decocms 4.190.0 → 4.190.2

package/dist/server/migrate.js

@@ -289,18 +289,18 @@ var _m=Object.defineProperty;var um=(t)=>t;function xm(t,n){this[t]=um.bind(null
   `.execute(t),await k`
     ALTER TABLE automations
     ALTER COLUMN virtual_mcp_id DROP NOT NULL
-  `.execute(t)}var ln={};u(ln,{up:()=>fy,reshapeSimpleMode:()=>ax,inferAutomationTier:()=>Ex,down:()=>wy,__testing:()=>ey});var Ey={tiers:{fast:null,smart:null,thinking:null,image:null,web_research:null}},Ky=["fast","smart","thinking","image","web_research"];function sn(t){if(!t||typeof t!=="object")return!1;let n=t;if(!("tiers"in n))return!1;let _=n.tiers;if(!_||typeof _!=="object")return!1;return Ky.some((m)=>(m in _))}function ax(t){if(sn(t))return t;let n=t,_=n?.enabled===!0,m=(x)=>x&&x.keyId&&x.modelId?{keyId:x.keyId,modelId:x.modelId,title:x.title}:null;if(!_)return Ey;return{tiers:{fast:m(n?.chat?.fast),smart:m(n?.chat?.smart),thinking:m(n?.chat?.thinking),image:m(n?.image),web_research:m(n?.webResearch)}}}function Ex(t){if(t.tier==="fast"||t.tier==="smart"||t.tier==="thinking")return t.tier;if(t.thinking?.capabilities?.reasoning===!0)return"thinking";return"smart"}function Kx(t){if(!(t.tier==="fast"||t.tier==="smart"||t.tier==="thinking"))return!1;return["credentialId","thinking","coding","fast","smart"].every((m)=>t[m]===void 0)}var ey={isAlreadyReshapedSimpleMode:sn,isAlreadyReshapedAutomationModels:Kx};async function fy(t){let n=await t.selectFrom("organization_settings").select(["organizationId","simple_mode"]).execute();for(let m of n){let x=m.simple_mode?typeof m.simple_mode==="string"?JSON.parse(m.simple_mode):m.simple_mode:null;if(sn(x))continue;let i=ax(x);await t.updateTable("organization_settings").set({simple_mode:JSON.stringify(i)}).where("organizationId","=",m.organizationId).execute()}let _=await t.selectFrom("automations").select(["id","organization_id","models"]).execute();for(let m of _){let x;try{x=typeof m.models==="string"?JSON.parse(m.models):m.models}catch{x={}}if(Kx(x))continue;let i=Ex(x);if(await t.updateTable("automations").set({models:JSON.stringify({tier:i})}).where("id","=",m.id).execute(),x.thinking?.capabilities?.image)console.log(`[migration 077] automation ${m.id} previously used an image-only model; mapped to "${i}"`)}}async function wy(t){throw Error("077-tier-only-model-selection is not reversible. Restore from snapshot.")}var dn={};u(dn,{up:()=>zy,down:()=>Py});import{sql as D}from"kysely";async function zy(t){await t.schema.alterTable("automations").addColumn("kind","text",(n)=>n.notNull().defaultTo("agent")).addColumn("connection_id","text").addColumn("tool_name","text").addColumn("tool_input","text").execute(),await D`
+  `.execute(t)}var ln={};u(ln,{up:()=>fy,reshapeSimpleMode:()=>ax,inferAutomationTier:()=>Ex,down:()=>wy,__testing:()=>ey});var Ey={tiers:{fast:null,smart:null,thinking:null,image:null,web_research:null}},Ky=["fast","smart","thinking","image","web_research"];function sn(t){if(!t||typeof t!=="object")return!1;let n=t;if(!("tiers"in n))return!1;let _=n.tiers;if(!_||typeof _!=="object")return!1;return Ky.some((m)=>(m in _))}function ax(t){if(sn(t))return t;let n=t,_=n?.enabled===!0,m=(x)=>x&&x.keyId&&x.modelId?{keyId:x.keyId,modelId:x.modelId,title:x.title}:null;if(!_)return Ey;return{tiers:{fast:m(n?.chat?.fast),smart:m(n?.chat?.smart),thinking:m(n?.chat?.thinking),image:m(n?.image),web_research:m(n?.webResearch)}}}function Ex(t){if(t.tier==="fast"||t.tier==="smart"||t.tier==="thinking")return t.tier;if(t.thinking?.capabilities?.reasoning===!0)return"thinking";return"smart"}function Kx(t){if(!(t.tier==="fast"||t.tier==="smart"||t.tier==="thinking"))return!1;return["credentialId","thinking","coding","fast","smart"].every((m)=>t[m]===void 0)}var ey={isAlreadyReshapedSimpleMode:sn,isAlreadyReshapedAutomationModels:Kx};async function fy(t){let n=await t.selectFrom("organization_settings").select(["organizationId","simple_mode"]).execute();for(let m of n){let x=m.simple_mode?typeof m.simple_mode==="string"?JSON.parse(m.simple_mode):m.simple_mode:null;if(sn(x))continue;let i=ax(x);await t.updateTable("organization_settings").set({simple_mode:JSON.stringify(i)}).where("organizationId","=",m.organizationId).execute()}let _=await t.selectFrom("automations").select(["id","organization_id","models"]).execute();for(let m of _){let x;try{x=typeof m.models==="string"?JSON.parse(m.models):m.models}catch{x={}}if(Kx(x))continue;let i=Ex(x);if(await t.updateTable("automations").set({models:JSON.stringify({tier:i})}).where("id","=",m.id).execute(),x.thinking?.capabilities?.image)console.log(`[migration 077] automation ${m.id} previously used an image-only model; mapped to "${i}"`)}}async function wy(t){throw Error("077-tier-only-model-selection is not reversible. Restore from snapshot.")}var dn={};u(dn,{up:()=>zy,down:()=>Py});import{sql as $}from"kysely";async function zy(t){await t.schema.alterTable("automations").addColumn("kind","text",(n)=>n.notNull().defaultTo("agent")).addColumn("connection_id","text").addColumn("tool_name","text").addColumn("tool_input","text").execute(),await $`
     ALTER TABLE automations
     ALTER COLUMN virtual_mcp_id DROP NOT NULL
-  `.execute(t),await D`
+  `.execute(t),await $`
     ALTER TABLE automations
     ADD CONSTRAINT chk_automation_kind
     CHECK (kind IN ('agent', 'tool_call'))
-  `.execute(t),await D`
+  `.execute(t),await $`
     ALTER TABLE automations
     ADD CONSTRAINT chk_automation_agent_fields
     CHECK (kind != 'agent' OR virtual_mcp_id IS NOT NULL)
-  `.execute(t),await D`
+  `.execute(t),await $`
     ALTER TABLE automations
     ADD CONSTRAINT chk_automation_tool_call_fields
     CHECK (
@@ -311,7 +311,7 @@ var _m=Object.defineProperty;var um=(t)=>t;function xm(t,n){this[t]=um.bind(null
         AND tool_input IS NOT NULL
