npm - decocms - Versions diffs - 4.281.3 → 4.281.4 - Mend

decocms 4.281.3 → 4.281.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (230) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2888,7 +2888,7 @@ Respond with the structured verdict and a short reason.`,Ic$;var Mc$=D(()=>{D4()
 ${G.join(`
 `)}`:Y}function bH6($){let Z=new Set;for(let X of $)for(let Q of X.split(`
 `)){let Y=Q.trim();if(/^Co-authored-by:\s/i.test(Y))Z.add(Y)}return[...Z]}var Wl$=200,qH6=12,kH6,SH6=300,Y71=3;var G71=D(()=>{fD();sA0();kH6={aheadBy:0,behindBy:0,files:[]}});function yH6($){if(!$||$.includes(".."))return!1;return xH6.test($)}function Hl$($){let Z=typeof $.__resolveType==="string"?$.__resolveType:null;if(!Z||!yH6(Z))return null;let{__resolveType:X,...Q}=$;return{resolveType:Z,payload:Q}}function Nl$($,Z){return`${$.replace(/\/+$/,"")}/deco/invoke/${Z}`}var xH6;var Ul$=D(()=>{xH6=/^[\w./@-]+$/});function Ys($,Z){let X=$?.githubRepo;if(!X?.owner||!X?.name)return null;if(!X.connectionId)return X;if(!Z.includes(X.connectionId))return null;return X}async function Bl$($,Z,X,Q){if(!Q.connectionId)throw new Zv("Push requires a connected GitHub account. Connect mcp-github for this project and restart the sandbox.");let Y=$.organization?.id;if(!Y)throw new Zv(G9);await LO({ctx:$,connectionId:Q.connectionId,organizationId:Y,forceRefresh:!0,onLegacyMintError:(H)=>{let N=H instanceof Error?H.message:G9;throw new Zv(N)}});let{cloneUrl:G,gitUserName:J,gitUserEmail:K}=await AW(Q.connectionId,Q.owner,Q.name,$.db,$.vault).catch((H)=>{let{code:N,message:U}=G5$(H instanceof Error?H.message:String(H));throw N?new Zv(U):H}),W=bu($),F=await Z.proxyDaemonRequest(X,"/_sandbox/config",{method:"PUT",headers:new Headers({"content-type":"application/json"}),body:JSON.stringify({git:{repository:{cloneUrl:G},identity:{userName:J,userEmail:K}},...W?{operator:W}:{}})});if(!F.ok){let H=await wO(F,gH6).catch(()=>F.statusText);throw Error(`Failed to refresh sandbox git credentials (${F.status}): ${H}`)}}var gH6=10485760,Zv;var J71=D(()=>{$J();cA0();ep();Gi0();Ey();Zv=class Zv extends Error{constructor($){super($);this.name="GitPushAuthError"}}});function uH6($){let Z=$.startsWith("thread:")?$.slice(7):$;if(!Z||Z.length>255||Z.includes("..")||Z.startsWith("/")||Z.endsWith("/")||Z.endsWith(".lock")||!hH6.test(Z))throw Error(`Invalid branch name: ${$}`)}function Xv($){return AbortSignal.any([$.req.raw.signal,AbortSignal.timeout(lH6)])}async function mH6($,Z){let X=$.var.studioContext,Q=sG(Z.branch),Y=$.req.query("thread")??Q,G=Y&&Y===Q?Z.branchThread:Y?await X.storage.threads.get(Y).catch(()=>null):null,J=G?.virtual_mcp_id===Z.virtualMcpId?G:null,K=JC(J?.metadata?.runtime);if(K)return K;let W=bO0(Z.virtualMcpMetadata),F=W==="cms"?await cZ1(X,{claimName:Z.claimName}):"alive",H=W==="cms"&&F!=="alive"?"cms":"sandbox",N=!!J&&(F==="gone"||F==="alive"&&W==="cms");if(N&&J)kn(X,J.id,H);if(W==="cms")console.log("sandbox proxy: no runtime stamp",{route:$.req.path,method:$.req.method,reason:J?"unstamped":"threadless",liveness:F,resolved:H,stamped:N});return H}async function iH6($){let Z=$.get("vmClaim");if(Z.runner)return Z.runner;try{return await $Q($.var.studioContext)}catch{return null}}function Qv($){let{runner:Z}=$.get("vmClaim");if(!Z)return $.json({error:"No sandbox runner configured"},503);return Z}async function uu($){let{virtualMcpMetadata:Z,connectionIds:X}=$.get("vmClaim"),Q=$.var.studioContext,Y=Ys(Z,X);if(!Y)throw new u4(404,"AUTH","repo","Project has no GitHub repository");let G=t(Q);return lA0(Q,G.id,Y)}function K71($,Z){if(Z instanceof nP0)return $.json({error:Z.message},429,{...P5,...Z.retryAfterMs===null?{}:{"Retry-After":String(Math.ceil(Z.retryAfterMs/1000))}});if(Z instanceof u4){let Q=Z.status===404?404:Z.status===409||Z.status===422?409:502;return $.json({error:Z.message},Q,P5)}let X=Z instanceof Error?Z.message:String(Z);return $.json({error:X},502,P5)}async function wl$($,Z,X){let Q;try{Q=await fetch(Z,X)}catch{return $.json({error:"Preview unreachable"},502)}let Y;try{Y=await Q.text()}catch{return $.json({error:"Preview unreachable"},502)}return new Response(Y,{status:Q.status,headers:{"content-type":Q.headers.get("content-type")??"application/json"}})}async function Ll$($){try{let Z=await uu($),X=await eA0(Z,$.get("vmClaim").branch);return $.json(X,200,P5)}catch(Z){return K71($,Z)}}function Gs($,Z){let Q=(XT0.get($)??Promise.resolve()).catch(()=>{}).then(Z),Y=Q.catch(()=>{});return XT0.set($,Y),Y.finally(()=>{if(XT0.get($)===Y)XT0.delete($)}),Q}async function pZ($,Z,X){if(!X?.runner&&$.get("vmClaim").runtime==="cms")return $.json({error:"sandbox not found: this session is sandbox-less"},404,P5);let Q=X?.runner??Qv($);if(Q instanceof Response)return Q;let{claimName:Y,userId:G,projectRef:J}=$.get("vmClaim"),K=X?.method??"POST",W=null,F=new Headers;if(X?.jsonBody!==void 0)W=X.jsonBody,F.set("content-type","application/json");else if(X?.forwardJsonBody)W=await $.req.text(),F.set("content-type","application/json");let H=X?.signal,N={method:K,headers:F,body:W,...H?{signal:H}:{}},U=async()=>{let B=await Q.proxyDaemonRequest(Y,Z,N);if(X?.map404to410&&B.status===404){try{await B.body?.cancel()}catch{}if(await Q.adoptLiveClaim({userId:G,projectRef:J},Y))B=await Q.proxyDaemonRequest(Y,Z,N);if(B.status===404){try{await B.body?.cancel()}catch{}return new Response(JSON.stringify({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."}),{status:410,headers:{"content-type":"application/json",...P5}})}}let O=await B.text(),w=X?.redactRepoDir?pH6(O):O,L=B.headers.get("content-type")??"application/json";return new Response(w,{status:B.status,headers:{"content-type":L,...P5}})};try{if(H){let B=U();return B.catch(()=>{}),await Promise.race([B,new Promise((w,L)=>{if(H.aborted)return L(H.reason);H.addEventListener("abort",()=>L(H.reason),{once:!0})})])}return await U()}catch(B){let O=B instanceof Error?B.message:String(B);return $.json({error:`Daemon unreachable: ${O}`},502)}}function pH6($){try{let Z=JSON.parse($);if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&"repoDir"in Z)return JSON.stringify({...Z,repoDir:null})}catch{}return $}async function QT0($,Z,X,Q="GET",Y){let G=await $.proxyDaemonRequest(Z,X,{method:Q,headers:new Headers,body:null});if(G.status===404&&Y){try{await G.body?.cancel()}catch{}if(await $.adoptLiveClaim(Y,Z))G=await $.proxyDaemonRequest(Z,X,{method:Q,headers:new Headers,body:null})}if(G.status===404){try{await G.body?.cancel()}catch{}throw Error("SANDBOX_GONE")}let J=await G.text();if(!G.ok){let K=`Daemon error (${G.status})`;try{K=JSON.parse(J).error??K}catch{}throw Error(K)}return JSON.parse(J)}function nH6($){return El$.includes($)}var hH6,Ol$=524288,cH6=65536,lH6=1e4,Dl$=2000,dH6,XT0,P5,El$,jl$=()=>{let $=new H1;$.use("/:virtualMcpId/:branch/*",dH6),$.post("/:virtualMcpId/:branch/write",(X)=>pZ(X,"/_sandbox/write",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/unlink",(X)=>pZ(X,"/_sandbox/unlink",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/mkdir",(X)=>pZ(X,"/_sandbox/mkdir",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/rename",(X)=>pZ(X,"/_sandbox/rename",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/read",(X)=>pZ(X,"/_sandbox/read",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/glob",(X)=>pZ(X,"/_sandbox/glob",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/grep",(X)=>pZ(X,"/_sandbox/grep",{forwardJsonBody:!0,signal:Xv(X)})),$.post("/:virtualMcpId/:branch/exec/:script",async(X)=>{let Q=X.req.param("script");if(!Q)return X.json({error:"missing script name"},400);return pZ(X,`/_sandbox/exec/${encodeURIComponent(Q)}`)}),$.post("/:virtualMcpId/:branch/exec/:script/kill",async(X)=>{let Q=X.req.param("script");if(!Q)return X.json({error:"missing script name"},400);return pZ(X,`/_sandbox/exec/${encodeURIComponent(Q)}/kill`)}),$.get("/:virtualMcpId/:branch/config",(X)=>pZ(X,"/_sandbox/config",{method:"GET",map404to410:!0,redactRepoDir:!0})),$.put("/:virtualMcpId/:branch/config",(X)=>pZ(X,"/_sandbox/config",{method:"PUT",forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/setup/:step",async(X)=>{let Q=X.req.param("step");if(!Q||!nH6(Q))return X.json({error:`step must be one of: ${El$.join(", ")}`},400);let Y=X.get("vmClaim"),G=await cZ1(X.var.studioContext,{claimName:Y.claimName})==="gone"?null:await iH6(X);if(!G)return X.json({error:"sandbox not found: nothing is running at this ref"},404,P5);if(Q==="start"){let J=t(X.var.studioContext),K=wy(Y.virtualMcpMetadata);try{await aZ0({ctx:X.var.studioContext,runner:G,handle:Y.claimName,orgId:J.id,userId:Y.callerUserId,entries:K})}catch(W){let F=W instanceof Error?W.message:String(W);return X.json({error:`Failed to push env to daemon: ${F}`},502)}}return pZ(X,`/_sandbox/setup/${Q}`,{signal:X.req.raw.signal,map404to410:!0,runner:G})}),$.get("/:virtualMcpId/:branch/events",(X)=>{let Q=X.get("vmClaim");if(!Q.runner)return yN(X,async(Y)=>{await Y.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:"No sandbox runner configured on this studio instance."})})});return jc$(X,{ctx:X.var.studioContext,claimName:Q.claimName,runner:Q.runner,virtualMcpId:Q.virtualMcpId,branch:Q.branch,userId:Q.userId,projectRef:Q.projectRef,virtualMcpMetadata:Q.virtualMcpMetadata})}),$.get("/:virtualMcpId/:branch/git/status",(X)=>{if(X.get("vmClaim").runtime==="cms")return Ll$(X);return Z(X)});let Z=(X)=>pZ(X,"/_sandbox/git/status",{method:"GET",map404to410:!0,signal:AbortSignal.any([X.req.raw.signal,AbortSignal.timeout(Dl$)])});return $.post("/:virtualMcpId/:branch/git/status",(X)=>{if(X.get("vmClaim").runtime==="cms")return Ll$(X);return pZ(X,"/_sandbox/git/status",{map404to410:!0,signal:AbortSignal.any([X.req.raw.signal,AbortSignal.timeout(Dl$)])})}),$.post("/:virtualMcpId/:branch/git/diff",async(X)=>{let Q=X.get("vmClaim");if(Q.runtime==="cms")try{let Y=await X.req.json().catch(()=>({})),G=await uu(X),J=await $T0(G,Q.branch,Y.base);return X.json(J,200,P5)}catch(Y){return K71(X,Y)}return pZ(X,"/_sandbox/git/diff",{forwardJsonBody:!0,map404to410:!0})}),$.post("/:virtualMcpId/:branch/git/publish",async(X)=>{if(X.get("vmClaim").runtime==="cms")return X.json({ok:!0},200,P5);let Q=Qv(X);if(Q instanceof Response)return Q;let{claimName:Y,virtualMcpMetadata:G,connectionIds:J}=X.get("vmClaim"),K=X.var.studioContext;return Gs(Y,async()=>{try{await lZ1(K,Q,Y);let W=Ys(G,J);if(W)await Bl$(K,Q,Y,W)}catch(W){if(W instanceof Zv)return X.json({error:W.message},403,P5);let F=W instanceof Error?W.message:String(W);return X.json({error:F},502,P5)}return pZ(X,"/_sandbox/git/publish",{forwardJsonBody:!0,map404to410:!0})})}),$.post("/:virtualMcpId/:branch/git/discard",async(X)=>{let Q=X.get("vmClaim");if(Q.runtime==="cms")return Gs(Q.claimName,async()=>{let Y=await X.req.json().catch(()=>({})),G=Array.isArray(Y.filepaths)?Y.filepaths.filter((J)=>typeof J==="string"):[];if(G.length===0)return X.json({error:"filepaths is required"},400,P5);try{let J=await uu(X);return await Fl$(J,Q.branch,G),X.json({ok:!0},200,P5)}catch(J){let K=J instanceof u4&&J.status===409?409:502,W=J instanceof Error?J.message:String(J);return X.json({error:W},K,P5)}});return Gs(Q.claimName,()=>pZ(X,"/_sandbox/git/discard",{forwardJsonBody:!0,map404to410:!0}))}),$.post("/:virtualMcpId/:branch/git/rebase",async(X)=>{let Q=X.get("vmClaim");if(Q.runtime==="cms")return Gs(Q.claimName,async()=>{try{let K=await X.req.json().catch(()=>({})),W=await uu(X),F=K.base??await W.getDefaultBranch();return await ZT0(W,Q.branch,F),X.json({ok:!0},200,P5)}catch(K){return K71(X,K)}});let Y=Qv(X);if(Y instanceof Response)return Y;let{claimName:G}=X.get("vmClaim"),J=X.var.studioContext;return Gs(G,async()=>{try{await lZ1(J,Y,G)}catch(K){let W=K instanceof Error?K.message:String(K);return X.json({error:W},502,P5)}return pZ(X,"/_sandbox/git/rebase",{forwardJsonBody:!0,map404to410:!0})})}),$.post("/:virtualMcpId/:branch/git/suggest-commit",p5({maxSize:Ol$,onError:(X)=>X.json({error:"Payload too large"},413,P5)}),async(X)=>{let Q=X.get("vmClaim"),Y=null;if(Q.runtime!=="cms"){let F=Qv(X);if(F instanceof Response)return F;Y=F}let{claimName:G,userId:J,projectRef:K}=Q,W=X.var.studioContext;try{let F=await X.req.json().catch(()=>({})),H=F.status,N=F.diff,U=N!=null&&typeof N.diffs==="object"&&N.diffs!==null,[B,O]=iZ1(H)&&U?[H,N]:Y?await Promise.all([QT0(Y,G,"/_sandbox/git/status","GET",{userId:J,projectRef:K}),QT0(Y,G,"/_sandbox/git/diff","GET",{userId:J,projectRef:K})]):await(async()=>{let L=await uu(X);return Promise.all([eA0(L,Q.branch),$T0(L,Q.branch)])})(),w=await Rc$(W,B,O);return X.json(w,200,P5)}catch(F){let H=F instanceof Error?F.message:String(F);if(H==="SANDBOX_GONE")return X.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,P5);return X.json({error:H},502,P5)}}),$.post("/:virtualMcpId/:branch/git/judge-review",p5({maxSize:Ol$,onError:(X)=>X.json({error:"Payload too large"},413,P5)}),async(X)=>{let Q=X.get("vmClaim"),Y=null;if(Q.runtime!=="cms"){let F=Qv(X);if(F instanceof Response)return F;Y=F}let{claimName:G,userId:J,projectRef:K}=Q,W=X.var.studioContext;try{let F=await X.req.json().catch(()=>({})),H=F.status,N=F.diff,U=N!=null&&typeof N.diffs==="object"&&N.diffs!==null,[B,O]=iZ1(H)&&U?[H,N]:Y?await Promise.all([QT0(Y,G,"/_sandbox/git/status","GET",{userId:J,projectRef:K}),QT0(Y,G,"/_sandbox/git/diff","GET",{userId:J,projectRef:K})]):await(async()=>{let L=await uu(X);return Promise.all([eA0(L,Q.branch),$T0(L,Q.branch)])})(),w=await qc$(W,B,O,typeof F.language==="string"?F.language:void 0);return X.json(w,200,P5)}catch(F){let H=F instanceof Error?F.message:String(F);if(H==="SANDBOX_GONE")return X.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,P5);return X.json({error:H},502,P5)}}),$.get("/:virtualMcpId/:branch/preview-fetch",async(X)=>{let Q=Qv(X);if(Q instanceof Response)return Q;let{claimName:Y}=X.get("vmClaim"),G=X.req.query("path");if(!G||!G.startsWith("/")||G.startsWith("//")||G.includes("..")||G.includes("\\"))return X.json({error:"Path not allowed"},403);let J;try{J=await Q.getPreviewUrl(Y)}catch{return X.json({error:"Preview not available"},502)}if(!J)return X.json({error:"Preview not available"},502);let K=J.replace(/\/+$/,"");return wl$(X,`${K}${G}`)}),$.post("/:virtualMcpId/:branch/preview-invoke",p5({maxSize:cH6,onError:(X)=>X.json({error:"Payload too large"},413)}),async(X)=>{let Q=Qv(X);if(Q instanceof Response)return Q;let{claimName:Y}=X.get("vmClaim"),G;try{G=await Q.getPreviewUrl(Y)}catch{return X.json({error:"Preview not available"},502)}if(!G)return X.json({error:"Preview not available"},502);let J;try{J=await X.req.json()}catch{return X.json({error:"Invalid JSON body"},400)}if(!J||typeof J!=="object"||Array.isArray(J))return X.json({error:"Invalid JSON body"},400);let K=Hl$(J);if(!K)return X.json({error:"Invalid or missing __resolveType"},400);let W=Nl$(G,K.resolveType);return wl$(X,W,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(K.payload),signal:AbortSignal.timeout(30000)})}),$};var zl$=D(()=>{U8();UF();fu();uZ1();tp();wc$();f3();xy();Lc$();h3();Ec$();zc$();Xi0();ap();tZ1();Mc$();rZ1();fD();G71();Ul$();J71();hH6=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;dH6=uA0(async($,Z)=>{let X=$.var.studioContext;try{a(X)}catch{return $.json({error:"Unauthorized"},401)}let Q=o0(X);if(!Q)return $.json({error:"Unauthorized"},401);let Y;try{Y=t(X)}catch{return $.json({error:"Organization scope required"},403)}let G=$.req.param("virtualMcpId"),J=$.req.param("branch");if(!G||!J)return $.json({error:"virtualMcpId and branch are required"},400);try{uH6(J)}catch(w){let L=w instanceof Error?w.message:String(w);return $.json({error:L},400)}let K=await X.storage.virtualMcps.findById(G);if(!K||K.organization_id!==Y.id)return $.json({error:"Virtual MCP not found"},404);let W=pp({orgId:Y.id,virtualMcpId:G,branch:J}),F=await rm0(X,J),H=am0(F,Q),N=Dc$({userId:H,projectRef:W}),U=K.metadata??null,B=await mH6($,{claimName:N,branch:J,virtualMcpId:G,sandboxUserId:H,virtualMcpMetadata:U,branchThread:F});if(B==="cms")return $.set("vmClaim",{claimName:N,callerUserId:Q,runner:null,virtualMcpId:G,branch:J,userId:H,projectRef:W,virtualMcpMetadata:U,connectionIds:K.connections?.map((w)=>w.connection_id)??[],runtime:B}),Z();let O;try{O=await $Q(X)}catch{O=null}if(!O)return $.json({error:"No sandbox runner found"},404);return $.set("vmClaim",{claimName:N,callerUserId:Q,runner:O,virtualMcpId:G,branch:J,userId:H,projectRef:W,virtualMcpMetadata:U,connectionIds:K.connections?.map((w)=>w.connection_id)??[],runtime:B}),Z()});XT0=new Map;P5={"Cache-Control":"no-store, no-cache, must-revalidate",Pragma:"no-cache"};El$=["clone","install","start"]});function Pl$($,Z,X){let Q=W71.get($);if(!Q)Q={pending:null,running:!1},W71.set($,Q);if(!Q.pending)Q.pending={set:new Map,del:new Set,deps:Z,resolvers:[],rejecters:[]};let Y=Q.pending;Y.deps=Z;for(let[J,K]of Object.entries(X.set??{}))Y.set.set(J,K),Y.del.delete(J);for(let J of X.delete??[])Y.del.add(J),Y.set.delete(J);let G=new Promise((J,K)=>{Y.resolvers.push(J),Y.rejecters.push(K)});if(!Q.running)oH6($,Q);return G}async function oH6($,Z){Z.running=!0;try{while(Z.pending){let X=Z.pending;Z.pending=null;try{let Q=await rH6(X);for(let Y of X.resolvers)Y(Q)}catch(Q){for(let Y of X.rejecters)Y(Q)}}}finally{if(Z.running=!1,!Z.pending)W71.delete($)}}async function rH6($){let{client:Z,branch:X,packagePath:Q}=$.deps;for(let Y=0;;Y++){let G=await hu(Z,X),J=await Z.getCommitTreeSha(G),K=await Z.getTreeRecursive(J),W=X71(K,Q),F=[],H=new Map(W.map((O)=>[O.path,{stem:O.stem,sha:O.sha}]));for(let[O,w]of $.set){let L=Q71(W,O),E=`${JSON.stringify(w,null,2)}
