npm - decocms - Versions diffs - 4.24.1 → 4.25.0 - Mend

decocms 4.24.1 → 4.25.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (225) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2598,5 +2598,5 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var u11,tV,s04,sk$,c11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",$14,c$,h$,e8,ak$=24,rV,AJ;var QS$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(u11||(u11={}));(function($){var Z=function(g,l){this.hi=g|0,this.lo=l|0},G=function(g){var l,h=new Float64Array(16);if(g)for(l=0;l<g.length;l++)h[l]=g[l];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,l){return g<<l|g>>>32-l}function D(g,l){var h=g[l+3]&255;return h=h<<8|g[l+2]&255,h=h<<8|g[l+1]&255,h<<8|g[l+0]&255}function E(g,l){var h=g[l]<<24|g[l+1]<<16|g[l+2]<<8|g[l+3],o=g[l+4]<<24|g[l+5]<<16|g[l+6]<<8|g[l+7];return new Z(h,o)}function L(g,l,h){var o;for(o=0;o<4;o++)g[l+o]=h&255,h>>>=8}function z(g,l,h){g[l]=h.hi>>24&255,g[l+1]=h.hi>>16&255,g[l+2]=h.hi>>8&255,g[l+3]=h.hi&255,g[l+4]=h.lo>>24&255,g[l+5]=h.lo>>16&255,g[l+6]=h.lo>>8&255,g[l+7]=h.lo&255}function j(g,l,h,o,Y0){var K0,_0=0;for(K0=0;K0<Y0;K0++)_0|=g[l+K0]^h[o+K0];return(1&_0-1>>>8)-1}function P(g,l,h,o){return j(g,l,h,o,16)}function A(g,l,h,o){return j(g,l,h,o,32)}function M(g,l,h,o,Y0){var K0=new Uint32Array(16),_0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),k0,j0,g0;for(k0=0;k0<4;k0++)_0[5*k0]=D(o,4*k0),_0[1+k0]=D(h,4*k0),_0[6+k0]=D(l,4*k0),_0[11+k0]=D(h,16+4*k0);for(k0=0;k0<16;k0++)l0[k0]=_0[k0];for(k0=0;k0<20;k0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=_0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)_0[g0]=K0[g0]}if(Y0){for(k0=0;k0<16;k0++)_0[k0]=_0[k0]+l0[k0]|0;for(k0=0;k0<4;k0++)_0[5*k0]=_0[5*k0]-D(o,4*k0)|0,_0[6+k0]=_0[6+k0]-D(l,4*k0)|0;for(k0=0;k0<4;k0++)L(g,4*k0,_0[5*k0]),L(g,16+4*k0,_0[6+k0])}else for(k0=0;k0<16;k0++)L(g,4*k0,_0[k0]+l0[k0]|0)}function S(g,l,h,o){return M(g,l,h,o,!1),0}function q(g,l,h,o){return M(g,l,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function t(g,l,h,o,Y0,K0,_0){var l0=new Uint8Array(16),P0=new Uint8Array(64),k0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,_0,V);for(j0=0;j0<64;j0++)g[l+j0]=(h?h[o+j0]:0)^P0[j0];k0=1;for(j0=8;j0<16;j0++)k0=k0+(l0[j0]&255)|0,l0[j0]=k0&255,k0>>>=8;if(Y0-=64,l+=64,h)o+=64}if(Y0>0){S(P0,l0,_0,V);for(j0=0;j0<Y0;j0++)g[l+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,l,h,o,Y0){return t(g,l,null,0,h,o,Y0)}function v(g,l,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,l,h,o.subarray(16),K0)}function Z0(g,l,h,o,Y0,K0,_0){var l0=new Uint8Array(32);return q(l0,K0,_0,V),t(g,l,h,o,Y0,K0.subarray(16),l0)}function a(g,l){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+l[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,l,h,o,Y0,K0){var _0,l0,P0,k0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];k0=0;for(P0=0;P0<16;P0++)k0=k0+o0[P0]|0,o0[P0]=k0&255,k0>>>=8;k0=k0+o0[16]|0,o0[16]=k0&3,k0=5*(k0>>>2)|0;for(P0=0;P0<16;P0++)k0=k0+o0[P0]|0,o0[P0]=k0&255,k0>>>=8;k0=k0+o0[16]|0,o0[16]=k0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),_0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=_0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[l+P0]=o0[P0];return 0}function W0(g,l,h,o,Y0,K0){var _0=new Uint8Array(16);return O0(_0,0,h,o,Y0,K0),P(g,l,_0,0)}function J0(g,l,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,l,0,h,o,Y0),O0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,l,h,o,Y0){var K0,_0=new Uint8Array(32);if(h<32)return-1;if(v(_0,0,32,o,Y0),W0(l,16,l,32,h-32,_0)!==0)return-1;Z0(g,0,l,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,l){var h;for(h=0;h<16;h++)g[h]=l[h]|0}function U0(g){var l,h;for(h=0;h<16;h++)g[h]+=65536,l=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=l-1+37*(l-1)*(h===15?1:0),g[h]-=l*65536}function f0(g,l,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^l[K0]),g[K0]^=o,l[K0]^=o}function m0(g,l){var h,o,Y0,K0=G(),_0=G();for(h=0;h<16;h++)_0[h]=l[h];U0(_0),U0(_0),U0(_0);for(o=0;o<2;o++){K0[0]=_0[0]-65517;for(h=1;h<15;h++)K0[h]=_0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=_0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(_0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=_0[h]&255,g[2*h+1]=_0[h]>>8}function x0(g,l){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,l),A(h,0,o,0)}function n0(g){var l=new Uint8Array(32);return m0(l,g),l[0]&1}function N0(g,l){var h;for(h=0;h<16;h++)g[h]=l[2*h]+(l[2*h+1]<<8);g[15]&=32767}function b0(g,l,h){var o;for(o=0;o<16;o++)g[o]=l[o]+h[o]|0}function I0(g,l,h){var o;for(o=0;o<16;o++)g[o]=l[o]-h[o]|0}function F0(g,l,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=l[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,l){F0(g,l,l)}function X0(g,l){var h=G(),o;for(o=0;o<16;o++)h[o]=l[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)F0(h,h,l);for(o=0;o<16;o++)g[o]=h[o]}function S0(g,l){var h=G(),o;for(o=0;o<16;o++)h[o]=l[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)F0(h,h,l);for(o=0;o<16;o++)g[o]=h[o]}function n(g,l,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,_0,l0=G(),P0=G(),k0=G(),j0=G(),g0=G(),o0=G();for(_0=0;_0<31;_0++)o[_0]=l[_0];o[31]=l[31]&127|64,o[0]&=248,N0(Y0,h);for(_0=0;_0<16;_0++)P0[_0]=Y0[_0],j0[_0]=l0[_0]=k0[_0]=0;l0[0]=j0[0]=1;for(_0=254;_0>=0;--_0)K0=o[_0>>>3]>>>(_0&7)&1,f0(l0,P0,K0),f0(k0,j0,K0),b0(g0,l0,k0),I0(l0,l0,k0),b0(k0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,k0,l0),F0(k0,P0,g0),b0(g0,l0,k0),I0(l0,l0,k0),Q0(P0,l0),I0(k0,j0,o0),F0(l0,k0,K),b0(l0,l0,j0),F0(k0,k0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(k0,j0,K0);for(_0=0;_0<16;_0++)Y0[_0+16]=l0[_0],Y0[_0+32]=k0[_0],Y0[_0+48]=P0[_0],Y0[_0+64]=j0[_0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,l){return n(g,l,Q)}function t0(g,l){return X(l,32),$0(g,l)}function R0(g,l,h){var o=new Uint8Array(32);return n(o,h,l),q(g,Y,o,V)}var d=J0,m=s;function V0(g,l,h,o,Y0,K0){var _0=new Uint8Array(32);return R0(_0,Y0,K0),d(g,l,h,o,_0)}function v0(g,l,h,o,Y0,K0){var _0=new Uint8Array(32);return R0(_0,Y0,K0),m(g,l,h,o,_0)}function N1(){var g=0,l=0,h=0,o=0,Y0=65535,K0,_0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,_0=arguments[l0].hi,g+=K0&Y0,l+=K0>>>16,h+=_0&Y0,o+=_0>>>16;return l+=g>>>16,h+=l>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|l<<16)}function i0(g,l){return new Z(g.hi>>>l,g.lo>>>l|g.hi<<32-l)}function z1(){var g=0,l=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,l^=arguments[h].hi;return new Z(l,g)}function R$(g,l){var h,o,Y0=32-l;if(l<32)h=g.hi>>>l|g.lo<<Y0,o=g.lo>>>l|g.hi<<Y0;else if(l<64)h=g.lo>>>l|g.hi<<Y0,o=g.hi>>>l|g.lo<<Y0;return new Z(h,o)}function B6(g,l,h){var o=g.hi&l.hi^~g.hi&h.hi,Y0=g.lo&l.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,l,h){var o=g.hi&l.hi^g.hi&h.hi^l.hi&h.hi,Y0=g.lo&l.lo^g.lo&h.lo^l.lo&h.lo;return new Z(o,Y0)}function h5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function L9(g,l,h){var o=[],Y0=[],K0=[],_0=[],l0,P0,k0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)_0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(k0=0;k0<8;k0++)Y0[k0]=K0[k0];l0=N1(K0[7],e(K0[4]),B6(K0[4],K0[5],K0[6]),o$[P0],_0[P0%16]),Y0[7]=N1(l0,h5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(k0=0;k0<8;k0++)K0[(k0+1)%8]=Y0[k0];if(P0%16===15)for(k0=0;k0<16;k0++)_0[k0]=N1(_0[k0],_0[(k0+9)%16],J1(_0[(k0+1)%16]),r$(_0[(k0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var vG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function T8(g,l,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,_0=h;for(K0=0;K0<64;K0++)o[K0]=vG[K0];L9(o,l,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=l[_0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(_0/536870912|0,_0<<3)),L9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function M6(g,l){var h=G(),o=G(),Y0=G(),K0=G(),_0=G(),l0=G(),P0=G(),k0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,l[1],l[0]),F0(h,h,j0),b0(o,g[0],g[1]),b0(j0,l[0],l[1]),F0(o,o,j0),F0(Y0,g[3],l[3]),F0(Y0,Y0,U),F0(K0,g[2],l[2]),b0(K0,K0,K0),I0(_0,o,h),I0(l0,K0,Y0),b0(P0,K0,Y0),b0(k0,o,h),F0(g[0],_0,l0),F0(g[1],k0,P0),F0(g[2],P0,l0),F0(g[3],_0,k0)}function e4(g,l,h){var o;for(o=0;o<4;o++)f0(g[o],l[o],h)}function A5(g,l){var h=G(),o=G(),Y0=G();X0(Y0,l[2]),F0(h,l[0],Y0),F0(o,l[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function $9(g,l,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,l,o),M6(l,g),M6(g,g),e4(g,l,o)}function z9(g,l){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),$9(g,h,l)}function _1(g,l,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(l,32);T8(o,l,32),o[0]&=248,o[31]&=127,o[31]|=64,z9(Y0,o),A5(g,Y0);for(K0=0;K0<32;K0++)l[K0+32]=g[K0];return 0}var I8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function R8(g,l){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)l[Y0]+=h-16*l[o]*I8[Y0-(o-32)],h=Math.floor((l[Y0]+128)/256),l[Y0]-=h*256;l[Y0]+=h,l[o]=0}h=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=h-(l[31]>>4)*I8[Y0],h=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=h*I8[Y0];for(o=0;o<32;o++)l[o+1]+=l[o]>>8,g[o]=l[o]&255}function $6(g){var l=new Float64Array(64),h;for(h=0;h<64;h++)l[h]=g[h];for(h=0;h<64;h++)g[h]=0;R8(g,l)}function _$(g,l,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),_0=new Uint8Array(64),l0,P0,k0=new Float64Array(64),j0=[G(),G(),G(),G()];T8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=l[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];T8(_0,g.subarray(32),h+32),$6(_0),z9(j0,_0),A5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];T8(K0,g,h+64),$6(K0);for(l0=0;l0<64;l0++)k0[l0]=0;for(l0=0;l0<32;l0++)k0[l0]=_0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)k0[l0+P0]+=K0[l0]*Y0[P0];return R8(g.subarray(32),k0),g0}function w8(g,l){var h=G(),o=G(),Y0=G(),K0=G(),_0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],l),Q0(Y0,g[1]),F0(K0,Y0,w),I0(Y0,Y0,g[2]),b0(K0,g[2],K0),Q0(_0,K0),Q0(l0,_0),F0(P0,l0,_0),F0(h,P0,Y0),F0(h,h,K0),S0(h,h),F0(h,h,Y0),F0(h,h,K0),F0(h,h,K0),F0(g[0],h,K0),Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))F0(g[0],g[0],N);if(Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===l[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function E7(g,l,h,o){var Y0,K0=new Uint8Array(32),_0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(T8(_0,g,h),$6(_0),$9(l0,P0,_0),z9(P0,l.subarray(32)),M6(l0,P0),A5(K0,l0),h-=64,A(l,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0+64];return h}var M$=32,d6=24,o6=32,i8=16,$5=32,C=32,u=32,c=32,I=32,r=d6,y0=o6,d0=i8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:t,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:n,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:V0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:T8,crypto_sign:_$,crypto_sign_keypair:_1,crypto_sign_open:E7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:d6,crypto_secretbox_ZEROBYTES:o6,crypto_secretbox_BOXZEROBYTES:i8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:I8,pack25519:m0,unpack25519:N0,M:F0,A:b0,S:Q0,Z:I0,pow2523:S0,add:M6,set25519:A0,modL:R8,scalarmult:$9,scalarbase:z9};function c1(g,l){if(g.length!==M$)throw Error("bad key size");if(l.length!==d6)throw Error("bad nonce size")}function E$(g,l){if(g.length!==u)throw Error("bad public key size");if(l.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var l=0;l<g.length;l++)g[l]=0}$.randomBytes=function(g){var l=new Uint8Array(g);return X(l,g),l},$.secretbox=function(g,l,h){G$(g,l,h),c1(h,l);var o=new Uint8Array(o6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+o6]=g[K0];return J0(Y0,o,o.length,l,h),Y0.subarray(i8)},$.secretbox.open=function(g,l,h){G$(g,l,h),c1(h,l);var o=new Uint8Array(i8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+i8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,l,h)!==0)return null;return Y0.subarray(o6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=d6,$.secretbox.overheadLength=i8,$.scalarMult=function(g,l){if(G$(g,l),g.length!==C)throw Error("bad n size");if(l.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return n(h,g,l),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var l=new Uint8Array($5);return $0(l,g),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,l,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,l,Y0)},$.box.before=function(g,l){G$(g,l),E$(g,l);var h=new Uint8Array(I);return R0(h,g,l),h},$.box.after=$.secretbox,$.box.open=function(g,l,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),l=new Uint8Array(c);return t0(g,l),{publicKey:g,secretKey:l}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var l=new Uint8Array(u);return $0(l,g),{publicKey:l,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,l){if(G$(g,l),l.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return _$(h,g,g.length,l),h},$.sign.open=function(g,l){if(G$(g,l),l.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=E7(h,g,g.length,l);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,l){var h=$.sign(g,l),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,l,h){if(G$(g,l,h),l.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=l[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return E7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),l=new Uint8Array(x1);return _1(g,l),{publicKey:g,secretKey:l}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var l=new Uint8Array(w1);for(var h=0;h<l.length;h++)l[h]=g[32+h];return{publicKey:l,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var l=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return _1(l,h,!0),{publicKey:l,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var l=new Uint8Array(X8);return T8(l,g,g.length),l},$.hash.hashLength=X8,$.verify=function(g,l){if(G$(g,l),g.length===0||l.length===0)return!1;if(g.length!==l.length)return!1;return j(g,0,l,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var l=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=l)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,l)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}()})(typeof $g<"u"&&J$Z?J$Z:globalThis.nacl=globalThis.nacl||{});tV=typeof $g<"u"&&J$Z?J$Z:globalThis.nacl,s04={fromSeed:tV.sign.keyPair.fromSeed,sign:tV.sign.detached,verify:tV.sign.detached.verify,randomBytes:tV.randomBytes,scalarBaseMultiply:tV.scalarMult.base,seal:tV.box,open:tV.box.open};$14=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(e8||(e8={}));rV=[120,107,118,49];e04(s04);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(AJ||(AJ={}))});function n11($){try{$?.clear?.()}catch{}}async function JS$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=XS$($),W=m11(J.sub),K=i11(new TextEncoder().encode(Z)),w=ek$();try{let U=await GS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:AJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(YS$(U,w))}finally{n11(w),n11(K),n11(W)}}var WS$=O(()=>{QS$()});function F14($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function KS$(){let $=new g1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=E1();if(!Y.natsTunnelPublicEnabled)return Z.json(p11(),503);if(!Y.natsPublicUrl)return Z.json(p11(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(p11(),503)}let Q=PJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await JS$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:tk$(Q),userId:X,allowedConnectionTypes:F14(Y.natsPublicUrl)})}return Z.json(rk$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var p11=()=>({error:"link session unavailable"});var wS$=O(()=>{m6();z8();ok$();WS$()});async function B14($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function O14($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new ON(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function D14($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},H14),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=An(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function E14($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<US$){await n8(FS$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<US$){await n8(FS$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var H14=90000,N14=15000,HS$=()=>{let $=new g1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=D0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=pw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ay({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await KJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&ow(ZZ(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return cQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),cQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},N14);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await B14(F,w)){await O14({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await D14({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await E14({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},US$=60000,FS$=500;var NS$=O(()=>{m6();pV();jY();Z9();hD0();Tn();Lv();B90();qQ()});function z14($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function j14($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(L14)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var L14=1e4,P14=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},BS$=()=>{let $=new g1;return $.use("*",P14),$.get("/",async(Z)=>{let G=E1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await j14(X,Y);return Z.json({apps:z14(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var OS$=O(()=>{m6();z8()});import{z as v1}from"zod";function wK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function C14($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function b14($,Z,G){try{return JSON.parse($)}catch{throw new LS$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function _14($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:b14(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function f14($){let Z=$.map((G)=>{let X=G.function.parameters?wY(G.function.parameters):wY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function x14($){if(!