       )
     )
-  `.execute(t)}async function Py(t){await D`ALTER TABLE automations DROP CONSTRAINT chk_automation_tool_call_fields`.execute(t),await D`ALTER TABLE automations DROP CONSTRAINT chk_automation_agent_fields`.execute(t),await D`ALTER TABLE automations DROP CONSTRAINT chk_automation_kind`.execute(t),await D`DELETE FROM automations WHERE kind = 'tool_call'`.execute(t),await D`
+  `.execute(t)}async function Py(t){await $`ALTER TABLE automations DROP CONSTRAINT chk_automation_tool_call_fields`.execute(t),await $`ALTER TABLE automations DROP CONSTRAINT chk_automation_agent_fields`.execute(t),await $`ALTER TABLE automations DROP CONSTRAINT chk_automation_kind`.execute(t),await $`DELETE FROM automations WHERE kind = 'tool_call'`.execute(t),await $`
     ALTER TABLE automations
     ALTER COLUMN virtual_mcp_id SET NOT NULL
   `.execute(t),await t.schema.alterTable("automations").dropColumn("tool_input").dropColumn("tool_name").dropColumn("connection_id").dropColumn("kind").execute()}var bn={};u(bn,{up:()=>oy,down:()=>py});import{sql as ex}from"kysely";var Uy=new Set(["host","docker","agent-sandbox"]);async function oy(t){let n=await ex`
@@ -799,21 +799,21 @@ var _m=Object.defineProperty;var um=(t)=>t;function xm(t,n){this[t]=um.bind(null
     `.execute(t)}}async function dy(t){}var f_={};u(f_,{up:()=>by,down:()=>tC});import{sql as e_}from"kysely";async function by(t){await t.schema.createTable("org_file_configs").addColumn("id","text",(n)=>n.primaryKey()).addColumn("organization_id","text",(n)=>n.notNull().references("organization.id").onDelete("cascade")).addColumn("name","text",(n)=>n.notNull()).addColumn("description","text").addColumn("bucket","text",(n)=>n.notNull()).addColumn("region","text",(n)=>n.notNull()).addColumn("endpoint","text").addColumn("force_path_style","boolean",(n)=>n.notNull().defaultTo(!1)).addColumn("prefix","text").addColumn("encrypted_credentials","text",(n)=>n.notNull()).addColumn("created_by","text",(n)=>n.notNull()).addColumn("created_at","timestamptz",(n)=>n.notNull().defaultTo(e_`CURRENT_TIMESTAMP`)).addColumn("updated_by","text",(n)=>n.notNull()).addColumn("updated_at","timestamptz",(n)=>n.notNull().defaultTo(e_`CURRENT_TIMESTAMP`)).execute(),await t.schema.createIndex("idx_org_file_configs_org").on("org_file_configs").column("organization_id").execute(),await e_`
     CREATE UNIQUE INDEX idx_org_file_configs_org_name
     ON org_file_configs (organization_id, lower(name))
-  `.execute(t)}async function tC(t){await t.schema.dropTable("org_file_configs").execute()}var w_={};u(w_,{up:()=>nC,down:()=>_C});import{sql as $}from"kysely";async function nC(t){await $`ALTER TABLE automations DROP CONSTRAINT chk_automation_tool_call_fields`.execute(t),await $`ALTER TABLE automations DROP CONSTRAINT chk_automation_agent_fields`.execute(t),await $`ALTER TABLE automations DROP CONSTRAINT chk_automation_kind`.execute(t),await $`DELETE FROM automations WHERE kind = 'tool_call'`.execute(t),await $`
+  `.execute(t)}async function tC(t){await t.schema.dropTable("org_file_configs").execute()}var w_={};u(w_,{up:()=>nC,down:()=>_C});import{sql as L}from"kysely";async function nC(t){await L`ALTER TABLE automations DROP CONSTRAINT chk_automation_tool_call_fields`.execute(t),await L`ALTER TABLE automations DROP CONSTRAINT chk_automation_agent_fields`.execute(t),await L`ALTER TABLE automations DROP CONSTRAINT chk_automation_kind`.execute(t),await L`DELETE FROM automations WHERE kind = 'tool_call'`.execute(t),await L`
     ALTER TABLE automations
     ALTER COLUMN virtual_mcp_id SET NOT NULL
-  `.execute(t),await t.schema.alterTable("automations").dropColumn("tool_input").dropColumn("tool_name").dropColumn("connection_id").dropColumn("kind").execute()}async function _C(t){await t.schema.alterTable("automations").addColumn("kind","text",(n)=>n.notNull().defaultTo("agent")).addColumn("connection_id","text").addColumn("tool_name","text").addColumn("tool_input","text").execute(),await $`
+  `.execute(t),await t.schema.alterTable("automations").dropColumn("tool_input").dropColumn("tool_name").dropColumn("connection_id").dropColumn("kind").execute()}async function _C(t){await t.schema.alterTable("automations").addColumn("kind","text",(n)=>n.notNull().defaultTo("agent")).addColumn("connection_id","text").addColumn("tool_name","text").addColumn("tool_input","text").execute(),await L`
     ALTER TABLE automations
     ALTER COLUMN virtual_mcp_id DROP NOT NULL
-  `.execute(t),await $`
+  `.execute(t),await L`
     ALTER TABLE automations
     ADD CONSTRAINT chk_automation_kind
     CHECK (kind IN ('agent', 'tool_call'))
-  `.execute(t),await $`
+  `.execute(t),await L`
     ALTER TABLE automations
     ADD CONSTRAINT chk_automation_agent_fields
     CHECK (kind != 'agent' OR virtual_mcp_id IS NOT NULL)
-  `.execute(t),await $`
+  `.execute(t),await L`
     ALTER TABLE automations
     ADD CONSTRAINT chk_automation_tool_call_fields
     CHECK (
@@ -1093,7 +1093,7 @@ var _m=Object.defineProperty;var um=(t)=>t;function xm(t,n){this[t]=um.bind(null
       WHERE status = 'in_review'
         AND assignee_id = 'super-agent'
         AND dismissed_at IS NULL
