B1();s61();var{DBOS:fr,DBOSClient:w74}=await import("@dbos-inc/dbos-sdk");function Ix$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var U74=[pY,Q3,SK,cU],F74=lX.dispatchRole==="worker"?U74:lX.dispatchRole==="api"?[]:void 0;fr.setConfig(z61({systemDatabaseUrl:Ix$(lX.databaseUrl,lX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:lX.podName,listenQueues:F74}));var{createApp:H74}=await Promise.resolve().then(() => (sm0(),am0)),{isServerPath:N74}=await Promise.resolve().then(() => (ur(),x61)),{createAssetHandler:B74,resolveClientDir:qx$}=await Promise.resolve().then(() => (Ux$(),wx$)),O74=lX.port,Px$=qx$(import.meta.url,"../client"),Mx$=D74(Px$)?Px$:qx$(import.meta.url,"../dist/client"),E74=B74({clientDir:Mx$,isServerPath:N74}),L74={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function z74($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(L74))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:j74,tryHandlePreviewHttp:P74,tryUpgradePreviewWs:A74,previewWebSocketHandler:K61,isPreviewWsData:w61}=await Promise.resolve().then(() => (Hx$(),Fx$)),{getOrInitSharedRunner:T74}=await Promise.resolve().then(() => (fv(),wZ$)),kx$=j74(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Ax$={baseDomain:kx$??"",getRunner:T74},jz0=await H74({clientDir:Mx$}),U61=process.env.DBOS_CONDUCTOR_KEY?.trim(),Tx$=process.env.DBOS_CONDUCTOR_URL?.trim();await fr.launch({...U61?{conductorKey:U61}:{},...U61&&Tx$?{conductorURL:Tx$}:{}});console.log(`[dbos] application version: ${fr.applicationVersion}`);var F61=5,H61=0;await Y3(async()=>{H61++;try{return await jz0.initDbos()}catch($){let Z=H61>=F61?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${H61}/${F61} failed, ${Z}`,$),$}},{maxAttempts:F61,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!lX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Ex$(),Dx$));console.log("");for(let Z of $())console.log(Z)}var R74=Bun.serve({idleTimeout:0,port:O74,hostname:"0.0.0.0",fetch:async($,Z)=>{if(kx$){let X=await A74($,Z,Ax$);if(X===void 0)return;if(X)return X;let Y=await P74($,Ax$);if(Y)return Y}let G=await E74($);if(G)return z74(G);return jz0.fetch($,{server:Z})},websocket:{open($){if(w61($.data))K61.open($)},message($,Z){if(w61($.data))K61.message($,Z)},close($){if(w61($.data))K61.close($)}},development:!1}),I74=F41();if(lX.localMode)Promise.resolve().then(() => (tN(),WB0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (jx$(),zx$)),Y=lX.baseUrl??`http://localhost:${lX.port}`,Q=await X(lX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (tN(),WB0));Z()}catch{}});var Rx$=!1;async function q74($){let Z;try{Z=await w74.create({systemDatabaseUrl:Ix$(lX.databaseUrl,lX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:Q3,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:Q3}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function Pz0($){if(Rx$)return;Rx$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{I74(),jz0.markShuttingDown();let Q=P61(lX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await O8(Q),await R74.stop(!0);let J=fr.executorID;await fr.shutdown(),await q74(J),await jz0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>Pz0("SIGTERM"));process.on("SIGINT",()=>Pz0("SIGINT"));process.on("SIGHUP",()=>Pz0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),Pz0("uncaughtException")});

