decocms 4.118.0 → 4.119.0

package/dist/server/migrate.js

@@ -1030,7 +1030,7 @@ var _u=Object.defineProperty;var ou=(t)=>t;function mu(t,n){this[t]=ou.bind(null
     insert into organization_billing (organization_id, legacy)
     select id, true from organization
     on conflict (organization_id) do nothing
-  `.execute(t)}async function qx(t){await t.schema.dropTable("organization_paid_seat").execute(),await t.schema.dropTable("organization_billing").execute()}var ai={};i(ai,{up:()=>lx,down:()=>dx});import{sql as Hi}from"kysely";async function lx(t){await t.schema.createTable("seat_change_log").addColumn("id","uuid",(n)=>n.primaryKey().defaultTo(Hi`gen_random_uuid()`)).addColumn("organization_id","text",(n)=>n.notNull().references("organization.id").onDelete("cascade")).addColumn("user_id","text",(n)=>n.notNull()).addColumn("seat","text",(n)=>n.notNull()).addColumn("changed_by","text",(n)=>n.notNull()).addColumn("created_at","timestamptz",(n)=>n.notNull().defaultTo(Hi`now()`)).execute(),await t.schema.createIndex("idx_seat_change_log_org_created").on("seat_change_log").columns(["organization_id","created_at"]).execute()}async function dx(t){await t.schema.dropTable("seat_change_log").execute()}var _i={};i(_i,{up:()=>bx,down:()=>ty});async function bx(t){await t.schema.alterTable("organization_billing").addColumn("benefits_reference_id","text").execute()}async function ty(t){await t.schema.alterTable("organization_billing").dropColumn("benefits_reference_id").execute()}var ny={"001-initial-schema":Ct,"002-organization-settings":pt,"003-connection-schema-align":Nt,"004-remove-models-binding":wt,"005-connection-configuration":ft,"006-add-views-to-settings":Et,"007-monitoring-logs":Kt,"008-event-bus":st,"009-drop-audit-logs":ht,"010-gateways":Pt,"011-gateway-icon":zt,"012-gateway-tool-selection-mode":kt,"013-monitoring-user-agent-gateway":Ut,"014-gateway-resources-prompts":Dt,"015-monitoring-properties":jt,"016-downstream-token-client-info":Lt,"017-downstream-token-remove-userid":Jt,"018-drop-gateway-tool-selection-strategy":Rt,"019-remove-gateway-is-default":Wt,"020-enabled-plugins":$t,"021-threads":Xt,"022-rename-gateway-to-virtual-mcp":At,"023-optimize-thread-indexes":Qt,"024-consolidate-virtual-mcp":Zt,"025-add-monitoring-virtual-mcp-id":Ft,"026-restrict-child-connection-delete":Mt,"027-update-management-mcp-url":Yt,"028-update-management-mcp-to-self":Bt,"029-add-updated-by-to-connections":Ot,"030-member-tags":It,"031-add-dependency-mode":gt,"032-projects":Gt,"033-thread-status":vt,"034-monitoring-dashboards":Vt,"035-project-connections":qt,"036-update-registry-url":lt,"037-ai-provider-keys":dt,"038-oauth-pkce-states":bt,"039-automations":tn,"040-replace-next-run-at-with-last-run-at":nn,"041-ai-provider-keys-unique-constraint":en,"042-rename-mesh-mcp-to-cms-mcp":un,"043-rename-cms-mcp-to-deco-cms":an,"044-drop-connections-tools-column":_n,"045-thread-context-start-message":on,"046-remove-object-storage-plugin":xn,"047-add-next-run-at":yn,"048-merge-projects-agents":cn,"049-remove-org-admin-projects":Tn,"050-durable-agent-runs":Cn,"051-org-sso":Nn,"052-thread-agent-ids":wn,"053-registry-config":fn,"054-connection-slug":Kn,"055-spaces":sn,"056-automation-project-scope":hn,"057-thread-virtual-mcp-id":Pn,"058-trigger-callback-tokens":zn,"059-kv":kn,"060-member-index":Un,"061-downstream-token-connection-index":Dn,"062-private-registry":jn,"063-event-subscriptions-enabled-boolean":Ln,"064-brand-context":Jn,"065-organization-domains":Rn,"066-brand-context-structured":Wn,"067-threads-metadata":$n,"068-threads-branch":Xn,"069-sandbox-runner-state":An,"070-model-categories":Qn,"071-default-home-agents":Zn,"072-ai-provider-key-preset-id":Fn,"073-backfill-basic-usage-roles":Mn,"074-sandbox-runner-state-handle-nonunique":Hn,"075-thread-inflight-async-jobs":Yn,"076-automations-drop-agent-json":Sn,"077-tier-only-model-selection":On,"078-automation-tool-call-kind":In,"079-strip-legacy-freestyle-vm-map-entries":gn,"080-async-research-jobs":Gn,"081-async-research-jobs-result-content":vn,"082-secrets":Vn,"083-thread-run-locally":qn,"084-drop-host-sandbox-rows":ln,"085-rename-runner-kind":dn,"086-thread-pins-and-vm-map-rekey":bn,"087-fix-vm-map-rekey":te,"088-purge-cli-activate-keys":ne,"089-rename-remote-user-to-desktop":ee,"090-automation-webhook-triggers":ie,"091-organization-domains-allow-multi":ue,"092-sandbox-naming-uniformization":ae,"093-backfill-global-search-basic-usage":_e,"094-org-file-configs":me,"095-remove-automation-tool-call-kind":xe,"096-org-file-configs-public-url-base":ye,"097-drop-local-docker-sandbox-state":ce,"098-thread-message-parts":Te,"099-run-fence":Ce,"100-link-transport":pe,"101-cancel-requested-at":Ne,"102-observational-agent":we,"103-revert-observational-agent":fe,"104-agent-sandbox-provider-kind":Ke,"105-org-fs":se,"106-automation-tools":he,"107-org-fs-public-org":Pe,"108-automation-max-agent-steps":ze,"109-thread-message-parts-per-message-seq":ke,"110-backfill-ghs-token-expiry":Ue,"111-org-fs-thread-id":De,"112-org-file-configs-credential-type":je,"113-thread-failure-reason":Le,"114-run-acked-seq":Je,"115-thread-projected-seq":Re,"116-org-sites":We,"117-org-file-configs-site-slug":$e,"118-organization-domains-multi-verify":Xe,"119-organization-join-requests":Ae,"120-org-fs-read-public":Qe,"121-org-fs-share-password":Ze,"122-split-web-research-tier":He,"123-connection-credential-vault":Ye,"124-drop-thread-projected-seq":Se,"125-github-child-single-parent":Be,"126-task-board":Ie,"127-task-board-due-date":ge,"128-reports-only":Ge,"129-task-board-assigned-by":ve,"130-task-board-thread-id":Ve,"131-task-board-thread-link-cascade":qe,"132-task-board-item-prs":le,"133-dedupe-duplicate-members":de,"134-drop-task-board-enabled":be,"135-task-board-item-fk-cascade":ti,"136-task-board-import-idempotency":ni,"137-agent-sandbox-runner-state":ei,"138-agent-sandbox-sessions":ii,"139-organization-billing":ui,"140-seat-change-log":ai,"141-benefits-sync-pending":_i},oi=ny;import{getMigrations as $y}from"better-auth/db";import{sso as Xy}from"@better-auth/sso";import{organization as Ay}from"@decocms/better-auth/plugins";import{admin as Qy,apiKey as Zy,jwt as Fy,magicLink as My,mcp as Hy,openAPI as Yy}from"better-auth/plugins";import{emailOTP as Sy}from"better-auth/plugins/email-otp";import{Kysely as Uy,PostgresDialect as li}from"kysely";import{Pool as di}from"pg";import{homedir as ey}from"os";var iy=new Set(["all","worker","api"]);function uy(t){let n=(t??"").trim();return iy.has(n)?n:"all"}function L(t){return t==="true"||t==="1"}function ay(t){if(t===void 0||t==="")return;return L(t)}function mt(t,n,e){if(n===void 0||n==="")return e;let a=Number(n);if(!Number.isSafeInteger(a)||a<=0)throw Error(`${t} must be a positive integer`);return a}function _y(t,n){if(n===void 0||n==="")return;let e=Number(n);if(!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive integer`);return e}function oy(t,n){if(t===void 0||t==="")return n;return t==="true"||t==="1"}function Yi(t){if(!t)return null;try{let e=new URL(t).hostname;if(e==="localhost"||e==="127.0.0.1"||e==="::1")return null;return t}catch{return null}}var my=new Set(["agent-sandbox","user-desktop"]);function xy(t){let n=t&&t.length>0?t:"user-desktop";if(n==="cluster")return"agent-sandbox";if(!my.has(n))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return n}function Si(t,n){let e=t.home||n.DATA_DIR||n.DECOCMS_HOME||`${ey()}/deco`,a=t.localMode,u=t.nodeEnv||n.NODE_ENV||"development",_=n.NATS_URL||"nats://localhost:4222",m=ay(n.NATS_TUNNEL_PUBLIC_ENABLED)??!!n.NATS_PUBLIC_URL;return{settings:{nodeEnv:u,port:mt("PORT",t.port||n.PORT,3000),baseUrl:t.baseUrl||n.BASE_URL,dataDir:e,databasePgSsl:L(n.DATABASE_PG_SSL),databasePoolMax:mt("DATABASE_POOL_MAX",n.DATABASE_POOL_MAX,5),betterAuthSecret:n.BETTER_AUTH_SECRET||"",encryptionKey:n.ENCRYPTION_KEY||"",meshJwtSecret:n.MESH_JWT_SECRET,localMode:a,disableRateLimit:L(n.DISABLE_RATE_LIMIT),studioProvisionSecretKey:n.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(n.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((x)=>x.trim().toLowerCase()).filter(Boolean),clickhouseUrl:n.