-`,j=await Z.createBlob(E);await Gl$(Z.owner,Z.repo,j,E);let z=L[0]??`${aA0(Q)}/${aZ1(O)}.json`;F.push({path:z,mode:"100644",type:"blob",sha:j});let A=z.slice(z.lastIndexOf("/")+1,-5);H.set(z,{stem:A,sha:j,content:E});for(let P of L.slice(1))F.push({path:P,mode:"100644",type:"blob",sha:null}),H.delete(P)}for(let O of $.del)for(let w of Q71(W,O))F.push({path:w,mode:"100644",type:"blob",sha:null}),H.delete(w);if(F.length===0)return G;let N=Q?`${Q}/.deco/blocks.gen.json`:".deco/blocks.gen.json";if(K.some((O)=>O.type==="blob"&&O.path===N)){let O=await Promise.all([...H.values()].map(async(j)=>({stem:j.stem,content:j.content??await Z.getBlobText(j.sha)}))),{decofile:w,skipped:L}=$s(O);if(L.length>0)console.warn("decofile gen: dropped blocks that were not valid JSON",{repo:`${Z.owner}/${Z.repo}`,branch:X,packagePath:Q,blocks:L.map((j)=>j.key)});let E=await Z.createBlob(w);F.push({path:N,mode:"100644",type:"blob",sha:E})}let U=await Z.createTree(J,F),B=await Z.createCommit({message:aH6($),treeSha:U,parentShas:[G]});try{return await Z.updateRef(X,B),B}catch(O){if(!(O instanceof u4&&O.status===422)||Y>=tH6-1)throw O;await w$(oZ(2000,200,Y,2,0.5))}}}function aH6($){let Z=(Y)=>{let G=Y.slice(0,3).join(", ");return Y.length>3?`${G} (+${Y.length-3} more)`:G},X=[];if($.set.size>0)X.push(`update ${Z([...$.set.keys()])}`);if($.del.size>0)X.push(`delete ${Z([...$.del])}`);let Q=`chore(decofile): ${X.join("; ")}`;return mm0(Q,$.deps.coAuthor)}var tH6=3,W71;var Al$=D(()=>{VO0();mA0();K4();fD();sA0();W71=new Map});import{createHmac as Tl$,randomBytes as sH6,timingSafeEqual as eH6}from"crypto";function Rl$(){if(YT0)return YT0;let $;try{let Z=b0();$=Z.studioJwtSecret??Z.betterAuthSecret}catch{$=void 0}return YT0=$?Buffer.from($):sH6(32),YT0}function F71($){let Z=$.nowMs??Date.now(),X={o:$.organizationId,m:$.virtualMcpId,b:$.branch,e:Math.floor((Z+$N6)/1000)},Q=Buffer.from(JSON.stringify(X)).toString("base64url"),Y=Tl$("sha256",Rl$()).update(Q).digest("base64url");return`${Q}.${Y}`}function Il$($,Z){let X=$.indexOf(".");if(X<0)return!1;let Q=$.slice(0,X),Y=Buffer.from($.slice(X+1)),G=Buffer.from(Tl$("sha256",Rl$()).update(Q).digest("base64url"));if(Y.length!==G.length||!eH6(Y,G))return!1;let J;try{J=JSON.parse(Buffer.from(Q,"base64url").toString())}catch{return!1}let K=Math.floor((Z.nowMs??Date.now())/1000);return J.o===Z.organizationId&&J.m===Z.virtualMcpId&&J.b===Z.branch&&typeof J.e==="number"&&J.e>=K}var $N6=21600000,YT0=null;var ql$=D(()=>{R$()});import{z as cu}from"zod";function XN6($){return $.length>0&&$.length<=255&&!$.includes("..")&&!$.endsWith("/")&&!$.endsWith(".lock")&&ZN6.test($)}function Cl$($){return $.req.header("x-forwarded-host")??new URL($.req.url).host}async function Js($){let Z=$.get("decofileScope");return lA0($.var.studioContext,Z.organizationId,Z.githubRepo)}function Ks($,Z){if(Z instanceof u4){let Q=Z.status===404?404:Z.status===409?409:Z.status===422?409:502;return $.json({error:Z.message},Q)}let X=Z instanceof Error?Z.message:String(Z);return $.json({error:X},500)}function _l$(){let $=new H1;return $.use("/:virtualMcpId/:branch",Sl$),$.use("/:virtualMcpId/:branch/*",Sl$),$.get("/:virtualMcpId/:branch",async(Z)=>{let X=Z.get("decofileScope");try{let Q=await Js(Z),Y=await Jl$(Q,X.branch,X.packagePath,{createBranchIfMissing:!!X.userId}),G={ETag:`"${Y.sha}"`,"Cache-Control":"no-store","Access-Control-Allow-Origin":"*"};if(Z.req.header("if-none-match")===`"${Y.sha}"`)return Z.body(null,304,G);if(!X.userId)return Z.body(Y.decofile,200,{...G,"content-type":"application/json"});let J=F71({organizationId:X.organizationId,virtualMcpId:X.virtualMcpId,branch:X.branch});return Z.body(`{"version":${JSON.stringify(Y.sha)},"token":${JSON.stringify(J)},"apiHost":${JSON.stringify(Cl$(Z))},"decofile":${Y.decofile}}`,200,{...G,"content-type":"application/json"})}catch(Q){return Ks(Z,Q)}}),$.get("/:virtualMcpId/:branch/meta",async(Z)=>{let X=Z.get("decofileScope"),Q=X.packagePath?`${X.packagePath}/.deco/meta.gen.json`:".deco/meta.gen.json";try{let Y=await Js(Z),G=await Y.getFileTextAtRef(X.branch,Q);if(G===null){let J=await Y.getDefaultBranch();if(J!==X.branch)G=await Y.getFileTextAtRef(J,Q)}if(G===null)return Z.json({error:"meta.gen.json not committed"},404);return Z.body(G,200,{"content-type":"application/json","Cache-Control":"no-store","Access-Control-Allow-Origin":"*"})}catch(Y){return Ks(Z,Y)}}),$.patch("/:virtualMcpId/:branch",YN6,async(Z)=>{let X=Z.get("decofileScope"),Q=Z.var.studioContext,Y=GN6.safeParse(await Z.req.json().catch(()=>null));if(!Y.success)return Z.json({error:"Invalid body",details:Y.error.issues},400);let G=Y.data;for(let J of[...Object.keys(G.set??{}),...G.delete??[]])try{dA0(J)}catch(K){let W=K instanceof Error?K.message:String(K);return Z.json({error:W},400)}for(let[J,K]of Object.entries(G.set??{}))if(typeof K!=="object"||K===null||Array.isArray(K))return Z.json({error:`Block "${J}" must be a JSON object`},400);try{let J=await Js(Z),K=await Pl$(`${X.organizationId}/${X.virtualMcpId}/${X.branch}`,{client:J,branch:X.branch,packagePath:X.packagePath,coAuthor:bu(Q)},G),W=F71({organizationId:X.organizationId,virtualMcpId:X.virtualMcpId,branch:X.branch});return Z.json({version:K,token:W,apiHost:Cl$(Z)})}catch(J){return Ks(Z,J)}}),$.post("/:virtualMcpId/:branch/publish",async(Z)=>{let X=Z.get("decofileScope");try{let Q=await Js(Z),Y=await Q.getDefaultBranch();if(Y===X.branch)return Z.json({error:"Branch is already the default branch"},400);let G=`chore(decofile): publish ${X.branch}`;try{let J;try{J=await Q.mergeBranch(Y,X.branch,G)}catch(K){if(!(K instanceof u4&&K.status===409))throw K;await ZT0(Q,X.branch,Y),J=await Q.mergeBranch(Y,X.branch,G)}return J?Z.json({result:"merged",sha:J}):Z.json({result:"up-to-date"})}catch(J){if(J instanceof u4&&J.status===409)return Z.json({error:"merge-conflict"},409);if(J instanceof u4&&J.status===405){let W=await Q.findOpenPullRequest(Y,X.branch)??await Q.createPullRequest({base:Y,head:X.branch,title:`Publish ${X.branch}`});return Z.json({result:"pull-request",number:W.number,url:W.html_url})}throw J}}catch(Q){return Ks(Z,Q)}}),$.get("/:virtualMcpId/:branch/status",async(Z)=>{let X=Z.get("decofileScope");try{let Q=await Js(Z),Y=await Q.getDefaultBranch();if(Y===X.branch)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0});try{let{aheadBy:G,behindBy:J}=await Q.compare(Y,X.branch);return Z.json({baseBranch:Y,aheadBy:G,behindBy:J})}catch(G){if(G instanceof u4&&G.status===404)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0});throw G}}catch(Q){return Ks(Z,Q)}}),$}var ZN6,Ml$=500,kl$=1048576,Vl$=1024,QN6=8388608,YN6,GN6,Sl$;var vl$=D(()=>{mA0();U8();UF();uZ1();cA0();J71();rZ1();Al$();ql$();G71();fD();sA0();ZN6=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;YN6=p5({maxSize:QN6,onError:($)=>$.json({error:"Payload too large"},413)}),GN6=cu.object({set:cu.record(cu.string(),cu.unknown()).optional(),delete:cu.array(cu.string()).optional()}).refine(($)=>Object.keys($.set??{}).length>0||($.delete?.length??0)>0,{message:"Patch must set or delete at least one block"}).refine(($)=>Object.keys($.set??{}).length+($.delete?.length??0)<=Ml$,{message:`Patch cannot touch more than ${Ml$} blocks`}).refine(($)=>Object.values($.set??{}).every((Z)=>JSON.stringify(Z).length<=kl$),{message:`Each block must be at most ${kl$} bytes`}).refine(($)=>[...Object.keys($.set??{}),...$.delete??[]].every((Z)=>Z.length<=Vl$),{message:`Each block key must be at most ${Vl$} characters`}),Sl$=uA0(async($,Z)=>{let X=$.var.studioContext,Q=X.organization;if(!Q)return $.json({error:"Organization scope required"},500);let Y=$.req.param("virtualMcpId"),G=$.req.param("branch");if(!Y||!G)return $.json({error:"virtualMcpId and branch are required"},400);if(!XN6(G))return $.json({error:`Invalid branch name: ${G}`},400);let J=X.auth?.user?.id??null;if(!J){let B=$.req.query("token");if(!($.req.method==="GET"&&!$.req.path.match(/\/(publish|status)$/)))return $.json({error:"Unauthorized"},401);if(!B||!Il$(B,{organizationId:Q.id,virtualMcpId:Y,branch:G}))return $.json({error:"Unauthorized"},401)}let K=await X.storage.virtualMcps.findById(Y);if(!K||K.organization_id!==Q.id)return $.json({error:"Virtual MCP not found"},404);let W=K.metadata??null;if(!fO0(W))return $.json({error:"Project has no preview server configured"},404);let H=K.connections?.map((B)=>B.connection_id)??[],N=Ys(W,H);if(!N)return $.json({error:"Project has no GitHub repository"},404);let U=W?.runtime;return $.set("decofileScope",{organizationId:Q.id,virtualMcpId:Y,branch:G,packagePath:U?.path?.replace(/^\/+|\/+$/g,"")||null,githubRepo:N,userId:J}),Z()})});var fl$=($)=>{let Z=new H1;if(Z.use("*",i_),Z.route("/",QA0()),Z.route("/",ry$()),Z.route("/",Xc$()),Z.route("/",eu$()),Z.route("/",yA0()),Z.route("/tools",Fc$()),Z.route("/",Jc$()),Z.route("/",_u$({kvStorage:$.kvStorage})),Z.route("/",Su$()),Z.route("/fs",pu$({getConnection:$.getNatsConnection})),Z.route("/sandbox",jl$()),Z.route("/decofile",_l$()),Z.route("/",ru$()),Z.route("/deco-sites",GA0()),Z.route("/sso",aP0()),Z.route("/",gA0({tokenStorage:$.tokenStorage,automationEventDispatcher:$.automationEventDispatcher})),Z.route("/webhooks",ly$()),$.mountDevAssets)Z.route("/dev-assets",JA0({orgFromPath:!0}));return Z.use("/mcp/:connectionId?",$.mcpAuth),Z.use("/mcp/:connectionId/ui-resource",$.mcpAuth),Z.use("/mcp/gateway/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/virtual-mcp/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/self",$.mcpAuth),Z.use("/mcp/task-run/:threadId",$.mcpAuth),Z.route("/",Wb$()),Z.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",$.betterAuthProtectedResourceHandler),Z.get("/mcp/.well-known/oauth-protected-resource",$.betterAuthProtectedResourceHandler),Z.route("/mcp/task-run",tu$()),Z.route("/mcp",WL0()),Z.route("/mcp/self",xA0()),Z.route("/mcp",NL0()),Z.all("/oauth-proxy/:connectionId/*",$.oauthProxyHandler),Z.get("/watch",$.watchHandler),Z};var bl$=D(()=>{U8();W91();dy$();U91();KA0();qa();J91();Cu$();vu$();nu$();ft();$91();UL0();vZ1();ou$();au$();$c$();Qc$();Kc$();bZ1();Hc$();xZ1();FL0();zl$();vl$()});function JN6($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}var KN6=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},xl$=()=>{let $=new H1;return $.use("*",KN6),$.get("/",async(Z)=>{let X=b0(),Q=X.decoSupabaseUrl,Y=X.decoSupabaseServiceKey;if(!Q||!Y)return Z.json({apps:[]});try{let G=await iZ(Q,Y,"apps?select=name,title,description,logo,category,vendors(alias,url)");return Z.json({apps:JN6(G)})}catch(G){return console.error("[deco-apps] GET error:",G),Z.json({error:"Failed to fetch apps"},502)}}),$};var yl$=D(()=>{U8();R$();XP0()});import{z as M1}from"zod";function LF($,Z="invalid_request_error",X=null,Q=null){return{error:{message:$,type:Z,param:X,code:Q}}}function LN6($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let X=$.substring(0,Z),Q=$.substring(Z+1);if(!X||!Q)return null;return{credentialId:X,modelId:Q}}function EN6($,Z,X){try{return JSON.parse($)}catch{throw new ul$(`Invalid JSON in tool call arguments for function '${X}' (tool_call_id: ${Z}): ${$}`)}}function jN6($){let Z={};for(let X of $)if(X.role==="assistant"&&X.tool_calls)for(let Q of X.tool_calls)Z[Q.id]=Q.function.name;return $.map((X)=>{switch(X.role){case"system":return{role:"system",content:X.content};case"user":if(typeof X.content==="string")return{role:"user",content:X.content};return{role:"user",content:X.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(X.tool_calls&&X.tool_calls.length>0)return{role:"assistant",content:X.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:EN6(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:X.content??""};case"tool":let Q=Z[X.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:X.tool_call_id,toolName:Q,output:{type:"text",value:X.content}}]}}})}function zN6($){let Z=$.map((X)=>{let Q=X.function.parameters?lY(X.function.parameters):lY({type:"object",properties:{}});return[X.function.name,I$({description:X.function.description,inputSchema:Q})]});return Object.fromEntries(Z)}function PN6($){if(!$)return;return{openai:{response_format:$}}}function AN6(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function gl$($,Z,X,Q,Y,G){let J={model:$,messages:Z,tools:X,temperature:Q.temperature,maxTokens:Q.max_tokens,topP:Q.top_p,frequencyPenalty:Q.frequency_penalty,presencePenalty:Q.presence_penalty,stopSequences:Q.stop?Array.isArray(Q.stop)?Q.stop:[Q.stop]:void 0,abortSignal:G};return Y?{...J,providerOptions:Y}:J}function hl$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var WN6=256,FN6,HN6,NN6,UN6,BN6,ON6,DN6,wN6,ul$,cl$,ll$;var dl$=D(()=>{D4();U8();fu();LN();FN6=M1.object({type:M1.literal("function"),function:M1.object({name:M1.string(),description:M1.string().optional(),parameters:M1.record(M1.string(),M1.unknown()).optional()})}),HN6=M1.object({id:M1.string(),type:M1.literal("function"),function:M1.object({name:M1.string(),arguments:M1.string()})}),NN6=M1.discriminatedUnion("role",[M1.object({role:M1.literal("system"),content:M1.string(),name:M1.string().optional()}),M1.object({role:M1.literal("user"),content:M1.union([M1.string(),M1.array(M1.union([M1.object({type:M1.literal("text"),text:M1.string()}),M1.object({type:M1.literal("image_url"),image_url:M1.object({url:M1.string(),detail:M1.string().optional()})})]))]),name:M1.string().optional()}),M1.object({role:M1.literal("assistant"),content:M1.string().nullable().optional(),name:M1.string().optional(),tool_calls:M1.array(HN6).optional()}),M1.object({role:M1.literal("tool"),content:M1.string(),tool_call_id:M1.string()})]),UN6=M1.object({type:M1.literal("text")}),BN6=M1.object({type:M1.literal("json_object")}),ON6=M1.object({type:M1.literal("json_schema"),json_schema:M1.object({name:M1.string(),description:M1.string().optional(),schema:M1.record(M1.string(),M1.unknown()),strict:M1.boolean().optional()})}),DN6=M1.union([UN6,BN6,ON6]),wN6=M1.object({model:M1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:M1.array(NN6),stream:M1.boolean().optional().default(!1),temperature:M1.number().min(0).max(2).optional(),max_tokens:M1.number().positive().optional(),top_p:M1.number().min(0).max(1).optional(),frequency_penalty:M1.number().min(-2).max(2).optional(),presence_penalty:M1.number().min(-2).max(2).optional(),stop:M1.union([M1.string(),M1.array(M1.string())]).optional(),tools:M1.array(FN6).optional(),tool_choice:M1.union([M1.literal("auto"),M1.literal("none"),M1.literal("required"),M1.object({type:M1.literal("function"),function:M1.object({name:M1.string()})})]).optional(),response_format:DN6.optional(),user:M1.string().optional()});ul$=class ul$ extends Error{constructor($){super($);this.name="MessageConversionError"}};cl$=new H1;cl$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),X=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(LF("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(LF("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==X)return $.json(LF("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let Q=await $.req.json(),Y=wN6.safeParse(Q);if(!Y.success){let L=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(LF(`Invalid request: ${L.message}`,"invalid_request_error",L.path.length>0?L.path.join("."):null),400)}let G=Y.data,J=LN6(G.model);if(!J)return $.json(LF("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:K}=J,{modelId:W}=J;if(!K){let E=(await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id})).find((j)=>sw(j.providerId));if(!E)return $.json(LF("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);K=E.id}let F;try{F=await Z.aiProviders.activate(K,Z.organization.id)}catch{return $.json(LF(`AI provider credential not found or inaccessible: ${K}`,"invalid_request_error","model"),404)}let H=F.aiSdk.languageModel(W),N=jN6(G.messages),U=G.tools?zN6(G.tools):void 0,B=PN6(G.response_format),O=AN6(),w=Math.floor(Date.now()/1000);if(G.stream)return yN($,async(L)=>{let E=gl$(H,N,U,G,B,$.req.raw.signal);try{let j=NO(E),z=!1,A=0,P="",I=async()=>{if(P.length===0)return;let q=P;P="",await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{content:q},finish_reason:null}]})})};for await(let q of j.fullStream){if(!z&&(q.type==="text-delta"||q.type==="tool-call"))await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),z=!0;if(q.type==="text-delta"){if(P+=q.text,P.length>=WN6)await I()}else if(q.type==="tool-call"){await I();let M=A++;await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:q.toolCallId,type:"function",function:{name:q.toolName,arguments:JSON.stringify(q.input)}}]},finish_reason:null}]})})}else if(q.type==="finish")await I(),await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{},finish_reason:hl$(q.finishReason)}],usage:q.totalUsage?{prompt_tokens:q.totalUsage.inputTokens??0,completion_tokens:q.totalUsage.outputTokens??0,total_tokens:q.totalUsage.totalTokens??0}:void 0})})}await I(),await L.writeSSE({data:"[DONE]"})}catch(j){let z=j;console.error("[openai-compat:stream] Error:",z.message),await L.writeSSE({data:JSON.stringify({error:{message:z.message,type:"server_error"}})})}});else{let L=gl$(H,N,U,G,B,$.req.raw.signal),E=await FO(L),j={role:"assistant",content:E.text||null};if(E.toolCalls&&E.toolCalls.length>0)j.tool_calls=E.toolCalls.map((z)=>({id:z.toolCallId,type:"function",function:{name:z.toolName,arguments:JSON.stringify("input"in z?z.input:{})}})),j.content=null;return $.json({id:O,object:"chat.completion",created:w,model:G.model,choices:[{index:0,message:j,finish_reason:hl$(E.finishReason)}],usage:{prompt_tokens:E.usage?.inputTokens??0,completion_tokens:E.usage?.outputTokens??0,total_tokens:E.usage?.totalTokens??0}})}}catch(Q){let Y=Q;if(Y.name==="AbortError")return $.json(LF("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(LF(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(LF(Y.message,"server_error"),500)}});ll$=cl$});function TN6($){if(typeof $!=="object"||$===null)return!1;let X=$.githubRepo?.url;return typeof X==="string"&&X.length>0}function ml$(){let $=new H1;return $.use("*",async(Z,X)=>{await X(),Z.header("Cache-Control","private, no-store"),Z.header("Vary","Cookie")}),$.get("/",async(Z)=>{let X=Z.get("studioContext"),Q=o0(X);if(!Q)return Z.json({error:"Authentication required"},401);let G=(Z.req.query("site")??"").trim().toLowerCase();if(!nG(G))return Z.json({error:"Invalid site slug"},400);let J=await X.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.id as id","organization.slug as slug","organization.name as name","organization.metadata as metadata"]).where("member.userId","=",Q).execute(),K=[];for(let F of J){if(!F.slug||F7(F))continue;let H=await X.storage.virtualMcps.list(F.id);for(let N of H){if(gs1(N)!==G)continue;if(!TN6(N.metadata))continue;K.push({orgSlug:F.slug,orgName:F.name??F.slug,project:{id:N.id,title:N.title,icon:N.icon??null}})}}let W={matches:K};return Z.json(W)}),$}var il$=D(()=>{U8();rB()});var nl$;var pl$=D(()=>{nl$={name:"decocms",version:"4.281.3",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/api"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:"bun run migrate && bun run dev:server","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",build:"bun run build:server","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","generate:tool-contracts":"bun run scripts/generate-tool-contracts.ts","db:migrate":"bun run ./dist/server/migrate.js","db:migrate:dbos":"bun run ./dist/server/migrate-dbos.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts","migrate:dbos":"bun run src/database/migrate-dbos.ts",test:"bun test src","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",prepublishOnly:"bun run --cwd=../.. build:studio"},optionalDependencies:{"@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@inkjs/ui":"^2.0.0","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@better-auth/sso":"1.4.1","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/shared":"workspace:*","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@vercel/nft":"^1.1.1",ai:"^6.0.208","better-auth":"1.4.22",croner:"^9.1.0",degit:"^2.8.4",hono:"^4.10.7",jose:"^6.0.11",nanoid:"^5.1.6",pg:"^8.16.3",typescript:"^7.0.2",typescript5:"npm:typescript@^5.9.3",zod:"4.3.6"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","tools"],license:"MIT",publishConfig:{access:"public"}}});function qN6(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??IN6}}var tl$,IN6="https://ph.studio.decocms.com",ol$;var rl$=D(()=>{U8();C50();qC();$9();R$();i51();pl$();tl$=new H1;tl$.get("/",($)=>{let Z={version:nl$.version,theme:Ki1(),...EH().logo&&{logo:EH().logo},...QN()&&{internalUrl:gC1()},...b0().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!b0().firecrawlApiKey,auth:sx$(),posthog:qN6(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:Ds()}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});ol$=tl$});function lu($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function H71($){return(lu($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((X)=>X.charAt(0).toUpperCase()+X.slice(1)).join(" ")}function sl$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(lu($))}&sz=${Z}`}function al$($,Z){let X=$.trim();if(X.length<=Z)return X;let Q=X.slice(0,Z-1),Y=Q.lastIndexOf(" ");return`${(Y>Z*0.6?Q.slice(0,Y):Q).trimEnd()}\u2026`}function el$($){let{brand:Z,domain:X,score:Q,verdict:Y}=$,G=typeof Q==="number"?