decocms 4.220.4 → 4.220.6

package/dist/server/cli.js

@@ -176,7 +176,7 @@ All managed services stopped.`)}async function _b6($){let Z=[],X=NW($,"postgres"
 Usage: deco services <up|down|status>`),process.exit(1)}}var Hm1=O(()=>{sx()});function Nm1($){vm=Object.freeze($)}function o0(){if(!vm)fb6();return vm}function fb6(){if(vm)return;let $={...process.env},Z=u10({port:$.PORT||"3000",home:$.DATA_DIR||$.DECOCMS_HOME||"",localMode:$.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:$.DECO_NO_TUI==="true",vitePort:$.VITE_PORT,baseUrl:$.BASE_URL},$);vm=Object.freeze({...Z.settings,databaseUrl:$.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:($.NATS_URL||"nats://localhost:4222").split(",").map((X)=>X.trim()).filter(Boolean)})}var vm=null;var q8=O(()=>{sx()});import{context as bb6,propagation as yb6,SpanKind as gb6,SpanStatusCode as Mu0}from"@opentelemetry/api";function ub6($,Z){let X=$ instanceof Error?$.name:void 0;if(X==="TimeoutError")return"timeout";if(X==="AbortError")return"cancelled";if(Z?.aborted)return"cancelled";return null}function cb6($,Z){if(Z.startsWith("/_sandbox/")){if($===404)return"daemon_gone";if($===409)return"daemon_not_ready"}if($===404&&Z.includes("/sandboxclaims/"))return"claim_gone";return null}function lb6($,Z){if($===404&&(Z==="/.decofile"||Z==="/live/_meta"||Z==="/sprites.svg"))return"not_a_deco_site";return null}function db6($){if(!($ instanceof Error))return!1;if($.message.includes("socket connection was closed"))return!0;let Z=$.code;return Z==="ECONNRESET"||Z==="EPIPE"}async function mb6($,Z){let X,Q;if($ instanceof Request)X=new URL($.url),Q=Z?.method??$.method;else if($ instanceof URL)X=$,Q=Z?.method??"GET";else X=new URL($),Q=Z?.method??"GET";let Y=`${Q} ${X.host}`;return TB.startActiveSpan(Y,{kind:gb6.CLIENT,attributes:{"http.request.method":Q,"url.full":X.href,"url.scheme":X.protocol.replace(":",""),"url.path":X.pathname,"url.query":X.search||void 0,"server.address":X.hostname,"server.port":X.port?Number(X.port):void 0}},async(G)=>{try{let J=new Headers(Z?.headers??($ instanceof Request?$.headers:{}));yb6.inject(bb6.active(),J,{set:(F,B,w)=>F.set(B,w)});let K={...Z,headers:J},W=await hb6($,K);G.setAttribute("http.response.status_code",W.status);let H=W.status===405&&Q==="GET"&&(J.get("accept")??"").includes("text/event-stream"),N=W.status>=400?cb6(W.status,X.pathname):null,U=W.status>=400?lb6(W.status,X.pathname):null;if(W.status>=400&&!H&&!N&&!U)G.setStatus({code:Mu0.ERROR,message:`HTTP ${W.status}`});else{if(N)G.setAttribute("sandbox.lifecycle",N);if(U)G.setAttribute("preview.probe",U);G.setStatus({code:Mu0.OK})}return W}catch(J){let K=Z?.signal??($ instanceof Request?$.signal:void 0),W=ub6(J,K??void 0);if(W)G.setAttribute("abort.reason",W);else if(db6(J)&&X.pathname.startsWith("/_sandbox/"))G.setAttribute("sandbox.lifecycle","connection_closed");else G.recordException(J),G.setStatus({code:Mu0.ERROR,message:J instanceof Error?J.message:"Fetch failed"});throw J}finally{G.end()}})}function Um1(){globalThis.fetch=mb6}var hb6;var Fm1=O(()=>{o$();hb6=globalThis.fetch});import{join as ku0}from"path";function IJ(){return ku0(o0().dataDir,"logs")}function Bb(){return ku0(o0().dataDir,"traces")}function uN(){return ku0(o0().dataDir,"metrics")}function RB($,Z){let X=$[Z];return X!=null?String(X):""}function xm($,Z){let X=$[Z];return X!=null&&X!==""?String(X):null}function Bm1($){let{attributes:Z}=$,X=Z[A4.IS_ERROR],Q=Z[A4.DURATION_MS];return{v:1,id:$.id,type:RB(Z,A4.TYPE)||fm,organization_id:RB(Z,A4.ORGANIZATION_ID),connection_id:RB(Z,A4.CONNECTION_ID),connection_title:RB(Z,A4.CONNECTION_TITLE),tool_name:RB(Z,A4.TOOL_NAME),input:RB(Z,A4.INPUT),output:RB(Z,A4.OUTPUT),is_error:X===!0||X===1||X==="true"?1:0,error_message:xm(Z,A4.ERROR_MESSAGE),duration_ms:typeof Q==="number"?Q:Number(Q)||0,timestamp:new Date(Number($.timestampNano/1000000n)).toISOString(),user_id:xm(Z,A4.USER_ID),request_id:RB(Z,A4.REQUEST_ID),user_agent:xm(Z,A4.USER_AGENT),virtual_mcp_id:xm(Z,A4.VIRTUAL_MCP_ID),properties:xm(Z,A4.PROPERTIES)}}function G90($){return $[0]*1000+$[1]/1e6}function Ob($){return new Date(G90($)).toISOString()}var Vu0="mcp.proxy.callTool",A4,fm="tool_call",wb="llm_call",Y90="decopilot";var pY=O(()=>{q8();A4={TYPE:"studio.monitoring.type",ORGANIZATION_ID:"studio.monitoring.organization_id",CONNECTION_ID:"studio.monitoring.connection_id",CONNECTION_TITLE:"studio.monitoring.connection_title",TOOL_NAME:"studio.monitoring.tool_name",INPUT:"studio.monitoring.input",OUTPUT:"studio.monitoring.output",IS_ERROR:"studio.monitoring.is_error",ERROR_MESSAGE:"studio.monitoring.error_message",DURATION_MS:"studio.monitoring.duration_ms",USER_ID:"studio.monitoring.user_id",REQUEST_ID:"studio.monitoring.request_id",USER_AGENT:"studio.monitoring.user_agent",VIRTUAL_MCP_ID:"studio.monitoring.virtual_mcp_id",PROPERTIES:"studio.monitoring.properties"}});import{ExportResultCode as J90}from"@opentelemetry/core";import{mkdir as ib6,rename as nb6,writeFile as pb6}from"fs/promises";import{join as K90}from"path";class XE{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor($){this.basePath=$.basePath,this.flushThreshold=$.flushThreshold??1000,this.maxBufferBytes=$.maxBufferBytes??10485760,this.partitionKey=$.partitionKey;let Z=$.flushIntervalMs??60000;if(Z>0&&Z<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((X)=>{console.error("[NDJSONExporter] Timer flush failed:",X)})},Z),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows($){if(this.isShutdown)return Promise.resolve({code:J90.FAILED});for(let Z of $){let X=JSON.stringify(Z),Q=this.partitionKey?this.partitionKey(Z):"";this.bufferItems.push({partition:Q,json:X}),this.bufferBytes+=Buffer.byteLength(X,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:J90.SUCCESS})).catch((Z)=>{return console.error("[NDJSONExporter] Flush failed:",Z),{code:J90.FAILED}});return Promise.resolve({code:J90.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let Z=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=Z,Z}async doFlush(){if(this.bufferItems.length===0)return;let $=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let Z=new Map;for(let Y of $){let G=Z.get(Y.partition);if(!G)G=[],Z.set(Y.partition,G);G.push(Y.json)}let X=await Promise.allSettled(Array.from(Z.entries()).map(([Y,G])=>this.writeNDJSON(G,Y).then(()=>Y))),Q=X.find((Y)=>Y.status==="rejected");if(Q){let Y=new Set;for(let J of X)if(J.status==="fulfilled")Y.add(J.value);let G=$.filter((J)=>!Y.has(J.partition));this.bufferItems=G.concat(this.bufferItems),this.bufferBytes=0;for(let J of this.bufferItems)this.bufferBytes+=Buffer.byteLength(J.json,"utf8")+1;throw Q.reason}}async writeNDJSON($,Z){let X=new Date,Q=[String(X.getUTCFullYear()),String(X.getUTCMonth()+1).padStart(2,"0"),String(X.getUTCDate()).padStart(2,"0"),String(X.getUTCHours()).padStart(2,"0")],Y=Z?K90(this.basePath,Z,...Q):K90(this.basePath,...Q);if(!this.knownDirs.has(Y))await ib6(Y,{recursive:!0,mode:448}),this.knownDirs.add(Y);let G=`${crypto.randomUUID()}.ndjson`,J=K90(Y,`.${G}.tmp`),K=K90(Y,G),W=$.join(`
 `)+`
 `;await pb6(J,W,{mode:384}),await nb6(J,K)}}var W90=()=>{};import{ExportResultCode as tb6}from"@opentelemetry/core";class Su0{inner;constructor($){this.inner=new XE({...$,partitionKey:(Z)=>Z.organization_id})}export($,Z){let X=[];for(let Q of $){if(!ob6.has(Q.attributes[A4.TYPE]))continue;let Y={};for(let[W,H]of Object.entries(Q.attributes))if(typeof H==="string"||typeof H==="number"||typeof H==="boolean")Y[W]=H;let G=Q.spanContext?.spanId??crypto.randomUUID(),J=Q.hrTime,K=BigInt(J[0])*1000000000n+BigInt(J[1]);X.push(Bm1({id:G,timestampNano:K,attributes:Y}))}this.inner.exportRows(X).then((Q)=>Z(Q)).catch(()=>Z({code:tb6.FAILED}))}async shutdown(){await this.inner.shutdown()}async forceFlush(){await this.inner.forceFlush()}}var ob6;var wm1=O(()=>{pY();W90();ob6=new Set([fm,wb])});import{ExportResultCode as rb6}from"@opentelemetry/core";import{AggregationTemporality as ab6,DataPointType as Om1}from"@opentelemetry/sdk-metrics";class Cu0{inner;constructor($){this.inner=new XE({...$,partitionKey:(Z)=>Z.organization_id})}selectAggregationTemporality($){return ab6.DELTA}export($,Z){let X=[];for(let Q of $.scopeMetrics)for(let Y of Q.metrics){let{descriptor:G,dataPointType:J}=Y;if(J===Om1.SUM)for(let K of Y.dataPoints){let W=K.attributes;X.push({v:1,name:G.name,type:"sum",unit:G.unit,timestamp:Ob(K.endTime),organization_id:String(W["organization.id"]??""),connection_id:String(W["connection.id"]??""),tool_name:String(W["tool.name"]??""),status:String(W.status??""),error_type:String(W["error.type"]??""),value:K.value,hist_count:0,hist_sum:0,hist_min:0,hist_max:0,hist_boundaries:"[]",hist_bucket_counts:"[]"})}else if(J===Om1.HISTOGRAM)for(let K of Y.dataPoints){let{attributes:W,value:H}=K;X.push({v:1,name:G.name,type:"histogram",unit:G.unit,timestamp:Ob(K.endTime),organization_id:String(W["organization.id"]??""),connection_id:String(W["connection.id"]??""),tool_name:String(W["tool.name"]??""),status:String(W.status??""),error_type:String(W["error.type"]??""),value:H.count,hist_count:H.count,hist_sum:H.sum??0,hist_min:H.min??0,hist_max:H.max??0,hist_boundaries:JSON.stringify(H.buckets.boundaries),hist_bucket_counts:JSON.stringify(H.buckets.counts)})}}this.inner.exportRows(X).then((Q)=>Z(Q)).catch(()=>Z({code:rb6.FAILED}))}async shutdown(){await this.inner.shutdown()}async forceFlush(){await this.inner.forceFlush()}}var Lm1=O(()=>{pY();W90()});import{ExportResultCode as sb6}from"@opentelemetry/core";function eb6($){let Z=$.resource,X=Z.attributes["service.name"]??"unknown";return{v:1,trace_id:$.spanContext().traceId,span_id:$.spanContext().spanId,parent_span_id:$.parentSpanContext?.spanId||null,name:$.name,kind:$.kind,status:$.status.code,status_message:$.status.message||null,start_time:Ob($.startTime),end_time:Ob($.endTime),duration_ms:G90($.endTime)-G90($.startTime),service_name:X,attributes:JSON.stringify($.attributes),events:JSON.stringify($.events),links:JSON.stringify($.links),resource:JSON.stringify(Z.attributes)}}class _u0{inner;constructor($){this.inner=new XE($)}export($,Z){let X=$.map(eb6);this.inner.exportRows(X).then((Q)=>Z(Q)).catch(()=>Z({code:sb6.FAILED}))}async shutdown(){await this.inner.shutdown()}async forceFlush(){await this.inner.forceFlush()}}var Dm1=O(()=>{pY();W90()});function Lb($,Z=65536){if($.length<=Z&&Buffer.byteLength($,"utf8")<=Z)return $;let X=Z-$y6;if(X<=0)return"... [TRUNCATED]".slice(0,Z);let Q=0,Y=0;for(let G of $){let J=G.charCodeAt(0)<=127?1:Buffer.byteLength(G,"utf8");if(Q+J>X)break;Q+=J,Y+=G.length}return $.slice(0,Y)+"... [TRUNCATED]"}var $y6;var vu0=O(()=>{$y6=Buffer.byteLength("... [TRUNCATED]","utf8")});import{NOOP_LOGGER as Zy6}from"@opentelemetry/api-logs";function zm1($){Em1=$.getLogger(Xy6,Qy6)}function jm1(){return Em1}var Xy6="studio.monitoring",Qy6="1.0.0",Em1;var xu0=O(()=>{Em1=Zy6});var Tm1={};w0(Tm1,{shouldSkipStudioContext:()=>fu0,isServerPath:()=>Gy6,isHealthPath:()=>bm,SYSTEM_PATHS:()=>L7});function bm($){return $===L7.HEALTH||$===L7.HEALTH_LIVE||$===L7.HEALTH_READY}function Pm1($){return $===L7.HEALTH||$===L7.HEALTH_LIVE||$===L7.HEALTH_READY||$===L7.METRICS||$.startsWith(QE.WELL_KNOWN)||$.startsWith(L7.DBOS_QUEUE_DEPTH_PREFIX)||$===L7.HOSTED_RUN_PENDING}function Am1($){return $.startsWith(QE.API)}function Gy6($){return Am1($)||$==="/mcp"||$.startsWith(QE.MCP)||$.startsWith(QE.OAUTH_PROXY)||$.startsWith(QE.ORG)||$.startsWith(QE.REPORT)||Pm1($)}function fu0($){return $==="/"||$.startsWith(QE.API_AUTH)||$==="/api/trigger-callback"||Pm1($)||!Am1($)&&Yy6.test($)}var L7,QE,Yy6;var H90=O(()=>{L7={HEALTH:"/health",HEALTH_LIVE:"/health/live",HEALTH_READY:"/health/ready",METRICS:"/metrics",DBOS_QUEUE_DEPTH_PREFIX:"/dbos-queue-depth/",HOSTED_RUN_PENDING:"/hosted-run-pending"},QE={API:"/api/",API_AUTH:"/api/auth/",MCP:"/mcp/",OAUTH_PROXY:"/oauth-proxy/",WELL_KNOWN:"/.well-known",ORG:"/org/",REPORT:"/report/"},Yy6=/\.(html|css|js|ico|svg|png|jpg|jpeg|gif|webp|woff|woff2)$/});import{SpanStatusCode as bu0}from"@opentelemetry/api";var Jy6,Ky6=()=>Jy6??=y8.createHistogram("http.server.request.duration",{description:"Duration of inbound HTTP requests handled by the API.",unit:"s",advice:{explicitBucketBoundaries:[0.005,0.01,0.025,0.05,0.075,0.1,0.25,0.5,0.75,1,2.5,5,7.5,10]}}),yu0=async($,Z)=>{if(bm($.req.path))return Z();let X=$.req.raw,Q=new URL(X.url),Y=performance.now(),G=qm1(X),J=gu0(X),K={"http.request.url":X.url,"http.request.method":X.method,"http.request.body.size":X.headers.get("content-length")??void 0,"url.scheme":Q.protocol.replace(":",""),"server.address":Q.host,"url.query":Q.search||void 0,"url.path":Q.pathname,"user_agent.original":X.headers.get("user-agent")??void 0,"request.internal":X.headers.has("traceparent"),...J?{"trace.debug.id":J}:{}};await TB.startActiveSpan(`${X.method} ${Q.pathname}`,{attributes:K},G,async(W)=>{$.set("rootSpan",W);try{await Z()}catch(H){W.recordException(H),W.setStatus({code:bu0.ERROR});let N=typeof H==="object"&&H&&"message"in H?String(H.message):JSON.stringify(H);throw console.error("error: ",N,K),H}finally{let H=$.res?.status??500,N=H>=500;W.setStatus({code:N?bu0.ERROR:bu0.OK}),W.setAttribute("http.response.status_code",H);let U=$.get("studioContext");if(U){if(U.auth.user?.id)W.setAttribute("studio.user.id",U.auth.user.id);if(U.auth.apiKey?.id)W.setAttribute("studio.api_key.id",U.auth.apiKey.id);if(U.organization?.id)W.setAttribute("studio.organization.id",U.organization.id)}if(J)Im1($.res.headers,J);Ky6().record((performance.now()-Y)/1000,{"http.request.method":X.method,"http.route":$.req.routePath,"http.response.status_code":H}),W.end()}})};var Rm1=O(()=>{o$();H90()});import{createContextKey as Wy6,metrics as vm1,propagation as Hy6,ROOT_CONTEXT as Ny6,SpanStatusCode as Mm1,trace as uu0}from"@opentelemetry/api";import{logs as xm1,SeverityNumber as lm}from"@opentelemetry/api-logs";import{OTLPLogExporter as Vm1}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as Uy6}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as Fy6}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as By6}from"@opentelemetry/instrumentation-runtime-node";import{BatchLogRecordProcessor as hu0,LoggerProvider as km1}from"@opentelemetry/sdk-logs";import{detectResources as wy6,envDetector as Oy6,hostDetector as Ly6,osDetector as Dy6,processDetector as Ey6,resourceFromAttributes as Sm1}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as zy6}from"@opentelemetry/sdk-metrics";import{NodeSDK as jy6}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as Cm1,SamplingDecision as Db}from"@opentelemetry/sdk-trace-base";class bm1{inner;ratio;constructor($,Z){this.inner=$;this.ratio=Z}onEmit($,Z){if($.severityNumber!==void 0&&$.severityNumber>=lm.ERROR||Math.random()<this.ratio)this.inner.onEmit($,Z)}forceFlush(){return this.inner.forceFlush()}shutdown(){return this.inner.shutdown()}}class ym1{inner;maxBytes;constructor($,Z){this.inner=$;this.maxBytes=Z}onEmit($,Z){let X=A4.OUTPUT,Q=$.attributes?.[X];if(typeof Q==="string"&&Q.length>this.maxBytes){let Y=Lb(Q,this.maxBytes);this.inner.onEmit({...$,attributes:{...$.attributes,[X]:Y}},Z)}else this.inner.onEmit($,Z)}forceFlush(){return this.inner.forceFlush()}shutdown(){return this.inner.shutdown()}}class gm1{inner;constructor($){this.inner=$}shouldSample($,Z,X,Q,Y,G){let J=$.getValue(fm1);if(!J){if(this.inner)return this.inner.shouldSample($,Z,X,Q,Y,G);return{decision:Db.RECORD_AND_SAMPLED}}let K=gu0(J);if(K)return{decision:Db.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":K}};if(this.inner){let W=this.inner.shouldSample($,Z,X,Q,Y,G);if(W.decision===Db.RECORD_AND_SAMPLED){let H=crypto.randomUUID();W.attributes={...W.attributes??{},"trace.debug.id":H}}return W}return{decision:Db.NOT_RECORD}}toString(){return"DebugSampler"}}class hm1{ratio;constructor($){this.ratio=$}shouldSample(){if(Math.random()<this.ratio)return{decision:Db.RECORD_AND_SAMPLED};return{decision:Db.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}function um1(){if(_m1)return;let $=o0(),Z=!!process.env.OTEL_EXPORTER_OTLP_ENDPOINT,X=Z?new Fy6:void 0;ym=$.nodeEnv==="test"?null:new Su0({basePath:IJ()}),gm=$.nodeEnv==="test"?null:new _u0({basePath:Bb()}),hm=$.nodeEnv==="test"?null:new Cu0({basePath:uN()}),um=hm?new zy6({exporter:hm,exportIntervalMillis:60000}):null;let Q=process.env.STUDIO_ENV??"production"??"unknown",Y={};if(!process.env.OTEL_RESOURCE_ATTRIBUTES?.includes("deployment.environment"))Y["deployment.environment"]=Q;new jy6({serviceName:$.otelServiceName,resource:Sm1(Y),metricReaders:[cu0,...um?[um]:[]],sampler:Ty6,spanProcessors:[...X?[new Cm1(X,{scheduledDelayMillis:60000,maxExportBatchSize:1000})]:[],...gm?[new Cm1(gm,{scheduledDelayMillis:60000,maxExportBatchSize:250})]:[]],instrumentations:[new By6]}).start(),y8=vm1.getMeter("studio","1.0.0"),TB=uu0.getTracer("studio","1.0.0");let J=wy6({detectors:[Oy6,Ly6,Dy6,Ey6]}).merge(Sm1({"service.name":$.otelServiceName,...Y})),K=[];if(Z){let U=Q==="prod"||Q==="production"?1:0.1,F=process.env.INFRA_LOG_SAMPLE_RATIO,B=U;if(F!==void 0){let w=Number(F);if(Number.isFinite(w)&&w>=0&&w<=1)B=w;else console.warn(`[observability] Ignoring invalid INFRA_LOG_SAMPLE_RATIO="${F}" (expected 0..1); using ${U}`)}K.push(new bm1(new hu0(new Vm1),B))}cm=new km1({resource:J,processors:K}),xm1.setGlobalLoggerProvider(cm),cm1=cm.getLogger("studio","1.0.0");let W=$.monitoringOtlpEndpoint??process.env.OTEL_EXPORTER_OTLP_ENDPOINT,H=[];if(W){let N=W.replace(/\/$/,""),U=N.endsWith("/v1/logs")?N:`${N}/v1/logs`;H.push(new ym1(new hu0(new Vm1({url:U})),8000))}if(ym)H.push(new hu0(ym,{scheduledDelayMillis:60000,maxExportBatchSize:250}));N90=new km1({resource:J,processors:H}),zm1(N90),Um1(),_m1=!0}async function yQ(){let Z=(await Promise.allSettled([cm?cm.forceFlush():Promise.resolve(),(async()=>{if(N90)await N90.forceFlush();if(ym)await ym.forceFlush()})(),(async()=>{let X=uu0.getTracerProvider();if("forceFlush"in X)await X.forceFlush();if(gm)await gm.forceFlush()})(),(async()=>{if(um)await um.forceFlush();if(hm)await hm.forceFlush()})()])).find((X)=>X.status==="rejected");if(Z)throw Z.reason}function lm1($,Z,X){return TB.startActiveSpan($,{attributes:X},async(Q)=>{try{let Y=await Z(Q);return Q.setStatus({code:Mm1.OK}),Y}catch(Y){let G=Y instanceof Error?Y:Error(String(Y??"unknown"));throw Q.setStatus({code:Mm1.ERROR,message:G.message}),Q.recordException(G),Y}finally{Q.end()}})}var Py6="__d",fm1,Ay6=1,gu0=($)=>{let X=new URL($.url).searchParams.get(Py6);if(X==="")return crypto.randomUUID();if(!X)X=$.headers.get("x-trace-debug-id");return X},Im1=($,Z)=>{try{$.set("x-trace-debug-id",Z)}catch{}},cu0,Ty6,ym=null,gm=null,hm=null,um=null,cm=null,N90=null,_m1=!1,TB,y8,cm1,lu0=($,Z,X)=>{let Q={},Y=X,G=X[X.length-1];if(G!==null&&typeof G==="object"&&!Array.isArray(G)&&!(G instanceof Error)&&Object.getPrototypeOf(G)===Object.prototype)Q=G,Y=X.slice(0,-1);let J=Y.map((K)=>{if(K instanceof Error)return`${K.name}: ${K.message}`;if(typeof K==="object")try{return JSON.stringify(K)}catch{return"[Object]"}return String(K)}).join(" ");cm1.emit({severityNumber:$,severityText:Z,body:J,attributes:{"log.source":"console",...Q}})},du0,qm1=($)=>{return Hy6.extract(Ny6,$.headers,{get:(X,Q)=>X.get(Q)??void 0,keys:(X)=>[...X.keys()]}).setValue(fm1,$)};var o$=O(()=>{Fm1();wm1();Lm1();Dm1();pY();vu0();q8();xu0();Rm1();fm1=Wy6("Current request");cu0=new Uy6({preventServerStart:!0}),Ty6=new gm1(new hm1(Ay6));TB=uu0.getTracer("studio","1.0.0"),y8=vm1.getMeter("studio","1.0.0"),cm1=xm1.getLogger("studio","1.0.0"),du0={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...$)=>{lu0(lm.ERROR,"ERROR",$),du0.error(...$)};console.warn=(...$)=>{lu0(lm.WARN,"WARN",$),du0.warn(...$)};console.debug=(...$)=>{lu0(lm.DEBUG,"DEBUG",$),du0.debug(...$)}});function YE(){try{return process.memoryUsage()}catch{return null}}import{Session as Ry6}from"inspector";function GE($,Z){return new Promise((X,Q)=>Eb.post($,Z,(Y,G)=>Y?Q(Y):X(G??{})))}async function dm1($){try{return Eb=new Ry6,Eb.connect(),await GE("Profiler.enable"),await GE("Profiler.setSamplingInterval",{interval:$}),await GE("Profiler.start"),jb=!0,!0}catch{return jb=!1,Eb=null,!1}}function Iy6($,Z){let{nodes:X,samples:Q,timeDeltas:Y}=$;if(!Q?.length)return null;let G=new Map,J=new Map;for(let L of X){G.set(L.id,L);for(let D of L.children??[])J.set(D,L.id)}let K=Math.max(1,Z)*1000,W=0,H=new Map;for(let L=Q.length-1;L>=0;L--){W+=Y[L]??0;let D=Q[L];if(D!==void 0)H.set(D,(H.get(D)??0)+1);if(W>=K)break}let N=-1,U=0;for(let[L,D]of H)if(D>U)U=D,N=L;if(N<0)return null;let F=[],B=new Set,w=N;while(w!=null&&!B.has(w)){B.add(w);let L=G.get(w);if(!L)break;let D=L.callFrame,E=D.url?` ${D.url}:${D.lineNumber+1}`:"";F.push(`${D.functionName||"(anonymous)"}${E}`),w=J.get(w)}return F}async function mm1($){if(!jb||!Eb||zb)return null;zb=!0;try{let{profile:Z}=await GE("Profiler.stop"),X=Z?Iy6(Z,$):null;return await GE("Profiler.start"),X}catch{return jb=!1,null}finally{zb=!1}}async function im1(){if(!jb||!Eb||zb)return;zb=!0;try{await GE("Profiler.stop"),await GE("Profiler.start")}catch{jb=!1}finally{zb=!1}}var Eb=null,jb=!1,zb=!1;var nm1=()=>{};function tm1(){if(mu0)return;let $=performance.now()+iu0;mu0=setInterval(()=>{let Z=performance.now();pm1=Math.max(0,Z-$),$=Z+iu0},iu0),mu0.unref?.()}function om1(){return tm1(),pm1}function rm1(){if(tm1(),process.env.EVENT_LOOP_MONITOR!=="1")return()=>{};let $=Number(process.env.EVENT_LOOP_INTERVAL_MS??250),Z=Number(process.env.EVENT_LOOP_SPIKE_MS??100),X=process.env.EVENT_LOOP_PROFILE==="1",Q=Number(process.env.EVENT_LOOP_PROFILE_MS??1000),Y=Number(process.env.EVENT_LOOP_PROFILE_INTERVAL_US??1e4),G=30000,J=performance.now();if(X)dm1(Y).then((H)=>{console.warn(JSON.stringify({msg:"event-loop-profiler",status:H?"started":"unavailable",intervalUs:Y}))});let K=y8.createHistogram("eventloop.delay",{description:"Event-loop lag measured as timer scheduling drift",unit:"ms"}),W=performance.now()+$;return U90=setInterval(()=>{let H=performance.now(),N=Math.max(0,H-W);if(W=H+$,K.record(N),N>Z){let U=YE();console.warn(JSON.stringify({msg:"event-loop-stall",ts:new Date().toISOString(),lagMs:Math.round(N),rss:U?.rss,heapUsed:U?.heapUsed,heapTotal:U?.heapTotal,external:U?.external}))}if(X){if(N>Q)mm1(Math.round(N)).then((U)=>{if(U?.length)console.warn(JSON.stringify({msg:"event-loop-stall-profile",ts:new Date().toISOString(),lagMs:Math.round(N),stack:U}))}),J=H;else if(H-J>G)im1(),J=H}},$),U90.unref?.(),()=>{if(U90)clearInterval(U90)}}var U90,mu0,pm1=0,iu0=500;var nu0=O(()=>{o$();nm1()});var Yi1={};w0(Yi1,{withSslmode:()=>pu0,getDbDialect:()=>mm,getDb:()=>U6,getDatabaseUrl:()=>IB,createDatabase:()=>Qi1,closeDatabase:()=>qB});import{Kysely as qy6,PostgresDialect as em1}from"kysely";import{Pool as $i1}from"pg";function Sy6($){let Z=$.connect.bind($);return $.connect=(X)=>{if(typeof X==="function")return Z(X);let Q=performance.now(),Y=F90(),G=$.idleCount===0&&$.totalCount>=Y,J=$.idleCount;return Z().then((K)=>{let W=performance.now()-Q;if(am1().record(W,{"db.pool.outcome":G?"contended":"available"}),W>Vy6)if(G)console.error("Slow db pool acquire \u2014 pool saturated:",{waitMs:W,total:$.totalCount,idle:$.idleCount,waiting:$.waitingCount,max:Y});else console.warn("Slow db pool acquire \u2014 event-loop lag (not pool):",{waitMs:W,idleAtStart:J,total:$.totalCount,max:Y});return K},(K)=>{throw am1().record(performance.now()-Q,{"db.pool.outcome":"error"}),K})},$}function Xi1(){try{return o0().databasePgSsl}catch{return!1}}function F90(){try{return o0().databasePoolMax}catch{return 10}}function Cy6($){let Z=Sy6(new $i1({connectionString:$,max:F90(),ssl:Xi1(),...Zi1})),X=new em1({pool:Z});return{type:"postgres",db:new qy6({dialect:X,log:ky6(Z)}),pool:Z}}function IB(){return o0().databaseUrl}function pu0($,Z){if(!Z)return $;let X=new URL($);if(!X.searchParams.has("sslmode"))X.searchParams.set("sslmode","verify-full");return X.toString()}function mm($){let Z=$||IB();return new em1({pool:new $i1({connectionString:Z,max:F90(),ssl:Xi1(),...Zi1})})}function Qi1($){let Z=$||IB();return Cy6(Z)}async function qB($){if(await $.db.destroy(),!$.pool.ended)await $.pool.end();if($===dm)dm=null}function U6(){if(!dm)dm=Qi1(IB());return dm}var My6=()=>y8.createHistogram("db.query.duration",{description:"Database query execution duration in milliseconds",unit:"ms"}),am1=()=>y8.createHistogram("db.pool.acquire.duration",{description:"Time spent waiting to acquire a connection from the pool",unit:"ms"}),sm1=400,Vy6=100,ky6=($)=>(Z)=>{let X={"db.statement":Z.query.sql,"db.status":Z.level==="error"?"error":"success"};if(Z.queryDurationMillis>sm1){let Q=om1(),Y=Q>sm1/2;console.error(Y?"Slow query measurement \u2014 likely event-loop lag, not slow SQL:":"Slow query detected:",{durationMs:Z.queryDurationMillis,eventLoopLagMs:Math.round(Q),sql:Z.query.sql,pool:{total:$.totalCount,idle:$.idleCount,waiting:$.waitingCount,max:F90()}})}if(My6().record(Z.queryDurationMillis,X),Z.level==="error")console.error("Query failed:",{durationMs:Z.queryDurationMillis,error:Z.error,sql:Z.query.sql})},Zi1,dm=null;var $X=O(()=>{q8();o$();nu0();Zi1={keepAlive:!0,keepAliveInitialDelayMillis:1e4,idleTimeoutMillis:300000,connectionTimeoutMillis:30000,allowExitOnIdle:!0}});function Ji1($){let{port:Z,query:X}=$,{protocol:Q,path:Y,hostname:G}=$;if(Q&&Q.slice(-1)!==":")Q+=":";if(Z)G+=`:${Z}`;if(Y&&Y.charAt(0)!=="/")Y=`/${Y}`;let J=X?Gi1.buildQueryString(X):"";if(J&&J[0]!=="?")J=`?${J}`;let K="";if($.username!=null||$.password!=null){let H=$.username??"",N=$.password??"";K=`${H}:${N}@`}let W="";if($.fragment)W=`#${$.fragment}`;return`${Q}//${K}${G}${Y}${J}${W}`}var Gi1;var Ki1=O(()=>{Gi1=k(X80(),1)});var Wi1="UNSIGNED-PAYLOAD",Hi1="X-Amz-Content-Sha256";class B90{signer;constructor($){let Z={service:$.signingName||$.service||"s3",uriEscapePath:$.uriEscapePath||!1,applyChecksum:$.applyChecksum||!1,...$};this.signer=new Ni1.SignatureV4MultiRegion(Z)}presign($,{unsignableHeaders:Z=new Set,hoistableHeaders:X=new Set,unhoistableHeaders:Q=new Set,...Y}={}){return this.prepareRequest($,{unsignableHeaders:Z,unhoistableHeaders:Q,hoistableHeaders:X}),this.signer.presign($,{expiresIn:900,unsignableHeaders:Z,unhoistableHeaders:Q,...Y})}presignWithCredentials($,Z,{unsignableHeaders:X=new Set,hoistableHeaders:Q=new Set,unhoistableHeaders:Y=new Set,...G}={}){return this.prepareRequest($,{unsignableHeaders:X,unhoistableHeaders:Y,hoistableHeaders:Q}),this.signer.presignWithCredentials($,Z,{expiresIn:900,unsignableHeaders:X,unhoistableHeaders:Y,...G})}prepareRequest($,{unsignableHeaders:Z=new Set,unhoistableHeaders:X=new Set,hoistableHeaders:Q=new Set}={}){Z.add("content-type"),Object.keys($.headers).map((K)=>K.toLowerCase()).filter((K)=>K.startsWith("x-amz-server-side-encryption")).forEach((K)=>{if(!Q.has(K))X.add(K)}),$.headers[Hi1]=Wi1;let Y=$.headers.host,G=$.port,J=`${$.hostname}${$.port!=null?":"+G:""}`;if(!Y||Y===$.hostname&&$.port!=null)$.headers.host=J}}var Ni1;var tu0=O(()=>{Ni1=k(_f(),1)});var Ui1,Fi1,w90=async($,Z,X={})=>{let Q,Y;if(typeof $.config.endpointProvider==="function"){let F=(await Ui1.getEndpointFromInstructions(Z.input,Z.constructor,$.config)).properties?.authSchemes?.[0];if(F?.name==="sigv4a")Y=F?.signingRegionSet?.join(",");else Y=F?.signingRegion;Q=new B90({...$.config,signingName:F?.signingName,region:async()=>Y})}else Q=new B90($.config);let G=(U,F)=>async(B)=>{let{request:w}=B;if(!Fi1.HttpRequest.isInstance(w))throw Error("Request to be presigned is not an valid HTTP request.");delete w.headers["amz-sdk-invocation-id"],delete w.headers["amz-sdk-request"],delete w.headers["x-amz-user-agent"];let L,D={...X,signingRegion:X.signingRegion??F.signing_region??Y,signingService:X.signingService??F.signing_service};if(F.s3ExpressIdentity)L=await Q.presignWithCredentials(w,F.s3ExpressIdentity,D);else L=await Q.presign(w,D);return{response:{},output:{$metadata:{httpStatusCode:200},presigned:L}}},J="presignInterceptMiddleware",K=$.middlewareStack.clone();K.addRelativeTo(G,{name:J,relation:"before",toMiddleware:"awsAuthMiddleware",override:!0});let W=Z.resolveMiddleware(K,$.config,{}),{output:H}=await W({input:Z.input}),{presigned:N}=H;return Ji1(N)};var Bi1=O(()=>{Ki1();tu0();Ui1=k(N1(),1),Fi1=k(p$(),1)});var wi1=O(()=>{Bi1();tu0()});import{extname as _y6}from"path";function UW($){let Z;try{Z=decodeURIComponent($)}catch{Z=$}let Q=Z.replace(/\0/g,"").replace(/[\x00-\x1f\x7f]/g,"").replace(/\\/g,"/").split("/"),Y=[];for(let G of Q)if(G==="..")Y.pop();else if(G!=="."&&G!=="")Y.push(G);return Y.join("/")}function MB($,Z){let X=UW(Z);if(!X)throw Error("Key is empty after sanitization");return`${$}/${X}`}function Oi1($,Z){if(!Z)return`${$}/`;let X=UW(Z);return`${$}/${X}${X.endsWith("/")?"":"/"}`}function Pb($,Z,X){let Q=X.split("/").map(encodeURIComponent).join("/");return`${$}/api/${encodeURIComponent(Z)}/files/${Q}`}function ou0($,Z){let X=`${$}/`;if(Z.startsWith(X))return Z.slice(X.length);return Z}function uZ($){let Z=_y6($).toLowerCase();return vy6[Z]??"application/octet-stream"}function O90($){let Z=$.split(";")[0].trim();if(xy6.has(Z))return!0;if(Z.startsWith("text/"))return!0;return!1}var vy6,xy6;var FW=O(()=>{vy6={".json":"application/json",".html":"text/html",".htm":"text/html",".css":"text/css",".js":"application/javascript",".mjs":"application/javascript",".ts":"text/typescript",".txt":"text/plain",".md":"text/markdown",".csv":"text/csv",".xml":"application/xml",".svg":"image/svg+xml",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".webp":"image/webp",".pdf":"application/pdf",".zip":"application/zip",".gz":"application/gzip",".tar":"application/x-tar",".wasm":"application/wasm",".yaml":"application/yaml",".yml":"application/yaml",".toml":"application/toml"};xy6=new Set(["application/json","text/html","text/css","application/javascript","text/typescript","text/plain","text/markdown","text/csv","application/xml","image/svg+xml","application/yaml","application/toml"])});class ru0{client;bucket;constructor($){this.bucket=$.bucket,this.client=new e7({endpoint:$.endpoint,region:$.region,credentials:{accessKeyId:$.accessKeyId,secretAccessKey:$.secretAccessKey},forcePathStyle:$.forcePathStyle})}async getBytesOrPresign($,Z,X){let Q=MB($,Z),Y=await this.client.send(new RJ({Bucket:this.bucket,Key:Q})),G=Y.ContentLength??0,J=Y.ContentType??uZ(Z);if(G>X.presignWhenLargerThan){let N=await w90(this.client,new yN({Bucket:this.bucket,Key:Q}),{expiresIn:X.presignExpiresIn??3600});return{error:"FILE_TOO_LARGE",size:G,maxInlineSize:X.presignWhenLargerThan,presignedUrl:N,contentType:J}}let W=await(await this.client.send(new yN({Bucket:this.bucket,Key:Q}))).Body.transformToByteArray(),H=O90(J);return{content:H?new TextDecoder().decode(W):Buffer.from(W).toString("base64"),contentType:J,encoding:H?"utf-8":"base64",size:G,lastModified:Y.LastModified,etag:Y.ETag}}async getBytes($,Z){let X=MB($,Z);return(await this.client.send(new yN({Bucket:this.bucket,Key:X}))).Body.transformToByteArray()}async put($,Z,X,Q){let Y=MB($,Z),G=Q?.contentType??uZ(Z);return{etag:(await this.client.send(new HW({Bucket:this.bucket,Key:Y,Body:typeof X==="string"?Buffer.from(X,"utf-8"):X,ContentType:G}))).ETag,key:Z}}async list($,Z){let X=Oi1($,Z?.prefix),Q=await this.client.send(new iY({Bucket:this.bucket,Prefix:X,MaxKeys:Z?.maxKeys??1000,ContinuationToken:Z?.continuationToken,Delimiter:Z?.delimiter})),Y=Q.CommonPrefixes?.map((G)=>ou0($,G.Prefix??"")).filter(Boolean);return{objects:(Q.Contents??