decocms 4.155.3 → 4.155.5

package/dist/server/migrate.js

@@ -1053,7 +1053,7 @@ var $e=Object.defineProperty;var Xe=(t)=>t;function Qe(t,n){this[t]=Xe.bind(null
     SELECT id, app_name, connection_url, title, slug
     FROM connections
     WHERE connection_type != 'VIRTUAL'
-  `.execute(t),u=0;for(let _ of n.rows){let e=sy(_);if(e===_.slug)continue;await Te`UPDATE connections SET slug = ${e} WHERE id = ${_.id}`.execute(t),u++}if(u>0)console.log(`[152] repaired ${u} drifted connection slug(s)`)}async function vy(){}var Ui={};i(Ui,{up:()=>ly,down:()=>dy});import{sql as qy}from"kysely";async function ly(t){await qy`CREATE INDEX idx_tmp_latest_assistant_text ON thread_message_parts (thread_id, created_at DESC, id DESC) WHERE role = 'assistant' AND kind = 'text'`.execute(t)}async function dy(t){await t.schema.dropIndex("idx_tmp_latest_assistant_text").execute()}var by={"001-initial-schema":Kt,"002-organization-settings":ct,"003-connection-schema-align":pt,"004-remove-models-binding":zt,"005-connection-configuration":Pt,"006-add-views-to-settings":rt,"007-monitoring-logs":Ut,"008-event-bus":jt,"009-drop-audit-logs":Dt,"010-gateways":Jt,"011-gateway-icon":Lt,"012-gateway-tool-selection-mode":Rt,"013-monitoring-user-agent-gateway":Wt,"014-gateway-resources-prompts":kt,"015-monitoring-properties":$t,"016-downstream-token-client-info":Xt,"017-downstream-token-remove-userid":Qt,"018-drop-gateway-tool-selection-strategy":Zt,"019-remove-gateway-is-default":Ft,"020-enabled-plugins":Ht,"021-threads":Mt,"022-rename-gateway-to-virtual-mcp":Yt,"023-optimize-thread-indexes":ht,"024-consolidate-virtual-mcp":Bt,"025-add-monitoring-virtual-mcp-id":At,"026-restrict-child-connection-delete":St,"027-update-management-mcp-url":Gt,"028-update-management-mcp-to-self":gt,"029-add-updated-by-to-connections":st,"030-member-tags":Vt,"031-add-dependency-mode":vt,"032-projects":qt,"033-thread-status":lt,"034-monitoring-dashboards":dt,"035-project-connections":bt,"036-update-registry-url":tn,"037-ai-provider-keys":nn,"038-oauth-pkce-states":un,"039-automations":en,"040-replace-next-run-at-with-last-run-at":_n,"041-ai-provider-keys-unique-constraint":xn,"042-rename-mesh-mcp-to-cms-mcp":an,"043-rename-cms-mcp-to-deco-cms":mn,"044-drop-connections-tools-column":on,"045-thread-context-start-message":yn,"046-remove-object-storage-plugin":Cn,"047-add-next-run-at":Nn,"048-merge-projects-agents":En,"049-remove-org-admin-projects":wn,"050-durable-agent-runs":Kn,"051-org-sso":pn,"052-thread-agent-ids":zn,"053-registry-config":Pn,"054-connection-slug":Un,"055-spaces":jn,"056-automation-project-scope":Dn,"057-thread-virtual-mcp-id":Jn,"058-trigger-callback-tokens":Ln,"059-kv":Rn,"060-member-index":Wn,"061-downstream-token-connection-index":kn,"062-private-registry":$n,"063-event-subscriptions-enabled-boolean":Xn,"064-brand-context":Qn,"065-organization-domains":Zn,"066-brand-context-structured":Fn,"067-threads-metadata":Hn,"068-threads-branch":Mn,"069-sandbox-runner-state":Yn,"070-model-categories":hn,"071-default-home-agents":Bn,"072-ai-provider-key-preset-id":An,"073-backfill-basic-usage-roles":Sn,"074-sandbox-runner-state-handle-nonunique":On,"075-thread-inflight-async-jobs":Gn,"076-automations-drop-agent-json":In,"077-tier-only-model-selection":sn,"078-automation-tool-call-kind":Vn,"079-strip-legacy-freestyle-vm-map-entries":vn,"080-async-research-jobs":qn,"081-async-research-jobs-result-content":ln,"082-secrets":dn,"083-thread-run-locally":bn,"084-drop-host-sandbox-rows":tu,"085-rename-runner-kind":nu,"086-thread-pins-and-vm-map-rekey":uu,"087-fix-vm-map-rekey":iu,"088-purge-cli-activate-keys":eu,"089-rename-remote-user-to-desktop":_u,"090-automation-webhook-triggers":xu,"091-organization-domains-allow-multi":au,"092-sandbox-naming-uniformization":mu,"093-backfill-global-search-basic-usage":ou,"094-org-file-configs":Tu,"095-remove-automation-tool-call-kind":Cu,"096-org-file-configs-public-url-base":Nu,"097-drop-local-docker-sandbox-state":Eu,"098-thread-message-parts":wu,"099-run-fence":Ku,"100-link-transport":cu,"101-cancel-requested-at":pu,"102-observational-agent":zu,"103-revert-observational-agent":Pu,"104-agent-sandbox-provider-kind":Uu,"