`${Z} commerce report \u2014 ${Math.round(Q)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,K=Y?.trim()?al$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):al$(`How does ${X} really perform? ${J}`,200);return{title:G,description:K}}import{z as l0}from"zod";var Yv,MN6,kN6,VN6,SN6,$d$;var Zd$=D(()=>{Yv=l0.enum(["good","bad","neutral"]),MN6=l0.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((X)=>X!==null&&typeof X!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},l0.object({kind:l0.enum(["text","number","sparkline","badge","score"]).catch("text"),value:l0.coerce.string().optional(),tone:Yv.optional(),muted:l0.boolean().optional(),delta:l0.coerce.string().optional(),deltaDir:l0.enum(["up","down","neutral"]).optional(),points:l0.array(l0.coerce.number()).optional(),label:l0.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),kN6=l0.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},l0.array(MN6)),VN6={key:l0.coerce.string(),title:l0.coerce.string(),eyebrow:l0.coerce.string().optional(),headline:l0.coerce.string(),annotation:l0.coerce.string().optional(),methodology:l0.coerce.string().optional(),sources:l0.array(l0.object({name:l0.coerce.string(),logoUrl:l0.coerce.string()})).optional()},SN6=l0.discriminatedUnion("template",[l0.object({template:l0.literal("cover"),score:l0.object({value:l0.coerce.number(),max:l0.coerce.number().optional(),grade:l0.coerce.string().optional(),label:l0.coerce.string().optional()}).optional(),brandImage:l0.coerce.string().optional(),screenshot:l0.coerce.string().optional(),mobileScreenshot:l0.coerce.string().optional()}),l0.object({template:l0.literal("cta"),ctaUrl:l0.coerce.string().optional(),ctaLabel:l0.coerce.string().optional(),bullets:l0.array(l0.coerce.string()).optional()}),l0.object({template:l0.literal("series"),points:l0.array(l0.coerce.number()).min(2),xLabels:l0.array(l0.coerce.string()).min(1),unit:l0.coerce.string().optional(),callout:l0.object({index:l0.coerce.number(),value:l0.coerce.string(),tone:Yv.optional()})}),l0.object({template:l0.literal("threshold"),value:l0.coerce.string().default(""),metricLabel:l0.coerce.string().optional(),ratio:l0.coerce.number(),thresholdRatio:l0.coerce.number().optional(),thresholdLabel:l0.coerce.string().default(""),tone:Yv.optional()}),l0.object({template:l0.literal("stats"),stats:l0.array(l0.object({value:l0.coerce.string(),label:l0.coerce.string(),tone:Yv.optional()})).min(1)}),l0.object({template:l0.literal("bars"),items:l0.array(l0.object({value:l0.coerce.string(),label:l0.coerce.string(),ratio:l0.coerce.number(),tone:Yv.optional()})).min(1)}),l0.object({template:l0.literal("gauges"),gauges:l0.array(l0.object({label:l0.coerce.string(),value:l0.coerce.string(),status:l0.enum(["good","warn","bad"]).catch("warn"),caption:l0.coerce.string().optional(),ratio:l0.coerce.number().optional()})).min(1)}),l0.object({template:l0.literal("checklist"),checks:l0.array(l0.object({label:l0.coerce.string(),status:l0.enum(["pass","fail","warn"]).catch("fail"),value:l0.coerce.string().optional()})).min(1)}),l0.object({template:l0.literal("table"),columns:l0.array(l0.object({label:l0.coerce.string(),align:l0.enum(["left","right"]).optional()})).min(1),rows:l0.array(kN6).min(1),highlightRow:l0.coerce.number().optional()}),l0.object({template:l0.literal("products"),products:l0.array(l0.object({name:l0.coerce.string(),price:l0.coerce.string().optional(),image:l0.coerce.string().optional(),url:l0.coerce.string().optional()})).min(1)}),l0.object({template:l0.literal("list"),entries:l0.array(l0.object({label:l0.coerce.string(),severity:l0.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:l0.coerce.number().optional()}),l0.object({template:l0.literal("keywords"),volumeLabel:l0.coerce.string().optional(),keywords:l0.array(l0.object({term:l0.coerce.string(),volume:l0.coerce.string(),position:l0.coerce.number().catch(0)})).min(1)}),l0.object({template:l0.literal("competitor"),metricLabel:l0.coerce.string().optional(),competitors:l0.array(l0.object({name:l0.coerce.string(),value:l0.coerce.string(),tone:Yv.optional(),isYou:l0.boolean().optional()})).min(1)}),l0.object({template:l0.literal("scorecard"),rivalLabel:l0.coerce.string().optional(),dimensions:l0.array(l0.object({label:l0.coerce.string(),you:l0.coerce.string(),rival:l0.coerce.string().optional(),rivalName:l0.coerce.string().optional(),tone:Yv.optional()})).min(1)})]),$d$=l0.object({...VN6,template:SN6})});function GT0($){let Z=[],X=[...$.sections].sort((Y,G)=>Y.position-G.position).map((Y)=>{let G=$d$.safeParse(Y.props);if(G.success)return G.data;let J=G.error.issues[0];return Z.push({section_type:Y.section_type,position:Y.position,reason:J?`${J.path.join(".")||"(root)"}: ${J.message}`:"contract violation"}),null}).filter((Y)=>Y!==null),Q=X.filter((Y)=>Y.template.template!=="cover"&&Y.template.template!=="cta").map((Y)=>({key:Y.key,title:Y.title}));return{deck:{meta:{...$.meta,scores:$.summary?.scores,scannedAt:$.scanned_at,toc:Q},slides:X},drops:Z}}var N71=D(()=>{Zd$()});import{join as Xd$}from"path";async function _N6($){try{let Z=await fetch(`${GW({})}/api/v2/public/diagnostics/${encodeURIComponent($)}`,{headers:{Accept:"application/json"},signal:AbortSignal.timeout(CN6)});if(!Z.ok)return null;let X=await Z.json(),{deck:Q}=GT0(X);if(!Q.slides.length)return null;let Y=Q.slides.find((K)=>K.template.template==="cover"),G=Y?.template,J=G&&G.template==="cover"?G:void 0;return{brand:Q.meta.brand?.trim()||H71($),score:Q.meta.scores?.cover??J?.score?.value,verdict:Y?.annotation?.trim()||Y?.headline?.trim()||void 0}}catch{return null}}function BG($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function vN6($,Z){let X=lu($),Q=Z?.brand?.trim()||H71(X),Y=sl$(X,128),J=`${(b0().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(X)}`,{title:K,description:W}=el$({brand:Q,domain:X,score:Z?.score,verdict:Z?.verdict}),F=`${J}/og.png`,H=`${Q} commerce report by decocms`;return[`<title>${BG(K)}</title>`,`<meta name="description" content="${BG(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${BG(K)}" />`,`<meta property="og:description" content="${BG(W)}" />`,`<meta property="og:url" content="${BG(J)}" />`,`<meta property="og:image" content="${BG(F)}" />`,'<meta property="og:image:width" content="1200" />','<meta property="og:image:height" content="630" />',`<meta property="og:image:alt" content="${BG(H)}" />`,'<meta name="twitter:card" content="summary_large_image" />',`<meta name="twitter:title" content="${BG(K)}" />`,`<meta name="twitter:description" content="${BG(W)}" />`,`<meta name="twitter:image" content="${BG(F)}" />`,`<meta name="twitter:image:alt" content="${BG(H)}" />`,`<link rel="canonical" href="${BG(J)}" />`,`<link rel="icon" href="${BG(Y)}" sizes="any" />`].join(`
+`,j=await Z.createBlob(E);await Gl$(Z.owner,Z.repo,j,E);let z=L[0]??`${aA0(Q)}/${aZ1(O)}.json`;F.push({path:z,mode:"100644",type:"blob",sha:j});let A=z.slice(z.lastIndexOf("/")+1,-5);H.set(z,{stem:A,sha:j,content:E});for(let P of L.slice(1))F.push({path:P,mode:"100644",type:"blob",sha:null}),H.delete(P)}for(let O of $.del)for(let w of Q71(W,O))F.push({path:w,mode:"100644",type:"blob",sha:null}),H.delete(w);if(F.length===0)return G;let N=Q?`${Q}/.deco/blocks.gen.json`:".deco/blocks.gen.json";if(K.some((O)=>O.type==="blob"&&O.path===N)){let O=await Promise.all([...H.values()].map(async(j)=>({stem:j.stem,content:j.content??await Z.getBlobText(j.sha)}))),{decofile:w,skipped:L}=$s(O);if(L.length>0)console.warn("decofile gen: dropped blocks that were not valid JSON",{repo:`${Z.owner}/${Z.repo}`,branch:X,packagePath:Q,blocks:L.map((j)=>j.key)});let E=await Z.createBlob(w);F.push({path:N,mode:"100644",type:"blob",sha:E})}let U=await Z.createTree(J,F),B=await Z.createCommit({message:aH6($),treeSha:U,parentShas:[G]});try{return await Z.updateRef(X,B),B}catch(O){if(!(O instanceof u4&&O.status===422)||Y>=tH6-1)throw O;await w$(oZ(2000,200,Y,2,0.5))}}}function aH6($){let Z=(Y)=>{let G=Y.slice(0,3).join(", ");return Y.length>3?`${G} (+${Y.length-3} more)`:G},X=[];if($.set.size>0)X.push(`update ${Z([...$.set.keys()])}`);if($.del.size>0)X.push(`delete ${Z([...$.del])}`);let Q=`chore(decofile): ${X.join("; ")}`;return mm0(Q,$.deps.coAuthor)}var tH6=3,W71;var Al$=D(()=>{VO0();mA0();K4();fD();sA0();W71=new Map});import{createHmac as Tl$,randomBytes as sH6,timingSafeEqual as eH6}from"crypto";function Rl$(){if(YT0)return YT0;let $;try{let Z=b0();$=Z.studioJwtSecret??Z.betterAuthSecret}catch{$=void 0}return YT0=$?Buffer.from($):sH6(32),YT0}function F71($){let Z=$.nowMs??Date.now(),X={o:$.organizationId,m:$.virtualMcpId,b:$.branch,e:Math.floor((Z+$N6)/1000)},Q=Buffer.from(JSON.stringify(X)).toString("base64url"),Y=Tl$("sha256",Rl$()).update(Q).digest("base64url");return`${Q}.${Y}`}function Il$($,Z){let X=$.indexOf(".");if(X<0)return!1;let Q=$.slice(0,X),Y=Buffer.from($.slice(X+1)),G=Buffer.from(Tl$("sha256",Rl$()).update(Q).digest("base64url"));if(Y.length!==G.length||!eH6(Y,G))return!1;let J;try{J=JSON.parse(Buffer.from(Q,"base64url").toString())}catch{return!1}let K=Math.floor((Z.nowMs??Date.now())/1000);return J.o===Z.organizationId&&J.m===Z.virtualMcpId&&J.b===Z.branch&&typeof J.e==="number"&&J.e>=K}var $N6=21600000,YT0=null;var ql$=D(()=>{R$()});import{z as cu}from"zod";function XN6($){return $.length>0&&$.length<=255&&!$.includes("..")&&!$.endsWith("/")&&!$.endsWith(".lock")&&ZN6.test($)}function Cl$($){return $.req.header("x-forwarded-host")??new URL($.req.url).host}async function Js($){let Z=$.get("decofileScope");return lA0($.var.studioContext,Z.organizationId,Z.githubRepo)}function Ks($,Z){if(Z instanceof u4){let Q=Z.status===404?404:Z.status===409?409:Z.status===422?409:502;return $.json({error:Z.message},Q)}let X=Z instanceof Error?Z.message:String(Z);return $.json({error:X},500)}function _l$(){let $=new H1;return $.use("/:virtualMcpId/:branch",Sl$),$.use("/:virtualMcpId/:branch/*",Sl$),$.get("/:virtualMcpId/:branch",async(Z)=>{let X=Z.get("decofileScope");try{let Q=await Js(Z),Y=await Jl$(Q,X.branch,X.packagePath,{createBranchIfMissing:!!X.userId}),G={ETag:`"${Y.sha}"`,"Cache-Control":"no-store","Access-Control-Allow-Origin":"*"};if(Z.req.header("if-none-match")===`"${Y.sha}"`)return Z.body(null,304,G);if(!X.userId)return Z.body(Y.decofile,200,{...G,"content-type":"application/json"});let J=F71({organizationId:X.organizationId,virtualMcpId:X.virtualMcpId,branch:X.branch});return Z.body(`{"version":${JSON.stringify(Y.sha)},"token":${JSON.stringify(J)},"apiHost":${JSON.stringify(Cl$(Z))},"decofile":${Y.decofile}}`,200,{...G,"content-type":"application/json"})}catch(Q){return Ks(Z,Q)}}),$.get("/:virtualMcpId/:branch/meta",async(Z)=>{let X=Z.get("decofileScope"),Q=X.packagePath?`${X.packagePath}/.deco/meta.gen.json`:".deco/meta.gen.json";try{let Y=await Js(Z),G=await Y.getFileTextAtRef(X.branch,Q);if(G===null){let J=await Y.getDefaultBranch();if(J!==X.branch)G=await Y.getFileTextAtRef(J,Q)}if(G===null)return Z.json({error:"meta.gen.json not committed"},404);return Z.body(G,200,{"content-type":"application/json","Cache-Control":"no-store","Access-Control-Allow-Origin":"*"})}catch(Y){return Ks(Z,Y)}}),$.patch("/:virtualMcpId/:branch",YN6,async(Z)=>{let X=Z.get("decofileScope"),Q=Z.var.studioContext,Y=GN6.safeParse(await Z.req.json().catch(()=>null));if(!Y.success)return Z.json({error:"Invalid body",details:Y.error.issues},400);let G=Y.data;for(let J of[...Object.keys(G.set??{}),...G.delete??[]])try{dA0(J)}catch(K){let W=K instanceof Error?K.message:String(K);return Z.json({error:W},400)}for(let[J,K]of Object.entries(G.set??{}))if(typeof K!=="object"||K===null||Array.isArray(K))return Z.json({error:`Block "${J}" must be a JSON object`},400);try{let J=await Js(Z),K=await Pl$(`${X.organizationId}/${X.virtualMcpId}/${X.branch}`,{client:J,branch:X.branch,packagePath:X.packagePath,coAuthor:bu(Q)},G),W=F71({organizationId:X.organizationId,virtualMcpId:X.virtualMcpId,branch:X.branch});return Z.json({version:K,token:W,apiHost:Cl$(Z)})}catch(J){return Ks(Z,J)}}),$.post("/:virtualMcpId/:branch/publish",async(Z)=>{let X=Z.get("decofileScope");try{let Q=await Js(Z),Y=await Q.getDefaultBranch();if(Y===X.branch)return Z.json({error:"Branch is already the default branch"},400);let G=`chore(decofile): publish ${X.branch}`;try{let J;try{J=await Q.mergeBranch(Y,X.branch,G)}catch(K){if(!(K instanceof u4&&K.status===409))throw K;await ZT0(Q,X.branch,Y),J=await Q.mergeBranch(Y,X.branch,G)}return J?Z.json({result:"merged",sha:J}):Z.json({result:"up-to-date"})}catch(J){if(J instanceof u4&&J.status===409)return Z.json({error:"merge-conflict"},409);if(J instanceof u4&&J.status===405){let W=await Q.findOpenPullRequest(Y,X.branch)??await Q.createPullRequest({base:Y,head:X.branch,title:`Publish ${X.branch}`});return Z.json({result:"pull-request",number:W.number,url:W.html_url})}throw J}}catch(Q){return Ks(Z,Q)}}),$.get("/:virtualMcpId/:branch/status",async(Z)=>{let X=Z.get("decofileScope");try{let Q=await Js(Z),Y=await Q.getDefaultBranch();if(Y===X.branch)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0});try{let{aheadBy:G,behindBy:J}=await Q.compare(Y,X.branch);return Z.json({baseBranch:Y,aheadBy:G,behindBy:J})}catch(G){if(G instanceof u4&&G.status===404)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0});throw G}}catch(Q){return Ks(Z,Q)}}),$}var ZN6,Ml$=500,kl$=1048576,Vl$=1024,QN6=8388608,YN6,GN6,Sl$;var vl$=D(()=>{mA0();U8();UF();uZ1();cA0();J71();rZ1();Al$();ql$();G71();fD();sA0();ZN6=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;YN6=p5({maxSize:QN6,onError:($)=>$.json({error:"Payload too large"},413)}),GN6=cu.object({set:cu.record(cu.string(),cu.unknown()).optional(),delete:cu.array(cu.string()).optional()}).refine(($)=>Object.keys($.set??{}).length>0||($.delete?.length??0)>0,{message:"Patch must set or delete at least one block"}).refine(($)=>Object.keys($.set??{}).length+($.delete?.length??0)<=Ml$,{message:`Patch cannot touch more than ${Ml$} blocks`}).refine(($)=>Object.values($.set??{}).every((Z)=>JSON.stringify(Z).length<=kl$),{message:`Each block must be at most ${kl$} bytes`}).refine(($)=>[...Object.keys($.set??{}),...$.delete??[]].every((Z)=>Z.length<=Vl$),{message:`Each block key must be at most ${Vl$} characters`}),Sl$=uA0(async($,Z)=>{let X=$.var.studioContext,Q=X.organization;if(!Q)return $.json({error:"Organization scope required"},500);let Y=$.req.param("virtualMcpId"),G=$.req.param("branch");if(!Y||!G)return $.json({error:"virtualMcpId and branch are required"},400);if(!XN6(G))return $.json({error:`Invalid branch name: ${G}`},400);let J=X.auth?.user?.id??null;if(!J){let B=$.req.query("token");if(!($.req.method==="GET"&&!$.req.path.match(/\/(publish|status)$/)))return $.json({error:"Unauthorized"},401);if(!B||!Il$(B,{organizationId:Q.id,virtualMcpId:Y,branch:G}))return $.json({error:"Unauthorized"},401)}let K=await X.storage.virtualMcps.findById(Y);if(!K||K.organization_id!==Q.id)return $.json({error:"Virtual MCP not found"},404);let W=K.metadata??null;if(!fO0(W))return $.json({error:"Project has no preview server configured"},404);let H=K.connections?.map((B)=>B.connection_id)??[],N=Ys(W,H);if(!N)return $.json({error:"Project has no GitHub repository"},404);let U=W?.runtime;return $.set("decofileScope",{organizationId:Q.id,virtualMcpId:Y,branch:G,packagePath:U?.path?.replace(/^\/+|\/+$/g,"")||null,githubRepo:N,userId:J}),Z()})});var fl$=($)=>{let Z=new H1;if(Z.use("*",i_),Z.route("/",QA0()),Z.route("/",ry$()),Z.route("/",Xc$()),Z.route("/",eu$()),Z.route("/",yA0()),Z.route("/tools",Fc$()),Z.route("/",Jc$()),Z.route("/",_u$({kvStorage:$.kvStorage})),Z.route("/",Su$()),Z.route("/fs",pu$({getConnection:$.getNatsConnection})),Z.route("/sandbox",jl$()),Z.route("/decofile",_l$()),Z.route("/",ru$()),Z.route("/deco-sites",GA0()),Z.route("/sso",aP0()),Z.route("/",gA0({tokenStorage:$.tokenStorage,automationEventDispatcher:$.automationEventDispatcher})),Z.route("/webhooks",ly$()),$.mountDevAssets)Z.route("/dev-assets",JA0({orgFromPath:!0}));return Z.use("/mcp/:connectionId?",$.mcpAuth),Z.use("/mcp/:connectionId/ui-resource",$.mcpAuth),Z.use("/mcp/gateway/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/virtual-mcp/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/self",$.mcpAuth),Z.use("/mcp/task-run/:threadId",$.mcpAuth),Z.route("/",Wb$()),Z.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",$.betterAuthProtectedResourceHandler),Z.get("/mcp/.well-known/oauth-protected-resource",$.betterAuthProtectedResourceHandler),Z.route("/mcp/task-run",tu$()),Z.route("/mcp",WL0()),Z.route("/mcp/self",xA0()),Z.route("/mcp",NL0()),Z.all("/oauth-proxy/:connectionId/*",$.oauthProxyHandler),Z.get("/watch",$.watchHandler),Z};var bl$=D(()=>{U8();W91();dy$();U91();KA0();qa();J91();Cu$();vu$();nu$();ft();$91();UL0();vZ1();ou$();au$();$c$();Qc$();Kc$();bZ1();Hc$();xZ1();FL0();zl$();vl$()});function JN6($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}var KN6=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},xl$=()=>{let $=new H1;return $.use("*",KN6),$.get("/",async(Z)=>{let X=b0(),Q=X.decoSupabaseUrl,Y=X.decoSupabaseServiceKey;if(!Q||!Y)return Z.json({apps:[]});try{let G=await iZ(Q,Y,"apps?select=name,title,description,logo,category,vendors(alias,url)");return Z.json({apps:JN6(G)})}catch(G){return console.error("[deco-apps] GET error:",G),Z.json({error:"Failed to fetch apps"},502)}}),$};var yl$=D(()=>{U8();R$();XP0()});import{z as M1}from"zod";function LF($,Z="invalid_request_error",X=null,Q=null){return{error:{message:$,type:Z,param:X,code:Q}}}function LN6($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let X=$.substring(0,Z),Q=$.substring(Z+1);if(!X||!Q)return null;return{credentialId:X,modelId:Q}}function EN6($,Z,X){try{return JSON.parse($)}catch{throw new ul$(`Invalid JSON in tool call arguments for function '${X}' (tool_call_id: ${Z}): ${$}`)}}function jN6($){let Z={};for(let X of $)if(X.role==="assistant"&&X.tool_calls)for(let Q of X.tool_calls)Z[Q.id]=Q.function.name;return $.map((X)=>{switch(X.role){case"system":return{role:"system",content:X.content};case"user":if(typeof X.content==="string")return{role:"user",content:X.content};return{role:"user",content:X.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(X.tool_calls&&X.tool_calls.length>0)return{role:"assistant",content:X.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:EN6(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:X.content??""};case"tool":let Q=Z[X.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:X.tool_call_id,toolName:Q,output:{type:"text",value:X.content}}]}}})}function zN6($){let Z=$.map((X)=>{let Q=X.function.parameters?lY(X.function.parameters):lY({type:"object",properties:{}});return[X.function.name,I$({description:X.function.description,inputSchema:Q})]});return Object.fromEntries(Z)}function PN6($){if(!$)return;return{openai:{response_format:$}}}function AN6(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function gl$($,Z,X,Q,Y,G){let J={model:$,messages:Z,tools:X,temperature:Q.temperature,maxTokens:Q.max_tokens,topP:Q.top_p,frequencyPenalty:Q.frequency_penalty,presencePenalty:Q.presence_penalty,stopSequences:Q.stop?Array.isArray(Q.stop)?Q.stop:[Q.stop]:void 0,abortSignal:G};return Y?