decocms 4.388.4 → 4.389.0

package/dist/server/server.js

@@ -3366,7 +3366,7 @@ Respond with ONLY a JSON object of this shape, and nothing else:
 ${J.join(`
 `)}`:Y}function pf6($){let Z=new Set;for(let Q of $)for(let X of Q.split(`
 `)){let Y=X.trim();if(/^Co-authored-by:\s/i.test(Y))Z.add(Y)}return[...Z]}var v$8=200,ff6=12,gf6,uf6=300,Yk0=3;var oH1=D(()=>{hZ();D8();Xk0();gf6={aheadBy:0,behindBy:0,files:[]}});function tf6($){if(!$||$.includes(".."))return!1;return nf6.test($)}function x$8($){let Z=typeof $.__resolveType==="string"?$.__resolveType:null;if(!Z||!tf6(Z))return null;let{__resolveType:Q,...X}=$;return{resolveType:Z,payload:X}}function f$8($,Z){return`${$.replace(/\/+$/,"")}/deco/invoke/${Z}`}var nf6;var y$8=D(()=>{nf6=/^[\w./@-]+$/});function R80($,Z){let Q=$?.githubRepo;if(!Q?.owner||!Q?.name)return null;if(!Q.connectionId)return Q;if(!Z.includes(Q.connectionId))return null;return Q}async function h$8($,Z,Q,X){let Y=$.organization?.id;if(!Y)throw new nj(B7);let J=await bw($.storage,Y,X);if(J&&await zB($.storage,J)){let F=await gF($,J,{forceRefresh:!0}).catch((U)=>{throw new nj(U instanceof Error?U.message:B7)});await g$8($,Z,Q,F);return}let G=X.connectionId??J?.legacyConnectionId;if(!G)throw new nj("Push requires a connected git account. Connect the repository's provider for this project and restart the sandbox.");await rl({ctx:$,connectionId:G,organizationId:Y,forceRefresh:!0,onLegacyMintError:(F)=>{let U=F instanceof Error?F.message:B7;throw new nj(U)}});let{cloneUrl:W,gitUserName:K,gitUserEmail:H}=await hF(G,X.owner,X.name,$.db,$.vault).catch((F)=>{let{code:U,message:N}=yF$(F instanceof Error?F.message:String(F));throw U?new nj(N):F});await g$8($,Z,Q,{cloneUrl:W,gitUserName:K,gitUserEmail:H})}async function g$8($,Z,Q,X){let{cloneUrl:Y,gitUserName:J,gitUserEmail:G}=X,W=dm($),K=await Z.proxyDaemonRequest(Q,"/_sandbox/config",{method:"PUT",headers:new Headers({"content-type":"application/json"}),body:JSON.stringify({git:{repository:{cloneUrl:Y},identity:{userName:J,userEmail:G}},...W?{operator:W}:{}})});if(!K.ok){let H=await Qj(K,of6).catch(()=>K.statusText);throw Error(`Failed to refresh sandbox git credentials (${K.status}): ${H}`)}}var of6=10485760,nj;var rH1=D(()=>{t3();tV0();Z00();YW0();os();hZ();nj=class nj extends Error{constructor($){super($);this.name="GitPushAuthError"}}});function af6($){let Z=$.startsWith("thread:")?$.slice(7):$;if(!Z||Z.length>255||Z.includes("..")||Z.startsWith("/")||Z.endsWith("/")||Z.endsWith(".lock")||!rf6.test(Z))throw Error(`Invalid branch name: ${$}`)}function xf($){return AbortSignal.any([$.req.raw.signal,AbortSignal.timeout(ef6)])}async function Zy6($,Z){let Q=$.var.studioContext,X=nF(Z.branch),Y=$.req.query("thread")??X,J=Y&&Y===X?Z.branchThread:Y?await Q.storage.threads.get(Y).catch(()=>null):null,G=J?.virtual_mcp_id===Z.virtualMcpId?J:null,W=Gx(G?.metadata?.runtime);if(W)return W;let K=nA0(Z.virtualMcpMetadata),H=K==="cms"?await kH1(Q,{claimName:Z.claimName}):"alive",F=K==="cms"&&H!=="alive"?"cms":"sandbox",U=!!G&&(H==="gone"||H==="alive"&&K==="cms");if(U&&G)Q00(Q,G.id,F);if(K==="cms")console.log("sandbox proxy: no runtime stamp",{route:$.req.path,method:$.req.method,reason:G?"unstamped":"threadless",liveness:H,resolved:F,stamped:U});return F}async function Qy6($){let Z=$.get("vmClaim");if(Z.runner)return Z.runner;try{return await LY($.var.studioContext)}catch{return null}}function ff($){let{runner:Z}=$.get("vmClaim");if(!Z)return $.json({error:"No sandbox runner configured"},503);return Z}async function tm($){let{virtualMcpMetadata:Z,connectionIds:Q}=$.get("vmClaim"),X=$.var.studioContext,Y=R80(Z,Q);if(!Y)throw new y0({provider:"github",status:404,message:"Project has no GitHub repository"});let J=K0(X);return nl(X,J.id,Y)}function aH1($,Z){let Q=Z instanceof Error?Z.message:String(Z),X=JH$(Z);if(X!==void 0)return $.json({error:Q},429,{...t5,...X===null?{}:{"Retry-After":String(Math.ceil(X/1000))}});if(Z instanceof l6)return $.json({error:Q},409,t5);let Y=e3(Z);if(Y!==null){let J=Y===404?404:Y===409||Y===422?409:502;return $.json({error:Q},J,t5)}return $.json({error:Q},502,t5)}async function c$8($,Z,Q){let X;try{X=await fetch(Z,Q)}catch{return $.json({error:"Preview unreachable"},502)}let Y;try{Y=await X.text()}catch{return $.json({error:"Preview unreachable"},502)}return new Response(Y,{status:X.status,headers:{"content-type":X.headers.get("content-type")??"application/json"}})}async function d$8($){try{let Z=await tm($),Q=await Jk0(Z,$.get("vmClaim").branch);return $.json(Q,200,t5)}catch(Z){return aH1($,Z)}}function q80($,Z){let X=(Kk0.get($)??Promise.resolve()).catch(()=>{}).then(Z),Y=X.catch(()=>{});return Kk0.set($,Y),Y.finally(()=>{if(Kk0.get($)===Y)Kk0.delete($)}),X}async function o7($,Z,Q){if(!Q?.runner&&$.get("vmClaim").runtime==="cms")return $.json({error:"sandbox not found: this session is sandbox-less"},404,t5);let X=Q?.runner??ff($);if(X instanceof Response)return X;let{claimName:Y,userId:J,projectRef:G}=$.get("vmClaim"),W=Q?.method??"POST",K=null,H=new Headers;if(Q?.jsonBody!==void 0)K=Q.jsonBody,H.set("content-type","application/json");else if(Q?.forwardJsonBody)K=await $.req.text(),H.set("content-type","application/json");let F=Q?.signal,U={method:W,headers:H,body:K,...F?{signal:F}:{}},N=async()=>{let B=await X.proxyDaemonRequest(Y,Z,U);if(Q?.map404to410&&B.status===404){try{await B.body?.cancel()}catch{}if(await X.adoptLiveClaim({userId:J,projectRef:G},Y))B=await X.proxyDaemonRequest(Y,Z,U);if(B.status===404){try{await B.body?.cancel()}catch{}return new Response(JSON.stringify({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."