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "decocms",
-  "version": "4.113.2",
+  "version": "4.113.3",
   "description": "Deco CMS — Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "repository": {

package/dist/client/assets/page-seo-sheet-CikPXQax.js DELETED Viewed

@@ -1 +0,0 @@

- import{c as it,r as E,j as e,k as rt}from"./index-CO7fnNUR.js";import{m as mt,o as pt,p as st,q as at}from"./sidebar-FYoBVy_p.js";import{m as nt}from"./automation-runs-ky3730sC.js";import{r as lt,u as ct,a as dt,b as St,i as ft,f as ut,d as vt,P as ht,S as gt}from"./page-seo-form-DXszlarE.js";import{r as xt}from"./index-koMbbom-.js";import"./LayoutLeft-GEfgpffr.js";import"./use-mobile-BrqpKzoX.js";import"./X-Ce_M1uS1.js";import"./tooltip-DcY6x6Ck.js";import"./select-CPF2zfN7.js";import"./Check-BDc-9beA.js";import"./ChevronDown-nancJwSI.js";import"./ChevronUp-BxzZQ2Gs.js";import"./useInfiniteQuery-BwtPcFfh.js";import"./use-infinite-scroll-BLuOZYlb.js";import"./use-connection-DpvSyixb.js";import"./use-mcp-client-CA4wiSFO.js";import"./auth-V7REw4Kr.js";import"./use-virtual-mcp-BaOyPqk_.js";import"./card-Be7ATAVR.js";import"./table-D6FgJ0_g.js";import"./empty-state-BOR0a0Lp.js";import"./use-members-DtcdeVRo.js";import"./use-org-auth-client-DGigd3wf.js";import"./use-clock-tick-Df1t0uTa.js";import"./AlertCircle-B24GgAek.js";import"./CheckCircle-C95UkYxP.js";import"./DotsVertical-D1_WyfZB.js";import"./agent-icon-fLjRgrwP.js";import"./Tool01-UTnFn8lh.js";import"./ArrowUp-D_QBnBx5.js";import"./Settings02-DWNjFB3n.js";import"./Tool02-Bfajr2Tm.js";import"./ArrowRight-_zQIdM6U.js";import"./ArrowUpRight-MOoZHOAQ.js";import"./TrendUp01-CBMrNp6Y.js";import"./ZapSquare-DMkBJs6-.js";import"./ZoomOut-Buy8j-Cr.js";import"./Users03-DyqLr6-O.js";import"./ChevronRight-D0BURcS6.js";import"./Stars02-DVlklMwn.js";import"./Copy01-DpsNOvIC.js";import"./Globe01-zL4O6xvW.js";import"./Eye-DCVWPzsB.js";import"./FilterLines-D2nXw7cc.js";import"./Star01-CGzwqghN.js";import"./Globe04-Di4sSMSh.js";import"./SwitchHorizontal01-DCABGVLT.js";import"./HardDrive-DmuGWqqm.js";import"./Image01-DkM6uEtb.js";import"./Key01-DnX41pIH.js";import"./XCircle-5adooZQK.js";import"./LinkExternal01-D_IHu3of.js";import"./LogOut01-BX7xOIpk.js";import"./Monitor01-DW8SB6zQ.js";import"./Sun-fW-g4gE7.js";import"./Package-DS1l4ytQ.js";import"./Palette-91Badj48.js";import"./Play-KQh-DFti.js";import"./Plus-DL80ZKSy.js";import"./SearchLg-Bi_Gc-PD.js";import"./SearchMd-CWEVKNRF.js";import"./Shield01-BiMsfVZw.js";import"./Stars01-jehyMtLl.js";import"./Trash01-082-yKoi.js";import"./Upload01-oEgTkKcG.js";import"./User01-CuDoSgLW.js";import"./Users01-B84FmrPM.js";import"./XClose-Ca1pDUtO.js";import"./Zap-BEooMbbT.js";import"./use-automations-n-PMhg6-.js";import"./studio-tools-DN6JfiRG.js";import"./useSuspenseInfiniteQuery-BI1ttIDD.js";import"./avatar-dmI1DauD.js";import"./format-time-BnbuEtat.js";import"./differenceInSeconds-NQ4PDo0z.js";import"./use-copy-CFQ-w2R5.js";import"./file-type-icon-D0RgEhdk.js";import"./dialog-CMchVFHQ.js";import"./tab-id-BijBBRwE.js";import"./hooks-Bul_NqYq.js";import"./decopilot-sse-pool-Y6kiK8UB.js";import"./backoff-CrEUbyZT.js";import"./delay-CnY5UFtP.js";import"./chat-context-DS7501gv.js";import"./autosend-CxgzuO8v.js";import"./use-ai-providers-BYindxyZ.js";import"./location-BpLtHjTZ.js";import"./use-decopilot-events-DWT9bGPW.js";import"./use-organization-settings-DwS7AyDV.js";import"./monaco-editor-BBaaArKu.js";import"./index-Cjw0ep1k.js";import"./index-Dr9COom1.js";import"./calendar-BbTYBn2d.js";import"./shell-layout-DIibWxou.js";import"./required-auth-layout-BY6Cm2lb.js";import"./use-org-sso-D8gE51hM.js";import"./integration-icon-CeulAyAY.js";import"./use-navigate-to-agent-DhAmk_BV.js";import"./reusable-new-chat-CouMjkYR.js";import"./AreaChart-PXuGVtu_.js";import"./form-By2IHjeb.js";import"./label-BD0NKzzi.js";import"./input-B39qdqC2.js";import"./switch-D6mfTiMZ.js";import"./drawer-DSHMHW3q.js";import"./collection-search-Dsi4IN_h.js";import"./index-CZsgOgOb.js";import"./get-initials-D-f_fDFw.js";import"./popover-I4RJVhpP.js";import"./use-registry-app-ChPsTUqD.js";import"./use-mcp-tools-DkAOMHQ2.js";import"./github-repo-scope-DjMZbiKa.js";import"./authenticate-and-persist-oauth-ChSCjp-n.js";import"./mcp-oauth-Dkj08Dzb.js";import"./extract-connection-data-BG9UQLzs.js";import"./dropdown-menu-TR5YGwqe.js";import"./command-CHNlq_2b.js";import"./index-D5ku92TO.js";import"./companions-core-Dm6mXKS9.js";import"./tabs-Dpw28qvu.js";import"./toggle-group-C7KSa66F.js";import"./use-deco-credits-C7PF6GeN.js";import"./alert-dialog-CpWVQkBL.js";import"./toolbar-icon-button-CBtG4ICa.js";import"./skeleton-eJK3kHGQ.js";import"./github-repo-picker-J8Siwkz3.js";import"./use-debounced-value-4mK4fIcc.js";import"./provision-repo-scoped-github-connection-2iDn-wQ1.js";import"./connection-card-a5SDdxrK.js";import"./use-registry-connections-CcXeWAeX.js";import"./retry-CErkP7V6.js";import"./connection-slug-eyAPH6o3.js";import"./textarea-C9RwFm0f.js";import"./connection-form-helpers-9fvJgosf.js";import"./collection-tabs-BpdKw2HL.js";import"./badge-BF6CrRcn.js";import"./connect-desktop-dialog-BfYQLYf_.js";import"./select-model-B3T8heE2.js";import"./checkbox-4KovBlSm.js";import"./ai-providers-logos-DD3qZ33J.js";import"./settings-section-Cph_k8po.js";import"./index-D6pVLNuI.js";import"./toolbar-BF0-O-B2.js";import"./question-004-sINsf4GQ.js";import"./use-status-sounds-D_0BrIPf.js";import"./deco-site-production-url-CaKZ7xBn.js";import"./use-capability-BHDbuK-M.js";import"./pt-BR-CLy76QW2.js";import"./use-mcp-auth-status-C6RMVEBP.js";import"./use-debounced-autosave-B3TUtvGB.js";import"./index-BO5IwONg.js";import"./search-input-CBLD_RNE.js";import"./use-secrets-srqLzy8-.js";import"./useQueries-C6eY_uQc.js";import"./use-file-configs-hSbaFNRd.js";import"./automation-list-row-DDgmctk7.js";function gi(u){const t=it.c(46),{open:k,onOpenChange:N,orgSlug:Q,virtualMcpId:U,branch:W,decofile:G,meta:s,target:m,onSaved:X}=u,o=lt(G,m,s),P=m.kind==="site"?"site":m.pageKey,[Y,Z]=E.useState(P),[tt,i]=E.useState(null),[J,g]=E.useState(void 0),[x,y]=E.useState(0);Y!