{...J,providerOptions:Y}:J}function hl$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var WN6=256,FN6,HN6,NN6,UN6,BN6,ON6,DN6,wN6,ul$,cl$,ll$;var dl$=D(()=>{D4();U8();fu();LN();FN6=M1.object({type:M1.literal("function"),function:M1.object({name:M1.string(),description:M1.string().optional(),parameters:M1.record(M1.string(),M1.unknown()).optional()})}),HN6=M1.object({id:M1.string(),type:M1.literal("function"),function:M1.object({name:M1.string(),arguments:M1.string()})}),NN6=M1.discriminatedUnion("role",[M1.object({role:M1.literal("system"),content:M1.string(),name:M1.string().optional()}),M1.object({role:M1.literal("user"),content:M1.union([M1.string(),M1.array(M1.union([M1.object({type:M1.literal("text"),text:M1.string()}),M1.object({type:M1.literal("image_url"),image_url:M1.object({url:M1.string(),detail:M1.string().optional()})})]))]),name:M1.string().optional()}),M1.object({role:M1.literal("assistant"),content:M1.string().nullable().optional(),name:M1.string().optional(),tool_calls:M1.array(HN6).optional()}),M1.object({role:M1.literal("tool"),content:M1.string(),tool_call_id:M1.string()})]),UN6=M1.object({type:M1.literal("text")}),BN6=M1.object({type:M1.literal("json_object")}),ON6=M1.object({type:M1.literal("json_schema"),json_schema:M1.object({name:M1.string(),description:M1.string().optional(),schema:M1.record(M1.string(),M1.unknown()),strict:M1.boolean().optional()})}),DN6=M1.union([UN6,BN6,ON6]),wN6=M1.object({model:M1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:M1.array(NN6),stream:M1.boolean().optional().default(!1),temperature:M1.number().min(0).max(2).optional(),max_tokens:M1.number().positive().optional(),top_p:M1.number().min(0).max(1).optional(),frequency_penalty:M1.number().min(-2).max(2).optional(),presence_penalty:M1.number().min(-2).max(2).optional(),stop:M1.union([M1.string(),M1.array(M1.string())]).optional(),tools:M1.array(FN6).optional(),tool_choice:M1.union([M1.literal("auto"),M1.literal("none"),M1.literal("required"),M1.object({type:M1.literal("function"),function:M1.object({name:M1.string()})})]).optional(),response_format:DN6.optional(),user:M1.string().optional()});ul$=class ul$ extends Error{constructor($){super($);this.name="MessageConversionError"}};cl$=new H1;cl$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),X=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(LF("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(LF("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==X)return $.json(LF("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let Q=await $.req.json(),Y=wN6.safeParse(Q);if(!Y.success){let L=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(LF(`Invalid request: ${L.message}`,"invalid_request_error",L.path.length>0?L.path.join("."):null),400)}let G=Y.data,J=LN6(G.model);if(!J)return $.json(LF("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:K}=J,{modelId:W}=J;if(!K){let E=(await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id})).find((j)=>sw(j.providerId));if(!E)return $.json(LF("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);K=E.id}let F;try{F=await Z.aiProviders.activate(K,Z.organization.id)}catch{return $.json(LF(`AI provider credential not found or inaccessible: ${K}`,"invalid_request_error","model"),404)}let H=F.aiSdk.languageModel(W),N=jN6(G.messages),U=G.tools?zN6(G.tools):void 0,B=PN6(G.response_format),O=AN6(),w=Math.floor(Date.now()/1000);if(G.stream)return yN($,async(L)=>{let E=gl$(H,N,U,G,B,$.req.raw.signal);try{let j=NO(E),z=!1,A=0,P="",I=async()=>{if(P.length===0)return;let q=P;P="",await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{content:q},finish_reason:null}]})})};for await(let q of j.fullStream){if(!z&&(q.type==="text-delta"||q.type==="tool-call"))await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),z=!0;if(q.type==="text-delta"){if(P+=q.text,P.length>=WN6)await I()}else if(q.type==="tool-call"){await I();let M=A++;await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:q.toolCallId,type:"function",function:{name:q.toolName,arguments:JSON.stringify(q.input)}}]},finish_reason:null}]})})}else if(q.type==="finish")await I(),await L.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:w,model:G.model,choices:[{index:0,delta:{},finish_reason:hl$(q.finishReason)}],usage:q.totalUsage?{prompt_tokens:q.totalUsage.inputTokens??0,completion_tokens:q.totalUsage.outputTokens??0,total_tokens:q.totalUsage.totalTokens??0}:void 0})})}await I(),await L.writeSSE({data:"[DONE]"})}catch(j){let z=j;console.error("[openai-compat:stream] Error:",z.message),await L.writeSSE({data:JSON.stringify({error:{message:z.message,type:"server_error"}})})}});else{let L=gl$(H,N,U,G,B,$.req.raw.signal),E=await FO(L),j={role:"assistant",content:E.text||null};if(E.toolCalls&&E.toolCalls.length>0)j.tool_calls=E.toolCalls.map((z)=>({id:z.toolCallId,type:"function",function:{name:z.toolName,arguments:JSON.stringify("input"in z?z.input:{})}})),j.content=null;return $.json({id:O,object:"chat.completion",created:w,model:G.model,choices:[{index:0,message:j,finish_reason:hl$(E.finishReason)}],usage:{prompt_tokens:E.usage?.inputTokens??0,completion_tokens:E.usage?.outputTokens??0,total_tokens:E.usage?.totalTokens??0}})}}catch(Q){let Y=Q;if(Y.name==="AbortError")return $.json(LF("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(LF(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(LF(Y.message,"server_error"),500)}});ll$=cl$});function TN6($){if(typeof $!=="object"||$===null)return!1;let X=$.githubRepo?.url;return typeof X==="string"&&X.length>0}function ml$(){let $=new H1;return $.use("*",async(Z,X)=>{await X(),Z.header("Cache-Control","private, no-store"),Z.header("Vary","Cookie")}),$.get("/",async(Z)=>{let X=Z.get("studioContext"),Q=o0(X);if(!Q)return Z.json({error:"Authentication required"},401);let G=(Z.req.query("site")??"").trim().toLowerCase();if(!nG(G))return Z.json({error:"Invalid site slug"},400);let J=await X.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.id as id","organization.slug as slug","organization.name as name","organization.metadata as metadata"]).where("member.userId","=",Q).execute(),K=[];for(let F of J){if(!F.slug||F7(F))continue;let H=await X.storage.virtualMcps.list(F.id);for(let N of H){if(gs1(N)!==G)continue;if(!TN6(N.metadata))continue;K.push({orgSlug:F.slug,orgName:F.name??F.slug,project:{id:N.id,title:N.title,icon:N.icon??null}})}}let W={matches:K};return Z.json(W)}),$}var il$=D(()=>{U8();rB()});var nl$;var pl$=D(()=>{nl$={name:"decocms",version:"4.281.4",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/api"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:"bun run migrate && bun run dev:server","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",build:"bun run build:server","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","generate:tool-contracts":"bun run scripts/generate-tool-contracts.ts","db:migrate":"bun run ./dist/server/migrate.js","db:migrate:dbos":"bun run ./dist/server/migrate-dbos.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts","migrate:dbos":"bun run src/database/migrate-dbos.ts",test:"bun test src","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",prepublishOnly:"bun run --cwd=../.. build:studio"},optionalDependencies:{"@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@inkjs/ui":"^2.0.0","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@better-auth/sso":"1.4.1","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/shared":"workspace:*","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@vercel/nft":"^1.1.1",ai:"^6.0.208","better-auth":"1.4.22",croner:"^9.1.0",degit:"^2.8.4",hono:"^4.10.7",jose:"^6.0.11",nanoid:"^5.1.6",pg:"^8.16.3",typescript:"^7.0.2",typescript5:"npm:typescript@^5.9.3",zod:"4.3.6"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","tools"],license:"MIT",publishConfig:{access:"public"}}});function qN6(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??IN6}}var tl$,IN6="https://ph.studio.decocms.com",ol$;var rl$=D(()=>{U8();C50();qC();$9();R$();i51();pl$();tl$=new H1;tl$.get("/",($)=>{let Z={version:nl$.version,theme:Ki1(),...EH().logo&&{logo:EH().logo},...QN()&&{internalUrl:gC1()},...b0().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!b0().firecrawlApiKey,auth:sx$(),posthog:qN6(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:Ds()}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});ol$=tl$});function lu($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function H71($){return(lu($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((X)=>X.charAt(0).toUpperCase()+X.slice(1)).join(" ")}function sl$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(lu($))}&sz=${Z}`}function al$($,Z){let X=$.trim();if(X.length<=Z)return X;let Q=X.slice(0,Z-1),Y=Q.lastIndexOf(" ");return`${(Y>Z*0.6?Q.slice(0,Y):Q).trimEnd()}\u2026`}function el$($){let{brand:Z,domain:X,score:Q,verdict:Y}=$,G=typeof Q==="number"?`${Z} commerce report \u2014 ${Math.round(Q)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,K=Y?.trim()?al$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):al$(`How does ${X} really perform? ${J}`,200);return{title:G,description:K}}import{z as l0}from"zod";var Yv,MN6,kN6,VN6,SN6,$d$;var Zd$=D(()=>{Yv=l0.enum(["good","bad","neutral"]),MN6=l0.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((X)=>X!==null&&typeof X!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},l0.object({kind:l0.enum(["text","number","sparkline","badge","score"]).catch("text"),value:l0.coerce.string().optional(),tone:Yv.optional(),muted:l0.boolean().optional(),delta:l0.coerce.string().optional(),deltaDir:l0.enum(["up","down","neutral"]).optional(),points:l0.array(l0.coerce.number()).optional(),label:l0.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),kN6=l0.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},l0.array(MN6)),VN6={key:l0.coerce.string(),title:l0.coerce.string(),eyebrow:l0.coerce.string().optional(),headline:l0.coerce.string(),annotation:l0.coerce.string().optional(),methodology:l0.coerce.string().optional(),sources:l0.array(l0.object({name:l0.coerce.string(),logoUrl:l0.coerce.string()})).optional()},SN6=l0.discriminatedUnion("template",[l0.object({template:l0.literal("cover"),score:l0.object({value:l0.coerce.number(),max:l0.coerce.number().optional(),grade:l0.coerce.string().optional(),label:l0.coerce.string().optional()}).optional(),brandImage:l0.coerce.string().optional(),screenshot:l0.coerce.string().optional(),mobileScreenshot:l0.coerce.string().optional()}),l0.object({template:l0.literal("cta"),ctaUrl:l0.coerce.string().optional(),ctaLabel:l0.coerce.string().optional(),bullets:l0.array(l0.coerce.string()).optional()}),l0.object({template:l0.literal("series"),points:l0.array(l0.coerce.number()).min(2),xLabels:l0.array(l0.coerce.string()).min(1),unit:l0.coerce.string().optional(),callout:l0.object({index:l0.coerce.number(),value:l0.coerce.string(),tone:Yv.optional()})}),l0.object({template:l0.literal("threshold"),value:l0.coerce.string().default(""),metricLabel:l0.coerce.string().optional(),ratio:l0.coerce.number(),thresholdRatio:l0.coerce.number().optional(),thresholdLabel:l0.coerce.string().default(""),tone:Yv.optional()}),l0.object({template:l0.literal("stats"),stats:l0.array(l0.object({value:l0.coerce.string(),label:l0.coerce.string(),tone:Yv.optional()})).min(1)}),l0.object({template:l0.literal("bars"),items:l0.array(l0.object({value:l0.coerce.string(),label:l0.coerce.string(),ratio:l0.coerce.number(),tone:Yv.optional()})).min(1)}),l0.object({template:l0.literal("gauges"),gauges:l0.array(l0.object({label:l0.coerce.string(),value:l0.coerce.string(),status:l0.enum(["good","warn","bad"]).catch("warn"),caption:l0.coerce.string().optional(),ratio:l0.coerce.number().optional()})).min(1)}),l0.object({template:l0.literal("checklist"),checks:l0.array(l0.object({label:l0.coerce.string(),status:l0.enum(["pass","fail","warn"]).catch("fail"),value:l0.coerce.string().optional()})).min(1)}),l0.object({template:l0.literal("table"),columns:l0.array(l0.object({label:l0.coerce.string(),align:l0.enum(["left","right"]).optional()})).min(1),rows:l0.array(kN6).min(1),highlightRow:l0.coerce.number().optional()}),l0.object({template:l0.literal("products"),products:l0.array(l0.object({name:l0.coerce.string(),price:l0.coerce.string().optional(),image:l0.coerce.string().optional(),url:l0.coerce.string().optional()})).min(1)}),l0.object({template:l0.literal("list"),entries:l0.array(l0.object({label:l0.coerce.string(),severity:l0.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:l0.coerce.number().optional()}),l0.object({template:l0.literal("keywords"),volumeLabel:l0.coerce.string().optional(),keywords:l0.array(l0.object({term:l0.coerce.string(),volume:l0.coerce.string(),position:l0.coerce.number().catch(0)})).min(1)}),l0.object({template:l0.literal("competitor"),metricLabel:l0.coerce.string().optional(),competitors:l0.array(l0.object({name:l0.coerce.string(),value:l0.coerce.string(),tone:Yv.optional(),isYou:l0.boolean().optional()})).min(1)}),l0.object({template:l0.literal("scorecard"),rivalLabel:l0.coerce.string().optional(),dimensions:l0.array(l0.object({label:l0.coerce.string(),you:l0.coerce.string(),rival:l0.coerce.string().optional(),rivalName:l0.coerce.string().optional(),tone:Yv.optional()})).min(1)})]),$d$=l0.object({...VN6,template:SN6})});function GT0($){let Z=[],X=[...$.sections].sort((Y,G)=>Y.position-G.position).map((Y)=>{let G=$d$.safeParse(Y.props);if(G.success)return G.data;let J=G.error.issues[0];return Z.push({section_type:Y.section_type,position:Y.position,reason:J?`${J.path.join(".")||"(root)"}: ${J.message}`:"contract violation"}),null}).filter((Y)=>Y!==null),Q=X.filter((Y)=>Y.template.template!=="cover"&&Y.template.template!=="cta").map((Y)=>({key:Y.key,title:Y.title}));return{deck:{meta:{...$.meta,scores:$.summary?.scores,scannedAt:$.scanned_at,toc:Q},slides:X},drops:Z}}var N71=D(()=>{Zd$()});import{join as Xd$}from"path";async function _N6($){try{let Z=await fetch(`${GW({})}/api/v2/public/diagnostics/${encodeURIComponent($)}`,{headers:{Accept:"application/json"},signal:AbortSignal.timeout(CN6)});if(!Z.ok)return null;let X=await Z.json(),{deck:Q}=GT0(X);if(!Q.slides.length)return null;let Y=Q.slides.find((K)=>K.template.template==="cover"),G=Y?.template,J=G&&G.template==="cover"?G:void 0;return{brand:Q.meta.brand?.trim()||H71($),score:Q.meta.scores?.cover??J?.score?.value,verdict:Y?.annotation?.trim()||Y?.headline?.trim()||void 0}}catch{return null}}function BG($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function vN6($,Z){let X=lu($),Q=Z?.brand?.trim()||H71(X),Y=sl$(X,128),J=`${(b0().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(X)}`,{title:K,description:W}=el$({brand:Q,domain:X,score:Z?.score,verdict:Z?.verdict}),F=`${J}/og.png`,H=`${Q} commerce report by decocms`;return[`<title>${BG(K)}</title>`,`<meta name="description" content="${BG(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${BG(K)}" />`,`<meta property="og:description" content="${BG(W)}" />`,`<meta property="og:url" content="${BG(J)}" />`,`<meta property="og:image" content="${BG(F)}" />`,'<meta property="og:image:width" content="1200" />','<meta property="og:image:height" content="630" />',`<meta property="og:image:alt" content="${BG(H)}" />`,'<meta name="twitter:card" content="summary_large_image" />',`<meta name="twitter:title" content="${BG(K)}" />`,`<meta name="twitter:description" content="${BG(W)}" />`,`<meta name="twitter:image" content="${BG(F)}" />`,`<meta name="twitter:image:alt" content="${BG(H)}" />`,`<link rel="canonical" href="${BG(J)}" />`,`<link rel="icon" href="${BG(Y)}" sizes="any" />`].join(`
     `)}function fN6($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function Qd$($){let Z=new H1;return Z.get("/:domain/og.png",async(X)=>{let Q=lu(X.req.param("domain")),Y=async()=>{let G=$?Bun.file(Xd$($,"report-og-fallback.png")):null;if(!G||!await G.exists())return X.notFound();return X.body(new Uint8Array(await G.arrayBuffer()),200,{"Content-Type":"image/png","Cache-Control":"public, max-age=0, s-maxage=3600"})};try{let G=await fetch(`${GW({})}/api/v2/public/diagnostics/${encodeURIComponent(Q)}/og.png`,{signal:AbortSignal.timeout(bN6)}),J=G.headers.get("content-type")??"";if(!G.ok||!J.startsWith("image/")||!G.body)return Y();return X.body(G.body,200,{"Content-Type":J,"Cache-Control":"public, max-age=0, s-maxage=604800"})}catch{return Y()}}),Z.get("/:domain",async(X)=>{let Q=X.req.param("domain"),Y=$?Xd$($,"index.html"):null,G=Y?Bun.file(Y):null;if(!G||!await G.exists())return X.notFound();let J=await G.text();try{let K=await _N6(lu(Q)),W=vN6(Q,K);return X.html(fN6(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return X.html(J)}}),Z}var CN6=2500,bN6=1e4;var Yd$=D(()=>{U8();N71();XE();R$()});function Ws($,Z){return fetch(`${GW({})}${$}`,Z)}async function xN6($,Z,X){let Q=new URLSearchParams;if(Z)Q.set("pw",Z);if(X)Q.set("lang",X);let Y=Q.toString()?`?${Q.toString()}`:"",G=await Ws(`/api/v2/public/diagnostics/${encodeURIComponent($)}${Y}`,{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let J=await G.json(),{deck:K,drops:W}=GT0(J);return{status:K.slides.length?"ready":"empty",deck:K,scanned_at:J.scanned_at,drops:W}}var yN6,hN,Gd$=async($,Z)=>{if(!$.get("reportUser"))return $.json({error:"Authentication required"},401);await Z();return},Jd$;var Kd$=D(()=>{U8();gY();XE();N71();yN6=new Set(["complete","errored","terminated","unknown"]),hN=new H1;hN.use("*",async($,Z)=>{let X=await Q8.api.getSession({headers:$.req.raw.headers});$.set("reportUser",X?.user?.id?{email:X.user.email}:void 0),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});hN.use("/link-token/*",Gd$);hN.use("/suggest",Gd$);hN.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let X=$.get("reportUser"),Q=$.req.query("key")?.trim()||void 0,Y=$.req.query("lang")?.trim()||void 0;try{let G=await xN6(Z,Q,Y);if($.header("Cache-Control","private, no-store"),X||!G.deck)return $.json(G);return $.json({...G,deck:{...G.deck,slides:G.deck.slides.slice(0,1)},truncated:G.status==="ready"})}catch{return $.json({error:"report read failed"},502)}});hN.post("/run",async($)=>{let Z=$.get("reportUser"),X;try{X=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let Q=typeof X.domain==="string"?X.domain.trim():"";if(!Q)return $.json({error:"domain is required"},400);let Y=Z?.email,G=typeof X.distinctId==="string"&&X.distinctId.trim()&&X.distinctId.length<=200?X.distinctId.trim():void 0;try{let J=await Ws("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${ZE({})}`},body:JSON.stringify({url:Q,...Y?{email:Y}:{},distinct_id:G})});if(!J.ok)return $.json({error:`run HTTP ${J.status}`},502);let K=await J.json(),W=K.blocked?{state:"blocked"}:K.status==="fresh"?{state:"fresh"}:K.mode==="sync"?{state:"sync"}:{state:"running",id:K.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});hN.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let X=await Ws(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${ZE({})}`}});if(!X.ok)return $.json({error:`status HTTP ${X.status}`},502);let Y=(await X.json()).status??"unknown",G={done:yN6.has(Y),status:Y};return $.json(G)}catch{return $.json({error:"status failed"},502)}});hN.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let X=await Ws(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(X.status===404)return $.json(null);if(!X.ok)return $.json({error:`link token HTTP ${X.status}`},502);return $.json(await X.json())}catch{return $.json({error:"link token resolve failed"},502)}});hN.