}),{status:410,headers:{"content-type":"application/json",...t5}})}}let O=await B.text(),L=Q?.redactRepoDir?Xy6(O):O,w=B.headers.get("content-type")??"application/json";return new Response(L,{status:B.status,headers:{"content-type":w,...t5}})};try{if(F){let B=N();return B.catch(()=>{}),await Promise.race([B,new Promise((L,w)=>{if(F.aborted)return w(F.reason);F.addEventListener("abort",()=>w(F.reason),{once:!0})})])}return await N()}catch(B){let O=B instanceof Error?B.message:String(B);return $.json({error:`Daemon unreachable: ${O}`},502)}}function Xy6($){try{let Z=JSON.parse($);if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&"repoDir"in Z)return JSON.stringify({...Z,repoDir:null})}catch{}return $}async function Hk0($,Z,Q,X="GET",Y){let J=await $.proxyDaemonRequest(Z,Q,{method:X,headers:new Headers,body:null});if(J.status===404&&Y){try{await J.body?.cancel()}catch{}if(await $.adoptLiveClaim(Y,Z))J=await $.proxyDaemonRequest(Z,Q,{method:X,headers:new Headers,body:null})}if(J.status===404){try{await J.body?.cancel()}catch{}throw Error("SANDBOX_GONE")}let G=await J.text();if(!J.ok){let W=`Daemon error (${J.status})`;try{W=JSON.parse(G).error??W}catch{}throw Error(W)}return JSON.parse(G)}function Yy6($){return m$8.includes($)}var rf6,u$8=524288,sf6=65536,ef6=1e4,l$8=2000,$y6,Kk0,t5,m$8,i$8=()=>{let $=new X1;$.use("/:virtualMcpId/:branch/*",$y6),$.post("/:virtualMcpId/:branch/write",(Q)=>o7(Q,"/_sandbox/write",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/unlink",(Q)=>o7(Q,"/_sandbox/unlink",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/mkdir",(Q)=>o7(Q,"/_sandbox/mkdir",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/rename",(Q)=>o7(Q,"/_sandbox/rename",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/read",(Q)=>o7(Q,"/_sandbox/read",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/glob",(Q)=>o7(Q,"/_sandbox/glob",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/grep",(Q)=>o7(Q,"/_sandbox/grep",{forwardJsonBody:!0,signal:xf(Q)})),$.post("/:virtualMcpId/:branch/exec/:script",async(Q)=>{let X=Q.req.param("script");if(!X)return Q.json({error:"missing script name"},400);return o7(Q,`/_sandbox/exec/${encodeURIComponent(X)}`)}),$.post("/:virtualMcpId/:branch/exec/:script/kill",async(Q)=>{let X=Q.req.param("script");if(!X)return Q.json({error:"missing script name"},400);return o7(Q,`/_sandbox/exec/${encodeURIComponent(X)}/kill`)}),$.get("/:virtualMcpId/:branch/config",(Q)=>o7(Q,"/_sandbox/config",{method:"GET",map404to410:!0,redactRepoDir:!0})),$.put("/:virtualMcpId/:branch/config",(Q)=>o7(Q,"/_sandbox/config",{method:"PUT",forwardJsonBody:!0,map404to410:!0})),$.post("/:virtualMcpId/:branch/setup/:step",async(Q)=>{let X=Q.req.param("step");if(!X||!Yy6(X))return Q.json({error:`step must be one of: ${m$8.join(", ")}`},400);let Y=Q.get("vmClaim"),J=await kH1(Q.var.studioContext,{claimName:Y.claimName})==="gone"?null:await Qy6(Q);if(!J)return Q.json({error:"sandbox not found: nothing is running at this ref"},404,t5);if(X==="start"){let G=K0(Q.var.studioContext),W=_c(Y.virtualMcpMetadata);try{await dA0({ctx:Q.var.studioContext,runner:J,handle:Y.claimName,orgId:G.id,userId:Y.callerUserId,entries:W})}catch(K){let H=K instanceof Error?K.message:String(K);return Q.json({error:`Failed to push env to daemon: ${H}`},502)}}return o7(Q,`/_sandbox/setup/${X}`,{signal:Q.req.raw.signal,map404to410:!0,runner:J})}),$.get("/:virtualMcpId/:branch/events",(Q)=>{let X=Q.get("vmClaim");if(!X.runner)return NO(Q,async(Y)=>{await Y.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:"No sandbox runner configured on this studio instance."})})});return m18(Q,{ctx:Q.var.studioContext,claimName:X.claimName,runner:X.runner,virtualMcpId:X.virtualMcpId,branch:X.branch,userId:X.userId,projectRef:X.projectRef,virtualMcpMetadata:X.virtualMcpMetadata})}),$.get("/:virtualMcpId/:branch/git/status",(Q)=>{if(Q.get("vmClaim").runtime==="cms")return d$8(Q);return Z(Q)});let Z=(Q)=>o7(Q,"/_sandbox/git/status",{method:"GET",map404to410:!0,signal:AbortSignal.any([Q.req.raw.signal,AbortSignal.timeout(l$8)])});return $.post("/:virtualMcpId/:branch/git/status",(Q)=>{if(Q.get("vmClaim").runtime==="cms")return d$8(Q);return o7(Q,"/_sandbox/git/status",{map404to410:!0,signal:AbortSignal.any([Q.req.raw.signal,AbortSignal.timeout(l$8)])})}),$.post("/:virtualMcpId/:branch/git/diff",async(Q)=>{let X=Q.get("vmClaim");if(X.runtime==="cms")try{let Y=await Q.req.json().catch(()=>({})),J=await tm(Q),G=await Gk0(J,X.branch,Y.base);return Q.json(G,200,t5)}catch(Y){return aH1(Q,Y)}return o7(Q,"/_sandbox/git/diff",{forwardJsonBody:!0,map404to410:!0})}),$.post("/:virtualMcpId/:branch/git/publish",async(Q)=>{if(Q.get("vmClaim").runtime==="cms")return Q.json({ok:!0},200,t5);let X=ff(Q);if(X instanceof Response)return X;let{claimName:Y,virtualMcpMetadata:J,connectionIds:G}=Q.get("vmClaim"),W=Q.var.studioContext;return q80(Y,async()=>{try{await SH1(W,X,Y);let K=R80(J,G);if(K)await h$8(W,X,Y,K)}catch(K){if(K instanceof nj)return Q.json({error:K.message},403,t5);let H=K instanceof Error?K.message:String(K);return Q.json({error:H},502,t5)}return o7(Q,"/_sandbox/git/publish",{forwardJsonBody:!0,map404to410:!0})})}),$.post("/:virtualMcpId/:branch/git/discard",async(Q)=>{let X=Q.get("vmClaim");if(X.runtime==="cms")return q80(X.claimName,async()=>{let Y=await Q.req.json().catch(()=>({})),J=Array.isArray(Y.filepaths)?Y.filepaths.filter((G)=>typeof G==="string"):[];if(J.length===0)return Q.json({error:"filepaths is required"},400,t5);try{let G=await tm(Q);return await b$8(G,X.branch,J),Q.json({ok:!0},200,t5)}catch(G){let W=e3(G)===409||G instanceof l6?409:502,K=G instanceof Error?G.message:String(G);return Q.json({error:K},W,t5)}});return q80(X.claimName,()=>o7(Q,"/_sandbox/git/discard",{forwardJsonBody:!0,map404to410:!0}))}),$.post("/:virtualMcpId/:branch/git/rebase",async(Q)=>{let X=Q.get("vmClaim");if(X.runtime==="cms")return q80(X.claimName,async()=>{try{let W=await Q.req.json().catch(()=>({})),K=await tm(Q),H=W.base??await K.getDefaultBranch();return await Wk0(K,X.branch,H),Q.json({ok:!0},200,t5)}catch(W){return aH1(Q,W)}});let Y=ff(Q);if(Y instanceof Response)return Y;let{claimName:J}=Q.get("vmClaim"),G=Q.var.studioContext;return q80(J,async()=>{try{await SH1(G,Y,J)}catch(W){let K=W instanceof Error?W.message:String(W);return Q.json({error:K},502,t5)}return o7(Q,"/_sandbox/git/rebase",{forwardJsonBody:!0,map404to410:!0})})}),$.post("/:virtualMcpId/:branch/git/suggest-commit",H9({maxSize:u$8,onError:(Q)=>Q.json({error:"Payload too large"},413,t5)}),async(Q)=>{let X=Q.get("vmClaim"),Y=null;if(X.runtime!