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:_y("CLICKHOUSE_MAX_MEMORY_USAGE",n.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:n.MONITORING_OTLP_ENDPOINT,otelServiceName:n.OTEL_SERVICE_NAME||"studio",natsPublicUrl:n.NATS_PUBLIC_URL,natsTunnelPublicEnabled:m,natsTunnelSessionTtlSeconds:mt("NATS_TUNNEL_SESSION_TTL_SECONDS",n.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:n.NATS_OPERATOR_JWT,natsAccountJwt:n.NATS_ACCOUNT_JWT,natsAccountSigningKey:n.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:n.NATS_CREDS,configPath:n.CONFIG_PATH||"./config.json",aiGatewayEnabled:L(n.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:n.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:n.DECO_AI_GATEWAY_ADMIN_TOKEN,seatAllowanceCents:mt("STUDIO_SEAT_ALLOWANCE_CENTS",n.STUDIO_SEAT_ALLOWANCE_CENTS,500),enableDecoImport:L(n.ENABLE_DECO_IMPORT),billingEnforced:L(n.STUDIO_BILLING_ENFORCED),mcpCacheEnabled:oy(n.MCP_CACHE_ENABLED,u!=="development"),orgFsPublicSetsJson:n.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:L(n.DISABLE_ORGFS_MOUNTS),s3Endpoint:n.S3_ENDPOINT,s3Bucket:n.S3_BUCKET,s3Region:n.S3_REGION||"auto",s3AccessKeyId:n.S3_ACCESS_KEY_ID,s3SecretAccessKey:n.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:n.S3_FORCE_PATH_STYLE===void 0||n.S3_FORCE_PATH_STYLE===""||n.S3_FORCE_PATH_STYLE==="true"||n.S3_FORCE_PATH_STYLE==="1",monitoringS3Bucket:n.MONITORING_S3_BUCKET,monitoringS3Endpoint:n.MONITORING_S3_ENDPOINT,monitoringS3Region:n.MONITORING_S3_REGION,monitoringS3AccessKeyId:n.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:n.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:n.MONITORING_S3_PREFIX,duckdbExtensionDirectory:n.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:n.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:n.DUCKDB_THREADS?Number(n.DUCKDB_THREADS):void 0,isCli:!0,noTui:t.noTui===!0,podName:n.POD_NAME??crypto.randomUUID(),dispatchRole:uy(n.MESH_DISPATCH_ROLE),sandboxProviderKind:xy(n.STUDIO_SANDBOX_PROVIDER),decoSupabaseUrl:n.DECO_SUPABASE_URL,decoSupabaseServiceKey:n.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:n.FIRECRAWL_API_KEY,commerceDiscoveryInternalApiUrl:n.COMMERCE_DISCOVERY_INTERNAL_API_URL,commerceDiscoveryInternalApiKey:n.COMMERCE_DISCOVERY_INTERNAL_API_KEY,s3TenantBucket:n.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:n.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:n.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:n.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:n.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:n.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:n.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:Yi(n.DATABASE_URL),externalNatsUrl:Yi(_),skipMigrations:t.skipMigrations}}var xt=null;function A(){if(!xt)yy();return xt}function yy(){if(xt)return;let t={...process.env},n=Si({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);xt=Object.freeze({...n.settings,databaseUrl:t.DATABASE_URL??"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((e)=>e.trim()).filter(Boolean)})}import{createContextKey as Ny,metrics as wy,propagation as VT,ROOT_CONTEXT as qT,SpanStatusCode as lT,trace as fy}from"@opentelemetry/api";import{logs as Ey,SeverityNumber as mi}from"@opentelemetry/api-logs";import{OTLPLogExporter as tC}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as Ky}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as iC}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as aC}from"@opentelemetry/instrumentation-runtime-node";import{context as Bc,propagation as Oc,SpanKind as Ic,SpanStatusCode as gc}from"@opentelemetry/api";var vc=globalThis.fetch;import{ExportResultCode as _T}from"@opentelemetry/core";import{ExportResultCode as yt}from"@opentelemetry/core";import{mkdir as ry,rename as cy,writeFile as Ty}from"fs/promises";import{join as rt}from"path";class ct{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let n=t.flushIntervalMs??60000;if(n>0&&n<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((e)=>{console.error("[NDJSONExporter] Timer flush failed:",e)})},n),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:yt.FAILED});for(let n of t){let e=JSON.stringify(n),a=this.partitionKey?this.partitionKey(n):"";this.bufferItems.push({partition:a,json:e}),this.bufferBytes+=Buffer.byteLength(e,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:yt.SUCCESS})).catch((n)=>{return console.error("[NDJSONExporter] Flush failed:",n),{code:yt.FAILED}});return Promise.resolve({code:yt.