$)return;return{openai:{response_format:$}}}function v14(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function DS$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function ES$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var A14=256,T14,I14,R14,q14,M14,k14,S14,V14,LS$,zS$,jS$;var PS$=O(()=>{y6();m6();pV();T14=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),I14=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),R14=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(I14).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),q14=v1.object({type:v1.literal("text")}),M14=v1.object({type:v1.literal("json_object")}),k14=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),S14=v1.union([q14,M14,k14]),V14=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(R14),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(T14).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:S14.optional(),user:v1.string().optional()});LS$=class LS$ extends Error{constructor($){super($);this.name="MessageConversionError"}};zS$=new g1;zS$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(wK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(wK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(wK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=V14.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(wK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=C14(Q.model);if(!J)return $.json(wK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(wK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(wK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=_14(Q.messages),H=Q.tools?f14(Q.tools):void 0,N=x14(Q.response_format),B=v14(),D=Math.floor(Date.now()/1000);if(Q.stream)return cQ($,async(E)=>{let L=DS$(U,F,H,Q,N,$.req.raw.signal);try{let z=IQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=A14)await M()}else if(S.type==="tool-call"){await M();let q=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:ES$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=DS$(U,F,H,Q,N,$.req.raw.signal),L=await KN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:ES$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(wK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(wK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(wK(Y.message,"server_error"),500)}});jS$=zS$});var TS$;var AS$=O(()=>{TS$={name:"decocms",version:"4.24.1",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function h14(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??g14}}var IS$,g14="https://ph.studio.decocms.com",RS$;var qS$=O(()=>{m6();U_0();bN();nG();z8();Ge0();AS$();IS$=new g1;IS$.get("/",($)=>{let Z={version:TS$.version,theme:Hb1(),...fO().logo&&{logo:fO().logo},...SQ()&&{internalUrl:Ie()},...E1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E1().firecrawlApiKey,auth:aA$(),posthog:h14(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!SQ()&&E1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});RS$=IS$});function MS$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var kS$,c14,u14,SS$;var VS$=O(()=>{m6();I3();Av();W_();kS$=new g1,c14=["range","if-none-match","if-modified-since"],u14=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];kS$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(_y($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await Sn(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&T3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return MS$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of c14){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of u14){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),MS$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});SS$=kS$});var _t=b((aV)=>{var d14=aV&&aV.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),l14=aV&&aV.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))d14(Z,$,G)};Object.defineProperty(aV,"__esModule",{value:!0});l14(dX(),aV)});var _S$=b((CS$)=>{Object.defineProperty(CS$,"__esModule",{value:!0});CS$.version=void 0;CS$.version="3.4.0"});var vS$=b((UK)=>{var m14=UK&&UK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(UK,"__esModule",{value:!0});UK.NodeTransport=UK.VERSION=void 0;UK.nodeResolveHost=o14;var m4=_t(),i14=u0("net"),t11=u0("tls"),n14=u0("path"),fS$=u0("fs"),p14=m14(u0("dns")),t14=_S$();UK.VERSION=t14.version;var r14="nats.js";class xS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=r14,this.version=UK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,i14.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,n14.resolve)($),!(0,fS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,fS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,t11.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,t11.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof t11.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}UK.NodeTransport=xS$;function o14($){let Z=(0,m4.deferred)();return p14.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var uS$=b((cS$)=>{Object.defineProperty(cS$,"__esModule",{value:!0});cS$.connect=a14;var yS$=vS$(),gS$=_t(),hS$=_t();function a14($={}){if((0,hS$.hasWsProtocol)($))return Promise.reject(hS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,gS$.setTransportFactory)({factory:()=>{return new yS$.NodeTransport},dnsResolveFn:yS$.nodeResolveHost}),gS$.NatsConnectionImpl.connect($)}});var dS$=b((kU)=>{var e14=kU&&kU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),$$4=kU&&kU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))e14(Z,$,G)};Object.defineProperty(kU,"__esModule",{value:!0});kU.connect=void 0;var Z$4=uS$();Object.defineProperty(kU,"connect",{enumerable:!0,get:function(){return Z$4.connect}});$$4(_t(),kU)});function nS$($){let Z=$?.connectFn??Q$4,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:Y$4,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=yX(X$4,G$4,B-1,2,0.5);await n8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?lS$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=iS$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function Q$4($){return mS$.connect($)}var lS$,mS$,iS$,G$4=100,X$4=3000,Y$4=3000;var pS$=O(()=>{Z9();lS$=k(kg(),1),mS$=k(dS$(),1),iS$=k(RB(),1)});function Zg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function r11($,Z){return`${$}.${Z}`}class o11{cache;constructor($){this.cache=Zg({ttlMs:$?.ttlMs??J$4,maxSize:$?.maxSize??W$4})}async get($,Z){return this.cache.get(r11($,Z))??null}async set($,Z,G){this.cache.set(r11($,Z),G)}async invalidate($,Z){this.cache.delete(r11($,Z))}teardown(){this.cache.clear()}}var J$4=600000,W$4=5000;var tS$=()=>{};function sE0($,Z){return`${$}:${Z}`}function a11($){let Z=Zg({ttlMs:$?.ttlMs??K$4,maxSize:$?.maxSize??w$4}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(rS$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(sE0(K,w))},set(K,w,U){Z.set(sE0(K,w),U)},invalidate(K,w){Z.delete(sE0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(rS$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(sE0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var rS$="studio.ai-provider-keys.invalidate",K$4=30000,w$4=5000;var oS$=()=>{};class s11{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var aS$=($)=>{let Z;return()=>Z??=$()},e11,$$1;var sS$=O(()=>{I5();e11=aS$(()=>g8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),$$1=aS$(()=>g8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function D$4(){return{name:lw,subjects:[`${kl0}.>`],storage:TJ.StorageType.File,max_age:H$4,max_bytes:B$4,max_msgs_per_subject:O$4,discard:TJ.DiscardPolicy.Old,retention:TJ.RetentionPolicy.Limits,duplicate_window:N$4,num_replicas:1}}class ZV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function eS$($){let Z=$V$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function j$4($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,F$4().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class Z$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await TJ.jetstreamManager($),G=D$4();try{await Z.streams.info(lw),await Z.streams.update(lw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(lw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=j$4(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=j6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Vl0(w,{runId:Z}),H=performance.now()-U;if(e11().record(H),$$1().add(1,{"org.id":X??"unknown"}),z$4?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?eS$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),L$4)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Vl0(Z,{runId:$,dedup:G});if(e11().record(performance.now()-Y),$$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:eS$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=z6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?TJ.DeliverPolicy.New:TJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=UN($),W;try{W=await(await X.consumers.get(lw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=u50({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(g50()).pipeThrough(h50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(lw,{filter:UN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var TJ,$V$,U$4=($)=>{let Z;return()=>Z??=$()},F$4,H$4=86400000000000,N$4=120000000000,B$4=4294967296,O$4=500000,E$4,L$4,z$4;var GV$=O(()=>{bl0();d50();Cl0();I5();sS$();TJ=k(RB(),1),$V$=k(kg(),1),F$4=U$4(()=>g8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));E$4=process.env.STREAM_ENCODE_TRACE==="1",L$4=process.env.DECOPILOT_STREAM_TRACE==="1";z$4=E$4?new ZV$:null});import{z as G8}from"zod";var XV$,YV$,FK,G$1,QV$,JV$,WV$,KV$,P$4,wV$,UV$,FV$,HV$,NV$,A$4,BV$,E8Z,T$4,I$4=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},OV$=($)=>{return new TextEncoder().encode(JSON.stringify($))},DV$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?T$4[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${I$4(Y.error)}`);return Y.data};var EV$=O(()=>{XV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),YV$=G8.array(G8.tuple([G8.string(),G8.string()])),FK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),G$1=G8.string().min(1),QV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:FK,method:G8.string().min(1),url:G8.string().min(1),headers:YV$,replySubject:G$1,bodySubject:G$1.optional(),abortSubject:G$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),JV$=G8.object({type:G8.literal("request.chunk"),requestId:FK,seq:G8.number().int().nonnegative(),data:XV$}),WV$=G8.object({type:G8.literal("request.end"),requestId:FK,seq:G8.number().int().nonnegative()}),KV$=G8.object({type:G8.literal("request.error"),requestId:FK,code:G8.string().min(1),message:G8.string()}),P$4=G8.union([JV$,WV$,KV$]),wV$=G8.object({type:G8.literal("response.ack"),requestId:FK}),UV$=G8.object({type:G8.literal("response.start"),requestId:FK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:YV$}),FV$=G8.object({type:G8.literal("response.chunk"),requestId:FK,seq:G8.number().int().nonnegative(),data:XV$}),HV$=G8.object({type:G8.literal("response.end"),requestId:FK,seq:G8.number().int().nonnegative()}),NV$=G8.object({type:G8.literal("response.error"),requestId:FK,code:G8.string().min(1),message:G8.string()}),A$4=G8.union([wV$,UV$,FV$,HV$,NV$]),BV$=G8.object({type:G8.literal("abort"),requestId:FK,reason:G8.string().optional()}),E8Z=G8.union([QV$,P$4,A$4,BV$]),T$4={"request.start":QV$,"request.chunk":JV$,"request.end":WV$,"request.error":KV$,"response.ack":wV$,"response.start":UV$,"response.chunk":FV$,"response.end":HV$,"response.error":NV$,abort:BV$}});var R$4=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},q$4=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},M$4=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},k$4=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},LV$=($)=>{return R$4(btoa(M$4($)))},zV$=($)=>{return k$4(atob(q$4($)))},S$4;var jV$=O(()=>{S$4=class S$4{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*h$4($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class p$4{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var V$4=30000,C$4=1000,b$4=65536,dQ,_$4=($)=>{return"connection"in $},f$4=($)=>{let Z=_$4($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??V$4,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??C$4,maxChunkBytes:Z.maxChunkBytes??b$4,diagnostics:Z.diagnostics}},PV$=($)=>{return Array.from($.entries())},x$4=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},v$4=($,Z,G)=>{if(x$4(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return PV$(G.headers);return PV$(G.headers)},AV$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},y$4=()=>{return crypto.randomUUID().replaceAll("-","")},g$4=($)=>{try{$?.unsubscribe()}catch{}},c$4=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},u$4=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},wB=($,Z,G)=>{$.publish(Z,OV$(G))},d$4=($)=>{return $.type.startsWith("response.")},X$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},l$4=($)=>{if($==="idle")return new dQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new dQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},TV$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(l$4(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=DV$(W.value.data);if(!d$4(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},m$4=async($)=>{let Z=!1;while(!0){let G=await TV$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new dQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new dQ(G.value.code,G.value.message);throw new dQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},i$4=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){wB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of h$4(J,$.maxChunkBytes)){if(X)return;wB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:LV$(W)}),G++}}}catch(Q){if(X)return;wB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},n$4=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await TV$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new dQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(zV$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new dQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){wB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},UB=($)=>{let Z=f$4($);return c$4(Z.maxChunkBytes),async(G,X)=>{let Y=nk$(G),Q=new Request(G,X),J=y$4(),W=pk$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new dQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,g$4(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new dQ("tunnel_aborted",X$1(Q.signal));wB(Z.connection,W.abort,{type:"abort",requestId:J,reason:X$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new dQ("tunnel_aborted",X$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new dQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);wB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:v$4(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};wB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)wB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?i$4({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await m$4({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(u$4(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:AV$(P.headers)});return new Response(n$4({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:AV$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var IV$=O(()=>{EV$();jV$();tE0();dQ=class dQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var eE0=O(()=>{IV$()});function RV$($){let Z=$.createFetch??t$4,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return Y$1;let Q=PJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return Y$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return Y$1}}}var Y$1,t$4=($,Z)=>UB({connection:$,firstFrameTimeoutMs:Z});var qV$=O(()=>{eE0();Ct();Y$1={online:!1,capabilities:[]}});async function*r$4($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function MV$($){let Z=$.createFetch??((G)=>UB({connection:G,idleTimeoutMs:o$4}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=PJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*r$4(U)}}var o$4=45000;var kV$=O(()=>{eE0();Ct()});import{z as IJ}from"zod";function SV$($){return JSON.stringify($)}var n8Z;var VV$=O(()=>{n8Z=IJ.discriminatedUnion("type",[IJ.object({type:IJ.literal("cancel"),runId:IJ.string()}),IJ.object({type:IJ.literal("cancel_req"),reqId:IJ.string()}),IJ.object({type:IJ.literal("keep_alive")}),IJ.object({type:IJ.literal("shutdown")})])});function CV$($){let Z=$.createFetch??((G)=>UB({connection:G,idleTimeoutMs:a$4}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function bV$($){let Z=$.createFetch??UB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:SV$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var a$4=45000;var _V$=O(()=>{eE0();VV$();Ct()});function $L0($,Z,G,X){if(!X)return!1;return $.emit(Z,A3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var fV$=O(()=>{t8()});class Q$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as s$4,rm as ZL0}from"fs/promises";import{join as GL0}from"path";async function XL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-e$4),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await sV($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await xV$($,Y,Z);else if(!Y.startsWith(".")){let Q=GL0($,Y),J=await sV(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await xV$(Q,K,Z)}if((await sV(Q)).length===0)await ZL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function xV$($,Z,G){let X=0,Y=GL0($,Z),Q=await sV(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=GL0(Y,W),w=await sV(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=GL0(K,F);await ZL0(N,{recursive:!0,force:!0}),X++}}if((await sV(K)).length===0)await ZL0(K,{recursive:!0,force:!0})}if((await sV(Y)).length===0)await ZL0(Y,{recursive:!0,force:!0});return X}async function sV($){try{return(await s$4($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var e$4=30;var J$1=()=>{};import{DBOS as W$1,SchedulerMode as $84}from"@dbos-inc/dbos-sdk";async function G84(){let $=[mQ(),$C(),DK()],Z=0;for(let G of $)try{Z+=await XL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function X84($,Z){await W$1.runStep(()=>G84(),{name:"monitoringRetention"})}function yV$(){if(vV$)return;vV$=!0;let $=W$1.registerWorkflow(X84,{name:"monitoringRetentionWorkflow"});W$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:Z84,mode:$84.ExactlyOncePerIntervalWhenActive})}var Z84="23 4 * * *",vV$=!1;var gV$=O(()=>{gX();J$1()});function hV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await pH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await xc0($.db,Z,X.role);return Y.boundAuth=fc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new zD(G,void 0,Y.boundAuth,X.role,"self"),z40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var cV$=O(()=>{jD();em()});function Y84(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function J84(){for(let $ of Q84)$()}function uV$($){let Z=[...K$1.logs,$];K$1={...K$1,logs:Z.length>500?Z.slice(-500):Z},J84()}function w$1(){return W84}var K$1,Q84,W84=!1;var U$1=O(()=>{K$1=Y84(),Q84=new Set});import{EventEmitter as K84}from"events";var F$1;var dV$=O(()=>{U$1();F$1=new K84;F$1.on("request",($)=>{uV$($)})});function lV$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Gg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Gg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Gg(H.method)}${s4.reset}`}}catch{}}let W=Gg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Gg(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=U84(X),w=J?"