105-org-fs":ju,"106-automation-tools":Du,"107-org-fs-public-org":Ju,"108-automation-max-agent-steps":Lu,"109-thread-message-parts-per-message-seq":Ru,"110-backfill-ghs-token-expiry":Wu,"111-org-fs-thread-id":ku,"112-org-file-configs-credential-type":$u,"113-thread-failure-reason":Xu,"114-run-acked-seq":Qu,"115-thread-projected-seq":Zu,"116-org-sites":Fu,"117-org-file-configs-site-slug":Hu,"118-organization-domains-multi-verify":Mu,"119-organization-join-requests":Yu,"120-org-fs-read-public":hu,"121-org-fs-share-password":Bu,"122-split-web-research-tier":Ou,"123-connection-credential-vault":Gu,"124-drop-thread-projected-seq":Iu,"125-github-child-single-parent":gu,"126-task-board":Vu,"127-task-board-due-date":vu,"128-reports-only":qu,"129-task-board-assigned-by":lu,"130-task-board-thread-id":du,"131-task-board-thread-link-cascade":bu,"132-task-board-item-prs":ti,"133-dedupe-duplicate-members":ni,"134-drop-task-board-enabled":ui,"135-task-board-item-fk-cascade":ii,"136-task-board-import-idempotency":ei,"137-agent-sandbox-runner-state":_i,"138-agent-sandbox-sessions":xi,"139-organization-billing":ai,"140-seat-change-log":mi,"141-benefits-sync-pending":oi,"142-stripe-event-watermark":yi,"143-armed-report-url":Ti,"144-benefits-pending-index":Ci,"145-user-model-preferences":Ni,"146-organization-main-agent":fi,"147-drop-agent-sandbox-tables":Ei,"148-org-flags":wi,"149-task-board-item-sort-order":Ki,"150-task-board-activity":ci,"151-task-board-tags":zi,"152-repair-connection-slug":ri,"153-task-board-latest-assistant-part-index":Ui},ji=by;import{getMigrations as QT}from"better-auth/db";import{sso as ZT}from"@better-auth/sso";import{organization as FT}from"@decocms/better-auth/plugins";import{admin as HT,apiKey as MT,jwt as YT,magicLink as hT,mcp as BT,openAPI as AT}from"better-auth/plugins";import{emailOTP as ST}from"better-auth/plugins/email-otp";import{Kysely as JT,PostgresDialect as re}from"kysely";import{Pool as Ue}from"pg";import{homedir as tT}from"os";var nT=new Set(["all","worker","api"]);function uT(t){let n=(t??"").trim();return nT.has(n)?n:"all"}var iT=new Set(["production","development","test"]);function eT(t){let n=(t??"").trim();return iT.has(n)?n:"development"}function k(t){return t==="true"||t==="1"}function _T(t){if(t===void 0||t==="")return;return k(t)}function Di(t,n){if(n===void 0||n==="")return;let u=Number(n);if(!Number.isSafeInteger(u)||u<=0)throw Error(`${t} must be a positive integer`);return u}function L(t,n,u){return Di(t,n)??u}function xT(t,n){if(t===void 0||t==="")return n;return t==="true"||t==="1"}function Ce(t){if(!t)return null;try{let u=new URL(t).hostname.replace(/^\[|\]$/g,"");if(u==="localhost"||u==="127.0.0.1"||u==="::1")return null;return t}catch{return null}}function aT(t){return t===void 0||t===""||t==="true"||t==="1"}function s(t,n){return t||n}var mT=new Set(["agent-sandbox","user-desktop"]);function oT(t){let n=(t??"").trim(),u=n.length>0?n:"user-desktop";if(u==="cluster")return"agent-sandbox";if(!mT.has(u))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return u}function Ne(t,n){let u=t.home||n.DATA_DIR||n.DECOCMS_HOME||`${tT()}/deco`,_=t.localMode,e=t.nodeEnv||eT(n.NODE_ENV),x=n.NATS_URL||"nats://localhost:4222",m=_T(n.NATS_TUNNEL_PUBLIC_ENABLED)??!!n.NATS_PUBLIC_URL;return{settings:{nodeEnv:e,port:L("PORT",t.port||n.PORT,3000),baseUrl:t.baseUrl||n.BASE_URL,publicUrl:s(n.STUDIO_PUBLIC_URL,n.MESH_PUBLIC_URL),dataDir:u,databasePgSsl:k(n.DATABASE_PG_SSL),databasePoolMax:L("DATABASE_POOL_MAX",n.DATABASE_POOL_MAX,5),dbosPoolSize:L("DBOS_POOL_SIZE",n.DBOS_POOL_SIZE,5),betterAuthSecret:n.BETTER_AUTH_SECRET||"",encryptionKey:n.ENCRYPTION_KEY||"",studioJwtSecret:s(n.STUDIO_JWT_SECRET,n.MESH_JWT_SECRET),localMode:_,disableRateLimit:k(n.DISABLE_RATE_LIMIT),studioProvisionSecretKey:n.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(n.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((o)=>o.trim().toLowerCase()).filter(Boolean),clickhouseUrl:n.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:Di("CLICKHOUSE_MAX_MEMORY_USAGE",n.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:n.MONITORING_OTLP_ENDPOINT,otelServiceName:n.OTEL_SERVICE_NAME||"studio",natsPublicUrl:n.NATS_PUBLIC_URL,natsTunnelPublicEnabled:m,natsTunnelSessionTtlSeconds:L("NATS_TUNNEL_SESSION_TTL_SECONDS",n.