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let n=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=n,n}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let n=new Map;for(let u of t){let _=n.get(u.partition);if(!_)_=[],n.set(u.partition,_);_.push(u.json)}let e=await Promise.allSettled(Array.from(n.entries()).map(([u,_])=>this.writeNDJSON(_,u).then(()=>u))),a=e.find((u)=>u.status==="rejected");if(a){let u=new Set;for(let m of e)if(m.status==="fulfilled")u.add(m.value);let _=t.filter((m)=>!u.has(m.partition));this.bufferItems=_.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw a.reason}}async writeNDJSON(t,n){let e=new Date,a=[String(e.getUTCFullYear()),String(e.getUTCMonth()+1).padStart(2,"0"),String(e.getUTCDate()).padStart(2,"0"),String(e.getUTCHours()).padStart(2,"0")],u=n?rt(this.basePath,n,...a):rt(this.basePath,...a);if(!this.knownDirs.has(u))await ry(u,{recursive:!0,mode:448}),this.knownDirs.add(u);let _=`${crypto.randomUUID()}.ndjson`,m=rt(u,`.${_}.tmp`),o=rt(u,_),x=t.join(`
+  `.execute(t)}async function qx(t){await t.schema.dropTable("organization_paid_seat").execute(),await t.schema.dropTable("organization_billing").execute()}var ai={};i(ai,{up:()=>lx,down:()=>dx});import{sql as Hi}from"kysely";async function lx(t){await t.schema.createTable("seat_change_log").addColumn("id","uuid",(n)=>n.primaryKey().defaultTo(Hi`gen_random_uuid()`)).addColumn("organization_id","text",(n)=>n.notNull().references("organization.id").onDelete("cascade")).addColumn("user_id","text",(n)=>n.notNull()).addColumn("seat","text",(n)=>n.notNull()).addColumn("changed_by","text",(n)=>n.notNull()).addColumn("created_at","timestamptz",(n)=>n.notNull().defaultTo(Hi`now()`)).execute(),await t.schema.createIndex("idx_seat_change_log_org_created").on("seat_change_log").columns(["organization_id","created_at"]).execute()}async function dx(t){await t.schema.dropTable("seat_change_log").execute()}var _i={};i(_i,{up:()=>bx,down:()=>ty});async function bx(t){await t.schema.alterTable("organization_billing").addColumn("benefits_reference_id","text").execute()}async function ty(t){await t.schema.alterTable("organization_billing").dropColumn("benefits_reference_id").execute()}var ny={"001-initial-schema":Ct,"002-organization-settings":pt,"003-connection-schema-align":Nt,"004-remove-models-binding":wt,"005-connection-configuration":ft,"006-add-views-to-settings":Et,"007-monitoring-logs":Kt,"008-event-bus":st,"009-drop-audit-logs":ht,"010-gateways":Pt,"011-gateway-icon":zt,"012-gateway-tool-selection-mode":kt,"013-monitoring-user-agent-gateway":Ut,"014-gateway-resources-prompts":Dt,"015-monitoring-properties":jt,"016-downstream-token-client-info":Lt,"017-downstream-token-remove-userid":Jt,"018-drop-gateway-tool-selection-strategy":Rt,"019-remove-gateway-is-default":Wt,"020-enabled-plugins":$t,"021-threads":Xt,"022-rename-gateway-to-virtual-mcp":At,"023-optimize-thread-indexes":Qt,"024-consolidate-virtual-mcp":Zt,"025-add-monitoring-virtual-mcp-id":Ft,"026-restrict-child-connection-delete":Mt,"027-update-management-mcp-url":Yt,"028-update-management-mcp-to-self":Bt,"029-add-updated-by-to-connections":Ot,"030-member-tags":It,"031-add-dependency-mode":gt,"032-projects":Gt,"033-thread-status":vt,"034-monitoring-dashboards":Vt,"035-project-connections":qt,"036-update-registry-url":lt,"037-ai-provider-keys":dt,"038-oauth-pkce-states":bt,"039-automations":tn,"040-replace-next-run-at-with-last-run-at":nn,"041-ai-provider-keys-unique-constraint":en,"042-rename-mesh-mcp-to-cms-mcp":un,"043-rename-cms-mcp-to-deco-cms":an,"044-drop-connections-tools-column":_n,"045-thread-context-start-message":on,"046-remove-object-storage-plugin":xn,"047-add-next-run-at":yn,"048-merge-projects-agents":cn,"049-remove-org-admin-projects":Tn,"050-durable-agent-runs":Cn,"051-org-sso":Nn,"052-thread-agent-ids":wn,"053-registry-config":fn,"054-connection-slug":Kn,"055-spaces":sn,"056-automation-project-scope":hn,"057-thread-virtual-mcp-id":Pn,"058-trigger-callback-tokens":zn,"059-kv":kn,"060-member-index":Un,"061-downstream-token-connection-index":Dn,"062-private-registry":jn,"063-event-subscriptions-enabled-boolean":Ln,"064-brand-context":Jn,"065-organization-domains":Rn,"066-brand-context-structured":Wn,"067-threads-metadata":$n,"068-threads-branch":Xn,"069-sandbox-runner-state":An,"070-model-categories":Qn,"071-default-home-agents":Zn,"072-ai-provider-key-preset-id":Fn,"073-backfill-basic-usage-roles":Mn,"074-sandbox-runner-state-handle-nonunique":Hn,"075-thread-inflight-async-jobs":Yn,"076-automations-drop-agent-json":Sn,"077-tier-only-model-selection":On,"078-automation-tool-call-kind":In,"079-strip-legacy-freestyle-vm-map-entries":gn,"080-async-research-jobs":Gn,"081-async-research-jobs-result-content":vn,"082-secrets":Vn,"083-thread-run-locally":qn,"084-drop-host-sandbox-rows":ln,"085-rename-runner-kind":dn,"086-thread-pins-and-vm-map-rekey":bn,"087-fix-vm-map-rekey":te,"088-purge-cli-activate-keys":ne,"089-rename-remote-user-to-desktop":ee,"090-automation-webhook-triggers":ie,"091-organization-domains-allow-multi":ue,"092-sandbox-naming-uniformization":ae,"093-backfill-global-search-basic-usage":_e,"094-org-file-configs":me,"095-remove-automation-tool-call-kind":xe,"096-org-file-configs-public-url-base":ye,"097-drop-local-docker-sandbox-state":ce,"098-thread-message-parts":Te,"099-run-fence":Ce,"100-link-transport":pe,"101-cancel-requested-at":Ne,"102-observational-agent":we,"103-revert-observational-agent":fe,"104-agent-sandbox-provider-kind":Ke,"105-org-fs":se,"106-automation-tools":he,"107-org-fs-public-org":Pe,"108-automation-max-agent-steps":ze,"109-thread-message-parts-per-message-seq":ke,"110-backfill-ghs-token-expiry":Ue,"111-org-fs-thread-id":De,"112-org-file-configs-credential-type":je,"113-thread-failure-reason":Le,"114-run-acked-seq":Je,"115-thread-projected-seq":Re,"116-org-sites":We,"117-org-file-configs-site-slug":$e,"118-organization-domains-multi-verify":Xe,"119-organization-join-requests":Ae,"120-org-fs-read-public":Qe,"121-org-fs-share-password":Ze,"122-split-web-research-tier":He,"123-connection-credential-vault":Ye,"124-drop-thread-projected-seq":Se,"125-github-child-single-parent":Be,"126-task-board":Ie,"127-task-board-due-date":ge,"128-reports-only":Ge,"129-task-board-assigned-by":ve,"130-task-board-thread-id":Ve,"131-task-board-thread-link-cascade":qe,"132-task-board-item-prs":le,"133-dedupe-duplicate-members":de,"134-drop-task-board-enabled":be,"135-task-board-item-fk-cascade":ti,"136-task-board-import-idempotency":ni,"137-agent-sandbox-runner-state":ei,"138-agent-sandbox-sessions":ii,"139-organization-billing":ui,"140-seat-change-log":ai,"141-benefits-sync-pending":_i},oi=ny;import{getMigrations as $y}from"better-auth/db";import{sso as Xy}from"@better-auth/sso";import{organization as Ay}from"@decocms/better-auth/plugins";import{admin as Qy,apiKey as Zy,jwt as Fy,magicLink as My,mcp as Hy,openAPI as Yy}from"better-auth/plugins";import{emailOTP as Sy}from"better-auth/plugins/email-otp";import{Kysely as Uy,PostgresDialect as li}from"kysely";import{Pool as di}from"pg";import{homedir as ey}from"os";var iy=new Set(["all","worker","api"]);function uy(t){let n=(t??"").trim();return iy.has(n)?n:"all"}function L(t){return t==="true"||t==="1"}function ay(t){if(t===void 0||t==="")return;return L(t)}function mt(t,n,e){if(n===void 0||n==="")return e;let a=Number(n);if(!Number.isSafeInteger(a)||a<=0)throw Error(`${t} must be a positive integer`);return a}function _y(t,n){if(n===void 0||n==="")return;let e=Number(n);if(!