\u25C0":"\u2190";if(!w$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=w84(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!w$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);F$1.emit("request",{method:X,path:Gg(Y),status:F,duration:U,timestamp:new Date})}}}var s4,w84=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},U84=($)=>{return s4[$]||s4.reset},Gg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var mV$=O(()=>{U$1();dV$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as tV$}from"crypto";import{mkdir as F84,readdir as H84,rm as iV$,stat as rV$}from"fs/promises";import{join as N$1,relative as N84}from"path";import{z as P$}from"zod";function aV$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return N$1(B84,Z)}function sV$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function H$1($,Z){let G=aV$($),X=sV$(Z);return N$1(G,X)}function O84($,Z,G,X){let Y=E1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return tV$("sha256",Y).update(Q).digest("hex")}function pV$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=O84(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${sV$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function eV$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${tV$("md5","etag").update(X).digest("hex")}"`}async function $C$($,Z,G,X,Y){try{let Q=await H84($,{withFileTypes:!0});for(let J of Q){let W=N$1($,J.name),w=N84(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await $C$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await rV$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:eV$(W,U.mtime,U.size)})}catch{}}}}catch{}}function ZC$($,Z){let X=D0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=aV$(X);await F84(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await $C$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=H$1(X,Q.key),W=await rV$(J);return{contentType:w01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:eV$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??nV$;return{url:pV$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??nV$;return{url:pV$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=H$1(X,Q.key);try{return await iV$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=H$1(X,K);try{await iV$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function B$1($,Z,G){let X=ZC$(Z,G),Y=new Yw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:O5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new kY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),dW(Y,Q,$,"mcp:dev-assets")}async function GC$($,Z,G,X){let Q=ZC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var B84="./data/assets",nV$=3600,oV$,XC$;var YC$=O(()=>{z8();_n();m6();Ju();qv();BG();BE0();oV$=new g1;oV$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return B$1($.req.raw,Z,X)});XC$=oV$});var QC$={};Z6(QC$,{mountDevRoutes:()=>D84});function D84($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return B$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await GC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",XC$);let G=new g1;G.use("*",hQ({mountPath:"/api/dev-assets"})),G.route("/",NE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var JC$=O(()=>{m6();G01();BE0();YC$()});var WC$=O(()=>{Yu0();Qu0();GE()});var YL0=O(()=>{WC$()});var wC$={};Z6(wC$,{streamAgent:()=>KC$,createDecopilotClient:()=>L84});async function E84($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (y6(),Il0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function KC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (y6(),Il0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await E84(F.body);return Q({stream:H})}function L84($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return KC$(Y,X,W,Q,J)}}}import{z as vX}from"zod";function UC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=z84.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:vX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:vX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var z84,l6Z,j84=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},D$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},QL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},P84=($,Z,G)=>{let X=QL0($,Z,G);return new Proxy(Sx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},A84=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => wC$);return J(X,Z.token,$,Y,Q)}}},O$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>O$1(G,Z));if(typeof $==="object"){if(j84($))return A84($,Z);if(D$1($))return P84($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=O$1(Y,Z);return G}return $},FC$=($)=>{return O$1($.state,$)};var Xg=O(()=>{YL0();z84=new Map;l6Z=vX.object({id:vX.string(),title:vX.string(),capabilities:vX.object({vision:vX.boolean().optional(),text:vX.boolean().optional(),tools:vX.boolean().optional(),reasoning:vX.boolean().optional()}).passthrough().optional(),provider:vX.string().optional().nullable(),limits:vX.object({contextWindow:vX.number().optional(),maxOutputTokens:vX.number().optional()}).passthrough().optional()})});var T84,HC$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},I84=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=HC$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},NC$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=HC$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??T84;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},BC$=($,Z,G)=>{let X=new Headers($.headers);return I84(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var OC$=O(()=>{T84=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function DC$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function R84($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function EC$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function LC$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function zC$($){return{handleProtectedResourceMetadata:(w)=>{let U=HK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=HK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=HK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=HK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=EC$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=HK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?LC$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=HK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??HK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=EC$(z),P=HK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=HK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof E$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=LC$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!R84(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=DC$(32),H=U.token_endpoint_auth_method!=="none"?DC$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${HK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var E$1,HK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var L$1=O(()=>{E$1=class E$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as q84}from"async_hooks";var jC$,ft;var z$1=O(()=>{jC$=new q84,ft={getStore:()=>{return jC$.getStore()},run:($,Z,...G)=>jC$.run($,Z,...G)}});var AC$="SELF",WL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},TC$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},PC$="::",IC$=($)=>{let Z=$.indexOf(PC$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+PC$.length);return[G,X]},M84=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},RC$=($)=>{if(WL0($))return[];return Object.keys($)},k84=($,Z)=>{if(WL0($))return $.events;let G=$[Z];if(!G)return[];if(TC$(G))return G.events;return Object.keys(G)},JL0=($,Z,G)=>{if($===AC$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!D$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},S84=($,Z,G)=>{let X=Z;if(WL0($)){let Q=[];for(let J of $.events){let W=IC$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=JL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of RC$($)){let J=JL0(Q,X,G);if(!J)continue;let W=k84($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},V84=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},C84=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},b84=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},_84=async($,Z,G,X,Y)=>{let Q=X;if(WL0($)){let U=new Set;for(let H of $.events){let N=IC$(H);if(!N)continue;let[B,D]=N,E=JL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of RC$($)){let F=JL0(U,Q,Y);if(F)J.set(F,U)}let W=V84(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(TC$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=C84(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return b84(w)},qC$;var j$1=O(()=>{Xg();qC$={subscriptions:S84,execute:_84,parseCron:M84}});function f84($,Z){let G=QL0("self",{meshUrl:$,token:Z});return Sx.forConnection(G)}function x84($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function MC$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=f84($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(x84(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var P$1=O(()=>{Xg();YL0()});import{z as KZ}from"zod";function SU($){return{...$,execute:(Z)=>{let G=xt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var xt=($)=>{let Z=ft.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},kC$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},v84=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?UC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[SU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=kC$(J);await Y(J.runtimeContext.env,{createAgent:MC$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[SU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:m40,outputSchema:i40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=kC$(J);return qC$.execute($.handlers,J.context.events,W,K,w)}})]:[],SU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},SC$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...v84({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=xt(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=xt();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=xt(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Yw({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:O5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new kY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=ft.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=xt();return j({context:B,runtimeContext:P},P)}}};var KL0=O(()=>{wu0();BG();Ju();qv();Xg();j$1();z$1();P$1();j$1();P$1()});import{decodeJwt as VC$}from"jose";var y84=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},CC$=($)=>()=>{return{...$??{}}},g84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=VC$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:CC$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=VC$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=CC$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=FC$(W),y84({env:Q,server:Z,url:X}),Q},h84,bC$=($)=>{let Z=SC$($),G=$.cors??h84,X=$.oauth,Y=X?zC$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return NC$(J,G??{});let w=g84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await ft.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return BC$(U,J,G??{});return U}}};var _C$=O(()=>{Xg();OC$();L$1();L$1();z$1();KL0();KL0();Xg();YL0();h84={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as A$1}from"zod";function d84($,Z){let G=SU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:Ey,outputSchema:Ly,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=fC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return fC$.set(w,F),F}}),X=SU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ZK,outputSchema:_V,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=SU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ZK,outputSchema:A$1.object({versions:A$1.array(_V.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=SU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:jD0,outputSchema:PD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=SU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:A$1.object({}),outputSchema:zy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function xC$($){let Z=$.db,G=new Cf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=d84(G,Q.id),W=bC$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var c84=3600000,u84=500,fC$;var vC$=O(()=>{_C$();KL0();Wy0();e5();fC$=Zg({ttlMs:c84,maxSize:u84,updateRecencyOnGet:!0})});import{sql as l84}from"kysely";import{randomUUID as yC$}from"crypto";import{z as m84}from"zod";async function n84($){let Z=new Date().toISOString(),G=yC$(),X=e6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:yC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await l84`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function p84($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function t84($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",fV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):hC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?gC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:gC$,rateLimitWindow:i84,rateLimitMax:hC$}}async function r84($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function o84($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function cC$($){let{db:Z,db:G}=$,X=new bf(G),Y=new _f(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await p84(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await t84(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await r84(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=$j$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:m84.treeifyError(U.error)},400);let F=await o84(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await n84({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var gC$=!0,i84="hour",hC$=100;var uC$=O(()=>{v4();t8();jy();Ky0();wy0();e5()});var dC$={};Z6(dC$,{createPublishRequestHandler:()=>cC$,createPublicMCPHandler:()=>xC$});var lC$=O(()=>{vC$();uC$()});var bn0={};Z6(bn0,{watchHandler:()=>tC$,getProxyDispatch:()=>$64,createApp:()=>w64});import{readFileSync as a84}from"fs";import{PrometheusSerializer as s84}from"@opentelemetry/exporter-prometheus";import{DBOS as Yg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as Y64,oAuthProtectedResourceMetadata as Q64}from"better-auth/plugins";async function e84($){let Z=$.connect(),G;try{G=await Promise.race([Z,iC$(mC$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),iC$(mC$)]),G.release(),!0}catch{return G.release(!0),!1}}function iC$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function $64(){if(!T$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return T$1}async function Z64($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${EC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function G64($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function w64($={}){let Z=$.database??u6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new o11,J,W,K,w,U,F=null;if($.disableNats)J=a11(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new fn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let m=d.getReader();try{while(!0){let{done:V0}=await m.read();if(V0)break}}catch{}finally{m.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=nS$();let d=E1().natsCredsPath,m;if(d)try{m=a84(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(E1().natsUrls,m?{creds:m}:void 0);let V0=Oy0()?new Jx0({getJetStream:()=>F.getJetStream()}):null;V0?.init().catch(()=>{}),X=V0;let v0=new Rp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=a11({getConnection:()=>F.getConnection()}),W=new s11({getConnection:()=>F.getConnection()}),K=new Z$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=RV$({getConnection:()=>F.getConnection()}),U=CV$({getConnection:()=>F.getConnection()});let N1=bV$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((B6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",B6)})},stop:()=>i0.stop()},CA$(F),F.onReady(()=>{V0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),Wm1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Qg)await Qg();Wx0(X),qp0(Y);let N={storage:new hf(Z.db),sseHub:JZ},B=new ll0(N),D=new ql(Z.db),E=new Q$1(D);E.start(),W.start((d)=>{$90(d),B.execute({type:"CANCEL",taskId:d}).catch((m)=>{console.error("[Decopilot] CancelBroadcast execute failed:",m)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Qg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Km1(),Y.teardown(),Wx0(null),qp0(null)};let L=new g1;if(L.use("*",Y_0({enabled:(d)=>U_(d,"debug")==="1"})),L.use("*",qL0),L.use("/*",Gb1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,m)=>{if(await m(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!E1().noTui)L.use("*",lV$());L.use("*",async(d,m)=>{if(await m(),wg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(e7.