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:n.NATS_OPERATOR_JWT,natsAccountJwt:n.NATS_ACCOUNT_JWT,natsAccountSigningKey:n.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:n.NATS_CREDS,configPath:n.CONFIG_PATH||"./config.json",aiGatewayEnabled:k(n.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:n.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:n.DECO_AI_GATEWAY_ADMIN_TOKEN,seatAllowanceCents:L("STUDIO_SEAT_ALLOWANCE_CENTS",n.STUDIO_SEAT_ALLOWANCE_CENTS,500),stripeWebhookSecret:n.STRIPE_WEBHOOK_SECRET,stripeSecretKey:n.STRIPE_SECRET_KEY,stripeSeatPriceId:n.STRIPE_SEAT_PRICE_ID,topupFeePercent:L("STUDIO_TOPUP_FEE_PERCENT",n.STUDIO_TOPUP_FEE_PERCENT,15),enableDecoImport:k(n.ENABLE_DECO_IMPORT),billingEnforced:k(n.STUDIO_BILLING_ENFORCED),mcpCacheEnabled:xT(n.MCP_CACHE_ENABLED,e!=="development"),orgFsPublicSetsJson:n.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:k(n.DISABLE_ORGFS_MOUNTS),decopilotMaxConcurrentSubagents:L("DECOPILOT_MAX_CONCURRENT_SUBAGENTS",n.DECOPILOT_MAX_CONCURRENT_SUBAGENTS,4),decopilotMaxConcurrentHostedRuns:L("DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS",n.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS,3),s3Endpoint:n.S3_ENDPOINT,s3Bucket:n.S3_BUCKET,s3Region:n.S3_REGION||"auto",s3AccessKeyId:n.S3_ACCESS_KEY_ID,s3SecretAccessKey:n.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:aT(n.S3_FORCE_PATH_STYLE),monitoringS3Bucket:n.MONITORING_S3_BUCKET,monitoringS3Endpoint:n.MONITORING_S3_ENDPOINT,monitoringS3Region:n.MONITORING_S3_REGION,monitoringS3AccessKeyId:n.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:n.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:n.MONITORING_S3_PREFIX,duckdbExtensionDirectory:n.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:n.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:Di("DUCKDB_THREADS",n.DUCKDB_THREADS),isCli:!0,noTui:t.noTui===!0,podName:n.POD_NAME||crypto.randomUUID(),dispatchRole:uT(s(n.STUDIO_DISPATCH_ROLE,n.MESH_DISPATCH_ROLE)),sandboxProviderKind:oT(n.STUDIO_SANDBOX_PROVIDER),decoSupabaseUrl:n.DECO_SUPABASE_URL,decoSupabaseServiceKey:n.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:n.FIRECRAWL_API_KEY,reportsInternalApiUrl:s(n.REPORTS_INTERNAL_API_URL,n.COMMERCE_DISCOVERY_INTERNAL_API_URL),reportsInternalApiKey:s(n.REPORTS_INTERNAL_API_KEY,n.COMMERCE_DISCOVERY_INTERNAL_API_KEY),s3TenantBucket:n.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:n.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:n.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:n.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:n.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:n.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:n.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:Ce(n.DATABASE_URL),externalNatsUrl:Ce(x),skipMigrations:t.skipMigrations}}var Ct=null;function H(){if(!Ct)yT();return Ct}function yT(){if(Ct)return;let t={...process.env},n=Ne({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);Ct=Object.freeze({...n.settings,databaseUrl:t.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((u)=>u.trim()).filter(Boolean)})}import{createContextKey as wT,metrics as KT,propagation as _E,ROOT_CONTEXT as xE,SpanStatusCode as aE,trace as cT}from"@opentelemetry/api";import{logs as pT,SeverityNumber as Ji}from"@opentelemetry/api-logs";import{OTLPLogExporter as yE}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as zT}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as NE}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as EE}from"@opentelemetry/instrumentation-runtime-node";import{context as dN,propagation as bN,SpanKind as tf,SpanStatusCode as nf}from"@opentelemetry/api";var ef=globalThis.fetch;import{ExportResultCode as wf}from"@opentelemetry/core";import{ExportResultCode as Nt}from"@opentelemetry/core";import{mkdir as TT,rename as CT,writeFile as NT}from"fs/promises";import{join as ft}from"path";class Et{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let n=t.flushIntervalMs??60000;if(n>0&&n<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((u)=>{console.error("[NDJSONExporter] Timer flush failed:",u)})},n),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:Nt.FAILED});for(let n of t){let u=JSON.stringify(n),_=this.partitionKey?this.partitionKey(n):"";this.bufferItems.push({partition:_,json:u}),this.bufferBytes+=Buffer.byteLength(u,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:Nt.SUCCESS})).catch((n)=>{return console.error("[NDJSONExporter] Flush failed:",n),{code:Nt.FAILED}});return Promise.resolve({code:Nt.