-  `.execute(t)}async function sa(t){await t.schema.dropIndex("idx_task_board_items_pending_review").execute()}var la={"001-initial-schema":pt,"002-organization-settings":Jt,"003-connection-schema-align":jt,"004-remove-models-binding":Dt,"005-connection-configuration":$t,"006-add-views-to-settings":Lt,"007-monitoring-logs":Wt,"008-event-bus":Rt,"009-drop-audit-logs":Xt,"010-gateways":Qt,"011-gateway-icon":Zt,"012-gateway-tool-selection-mode":Ft,"013-monitoring-user-agent-gateway":Ht,"014-gateway-resources-prompts":Mt,"015-monitoring-properties":Yt,"016-downstream-token-client-info":Bt,"017-downstream-token-remove-userid":Gt,"018-drop-gateway-tool-selection-strategy":At,"019-remove-gateway-is-default":St,"020-enabled-plugins":Ot,"021-threads":It,"022-rename-gateway-to-virtual-mcp":kt,"023-optimize-thread-indexes":ct,"024-consolidate-virtual-mcp":ht,"025-add-monitoring-virtual-mcp-id":Vt,"026-restrict-child-connection-delete":gt,"027-update-management-mcp-url":qt,"028-update-management-mcp-to-self":st,"029-add-updated-by-to-connections":lt,"030-member-tags":dt,"031-add-dependency-mode":bt,"032-projects":tn,"033-thread-status":nn,"034-monitoring-dashboards":_n,"035-project-connections":un,"036-update-registry-url":xn,"037-ai-provider-keys":mn,"038-oauth-pkce-states":Tn,"039-automations":yn,"040-replace-next-run-at-with-last-run-at":Cn,"041-ai-provider-keys-unique-constraint":Nn,"042-rename-mesh-mcp-to-cms-mcp":an,"043-rename-cms-mcp-to-deco-cms":En,"044-drop-connections-tools-column":Kn,"045-thread-context-start-message":en,"046-remove-object-storage-plugin":wn,"047-add-next-run-at":zn,"048-merge-projects-agents":Un,"049-remove-org-admin-projects":on,"050-durable-agent-runs":pn,"051-org-sso":jn,"052-thread-agent-ids":Dn,"053-registry-config":$n,"054-connection-slug":Wn,"055-spaces":Rn,"056-automation-project-scope":Xn,"057-thread-virtual-mcp-id":Qn,"058-trigger-callback-tokens":Zn,"059-kv":Fn,"060-member-index":Hn,"061-downstream-token-connection-index":Mn,"062-private-registry":Yn,"063-event-subscriptions-enabled-boolean":Bn,"064-brand-context":Gn,"065-organization-domains":An,"066-brand-context-structured":Sn,"067-threads-metadata":On,"068-threads-branch":In,"069-sandbox-runner-state":kn,"070-model-categories":cn,"071-default-home-agents":hn,"072-ai-provider-key-preset-id":Vn,"073-backfill-basic-usage-roles":gn,"074-sandbox-runner-state-handle-nonunique":rn,"075-thread-inflight-async-jobs":qn,"076-automations-drop-agent-json":vn,"077-tier-only-model-selection":ln,"078-automation-tool-call-kind":dn,"079-strip-legacy-freestyle-vm-map-entries":bn,"080-async-research-jobs":t_,"081-async-research-jobs-result-content":n_,"082-secrets":__,"083-thread-run-locally":u_,"084-drop-host-sandbox-rows":x_,"085-rename-runner-kind":m_,"086-thread-pins-and-vm-map-rekey":i_,"087-fix-vm-map-rekey":T_,"088-purge-cli-activate-keys":y_,"089-rename-remote-user-to-desktop":C_,"090-automation-webhook-triggers":N_,"091-organization-domains-allow-multi":a_,"092-sandbox-naming-uniformization":E_,"093-backfill-global-search-basic-usage":K_,"094-org-file-configs":f_,"095-remove-automation-tool-call-kind":w_,"096-org-file-configs-public-url-base":z_,"097-drop-local-docker-sandbox-state":U_,"098-thread-message-parts":o_,"099-run-fence":p_,"100-link-transport":J_,"101-cancel-requested-at":j_,"102-observational-agent":D_,"103-revert-observational-agent":$_,"104-agent-sandbox-provider-kind":W_,"105-org-fs":R_,"106-automation-tools":X_,"107-org-fs-public-org":Q_,"108-automation-max-agent-steps":Z_,"109-thread-message-parts-per-message-seq":F_,"110-backfill-ghs-token-expiry":H_,"111-org-fs-thread-id":M_,"112-org-file-configs-credential-type":Y_,"113-thread-failure-reason":B_,"114-run-acked-seq":G_,"115-thread-projected-seq":A_,"116-org-sites":S_,"117-org-file-configs-site-slug":O_,"118-organization-domains-multi-verify":I_,"119-organization-join-requests":k_,"120-org-fs-read-public":c_,"121-org-fs-share-password":h_,"122-split-web-research-tier":r_,"123-connection-credential-vault":q_,"124-drop-thread-projected-seq":v_,"125-github-child-single-parent":s_,"126-task-board":d_,"127-task-board-due-date":b_,"128-reports-only":tu,"129-task-board-assigned-by":nu,"130-task-board-thread-id":_u,"131-task-board-thread-link-cascade":uu,"132-task-board-item-prs":xu,"133-dedupe-duplicate-members":mu,"134-drop-task-board-enabled":iu,"135-task-board-item-fk-cascade":Tu,"136-task-board-import-idempotency":yu,"137-agent-sandbox-runner-state":Cu,"138-agent-sandbox-sessions":Nu,"139-organization-billing":au,"140-seat-change-log":Eu,"141-benefits-sync-pending":Ku,"142-stripe-event-watermark":eu,"143-armed-report-url":fu,"144-benefits-pending-index":wu,"145-user-model-preferences":zu,"146-organization-main-agent":Pu,"147-drop-agent-sandbox-tables":Uu,"148-org-flags":ou,"149-task-board-item-sort-order":pu,"150-task-board-activity":Ju,"151-task-board-tags":Du,"152-repair-connection-slug":Lu,"153-task-board-latest-assistant-part-index":Wu,"154-task-board-qa-activity":Xu,"155-task-board-review-claims":Qu,"156-task-board-conflict-activity":Fu,"157-drop-seat-billing":Hu,"158-drop-github-child-single-parent":Mu,"159-task-board-comments":Yu,"160-task-quota-billing":Bu,"161-task-quota-claim-state":Au,"162-claude-subscriptions":Su,"163-task-board-item-dismissed":Ou,"164-per-org-task-quota":Iu,"165-task-board-pending-review-index":ku},cu=la;import{getMigrations as ZE}from"better-auth/db";import{sso as FE}from"@better-auth/sso";import{organization as HE}from"@decocms/better-auth/plugins";import{admin as ME,apiKey as YE,jwt as BE,magicLink as GE,mcp as AE,openAPI as SE}from"better-auth/plugins";import{emailOTP as OE}from"better-auth/plugins/email-otp";import{Kysely as DE,PostgresDialect as rx}from"kysely";import{Pool as qx}from"pg";import{homedir as da}from"os";var ba=new Set(["all","worker","api"]);function tE(t){let n=(t??"").trim();return ba.has(n)?n:"all"}var nE=new Set(["production","development","test"]);function _E(t){let n=(t??"").trim();return nE.has(n)?n:"development"}function L(t){return t==="true"||t==="1"}function uE(t){if(t===void 0||t==="")return;return L(t)}function hu(t,n,_){if(n===void 0||n==="")return;let m=Number(n);if(!Number.isSafeInteger(m)||m<=0)throw Error(`${t} must be a positive integer`);if(_!==void 0&&m>_)throw Error(`${t} must be at most ${_}`);return m}function U(t,n,_,m){return hu(t,n,m)??