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(e7.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(e7.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let m={};if(m.postgres={status:await e84(Z.pool)?"up":"down"},F)m.nats=F.isConnected()?{status:"up"}:{status:"down"};else m.nats={status:"down"};let V0=m.postgres.status==="up",v0=V0?200:503;return d.json({status:V0?"ready":"not_ready",services:m},v0)}),L.get(e7.METRICS,async(d)=>{try{let m=await VL0.collect(),V0=X64.serialize(m.resourceMetrics);return d.text(V0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(m){return console.error("Failed to collect metrics:",m),d.text("# Error collecting metrics",500)}}),L.get(`${e7.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let m=d.req.param("queueName");if(!J64.has(m))return d.json({error:`Unknown queue: ${m}`},404);let V0=await Yg.listQueuedWorkflows({queueName:m,status:"ENQUEUED"});return d.json({queue_length:V0.length})}),L.route("/api/config",RS$),L.route("/api/auth/custom",sA$),L.all("/api/auth/*",async(d)=>{return await Z4.handler(d.req.raw)});let z=uo1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",yV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",yV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",$i),L.route("/",io1()),L.use("/oauth-proxy/:connectionId/*",yV),L.all("/oauth-proxy/:connectionId/*",nC$);let j=async(d)=>{let V0=await W64()(d.req.raw),v0=await V0.json();return Response.json(v0,V0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",yV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let V0=await K64()(d.req.raw),v0=await V0.json();return Response.json(v0,V0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=MA$({ttlMs:120000}),M=await Mo1({db:Z.db,auth:Z4,encryption:{key:E1().encryptionKey},observability:{tracer:CU,meter:g8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,m)=>W.publishControlFrame(d,m)});pH.set(M);let S=new Fw(E1().encryptionKey);UR1({db:Z.db,baseUrl:cJ()});let q=C80(Z.db),V=new Ll(Z.db),t=hV$({db:Z.db});jp0({storage:q,meshContextFactory:t}),sl0({meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:lR$,workPublisher:U}),pl0({dispatchRunFn:uR$,meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new hf(Z.db);C6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await pC$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let m=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return m?{orgId:m.organization_id,createdBy:m.created_by,version:m.message_storage_version??1,status:m.status,runFenceToken:m.run_fence_token,title:m.title??null}:null},completeRunIfNotCompleted:async(d,m)=>{let V0=await f.completeRunIfNotCompleted(d,m);return $L0(JZ,m,d,V0),V0},markRunRequiresAction:async(d,m)=>{let V0=await f.requiresActionIfInProgress(d,m);return $L0(JZ,m,d,V0),V0},markRunFailed:async(d,m,V0,v0)=>{let N1=await f.markRunFailed(d,m,V0,v0);return $L0(JZ,m,d,N1),N1},persistTitle:(d,m,V0)=>f.update(d,m,{title:V0}),onTitleUpdated:async({runId:d,orgId:m,title:V0})=>{let v0=await f.get(d,m).catch(()=>null);JZ.emit(m,A3(d,v0?.status??"in_progress",{title:V0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:m})=>{await f.bumpProgress(d,m)},recordCompleted:async({runId:d,orgId:m,distinctId:V0,usage:v0})=>{r1.capture({distinctId:V0,event:"chat_message_completed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:m,distinctId:V0,reason:v0,kind:N1})=>{r1.capture({distinctId:V0,event:"chat_message_failed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),L3$({meshContextFactory:t,systemDatabaseUrl:qf1(E1().databaseUrl,E1().databasePgSsl),streamBuffer:K}),yV$(),FR1();let v=async(d,m,V0)=>{let v0=await q.findById(d,m);if(!v0)throw Error("Automation not found");return Tp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new xy(q,({automation:d,trigger:m,contextMessages:V0,idempotencyKey:v0})=>bn({automationId:d.id,organizationId:d.organization_id,triggerId:m.id,contextMessages:V0},{idempotencyKey:v0})),a=[mQ(),$C(),DK()];for(let d of a)XL0(d).then(()=>{}).catch((m)=>console.error("[monitoring] Retention cleanup failed:",m));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,m)=>{if(IL0(d.req.path))return m();let V0={measure:async(N1,i0)=>{ZQ(d,N1);try{return await i0()}finally{$Y(d,N1)}}},v0=await pH.create(d.req.raw,{timings:V0});v0.automationRunner=v,d.set("meshContext",v0);try{await m()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),n8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",gV),L.use("/api/:org/v1/*",gV),L.use("/api/:org/files/*",gV),L.use("*",async(d,m)=>{let V0=d.req.path;if(V0.startsWith("/api/org-sso/")||V0.startsWith("/api/auth/")||V0.startsWith("/api/tools/management")||V0.startsWith("/oauth-proxy/"))return m();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return m();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return m();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return m()});let O0=new g1;O0.use("*",hQ({mountPath:"/api/org-sso"})),O0.route("/",fD0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:J_0,grouped:_O()})}),L.use("/mcp/*",async(d,m)=>{ZQ(d,"mcp");try{return await m()}finally{$Y(d,"mcp")}});let W0=async(d,m)=>{let V0=d.var.meshContext;if(!V0.auth.user?.id&&!V0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await m()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),T3()){let{mountDevRoutes:d}=(JC$(),BL0(QC$));d(L,W0)}let J0=new g1;J0.use("*",hQ({mountPath:"/mcp"})),J0.route("/",PN0()),L.route("/mcp",J0);let s=new g1;s.use("*",hQ({mountPath:"/mcp/self"})),s.route("/",lE0()),L.route("/mcp/self",s);let A0=new g1;A0.use("*",hQ({mountPath:"/mcp"})),A0.route("/",IN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,m)=>{ZQ(d,"llm_models");try{return await m()}finally{$Y(d,"llm_models")}});let U0=$01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)T$1=MV$({getConnection:()=>F?.getConnection()??null});L.route("/api",KS$()),L.get("/api/links/me",async(d)=>{try{let m=d.req.header("authorization")??"",V0=/^Bearer\s+(.+)$/i.exec(m),v0=null;if(V0){let i0=(V0[1]??"").trim();v0=await ik$(i0,Z4.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(m){return console.error("[links/me] presence probe failed; reporting offline:",m instanceof Error?m.message:String(m)),d.json(null)}}),L.use("/api/:org/files/*",gV),L.route("/api",SS$);let f0=new g1;f0.use("*",hQ({mountPath:"/api"})),f0.route("/",mE0()),L.route("/api",f0),L.route("/api",jS$);let m0=new g1;m0.use("*",hQ({mountPath:"/api"})),m0.route("/",iE0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new jl(Z.db),n0=new g1;n0.use("*",hQ({mountPath:"/api"})),n0.route("/",UE0()),L.route("/api",n0),L.route("/api/deco-sites",F2$()),L.route("/api/deco-apps",BS$());let N0=new g1;N0.use("*",hQ({mountPath:"/api/deco-sites"})),N0.route("/",HE0()),L.route("/api/deco-sites",N0);let b0=new g1;b0.use("*",hQ({mountPath:"/api/vm-events"})),b0.route("/",HS$()),L.route("/api/vm-events",b0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => (lC$(),dC$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),S0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",yV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",yV),L.all("/org/:orgSlug/registry/*",S0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",S0);let n=lk$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:T3(),mcpAuth:W0,oauthProxyHandler:nC$,watchHandler:tC$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",n),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(sR$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Qg?Promise.resolve(Qg()).finally(()=>{Qg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await vY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await kf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Yg.registerQueue(xY,{partitionQueue:!0,concurrency:Ep0,minPollingIntervalMs:Lp0}),await Yg.registerQueue(lQ,{partitionQueue:!0,concurrency:al0}),await Yg.registerQueue(OK,{partitionQueue:!0,concurrency:nl0}),await Yg.registerQueue(VU,{partitionQueue:!0,concurrency:E3$}),await Y01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Yg.deleteQueue(d))),await zp0(Z.pool),ay1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),HR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var pC$,mC$=5000,T$1=null,Qg=null,nC$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await pH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Tx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Zi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=E1().baseUrl??B.origin;try{let t=new URL(q),f=new URL(V);if(!(t.origin===f.origin||t.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(LC1(J.connection_url))try{let V=await Z64(Y,J.organization_id),t=G64(V);for(let[f,v]of t)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),t=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof t==="string"&&t)P=t;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),t={};try{t=V?JSON.parse(V):{}}catch{z=V}let f=typeof t==="object"&&t!==null&&!Array.isArray(t);if(z===void 0&&!f)z=V;if(z===void 0){let v=t,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let t=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await Ix(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:t,clientId:j,clientSecret:P,tokenEndpoint:f};await new V5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},tC$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return cQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},X64,J64,W64=()=>Q64(Z4),K64=()=>Y64(Z4);var _n0=O(()=>{Z9();z8();NR1();nG();W_();t8();m6();q10();Xb1();Q_0();gw();em();rs0();R3();I5();v4();Ge0();Je0();oR$();Z01();t3();j40();G01();eR$();X01();mk$();wS$();NS$();K01();OS$();AN0();Gi();PS$();RN0();V11();qS$();VS$();S11();k11();nt();gu();pS$();XY();r80();Al();kp0();tS$();oS$();GV$();qV$();kV$();_V$();ml0();fV$();ky0();_y0();gV$();P$0();J$1();gX();Q01();ti();ul0();P$0();oe0();sv0();ev0();cV$();F_();mV$();pV();rs0();Tv();Z90();pC$=k(RB(),1);X64=new s84,J64=new Set([xY,lQ,OK,VU])});var sC$={};Z6(sC$,{resolveClientDir:()=>D64,resolveAssetPathWithTraversalCheck:()=>aC$,isPathWithinDirectory:()=>oC$,createAssetHandler:()=>E64});import{resolve as vt,dirname as U64,join as F64,extname as H64,basename as N64,sep as rC$}from"path";function B64($,Z){if($===Z||N64($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${rC$}assets${rC$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function oC$($,Z){let G=vt(Z),X=vt($);return X===G||X.startsWith(G+"/")}function aC$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=vt(Z,G);if(!oC$(X,Z))return null;return X}function D64($,Z="../client"){let G=new URL($),X=U64(G.pathname);return vt(X,Z)}function E64($={}){let{env:Z="production",clientDir:G=O64,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=aC$({requestPath:W,clientDir:G});if(!K)return null;let w=F64(K,"index.html"),U=vt(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(H64(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:B64(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var O64="./dist/client";var eC$=()=>{};var $b$={};Z6($b$,{tryUpgradePreviewWs:()=>I64,tryHandlePreviewHttp:()=>T64,previewWebSocketHandler:()=>R64,parsePreviewBaseDomain:()=>A64,isPreviewWsData:()=>wL0,extractHandleFromHost:()=>I$1});function j64($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function P64(){return new Response(z64,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function A64($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function I$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function T64($,Z){let G=I$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return gt(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(aS)&&j64($))return P64();return Y.headers.delete(aS),Y}function gt($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function wL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function I64($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=I$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return gt(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return gt(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return gt(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return gt(426,"upgrade failed");return}function yt($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var L64=256,z64='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',R64;var Zb$=O(()=>{kn0();R64={open($){let Z=$.data;if(!wL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),yt($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{yt($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{yt($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!wL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=L64){yt($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!wL0(Z))return;yt($,Z,1000,"")}}});var Qb$={};Z6(Qb$,{printBanner:()=>M64,bannerLines:()=>Yb$,BANNER_LINES:()=>Gb$,BANNER_GRADIENT:()=>Xb$});function q64($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Yb$($){let Z=Gb$.map((G,X)=>{let[Y,Q,J]=q64(Xb$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function M64($){console.log("");for(let Z of Yb$($))console.log(Z);console.log("")}var Gb$,Xb$;var Jb$=O(()=>{Gb$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Xb$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Kb$={};Z6(Kb$,{bootstrapDevLinkSession:()=>v64});import{existsSync as k64}from"fs";import{chmod as S64,mkdir as V64,rename as C64,writeFile as b64}from"fs/promises";import{dirname as _64,join as Wb$}from"path";function f64($){return Wb$($,"dev-link")}function x64($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Wb$(f64($),"session.json")}async function v64($,Z){let G=x64($),X=u6().db,Y=SQ()?await kn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(k64(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await Z4.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await Z4.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await V64(_64(G),{recursive:!0});let W=`${G}.tmp`;return await b64(W,JSON.stringify(J,null,2),{mode:384}),await S64(W,384),await C64(W,G),{path:G,userSub:Y.id}}var wb$=O(()=>{R3();gw();bN()});Z9();var _$1="4";function f$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:_$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}z8();I5();function A_$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function fL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function O81(){let $=A_$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:fL0($,"--cpu-prof-dir")??process.cwd(),name:fL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(fL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}yL0();var rt;function I81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=HB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),rt=setInterval(()=>void Z().catch(()=>{}),$),rt.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(rt)clearInterval(rt)}}import*as R_$ from"bun:jsc";var{startSamplingProfiler:q_$,samplingProfilerStackTraces:M_$}=R_$;function R81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{q_$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=M_$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function q81(){O81();let $=[I81(),T81(),R81()];return()=>{for(let Z of $)Z()}}import{existsSync as m64}from"fs";var fY=E1();N81();var{DBOS:ht,DBOSClient:y64}=await import("@dbos-inc/dbos-sdk");function Bb$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var g64=[xY,lQ,OK,VU],h64=fY.dispatchRole==="worker"?g64:fY.dispatchRole==="api"?[]:void 0;ht.setConfig(f$1({systemDatabaseUrl:Bb$(fY.databaseUrl,fY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:fY.podName,listenQueues:h64}));var{createApp:c64}=await Promise.resolve().then(() => (_n0(),bn0)),{isServerPath:u64}=await Promise.resolve().then(() => (nt(),o$1)),{createAssetHandler:d64,resolveClientDir:Ob$}=await Promise.resolve().then(() => (eC$(),sC$)),l64=fY.port,Ub$=Ob$(import.meta.url,"../client"),i64=m64(Ub$)?Ub$:Ob$(import.meta.url,"../dist/client"),n64=d64({clientDir:i64,isServerPath:u64}),p64={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function t64($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(p64))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:r64,tryHandlePreviewHttp:o64,tryUpgradePreviewWs:a64,previewWebSocketHandler:R$1,isPreviewWsData:q$1}=await Promise.resolve().then(() => (Zb$(),$b$)),{getOrInitSharedRunner:s64}=await Promise.resolve().then(() => (Tn(),EQ$)),Db$=r64(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Fb$={baseDomain:Db$??"",getRunner:s64},UL0=await c64(),M$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),Hb$=process.env.DBOS_CONDUCTOR_URL?.trim();await ht.launch({...M$1?{conductorKey:M$1}:{},...M$1&&Hb$?{conductorURL:Hb$}:{}});console.log(`[dbos] application version: ${ht.applicationVersion}`);await UL0.initDbos();if(!fY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Jb$(),Qb$));console.log("");for(let Z of $())console.log(Z)}var e64=Bun.serve({idleTimeout:0,port:l64,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Db$){let X=await a64($,Z,Fb$);if(X===void 0)return;if(X)return X;let Y=await o64($,Fb$);if(Y)return Y}let G=await n64($);if(G)return t64(G);return UL0.fetch($,{server:Z})},websocket:{open($){if(q$1($.data))R$1.open($)},message($,Z){if(q$1($.data))R$1.message($,Z)},close($){if(q$1($.data))R$1.close($)}},development:!1}),$44=q81();if(fY.localMode)Promise.resolve().then(() => (bN(),ZN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (wb$(),Kb$)),Y=fY.baseUrl??`http://localhost:${fY.port}`,Q=await X(fY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (bN(),ZN0));Z()}catch{}});var Nb$=!1;async function Z44($){let Z;try{Z=await y64.create({systemDatabaseUrl:Bb$(fY.databaseUrl,fY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:lQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:lQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function FL0($){if(Nb$)return;Nb$=!0,console.log(`