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let n=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=n,n}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let n=new Map;for(let e of t){let x=n.get(e.partition);if(!x)x=[],n.set(e.partition,x);x.push(e.json)}let u=await Promise.allSettled(Array.from(n.entries()).map(([e,x])=>this.writeNDJSON(x,e).then(()=>e))),_=u.find((e)=>e.status==="rejected");if(_){let e=new Set;for(let m of u)if(m.status==="fulfilled")e.add(m.value);let x=t.filter((m)=>!e.has(m.partition));this.bufferItems=x.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw _.reason}}async writeNDJSON(t,n){let u=new Date,_=[String(u.getUTCFullYear()),String(u.getUTCMonth()+1).padStart(2,"0"),String(u.getUTCDate()).padStart(2,"0"),String(u.getUTCHours()).padStart(2,"0")],e=n?ft(this.basePath,n,..._):ft(this.basePath,..._);if(!this.knownDirs.has(e))await TT(e,{recursive:!0,mode:448}),this.knownDirs.add(e);let x=`${crypto.randomUUID()}.ndjson`,m=ft(e,`.${x}.tmp`),a=ft(e,x),o=t.join(`
+  `.execute(t),u=0;for(let _ of n.rows){let e=sy(_);if(e===_.slug)continue;await Te`UPDATE connections SET slug = ${e} WHERE id = ${_.id}`.execute(t),u++}if(u>0)console.log(`[152] repaired ${u} drifted connection slug(s)`)}async function vy(){}var Ui={};i(Ui,{up:()=>ly,down:()=>dy});import{sql as qy}from"kysely";async function ly(t){await qy`CREATE INDEX idx_tmp_latest_assistant_text ON thread_message_parts (thread_id, created_at DESC, id DESC) WHERE role = 'assistant' AND kind = 'text'`.execute(t)}async function dy(t){await t.schema.dropIndex("idx_tmp_latest_assistant_text").execute()}var by={"001-initial-schema":Kt,"002-organization-settings":ct,"003-connection-schema-align":pt,"004-remove-models-binding":zt,"005-connection-configuration":Pt,"006-add-views-to-settings":rt,"007-monitoring-logs":Ut,"008-event-bus":jt,"009-drop-audit-logs":Dt,"010-gateways":Jt,"011-gateway-icon":Lt,"012-gateway-tool-selection-mode":Rt,"013-monitoring-user-agent-gateway":Wt,"014-gateway-resources-prompts":kt,"015-monitoring-properties":$t,"016-downstream-token-client-info":Xt,"017-downstream-token-remove-userid":Qt,"018-drop-gateway-tool-selection-strategy":Zt,"019-remove-gateway-is-default":Ft,"020-enabled-plugins":Ht,"021-threads":Mt,"022-rename-gateway-to-virtual-mcp":Yt,"023-optimize-thread-indexes":ht,"024-consolidate-virtual-mcp":Bt,"025-add-monitoring-virtual-mcp-id":At,"026-restrict-child-connection-delete":St,"027-update-management-mcp-url":Gt,"028-update-management-mcp-to-self":gt,"029-add-updated-by-to-connections":st,"030-member-tags":Vt,"031-add-dependency-mode":vt,"032-projects":qt,"033-thread-status":lt,"034-monitoring-dashboards":dt,"035-project-connections":bt,"036-update-registry-url":tn,"037-ai-provider-keys":nn,"038-oauth-pkce-states":un,"039-automations":en,"040-replace-next-run-at-with-last-run-at":_n,"041-ai-provider-keys-unique-constraint":xn,"042-rename-mesh-mcp-to-cms-mcp":an,"043-rename-cms-mcp-to-deco-cms":mn,"044-drop-connections-tools-column":on,"045-thread-context-start-message":yn,"046-remove-object-storage-plugin":Cn,"047-add-next-run-at":Nn,"048-merge-projects-agents":En,"049-remove-org-admin-projects":wn,"050-durable-agent-runs":Kn,"051-org-sso":pn,"052-thread-agent-ids":zn,"053-registry-config":Pn,"054-connection-slug":Un,"055-spaces":jn,"056-automation-project-scope":Dn,"057-thread-virtual-mcp-id":Jn,"058-trigger-callback-tokens":Ln,"059-kv":Rn,"060-member-index":Wn,"061-downstream-token-connection-index":kn,"062-private-registry":$n,"063-event-subscriptions-enabled-boolean":Xn,"064-brand-context":Qn,"065-organization-domains":Zn,"066-brand-context-structured":Fn,"067-threads-metadata":Hn,"068