=="cms"){let H=ff(Q);if(H instanceof Response)return H;Y=H}let{claimName:J,userId:G,projectRef:W}=X,K=Q.var.studioContext;try{let H=await Q.req.json().catch(()=>({})),F=H.status,U=H.diff,N=U!=null&&typeof U.diffs==="object"&&U.diffs!==null,[B,O]=vH1(F)&&N?[F,U]:Y?await Promise.all([Hk0(Y,J,"/_sandbox/git/status","GET",{userId:G,projectRef:W}),Hk0(Y,J,"/_sandbox/git/diff","GET",{userId:G,projectRef:W})]):await(async()=>{let w=await tm(Q);return Promise.all([Jk0(w,X.branch),Gk0(w,X.branch)])})();await IK(K,K0(K).id,"suggesting a commit message");let L=await o18(K,B,O);return Q.json(L,200,t5)}catch(H){let F=H instanceof Error?H.message:String(H);if(F==="SANDBOX_GONE")return Q.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,t5);return Q.json({error:F},502,t5)}}),$.post("/:virtualMcpId/:branch/git/judge-review",H9({maxSize:u$8,onError:(Q)=>Q.json({error:"Payload too large"},413,t5)}),async(Q)=>{let X=Q.get("vmClaim"),Y=null;if(X.runtime!=="cms"){let H=ff(Q);if(H instanceof Response)return H;Y=H}let{claimName:J,userId:G,projectRef:W}=X,K=Q.var.studioContext;try{let H=await Q.req.json().catch(()=>({})),F=H.status,U=H.diff,N=U!=null&&typeof U.diffs==="object"&&U.diffs!==null,[B,O]=vH1(F)&&N?[F,U]:Y?await Promise.all([Hk0(Y,J,"/_sandbox/git/status","GET",{userId:G,projectRef:W}),Hk0(Y,J,"/_sandbox/git/diff","GET",{userId:G,projectRef:W})]):await(async()=>{let w=await tm(Q);return Promise.all([Jk0(w,X.branch),Gk0(w,X.branch)])})();await IK(K,K0(K).id,"judging whether a change needs review");let L=await a18(K,B,O,typeof H.language==="string"?H.language:void 0);return Q.json(L,200,t5)}catch(H){let F=H instanceof Error?H.message:String(H);if(F==="SANDBOX_GONE")return Q.json({error:"Sandbox handle is gone. The sandbox needs to be re-provisioned."},410,t5);return Q.json({error:F},502,t5)}}),$.get("/:virtualMcpId/:branch/preview-fetch",async(Q)=>{let X=ff(Q);if(X instanceof Response)return X;let{claimName:Y}=Q.get("vmClaim"),J=Q.req.query("path");if(!J||!J.startsWith("/")||J.startsWith("//")||J.includes("..")||J.includes("\\"))return Q.json({error:"Path not allowed"},403);let G;try{G=await X.getPreviewUrl(Y)}catch{return Q.json({error:"Preview not available"},502)}if(!G)return Q.json({error:"Preview not available"},502);let W=G.replace(/\/+$/,"");return c$8(Q,`${W}${J}`)}),$.post("/:virtualMcpId/:branch/preview-invoke",H9({maxSize:sf6,onError:(Q)=>Q.json({error:"Payload too large"},413)}),async(Q)=>{let X=ff(Q);if(X instanceof Response)return X;let{claimName:Y}=Q.get("vmClaim"),J;try{J=await X.getPreviewUrl(Y)}catch{return Q.json({error:"Preview not available"},502)}if(!J)return Q.json({error:"Preview not available"},502);let G;try{G=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}if(!G||typeof G!=="object"||Array.isArray(G))return Q.json({error:"Invalid JSON body"},400);let W=x$8(G);if(!W)return Q.json({error:"Invalid or missing __resolveType"},400);let K=f$8(J,W.resolveType);return c$8(Q,K,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(W.payload),signal:AbortSignal.timeout(30000)})}),$};var p$8=D(()=>{X8();FH();cm();VH1();se();l18();JW();vc();c18();dK();TF();d18();i18();w61();$00();fH1();s18();hZ();U5();oH1();y$8();rH1();rf6=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;$y6=nV0(async($,Z)=>{let Q=$.var.studioContext;try{Q0(Q)}catch{return $.json({error:"Unauthorized"},401)}let X=p0(Q);if(!X)return $.json({error:"Unauthorized"},401);let Y;try{Y=K0(Q)}catch{return $.json({error:"Organization scope required"},403)}let J=$.req.param("virtualMcpId"),G=$.req.param("branch");if(!J||!G)return $.json({error:"virtualMcpId and branch are required"},400);try{af6(G)}catch(L){let w=L instanceof Error?L.message:String(L);return $.json({error:w},400)}let W=await Q.storage.virtualMcps.findById(J);if(!W||W.organization_id!==Y.id)return $.json({error:"Virtual MCP not found"},404);let K=ze({orgId:Y.id,virtualMcpId:J,branch:G}),H=await d81(Q,G),F=m81(H,X),U=u18({userId:F,projectRef:K}),N=W.metadata??null,B=await Zy6($,{claimName:U,branch:G,virtualMcpId:J,sandboxUserId:F,virtualMcpMetadata:N,branchThread:H});if(B==="cms")return $.set("vmClaim",{claimName:U,callerUserId:X,runner:null,virtualMcpId:J,branch:G,userId:F,projectRef:K,virtualMcpMetadata:N,connectionIds:W.connections?.map((L)=>L.connection_id)??[],runtime:B}),Z();let O;try{O=await LY(Q)}catch{O=null}if(!O)return $.json({error:"No sandbox runner found"},404);return $.set("vmClaim",{claimName:U,callerUserId:X,runner:O,virtualMcpId:J,branch:G,userId:F,projectRef:K,virtualMcpMetadata:N,connectionIds:W.connections?.map((L)=>L.connection_id)??[],runtime:B}),Z()});Kk0=new Map;t5={"Cache-Control":"no-store, no-cache, must-revalidate",Pragma:"no-cache"};m$8=["clone","install","start"]});function n$8($,Z,Q){let X=sH1.get($);if(!X)X={pending:null,running:!1},sH1.set($,X);if(!X.pending)X.pending={set:new Map,del:new Set,deps:Z,resolvers:[],rejecters:[]};let Y=X.pending;Y.deps=Z;for(let[G,W]of Object.entries(Q.set??{}))Y.set.set(G,W),Y.del.delete(G);for(let G of Q.delete??[])Y.del.add(G),Y.set.delete(G);let J=new Promise((G,W)=>{Y.resolvers.push(G),Y.rejecters.push(W)});if(!X.running)Gy6($,X);return J}async function Gy6($,Z){Z.running=!0;try{while(Z.pending){let Q=Z.pending;Z.pending=null;try{let X=await Wy6(Q);for(let Y of Q.resolvers)Y(X)}catch(X){for(let Y of Q.rejecters)Y(X)}}}finally{if(Z.running=!1,!Z.pending)sH1.delete($)}}async function Wy6($){let{client:Z,branch:Q,packagePath:X}=$.deps,Y=new Map;for(let J=0;;J++){let G=await nm(Z,Q),W=await Z.listDecofileEntries(G,X),K=pH1(W,X),H=[],F=new Map(K.map((N)=>[N.path,{stem:N.stem,sha:N.sha}]));for(let[N,B]of $.set){let O=nH1(K,N),L=`${JSON.stringify(B,null,2)}