==P&&(Z(P),i(null),g(void 0),y(wt));const{persistSeo:a,persistRawSeo:I,flush:K,isPending:D}=ct({orgSlug:Q,virtualMcpId:U,branch:W,target:m,resolved:o,onSaved:X}),w=m.kind==="page",ot=w?o?.rawSeoData:void 0,v=J!==void 0?J:ot,et=w?dt(v)??void 0:void 0,h=tt??et??o?.seoData??{},p=o?St(h,o):null,n=p&&(!w||ft(v))?xt(p,s):null,_=m.kind==="page"?ut(G,s)?.seoData??void 0:void 0;let j;t[0]!==s?(j=vt(s),t[0]=s,t[1]=j):j=t[1];const M=j;let R;t[2]!==a||t[3]!==o||t[4]!==i?(R=r=>{if(!o)return;const L=r;i(L),a(L)},t[2]=a,t[3]=o,t[4]=i,t[5]=R):R=t[5];const V=R;let F;t[6]!==K||t[7]!==N?(F=r=>{r||K(),N(r)},t[6]=K,t[7]=N,t[8]=F):F=t[8];const q=F,z=m.kind==="site"?"Site SEO":"Page SEO",T=w&&o,A=m.kind==="site"&&o&&n,B=m.kind==="site"?"No site-level SEO block found.":o?"SEO schema not found for this page.":"Could not load page SEO.";let C;t[9]!==i?(C=()=>i(null),t[9]=i,t[10]=C):C=t[10];const H=C;let O;t[11]!==y?(O=()=>y(yt),t[11]=y,t[12]=O):O=t[12];const $=O;let l;t[13]!==z?(l=e.jsx(mt,{className:"text-sm font-semibold",children:z}),t[13]=z,t[14]=l):l=t[14];let c;t[15]!==D?(c=D&&e.jsx(rt,{size:14,className:"animate-spin text-muted-foreground"}),t[15]=D,t[16]=c):c=t[16];let d;t[17]!==l||t[18]!==c?(d=e.jsxs(pt,{className:"px-4 py-3 border-b flex-row items-center justify-between space-y-0",children:[l,c]}),t[17]=l,t[18]=c,t[19]=d):d=t[19];let S;t[20]!==p||t[21]!==$||t[22]!==H||t[23]!==M||t[24]!==v||t[25]!==h||t[26]!==B||t[27]!==x||t[28]!==V||t[29]!==I||t[30]!==a||t[31]!==o||t[32]!==n||t[33]!==i||t[34]!==g||t[35]!==T||t[36]!==A||t[37]!==_?(S=!o||!T&&!A?e.jsx("div",{className:"flex h-full items-center justify-center text-sm text-muted-foreground",children:B}):e.jsx(nt,{className:"flex-1 min-h-0 [&_[data-slot=scroll-area-viewport]>div]:!block",children:e.jsx("div",{className:"px-6 py-4",children:e.jsx("div",{className:"mx-auto max-w-sm",children:T?e.jsx(ht,{rawSeo:v,innerSeo:h,defaultResolveType:M,seoSchema:n,activeResolveType:p,seoTypeOptions:o.seoTypeOptions,formResetKey:x,siteDefaultSeo:_,onPersistRaw:r=>{g(r),I(r)},onInnerChange:r=>{i(r),a(r)},onClearForm:H,onBumpFormKey:$}):n&&p&&e.jsx(gt,{schema:n,resolveType:p,value:h,formResetKey:x,onChange:V})})})}),t[20]=p,t[21]=$,t[22]=H,t[23]=M,t[24]=v,t[25]=h,t[26]=B,t[27]=x,t[28]=V,t[29]=I,t[30]=a,t[31]=o,t[32]=n,t[33]=i,t[34]=g,t[35]=T,t[36]=A,t[37]=_,t[38]=S):S=t[38];let f;t[39]!==d||t[40]!==S?(f=e.jsxs(st,{side:"right",className:"w-[400px] sm:max-w-[440px] p-0 gap-0",children:[d,S]}),t[39]=d,t[40]=S,t[41]=f):f=t[41];let b;return t[42]!==q||t[43]!==k||t[44]!==f?(b=e.jsx(at,{open:k,onOpenChange:q,children:f}),t[42]=q,t[43]=k,t[44]=f,t[45]=b):b=t[45],b}function yt(u){return u+1}function wt(u){return u+1}export{gi as SeoSheet};