+`;return new TextEncoder().encode(X)}var u11,tV,s04,sk$,c11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",$14,c$,h$,e8,ak$=24,rV,AJ;var QS$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(u11||(u11={}));(function($){var Z=function(g,l){this.hi=g|0,this.lo=l|0},G=function(g){var l,h=new Float64Array(16);if(g)for(l=0;l<g.length;l++)h[l]=g[l];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,l){return g<<l|g>>>32-l}function D(g,l){var h=g[l+3]&255;return h=h<<8|g[l+2]&255,h=h<<8|g[l+1]&255,h<<8|g[l+0]&255}function E(g,l){var h=g[l]<<24|g[l+1]<<16|g[l+2]<<8|g[l+3],o=g[l+4]<<24|g[l+5]<<16|g[l+6]<<8|g[l+7];return new Z(h,o)}function L(g,l,h){var o;for(o=0;o<4;o++)g[l+o]=h&255,h>>>=8}function z(g,l,h){g[l]=h.hi>>24&255,g[l+1]=h.hi>>16&255,g[l+2]=h.hi>>8&255,g[l+3]=h.hi&255,g[l+4]=h.lo>>24&255,g[l+5]=h.lo>>16&255,g[l+6]=h.lo>>8&255,g[l+7]=h.lo&255}function j(g,l,h,o,Y0){var K0,_0=0;for(K0=0;K0<Y0;K0++)_0|=g[l+K0]^h[o+K0];return(1&_0-1>>>8)-1}function P(g,l,h,o){return j(g,l,h,o,16)}function A(g,l,h,o){return j(g,l,h,o,32)}function M(g,l,h,o,Y0){var K0=new Uint32Array(16),_0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),k0,j0,g0;for(k0=0;k0<4;k0++)_0[5*k0]=D(o,4*k0),_0[1+k0]=D(h,4*k0),_0[6+k0]=D(l,4*k0),_0[11+k0]=D(h,16+4*k0);for(k0=0;k0<16;k0++)l0[k0]=_0[k0];for(k0=0;k0<20;k0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=_0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)_0[g0]=K0[g0]}if(Y0){for(k0=0;k0<16;k0++)_0[k0]=_0[k0]+l0[k0]|0;for(k0=0;k0<4;k0++)_0[5*k0]=_0[5*k0]-D(o,4*k0)|0,_0[6+k0]=_0[6+k0]-D(l,4*k0)|0;for(k0=0;k0<4;k0++)L(g,4*k0,_0[5*k0]),L(g,16+4*k0,_0[6+k0])}else for(k0=0;k0<16;k0++)L(g,4*k0,_0[k0]+l0[k0]|0)}function S(g,l,h,o){return M(g,l,h,o,!1),0}function q(g,l,h,o){return M(g,l,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function t(g,l,h,o,Y0,K0,_0){var l0=new Uint8Array(16),P0=new Uint8Array(64),k0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,_0,V);for(j0=0;j0<64;j0++)g[l+j0]=(h?h[o+j0]:0)^P0[j0];k0=1;for(j0=8;j0<16;j0++)k0=k0+(l0[j0]&255)|0,l0[j0]=k0&255,k0>>>=8;if(Y0-=64,l+=64,h)o+=64}if(Y0>0){S(P0,l0,_0,V);for(j0=0;j0<Y0;j0++)g[l+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,l,h,o,Y0){return t(g,l,null,0,h,o,Y0)}function v(g,l,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,l,h,o.subarray(16),K0)}function Z0(g,l,h,o,Y0,K0,_0){var l0=new Uint8Array(32);return q(l0,K0,_0,V),t(g,l,h,o,Y0,K0.subarray(16),l0)}function a(g,l){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+l[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,l,h,o,Y0,K0){var _0,l0,P0,k0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];k0=0;for(P0=0;P0<16;P0++)k0=k0+o0[P0]|0,o0[P0]=k0&255,k0>>>=8;k0=k0+o0[16]|0,o0[16]=k0&3,k0=5*(k0>>>2)|0;for(P0=0;P0<16;P0++)k0=k0+o0[P0]|0,o0[P0]=k0&255,k0>>>=8;k0=k0+o0[16]|0,o0[16]=k0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),_0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=_0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[l+P0]=o0[P0];return 0}function W0(g,l,h,o,Y0,K0){var _0=new Uint8Array(16);return O0(_0,0,h,o,Y0,K0),P(g,l,_0,0)}function J0(g,l,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,l,0,h,o,Y0),O0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,l,h,o,Y0){var K0,_0=new Uint8Array(32);if(h<32)return-1;if(v(_0,0,32,o,Y0),W0(l,16,l,32,h-32,_0)!==0)return-1;Z0(g,0,l,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,l){var h;for(h=0;h<16;h++)g[h]=l[h]|0}function U0(g){var l,h;for(h=0;h<16;h++)g[h]+=65536,l=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=l-1+37*(l-1)*(h===15?1:0),g[h]-=l*65536}function f0(g,l,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^l[K0]),g[K0]^=o,l[K0]^=o}function m0(g,l){var h,o,Y0,K0=G(),_0=G();for(h=0;h<16;h++)_0[h]=l[h];U0(_0),U0(_0),U0(_0);for(o=0;o<2;o++){K0[0]=_0[0]-65517;for(h=1;h<15;h++)K0[h]=_0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=_0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(_0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=_0[h]&255,g[2*h+1]=_0[h]>>8}function x0(g,l){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,l),A(h,0,o,0)}function n0(g){var l=new Uint8Array(32);return m0(l,g),l[0]&1}function N0(g,l){var h;for(h=0;h<16;h++)g[h]=l[2*h]+(l[2*h+1]<<8);g[15]&=32767}function b0(g,l,h){var o;for(o=0;o<16;o++)g[o]=l[o]+h[o]|0}function I0(g,l,h){var o;for(o=0;o<16;o++)g[o]=l[o]-h[o]|0}function F0(g,l,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=l[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,l){F0(g,l,l)}function X0(g,l){var h=G(),o;for(o=0;o<16;o++)h[o]=l[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)F0(h,h,l);for(o=0;o<16;o++)g[o]=h[o]}function S0(g,l){var h=G(),o;for(o=0;o<16;o++)h[o]=l[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)F0(h,h,l);for(o=0;o<16;o++)g[o]=h[o]}function n(g,l,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,_0,l0=G(),P0=G(),k0=G(),j0=G(),g0=G(),o0=G();for(_0=0;_0<31;_0++)o[_0]=l[_0];o[31]=l[31]&127|64,o[0]&=248,N0(Y0,h);for(_0=0;_0<16;_0++)P0[_0]=Y0[_0],j0[_0]=l0[_0]=k0[_0]=0;l0[0]=j0[0]=1;for(_0=254;_0>=0;--_0)K0=o[_0>>>3]>>>(_0&7)&1,f0(l0,P0,K0),f0(k0,j0,K0),b0(g0,l0,k0),I0(l0,l0,k0),b0(k0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,k0,l0),F0(k0,P0,g0),b0(g0,l0,k0),I0(l0,l0,k0),Q0(P0,l0),I0(k0,j0,o0),F0(l0,k0,K),b0(l0,l0,j0),F0(k0,k0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(k0,j0,K0);for(_0=0;_0<16;_0++)Y0[_0+16]=l0[_0],Y0[_0+32]=k0[_0],Y0[_0+48]=P0[_0],Y0[_0+64]=j0[_0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,l){return n(g,l,Q)}function t0(g,l){return X(l,32),$0(g,l)}function R0(g,l,h){var o=new Uint8Array(32);return n(o,h,l),q(g,Y,o,V)}var d=J0,m=s;function V0(g,l,h,o,Y0,K0){var _0=new Uint8Array(32);return R0(_0,Y0,K0),d(g,l,h,o,_0)}function v0(g,l,h,o,Y0,K0){var _0=new Uint8Array(32);return R0(_0,Y0,K0),m(g,l,h,o,_0)}function N1(){var g=0,l=0,h=0,o=0,Y0=65535,K0,_0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,_0=arguments[l0].hi,g+=K0&Y0,l+=K0>>>16,h+=_0&Y0,o+=_0>>>16;return l+=g>>>16,h+=l>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|l<<16)}function i0(g,l){return new Z(g.hi>>>l,g.lo>>>l|g.hi<<32-l)}function z1(){var g=0,l=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,l^=arguments[h].hi;return new Z(l,g)}function R$(g,l){var h,o,Y0=32-l;if(l<32)h=g.hi>>>l|g.lo<<Y0,o=g.lo>>>l|g.hi<<Y0;else if(l<64)h=g.lo>>>l|g.hi<<Y0,o=g.hi>>>l|g.lo<<Y0;return new Z(h,o)}function B6(g,l,h){var o=g.hi&l.hi^~g.hi&h.hi,Y0=g.lo&l.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,l,h){var o=g.hi&l.hi^g.hi&h.hi^l.hi&h.hi,Y0=g.lo&l.lo^g.lo&h.lo^l.lo&h.lo;return new Z(o,Y0)}function h5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function L9(g,l,h){var o=[],Y0=[],K0=[],_0=[],l0,P0,k0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)_0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(k0=0;k0<8;k0++)Y0[k0]=K0[k0];l0=N1(K0[7],e(K0[4]),B6(K0[4],K0[5],K0[6]),o$[P0],_0[P0%16]),Y0[7]=N1(l0,h5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(k0=0;k0<8;k0++)K0[(k0+1)%8]=Y0[k0];if(P0%16===15)for(k0=0;k0<16;k0++)_0[k0]=N1(_0[k0],_0[(k0+9)%16],J1(_0[(k0+1)%16]),r$(_0[(k0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var vG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function T8(g,l,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,_0=h;for(K0=0;K0<64;K0++)o[K0]=vG[K0];L9(o,l,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=l[_0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(_0/536870912|0,_0<<3)),L9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function M6(g,l){var h=G(),o=G(),Y0=G(),K0=G(),_0=G(),l0=G(),P0=G(),k0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,l[1],l[0]),F0(h,h,j0),b0(o,g[0],g[1]),b0(j0,l[0],l[1]),F0(o,o,j0),F0(Y0,g[3],l[3]),F0(Y0,Y0,U),F0(K0,g[2],l[2]),b0(K0,K0,K0),I0(_0,o,h),I0(l0,K0,Y0),b0(P0,K0,Y0),b0(k0,o,h),F0(g[0],_0,l0),F0(g[1],k0,P0),F0(g[2],P0,l0),F0(g[3],_0,k0)}function e4(g,l,h){var o;for(o=0;o<4;o++)f0(g[o],l[o],h)}function A5(g,l){var h=G(),o=G(),Y0=G();X0(Y0,l[2]),F0(h,l[0],Y0),F0(o,l[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function $9(g,l,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,l,o),M6(l,g),M6(g,g),e4(g,l,o)}function z9(g,l){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),$9(g,h,l)}function _1(g,l,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(l,32);T8(o,l,32),o[0]&=248,o[31]&=127,o[31]|=64,z9(Y0,o),A5(g,Y0);for(K0=0;K0<32;K0++)l[K0+32]=g[K0];return 0}var I8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function R8(g,l){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)l[Y0]+=h-16*l[o]*I8[Y0-(o-32)],h=Math.floor((l[Y0]+128)/256),l[Y0]-=h*256;l[Y0]+=h,l[o]=0}h=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=h-(l[31]>>4)*I8[Y0],h=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=h*I8[Y0];for(o=0;o<32;o++)l[o+1]+=l[o]>>8,g[o]=l[o]&255}function $6(g){var l=new Float64Array(64),h;for(h=0;h<64;h++)l[h]=g[h];for(h=0;h<64;h++)g[h]=0;R8(g,l)}function _$(g,l,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),_0=new Uint8Array(64),l0,P0,k0=new Float64Array(64),j0=[G(),G(),G(),G()];T8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=l[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];T8(_0,g.subarray(32),h+32),$6(_0),z9(j0,_0),A5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];T8(K0,g,h+64),$6(K0);for(l0=0;l0<64;l0++)k0[l0]=0;for(l0=0;l0<32;l0++)k0[l0]=_0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)k0[l0+P0]+=K0[l0]*Y0[P0];return R8(g.subarray(32),k0),g0}function w8(g,l){var h=G(),o=G(),Y0=G(),K0=G(),_0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],l),Q0(Y0,g[1]),F0(K0,Y0,w),I0(Y0,Y0,g[2]),b0(K0,g[2],K0),Q0(_0,K0),Q0(l0,_0),F0(P0,l0,_0),F0(h,P0,Y0),F0(h,h,K0),S0(h,h),F0(h,h,Y0),F0(h,h,K0),F0(h,h,K0),F0(g[0],h,K0),Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))F0(g[0],g[0],N);if(Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===l[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function E7(g,l,h,o){var Y0,K0=new Uint8Array(32),_0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(T8(_0,g,h),$6(_0),$9(l0,P0,_0),z9(P0,l.subarray(32)),M6(l0,P0),A5(K0,l0),h-=64,A(l,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0+64];return h}var M$=32,d6=24,o6=32,i8=16,$5=32,C=32,u=32,c=32,I=32,r=d6,y0=o6,d0=i8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:t,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:n,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:V0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:T8,crypto_sign:_$,crypto_sign_keypair:_1,crypto_sign_open:E7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:d6,crypto_secretbox_ZEROBYTES:o6,crypto_secretbox_BOXZEROBYTES:i8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:I8,pack25519:m0,unpack25519:N0,M:F0,A:b0,S:Q0,Z:I0,pow2523:S0,add:M6,set25519:A0,modL:R8,scalarmult:$9,scalarbase:z9};function c1(g,l){if(g.length!==M$)throw Error("bad key size");if(l.length!==d6)throw Error("bad nonce size")}function E$(g,l){if(g.length!==u)throw Error("bad public key size");if(l.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var l=0;l<g.length;l++)g[l]=0}$.randomBytes=function(g){var l=new Uint8Array(g);return X(l,g),l},$.secretbox=function(g,l,h){G$(g,l,h),c1(h,l);var o=new Uint8Array(o6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+o6]=g[K0];return J0(Y0,o,o.length,l,h),Y0.subarray(i8)},$.secretbox.open=function(g,l,h){G$(g,l,h),c1(h,l);var o=new Uint8Array(i8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+i8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,l,h)!==0)return null;return Y0.subarray(o6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=d6,$.secretbox.overheadLength=i8,$.scalarMult=function(g,l){if(G$(g,l),g.length!==C)throw Error("bad n size");if(l.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return n(h,g,l),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var l=new Uint8Array($5);return $0(l,g),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,l,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,l,Y0)},$.box.before=function(g,l){G$(g,l),E$(g,l);var h=new Uint8Array(I);return R0(h,g,l),h},$.box.after=$.secretbox,$.box.open=function(g,l,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),l=new Uint8Array(c);return t0(g,l),{publicKey:g,secretKey:l}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var l=new Uint8Array(u);return $0(l,g),{publicKey:l,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,l){if(G$(g,l),l.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return _$(h,g,g.length,l),h},$.sign.open=function(g,l){if(G$(g,l),l.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=E7(h,g,g.length,l);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,l){var h=$.sign(g,l),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,l,h){if(G$(g,l,h),l.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=l[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return E7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),l=new Uint8Array(x1);return _1(g,l),{publicKey:g,secretKey:l}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var l=new Uint8Array(w1);for(var h=0;h<l.length;h++)l[h]=g[32+h];return{publicKey:l,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var l=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return _1(l,h,!0),{publicKey:l,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var l=new Uint8Array(X8);return T8(l,g,g.length),l},$.hash.hashLength=X8,$.verify=function(g,l){if(G$(g,l),g.length===0||l.length===0)return!1;if(g.length!==l.length)return!1;return j(g,0,l,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var l=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=l)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,l)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}()})(typeof $g<"u"&&J$Z?J$Z:globalThis.nacl=globalThis.nacl||{});tV=typeof $g<"u"&&J$Z?J$Z:globalThis.nacl,s04={fromSeed:tV.sign.keyPair.fromSeed,sign:tV.sign.detached,verify:tV.sign.detached.verify,randomBytes:tV.randomBytes,scalarBaseMultiply:tV.scalarMult.base,seal:tV.box,open:tV.box.open};$14=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(e8||(e8={}));rV=[120,107,118,49];e04(s04);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(AJ||(AJ={}))});function n11($){try{$?.clear?.()}catch{}}async function JS$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=XS$($),W=m11(J.sub),K=i11(new TextEncoder().encode(Z)),w=ek$();try{let U=await GS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:AJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(YS$(U,w))}finally{n11(w),n11(K),n11(W)}}var WS$=O(()=>{QS$()});function F14($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function KS$(){let $=new g1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=E1();if(!Y.natsTunnelPublicEnabled)return Z.json(p11(),503);if(!Y.natsPublicUrl)return Z.json(p11(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(p11(),503)}let Q=PJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await JS$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:tk$(Q),userId:X,allowedConnectionTypes:F14(Y.natsPublicUrl)})}return Z.json(rk$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var p11=()=>({error:"link session unavailable"});var wS$=O(()=>{m6();z8();ok$();WS$()});async function B14($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function O14($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new ON(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function D14($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},H14),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=An(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function E14($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<US$){await n8(FS$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<US$){await n8(FS$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var H14=90000,N14=15000,HS$=()=>{let $=new g1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=D0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=pw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ay({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await KJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&ow(ZZ(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return cQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),cQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},N14);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await B14(F,w)){await O14({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await D14({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await E14({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},US$=60000,FS$=500;var NS$=O(()=>{m6();pV();jY();Z9();hD0();Tn();Lv();B90();qQ()});function z14($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function j14($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(L14)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var L14=1e4,P14=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},BS$=()=>{let $=new g1;return $.use("*",P14),$.get("/",async(Z)=>{let G=E1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await j14(X,Y);return Z.json({apps:z14(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var OS$=O(()=>{m6();z8()});import{z as v1}from"zod";function wK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function C14($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function b14($,Z,G){try{return JSON.parse($)}catch{throw new LS$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function _14($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:b14(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function f14($){let Z=$.map((G)=>{let X=G.function.parameters?wY(G.function.parameters):wY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function x14($){if(!$)return;return{openai:{response_format:$}}}function v14(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function DS$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function ES$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var A14=256,T14,I14,R14,q14,M14,k14,S14,V14,LS$,zS$,jS$;var PS$=O(()=>{y6();m6();pV();T14=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),I14=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),R14=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(I14).