_}function xE(t,n,_,m){if(n===void 0||n==="")return _;let x=Number(n);if(!Number.isSafeInteger(x)||x<0)throw Error(`${t} must be a non-negative integer`);if(m!==void 0&&x>m)throw Error(`${t} must be at most ${m}`);return x}function Bx(t,n){if(t===void 0||t==="")return n;return t==="true"||t==="1"}function Gx(t){if(!t)return null;try{let _=new URL(t).hostname.replace(/^\[|\]$/g,"");if(_==="localhost"||_==="127.0.0.1"||_==="::1")return null;return t}catch{return null}}function mE(t){return t===void 0||t===""||t==="true"||t==="1"}function q(t,n){return t||n}var iE=new Set(["agent-sandbox","user-desktop"]);function TE(t){let n=(t??"").trim(),_=n.length>0?n:"user-desktop";if(_==="cluster")return"agent-sandbox";if(!iE.has(_))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return _}function Ax(t,n){let _=t.home||n.DATA_DIR||n.DECOCMS_HOME||`${da()}/deco`,m=t.localMode,x=t.nodeEnv||_E(n.NODE_ENV),i=n.NATS_URL||"nats://localhost:4222",y=uE(n.NATS_TUNNEL_PUBLIC_ENABLED)??!!n.NATS_PUBLIC_URL;return{settings:{nodeEnv:x,port:U("PORT",t.port||n.PORT,3000,65535),baseUrl:t.baseUrl||n.BASE_URL,publicUrl:q(n.STUDIO_PUBLIC_URL,n.MESH_PUBLIC_URL),dataDir:_,databasePgSsl:L(n.DATABASE_PG_SSL),databasePoolMax:U("DATABASE_POOL_MAX",n.DATABASE_POOL_MAX,5),dbosPoolSize:U("DBOS_POOL_SIZE",n.DBOS_POOL_SIZE,5),betterAuthSecret:n.BETTER_AUTH_SECRET||"",encryptionKey:n.ENCRYPTION_KEY||"",studioJwtSecret:q(n.STUDIO_JWT_SECRET,n.MESH_JWT_SECRET),localMode:m,disableRateLimit:L(n.DISABLE_RATE_LIMIT),studioProvisionSecretKey:n.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(n.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((C)=>C.trim().toLowerCase()).filter(Boolean),clickhouseUrl:n.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:hu("CLICKHOUSE_MAX_MEMORY_USAGE",n.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:n.MONITORING_OTLP_ENDPOINT,otelServiceName:n.OTEL_SERVICE_NAME||"studio",natsPublicUrl:n.NATS_PUBLIC_URL,natsTunnelPublicEnabled:y,natsTunnelSessionTtlSeconds:U("NATS_TUNNEL_SESSION_TTL_SECONDS",n.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:n.NATS_OPERATOR_JWT,natsAccountJwt:n.NATS_ACCOUNT_JWT,natsAccountSigningKey:n.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:n.NATS_CREDS,configPath:n.CONFIG_PATH||"./config.json",aiGatewayEnabled:L(n.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:n.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:n.DECO_AI_GATEWAY_ADMIN_TOKEN,stripeWebhookSecret:n.STRIPE_WEBHOOK_SECRET,stripeSecretKey:n.STRIPE_SECRET_KEY,stripeOrgPriceId:n.STRIPE_ORG_PRICE_ID,topupFeePercent:xE("STUDIO_TOPUP_FEE_PERCENT",n.STUDIO_TOPUP_FEE_PERCENT,15,100),taskQuotaEnforced:L(n.STUDIO_TASK_QUOTA_ENFORCED),freeTaskExecutions:U("STUDIO_FREE_TASKS",n.STUDIO_FREE_TASKS,3),monthlyTaskExecutions:U("STUDIO_MONTHLY_TASKS",n.STUDIO_MONTHLY_TASKS,10),maxRunsPerTask:U("STUDIO_MAX_RUNS_PER_TASK",n.STUDIO_MAX_RUNS_PER_TASK,5),enableDecoImport:L(n.ENABLE_DECO_IMPORT),mcpCacheEnabled:Bx(n.MCP_CACHE_ENABLED,x!=="development"),orgFsPublicSetsJson:n.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:L(n.DISABLE_ORGFS_MOUNTS),decopilotMaxConcurrentSubagents:U("DECOPILOT_MAX_CONCURRENT_SUBAGENTS",n.DECOPILOT_MAX_CONCURRENT_SUBAGENTS,4),decopilotMaxConcurrentHostedRuns:U("DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS",n.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS,3),taskBoardReviewSweeperEnabled:Bx(n.TASK_BOARD_REVIEW_SWEEPER_ENABLED,!0),sandboxMaxConcurrentHostedRuns:U("SANDBOX_MAX_CONCURRENT_HOSTED_RUNS",n.SANDBOX_MAX_CONCURRENT_HOSTED_RUNS,12),s3Endpoint:n.S3_ENDPOINT,s3Bucket:n.S3_BUCKET,s3Region:n.S3_REGION||"auto",s3AccessKeyId:n.S3_ACCESS_KEY_ID,s3SecretAccessKey:n.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:mE(n.S3_FORCE_PATH_STYLE),monitoringS3Bucket:n.MONITORING_S3_BUCKET,monitoringS3Endpoint:n.MONITORING_S3_ENDPOINT,monitoringS3Region:n.MONITORING_S3_REGION,monitoringS3AccessKeyId:n.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:n.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:n.MONITORING_S3_PREFIX,duckdbExtensionDirectory:n.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:n.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:hu("DUCKDB_THREADS",n.DUCKDB_THREADS),isCli:!0,noTui:t.noTui===!0,podName:n.POD_NAME||crypto.randomUUID(),dispatchRole:tE(q(n.STUDIO_DISPATCH_ROLE,n.MESH_DISPATCH_ROLE)),sandboxProviderKind:TE(n.STUDIO_SANDBOX_PROVIDER),sandboxStickyHeadRefEnabled:L(n.SANDBOX_STICKY_HEAD_REF),sandboxReleaseOnRunEndEnabled:L(n.SANDBOX_RELEASE_ON_RUN_END),sandboxReleaseGraceMs:U("SANDBOX_RELEASE_GRACE_MS",n.SANDBOX_RELEASE_GRACE_MS,120000),decoSupabaseUrl:n.DECO_SUPABASE_URL,decoSupabaseServiceKey:n.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:n.FIRECRAWL_API_KEY,reportsInternalApiUrl:q(n.REPORTS_INTERNAL_API_URL,n.COMMERCE_DISCOVERY_INTERNAL_API_URL),reportsInternalApiKey:q(n.REPORTS_INTERNAL_API_KEY,n.COMMERCE_DISCOVERY_INTERNAL_API_KEY),s3TenantBucket:n.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:n.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:n.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:n.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:n.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:n.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:n.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:Gx(n.DATABASE_URL),externalNatsUrl:Gx(i),skipMigrations:t.skipMigrations}}var wt=null;function B(){if(!wt)yE();return wt}function yE(){if(wt)return;let t={...process.env},n=Ax({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);wt=Object.freeze({...n.settings,databaseUrl:t.