-threads-branch":Mn,"069-sandbox-runner-state":Yn,"070-model-categories":hn,"071-default-home-agents":Bn,"072-ai-provider-key-preset-id":An,"073-backfill-basic-usage-roles":Sn,"074-sandbox-runner-state-handle-nonunique":On,"075-thread-inflight-async-jobs":Gn,"076-automations-drop-agent-json":In,"077-tier-only-model-selection":sn,"078-automation-tool-call-kind":Vn,"079-strip-legacy-freestyle-vm-map-entries":vn,"080-async-research-jobs":qn,"081-async-research-jobs-result-content":ln,"082-secrets":dn,"083-thread-run-locally":bn,"084-drop-host-sandbox-rows":tu,"085-rename-runner-kind":nu,"086-thread-pins-and-vm-map-rekey":uu,"087-fix-vm-map-rekey":iu,"088-purge-cli-activate-keys":eu,"089-rename-remote-user-to-desktop":_u,"090-automation-webhook-triggers":xu,"091-organization-domains-allow-multi":au,"092-sandbox-naming-uniformization":mu,"093-backfill-global-search-basic-usage":ou,"094-org-file-configs":Tu,"095-remove-automation-tool-call-kind":Cu,"096-org-file-configs-public-url-base":Nu,"097-drop-local-docker-sandbox-state":Eu,"098-thread-message-parts":wu,"099-run-fence":Ku,"100-link-transport":cu,"101-cancel-requested-at":pu,"102-observational-agent":zu,"103-revert-observational-agent":Pu,"104-agent-sandbox-provider-kind":Uu,"105-org-fs":ju,"106-automation-tools":Du,"107-org-fs-public-org":Ju,"108-automation-max-agent-steps":Lu,"109-thread-message-parts-per-message-seq":Ru,"110-backfill-ghs-token-expiry":Wu,"111-org-fs-thread-id":ku,"112-org-file-configs-credential-type":$u,"113-thread-failure-reason":Xu,"114-run-acked-seq":Qu,"115-thread-projected-seq":Zu,"116-org-sites":Fu,"117-org-file-configs-site-slug":Hu,"118-organization-domains-multi-verify":Mu,"119-organization-join-requests":Yu,"120-org-fs-read-public":hu,"121-org-fs-share-password":Bu,"122-split-web-research-tier":Ou,"123-connection-credential-vault":Gu,"124-drop-thread-projected-seq":Iu,"125-github-child-single-parent":gu,"126-task-board":Vu,"127-task-board-due-date":vu,"128-reports-only":qu,"129-task-board-assigned-by":lu,"130-task-board-thread-id":du,"131-task-board-thread-link-cascade":bu,"132-task-board-item-prs":ti,"133-dedupe-duplicate-members":ni,"134-drop-task-board-enabled":ui,"135-task-board-item-fk-cascade":ii,"136-task-board-import-idempotency":ei,"137-agent-sandbox-runner-state":_i,"138-agent-sandbox-sessions":xi,"139-organization-billing":ai,"140-seat-change-log":mi,"141-benefits-sync-pending":oi,"142-stripe-event-watermark":yi,"143-armed-report-url":Ti,"144-benefits-pending-index":Ci,"145-user-model-preferences":Ni,"146-organization-main-agent":fi,"147-drop-agent-sandbox-tables":Ei,"148-org-flags":wi,"149-task-board-item-sort-order":Ki,"150-task-board-activity":ci,"151-task-board-tags":zi,"152-repair-connection-slug":ri,"153-task-board-latest-assistant-part-index":Ui},ji=by;import{getMigrations as QT}from"better-auth/db";import{sso as ZT}from"@better-auth/sso";import{organization as FT}from"@decocms/better-auth/plugins";import{admin as HT,apiKey as MT,jwt as YT,magicLink as hT,mcp as BT,openAPI as AT}from"better-auth/plugins";import{emailOTP as ST}from"better-auth/plugins/email-otp";import{Kysely as JT,PostgresDialect as re}from"kysely";import{Pool as Ue}from"pg";import{homedir as tT}from"os";var nT=new Set(["all","worker","api"]);function uT(t){let n=(t??"").trim();return nT.has(n)?n:"all"}var iT=new Set(["production","development","test"]);function eT(t){let n=(t??"").trim();return iT.has(n)?n:"development"}function k(t){return t==="true"||t==="1"}function _T(t){if(t===void 0||t==="")return;return k(t)}function Di(t,n,u){if(n===void 0||n==="")return;let _=Number(n);if(!Number.isSafeInteger(_)||_<=0)throw Error(`${t} must be a positive integer`);if(u!