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let X=await Ws(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!X.ok)return $.json({suggestions:[]});let Q=await X.json();return $.json({suggestions:Array.isArray(Q.suggestions)?Q.suggestions:[]})}catch{return $.json({suggestions:[]})}});Jd$=hN});import{createHmac as gN6,timingSafeEqual as hN6}from"crypto";function Fd$($,Z,X,Q=Date.now()){if(!Z||!X)return!1;let Y,G=[];for(let F of Z.split(",")){let H=F.indexOf("=");if(H<=0)continue;let N=F.slice(0,H).trim(),U=F.slice(H+1).trim();if(N==="t")Y=U;else if(N==="v1")G.push(U)}if(!Y||G.length===0)return!1;let J=Number(Y);if(!Number.isFinite(J)||Math.abs(Q/1000-J)>uN6)return!1;let K=gN6("sha256",X).update(`${Y}.${$}`).digest("hex"),W=Buffer.from(K,"hex");return G.some((F)=>{let H=Buffer.from(F,"hex");return W.length===H.length&&hN6(W,H)})}function Hd$($){let Z;try{Z=JSON.parse($)}catch{return null}let X=vJ(Z),Q=vJ(vJ(X?.data)?.object);if(!X||typeof X.type!=="string"||!Q)return null;return{id:EF(X.id),type:X.type,created:typeof X.created==="number"?X.created:void 0,livemode:typeof X.livemode==="boolean"?X.livemode:void 0,data:{object:Q}}}function Nd$($){switch($){case"active":case"trialing":return"active";case"past_due":return"past_due";default:return"canceled"}}function EF($){return typeof $==="string"?$:void 0}function vJ($){return typeof $==="object"&&$!==null?$:void 0}function JT0($){return typeof $==="number"?new Date($*1000):null}function O71($){return EF($)??EF(vJ($)?.id)}function cN6($){return O71($.subscription)??EF(vJ(vJ($.parent)?.subscription_details)?.subscription)}function lN6($){let Z=JT0($.current_period_end);if(Z)return Z;let X=vJ($.items)?.data;if(!Array.isArray(X))return null;let Q=0;for(let Y of X){let G=vJ(Y)?.current_period_end;if(typeof G==="number"&&G>Q)Q=G}return Q>0?new Date(Q*1000):null}function U71($,Z){let X=JT0($.created);return!!X&&!!Z.lastStripeEventAt&&X<Z.lastStripeEventAt}function B71($,Z){let X=JT0($.created);if(!X)return;return Z.lastStripeEventAt&&Z.lastStripeEventAt>X?void 0:X}async function dN6($,Z){let X=Z.data.object;switch(Z.type){case"checkout.session.completed":case"checkout.session.async_payment_succeeded":{let Q=EF(vJ(X.metadata)?.orgId);if(!Q)return{handled:!1,reason:"no orgId"};if(EF(vJ(X.metadata)?.kind)==="topup"){if(X.mode!=="payment")return{handled:!1,reason:"topup with wrong mode"};if(EF(X.payment_status)!=="paid")return{handled:!1,reason:"payment not confirmed"};let J=EF(X.id);if(!J)return console.error("stripe webhook: topup session without id",{eventId:Z.id,organizationId:Q}),{handled:!1,reason:"topup session without id"};let K=Number(vJ(X.metadata)?.creditCents);if(!Number.isInteger(K)||K<=0)return console.error("stripe webhook: paid topup with bad metadata \u2014 credit NOT applied",{eventId:Z.id,organizationId:Q,creditCents:vJ(X.metadata)?.creditCents}),{handled:!1,reason:"bad topup metadata"};return{handled:!0,organizationId:Q,topUp:{creditCents:K,referenceId:`stripe-topup:${J}`}}}if(X.mode!=="subscription")return{handled:!1,reason:"not a subscription checkout"};if(EF(X.payment_status)!=="paid")return{handled:!1,reason:"payment not confirmed"};let Y=await $.getBilling(Q);if(!Y)return{handled:!1,reason:"unknown org"};let G=O71(X.subscription);if(Y.stripeSubscriptionId&&G&&Y.stripeSubscriptionId!==G)return console.error("stripe webhook: refused checkout rebind",{organizationId:Q,eventId:Z.id}),{handled:!1,reason:"org already bound to another subscription",orphanSubscriptionId:G};if(U71(Z,Y))return{handled:!1,reason:"stale event"};return await $.updateStripeState(Q,{stripeCustomerId:O71(X.customer),stripeSubscriptionId:G,status:"active",lastStripeEventAt:B71(Z,Y)}),{handled:!0,organizationId:Q}}case"customer.subscription.updated":case"customer.subscription.deleted":{let Q=EF(X.id);if(!Q)return{handled:!1,reason:"no sub id"};let Y=await $.getBillingByStripeSubscriptionId(Q);if(!Y)return{handled:!1,reason:"unknown subscription"};let G=Z.type==="customer.subscription.deleted";if(!G&&U71(Z,Y))return{handled:!1,reason:"stale event"};let J=G?"canceled":Nd$(X.status);return await $.updateStripeState(Y.organizationId,{status:J,currentPeriodEnd:lN6(X),...G&&{stripeSubscriptionId:null},lastStripeEventAt:B71(Z,Y)}),{handled:!0,organizationId:Y.organizationId}}case"invoice.paid":{let Q=cN6(X);if(!Q)return{handled:!1,reason:"no sub id"};let Y=await $.getBillingByStripeSubscriptionId(Q);if(!Y)return{handled:!1,reason:"unknown subscription"};if(U71(Z,Y))return{handled:!1,reason:"stale event"};return await $.updateStripeState(Y.organizationId,{status:"active",currentPeriodEnd:JT0(X.period_end),lastStripeEventAt:B71(Z,Y)}),{handled:!0,organizationId:Y.organizationId}}default:return{handled:!1,reason:`unhandled event ${Z.type}`}}}function mN6($,Z){if(!Z.handled||$.livemode===!1)return null;let X=$.data.object;if(Z.topUp)return{name:"credits_topup_succeeded",organizationId:Z.organizationId,properties:{credit_cents:Z.topUp.creditCents}};switch($.type){case"checkout.session.completed":case"checkout.session.async_payment_succeeded":return{name:"subscription_started",organizationId:Z.organizationId,properties:{}};case"customer.subscription.deleted":return{name:"subscription_canceled",organizationId:Z.organizationId,properties:{}};case"customer.subscription.updated":return{name:"subscription_updated",organizationId:Z.organizationId,properties:{status:Nd$(X.status),...typeof X.cancel_at_period_end==="boolean"?{cancel_at_period_end:X.cancel_at_period_end}:{}}};case"invoice.paid":if(X.billing_reason==="subscription_create")return null;return{name:"subscription_renewed",organizationId:Z.organizationId,properties:{}};default:return null}}function Wd$($,Z){let X=mN6($,Z);if(!X)return;vY({event:X.name,organizationId:X.organizationId,...$.id?{uuid:Dn1(`stripe:${$.id}:${X.name}`)}:{},...$.created?{timestamp:new Date($.created*1000)}:{},properties:X.properties})}async function Ud$($){let Z=new ZW(m8().db),X=await dN6(Z,$);if(!(X.handled&&X.topUp))Wd$($,X);if(X.handled&&X.topUp)await SE$({organizationId:X.organizationId,amountCents:X.topUp.creditCents,referenceId:X.topUp.referenceId}),Wd$($,X);if(!X.handled&&X.orphanSubscriptionId)try{await fe1(X.orphanSubscriptionId),console.error("stripe webhook: canceled orphan subscription",{subscriptionId:X.orphanSubscriptionId,eventId:$.id})}catch(Q){if(!(Q instanceof hY&&(Q.status===400||Q.status===404)))throw Q}return X}var uN6=300;var Bd$=D(()=>{cG();C4();H50();NE();I01()});var iN6=1048576,D71;var Od$=D(()=>{U8();UF();R$();Bd$();D71=new H1;D71.post("/webhook",p5({maxSize:iN6,onError:($)=>$.json({error:"payload too large"},413)}),async($)=>{let Z=b0().stripeWebhookSecret;if(!Z)return $.json({error:"stripe billing not configured"},503);let X=await $.req.text();if(!Fd$(X,$.req.header("stripe-signature"),Z))return $.json({error:"invalid signature"},400);let Y=Hd$(X);if(!Y)return $.json({error:"invalid payload"},400);let G=await Ud$(Y);return console.log("stripe webhook",{eventId:Y.id,type:Y.type,livemode:Y.livemode,...G}),$.json({received:!0})})});import{timingSafeEqual as pN6}from"crypto";function tN6($,Z,X){if(!Z?.startsWith("sha256="))return!1;let Q=new Bun.CryptoHasher("sha256",X).update($).digest("hex"),Y=Z.slice(7);if(Y.length!==Q.length)return!1;return pN6(Buffer.from(Y),Buffer.from(Q))}var nN6=5242880,w71;var Dd$=D(()=>{U8();UF();h3();w71=new H1;w71.post("/webhook",p5({maxSize:nN6,onError:($)=>$.json({error:"payload too large"},413)}),async($)=>{let Z=process.env.GITHUB_WEBHOOK_SECRET;if(!Z)return $.json({error:"github webhook not configured"},503);let X=await $.req.text();if(!tN6(X,$.req.header("x-hub-signature-256"),Z))return $.json({error:"invalid signature"},400);if($.req.header("x-github-event")!=="push")return $.json({ok:!0,ignored:"event"});let Q;try{Q=JSON.parse(X)}catch{return $.json({error:"invalid payload"},400)}let Y=Q.ref,G=Q.repository?.full_name;if(!Y||!G)return $.json({ok:!0,ignored:"shape"});let K=(await Rn0())?.markTenantPoolsDirty(G,Y)??[];return $.json({ok:!0,pools:K})})});function wd$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var Ld$,oN6,rN6,Ed$;var jd$=D(()=>{U8();L3();Fg();ix();Ld$=new H1,oN6=["range","if-none-match","if-modified-since"],rN6=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];Ld$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),X=Z.organization?.id;if(!Z.auth?.user?.id){if(Du($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new $$(401,{message:"Authentication required"})}if(!X)throw new $$(401,{message:"Organization context required"});let Q=$.req.path.replace(/^.*\/files\//,"");if(!Q)throw new $$(400,{message:"Missing file key"});let Y=await Gt(Q,Z);if(!Y)throw new $$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&iG()){let W=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!W)throw new $$(500,{message:"Invalid data URL from storage"});let[,F,H]=W,N=Buffer.from(H,"base64"),U=new Headers({"Content-Type":F,"Cache-Control":"private, max-age=86400"});return wd$(U,F),new Response(N,{status:200,headers:U})}let G=new Headers;for(let W of oN6){let F=$.req.header(W);if(F)G.set(W,F)}let J=await fetch(Y,{headers:G});if(J.status===403||J.status===404)throw new $$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,Q),new $$(502,{message:"Upstream storage error"});let K=new Headers;for(let W of rN6){let F=J.headers.get(W);if(F)K.set(W,F)}return K.set("Cache-Control","private, max-age=86400"),wd$(K,K.get("content-type")??""),new Response(J.body,{status:J.status,headers:K})});Ed$=Ld$});var Fs=_((Gv)=>{var aN6=Gv&&Gv.__createBinding||(Object.create?function($,Z,X,Q){if(Q===void 0)Q=X;var Y=Object.getOwnPropertyDescriptor(Z,X);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[X]}};Object.defineProperty($,Q,Y)}:function($,Z,X,Q){if(Q===void 0)Q=X;$[Q]=Z[X]}),sN6=Gv&&Gv.__exportStar||function($,Z){for(var X in $)if(X!=="default"&&!Object.prototype.hasOwnProperty.call(Z,X))aN6(Z,$,X)};Object.defineProperty(Gv,"__esModule",{value:!0});sN6(EY(),Gv)});var Ad$=_((zd$)=>{Object.defineProperty(zd$,"__esModule",{value:!0});zd$.version=void 0;zd$.version="3.4.0"});var Id$=_((jF)=>{var eN6=jF&&jF.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(jF,"__esModule",{value:!0});jF.NodeTransport=jF.VERSION=void 0;jF.nodeResolveHost=GU6;var a6=Fs(),$U6=j0("net"),L71=j0("tls"),ZU6=j0("path"),Td$=j0("fs"),XU6=eN6(j0("dns")),QU6=Ad$();jF.VERSION=QU6.version;var YU6="nats.js";class Rd${socket;version;lang;yields=[];signal=(0,a6.deferred)();closedNotification=(0,a6.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=YU6,this.version=jF.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:X}=this.options,{handshakeFirst:Q}=X||{};try{if(Q===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,a6.checkOptions)(Y,Z);let{tls_required:G,tls_available:J}=Y,K=J===!0&&Z.tls!==null;if(!Q&&(G||K))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(G&&this.socket.encrypted!==!0)throw a6.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let G=Y;if(!G)G=new a6.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=G,K=J==="ECONNREFUSED"?new a6.errors.ConnectionError("connection refused",{cause:G}):G;throw this.socket?.destroy(),K}}dial($){let Z=(0,a6.deferred)(),X,Q=(0,$U6.createConnection)($.port,$.hostname,()=>{Z.resolve(Q),Q.removeAllListeners()});return Q.on("error",(Y)=>{X=Y}),Q.on("close",()=>{Q.removeAllListeners(),Z.reject(X)}),Q.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,a6.deferred)(),Z;return this.socket.on("data",(X)=>{this.yields.push(X);let Q=a6.DataBuffer.concat(...this.yields),Y=(0,a6.extractProtocolMessage)(Q);if(Y!=="")try{let G=a6.INFO.exec(Y);if(!G)throw Error("unexpected response from server");let J=JSON.parse(G[1]);$.resolve(J)}catch(G){$.reject(G)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(X)=>{Z=X}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,a6.deferred)();try{if($=(0,ZU6.resolve)($),!(0,Td$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,Td$.readFile)($,(X,Q)=>{if(X)return Z.reject(X);Z.resolve(Q)})}catch(X){Z.reject(X)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:X,caFile:Q,ca:Y,keyFile:G,key:J}=this.options.tls;try{if(Z){let K=await this.loadFile(Z);if(K)$.cert=K}else if(X)$.cert=X;if(G){let K=await this.loadFile(G);if(K)$.key=K}else if(J)$.key=J;if(Q){let K=await this.loadFile(Q);if(K)$.ca=[K]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(K){return Promise.reject(K)}}async tlsFirst($){let Z,X={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)X.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};X=(0,a6.extend)(X,this.options.tls,Y)}catch(Y){return Promise.reject(new a6.errors.ConnectionError(Y.message,{cause:Y}))}let Q=(0,a6.deferred)();try{let Y=(0,L71.connect)($.port,$.hostname,X,()=>{Y.removeAllListeners(),Q.resolve(Y)});Y.on("error",(G)=>{Z=G}),Y.on("secureConnect",()=>{if(X.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{Q.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){Q.reject(new a6.errors.ConnectionError(Y.message,{cause:Y}))}return Q}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let Q=await this.loadClientCerts()||{};Z=(0,a6.extend)(Z,this.options.tls,Q)}catch(Q){return Promise.reject(new a6.errors.ConnectionError(Q.message,{cause:Q}))}let X=(0,a6.deferred)();try{let Q=(0,L71.connect)(Z,()=>{Q.removeAllListeners(),X.resolve(Q)});Q.on("error",(Y)=>{$=Y}),Q.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!Q.authorized)throw Q.authorizationError}),Q.on("close",()=>{X.reject($),Q.removeAllListeners()})}catch(Q){X.reject(new a6.errors.ConnectionError(Q.message,{cause:Q}))}return X}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,a6.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,a6.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof L71.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,a6.render)($)}`);let Z=(0,a6.deferred)();try{this.socket.write($,(X)=>{if(X){if(this.options.debug)console.error(`!!! ${(0,a6.render)($)}: ${X}`);return Z.reject(X)}return Z.resolve()})}catch(X){if(this.options.debug)console.error(`!!! ${(0,a6.render)($)}: ${X}`);Z.reject(X)}return Z}send($){this._send($).catch((X)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(X){if(this.options.debug)console.log("transport close terminated with an error",X)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(X){console.log(X)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}jF.NodeTransport=Rd$;function GU6($){let Z=(0,a6.deferred)();return XU6.default.lookup($,{all:!0},(X,Q)=>{if(X){Z.reject(X);return}let Y=[];for(let G of Q)Y.push(G.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var Sd$=_((Vd$)=>{Object.defineProperty(Vd$,"__esModule",{value:!0});Vd$.connect=JU6;var qd$=Id$(),Md$=Fs(),kd$=Fs();function JU6($={}){if((0,kd$.hasWsProtocol)($))return Promise.reject(kd$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,Md$.setTransportFactory)({factory:()=>{return new qd$.NodeTransport},dnsResolveFn:qd$.nodeResolveHost}),Md$.NatsConnectionImpl.connect($)}});var Cd$=_((uN)=>{var WU6=uN&&uN.__createBinding||(Object.create?function($,Z,X,Q){if(Q===void 0)Q=X;var Y=Object.getOwnPropertyDescriptor(Z,X);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[X]}};Object.defineProperty($,Q,Y)}:function($,Z,X,Q){if(Q===void 0)Q=X;$[Q]=Z[X]}),FU6=uN&&uN.__exportStar||function($,Z){for(var X in $)if(X!=="default"&&!Object.prototype.hasOwnProperty.call(Z,X))WU6(Z,$,X)};Object.defineProperty(uN,"__esModule",{value:!0});uN.connect=void 0;var HU6=Sd$();Object.defineProperty(uN,"connect",{enumerable:!0,get:function(){return HU6.connect}});FU6(Fs(),uN)});function bd$($){let Z=$?.connectFn??OU6,X=null,Q=null,Y=!1,G=!1,J=!1,K=[];function W(){return X!==null&&!X.isClosed()&&!X.isDraining()&&!J}function F(){console.log(`[NatsProvider] fireReady: ${K.length} callbacks`);for(let U of K)try{U()}catch{}}function H(U){(async()=>{for await(let B of U.status())if(B.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(B.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,Q=null,F()})().catch(()=>{})}async function N(U,B){let O=0;while(!G)try{X=await Z({servers:U,timeout:BU6,reconnect:!0,maxReconnectAttempts:-1,...B?{authenticator:B}:{}}),console.log(`[NatsProvider] Connected to ${X.getServer()} after ${O} attempt(s)`),Q=null,J=!1,H(X),F();return}catch{O++;let w=oZ(UU6,NU6,O-1,2,0.5);await w$(w)}}return{init(U,B){if(Y)return;Y=!0,G=!1;let O=B?.creds?_d$.credsAuthenticator(new TextEncoder().encode(B.creds)):void 0;N(U,O).catch(()=>{})},isConnected(){return W()},getConnection(){return W()?X:null},getJetStream(){if(!W())return null;if(!Q)Q=fd$.jetstream(X);return Q},onReady(U){if(K.push(U),W())try{U()}catch{}},async drain(){if(G=!0,Y=!1,Q=null,J=!1,X){let U=X;X=null,await U.drain().catch(()=>{})}}}}function OU6($){return vd$.connect($)}var _d$,vd$,fd$,NU6=100,UU6=3000,BU6=3000;var xd$=D(()=>{K4();_d$=V(Bc(),1),vd$=V(Cd$(),1),fd$=V(Gw(),1)});function E71($,Z){return`${$}.${Z}`}class j71{cache;constructor($){this.cache=rh({ttlMs:$?.ttlMs??DU6,maxSize:$?.maxSize??wU6})}async get($,Z){return this.cache.get(E71($,Z))??null}async set($,Z,X){this.cache.set(E71($,Z),X)}async invalidate($,Z){this.cache.delete(E71($,Z))}teardown(){this.cache.clear()}}var DU6=600000,wU6=5000;var yd$=()=>{};function KT0($,Z){return`${$}:${Z}`}function z71($){let Z=rh({ttlMs:$?.ttlMs??LU6,maxSize:$?.maxSize??EU6}),X=$?.getConnection,Q=crypto.randomUUID(),Y=new TextEncoder,G=new TextDecoder,J=null;function K(W,F){let H=X?.();if(!H)return;try{H.publish(gd$,Y.encode(JSON.stringify({organizationId:W,keyId:F,originId:Q})))}catch(N){console.warn("[ProviderKeyCache] Publish failed (non-critical):",N)}}return{get(W,F){return Z.get(KT0(W,F))},set(W,F,H){Z.set(KT0(W,F),H)},invalidate(W,F){Z.delete(KT0(W,F)),K(W,F)},start(){if(J)return;let W=X?.();if(!W)return;J=W.subscribe(gd$),(async()=>{for await(let F of J)try{let H=JSON.parse(G.decode(F.data));if(H.originId===Q)continue;Z.delete(KT0(H.organizationId,H.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var gd$="studio.ai-provider-keys.invalidate",LU6=30000,EU6=5000;var hd$=()=>{};class P71{options;subscription=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.subscription)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;let X=new TextDecoder,Q=Z.subscribe("studio.decopilot.cancel");this.subscription=Q,(async()=>{for await(let Y of Q)try{let G=JSON.parse(X.decode(Y.data));if(G.originId===this.originId)continue;this.onCancel?.(G.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;let X=this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId}));Z.publish("studio.decopilot.cancel",X)}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}async stop(){this.subscription?.unsubscribe(),this.subscription=null,this.onCancel=null}}var ud$=($)=>{let Z;return()=>Z??=$()},A71,T71;var cd$=D(()=>{I6();A71=ud$(()=>L$.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),T71=ud$(()=>L$.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function IU6($=WT0){return{name:KN,subjects:[`${dr0}.>`],storage:DK.StorageType.File,max_age:PU6,max_bytes:TU6,max_msgs_per_subject:RU6,discard:DK.DiscardPolicy.Old,retention:DK.RetentionPolicy.Limits,duplicate_window:AU6,num_replicas:$}}class md${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function ld$($){let Z=dd$.headers();for(let[X,Q]of Object.entries($))Z.set(X,Q);return Z}function VU6($,Z){let X=0;return{publish(Q,Y,G,J){Q.publish(Y,G,J?