-`;await k$8(Z.repo,L);let w=O[0]??`${Qk0(X)}/${hH1(N)}.json`;H.push({path:w,content:L});let j=w.slice(w.lastIndexOf("/")+1,-5);F.set(w,{stem:j,content:L});for(let E of O.slice(1))H.push({path:E,deleted:!0}),F.delete(E)}for(let N of $.del)for(let B of nH1(K,N))H.push({path:B,deleted:!0}),F.delete(B);if(H.length===0)return G;let U=X?`${X}/.deco/blocks.gen.json`:".deco/blocks.gen.json";if(W.some((N)=>N.type==="blob"&&N.path===U)){let N=await S$8(Z,F.values(),Y),{decofile:B,skipped:O}=E80(N);if(O.length>0)console.warn("decofile gen: dropped blocks that were not valid JSON",{repo:kK(Z.repo),branch:Q,packagePath:X,blocks:O.map((L)=>L.key)});H.push({path:U,content:B})}try{let{sha:N}=await Z.commitFiles({branch:Q,message:Ky6($),expectedHead:G,changes:H});return N}catch(N){if(!(N instanceof l6)||J>=Jy6-1)throw N;await c$(a7(2000,200,J,2,0.5))}}}function Ky6($){let Z=(Y)=>{let J=Y.slice(0,3).join(", ");return Y.length>3?`${J} (+${Y.length-3} more)`:J},Q=[];if($.set.size>0)Q.push(`update ${Z([...$.set.keys()])}`);if($.del.size>0)Q.push(`delete ${Z([...$.del])}`);let X=`chore(decofile): ${Q.join("; ")}`;return O81(X,$.deps.coAuthor)}var Jy6=3,sH1;var t$8=D(()=>{CP0();rV0();w6();D8();hZ();Xk0();sH1=new Map});import{createHmac as o$8,randomBytes as Hy6,timingSafeEqual as Fy6}from"crypto";function r$8(){if(Fk0)return Fk0;let $;try{let Z=E0();$=Z.studioJwtSecret??Z.betterAuthSecret}catch{$=void 0}return Fk0=$?Buffer.from($):Hy6(32),Fk0}function eH1($){let Z=$.nowMs??Date.now(),Q={o:$.organizationId,m:$.virtualMcpId,b:$.branch,e:Math.floor((Z+Uy6)/1000)},X=Buffer.from(JSON.stringify(Q)).toString("base64url"),Y=o$8("sha256",r$8()).update(X).digest("base64url");return`${X}.${Y}`}function a$8($,Z){let Q=$.indexOf(".");if(Q<0)return!1;let X=$.slice(0,Q),Y=Buffer.from($.slice(Q+1)),J=Buffer.from(o$8("sha256",r$8()).update(X).digest("base64url"));if(Y.length!==J.length||!Fy6(Y,J))return!1;let G;try{G=JSON.parse(Buffer.from(X,"base64url").toString())}catch{return!1}let W=Math.floor((Z.nowMs??Date.now())/1000);return G.o===Z.organizationId&&G.m===Z.virtualMcpId&&G.b===Z.branch&&typeof G.e==="number"&&G.e>=W}var Uy6=21600000,Fk0=null;var s$8=D(()=>{U$()});import{z as om}from"zod";function By6($){return $.length>0&&$.length<=255&&!$.includes("..")&&!$.endsWith("/")&&!$.endsWith(".lock")&&Ny6.test($)}function X88($){return $.req.header("x-forwarded-host")??new URL($.req.url).host}async function M80($){let Z=$.get("decofileScope");return nl($.var.studioContext,Z.organizationId,Z.githubRepo)}function I80($,Z){let Q=Z instanceof Error?Z.message:String(Z);if(Z instanceof l6)return $.json({error:Q},409);let X=e3(Z);if(X!==null){let Y=X===404?404:X===409||X===422?409:502;return $.json({error:Q},Y)}return $.json({error:Q},500)}function Y88(){let $=new X1;return $.use("/:virtualMcpId/:branch",Q88),$.use("/:virtualMcpId/:branch/*",Q88),$.get("/:virtualMcpId/:branch",async(Z)=>{let Q=Z.get("decofileScope");try{let X=await M80(Z),Y=await C$8(X,Q.branch,Q.packagePath,{createBranchIfMissing:!!Q.userId}),J={ETag:`"${Y.sha}"`,"Cache-Control":"no-store","Access-Control-Allow-Origin":"*"};if(Z.req.header("if-none-match")===`"${Y.sha}"`)return Z.body(null,304,J);if(!Q.userId)return Z.body(Y.decofile,200,{...J,"content-type":"application/json"});let G=eH1({organizationId:Q.organizationId,virtualMcpId:Q.virtualMcpId,branch:Q.branch});return Z.body(`{"version":${JSON.stringify(Y.sha)},"token":${JSON.stringify(G)},"apiHost":${JSON.stringify(X88(Z))},"decofile":${Y.decofile}}`,200,{...J,"content-type":"application/json"})}catch(X){return I80(Z,X)}}),$.get("/:virtualMcpId/:branch/meta",async(Z)=>{let Q=Z.get("decofileScope"),X=Q.packagePath?`${Q.packagePath}/.deco/meta.gen.json`:".deco/meta.gen.json";try{let Y=await M80(Z),J=await Y.readFileAtRef(Q.branch,X);if(J===null){let G=await Y.getDefaultBranch();if(G!==Q.branch)J=await Y.readFileAtRef(G,X)}if(J===null)return Z.json({error:"meta.gen.json not committed"},404);return Z.body(J,200,{"content-type":"application/json","Cache-Control":"no-store","Access-Control-Allow-Origin":"*"})}catch(Y){return I80(Z,Y)}}),$.patch("/:virtualMcpId/:branch",Dy6,async(Z)=>{let Q=Z.get("decofileScope"),X=Z.var.studioContext,Y=Ly6.safeParse(await Z.req.json().catch(()=>null));if(!Y.success)return Z.json({error:"Invalid body",details:Y.error.issues},400);let J=Y.data;for(let G of[...Object.keys(J.set??{}),...J.delete??[]])try{oV0(G)}catch(W){let K=W instanceof Error?W.message:String(W);return Z.json({error:K},400)}for(let[G,W]of Object.entries(J.set??{})){if(typeof W!=="object"||W===null||Array.isArray(W))return Z.json({error:`Block "${G}" must be a JSON object`},400);if(gH1(G))return Z.json({error:`Block key "${G}" collides with a framework resolver module and cannot be written`},400)}try{let G=await M80(Z),W=await n$8(`${Q.organizationId}/${Q.virtualMcpId}/${Q.branch}`,{client:G,branch:Q.branch,packagePath:Q.packagePath,coAuthor:dm(X)},J),K=eH1({organizationId:Q.organizationId,virtualMcpId:Q.virtualMcpId,branch:Q.branch});return Z.json({version:W,token:K,apiHost:X88(Z)})}catch(G){return I80(Z,G)}}),$.post("/:virtualMcpId/:branch/publish",async(Z)=>{let Q=Z.get("decofileScope");try{let X=await M80(Z),Y=await X.getDefaultBranch();if(Y===Q.branch)return Z.json({error:"Branch is already the default branch"},400);let J=`chore(decofile): publish ${Q.branch}`;try{let G;try{G=await X.mergeBranches(Y,Q.branch,J)}catch(W){if(e3(W)!==409)throw W;await Wk0(X,Q.branch,Y),G=await X.mergeBranches(Y,Q.branch,J)}return G?Z.json({result:"merged",sha:G}):Z.json({result:"up-to-date"})}catch(G){if(e3(G)===409)return Z.json({error:"merge-conflict"},409);if(e3(G)===405){let K=await X.findOpenChangeRequest(Y,Q.branch)??await X.createChangeRequest({base:Y,head:Q.branch,title:`Publish ${Q.branch}`});return Z.json({result:"pull-request",number:K.number,url:K.url})}throw G}}catch(X){return I80(Z,X)}}),$.get("/:virtualMcpId/:branch/status",async(Z)=>{let Q=Z.get("decofileScope");try{let X=await M80(Z),Y=await X.getDefaultBranch();if(Y===Q.branch)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0,lastCommitAt:null});try{let[{aheadBy:J,behindBy:G},W]=await Promise.all([X.compare(Y,Q.branch),X.getBranch(Q.branch)]);return Z.json({baseBranch:Y,aheadBy:J,behindBy:G,lastCommitAt:W?.committedAt??null})}catch(J){if(e3(J)===404)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0,lastCommitAt:null});throw J}}catch(X){return I80(Z,X)}}),$}var Ny6,e$8=500,$88=1048576,Z88=1024,Oy6=8388608,Dy6,Ly6,Q88;var J88=D(()=>{j61();rV0();X8();FH();VH1();tV0();rH1();hZ();t$8();s$8();oH1();Xk0();TF();Ny6=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;Dy6=H9({maxSize:Oy6,onError:($)=>$.json({error:"Payload too large"},413)}),Ly6=om.object({set:om.record(om.string(),om.unknown()).optional(),delete:om.array(om.string()).optional()}).refine(($)=>Object.keys($.set??