==void 0&&_>u)throw Error(`${t} must be at most ${u}`);return _}function L(t,n,u,_){return Di(t,n,_)??u}function xT(t,n){if(t===void 0||t==="")return n;return t==="true"||t==="1"}function Ce(t){if(!t)return null;try{let u=new URL(t).hostname.replace(/^\[|\]$/g,"");if(u==="localhost"||u==="127.0.0.1"||u==="::1")return null;return t}catch{return null}}function aT(t){return t===void 0||t===""||t==="true"||t==="1"}function s(t,n){return t||n}var mT=new Set(["agent-sandbox","user-desktop"]);function oT(t){let n=(t??"").trim(),u=n.length>0?n:"user-desktop";if(u==="cluster")return"agent-sandbox";if(!mT.has(u))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return u}function Ne(t,n){let u=t.home||n.DATA_DIR||n.DECOCMS_HOME||`${tT()}/deco`,_=t.localMode,e=t.nodeEnv||eT(n.NODE_ENV),x=n.NATS_URL||"nats://localhost:4222",m=_T(n.NATS_TUNNEL_PUBLIC_ENABLED)??!!n.NATS_PUBLIC_URL;return{settings:{nodeEnv:e,port:L("PORT",t.port||n.PORT,3000),baseUrl:t.baseUrl||n.BASE_URL,publicUrl:s(n.STUDIO_PUBLIC_URL,n.MESH_PUBLIC_URL),dataDir:u,databasePgSsl:k(n.DATABASE_PG_SSL),databasePoolMax:L("DATABASE_POOL_MAX",n.DATABASE_POOL_MAX,5),dbosPoolSize:L("DBOS_POOL_SIZE",n.DBOS_POOL_SIZE,5),betterAuthSecret:n.BETTER_AUTH_SECRET||"",encryptionKey:n.ENCRYPTION_KEY||"",studioJwtSecret:s(n.STUDIO_JWT_SECRET,n.MESH_JWT_SECRET),localMode:_,disableRateLimit:k(n.DISABLE_RATE_LIMIT),studioProvisionSecretKey:n.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(n.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((o)=>o.trim().toLowerCase()).filter(Boolean),clickhouseUrl:n.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:Di("CLICKHOUSE_MAX_MEMORY_USAGE",n.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:n.MONITORING_OTLP_ENDPOINT,otelServiceName:n.OTEL_SERVICE_NAME||"studio",natsPublicUrl:n.NATS_PUBLIC_URL,natsTunnelPublicEnabled:m,natsTunnelSessionTtlSeconds:L("NATS_TUNNEL_SESSION_TTL_SECONDS",n.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:n.NATS_OPERATOR_JWT,natsAccountJwt:n.NATS_ACCOUNT_JWT,natsAccountSigningKey:n.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:n.NATS_CREDS,configPath:n.CONFIG_PATH||"./config.json",aiGatewayEnabled:k(n.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:n.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:n.DECO_AI_GATEWAY_ADMIN_TOKEN,seatAllowanceCents:L("STUDIO_SEAT_ALLOWANCE_CENTS",n.STUDIO_SEAT_ALLOWANCE_CENTS,500),stripeWebhookSecret:n.STRIPE_WEBHOOK_SECRET,stripeSecretKey:n.STRIPE_SECRET_KEY,stripeSeatPriceId:n.STRIPE_SEAT_PRICE_ID,topupFeePercent:L("STUDIO_TOPUP_FEE_PERCENT",n.STUDIO_TOPUP_FEE_PERCENT,15,100),enableDecoImport:k(n.ENABLE_DECO_IMPORT),billingEnforced:k(n.STUDIO_BILLING_ENFORCED),mcpCacheEnabled:xT(n.MCP_CACHE_ENABLED,e!=="development"),orgFsPublicSetsJson:n.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:k(n.DISABLE_ORGFS_MOUNTS),decopilotMaxConcurrentSubagents:L("DECOPILOT_MAX_CONCURRENT_SUBAGENTS",n.DECOPILOT_MAX_CONCURRENT_SUBAGENTS,4),decopilotMaxConcurrentHostedRuns:L("DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS",n.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS,3),s3Endpoint:n.S3_ENDPOINT,s3Bucket:n.S3_BUCKET,s3Region:n.S3_REGION||"auto",s3AccessKeyId:n.S3_ACCESS_KEY_ID,s3SecretAccessKey:n.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:aT(n.S3_FORCE_PATH_STYLE),monitoringS3Bucket:n.MONITORING_S3_BUCKET,monitoringS3Endpoint:n.MONITORING_S3_ENDPOINT,monitoringS3Region:n.MONITORING_S3_REGION,monitoringS3AccessKeyId:n.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:n.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:n.MONITORING_S3_PREFIX,duckdbExtensionDirectory:n.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:n.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:Di("DUCKDB_THREADS",n.DUCKDB_THREADS),isCli:!0,noTui:t.noTui===!0,podName:n.POD_NAME||crypto.randomUUID(),dispatchRole:uT(s(n.STUDIO_DISPATCH_ROLE,n.MESH_DISPATCH_ROLE)),sandboxProviderKind:oT(n.STUDIO_SANDBOX_PROVIDER),decoSupabaseUrl:n.DECO_SUPABASE_URL,decoSupabaseServiceKey:n.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:n.FIRECRAWL_API_KEY,reportsInternalApiUrl:s(n.REPORTS_INTERNAL_API_URL,n.COMMERCE_DISCOVERY_INTERNAL_API_URL),reportsInternalApiKey:s(n.REPORTS_INTERNAL_API_KEY,n.COMMERCE_DISCOVERY_INTERNAL_API_KEY),s3TenantBucket:n.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:n.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:n.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:n.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:n.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:n.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:n.