{headers:J}:void 0).catch((K)=>{if(X++,zU6().add(1,{"org.id":Z??"unknown"}),X===1||X%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${X} total):`,K)})},get errorCount(){return X}}}function SU6($){if(!($ instanceof Error))return!1;if(/non-clustered/i.test($.message))return!0;return/replicas?\b/i.test($.message)&&/not supported|can ?not|exceed|insufficient|greater than/i.test($.message)}class R71{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=async(Q,Y)=>{let G=IU6(Y);try{await Q.streams.info(KN),await Q.streams.update(KN,G)}catch(J){if(J instanceof Error&&J.message.includes("stream not found"))await Q.streams.add(G);else if(J instanceof Error&&/can ?not change.*storage|storage type/i.test(J.message))await Q.streams.delete(KN),await Q.streams.add(G);else throw J}},X=await y6(async()=>{let Q=this.options.getJetStreamManager?await this.options.getJetStreamManager():await DK.jetstreamManager($);try{await Z(Q,WT0)}catch(Y){if(WT0<=1||!SU6(Y))throw Y;console.warn(`[Decopilot] StreamBuffer: NATS rejected num_replicas=${WT0} (${Y.message}); falling back to an unreplicated stream`),await Z(Q,1)}return Q},{maxAttempts:5,minTimeout:250,maxTimeout:4000,jitter:0.5,isRetriable:zg});this.js=this.options.getJetStream(),this.jsm=X,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,X,Q){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let G=VU6(Z,Q),J=!1,K=()=>{if(J)return;J=!0;let F=PB$(Z);Y.publish(F.subject,F.data).catch(()=>{})};X.addEventListener("abort",K,{once:!0});let W=(F)=>{let H=performance.now(),N=ir0(F,{runId:Z}),U=performance.now()-H;A71().record(U),T71().add(1,{"org.id":Q??"unknown"}),kU6?.record(U,N.reduce((B,O)=>B+O.data.length,0));for(let B of N)G.publish(Y,B.subject,B.data,B.headers?ld$(B.headers):void 0)};return(async()=>{let F=$.getReader(),H=0,N=0,U;try{while(!0){let{done:B,value:O}=await F.read();if(B)break;if(W(O),N++,++H>=64)H=0,await new Promise((w)=>setImmediate(w))}}catch(B){U=B,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,B?.message??B)}finally{if(F.releaseLock(),K(),MU6)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:N,publishErrors:G.errorCount}))}if(U!==void 0)throw U})()}async publishSerialized($,Z){try{return await y6(()=>$.publish(Z.subject,Z.data,{...Z.headers?{headers:ld$(Z.headers)}:{},...Z.msgId?{msgID:Z.msgId}:{}}),{maxAttempts:6,minTimeout:250,maxTimeout:5000,jitter:0.5,isRetriable:zg}),!0}catch(X){return console.error(`[Decopilot] publish failed after retries subject=${Z.subject}`,X),!1}}async publishRawChunk($,Z,X){let Q=this.js;if(!Q)return!1;let Y=performance.now(),G=ir0(Z,{runId:$,dedup:X});A71().record(performance.now()-Y),T71().add(1);for(let J of G)if(!await this.publishSerialized(Q,J))return!1;return!0}async publishDone($,Z,X){let Q=this.js;if(!Q)return!1;let Y=zB$({runId:$,fenceToken:Z,finalSeq:X});return await this.publishSerialized(Q,Y)}async createTailStream($,Z,X){let Q=this.js;if(!Q)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=X?.deliverPolicy==="new"?DK.DeliverPolicy.New:DK.DeliverPolicy.All,G=X?.closeOnDone??!1,J=oO($),K;try{K=await y6(async()=>{return(await Q.consumers.get(KN,{filter_subjects:J,deliver_policy:Y})).consume()},{maxAttempts:6,minTimeout:250,maxTimeout:5000,jitter:0.5,isRetriable:zg})}catch(w){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",w?.message??w),null}let H=lw0({messages:async function*(){try{for await(let w of K)yield{subject:w.subject,data:w.data,headers:w.headers}}finally{K.stop()}}(),onCancel:()=>K.stop()}).pipeThrough(gw0()).pipeThrough(hw0()).getReader(),N=!1,U=()=>{if(N)return;N=!0;try{H.releaseLock()}catch{}},B=!1,O=()=>{if(B)return;B=!0,K.stop(),H.cancel().catch(()=>{}),U()};return Z?.addEventListener("abort",O,{once:!0}),new ReadableStream({async pull(w){for(;;){let{done:L,value:E}=await H.read();if(L){O(),w.close();return}let j=E;if(j.kind==="done"){if(G){O(),w.close();return}continue}w.enqueue(j.chunk);return}},cancel(){O()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(KN,{filter:oO($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var DK,dd$,jU6=($)=>{let Z;return()=>Z??=$()},zU6,PU6=86400000000000,AU6=120000000000,TU6=4294967296,WT0,RU6=500000,qU6,MU6,kU6;var id$=D(()=>{K4();pr0();dw0();uw0();I6();cd$();DK=V(Gw(),1),dd$=V(Bc(),1),zU6=jU6(()=>L$.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"})),WT0=Math.max(1,Number(process.env.DECOPILOT_STREAM_REPLICAS??3)||3);qU6=process.env.STREAM_ENCODE_TRACE==="1",MU6=process.env.DECOPILOT_STREAM_TRACE==="1";kU6=qU6?new md$:null});function FT0($,Z,X,Q){if(!Q)return!1;return $.emit(Z,gK(X,Q.status,{title:Q.title??void 0,virtualMcpId:Q.virtual_mcp_id??void 0,createdBy:Q.created_by??void 0,triggerId:Q.trigger_id??null,branch:Q.branch??null,harnessId:Q.harness_id??void 0,createdAt:Q.created_at,updatedAt:Q.updated_at})),!0}var pd$=D(()=>{_8()});class I71{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}async function nd$($,Z,X){let Q=Z.organizationId;if(Z.status!=="in_review")return!1;if(!TC(X))return!1;if(await $.storage.taskBoard.hasHumanRejectedDone(Z.id,Q))return!1;let Y=await $.storage.organizationSettings.get(Q),G=BW(Y?.flags),J=await $.storage.taskBoard.update(Z.id,Q,{status:G},Z.updatedBy);return await W6($,{taskBoardItemId:Z.id,action:"status_changed",actorId:null,data:{from:Z.status,to:G,reason:"pr_merged"}}),x$(Q,J),console.log(`[task-board-review-sweeper] ${Z.id}: linked PR already merged \u2014 moved to ${G}`),!0}var td$=D(()=>{Q5();WX();Jg();E5()});function yU6($){return $ instanceof s7}function gU6($,Z){return Z-$>=bU6}class q71{taskBoard;contextFactory;billing;options;timer=null;running=!1;cursor=null;constructor($,Z,X,Q={}){this.taskBoard=$;this.contextFactory=Z;this.billing=X;this.options=Q}start(){if(this.timer)return;let $=this.options.intervalMs??CU6;this.timer=setInterval(()=>{this.runOnce()},$),this.timer.unref()}async runOnce(){if(this.running)return 0;this.running=!0;let $=0;try{let Z=this.options.batchSize??vU6,X=this.options.itemIntervalMs??_U6,Q=new Date(Date.now()-X),Y=await this.taskBoard.listItemsPendingReview(Z,this.cursor,Q),G=Y.at(-1);this.cursor=Y.length===Z&&G?{updatedAt:G.updatedAt,id:G.id}:null;for(let{id:J,organizationId:K}of Y)try{if(await this.reconcileItem(J,K,Q))$++}catch(W){console.error(`[task-board-review-sweeper] ${J} failed`,W)}await this.reapNeverStartedThreads(Z),$+=await this.dispatchDueRetries(Z),await this.reactToUnhandledFailures(Z)}catch(Z){console.error("[task-board-review-sweeper] sweep failed",Z)}finally{this.running=!1}return $}async reapNeverStartedThreads($){try{let Z=await this.taskBoard.failNeverStartedLinkedThreads($,new Date(Date.now()-Ut0),Wo0);for(let X of Z)console.warn(`[task-board-review-sweeper] failed never-started thread ${X.threadId} on ${X.itemId}`)}catch(Z){console.error("[task-board-review-sweeper] reaping failed",Z)}}async reactToUnhandledFailures($){let Z=await this.taskBoard.listItemsStuckAfterFailure($,new Date(Date.now()-xU6));for(let{id:X,organizationId:Q,threadId:Y}of Z)try{console.warn(`[task-board-review-sweeper] reacting to an unhandled failure on ${X}`),await Jo0(this.taskBoard,Y,Q),await Ko0(this.taskBoard,this.billing,Y,Q)}catch(G){console.error(`[task-board-review-sweeper] unhandled-failure reaction for ${X} failed`,G)}}async dispatchDueRetries($){let Z=0,X=await this.taskBoard.listItemsDueForRetry($,new Date);for(let{id:Q,organizationId:Y,attempts:G}of X)try{if(!await this.taskBoard.claimDueRetry(Q,Y,new Date))continue;let J=await this.taskBoard.getById(Q,Y);if(!J||J.status!=="in_progress"||J.assigneeId!==Z8)continue;let K=await this.contextFactory(Y,J.assignedBy??J.createdBy);if(!K)continue;await p3(K,J,{runClass:"retry"}),Z++,console.warn(`[task-board-review-sweeper] re-dispatched ${Q} after a failure (attempt ${G})`)}catch(J){if(console.error(`[task-board-review-sweeper] retry dispatch for ${Q} failed`,J),yU6(J)){await this.returnToTodo(Q,Y,J instanceof Error?J.message:String(J));continue}await this.taskBoard.scheduleRunRetry(Q,Y,G,new Date(Date.now()+fU6)).catch((K)=>console.error(`[task-board-review-sweeper] re-arming ${Q} failed`,K))}return Z}async returnToTodo($,Z,X){try{let Q=await this.taskBoard.getById($,Z);if(!Q||Q.status!=="in_progress")return;let Y=await this.taskBoard.returnToTodoAfterFailure($,Z,Q.updatedBy);if(!Y)return;await this.taskBoard.recordActivity({taskBoardItemId:$,action:"status_changed",actorId:null,data:{from:"in_progress",to:"todo",reason:X}}).catch(()=>{}),x$(Z,Y)}catch(Q){console.error(`[task-board-review-sweeper] returning ${$} to todo failed`,Q)}}async handOffReviewWithoutPr($,Z){let X=await this.taskBoard.listActivity(Z.id,Z.organizationId);if(!gU6(CH(X),Date.now()))return;await fW($,Z,"no pull request is linked to this task \u2014 there is nothing for a "+"reviewer to review")}async reconcileItem($,Z,X){if(!await this.taskBoard.claimSweep($,Z,X))return!1;let Q=await this.taskBoard.getById($,Z);if(!Q)return!1;if(Q.status!=="in_review")return!1;let Y=Q.assigneeId===Z8,G=await this.taskBoard.listPrs($,Z),J=await this.contextFactory(Z,Q.assignedBy??Q.createdBy);if(!J)return!1;if(G.length===0){if(Y)await this.handOffReviewWithoutPr(J,Q);return!1}let K=await Promise.all(G.map(async(W)=>({...W,...await Wg(Z,W)})));if(K.every((W)=>W.state===null))console.warn(`[task-board-review-sweeper] ${$}: no live PR state from GitHub (${K.length} PR(s)) \u2014 proceeding on unknown`);if(await nd$(J,Q,K))return!0;if(await KO$(J,Q))return!0;if(!Y)return!1;if(!ko0(K))return!1;return await eD0(J,Q,{previewMatchesHead:Vo0(K)}),!0}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}var CU6=60000,_U6=300000,vU6=50,fU6=60000,bU6=900000,xU6=120000;var od$=D(()=>{Q5();$w0();vW();qt();td$();E5();oG();Fo0();sY();Zt()});import{readdir as hU6,rm as HT0}from"fs/promises";import{join as NT0}from"path";async function UT0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-uU6),Z.setUTCHours(0,0,0,0);let X=0;try{let Q=await Jv($);for(let Y of Q)if(/^\d{4}$/.test(Y))X+=await rd$($,Y,Z);else if(!Y.startsWith(".")){let G=NT0($,Y),J=await Jv(G);for(let W of J){if(!/^\d{4}$/.test(W))continue;X+=await rd$(G,W,Z)}if((await Jv(G)).length===0)await HT0(G,{recursive:!0,force:!0})}}catch(Q){console.warn("monitoring retention cleanup failed:",Q)}return X}async function rd$($,Z,X){let Q=0,Y=NT0($,Z),G=await Jv(Y);for(let K of G){if(!/^\d{2}$/.test(K))continue;let W=NT0(Y,K),F=await Jv(W);for(let N of F){if(!/^\d{2}$/.test(N))continue;let U=new Date(`${Z}-${K}-${N}T00:00:00Z`);if(isNaN(U.getTime()))continue;if(U<X){let B=NT0(W,N);await HT0(B,{recursive:!0,force:!0}),Q++}}if((await Jv(W)).length===0)await HT0(W,{recursive:!0,force:!0})}if((await Jv(Y)).length===0)await HT0(Y,{recursive:!0,force:!0});return Q}async function Jv($){try{return(await hU6($)).filter((X)=>!X.startsWith("."))}catch{return[]}}var uU6=30;var M71=()=>{};import{DBOS as k71,SchedulerMode as cU6}from"@dbos-inc/dbos-sdk";async function dU6(){let $=[bJ(),Kv(),TF()],Z=0;for(let X of $)try{Z+=await UT0(X)}catch(Q){console.error("[monitoring-retention] cleanup failed:",Q)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function mU6($,Z){await k71.runStep(()=>dU6(),{name:"monitoringRetention"})}function sd$(){if(ad$)return;ad$=!0;let $=k71.registerWorkflow(mU6,{name:"monitoringRetentionWorkflow"});k71.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:lU6,mode:cU6.ExactlyOncePerIntervalWhenActive})}var lU6="23 4 * * *",ad$=!1;var ed$=D(()=>{OY();M71()});function $m$($){return async(Z,X)=>{let Q=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",X).where("member.organizationId","=",Z).executeTakeFirst();if(!Q)return console.warn(`[automationContextFactory] User ${X} not found in org ${Z} \u2014 returning null`),null;let Y=await WJ.create();Y.auth.user={id:X,role:Q.role},Y.organization={id:Q.orgId,slug:Q.orgSlug,name:Q.orgName};let G=await Ft($.db,Z,Q.role);return Y.boundAuth=k51({auth:Y.authInstance,headers:new Headers,role:Q.role,permissions:G,userId:X}),Y.access=new hL(X,void 0,Y.boundAuth,Q.role,"self"),hO(Y,{id:Q.orgId,slug:Q.orgSlug}),Y}}var Zm$=D(()=>{uL();uO()});function iU6(){return[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}]}function pU6(){return{services:iU6(),migrationsStatus:"pending",serverUrl:null,logs:[]}}function tU6(){for(let $ of nU6)$()}function Xm$($){let Z=[...V71.logs,$];V71={...V71,logs:Z.length>500?Z.slice(-500):Z},tU6()}function S71(){return oU6}var V71,nU6,oU6=!1;var C71=D(()=>{V71=pU6(),nU6=new Set});import{EventEmitter as rU6}from"events";var _71;var Qm$=D(()=>{C71();_71=new rU6;_71.on("request",($)=>{Xm$($)})});function Ym$(){return async($,Z)=>{let X=Date.now(),Q=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let G="",J=!1;if(Y.startsWith("/mcp")&&Q==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let U=await $.req.raw.clone().json();if(U.method==="tools/call"&&U.params?.name){let B=du(U.params.name),O=U.params.arguments||{},w=Object.keys(O).map((E)=>du(E)),L=w.length>0?w.slice(0,3).join(",")+(w.length>3?"\u2026":""):"";G=`${J5.tool}${B}${J5.dim}(${L})${J5.reset}`}else if(U.method)G=`${J5.dim}${du(U.method)}${J5.reset}`}}catch{}}let K=du(Y);if(Y.startsWith("/mcp/conn_")){let H=Y.split("/")[2]??"";K=`/mcp/${J5.mcp}${du(H.slice(0,12))}\u2026${J5.reset}`}else if(Y==="/mcp")K=`${J5.mcp}/mcp${J5.reset}`;else if(Y==="/mcp/registry")K=`${J5.mcp}/mcp/registry${J5.reset}`;let W=sU6(Q),F=J?"\u25C0":"\u2190";if(!S71())console.log(`${J5.dim}${F}${J5.reset} ${W}${Q}${J5.reset} ${K}${G?` ${G}`:""}`);try{await Z()}finally{let H=Date.now()-X,N=$.res.status,U=aU6(N),B=H<1000?`${H}ms`:`${(H/1000).toFixed(1)}s`,O=J?"\u25B6":"\u2192";if(!S71())console.log(`${J5.dim}${O}${J5.reset} ${W}${Q}${J5.reset} ${K}${G?` ${G}`:""} ${U}${N}${J5.reset} ${J5.duration}${B}${J5.reset}`);_71.emit("request",{method:Q,path:du(Y),status:N,duration:H,timestamp:new Date})}}}var J5,aU6=($)=>{if($>=500)return J5.serverError;if($>=400)return J5.clientError;if($>=300)return J5.redirect;return J5.ok},sU6=($)=>{return J5[$]||J5.reset},du=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var Gm$=D(()=>{C71();Qm$();J5={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as Fm$}from"crypto";import{mkdir as eU6,readdir as $B6,rm as Jm$,stat as Hm$}from"fs/promises";import{join as f71,relative as ZB6}from"path";import{z as P$}from"zod";function Um$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return f71(XB6,Z)}function Bm$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function v71($,Z){let X=Um$($),Q=Bm$(Z);return f71(X,Q)}function QB6($,Z,X,Q){let Y=b0().encryptionKey||"dev-secret",G=`${$}:${Z}:${X}:${Q}`;return Fm$("sha256",Y).update(G).digest("hex")}function Wm$($,Z,X,Q,Y){let G=Math.floor(Date.now()/1000)+Q,J=QB6(Z,X,G,Y),K=new URL(`/api/dev-assets/${Z}/${Bm$(X)}`,$);return K.searchParams.set("expires",G.toString()),K.searchParams.set("signature",J),K.searchParams.set("method",Y),K.toString()}function Om$($,Z,X){let Q=`${$}:${Z.getTime()}:${X}`;return`"${Fm$("md5","etag").update(Q).digest("hex")}"`}async function Dm$($,Z,X,Q,Y){try{let G=await $B6($,{withFileTypes:!0});for(let J of G){let K=f71($,J.name),F=ZB6(Z,K).replace(/\\/g,"/");if(X&&!F.startsWith(X))continue;if(J.isDirectory())if(Q){let H=F+"/";if(!X||H.startsWith(X)){if(!(X?F.slice(X.length):F).includes("/"))Y.commonPrefixes.add(H)}}else await Dm$(K,Z,X,Q,Y);else if(J.isFile()){if(Q&&X){let H=F.slice(X.length);if(H.includes(Q)){let N=H.indexOf(Q),U=X+H.slice(0,N+1);Y.commonPrefixes.add(U);continue}}try{let H=await Hm$(K);Y.objects.push({key:F,size:H.size,lastModified:H.mtime.toISOString(),etag:Om$(K,H.mtime,H.size)})}catch{}}}}catch{}}function wm$($,Z){let Q=t($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let G=Y,J=G.prefix||"",K=G.maxKeys??1000,W=G.delimiter,F=G.continuationToken,H=Um$(Q);await eU6(H,{recursive:!0});let N={objects:[],commonPrefixes:new Set};await Dm$(H,H,J,W,N),N.objects.sort((L,E)=>L.key.localeCompare(E.key));let U=0;if(F){if(U=N.objects.findIndex((L)=>L.key>F),U===-1)U=N.objects.length}let B=N.objects.slice(U,U+K),O=U+K<N.objects.length,w=O?B[B.length-1]?.key:void 0;return{objects:B,isTruncated:O,nextContinuationToken:w,commonPrefixes:Array.from(N.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let G=Y,J=v71(Q,G.key),K=await Hm$(J);return{contentType:O91(G.key),contentLength:K.size,lastModified:K.mtime.toISOString(),etag:Om$(J,K.mtime,K.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let G=Y,J=G.expiresIn??Km$;return{url:Wm$(Z,Q,G.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let G=Y,J=G.expiresIn??Km$;return{url:Wm$(Z,Q,G.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let G=Y,J=v71(Q,G.key);try{return await Jm$(J),{success:!0,key:G.key}}catch{return{success:!1,key:G.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let G=Y,J=[],K=[];return await Promise.all(G.keys.map(async(W)=>{let F=v71(Q,W);try{await Jm$(F),J.push(W)}catch(H){K.push({key:W,message:H instanceof Error?H.message:"Unknown error"})}})),{deleted:J,errors:K}}}]}async function b71($,Z,X){let Q=wm$(Z,X),Y=new iK({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:N5});for(let J of Q){let K="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,W=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:K,outputSchema:W,annotations:J.annotations,_meta:J._meta},async(F)=>{try{let H=await J.handler(F);return{content:[{type:"text",text:JSON.stringify(H)}],structuredContent:H}}catch(H){return{content:[{type:"text",text:`Error: ${H.message}`}],isError:!0}}})}let G=new YQ({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(G),LJ(Y,G,$,"mcp:dev-assets")}async function Lm$($,Z,X,Q){let G=wm$(X,Q).find((J)=>J.name===$);if(!G)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await G.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var XB6="./data/assets",Km$=3600,Nm$,Em$;var jm$=D(()=>{R$();qg();U8();xd();mC();hX();KA0();Nm$=new H1;Nm$.all("/",async($)=>{let Z=$.get("studioContext"),X=new URL($.req.url),Q=`${X.protocol}//${X.host}`;return b71($.req.raw,Z,Q)});Em$=Nm$});var zm$={};J4(zm$,{mountDevRoutes:()=>YB6});function YB6($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(Q)=>{let Y=Q.get("studioContext"),G=new URL(Q.req.url),J=`${G.protocol}//${G.host}`;return b71(Q.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(Q)=>{let Y=Q.get("studioContext"),G=new URL(Q.req.url),J=`${G.protocol}//${G.host}`,K=Q.req.param("toolName");if(!K)return Q.json({error:"Missing tool name"},400);let W=await Q.req.json(),F=await Lm$(K,W,Y,J);if(F.isError)return Q.json(F.content,500);return Q.json(F.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",Em$);let X=new H1;X.use("*",BK({mountPath:"/api/dev-assets"})),X.route("/",JA0({orgFromPath:!1})),$.route("/api/dev-assets",X)}var Pm$=D(()=>{U8();K91();KA0();jm$()});import{sql as GB6}from"kysely";import{randomUUID as Am$}from"crypto";import{z as JB6}from"zod";async function WB6($){let Z=new Date().toISOString(),X=Am$(),Q=C8.SELF($.organizationId),Y="registry.publish_request.created",G={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:X,organization_id:$.organizationId,type:"registry.publish_request.created",source:Q,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(G),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((K)=>K.or([K("publisher","is",null),K("publisher","=",Q)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((K)=>({id:Am$(),event_id:X,subscription_id:K.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await GB6`SELECT
       pg_notify('studio_events', ${X}),