[]).map((G)=>({key:ou0($,G.Key??""),size:G.Size??0,lastModified:G.LastModified,etag:G.ETag})),isTruncated:Q.IsTruncated??!1,nextContinuationToken:Q.NextContinuationToken,commonPrefixes:Y&&Y.length>0?Y:void 0}}async delete($,Z){let X=MB($,Z);await this.client.send(new Gb({Bucket:this.bucket,Key:X}))}async head($,Z){let X=MB($,Z),Q=await this.client.send(new RJ({Bucket:this.bucket,Key:X}));return{contentType:Q.ContentType??uZ(Z),size:Q.ContentLength??0,lastModified:Q.LastModified,etag:Q.ETag}}async presignedGetUrl($,Z,X=3600,Q){let Y=MB($,Z);return w90(this.client,new yN({Bucket:this.bucket,Key:Y}),{expiresIn:X})}async presignedPutUrl($,Z,X=3600,Q){let Y=MB($,Z);return w90(this.client,new HW({Bucket:this.bucket,Key:Y,ContentType:Q}),{expiresIn:X})}}var Li1=O(()=>{Sm();wi1();FW()});function fy6(){let $=o0();return!!($.s3Endpoint&&$.s3Bucket&&$.s3AccessKeyId&&$.s3SecretAccessKey)}function tX(){if(im!==void 0)return im;if(!fy6())return im=null,null;let $=o0();return im=new ru0({endpoint:$.s3Endpoint,bucket:$.s3Bucket,region:$.s3Region,accessKeyId:$.s3AccessKeyId,secretAccessKey:$.s3SecretAccessKey,forcePathStyle:$.s3ForcePathStyle}),im}var im;var VB=O(()=>{q8();Li1()});function tY($,Z){return{getBytesOrPresign:(X,Q)=>$.getBytesOrPresign(Z,X,Q),getBytes:(X)=>$.getBytes(Z,X),put:(X,Q,Y)=>$.put(Z,X,Q,Y),list:(X)=>$.list(Z,X),delete:(X)=>$.delete(Z,X),head:(X)=>$.head(Z,X),presignedGetUrl:(X,Q,Y)=>$.presignedGetUrl(Z,X,Q,Y),presignedPutUrl:(X,Q,Y)=>$.presignedPutUrl(Z,X,Q,Y)}}import{createHash as by6}from"crypto";function Di1($){let Z=$;while(Z?.[L90])Z=Z[L90];return Z}function pm($){let{objectStorage:Z,baseUrl:X,orgSlug:Q,prefix:Y="connection-icons",maxBytes:G=gy6,dryRun:J=!1}=$;return async(K)=>{if(typeof K!=="string")return K;let W=K.match(yy6);if(!W)return K;if(!Z||!Q)return K;let[,H,N]=W,U=H.toLowerCase(),F=uy6[U];if(!F)return K;if(Math.floor(N.length*3/4)>G)return console.warn(`[asset-hoister] asset exceeds ${G} bytes, keeping inline`),K;let B=Buffer.from(N,"base64"),w=by6("sha256").update(B).digest("hex"),L=`${Y}/${w}.${F}`;if(J)return Pb(X,Q,L);try{return await Z.put(L,B,{contentType:U}),Pb(X,Q,L)}catch(D){return console.error("[asset-hoister] upload failed, keeping inline asset:",D),K}}}async function D90($,Z,X=0){if(X>hy6)return $;if(typeof $==="string")return await Z($)??$;if(Array.isArray($)){let Q=await Promise.all($.map((Y)=>D90(Y,Z,X+1)));return Q.some((Y,G)=>Y!==$[G])?Q:$}if($!==null&&typeof $==="object"){let Q=Object.entries($),Y=await Promise.all(Q.map(([,K])=>D90(K,Z,X+1))),G=!1,J={};return Q.forEach(([K,W],H)=>{if(J[K]=Y[H],Y[H]!==W)G=!0}),G?J:$}return $}function E90($,Z){return D90($,Z)}async function nm($,Z){let X={...$};if(typeof X.icon==="string")X.icon=await Z(X.icon);if(X.metadata!==null&&typeof X.metadata==="object")X.metadata=await D90(X.metadata,Z);return X}function cy6($,Z){return new Proxy($,{get(X,Q,Y){if(Q===L90)return X;if(Q==="create")return async(J)=>X.create(await nm(J,Z));if(Q==="createNew")return async(J)=>X.createNew(await nm(J,Z));if(Q==="update")return async(J,K)=>X.update(J,await nm(K,Z));let G=Reflect.get(X,Q,Y);return typeof G==="function"?G.bind(X):G}})}function ly6($,Z){return new Proxy($,{get(X,Q,Y){if(Q===L90)return X;if(Q==="create")return async(J,K,W,H)=>X.create(J,K,await nm(W,Z),H);if(Q==="update")return async(J,K,W)=>X.update(J,K,await nm(W,Z));let G=Reflect.get(X,Q,Y);return typeof G==="function"?G.bind(X):G}})}function au0($,Z){let X=pm(Z);if(Ei1($.connections))$.connections=cy6(Di1($.connections),X);if(Ei1($.virtualMcps))$.virtualMcps=ly6(Di1($.virtualMcps),X)}function Ei1($){return $!==null&&typeof $==="object"}var yy6,gy6=5242880,hy6=64,L90,uy6;var z90=O(()=>{FW();yy6=/^data:((?:image|audio|video)\/[^;,]+)(?:;[^,]+)?;base64,(.+)$/is,L90=Symbol("assetHoistingTarget"),uy6={"image/png":"png","image/jpeg":"jpg","image/gif":"gif","image/webp":"webp","image/x-icon":"ico","image/vnd.microsoft.icon":"ico","audio/mpeg":"mp3","audio/mp4":"m4a","audio/wav":"wav","audio/x-wav":"wav","audio/ogg":"ogg","audio/webm":"weba","audio/aac":"aac","video/mp4":"mp4","video/webm":"webm","video/ogg":"ogv","video/quicktime":"mov"}});function H9(){let $=o0();if($.baseUrl)return $.baseUrl;return`http://localhost:${$.port??3000}`}function zi1(){return`http://localhost:${o0().port??3000}`}function ZX(){return o0().publicUrl??H9()}var n9=O(()=>{q8()});var ji1={};w0(ji1,{backfillThreadAssetsCommand:()=>dy6});import{sql as su0}from"kysely";async function dy6($){let{dryRun:Z,batch:X}=$,Q=$.baseUrl??H9(),Y=tX();if(!Y)return console.error("[backfill-assets] Object storage (S3) is not configured \u2014 cannot hoist "+"inline media. Set S3_ENDPOINT/S3_BUCKET/S3_ACCESS_KEY_ID/S3_SECRET_ACCESS_KEY and retry."),1;if(/^https?:\/\/localhost(:|\/|$)/.test(Q))console.warn(`[backfill-assets] base URL resolves to "${Q}" \u2014 set BASE_URL `+"(or pass --base-url) to the public origin, or stored media URLs will be wrong.");let G=U6(),{db:J}=G,K;if($.org){let L=await J.selectFrom("organization").select(["id","slug"]).where((D)=>D.or([D("id","=",$.org),D("slug","=",$.org)])).executeTakeFirst();if(!L)return console.error(`[backfill-assets] org "${$.org}" not found (slug or id).`),await qB(G).catch(()=>{}),1;K=L.id,console.log(`[backfill-assets] scoped to org ${L.slug??L.id} (${L.id})`)}console.log(`[backfill-assets] starting${Z?" (dry-run)":""} \u2014 target=${$.target} baseUrl=${Q} batch=${X}${$.limit?` limit=${$.limit}`:""}`);let W=new Map,H=(L,D,E)=>{let z=`${E}\x00${L}`,j=W.get(z);if(j)return j;let A=pm({objectStorage:tY(Y,L),baseUrl:Q,orgSlug:D??void 0,prefix:E,dryRun:Z});return W.set(z,A),A},N=async(L,D,E,z)=>{let j="";for(;;){let A=$.limit?$.limit-E.scanned:1/0;if(A<=0)break;let P=await L(j,Math.min(X,A));if(P.length===0)break;for(let I of P)j=I.id,E.scanned++,await D(I);console.log(`[backfill-assets] ${z}: scanned=${E.scanned} ${Z?"would-change":"changed"}=${E.changed} errors=${E.errors} cursor=${j}`)}},U={scanned:0,changed:0,errors:0},F={scanned:0,changed:0,errors:0},B={scanned:0,changed:0,errors:0};try{if($.target==="all"||$.target==="threads")await N((L,D)=>J.selectFrom("thread_messages as tm").innerJoin("threads as t","t.id","tm.thread_id").innerJoin("organization as o","o.id","t.organization_id").select(["tm.id as id",su0`tm.parts`.as("parts"),su0`tm.metadata`.as("metadata"),"t.organization_id as orgId","o.slug as orgSlug"]).where("tm.id",">",L).$if(!!K,(E)=>E.where("t.organization_id","=",K)).orderBy("tm.id","asc").limit(D).execute(),async(L)=>{try{if(!tm(L.parts)&&!tm(L.metadata))return;let D=H(L.orgId,L.orgSlug,"thread-assets"),E=JSON.parse(L.parts),z=await E90(E,D),j=z!==E,A=L.metadata!==null?JSON.parse(L.metadata):null,P=await E90(A,D),I=P!==A;if(!j&&!I)return;if(U.changed++,Z)return;await J.updateTable("thread_messages").set({parts:j?JSON.stringify(z):L.parts,metadata:I?JSON.stringify(P):L.metadata}).where("id","=",L.id).execute()}catch(D){U.errors++,console.error(`[backfill-assets] thread_message ${L.id} failed, skipping:`,D)}},U,"threads");if($.target==="all"||$.target==="connections")await N((L,D)=>J.selectFrom("connections as c").innerJoin("organization as o","o.id","c.organization_id").select(["c.id as id","c.icon as icon",su0`c.metadata`.as("metadata"),"c.organization_id as orgId","o.slug as orgSlug"]).where("c.id",">",L).$if(!!K,(E)=>E.where("c.organization_id","=",K)).orderBy("c.id","asc").limit(D).execute(),async(L)=>{try{if(!tm(L.icon)&&!tm(L.metadata))return;let D=H(L.orgId,L.orgSlug,"connection-icons"),E=L.icon!==null?await D(L.icon):L.icon,z=E!==L.icon,j=L.metadata!==null?JSON.parse(L.metadata):null,A=await E90(j,D),P=A!==j;if(!z&&!P)return;if(F.changed++,Z)return;await J.updateTable("connections").set({icon:z?E??null:L.icon,metadata:P?JSON.stringify(A):L.metadata}).where("id","=",L.id).execute()}catch(D){F.errors++,console.error(`[backfill-assets] connection ${L.id} failed, skipping:`,D)}},F,"connections");if($.target==="all"||$.target==="organizations")await N((L,D)=>J.selectFrom("organization as o").select(["o.id as id","o.logo as logo","o.slug as orgSlug"]).where("o.id",">",L).$if(!!K,(E)=>E.where("o.id","=",K)).orderBy("o.id","asc").limit(D).execute(),async(L)=>{try{if(!tm(L.logo))return;let E=await H(L.id,L.orgSlug,"org-logos")(L.logo);if(E===L.logo)return;if(B.changed++,Z)return;await J.updateTable("organization").set({logo:E??null}).where("id","=",L.id).execute()}catch(D){B.errors++,console.error(`[backfill-assets] organization ${L.id} failed, skipping:`,D)}},B,"organizations")}finally{await qB(G).catch(()=>{})}let w=Z?"would-change":"changed";return console.log("[backfill-assets] done \u2014 "+`threads(scanned=${U.scanned} ${w}=${U.changed} errors=${U.errors}) connections(scanned=${F.scanned} ${w}=${F.changed} errors=${F.errors}) organizations(scanned=${B.scanned} ${w}=${B.changed} errors=${B.errors})`),U.errors+F.errors+B.errors>0?1:0}var tm=($)=>$!==null&&($.includes("data:image/")||$.includes("data:audio/")||$.includes("data:video/"));var Pi1=O(()=>{$X();VB();z90();n9()});async function Ai1($){let Z,X,Q=new Promise((J,K)=>{Z=J,X=K});Q.catch(()=>{});let Y=!1,G=Bun.serve({port:$.port??0,hostname:"127.0.0.1",fetch(J){if(Y)return new Response("",{status:204});let K=new URL(J.url),W=K.searchParams.get("code");if(K.searchParams.get("state")!==$.expectedState)return Y=!0,X(Error("OAuth state mismatch")),new Response("State mismatch \u2014 close this tab.",{status:400});if(!W)return Y=!0,X(Error("OAuth callback missing code")),new Response("Missing code \u2014 close this tab.",{status:400});return Y=!0,Z({code:W}),new Response(null,{status:302,headers:{location:$.successRedirectUrl}})}});return{url:`http://127.0.0.1:${G.port}`,waitForCallback:()=>Q,close:()=>G.stop(!0)}}import{createHash as my6,randomBytes as iy6}from"crypto";function Ri1(){let $=Ti1(iy6(32)),Z=Ti1(my6("sha256").update($).digest());return{verifier:$,challenge:Z}}function Ti1($){return $.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}var Ii1=()=>{};import{chmod as ny6,mkdir as py6,readdir as ty6,readFile as oy6,rename as ry6,rm as qi1,writeFile as ay6}from"fs/promises";import{dirname as sy6,join as $c0}from"path";function j90($,Z){if(!Z)return $c0($,"session.json");return $c0($,`session.${ey6(Z)}.json`)}function ey6($){let Z=$;try{Z=new URL($).host}catch{}return Z.replace(/[^a-zA-Z0-9.-]/g,"_")||"default"}async function eu0($){try{let Z=await oy6($,"utf8"),X=JSON.parse(Z);if(!$g6(X))return null;return X}catch{return null}}async function Mi1($){try{return(await ty6($)).filter((X)=>/^session(\..+)?\.json$/.test(X)).map((X)=>$c0($,X))}catch{return[]}}async function P90($,Z){let X=await eu0(j90($,Z));if(X)return X;if(Z)return eu0(j90($));for(let Q of await Mi1($)){let Y=await eu0(Q);if(Y)return Y}return null}async function A90($,Z){let X=j90($,Z.target);await py6(sy6(X),{recursive:!0});let Q=`${X}.tmp`;await ay6(Q,JSON.stringify(Z,null,2),{mode:384}),await ny6(Q,384),await ry6(Q,X)}async function T90($,Z){if(Z){await qi1(j90($,Z),{force:!0});return}for(let X of await Mi1($))await qi1(X,{force:!0})}function $g6($){if(!$||typeof $!=="object")return!1;let Z=$;if(typeof Z.target!=="string"||typeof Z.clientId!=="string"||typeof Z.accessToken!=="string"||typeof Z.createdAt!=="string")return!1;if(!Z.user||typeof Z.user!=="object")return!1;if(typeof Z.user.sub!=="string")return!1;return!0}var R90=()=>{};var ki1={};w0(ki1,{performInteractiveLogin:()=>Vi1,loginCommand:()=>Gg6});import{spawn as Zg6}from"child_process";import{randomUUID as Xg6}from"crypto";async function Vi1($={}){let Z=($.target??Qg6).replace(/\/$/,""),X=$.fetch??fetch,Q=$.openBrowser??Hg6,Y=Xg6(),G=Ri1(),J=await Ai1({expectedState:Y,successRedirectUrl:`${Z}/cli/auth-success`});try{let K=`${J.url}/`,W=await Jg6(X,Z,K),H=new URLSearchParams({client_id:W,redirect_uri:K,response_type:"code",state:Y,scope:Yg6,code_challenge:G.challenge,code_challenge_method:"S256"}),N=`${Z}/login?${H.toString()}`;console.log(`Opening ${N} in your browser...`),await Q(N);let{code:U}=await J.waitForCallback(),F=await Kg6(X,Z,W,U,K,G.verifier);if(!F.id_token)throw Error("Token endpoint returned no id_token");let B=Wg6(F.id_token);return{target:Z,clientId:W,user:{sub:B.sub,email:B.email,name:B.name},accessToken:F.access_token,refreshToken:F.refresh_token,expiresAt:F.expires_in?Math.floor(Date.now()/1000)+F.expires_in:void 0,createdAt:new Date().toISOString()}}finally{J.close()}}async function Gg6($){try{let Z=await Vi1({target:$.target,openBrowser:$.openBrowser,fetch:$.fetch});return await A90($.dataDir,Z),console.log(`Logged in as ${Z.user.email??Z.user.sub}.`),0}catch(Z){return console.error(`Login failed: ${Z instanceof Error?Z.message:String(Z)}`),1}}async function Jg6($,Z,X){let Q=await $(`${Z}/api/auth/mcp/register`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_name:"decocms-cli",redirect_uris:[X],grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none",application_type:"native"})});if(!Q.ok)throw Error(`Client registration failed: HTTP ${Q.status} ${await Q.text().catch(()=>"")}`);let Y=await Q.json();if(typeof Y?.client_id!=="string")throw Error("Client registration returned no client_id");return Y.client_id}async function Kg6($,Z,X,Q,Y,G){let J=new URLSearchParams({grant_type:"authorization_code",code:Q,redirect_uri:Y,client_id:X,code_verifier:G}),K=await $(`${Z}/api/auth/mcp/token`,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:J.toString()});if(!K.ok)throw Error(`Token exchange failed: HTTP ${K.status} ${await K.text().catch(()=>"")}`);let W=await K.json();if(typeof W?.access_token!=="string")throw Error("Token endpoint returned no access_token");return W}function Wg6($){let Z=$.split(".");if(Z.length!==3||!Z[1])throw Error("id_token is not a valid JWT");let X=JSON.parse(Buffer.from(Z[1],"base64url").toString("utf8"));if(typeof X.sub!=="string")throw Error("id_token has no sub claim");return{sub:X.sub,email:typeof X.email==="string"?X.email:void 0,name:typeof X.name==="string"?X.name:void 0}}async function Hg6($){let Z,X;switch(process.platform){case"darwin":Z="open",X=[$];break;case"win32":Z="cmd",X=["/c","start","",$];break;default:Z="xdg-open",X=[$];break}await new Promise((Q)=>{let Y=Zg6(Z,X,{stdio:"ignore",detached:!0});Y.on("error",()=>{console.log(`Could not open browser automatically. Please open this URL manually:
-  ${$}`),Q()}),Y.on("spawn",()=>{Y.unref(),Q()})})}var Qg6="https://studio.decocms.com",Yg6="openid profile email offline_access";var Si1=O(()=>{Ii1();R90()});async function Ci1($,Z=fetch,X=Date.now){if(!$.refreshToken)throw new G3("invalid_grant","Session has no refresh token");let Q=new URLSearchParams({grant_type:"refresh_token",refresh_token:$.refreshToken,client_id:$.clientId}),Y;try{Y=await Z(`${$.target}/api/auth/mcp/token`,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:Q.toString(),signal:AbortSignal.timeout(Ng6)})}catch(H){throw new G3("transient",H instanceof Error?H.message:String(H))}if(!Y.ok){let H=await Y.text().catch(()=>"");if(Y.status>=400&&Y.status<500)throw new G3("invalid_grant",`HTTP ${Y.status} ${H}`);throw new G3("transient",`HTTP ${Y.status} ${H}`)}let G;try{G=await Y.json()}catch(H){throw new G3("transient",`Token endpoint returned a non-JSON body: ${H instanceof Error?H.message:String(H)}`)}if(typeof G!=="object"||G===null)throw new G3("transient","Token endpoint returned a non-object JSON body");if(typeof G.access_token!=="string"||!G.access_token)throw new G3("transient","Token endpoint returned no access_token");let J=Number(G.expires_in),K=Number.isFinite(J)&&J>0&&J<=Ug6?Math.floor(X()/1000)+J:$.expiresAt,W=typeof G.refresh_token==="string"&&G.refresh_token?G.refresh_token:$.refreshToken;return{...$,accessToken:G.access_token,refreshToken:W,expiresAt:K}}var G3,Ng6=1e4,Ug6=3153600000;var Zc0=O(()=>{G3=class G3 extends Error{kind;constructor($,Z){super(Z);this.name="RefreshFailedError",this.kind=$}}});async function _i1($){let Z=await P90($.dataDir,$.target);if(!Z)return null;let X=$.now??Date.now;if(!Bg6(Z,X()))return Z;try{let Q=await Ci1(Z,$.fetch,X);return await A90($.dataDir,Q),Q}catch(Q){if(Q instanceof G3&&Q.kind==="invalid_grant")return await T90($.dataDir,Z.target),null;throw Q}}function Bg6($,Z){if($.expiresAt===void 0)return!1;let X=Math.floor(Z/1000);return $.expiresAt-Fg6<X}var Fg6=60;var vi1=O(()=>{Zc0();R90()});var xi1={};w0(xi1,{whoamiCommand:()=>wg6});async function wg6($){let Z;try{Z=await _i1({dataDir:$.dataDir,fetch:$.fetch,now:$.now})}catch(X){if(X instanceof G3&&X.kind==="transient")return console.error(`Could not refresh session: ${X.message}. Run \`decocms auth login\` to authenticate.`),1;throw X}if(!Z)return console.error("Not logged in. Run `decocms auth login` to authenticate."),1;return console.log(`Target: ${Z.target}`),console.log(`User:   ${Z.user.email??Z.user.sub}`),0}var fi1=O(()=>{vi1();Zc0()});var bi1={};w0(bi1,{logoutCommand:()=>Og6});async function Og6($){if(!await P90($.dataDir))return console.log("Already logged out."),0;return await T90($.dataDir),console.log("Logged out."),0}var yi1=O(()=>{R90()});var M90={};w0(M90,{printBanner:()=>Dg6,bannerLines:()=>gi1,BANNER_LINES:()=>I90,BANNER_GRADIENT:()=>q90});function Lg6($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function gi1($){let Z=I90.map((X,Q)=>{let[Y,G,J]=Lg6(q90[Q]);return`\x1B[38;2;${Y};${G};${J}m${X}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function Dg6($){console.log("");for(let Z of gi1($))console.log(Z);console.log("")}var I90,q90;var om=O(()=>{I90=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],q90=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});import{randomBytes as Eg6}from"crypto";import{mkdirSync as zg6,readFileSync as jg6,writeFileSync as Pg6}from"fs";import{join as Ag6}from"path";function hi1($){let Z=Ag6($,Tg6);try{let Q=jg6(Z,"utf8").trim();if(Q)return Q}catch{}let X=Eg6(32).toString("base64");return zg6($,{recursive:!0}),Pg6(Z,X,{mode:384}),X}var Tg6="local-auth-secret";var ui1=()=>{};var ci1={};w0(ci1,{migrateBetterAuth:()=>Xc0});import{getMigrations as Rg6}from"better-auth/db";import{sso as Ig6}from"@better-auth/sso";import{organization as qg6}from"@decocms/better-auth/plugins";import{admin as Mg6,apiKey as Vg6,jwt as kg6,magicLink as Sg6,mcp as Cg6,openAPI as _g6}from"better-auth/plugins";import{emailOTP as vg6}from"better-auth/plugins/email-otp";async function Xc0($){let X={database:mm($||IB()),plugins:[qg6({dynamicAccessControl:{enabled:!0,enableCustomResources:!0}}),Mg6(),Vg6(),kg6(),_g6(),Cg6({loginPage:"/login"}),Ig6(),Sg6({sendMagicLink:async()=>{}}),vg6({sendVerificationOTP:async()=>{}})]},{toBeAdded:Q,toBeCreated:Y,runMigrations:G}=await Rg6(X);if(!Q.length&&!Y.length)return"up to date";return await G(),`${Y.length+Q.length} table(s) migrated`}var Qc0=O(()=>{$X()});var Yc0={};w0(Yc0,{up:()=>xg6,down:()=>fg6});import{sql as BW}from"kysely";async function xg6($){await $.schema.createTable("connections").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organizationId","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("createdById","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("name","text",(Z)=>Z.notNull()).addColumn("description","text").addColumn("icon","text").addColumn("appName","text").addColumn("appId","text").addColumn("connectionType","text",(Z)=>Z.notNull()).addColumn("connectionUrl","text",(Z)=>Z.notNull()).addColumn("connectionToken","text").addColumn("connectionHeaders","text").addColumn("oauthConfig","text").addColumn("metadata","text").addColumn("tools","text").addColumn("bindings","text").addColumn("status","text",(Z)=>Z.notNull().defaultTo("active")).addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("api_keys").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("userId","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("name","text",(Z)=>Z.notNull()).addColumn("hashedKey","text",(Z)=>Z.notNull().unique()).addColumn("permissions","text",(Z)=>Z.notNull()).addColumn("expiresAt","text").addColumn("remaining","integer").addColumn("metadata","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("audit_logs").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organizationId","text").addColumn("userId","text",(Z)=>Z.references("user.id").onDelete("set null")).addColumn("connectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("toolName","text",(Z)=>Z.notNull()).addColumn("allowed","integer",(Z)=>Z.notNull()).addColumn("duration","integer").addColumn("timestamp","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("requestMetadata","text").execute(),await $.schema.createTable("oauth_clients").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("clientId","text",(Z)=>Z.notNull().unique()).addColumn("clientSecret","text").addColumn("clientName","text",(Z)=>Z.notNull()).addColumn("redirectUris","text",(Z)=>Z.notNull()).addColumn("grantTypes","text",(Z)=>Z.notNull()).addColumn("scope","text").addColumn("clientUri","text").addColumn("logoUri","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("oauth_authorization_codes").addColumn("code","text",(Z)=>Z.primaryKey()).addColumn("clientId","text",(Z)=>Z.notNull().references("oauth_clients.clientId").onDelete("cascade")).addColumn("userId","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("redirectUri","text",(Z)=>Z.notNull()).addColumn("scope","text").addColumn("codeChallenge","text").addColumn("codeChallengeMethod","text").addColumn("expiresAt","text",(Z)=>Z.notNull()).addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("oauth_refresh_tokens").addColumn("token","text",(Z)=>Z.primaryKey()).addColumn("clientId","text",(Z)=>Z.notNull().references("oauth_clients.clientId").onDelete("cascade")).addColumn("userId","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("scope","text").addColumn("expiresAt","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("downstream_tokens").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("connectionId","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("userId","text",(Z)=>Z.references("user.id").onDelete("cascade")).addColumn("accessToken","text",(Z)=>Z.notNull()).addColumn("refreshToken","text").addColumn("scope","text").addColumn("expiresAt","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createIndex("idx_connections_organizationId").on("connections").column("organizationId").execute(),await $.schema.createIndex("idx_audit_logs_organizationId").on("audit_logs").column("organizationId").execute(),await $.schema.createIndex("idx_audit_logs_userId").on("audit_logs").column("userId").execute(),await $.schema.createIndex("idx_audit_logs_timestamp").on("audit_logs").column("timestamp").execute()}async function fg6($){await $.schema.dropTable("downstream_tokens").execute(),await $.schema.dropTable("oauth_refresh_tokens").execute(),await $.schema.dropTable("oauth_authorization_codes").execute(),await $.schema.dropTable("oauth_clients").execute(),await $.schema.dropTable("audit_logs").execute(),await $.schema.dropTable("api_keys").execute(),await $.schema.dropTable("connections").execute()}var li1=()=>{};var Gc0={};w0(Gc0,{up:()=>bg6,down:()=>yg6});import{sql as di1}from"kysely";async function bg6($){await $.schema.createTable("organization_settings").addColumn("organizationId","text",(Z)=>Z.primaryKey().references("organization.id").onDelete("cascade")).addColumn("modelsBindingConnectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(di1`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(di1`CURRENT_TIMESTAMP`)).execute()}async function yg6($){await $.schema.dropTable("organization_settings").execute()}var mi1=()=>{};var Jc0={};w0(Jc0,{up:()=>gg6,down:()=>hg6});async function gg6($){await $.schema.alterTable("connections").renameColumn("name","title").execute(),await $.schema.alterTable("connections").renameColumn("createdById","created_by").execute(),await $.schema.alterTable("connections").renameColumn("createdAt","created_at").execute(),await $.schema.alterTable("connections").renameColumn("updatedAt","updated_at").execute(),await $.schema.alterTable("connections").renameColumn("organizationId","organization_id").execute(),await $.schema.alterTable("connections").renameColumn("connectionType","connection_type").execute(),await $.schema.alterTable("connections").renameColumn("connectionUrl","connection_url").execute(),await $.schema.alterTable("connections").renameColumn("connectionToken","connection_token").execute(),await $.schema.alterTable("connections").renameColumn("connectionHeaders","connection_headers").execute(),await $.schema.alterTable("connections").renameColumn("oauthConfig","oauth_config").execute(),await $.schema.alterTable("connections").renameColumn("appName","app_name").execute(),await $.schema.alterTable("connections").renameColumn("appId","app_id").execute()}async function hg6($){await $.schema.alterTable("connections").renameColumn("title","name").execute(),await $.schema.alterTable("connections").renameColumn("created_by","createdById").execute(),await $.schema.alterTable("connections").renameColumn("created_at","createdAt").execute(),await $.schema.alterTable("connections").renameColumn("updated_at","updatedAt").execute(),await $.schema.alterTable("connections").renameColumn("organization_id","organizationId").execute(),await $.schema.alterTable("connections").renameColumn("connection_type","connectionType").execute(),await $.schema.alterTable("connections").renameColumn("connection_url","connectionUrl").execute(),await $.schema.alterTable("connections").renameColumn("connection_token","connectionToken").execute(),await $.schema.alterTable("connections").renameColumn("connection_headers","connectionHeaders").execute(),await $.schema.alterTable("connections").renameColumn("oauth_config","oauthConfig").execute(),await $.schema.alterTable("connections").renameColumn("app_name","appName").execute(),await $.schema.alterTable("connections").renameColumn("app_id","appId").execute()}var Kc0={};w0(Kc0,{up:()=>ug6,down:()=>cg6});async function ug6($){await $.schema.createTable("organization_settings_new").addColumn("organizationId","text",(Z)=>Z.primaryKey().references("organization.id").onDelete("cascade")).addColumn("createdAt","text",(Z)=>Z.notNull()).addColumn("updatedAt","text",(Z)=>Z.notNull()).execute(),await $.insertInto("organization_settings_new").columns(["organizationId","createdAt","updatedAt"]).expression((Z)=>Z.selectFrom("organization_settings").select(["organizationId","createdAt","updatedAt"])).execute(),await $.schema.dropTable("organization_settings").execute(),await $.schema.alterTable("organization_settings_new").renameTo("organization_settings").execute()}async function cg6($){await $.schema.createTable("organization_settings_new").addColumn("organizationId","text",(Z)=>Z.primaryKey().references("organization.id").onDelete("cascade")).addColumn("modelsBindingConnectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("createdAt","text",(Z)=>Z.notNull()).addColumn("updatedAt","text",(Z)=>Z.notNull()).execute(),await $.insertInto("organization_settings_new").columns(["organizationId","modelsBindingConnectionId","createdAt","updatedAt"]).expression((Z)=>Z.selectFrom("organization_settings").select(["organizationId",Z.val(null).as("modelsBindingConnectionId"),"createdAt","updatedAt"])).execute(),await $.schema.dropTable("organization_settings").execute(),await $.schema.alterTable("organization_settings_new").renameTo("organization_settings").execute()}var Wc0={};w0(Wc0,{up:()=>lg6,down:()=>dg6});async function lg6($){await $.schema.alterTable("connections").addColumn("configuration_state","text").execute(),await $.schema.alterTable("connections").addColumn("configuration_scopes","text").execute()}async function dg6($){await $.schema.alterTable("connections").dropColumn("configuration_state").execute(),await $.schema.alterTable("connections").dropColumn("configuration_scopes").execute()}var Hc0={};w0(Hc0,{up:()=>ig6,down:()=>ng6});import{sql as mg6}from"kysely";async function ig6($){await $.schema.alterTable("organization_settings").addColumn("sidebar_items",mg6`text`).execute()}async function ng6($){await $.schema.alterTable("organization_settings").dropColumn("sidebar_items").execute()}var ii1=()=>{};var Nc0={};w0(Nc0,{up:()=>pg6,down:()=>tg6});async function pg6($){await $.schema.createTable("monitoring_logs").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("connection_id","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("connection_title","text",(Z)=>Z.notNull()).addColumn("tool_name","text",(Z)=>Z.notNull()).addColumn("input","text",(Z)=>Z.notNull()).addColumn("output","text",(Z)=>Z.notNull()).addColumn("is_error","integer",(Z)=>Z.notNull()).addColumn("error_message","text").addColumn("duration_ms","integer",(Z)=>Z.notNull()).addColumn("timestamp","text",(Z)=>Z.notNull()).addColumn("user_id","text").addColumn("request_id","text",(Z)=>Z.notNull()).execute(),await $.schema.createIndex("monitoring_logs_org_timestamp").on("monitoring_logs").columns(["organization_id","timestamp"]).execute(),await $.schema.createIndex("monitoring_logs_connection_timestamp").on("monitoring_logs").columns(["connection_id","timestamp"]).execute(),await $.schema.createIndex("monitoring_logs_is_error").on("monitoring_logs").columns(["organization_id","is_error","timestamp"]).execute()}async function tg6($){await $.schema.dropIndex("monitoring_logs_is_error").execute(),await $.schema.dropIndex("monitoring_logs_connection_timestamp").execute(),await $.schema.dropIndex("monitoring_logs_org_timestamp").execute(),await $.schema.dropTable("monitoring_logs").execute()}var Uc0={};w0(Uc0,{up:()=>og6,down:()=>rg6});import{sql as rm}from"kysely";async function og6($){await $.schema.createTable("events").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("type","text",(Z)=>Z.notNull()).addColumn("source","text",(Z)=>Z.notNull()).addColumn("specversion","text",(Z)=>Z.notNull().defaultTo("1.0")).addColumn("subject","text").addColumn("time","text",(Z)=>Z.notNull()).addColumn("datacontenttype","text",(Z)=>Z.notNull().defaultTo("application/json")).addColumn("dataschema","text").addColumn("data","text").addColumn("cron","varchar(255)").addColumn("status","text",(Z)=>Z.notNull().defaultTo("pending")).addColumn("attempts","integer",(Z)=>Z.notNull().defaultTo(0)).addColumn("last_error","text").addColumn("next_retry_at","text").addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).addColumn("updated_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("event_subscriptions").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("connection_id","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("publisher","text").addColumn("event_type","text",(Z)=>Z.notNull()).addColumn("filter","text").addColumn("enabled","integer",(Z)=>Z.notNull().defaultTo(1)).addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).addColumn("updated_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("event_deliveries").