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:Ce(n.DATABASE_URL),externalNatsUrl:Ce(x),skipMigrations:t.skipMigrations}}var Ct=null;function H(){if(!Ct)yT();return Ct}function yT(){if(Ct)return;let t={...process.env},n=Ne({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);Ct=Object.freeze({...n.settings,databaseUrl:t.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((u)=>u.trim()).filter(Boolean)})}import{createContextKey as wT,metrics as KT,propagation as _E,ROOT_CONTEXT as xE,SpanStatusCode as aE,trace as cT}from"@opentelemetry/api";import{logs as pT,SeverityNumber as Ji}from"@opentelemetry/api-logs";import{OTLPLogExporter as yE}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as zT}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as NE}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as EE}from"@opentelemetry/instrumentation-runtime-node";import{context as dN,propagation as bN,SpanKind as tf,SpanStatusCode as nf}from"@opentelemetry/api";var ef=globalThis.fetch;import{ExportResultCode as wf}from"@opentelemetry/core";import{ExportResultCode as Nt}from"@opentelemetry/core";import{mkdir as TT,rename as CT,writeFile as NT}from"fs/promises";import{join as ft}from"path";class Et{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let n=t.flushIntervalMs??60000;if(n>0&&n<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((u)=>{console.error("[NDJSONExporter] Timer flush failed:",u)})},n),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:Nt.FAILED});for(let n of t){let u=JSON.stringify(n),_=this.partitionKey?this.partitionKey(n):"";this.bufferItems.push({partition:_,json:u}),this.bufferBytes+=Buffer.byteLength(u,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:Nt.SUCCESS})).catch((n)=>{return console.error("[NDJSONExporter] Flush failed:",n),{code:Nt.FAILED}});return Promise.resolve({code:Nt.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let n=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=n,n}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let n=new Map;for(let e of t){let x=n.get(e.partition);if(!x)x=[],n.set(e.partition,x);x.push(e.json)}let u=await Promise.allSettled(Array.from(n.entries()).map(([e,x])=>this.writeNDJSON(x,e).then(()=>e))),_=u.find((e)=>e.status==="rejected");if(_){let e=new Set;for(let m of u)if(m.status==="fulfilled")e.add(m.value);let x=t.filter((m)=>!e.has(m.partition));this.bufferItems=x.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw _.reason}}async writeNDJSON(t,n){let u=new Date,_=[String(u.getUTCFullYear()),String(u.getUTCMonth()+1).padStart(2,"0"),String(u.getUTCDate()).padStart(2,"0"),String(u.getUTCHours()).padStart(2,"0")],e=n?ft(this.basePath,n,..._):ft(this.basePath,..._);if(!this.knownDirs.has(e))await TT(e,{recursive:!0,mode:448}),this.knownDirs.add(e);let x=`${crypto.randomUUID()}.ndjson`,m=ft(e,`.${x}.tmp`),a=ft(e,x),o=t.join(`
 `)+`
 `;await NT(m,o,{mode:384}),await CT(m,a)}}import{ExportResultCode as Pf}from"@opentelemetry/core";import{AggregationTemporality as Uf,DataPointType as jf}from"@opentelemetry/sdk-metrics";import{ExportResultCode as kf}from"@opentelemetry/core";var Zf=Buffer.byteLength("... [TRUNCATED]","utf8");import{BatchLogRecordProcessor as jE,LoggerProvider as DE}from"@opentelemetry/sdk-logs";import{detectResources as LE,envDetector as RE,hostDetector as WE,osDetector as kE,processDetector as $E,resourceFromAttributes as XE}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as ZE}from"@opentelemetry/sdk-metrics";import{NOOP_LOGGER as Mf}from"@opentelemetry/api-logs";import{NodeSDK as ME}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as hE,SamplingDecision as M}from"@opentelemetry/sdk-trace-base";import{SpanStatusCode as Sf}from"@opentelemetry/api";var PT="__d",rT=wT("Current request"),UT=1;var Ee=(t)=>{let u=new URL(t.url).searchParams.get(PT);if(u==="")return crypto.randomUUID();if(!u)u=t.headers.get("x-trace-debug-id");return u};class we{inner;constructor(t){this.inner=t}shouldSample(t,n,u,_,e,x){let m=t.getValue(rT);if(!m){if(this.inner)return this.inner.shouldSample(t,n,u,_,e,x);return{decision:M.RECORD_AND_SAMPLED}}let a=Ee(m);if(a)return{decision:M.