{}).length>0||($.delete?.length??0)>0,{message:"Patch must set or delete at least one block"}).refine(($)=>Object.keys($.set??{}).length+($.delete?.length??0)<=e$8,{message:`Patch cannot touch more than ${e$8} blocks`}).refine(($)=>Object.values($.set??{}).every((Z)=>JSON.stringify(Z).length<=$88),{message:`Each block must be at most ${$88} bytes`}).refine(($)=>[...Object.keys($.set??{}),...$.delete??[]].every((Z)=>Z.length<=Z88),{message:`Each block key must be at most ${Z88} characters`}),Q88=nV0(async($,Z)=>{let Q=$.var.studioContext,X=Q.organization;if(!X)return $.json({error:"Organization scope required"},500);let Y=$.req.param("virtualMcpId"),J=$.req.param("branch");if(!Y||!J)return $.json({error:"virtualMcpId and branch are required"},400);if(!By6(J))return $.json({error:`Invalid branch name: ${J}`},400);let G=Q.auth?.user?.id??null;if(!G){let B=$.req.query("token");if(!($.req.method==="GET"&&!$.req.path.match(/\/(publish|status)$/)))return $.json({error:"Unauthorized"},401);if(!B||!a$8(B,{organizationId:X.id,virtualMcpId:Y,branch:J}))return $.json({error:"Unauthorized"},401)}if(!await d3(Q,X.id,"cms"))return $.json({error:"This organization's plan does not include the CMS",code:"feature_not_in_plan"},403);let W=await Q.storage.virtualMcps.findById(Y);if(!W||W.organization_id!==X.id)return $.json({error:"Virtual MCP not found"},404);let K=W.metadata??null;if(!pA0(K))return $.json({error:"Project has no preview server configured"},404);let F=W.connections?.map((B)=>B.connection_id)??[],U=R80(K,F);if(!U)return $.json({error:"Project has no GitHub repository"},404);let N=K?.runtime;return $.set("decofileScope",{organizationId:X.id,virtualMcpId:Y,branch:J,packagePath:N?.path?.replace(/^\/+|\/+$/g,"")||null,githubRepo:U,userId:G}),Z()})});var G88=($)=>{let Z=new X1;if(Z.use("*",zm),Z.use("*",fa$),Z.route("/",QV0()),Z.route("/",js$()),Z.route("/",Ys$()),Z.route("/",I18()),Z.route("/",E18()),Z.route("/",q18()),Z.route("/",P18()),Z.route("/",mV0()),Z.route("/tools",b18()),Z.route("/",C18()),Z.route("/",a08({kvStorage:$.kvStorage})),Z.route("/",o08()),Z.route("/fs",F18({getConnection:$.getNatsConnection})),Z.route("/sandbox",i$8()),Z.route("/decofile",Y88()),Z.route("/",L18()),Z.route("/",N18()),Z.route("/deco-sites",YV0()),Z.route("/hosting",na$()),Z.route("/monitor",$s$()),Z.route("/sso",aI0()),Z.route("/",iV0({tokenStorage:$.tokenStorage,automationEventDispatcher:$.automationEventDispatcher})),Z.route("/webhooks",ca$()),$.mountDevAssets)Z.route("/dev-assets",KV0({orgFromPath:!0}));return Z.use("/mcp/:connectionId?",$.mcpAuth),Z.use("/mcp/:connectionId/ui-resource",$.mcpAuth),Z.use("/mcp/gateway/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/virtual-mcp/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/self",$.mcpAuth),Z.use("/mcp/task-run/:threadId",$.mcpAuth),Z.route("/",pt$()),Z.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",$.betterAuthProtectedResourceHandler),Z.get("/mcp/.well-known/oauth-protected-resource",$.betterAuthProtectedResourceHandler),Z.route("/mcp/task-run",O18()),Z.route("/mcp",e20()),Z.route("/mcp/self",uV0()),Z.route("/mcp",QR0()),Z.all("/oauth-proxy/:connectionId/*",$.oauthProxyHandler),Z.get("/watch",$.watchHandler),Z};var W88=D(()=>{X8();ya$();uI0();da$();oW1();ta$();Zs$();HV0();Tf();mW1();$K1();r08();s08();U18();B18();U10();gW1();XR0();EH1();D18();w18();z18();A18();AH1();V18();_18();TH1();x18();RH1();$R0();p$8();J88()});function wy6($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}var jy6=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},K88=()=>{let $=new X1;return $.use("*",jy6),$.get("/",async(Z)=>{let Q=E0(),X=Q.decoSupabaseUrl,Y=Q.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let J=await _J(X,Y,"apps?select=name,title,description,logo,category,vendors(alias,url)");return Z.json({apps:wy6(J)})}catch(J){return console.error("[deco-apps] GET error:",J),Z.json({error:"Failed to fetch apps"},502)}}),$};var H88=D(()=>{X8();U$();oM0()});import{z as b1}from"zod";function VU($,Z="invalid_request_error",Q=null,X=null){return{error:{message:$,type:Z,param:Q,code:X}}}function Vy6($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let Q=$.substring(0,Z),X=$.substring(Z+1);if(!Q||!X)return null;return{credentialId:Q,modelId:X}}function ky6($,Z,Q){try{return JSON.parse($)}catch{throw new N88(`Invalid JSON in tool call arguments for function '${Q}' (tool_call_id: ${Z}): ${$}`)}}function Sy6($){let Z={};for(let Q of $)if(Q.role==="assistant"&&Q.tool_calls)for(let X of Q.tool_calls)Z[X.id]=X.function.name;return $.map((Q)=>{switch(Q.role){case"system":return{role:"system",content:Q.content};case"user":if(typeof Q.content==="string")return{role:"user",content:Q.content};return{role:"user",content:Q.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(Q.tool_calls&&Q.tool_calls.length>0)return{role:"assistant",content:Q.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:ky6(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:Q.content??""};case"tool":let X=Z[Q.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:Q.tool_call_id,toolName:X,output:{type:"text",value:Q.content}}]}}})}function Cy6($){let Z=$.map((Q)=>{let X=Q.function.parameters?WF(Q.function.parameters):WF({type:"object",properties:{}});return[Q.function.name,u$({description:Q.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function _y6($){if(!$)return;return{openai:{response_format:$}}}function vy6(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function F88($,Z,Q,X,Y,J){let G={model:$,instructions:Z.filter((W)=>W.role==="system"),messages:Z.filter((W)=>W.role!=="system"),tools:Q,temperature:X.temperature,maxOutputTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:J};return Y?