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("event_id","text",(Z)=>Z.notNull()).addColumn("subscription_id","text",(Z)=>Z.notNull().references("event_subscriptions.id").onDelete("cascade")).addColumn("status","text",(Z)=>Z.notNull().defaultTo("pending")).addColumn("attempts","integer",(Z)=>Z.notNull().defaultTo(0)).addColumn("last_error","text").addColumn("delivered_at","text").addColumn("next_retry_at","text").addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).execute(),await $.schema.createIndex("idx_events_org_status").on("events").columns(["organization_id","status"]).execute(),await $.schema.createIndex("idx_events_source").on("events").columns(["source"]).execute(),await $.schema.createIndex("idx_events_type").on("events").columns(["type"]).execute(),await $.schema.createIndex("idx_events_retry").on("events").columns(["status","next_retry_at"]).execute(),await $.schema.createIndex("idx_subscriptions_connection").on("event_subscriptions").columns(["connection_id"]).execute(),await $.schema.createIndex("idx_subscriptions_type").on("event_subscriptions").columns(["event_type"]).execute(),await $.schema.createIndex("idx_subscriptions_org_enabled").on("event_subscriptions").columns(["organization_id","enabled"]).execute(),await $.schema.createIndex("idx_subscriptions_unique").on("event_subscriptions").columns(["connection_id","event_type","publisher","filter"]).unique().execute(),await $.schema.createIndex("idx_deliveries_event").on("event_deliveries").columns(["event_id"]).execute(),await $.schema.createIndex("idx_deliveries_subscription_status").on("event_deliveries").columns(["subscription_id","status"]).execute(),await $.schema.createIndex("idx_deliveries_retry").on("event_deliveries").columns(["status","next_retry_at"]).execute()}async function rg6($){await $.schema.dropIndex("idx_deliveries_retry").execute(),await $.schema.dropIndex("idx_deliveries_subscription_status").execute(),await $.schema.dropIndex("idx_deliveries_event").execute(),await $.schema.dropIndex("idx_subscriptions_unique").execute(),await $.schema.dropIndex("idx_subscriptions_org_enabled").execute(),await $.schema.dropIndex("idx_subscriptions_type").execute(),await $.schema.dropIndex("idx_subscriptions_connection").execute(),await $.schema.dropIndex("idx_events_retry").execute(),await $.schema.dropIndex("idx_events_type").execute(),await $.schema.dropIndex("idx_events_source").execute(),await $.schema.dropIndex("idx_events_org_status").execute(),await $.schema.dropTable("event_deliveries").execute(),await $.schema.dropTable("event_subscriptions").execute(),await $.schema.dropTable("events").execute()}var ni1=()=>{};var Fc0={};w0(Fc0,{up:()=>sg6,down:()=>eg6});import{sql as ag6}from"kysely";async function sg6($){await $.schema.dropTable("audit_logs").ifExists().execute()}async function eg6($){await $.schema.createTable("audit_logs").ifNotExists().addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organizationId","text").addColumn("userId","text",(Z)=>Z.references("user.id").onDelete("set null")).addColumn("connectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("toolName","text",(Z)=>Z.notNull()).addColumn("allowed","integer",(Z)=>Z.notNull()).addColumn("duration","integer").addColumn("timestamp","text",(Z)=>Z.notNull().defaultTo(ag6`CURRENT_TIMESTAMP`)).addColumn("requestMetadata","text").execute(),await $.schema.createIndex("idx_audit_logs_organizationId").on("audit_logs").column("organizationId").execute(),await $.schema.createIndex("idx_audit_logs_userId").on("audit_logs").column("userId").execute(),await $.schema.createIndex("idx_audit_logs_timestamp").on("audit_logs").column("timestamp").execute()}var pi1=()=>{};var Bc0={};w0(Bc0,{up:()=>$h6,down:()=>Zh6});import{sql as V90}from"kysely";async function $h6($){await $.schema.createTable("gateways").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("title","text",(Z)=>Z.notNull()).addColumn("description","text").addColumn("tool_selection_strategy","text").addColumn("status","text",(Z)=>Z.notNull().defaultTo("active")).addColumn("is_default","integer",(Z)=>Z.notNull().defaultTo(0)).addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(V90`CURRENT_TIMESTAMP`)).addColumn("updated_at","text",(Z)=>Z.notNull().defaultTo(V90`CURRENT_TIMESTAMP`)).addColumn("created_by","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("updated_by","text").execute(),await $.schema.createTable("gateway_connections").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("gateway_id","text",(Z)=>Z.notNull().references("gateways.id").onDelete("cascade")).addColumn("connection_id","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("selected_tools","text").addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(V90`CURRENT_TIMESTAMP`)).execute(),await $.schema.createIndex("idx_gateways_org").on("gateways").columns(["organization_id"]).execute(),await $.schema.createIndex("idx_gateways_org_status").on("gateways").columns(["organization_id","status"]).execute(),await V90`CREATE UNIQUE INDEX idx_gateways_default_per_org ON gateways (organization_id) WHERE is_default = 1`.execute($),await $.schema.createIndex("idx_gateway_connections_gateway").on("gateway_connections").columns(["gateway_id"]).execute(),await $.schema.createIndex("idx_gateway_connections_connection").on("gateway_connections").columns(["connection_id"]).execute(),await $.schema.createIndex("idx_gateway_connections_unique").on("gateway_connections").columns(["gateway_id","connection_id"]).unique().execute()}async function Zh6($){await $.schema.dropIndex("idx_gateway_connections_unique").execute(),await $.schema.dropIndex("idx_gateway_connections_connection").execute(),await $.schema.dropIndex("idx_gateway_connections_gateway").execute(),await $.schema.dropIndex("idx_gateways_default_per_org").execute(),await $.schema.dropIndex("idx_gateways_org_status").execute(),await $.schema.dropIndex("idx_gateways_org").execute(),await $.schema.dropTable("gateway_connections").execute(),await $.schema.dropTable("gateways").execute()}var ti1=()=>{};var wc0={};w0(wc0,{up:()=>Xh6,down:()=>Qh6});async function Xh6($){await $.schema.alterTable("gateways").addColumn("icon","text").execute()}async function Qh6($){await $.schema.alterTable("gateways").dropColumn("icon").execute()}var Oc0={};w0(Oc0,{up:()=>Yh6,down:()=>Gh6});import{sql as k90}from"kysely";async function Yh6($){await $.schema.alterTable("gateways").addColumn("tool_selection_mode","text",(Z)=>Z.notNull().defaultTo("inclusion")).execute(),await k90`
+  ${$}`),Q()}),Y.on("spawn",()=>{Y.unref(),Q()})})}var Qg6="https://studio.decocms.com",Yg6="openid profile email offline_access";var Si1=O(()=>{Ii1();R90()});async function Ci1($,Z=fetch,X=Date.now){if(!$.refreshToken)throw new G3("invalid_grant","Session has no refresh token");let Q=new URLSearchParams({grant_type:"refresh_token",refresh_token:$.refreshToken,client_id:$.clientId}),Y;try{Y=await Z(`${$.target}/api/auth/mcp/token`,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:Q.toString(),signal:AbortSignal.timeout(Ng6)})}catch(H){throw new G3("transient",H instanceof Error?H.message:String(H))}if(!Y.ok){let H=await Y.text().catch(()=>"");if(Y.status>=400&&Y.status<500&&Y.status!==429)throw new G3("invalid_grant",`HTTP ${Y.status} ${H}`);throw new G3("transient",`HTTP ${Y.status} ${H}`)}let G;try{G=await Y.json()}catch(H){throw new G3("transient",`Token endpoint returned a non-JSON body: ${H instanceof Error?H.message:String(H)}`)}if(typeof G!=="object"||G===null)throw new G3("transient","Token endpoint returned a non-object JSON body");if(typeof G.access_token!=="string"||!G.access_token)throw new G3("transient","Token endpoint returned no access_token");let J=Number(G.expires_in),K=Number.isFinite(J)&&J>0&&J<=Ug6?Math.floor(X()/1000)+J:$.expiresAt,W=typeof G.refresh_token==="string"&&G.refresh_token?G.refresh_token:$.refreshToken;return{...$,accessToken:G.access_token,refreshToken:W,expiresAt:K}}var G3,Ng6=1e4,Ug6=3153600000;var Zc0=O(()=>{G3=class G3 extends Error{kind;constructor($,Z){super(Z);this.name="RefreshFailedError",this.kind=$}}});async function _i1($){let Z=await P90($.dataDir,$.target);if(!Z)return null;let X=$.now??Date.now;if(!Bg6(Z,X()))return Z;try{let Q=await Ci1(Z,$.fetch,X);return await A90($.dataDir,Q),Q}catch(Q){if(Q instanceof G3&&Q.kind==="invalid_grant")return await T90($.dataDir,Z.target),null;throw Q}}function Bg6($,Z){if($.expiresAt===void 0)return!1;let X=Math.floor(Z/1000);return $.expiresAt-Fg6<X}var Fg6=60;var vi1=O(()=>{Zc0();R90()});var xi1={};w0(xi1,{whoamiCommand:()=>wg6});async function wg6($){let Z;try{Z=await _i1({dataDir:$.dataDir,fetch:$.fetch,now:$.now})}catch(X){if(X instanceof G3&&X.kind==="transient")return console.error(`Could not refresh session: ${X.message}. Run \`decocms auth login\` to authenticate.`),1;throw X}if(!Z)return console.error("Not logged in. Run `decocms auth login` to authenticate."),1;return console.log(`Target: ${Z.target}`),console.log(`User:   ${Z.user.email??Z.user.sub}`),0}var fi1=O(()=>{vi1();Zc0()});var bi1={};w0(bi1,{logoutCommand:()=>Og6});async function Og6($){if(!await P90($.dataDir))return console.log("Already logged out."),0;return await T90($.dataDir),console.log("Logged out."),0}var yi1=O(()=>{R90()});var M90={};w0(M90,{printBanner:()=>Dg6,bannerLines:()=>gi1,BANNER_LINES:()=>I90,BANNER_GRADIENT:()=>q90});function Lg6($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function gi1($){let Z=I90.map((X,Q)=>{let[Y,G,J]=Lg6(q90[Q]);return`\x1B[38;2;${Y};${G};${J}m${X}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function Dg6($){console.log("");for(let Z of gi1($))console.log(Z);console.log("")}var I90,q90;var om=O(()=>{I90=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],q90=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});import{randomBytes as Eg6}from"crypto";import{mkdirSync as zg6,readFileSync as jg6,writeFileSync as Pg6}from"fs";import{join as Ag6}from"path";function hi1($){let Z=Ag6($,Tg6);try{let Q=jg6(Z,"utf8").trim();if(Q)return Q}catch{}let X=Eg6(32).toString("base64");return zg6($,{recursive:!0}),Pg6(Z,X,{mode:384}),X}var Tg6="local-auth-secret";var ui1=()=>{};var ci1={};w0(ci1,{migrateBetterAuth:()=>Xc0});import{getMigrations as Rg6}from"better-auth/db";import{sso as Ig6}from"@better-auth/sso";import{organization as qg6}from"@decocms/better-auth/plugins";import{admin as Mg6,apiKey as Vg6,jwt as kg6,magicLink as Sg6,mcp as Cg6,openAPI as _g6}from"better-auth/plugins";import{emailOTP as vg6}from"better-auth/plugins/email-otp";async function Xc0($){let X={database:mm($||IB()),plugins:[qg6({dynamicAccessControl:{enabled:!0,enableCustomResources:!0}}),Mg6(),Vg6(),kg6(),_g6(),Cg6({loginPage:"/login"}),Ig6(),Sg6({sendMagicLink:async()=>{}}),vg6({sendVerificationOTP:async()=>{}})]},{toBeAdded:Q,toBeCreated:Y,runMigrations:G}=await Rg6(X);if(!Q.length&&!Y.length)return"up to date";return await G(),`${Y.length+Q.length} table(s) migrated`}var Qc0=O(()=>{$X()});var Yc0={};w0(Yc0,{up:()=>xg6,down:()=>fg6});import{sql as BW}from"kysely";async function xg6($){await $.schema.createTable("connections").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organizationId","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("createdById","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("name","text",(Z)=>Z.notNull()).addColumn("description","text").addColumn("icon","text").addColumn("appName","text").addColumn("appId","text").addColumn("connectionType","text",(Z)=>Z.notNull()).addColumn("connectionUrl","text",(Z)=>Z.notNull()).addColumn("connectionToken","text").addColumn("connectionHeaders","text").addColumn("oauthConfig","text").addColumn("metadata","text").addColumn("tools","text").addColumn("bindings","text").addColumn("status","text",(Z)=>Z.notNull().defaultTo("active")).addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("api_keys").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("userId","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("name","text",(Z)=>Z.notNull()).addColumn("hashedKey","text",(Z)=>Z.notNull().unique()).addColumn("permissions","text",(Z)=>Z.notNull()).addColumn("expiresAt","text").addColumn("remaining","integer").addColumn("metadata","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("audit_logs").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organizationId","text").addColumn("userId","text",(Z)=>Z.references("user.id").onDelete("set null")).addColumn("connectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("toolName","text",(Z)=>Z.notNull()).addColumn("allowed","integer",(Z)=>Z.notNull()).addColumn("duration","integer").addColumn("timestamp","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("requestMetadata","text").execute(),await $.schema.createTable("oauth_clients").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("clientId","text",(Z)=>Z.notNull().unique()).addColumn("clientSecret","text").addColumn("clientName","text",(Z)=>Z.notNull()).addColumn("redirectUris","text",(Z)=>Z.notNull()).addColumn("grantTypes","text",(Z)=>Z.notNull()).addColumn("scope","text").addColumn("clientUri","text").addColumn("logoUri","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("oauth_authorization_codes").addColumn("code","text",(Z)=>Z.primaryKey()).addColumn("clientId","text",(Z)=>Z.notNull().references("oauth_clients.clientId").onDelete("cascade")).addColumn("userId","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("redirectUri","text",(Z)=>Z.notNull()).addColumn("scope","text").addColumn("codeChallenge","text").addColumn("codeChallengeMethod","text").addColumn("expiresAt","text",(Z)=>Z.notNull()).addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("oauth_refresh_tokens").addColumn("token","text",(Z)=>Z.primaryKey()).addColumn("clientId","text",(Z)=>Z.notNull().references("oauth_clients.clientId").onDelete("cascade")).addColumn("userId","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("scope","text").addColumn("expiresAt","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("downstream_tokens").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("connectionId","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("userId","text",(Z)=>Z.references("user.id").onDelete("cascade")).addColumn("accessToken","text",(Z)=>Z.notNull()).addColumn("refreshToken","text").addColumn("scope","text").addColumn("expiresAt","text").addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(BW`CURRENT_TIMESTAMP`)).execute(),await $.schema.createIndex("idx_connections_organizationId").on("connections").column("organizationId").execute(),await $.schema.createIndex("idx_audit_logs_organizationId").on("audit_logs").column("organizationId").execute(),await $.schema.createIndex("idx_audit_logs_userId").on("audit_logs").column("userId").execute(),await $.schema.createIndex("idx_audit_logs_timestamp").on("audit_logs").column("timestamp").execute()}async function fg6($){await $.schema.dropTable("downstream_tokens").execute(),await $.schema.dropTable("oauth_refresh_tokens").execute(),await $.schema.dropTable("oauth_authorization_codes").execute(),await $.schema.dropTable("oauth_clients").execute(),await $.schema.dropTable("audit_logs").execute(),await $.schema.dropTable("api_keys").execute(),await $.schema.dropTable("connections").execute()}var li1=()=>{};var Gc0={};w0(Gc0,{up:()=>bg6,down:()=>yg6});import{sql as di1}from"kysely";async function bg6($){await $.schema.createTable("organization_settings").addColumn("organizationId","text",(Z)=>Z.primaryKey().references("organization.id").onDelete("cascade")).addColumn("modelsBindingConnectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("createdAt","text",(Z)=>Z.notNull().defaultTo(di1`CURRENT_TIMESTAMP`)).addColumn("updatedAt","text",(Z)=>Z.notNull().defaultTo(di1`CURRENT_TIMESTAMP`)).execute()}async function yg6($){await $.schema.dropTable("organization_settings").execute()}var mi1=()=>{};var Jc0={};w0(Jc0,{up:()=>gg6,down:()=>hg6});async function gg6($){await $.schema.alterTable("connections").renameColumn("name","title").execute(),await $.schema.alterTable("connections").renameColumn("createdById","created_by").execute(),await $.schema.alterTable("connections").renameColumn("createdAt","created_at").execute(),await $.schema.alterTable("connections").renameColumn("updatedAt","updated_at").execute(),await $.schema.alterTable("connections").renameColumn("organizationId","organization_id").execute(),await $.schema.alterTable("connections").renameColumn("connectionType","connection_type").execute(),await $.schema.alterTable("connections").renameColumn("connectionUrl","connection_url").execute(),await $.schema.alterTable("connections").renameColumn("connectionToken","connection_token").execute(),await $.schema.alterTable("connections").renameColumn("connectionHeaders","connection_headers").execute(),await $.schema.alterTable("connections").renameColumn("oauthConfig","oauth_config").execute(),await $.schema.alterTable("connections").renameColumn("appName","app_name").execute(),await $.schema.alterTable("connections").renameColumn("appId","app_id").execute()}async function hg6($){await $.schema.alterTable("connections").renameColumn("title","name").execute(),await $.schema.alterTable("connections").renameColumn("created_by","createdById").execute(),await $.schema.alterTable("connections").renameColumn("created_at","createdAt").execute(),await $.schema.alterTable("connections").renameColumn("updated_at","updatedAt").execute(),await $.schema.alterTable("connections").renameColumn("organization_id","organizationId").execute(),await $.schema.alterTable("connections").renameColumn("connection_type","connectionType").execute(),await $.schema.alterTable("connections").renameColumn("connection_url","connectionUrl").execute(),await $.schema.alterTable("connections").renameColumn("connection_token","connectionToken").execute(),await $.schema.alterTable("connections").renameColumn("connection_headers","connectionHeaders").execute(),await $.schema.alterTable("connections").renameColumn("oauth_config","oauthConfig").execute(),await $.schema.alterTable("connections").renameColumn("app_name","appName").execute(),await $.schema.alterTable("connections").renameColumn("app_id","appId").execute()}var Kc0={};w0(Kc0,{up:()=>ug6,down:()=>cg6});async function ug6($){await $.schema.createTable("organization_settings_new").addColumn("organizationId","text",(Z)=>Z.primaryKey().references("organization.id").onDelete("cascade")).addColumn("createdAt","text",(Z)=>Z.notNull()).addColumn("updatedAt","text",(Z)=>Z.notNull()).execute(),await $.insertInto("organization_settings_new").columns(["organizationId","createdAt","updatedAt"]).expression((Z)=>Z.selectFrom("organization_settings").select(["organizationId","createdAt","updatedAt"])).execute(),await $.schema.dropTable("organization_settings").execute(),await $.schema.alterTable("organization_settings_new").renameTo("organization_settings").execute()}async function cg6($){await $.schema.createTable("organization_settings_new").addColumn("organizationId","text",(Z)=>Z.primaryKey().references("organization.id").onDelete("cascade")).addColumn("modelsBindingConnectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("createdAt","text",(Z)=>Z.notNull()).addColumn("updatedAt","text",(Z)=>Z.notNull()).execute(),await $.insertInto("organization_settings_new").columns(["organizationId","modelsBindingConnectionId","createdAt","updatedAt"]).expression((Z)=>Z.selectFrom("organization_settings").select(["organizationId",Z.val(null).as("modelsBindingConnectionId"),"createdAt","updatedAt"])).execute(),await $.schema.dropTable("organization_settings").execute(),await $.schema.alterTable("organization_settings_new").renameTo("organization_settings").execute()}var Wc0={};w0(Wc0,{up:()=>lg6,down:()=>dg6});async function lg6($){await $.schema.alterTable("connections").addColumn("configuration_state","text").execute(),await $.schema.alterTable("connections").addColumn("configuration_scopes","text").execute()}async function dg6($){await $.schema.alterTable("connections").dropColumn("configuration_state").execute(),await $.schema.alterTable("connections").dropColumn("configuration_scopes").execute()}var Hc0={};w0(Hc0,{up:()=>ig6,down:()=>ng6});import{sql as mg6}from"kysely";async function ig6($){await $.schema.alterTable("organization_settings").addColumn("sidebar_items",mg6`text`).execute()}async function ng6($){await $.schema.alterTable("organization_settings").dropColumn("sidebar_items").execute()}var ii1=()=>{};var Nc0={};w0(Nc0,{up:()=>pg6,down:()=>tg6});async function pg6($){await $.schema.createTable("monitoring_logs").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("connection_id","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("connection_title","text",(Z)=>Z.notNull()).addColumn("tool_name","text",(Z)=>Z.notNull()).addColumn("input","text",(Z)=>Z.notNull()).addColumn("output","text",(Z)=>Z.notNull()).addColumn("is_error","integer",(Z)=>Z.notNull()).addColumn("error_message","text").addColumn("duration_ms","integer",(Z)=>Z.notNull()).addColumn("timestamp","text",(Z)=>Z.notNull()).addColumn("user_id","text").addColumn("request_id","text",(Z)=>Z.notNull()).execute(),await $.schema.createIndex("monitoring_logs_org_timestamp").on("monitoring_logs").columns(["organization_id","timestamp"]).execute(),await $.schema.createIndex("monitoring_logs_connection_timestamp").on("monitoring_logs").columns(["connection_id","timestamp"]).execute(),await $.schema.createIndex("monitoring_logs_is_error").on("monitoring_logs").columns(["organization_id","is_error","timestamp"]).execute()}async function tg6($){await $.schema.dropIndex("monitoring_logs_is_error").execute(),await $.schema.dropIndex("monitoring_logs_connection_timestamp").execute(),await $.schema.dropIndex("monitoring_logs_org_timestamp").execute(),await $.schema.dropTable("monitoring_logs").execute()}var Uc0={};w0(Uc0,{up:()=>og6,down:()=>rg6});import{sql as rm}from"kysely";async function og6($){await $.schema.createTable("events").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("type","text",(Z)=>Z.notNull()).addColumn("source","text",(Z)=>Z.notNull()).addColumn("specversion","text",(Z)=>Z.notNull().defaultTo("1.0")).addColumn("subject","text").addColumn("time","text",(Z)=>Z.notNull()).addColumn("datacontenttype","text",(Z)=>Z.notNull().defaultTo("application/json")).addColumn("dataschema","text").addColumn("data","text").addColumn("cron","varchar(255)").addColumn("status","text",(Z)=>Z.notNull().defaultTo("pending")).addColumn("attempts","integer",(Z)=>Z.notNull().defaultTo(0)).addColumn("last_error","text").addColumn("next_retry_at","text").addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).addColumn("updated_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("event_subscriptions").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("connection_id","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("publisher","text").addColumn("event_type","text",(Z)=>Z.notNull()).addColumn("filter","text").addColumn("enabled","integer",(Z)=>Z.notNull().defaultTo(1)).addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).addColumn("updated_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).execute(),await $.schema.createTable("event_deliveries").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("event_id","text",(Z)=>Z.notNull()).addColumn("subscription_id","text",(Z)=>Z.notNull().references("event_subscriptions.id").onDelete("cascade")).addColumn("status","text",(Z)=>Z.notNull().defaultTo("pending")).addColumn("attempts","integer",(Z)=>Z.notNull().defaultTo(0)).addColumn("last_error","text").addColumn("delivered_at","text").addColumn("next_retry_at","text").addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(rm`CURRENT_TIMESTAMP`)).execute(),await $.schema.createIndex("idx_events_org_status").on("events").columns(["organization_id","status"]).execute(),await $.schema.createIndex("idx_events_source").on("events").columns(["source"]).execute(),await $.schema.createIndex("idx_events_type").on("events").columns(["type"]).execute(),await $.schema.createIndex("idx_events_retry").on("events").columns(["status","next_retry_at"]).execute(),await $.schema.createIndex("idx_subscriptions_connection").on("event_subscriptions").columns(["connection_id"]).execute(),await $.schema.createIndex("idx_subscriptions_type").on("event_subscriptions").columns(["event_type"]).execute(),await $.schema.createIndex("idx_subscriptions_org_enabled").on("event_subscriptions").columns(["organization_id","enabled"]).execute(),await $.schema.createIndex("idx_subscriptions_unique").on("event_subscriptions").columns(["connection_id","event_type","publisher","filter"]).unique().execute(),await $.schema.createIndex("idx_deliveries_event").on("event_deliveries").columns(["event_id"]).execute(),await $.schema.createIndex("idx_deliveries_subscription_status").on("event_deliveries").columns(["subscription_id","status"]).execute(),await $.schema.createIndex("idx_deliveries_retry").on("event_deliveries").columns(["status","next_retry_at"]).execute()}async function rg6($){await $.schema.dropIndex("idx_deliveries_retry").execute(),await $.schema.dropIndex("idx_deliveries_subscription_status").execute(),await $.schema.dropIndex("idx_deliveries_event").execute(),await $.schema.dropIndex("idx_subscriptions_unique").execute(),await $.schema.dropIndex("idx_subscriptions_org_enabled").execute(),await $.schema.dropIndex("idx_subscriptions_type").execute(),await $.schema.dropIndex("idx_subscriptions_connection").execute(),await $.schema.dropIndex("idx_events_retry").execute(),await $.schema.dropIndex("idx_events_type").execute(),await $.schema.dropIndex("idx_events_source").execute(),await $.schema.dropIndex("idx_events_org_status").execute(),await $.schema.dropTable("event_deliveries").execute(),await $.schema.dropTable("event_subscriptions").execute(),await $.schema.dropTable("events").execute()}var ni1=()=>{};var Fc0={};w0(Fc0,{up:()=>sg6,down:()=>eg6});import{sql as ag6}from"kysely";async function sg6($){await $.schema.dropTable("audit_logs").ifExists().execute()}async function eg6($){await $.schema.createTable("audit_logs").ifNotExists().addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organizationId","text").addColumn("userId","text",(Z)=>Z.references("user.id").onDelete("set null")).addColumn("connectionId","text",(Z)=>Z.references("connections.id").onDelete("set null")).addColumn("toolName","text",(Z)=>Z.notNull()).addColumn("allowed","integer",(Z)=>Z.notNull()).addColumn("duration","integer").addColumn("timestamp","text",(Z)=>Z.notNull().defaultTo(ag6`CURRENT_TIMESTAMP`)).addColumn("requestMetadata","text").execute(),await $.schema.createIndex("idx_audit_logs_organizationId").on("audit_logs").column("organizationId").execute(),await $.schema.createIndex("idx_audit_logs_userId").on("audit_logs").column("userId").execute(),await $.schema.createIndex("idx_audit_logs_timestamp").on("audit_logs").column("timestamp").execute()}var pi1=()=>{};var Bc0={};w0(Bc0,{up:()=>$h6,down:()=>Zh6});import{sql as V90}from"kysely";async function $h6($){await $.schema.createTable("gateways").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("organization_id","text",(Z)=>Z.notNull().references("organization.id").onDelete("cascade")).addColumn("title","text",(Z)=>Z.notNull()).addColumn("description","text").addColumn("tool_selection_strategy","text").addColumn("status","text",(Z)=>Z.notNull().defaultTo("active")).addColumn("is_default","integer",(Z)=>Z.notNull().defaultTo(0)).addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(V90`CURRENT_TIMESTAMP`)).addColumn("updated_at","text",(Z)=>Z.notNull().defaultTo(V90`CURRENT_TIMESTAMP`)).addColumn("created_by","text",(Z)=>Z.notNull().references("user.id").onDelete("cascade")).addColumn("updated_by","text").execute(),await $.schema.createTable("gateway_connections").addColumn("id","text",(Z)=>Z.primaryKey()).addColumn("gateway_id","text",(Z)=>Z.notNull().references("gateways.id").onDelete("cascade")).addColumn("connection_id","text",(Z)=>Z.notNull().references("connections.id").onDelete("cascade")).addColumn("selected_tools","text").addColumn("created_at","text",(Z)=>Z.notNull().defaultTo(V90`CURRENT_TIMESTAMP`)).execute(),await $.schema.createIndex("idx_gateways_org").on("gateways").columns(["organization_id"]).execute(),await $.schema.createIndex("idx_gateways_org_status").on("gateways").columns(["organization_id","status"]).execute(),await V90`CREATE UNIQUE INDEX idx_gateways_default_per_org ON gateways (organization_id) WHERE is_default = 1`.execute($),await $.schema.createIndex("idx_gateway_connections_gateway").on("gateway_connections").columns(["gateway_id"]).execute(),await $.schema.createIndex("idx_gateway_connections_connection").on("gateway_connections").columns(["connection_id"]).execute(),await $.schema.createIndex("idx_gateway_connections_unique").on("gateway_connections").columns(["gateway_id","connection_id"]).unique().execute()}async function Zh6($){await $.schema.dropIndex("idx_gateway_connections_unique").execute(),await $.schema.dropIndex("idx_gateway_connections_connection").execute(),await $.schema.dropIndex("idx_gateway_connections_gateway").execute(),await $.schema.dropIndex("idx_gateways_default_per_org").execute(),await $.schema.dropIndex("idx_gateways_org_status").execute(),await $.schema.dropIndex("idx_gateways_org").execute(),await $.schema.dropTable("gateway_connections").execute(),await $.schema.dropTable("gateways").execute()}var ti1=()=>{};var wc0={};w0(wc0,{up:()=>Xh6,down:()=>Qh6});async function Xh6($){await $.schema.alterTable("gateways").addColumn("icon","text").execute()}async function Qh6($){await $.schema.alterTable("gateways").dropColumn("icon").execute()}var Oc0={};w0(Oc0,{up:()=>Yh6,down:()=>Gh6});import{sql as k90}from"kysely";async function Yh6($){await $.schema.alterTable("gateways").addColumn("tool_selection_mode","text",(Z)=>Z.notNull().defaultTo("inclusion")).execute(),await k90`
     UPDATE gateways
     SET tool_selection_mode = CASE
       WHEN tool_selection_strategy = 'exclusion' THEN 'exclusion'
@@ -1332,7 +1332,7 @@ Usage: deco services <up|down|status>`),process.exit(1)}}var Hm1=O(()=>{sx()});f
       `.execute($);if(Number(W.rows[0]?.cnt)===0){console.warn(`Failed to migrate ${J}/${K}, keeping in old table`);continue}}await qb`
       DELETE FROM kysely_migration WHERE name = ${X}