package/dist/client/assets/project-app-view-BNchcHBR.js DELETED Viewed

@@ -1 +0,0 @@

- import{c as L,F as H,j as U}from"./index-CO7fnNUR.js";import{a as O,g as $,s as E}from"./automation-runs-ky3730sC.js";import{r as k,u as B}from"./use-mcp-client-CA4wiSFO.js";import{b as V,c as Y}from"./use-mcp-tools-DkAOMHQ2.js";import{u as q}from"./index-koMbbom-.js";import{c as G}from"./monaco-editor-BBaaArKu.js";import{g as F,M as K,a as D}from"./index-Dr9COom1.js";import{b as W,a as z}from"./chat-context-DS7501gv.js";import{u as J}from"./shell-layout-DIibWxou.js";import{O as Q}from"./tab-id-BijBBRwE.js";import"./select-CPF2zfN7.js";import"./tooltip-DcY6x6Ck.js";import"./Check-BDc-9beA.js";import"./ChevronDown-nancJwSI.js";import"./ChevronUp-BxzZQ2Gs.js";import"./useInfiniteQuery-BwtPcFfh.js";import"./use-infinite-scroll-BLuOZYlb.js";import"./use-connection-DpvSyixb.js";import"./use-virtual-mcp-BaOyPqk_.js";import"./card-Be7ATAVR.js";import"./sidebar-FYoBVy_p.js";import"./LayoutLeft-GEfgpffr.js";import"./use-mobile-BrqpKzoX.js";import"./X-Ce_M1uS1.js";import"./table-D6FgJ0_g.js";import"./empty-state-BOR0a0Lp.js";import"./use-members-DtcdeVRo.js";import"./use-org-auth-client-DGigd3wf.js";import"./use-clock-tick-Df1t0uTa.js";import"./AlertCircle-B24GgAek.js";import"./CheckCircle-C95UkYxP.js";import"./DotsVertical-D1_WyfZB.js";import"./agent-icon-fLjRgrwP.js";import"./Tool01-UTnFn8lh.js";import"./ArrowUp-D_QBnBx5.js";import"./Settings02-DWNjFB3n.js";import"./Tool02-Bfajr2Tm.js";import"./ArrowRight-_zQIdM6U.js";import"./ArrowUpRight-MOoZHOAQ.js";import"./TrendUp01-CBMrNp6Y.js";import"./ZapSquare-DMkBJs6-.js";import"./ZoomOut-Buy8j-Cr.js";import"./Users03-DyqLr6-O.js";import"./ChevronRight-D0BURcS6.js";import"./Stars02-DVlklMwn.js";import"./Copy01-DpsNOvIC.js";import"./Globe01-zL4O6xvW.js";import"./Eye-DCVWPzsB.js";import"./FilterLines-D2nXw7cc.js";import"./Star01-CGzwqghN.js";import"./Globe04-Di4sSMSh.js";import"./SwitchHorizontal01-DCABGVLT.js";import"./HardDrive-DmuGWqqm.js";import"./Image01-DkM6uEtb.js";import"./Key01-DnX41pIH.js";import"./XCircle-5adooZQK.js";import"./LinkExternal01-D_IHu3of.js";import"./LogOut01-BX7xOIpk.js";import"./Monitor01-DW8SB6zQ.js";import"./Sun-fW-g4gE7.js";import"./Package-DS1l4ytQ.js";import"./Palette-91Badj48.js";import"./Play-KQh-DFti.js";import"./Plus-DL80ZKSy.js";import"./SearchLg-Bi_Gc-PD.js";import"./SearchMd-CWEVKNRF.js";import"./Shield01-BiMsfVZw.js";import"./Stars01-jehyMtLl.js";import"./Trash01-082-yKoi.js";import"./Upload01-oEgTkKcG.js";import"./User01-CuDoSgLW.js";import"./Users01-B84FmrPM.js";import"./XClose-Ca1pDUtO.js";import"./Zap-BEooMbbT.js";import"./use-automations-n-PMhg6-.js";import"./studio-tools-DN6JfiRG.js";import"./useSuspenseInfiniteQuery-BI1ttIDD.js";import"./avatar-dmI1DauD.js";import"./format-time-BnbuEtat.js";import"./differenceInSeconds-NQ4PDo0z.js";import"./use-copy-CFQ-w2R5.js";import"./file-type-icon