{...G,providerOptions:Y}:G}function U88($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var Ey6=256,zy6,Py6,Ay6,Ty6,Ry6,qy6,My6,Iy6,N88,B88,O88;var D88=D(()=>{$6();X8();cm();sK();zy6=b1.object({type:b1.literal("function"),function:b1.object({name:b1.string(),description:b1.string().optional(),parameters:b1.record(b1.string(),b1.unknown()).optional()})}),Py6=b1.object({id:b1.string(),type:b1.literal("function"),function:b1.object({name:b1.string(),arguments:b1.string()})}),Ay6=b1.discriminatedUnion("role",[b1.object({role:b1.literal("system"),content:b1.string(),name:b1.string().optional()}),b1.object({role:b1.literal("user"),content:b1.union([b1.string(),b1.array(b1.union([b1.object({type:b1.literal("text"),text:b1.string()}),b1.object({type:b1.literal("image_url"),image_url:b1.object({url:b1.string(),detail:b1.string().optional()})})]))]),name:b1.string().optional()}),b1.object({role:b1.literal("assistant"),content:b1.string().nullable().optional(),name:b1.string().optional(),tool_calls:b1.array(Py6).optional()}),b1.object({role:b1.literal("tool"),content:b1.string(),tool_call_id:b1.string()})]),Ty6=b1.object({type:b1.literal("text")}),Ry6=b1.object({type:b1.literal("json_object")}),qy6=b1.object({type:b1.literal("json_schema"),json_schema:b1.object({name:b1.string(),description:b1.string().optional(),schema:b1.record(b1.string(),b1.unknown()),strict:b1.boolean().optional()})}),My6=b1.union([Ty6,Ry6,qy6]),Iy6=b1.object({model:b1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:b1.array(Ay6),stream:b1.boolean().optional().default(!1),temperature:b1.number().min(0).max(2).optional(),max_tokens:b1.number().positive().optional(),top_p:b1.number().min(0).max(1).optional(),frequency_penalty:b1.number().min(-2).max(2).optional(),presence_penalty:b1.number().min(-2).max(2).optional(),stop:b1.union([b1.string(),b1.array(b1.string())]).optional(),tools:b1.array(zy6).optional(),tool_choice:b1.union([b1.literal("auto"),b1.literal("none"),b1.literal("required"),b1.object({type:b1.literal("function"),function:b1.object({name:b1.string()})})]).optional(),response_format:My6.optional(),user:b1.string().optional()});N88=class N88 extends Error{constructor($){super($);this.name="MessageConversionError"}};B88=new X1;B88.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),Q=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(VU("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(VU("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==Q)return $.json(VU("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=Iy6.safeParse(X);if(!Y.success){let w=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(VU(`Invalid request: ${w.message}`,"invalid_request_error",w.path.length>0?w.path.join("."):null),400)}let J=Y.data,G=Vy6(J.model);if(!G)return $.json(VU("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=G,{modelId:K}=G;if(!W){let j=(await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id})).find((E)=>Kz(E.providerId));if(!j)return $.json(VU("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=j.id}let H;try{H=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(VU(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let F=H.aiSdk.languageModel(K),U=Sy6(J.messages),N=J.tools?Cy6(J.tools):void 0,B=_y6(J.response_format),O=vy6(),L=Math.floor(Date.now()/1000);if(J.stream)return NO($,async(w)=>{let j=F88(F,U,N,J,B,$.req.raw.signal);try{let E=Sc(j),z=!1,T=0,P="",A=async()=>{if(P.length===0)return;let q=P;P="",await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{content:q},finish_reason:null}]})})};for await(let q of E.stream){if(!z&&(q.type==="text-delta"||q.type==="tool-call"))await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),z=!0;if(q.type==="text-delta"){if(P+=q.text,P.length>=Ey6)await A()}else if(q.type==="tool-call"){await A();let x=T++;await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{tool_calls:[{index:x,id:q.toolCallId,type:"function",function:{name:q.toolName,arguments:JSON.stringify(q.input)}}]},finish_reason:null}]})})}else if(q.type==="finish")await A(),await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{},finish_reason:U88(q.finishReason)}],usage:q.totalUsage?{prompt_tokens:q.totalUsage.inputTokens??0,completion_tokens:q.totalUsage.outputTokens??0,total_tokens:q.totalUsage.totalTokens??0}:void 0})})}await A(),await w.writeSSE({data:"[DONE]"})}catch(E){let z=E;console.error("[openai-compat:stream] Error:",z.message),await w.writeSSE({data:JSON.stringify({error:{message:z.message,type:"server_error"}})})}});else{let w=F88(F,U,N,J,B,$.req.raw.signal),j=await kc(w),E={role:"assistant",content:j.text||null};if(j.toolCalls&&j.toolCalls.length>0)E.tool_calls=j.toolCalls.map((z)=>({id:z.toolCallId,type:"function",function:{name:z.toolName,arguments:JSON.stringify("input"in z?z.input:{})}})),E.content=null;return $.json({id:O,object:"chat.completion",created:L,model:J.model,choices:[{index:0,message:E,finish_reason:U88(j.finishReason)}],usage:{prompt_tokens:j.usage?.inputTokens??0,completion_tokens:j.usage?.outputTokens??0,total_tokens:j.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(VU("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(VU(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(VU(Y.message,"server_error"),500)}});O88=B88});function by6($){if(typeof $!=="object"||$===null)return!1;let Q=$.githubRepo?.url;return typeof Q==="string"&&Q.length>0}function L88(){let $=new X1;return $.use("*",async(Z,Q)=>{await Q(),Z.header("Cache-Control","private, no-store"),Z.header("Vary","Cookie")}),$.get("/",async(Z)=>{let Q=Z.get("studioContext"),X=p0(Q);if(!X)return Z.json({error:"Authentication required"},401);let J=(Z.req.query("site")??"").trim().toLowerCase();if(!N7(J))return Z.json({error:"Invalid site slug"},400);let G=await Q.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.id as id","organization.slug as slug","organization.name as name","organization.metadata as metadata"]).where("member.userId","=",X).execute(),W=[];for(let H of G){if(!H.slug||w9(H))continue;let F=await Q.storage.virtualMcps.list(H.id);for(let U of F){if(L30(U)!