     `.execute($)}}async function qt1($){await gi6($),await hi6($);let Z=new Rt1({db:$,provider:{getMigrations:()=>Promise.resolve(_m0)}}),{error:X,results:Q}=await Z.migrateToLatest(),Y=0;if(Q?.forEach((G)=>{if(G.status==="Success")Y++;else if(G.status==="Error")console.error(`Failed to execute migration "${G.migrationName}"`)}),X)throw console.error("Failed to migrate"),console.error(X),X;return Y}async function ui6($){let{keepOpen:Z=!1,database:X,skipBetterAuth:Q=!1}=$??{},Y="skipped";if(!Q&&!X)Y=await Xc0();let G=X??U6(),J=async()=>{if(!Z&&!X)await qB(G).catch((K)=>{console.warn("Warning: Error closing database:",K)})};try{let K=await qt1(G.db);return await J(),{betterAuth:Y,kysely:K}}catch(K){throw await J(),K}}async function ci6(){let $=U6(),Z=new Rt1({db:$.db,provider:{getMigrations:()=>Promise.resolve(_m0)}}),{error:X,results:Q}=await Z.migrateDown();if(Q?.forEach((Y)=>{if(Y.status==="Success")console.log(`\u2705 Migration "${Y.migrationName}" rolled back successfully`);else if(Y.status==="Error")console.error(`\u274C Failed to rollback migration "${Y.migrationName}"`)}),X)throw console.error("Failed to rollback migration"),console.error(X),X}var Vt1=O(()=>{Tt1();Qc0();$X()});async function t90($){let Z={...process.env},X=u10($,Z);console.log(dw1(X.settings.encryptionKey));let Q=X.settings.betterAuthSecret||(X.settings.localMode?hi1(X.settings.dataDir):""),{ensureServices:Y}=await Promise.resolve().then(() => (Q90(),X90)),{outputs:G,services:J}=await Y({home:X.settings.dataDir,externalDatabaseUrl:X.externalDatabaseUrl,externalNatsUrl:X.externalNatsUrl});if(!X.skipMigrations){let{migrateBetterAuth:W}=await Promise.resolve().then(() => (Qc0(),ci1));await W(G.databaseUrl);let{createDatabase:H}=await Promise.resolve().then(() => ($X(),Yi1)),{migrateToLatest:N}=await Promise.resolve().then(() => (Vt1(),Mt1)),U=H(G.databaseUrl);await N({keepOpen:!0,database:U,skipBetterAuth:!0})}let K={...X.settings,betterAuthSecret:Q,databaseUrl:G.databaseUrl,natsUrls:G.natsUrls,...G.s3?{s3Endpoint:G.s3.endpoint,s3Bucket:G.s3.bucket,s3AccessKeyId:G.s3.accessKeyId,s3SecretAccessKey:G.s3.secretAccessKey,s3ForcePathStyle:G.s3.forcePathStyle}:{},...G.natsTunnel?{natsPublicUrl:G.natsTunnel.publicUrl,natsAccountJwt:G.natsTunnel.accountJwt,natsAccountSigningKey:G.natsTunnel.accountSigningKey,natsOperatorJwt:G.natsTunnel.operatorJwt,natsTunnelPublicEnabled:!0,natsCredsPath:G.natsTunnel.credsPath}:{}};return Nm1(K),{settings:K,services:J.map((W)=>({name:W.name==="PostgreSQL"?"Postgres":W.name,port:W.port})),managedServiceNames:J.filter((W)=>W.owner==="managed").map((W)=>W.name)}}var vm0=O(()=>{sx();ui1();q8()});var Ct1={};w0(Ct1,{updateService:()=>WE,subscribeCliState:()=>bm0,setTuiConsoleIntercepted:()=>o90,setServerUrl:()=>Wi,setMigrationsDone:()=>Ki,setDevMode:()=>mi6,resetCliStateForTests:()=>li6,isTuiConsoleIntercepted:()=>r90,getCliState:()=>fm0,addLogEntry:()=>CB});function kt1(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function li6(){gQ=kt1()}function di6(){return[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}]}function Ji(){for(let $ of xm0)$()}function fm0(){return gQ}function bm0($){return xm0.add($),()=>xm0.delete($)}function WE($){gQ={...gQ,services:gQ.services.map((Z)=>Z.name===$.name?$:Z)},Ji()}function Ki(){gQ={...gQ,migrationsStatus:"done"},Ji()}function Wi($){gQ={...gQ,serverUrl:$},Ji()}function CB($){let Z=[...gQ.logs,$];gQ={...gQ,logs:Z.length>500?Z.slice(-500):Z},Ji()}function mi6(){gQ={...gQ,services:[...di6(),{name:"API",status:"pending",port:0},{name:"Vite",status:"pending",port:0}]},Ji()}function o90($){St1=$}function r90(){return St1}var gQ,xm0,St1=!1;var HE=O(()=>{gQ=kt1();xm0=new Set});import{createServer as _t1}from"net";function ii6($){return new Promise((Z)=>{let X=_t1();X.once("error",()=>Z(!1)),X.listen($,"0.0.0.0",()=>{X.close(()=>Z(!0))})})}async function Hi($){if(await ii6($))return $;let Z=await new Promise((X,Q)=>{let Y=_t1();Y.once("error",Q),Y.listen(0,"0.0.0.0",()=>{let G=Y.address(),J=typeof G==="object"&&G?G.port:0;Y.close(()=>X(J))})});return console.warn(`Port ${$} is in use, using port ${Z} instead.`),Z}var ym0=()=>{};function Ni($){return $.replace(/\x1b\[[0-9;]*m/g,"")}var gm0={};w0(gm0,{startDevServer:()=>pi6});import{join as ni6}from"path";function vt1($){let Z=$.getReader(),X=new TextDecoder,Q="";function Y(){let G=Q.split(`
-`);Q=G.pop()??"";for(let J of G){let K=Ni(J).replace(/^\[\d+\]\s*/,"").trim();if(!K)continue;CB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:K})}}(async()=>{for(;;){let{done:G,value:J}=await Z.read();if(G)break;Q+=X.decode(J,{stream:!0}),Y()}if(Q.trim()){let G=Ni(Q).replace(/^\[\d+\]\s*/,"").trim();if(G)CB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:G})}})()}async function pi6($){let{baseUrl:Z,noTui:X}=$,Q=process.env.HOST==="0.0.0.0"&&Boolean(process.env.PORT),Y=Q?process.env.PORT:$.vitePort,G=Z||`http://localhost:${Y}`,J=Q?await Hi(Number(Y)+1):await Hi(Number($.port)),{settings:K,services:W,managedServiceNames:H}=await t90({port:String(J),home:$.home,baseUrl:$.baseUrl,localMode:$.localMode,skipMigrations:$.skipMigrations,noTui:$.noTui,vitePort:$.vitePort});for(let L of W)WE({name:L.name,status:"ready",port:L.port});Ki();let N=ni6(import.meta.dir,"..","..","..","..",".."),U=X===!0,F=Bun.spawn(["bun","run","dev:servers"],{cwd:N,env:{...process.env,PORT:String(K.port),VITE_PORT:String(Y),DATABASE_URL:K.databaseUrl,NATS_URL:K.natsUrls.join(","),NODE_ENV:K.nodeEnv,BASE_URL:G,DECOCMS_LOCAL_MODE:String(K.localMode),DECOCMS_HOME:K.dataDir,DATA_DIR:K.dataDir,DECO_CLI:"1",...K.betterAuthSecret?{BETTER_AUTH_SECRET:K.betterAuthSecret}:{},...K.s3Endpoint?{S3_ENDPOINT:K.s3Endpoint,S3_BUCKET:K.s3Bucket??"",S3_ACCESS_KEY_ID:K.s3AccessKeyId??"",S3_SECRET_ACCESS_KEY:K.s3SecretAccessKey??"",S3_FORCE_PATH_STYLE:String(K.s3ForcePathStyle)}:{},...K.natsPublicUrl&&K.natsAccountJwt&&K.natsAccountSigningKey?{NATS_PUBLIC_URL:K.natsPublicUrl,NATS_ACCOUNT_JWT:K.natsAccountJwt,NATS_ACCOUNT_SIGNING_KEY:K.natsAccountSigningKey,NATS_OPERATOR_JWT:K.natsOperatorJwt??"",NATS_TUNNEL_PUBLIC_ENABLED:"true",...K.natsCredsPath?{NATS_CREDS:K.natsCredsPath}:{}}:{}},stdio:["inherit",U?"inherit":"pipe",U?"inherit":"pipe"]});if(!U)vt1(F.stdout),vt1(F.stderr);Wi(G),WE({name:"Vite",status:"ready",port:Number(Y)}),WE({name:"API",status:"ready",port:Number(K.port)});let w=async(L)=>{if(F.kill(L),await F.exited,H.length>0){let{stopServices:D}=await Promise.resolve().then(() => (Q90(),X90));await D(K.dataDir)}};return process.on("SIGINT",()=>w("SIGINT")),process.on("SIGTERM",()=>w("SIGTERM")),{port:Number(Y),process:F}}var hm0=O(()=>{vm0();HE();ym0()});var a90;var um0=O(()=>{a90={name:"decocms",version:"4.220.4",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/api"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:"bun run migrate && bun run dev:server","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",build:"bun run build:server","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","generate:tool-contracts":"bun run scripts/generate-tool-contracts.ts","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test src","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",prepublishOnly:"bun run --cwd=../.. build:studio"},optionalDependencies:{"@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@inkjs/ui":"^2.0.0","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@better-auth/sso":"1.4.1","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/shared":"workspace:*","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@vercel/nft":"^1.1.1",ai:"^6.0.208","better-auth":"1.4.22",croner:"^9.1.0",degit:"^2.8.4",hono:"^4.10.7",jose:"^6.0.11",nanoid:"^5.1.6",pg:"^8.16.3",typescript:"^7.0.2",typescript5:"npm:typescript@^5.9.3",zod:"4.3.6"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","tools"],license:"MIT",publishConfig:{access:"public"}}});import{Box as oi6,Text as xt1}from"ink";import{jsx as ri6,jsxs as ft1}from"react/jsx-runtime";function bt1({version:$}){return ft1(oi6,{flexDirection:"column",marginTop:1,children:[I90.map((Z,X)=>ri6(xt1,{color:q90[X],children:Z},X)),ft1(xt1,{dimColor:!0,children:[" v",$]})]})}var yt1=O(()=>{om()});import{Box as NE,Text as _B}from"ink";import{Spinner as ai6}from"@inkjs/ui";import{jsx as oY,jsxs as Mb}from"react/jsx-runtime";function gt1({status:$}){if($==="pending")return oY(ai6,{label:""});return oY(_B,{color:"green",children:"\u2713"})}function si6($){return`${$.name}: ${$.port||"...."}`}function ht1({services:$,migrationsStatus:Z,home:X,serverUrl:Q}){return Mb(NE,{flexDirection:"column",paddingBottom:1,children:[oY(bt1,{version:a90.version}),oY(NE,{marginBottom:1,children:oY(_B,{dimColor:!0,children:"\u2500".repeat(80)})}),oY(NE,{children:Mb(_B,{dimColor:!0,children:["Home: ",X]})}),Mb(NE,{gap:2,children:[$.map((Y)=>Mb(NE,{gap:1,children:[oY(_B,{children:si6(Y)}),oY(gt1,{status:Y.status})]},Y.name)),Mb(NE,{gap:1,children:[oY(_B,{children:"Migrations"}),oY(gt1,{status:Z})]})]}),oY(NE,{children:Q?Mb(_B,{children:["Open in browser: ",oY(_B,{color:"cyan",children:Q})]}):oY(_B,{dimColor:!0,children:"Starting..."})})]})}var ut1=O(()=>{um0();yt1()});import{Box as ei6,Text as Ui}from"ink";import{jsx as cm0,jsxs as lm0}from"react/jsx-runtime";function $n6($){if($>=500)return"red";if($>=400)return"yellow";if($>=300)return"cyan";return"green"}function ct1({logs:$}){return cm0(ei6,{flexDirection:"column",children:$.map((Z,X)=>{if(Z.rawLine)return cm0(Ui,{dimColor:!0,children:Z.rawLine},X);let Q=Z.duration<1000?`${Z.duration}ms`:`${(Z.duration/1000).toFixed(1)}s`;return lm0(Ui,{children:[lm0(Ui,{dimColor:!0,children:[Z.method.padEnd(6)," ",Z.path.padEnd(30)," "]}),cm0(Ui,{color:$n6(Z.status),children:Z.status}),lm0(Ui,{dimColor:!0,children:[" ",Q.padStart(8)]})]},X)})})}var lt1=()=>{};var dm0={};w0(dm0,{App:()=>Qn6});import{Box as Zn6}from"ink";import{useSyncExternalStore as Xn6}from"react";import{jsx as dt1,jsxs as Yn6}from"react/jsx-runtime";function Qn6({home:$}){let Z=Xn6(bm0,fm0);return Yn6(Zn6,{flexDirection:"column",children:[dt1(ht1,{services:Z.services,migrationsStatus:Z.migrationsStatus,home:$,serverUrl:Z.serverUrl}),dt1(ct1,{logs:Z.logs})]})}var mm0=O(()=>{ut1();lt1();HE()});var kJ="thread-gate",dN="decopilot-hosted-harness",W3="automations",vB="background-tools",UE="task-board-github-reads";var mt1="7";function it1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:mt1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}var nt1=()=>{};function Gn6(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function im0($,Z){for(let X=0;X<$.length;X++){let Q=$[X];if(Q===void 0)continue;if(Q===Z)return $[X+1];if(Q.startsWith(`${Z}=`))return Q.slice(Z.length+1)}return}function pt1(){let $=Gn6();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:im0($,"--cpu-prof-dir")??process.cwd(),name:im0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(im0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}function tt1(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let X=YE();if(!X)return;let Q={};try{let{heapStats:Y}=await import("bun:jsc"),G=Y(),J=Object.entries(G.objectTypeCounts).sort((K,W)=>W[1]-K[1]).slice(0,20);Q={objectCount:G.objectCount,heapSize:G.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:X.rss,heapUsed:X.heapUsed,heapTotal:X.heapTotal,external:X.external,arrayBuffers:X.arrayBuffers,...Q}))};return Z().catch(()=>{}),s90=setInterval(()=>void Z().catch(()=>{}),$),s90.unref?.(),process.on("SIGUSR2",()=>{try{let X=Bun.generateHeapSnapshot("v8"),Q=typeof X==="string"?X:JSON.stringify(X),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,Q),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(X){console.error("[heap-watch] snapshot failed:",X)}}),()=>{if(s90)clearInterval(s90)}}var s90;var ot1=()=>{};import*as Jn6 from"bun:jsc";function rt1(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Kn6()}catch(G){return console.error("[stall-watchdog] failed to start sampling profiler:",G),()=>{}}let X,Q=performance.now()+Z,Y=()=>{let G=performance.now(),J=G-Q;Q=G+Z;let K=[];try{K=Wn6()?.traces??[]}catch{}if(J>$&&K.length>0){let W=new Map;for(let N of K){let U=N.frames.find((w)=>w.sourceURL&&!/Unknown Executable/.test(w.category??""))??N.frames[0];if(!U)continue;let F=(U.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),B=`${U.name??"?"} @ ${F}:${U.line??"?"}`;W.set(B,(W.get(B)??0)+1)}let H=[...W.entries()].sort((N,U)=>U[1]-N[1]).slice(0,8).map(([N,U])=>({frame:N,count:U}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:K.length,top:H}))}X=setTimeout(Y,Z),X.unref?.()};return X=setTimeout(Y,Z),X.unref?.(),()=>{if(X)clearTimeout(X)}}var Kn6,Wn6;var at1=O(()=>{({startSamplingProfiler:Kn6,samplingProfilerStackTraces:Wn6}=Jn6)});function st1(){pt1();let $=[tt1(),rm1(),rt1()];return()=>{for(let Z of $)Z()}}var et1=O(()=>{nu0();ot1();at1()});var FE=_(($o1)=>{Object.defineProperty($o1,"__esModule",{value:!0});$o1.RepublishHeaders=$o1.DirectMsgHeaders=$o1.JsHeaders=$o1.AdvisoryKind=void 0;$o1.isOrderedPushConsumerOptions=Hn6;$o1.isPullConsumer=Nn6;$o1.isPushConsumer=Un6;$o1.isBoundPushConsumerOptions=Fn6;function Hn6($){if($&&typeof $==="object")return"name_prefix"in $||"deliver_subject_prefix"in $||"filter_subjects"in $||"filter_subject"in $||"deliver_policy"in $||"opt_start_seq"in $||"opt_start_time"in $||"replay_policy"in $||"inactive_threshold"in $||"headers_only"in $||"deliver_prefix"in $;return!1}function Nn6($){return $.isPullConsumer()}function Un6($){return $.isPushConsumer()}function Fn6($){if($&&typeof $==="object")return"deliver_subject"in $||"deliver_group"in $||"idle_heartbeat"in $;return!1}$o1.AdvisoryKind={API:"api_audit",StreamAction:"stream_action",ConsumerAction:"consumer_action",SnapshotCreate:"snapshot_create",SnapshotComplete:"snapshot_complete",RestoreCreate:"restore_create",RestoreComplete:"restore_complete",MaxDeliver:"max_deliver",Terminated:"terminated",Ack:"consumer_ack",StreamLeaderElected:"stream_leader_elected",StreamQuorumLost:"stream_quorum_lost",ConsumerLeaderElected:"consumer_leader_elected",ConsumerQuorumLost:"consumer_quorum_lost"};$o1.JsHeaders={StreamSourceHdr:"Nats-Stream-Source",LastConsumerSeqHdr:"Nats-Last-Consumer",LastStreamSeqHdr:"Nats-Last-Stream",ConsumerStalledHdr:"Nats-Consumer-Stalled",MessageSizeHdr:"Nats-Msg-Size",RollupHdr:"Nats-Rollup",RollupValueSubject:"sub",RollupValueAll:"all",PendingMessagesHdr:"Nats-Pending-Messages",PendingBytesHdr:"Nats-Pending-Bytes",RequiredApiLevel:"Nats-Required-Api-Level"};$o1.DirectMsgHeaders={Stream:"Nats-Stream",Sequence:"Nats-Sequence",TimeStamp:"Nats-Time-Stamp",Subject:"Nats-Subject",LastSequence:"Nats-Last-Sequence",NumPending:"Nats-Num-Pending"};$o1.RepublishHeaders={Stream:"Nats-Stream",Subject:"Nats-Subject",Sequence:"Nats-Sequence",LastSequence:"Nats-Last-Sequence",Size:"Nats-Msg-Size"}});var rY=_((Xo1)=>{Object.defineProperty(Xo1,"__esModule",{value:!0});Xo1.TD=Xo1.TE=Xo1.Empty=void 0;Xo1.encode=Pn6;Xo1.decode=An6;Xo1.Empty=new Uint8Array(0);Xo1.TE=new TextEncoder;Xo1.TD=new TextDecoder;function jn6(...$){let Z=0;for(let Y=0;Y<$.length;Y++)Z+=$[Y].length;let X=new Uint8Array(Z),Q=0;for(let Y=0;Y<$.length;Y++)X.set($[Y],Q),Q+=$[Y].length;return X}function Pn6(...$){let Z=[];for(let X=0;X<$.length;X++)Z.push(Xo1.TE.encode($[X]));if(Z.length===0)return Xo1.Empty;if(Z.length===1)return Z[0];return jn6(...Z)}function An6($){if(!$||$.length===0)return"";return Xo1.TD.decode($)}});var aY=_((Go1)=>{Object.defineProperty(Go1,"__esModule",{value:!0});Go1.errors=Go1.PermissionViolationError=Go1.NoRespondersError=Go1.TimeoutError=Go1.RequestError=Go1.ProtocolError=Go1.ConnectionError=Go1.DrainingConnectionError=Go1.ClosedConnectionError=Go1.AuthorizationError=Go1.UserAuthenticationExpiredError=Go1.InvalidOperationError=Go1.InvalidArgumentError=Go1.InvalidSubjectError=void 0;class pm0 extends Error{constructor($,Z){super(`illegal subject: '${$}'`,Z);this.name="InvalidSubjectError"}}Go1.InvalidSubjectError=pm0;class e90 extends Error{constructor($,Z){super($,Z);this.name="InvalidArgumentError"}static format($,Z,X){if(Array.isArray(Z)&&Z.length>1)Z=Z[0];if(Array.isArray($))$=$.map((Q)=>`'${Q}'`),$=$.join(",");else $=`'${$}'`;return new e90(`${$} ${Z}`,X)}}Go1.InvalidArgumentError=e90;class tm0 extends Error{constructor($,Z){super($,Z);this.name="InvalidOperationError"}}Go1.InvalidOperationError=tm0;class $Z0 extends Error{constructor($,Z){super($,Z);this.name="UserAuthenticationExpiredError"}static parse($){if($.toLowerCase().indexOf("user authentication expired")!==-1)return new $Z0($);return null}}Go1.UserAuthenticationExpiredError=$Z0;class ZZ0 extends Error{constructor($,Z){super($,Z);this.name="AuthorizationError"}static parse($){let Z=["authorization violation","account authentication expired","authentication timeout"],X=$.toLowerCase();for(let Q=0;Q<Z.length;Q++)if(X.indexOf(Z[Q])!==-1)return new ZZ0($);return null}}Go1.AuthorizationError=ZZ0;class om0 extends Error{constructor(){super("closed connection");this.name="ClosedConnectionError"}}Go1.ClosedConnectionError=om0;class rm0 extends Error{constructor(){super("connection draining");this.name="DrainingConnectionError"}}Go1.DrainingConnectionError=rm0;class am0 extends Error{constructor($,Z){super($,Z);this.name="ConnectionError"}}Go1.ConnectionError=am0;class sm0 extends Error{constructor($,Z){super($,Z);this.name="ProtocolError"}}Go1.ProtocolError=sm0;class em0 extends Error{constructor($="",Z){super($,Z);this.name="RequestError"}isNoResponders(){return this.cause instanceof XZ0}}Go1.RequestError=em0;class $i0 extends Error{constructor($){super("timeout",$);this.name="TimeoutError"}}Go1.TimeoutError=$i0;class XZ0 extends Error{subject;constructor($,Z){super(`no responders: '${$}'`,Z);this.subject=$,this.name="NoResponders"}}Go1.NoRespondersError=XZ0;class QZ0 extends Error{operation;subject;queue;constructor($,Z,X,Q,Y){super($,Y);this.name="PermissionViolationError",this.operation=Z,this.subject=X,this.queue=Q}static parse($){if(($?$.toLowerCase():"").indexOf("permissions violation")===-1)return null;let X="publish",Q="",Y=void 0,G=$.match(/(Publish|Subscription) to "(\S+)"/);if(G){if(X=G[1].toLowerCase(),Q=G[2],X==="subscription"){let J=$.match(/using queue "(\S+)"/);if(J)Y=J[1]}}return new QZ0($,X,Q,Y)}}Go1.PermissionViolationError=QZ0;Go1.errors={AuthorizationError:ZZ0,ClosedConnectionError:om0,ConnectionError:am0,DrainingConnectionError:rm0,InvalidArgumentError:e90,InvalidOperationError:tm0,InvalidSubjectError:pm0,NoRespondersError:XZ0,PermissionViolationError:QZ0,ProtocolError:sm0,RequestError:em0,TimeoutError:$i0,UserAuthenticationExpiredError:$Z0}});var SJ=_((No1)=>{Object.defineProperty(No1,"__esModule",{value:!0});No1.SimpleMutex=No1.Perf=void 0;No1.extend=hn6;No1.render=un6;No1.timeout=cn6;No1.delay=ln6;No1.deadline=dn6;No1.deferred=Xi0;No1.debugDeferred=mn6;No1.shuffle=in6;No1.collect=nn6;No1.jitter=Ho1;No1.backoff=pn6;No1.nanos=tn6;No1.millis=on6;No1.randomToken=sn6;var gn6=rY(),Zi0=aY();function hn6($,...Z){for(let X=0;X<Z.length;X++){let Q=Z[X];Object.keys(Q).forEach(function(Y){$[Y]=Q[Y]})}return $}function un6($){return gn6.TD.decode($).replace(/\n/g,"\u240A").replace(/\r/g,"\u240D")}function cn6($,Z=!0){let X=Z?new Zi0.TimeoutError:null,Q,Y,G=new Promise((J,K)=>{Q={cancel:()=>{if(Y)clearTimeout(Y)}},Y=setTimeout(()=>{if(X===null)K(new Zi0.TimeoutError);else K(X)},$)});return Object.assign(G,Q)}function ln6($=0){let Z,X=new Promise((Q)=>{let Y=setTimeout(()=>{Q()},$);Z={cancel:()=>{if(Y)clearTimeout(Y),Q()}}});return Object.assign(X,Z)}async function dn6($,Z=1000){let X=Xi0(),Q=setTimeout(()=>{X.reject(new Zi0.TimeoutError)},Z);try{return await Promise.race([$,X])}finally{clearTimeout(Q)}}function Xi0(){let $={},Z=new Promise((X,Q)=>{$={resolve:X,reject:Q}});return Object.assign(Z,$)}function mn6(){let $={},Z=new Promise((X,Q)=>{$={resolve:(Y)=>{console.trace("resolve",Y),X(Y)},reject:(Y)=>{console.trace("reject"),Q(Y)}}});return Object.assign(Z,$)}function in6($){for(let Z=$.length-1;Z>0;Z--){let X=Math.floor(Math.random()*(Z+1));[$[Z],$[X]]=[$[X],$[Z]]}return $}async function nn6($){let Z=[];for await(let X of $)Z.push(X);return Z}class Ko1{timers;measures;constructor(){this.timers=new Map,this.measures=new Map}mark($){this.timers.set($,performance.now())}measure($,Z,X){let Q=this.timers.get(Z);if(Q===void 0)throw Error(`${Z} is not defined`);let Y=this.timers.get(X);if(Y===void 0)throw Error(`${X} is not defined`);this.measures.set($,Y-Q)}getEntries(){let $=[];return this.measures.forEach((Z,X)=>{$.push({name:X,duration:Z})}),$}}No1.Perf=Ko1;class Wo1{max;current;waiting;constructor($=1){this.max=$,this.current=0,this.waiting=[]}lock(){if(this.current++,this.current<=this.max)return Promise.resolve();let $=Xi0();return this.waiting.push($),$}unlock(){this.current--,this.waiting.pop()?.resolve()}}No1.SimpleMutex=Wo1;function Ho1($){if($===0)return 0;return Math.floor($/2+Math.random()*$)}function pn6($=[0,250,250,500,500,3000,5000]){if(!Array.isArray($))$=[0,250,250,500,500,3000,5000];let Z=$.length-1;return{backoff(X){return Ho1(X>Z?$[Z]:$[X])}}}function tn6($){return $*1e6}function on6($){return Math.floor($/1e6)}var rn6="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",mN=new Uint8Array(62);for(let $=0;$<62;$++)mN[$]=rn6.charCodeAt($);var an6=218340105584896;function sn6(){let $=Math.floor(Math.random()*an6),Z=$%62,X=mN[Z];$=($-Z)/62,Z=$%62;let Q=mN[Z];$=($-Z)/62,Z=$%62;let Y=mN[Z];$=($-Z)/62,Z=$%62;let G=mN[Z];$=($-Z)/62,Z=$%62;let J=mN[Z];$=($-Z)/62,Z=$%62;let K=mN[Z];$=($-Z)/62,Z=$%62;let W=mN[Z];$=($-Z)/62;let H=mN[$];return String.fromCharCode(X,Q,Y,G,J,K,W,H)}});var Eo1=_((Lo1)=>{Object.defineProperty(Lo1,"__esModule",{value:!0});Lo1.nuid=Lo1.NuidImpl=void 0;var wp6="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",xB=62,GZ0=12,wo1=10,Fo1=33,Op6=333,Bo1=GZ0+wo1,Yi0=new Uint8Array(xB);for(let $=0;$<xB;$++)Yi0[$]=wp6.charCodeAt($);var YZ0=4294967296,Oo1=BigInt(xB)**BigInt(wo1),Fi=Number(Oo1/(1n<<32n)),Qi0=Number(Oo1%(1n<<32n));function Lp6($){for(let Z=0;Z<$.length;Z++)$[Z]=Math.floor(Math.random()*256)}function Dp6($){if(globalThis?.crypto?.getRandomValues)globalThis.crypto.getRandomValues($);else Lp6($)}class Gi0{buf;cbuf;seqHi;seqLo;inc;inited;constructor(){this.buf=new Uint8Array(Bo1),this.cbuf=new Uint8Array(GZ0),this.inited=!1}init(){this.inited=!0,this.setPre(),this.initSeqAndInc(),this.fillSeq()}initSeqAndInc(){let $=0;do this.seqHi=Math.floor(Math.random()*(Fi+1)),this.seqLo=Math.floor(Math.random()*YZ0);while($++<8&&this.seqHi===Fi&&this.seqLo>=Qi0);if(this.seqHi===Fi&&this.seqLo>=Qi0)this.seqLo=0;this.inc=Math.random()*(Op6-Fo1)+Fo1|0}setPre(){Dp6(this.cbuf);for(let $=0;$<GZ0;$++)this.buf[$]=Yi0[this.cbuf[$]%xB]}fillSeq(){let $=this.seqHi,Z=this.seqLo;for(let X=Bo1-1;X>=GZ0;X--){let Q=Math.floor($/xB),G=($-Q*xB)*YZ0+Z,J=Math.floor(G/xB),K=G-J*xB;this.buf[X]=Yi0[K],$=Q,Z=J}}next(){if(!this.inited)this.init();if(this.seqLo+=this.inc,this.seqLo>=YZ0)this.seqLo-=YZ0,this.seqHi+=1;if(this.seqHi>Fi||this.seqHi===Fi&&this.seqLo>=Qi0)this.setPre(),this.initSeqAndInc();this.fillSeq();let $=this.buf;return String.fromCharCode($[0],$[1],$[2],$[3],$[4],$[5],$[6],$[7],$[8],$[9],$[10],$[11],$[12],$[13],$[14],$[15],$[16],$[17],$[18],$[19],$[20],$[21])}reset(){this.init()}}Lo1.NuidImpl=Gi0;Lo1.nuid=new Gi0});var Ao1=_((jo1)=>{Object.defineProperty(jo1,"__esModule",{value:!0});jo1.nuid=jo1.Nuid=void 0;var zo1=Eo1();jo1.Nuid=zo1.NuidImpl;jo1.nuid=zo1.nuid});var KZ0=_((JZ0)=>{Object.defineProperty(JZ0,"__esModule",{value:!0});JZ0.nuid=JZ0.Nuid=void 0;var To1=Ao1();Object.defineProperty(JZ0,"Nuid",{enumerable:!0,get:function(){return To1.Nuid}});Object.defineProperty(JZ0,"nuid",{enumerable:!0,get:function(){return To1.nuid}})});var fB=_((Ro1)=>{Object.defineProperty(Ro1,"__esModule",{value:!0});Ro1.DEFAULT_HOST=Ro1.DEFAULT_PORT=Ro1.Match=void 0;Ro1.syncIterator=Tp6;Ro1.createInbox=Rp6;var Pp6=KZ0(),Ap6=aY();Ro1.Match={Exact:"exact",CanonicalMIME:"canonical",IgnoreCase:"insensitive"};function Tp6($){let Z=$[Symbol.asyncIterator]();return{async next(){let X=await Z.next();if(X.done)return Promise.resolve(null);return Promise.resolve(X.value)}}}function Rp6($=""){if($=$||"_INBOX",typeof $!=="string")throw TypeError("prefix must be a string");return $.split(".").forEach((Z)=>{if(Z==="*"||Z===">")throw Ap6.InvalidArgumentError.format("prefix",`cannot have wildcards ('${$}')`)}),`${$}.${Pp6.nuid.next()}`}Ro1.DEFAULT_PORT=4222;Ro1.DEFAULT_HOST="127.0.0.1"});var Bi=_((Vo1)=>{Object.defineProperty(Vo1,"__esModule",{value:!0});Vo1.DataBuffer=void 0;var qo1=rY();class Mo1{buffers;byteLength;constructor(){this.buffers=[],this.byteLength=0}static concat(...$){let Z=0;for(let Y=0;Y<$.length;Y++)Z+=$[Y].length;let X=new Uint8Array(Z),Q=0;for(let Y=0;Y<$.length;Y++)X.set($[Y],Q),Q+=$[Y].length;return X}static fromAscii($){if(!$)$="";return qo1.TE.encode($)}static toAscii($){return qo1.TD.decode($)}reset(){this.buffers.length=0,this.byteLength=0}pack(){if(this.buffers.length>1){let $=new Uint8Array(this.byteLength),Z=0;for(let X=0;X<this.buffers.length;X++)$.set(this.buffers[X],Z),Z+=this.buffers[X].length;this.buffers.length=0,this.buffers.push($)}}shift(){if(this.buffers.length){let $=this.buffers.shift();if($)return this.byteLength-=$.length,$}return new Uint8Array(0)}drain($){if(this.buffers.length){this.pack();let Z=this.buffers.pop();if(Z){let X=this.byteLength;if($===void 0||$>X)$=X;let Q=Z.subarray(0,$);if(X>$)this.buffers.push(Z.subarray($));return this.byteLength=X-$,Q}}return new Uint8Array(0)}fill($,...Z){if($)this.buffers.push($),this.byteLength+=$.length;for(let X=0;X<Z.length;X++)if(Z[X]&&Z[X].length)this.buffers.push(Z[X]),this.byteLength+=Z[X].length}peek(){if(this.buffers.length)return this.pack(),this.buffers[0];return new Uint8Array(0)}size(){return this.byteLength}length(){return this.buffers.length}}Vo1.DataBuffer=Mo1});var BE=_((Co1)=>{Object.defineProperty(Co1,"__esModule",{value:!0});Co1.LF=Co1.CR=Co1.CRLF=Co1.CR_LF_LEN=Co1.CR_LF=void 0;Co1.setTransportFactory=_p6;Co1.defaultPort=vp6;Co1.getUrlParseFn=xp6;Co1.newTransport=fp6;Co1.getResolveFn=bp6;Co1.protoLen=So1;Co1.extractProtocolMessage=yp6;var kp6=rY(),Sp6=fB(),Cp6=Bi(),sY;function _p6($){sY=$}function vp6(){return sY!==void 0&&sY.defaultPort!==void 0?sY.defaultPort:Sp6.DEFAULT_PORT}function xp6(){return sY!==void 0&&sY.urlParseFn?sY.urlParseFn:void 0}function fp6(){if(!sY||typeof sY.factory!=="function")throw Error("transport fn is not set");return sY.factory()}function bp6(){return sY!==void 0&&sY.dnsResolveFn?sY.dnsResolveFn:void 0}Co1.CR_LF=`\r
+`);Q=G.pop()??"";for(let J of G){let K=Ni(J).replace(/^\[\d+\]\s*/,"").trim();if(!K)continue;CB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:K})}}(async()=>{for(;;){let{done:G,value:J}=await Z.read();if(G)break;Q+=X.decode(J,{stream:!0}),Y()}if(Q.trim()){let G=Ni(Q).replace(/^\[\d+\]\s*/,"").trim();if(G)CB({method:"",path:"",status:0,duration:0,timestamp:new Date,rawLine:G})}})()}async function pi6($){let{baseUrl:Z,noTui:X}=$,Q=process.env.HOST==="0.0.0.0"&&Boolean(process.env.PORT),Y=Q?process.env.PORT:$.vitePort,G=Z||`http://localhost:${Y}`,J=Q?await Hi(Number(Y)+1):await Hi(Number($.port)),{settings:K,services:W,managedServiceNames:H}=await t90({port:String(J),home:$.home,baseUrl:$.baseUrl,localMode:$.localMode,skipMigrations:$.skipMigrations,noTui:$.noTui,vitePort:$.vitePort});for(let L of W)WE({name:L.name,status:"ready",port:L.port});Ki();let N=ni6(import.meta.dir,"..","..","..","..",".."),U=X===!0,F=Bun.spawn(["bun","run","dev:servers"],{cwd:N,env:{...process.env,PORT:String(K.port),VITE_PORT:String(Y),DATABASE_URL:K.databaseUrl,NATS_URL:K.natsUrls.join(","),NODE_ENV:K.nodeEnv,BASE_URL:G,DECOCMS_LOCAL_MODE:String(K.localMode),DECOCMS_HOME:K.dataDir,DATA_DIR:K.dataDir,DECO_CLI:"1",...K.betterAuthSecret?{BETTER_AUTH_SECRET:K.betterAuthSecret}:{},...K.s3Endpoint?{S3_ENDPOINT:K.s3Endpoint,S3_BUCKET:K.s3Bucket??"",S3_ACCESS_KEY_ID:K.s3AccessKeyId??"",S3_SECRET_ACCESS_KEY:K.s3SecretAccessKey??"",S3_FORCE_PATH_STYLE:String(K.s3ForcePathStyle)}:{},...K.natsPublicUrl&&K.natsAccountJwt&&K.natsAccountSigningKey?{NATS_PUBLIC_URL:K.natsPublicUrl,NATS_ACCOUNT_JWT:K.natsAccountJwt,NATS_ACCOUNT_SIGNING_KEY:K.natsAccountSigningKey,NATS_OPERATOR_JWT:K.natsOperatorJwt??"",NATS_TUNNEL_PUBLIC_ENABLED:"true",...K.natsCredsPath?{NATS_CREDS:K.natsCredsPath}:{}}:{}},stdio:["inherit",U?"inherit":"pipe",U?"inherit":"pipe"]});if(!U)vt1(F.stdout),vt1(F.stderr);Wi(G),WE({name:"Vite",status:"ready",port:Number(Y)}),WE({name:"API",status:"ready",port:Number(K.port)});let w=async(L)=>{if(F.kill(L),await F.exited,H.length>0){let{stopServices:D}=await Promise.resolve().then(() => (Q90(),X90));await D(K.dataDir)}};return process.on("SIGINT",()=>w("SIGINT")),process.on("SIGTERM",()=>w("SIGTERM")),{port:Number(Y),process:F}}var hm0=O(()=>{vm0();HE();ym0()});var a90;var um0=O(()=>{a90={name:"decocms",version:"4.220.6",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/api"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:"bun run migrate && bun run dev:server","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",build:"bun run build:server","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","generate:tool-contracts":"bun run scripts/generate-tool-contracts.ts","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test src","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",prepublishOnly:"bun run --cwd=../.. build:studio"},optionalDependencies:{"@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@inkjs/ui":"^2.0.0","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@better-auth/sso":"1.4.1","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/shared":"workspace:*","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@vercel/nft":"^1.1.1",ai:"^6.0.208","better-auth":"1.4.22",croner:"^9.1.0",degit:"^2.8.4",hono:"^4.10.7",jose:"^6.0.11",nanoid:"^5.1.6",pg:"^8.16.3",typescript:"^7.0.2",typescript5:"npm:typescript@^5.9.3",zod:"4.3.6"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","tools"],license:"MIT",publishConfig:{access:"public"}}});import{Box as oi6,Text as xt1}from"ink";import{jsx as ri6,jsxs as ft1}from"react/jsx-runtime";function bt1({version:$}){return ft1(oi6,{flexDirection:"column",marginTop:1,children:[I90.map((Z,X)=>ri6(xt1,{color:q90[X],children:Z},X)),ft1(xt1,{dimColor:!0,children:[" v",$]})]})}var yt1=O(()=>{om()});import{Box as NE,Text as _B}from"ink";import{Spinner as ai6}from"@inkjs/ui";import{jsx as oY,jsxs as Mb}from"react/jsx-runtime";function gt1({status:$}){if($==="pending")return oY(ai6,{label:""});return oY(_B,{color:"green",children:"\u2713"})}function si6($){return`${$.name}: ${$.port||"...."}`}function ht1({services:$,migrationsStatus:Z,home:X,serverUrl:Q}){return Mb(NE,{flexDirection:"column",paddingBottom:1,children:[oY(bt1,{version:a90.version}),oY(NE,{marginBottom:1,children:oY(_B,{dimColor:!0,children:"\u2500".repeat(80)})}),oY(NE,{children:Mb(_B,{dimColor:!0,children:["Home: ",X]})}),Mb(NE,{gap:2,children:[$.map((Y)=>Mb(NE,{gap:1,children:[oY(_B,{children:si6(Y)}),oY(gt1,{status:Y.status})]},Y.name)),Mb(NE,{gap:1,children:[oY(_B,{children:"Migrations"}),oY(gt1,{status:Z})]})]}),oY(NE,{children:Q?Mb(_B,{children:["Open in browser: ",oY(_B,{color:"cyan",children:Q})]}):oY(_B,{dimColor:!0,children:"Starting..."})})]})}var ut1=O(()=>{um0();yt1()});import{Box as ei6,Text as Ui}from"ink";import{jsx as cm0,jsxs as lm0}from"react/jsx-runtime";function $n6($){if($>=500)return"red";if($>=400)return"yellow";if($>=300)return"cyan";return"green"}function ct1({logs:$}){return cm0(ei6,{flexDirection:"column",children:$.map((Z,X)=>{if(Z.rawLine)return cm0(Ui,{dimColor:!0,children:Z.rawLine},X);let Q=Z.duration<1000?