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive integer`);return e}function oy(t,n){if(t===void 0||t==="")return n;return t==="true"||t==="1"}function Yi(t){if(!t)return null;try{let e=new URL(t).hostname;if(e==="localhost"||e==="127.0.0.1"||e==="::1")return null;return t}catch{return null}}var my=new Set(["agent-sandbox","user-desktop"]);function xy(t){let n=t&&t.length>0?t:"user-desktop";if(n==="cluster")return"agent-sandbox";if(!my.has(n))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return n}function Si(t,n){let e=t.home||n.DATA_DIR||n.DECOCMS_HOME||`${ey()}/deco`,a=t.localMode,u=t.nodeEnv||n.NODE_ENV||"development",_=n.NATS_URL||"nats://localhost:4222",m=ay(n.NATS_TUNNEL_PUBLIC_ENABLED)??!!n.NATS_PUBLIC_URL;return{settings:{nodeEnv:u,port:mt("PORT",t.port||n.PORT,3000),baseUrl:t.baseUrl||n.BASE_URL,dataDir:e,databasePgSsl:L(n.DATABASE_PG_SSL),databasePoolMax:mt("DATABASE_POOL_MAX",n.DATABASE_POOL_MAX,5),betterAuthSecret:n.BETTER_AUTH_SECRET||"",encryptionKey:n.ENCRYPTION_KEY||"",meshJwtSecret:n.MESH_JWT_SECRET,localMode:a,disableRateLimit:L(n.DISABLE_RATE_LIMIT),studioProvisionSecretKey:n.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(n.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((x)=>x.trim().toLowerCase()).filter(Boolean),clickhouseUrl:n.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:_y("CLICKHOUSE_MAX_MEMORY_USAGE",n.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:n.MONITORING_OTLP_ENDPOINT,otelServiceName:n.OTEL_SERVICE_NAME||"studio",natsPublicUrl:n.NATS_PUBLIC_URL,natsTunnelPublicEnabled:m,natsTunnelSessionTtlSeconds:mt("NATS_TUNNEL_SESSION_TTL_SECONDS",n.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:n.NATS_OPERATOR_JWT,natsAccountJwt:n.NATS_ACCOUNT_JWT,natsAccountSigningKey:n.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:n.NATS_CREDS,configPath:n.CONFIG_PATH||"./config.json",aiGatewayEnabled:L(n.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:n.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:n.DECO_AI_GATEWAY_ADMIN_TOKEN,seatAllowanceCents:mt("STUDIO_SEAT_ALLOWANCE_CENTS",n.STUDIO_SEAT_ALLOWANCE_CENTS,500),stripeWebhookSecret:n.STRIPE_WEBHOOK_SECRET,enableDecoImport:L(n.ENABLE_DECO_IMPORT),billingEnforced:L(n.STUDIO_BILLING_ENFORCED),mcpCacheEnabled:oy(n.MCP_CACHE_ENABLED,u!=="development"),orgFsPublicSetsJson:n.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:L(n.DISABLE_ORGFS_MOUNTS),s3Endpoint:n.S3_ENDPOINT,s3Bucket:n.S3_BUCKET,s3Region:n.S3_REGION||"auto",s3AccessKeyId:n.S3_ACCESS_KEY_ID,s3SecretAccessKey:n.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:n.S3_FORCE_PATH_STYLE===void 0||n.S3_FORCE_PATH_STYLE===""||n.S3_FORCE_PATH_STYLE==="true"||n.S3_FORCE_PATH_STYLE==="1",monitoringS3Bucket:n.MONITORING_S3_BUCKET,monitoringS3Endpoint:n.MONITORING_S3_ENDPOINT,monitoringS3Region:n.MONITORING_S3_REGION,monitoringS3AccessKeyId:n.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:n.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:n.MONITORING_S3_PREFIX,duckdbExtensionDirectory:n.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:n.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:n.DUCKDB_THREADS?Number(n.DUCKDB_THREADS):void 0,isCli:!0,noTui:t.noTui===!0,podName:n.POD_NAME??crypto.randomUUID(),dispatchRole:uy(n.MESH_DISPATCH_ROLE),sandboxProviderKind:xy(n.STUDIO_SANDBOX_PROVIDER),decoSupabaseUrl:n.DECO_SUPABASE_URL,decoSupabaseServiceKey:n.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:n.FIRECRAWL_API_KEY,commerceDiscoveryInternalApiUrl:n.COMMERCE_DISCOVERY_INTERNAL_API_URL,commerceDiscoveryInternalApiKey:n.COMMERCE_DISCOVERY_INTERNAL_API_KEY,s3TenantBucket:n.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:n.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:n.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:n.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:n.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:n.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:n.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:Yi(n.DATABASE_URL),externalNatsUrl:Yi(_),skipMigrations:t.skipMigrations}}var xt=null;function A(){if(!xt)yy();return xt}function yy(){if(xt)return;let t={...process.env},n=Si({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);xt=Object.freeze({...n.settings,databaseUrl:t.DATABASE_URL??"