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((_)=>_.trim()).filter(Boolean)})}import{createContextKey as eE,metrics as fE,propagation as Kw,ROOT_CONTEXT as ew,SpanStatusCode as fw,trace as wE}from"@opentelemetry/api";import{logs as zE,SeverityNumber as Vu}from"@opentelemetry/api-logs";import{OTLPLogExporter as Pw}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as PE}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as pw}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as jw}from"@opentelemetry/instrumentation-runtime-node";import{context as Tf,propagation as yf,SpanKind as Cf,SpanStatusCode as Nf}from"@opentelemetry/api";var Ef=globalThis.fetch;import{ExportResultCode as Df}from"@opentelemetry/core";import{ExportResultCode as zt}from"@opentelemetry/core";import{mkdir as CE,rename as NE,writeFile as aE}from"fs/promises";import{join as Pt}from"path";class Ut{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let n=t.flushIntervalMs??60000;if(n>0&&n<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((_)=>{console.error("[NDJSONExporter] Timer flush failed:",_)})},n),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:zt.FAILED});for(let n of t){let _=JSON.stringify(n),m=this.partitionKey?this.partitionKey(n):"";this.bufferItems.push({partition:m,json:_}),this.bufferBytes+=Buffer.byteLength(_,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:zt.SUCCESS})).catch((n)=>{return console.error("[NDJSONExporter] Flush failed:",n),{code:zt.FAILED}});return Promise.resolve({code:zt.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let n=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=n,n}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let n=new Map;for(let x of t){let i=n.get(x.partition);if(!i)i=[],n.set(x.partition,i);i.push(x.json)}let _=await Promise.allSettled(Array.from(n.entries()).map(([x,i])=>this.writeNDJSON(i,x).then(()=>x))),m=_.find((x)=>x.status==="rejected");if(m){let x=new Set;for(let y of _)if(y.status==="fulfilled")x.add(y.value);let i=t.filter((y)=>!x.has(y.partition));this.bufferItems=i.concat(this.bufferItems),this.bufferBytes=0;for(let y of this.bufferItems)this.bufferBytes+=Buffer.byteLength(y.json,"utf8")+1;throw m.reason}}async writeNDJSON(t,n){let _=new Date,m=[String(_.getUTCFullYear()),String(_.getUTCMonth()+1).padStart(2,"0"),String(_.getUTCDate()).padStart(2,"0"),String(_.getUTCHours()).padStart(2,"0")],x=n?Pt(this.basePath,n,...m):Pt(this.basePath,...m);if(!this.knownDirs.has(x))await CE(x,{recursive:!0,mode:448}),this.knownDirs.add(x);let i=`${crypto.randomUUID()}.ndjson`,y=Pt(x,`.${i}.tmp`),T=Pt(x,i),C=t.join(`
+  `.execute(t)}async function sa(t){await t.schema.dropIndex("idx_task_board_items_pending_review").execute()}var la={"001-initial-schema":pt,"002-organization-settings":Jt,"003-connection-schema-align":jt,"004-remove-models-binding":Dt,"005-connection-configuration":$t,"006-add-views-to-settings":Lt,"007-monitoring-logs":Wt,"008-event-bus":Rt,"009-drop-audit-logs":Xt,"010-gateways":Qt,"011-gateway-icon":Zt,"012-gateway-tool-selection-mode":Ft,"013-monitoring-user-agent-gateway":Ht,"014-gateway-resources-prompts":Mt,"015-monitoring-properties":Yt,"016-downstream-token-client-info":Bt,"017-downstream-token-remove-userid":Gt,"018-drop-gateway-tool-selection-strategy":At,"019-remove-gateway-is-default":St,"020-enabled-plugins":Ot,"021-threads":It,"022-rename-gateway-to-virtual-mcp":kt,"023-optimize-thread-indexes":ct,"024-consolidate-virtual-mcp":ht,"025-add-monitoring-virtual-mcp-id":Vt,"026-restrict-child-connection-delete":gt,"027-update-management-mcp-url":qt,"028-update-management-mcp-to-self":st,"029-add-updated-by-to-connections":lt,"030-member-tags":dt,"031-add-dependency-mode":bt,"032-projects":tn,"033-thread-status":nn,"034-monitoring-dashboards":_n,"035-project-connections":un,"036-update-registry-url":xn,"037-ai-provider-keys":mn,"038-oauth-pkce-states":Tn,"039-automations":yn,"040-replace-next-run-at-with-last-run-at":Cn,"041-ai-provider-keys-unique-constraint":Nn,"042-rename-mesh-mcp-to-cms-mcp":an,"043-rename-cms-mcp-to-deco-cms":En,"044-drop-connections-tools-column":Kn,"045-thread-context-start-message":en,"046-remove-object-storage-plugin":wn,"047-add-next-run-at":zn,"048-merge-projects-agents":Un,"049-remove-org-admin-projects":on,"050-durable-agent-runs":pn,"051-org-sso":jn,"052-thread-agent-ids":Dn,"053-registry-config":$n,"054-connection-slug":Wn,"055-spaces":Rn,"056-automation-project-scope":Xn,"057-thread-virtual-mcp-id":Qn,"058-trigger-callback-tokens":Zn,"059-kv":Fn,"060-member-index":Hn,"061-downstream-token-connection-index":Mn,"062-private-registry":Yn,"063-event-subscriptions-enabled-boolean":Bn,"064-brand-context":Gn,"065-organization-domains":An,"066-brand-context-structured":Sn,"067-threads-metadata":On,"068-threads-branch":In,"069-sandbox-runner-state":kn,"070-model-categories":cn,"071-default-home-agents":hn,"072-ai-provider-key-preset-id":Vn,"073-backfill-basic-usage-roles":gn,"074-sandbox-runner-state-handle-nonunique":rn,"075-thread-inflight-async-jobs":qn,"076-automations-drop-agent-json":vn,"077-tier-only-model-selection":ln,"078-automation-tool-call-kind":dn,"079-strip-legacy-freestyle-vm-map-entries":bn,"080-async-research-jobs":t_,"081-async-research-jobs-result-content":n_,"082-secrets":__,"083-thread-run-locally":u_,"084-drop-host-sandbox-rows":x_,"085-rename-runner-kind":m_,"086-thread-pins-and-vm-map-rekey":i_,"087-fix-vm-map-rekey":T_,"088-purge-cli-activate-keys":y_,"089-rename-remote-user-to-desktop":C_,"090-automation-webhook-triggers":N_,"091-organization-domains-allow-multi":a_,"092-sandbox-naming-uniformization":E_,"093-backfill-global-search-basic-usage":K_,"094-org-file-configs":f_,"095-remove-automation-tool-call-kind":w_,"096-org-file-configs-public-url-base":z_,"097-drop-local-docker-sandbox-state":U_,"098-thread-message-parts":o_,"099-run-fence":p_,"100-link-transport":J_,"101-cancel-requested-at":j_,"102-observational-agent":D_,"103-revert-observational-agent