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":a}};if(this.inner){let o=this.inner.shouldSample(t,n,u,_,e,x);if(o.decision===M.RECORD_AND_SAMPLED){let y=crypto.randomUUID();o.attributes={...o.attributes??{},"trace.debug.id":y}}return o}return{decision:M.NOT_RECORD}}toString(){return"DebugSampler"}}class Ke{ratio;constructor(t){this.ratio=t}shouldSample(){if(Math.random()<this.ratio)return{decision:M.RECORD_AND_SAMPLED};return{decision:M.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}var AE=new zT({preventServerStart:!0}),SE=new we(new Ke(UT));var fe=cT.getTracer("studio","1.0.0"),V=KT.getMeter("studio","1.0.0"),jT=pT.getLogger("studio","1.0.0"),Li=(t,n,u)=>{let _={},e=u,x=u[u.length-1];if(x!==null&&typeof x==="object"&&!Array.isArray(x)&&!(x instanceof Error)&&Object.getPrototypeOf(x)===Object.prototype)_=x,e=u.slice(0,-1);let m=e.map((a)=>{if(a instanceof Error)return`${a.name}: ${a.message}`;if(typeof a==="object")try{return JSON.stringify(a)}catch{return"[Object]"}return String(a)}).join(" ");jT.emit({severityNumber:t,severityText:n,body:m,attributes:{"log.source":"console",..._}})},Ri={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...t)=>{Li(Ji.ERROR,"ERROR",t),Ri.error(...t)};console.warn=(...t)=>{Li(Ji.WARN,"WARN",t),Ri.warn(...t)};console.debug=(...t)=>{Li(Ji.DEBUG,"DEBUG",t),Ri.debug(...t)};var Wi,ce=0,ki=500;function DT(){if(Wi)return;let t=performance.now()+ki;Wi=setInterval(()=>{let n=performance.now();ce=Math.max(0,n-t),t=n+ki},ki),Wi.unref?.()}function pe(){return DT(),ce}var LT=()=>V.createHistogram("db.query.duration",{description:"Database query execution duration in milliseconds",unit:"ms"}),ze=()=>V.createHistogram("db.pool.acquire.duration",{description:"Time spent waiting to acquire a connection from the pool",unit:"ms"}),Pe=400,RT=100,WT=(t)=>(n)=>{let u={"db.statement":n.query.sql,"db.status":n.level==="error"?"error":"success"};if(n.queryDurationMillis>Pe){let _=pe(),e=_>Pe/2;console.error(e?"Slow query measurement \u2014 likely event-loop lag, not slow SQL:":"Slow query detected:",{durationMs:n.queryDurationMillis,eventLoopLagMs:Math.round(_),sql:n.query.sql,pool:{total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:wt()}})}if(LT().record(n.queryDurationMillis,u),n.level==="error")console.error("Query failed:",{durationMs:n.queryDurationMillis,error:n.error,sql:n.query.sql})};function kT(t){let n=t.connect.bind(t);return t.connect=(u)=>{if(typeof u==="function")return n(u);let _=performance.now(),e=wt(),x=t.idleCount===0&&t.totalCount>=e,m=t.idleCount;return n().then((a)=>{let o=performance.now()-_;if(ze().record(o,{"db.pool.outcome":x?"contended":"available"}),o>RT)if(x)console.error("Slow db pool acquire \u2014 pool saturated:",{waitMs:o,total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:e});else console.warn("Slow db pool acquire \u2014 event-loop lag (not pool):",{waitMs:o,idleAtStart:m,total:t.totalCount,max:e});return a},(a)=>{throw ze().record(performance.now()-_,{"db.pool.outcome":"error"}),a})},t}var je={keepAlive:!0,keepAliveInitialDelayMillis:1e4,idleTimeoutMillis:300000,connectionTimeoutMillis:30000,allowExitOnIdle:!0};function De(){try{return H().databasePgSsl}catch{return!1}}function wt(){try{return H().databasePoolMax}catch{return 10}}function $T(t){let n=kT(new Ue({connectionString:t,max:wt(),ssl:De(),...je})),u=new re({pool:n});return{type:"postgres",db:new JT({dialect:u,log:WT(n)}),pool:n}}function q(){return H().databaseUrl}function Je(t){let n=t||q();return new re({pool:new Ue({connectionString:n,max:wt(),ssl:De(),...je})})}function XT(t){let n=t||q();return $T(n)}async function Le(t){if(await t.db.destroy(),!t.pool.ended)await t.pool.end();if(t===v)v=null}var v=null;function $i(){if(!v)v=XT(q());return v}async function Re(t){let u={database:Je(t||q()),plugins:[FT({dynamicAccessControl:{enabled:!0,enableCustomResources:!0}}),HT(),MT(),YT(),AT(),BT({loginPage:"/login"}),ZT(),hT({sendMagicLink:async()=>{}}),ST({sendVerificationOTP:async()=>{}})]},{toBeAdded:_,toBeCreated:e,runMigrations:x}=await QT(u);if(!_.length&&!e.length)return"up to date";return await x(),`${e.length+_.length} table(s) migrated`}async function ke(t,n){return(await Y`
     SELECT table_name FROM information_schema.tables