`${Z.duration}ms`:`${(Z.duration/1000).toFixed(1)}s`;return lm0(Ui,{children:[lm0(Ui,{dimColor:!0,children:[Z.method.padEnd(6)," ",Z.path.padEnd(30)," "]}),cm0(Ui,{color:$n6(Z.status),children:Z.status}),lm0(Ui,{dimColor:!0,children:[" ",Q.padStart(8)]})]},X)})})}var lt1=()=>{};var dm0={};w0(dm0,{App:()=>Qn6});import{Box as Zn6}from"ink";import{useSyncExternalStore as Xn6}from"react";import{jsx as dt1,jsxs as Yn6}from"react/jsx-runtime";function Qn6({home:$}){let Z=Xn6(bm0,fm0);return Yn6(Zn6,{flexDirection:"column",children:[dt1(ht1,{services:Z.services,migrationsStatus:Z.migrationsStatus,home:$,serverUrl:Z.serverUrl}),dt1(ct1,{logs:Z.logs})]})}var mm0=O(()=>{ut1();lt1();HE()});var kJ="thread-gate",dN="decopilot-hosted-harness",W3="automations",vB="background-tools",UE="task-board-github-reads";var mt1="7";function it1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:mt1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}var nt1=()=>{};function Gn6(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function im0($,Z){for(let X=0;X<$.length;X++){let Q=$[X];if(Q===void 0)continue;if(Q===Z)return $[X+1];if(Q.startsWith(`${Z}=`))return Q.slice(Z.length+1)}return}function pt1(){let $=Gn6();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:im0($,"--cpu-prof-dir")??process.cwd(),name:im0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(im0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}function tt1(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let X=YE();if(!X)return;let Q={};try{let{heapStats:Y}=await import("bun:jsc"),G=Y(),J=Object.entries(G.objectTypeCounts).sort((K,W)=>W[1]-K[1]).slice(0,20);Q={objectCount:G.objectCount,heapSize:G.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:X.rss,heapUsed:X.heapUsed,heapTotal:X.heapTotal,external:X.external,arrayBuffers:X.arrayBuffers,...Q}))};return Z().catch(()=>{}),s90=setInterval(()=>void Z().catch(()=>{}),$),s90.unref?.(),process.on("SIGUSR2",()=>{try{let X=Bun.generateHeapSnapshot("v8"),Q=typeof X==="string"?X:JSON.stringify(X),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,Q),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(X){console.error("[heap-watch] snapshot failed:",X)}}),()=>{if(s90)clearInterval(s90)}}var s90;var ot1=()=>{};import*as Jn6 from"bun:jsc";function rt1(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Kn6()}catch(G){return console.error("[stall-watchdog] failed to start sampling profiler:",G),()=>{}}let X,Q=performance.now()+Z,Y=()=>{let G=performance.now(),J=G-Q;Q=G+Z;let K=[];try{K=Wn6()?.traces??[]}catch{}if(J>$&&K.length>0){let W=new Map;for(let N of K){let U=N.frames.find((w)=>w.sourceURL&&!/Unknown Executable/.test(w.category??""))??N.frames[0];if(!U)continue;let F=(U.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),B=`${U.name??"?"} @ ${F}:${U.line??"?"}`;W.set(B,(W.get(B)??0)+1)}let H=[...W.entries()].sort((N,U)=>U[1]-N[1]).slice(0,8).map(([N,U])=>({frame:N,count:U}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:K.length,top:H}))}X=setTimeout(Y,Z),X.unref?.()};return X=setTimeout(Y,Z),X.unref?.(),()=>{if(X)clearTimeout(X)}}var Kn6,Wn6;var at1=O(()=>{({startSamplingProfiler:Kn6,samplingProfilerStackTraces:Wn6}=Jn6)});function st1(){pt1();let $=[tt1(),rm1(),rt1()];return()=>{for(let Z of $)Z()}}var et1=O(()=>{nu0();ot1();at1()});var FE=_(($o1)=>{Object.defineProperty($o1,"__esModule",{value:!0});$o1.RepublishHeaders=$o1.DirectMsgHeaders=$o1.JsHeaders=$o1.AdvisoryKind=void 0;$o1.isOrderedPushConsumerOptions=Hn6;$o1.isPullConsumer=Nn6;$o1.isPushConsumer=Un6;$o1.isBoundPushConsumerOptions=Fn6;function Hn6($){if($&&typeof $==="object")return"name_prefix"in $||"deliver_subject_prefix"in $||"filter_subjects"in $||"filter_subject"in $||"deliver_policy"in $||"opt_start_seq"in $||"opt_start_time"in $||"replay_policy"in $||"inactive_threshold"in $||"headers_only"in $||"deliver_prefix"in $;return!1}function Nn6($){return $.isPullConsumer()}function Un6($){return $.isPushConsumer()}function Fn6($){if($&&typeof $==="object")return"deliver_subject"in $||"deliver_group"in $||"idle_heartbeat"in $;return!1}$o1.AdvisoryKind={API:"api_audit",StreamAction:"stream_action",ConsumerAction:"consumer_action",SnapshotCreate:"snapshot_create",SnapshotComplete:"snapshot_complete",RestoreCreate:"restore_create",RestoreComplete:"restore_complete",MaxDeliver:"max_deliver",Terminated:"terminated",Ack:"consumer_ack",StreamLeaderElected:"stream_leader_elected",StreamQuorumLost:"stream_quorum_lost",ConsumerLeaderElected:"consumer_leader_elected",ConsumerQuorumLost:"consumer_quorum_lost"};$o1.JsHeaders={StreamSourceHdr:"Nats-Stream-Source",LastConsumerSeqHdr:"Nats-Last-Consumer",LastStreamSeqHdr:"Nats-Last-Stream",ConsumerStalledHdr:"Nats-Consumer-Stalled",MessageSizeHdr:"Nats-Msg-Size",RollupHdr:"Nats-Rollup",RollupValueSubject:"sub",RollupValueAll:"all",PendingMessagesHdr:"Nats-Pending-Messages",PendingBytesHdr:"Nats-Pending-Bytes",RequiredApiLevel:"Nats-Required-Api-Level"};$o1.DirectMsgHeaders={Stream:"Nats-Stream",Sequence:"Nats-Sequence",TimeStamp:"Nats-Time-Stamp",Subject:"Nats-Subject",LastSequence:"Nats-Last-Sequence",NumPending:"Nats-Num-Pending"};$o1.RepublishHeaders={Stream:"Nats-Stream",Subject:"Nats-Subject",Sequence:"Nats-Sequence",LastSequence:"Nats-Last-Sequence",Size:"Nats-Msg-Size"}});var rY=_((Xo1)=>{Object.defineProperty(Xo1,"__esModule",{value:!0});Xo1.TD=Xo1.TE=Xo1.Empty=void 0;Xo1.encode=Pn6;Xo1.decode=An6;Xo1.Empty=new Uint8Array(0);Xo1.TE=new TextEncoder;Xo1.TD=new TextDecoder;function jn6(...$){let Z=0;for(let Y=0;Y<$.length;Y++)Z+=$[Y].length;let X=new Uint8Array(Z),Q=0;for(let Y=0;Y<$.length;Y++)X.set($[Y],Q),Q+=$[Y].length;return X}function Pn6(...$){let Z=[];for(let X=0;X<$.length;X++)Z.push(Xo1.TE.encode($[X]));if(Z.length===0)return Xo1.Empty;if(Z.length===1)return Z[0];return jn6(...Z)}function An6($){if(!$||$.length===0)return"";return Xo1.TD.decode($)}});var aY=_((Go1)=>{Object.defineProperty(Go1,"__esModule",{value:!0});Go1.errors=Go1.PermissionViolationError=Go1.NoRespondersError=Go1.TimeoutError=Go1.RequestError=Go1.ProtocolError=Go1.ConnectionError=Go1.DrainingConnectionError=Go1.ClosedConnectionError=Go1.AuthorizationError=Go1.UserAuthenticationExpiredError=Go1.InvalidOperationError=Go1.InvalidArgumentError=Go1.InvalidSubjectError=void 0;class pm0 extends Error{constructor($,Z){super(`illegal subject: '${$}'`,Z);this.name="InvalidSubjectError"}}Go1.InvalidSubjectError=pm0;class e90 extends Error{constructor($,Z){super($,Z);this.name="InvalidArgumentError"}static format($,Z,X){if(Array.isArray(Z)&&Z.length>1)Z=Z[0];if(Array.isArray($))$=$.map((Q)=>`'${Q}'`),$=$.join(",");else $=`'${$}'`;return new e90(`${$} ${Z}`,X)}}Go1.InvalidArgumentError=e90;class tm0 extends Error{constructor($,Z){super($,Z);this.name="InvalidOperationError"}}Go1.InvalidOperationError=tm0;class $Z0 extends Error{constructor($,Z){super($,Z);this.name="UserAuthenticationExpiredError"}static parse($){if($.toLowerCase().indexOf("user authentication expired")!==-1)return new $Z0($);return null}}Go1.UserAuthenticationExpiredError=$Z0;class ZZ0 extends Error{constructor($,Z){super($,Z);this.name="AuthorizationError"}static parse($){let Z=["authorization violation","account authentication expired","authentication timeout"],X=$.toLowerCase();for(let Q=0;Q<Z.length;Q++)if(X.indexOf(Z[Q])!==-1)return new ZZ0($);return null}}Go1.AuthorizationError=ZZ0;class om0 extends Error{constructor(){super("closed connection");this.name="ClosedConnectionError"}}Go1.ClosedConnectionError=om0;class rm0 extends Error{constructor(){super("connection draining");this.name="DrainingConnectionError"}}Go1.DrainingConnectionError=rm0;class am0 extends Error{constructor($,Z){super($,Z);this.name="ConnectionError"}}Go1.ConnectionError=am0;class sm0 extends Error{constructor($,Z){super($,Z);this.name="ProtocolError"}}Go1.ProtocolError=sm0;class em0 extends Error{constructor($="",Z){super($,Z);this.name="RequestError"}isNoResponders(){return this.cause instanceof XZ0}}Go1.RequestError=em0;class $i0 extends Error{constructor($){super("timeout",$);this.name="TimeoutError"}}Go1.TimeoutError=$i0;class XZ0 extends Error{subject;constructor($,Z){super(`no responders: '${$}'`,Z);this.subject=$,this.name="NoResponders"}}Go1.NoRespondersError=XZ0;class QZ0 extends Error{operation;subject;queue;constructor($,Z,X,Q,Y){super($,Y);this.name="PermissionViolationError",this.operation=Z,this.subject=X,this.queue=Q}static parse($){if(($?$.toLowerCase():"").indexOf("permissions violation")===-1)return null;let X="publish",Q="",Y=void 0,G=$.match(/(Publish|Subscription) to "(\S+)"/);if(G){if(X=G[1].toLowerCase(),Q=G[2],X==="subscription"){let J=$.match(/using queue "(\S+)"/);if(J)Y=J[1]}}return new QZ0($,X,Q,Y)}}Go1.PermissionViolationError=QZ0;Go1.errors={AuthorizationError:ZZ0,ClosedConnectionError:om0,ConnectionError:am0,DrainingConnectionError:rm0,InvalidArgumentError:e90,InvalidOperationError:tm0,InvalidSubjectError:pm0,NoRespondersError:XZ0,PermissionViolationError:QZ0,ProtocolError:sm0,RequestError:em0,TimeoutError:$i0,UserAuthenticationExpiredError:$Z0}});var SJ=_((No1)=>{Object.defineProperty(No1,"__esModule",{value:!0});No1.SimpleMutex=No1.Perf=void 0;No1.extend=hn6;No1.render=un6;No1.timeout=cn6;No1.delay=ln6;No1.deadline=dn6;No1.deferred=Xi0;No1.debugDeferred=mn6;No1.shuffle=in6;No1.collect=nn6;No1.jitter=Ho1;No1.backoff=pn6;No1.nanos=tn6;No1.millis=on6;No1.randomToken=sn6;var gn6=rY(),Zi0=aY();function hn6($,...Z){for(let X=0;X<Z.length;X++){let Q=Z[X];Object.keys(Q).forEach(function(Y){$[Y]=Q[Y]})}return $}function un6($){return gn6.TD.decode($).replace(/\n/g,"\u240A").replace(/\r/g,"\u240D")}function cn6($,Z=!0){let X=Z?new Zi0.TimeoutError:null,Q,Y,G=new Promise((J,K)=>{Q={cancel:()=>{if(Y)clearTimeout(Y)}},Y=setTimeout(()=>{if(X===null)K(new Zi0.TimeoutError);else K(X)},$)});return Object.assign(G,Q)}function ln6($=0){let Z,X=new Promise((Q)=>{let Y=setTimeout(()=>{Q()},$);Z={cancel:()=>{if(Y)clearTimeout(Y),Q()}}});return Object.assign(X,Z)}async function dn6($,Z=1000){let X=Xi0(),Q=setTimeout(()=>{X.reject(new Zi0.TimeoutError)},Z);try{return await Promise.race([$,X])}finally{clearTimeout(Q)}}function Xi0(){let $={},Z=new Promise((X,Q)=>{$={resolve:X,reject:Q}});return Object.assign(Z,$)}function mn6(){let $={},Z=new Promise((X,Q)=>{$={resolve:(Y)=>{console.trace("resolve",Y),X(Y)},reject:(Y)=>{console.trace("reject"),Q(Y)}}});return Object.assign(Z,$)}function in6($){for(let Z=$.length-1;Z>0;Z--){let X=Math.floor(Math.random()*(Z+1));[$[Z],$[X]]=[$[X],$[Z]]}return $}async function nn6($){let Z=[];for await(let X of $)Z.push(X);return Z}class Ko1{timers;measures;constructor(){this.timers=new Map,this.measures=new Map}mark($){this.timers.set($,performance.now())}measure($,Z,X){let Q=this.timers.get(Z);if(Q===void 0)throw Error(`${Z} is not defined`);let Y=this.timers.get(X);if(Y===void 0)throw Error(`${X} is not defined`);this.measures.set($,Y-Q)}getEntries(){let $=[];return this.measures.forEach((Z,X)=>{$.push({name:X,duration:Z})}),$}}No1.Perf=Ko1;class Wo1{max;current;waiting;constructor($=1){this.max=$,this.current=0,this.waiting=[]}lock(){if(this.current++,this.current<=this.max)return Promise.resolve();let $=Xi0();return this.waiting.push($),$}unlock(){this.current--,this.waiting.pop()?.resolve()}}No1.SimpleMutex=Wo1;function Ho1($){if($===0)return 0;return Math.floor($/2+Math.random()*$)}function pn6($=[0,250,250,500,500,3000,5000]){if(!Array.isArray($))$=[0,250,250,500,500,3000,5000];let Z=$.length-1;return{backoff(X){return Ho1(X>Z?$[Z]:$[X])}}}function tn6($){return $*1e6}function on6($){return Math.floor($/1e6)}var rn6="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",mN=new Uint8Array(62);for(let $=0;$<62;$++)mN[$]=rn6.charCodeAt($);var an6=218340105584896;function sn6(){let $=Math.floor(Math.random()*an6),Z=$%62,X=mN[Z];$=($-Z)/62,Z=$%62;let Q=mN[Z];$=($-Z)/62,Z=$%62;let Y=mN[Z];$=($-Z)/62,Z=$%62;let G=mN[Z];$=($-Z)/62,Z=$%62;let J=mN[Z];$=($-Z)/62,Z=$%62;let K=mN[Z];$=($-Z)/62,Z=$%62;let W=mN[Z];$=($-Z)/62;let H=mN[$];return String.fromCharCode(X,Q,Y,G,J,K,W,H)}});var Eo1=_((Lo1)=>{Object.defineProperty(Lo1,"__esModule",{value:!0});Lo1.nuid=Lo1.NuidImpl=void 0;var wp6="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",xB=62,GZ0=12,wo1=10,Fo1=33,Op6=333,Bo1=GZ0+wo1,Yi0=new Uint8Array(xB);for(let $=0;$<xB;$++)Yi0[$]=wp6.charCodeAt($);var YZ0=4294967296,Oo1=BigInt(xB)**BigInt(wo1),Fi=Number(Oo1/(1n<<32n)),Qi0=Number(Oo1%(1n<<32n));function Lp6($){for(let Z=0;Z<$.length;Z++)$[Z]=Math.floor(Math.random()*256)}function Dp6($){if(globalThis?.crypto?.getRandomValues)globalThis.crypto.getRandomValues($);else Lp6($)}class Gi0{buf;cbuf;seqHi;seqLo;inc;inited;constructor(){this.buf=new Uint8Array(Bo1),this.cbuf=new Uint8Array(GZ0),this.inited=!1}init(){this.inited=!0,this.setPre(),this.initSeqAndInc(),this.fillSeq()}initSeqAndInc(){let $=0;do this.seqHi=Math.floor(Math.random()*(Fi+1)),this.seqLo=Math.floor(Math.random()*YZ0);while($++<8&&this.seqHi===Fi&&this.seqLo>=Qi0);if(this.seqHi===Fi&&this.seqLo>=Qi0)this.seqLo=0;this.inc=Math.random()*(Op6-Fo1)+Fo1|0}setPre(){Dp6(this.cbuf);for(let $=0;$<GZ0;$++)this.buf[$]=Yi0[this.cbuf[$]%xB]}fillSeq(){let $=this.seqHi,Z=this.seqLo;for(let X=Bo1-1;X>=GZ0;X--){let Q=Math.floor($/xB),G=($-Q*xB)*YZ0+Z,J=Math.floor(G/xB),K=G-J*xB;this.buf[X]=Yi0[K],$=Q,Z=J}}next(){if(!this.inited)this.init();if(this.seqLo+=this.inc,this.seqLo>=YZ0)this.seqLo-=YZ0,this.seqHi+=1;if(this.seqHi>Fi||this.seqHi===Fi&&this.seqLo>=Qi0)this.setPre(),this.initSeqAndInc();this.fillSeq();let $=this.buf;return String.fromCharCode($[0],$[1],$[2],$[3],$[4],$[5],$[6],$[7],$[8],$[9],$[10],$[11],$[12],$[13],$[14],$[15],$[16],$[17],$[18],$[19],$[20],$[21])}reset(){this.init()}}Lo1.NuidImpl=Gi0;Lo1.nuid=new Gi0});var Ao1=_((jo1)=>{Object.defineProperty(jo1,"__esModule",{value:!0});jo1.nuid=jo1.Nuid=void 0;var zo1=Eo1();jo1.Nuid=zo1.NuidImpl;jo1.nuid=zo1.nuid});var KZ0=_((JZ0)=>{Object.defineProperty(JZ0,"__esModule",{value:!0});JZ0.nuid=JZ0.Nuid=void 0;var To1=Ao1();Object.defineProperty(JZ0,"Nuid",{enumerable:!0,get:function(){return To1.Nuid}});Object.defineProperty(JZ0,"nuid",{enumerable:!0,get:function(){return To1.nuid}})});var fB=_((Ro1)=>{Object.defineProperty(Ro1,"__esModule",{value:!0});Ro1.DEFAULT_HOST=Ro1.DEFAULT_PORT=Ro1.Match=void 0;Ro1.syncIterator=Tp6;Ro1.createInbox=Rp6;var Pp6=KZ0(),Ap6=aY();Ro1.Match={Exact:"exact",CanonicalMIME:"canonical",IgnoreCase:"insensitive"};function Tp6($){let Z=$[Symbol.asyncIterator]();return{async next(){let X=await Z.next();if(X.done)return Promise.resolve(null);return Promise.resolve(X.value)}}}function Rp6($=""){if($=$||"_INBOX",typeof $!=="string")throw TypeError("prefix must be a string");return $.split(".").forEach((Z)=>{if(Z==="*"||Z===">")throw Ap6.InvalidArgumentError.format("prefix",`cannot have wildcards ('${$}')`)}),`${$}.${Pp6.nuid.next()}`}Ro1.DEFAULT_PORT=4222;Ro1.DEFAULT_HOST="127.0.0.1"});var Bi=_((Vo1)=>{Object.defineProperty(Vo1,"__esModule",{value:!0});Vo1.DataBuffer=void 0;var qo1=rY();class Mo1{buffers;byteLength;constructor(){this.buffers=[],this.byteLength=0}static concat(...$){let Z=0;for(let Y=0;Y<$.length;Y++)Z+=$[Y].length;let X=new Uint8Array(Z),Q=0;for(let Y=0;Y<$.length;Y++)X.set($[Y],Q),Q+=$[Y].length;return X}static fromAscii($){if(!$)$="";return qo1.TE.encode($)}static toAscii($){return qo1.TD.decode($)}reset(){this.buffers.length=0,this.byteLength=0}pack(){if(this.buffers.length>1){let $=new Uint8Array(this.byteLength),Z=0;for(let X=0;X<this.buffers.length;X++)$.set(this.buffers[X],Z),Z+=this.buffers[X].length;this.buffers.length=0,this.buffers.push($)}}shift(){if(this.buffers.length){let $=this.buffers.shift();if($)return this.byteLength-=$.length,$}return new Uint8Array(0)}drain($){if(this.buffers.length){this.pack();let Z=this.buffers.pop();if(Z){let X=this.byteLength;if($===void 0||$>X)$=X;let Q=Z.subarray(0,$);if(X>$)this.buffers.push(Z.subarray($));return this.byteLength=X-$,Q}}return new Uint8Array(0)}fill($,...Z){if($)this.buffers.push($),this.byteLength+=$.length;for(let X=0;X<Z.length;X++)if(Z[X]&&Z[X].length)this.buffers.push(Z[X]),this.byteLength+=Z[X].length}peek(){if(this.buffers.length)return this.pack(),this.buffers[0];return new Uint8Array(0)}size(){return this.byteLength}length(){return this.buffers.length}}Vo1.DataBuffer=Mo1});var BE=_((Co1)=>{Object.defineProperty(Co1,"__esModule",{value:!0});Co1.LF=Co1.CR=Co1.CRLF=Co1.CR_LF_LEN=Co1.CR_LF=void 0;Co1.setTransportFactory=_p6;Co1.defaultPort=vp6;Co1.getUrlParseFn=xp6;Co1.newTransport=fp6;Co1.getResolveFn=bp6;Co1.protoLen=So1;Co1.extractProtocolMessage=yp6;var kp6=rY(),Sp6=fB(),Cp6=Bi(),sY;function _p6($){sY=$}function vp6(){return sY!==void 0&&sY.defaultPort!==void 0?sY.defaultPort:Sp6.DEFAULT_PORT}function xp6(){return sY!==void 0&&sY.urlParseFn?sY.urlParseFn:void 0}function fp6(){if(!sY||typeof sY.factory!=="function")throw Error("transport fn is not set");return sY.factory()}function bp6(){return sY!==void 0&&sY.dnsResolveFn?sY.dnsResolveFn:void 0}Co1.CR_LF=`\r
 `;Co1.CR_LF_LEN=Co1.CR_LF.length;Co1.CRLF=Cp6.DataBuffer.fromAscii(Co1.CR_LF);Co1.CR=new Uint8Array(Co1.CRLF)[0];Co1.LF=new Uint8Array(Co1.CRLF)[1];function So1($){for(let Z=0;Z<$.length;Z++){let X=Z+1;if($.byteLength>X&&$[Z]===Co1.CR&&$[X]===Co1.LF)return X+1}return 0}function yp6($){let Z=So1($);if(Z>0){let Q=new Uint8Array($).slice(0,Z);return kp6.TD.decode(Q)}return""}});var Ni0=_((ho1)=>{Object.defineProperty(ho1,"__esModule",{value:!0});ho1.ipV4=bo1;ho1.isIP=tp6;ho1.parseIP=yo1;var wi=4,wE=16,WZ0=48,fo1=57,vo1=65,np6=70,xo1=97,pp6=102,Hi0=16777215;function bo1($,Z,X,Q){let Y=new Uint8Array(wE);return[0,0,0,0,0,0,0,0,0,0,255,255].forEach((J,K)=>{Y[K]=J}),Y[12]=$,Y[13]=Z,Y[14]=X,Y[15]=Q,Y}function tp6($){return yo1($)!==void 0}function yo1($){for(let Z=0;Z<$.length;Z++)switch($[Z]){case".":return go1($);case":":return op6($)}return}function go1($){let Z=new Uint8Array(wi);for(let X=0;X<wi;X++){if($.length===0)return;if(X>0){if($[0]!==".")return;$=$.substring(1)}let{n:Q,c:Y,ok:G}=rp6($);if(!G||Q>255)return;$=$.substring(Y),Z[X]=Q}return bo1(Z[0],Z[1],Z[2],Z[3])}function op6($){let Z=new Uint8Array(wE),X=-1;if($.length>=2&&$[0]===":"&&$[1]===":"){if(X=0,$=$.substring(2),$.length===0)return Z}let Q=0;while(Q<wE){let{n:Y,c:G,ok:J}=ap6($);if(!J||Y>65535)return;if(G<$.length&&$[G]==="."){if(X<0&&Q!=wE-wi)return;if(Q+wi>wE)return;let K=go1($);if(K===void 0)return;Z[Q]=K[12],Z[Q+1]=K[13],Z[Q+2]=K[14],Z[Q+3]=K[15],$="",Q+=wi;break}if(Z[Q]=Y>>8,Z[Q+1]=Y,Q+=2,$=$.substring(G),$.length===0)break;if($[0]!==":"||$.length==1)return;if($=$.substring(1),$[0]===":"){if(X>=0)return;if(X=Q,$=$.substring(1),$.length===0)break}}if($.length!==0)return;if(Q<wE){if(X<0)return;let Y=wE-Q;for(let G=Q-1;G>=X;G--)Z[G+Y]=Z[G];for(let G=X+Y-1;G>=X;G--)Z[G]=0}else if(X>=0)return;return Z}function rp6($){let Z=0,X=0;for(Z=0;Z<$.length&&WZ0<=$.charCodeAt(Z)&&$.charCodeAt(Z)<=fo1;Z++)if(X=X*10+($.charCodeAt(Z)-WZ0),X>=Hi0)return{n:Hi0,c:Z,ok:!1};if(Z===0)return{n:0,c:0,ok:!1};return{n:X,c:Z,ok:!0}}function ap6($){let Z=0,X=0;for(X=0;X<$.length;X++){if(WZ0<=$.charCodeAt(X)&&$.charCodeAt(X)<=fo1)Z*=16,Z+=$.charCodeAt(X)-WZ0;else if(xo1<=$.charCodeAt(X)&&$.charCodeAt(X)<=pp6)Z*=16,Z+=$.charCodeAt(X)-xo1+10;else if(vo1<=$.charCodeAt(X)&&$.charCodeAt(X)<=np6)Z*=16,Z+=$.charCodeAt(X)-vo1+10;else break;if(Z>=Hi0)return{n:0,c:X,ok:!1}}if(X===0)return{n:0,c:X,ok:!1};return{n:Z,c:X,ok:!0}}});var Li0=_((co1)=>{Object.defineProperty(co1,"__esModule",{value:!0});co1.Servers=co1.ServerImpl=void 0;co1.isIPV4OrHostname=uo1;co1.hostPort=Oi0;var Ui0=BE(),Fi0=SJ(),Bi0=Ni0(),Zt6=fB(),Xt6=aY();function uo1($){if($.indexOf("[")!==-1||$.indexOf("::")!==-1)return!1;if($.indexOf(".")!==-1)return!0;if($.split(":").length<=2)return!0;return!1}function wi0($){return!uo1($)}function Qt6($){let X=$.toUpperCase().indexOf("::FFFF:");if(X!==-1&&$.indexOf(".")!==-1){let Q=$.substring(X+7);return Q=Q.replace("[",""),Q.replace("]","")}return $}function Oi0($){if($=$.trim(),$.match(/^(.*:\/\/)(.*)/m))$=$.replace(/^(.*:\/\/)(.*)/gm,"$2");if($=Qt6($),wi0($)&&$.indexOf("[")===-1)$=`[${$}]`;let Z=wi0($)?$.match(/(]:)(\d+)/):$.match(/(:)(\d+)/),X=Z&&Z.length===3&&Z[1]&&Z[2]?parseInt(Z[2]):Zt6.DEFAULT_PORT,Y=new URL(`${X===80?"https":"http"}://${$}`);Y.port=`${X}`;let G=Y.hostname;if(G.charAt(0)==="[")G=G.substring(1,G.length-1);return{listen:Y.host,hostname:G,port:X}}class Vb{src;listen;hostname;port;didConnect;reconnects;lastConnect;gossiped;tlsName;resolves;constructor($,Z=!1){this.src=$,this.tlsName="";let X=Oi0($);this.listen=X.listen,this.hostname=X.hostname,this.port=X.port,this.didConnect=!1,this.reconnects=0,this.lastConnect=0,this.gossiped=Z}toString(){return this.listen}async resolve($){if(!$.fn||$.resolve===!1)return[this];let Z=[];if((0,Bi0.isIP)(this.hostname))return[this];else{let X=await $.fn(this.hostname);if($.debug)console.log(`resolve ${this.hostname} = ${X.join(",")}`);for(let Q of X){let Y=this.port===80?"https":"http",G=new URL(`${Y}://${wi0(Q)?"["+Q+"]":Q}`);G.port=`${this.port}`;let J=new Vb(G.host,!1);J.tlsName=this.hostname,Z.push(J)}}if($.randomize)(0,Fi0.shuffle)(Z);return this.resolves=Z,Z}}co1.ServerImpl=Vb;class HZ0{firstSelect;servers;currentServer;tlsName;randomize;constructor($={}){this.firstSelect=!0,this.servers=[],this.tlsName="",this.randomize=$.randomize||!1}setServers($){if(!Array.isArray($)||$.length===0)throw Xt6.InvalidArgumentError.format("servers","cannot be empty");let Z=(0,Ui0.getUrlParseFn)(),X=new Map;for(let Y of this.servers)X.set(Y.listen,Y);let Q=[];for(let Y of $){Y=Z?Z(Y):Y;let{listen:G}=Oi0(Y),J=X.get(G);if(J)J.gossiped=!1,Q.push(J);else Q.push(new Vb(Y))}if(this.randomize)(0,Fi0.shuffle)(Q);if(this.servers=Q,this.currentServer===void 0||!Q.includes(this.currentServer))this.currentServer=Q[0],this.firstSelect=!0}clear(){this.servers.length=0}updateTLSName(){let $=this.getCurrentServer();if(!(0,Bi0.isIP)($.hostname))this.tlsName=$.hostname,this.servers.forEach((Z)=>{if(Z.gossiped)Z.tlsName=this.tlsName})}getCurrentServer(){return this.currentServer}addServer($,Z=!1){let X=(0,Ui0.getUrlParseFn)();$=X?X($):$;let Q=new Vb($,Z);if((0,Bi0.isIP)(Q.hostname))Q.tlsName=this.tlsName;this.servers.push(Q)}selectServer(){if(this.firstSelect)return this.firstSelect=!1,this.currentServer;let $=this.servers.shift();if($)this.servers.push($),this.currentServer=$;return $}removeCurrentServer(){this.removeServer(this.currentServer)}removeServer($){if($){let Z=this.servers.indexOf($);this.servers.splice(Z,1)}}snapshot(){return HZ0.freezeAll(this.servers)}snapshotForHandler(){let $=this.currentServer;if(!$)return this.snapshot();let Z=this.servers.indexOf($);if(Z<=0)return this.snapshot();return HZ0.freezeAll([$,...this.servers.slice(0,Z),...this.servers.slice(Z+1)])}static freezeAll($){return $.map((Z)=>Object.freeze({hostname:Z.hostname,port:Z.port,listen:Z.listen,src:Z.src,tlsName:Z.tlsName,reconnects:Z.reconnects,lastConnect:Z.lastConnect,gossiped:Z.gossiped,didConnect:Z.didConnect}))}find($){return this.servers.find((Z)=>Z.listen===$.listen)}setCurrent($){this.currentServer=$}length(){return this.servers.length}next(){return this.servers.length?this.servers[0]:void 0}getServers(){return this.servers}update($,Z){let X=[],Q=[],Y=(0,Ui0.getUrlParseFn)(),G=new Map;if($.connect_urls&&$.connect_urls.length>0)$.connect_urls.forEach((K)=>{K=Y?Y(K,Z):K;let W=new Vb(K,!0);G.set(K,W)});let J=[];if(this.servers.forEach((K,W)=>{let H=K.listen;if(K.gossiped&&this.currentServer.listen!==H&&G.get(H)===void 0)J.push(W);G.delete(H)}),J.reverse(),J.forEach((K)=>{let W=this.servers.splice(K,1);Q=Q.concat(W[0].listen)}),G.forEach((K,W)=>{this.servers.push(K),X.push(W)}),this.randomize&&X.length>0){let K=this.currentServer,W=this.servers.filter((H)=>H!==K);(0,Fi0.shuffle)(W),this.servers=K?[K,...W]:W}return{added:X,deleted:Q}}}co1.Servers=HZ0});var NZ0=_((io1)=>{Object.defineProperty(io1,"__esModule",{value:!0});io1.QueuedIteratorImpl=void 0;var Di0=SJ(),do1=aY();class mo1{inflight;processed;received;noIterator;iterClosed;done;signal;yields;filtered;pendingFiltered;ctx;_data;err;time;profile;yielding;didBreak;constructor(){this.inflight=0,this.filtered=0,this.pendingFiltered=0,this.processed=0,this.received=0,this.noIterator=!1,this.done=!1,this.signal=(0,Di0.deferred)(),this.yields=[],this.iterClosed=(0,Di0.deferred)(),this.time=0,this.yielding=!1,this.didBreak=!1,this.profile=!1}[Symbol.asyncIterator](){return this.iterate()}push($){if(this.done)return;if(this.didBreak){if(typeof $==="function"){let Z=$;try{Z()}catch(X){}}return}if(typeof $==="function")this.pendingFiltered++;this.yields.push($),this.signal.resolve()}async*iterate(){if(this.noIterator)throw new do1.InvalidOperationError("iterator cannot be used when a callback is registered");if(this.yielding)throw new do1.InvalidOperationError("iterator is already yielding");this.yielding=!0;try{while(!0){if(this.yields.length===0)await this.signal;if(this.err)throw this.err;let $=this.yields;this.inflight=$.length,this.yields=[];for(let Z=0;Z<$.length;Z++){if(typeof $[Z]==="function"){this.pendingFiltered--;let Q=$[Z];try{Q()}catch(Y){throw Y}if(this.err)throw this.err;continue}this.processed++,this.inflight--;let X=this.profile?Date.now():0;yield $[Z],this.time=this.profile?Date.now()-X:0}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,Di0.deferred)()}}finally{this.didBreak=!0,this.stop()}}stop($){if(this.done)return;this.err=$,this.done=!0,this.signal.resolve(),this.iterClosed.resolve($)}getProcessed(){return this.noIterator?this.received:this.processed}getPending(){return this.yields.length+this.inflight-this.pendingFiltered}getReceived(){return this.received-this.filtered}}io1.QueuedIteratorImpl=mo1});var Ei0=_((oo1)=>{Object.defineProperty(oo1,"__esModule",{value:!0});oo1.MuxSubscription=void 0;var Kt6=fB(),po1=aY();class to1{baseInbox;reqs;constructor(){this.reqs=new Map}size(){return this.reqs.size}init($){return this.baseInbox=`${(0,Kt6.createInbox)($)}.`,this.baseInbox}add($){if(!isNaN($.received))$.received=0;this.reqs.set($.token,$)}get($){return this.reqs.get($)}cancel($){this.reqs.delete($.token)}getToken($){let Z=$.subject||"";if(Z.indexOf(this.baseInbox)===0)return Z.substring(this.baseInbox.length);return null}all(){return Array.from(this.reqs.values())}handleError($,Z){if($)return this.all().forEach((X)=>{X.resolver(Z,{})}),!0;if(Z.operation==="publish"){let X=this.all().find((Q)=>{return Q.requestSubject===Z.subject});if(X)return X.resolver(Z,{}),!0}return!1}dispatcher(){return($,Z)=>{let X=this.getToken(Z);if(X){let Q=this.get(X);if(Q){if($===null)$=Z?.data?.length===0&&Z.headers?.code===503?new po1.NoRespondersError(Q.requestSubject):null;Q.resolver($,Z)}}}}close(){let $=new po1.RequestError("connection closed");this.reqs.forEach((Z)=>{Z.resolver($,{})})}}oo1.MuxSubscription=to1});var zi0=_((so1)=>{Object.defineProperty(so1,"__esModule",{value:!0});so1.Heartbeat=void 0;var Wt6=SJ();class ao1{ph;interval;maxOut;timer;pendings;constructor($,Z,X){this.ph=$,this.interval=Z,this.maxOut=X,this.pendings=[]}start(){this.cancel(),this._schedule()}cancel($){if(this.timer)clearTimeout(this.timer),this.timer=void 0;if(this._reset(),$)this.ph.disconnect()}_schedule(){this.timer=setTimeout(()=>{if(this.ph.dispatchStatus({type:"ping",pendingPings:this.pendings.length+1}),this.pendings.length===this.maxOut){this.cancel(!0);return}let $=(0,Wt6.deferred)();this.ph.flush($).then(()=>{this._reset()}).catch(()=>{this.cancel()}),this.pendings.push($),this._schedule()},this.interval)}_reset(){this.pendings=this.pendings.filter(($)=>{return $.resolve(),!1})}}so1.Heartbeat=ao1});var Ai0=_((Qr1)=>{Object.defineProperty(Qr1,"__esModule",{value:!0});Qr1.DenoBuffer=Qr1.MAX_SIZE=Qr1.AssertionError=void 0;Qr1.assert=Zr1;Qr1.concat=Xr1;Qr1.append=Nt6;Qr1.readAll=Ut6;Qr1.writeAll=Ft6;var Ht6=rY();class ji0 extends Error{constructor($){super($);this.name="AssertionError"}}Qr1.AssertionError=ji0;function Zr1($,Z="Assertion failed."){if(!$)throw new ji0(Z)}var $r1=32768;Qr1.MAX_SIZE=4294967294;function UZ0($,Z,X=0){let Q=Z.byteLength-X;if($.byteLength>Q)$=$.subarray(0,Q);return Z.set($,X),$.byteLength}function Xr1($,Z){if($===void 0&&Z===void 0)return new Uint8Array(0);if($===void 0)return Z;if(Z===void 0)return $;let X=new Uint8Array($.length+Z.length);return X.set($,0),X.set(Z,$.length),X}function Nt6($,Z){return Xr1($,Uint8Array.of(Z))}class Pi0{_buf;_off;constructor($){if(this._off=0,$==null){this._buf=new Uint8Array(0);return}this._buf=new Uint8Array($)}bytes($={copy:!0}){if($.copy===!1)return this._buf.subarray(this._off);return this._buf.slice(this._off)}empty(){return this._buf.byteLength<=this._off}get length(){return this._buf.byteLength-this._off}get capacity(){return this._buf.buffer.byteLength}truncate($){if($===0){this.reset();return}if($<0||$>this.length)throw Error("bytes.Buffer: truncation out of range");this._reslice(this._off+$)}reset(){this._reslice(0),this._off=0}_tryGrowByReslice($){let Z=this._buf.byteLength;if($<=this.capacity-Z)return this._reslice(Z+$),Z;return-1}_reslice($){Zr1($<=this._buf.buffer.byteLength),this._buf=new Uint8Array(this._buf.buffer,0,$)}readByte(){let $=new Uint8Array(1);if(this.read($))return $[0];return null}read($){if(this.empty()){if(this.reset(),$.byteLength===0)return 0;return null}let Z=UZ0(this._buf.subarray(this._off),$);return this._off+=Z,Z}writeByte($){return this.write(Uint8Array.of($))}writeString($){return this.write(Ht6.TE.encode($))}write($){let Z=this._grow($.byteLength);return UZ0($,this._buf,Z)}_grow($){let Z=this.length;if(Z===0&&this._off!