==J)continue;if(!by6(U.metadata))continue;W.push({orgSlug:H.slug,orgName:H.name??H.slug,project:{id:U.id,title:U.title,icon:U.icon??null}})}}let K={matches:W};return Z.json(K)}),$}var w88=D(()=>{X8();o3()});var E88;var j88=D(()=>{E88={name:"decocms",version:"4.388.4",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/api"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:"bun run migrate && bun run dev:server","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",build:"bun run build:server","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","generate:tool-contracts":"bun run scripts/generate-tool-contracts.ts","db:migrate":"bun run ./dist/server/migrate.js","db:migrate:dbos":"bun run ./dist/server/migrate-dbos.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts","migrate:dbos":"bun run src/database/migrate-dbos.ts",test:"bun test src","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",prepublishOnly:"bun run --cwd=../.. build:studio"},optionalDependencies:{"@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^4.0.58","@ai-sdk/google":"^4.0.76","@ai-sdk/openai":"^4.0.71","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@inkjs/ui":"^2.0.0","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^3.1.0","@opentelemetry/core":"^2.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^4.0.17","@better-auth/sso":"1.4.1","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/shared":"workspace:*","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@vercel/nft":"^1.1.1",ai:"^7.0.107","better-auth":"1.4.22",croner:"^9.1.0",degit:"^2.8.4",hono:"^4.10.7",jose:"^6.0.11",nanoid:"^5.1.6",pg:"^8.16.3",typescript:"^7.0.2",typescript5:"npm:typescript@^5.9.3",zod:"4.3.6"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","tools"],license:"MIT",publishConfig:{access:"public"}}});function yy6(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??fy6}}var z88,fy6="https://ph.studio.decocms.com",P88;var A88=D(()=>{X8();fo();Mx();D9();U$();RW1();j88();z88=new X1;z88.get("/",($)=>{let Z={version:E88.version,theme:s0$(),...NK().logo&&{logo:NK().logo},...lB()&&{internalUrl:Sl1()},...E0().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E0().firecrawlApiKey,hostingEnabled:!!E0().controlplaneRestUrl&&!!E0().controlplaneServiceToken,hostingControlPlaneGa:E0().hostingControlPlaneGa,monitorEnabled:!!E0().clickhouseAnalyticsUrl&&!!E0().clickhouseAnalyticsPassword,monitorGa:E0().monitorGa,plansEnabled:E0().plansEnabled,auth:yr$(),posthog:yy6(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:RO()}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});P88=z88});function rm($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function $F1($){return(rm($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((Q)=>Q.charAt(0).toUpperCase()+Q.slice(1)).join(" ")}function R88($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(rm($))}&sz=${Z}`}function T88($,Z){let Q=$.trim();if(Q.length<=Z)return Q;let X=Q.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function q88($){let{brand:Z,domain:Q,score:X,verdict:Y}=$,J=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,G=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?T88(`${Y.trim().replace(/\s+/g," ")} \u2014 ${G}`,200):T88(`How does ${Q} really perform? ${G}`,200);return{title:J,description:W}}import{z as n0}from"zod";var yf,gy6,hy6,uy6,ly6,M88;var I88=D(()=>{yf=n0.enum(["good","bad","neutral"]),gy6=n0.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((Q)=>Q!==null&&typeof Q!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},n0.object({kind:n0.enum(["text","number","sparkline","badge","score"]).catch("text"),value:n0.coerce.string().optional(),tone:yf.optional(),muted:n0.boolean().optional(),delta:n0.coerce.string().optional(),deltaDir:n0.enum(["up","down","neutral"]).optional(),points:n0.array(n0.coerce.number()).optional(),label:n0.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),hy6=n0.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},n0.array(gy6)),uy6={key:n0.coerce.string(),title:n0.coerce.string(),eyebrow:n0.coerce.string().optional(),headline:n0.coerce.string(),annotation:n0.coerce.string().optional(),methodology:n0.coerce.string().optional(),sources:n0.array(n0.object({name:n0.coerce.string(),logoUrl:n0.coerce.string()})).optional()},ly6=n0.discriminatedUnion("template",[n0.object({template:n0.literal("cover"),score:n0.object({value:n0.coerce.number(),max:n0.coerce.number().optional(),grade:n0.coerce.string().optional(),label:n0.coerce.string().optional()}).optional(),brandImage:n0.coerce.string().optional(),screenshot:n0.coerce.string().optional(),mobileScreenshot:n0.coerce.string().optional()}),n0.object({template:n0.literal("cta"),ctaUrl:n0.coerce.string().optional(),ctaLabel:n0.coerce.string().optional(),bullets:n0.array(n0.coerce.string()).optional()}),n0.object({template:n0.literal("series"),points:n0.array(n0.coerce.number()).min(2),xLabels:n0.array(n0.coerce.string()).min(1),unit:n0.coerce.string().optional(),callout:n0.object({index:n0.coerce.number(),value:n0.coerce.string(),tone:yf.optional()})}),n0.object({template:n0.literal("threshold"),value:n0.coerce.string().default(""),metricLabel:n0.coerce.string().optional(),ratio:n0.coerce.number(),thresholdRatio:n0.coerce.number().optional(),thresholdLabel:n0.coerce.string().default(""),tone:yf.optional()}),n0.object({template:n0.literal("stats"),stats:n0.array(n0.object({value:n0.coerce.string(),label:n0.coerce.string(),tone:yf.optional()})).min(1)}),n0.object({template:n0.literal("bars"),items:n0.array(n0.object({value:n0.coerce.string(),label:n0.coerce.string(),ratio:n0.coerce.number(),tone:yf.optional()})).min(1)}),n0.object({template:n0.literal("gauges"),gauges:n0.array(n0.object({label:n0.coerce.string(),value:n0.coerce.string(),status:n0.enum(["good","warn","bad"]).catch("warn"),caption:n0.coerce.string().optional(),ratio:n0.coerce.number().optional()})).min(1)}),n0.object({template:n0.literal("checklist"),checks:n0.array(n0.object({label:n0.coerce.string(),status:n0.enum(["pass","fail","warn"]).catch("fail"),value:n0.coerce.string().optional()})).min(1)}),n0.object({template:n0.literal("table"),columns:n0.array(n0.object({label:n0.coerce.string(),align:n0.enum(["left","right"]).optional()})).min(1),rows:n0.array(hy6).min(1),highlightRow:n0.coerce.number().optional()}),n0.object({template:n0.literal("products"),products:n0.array(n0.object({name:n0.coerce.string(),price:n0.coerce.string().optional(),image:n0.coerce.string().optional(),url:n0.coerce.string().optional()})).min(1)}),n0.object({template:n0.literal("list"),entries:n0.array(n0.object({label:n0.coerce.string(),severity:n0.