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),q14=v1.object({type:v1.literal("text")}),M14=v1.object({type:v1.literal("json_object")}),k14=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),S14=v1.union([q14,M14,k14]),V14=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(R14),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(T14).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:S14.optional(),user:v1.string().optional()});LS$=class LS$ extends Error{constructor($){super($);this.name="MessageConversionError"}};zS$=new g1;zS$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(wK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(wK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(wK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=V14.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(wK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=C14(Q.model);if(!J)return $.json(wK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(wK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(wK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=_14(Q.messages),H=Q.tools?f14(Q.tools):void 0,N=x14(Q.response_format),B=v14(),D=Math.floor(Date.now()/1000);if(Q.stream)return cQ($,async(E)=>{let L=DS$(U,F,H,Q,N,$.req.raw.signal);try{let z=IQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=A14)await M()}else if(S.type==="tool-call"){await M();let q=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:ES$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=DS$(U,F,H,Q,N,$.req.raw.signal),L=await KN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:ES$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(wK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(wK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(wK(Y.message,"server_error"),500)}});jS$=zS$});var TS$;var AS$=O(()=>{TS$={name:"decocms",version:"4.25.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function h14(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??g14}}var IS$,g14="https://ph.studio.decocms.com",RS$;var qS$=O(()=>{m6();U_0();bN();nG();z8();Ge0();AS$();IS$=new g1;IS$.get("/",($)=>{let Z={version:TS$.version,theme:Hb1(),...fO().logo&&{logo:fO().logo},...SQ()&&{internalUrl:Ie()},...E1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E1().firecrawlApiKey,auth:aA$(),posthog:h14(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!SQ()&&E1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});RS$=IS$});function MS$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var kS$,c14,u14,SS$;var VS$=O(()=>{m6();I3();Av();W_();kS$=new g1,c14=["range","if-none-match","if-modified-since"],u14=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];kS$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(_y($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await Sn(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&T3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return MS$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of c14){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of u14){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),MS$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});SS$=kS$});var _t=b((aV)=>{var d14=aV&&aV.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),l14=aV&&aV.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))d14(Z,$,G)};Object.defineProperty(aV,"__esModule",{value:!0});l14(dX(),aV)});var _S$=b((CS$)=>{Object.defineProperty(CS$,"__esModule",{value:!0});CS$.version=void 0;CS$.version="3.4.0"});var vS$=b((UK)=>{var m14=UK&&UK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(UK,"__esModule",{value:!0});UK.NodeTransport=UK.VERSION=void 0;UK.nodeResolveHost=o14;var m4=_t(),i14=u0("net"),t11=u0("tls"),n14=u0("path"),fS$=u0("fs"),p14=m14(u0("dns")),t14=_S$();UK.VERSION=t14.version;var r14="nats.js";class xS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=r14,this.version=UK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,i14.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,n14.resolve)($),!(0,fS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,fS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,t11.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,t11.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof t11.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}UK.NodeTransport=xS$;function o14($){let Z=(0,m4.deferred)();return p14.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var uS$=b((cS$)=>{Object.defineProperty(cS$,"__esModule",{value:!0});cS$.connect=a14;var yS$=vS$(),gS$=_t(),hS$=_t();function a14($={}){if((0,hS$.hasWsProtocol)($))return Promise.reject(hS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,gS$.setTransportFactory)({factory:()=>{return new yS$.NodeTransport},dnsResolveFn:yS$.nodeResolveHost}),gS$.NatsConnectionImpl.connect($)}});var dS$=b((kU)=>{var e14=kU&&kU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),$$4=kU&&kU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))e14(Z,$,G)};Object.defineProperty(kU,"__esModule",{value:!0});kU.connect=void 0;var Z$4=uS$();Object.defineProperty(kU,"connect",{enumerable:!0,get:function(){return Z$4.connect}});$$4(_t(),kU)});function nS$($){let Z=$?.connectFn??Q$4,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:Y$4,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=yX(X$4,G$4,B-1,2,0.5);await n8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?lS$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=iS$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function Q$4($){return mS$.connect($)}var lS$,mS$,iS$,G$4=100,X$4=3000,Y$4=3000;var pS$=O(()=>{Z9();lS$=k(kg(),1),mS$=k(dS$(),1),iS$=k(RB(),1)});function Zg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function r11($,Z){return`${$}.${Z}`}class o11{cache;constructor($){this.cache=Zg({ttlMs:$?.ttlMs??J$4,maxSize:$?.maxSize??W$4})}async get($,Z){return this.cache.get(r11($,Z))??null}async set($,Z,G){this.cache.set(r11($,Z),G)}async invalidate($,Z){this.cache.delete(r11($,Z))}teardown(){this.cache.clear()}}var J$4=600000,W$4=5000;var tS$=()=>{};function sE0($,Z){return`${$}:${Z}`}function a11($){let Z=Zg({ttlMs:$?.ttlMs??K$4,maxSize:$?.maxSize??w$4}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(rS$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(sE0(K,w))},set(K,w,U){Z.set(sE0(K,w),U)},invalidate(K,w){Z.delete(sE0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(rS$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(sE0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var rS$="studio.ai-provider-keys.invalidate",K$4=30000,w$4=5000;var oS$=()=>{};class s11{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var aS$=($)=>{let Z;return()=>Z??=$()},e11,$$1;var sS$=O(()=>{I5();e11=aS$(()=>g8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),$$1=aS$(()=>g8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function D$4(){return{name:lw,subjects:[`${kl0}.>`],storage:TJ.StorageType.File,max_age:H$4,max_bytes:B$4,max_msgs_per_subject:O$4,discard:TJ.DiscardPolicy.Old,retention:TJ.RetentionPolicy.Limits,duplicate_window:N$4,num_replicas:1}}class ZV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function eS$($){let Z=$V$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function j$4($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,F$4().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class Z$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await TJ.jetstreamManager($),G=D$4();try{await Z.streams.info(lw),await Z.streams.update(lw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(lw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=j$4(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=j6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Vl0(w,{runId:Z}),H=performance.now()-U;if(e11().record(H),$$1().add(1,{"org.id":X??"unknown"}),z$4?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?eS$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),L$4)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Vl0(Z,{runId:$,dedup:G});if(e11().record(performance.now()-Y),$$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:eS$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=z6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?TJ.DeliverPolicy.New:TJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=UN($),W;try{W=await(await X.consumers.get(lw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=u50({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(g50()).pipeThrough(h50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(lw,{filter:UN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var TJ,$V$,U$4=($)=>{let Z;return()=>Z??=$()},F$4,H$4=86400000000000,N$4=120000000000,B$4=4294967296,O$4=500000,E$4,L$4,z$4;var GV$=O(()=>{bl0();d50();Cl0();I5();sS$();TJ=k(RB(),1),$V$=k(kg(),1),F$4=U$4(()=>g8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));E$4=process.env.STREAM_ENCODE_TRACE==="1",L$4=process.env.DECOPILOT_STREAM_TRACE==="1";z$4=E$4?new ZV$:null});import{z as G8}from"zod";var XV$,YV$,FK,G$1,QV$,JV$,WV$,KV$,P$4,wV$,UV$,FV$,HV$,NV$,A$4,BV$,E8Z,T$4,I$4=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},OV$=($)=>{return new TextEncoder().encode(JSON.stringify($))},DV$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?T$4[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${I$4(Y.error)}`);return Y.data};var EV$=O(()=>{XV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),YV$=G8.array(G8.tuple([G8.string(),G8.string()])),FK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),G$1=G8.string().min(1),QV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:FK,method:G8.string().min(1),url:G8.string().min(1),headers:YV$,replySubject:G$1,bodySubject:G$1.optional(),abortSubject:G$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),JV$=G8.object({type:G8.literal("request.chunk"),requestId:FK,seq:G8.number().int().nonnegative(),data:XV$}),WV$=G8.object({type:G8.literal("request.end"),requestId:FK,seq:G8.number().int().nonnegative()}),KV$=G8.object({type:G8.literal("request.error"),requestId:FK,code:G8.string().min(1),message:G8.string()}),P$4=G8.union([JV$,WV$,KV$]),wV$=G8.object({type:G8.literal("response.ack"),requestId:FK}),UV$=G8.object({type:G8.literal("response.start"),requestId:FK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:YV$}),FV$=G8.object({type:G8.literal("response.chunk"),requestId:FK,seq:G8.number().int().nonnegative(),data:XV$}),HV$=G8.object({type:G8.literal("response.end"),requestId:FK,seq:G8.number().int().nonnegative()}),NV$=G8.object({type:G8.literal("response.error"),requestId:FK,code:G8.string().min(1),message:G8.string()}),A$4=G8.union([wV$,UV$,FV$,HV$,NV$]),BV$=G8.object({type:G8.literal("abort"),requestId:FK,reason:G8.string().optional()}),E8Z=G8.union([QV$,P$4,A$4,BV$]),T$4={"request.start":QV$,"request.chunk":JV$,"request.end":WV$,"request.error":KV$,"response.ack":wV$,"response.start":UV$,"response.chunk":FV$,"response.end":HV$,"response.error":NV$,abort:BV$}});var R$4=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},q$4=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},M$4=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},k$4=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},LV$=($)=>{return R$4(btoa(M$4($)))},zV$=($)=>{return k$4(atob(q$4($)))},S$4;var jV$=O(()=>{S$4=class S$4{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*h$4($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class p$4{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var V$4=30000,C$4=1000,b$4=65536,dQ,_$4=($)=>{return"connection"in $},f$4=($)=>{let Z=_$4($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??V$4,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??C$4,maxChunkBytes:Z.maxChunkBytes??b$4,diagnostics:Z.diagnostics}},PV$=($)=>{return Array.from($.entries())},x$4=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},v$4=($,Z,G)=>{if(x$4(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return PV$(G.headers);return PV$(G.headers)},AV$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},y$4=()=>{return crypto.randomUUID().replaceAll("-","")},g$4=($)=>{try{$?.unsubscribe()}catch{}},c$4=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},u$4=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},wB=($,Z,G)=>{$.publish(Z,OV$(G))},d$4=($)=>{return $.type.startsWith("response.")},X$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},l$4=($)=>{if($==="idle")return new dQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new dQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},TV$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(l$4(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=DV$(W.value.data);if(!d$4(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},m$4=async($)=>{let Z=!1;while(!0){let G=await TV$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new dQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new dQ(G.value.code,G.value.message);throw new dQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},i$4=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){wB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of h$4(J,$.maxChunkBytes)){if(X)return;wB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:LV$(W)}),G++}}}catch(Q){if(X)return;wB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},n$4=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await TV$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new dQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(zV$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new dQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){wB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},UB=($)=>{let Z=f$4($);return c$4(Z.maxChunkBytes),async(G,X)=>{let Y=nk$(G),Q=new Request(G,X),J=y$4(),W=pk$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new dQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,g$4(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new dQ("tunnel_aborted",X$1(Q.signal));wB(Z.connection,W.abort,{type:"abort",requestId:J,reason:X$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new dQ("tunnel_aborted",X$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new dQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);wB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:v$4(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};wB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)wB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?i$4({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await m$4({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(u$4(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:AV$(P.headers)});return new Response(n$4({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:AV$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var IV$=O(()=>{EV$();jV$();tE0();dQ=class dQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var eE0=O(()=>{IV$()});function RV$($){let Z=$.createFetch??t$4,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return Y$1;let Q=PJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return Y$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return Y$1}}}var Y$1,t$4=($,Z)=>UB({connection:$,firstFrameTimeoutMs:Z});var qV$=O(()=>{eE0();Ct();Y$1={online:!1,capabilities:[]}});async function*r$4($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function MV$($){let Z=$.createFetch??((G)=>UB({connection:G,idleTimeoutMs:o$4}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=PJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*r$4(U)}}var o$4=45000;var kV$=O(()=>{eE0();Ct()});import{z as IJ}from"zod";function SV$($){return JSON.stringify($)}var n8Z;var VV$=O(()=>{n8Z=IJ.discriminatedUnion("type",[IJ.object({type:IJ.literal("cancel"),runId:IJ.string()}),IJ.object({type:IJ.literal("cancel_req"),reqId:IJ.string()}),IJ.object({type:IJ.literal("keep_alive")}),IJ.object({type:IJ.literal("shutdown")})])});function CV$($){let Z=$.createFetch??((G)=>UB({connection:G,idleTimeoutMs:a$4}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function bV$($){let Z=$.createFetch??UB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:SV$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var a$4=45000;var _V$=O(()=>{eE0();VV$();Ct()});function $L0($,Z,G,X){if(!X)return!1;return $.emit(Z,A3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var fV$=O(()=>{t8()});class Q$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as s$4,rm as ZL0}from"fs/promises";import{join as GL0}from"path";async function XL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-e$4),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await sV($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await xV$($,Y,Z);else if(!Y.startsWith(".")){let Q=GL0($,Y),J=await sV(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await xV$(Q,K,Z)}if((await sV(Q)).length===0)await ZL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function xV$($,Z,G){let X=0,Y=GL0($,Z),Q=await sV(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=GL0(Y,W),w=await sV(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=GL0(K,F);await ZL0(N,{recursive:!0,force:!0}),X++}}if((await sV(K)).length===0)await ZL0(K,{recursive:!0,force:!0})}if((await sV(Y)).length===0)await ZL0(Y,{recursive:!0,force:!0});return X}async function sV($){try{return(await s$4($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var e$4=30;var J$1=()=>{};import{DBOS as W$1,SchedulerMode as $84}from"@dbos-inc/dbos-sdk";async function G84(){let $=[mQ(),$C(),DK()],Z=0;for(let G of $)try{Z+=await XL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function X84($,Z){await W$1.runStep(()=>G84(),{name:"monitoringRetention"})}function yV$(){if(vV$)return;vV$=!0;let $=W$1.registerWorkflow(X84,{name:"monitoringRetentionWorkflow"});W$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:Z84,mode:$84.ExactlyOncePerIntervalWhenActive})}var Z84="23 4 * * *",vV$=!1;var gV$=O(()=>{gX();J$1()});function hV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await pH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await xc0($.db,Z,X.role);return Y.boundAuth=fc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new zD(G,void 0,Y.boundAuth,X.role,"self"),z40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var cV$=O(()=>{jD();em()});function Y84(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function J84(){for(let $ of Q84)$()}function uV$($){let Z=[...K$1.logs,$];K$1={...K$1,logs:Z.length>500?Z.slice(-500):Z},J84()}function w$1(){return W84}var K$1,Q84,W84=!1;var U$1=O(()=>{K$1=Y84(),Q84=new Set});import{EventEmitter as K84}from"events";var F$1;var dV$=O(()=>{U$1();F$1=new K84;F$1.on("request",($)=>{uV$($)})});function lV$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Gg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Gg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Gg(H.method)}${s4.reset}`}}catch{}}let W=Gg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Gg(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=U84(X),w=J?"