":$_,"104-agent-sandbox-provider-kind":W_,"105-org-fs":R_,"106-automation-tools":X_,"107-org-fs-public-org":Q_,"108-automation-max-agent-steps":Z_,"109-thread-message-parts-per-message-seq":F_,"110-backfill-ghs-token-expiry":H_,"111-org-fs-thread-id":M_,"112-org-file-configs-credential-type":Y_,"113-thread-failure-reason":B_,"114-run-acked-seq":G_,"115-thread-projected-seq":A_,"116-org-sites":S_,"117-org-file-configs-site-slug":O_,"118-organization-domains-multi-verify":I_,"119-organization-join-requests":k_,"120-org-fs-read-public":c_,"121-org-fs-share-password":h_,"122-split-web-research-tier":r_,"123-connection-credential-vault":q_,"124-drop-thread-projected-seq":v_,"125-github-child-single-parent":s_,"126-task-board":d_,"127-task-board-due-date":b_,"128-reports-only":tu,"129-task-board-assigned-by":nu,"130-task-board-thread-id":_u,"131-task-board-thread-link-cascade":uu,"132-task-board-item-prs":xu,"133-dedupe-duplicate-members":mu,"134-drop-task-board-enabled":iu,"135-task-board-item-fk-cascade":Tu,"136-task-board-import-idempotency":yu,"137-agent-sandbox-runner-state":Cu,"138-agent-sandbox-sessions":Nu,"139-organization-billing":au,"140-seat-change-log":Eu,"141-benefits-sync-pending":Ku,"142-stripe-event-watermark":eu,"143-armed-report-url":fu,"144-benefits-pending-index":wu,"145-user-model-preferences":zu,"146-organization-main-agent":Pu,"147-drop-agent-sandbox-tables":Uu,"148-org-flags":ou,"149-task-board-item-sort-order":pu,"150-task-board-activity":Ju,"151-task-board-tags":Du,"152-repair-connection-slug":Lu,"153-task-board-latest-assistant-part-index":Wu,"154-task-board-qa-activity":Xu,"155-task-board-review-claims":Qu,"156-task-board-conflict-activity":Fu,"157-drop-seat-billing":Hu,"158-drop-github-child-single-parent":Mu,"159-task-board-comments":Yu,"160-task-quota-billing":Bu,"161-task-quota-claim-state":Au,"162-claude-subscriptions":Su,"163-task-board-item-dismissed":Ou,"164-per-org-task-quota":Iu,"165-task-board-pending-review-index":ku},cu=la;import{getMigrations as ZE}from"better-auth/db";import{sso as FE}from"@better-auth/sso";import{organization as HE}from"@decocms/better-auth/plugins";import{admin as ME,apiKey as YE,jwt as BE,magicLink as GE,mcp as AE,openAPI as SE}from"better-auth/plugins";import{emailOTP as OE}from"better-auth/plugins/email-otp";import{Kysely as DE,PostgresDialect as rx}from"kysely";import{Pool as qx}from"pg";import{homedir as da}from"os";var ba=new Set(["all","worker","api"]);function tE(t){let n=(t??"").trim();return ba.has(n)?n:"all"}var nE=new Set(["production","development","test"]);function _E(t){let n=(t??"").trim();return nE.has(n)?n:"development"}function D(t){return t==="true"||t==="1"}function uE(t){if(t===void 0||t==="")return;return D(t)}function hu(t,n,_){if(n===void 0||n==="")return;let m=Number(n);if(!Number.isSafeInteger(m)||m<=0)throw Error(`${t} must be a positive integer`);if(_!==void 0&&m>_)throw Error(`${t} must be at most ${_}`);return m}function U(t,n,_,m){return hu(t,n,m)??_}function xE(t,n,_,m){if(n===void 0||n==="")return _;let x=Number(n);if(!Number.isSafeInteger(x)||x<0)throw Error(`${t} must be a non-negative integer`);if(m!==void 0&&x>m)throw Error(`${t} must be at most ${m}`);return x}function Bx(t,n){if(t===void 0||t==="")return n;return t==="true"||t==="1"}function Gx(t){if(!t)return null;try{let _=new URL(t).hostname.replace(/^\[|\]$/g,"");if(_==="localhost"||_==="127.0.0.1"||_==="::1")return null;return t}catch{return null}}function mE(t){return t===void 0||t===""||t==="true"||t==="1"}function q(t,n){return t||n}var iE=new Set(["agent-sandbox","user-desktop"]);function TE(t){let n=(t??"").trim(),_=n.length>0?n:"user-desktop";if(_==="cluster")return"agent-sandbox";if(!iE.has(_))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${t}" \u2014 expected "agent-sandbox", legacy "cluster", or "user-desktop".`);return _}function Ax(t,n){let _=t.home||n.DATA_DIR||n.DECOCMS_HOME||`${da()}/deco`,m=t.localMode,x=t.nodeEnv||_E(n.NODE_ENV),i=n.NATS_URL||"nats://localhost:4222",y=uE(n.NATS_TUNNEL_PUBLIC_ENABLED)??!!n.NATS_PUBLIC_URL;return{settings:{nodeEnv:x,port:U("PORT",t.port||n.PORT,3000,65535),baseUrl:t.baseUrl||n.BASE_URL,publicUrl:q(n.STUDIO_PUBLIC_URL,n.MESH_PUBLIC_URL),dataDir:_,databasePgSsl:D(n.DATABASE_PG_SSL),databasePoolMax:U("DATABASE_POOL_MAX",n.DATABASE_POOL_MAX,5),dbosPoolSize:U("DBOS_POOL_SIZE",n.DBOS_POOL_SIZE,5),betterAuthSecret:n.BETTER_AUTH_SECRET||"",encryptionKey:n.ENCRYPTION_KEY||"",studioJwtSecret:q(n.STUDIO_JWT_SECRET,n.MESH_JWT_SECRET),localMode:m,disableRateLimit:D(n.DISABLE_RATE_LIMIT),studioProvisionSecretKey:n.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(n.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((C)=>C.trim().toLowerCase()).filter(Boolean),clickhouseUrl:n.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:hu("CLICKHOUSE_MAX_MEMORY_USAGE",n.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:n.MONITORING_OTLP_ENDPOINT,otelServiceName:n.OTEL_SERVICE_NAME||"studio",natsPublicUrl:n.NATS_PUBLIC_URL,natsTunnelPublicEnabled:y,natsTunnelSessionTtlSeconds:U("NATS_TUNNEL_SESSION_TTL_SECONDS",n.NATS_TUNNEL_SESSION_TTL_SECONDS,900),natsOperatorJwt:n.NATS_OPERATOR_JWT,natsAccountJwt:n.NATS_ACCOUNT_JWT,natsAccountSigningKey:n.NATS_ACCOUNT_SIGNING_KEY,natsCredsPath:n.NATS_CREDS,configPath:n.CONFIG_PATH||"./config.json",aiGatewayEnabled:D(n.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:n.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:n.DECO_AI_GATEWAY_ADMIN_TOKEN,stripeWebhookSecret:n.STRIPE_WEBHOOK_SECRET,stripeSecretKey:n.STRIPE_SECRET_KEY,stripeOrgPriceId:n.STRIPE_ORG_PRICE_ID,topupFeePercent:xE("STUDIO_TOPUP_FEE_PERCENT",n.STUDIO_TOPUP_FEE_PERCENT,15,100),taskQuotaEnforced:D(n.STUDIO_TASK_QUOTA_ENFORCED),freeTaskExecutions:U("STUDIO_FREE_TASKS",n.STUDIO_FREE_TASKS,3),monthlyTaskExecutions:U("STUDIO_MONTHLY_TASKS",n.STUDIO_MONTHLY_TASKS,10),maxRunsPerTask:U("STUDIO_MAX_RUNS_PER_TASK",n.STUDIO_MAX_RUNS_PER_TASK,5),enableDecoImport:D(n.ENABLE_DECO_IMPORT),mcpCacheEnabled:Bx(n.MCP_CACHE_ENABLED,x!