-D0RgEhdk.js";import"./dialog-CMchVFHQ.js";import"./hooks-Bul_NqYq.js";import"./decopilot-sse-pool-Y6kiK8UB.js";import"./backoff-CrEUbyZT.js";import"./delay-CnY5UFtP.js";import"./calendar-BbTYBn2d.js";import"./integration-icon-CeulAyAY.js";import"./use-navigate-to-agent-DhAmk_BV.js";import"./reusable-new-chat-CouMjkYR.js";import"./AreaChart-PXuGVtu_.js";import"./form-By2IHjeb.js";import"./label-BD0NKzzi.js";import"./input-B39qdqC2.js";import"./auth-V7REw4Kr.js";import"./drawer-DSHMHW3q.js";import"./collection-search-Dsi4IN_h.js";import"./autosend-CxgzuO8v.js";import"./index-CZsgOgOb.js";import"./get-initials-D-f_fDFw.js";import"./popover-I4RJVhpP.js";import"./use-registry-app-ChPsTUqD.js";import"./github-repo-scope-DjMZbiKa.js";import"./authenticate-and-persist-oauth-ChSCjp-n.js";import"./mcp-oauth-Dkj08Dzb.js";import"./extract-connection-data-BG9UQLzs.js";import"./use-decopilot-events-DWT9bGPW.js";import"./dropdown-menu-TR5YGwqe.js";import"./command-CHNlq_2b.js";import"./index-D5ku92TO.js";import"./use-organization-settings-DwS7AyDV.js";import"./companions-core-Dm6mXKS9.js";import"./tabs-Dpw28qvu.js";import"./toggle-group-C7KSa66F.js";import"./use-deco-credits-C7PF6GeN.js";import"./alert-dialog-CpWVQkBL.js";import"./toolbar-icon-button-CBtG4ICa.js";import"./skeleton-eJK3kHGQ.js";import"./github-repo-picker-J8Siwkz3.js";import"./use-debounced-value-4mK4fIcc.js";import"./provision-repo-scoped-github-connection-2iDn-wQ1.js";import"./connection-card-a5SDdxrK.js";import"./use-registry-connections-CcXeWAeX.js";import"./retry-CErkP7V6.js";import"./connection-slug-eyAPH6o3.js";import"./textarea-C9RwFm0f.js";import"./connection-form-helpers-9fvJgosf.js";import"./collection-tabs-BpdKw2HL.js";import"./badge-BF6CrRcn.js";import"./use-ai-providers-BYindxyZ.js";import"./connect-desktop-dialog-BfYQLYf_.js";import"./select-model-B3T8heE2.js";import"./checkbox-4KovBlSm.js";import"./ai-providers-logos-DD3qZ33J.js";import"./settings-section-Cph_k8po.js";import"./index-D6pVLNuI.js";import"./toolbar-BF0-O-B2.js";import"./location-BpLtHjTZ.js";import"./index-Cjw0ep1k.js";import"./question-004-sINsf4GQ.js";import"./use-status-sounds-D_0BrIPf.js";import"./deco-site-production-url-CaKZ7xBn.js";import"./use-capability-BHDbuK-M.js";import"./pt-BR-CLy76QW2.js";import"./use-mcp-auth-status-C6RMVEBP.js";import"./use-debounced-autosave-B3TUtvGB.js";import"./index-BO5IwONg.js";import"./search-input-CBLD_RNE.js";import"./switch-D6mfTiMZ.js";import"./use-secrets-srqLzy8-.js";import"./useQueries-C6eY_uQc.js";import"./use-file-configs-hSbaFNRd.js";import"./automation-list-row-DDgmctk7.js";import"./required-auth-layout-BY6Cm2lb.js";import"./use-org-sso-D8gE51hM.js";const X="studio://navigate";function Z(M){const[t]=M;if(M.length!==1||t?.type!=="resource_link"||!t.uri.startsWith(X))return{isNavigate:!1};let o=null;try{o=new URL(t.uri).searchParams.get("main")}catch{}return{isNavigate:!0,tab:o&&Q.has(o)?o:null}}const tt={};function ot(M){const t=L.c(38),{client:o,resourceURI:I,tool:i,connectionId:p,orgId:a,args:v}=M,{sendMessage:C}=W(),{setAppContext:f,clearAppContext:l}=z(),{openSidePanel:g,openTab:s}=J(),r=`${p}:${i.name}`;let c;t[0]!