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((e)=>e.trim()).filter(Boolean)})}import{createContextKey as Ny,metrics as wy,propagation as VT,ROOT_CONTEXT as qT,SpanStatusCode as lT,trace as fy}from"@opentelemetry/api";import{logs as Ey,SeverityNumber as mi}from"@opentelemetry/api-logs";import{OTLPLogExporter as tC}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as Ky}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as iC}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as aC}from"@opentelemetry/instrumentation-runtime-node";import{context as Bc,propagation as Oc,SpanKind as Ic,SpanStatusCode as gc}from"@opentelemetry/api";var vc=globalThis.fetch;import{ExportResultCode as _T}from"@opentelemetry/core";import{ExportResultCode as yt}from"@opentelemetry/core";import{mkdir as ry,rename as cy,writeFile as Ty}from"fs/promises";import{join as rt}from"path";class ct{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let n=t.flushIntervalMs??60000;if(n>0&&n<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((e)=>{console.error("[NDJSONExporter] Timer flush failed:",e)})},n),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:yt.FAILED});for(let n of t){let e=JSON.stringify(n),a=this.partitionKey?this.partitionKey(n):"";this.bufferItems.push({partition:a,json:e}),this.bufferBytes+=Buffer.byteLength(e,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:yt.SUCCESS})).catch((n)=>{return console.error("[NDJSONExporter] Flush failed:",n),{code:yt.FAILED}});return Promise.resolve({code:yt.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let n=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=n,n}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let n=new Map;for(let u of t){let _=n.get(u.partition);if(!_)_=[],n.set(u.partition,_);_.push(u.json)}let e=await Promise.allSettled(Array.from(n.entries()).map(([u,_])=>this.writeNDJSON(_,u).then(()=>u))),a=e.find((u)=>u.status==="rejected");if(a){let u=new Set;for(let m of e)if(m.status==="fulfilled")u.add(m.value);let _=t.filter((m)=>!u.has(m.partition));this.bufferItems=_.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw a.reason}}async writeNDJSON(t,n){let e=new Date,a=[String(e.getUTCFullYear()),String(e.getUTCMonth()+1).padStart(2,"0"),String(e.getUTCDate()).padStart(2,"0"),String(e.getUTCHours()).padStart(2,"0")],u=n?rt(this.basePath,n,...a):rt(this.basePath,...a);if(!this.knownDirs.has(u))await ry(u,{recursive:!0,mode:448}),this.knownDirs.add(u);let _=`${crypto.randomUUID()}.ndjson`,m=rt(u,`.${_}.tmp`),o=rt(u,_),x=t.join(`
 `)+`
 `;await Ty(m,x,{mode:384}),await cy(m,o)}}import{ExportResultCode as rT}from"@opentelemetry/core";import{AggregationTemporality as TT,DataPointType as CT}from"@opentelemetry/sdk-metrics";import{ExportResultCode as KT}from"@opentelemetry/core";var zT=Buffer.byteLength("... [TRUNCATED]","utf8");import{BatchLogRecordProcessor as CC,LoggerProvider as pC}from"@opentelemetry/sdk-logs";import{detectResources as wC,envDetector as fC,hostDetector as EC,osDetector as KC,processDetector as sC,resourceFromAttributes as hC}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as zC}from"@opentelemetry/sdk-metrics";import{NOOP_LOGGER as DT}from"@opentelemetry/api-logs";import{NodeSDK as DC}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as LC,SamplingDecision as Q}from"@opentelemetry/sdk-trace-base";import{SpanStatusCode as WT}from"@opentelemetry/api";var sy="__d",hy=Ny("Current request"),Py=1;var Oi=(t)=>{let e=new URL(t.url).searchParams.get(sy);if(e==="")return crypto.randomUUID();if(!e)e=t.headers.get("x-trace-debug-id");return e};class Ii{inner;constructor(t){this.inner=t}shouldSample(t,n,e,a,u,_){let m=t.getValue(hy);if(!m){if(this.inner)return this.inner.shouldSample(t,n,e,a,u,_);return{decision:Q.RECORD_AND_SAMPLED}}let o=Oi(m);if(o)return{decision:Q.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":o}};if(this.inner){let x=this.inner.shouldSample(t,n,e,a,u,_);if(x.decision===Q.RECORD_AND_SAMPLED){let y=crypto.randomUUID();x.attributes={...x.attributes??