=="development"),orgFsPublicSetsJson:n.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:D(n.DISABLE_ORGFS_MOUNTS),decopilotMaxConcurrentSubagents:U("DECOPILOT_MAX_CONCURRENT_SUBAGENTS",n.DECOPILOT_MAX_CONCURRENT_SUBAGENTS,4),decopilotMaxConcurrentHostedRuns:U("DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS",n.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS,3),taskBoardReviewSweeperEnabled:Bx(n.TASK_BOARD_REVIEW_SWEEPER_ENABLED,!0),sandboxMaxConcurrentHostedRuns:U("SANDBOX_MAX_CONCURRENT_HOSTED_RUNS",n.SANDBOX_MAX_CONCURRENT_HOSTED_RUNS,12),s3Endpoint:n.S3_ENDPOINT,s3Bucket:n.S3_BUCKET,s3Region:n.S3_REGION||"auto",s3AccessKeyId:n.S3_ACCESS_KEY_ID,s3SecretAccessKey:n.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:mE(n.S3_FORCE_PATH_STYLE),monitoringS3Bucket:n.MONITORING_S3_BUCKET,monitoringS3Endpoint:n.MONITORING_S3_ENDPOINT,monitoringS3Region:n.MONITORING_S3_REGION,monitoringS3AccessKeyId:n.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:n.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:n.MONITORING_S3_PREFIX,duckdbExtensionDirectory:n.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:n.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:hu("DUCKDB_THREADS",n.DUCKDB_THREADS),isCli:!0,noTui:t.noTui===!0,podName:n.POD_NAME||crypto.randomUUID(),dispatchRole:tE(q(n.STUDIO_DISPATCH_ROLE,n.MESH_DISPATCH_ROLE)),sandboxProviderKind:TE(n.STUDIO_SANDBOX_PROVIDER),sandboxStickyHeadRefEnabled:D(n.SANDBOX_STICKY_HEAD_REF),taskBoardRerunReusesPrBranch:D(n.TASK_BOARD_RERUN_REUSES_PR_BRANCH),sandboxReleaseOnRunEndEnabled:D(n.SANDBOX_RELEASE_ON_RUN_END),sandboxReleaseGraceMs:U("SANDBOX_RELEASE_GRACE_MS",n.SANDBOX_RELEASE_GRACE_MS,120000),decoSupabaseUrl:n.DECO_SUPABASE_URL,decoSupabaseServiceKey:n.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:n.FIRECRAWL_API_KEY,reportsInternalApiUrl:q(n.REPORTS_INTERNAL_API_URL,n.COMMERCE_DISCOVERY_INTERNAL_API_URL),reportsInternalApiKey:q(n.REPORTS_INTERNAL_API_KEY,n.COMMERCE_DISCOVERY_INTERNAL_API_KEY),s3TenantBucket:n.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:n.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:n.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:n.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:n.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:n.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:n.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY},externalDatabaseUrl:Gx(n.DATABASE_URL),externalNatsUrl:Gx(i),skipMigrations:t.skipMigrations}}var wt=null;function B(){if(!wt)yE();return wt}function yE(){if(wt)return;let t={...process.env},n=Ax({port:t.PORT||"3000",home:t.DATA_DIR||t.DECOCMS_HOME||"",localMode:t.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:t.DECO_NO_TUI==="true",vitePort:t.VITE_PORT,baseUrl:t.BASE_URL},t);wt=Object.freeze({...n.settings,databaseUrl:t.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(t.NATS_URL||"nats://localhost:4222").split(",").map((_)=>_.trim()).filter(Boolean)})}import{createContextKey as eE,metrics as fE,propagation as Kw,ROOT_CONTEXT as ew,SpanStatusCode as fw,trace as wE}from"@opentelemetry/api";import{logs as zE,SeverityNumber as Vu}from"@opentelemetry/api-logs";import{OTLPLogExporter as Pw}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as PE}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as pw}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as jw}from"@opentelemetry/instrumentation-runtime-node";import{context as Tf,propagation as yf,SpanKind as Cf,SpanStatusCode as Nf}from"@opentelemetry/api";var Ef=globalThis.fetch;import{ExportResultCode as Df}from"@opentelemetry/core";import{ExportResultCode as zt}from"@opentelemetry/core";import{mkdir as CE,rename as NE,writeFile as aE}from"fs/promises";import{join as Pt}from"path";class Ut{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(t){this.basePath=t.basePath,this.flushThreshold=t.flushThreshold??1000,this.maxBufferBytes=t.maxBufferBytes??10485760,this.partitionKey=t.partitionKey;let n=t.flushIntervalMs??60000;if(n>0&&n<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((_)=>{console.error("[NDJSONExporter] Timer flush failed:",_)})},n),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(t){if(this.isShutdown)return Promise.resolve({code:zt.FAILED});for(let n of t){let _=JSON.stringify(n),m=this.partitionKey?this.partitionKey(n):"";this.bufferItems.push({partition:m,json:_}),this.bufferBytes+=Buffer.byteLength(_,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:zt.SUCCESS})).catch((n)=>{return console.error("[NDJSONExporter] Flush failed:",n),{code:zt.FAILED}});return Promise.resolve({code:zt.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let n=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=n,n}async doFlush(){if(this.bufferItems.length===0)return;let t=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let n=new Map;for(let x of t){let i=n.get(x.partition);if(!i)i=[],n.set(x.partition,i);i.push(x.json)}let _=await Promise.allSettled(Array.from(n.entries()).map(([x,i])=>this.writeNDJSON(i,x).then(()=>x))),m=_.find((x)=>x.status==="rejected");if(m){let x=new Set;for(let y of _)if(y.status==="fulfilled")x.add(y.value);let i=t.filter((y)=>!x.has(y.partition));this.bufferItems=i.concat(this.bufferItems),this.bufferBytes=0;for(let y of this.bufferItems)this.bufferBytes+=Buffer.byteLength(y.json,"utf8")+1;throw m.reason}}async writeNDJSON(t,n){let _=new Date,m=[String(_.getUTCFullYear()),String(_.getUTCMonth()+1).padStart(2,"0"),String(_.getUTCDate()).padStart(2,"0"),String(_.getUTCHours()).padStart(2,"0")],x=n?Pt(this.basePath,n,...m):Pt(this.basePath,...m);if(!this.knownDirs.has(x))await CE(x,{recursive:!0,mode:448}),this.knownDirs.add(x);let i=`${crypto.randomUUID()}.ndjson`,y=Pt(x,`.${i}.tmp`),T=Pt(x,i),C=t.join(`