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "decocms",
-  "version": "4.281.3",
+  "version": "4.281.4",
   "description": "Deco CMS — Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "repository": {

package/dist/client/assets/record-editor-BODro5YC.js DELETED Viewed

@@ -1 +0,0 @@

- import{c as B,b as L,j as r}from"./index-BEzRsiF-.js";import{I as A}from"./input-HOdDp5_p.js";import{L as F}from"./label-Dbgo9XYS.js";import{S as R,a as V,b as z,c as O,d as D}from"./select-BC4TcLs4.js";import{T as G}from"./textarea-zAVK4fEm.js";import{G as J,V as M,K as X,X as $,a5 as q}from"./index-DsnjBcZr.js";import{s as P}from"./primitives-HsX9sAjF.js";import{u as H}from"./use-autosave-DURMionb.js";import"./Check-D6QmSM_V.js";import"./ChevronDown-CuIa4wIa.js";import"./ChevronUp-B8_BdWyn.js";import"./ArrowUp-BBBAg38h.js";import"./chat-context-B0WaW2jg.js";import"./tab-id-Capv3Yjt.js";import"./dialog-DU7EYChb.js";import"./Copy01-Dm7FS4PF.js";import"./Download01-BQIbCdqN.js";import"./session-runtime-wVXsCwcJ.js";import"./hooks-DYLl-vtW.js";import"./use-mcp-client-SejTVzR4.js";import"./constants-z9Iog-sb.js";import"./auth-DK-2Ia91.js";import"./delay-CnY5UFtP.js";import"./backoff-CrEUbyZT.js";import"./decopilot-sse-pool-CTHzLTre.js";import"./task-board-BHpLFUa-.js";import"./use-is-desktop-app-BNujXJc_.js";import"./use-virtual-mcp-BWnHmz8a.js";import"./use-ai-providers-wpRoRS4g.js";import"./use-decopilot-events-Dmole1hy.js";import"./use-organization-settings-COkaSHhd.js";import"./automation-runs-CTMJQoJK.js";import"./agent-icon-6gvndGHx.js";import"./AlertCircle-Df9unZhQ.js";import"./UserSquare-Da9cwkft.js";import"./Tool01-Cgt0CqvY.js";import"./ArrowLeft-DNv4IJ0Q.js";import"./Tool02-BGiKjKQJ.js";import"./XCircle-CHJO9ib8.js";import"./TrendUp01-UxFme2rE.js";import"./ZapSquare-DWhuTpSg.js";import"./Users03-7QoMcsd5.js";import"./CheckCircle-BBM28_vt.js";import"./ChevronRight-DkT2WipV.js";import"./ChevronSelectorVertical-vsh95I6O.js";import"./DotsVertical-DuFlZpbx.js";import"./Stars02-Bmzi5zHV.js";import"./CreditCard01-Bva9heeC.js";import"./Settings02-BHohHmV3.js";import"./Eye-Cw_kzNku.js";import"./FilterLines-Bai7T03G.js";import"./Share07-Bq0hOsqT.js";import"./Globe01-BESOGx0Q.js";import"./Globe04-DrBZ6S2d.js";import"./SwitchHorizontal01-BA6gueE5.js";import"./HardDrive-CUBAc0c-.js";import"./Key01-C2QIG3Nf.js";import"./LinkExternal01-CPYtwbvF.js";import"./LockUnlocked01-BxkFadkG.js";import"./LogOut01-Dgzs4Opt.js";import"./Monitor01-CI1ktyZA.js";import"./Sun-C9RYO8QU.js";import"./Palette-Cm1RREnW.js";import"./Play-DAuowAQB.js";import"./Plus-K7DeFDJS.js";import"./SearchLg-Dz9HUDA9.js";import"./SearchMd-CmmpxvBX.js";import"./Shield01-BGQaE1jg.js";import"./Stars01-CsrI20_f.js";import"./Trash01-BCwNyOgb.js";import"./Upload01-DnxtddBp.js";import"./User01-zldbSalA.js";import"./Users01-Dh92yPml.js";import"./XClose-Bx2yllzs.js";import"./Zap-Bs-E9nE6.js";import"./useInfiniteQuery-DLAmbqZM.js";import"./use-infinite-scroll-C9OrfDzr.js";import"./use-connection-CfjjRMi4.js";import"./table-wk60yraC.js";import"./empty-state-CwB8njGz.js";import"./use-members-0ZQXjlvl.js";import"./use-org-auth-client-DJ4K6H5s.js";import"./use-clock-tick-PEtZhdmX.js";import"./use-automations-CHXjNxdu.js";import"./useSuspenseInfiniteQuery-LPtoPmi6.js";import"./avatar-CLL74AE3.js";import"./format-time-BnbuEtat.js";import"./differenceInSeconds-NQ4PDo0z.js";import"./use-copy-D2PUopWN.js";import"./monaco-editor-9pr5n61B.js";import"./spinner-BMBKkiUr.js";import"./types-BSlVLO0f.js";import"./shell-layout-B2uRBLJg.js";import"./required-auth-layout-D9U8gC93.js";import"./use-org-sso-D8T2ld0I.js";import"./integration-icon-Dgb4IjsR.js";import"./use-navigate-to-agent-tVtZllHj.js";import"./reusable-new-chat-CzvRy4Pe.js";import"./chart-b0D5mRug.js";import"./index-96J1CcN-.js";import"./form-C7YcpzEn.js";import"./file-type-icon-Dz7o7QnO.js";import"./drawer-DNt24F16.js";import"./collection-search-DEpv0AvE.js";import"./tabs-BosUcTbt.js";import"./toggle-group-DLMHshNa.js";import"./use-commerce-diagnostic-Br7mT5LC.js";import"./popover-7IhFeT-q.js";import"./self-tool-result-CJ0hPS0m.js";import"./alert-dialog-C7YwnTzY.js";import"./extract-connection-data-BNFtXXmY.js";import"./metadata-dUsYcpuu.js";import"./provision-repo-scoped-github-connection-CMPWtdMv.js";import"./use-debounced-value-P0xtU2b7.js";import"./authenticate-and-persist-oauth-eBluGSJt.js";import"./mcp-oauth-DWwkLhHS.js";import"./track-CYKyZBoy.js";import"./toolbar-CoU5eQe5.js";import"./github-repo-picker-C0wB72I_.js";import"./use-mcp-tools-B4f4XMBl.js";import"./agent-capabilities-B52k7xCe.js";import"./connection-card-DZ4DI3H1.js";import"./use-registry-connections-BePn6el4.js";import"./retry-CErkP7V6.js";import"./connection-slug-eyAPH6o3.js";import"./connection-form-helpers-DLbtYE5G.js";import"./collection-tabs-CYETfLFo.js";import"./badge-D_nt8U1a.js";import"./command-DvKkfh6N.js";import"./index-DpztLhrn.js";import"./select-model-BT4WoDbh.js";import"./checkbox-BchlOuLj.js";import"./ai-providers-logos-DD3qZ33J.js";import"./cards-DLUu0fbk.js";import"./dropdown-menu-BtH5Fk21.js";import"./question-004-sINsf4GQ.js";import"./use-status-sounds-BpIFmMnJ.js";import"./use-file-configs-DM3WWLpN.js";import"./pt-BR-CLy76QW2.js";import"./use-debounced-autosave-GXl6Eb3m.js";import"./search-input-CmUKm-Qx.js";import"./use-mcp-auth-status-DUWhfVG9.js";import"./switch-EN0HvXZW.js";import"./use-secrets-B9oZ1v4J.js";import"./AreaChart-CZXY67Bi.js";import"./use-task-board-items-CYgIztbH.js";import"./config-9p4GYhAw.js";import"./breadcrumb-D6zlBJsv.js";import"./get-initials-D-f_fDFw.js";import"./use-tags-Ce65WngM.js";import"./task-key-BCHdFiOO.js";import"./automation-list-row-yL2E7W8u.js";import"./site-error--i37Vnuw.js";import"./use-org-repo-syncs-CFC64K9-.js";const Q={authors:[{key:"name",labelKey:"sandbox.recordEditor.fieldName",widget:"text"},{key:"type",labelKey:"sandbox.recordEditor.fieldType",widget:"select",options:[{value:"Person",labelKey:"sandbox.recordEditor.optionPerson"},{value:"Organization",labelKey:"sandbox.recordEditor.optionOrganization"}]},{key:"email",labelKey:"sandbox.recordEditor.fieldEmail",widget:"text",placeholderKey:"sandbox.recordEditor.placeholderEmail"},{key:"jobTitle",labelKey:"sandbox.recordEditor.fieldJobTitle",widget:"text"},{key:"company",labelKey:"sandbox.recordEditor.fieldCompany",widget:"text"},{key:"avatar",labelKey:"sandbox.recordEditor.fieldAvatar",widget:"image"}]},U={authors:"sandbox.recordEditor.titleAuthor"};function Mr(I){const t=B.c(39),{orgSlug:E,virtualMcpId:K,branch:w,kind:a,blockKey:b,block:f}=I,i=L();let h;t[0]!==w||t[1]!==E||t[2]!==K?(h={orgSlug:E,virtualMcpId:K,branch:w},t[0]=w,t[1]=E,t[2]=K,t[3]=h):h=t[3];const p=J(h);let g;t[4]!==f||t[5]!==a?(g=M(f,a),t[4]=f,t[5]=a,t[6]=g):g=t[6];const C=g;let k;t[7]!==b||t[8]!==a||t[9]!==p?(k=l=>{p.mutate({blockKey:b,data:$(b,a,l)})},t[7]=b,t[8]=a,t[9]=p,t[10]=k):k=t[10];const[e,S]=H(C,k);let v;t[11]!==e||t[12]!==S?(v=(l,o)=>S({...e,[l]:o}),t[11]=e,t[12]=S,t[13]=v):v=t[13];const s=v,N=U[a];let n;t[14]!==i||t[15]!==N?(n=i(N),t[14]=i,t[15]=N,t[16]=n):n=t[16];let c;t[17]!==n?(c=r.jsx("span",{className:"text-sm font-medium",children:n}),t[17]=n,t[18]=c):c=t[18];let d;t[19]!==p.isError||t[20]!==p.isPending?(d=r.jsx(X,{isPending:p.isPending,isError:p.isError}),t[19]=p.isError,t[20]=p.isPending,t[21]=d):d=t[21];let y;t[22]!==c||t[23]!==d?(y=r.jsxs("div",{className:"flex h-12 shrink-0 items-center justify-between border-b px-6",children:[c,d]}),t[22]=c,t[23]=d,t[24]=y):y=t[24];const T=Q[a];let x;if(t[25]!==e||t[26]!==s||t[27]!==i||t[28]!==T){let l;t[30]!==e||t[31]!==s||t[32]!==i?(l=o=>r.jsx("div",{className:"space-y-2",children:o.widget==="image"?r.jsx(q,{schema:{type:"string",format:"image-uri",title:i(o.labelKey)},value:e[o.key],onChange:m=>s(o.key,m),path:o.key,label:i(o.labelKey)}):o.widget==="select"?r.jsxs(r.Fragment,{children:[r.jsx(F,{htmlFor:o.key,children:i(o.labelKey)}),r.jsxs(R,{value:P(e[o.key])||o.options?.[0]?.value,onValueChange:m=>s(o.key,m),children:[r.jsx(V,{id:o.key,className:"h-10 w-full",children:r.jsx(z,{placeholder:i(o.labelKey)})}),r.jsx(O,{children:(o.options??[]).map(m=>r.jsx(D,{value:m.value,children:i(m.labelKey)},m.value))})]})]}):r.jsxs(r.Fragment,{children:[r.jsx(F,{htmlFor:o.key,children:i(o.labelKey)}),o.widget==="textarea"?r.jsx(G,{id:o.key,value:P(e[o.key]),onChange:m=>s(o.key,m.target.value),rows:3}):r.jsx(A,{id:o.key,value:P(e[o.key]),placeholder:o.placeholderKey?i(o.placeholderKey):void 0,onChange:m=>s(o.key,m.target.value),className:"h-10"})]})},o.key),t[30]=e,t[31]=s,t[32]=i,t[33]=l):l=t[33],x=T.map(l),t[25]=e,t[26]=s,t[27]=i,t[28]=T,t[29]=x}else x=t[29];let u;t[34]!==x?(u=r.jsx("div",{className:"min-w-0 flex-1 overflow-y-auto px-6 py-6",children:r.jsx("div",{className:"mx-auto max-w-xl space-y-6",children:x})}),t[34]=x,t[35]=u):u=t[35];let j;return t[36]!==u||t[37]!==y?(j=r.jsxs("div",{className:"flex h-full flex-col",children:[y,u]}),t[36]=u,t[37]=y,t[38]=j):j=t[38],j}export{Mr as RecordEditor};

package/dist/client/assets/redirect-editor-BnBJJnsd.js DELETED Viewed

@@ -1 +0,0 @@

- import{c as pt,b as at,j as r}from"./index-BEzRsiF-.js";import{C as ct}from"./checkbox-BchlOuLj.js";import{I as rt}from"./input-HOdDp5_p.js";import{L as et}from"./label-Dbgo9XYS.js";import{d as dt,a as nt,b as ft,c as xt,S as ht}from"./select-BC4TcLs4.js";import{G as ut,b_ as bt,K as yt,b$ as jt,c0 as vt}from"./index-DsnjBcZr.js";import{u as gt}from"./use-autosave-DURMionb.js";import"./Check-D6QmSM_V.js";import"./ChevronDown-CuIa4wIa.js";import"./ChevronUp-B8_BdWyn.js";import"./ArrowUp-BBBAg38h.js";import"./chat-context-B0WaW2jg.js";import"./tab-id-Capv3Yjt.js";import"./dialog-DU7EYChb.js";import"./Copy01-Dm7FS4PF.js";import"./Download01-BQIbCdqN.js";import"./session-runtime-wVXsCwcJ.js";import"./hooks-DYLl-vtW.js";import"./use-mcp-client-SejTVzR4.js";import"./constants-z9Iog-sb.js";import"./auth-DK-2Ia91.js";import"./delay-CnY5UFtP.js";import"./backoff-CrEUbyZT.js";import"./decopilot-sse-pool-CTHzLTre.js";import"./task-board-BHpLFUa-.js";import"./use-is-desktop-app-BNujXJc_.js";import"./use-virtual-mcp-BWnHmz8a.js";import"./use-ai-providers-wpRoRS4g.js";import"./use-decopilot-events-Dmole1hy.js";import"./use-organization-settings-COkaSHhd.js";import"./automation-runs-CTMJQoJK.js";import"./agent-icon-6gvndGHx.js";import"./AlertCircle-Df9unZhQ.js";import"./UserSquare-Da9cwkft.js";import"./Tool01-Cgt0CqvY.js";import"./ArrowLeft-DNv4IJ0Q.js";import"./Tool02-BGiKjKQJ.js";import"./XCircle-CHJO9ib8.js";import"./TrendUp01-UxFme2rE.js";import"./ZapSquare-DWhuTpSg.js";import"./Users03-7QoMcsd5.js";import"./CheckCircle-BBM28_vt.js";import"./ChevronRight-DkT2WipV.js";import"./ChevronSelectorVertical-vsh95I6O.js";import"./DotsVertical-DuFlZpbx.js";import"./Stars02-Bmzi5zHV.js";import"./CreditCard01-Bva9heeC.js";import"./Settings02-BHohHmV3.js";import"./Eye-Cw_kzNku.js";import"./FilterLines-Bai7T03G.js";import"./Share07-Bq0hOsqT.js";import"./Globe01-BESOGx0Q.js";import"./Globe04-DrBZ6S2d.js";import"./SwitchHorizontal01-BA6gueE5.js";import"./HardDrive-CUBAc0c-.js";import"./Key01-C2QIG3Nf.js";import"./LinkExternal01-CPYtwbvF.js";import"./LockUnlocked01-BxkFadkG.js";import"./LogOut01-Dgzs4Opt.js";import"./Monitor01-CI1ktyZA.js";import"./Sun-C9RYO8QU.js";import"./Palette-Cm1RREnW.js";import"./Play-DAuowAQB.js";import"./Plus-K7DeFDJS.js";import"./SearchLg-Dz9HUDA9.js";import"./SearchMd-CmmpxvBX.js";import"./Shield01-BGQaE1jg.js";import"./Stars01-CsrI20_f.js";import"./Trash01-BCwNyOgb.js";import"./Upload01-DnxtddBp.js";import"./User01-zldbSalA.js";import"./Users01-Dh92yPml.js";import"./XClose-Bx2yllzs.js";import"./Zap-Bs-E9nE6.js";import"./useInfiniteQuery-DLAmbqZM.js";import"./use-infinite-scroll-C9OrfDzr.js";import"./use-connection-CfjjRMi4.js";import"./table-wk60yraC.js";import"./empty-state-CwB8njGz.js";import"./use-members-0ZQXjlvl.js";import"./use-org-auth-client-DJ4K6H5s.js";import"./use-clock-tick-PEtZhdmX.js";import"./use-automations-CHXjNxdu.js";import"./useSuspenseInfiniteQuery-LPtoPmi6.js";import"./avatar-CLL74AE3.js";import"./format-time-BnbuEtat.js";import"./differenceInSeconds-NQ4PDo0z.js";import"./use-copy-D2PUopWN.js";import"./monaco-editor-9pr5n61B.js";import"./spinner-BMBKkiUr.js";import"./types-BSlVLO0f.js";import"./shell-layout-B2uRBLJg.js";import"./required-auth-layout-D9U8gC93.js";import"./use-org-sso-D8T2ld0I.js";import"./integration-icon-Dgb4IjsR.js";import"./use-navigate-to-agent-tVtZllHj.js";import"./reusable-new-chat-CzvRy4Pe.js";import"./chart-b0D5mRug.js";import"./index-96J1CcN-.js";import"./form-C7YcpzEn.js";import"./file-type-icon-Dz7o7QnO.js";import"./drawer-DNt24F16.js";import"./collection-search-DEpv0AvE.js";import"./tabs-BosUcTbt.js";import"./toggle-group-DLMHshNa.js";import"./use-commerce-diagnostic-Br7mT5LC.js";import"./popover-7IhFeT-q.js";import"./self-tool-result-CJ0hPS0m.js";import"./alert-dialog-C7YwnTzY.js";import"./extract-connection-data-BNFtXXmY.js";import"./metadata-dUsYcpuu.js";import"./provision-repo-scoped-github-connection-CMPWtdMv.js";import"./use-debounced-value-P0xtU2b7.js";import"./authenticate-and-persist-oauth-eBluGSJt.js";import"./mcp-oauth-DWwkLhHS.js";import"./track-CYKyZBoy.js";import"./toolbar-CoU5eQe5.js";import"./github-repo-picker-C0wB72I_.js";import"./use-mcp-tools-B4f4XMBl.js";import"./agent-capabilities-B52k7xCe.js";import"./connection-card-DZ4DI3H1.js";import"./use-registry-connections-BePn6el4.js";import"./retry-CErkP7V6.js";import"./connection-slug-eyAPH6o3.js";import"./textarea-zAVK4fEm.js";import"./connection-form-helpers-DLbtYE5G.js";import"./collection-tabs-CYETfLFo.js";import"./badge-D_nt8U1a.js";import"./command-DvKkfh6N.js";import"./index-DpztLhrn.js";import"./select-model-BT4WoDbh.js";import"./ai-providers-logos-DD3qZ33J.js";import"./cards-DLUu0fbk.js";import"./dropdown-menu-BtH5Fk21.js";import"./question-004-sINsf4GQ.js";import"./use-status-sounds-BpIFmMnJ.js";import"./use-file-configs-DM3WWLpN.js";import"./pt-BR-CLy76QW2.js";import"./use-debounced-autosave-GXl6Eb3m.js";import"./search-input-CmUKm-Qx.js";import"./use-mcp-auth-status-DUWhfVG9.js";import"./switch-EN0HvXZW.js";import"./use-secrets-B9oZ1v4J.js";import"./AreaChart-CZXY67Bi.js";import"./use-task-board-items-CYgIztbH.js";import"./config-9p4GYhAw.js";import"./breadcrumb-D6zlBJsv.js";import"./get-initials-D-f_fDFw.js";import"./use-tags-Ce65WngM.js";import"./task-key-BCHdFiOO.js";import"./automation-list-row-yL2E7W8u.js";import"./site-error--i37Vnuw.js";import"./use-org-repo-syncs-CFC64K9-.js";const Et=[{value:"temporary",labelKey:"sandbox.redirectEditor.typeTemporary"},{value:"permanent",labelKey:"sandbox.redirectEditor.typePermanent"}];function xi(it){const t=pt.c(106),{orgSlug:H,virtualMcpId:J,branch:W,blockKey:X,block:Z}=it,e=at();let V;t[0]!==W||t[1]!==H||t[2]!==J?(V={orgSlug:H,virtualMcpId:J,branch:W},t[0]=W,t[1]=H,t[2]=J,t[3]=V):V=t[3];const s=ut(V);let $;t[4]!==Z?($=bt(Z),t[4]=Z,t[5]=$):$=t[5];const ot=$;let G;t[6]!==X||t[7]!==s?(G=i=>{s.mutate({blockKey:X,data:vt(i)})},t[6]=X,t[7]=s,t[8]=G):G=t[8];const[o,tt]=gt(ot,G);let M;t[9]!==o||t[10]!==tt?(M=i=>tt({...o,...i}),t[9]=o,t[10]=tt,t[11]=M):M=t[11];const m=M;let l;t[12]!==e?(l=e("sandbox.redirectEditor.title"),t[12]=e,t[13]=l):l=t[13];let p;t[14]!==l?(p=r.jsx("span",{className:"text-sm font-medium",children:l}),t[14]=l,t[15]=p):p=t[15];let a;t[16]!==s.isError||t[17]!==s.isPending?(a=r.jsx(yt,{isPending:s.isPending,isError:s.isError}),t[16]=s.isError,t[17]=s.isPending,t[18]=a):a=t[18];let c;t[19]!==p||t[20]!==a?(c=r.jsxs("div",{className:"flex h-12 shrink-0 items-center justify-between border-b px-6",children:[p,a]}),t[19]=p,t[20]=a,t[21]=c):c=t[21];let d;t[22]!==e?(d=e("sandbox.redirectEditor.fromLabel"),t[22]=e,t[23]=d):d=t[23];let n;t[24]!==d?(n=r.jsx(et,{htmlFor:"redirect-from",children:d}),t[24]=d,t[25]=n):n=t[25];const mt=o.from;let f;t[26]!==e?(f=e("sandbox.redirectEditor.fromPlaceholder"),t[26]=e,t[27]=f):f=t[27];let x;t[28]!==m?(x=i=>m({from:i.target.value}),t[28]=m,t[29]=x):x=t[29];let h;t[30]!==o.from||t[31]!==f||t[32]!==x?(h=r.jsx(rt,{id:"redirect-from",value:mt,placeholder:f,onChange:x,className:"h-10"}),t[30]=o.from,t[31]=f,t[32]=x,t[33]=h):h=t[33];let u;t[34]!==e?(u=e("sandbox.redirectEditor.fromDescription"),t[34]=e,t[35]=u):u=t[35];let b;t[36]!==u?(b=r.jsx("p",{className:"text-xs text-muted-foreground",children:u}),t[36]=u,t[37]=b):b=t[37];let y;t[38]!==n||t[39]!==h||t[40]!==b?(y=r.jsxs("div",{className:"space-y-2",children:[n,h,b]}),t[38]=n,t[39]=h,t[40]=b,t[41]=y):y=t[41];let j;t[42]!==e?(j=e("sandbox.redirectEditor.toLabel"),t[42]=e,t[43]=j):j=t[43];let v;t[44]!==j?(v=r.jsx(et,{htmlFor:"redirect-to",children:j}),t[44]=j,t[45]=v):v=t[45];const st=o.to;let g;t[46]!==e?(g=e("sandbox.redirectEditor.toPlaceholder"),t[46]=e,t[47]=g):g=t[47];let E;t[48]!==m?(E=i=>m({to:i.target.value}),t[48]=m,t[49]=E):E=t[49];let P;t[50]!==o.to||t[51]!==g||t[52]!==E?(P=r.jsx(rt,{id:"redirect-to",value:st,placeholder:g,onChange:E,className:"h-10"}),t[50]=o.to,t[51]=g,t[52]=E,t[53]=P):P=t[53];let N;t[54]!==e?(N=e("sandbox.redirectEditor.toDescription"),t[54]=e,t[55]=N):N=t[55];let S;t[56]!==N?(S=r.jsx("p",{className:"text-xs text-muted-foreground",children:N}),t[56]=N,t[57]=S):S=t[57];let C;t[58]!==v||t[59]!==P||t[60]!==S?(C=r.jsxs("div",{className:"space-y-2",children:[v,P,S]}),t[58]=v,t[59]=P,t[60]=S,t[61]=C):C=t[61];let T;t[62]!==e?(T=e("sandbox.redirectEditor.typeLabel"),t[62]=e,t[63]=T):T=t[63];let k;t[64]!==T?(k=r.jsx(et,{htmlFor:"redirect-type",children:T}),t[64]=T,t[65]=k):k=t[65];const lt=o.type;let w;t[66]!==m?(w=i=>m({type:i}),t[66]=m,t[67]=w):w=t[67];let R;t[68]!==e?(R=e("sandbox.redirectEditor.typePlaceholder"),t[68]=e,t[69]=R):R=t[69];let _;t[70]!==R?(_=r.jsx(nt,{id:"redirect-type",className:"h-10 w-full",children:r.jsx(ft,{placeholder:R})}),t[70]=R,t[71]=_):_=t[71];let I;t[72]!==e?(I=Et.map(i=>r.jsx(dt,{value:i.value,children:e(i.labelKey,{status:jt[i.value]})},i.value)),t[72]=e,t[73]=I):I=t[73];let K;t[74]!==I?(K=r.jsx(xt,{children:I}),t[74]=I,t[75]=K):K=t[75];let L;t[76]!==o.type||t[77]!==w||t[78]!==_||t[79]!==K?(L=r.jsxs(ht,{value:lt,onValueChange:w,children:[_,K]}),t[76]=o.type,t[77]=w,t[78]=_,t[79]=K,t[80]=L):L=t[80];let Y;t[81]===Symbol.for("react.memo_cache_sentinel")?(Y=r.jsx("strong",{children:"Temporary"}),t[81]=Y):Y=t[81];let q;t[82]===Symbol.for("react.memo_cache_sentinel")?(q=r.jsxs("p",{className:"text-xs text-muted-foreground",children:["Use ",Y," when the redirect may change;"," ",r.jsx("strong",{children:"Permanent"})," lets browsers cache it."]}),t[82]=q):q=t[82];let Q;t[83]!==k||t[84]!==L?(Q=r.jsxs("div",{className:"space-y-2",children:[k,L,q]}),t[83]=k,t[84]=L,t[85]=Q):Q=t[85];let F;t[86]!==m?(F=i=>m({discardQueryParameters:i===!0}),t[86]=m,t[87]=F):F=t[87];let D;t[88]!==o.discardQueryParameters||t[89]!==F?(D=r.jsx(ct,{checked:o.discardQueryParameters,onCheckedChange:F}),t[88]=o.discardQueryParameters,t[89]=F,t[90]=D):D=t[90];let A;t[91]!==e?(A=e("sandbox.redirectEditor.discardQueryParameters"),t[91]=e,t[92]=A):A=t[92];let B;t[93]!==A?(B=r.jsx("span",{className:"text-sm",children:A}),t[93]=A,t[94]=B):B=t[94];let O;t[95]!==D||t[96]!==B?(O=r.jsxs("label",{className:"flex cursor-pointer items-center gap-2.5",children:[D,B]}),t[95]=D,t[96]=B,t[97]=O):O=t[97];let U;t[98]!==y||t[99]!==C||t[100]!==Q||t[101]!==O?(U=r.jsx("div",{className:"min-w-0 flex-1 overflow-y-auto px-6 py-6",children:r.jsxs("div",{className:"mx-auto max-w-xl space-y-6",children:[y,C,Q,O]})}),t[98]=y,t[99]=C,t[100]=Q,t[101]=O,t[102]=U):U=t[102];let z;return t[103]!==U||t[104]!==c?(z=r.jsxs("div",{className:"flex h-full flex-col",children:[c,U]}),t[103]=U,t[104]=c,t[105]=z):z=t[105],z}export{xi as RedirectEditor};