\u25C0":"\u2190";if(!w$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=w84(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!w$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);F$1.emit("request",{method:X,path:Gg(Y),status:F,duration:U,timestamp:new Date})}}}var s4,w84=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},U84=($)=>{return s4[$]||s4.reset},Gg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var mV$=O(()=>{U$1();dV$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as tV$}from"crypto";import{mkdir as F84,readdir as H84,rm as iV$,stat as rV$}from"fs/promises";import{join as N$1,relative as N84}from"path";import{z as P$}from"zod";function aV$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return N$1(B84,Z)}function sV$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function H$1($,Z){let G=aV$($),X=sV$(Z);return N$1(G,X)}function O84($,Z,G,X){let Y=E1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return tV$("sha256",Y).update(Q).digest("hex")}function pV$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=O84(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${sV$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function eV$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${tV$("md5","etag").update(X).digest("hex")}"`}async function $C$($,Z,G,X,Y){try{let Q=await H84($,{withFileTypes:!0});for(let J of Q){let W=N$1($,J.name),w=N84(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await $C$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await rV$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:eV$(W,U.mtime,U.size)})}catch{}}}}catch{}}function ZC$($,Z){let X=D0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=aV$(X);await F84(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await $C$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=H$1(X,Q.key),W=await rV$(J);return{contentType:w01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:eV$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??nV$;return{url:pV$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??nV$;return{url:pV$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=H$1(X,Q.key);try{return await iV$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=H$1(X,K);try{await iV$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function B$1($,Z,G){let X=ZC$(Z,G),Y=new Yw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:O5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new kY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),dW(Y,Q,$,"mcp:dev-assets")}async function GC$($,Z,G,X){let Q=ZC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var B84="./data/assets",nV$=3600,oV$,XC$;var YC$=O(()=>{z8();_n();m6();Ju();qv();BG();BE0();oV$=new g1;oV$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return B$1($.req.raw,Z,X)});XC$=oV$});var QC$={};Z6(QC$,{mountDevRoutes:()=>D84});function D84($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return B$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await GC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",XC$);let G=new g1;G.use("*",hQ({mountPath:"/api/dev-assets"})),G.route("/",NE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var JC$=O(()=>{m6();G01();BE0();YC$()});var WC$=O(()=>{Yu0();Qu0();GE()});var YL0=O(()=>{WC$()});var wC$={};Z6(wC$,{streamAgent:()=>KC$,createDecopilotClient:()=>L84});async function E84($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (y6(),Il0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function KC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (y6(),Il0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await E84(F.body);return Q({stream:H})}function L84($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return KC$(Y,X,W,Q,J)}}}import{z as vX}from"zod";function UC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=z84.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:vX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:vX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var z84,l6Z,j84=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},D$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},QL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},P84=($,Z,G)=>{let X=QL0($,Z,G);return new Proxy(Sx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},A84=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => wC$);return J(X,Z.token,$,Y,Q)}}},O$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>O$1(G,Z));if(typeof $==="object"){if(j84($))return A84($,Z);if(D$1($))return P84($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=O$1(Y,Z);return G}return $},FC$=($)=>{return O$1($.state,$)};var Xg=O(()=>{YL0();z84=new Map;l6Z=vX.object({id:vX.string(),title:vX.string(),capabilities:vX.object({vision:vX.boolean().optional(),text:vX.boolean().optional(),tools:vX.boolean().optional(),reasoning:vX.boolean().optional()}).passthrough().optional(),provider:vX.string().optional().nullable(),limits:vX.object({contextWindow:vX.number().optional(),maxOutputTokens:vX.number().optional()}).passthrough().optional()})});var T84,HC$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},I84=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=HC$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},NC$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=HC$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??T84;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},BC$=($,Z,G)=>{let X=new Headers($.headers);return I84(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var OC$=O(()=>{T84=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function DC$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function R84($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function EC$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function LC$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function zC$($){return{handleProtectedResourceMetadata:(w)=>{let U=HK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=HK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=HK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=HK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=EC$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=HK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?LC$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=HK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??HK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=EC$(z),P=HK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=HK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof E$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=LC$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!R84(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=DC$(32),H=U.token_endpoint_auth_method!=="none"?DC$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${HK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var E$1,HK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var L$1=O(()=>{E$1=class E$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as q84}from"async_hooks";var jC$,ft;var z$1=O(()=>{jC$=new q84,ft={getStore:()=>{return jC$.getStore()},run:($,Z,...G)=>jC$.run($,Z,...G)}});var AC$="SELF",WL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},TC$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},PC$="::",IC$=($)=>{let Z=$.indexOf(PC$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+PC$.length);return[G,X]},M84=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},RC$=($)=>{if(WL0($))return[];return Object.keys($)},k84=($,Z)=>{if(WL0($))return $.events;let G=$[Z];if(!G)return[];if(TC$(G))return G.events;return Object.keys(G)},JL0=($,Z,G)=>{if($===AC$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!D$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},S84=($,Z,G)=>{let X=Z;if(WL0($)){let Q=[];for(let J of $.events){let W=IC$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=JL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of RC$($)){let J=JL0(Q,X,G);if(!J)continue;let W=k84($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},V84=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},C84=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},b84=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},_84=async($,Z,G,X,Y)=>{let Q=X;if(WL0($)){let U=new Set;for(let H of $.events){let N=IC$(H);if(!N)continue;let[B,D]=N,E=JL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of RC$($)){let F=JL0(U,Q,Y);if(F)J.set(F,U)}let W=V84(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(TC$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=C84(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return b84(w)},qC$;var j$1=O(()=>{Xg();qC$={subscriptions:S84,execute:_84,parseCron:M84}});function f84($,Z){let G=QL0("self",{meshUrl:$,token:Z});return Sx.forConnection(G)}function x84($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function MC$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=f84($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(x84(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var P$1=O(()=>{Xg();YL0()});import{z as KZ}from"zod";function SU($){return{...$,execute:(Z)=>{let G=xt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var xt=($)=>{let Z=ft.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},kC$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},v84=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?UC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[SU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=kC$(J);await Y(J.runtimeContext.env,{createAgent:MC$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[SU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:m40,outputSchema:i40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=kC$(J);return qC$.execute($.handlers,J.context.events,W,K,w)}})]:[],SU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},SC$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...v84({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=xt(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=xt();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=xt(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Yw({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:O5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new kY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=ft.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=xt();return j({context:B,runtimeContext:P},P)}}};var KL0=O(()=>{wu0();BG();Ju();qv();Xg();j$1();z$1();P$1();j$1();P$1()});import{decodeJwt as VC$}from"jose";var y84=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},CC$=($)=>()=>{return{...$??{}}},g84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=VC$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:CC$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=VC$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=CC$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=FC$(W),y84({env:Q,server:Z,url:X}),Q},h84,bC$=($)=>{let Z=SC$($),G=$.cors??h84,X=$.oauth,Y=X?zC$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return NC$(J,G??{});let w=g84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await ft.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return BC$(U,J,G??{});return U}}};var _C$=O(()=>{Xg();OC$();L$1();L$1();z$1();KL0();KL0();Xg();YL0();h84={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as A$1}from"zod";function d84($,Z){let G=SU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:Ey,outputSchema:Ly,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=fC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return fC$.set(w,F),F}}),X=SU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ZK,outputSchema:_V,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=SU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ZK,outputSchema:A$1.object({versions:A$1.array(_V.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=SU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:jD0,outputSchema:PD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=SU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:A$1.object({}),outputSchema:zy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function xC$($){let Z=$.db,G=new Cf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=d84(G,Q.id),W=bC$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var c84=3600000,u84=500,fC$;var vC$=O(()=>{_C$();KL0();Wy0();e5();fC$=Zg({ttlMs:c84,maxSize:u84,updateRecencyOnGet:!0})});import{sql as l84}from"kysely";import{randomUUID as yC$}from"crypto";import{z as m84}from"zod";async function n84($){let Z=new Date().toISOString(),G=yC$(),X=e6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:yC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await l84`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function p84($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function t84($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",fV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):hC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?gC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:gC$,rateLimitWindow:i84,rateLimitMax:hC$}}async function r84($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function o84($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function cC$($){let{db:Z,db:G}=$,X=new bf(G),Y=new _f(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await p84(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await t84(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await r84(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=$j$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:m84.treeifyError(U.error)},400);let F=await o84(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await n84({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var gC$=!0,i84="hour",hC$=100;var uC$=O(()=>{v4();t8();jy();Ky0();wy0();e5()});var dC$={};Z6(dC$,{createPublishRequestHandler:()=>cC$,createPublicMCPHandler:()=>xC$});var lC$=O(()=>{vC$();uC$()});var bn0={};Z6(bn0,{watchHandler:()=>tC$,getProxyDispatch:()=>$64,createApp:()=>w64});import{readFileSync as a84}from"fs";import{PrometheusSerializer as s84}from"@opentelemetry/exporter-prometheus";import{DBOS as Yg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as Y64,oAuthProtectedResourceMetadata as Q64}from"better-auth/plugins";async function e84($){let Z=$.connect(),G;try{G=await Promise.race([Z,iC$(mC$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),iC$(mC$)]),G.release(),!0}catch{return G.release(!0),!1}}function iC$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function $64(){if(!T$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return T$1}async function Z64($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${EC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function G64($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function w64($={}){let Z=$.database??u6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new o11,J,W,K,w,U,F=null;if($.disableNats)J=a11(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new fn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let m=d.getReader();try{while(!0){let{done:V0}=await m.read();if(V0)break}}catch{}finally{m.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=nS$();let d=E1().natsCredsPath,m;if(d)try{m=a84(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(E1().natsUrls,m?{creds:m}:void 0);let V0=Oy0()?new Jx0({getJetStream:()=>F.getJetStream()}):null;V0?.init().catch(()=>{}),X=V0;let v0=new Rp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=a11({getConnection:()=>F.getConnection()}),W=new s11({getConnection:()=>F.getConnection()}),K=new Z$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=RV$({getConnection:()=>F.getConnection()}),U=CV$({getConnection:()=>F.getConnection()});let N1=bV$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((B6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",B6)})},stop:()=>i0.stop()},CA$(F),F.onReady(()=>{V0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),Wm1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Qg)await Qg();Wx0(X),qp0(Y);let N={storage:new hf(Z.db),sseHub:JZ},B=new ll0(N),D=new ql(Z.db),E=new Q$1(D);E.start(),W.start((d)=>{$90(d),B.execute({type:"CANCEL",taskId:d}).catch((m)=>{console.error("[Decopilot] CancelBroadcast execute failed:",m)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Qg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Km1(),Y.teardown(),Wx0(null),qp0(null)};let L=new g1;if(L.use("*",Y_0({enabled:(d)=>U_(d,"debug")==="1"})),L.use("*",qL0),L.use("/*",Gb1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,m)=>{if(await m(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!E1().noTui)L.use("*",lV$());L.use("*",async(d,m)=>{if(await m(),wg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(e7.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(e7.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(e7.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let m={};if(m.postgres={status:await e84(Z.pool)?"up":"down"},F)m.nats=F.isConnected()?