 `)+`
 `;await aE(y,C,{mode:384}),await NE(y,T)}}import{ExportResultCode as Xf}from"@opentelemetry/core";import{AggregationTemporality as Zf,DataPointType as Ff}from"@opentelemetry/sdk-metrics";import{ExportResultCode as Af}from"@opentelemetry/core";var kf=Buffer.byteLength("... [TRUNCATED]","utf8");import{BatchLogRecordProcessor as Fw,LoggerProvider as Hw}from"@opentelemetry/sdk-logs";import{detectResources as Yw,envDetector as Bw,hostDetector as Gw,osDetector as Aw,processDetector as Sw,resourceFromAttributes as Ow}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as kw}from"@opentelemetry/sdk-metrics";import{NOOP_LOGGER as Vf}from"@opentelemetry/api-logs";import{NodeSDK as Vw}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as rw,SamplingDecision as G}from"@opentelemetry/sdk-trace-base";import{SpanStatusCode as sf}from"@opentelemetry/api";var UE="__d",oE=eE("Current request"),pE=1;var Ox=(t)=>{let _=new URL(t.url).searchParams.get(UE);if(_==="")return crypto.randomUUID();if(!_)_=t.headers.get("x-trace-debug-id");return _};class Ix{inner;constructor(t){this.inner=t}shouldSample(t,n,_,m,x,i){let y=t.getValue(oE);if(!y){if(this.inner)return this.inner.shouldSample(t,n,_,m,x,i);return{decision:G.RECORD_AND_SAMPLED}}let T=Ox(y);if(T)return{decision:G.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":T}};if(this.inner){let C=this.inner.shouldSample(t,n,_,m,x,i);if(C.decision===G.RECORD_AND_SAMPLED){let N=crypto.randomUUID();C.attributes={...C.attributes??{},"trace.debug.id":N}}return C}return{decision:G.NOT_RECORD}}toString(){return"DebugSampler"}}class kx{ratio;constructor(t){this.ratio=t}shouldSample(){if(Math.random()<this.ratio)return{decision:G.RECORD_AND_SAMPLED};return{decision:G.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}var vw=new PE({preventServerStart:!0}),sw=new Ix(new kx(pE));var Sx=wE.getTracer("studio","1.0.0"),v=fE.getMeter("studio","1.0.0"),JE=zE.getLogger("studio","1.0.0"),gu=(t,n,_)=>{let m={},x=_,i=_[_.length-1];if(i!==null&&typeof i==="object"&&!Array.isArray(i)&&!(i instanceof Error)&&Object.getPrototypeOf(i)===Object.prototype)m=i,x=_.slice(0,-1);let y=x.map((T)=>{if(T instanceof Error)return`${T.name}: ${T.message}`;if(typeof T==="object")try{return JSON.stringify(T)}catch{return"[Object]"}return String(T)}).join(" ");JE.emit({severityNumber:t,severityText:n,body:y,attributes:{"log.source":"console",...m}})},ru={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...t)=>{gu(Vu.ERROR,"ERROR",t),ru.error(...t)};console.warn=(...t)=>{gu(Vu.WARN,"WARN",t),ru.warn(...t)};console.debug=(...t)=>{gu(Vu.DEBUG,"DEBUG",t),ru.debug(...t)};var qu,cx=0,vu=500;function jE(){if(qu)return;let t=performance.now()+vu;qu=setInterval(()=>{let n=performance.now();cx=Math.max(0,n-t),t=n+vu},vu),qu.unref?.()}function hx(){return jE(),cx}var $E=()=>v.createHistogram("db.query.duration",{description:"Database query execution duration in milliseconds",unit:"ms"}),Vx=()=>v.createHistogram("db.pool.acquire.duration",{description:"Time spent waiting to acquire a connection from the pool",unit:"ms"}),gx=400,LE=100,WE=(t)=>(n)=>{let _={"db.statement":n.query.sql,"db.status":n.level==="error"?"error":"success"};if(n.queryDurationMillis>gx){let m=hx(),x=m>gx/2;console.error(x?"Slow query measurement \u2014 likely event-loop lag, not slow SQL:":"Slow query detected:",{durationMs:n.queryDurationMillis,eventLoopLagMs:Math.round(m),sql:n.query.sql,pool:{total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:ot()}})}if($E().record(n.queryDurationMillis,_),n.level==="error")console.error("Query failed:",{durationMs:n.queryDurationMillis,error:n.error,sql:n.query.sql})};function RE(t){let n=t.connect.bind(t);return t.connect=(_)=>{if(typeof _==="function")return n(_);let m=performance.now(),x=ot(),i=t.idleCount===0&&t.totalCount>=x,y=t.idleCount;return n().then((T)=>{let C=performance.now()-m;if(Vx().record(C,{"db.pool.outcome":i?"contended":"available"}),C>LE)if(i)console.error("Slow db pool acquire \u2014 pool saturated:",{waitMs:C,total:t.totalCount,idle:t.idleCount,waiting:t.waitingCount,max:x});else console.warn("Slow db pool acquire \u2014 event-loop lag (not pool):",{waitMs:C,idleAtStart:y,total:t.totalCount,max:x});return T},(T)=>{throw Vx().record(performance.now()-m,{"db.pool.outcome":"error"}),T})},t}var vx={keepAlive:!0,keepAliveInitialDelayMillis:1e4,idleTimeoutMillis:300000,connectionTimeoutMillis:30000,allowExitOnIdle:!0};function sx(){try{return B().databasePgSsl}catch{return!1}}function ot(){try{return B().databasePoolMax}catch{return 10}}function XE(t){let n=RE(new qx({connectionString:t,max:ot(),ssl:sx(),...vx})),_=new rx({pool:n});return{type:"postgres",db:new DE({dialect:_,log:WE(n)}),pool:n}}function l(){return B().databaseUrl}function lx(t){let n=t||l();return new rx({pool:new qx({connectionString:n,max:ot(),ssl:sx(),...vx})})}function QE(t){let n=t||l();return XE(n)}async function dx(t){if(await t.db.destroy(),!t.pool.ended)await t.pool.end();if(t===s)s=null}var s=null;function su(){if(!s)s=QE(l());return s}async function bx(t){let _={database:lx(t||l()),plugins:[HE({dynamicAccessControl:{enabled:!0,enableCustomResources:!0}}),ME(),YE(),BE(),SE(),AE({loginPage:"/login"}),FE(),GE({sendMagicLink:async()=>{}}),OE({sendVerificationOTP:async()=>{}})]},{toBeAdded:m,toBeCreated:x,runMigrations:i}=await ZE(_);if(!m.length&&!x.length)return"up to date";return await i(),`${x.length+m.length} table(s) migrated`}async function nm(t,n){return(await A`
     SELECT table_name FROM information_schema.tables