==0)this.reset();let X=this._tryGrowByReslice($);if(X>=0)return X;let Q=this.capacity;if($<=Math.floor(Q/2)-Z)UZ0(this._buf.subarray(this._off),this._buf);else if(Q+$>Qr1.MAX_SIZE)throw Error("The buffer cannot be grown beyond the maximum size.");else{let Y=new Uint8Array(Math.min(2*Q+$,Qr1.MAX_SIZE));UZ0(this._buf.subarray(this._off),Y),this._buf=Y}return this._off=0,this._reslice(Math.min(Z+$,Qr1.MAX_SIZE)),Z}grow($){if($<0)throw Error("Buffer._grow: negative count");let Z=this._grow($);this._reslice(Z)}readFrom($){let Z=0,X=new Uint8Array($r1);while(!0){let Q=this.capacity-this.length<$r1,Y=Q?X:new Uint8Array(this._buf.buffer,this.length),G=$.read(Y);if(G===null)return Z;if(Q)this.write(Y.subarray(0,G));else this._reslice(this.length+G);Z+=G}}}Qr1.DenoBuffer=Pi0;function Ut6($){let Z=new Pi0;return Z.readFrom($),Z.bytes()}function Ft6($,Z){let X=0;while(X<Z.length)X+=$.write(Z.subarray(X))}});var Ii0=_((Wr1)=>{Object.defineProperty(Wr1,"__esModule",{value:!0});Wr1.cc=Wr1.State=Wr1.Parser=Wr1.Kind=void 0;Wr1.describe=zt6;var Ti0=Ai0(),Ri0=rY();Wr1.Kind={OK:0,ERR:1,MSG:2,INFO:3,PING:4,PONG:5};function zt6($){let Z,X="";switch($.kind){case Wr1.Kind.MSG:Z="MSG";break;case Wr1.Kind.OK:Z="OK";break;case Wr1.Kind.ERR:Z="ERR",X=Ri0.TD.decode($.data);break;case Wr1.Kind.PING:Z="PING";break;case Wr1.Kind.PONG:Z="PONG";break;case Wr1.Kind.INFO:Z="INFO",X=Ri0.TD.decode($.data)}return`${Z}: ${X}`}function Gr1(){let $={};return $.sid=-1,$.hdr=-1,$.size=-1,$}var Jr1=48,jt6=57,kb=67108864;class Kr1{dispatcher;state;as;drop;hdr;ma;argBuf;msgBuf;constructor($){this.dispatcher=$,this.state=Wr1.State.OP_START,this.as=0,this.drop=0,this.hdr=0}parse($){let Z;for(Z=0;Z<$.length;Z++){let X=$[Z];switch(this.state){case Wr1.State.OP_START:switch(X){case Wr1.cc.M:case Wr1.cc.m:this.state=Wr1.State.OP_M,this.hdr=-1,this.ma=Gr1();break;case Wr1.cc.H:case Wr1.cc.h:this.state=Wr1.State.OP_H,this.hdr=0,this.ma=Gr1();break;case Wr1.cc.P:case Wr1.cc.p:this.state=Wr1.State.OP_P;break;case Wr1.cc.PLUS:this.state=Wr1.State.OP_PLUS;break;case Wr1.cc.MINUS:this.state=Wr1.State.OP_MINUS;break;case Wr1.cc.I:case Wr1.cc.i:this.state=Wr1.State.OP_I;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_H:switch(X){case Wr1.cc.M:case Wr1.cc.m:this.state=Wr1.State.OP_M;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_M:switch(X){case Wr1.cc.S:case Wr1.cc.s:this.state=Wr1.State.OP_MS;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MS:switch(X){case Wr1.cc.G:case Wr1.cc.g:this.state=Wr1.State.OP_MSG;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MSG:switch(X){case Wr1.cc.SPACE:case Wr1.cc.TAB:this.state=Wr1.State.OP_MSG_SPC;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MSG_SPC:switch(X){case Wr1.cc.SPACE:case Wr1.cc.TAB:continue;default:this.state=Wr1.State.MSG_ARG,this.as=Z}break;case Wr1.State.MSG_ARG:switch(X){case Wr1.cc.CR:this.drop=1;break;case Wr1.cc.NL:{let Q=this.argBuf?this.argBuf.bytes():$.subarray(this.as,Z-this.drop);this.processMsgArgs(Q),this.drop=0,this.as=Z+1,this.state=Wr1.State.MSG_PAYLOAD,Z=this.as+this.ma.size-1;break}default:if(this.argBuf)this.argBuf.writeByte(X)}break;case Wr1.State.MSG_PAYLOAD:if(this.msgBuf)if(this.msgBuf.length>=this.ma.size){let Q=this.msgBuf.bytes({copy:!1});this.dispatcher.push({kind:Wr1.Kind.MSG,msg:this.ma,data:Q}),this.argBuf=void 0,this.msgBuf=void 0,this.state=Wr1.State.MSG_END}else{let Q=this.ma.size-this.msgBuf.length,Y=$.length-Z;if(Y<Q)Q=Y;if(Q>0)this.msgBuf.write($.subarray(Z,Z+Q)),Z=Z+Q-1;else this.msgBuf.writeByte(X)}else if(Z-this.as>=this.ma.size)this.dispatcher.push({kind:Wr1.Kind.MSG,msg:this.ma,data:$.subarray(this.as,Z)}),this.argBuf=void 0,this.msgBuf=void 0,this.state=Wr1.State.MSG_END;break;case Wr1.State.MSG_END:switch(X){case Wr1.cc.NL:this.drop=0,this.as=Z+1,this.state=Wr1.State.OP_START;break;default:continue}break;case Wr1.State.OP_PLUS:switch(X){case Wr1.cc.O:case Wr1.cc.o:this.state=Wr1.State.OP_PLUS_O;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PLUS_O:switch(X){case Wr1.cc.K:case Wr1.cc.k:this.state=Wr1.State.OP_PLUS_OK;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PLUS_OK:switch(X){case Wr1.cc.NL:this.dispatcher.push({kind:Wr1.Kind.OK}),this.drop=0,this.state=Wr1.State.OP_START;break}break;case Wr1.State.OP_MINUS:switch(X){case Wr1.cc.E:case Wr1.cc.e:this.state=Wr1.State.OP_MINUS_E;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MINUS_E:switch(X){case Wr1.cc.R:case Wr1.cc.r:this.state=Wr1.State.OP_MINUS_ER;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MINUS_ER:switch(X){case Wr1.cc.R:case Wr1.cc.r:this.state=Wr1.State.OP_MINUS_ERR;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MINUS_ERR:switch(X){case Wr1.cc.SPACE:case Wr1.cc.TAB:this.state=Wr1.State.OP_MINUS_ERR_SPC;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_MINUS_ERR_SPC:switch(X){case Wr1.cc.SPACE:case Wr1.cc.TAB:continue;default:this.state=Wr1.State.MINUS_ERR_ARG,this.as=Z}break;case Wr1.State.MINUS_ERR_ARG:switch(X){case Wr1.cc.CR:this.drop=1;break;case Wr1.cc.NL:{let Q;if(this.argBuf)Q=this.argBuf.bytes(),this.argBuf=void 0;else Q=$.subarray(this.as,Z-this.drop);this.dispatcher.push({kind:Wr1.Kind.ERR,data:Q}),this.drop=0,this.as=Z+1,this.state=Wr1.State.OP_START;break}default:if(this.argBuf)this.argBuf.write(Uint8Array.of(X))}break;case Wr1.State.OP_P:switch(X){case Wr1.cc.I:case Wr1.cc.i:this.state=Wr1.State.OP_PI;break;case Wr1.cc.O:case Wr1.cc.o:this.state=Wr1.State.OP_PO;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PO:switch(X){case Wr1.cc.N:case Wr1.cc.n:this.state=Wr1.State.OP_PON;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PON:switch(X){case Wr1.cc.G:case Wr1.cc.g:this.state=Wr1.State.OP_PONG;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PONG:switch(X){case Wr1.cc.NL:this.dispatcher.push({kind:Wr1.Kind.PONG}),this.drop=0,this.state=Wr1.State.OP_START;break}break;case Wr1.State.OP_PI:switch(X){case Wr1.cc.N:case Wr1.cc.n:this.state=Wr1.State.OP_PIN;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PIN:switch(X){case Wr1.cc.G:case Wr1.cc.g:this.state=Wr1.State.OP_PING;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_PING:switch(X){case Wr1.cc.NL:this.dispatcher.push({kind:Wr1.Kind.PING}),this.drop=0,this.state=Wr1.State.OP_START;break}break;case Wr1.State.OP_I:switch(X){case Wr1.cc.N:case Wr1.cc.n:this.state=Wr1.State.OP_IN;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_IN:switch(X){case Wr1.cc.F:case Wr1.cc.f:this.state=Wr1.State.OP_INF;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_INF:switch(X){case Wr1.cc.O:case Wr1.cc.o:this.state=Wr1.State.OP_INFO;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_INFO:switch(X){case Wr1.cc.SPACE:case Wr1.cc.TAB:this.state=Wr1.State.OP_INFO_SPC;break;default:throw this.fail($.subarray(Z))}break;case Wr1.State.OP_INFO_SPC:switch(X){case Wr1.cc.SPACE:case Wr1.cc.TAB:continue;default:this.state=Wr1.State.INFO_ARG,this.as=Z}break;case Wr1.State.INFO_ARG:switch(X){case Wr1.cc.CR:this.drop=1;break;case Wr1.cc.NL:{let Q;if(this.argBuf)Q=this.argBuf.bytes(),this.argBuf=void 0;else Q=$.subarray(this.as,Z-this.drop);this.dispatcher.push({kind:Wr1.Kind.INFO,data:Q}),this.drop=0,this.as=Z+1,this.state=Wr1.State.OP_START;break}default:if(this.argBuf)this.argBuf.writeByte(X)}break;default:throw this.fail($.subarray(Z))}}if((this.state===Wr1.State.MSG_ARG||this.state===Wr1.State.MINUS_ERR_ARG||this.state===Wr1.State.INFO_ARG)&&!this.argBuf)this.argBuf=new Ti0.DenoBuffer($.subarray(this.as,Z-this.drop));if(this.state===Wr1.State.MSG_PAYLOAD&&!this.msgBuf){if(!this.argBuf)this.cloneMsgArg();this.msgBuf=new Ti0.DenoBuffer($.subarray(this.as))}}cloneMsgArg(){let $=this.ma.subject.length,Z=this.ma.reply?this.ma.reply.length:0,X=new Uint8Array($+Z);if(X.set(this.ma.subject),this.ma.reply)X.set(this.ma.reply,$);if(this.argBuf=new Ti0.DenoBuffer(X),this.ma.subject=X.subarray(0,$),this.ma.reply)this.ma.reply=X.subarray($)}processMsgArgs($){if(this.hdr>=0)return this.processHeaderMsgArgs($);let Z=[],X=-1;for(let Q=0;Q<$.length;Q++)switch($[Q]){case Wr1.cc.SPACE:case Wr1.cc.TAB:case Wr1.cc.CR:case Wr1.cc.NL:if(X>=0)Z.push($.subarray(X,Q)),X=-1;break;default:if(X<0)X=Q}if(X>=0)Z.push($.subarray(X));switch(Z.length){case 3:this.ma.subject=Z[0],this.ma.sid=this.protoParseInt(Z[1]),this.ma.reply=void 0,this.ma.size=this.protoParseInt(Z[2],kb);break;case 4:this.ma.subject=Z[0],this.ma.sid=this.protoParseInt(Z[1]),this.ma.reply=Z[2],this.ma.size=this.protoParseInt(Z[3],kb);break;default:throw this.fail($,"processMsgArgs Parse Error")}if(this.ma.sid<0)throw this.fail($,"processMsgArgs Bad or Missing Sid Error");if(this.ma.size<0)throw this.fail($,"processMsgArgs Bad or Missing Size Error")}fail($,Z=""){if(!Z)Z=`parse error [${this.state}]`;else Z=`${Z} [${this.state}]`;return Error(`${Z}: ${Ri0.TD.decode($)}`)}processHeaderMsgArgs($){let Z=[],X=-1;for(let Q=0;Q<$.length;Q++)switch($[Q]){case Wr1.cc.SPACE:case Wr1.cc.TAB:case Wr1.cc.CR:case Wr1.cc.NL:if(X>=0)Z.push($.subarray(X,Q)),X=-1;break;default:if(X<0)X=Q}if(X>=0)Z.push($.subarray(X));switch(Z.length){case 4:this.ma.subject=Z[0],this.ma.sid=this.protoParseInt(Z[1]),this.ma.reply=void 0,this.ma.hdr=this.protoParseInt(Z[2],kb),this.ma.size=this.protoParseInt(Z[3],kb);break;case 5:this.ma.subject=Z[0],this.ma.sid=this.protoParseInt(Z[1]),this.ma.reply=Z[2],this.ma.hdr=this.protoParseInt(Z[3],kb),this.ma.size=this.protoParseInt(Z[4],kb);break;default:throw this.fail($,"processHeaderMsgArgs Parse Error")}if(this.ma.sid<0)throw this.fail($,"processHeaderMsgArgs Bad or Missing Sid Error");if(this.ma.hdr<0||this.ma.hdr>this.ma.size)throw this.fail($,"processHeaderMsgArgs Bad or Missing Header Size Error");if(this.ma.size<0)throw this.fail($,"processHeaderMsgArgs Bad or Missing Size Error")}protoParseInt($,Z){if($.length===0||$.length>15)return-1;let X=0;for(let Q=0;Q<$.length;Q++){if($[Q]<Jr1||$[Q]>jt6)return-1;X=X*10+($[Q]-Jr1)}return Z!==void 0&&X>Z?-1:X}}Wr1.Parser=Kr1;Wr1.State={OP_START:0,OP_PLUS:1,OP_PLUS_O:2,OP_PLUS_OK:3,OP_MINUS:4,OP_MINUS_E:5,OP_MINUS_ER:6,OP_MINUS_ERR:7,OP_MINUS_ERR_SPC:8,MINUS_ERR_ARG:9,OP_M:10,OP_MS:11,OP_MSG:12,OP_MSG_SPC:13,MSG_ARG:14,MSG_PAYLOAD:15,MSG_END:16,OP_H:17,OP_P:18,OP_PI:19,OP_PIN:20,OP_PING:21,OP_PO:22,OP_PON:23,OP_PONG:24,OP_I:25,OP_IN:26,OP_INF:27,OP_INFO:28,OP_INFO_SPC:29,INFO_ARG:30};Wr1.cc={CR:13,E:69,e:101,F:70,f:102,G:71,g:103,H:72,h:104,I:73,i:105,K:75,k:107,M:77,m:109,MINUS:45,N:78,n:110,NL:10,O:79,o:111,P:80,p:112,PLUS:43,R:82,r:114,S:83,s:115,SPACE:32,TAB:9}});var wZ0=_((Nr1)=>{Object.defineProperty(Nr1,"__esModule",{value:!0});Nr1.MsgHdrsImpl=void 0;Nr1.canonicalMIMEHeaderKey=Mi0;Nr1.headers=Tt6;var Hr1=rY(),CJ=fB(),BZ0=aY();function Mi0($){let N=!0,U=Array($.length);for(let F=0;F<$.length;F++){let B=$.charCodeAt(F);if(B===58||B<33||B>126)throw BZ0.InvalidArgumentError.format("header",`'${$[F]}' is not a valid character in a header name`);if(N&&97<=B&&B<=122)B-=32;else if(!N&&65<=B&&B<=90)B+=32;U[F]=B,N=B==45}return String.fromCharCode(...U)}function Tt6($=0,Z=""){if($===0&&Z!=="")throw BZ0.InvalidArgumentError.format("code","is required");else if($>0&&Z==="")throw BZ0.InvalidArgumentError.format("description","is required");return new Sb($,Z)}var qi0="NATS/1.0";class Sb{_code;headers;_description;constructor($=0,Z=""){this._code=$,this._description=Z,this.headers=new Map}[Symbol.iterator](){return this.headers.entries()}size(){return this.headers.size}equals($){if($&&this.headers.size===$.headers.size&&this._code===$._code){for(let[Z,X]of this.headers){let Q=$.values(Z);if(X.length!==Q.length)return!1;let Y=[...X].sort(),G=[...Q].sort();for(let J=0;J<Y.length;J++)if(Y[J]!==G[J])return!1}return!0}return!1}static decode($){let Z=new Sb,Q=Hr1.TD.decode($).split(`\r
 `),Y=Q[0];if(Y!==qi0){let G=Y.replace(qi0,"").trim();if(G.length>0){if(Z._code=parseInt(G,10),isNaN(Z._code))Z._code=0;let J=Z._code.toString();G=G.replace(J,""),Z._description=G.trim()}}if(Q.length>=1)Q.slice(1).map((G)=>{if(G){let J=G.indexOf(":");if(J>-1){let K=G.slice(0,J),W=G.slice(J+1).trim();Z.append(K,W)}}});return Z}toString(){if(this.headers.size===0&&this._code===0)return"";let $=qi0;if(this._code>0&&this._description!=="")$+=` ${this._code} ${this._description}`;for(let[Z,X]of this.headers)for(let Q=0;Q<X.length;Q++)$=`${$}\r
 ${Z}: ${X[Q]}`;return`${$}\r
@@ -2931,7 +2931,7 @@ Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.ht
     However, a future version may change this behavior to prefer the ENV static credentials.
     Please ensure that your environment only sets either the AWS_PROFILE or the
     AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
-`),pp8=!0}throw new Cc.CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.",{logger:$.logger,tryNextLink:!0})}return $.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv"),cG1($)()},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");let{ssoStartUrl:X,ssoAccountId:Q,ssoRegion:Y,ssoRoleName:G,ssoSession:J}=$;if(!X&&!Q&&!Y&&!G&&!J)throw new Cc.CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).",{logger:$.logger});let{fromSSO:K}=await Promise.resolve().then(() => (e31(),s31));return K($)(Z)},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");let{fromIni:X}=await Promise.resolve().then(() => (np8(),ip8));return X($)(Z)},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");let{fromProcess:X}=await Promise.resolve().then(() => (RJ1(),TJ1));return X($)(Z)},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");let{fromTokenFile:X}=await Promise.resolve().then(() => (SJ1(),kJ1));return X($)(Z)},async()=>{return $.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::remoteProvider"),(await Fd8($))()},async()=>{throw new Cc.CredentialsProviderError("Could not load credentials from any providers",{tryNextLink:!1,logger:$.logger})}],nD$),nD$=($)=>$?.expiration!==void 0&&$.expiration.getTime()-Date.now()<300000;var tp8=O(()=>{lG1();Bd8();Cc=k(K4(),1)});var op8=O(()=>{tp8()});var rp8,u7;var vJ1=O(()=>{rp8=k(G5(),1);u7=class u7 extends rp8.ServiceException{constructor($){super($);Object.setPrototypeOf(this,u7.prototype)}}});var tR0,oR0,rR0,aR0,sR0,eR0,$I0,ZI0,XI0,QI0,YI0,GI0;var xJ1=O(()=>{vJ1();tR0=class tR0 extends u7{name="ExpiredTokenException";$fault="client";constructor($){super({name:"ExpiredTokenException",$fault:"client",...$});Object.setPrototypeOf(this,tR0.prototype)}};oR0=class oR0 extends u7{name="MalformedPolicyDocumentException";$fault="client";constructor($){super({name:"MalformedPolicyDocumentException",$fault:"client",...$});Object.setPrototypeOf(this,oR0.prototype)}};rR0=class rR0 extends u7{name="PackedPolicyTooLargeException";$fault="client";constructor($){super({name:"PackedPolicyTooLargeException",$fault:"client",...$});Object.setPrototypeOf(this,rR0.prototype)}};aR0=class aR0 extends u7{name="RegionDisabledException";$fault="client";constructor($){super({name:"RegionDisabledException",$fault:"client",...$});Object.setPrototypeOf(this,aR0.prototype)}};sR0=class sR0 extends u7{name="IDPRejectedClaimException";$fault="client";constructor($){super({name:"IDPRejectedClaimException",$fault:"client",...$});Object.setPrototypeOf(this,sR0.prototype)}};eR0=class eR0 extends u7{name="InvalidIdentityTokenException";$fault="client";constructor($){super({name:"InvalidIdentityTokenException",$fault:"client",...$});Object.setPrototypeOf(this,eR0.prototype)}};$I0=class $I0 extends u7{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor($){super({name:"IDPCommunicationErrorException",$fault:"client",...$});Object.setPrototypeOf(this,$I0.prototype)}};ZI0=class ZI0 extends u7{name="InvalidAuthorizationMessageException";$fault="client";constructor($){super({name:"InvalidAuthorizationMessageException",$fault:"client",...$});Object.setPrototypeOf(this,ZI0.prototype)}};XI0=class XI0 extends u7{name="ExpiredTradeInTokenException";$fault="client";constructor($){super({name:"ExpiredTradeInTokenException",$fault:"client",...$});Object.setPrototypeOf(this,XI0.prototype)}};QI0=class QI0 extends u7{name="JWTPayloadSizeExceededException";$fault="client";constructor($){super({name:"JWTPayloadSizeExceededException",$fault:"client",...$});Object.setPrototypeOf(this,QI0.prototype)}};YI0=class YI0 extends u7{name="OutboundWebIdentityFederationDisabledException";$fault="client";constructor($){super({name:"OutboundWebIdentityFederationDisabledException",$fault:"client",...$});Object.setPrototypeOf(this,YI0.prototype)}};GI0=class GI0 extends u7{name="SessionDurationEscalationException";$fault="client";constructor($){super({name:"SessionDurationEscalationException",$fault:"client",...$});Object.setPrototypeOf(this,GI0.prototype)}}});var fJ1,ap8,pD$,gG,tD$,oD$,rD$,aD$,sD$,eD$,$E$,ZE$,XE$,QE$,YE$,GE$,sp8,JE$,KE$,WE$,HE$,NE$,bJ1,UE$,FE$,BE$,wE$,OE$,LE$,DE$,EE$,sv,zE$,jE$,PE$,AE$,TE$,RE$,IE$,qE$,ME$,VE$,kE$,SE$,CE$,_E$,vE$,ep8,xE$,fE$,JI0,bE$,yJ1,$t8,Zt8,Xt8,Qt8,Yt8,Gt8,Jt8,Kt8,Wt8,Ht8,Nt8;var CY=O(()=>{xJ1();vJ1();fJ1=k(uK(),1),ap8=fJ1.TypeRegistry.for("smithy.ts.sdk.synthetic.com.amazonaws.sts"),pD$=[-3,"smithy.ts.sdk.synthetic.com.amazonaws.sts","STSServiceException",0,[],[]];ap8.registerError(pD$,u7);gG=fJ1.TypeRegistry.for("com.amazonaws.sts"),tD$=[-3,"com.amazonaws.sts","ExpiredTokenException",{["awsQueryError"]:["ExpiredTokenException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(tD$,tR0);oD$=[-3,"com.amazonaws.sts","ExpiredTradeInTokenException",{["awsQueryError"]:["ExpiredTradeInTokenException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(oD$,XI0);rD$=[-3,"com.amazonaws.sts","IDPCommunicationErrorException",{["awsQueryError"]:["IDPCommunicationError",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(rD$,$I0);aD$=[-3,"com.amazonaws.sts","IDPRejectedClaimException",{["awsQueryError"]:["IDPRejectedClaim",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(aD$,sR0);sD$=[-3,"com.amazonaws.sts","InvalidAuthorizationMessageException",{["awsQueryError"]:["InvalidAuthorizationMessageException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(sD$,ZI0);eD$=[-3,"com.amazonaws.sts","InvalidIdentityTokenException",{["awsQueryError"]:["InvalidIdentityToken",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(eD$,eR0);$E$=[-3,"com.amazonaws.sts","JWTPayloadSizeExceededException",{["awsQueryError"]:["JWTPayloadSizeExceededException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError($E$,QI0);ZE$=[-3,"com.amazonaws.sts","MalformedPolicyDocumentException",{["awsQueryError"]:["MalformedPolicyDocument",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(ZE$,oR0);XE$=[-3,"com.amazonaws.sts","OutboundWebIdentityFederationDisabledException",{["awsQueryError"]:["OutboundWebIdentityFederationDisabledException",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(XE$,YI0);QE$=[-3,"com.amazonaws.sts","PackedPolicyTooLargeException",{["awsQueryError"]:["PackedPolicyTooLarge",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(QE$,rR0);YE$=[-3,"com.amazonaws.sts","RegionDisabledException",{["awsQueryError"]:["RegionDisabledException",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(YE$,aR0);GE$=[-3,"com.amazonaws.sts","SessionDurationEscalationException",{["awsQueryError"]:["SessionDurationEscalationException",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(GE$,GI0);sp8=[ap8,gG],JE$=[0,"com.amazonaws.sts","accessKeySecretType",8,0],KE$=[0,"com.amazonaws.sts","clientTokenType",8,0],WE$=[0,"com.amazonaws.sts","SAMLAssertionType",8,0],HE$=[0,"com.amazonaws.sts","tradeInTokenType",8,0],NE$=[0,"com.amazonaws.sts","webIdentityTokenType",8,0],bJ1=[3,"com.amazonaws.sts","AssumedRoleUser",0,["AssumedRoleId","Arn"],[0,0],2],UE$=[3,"com.amazonaws.sts","AssumeRoleRequest",0,["RoleArn","RoleSessionName","PolicyArns","Policy","DurationSeconds","Tags","TransitiveTagKeys","ExternalId","SerialNumber","TokenCode","SourceIdentity","ProvidedContexts"],[0,0,()=>JI0,0,1,()=>yJ1,64,0,0,0,0,()=>bE$],2],FE$=[3,"com.amazonaws.sts","AssumeRoleResponse",0,["Credentials","AssumedRoleUser","PackedPolicySize","SourceIdentity"],[[()=>sv,0],()=>bJ1,1,0]],BE$=[3,"com.amazonaws.sts","AssumeRoleWithSAMLRequest",0,["RoleArn","PrincipalArn","SAMLAssertion","PolicyArns","Policy","DurationSeconds"],[0,0,[()=>WE$,0],()=>JI0,0,1],3],wE$=[3,"com.amazonaws.sts","AssumeRoleWithSAMLResponse",0,["Credentials","AssumedRoleUser","PackedPolicySize","Subject","SubjectType","Issuer","Audience","NameQualifier","SourceIdentity"],[[()=>sv,0],()=>bJ1,1,0,0,0,0,0,0]],OE$=[3,"com.amazonaws.sts","AssumeRoleWithWebIdentityRequest",0,["RoleArn","RoleSessionName","WebIdentityToken","ProviderId","PolicyArns","Policy","DurationSeconds"],[0,0,[()=>KE$,0],0,()=>JI0,0,1],3],LE$=[3,"com.amazonaws.sts","AssumeRoleWithWebIdentityResponse",0,["Credentials","SubjectFromWebIdentityToken","AssumedRoleUser","PackedPolicySize","Provider","Audience","SourceIdentity"],[[()=>sv,0],0,()=>bJ1,1,0,0,0]],DE$=[3,"com.amazonaws.sts","AssumeRootRequest",0,["TargetPrincipal","TaskPolicyArn","DurationSeconds"],[0,()=>ep8,1],2],EE$=[3,"com.amazonaws.sts","AssumeRootResponse",0,["Credentials","SourceIdentity"],[[()=>sv,0],0]],sv=[3,"com.amazonaws.sts","Credentials",0,["AccessKeyId","SecretAccessKey","SessionToken","Expiration"],[0,[()=>JE$,0],0,4],4],zE$=[3,"com.amazonaws.sts","DecodeAuthorizationMessageRequest",0,["EncodedMessage"],[0],1],jE$=[3,"com.amazonaws.sts","DecodeAuthorizationMessageResponse",0,["DecodedMessage"],[0]],PE$=[3,"com.amazonaws.sts","FederatedUser",0,["FederatedUserId","Arn"],[0,0],2],AE$=[3,"com.amazonaws.sts","GetAccessKeyInfoRequest",0,["AccessKeyId"],[0],1],TE$=[3,"com.amazonaws.sts","GetAccessKeyInfoResponse",0,["Account"],[0]],RE$=[3,"com.amazonaws.sts","GetCallerIdentityRequest",0,[],[]],IE$=[3,"com.amazonaws.sts","GetCallerIdentityResponse",0,["UserId","Account","Arn"],[0,0,0]],qE$=[3,"com.amazonaws.sts","GetDelegatedAccessTokenRequest",0,["TradeInToken"],[[()=>HE$,0]],1],ME$=[3,"com.amazonaws.sts","GetDelegatedAccessTokenResponse",0,["Credentials","PackedPolicySize","AssumedPrincipal"],[[()=>sv,0],1,0]],VE$=[3,"com.amazonaws.sts","GetFederationTokenRequest",0,["Name","Policy","PolicyArns","DurationSeconds","Tags"],[0,0,()=>JI0,1,()=>yJ1],1],kE$=[3,"com.amazonaws.sts","GetFederationTokenResponse",0,["Credentials","FederatedUser","PackedPolicySize"],[[()=>sv,0],()=>PE$,1]],SE$=[3,"com.amazonaws.sts","GetSessionTokenRequest",0,["DurationSeconds","SerialNumber","TokenCode"],[1,0,0]],CE$=[3,"com.amazonaws.sts","GetSessionTokenResponse",0,["Credentials"],[[()=>sv,0]]],_E$=[3,"com.amazonaws.sts","GetWebIdentityTokenRequest",0,["Audience","SigningAlgorithm","DurationSeconds","Tags"],[64,0,1,()=>yJ1],2],vE$=[3,"com.amazonaws.sts","GetWebIdentityTokenResponse",0,["WebIdentityToken","Expiration"],[[()=>NE$,0],4]],ep8=[3,"com.amazonaws.sts","PolicyDescriptorType",0,["arn"],[0]],xE$=[3,"com.amazonaws.sts","ProvidedContext",0,["ProviderArn","ContextAssertion"],[0,0]],fE$=[3,"com.amazonaws.sts","Tag",0,["Key","Value"],[0,0],2],JI0=[1,"com.amazonaws.sts","policyDescriptorListType",0,()=>ep8],bE$=[1,"com.amazonaws.sts","ProvidedContextsListType",0,()=>xE$],yJ1=[1,"com.amazonaws.sts","tagListType",0,()=>fE$],$t8=[9,"com.amazonaws.sts","AssumeRole",0,()=>UE$,()=>FE$],Zt8=[9,"com.amazonaws.sts","AssumeRoleWithSAML",0,()=>BE$,()=>wE$],Xt8=[9,"com.amazonaws.sts","AssumeRoleWithWebIdentity",0,()=>OE$,()=>LE$],Qt8=[9,"com.amazonaws.sts","AssumeRoot",0,()=>DE$,()=>EE$],Yt8=[9,"com.amazonaws.sts","DecodeAuthorizationMessage",0,()=>zE$,()=>jE$],Gt8=[9,"com.amazonaws.sts","GetAccessKeyInfo",0,()=>AE$,()=>TE$],Jt8=[9,"com.amazonaws.sts","GetCallerIdentity",0,()=>RE$,()=>IE$],Kt8=[9,"com.amazonaws.sts","GetDelegatedAccessToken",0,()=>qE$,()=>ME$],Wt8=[9,"com.amazonaws.sts","GetFederationToken",0,()=>VE$,()=>kE$],Ht8=[9,"com.amazonaws.sts","GetSessionToken",0,()=>SE$,()=>CE$],Nt8=[9,"com.amazonaws.sts","GetWebIdentityToken",0,()=>_E$,()=>vE$]});var KI0,Ut8,Ft8,Bt8,wt8,Ot8,yL,Lt8=($)=>{return{apiVersion:"2011-06-15",base64Decoder:$?.base64Decoder??yL.fromBase64,base64Encoder:$?.base64Encoder??yL.toBase64,disableHostPrefix:$?.disableHostPrefix??!1,endpointProvider:$?.endpointProvider??x20,extensions:$?.extensions??[],httpAuthSchemeProvider:$?.httpAuthSchemeProvider??Hl8,httpAuthSchemes:$?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(Z)=>Z.getIdentityProvider("aws.auth#sigv4"),signer:new KI0.AwsSdkSigV4Signer},{schemeId:"aws.auth#sigv4a",identityProvider:(Z)=>Z.getIdentityProvider("aws.auth#sigv4a"),signer:new KI0.AwsSdkSigV4ASigner},{schemeId:"smithy.api#noAuth",identityProvider:(Z)=>Z.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Bt8.NoAuthSigner}],logger:$?.logger??new wt8.NoOpLogger,protocol:$?.protocol??Ut8.AwsQueryProtocol,protocolSettings:$?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:sp8,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:$?.serviceId??"STS",signerConstructor:$?.signerConstructor??Ft8.SignatureV4MultiRegion,urlParser:$?.urlParser??Ot8.parseUrl,utf8Decoder:$?.utf8Decoder??yL.fromUtf8,utf8Encoder:$?.utf8Encoder??yL.toUtf8}};var Dt8=O(()=>{uG1();gG1();CY();KI0=k(IL(),1),Ut8=k(Rc(),1),Ft8=k(v20(),1),Bt8=k(dH(),1),wt8=k(G5(),1),Ot8=k(XZ(),1),yL=k(TQ(),1)});var _c,gL,Et8,WI0,SZ,vc,HI0,NI0,zt8=($)=>{WI0.emitWarningIfUnsupportedVersion(process.version);let Z=SZ.resolveDefaultsModeConfig($),X=()=>Z().then(WI0.loadConfigsForDefaultMode),Q=Lt8($);_c.emitWarningIfUnsupportedVersion(process.version);let Y={profile:$?.profile,logger:Q.logger};return{...Q,...$,runtime:"node",defaultsMode:Z,authSchemePreference:$?.authSchemePreference??SZ.loadConfig(gL.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,Y),bodyLengthChecker:$?.bodyLengthChecker??HI0.calculateBodyLength,credentialDefaultProvider:$?.credentialDefaultProvider??_J1,defaultUserAgentProvider:$?.defaultUserAgentProvider??_c.createDefaultUserAgentProvider({serviceId:Q.serviceId,clientVersion:Bl8.version}),httpAuthSchemes:$?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(G)=>G.getIdentityProvider("aws.auth#sigv4")||(async(J)=>await _J1(J?.__config||{})()),signer:new gL.AwsSdkSigV4Signer},{schemeId:"aws.auth#sigv4a",identityProvider:(G)=>G.getIdentityProvider("aws.auth#sigv4a"),signer:new gL.AwsSdkSigV4ASigner},{schemeId:"smithy.api#noAuth",identityProvider:(G)=>G.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Et8.NoAuthSigner}],maxAttempts:$?.maxAttempts??SZ.loadConfig(vc.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,$),region:$?.region??SZ.loadConfig(SZ.NODE_REGION_CONFIG_OPTIONS,{...SZ.NODE_REGION_CONFIG_FILE_OPTIONS,...Y}),requestHandler:NI0.NodeHttpHandler.create($?.requestHandler??X),retryMode:$?.retryMode??SZ.loadConfig({...vc.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await X()).retryMode||vc.DEFAULT_RETRY_MODE},$),sha256:$?.sha256??HI0.Hash.bind(null,"sha256"),sigv4aSigningRegionSet:$?.sigv4aSigningRegionSet??SZ.loadConfig(gL.NODE_SIGV4A_CONFIG_OPTIONS,Y),streamCollector:$?.streamCollector??NI0.streamCollector,useDualstackEndpoint:$?.useDualstackEndpoint??SZ.loadConfig(SZ.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,Y),useFipsEndpoint:$?.useFipsEndpoint??SZ.loadConfig(SZ.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,Y),userAgentAppId:$?.userAgentAppId??SZ.loadConfig(_c.NODE_APP_ID_CONFIG_OPTIONS,Y)}};var jt8=O(()=>{Fl8();op8();Dt8();_c=k(Z9(),1),gL=k(IL(),1),Et8=k(dH(),1),WI0=k(G5(),1),SZ=k(K4(),1),vc=k(RL(),1),HI0=k(TQ(),1),NI0=k(bv(),1)});var Pt8=($)=>{let{httpAuthSchemes:Z,httpAuthSchemeProvider:X,credentials:Q}=$;return{setHttpAuthScheme(Y){let G=Z.findIndex((J)=>J.schemeId===Y.schemeId);if(G===-1)Z.push(Y);else Z.splice(G,1,Y)},httpAuthSchemes(){return Z},setHttpAuthSchemeProvider(Y){X=Y},httpAuthSchemeProvider(){return X},setCredentials(Y){Q=Y},credentials(){return Q}}},At8=($)=>{return{httpAuthSchemes:$.httpAuthSchemes(),httpAuthSchemeProvider:$.httpAuthSchemeProvider(),credentials:$.credentials()}};var UI0,FI0,BI0,Tt8=($,Z)=>{let X=Object.assign(UI0.getAwsRegionExtensionConfiguration($),FI0.getDefaultExtensionConfiguration($),BI0.getHttpHandlerExtensionConfiguration($),Pt8($));return Z.forEach((Q)=>Q.configure(X)),Object.assign($,UI0.resolveAwsRegionExtensionConfiguration(X),FI0.resolveDefaultRuntimeConfig(X),BI0.resolveHttpHandlerRuntimeConfig(X),At8(X))};var Rt8=O(()=>{UI0=k(Z9(),1),FI0=k(G5(),1),BI0=k(XZ(),1)});var GJ,xc,It8,qt8,Mt8,Vt8,wI0,kt8,Se;var gJ1=O(()=>{uG1();bG();jt8();Rt8();GJ=k(Z9(),1),xc=k(dH(),1),It8=k(G5(),1),qt8=k(K4(),1),Mt8=k($9(),1),Vt8=k(XZ(),1),wI0=k(RL(),1),kt8=k(uK(),1);Se=class Se extends It8.Client{config;constructor(...[$]){let Z=zt8($||{});super(Z);this.initConfig=Z;let X=Ul8(Z),Q=GJ.resolveUserAgentConfig(X),Y=wI0.resolveRetryConfig(Q),G=qt8.resolveRegionConfig(Y),J=GJ.resolveHostHeaderConfig(G),K=Mt8.resolveEndpointConfig(J),W=Nl8(K),H=Tt8(W,$?.extensions||[]);this.config=H,this.middlewareStack.use(kt8.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(GJ.getUserAgentPlugin(this.config)),this.middlewareStack.use(wI0.getRetryPlugin(this.config)),this.middlewareStack.use(Vt8.getContentLengthPlugin(this.config)),this.middlewareStack.use(GJ.getHostHeaderPlugin(this.config)),this.middlewareStack.use(GJ.getLoggerPlugin(this.config)),this.middlewareStack.use(GJ.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(xc.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:Kl8,identityProviderConfigProvider:async(N)=>new xc.DefaultIdentityProviderConfig({"aws.auth#sigv4":N.credentials,"aws.auth#sigv4a":N.credentials})})),this.middlewareStack.use(xc.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}});var St8,Ct8,Ce;var hJ1=O(()=>{bG();CY();St8=k(G5(),1),Ct8=k($9(),1);Ce=class Ce extends St8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[Ct8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc($t8).build(){}});var _t8,vt8,uJ1;var cJ1=O(()=>{bG();CY();_t8=k(G5(),1),vt8=k($9(),1);uJ1=class uJ1 extends _t8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[vt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithSAML",{}).n("STSClient","AssumeRoleWithSAMLCommand").sc(Zt8).build(){}});var xt8,ft8,lJ1;var dJ1=O(()=>{bG();CY();xt8=k(G5(),1),ft8=k($9(),1);lJ1=class lJ1 extends xt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ft8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(Xt8).build(){}});var bt8,yt8,mJ1;var iJ1=O(()=>{bG();CY();bt8=k(G5(),1),yt8=k($9(),1);mJ1=class mJ1 extends bt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[yt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoot",{}).n("STSClient","AssumeRootCommand").sc(Qt8).build(){}});var gt8,ht8,nJ1;var pJ1=O(()=>{bG();CY();gt8=k(G5(),1),ht8=k($9(),1);nJ1=class nJ1 extends gt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ht8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","DecodeAuthorizationMessage",{}).n("STSClient","DecodeAuthorizationMessageCommand").sc(Yt8).build(){}});var ut8,ct8,tJ1;var oJ1=O(()=>{bG();CY();ut8=k(G5(),1),ct8=k($9(),1);tJ1=class tJ1 extends ut8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ct8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetAccessKeyInfo",{}).n("STSClient","GetAccessKeyInfoCommand").sc(Gt8).build(){}});var lt8,dt8,rJ1;var aJ1=O(()=>{bG();CY();lt8=k(G5(),1),dt8=k($9(),1);rJ1=class rJ1 extends lt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[dt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetCallerIdentity",{}).n("STSClient","GetCallerIdentityCommand").sc(Jt8).build(){}});var mt8,it8,sJ1;var eJ1=O(()=>{bG();CY();mt8=k(G5(),1),it8=k($9(),1);sJ1=class sJ1 extends mt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[it8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetDelegatedAccessToken",{}).n("STSClient","GetDelegatedAccessTokenCommand").sc(Kt8).build(){}});var nt8,pt8,$K1;var ZK1=O(()=>{bG();CY();nt8=k(G5(),1),pt8=k($9(),1);$K1=class $K1 extends nt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[pt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetFederationToken",{}).n("STSClient","GetFederationTokenCommand").sc(Wt8).build(){}});var tt8,ot8,XK1;var QK1=O(()=>{bG();CY();tt8=k(G5(),1),ot8=k($9(),1);XK1=class XK1 extends tt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ot8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetSessionToken",{}).n("STSClient","GetSessionTokenCommand").sc(Ht8).build(){}});var rt8,at8,YK1;var GK1=O(()=>{bG();CY();rt8=k(G5(),1),at8=k($9(),1);YK1=class YK1 extends rt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[at8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetWebIdentityToken",{}).n("STSClient","GetWebIdentityTokenCommand").sc(Nt8).build(){}});var st8,yE$,et8;var $o8=O(()=>{hJ1();cJ1();dJ1();iJ1();pJ1();oJ1();aJ1();eJ1();ZK1();QK1();GK1();gJ1();st8=k(G5(),1),yE$={AssumeRoleCommand:Ce,AssumeRoleWithSAMLCommand:uJ1,AssumeRoleWithWebIdentityCommand:lJ1,AssumeRootCommand:mJ1,DecodeAuthorizationMessageCommand:nJ1,GetAccessKeyInfoCommand:tJ1,GetCallerIdentityCommand:rJ1,GetDelegatedAccessTokenCommand:sJ1,GetFederationTokenCommand:$K1,GetSessionTokenCommand:XK1,GetWebIdentityTokenCommand:YK1};et8=class et8 extends Se{};st8.createAggregatedClient(yE$,et8)});var Zo8=O(()=>{hJ1();cJ1();dJ1();iJ1();pJ1();oJ1();aJ1();eJ1();ZK1();QK1();GK1()});var Xo8=()=>{};var Qo8=()=>{};var Yo8=O(()=>{gJ1();$o8();Zo8();CY();xJ1();Xo8();Qo8()});function hL($){return JK1.test($)}var JK1;var fc=O(()=>{JK1=/^[a-z0-9][a-z0-9-]{0,59}$/});function gE$(){if(OI0)return OI0;let $=o0(),Z=$.awsS3TenantProvisionerAccessKeyId,X=$.awsS3TenantProvisionerSecretAccessKey;return OI0=new Se({region:$.s3TenantRegion,...Z&&X?{credentials:{accessKeyId:Z,secretAccessKey:X}}:{}}),OI0}function hE$(){let $=o0().awsS3TenantRoleArn;if(!$)throw new ev(500,"managed file configs require AWS_S3_TENANT_ROLE_ARN to be configured");return $}function LI0($){if(!Go8.test($))throw new ev(400,"invalid site slug");let Z=o0();return{bucket:Z.s3TenantBucket,region:Z.s3TenantRegion,endpoint:Z.s3TenantEndpoint??null,prefix:`${$}/`,forcePathStyle:!1,publicUrlBase:Z.s3TenantPublicUrlBase}}function uE$($,Z){let X=`arn:aws:s3:::${$}`;return JSON.stringify({Version:"2012-10-17",Statement:[{Sid:"TenantObjectAccess",Effect:"Allow",Action:["s3:GetObject","s3:PutObject","s3:DeleteObject","s3:AbortMultipartUpload","s3:ListMultipartUploadParts"],Resource:`${X}/${Z}/*`},{Sid:"TenantPrefixList",Effect:"Allow",Action:["s3:ListBucket"],Resource:X,Condition:{StringLike:{"s3:prefix":[`${Z}/*`]}}}]})}async function Jo8($){if(!Go8.test($))throw new ev(400,"site must be 1-60 chars of lowercase letters, digits, or hyphens, starting with a letter or digit");let Z=o0(),X=hE$(),Q=uE$(Z.s3TenantBucket,$),Y;try{Y=await q9(()=>gE$().send(new Ce({RoleArn:X,RoleSessionName:`s3-${$}`,Policy:Q})),{maxAttempts:3,isRetriable:(J)=>{let K=J?.$metadata?.httpStatusCode,W=J?.name??"";return K===void 0||K>=500||/throttl|timeout/i.test(W)}})}catch(J){if(J instanceof ev)throw J;let K=J instanceof gY?J.cause??J:J,W=K instanceof Error?`${K.name}: ${K.message}`:String(K);throw console.error(`[tenant-credentials] AssumeRole failed: ${W}`),new ev(500,"failed to mint tenant credentials")}let G=Y.Credentials;if(!G?.AccessKeyId||!G?.SecretAccessKey||!G?.SessionToken||!G?.Expiration)throw new ev(500,"assume role returned incomplete credentials");return{accessKeyId:G.AccessKeyId,secretAccessKey:G.SecretAccessKey,sessionToken:G.SessionToken,expiration:G.Expiration}}var Go8,ev,OI0=null;var DI0=O(()=>{Yo8();t4();q8();fc();Go8=JK1;ev=class ev extends Error{status;constructor($,Z){super(Z);this.status=$;this.name="TenantCredentialsError"}}});import J7 from"zod";function _e($){if($==null)return null;let Z=$.trim().replace(/^\/+/,"");if(Z==="")return null;return Z.endsWith("/")?Z:`${Z}/`}function ve($){if($==null)return null;let Z=$.trim().replace(/\/+$/,"");return Z===""?null:Z}var bc,EI0;var zI0=O(()=>{bc=J7.object({id:J7.string(),name:J7.string(),description:J7.string().nullable(),bucket:J7.string(),region:J7.string(),endpoint:J7.string().nullable(),forcePathStyle:J7.boolean(),prefix:J7.string().nullable(),publicUrlBase:J7.string().nullable(),credentialType:J7.enum(["static","sts-session","managed"]),refreshUrl:J7.string().nullable(),siteSlug:J7.string().nullable(),createdBy:J7.string(),createdAt:J7.string(),updatedBy:J7.string(),updatedAt:J7.string()}),EI0=J7.string().min(1).max(128).regex(/^[A-Za-z0-9_.-]+$/,{message:"Name may only contain letters, digits, underscore, dot, and hyphen."})});import CZ from"zod";var KK1;var Ko8=O(()=>{t0();DI0();zI0();KK1=i({name:"FILE_CONFIG_CREATE",description:"Create an S3-compatible bucket configuration scoped to the organization. `static` stores a long-lived key pair (BYOB). `sts-session` stores a refreshUrl + apiKey whose temporary credentials are fetched on demand and auto-refreshed. `managed` stores no secret \u2014 studio mints prefix-scoped credentials for a site slug the org owns on the shared tenant bucket (bucket/region/CDN derived server-side). Secrets are encrypted at rest and never returned by any tool.",inputSchema:CZ.object({name:EI0,description:CZ.string().max(500).optional(),bucket:CZ.string().min(1).max(255).optional(),region:CZ.string().min(1).max(64).optional(),endpoint:CZ.string().url().optional(),forcePathStyle:CZ.boolean().optional(),prefix:CZ.string().max(512).optional(),publicUrlBase:CZ.string().url().optional(),credentialType:CZ.enum(["static","sts-session","managed"]).default("static"),accessKeyId:CZ.string().min(1).optional(),secretAccessKey:CZ.string().min(1).optional(),refreshUrl:CZ.string().url().optional(),apiKey:CZ.string().min(1).optional(),siteSlug:CZ.string().min(1).max(60).optional()}).superRefine(($,Z)=>{if($.credentialType==="managed"){if(!$.siteSlug)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"managed credentials require siteSlug."});if($.accessKeyId||$.secretAccessKey||$.refreshUrl||$.apiKey)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"managed credentials take no accessKeyId/secretAccessKey/refreshUrl/apiKey."});return}if(!$.bucket||!$.region)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"bucket and region are required."});if($.credentialType==="sts-session"){if(!$.refreshUrl||!$.apiKey)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"sts-session requires refreshUrl and apiKey (and no accessKeyId/secretAccessKey)."})}else if(!$.accessKeyId||!$.secretAccessKey)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"static credentials require accessKeyId and secretAccessKey."})}),outputSchema:bc,handler:async($,Z)=>{K0(Z);let X=X0(Z);if(await Z.access.check(),$.credentialType==="managed"){let Y=$.siteSlug;if(!await Z.storage.orgSites.isOwnedBy(Y,X.id))throw Error(`Organization does not own site "${Y}". A site is claimed via the deco import or the org-sites backfill.`);let G=LI0(Y);return Z.storage.orgFileConfigs.create({organizationId:X.id,name:$.name,description:$.description??null,bucket:G.bucket,region:G.region,endpoint:G.endpoint,forcePathStyle:G.forcePathStyle,prefix:_e(G.prefix),publicUrlBase:ve(G.publicUrlBase),refreshUrl:null,siteSlug:Y,credentials:{type:"managed"},createdBy:Z.auth.user.id})}let Q=$.credentialType==="sts-session"?{type:"sts-session",apiKey:$.apiKey}:{type:"static",accessKeyId:$.accessKeyId,secretAccessKey:$.secretAccessKey};return Z.storage.orgFileConfigs.create({organizationId:X.id,name:$.name,description:$.description??null,bucket:$.bucket,region:$.region,endpoint:$.endpoint??null,forcePathStyle:$.forcePathStyle??!1,prefix:_e($.prefix),publicUrlBase:ve($.publicUrlBase),refreshUrl:$.refreshUrl??null,credentials:Q,createdBy:Z.auth.user.id})}})});import WK1 from"zod";var HK1;var Wo8=O(()=>{t0();zI0();HK1=i({name:"FILE_CONFIG_LIST",description:"List S3-compatible bucket configurations for the organization. Credentials are never returned.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:WK1.object({}),outputSchema:WK1.object({configs:WK1.array(bc)}),handler:async($,Z)=>{K0(Z);let X=X0(Z);return await Z.access.check(),{configs:await Z.storage.orgFileConfigs.list(X.id)}}})});import bX from"zod";var NK1;var Ho8=O(()=>{t0();zI0();NK1=i({name:"FILE_CONFIG_UPDATE",description:"Update an S3 bucket configuration. Credentials can be rotated by providing both accessKeyId and secretAccessKey; omit them to leave existing credentials untouched.",inputSchema:bX.object({id:bX.string().min(1),name:EI0.optional(),description:bX.string().max(500).nullable().optional(),bucket:bX.string().min(1).max(255).optional(),region:bX.string().min(1).max(64).optional(),endpoint:bX.string().url().nullable().optional(),forcePathStyle:bX.boolean().optional(),prefix:bX.string().max(512).nullable().optional(),publicUrlBase:bX.string().url().nullable().optional(),accessKeyId:bX.string().min(1).optional(),secretAccessKey:bX.string().min(1).optional(),refreshUrl:bX.string().url().optional(),apiKey:bX.string().min(1).optional()}).superRefine(($,Z)=>{let X=$.accessKeyId!==void 0||$.secretAccessKey!==void 0,Q=$.refreshUrl!==void 0||$.apiKey!==void 0;if(X&&Q)Z.addIssue({code:bX.ZodIssueCode.custom,message:"Provide either static (accessKeyId + secretAccessKey) or sts-session (refreshUrl + apiKey) credentials, not both."});if(X&&!($.accessKeyId&&$.secretAccessKey))Z.addIssue({code:bX.ZodIssueCode.custom,message:"accessKeyId and secretAccessKey must be provided together when rotating static credentials."});if(Q&&!($.refreshUrl&&$.apiKey))Z.addIssue({code:bX.ZodIssueCode.custom,message:"refreshUrl and apiKey must be provided together when rotating sts-session credentials."})}),outputSchema:bc,handler:async($,Z)=>{K0(Z);let X=X0(Z);await Z.access.check();let Q,Y;if($.accessKeyId&&$.secretAccessKey)Q={type:"static",accessKeyId:$.accessKeyId,secretAccessKey:$.secretAccessKey},Y=null;else if($.refreshUrl&&$.apiKey)Q={type:"sts-session",apiKey:$.apiKey},Y=$.refreshUrl;return Z.storage.orgFileConfigs.update({id:$.id,organizationId:X.id,name:$.name,description:$.description,bucket:$.bucket,region:$.region,endpoint:$.endpoint,forcePathStyle:$.forcePathStyle,prefix:$.prefix===void 0?void 0:_e($.prefix),publicUrlBase:$.publicUrlBase===void 0?void 0:ve($.publicUrlBase),refreshUrl:Y,credentials:Q,updatedBy:Z.auth.user.id})}})});import jI0 from"zod";var UK1;var No8=O(()=>{t0();UK1=i({name:"FILE_CONFIG_DELETE",description:"Delete an S3 bucket configuration by id.",inputSchema:jI0.object({id:jI0.string().min(1)}),outputSchema:jI0.object({success:jI0.literal(!0)}),handler:async($,Z)=>{K0(Z);let X=X0(Z);return await Z.access.check(),await Z.storage.orgFileConfigs.delete($.id,X.id),{success:!0}}})});import{randomUUID as cE$}from"crypto";function Uo8($,Z){if(!lE$.has($))throw new $x(`Content type "${$}" is not allowed.`);if(!Number.isFinite(Z)||Z<=0)throw new $x("File size must be a positive number.");if(Z>Zx)throw new $x(`File too large: ${Z} bytes (max ${Zx}).`)}function dE$($){let Z=$.normalize("NFKD").replace(/[\u0300-\u036f]/g,"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-.]+|[-.]+$/g,"");if(Z.length<=80)return Z||"file";let X=Z.lastIndexOf(".");if(X>0&&Z.length-X<=10){let Q=Z.slice(X);return Z.slice(0,80-Q.length)+Q}return Z.slice(0,80)}function FK1($,Z){return`${$}/${String(Z).padStart(2,"0")}/`}function Fo8($){let Z=new Date,X=FK1(Z.getUTCFullYear(),Z.getUTCMonth()+1),Q=cE$(),Y=dE$($.filename),G=`${X}${Q}-${Y}`;return $.prefix?`${$.prefix}${G}`:G}var Zx=104857600,lE$,$x;var BK1=O(()=>{lE$=new Set(["image/png","image/jpeg","image/gif","image/webp","image/svg+xml","image/avif","video/mp4","video/webm","video/quicktime","audio/mpeg","audio/wav","audio/ogg","application/pdf","application/json","application/zip","text/plain","text/csv","text/markdown","font/woff","font/woff2","font/ttf","font/otf"]);$x=class $x extends Error{constructor($){super($);this.name="UploadRejected"}}});function mE$($,Z){let X=$.refreshUrl;if(!X)throw Error(`sts-session file config ${$.id} is missing a refreshUrl`);return async()=>{let Q=await fetch(X,{method:"POST",headers:{"x-api-key":Z},signal:AbortSignal.timeout(20000)});if(!Q.ok){let J=await Q.text().catch(()=>"");throw Error(`sts refresh failed (${Q.status}) for file config ${$.id}: ${J.slice(0,200)}`)}let Y=await Q.json();if(!Y.accessKeyId||!Y.secretAccessKey||!Y.sessionToken)throw Error(`sts refresh returned incomplete credentials for file config ${$.id}`);let G=Y.expiration?new Date(Y.expiration):void 0;if(G&&Number.isNaN(G.getTime()))throw Error(`sts refresh returned an invalid expiration for file config ${$.id}: ${Y.expiration}`);return{accessKeyId:Y.accessKeyId,secretAccessKey:Y.secretAccessKey,sessionToken:Y.sessionToken,expiration:G}}}function OK1($){let Z=`${$.info.id}:${$.info.updatedAt}`,X=xe.get(Z);if(X)return X;let Q=$.credentials.type==="sts-session"?mE$($.info,$.credentials.apiKey):$.credentials.type==="managed"?()=>Jo8($.info.siteSlug??""):{accessKeyId:$.credentials.accessKeyId,secretAccessKey:$.credentials.secretAccessKey},Y=new e7({region:$.info.region,endpoint:$.info.endpoint??void 0,forcePathStyle:$.info.forcePathStyle,credentials:Q,requestChecksumCalculation:"WHEN_REQUIRED",responseChecksumValidation:"WHEN_REQUIRED"});if(xe.size>=iE$){let G=xe.keys().next().value;if(G!==void 0)xe.delete(G)}return xe.set(Z,Y),Y}function AI0($,Z){if($.publicUrlBase)return`${$.publicUrlBase}/${PI0(Z)}`;if($.endpoint)return`${$.endpoint.replace(/\/+$/,"")}/${$.bucket}/${PI0(Z)}`;return $.forcePathStyle?`https://s3.${$.region}.amazonaws.com/${$.bucket}/${PI0(Z)}`:`https://${$.bucket}.s3.${$.region}.amazonaws.com/${PI0(Z)}`}function PI0($){return $.split("/").map(encodeURIComponent).join("/")}async function RI0($,Z,X,Q){let Y=await $.resolveById(X,Q);if(Y.info.credentialType==="managed"){let G=Y.info.siteSlug;if(!G||!await Z.isOwnedBy(G,Q))throw new TI0(`Organization does not own site "${G??"(none)"}" for managed file config ${X}`)}return Y}function pE$($,Z,X){let Q=[],Y=Z.getUTCFullYear(),G=Z.getUTCMonth()+1;for(let J=0;J<X;J++)if(Q.push(`${$}${FK1(Y,G)}`),G-=1,G===0)G=12,Y-=1;return Q}async function wo8($,Z,X,Q){let Y=[],G,J=0;do{let K=await $.send(new iY({Bucket:Z,Prefix:X,MaxKeys:1000,ContinuationToken:G}));for(let W of K.Contents??[])Y.push(W);G=K.IsTruncated?K.NextContinuationToken:void 0,J+=1}while(G&&J<Q);return Y}async function Oo8($){let Z=OK1($.ctx),X=Math.min($.maxKeys??50,200),Q=$.ctx.info.prefix??"",Y=$.search?.trim().toLowerCase();if(Y)return sE$({client:Z,ctx:$.ctx,bucketPrefix:Q,target:X,cursor:$.cursor,search:Y,imageOnly:$.imageOnly??!1});let G=pE$(Q,new Date,nE$);if($.cursor){let w=await Z.send(new iY({Bucket:$.ctx.info.bucket,Prefix:Q||void 0,MaxKeys:X,ContinuationToken:$.cursor}));return eE$(w,$.ctx,X,!1,G)}let J=new Map,K=(w)=>{for(let L of w){if(!L.Key||L.Key.endsWith("/")||J.has(L.Key))continue;J.set(L.Key,wK1(L,$.ctx))}},[W,...H]=G;if(W)K(await wo8(Z,$.ctx.info.bucket,W,Bo8));if(J.size<X&&H.length>0){let w=await Promise.all(H.map((L)=>wo8(Z,$.ctx.info.bucket,L,Bo8)));for(let L of w)K(L)}let N=Math.max(1,X-J.size),U=await Z.send(new iY({Bucket:$.ctx.info.bucket,Prefix:Q||void 0,MaxKeys:N}));for(let w of U.Contents??[]){if(J.size>=X)break;if(!w.Key||w.Key.endsWith("/")||J.has(w.Key))continue;if(G.some((L)=>w.Key.startsWith(L)))continue;J.set(w.Key,wK1(w,$.ctx))}let F=U.IsTruncated?U.NextContinuationToken??null:null;return{items:Array.from(J.values()).sort(LK1).slice(0,X),nextCursor:F}}function oE$($){return tE$.test($)}function rE$($,Z,X){return $.filter((Q)=>Q.key.toLowerCase().includes(Z)&&(!X||oE$(Q.key)))}function aE$($){let Z=Boolean($.isTruncated&&$.continuationToken);return{done:$.matchCount>=$.target||!Z||$.pagesScanned>=$.maxPages,nextCursor:Z?$.continuationToken??null:null}}async function sE$($){let Q=[],Y=$.cursor??void 0,G=0,J={done:!1,nextCursor:null};do{let W=await $.client.send(new iY({Bucket:$.ctx.info.bucket,Prefix:$.bucketPrefix||void 0,MaxKeys:1000,ContinuationToken:Y}));G++;let H=[];for(let N of W.Contents??[]){if(!N.Key||N.Key.endsWith("/"))continue;H.push({key:N.Key,size:N.Size??0,lastModified:N.LastModified?N.LastModified.toISOString():null})}Q.push(...rE$(H,$.search,$.imageOnly)),J=aE$({matchCount:Q.length,target:$.target,pagesScanned:G,maxPages:20,isTruncated:Boolean(W.IsTruncated),continuationToken:W.NextContinuationToken}),Y=W.NextContinuationToken}while(!J.done);return{items:Q.map((W)=>({...W,publicUrl:AI0($.ctx.info,W.key)})).sort(LK1),nextCursor:J.nextCursor}}function wK1($,Z){return{key:$.Key,size:$.Size??0,lastModified:$.LastModified?$.LastModified.toISOString():null,publicUrl:AI0(Z.info,$.Key)}}function LK1($,Z){if(!$.lastModified&&!Z.lastModified)return 0;if(!$.lastModified)return 1;if(!Z.lastModified)return-1;return Z.lastModified.localeCompare($.lastModified)}function eE$($,Z,X,Q,Y=[]){let G=($.Contents??[]).filter((J)=>J.Key&&!J.Key.endsWith("/")&&!Y.some((K)=>J.Key.startsWith(K))).slice(0,X).map((J)=>wK1(J,Z));if(Q)G.sort(LK1);return{items:G,nextCursor:$.IsTruncated?$.NextContinuationToken??null:null}}var iE$=256,xe,TI0,nE$=6,Bo8=5,tE$;var DK1=O(()=>{Sm();DI0();BK1();xe=new Map;TI0=class TI0 extends Error{constructor($){super($);this.name="FileConfigForbiddenError"}};tE$=/\.(png|jpe?g|gif|webp|svg|avif|bmp)$/i});import _Y from"zod";var EK1;var Lo8=O(()=>{t0();DK1();EK1=i({name:"FILE_OBJECTS_LIST",description:"List existing objects in a configured S3 bucket (newest first). Returns public URLs computed from the config's publicUrlBase or the bucket's S3 host. Used by the picker dialog to let users select previously uploaded files.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:_Y.object({configId:_Y.string().min(1),cursor:_Y.string().nullable().optional(),maxKeys:_Y.number().int().min(1).max(200).optional(),search:_Y.string().max(256).nullable().optional(),imageOnly:_Y.boolean().optional()}),outputSchema:_Y.object({items:_Y.array(_Y.object({key:_Y.string(),size:_Y.number(),lastModified:_Y.string().nullable(),publicUrl:_Y.string()})),nextCursor:_Y.string().nullable()}),handler:async($,Z)=>{K0(Z);let X=X0(Z);await Z.access.check();let Q=await RI0(Z.storage.orgFileConfigs,Z.storage.orgSites,$.configId,X.id);return Oo8({ctx:Q,cursor:$.cursor,maxKeys:$.maxKeys,search:$.search,imageOnly:$.imageOnly})}})});var Do8=O(()=>{Ko8();Wo8();Ho8();No8();Lo8()});import{z as fe}from"zod";var zK1;var Eo8=O(()=>{t0();zK1=i({name:"INFRA_BILLING_SITES_LIST",description:"List the legacy deco.cx site slugs this organization owns. Empty for orgs with no sites.",annotations:{title:"List Owned Sites",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:fe.object({}),outputSchema:fe.object({sites:fe.array(fe.object({slug:fe.string()}))}),handler:async($,Z)=>{K0(Z),await Z.access.check();let X=X0(Z);return{sites:(await Z.storage.orgSites.listByOrg(X.id)).map(({slug:Y})=>({slug:Y}))}}})});function jK1(){let $=o0();return!!($.clickhouseAnalyticsUrl&&$.clickhouseAnalyticsPassword)}async function Xz$(){if(!II0){let $=o0();II0=Promise.resolve().then(() => k(ga0(),1)).then(({createClient:Z})=>Z({url:$.clickhouseAnalyticsUrl,username:$.clickhouseAnalyticsUsername,password:$.clickhouseAnalyticsPassword,request_timeout:Zz$})).catch((Z)=>{throw II0=null,Z})}return II0}async function qI0($,Z){if(!jK1())return[];return(await(await Xz$()).query({query:$,query_params:Z,format:"JSONEachRow"})).json()}var II0=null,Zz$=20000;var zo8=O(()=>{q8()});function Gz$($){if($.some((X)=>X.status==="rejected"))return console.warn("[deco-legacy] a OneDollarStats host query failed"),null;let Z=new Map;for(let X of $){if(X.status!=="fulfilled")continue;for(let Q of X.value){let Y=Q.dimensions[0]?.split(" ")[0];if(!Y)continue;Z.set(Y,(Z.get(Y)??0)+(Q.metrics[0]??0))}}return Z}async function Po8($,Z,X){let Q=o0().oneDollarStatsApiKey,Y=[...new Set($)];if(!Q||Y.length===0)return null;let G=async(K)=>{let W=await fetch(`${Qz$}/plausible`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":Q,Accept:"application/json"},body:JSON.stringify({site_id:K,date_range:[Z,X],metrics:["pageviews"],dimensions:["time:day"],pagination:{limit:1e4,offset:0}}),signal:AbortSignal.timeout(Yz$)});if(!W.ok)throw Error(`OneDollarStats ${W.status}`);return(await W.json()).results??[]},J=[];for(let K=0;K<Y.length;K+=jo8)J.push(...await Promise.allSettled(Y.slice(K,K+jo8).map(G)));return Gz$(J)}function Ao8($){if($.endsWith(".deco.site")||$.startsWith("www."))return $;return`www.${$}`}var Qz$="https://deco.lilstts.com",Yz$=1e4,jo8=6;var To8=O(()=>{q8()});function rH(){let $=o0(),Z=$.decoSupabaseUrl,X=$.decoSupabaseServiceKey;if(!Z||!X)return null;return{supabaseUrl:Z,serviceKey:X}}async function yX($,Z,X){let Q=await fetch(`${$}/rest/v1/${X}`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(Ro8)});if(!Q.ok){let Y=await Q.text().catch(()=>Q.statusText);throw console.error(`[deco-legacy] Supabase error (${Q.status}): ${Y}`),Error(`External service error (${Q.status})`)}return Q.json()}async function Xx($,Z,X,Q){let Y=await fetch(`${$}/rest/v1/${X}`,{method:"POST",headers:{apikey:Z,Authorization:`Bearer ${Z}`,"Content-Type":"application/json",Accept:"application/json",Prefer:"return=representation"},body:JSON.stringify(Q),signal:AbortSignal.timeout(Ro8)});if(!Y.ok){let J=await Y.text().catch(()=>Y.statusText);throw console.error(`[deco-legacy] Supabase POST error (${Y.status}): ${J}`),Error(`External service error (${Y.status})`)}let G=await Y.json();if(!G[0])throw Error("Supabase POST returned no rows");return G[0]}var Ro8=15000;var PK1=O(()=>{q8()});function Jz$($){let Z=new Date(Date.UTC($.getUTCFullYear(),$.getUTCMonth(),1)),X=new Date(Date.UTC($.getUTCFullYear(),$.getUTCMonth()+1,0));return{since:Z.toISOString().slice(0,10),until:X.toISOString().slice(0,10)}}async function Wz$($,Z,X){return(await qI0(`SELECT host
+`),pp8=!0}throw new Cc.CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.",{logger:$.logger,tryNextLink:!0})}return $.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv"),cG1($)()},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");let{ssoStartUrl:X,ssoAccountId:Q,ssoRegion:Y,ssoRoleName:G,ssoSession:J}=$;if(!X&&!Q&&!Y&&!G&&!J)throw new Cc.CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).",{logger:$.logger});let{fromSSO:K}=await Promise.resolve().then(() => (e31(),s31));return K($)(Z)},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");let{fromIni:X}=await Promise.resolve().then(() => (np8(),ip8));return X($)(Z)},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");let{fromProcess:X}=await Promise.resolve().then(() => (RJ1(),TJ1));return X($)(Z)},async(Z)=>{$.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");let{fromTokenFile:X}=await Promise.resolve().then(() => (SJ1(),kJ1));return X($)(Z)},async()=>{return $.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::remoteProvider"),(await Fd8($))()},async()=>{throw new Cc.CredentialsProviderError("Could not load credentials from any providers",{tryNextLink:!1,logger:$.logger})}],nD$),nD$=($)=>$?.expiration!==void 0&&$.expiration.getTime()-Date.now()<300000;var tp8=O(()=>{lG1();Bd8();Cc=k(K4(),1)});var op8=O(()=>{tp8()});var rp8,u7;var vJ1=O(()=>{rp8=k(G5(),1);u7=class u7 extends rp8.ServiceException{constructor($){super($);Object.setPrototypeOf(this,u7.prototype)}}});var tR0,oR0,rR0,aR0,sR0,eR0,$I0,ZI0,XI0,QI0,YI0,GI0;var xJ1=O(()=>{vJ1();tR0=class tR0 extends u7{name="ExpiredTokenException";$fault="client";constructor($){super({name:"ExpiredTokenException",$fault:"client",...$});Object.setPrototypeOf(this,tR0.prototype)}};oR0=class oR0 extends u7{name="MalformedPolicyDocumentException";$fault="client";constructor($){super({name:"MalformedPolicyDocumentException",$fault:"client",...$});Object.setPrototypeOf(this,oR0.prototype)}};rR0=class rR0 extends u7{name="PackedPolicyTooLargeException";$fault="client";constructor($){super({name:"PackedPolicyTooLargeException",$fault:"client",...$});Object.setPrototypeOf(this,rR0.prototype)}};aR0=class aR0 extends u7{name="RegionDisabledException";$fault="client";constructor($){super({name:"RegionDisabledException",$fault:"client",...$});Object.setPrototypeOf(this,aR0.prototype)}};sR0=class sR0 extends u7{name="IDPRejectedClaimException";$fault="client";constructor($){super({name:"IDPRejectedClaimException",$fault:"client",...$});Object.setPrototypeOf(this,sR0.prototype)}};eR0=class eR0 extends u7{name="InvalidIdentityTokenException";$fault="client";constructor($){super({name:"InvalidIdentityTokenException",$fault:"client",...$});Object.setPrototypeOf(this,eR0.prototype)}};$I0=class $I0 extends u7{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor($){super({name:"IDPCommunicationErrorException",$fault:"client",...$});Object.setPrototypeOf(this,$I0.prototype)}};ZI0=class ZI0 extends u7{name="InvalidAuthorizationMessageException";$fault="client";constructor($){super({name:"InvalidAuthorizationMessageException",$fault:"client",...$});Object.setPrototypeOf(this,ZI0.prototype)}};XI0=class XI0 extends u7{name="ExpiredTradeInTokenException";$fault="client";constructor($){super({name:"ExpiredTradeInTokenException",$fault:"client",...$});Object.setPrototypeOf(this,XI0.prototype)}};QI0=class QI0 extends u7{name="JWTPayloadSizeExceededException";$fault="client";constructor($){super({name:"JWTPayloadSizeExceededException",$fault:"client",...$});Object.setPrototypeOf(this,QI0.prototype)}};YI0=class YI0 extends u7{name="OutboundWebIdentityFederationDisabledException";$fault="client";constructor($){super({name:"OutboundWebIdentityFederationDisabledException",$fault:"client",...$});Object.setPrototypeOf(this,YI0.prototype)}};GI0=class GI0 extends u7{name="SessionDurationEscalationException";$fault="client";constructor($){super({name:"SessionDurationEscalationException",$fault:"client",...$});Object.setPrototypeOf(this,GI0.prototype)}}});var fJ1,ap8,pD$,gG,tD$,oD$,rD$,aD$,sD$,eD$,$E$,ZE$,XE$,QE$,YE$,GE$,sp8,JE$,KE$,WE$,HE$,NE$,bJ1,UE$,FE$,BE$,wE$,OE$,LE$,DE$,EE$,sv,zE$,jE$,PE$,AE$,TE$,RE$,IE$,qE$,ME$,VE$,kE$,SE$,CE$,_E$,vE$,ep8,xE$,fE$,JI0,bE$,yJ1,$t8,Zt8,Xt8,Qt8,Yt8,Gt8,Jt8,Kt8,Wt8,Ht8,Nt8;var CY=O(()=>{xJ1();vJ1();fJ1=k(uK(),1),ap8=fJ1.TypeRegistry.for("smithy.ts.sdk.synthetic.com.amazonaws.sts"),pD$=[-3,"smithy.ts.sdk.synthetic.com.amazonaws.sts","STSServiceException",0,[],[]];ap8.registerError(pD$,u7);gG=fJ1.TypeRegistry.for("com.amazonaws.sts"),tD$=[-3,"com.amazonaws.sts","ExpiredTokenException",{["awsQueryError"]:["ExpiredTokenException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(tD$,tR0);oD$=[-3,"com.amazonaws.sts","ExpiredTradeInTokenException",{["awsQueryError"]:["ExpiredTradeInTokenException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(oD$,XI0);rD$=[-3,"com.amazonaws.sts","IDPCommunicationErrorException",{["awsQueryError"]:["IDPCommunicationError",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(rD$,$I0);aD$=[-3,"com.amazonaws.sts","IDPRejectedClaimException",{["awsQueryError"]:["IDPRejectedClaim",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(aD$,sR0);sD$=[-3,"com.amazonaws.sts","InvalidAuthorizationMessageException",{["awsQueryError"]:["InvalidAuthorizationMessageException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(sD$,ZI0);eD$=[-3,"com.amazonaws.sts","InvalidIdentityTokenException",{["awsQueryError"]:["InvalidIdentityToken",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(eD$,eR0);$E$=[-3,"com.amazonaws.sts","JWTPayloadSizeExceededException",{["awsQueryError"]:["JWTPayloadSizeExceededException",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError($E$,QI0);ZE$=[-3,"com.amazonaws.sts","MalformedPolicyDocumentException",{["awsQueryError"]:["MalformedPolicyDocument",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(ZE$,oR0);XE$=[-3,"com.amazonaws.sts","OutboundWebIdentityFederationDisabledException",{["awsQueryError"]:["OutboundWebIdentityFederationDisabledException",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(XE$,YI0);QE$=[-3,"com.amazonaws.sts","PackedPolicyTooLargeException",{["awsQueryError"]:["PackedPolicyTooLarge",400],["error"]:"client",["httpError"]:400},["message"],[0]];gG.registerError(QE$,rR0);YE$=[-3,"com.amazonaws.sts","RegionDisabledException",{["awsQueryError"]:["RegionDisabledException",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(YE$,aR0);GE$=[-3,"com.amazonaws.sts","SessionDurationEscalationException",{["awsQueryError"]:["SessionDurationEscalationException",403],["error"]:"client",["httpError"]:403},["message"],[0]];gG.registerError(GE$,GI0);sp8=[ap8,gG],JE$=[0,"com.amazonaws.sts","accessKeySecretType",8,0],KE$=[0,"com.amazonaws.sts","clientTokenType",8,0],WE$=[0,"com.amazonaws.sts","SAMLAssertionType",8,0],HE$=[0,"com.amazonaws.sts","tradeInTokenType",8,0],NE$=[0,"com.amazonaws.sts","webIdentityTokenType",8,0],bJ1=[3,"com.amazonaws.sts","AssumedRoleUser",0,["AssumedRoleId","Arn"],[0,0],2],UE$=[3,"com.amazonaws.sts","AssumeRoleRequest",0,["RoleArn","RoleSessionName","PolicyArns","Policy","DurationSeconds","Tags","TransitiveTagKeys","ExternalId","SerialNumber","TokenCode","SourceIdentity","ProvidedContexts"],[0,0,()=>JI0,0,1,()=>yJ1,64,0,0,0,0,()=>bE$],2],FE$=[3,"com.amazonaws.sts","AssumeRoleResponse",0,["Credentials","AssumedRoleUser","PackedPolicySize","SourceIdentity"],[[()=>sv,0],()=>bJ1,1,0]],BE$=[3,"com.amazonaws.sts","AssumeRoleWithSAMLRequest",0,["RoleArn","PrincipalArn","SAMLAssertion","PolicyArns","Policy","DurationSeconds"],[0,0,[()=>WE$,0],()=>JI0,0,1],3],wE$=[3,"com.amazonaws.sts","AssumeRoleWithSAMLResponse",0,["Credentials","AssumedRoleUser","PackedPolicySize","Subject","SubjectType","Issuer","Audience","NameQualifier","SourceIdentity"],[[()=>sv,0],()=>bJ1,1,0,0,0,0,0,0]],OE$=[3,"com.amazonaws.sts","AssumeRoleWithWebIdentityRequest",0,["RoleArn","RoleSessionName","WebIdentityToken","ProviderId","PolicyArns","Policy","DurationSeconds"],[0,0,[()=>KE$,0],0,()=>JI0,0,1],3],LE$=[3,"com.amazonaws.sts","AssumeRoleWithWebIdentityResponse",0,["Credentials","SubjectFromWebIdentityToken","AssumedRoleUser","PackedPolicySize","Provider","Audience","SourceIdentity"],[[()=>sv,0],0,()=>bJ1,1,0,0,0]],DE$=[3,"com.amazonaws.sts","AssumeRootRequest",0,["TargetPrincipal","TaskPolicyArn","DurationSeconds"],[0,()=>ep8,1],2],EE$=[3,"com.amazonaws.sts","AssumeRootResponse",0,["Credentials","SourceIdentity"],[[()=>sv,0],0]],sv=[3,"com.amazonaws.sts","Credentials",0,["AccessKeyId","SecretAccessKey","SessionToken","Expiration"],[0,[()=>JE$,0],0,4],4],zE$=[3,"com.amazonaws.sts","DecodeAuthorizationMessageRequest",0,["EncodedMessage"],[0],1],jE$=[3,"com.amazonaws.sts","DecodeAuthorizationMessageResponse",0,["DecodedMessage"],[0]],PE$=[3,"com.amazonaws.sts","FederatedUser",0,["FederatedUserId","Arn"],[0,0],2],AE$=[3,"com.amazonaws.sts","GetAccessKeyInfoRequest",0,["AccessKeyId"],[0],1],TE$=[3,"com.amazonaws.sts","GetAccessKeyInfoResponse",0,["Account"],[0]],RE$=[3,"com.amazonaws.sts","GetCallerIdentityRequest",0,[],[]],IE$=[3,"com.amazonaws.sts","GetCallerIdentityResponse",0,["UserId","Account","Arn"],[0,0,0]],qE$=[3,"com.amazonaws.sts","GetDelegatedAccessTokenRequest",0,["TradeInToken"],[[()=>HE$,0]],1],ME$=[3,"com.amazonaws.sts","GetDelegatedAccessTokenResponse",0,["Credentials","PackedPolicySize","AssumedPrincipal"],[[()=>sv,0],1,0]],VE$=[3,"com.amazonaws.sts","GetFederationTokenRequest",0,["Name","Policy","PolicyArns","DurationSeconds","Tags"],[0,0,()=>JI0,1,()=>yJ1],1],kE$=[3,"com.amazonaws.sts","GetFederationTokenResponse",0,["Credentials","FederatedUser","PackedPolicySize"],[[()=>sv,0],()=>PE$,1]],SE$=[3,"com.amazonaws.sts","GetSessionTokenRequest",0,["DurationSeconds","SerialNumber","TokenCode"],[1,0,0]],CE$=[3,"com.amazonaws.sts","GetSessionTokenResponse",0,["Credentials"],[[()=>sv,0]]],_E$=[3,"com.amazonaws.sts","GetWebIdentityTokenRequest",0,["Audience","SigningAlgorithm","DurationSeconds","Tags"],[64,0,1,()=>yJ1],2],vE$=[3,"com.amazonaws.sts","GetWebIdentityTokenResponse",0,["WebIdentityToken","Expiration"],[[()=>NE$,0],4]],ep8=[3,"com.amazonaws.sts","PolicyDescriptorType",0,["arn"],[0]],xE$=[3,"com.amazonaws.sts","ProvidedContext",0,["ProviderArn","ContextAssertion"],[0,0]],fE$=[3,"com.amazonaws.sts","Tag",0,["Key","Value"],[0,0],2],JI0=[1,"com.amazonaws.sts","policyDescriptorListType",0,()=>ep8],bE$=[1,"com.amazonaws.sts","ProvidedContextsListType",0,()=>xE$],yJ1=[1,"com.amazonaws.sts","tagListType",0,()=>fE$],$t8=[9,"com.amazonaws.sts","AssumeRole",0,()=>UE$,()=>FE$],Zt8=[9,"com.amazonaws.sts","AssumeRoleWithSAML",0,()=>BE$,()=>wE$],Xt8=[9,"com.amazonaws.sts","AssumeRoleWithWebIdentity",0,()=>OE$,()=>LE$],Qt8=[9,"com.amazonaws.sts","AssumeRoot",0,()=>DE$,()=>EE$],Yt8=[9,"com.amazonaws.sts","DecodeAuthorizationMessage",0,()=>zE$,()=>jE$],Gt8=[9,"com.amazonaws.sts","GetAccessKeyInfo",0,()=>AE$,()=>TE$],Jt8=[9,"com.amazonaws.sts","GetCallerIdentity",0,()=>RE$,()=>IE$],Kt8=[9,"com.amazonaws.sts","GetDelegatedAccessToken",0,()=>qE$,()=>ME$],Wt8=[9,"com.amazonaws.sts","GetFederationToken",0,()=>VE$,()=>kE$],Ht8=[9,"com.amazonaws.sts","GetSessionToken",0,()=>SE$,()=>CE$],Nt8=[9,"com.amazonaws.sts","GetWebIdentityToken",0,()=>_E$,()=>vE$]});var KI0,Ut8,Ft8,Bt8,wt8,Ot8,yL,Lt8=($)=>{return{apiVersion:"2011-06-15",base64Decoder:$?.base64Decoder??yL.fromBase64,base64Encoder:$?.base64Encoder??yL.toBase64,disableHostPrefix:$?.disableHostPrefix??!1,endpointProvider:$?.endpointProvider??x20,extensions:$?.extensions??