package/dist/client/assets/registry-B-mIiXeI.js DELETED Viewed

	@@ -1,2 +0,0 @@
1	- const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f\|\|(m.f=["assets/registry-layout-x22i9fl0.js","assets/index-BEzRsiF-.js","assets/index-Cq-PV2G1.css","assets/Tool02-BGiKjKQJ.js","assets/CheckCircle-BBM28_vt.js","assets/Settings02-BHohHmV3.js","assets/use-mcp-client-SejTVzR4.js","assets/constants-z9Iog-sb.js","assets/auth-DK-2Ia91.js","assets/useInfiniteQuery-DLAmbqZM.js","assets/use-infinite-scroll-C9OrfDzr.js","assets/badge-D_nt8U1a.js","assets/input-HOdDp5_p.js","assets/dropdown-menu-BtH5Fk21.js","assets/Check-D6QmSM_V.js","assets/ChevronRight-DkT2WipV.js","assets/DotsVertical-DuFlZpbx.js","assets/table-wk60yraC.js","assets/toggle-group-DLMHshNa.js","assets/use-view-mode-Bd_JzNva.js","assets/FilterLines-Bai7T03G.js","assets/Globe01-BESOGx0Q.js","assets/SearchMd-CmmpxvBX.js","assets/dialog-DU7EYChb.js","assets/AlertCircle-Df9unZhQ.js","assets/Download01-BQIbCdqN.js","assets/Upload01-DnxtddBp.js","assets/metadata-dUsYcpuu.js","assets/alert-dialog-C7YwnTzY.js","assets/Trash01-BCwNyOgb.js","assets/label-Dbgo9XYS.js","assets/select-BC4TcLs4.js","assets/ChevronDown-CuIa4wIa.js","assets/ChevronUp-B8_BdWyn.js","assets/switch-EN0HvXZW.js","assets/textarea-zAVK4fEm.js","assets/ArrowLeft-DNv4IJ0Q.js","assets/XCircle-CHJO9ib8.js","assets/checkbox-BchlOuLj.js","assets/Eye-Cw_kzNku.js","assets/LinkExternal01-CPYtwbvF.js","assets/use-copy-D2PUopWN.js","assets/Copy01-Dm7FS4PF.js","assets/Key01-C2QIG3Nf.js","assets/Plus-K7DeFDJS.js","assets/mcp-oauth-DWwkLhHS.js","assets/Play-DAuowAQB.js"])))=>i.map(i=>d[i]);
2	- import{c as i,j as e,r as s,k as a,bh as o}from"./index-BEzRsiF-.js";import{R as n}from"./require-capability-BBGvNNkX.js";import"./access-gate-VY9wipoq.js";import"./capability-load-error-1aUCKwHO.js";const c=s.lazy(()=>o(()=>import("./registry-layout-x22i9fl0.js"),__vite__mapDeps([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46])));function u(){const r=i.c(1);let t;return r[0]===Symbol.for("react.memo_cache_sentinel")?(t=e.jsx(n,{capability:"registry:manage",area:"the registry",children:e.jsx(s.Suspense,{fallback:e.jsx("div",{className:"flex-1 flex items-center justify-center",children:e.jsx(a,{size:20,className:"animate-spin text-muted-foreground"})}),children:e.jsx(c,{})})}),r[0]=t):t=r[0],t}export{u as default};

package/dist/client/assets/store-registry-BPzBnYwk.js DELETED Viewed

	@@ -1,2 +0,0 @@
1	- const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f\|\|(m.f=["assets/registry-layout-x22i9fl0.js","assets/index-BEzRsiF-.js","assets/index-Cq-PV2G1.css","assets/Tool02-BGiKjKQJ.js","assets/CheckCircle-BBM28_vt.js","assets/Settings02-BHohHmV3.js","assets/use-mcp-client-SejTVzR4.js","assets/constants-z9Iog-sb.js","assets/auth-DK-2Ia91.js","assets/useInfiniteQuery-DLAmbqZM.js","assets/use-infinite-scroll-C9OrfDzr.js","assets/badge-D_nt8U1a.js","assets/input-HOdDp5_p.js","assets/dropdown-menu-BtH5Fk21.js","assets/Check-D6QmSM_V.js","assets/ChevronRight-DkT2WipV.js","assets/DotsVertical-DuFlZpbx.js","assets/table-wk60yraC.js","assets/toggle-group-DLMHshNa.js","assets/use-view-mode-Bd_JzNva.js","assets/FilterLines-Bai7T03G.js","assets/Globe01-BESOGx0Q.js","assets/SearchMd-CmmpxvBX.js","assets/dialog-DU7EYChb.js","assets/AlertCircle-Df9unZhQ.js","assets/Download01-BQIbCdqN.js","assets/Upload01-DnxtddBp.js","assets/metadata-dUsYcpuu.js","assets/alert-dialog-C7YwnTzY.js","assets/Trash01-BCwNyOgb.js","assets/label-Dbgo9XYS.js","assets/select-BC4TcLs4.js","assets/ChevronDown-CuIa4wIa.js","assets/ChevronUp-B8_BdWyn.js","assets/switch-EN0HvXZW.js","assets/textarea-zAVK4fEm.js","assets/ArrowLeft-DNv4IJ0Q.js","assets/XCircle-CHJO9ib8.js","assets/checkbox-BchlOuLj.js","assets/Eye-Cw_kzNku.js","assets/LinkExternal01-CPYtwbvF.js","assets/use-copy-D2PUopWN.js","assets/Copy01-Dm7FS4PF.js","assets/Key01-C2QIG3Nf.js","assets/Plus-K7DeFDJS.js","assets/mcp-oauth-DWwkLhHS.js","assets/Play-DAuowAQB.js"])))=>i.map(i=>d[i]);
2	- import{c as n,d as c,f as m,j as t,k as f,r as l,bh as p}from"./index-BEzRsiF-.js";import{R as u}from"./require-capability-BBGvNNkX.js";import"./access-gate-VY9wipoq.js";import"./capability-load-error-1aUCKwHO.js";const g=l.lazy(()=>p(()=>import("./registry-layout-x22i9fl0.js"),__vite__mapDeps([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46])));function h(){const e=n.c(5),i=c();let s;e[0]===Symbol.for("react.memo_cache_sentinel")?(s={from:"/shell/$org"},e[0]=s):s=e[0];const{org:o}=m(s);let r;e[1]===Symbol.for("react.memo_cache_sentinel")?(r=t.jsx("div",{className:"h-full flex items-center justify-center",children:t.jsx(f,{size:20,className:"animate-spin text-muted-foreground"})}),e[1]=r):r=e[1];let a;return e[2]!==i\|\|e[3]!==o?(a=t.jsx(u,{capability:"registry:manage",area:"the registry",children:t.jsx(l.Suspense,{fallback:r,children:t.jsx(g,{onBack:()=>i({to:"/$org/settings/store",params:{org:o}})})})}),e[2]=i,e[3]=o,e[4]=a):a=e[4],a}export{h as default};

package/dist/client/assets/use-task-board-items-CYgIztbH.js DELETED Viewed

@@ -1 +0,0 @@

- import{r as Q,c as V,H as z,ac as H,p as W,o as Y,K as F,b as G,e as L,q as X,t as $}from"./index-BEzRsiF-.js";import{T as Z}from"./task-board-BHpLFUa-.js";import{t as ee}from"./decopilot-sse-pool-CTHzLTre.js";import{u as te}from"./use-decopilot-events-Dmole1hy.js";const J=()=>0;function se(e){const{orgSlug:u,enabled:o=!0,onUpdate:r,onDelete:t,onResync:c}=e,a=Q.useRef(r);a.current=r;const n=Q.useRef(t);n.current=t;const T=Q.useRef(c);T.current=c;const s=Q.useRef(null),f=Q.useRef(o),_=Q.useRef(u);(!s.current||f.current!==o||_.current!==u)&&(f.current=o,_.current=u,s.current=R=>{if(!o||!u)return()=>{};const E=g=>{let d;try{d=JSON.parse(g.data)}catch{return}d.data&&(g.type===Z?n.current?.(d.data.id):a.current(d.data)),R()};return ee.subscribe(u,E,()=>T.current?.())}),Q.useSyncExternalStore(s.current,J,J)}function ue(){const e=V.c(9),{locator:u}=z(),o=H();let r;e[0]!==u?(r=F.taskBoardItems(u),e[0]=u,e[1]=r):r=e[1];let t;e[2]!==o?(t=async()=>{const{items:T,sprints:s}=await o.call("TASK_BOARD_ITEM_LIST",{});return{items:T,sprints:s}},e[2]=o,e[3]=t):t=e[3];let c;e[4]!==r||e[5]!==t?(c={queryKey:r,queryFn:t},e[4]=r,e[5]=t,e[6]=c):c=e[6];const{data:a}=Y(c);let n;return e[7]!==a?.sprints?(n=new Map((a?.sprints??[]).map(re)),e[7]=a?.sprints,e[8]=n):n=e[8],n}function re(e){return[e.id,e]}function ce(){const e=V.c(35),{org:u,locator:o}=z(),r=H(),t=W();let c;e[0]!==o?(c=F.taskBoardItems(o),e[0]=o,e[1]=c):c=e[1];const a=c;let n;e[2]!==r?(n=async()=>{const{items:m,sprints:l}=await r.call("TASK_BOARD_ITEM_LIST",{});return{items:m,sprints:l}},e[2]=r,e[3]=n):n=e[3];let T;e[4]!==a||e[5]!==n?(T={queryKey:a,queryFn:n,refetchInterval:6e4},e[4]=a,e[5]=n,e[6]=T):T=e[6];const s=Y(T);let f;e[7]!==o||e[8]!==t||e[9]!==a?(f=m=>{t.cancelQueries({queryKey:a}),t.setQueryData(a,l=>l&&{...l,items:l.items.some(S=>S.id===m.id)?l.items.map(S=>S.id===m.id?m:S):[m,...l.items]}),t.invalidateQueries({queryKey:F.taskBoardActivity(o,m.id)})},e[7]=o,e[8]=t,e[9]=a,e[10]=f):f=e[10];let _,A;e[11]!==t||e[12]!==a?(_=()=>{t.invalidateQueries({queryKey:a})},A=m=>{t.cancelQueries({queryKey:a}),t.setQueryData(a,l=>l&&{...l,items:l.items.filter(S=>S.id!==m)})},e[11]=t,e[12]=a,e[13]=_,e[14]=A):(_=e[13],A=e[14]);let R;e[15]!==u.slug||e[16]!==f||e[17]!==_||e[18]!==A?(R={orgSlug:u.slug,onUpdate:f,onResync:_,onDelete:A},e[15]=u.slug,e[16]=f,e[17]=_,e[18]=A,e[19]=R):R=e[19],se(R);let E;e[20]!==t||e[21]!==a?(E=m=>{const l=m.subject,S=m.data.status;t.setQueryData(a,I=>I&&{...I,items:I.items.map(K=>K.threads.some(p=>p.threadId===l)?{...K,threads:K.threads.map(p=>p.threadId===l?{...p,status:S}:p)}:K)})},e[20]=t,e[21]=a,e[22]=E):E=e[22];let g;e[23]!==u.slug||e[24]!==E?(g={orgSlug:u.slug,onTaskStatus:E},e[23]=u.slug,e[24]=E,e[25]=g):g=e[25],te(g);let d;e[26]!==s.data?.items?(d=s.data?.items??[],e[26]=s.data?.items,e[27]=d):d=e[27];let B;e[28]!==s.data?.sprints?(B=s.data?.sprints??[],e[28]=s.data?.sprints,e[29]=B):B=e[29];let k;return e[30]!==s.error||e[31]!==s.isLoading||e[32]!==B||e[33]!==d?(k={items:d,sprints:B,isLoading:s.isLoading,error:s.error},e[30]=s.error,e[31]=s.isLoading,e[32]=B,e[33]=d,e[34]=k):k=e[34],k}function de(){const e=V.c(70),{org:u,locator:o}=z(),r=H(),t=W(),c=G();let a;e[0]!==o?(a=F.taskBoardItems(o),e[0]=o,e[1]=a):a=e[1];const n=a;let T;e[2]!==t||e[3]!==n?(T=()=>t.invalidateQueries({queryKey:n}),e[2]=t,e[3]=n,e[4]=T):T=e[4];const s=T;let f;e[5]!==r?(f=i=>r.call("TASK_BOARD_ITEM_CREATE",i),e[5]=r,e[6]=f):f=e[6];let _;e[7]!==s||e[8]!==f?(_={mutationFn:f,onSuccess:s},e[7]=s,e[8]=f,e[9]=_):_=e[9];const A=L(_);let R;e[10]!==r?(R=i=>r.call("TASK_BOARD_ITEM_UPDATE",i),e[10]=r,e[11]=R):R=e[11];let E;e[12]!==t||e[13]!==n?(E=async i=>{await t.cancelQueries({queryKey:n});const D=t.getQueryData(n);return t.setQueryData(n,y=>y&&{...y,items:y.items.map(N=>N.id===i.id?{...N,...i}:N)}),{previous:D}},e[12]=t,e[13]=n,e[14]=E):E=e[14];let g;e[15]!==u?(g=(i,D)=>{D.status==="done"&&X("task_marked_done",{organization_id:u.id,task_board_item_id:D.id})},e[15]=u,e[16]=g):g=e[16];let d;e[17]!==t||e[18]!==n?(d=(i,D,y)=>{y?.previous&&t.setQueryData(n,y.previous)},e[17]=t,e[18]=n,e[19]=d):d=e[19];let B;e[20]!==s||e[21]!==o||e[22]!==t?(B=(i,D,y)=>{s(),t.invalidateQueries({queryKey:F.taskBoardActivity(o,y.id)})},e[20]=s,e[21]=o,e[22]=t,e[23]=B):B=e[23];let k;e[24]!==R||e[25]!==E||e[26]!==g||e[27]!==d||e[28]!==B?(k={mutationFn:R,onMutate:E,onSuccess:g,onError:d,onSettled:B},e[24]=R,e[25]=E,e[26]=g,e[27]=d,e[28]=B,e[29]=k):k=e[29];const m=L(k);let l;e[30]!==r?(l=i=>r.call("TASK_BOARD_ITEM_DELETE",{id:i}),e[30]=r,e[31]=l):l=e[31];let S;e[32]!==s||e[33]!==c?(S=i=>{$.error(i instanceof Error&&i.message?i.message:c("taskBoard.taskBoard.deleteError")),s()},e[32]=s,e[33]=c,e[34]=S):S=e[34];let I;e[35]!==s||e[36]!==l||e[37]!==S?(I={mutationFn:l,onSuccess:s,onError:S},e[35]=s,e[36]=l,e[37]=S,e[38]=I):I=e[38];const K=L(I);let p;e[39]!==r?(p=async i=>{const D=await Promise.allSettled(i.map(y=>r.call("TASK_BOARD_ITEM_DELETE",{id:y})));return{total:i.length,failed:D.filter(ae).length}},e[39]=r,e[40]=p):p=e[40];let h,M;e[41]!==c?(h=i=>{const{total:D,failed:y}=i;y!==0&&$.error(c("taskBoard.taskBoard.deleteBulkError",{failed:String(y),total:String(D)}))},M=()=>$.error(c("taskBoard.taskBoard.deleteError")),e[41]=c,e[42]=h,e[43]=M):(h=e[42],M=e[43]);let w;e[44]!==s||e[45]!==p||e[46]!==h||e[47]!==M?(w={mutationFn:p,onSuccess:h,onError:M,onSettled:s},e[44]=s,e[45]=p,e[46]=h,e[47]=M,e[48]=w):w=e[48];const C=L(w);let b;e[49]!==r?(b=i=>r.call("TASK_BOARD_ITEM_UPDATE",i),e[49]=r,e[50]=b):b=e[50];let U;e[51]!==s||e[52]!==b?(U={mutationFn:b,onSuccess:s},e[51]=s,e[52]=b,e[53]=U):U=e[53];const P=L(U);let q;e[54]!==r?(q=i=>r.call("TASK_BOARD_ITEM_RERUN",i),e[54]=r,e[55]=q):q=e[55];let O;e[56]!==s||e[57]!==o||e[58]!==t?(O=(i,D,y)=>{s(),t.invalidateQueries({queryKey:F.taskBoardActivity(o,y.id)})},e[56]=s,e[57]=o,e[58]=t,e[59]=O):O=e[59];let v;e[60]!==q||e[61]!==O?(v={mutationFn:q,onSettled:O},e[60]=q,e[61]=O,e[62]=v):v=e[62];const j=L(v);let x;return e[63]!==A||e[64]!==P||e[65]!==K||e[66]!==C||e[67]!==j||e[68]!==m?(x={create:A,update:m,remove:K,removeMany:C,link:P,rerun:j},e[63]=A,e[64]=P,e[65]=K,e[66]=C,e[67]=j,e[68]=m,e[69]=x):x=e[69],x}function ae(e){return e.status==="rejected"}export{ce as a,de as b,ue as u};

package/dist/client/assets/useInfiniteQuery-DLAmbqZM.js DELETED Viewed

	@@ -1 +0,0 @@
1	- import{I as u}from"./use-infinite-scroll-C9OrfDzr.js";import{eT as i}from"./index-BEzRsiF-.js";function t(e,r){return i(e,u,r)}export{t as u};

package/dist/client/assets/useSuspenseInfiniteQuery-LPtoPmi6.js DELETED Viewed

	@@ -1 +0,0 @@
1	- import{I as s}from"./use-infinite-scroll-C9OrfDzr.js";import{eT as u,bI as n}from"./index-BEzRsiF-.js";function a(e,r){return u({...e,enabled:!0,suspense:!0,throwOnError:n},s,r)}export{a as u};