==s?(c=x=>x==="inline"?(s("0"),"inline"):"fullscreen",t[0]=s,t[1]=c):c=t[1];const m=c,n=v??tt;let u;t[2]!==o||t[3]!==i.name||t[4]!==n?(u={client:o,toolName:i.name,toolArguments:n},t[2]=o,t[3]=i.name,t[4]=n,t[5]=u):u=t[5];const{data:e}=Y(u);let h;if(t[6]!==i._meta||t[7]!==i.name){const x=$(i._meta);h=E(i.name,x),t[6]=i._meta,t[7]=i.name,t[8]=h}else h=t[8];const A=h;let d;t[9]!==i.inputSchema?(d=i.inputSchema??{type:"object"},t[9]=i.inputSchema,t[10]=d):d=t[10];let R;t[11]!==A||t[12]!==d||t[13]!==i?(R={...i,name:A,inputSchema:d},t[11]=A,t[12]=d,t[13]=i,t[14]=R):R=t[14];const b=R;let _;t[15]!==g||t[16]!==s||t[17]!==C?(_=x=>{const j=Z(x.content);if(j.isNavigate){j.tab&&s(j.tab);return}const w=G(x.content);w.content.length>0&&(g("chat"),C({tiptapDoc:w}))},t[15]=g,t[16]=s,t[17]=C,t[18]=_):_=t[18];const y=_;let P;t[19]!==b?(P={tool:b},t[19]=b,t[20]=P):P=t[20];let N;t[21]!==f||t[22]!==r?(N=x=>f(r,x),t[21]=f,t[22]=r,t[23]=N):N=t[23];let T;t[24]!==l||t[25]!==r?(T=()=>l(r),t[24]=l,t[25]=r,t[26]=T):T=t[26];let S;return t[27]!==o||t[28]!==y||t[29]!==m||t[30]!==a||t[31]!==I||t[32]!==P||t[33]!==N||t[34]!==T||t[35]!==n||t[36]!==e?(S=U.jsx(K,{resourceURI:I,orgId:a,toolInfo:P,toolInput:n,toolResult:e,displayMode:"fullscreen",minHeight:D.fullscreen.minHeight,maxHeight:D.fullscreen.maxHeight,client:o,onMessage:y,onUpdateModelContext:N,onTeardown:T,onRequestDisplayMode:m,className:"h-full"}),t[27]=o,t[28]=y,t[29]=m,t[30]=a,t[31]=I,t[32]=P,t[33]=N,t[34]=T,t[35]=n,t[36]=e,t[37]=S):S=t[37],S}function Qi(M){const t=L.c(24),{connectionId:o,toolName:I,args:i}=M,{org:p}=H(),a=q();let v;t[0]!==o||t[1]!==a?(v=k(o)&&a.vmEntry?.sandboxProviderKind==="user-desktop"&&a.previewUrl?`${a.previewUrl.replace(/\/+$/,"")}/api/mcp`:void 0,t[0]=o,t[1]=a,t[2]=v):v=t[2];const C=v;let f;t[3]!==o||t[4]!==C||t[5]!==p.id||t[6]!==p.slug?(f={connectionId:o,orgId:p.id,orgSlug:p.slug,mcpUrl:C},t[3]=o,t[4]=C,t[5]=p.id,t[6]=p.slug,t[7]=f):f=t[7];const l=B(f);let g;t[8]!==l?(g={client:l},t[8]=l,t[9]=g):g=t[9];const{data:s}=V(g);let r,c,m;t[10]!==I||t[11]!==s.tools?(r=O(decodeURIComponent(I)),m=s.tools.find(e=>e.name===r)??s.tools.find(e=>{const h=$(e._meta);if(!h)return!1;if(E(e.name,h)===r)return!0;const d=E(r,h);return d!==r&&e.name===d}),c=m?._meta?F(m._meta):void 0,t[10]=I,t[11]=s.tools,t[12]=r,t[13]=c,t[14]=m):(r=t[12],c=t[13],m=t[14]);const n=c;if(!m||!n){let e;return t[15]!==r?(e=U.jsx("div",{className:"flex items-center justify-center h-full w-full",children:U.jsxs("p",{className:"text-sm text-muted-foreground",children:['Tool "',r,'" not found or has no UI']})}),t[15]=r,t[16]=e):e=t[16],e}let u;return t[17]!==i||t[18]!==l||t[19]!==o||t[20]!==p.id||t[21]!==n||t[22]!==m?(u=U.jsx(ot,{client:l,resourceURI:n,tool:m,connectionId:o,orgId:p.id,args:i}),t[17]=i,t[18]=l,t[19]=o,t[20]=p.id,t[21]=n,t[22]=m,t[23]=u):u=t[23],u}export{Qi as AppViewContent};