{status:"up"}:{status:"down"};else m.nats={status:"down"};let V0=m.postgres.status==="up",v0=V0?200:503;return d.json({status:V0?"ready":"not_ready",services:m},v0)}),L.get(e7.METRICS,async(d)=>{try{let m=await VL0.collect(),V0=X64.serialize(m.resourceMetrics);return d.text(V0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(m){return console.error("Failed to collect metrics:",m),d.text("# Error collecting metrics",500)}}),L.get(`${e7.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let m=d.req.param("queueName");if(!J64.has(m))return d.json({error:`Unknown queue: ${m}`},404);let V0=await Yg.listQueuedWorkflows({queueName:m,status:"ENQUEUED"});return d.json({queue_length:V0.length})}),L.route("/api/config",RS$),L.route("/api/auth/custom",sA$),L.all("/api/auth/*",async(d)=>{return await Z4.handler(d.req.raw)});let z=uo1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",yV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",yV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",$i),L.route("/",io1()),L.use("/oauth-proxy/:connectionId/*",yV),L.all("/oauth-proxy/:connectionId/*",nC$);let j=async(d)=>{let V0=await W64()(d.req.raw),v0=await V0.json();return Response.json(v0,V0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",yV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let V0=await K64()(d.req.raw),v0=await V0.json();return Response.json(v0,V0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=MA$({ttlMs:120000}),M=await Mo1({db:Z.db,auth:Z4,encryption:{key:E1().encryptionKey},observability:{tracer:CU,meter:g8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,m)=>W.publishControlFrame(d,m)});pH.set(M);let S=new Fw(E1().encryptionKey);UR1({db:Z.db,baseUrl:cJ()});let q=C80(Z.db),V=new Ll(Z.db),t=hV$({db:Z.db});jp0({storage:q,meshContextFactory:t}),sl0({meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:lR$,workPublisher:U}),pl0({dispatchRunFn:uR$,meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new hf(Z.db);C6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await pC$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let m=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return m?{orgId:m.organization_id,createdBy:m.created_by,version:m.message_storage_version??1,status:m.status,runFenceToken:m.run_fence_token,title:m.title??null}:null},completeRunIfNotCompleted:async(d,m)=>{let V0=await f.completeRunIfNotCompleted(d,m);return $L0(JZ,m,d,V0),V0},markRunRequiresAction:async(d,m)=>{let V0=await f.requiresActionIfInProgress(d,m);return $L0(JZ,m,d,V0),V0},markRunFailed:async(d,m,V0,v0)=>{let N1=await f.markRunFailed(d,m,V0,v0);return $L0(JZ,m,d,N1),N1},persistTitle:(d,m,V0)=>f.update(d,m,{title:V0}),onTitleUpdated:async({runId:d,orgId:m,title:V0})=>{let v0=await f.get(d,m).catch(()=>null);JZ.emit(m,A3(d,v0?.status??"in_progress",{title:V0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:m})=>{await f.bumpProgress(d,m)},recordCompleted:async({runId:d,orgId:m,distinctId:V0,usage:v0})=>{r1.capture({distinctId:V0,event:"chat_message_completed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:m,distinctId:V0,reason:v0,kind:N1})=>{r1.capture({distinctId:V0,event:"chat_message_failed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),L3$({meshContextFactory:t,systemDatabaseUrl:qf1(E1().databaseUrl,E1().databasePgSsl),streamBuffer:K}),yV$(),FR1();let v=async(d,m,V0)=>{let v0=await q.findById(d,m);if(!v0)throw Error("Automation not found");return Tp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new xy(q,({automation:d,trigger:m,contextMessages:V0,idempotencyKey:v0})=>bn({automationId:d.id,organizationId:d.organization_id,triggerId:m.id,contextMessages:V0},{idempotencyKey:v0})),a=[mQ(),$C(),DK()];for(let d of a)XL0(d).then(()=>{}).catch((m)=>console.error("[monitoring] Retention cleanup failed:",m));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,m)=>{if(IL0(d.req.path))return m();let V0={measure:async(N1,i0)=>{ZQ(d,N1);try{return await i0()}finally{$Y(d,N1)}}},v0=await pH.create(d.req.raw,{timings:V0});v0.automationRunner=v,d.set("meshContext",v0);try{await m()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),n8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",gV),L.use("/api/:org/v1/*",gV),L.use("/api/:org/files/*",gV),L.use("*",async(d,m)=>{let V0=d.req.path;if(V0.startsWith("/api/org-sso/")||V0.startsWith("/api/auth/")||V0.startsWith("/api/tools/management")||V0.startsWith("/oauth-proxy/"))return m();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return m();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return m();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return m()});let O0=new g1;O0.use("*",hQ({mountPath:"/api/org-sso"})),O0.route("/",fD0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:J_0,grouped:_O()})}),L.use("/mcp/*",async(d,m)=>{ZQ(d,"mcp");try{return await m()}finally{$Y(d,"mcp")}});let W0=async(d,m)=>{let V0=d.var.meshContext;if(!V0.auth.user?.id&&!V0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await m()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),T3()){let{mountDevRoutes:d}=(JC$(),BL0(QC$));d(L,W0)}let J0=new g1;J0.use("*",hQ({mountPath:"/mcp"})),J0.route("/",PN0()),L.route("/mcp",J0);let s=new g1;s.use("*",hQ({mountPath:"/mcp/self"})),s.route("/",lE0()),L.route("/mcp/self",s);let A0=new g1;A0.use("*",hQ({mountPath:"/mcp"})),A0.route("/",IN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,m)=>{ZQ(d,"llm_models");try{return await m()}finally{$Y(d,"llm_models")}});let U0=$01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)T$1=MV$({getConnection:()=>F?.getConnection()??null});L.route("/api",KS$()),L.get("/api/links/me",async(d)=>{try{let m=d.req.header("authorization")??"",V0=/^Bearer\s+(.+)$/i.exec(m),v0=null;if(V0){let i0=(V0[1]??"").trim();v0=await ik$(i0,Z4.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(m){return console.error("[links/me] presence probe failed; reporting offline:",m instanceof Error?m.message:String(m)),d.json(null)}}),L.use("/api/:org/files/*",gV),L.route("/api",SS$);let f0=new g1;f0.use("*",hQ({mountPath:"/api"})),f0.route("/",mE0()),L.route("/api",f0),L.route("/api",jS$);let m0=new g1;m0.use("*",hQ({mountPath:"/api"})),m0.route("/",iE0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new jl(Z.db),n0=new g1;n0.use("*",hQ({mountPath:"/api"})),n0.route("/",UE0()),L.route("/api",n0),L.route("/api/deco-sites",F2$()),L.route("/api/deco-apps",BS$());let N0=new g1;N0.use("*",hQ({mountPath:"/api/deco-sites"})),N0.route("/",HE0()),L.route("/api/deco-sites",N0);let b0=new g1;b0.use("*",hQ({mountPath:"/api/vm-events"})),b0.route("/",HS$()),L.route("/api/vm-events",b0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => (lC$(),dC$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),S0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",yV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",yV),L.all("/org/:orgSlug/registry/*",S0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",S0);let n=lk$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:T3(),mcpAuth:W0,oauthProxyHandler:nC$,watchHandler:tC$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",n),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(sR$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Qg?Promise.resolve(Qg()).finally(()=>{Qg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await vY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await kf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Yg.registerQueue(xY,{partitionQueue:!0,concurrency:Ep0,minPollingIntervalMs:Lp0}),await Yg.registerQueue(lQ,{partitionQueue:!0,concurrency:al0}),await Yg.registerQueue(OK,{partitionQueue:!0,concurrency:nl0}),await Yg.registerQueue(VU,{partitionQueue:!0,concurrency:E3$}),await Y01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Yg.deleteQueue(d))),await zp0(Z.pool),ay1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),HR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var pC$,mC$=5000,T$1=null,Qg=null,nC$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await pH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Tx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Zi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=E1().baseUrl??B.origin;try{let t=new URL(q),f=new URL(V);if(!(t.origin===f.origin||t.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(LC1(J.connection_url))try{let V=await Z64(Y,J.organization_id),t=G64(V);for(let[f,v]of t)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),t=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof t==="string"&&t)P=t;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),t={};try{t=V?JSON.parse(V):{}}catch{z=V}let f=typeof t==="object"&&t!==null&&!Array.isArray(t);if(z===void 0&&!f)z=V;if(z===void 0){let v=t,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let t=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await Ix(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:t,clientId:j,clientSecret:P,tokenEndpoint:f};await new V5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},tC$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return cQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},X64,J64,W64=()=>Q64(Z4),K64=()=>Y64(Z4);var _n0=O(()=>{Z9();z8();NR1();nG();W_();t8();m6();q10();Xb1();Q_0();gw();em();rs0();R3();I5();v4();Ge0();Je0();oR$();Z01();t3();j40();G01();eR$();X01();mk$();wS$();NS$();K01();OS$();AN0();Gi();PS$();RN0();V11();qS$();VS$();S11();k11();nt();gu();pS$();XY();r80();Al();kp0();tS$();oS$();GV$();qV$();kV$();_V$();ml0();fV$();ky0();_y0();gV$();P$0();J$1();gX();Q01();ti();ul0();P$0();oe0();sv0();ev0();cV$();F_();mV$();pV();rs0();Tv();Z90();pC$=k(RB(),1);X64=new s84,J64=new Set([xY,lQ,OK,VU])});var sC$={};Z6(sC$,{resolveClientDir:()=>D64,resolveAssetPathWithTraversalCheck:()=>aC$,isPathWithinDirectory:()=>oC$,createAssetHandler:()=>E64});import{resolve as vt,dirname as U64,join as F64,extname as H64,basename as N64,sep as rC$}from"path";function B64($,Z){if($===Z||N64($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${rC$}assets${rC$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function oC$($,Z){let G=vt(Z),X=vt($);return X===G||X.startsWith(G+"/")}function aC$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=vt(Z,G);if(!oC$(X,Z))return null;return X}function D64($,Z="../client"){let G=new URL($),X=U64(G.pathname);return vt(X,Z)}function E64($={}){let{env:Z="production",clientDir:G=O64,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=aC$({requestPath:W,clientDir:G});if(!K)return null;let w=F64(K,"index.html"),U=vt(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(H64(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:B64(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var O64="./dist/client";var eC$=()=>{};var $b$={};Z6($b$,{tryUpgradePreviewWs:()=>I64,tryHandlePreviewHttp:()=>T64,previewWebSocketHandler:()=>R64,parsePreviewBaseDomain:()=>A64,isPreviewWsData:()=>wL0,extractHandleFromHost:()=>I$1});function j64($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function P64(){return new Response(z64,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function A64($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function I$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function T64($,Z){let G=I$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return gt(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(aS)&&j64($))return P64();return Y.headers.delete(aS),Y}function gt($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function wL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function I64($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=I$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return gt(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return gt(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return gt(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return gt(426,"upgrade failed");return}function yt($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var L64=256,z64='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',R64;var Zb$=O(()=>{kn0();R64={open($){let Z=$.data;if(!wL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),yt($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{yt($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{yt($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!wL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=L64){yt($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!wL0(Z))return;yt($,Z,1000,"")}}});var Qb$={};Z6(Qb$,{printBanner:()=>M64,bannerLines:()=>Yb$,BANNER_LINES:()=>Gb$,BANNER_GRADIENT:()=>Xb$});function q64($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Yb$($){let Z=Gb$.map((G,X)=>{let[Y,Q,J]=q64(Xb$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function M64($){console.log("");for(let Z of Yb$($))console.log(Z);console.log("")}var Gb$,Xb$;var Jb$=O(()=>{Gb$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Xb$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Kb$={};Z6(Kb$,{bootstrapDevLinkSession:()=>v64});import{existsSync as k64}from"fs";import{chmod as S64,mkdir as V64,rename as C64,writeFile as b64}from"fs/promises";import{dirname as _64,join as Wb$}from"path";function f64($){return Wb$($,"dev-link")}function x64($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Wb$(f64($),"session.json")}async function v64($,Z){let G=x64($),X=u6().db,Y=SQ()?await kn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(k64(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await Z4.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await Z4.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await V64(_64(G),{recursive:!0});let W=`${G}.tmp`;return await b64(W,JSON.stringify(J,null,2),{mode:384}),await S64(W,384),await C64(W,G),{path:G,userSub:Y.id}}var wb$=O(()=>{R3();gw();bN()});Z9();var _$1="4";function f$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:_$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}z8();I5();function A_$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function fL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function O81(){let $=A_$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:fL0($,"--cpu-prof-dir")??process.cwd(),name:fL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(fL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}yL0();var rt;function I81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=HB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),rt=setInterval(()=>void Z().catch(()=>{}),$),rt.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(rt)clearInterval(rt)}}import*as R_$ from"bun:jsc";var{startSamplingProfiler:q_$,samplingProfilerStackTraces:M_$}=R_$;function R81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{q_$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=M_$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function q81(){O81();let $=[I81(),T81(),R81()];return()=>{for(let Z of $)Z()}}import{existsSync as m64}from"fs";var fY=E1();N81();var{DBOS:ht,DBOSClient:y64}=await import("@dbos-inc/dbos-sdk");function Bb$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var g64=[xY,lQ,OK,VU],h64=fY.dispatchRole==="worker"?g64:fY.dispatchRole==="api"?[]:void 0;ht.setConfig(f$1({systemDatabaseUrl:Bb$(fY.databaseUrl,fY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:fY.podName,listenQueues:h64}));var{createApp:c64}=await Promise.resolve().then(() => (_n0(),bn0)),{isServerPath:u64}=await Promise.resolve().then(() => (nt(),o$1)),{createAssetHandler:d64,resolveClientDir:Ob$}=await Promise.resolve().then(() => (eC$(),sC$)),l64=fY.port,Ub$=Ob$(import.meta.url,"../client"),i64=m64(Ub$)?Ub$:Ob$(import.meta.url,"../dist/client"),n64=d64({clientDir:i64,isServerPath:u64}),p64={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function t64($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(p64))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:r64,tryHandlePreviewHttp:o64,tryUpgradePreviewWs:a64,previewWebSocketHandler:R$1,isPreviewWsData:q$1}=await Promise.resolve().then(() => (Zb$(),$b$)),{getOrInitSharedRunner:s64}=await Promise.resolve().then(() => (Tn(),EQ$)),Db$=r64(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Fb$={baseDomain:Db$??"",getRunner:s64},UL0=await c64(),M$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),Hb$=process.env.DBOS_CONDUCTOR_URL?.trim();await ht.launch({...M$1?{conductorKey:M$1}:{},...M$1&&Hb$?{conductorURL:Hb$}:{}});console.log(`[dbos] application version: ${ht.applicationVersion}`);await UL0.initDbos();if(!fY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Jb$(),Qb$));console.log("");for(let Z of $())console.log(Z)}var e64=Bun.serve({idleTimeout:0,port:l64,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Db$){let X=await a64($,Z,Fb$);if(X===void 0)return;if(X)return X;let Y=await o64($,Fb$);if(Y)return Y}let G=await n64($);if(G)return t64(G);return UL0.fetch($,{server:Z})},websocket:{open($){if(q$1($.data))R$1.open($)},message($,Z){if(q$1($.data))R$1.message($,Z)},close($){if(q$1($.data))R$1.close($)}},development:!1}),$44=q81();if(fY.localMode)Promise.resolve().then(() => (bN(),ZN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (wb$(),Kb$)),Y=fY.baseUrl??`http://localhost:${fY.port}`,Q=await X(fY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (bN(),ZN0));Z()}catch{}});var Nb$=!1;async function Z44($){let Z;try{Z=await y64.create({systemDatabaseUrl:Bb$(fY.databaseUrl,fY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:lQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:lQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function FL0($){if(Nb$)return;Nb$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{$44(),UL0.markShuttingDown();let Q=Number(process.env.SHUTDOWN_DRAIN_MS??Math.floor(G*0.6));await n8(Q),await e64.stop(!0);let J=ht.executorID;await ht.shutdown(),await Z44(J),await UL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>FL0("SIGTERM"));process.on("SIGINT",()=>FL0("SIGINT"));process.on("SIGHUP",()=>FL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),FL0("uncaughtException")});