{},"trace.debug.id":y}}return x}return{decision:Q.NOT_RECORD}}toString(){return"DebugSampler"}}class gi{ratio;constructor(t){this.ratio=t}shouldSample(){if(Math.random()<this.ratio)return{decision:Q.RECORD_AND_SAMPLED};return{decision:Q.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}var RC=new Ky({preventServerStart:!0}),WC=new Ii(new gi(Py));var Bi=fy.getTracer("studio","1.0.0"),I=wy.getMeter("studio","1.0.0"),zy=Ey.getLogger("studio","1.0.0"),xi=(t,n,e)=>{let a={},u=e,_=e[e.length-1];if(_!==null&&typeof _==="object"&&!Array.isArray(_)&&!(_ instanceof Error)&&Object.getPrototypeOf(_)===Object.prototype)a=_,u=e.slice(0,-1);let m=u.map((o)=>{if(o instanceof Error)return`${o.name}: ${o.message}`;if(typeof o==="object")try{return JSON.stringify(o)}catch{return"[Object]"}return String(o)}).join(" ");zy.emit({severityNumber:t,severityText:n,body:m,attributes:{"log.source":"console",...a}})},yi={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...t)=>{xi(mi.ERROR,"ERROR",t),yi.error(...t)};console.warn=(...t)=>{xi(mi.WARN,"WARN",t),yi.warn(...t)};console.debug=(...t)=>{xi(mi.DEBUG,"DEBUG",t),yi.debug(...t)};var ri,Gi=0,ci=500;function ky(){if(ri)return;let t=performance.now()+ci;ri=setInterval(()=>{let n=performance.now();Gi=Math.max(0,n-t),t=n+ci},ci),ri.unref?.()}function vi(){return ky(),Gi}var Dy=()=>I.createHistogram("db.query.duration",{description:"Database query execution duration in milliseconds",unit:"ms"}),Vi=()=>I.createHistogram("db.pool.acquire.duration",{description:"Time spent waiting to acquire a connection from the pool",unit:"ms"}),qi=400,jy=100,Ly=(t)=>(n)=>{let e={"db.statement":n.query.sql,"db.status":n.level==="error"?"error":"success"};if(n.queryDurationMillis>qi){let a=vi(),u=a>qi/2;console.error(u?"Slow query measurement \u2014 likely event-loop lag, not slow SQL:":"Slow query detected:",{durationMs:n.queryDurationMillis,eventLoopLagMs:Math.round(a),sql:n.query.sql,pool:{total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:Tt()}})}if(Dy().record(n.queryDurationMillis,e),n.level==="error")console.error("Query failed:",{durationMs:n.queryDurationMillis,error:n.error,sql:n.query.sql})};function Jy(t){let n=t.connect.bind(t);return t.connect=(e)=>{if(typeof e==="function")return n(e);let a=performance.now(),u=Tt(),_=t.idleCount===0&&t.totalCount>=u,m=t.idleCount;return n().then((o)=>{let x=performance.now()-a;if(Vi().record(x,{"db.pool.outcome":_?"contended":"available"}),x>jy)if(_)console.error("Slow db pool acquire \u2014 pool saturated:",{waitMs:x,total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:u});else console.warn("Slow db pool acquire \u2014 event-loop lag (not pool):",{waitMs:x,idleAtStart:m,total:t.totalCount,max:u});return o},(o)=>{throw Vi().record(performance.now()-a,{"db.pool.outcome":"error"}),o})},t}var bi={keepAlive:!0,keepAliveInitialDelayMillis:1e4,idleTimeoutMillis:300000,connectionTimeoutMillis:30000,allowExitOnIdle:!0};function tu(){try{return A().databasePgSsl}catch{return!1}}function Tt(){try{return A().databasePoolMax}catch{return 10}}function Ry(t){let n=Jy(new di({connectionString:t,max:Tt(),ssl:tu(),...bi})),e=new li({pool:n});return{type:"postgres",db:new Uy({dialect:e,log:Ly(n)}),pool:n}}function G(){return A().databaseUrl}function nu(t){let n=t||G();return new li({pool:new di({connectionString:n,max:Tt(),ssl:tu(),...bi})})}function Wy(t){let n=t||G();return Ry(n)}async function eu(t){if(await t.db.destroy(),!t.pool.ended)await t.pool.end();if(t===g)g=null}var g=null;function Ti(){if(!g)g=Wy(G());return g}async function iu(t){let e={database:nu(t||G()),plugins:[Ay({dynamicAccessControl:{enabled:!0,enableCustomResources:!0}}),Qy(),Zy(),Fy(),Yy(),Hy({loginPage:"/login"}),Xy(),My({sendMagicLink:async()=>{}}),Sy({sendVerificationOTP:async()=>{}})]},{toBeAdded:a,toBeCreated:u,runMigrations:_}=await $y(e);if(!a.length&&!u.length)return"up to date";return await _(),`${u.length+a.length} table(s) migrated`}async function au(t,n){return(await Z`
     SELECT table_name FROM information_schema.tables