[],httpAuthSchemeProvider:$?.httpAuthSchemeProvider??Hl8,httpAuthSchemes:$?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(Z)=>Z.getIdentityProvider("aws.auth#sigv4"),signer:new KI0.AwsSdkSigV4Signer},{schemeId:"aws.auth#sigv4a",identityProvider:(Z)=>Z.getIdentityProvider("aws.auth#sigv4a"),signer:new KI0.AwsSdkSigV4ASigner},{schemeId:"smithy.api#noAuth",identityProvider:(Z)=>Z.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Bt8.NoAuthSigner}],logger:$?.logger??new wt8.NoOpLogger,protocol:$?.protocol??Ut8.AwsQueryProtocol,protocolSettings:$?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:sp8,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:$?.serviceId??"STS",signerConstructor:$?.signerConstructor??Ft8.SignatureV4MultiRegion,urlParser:$?.urlParser??Ot8.parseUrl,utf8Decoder:$?.utf8Decoder??yL.fromUtf8,utf8Encoder:$?.utf8Encoder??yL.toUtf8}};var Dt8=O(()=>{uG1();gG1();CY();KI0=k(IL(),1),Ut8=k(Rc(),1),Ft8=k(v20(),1),Bt8=k(dH(),1),wt8=k(G5(),1),Ot8=k(XZ(),1),yL=k(TQ(),1)});var _c,gL,Et8,WI0,SZ,vc,HI0,NI0,zt8=($)=>{WI0.emitWarningIfUnsupportedVersion(process.version);let Z=SZ.resolveDefaultsModeConfig($),X=()=>Z().then(WI0.loadConfigsForDefaultMode),Q=Lt8($);_c.emitWarningIfUnsupportedVersion(process.version);let Y={profile:$?.profile,logger:Q.logger};return{...Q,...$,runtime:"node",defaultsMode:Z,authSchemePreference:$?.authSchemePreference??SZ.loadConfig(gL.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,Y),bodyLengthChecker:$?.bodyLengthChecker??HI0.calculateBodyLength,credentialDefaultProvider:$?.credentialDefaultProvider??_J1,defaultUserAgentProvider:$?.defaultUserAgentProvider??_c.createDefaultUserAgentProvider({serviceId:Q.serviceId,clientVersion:Bl8.version}),httpAuthSchemes:$?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(G)=>G.getIdentityProvider("aws.auth#sigv4")||(async(J)=>await _J1(J?.__config||{})()),signer:new gL.AwsSdkSigV4Signer},{schemeId:"aws.auth#sigv4a",identityProvider:(G)=>G.getIdentityProvider("aws.auth#sigv4a"),signer:new gL.AwsSdkSigV4ASigner},{schemeId:"smithy.api#noAuth",identityProvider:(G)=>G.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Et8.NoAuthSigner}],maxAttempts:$?.maxAttempts??SZ.loadConfig(vc.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,$),region:$?.region??SZ.loadConfig(SZ.NODE_REGION_CONFIG_OPTIONS,{...SZ.NODE_REGION_CONFIG_FILE_OPTIONS,...Y}),requestHandler:NI0.NodeHttpHandler.create($?.requestHandler??X),retryMode:$?.retryMode??SZ.loadConfig({...vc.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await X()).retryMode||vc.DEFAULT_RETRY_MODE},$),sha256:$?.sha256??HI0.Hash.bind(null,"sha256"),sigv4aSigningRegionSet:$?.sigv4aSigningRegionSet??SZ.loadConfig(gL.NODE_SIGV4A_CONFIG_OPTIONS,Y),streamCollector:$?.streamCollector??NI0.streamCollector,useDualstackEndpoint:$?.useDualstackEndpoint??SZ.loadConfig(SZ.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,Y),useFipsEndpoint:$?.useFipsEndpoint??SZ.loadConfig(SZ.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,Y),userAgentAppId:$?.userAgentAppId??SZ.loadConfig(_c.NODE_APP_ID_CONFIG_OPTIONS,Y)}};var jt8=O(()=>{Fl8();op8();Dt8();_c=k(Z9(),1),gL=k(IL(),1),Et8=k(dH(),1),WI0=k(G5(),1),SZ=k(K4(),1),vc=k(RL(),1),HI0=k(TQ(),1),NI0=k(bv(),1)});var Pt8=($)=>{let{httpAuthSchemes:Z,httpAuthSchemeProvider:X,credentials:Q}=$;return{setHttpAuthScheme(Y){let G=Z.findIndex((J)=>J.schemeId===Y.schemeId);if(G===-1)Z.push(Y);else Z.splice(G,1,Y)},httpAuthSchemes(){return Z},setHttpAuthSchemeProvider(Y){X=Y},httpAuthSchemeProvider(){return X},setCredentials(Y){Q=Y},credentials(){return Q}}},At8=($)=>{return{httpAuthSchemes:$.httpAuthSchemes(),httpAuthSchemeProvider:$.httpAuthSchemeProvider(),credentials:$.credentials()}};var UI0,FI0,BI0,Tt8=($,Z)=>{let X=Object.assign(UI0.getAwsRegionExtensionConfiguration($),FI0.getDefaultExtensionConfiguration($),BI0.getHttpHandlerExtensionConfiguration($),Pt8($));return Z.forEach((Q)=>Q.configure(X)),Object.assign($,UI0.resolveAwsRegionExtensionConfiguration(X),FI0.resolveDefaultRuntimeConfig(X),BI0.resolveHttpHandlerRuntimeConfig(X),At8(X))};var Rt8=O(()=>{UI0=k(Z9(),1),FI0=k(G5(),1),BI0=k(XZ(),1)});var GJ,xc,It8,qt8,Mt8,Vt8,wI0,kt8,Se;var gJ1=O(()=>{uG1();bG();jt8();Rt8();GJ=k(Z9(),1),xc=k(dH(),1),It8=k(G5(),1),qt8=k(K4(),1),Mt8=k($9(),1),Vt8=k(XZ(),1),wI0=k(RL(),1),kt8=k(uK(),1);Se=class Se extends It8.Client{config;constructor(...[$]){let Z=zt8($||{});super(Z);this.initConfig=Z;let X=Ul8(Z),Q=GJ.resolveUserAgentConfig(X),Y=wI0.resolveRetryConfig(Q),G=qt8.resolveRegionConfig(Y),J=GJ.resolveHostHeaderConfig(G),K=Mt8.resolveEndpointConfig(J),W=Nl8(K),H=Tt8(W,$?.extensions||[]);this.config=H,this.middlewareStack.use(kt8.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(GJ.getUserAgentPlugin(this.config)),this.middlewareStack.use(wI0.getRetryPlugin(this.config)),this.middlewareStack.use(Vt8.getContentLengthPlugin(this.config)),this.middlewareStack.use(GJ.getHostHeaderPlugin(this.config)),this.middlewareStack.use(GJ.getLoggerPlugin(this.config)),this.middlewareStack.use(GJ.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(xc.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:Kl8,identityProviderConfigProvider:async(N)=>new xc.DefaultIdentityProviderConfig({"aws.auth#sigv4":N.credentials,"aws.auth#sigv4a":N.credentials})})),this.middlewareStack.use(xc.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}});var St8,Ct8,Ce;var hJ1=O(()=>{bG();CY();St8=k(G5(),1),Ct8=k($9(),1);Ce=class Ce extends St8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[Ct8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc($t8).build(){}});var _t8,vt8,uJ1;var cJ1=O(()=>{bG();CY();_t8=k(G5(),1),vt8=k($9(),1);uJ1=class uJ1 extends _t8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[vt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithSAML",{}).n("STSClient","AssumeRoleWithSAMLCommand").sc(Zt8).build(){}});var xt8,ft8,lJ1;var dJ1=O(()=>{bG();CY();xt8=k(G5(),1),ft8=k($9(),1);lJ1=class lJ1 extends xt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ft8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(Xt8).build(){}});var bt8,yt8,mJ1;var iJ1=O(()=>{bG();CY();bt8=k(G5(),1),yt8=k($9(),1);mJ1=class mJ1 extends bt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[yt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoot",{}).n("STSClient","AssumeRootCommand").sc(Qt8).build(){}});var gt8,ht8,nJ1;var pJ1=O(()=>{bG();CY();gt8=k(G5(),1),ht8=k($9(),1);nJ1=class nJ1 extends gt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ht8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","DecodeAuthorizationMessage",{}).n("STSClient","DecodeAuthorizationMessageCommand").sc(Yt8).build(){}});var ut8,ct8,tJ1;var oJ1=O(()=>{bG();CY();ut8=k(G5(),1),ct8=k($9(),1);tJ1=class tJ1 extends ut8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ct8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetAccessKeyInfo",{}).n("STSClient","GetAccessKeyInfoCommand").sc(Gt8).build(){}});var lt8,dt8,rJ1;var aJ1=O(()=>{bG();CY();lt8=k(G5(),1),dt8=k($9(),1);rJ1=class rJ1 extends lt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[dt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetCallerIdentity",{}).n("STSClient","GetCallerIdentityCommand").sc(Jt8).build(){}});var mt8,it8,sJ1;var eJ1=O(()=>{bG();CY();mt8=k(G5(),1),it8=k($9(),1);sJ1=class sJ1 extends mt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[it8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetDelegatedAccessToken",{}).n("STSClient","GetDelegatedAccessTokenCommand").sc(Kt8).build(){}});var nt8,pt8,$K1;var ZK1=O(()=>{bG();CY();nt8=k(G5(),1),pt8=k($9(),1);$K1=class $K1 extends nt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[pt8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetFederationToken",{}).n("STSClient","GetFederationTokenCommand").sc(Wt8).build(){}});var tt8,ot8,XK1;var QK1=O(()=>{bG();CY();tt8=k(G5(),1),ot8=k($9(),1);XK1=class XK1 extends tt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[ot8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetSessionToken",{}).n("STSClient","GetSessionTokenCommand").sc(Ht8).build(){}});var rt8,at8,YK1;var GK1=O(()=>{bG();CY();rt8=k(G5(),1),at8=k($9(),1);YK1=class YK1 extends rt8.Command.classBuilder().ep(A9).m(function($,Z,X,Q){return[at8.getEndpointPlugin(X,$.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","GetWebIdentityToken",{}).n("STSClient","GetWebIdentityTokenCommand").sc(Nt8).build(){}});var st8,yE$,et8;var $o8=O(()=>{hJ1();cJ1();dJ1();iJ1();pJ1();oJ1();aJ1();eJ1();ZK1();QK1();GK1();gJ1();st8=k(G5(),1),yE$={AssumeRoleCommand:Ce,AssumeRoleWithSAMLCommand:uJ1,AssumeRoleWithWebIdentityCommand:lJ1,AssumeRootCommand:mJ1,DecodeAuthorizationMessageCommand:nJ1,GetAccessKeyInfoCommand:tJ1,GetCallerIdentityCommand:rJ1,GetDelegatedAccessTokenCommand:sJ1,GetFederationTokenCommand:$K1,GetSessionTokenCommand:XK1,GetWebIdentityTokenCommand:YK1};et8=class et8 extends Se{};st8.createAggregatedClient(yE$,et8)});var Zo8=O(()=>{hJ1();cJ1();dJ1();iJ1();pJ1();oJ1();aJ1();eJ1();ZK1();QK1();GK1()});var Xo8=()=>{};var Qo8=()=>{};var Yo8=O(()=>{gJ1();$o8();Zo8();CY();xJ1();Xo8();Qo8()});function hL($){return JK1.test($)}var JK1;var fc=O(()=>{JK1=/^[a-z0-9][a-z0-9-]{0,59}$/});function gE$(){if(OI0)return OI0;let $=o0(),Z=$.awsS3TenantProvisionerAccessKeyId,X=$.awsS3TenantProvisionerSecretAccessKey;return OI0=new Se({region:$.s3TenantRegion,...Z&&X?{credentials:{accessKeyId:Z,secretAccessKey:X}}:{}}),OI0}function hE$(){let $=o0().awsS3TenantRoleArn;if(!$)throw new ev(500,"managed file configs require AWS_S3_TENANT_ROLE_ARN to be configured");return $}function LI0($){if(!Go8.test($))throw new ev(400,"invalid site slug");let Z=o0();return{bucket:Z.s3TenantBucket,region:Z.s3TenantRegion,endpoint:Z.s3TenantEndpoint??null,prefix:`${$}/`,forcePathStyle:!1,publicUrlBase:Z.s3TenantPublicUrlBase}}function uE$($,Z){let X=`arn:aws:s3:::${$}`;return JSON.stringify({Version:"2012-10-17",Statement:[{Sid:"TenantObjectAccess",Effect:"Allow",Action:["s3:GetObject","s3:PutObject","s3:DeleteObject","s3:AbortMultipartUpload","s3:ListMultipartUploadParts"],Resource:`${X}/${Z}/*`},{Sid:"TenantPrefixList",Effect:"Allow",Action:["s3:ListBucket"],Resource:X,Condition:{StringLike:{"s3:prefix":[`${Z}/*`]}}}]})}async function Jo8($){if(!Go8.test($))throw new ev(400,"site must be 1-60 chars of lowercase letters, digits, or hyphens, starting with a letter or digit");let Z=o0(),X=hE$(),Q=uE$(Z.s3TenantBucket,$),Y;try{Y=await q9(()=>gE$().send(new Ce({RoleArn:X,RoleSessionName:`s3-${$}`,Policy:Q})),{maxAttempts:3,isRetriable:(J)=>{let K=J?.$metadata?.httpStatusCode,W=J?.name??"";return K===void 0||K>=500||/throttl|timeout/i.test(W)}})}catch(J){if(J instanceof ev)throw J;let K=J instanceof gY?J.cause??J:J,W=K instanceof Error?`${K.name}: ${K.message}`:String(K);throw console.error(`[tenant-credentials] AssumeRole failed: ${W}`),new ev(500,"failed to mint tenant credentials")}let G=Y.Credentials;if(!G?.AccessKeyId||!G?.SecretAccessKey||!G?.SessionToken||!G?.Expiration)throw new ev(500,"assume role returned incomplete credentials");return{accessKeyId:G.AccessKeyId,secretAccessKey:G.SecretAccessKey,sessionToken:G.SessionToken,expiration:G.Expiration}}var Go8,ev,OI0=null;var DI0=O(()=>{Yo8();t4();q8();fc();Go8=JK1;ev=class ev extends Error{status;constructor($,Z){super(Z);this.status=$;this.name="TenantCredentialsError"}}});import J7 from"zod";function _e($){if($==null)return null;let Z=$.trim().replace(/^\/+/,"");if(Z==="")return null;return Z.endsWith("/")?Z:`${Z}/`}function ve($){if($==null)return null;let Z=$.trim().replace(/\/+$/,"");return Z===""?null:Z}var bc,EI0;var zI0=O(()=>{bc=J7.object({id:J7.string(),name:J7.string(),description:J7.string().nullable(),bucket:J7.string(),region:J7.string(),endpoint:J7.string().nullable(),forcePathStyle:J7.boolean(),prefix:J7.string().nullable(),publicUrlBase:J7.string().nullable(),credentialType:J7.enum(["static","sts-session","managed"]),refreshUrl:J7.string().nullable(),siteSlug:J7.string().nullable(),createdBy:J7.string(),createdAt:J7.string(),updatedBy:J7.string(),updatedAt:J7.string()}),EI0=J7.string().min(1).max(128).regex(/^[A-Za-z0-9_.-]+$/,{message:"Name may only contain letters, digits, underscore, dot, and hyphen."})});import CZ from"zod";var KK1;var Ko8=O(()=>{t0();DI0();zI0();KK1=i({name:"FILE_CONFIG_CREATE",description:"Create an S3-compatible bucket configuration scoped to the organization. `static` stores a long-lived key pair (BYOB). `sts-session` stores a refreshUrl + apiKey whose temporary credentials are fetched on demand and auto-refreshed. `managed` stores no secret \u2014 studio mints prefix-scoped credentials for a site slug the org owns on the shared tenant bucket (bucket/region/CDN derived server-side). Secrets are encrypted at rest and never returned by any tool.",inputSchema:CZ.object({name:EI0,description:CZ.string().max(500).optional(),bucket:CZ.string().min(1).max(255).optional(),region:CZ.string().min(1).max(64).optional(),endpoint:CZ.string().url().optional(),forcePathStyle:CZ.boolean().optional(),prefix:CZ.string().max(512).optional(),publicUrlBase:CZ.string().url().optional(),credentialType:CZ.enum(["static","sts-session","managed"]).default("static"),accessKeyId:CZ.string().min(1).optional(),secretAccessKey:CZ.string().min(1).optional(),refreshUrl:CZ.string().url().optional(),apiKey:CZ.string().min(1).optional(),siteSlug:CZ.string().min(1).max(60).optional()}).superRefine(($,Z)=>{if($.credentialType==="managed"){if(!$.siteSlug)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"managed credentials require siteSlug."});if($.accessKeyId||$.secretAccessKey||$.refreshUrl||$.apiKey)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"managed credentials take no accessKeyId/secretAccessKey/refreshUrl/apiKey."});return}if(!$.bucket||!$.region)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"bucket and region are required."});if($.credentialType==="sts-session"){if(!$.refreshUrl||!$.apiKey)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"sts-session requires refreshUrl and apiKey (and no accessKeyId/secretAccessKey)."})}else if(!$.accessKeyId||!$.secretAccessKey)Z.addIssue({code:CZ.ZodIssueCode.custom,message:"static credentials require accessKeyId and secretAccessKey."})}),outputSchema:bc,handler:async($,Z)=>{K0(Z);let X=X0(Z);if(await Z.access.check(),$.credentialType==="managed"){let Y=$.siteSlug;if(!await Z.storage.orgSites.isOwnedBy(Y,X.id))throw Error(`Organization does not own site "${Y}". A site is claimed via the deco import or the org-sites backfill.`);let G=LI0(Y);return Z.storage.orgFileConfigs.create({organizationId:X.id,name:$.name,description:$.description??null,bucket:G.bucket,region:G.region,endpoint:G.endpoint,forcePathStyle:G.forcePathStyle,prefix:_e(G.prefix),publicUrlBase:ve(G.publicUrlBase),refreshUrl:null,siteSlug:Y,credentials:{type:"managed"},createdBy:Z.auth.user.id})}let Q=$.credentialType==="sts-session"?{type:"sts-session",apiKey:$.apiKey}:{type:"static",accessKeyId:$.accessKeyId,secretAccessKey:$.secretAccessKey};return Z.storage.orgFileConfigs.create({organizationId:X.id,name:$.name,description:$.description??null,bucket:$.bucket,region:$.region,endpoint:$.endpoint??null,forcePathStyle:$.forcePathStyle??!1,prefix:_e($.prefix),publicUrlBase:ve($.publicUrlBase),refreshUrl:$.refreshUrl??null,credentials:Q,createdBy:Z.auth.user.id})}})});import WK1 from"zod";var HK1;var Wo8=O(()=>{t0();zI0();HK1=i({name:"FILE_CONFIG_LIST",description:"List S3-compatible bucket configurations for the organization. Credentials are never returned.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:WK1.object({}),outputSchema:WK1.object({configs:WK1.array(bc)}),handler:async($,Z)=>{K0(Z);let X=X0(Z);return await Z.access.check(),{configs:await Z.storage.orgFileConfigs.list(X.id)}}})});import bX from"zod";var NK1;var Ho8=O(()=>{t0();zI0();NK1=i({name:"FILE_CONFIG_UPDATE",description:"Update an S3 bucket configuration. Credentials can be rotated by providing both accessKeyId and secretAccessKey; omit them to leave existing credentials untouched.",inputSchema:bX.object({id:bX.string().min(1),name:EI0.optional(),description:bX.string().max(500).nullable().optional(),bucket:bX.string().min(1).max(255).optional(),region:bX.string().min(1).max(64).optional(),endpoint:bX.string().url().nullable().optional(),forcePathStyle:bX.boolean().optional(),prefix:bX.string().max(512).nullable().optional(),publicUrlBase:bX.string().url().nullable().optional(),accessKeyId:bX.string().min(1).optional(),secretAccessKey:bX.string().min(1).optional(),refreshUrl:bX.string().url().optional(),apiKey:bX.string().min(1).optional()}).superRefine(($,Z)=>{let X=$.accessKeyId!==void 0||$.secretAccessKey!==void 0,Q=$.refreshUrl!==void 0||$.apiKey!==void 0;if(X&&Q)Z.addIssue({code:bX.ZodIssueCode.custom,message:"Provide either static (accessKeyId + secretAccessKey) or sts-session (refreshUrl + apiKey) credentials, not both."});if(X&&!($.accessKeyId&&$.secretAccessKey))Z.addIssue({code:bX.ZodIssueCode.custom,message:"accessKeyId and secretAccessKey must be provided together when rotating static credentials."});if(Q&&!($.refreshUrl&&$.apiKey))Z.addIssue({code:bX.ZodIssueCode.custom,message:"refreshUrl and apiKey must be provided together when rotating sts-session credentials."})}),outputSchema:bc,handler:async($,Z)=>{K0(Z);let X=X0(Z);await Z.access.check();let Q,Y;if($.accessKeyId&&$.secretAccessKey)Q={type:"static",accessKeyId:$.accessKeyId,secretAccessKey:$.secretAccessKey},Y=null;else if($.refreshUrl&&$.apiKey)Q={type:"sts-session",apiKey:$.apiKey},Y=$.refreshUrl;return Z.storage.orgFileConfigs.update({id:$.id,organizationId:X.id,name:$.name,description:$.description,bucket:$.bucket,region:$.region,endpoint:$.endpoint,forcePathStyle:$.forcePathStyle,prefix:$.prefix===void 0?void 0:_e($.prefix),publicUrlBase:$.publicUrlBase===void 0?void 0:ve($.publicUrlBase),refreshUrl:Y,credentials:Q,updatedBy:Z.auth.user.id})}})});import jI0 from"zod";var UK1;var No8=O(()=>{t0();UK1=i({name:"FILE_CONFIG_DELETE",description:"Delete an S3 bucket configuration by id.",inputSchema:jI0.object({id:jI0.string().min(1)}),outputSchema:jI0.object({success:jI0.literal(!0)}),handler:async($,Z)=>{K0(Z);let X=X0(Z);return await Z.access.check(),await Z.storage.orgFileConfigs.delete($.id,X.id),{success:!0}}})});import{randomUUID as cE$}from"crypto";function Uo8($,Z){if(!lE$.has($))throw new $x(`Content type "${$}" is not allowed.`);if(!Number.isFinite(Z)||Z<=0)throw new $x("File size must be a positive number.");if(Z>Zx)throw new $x(`File too large: ${Z} bytes (max ${Zx}).`)}function dE$($){let Z=$.normalize("NFKD").replace(/[\u0300-\u036f]/g,"").toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-.]+|[-.]+$/g,"");if(Z.length<=80)return Z||"file";let X=Z.lastIndexOf(".");if(X>0&&Z.length-X<=10){let Q=Z.slice(X);return Z.slice(0,80-Q.length)+Q}return Z.slice(0,80)}function FK1($,Z){return`${$}/${String(Z).padStart(2,"0")}/`}function Fo8($){let Z=new Date,X=FK1(Z.getUTCFullYear(),Z.getUTCMonth()+1),Q=cE$(),Y=dE$($.filename),G=`${X}${Q}-${Y}`;return $.prefix?`${$.prefix}${G}`:G}var Zx=104857600,lE$,$x;var BK1=O(()=>{lE$=new Set(["image/png","image/jpeg","image/gif","image/webp","image/svg+xml","image/avif","video/mp4","video/webm","video/quicktime","audio/mpeg","audio/wav","audio/ogg","application/pdf","application/json","application/zip","text/plain","text/csv","text/markdown","font/woff","font/woff2","font/ttf","font/otf"]);$x=class $x extends Error{constructor($){super($);this.name="UploadRejected"}}});function mE$($,Z){let X=$.refreshUrl;if(!X)throw Error(`sts-session file config ${$.id} is missing a refreshUrl`);return async()=>{let Q=await fetch(X,{method:"POST",headers:{"x-api-key":Z},signal:AbortSignal.timeout(20000)});if(!Q.ok){let J=await Q.text().catch(()=>"");throw Error(`sts refresh failed (${Q.status}) for file config ${$.id}: ${J.slice(0,200)}`)}let Y=await Q.json();if(!Y.accessKeyId||!Y.secretAccessKey||!Y.sessionToken)throw Error(`sts refresh returned incomplete credentials for file config ${$.id}`);let G=Y.expiration?new Date(Y.expiration):void 0;if(G&&Number.isNaN(G.getTime()))throw Error(`sts refresh returned an invalid expiration for file config ${$.id}: ${Y.expiration}`);return{accessKeyId:Y.accessKeyId,secretAccessKey:Y.secretAccessKey,sessionToken:Y.sessionToken,expiration:G}}}function OK1($){let Z=`${$.info.id}:${$.info.updatedAt}`,X=xe.get(Z);if(X)return X;if(!$.info.region)throw Error(`File config ${$.info.id} missing or empty region`);if(!$.info.bucket)throw Error(`File config ${$.info.id} missing or empty bucket`);let Q=$.credentials.type==="sts-session"?mE$($.info,$.credentials.apiKey):$.credentials.type==="managed"?(()=>{let G=$.info.siteSlug;if(!G)throw Error(`Managed file config ${$.info.id} missing siteSlug`);return()=>Jo8(G)})():(()=>{if(!$.credentials.accessKeyId)throw Error(`File config ${$.info.id} missing or empty accessKeyId`);if(!$.credentials.secretAccessKey)throw Error(`File config ${$.info.id} missing or empty secretAccessKey`);return{accessKeyId:$.credentials.accessKeyId,secretAccessKey:$.credentials.secretAccessKey}})(),Y=new e7({region:$.info.region,endpoint:$.info.endpoint??void 0,forcePathStyle:$.info.forcePathStyle,credentials:Q,requestChecksumCalculation:"WHEN_REQUIRED",responseChecksumValidation:"WHEN_REQUIRED"});if(xe.size>=iE$){let G=xe.keys().next().value;if(G!==void 0)xe.delete(G)}return xe.set(Z,Y),Y}function AI0($,Z){if($.publicUrlBase)return`${$.publicUrlBase}/${PI0(Z)}`;if($.endpoint)return`${$.endpoint.replace(/\/+$/,"")}/${$.bucket}/${PI0(Z)}`;return $.forcePathStyle?`https://s3.${$.region}.amazonaws.com/${$.bucket}/${PI0(Z)}`:`https://${$.bucket}.s3.${$.region}.amazonaws.com/${PI0(Z)}`}function PI0($){return $.split("/").map(encodeURIComponent).join("/")}async function RI0($,Z,X,Q){let Y=await $.resolveById(X,Q);if(Y.info.credentialType==="managed"){let G=Y.info.siteSlug;if(!G||!await Z.isOwnedBy(G,Q))throw new TI0(`Organization does not own site "${G??"(none)"}" for managed file config ${X}`)}return Y}function pE$($,Z,X){let Q=[],Y=Z.getUTCFullYear(),G=Z.getUTCMonth()+1;for(let J=0;J<X;J++)if(Q.push(`${$}${FK1(Y,G)}`),G-=1,G===0)G=12,Y-=1;return Q}async function wo8($,Z,X,Q){let Y=[],G,J=0;do{let K=await $.send(new iY({Bucket:Z,Prefix:X,MaxKeys:1000,ContinuationToken:G}));for(let W of K.Contents??[])Y.push(W);G=K.IsTruncated?K.NextContinuationToken:void 0,J+=1}while(G&&J<Q);return Y}async function Oo8($){let Z=OK1($.ctx),X=Math.min($.maxKeys??50,200),Q=$.ctx.info.prefix??"",Y=$.search?.trim().toLowerCase();if(Y)return sE$({client:Z,ctx:$.ctx,bucketPrefix:Q,target:X,cursor:$.cursor,search:Y,imageOnly:$.imageOnly??!1});let G=pE$(Q,new Date,nE$);if($.cursor){let w=await Z.send(new iY({Bucket:$.ctx.info.bucket,Prefix:Q||void 0,MaxKeys:X,ContinuationToken:$.cursor}));return eE$(w,$.ctx,X,!1,G)}let J=new Map,K=(w)=>{for(let L of w){if(!L.Key||L.Key.endsWith("/")||J.has(L.Key))continue;J.set(L.Key,wK1(L,$.ctx))}},[W,...H]=G;if(W)K(await wo8(Z,$.ctx.info.bucket,W,Bo8));if(J.size<X&&H.length>0){let w=await Promise.all(H.map((L)=>wo8(Z,$.ctx.info.bucket,L,Bo8)));for(let L of w)K(L)}let N=Math.max(1,X-J.size),U=await Z.send(new iY({Bucket:$.ctx.info.bucket,Prefix:Q||void 0,MaxKeys:N}));for(let w of U.Contents??[]){if(J.size>=X)break;if(!w.Key||w.Key.endsWith("/")||J.has(w.Key))continue;if(G.some((L)=>w.Key.startsWith(L)))continue;J.set(w.Key,wK1(w,$.ctx))}let F=U.IsTruncated?U.NextContinuationToken??null:null;return{items:Array.from(J.values()).sort(LK1).slice(0,X),nextCursor:F}}function oE$($){return tE$.test($)}function rE$($,Z,X){return $.filter((Q)=>Q.key.toLowerCase().includes(Z)&&(!X||oE$(Q.key)))}function aE$($){let Z=Boolean($.isTruncated&&$.continuationToken);return{done:$.matchCount>=$.target||!Z||$.pagesScanned>=$.maxPages,nextCursor:Z?$.continuationToken??null:null}}async function sE$($){let Q=[],Y=$.cursor??void 0,G=0,J={done:!1,nextCursor:null};do{let W=await $.client.send(new iY({Bucket:$.ctx.info.bucket,Prefix:$.bucketPrefix||void 0,MaxKeys:1000,ContinuationToken:Y}));G++;let H=[];for(let N of W.Contents??[]){if(!N.Key||N.Key.endsWith("/"))continue;H.push({key:N.Key,size:N.Size??0,lastModified:N.LastModified?N.LastModified.toISOString():null})}Q.push(...rE$(H,$.search,$.imageOnly)),J=aE$({matchCount:Q.length,target:$.target,pagesScanned:G,maxPages:20,isTruncated:Boolean(W.IsTruncated),continuationToken:W.NextContinuationToken}),Y=W.NextContinuationToken}while(!J.done);return{items:Q.map((W)=>({...W,publicUrl:AI0($.ctx.info,W.key)})).sort(LK1),nextCursor:J.nextCursor}}function wK1($,Z){return{key:$.Key,size:$.Size??0,lastModified:$.LastModified?$.LastModified.toISOString():null,publicUrl:AI0(Z.info,$.Key)}}function LK1($,Z){if(!$.lastModified&&!Z.lastModified)return 0;if(!$.lastModified)return 1;if(!Z.lastModified)return-1;return Z.lastModified.localeCompare($.lastModified)}function eE$($,Z,X,Q,Y=[]){let G=($.Contents??[]).filter((J)=>J.Key&&!J.Key.endsWith("/")&&!Y.some((K)=>J.Key.startsWith(K))).slice(0,X).map((J)=>wK1(J,Z));if(Q)G.sort(LK1);return{items:G,nextCursor:$.IsTruncated?$.NextContinuationToken??null:null}}var iE$=256,xe,TI0,nE$=6,Bo8=5,tE$;var DK1=O(()=>{Sm();DI0();BK1();xe=new Map;TI0=class TI0 extends Error{constructor($){super($);this.name="FileConfigForbiddenError"}};tE$=/\.(png|jpe?g|gif|webp|svg|avif|bmp)$/i});import _Y from"zod";var EK1;var Lo8=O(()=>{t0();DK1();EK1=i({name:"FILE_OBJECTS_LIST",description:"List existing objects in a configured S3 bucket (newest first). Returns public URLs computed from the config's publicUrlBase or the bucket's S3 host. Used by the picker dialog to let users select previously uploaded files.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:_Y.object({configId:_Y.string().min(1),cursor:_Y.string().nullable().optional(),maxKeys:_Y.number().int().min(1).max(200).optional(),search:_Y.string().max(256).nullable().optional(),imageOnly:_Y.boolean().optional()}),outputSchema:_Y.object({items:_Y.array(_Y.object({key:_Y.string(),size:_Y.number(),lastModified:_Y.string().nullable(),publicUrl:_Y.string()})),nextCursor:_Y.string().nullable()}),handler:async($,Z)=>{K0(Z);let X=X0(Z);await Z.access.check();let Q=await RI0(Z.storage.orgFileConfigs,Z.storage.orgSites,$.configId,X.id);return Oo8({ctx:Q,cursor:$.cursor,maxKeys:$.maxKeys,search:$.search,imageOnly:$.imageOnly})}})});var Do8=O(()=>{Ko8();Wo8();Ho8();No8();Lo8()});import{z as fe}from"zod";var zK1;var Eo8=O(()=>{t0();zK1=i({name:"INFRA_BILLING_SITES_LIST",description:"List the legacy deco.cx site slugs this organization owns. Empty for orgs with no sites.",annotations:{title:"List Owned Sites",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:fe.object({}),outputSchema:fe.object({sites:fe.array(fe.object({slug:fe.string()}))}),handler:async($,Z)=>{K0(Z),await Z.access.check();let X=X0(Z);return{sites:(await Z.storage.orgSites.listByOrg(X.id)).map(({slug:Y})=>({slug:Y}))}}})});function jK1(){let $=o0();return!!($.clickhouseAnalyticsUrl&&$.clickhouseAnalyticsPassword)}async function Xz$(){if(!II0){let $=o0();II0=Promise.resolve().then(() => k(ga0(),1)).then(({createClient:Z})=>Z({url:$.clickhouseAnalyticsUrl,username:$.clickhouseAnalyticsUsername,password:$.clickhouseAnalyticsPassword,request_timeout:Zz$})).catch((Z)=>{throw II0=null,Z})}return II0}async function qI0($,Z){if(!jK1())return[];return(await(await Xz$()).query({query:$,query_params:Z,format:"JSONEachRow"})).json()}var II0=null,Zz$=20000;var zo8=O(()=>{q8()});function Gz$($){if($.some((X)=>X.status==="rejected"))return console.warn("[deco-legacy] a OneDollarStats host query failed"),null;let Z=new Map;for(let X of $){if(X.status!=="fulfilled")continue;for(let Q of X.value){let Y=Q.dimensions[0]?.split(" ")[0];if(!Y)continue;Z.set(Y,(Z.get(Y)??0)+(Q.metrics[0]??0))}}return Z}async function Po8($,Z,X){let Q=o0().oneDollarStatsApiKey,Y=[...new Set($)];if(!Q||Y.length===0)return null;let G=async(K)=>{let W=await fetch(`${Qz$}/plausible`,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":Q,Accept:"application/json"},body:JSON.stringify({site_id:K,date_range:[Z,X],metrics:["pageviews"],dimensions:["time:day"],pagination:{limit:1e4,offset:0}}),signal:AbortSignal.timeout(Yz$)});if(!W.ok)throw Error(`OneDollarStats ${W.status}`);return(await W.json()).results??[]},J=[];for(let K=0;K<Y.length;K+=jo8)J.push(...await Promise.allSettled(Y.slice(K,K+jo8).map(G)));return Gz$(J)}function Ao8($){if($.endsWith(".deco.site")||$.startsWith("www."))return $;return`www.${$}`}var Qz$="https://deco.lilstts.com",Yz$=1e4,jo8=6;var To8=O(()=>{q8()});function rH(){let $=o0(),Z=$.decoSupabaseUrl,X=$.decoSupabaseServiceKey;if(!Z||!X)return null;return{supabaseUrl:Z,serviceKey:X}}async function yX($,Z,X){let Q=await fetch(`${$}/rest/v1/${X}`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(Ro8)});if(!Q.ok){let Y=await Q.text().catch(()=>Q.statusText);throw console.error(`[deco-legacy] Supabase error (${Q.status}): ${Y}`),Error(`External service error (${Q.status})`)}return Q.json()}async function Xx($,Z,X,Q){let Y=await fetch(`${$}/rest/v1/${X}`,{method:"POST",headers:{apikey:Z,Authorization:`Bearer ${Z}`,"Content-Type":"application/json",Accept:"application/json",Prefer:"return=representation"},body:JSON.stringify(Q),signal:AbortSignal.timeout(Ro8)});if(!Y.ok){let J=await Y.text().catch(()=>Y.statusText);throw console.error(`[deco-legacy] Supabase POST error (${Y.status}): ${J}`),Error(`External service error (${Y.status})`)}let G=await Y.json();if(!G[0])throw Error("Supabase POST returned no rows");return G[0]}var Ro8=15000;var PK1=O(()=>{q8()});function Jz$($){let Z=new Date(Date.UTC($.getUTCFullYear(),$.getUTCMonth(),1)),X=new Date(Date.UTC($.getUTCFullYear(),$.getUTCMonth()+1,0));return{since:Z.toISOString().slice(0,10),until:X.toISOString().slice(0,10)}}async function Wz$($,Z,X){return(await qI0(`SELECT host
        FROM default.fact_usage_daily_view
       WHERE site_id IN (SELECT id FROM default.dim_sites WHERE name IN ({sites:Array(String)}))
         AND date >= {since:Date} AND date <= {until:Date}