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:n0.coerce.number().optional()}),n0.object({template:n0.literal("keywords"),volumeLabel:n0.coerce.string().optional(),keywords:n0.array(n0.object({term:n0.coerce.string(),volume:n0.coerce.string(),position:n0.coerce.number().catch(0)})).min(1)}),n0.object({template:n0.literal("competitor"),metricLabel:n0.coerce.string().optional(),competitors:n0.array(n0.object({name:n0.coerce.string(),value:n0.coerce.string(),tone:yf.optional(),isYou:n0.boolean().optional()})).min(1)}),n0.object({template:n0.literal("scorecard"),rivalLabel:n0.coerce.string().optional(),dimensions:n0.array(n0.object({label:n0.coerce.string(),you:n0.coerce.string(),rival:n0.coerce.string().optional(),rivalName:n0.coerce.string().optional(),tone:yf.optional()})).min(1)})]),M88=n0.object({...uy6,template:ly6})});function Uk0($){let Z=[],Q=[...$.sections].sort((Y,J)=>Y.position-J.position).map((Y)=>{let J=M88.safeParse(Y.props);if(J.success)return J.data;let G=J.error.issues[0];return Z.push({section_type:Y.section_type,position:Y.position,reason:G?`${G.path.join(".")||"(root)"}: ${G.message}`:"contract violation"}),null}).filter((Y)=>Y!==null),X=Q.filter((Y)=>Y.template.template!=="cover"&&Y.template.template!=="cta").map((Y)=>({key:Y.key,title:Y.title}));return{deck:{meta:{...$.meta,scores:$.summary?.scores,scannedAt:$.scanned_at,toc:X},slides:Q},drops:Z}}var ZF1=D(()=>{I88()});import{join as V88}from"path";async function dy6($){try{let Z=await fetch(`${RF({})}/api/v2/public/diagnostics/${encodeURIComponent($)}`,{headers:{Accept:"application/json"},signal:AbortSignal.timeout(cy6)});if(!Z.ok)return null;let Q=await Z.json(),{deck:X}=Uk0(Q);if(!X.slides.length)return null;let Y=X.slides.find((W)=>W.template.template==="cover"),J=Y?.template,G=J&&J.template==="cover"?J:void 0;return{brand:X.meta.brand?.trim()||$F1($),score:X.meta.scores?.cover??G?.score?.value,verdict:Y?.annotation?.trim()||Y?.headline?.trim()||void 0}}catch{return null}}function aG($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function my6($,Z){let Q=rm($),X=Z?.brand?.trim()||$F1(Q),Y=R88(Q,128),G=`${(E0().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Q)}`,{title:W,description:K}=q88({brand:X,domain:Q,score:Z?.score,verdict:Z?.verdict}),H=`${G}/og.png`,F=`${X} commerce report by decocms`;return[`<title>${aG(W)}</title>`,`<meta name="description" content="${aG(K)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${aG(W)}" />`,`<meta property="og:description" content="${aG(K)}" />`,`<meta property="og:url" content="${aG(G)}" />`,`<meta property="og:image" content="${aG(H)}" />`,'<meta property="og:image:width" content="1200" />','<meta property="og:image:height" content="630" />',`<meta property="og:image:alt" content="${aG(F)}" />`,'<meta name="twitter:card" content="summary_large_image" />',`<meta name="twitter:title" content="${aG(W)}" />`,`<meta name="twitter:description" content="${aG(K)}" />`,`<meta name="twitter:image" content="${aG(H)}" />`,`<meta name="twitter:image:alt" content="${aG(F)}" />`,`<link rel="canonical" href="${aG(G)}" />`,`<link rel="icon" href="${aG(Y)}" sizes="any" />`].join(`
+`;await k$8(Z.repo,L);let w=O[0]??`${Qk0(X)}/${hH1(N)}.json`;H.push({path:w,content:L});let j=w.slice(w.lastIndexOf("/")+1,-5);F.set(w,{stem:j,content:L});for(let E of O.slice(1))H.push({path:E,deleted:!0}),F.delete(E)}for(let N of $.del)for(let B of nH1(K,N))H.push({path:B,deleted:!0}),F.delete(B);if(H.length===0)return G;let U=X?`${X}/.deco/blocks.gen.json`:".deco/blocks.gen.json";if(W.some((N)=>N.type==="blob"&&N.path===U)){let N=await S$8(Z,F.values(),Y),{decofile:B,skipped:O}=E80(N);if(O.length>0)console.warn("decofile gen: dropped blocks that were not valid JSON",{repo:kK(Z.repo),branch:Q,packagePath:X,blocks:O.map((L)=>L.key)});H.push({path:U,content:B})}try{let{sha:N}=await Z.commitFiles({branch:Q,message:Ky6($),expectedHead:G,changes:H});return N}catch(N){if(!(N instanceof l6)||J>=Jy6-1)throw N;await c$(a7(2000,200,J,2,0.5))}}}function Ky6($){let Z=(Y)=>{let J=Y.slice(0,3).join(", ");return Y.length>3?`${J} (+${Y.length-3} more)`:J},Q=[];if($.set.size>0)Q.push(`update ${Z([...$.set.keys()])}`);if($.del.size>0)Q.push(`delete ${Z([...$.del])}`);let X=`chore(decofile): ${Q.join("; ")}`;return O81(X,$.deps.coAuthor)}var Jy6=3,sH1;var t$8=D(()=>{CP0();rV0();w6();D8();hZ();Xk0();sH1=new Map});import{createHmac as o$8,randomBytes as Hy6,timingSafeEqual as Fy6}from"crypto";function r$8(){if(Fk0)return Fk0;let $;try{let Z=E0();$=Z.studioJwtSecret??Z.betterAuthSecret}catch{$=void 0}return Fk0=$?Buffer.from($):Hy6(32),Fk0}function eH1($){let Z=$.nowMs??Date.now(),Q={o:$.organizationId,m:$.virtualMcpId,b:$.branch,e:Math.floor((Z+Uy6)/1000)},X=Buffer.from(JSON.stringify(Q)).toString("base64url"),Y=o$8("sha256",r$8()).update(X).digest("base64url");return`${X}.${Y}`}function a$8($,Z){let Q=$.indexOf(".");if(Q<0)return!1;let X=$.slice(0,Q),Y=Buffer.from($.slice(Q+1)),J=Buffer.from(o$8("sha256",r$8()).update(X).digest("base64url"));if(Y.length!==J.length||!Fy6(Y,J))return!1;let G;try{G=JSON.parse(Buffer.from(X,"base64url").toString())}catch{return!1}let W=Math.floor((Z.nowMs??Date.now())/1000);return G.o===Z.organizationId&&G.m===Z.virtualMcpId&&G.b===Z.branch&&typeof G.e==="number"&&G.e>=W}var Uy6=21600000,Fk0=null;var s$8=D(()=>{U$()});import{z as om}from"zod";function By6($){return $.length>0&&$.length<=255&&!$.includes("..")&&!$.endsWith("/")&&!$.endsWith(".lock")&&Ny6.test($)}function X88($){return $.req.header("x-forwarded-host")??new URL($.req.url).host}async function M80($){let Z=$.get("decofileScope");return nl($.var.studioContext,Z.organizationId,Z.githubRepo)}function I80($,Z){let Q=Z instanceof Error?Z.message:String(Z);if(Z instanceof l6)return $.json({error:Q},409);let X=e3(Z);if(X!==null){let Y=X===404?404:X===409||X===422?409:502;return $.json({error:Q},Y)}return $.json({error:Q},500)}function Y88(){let $=new X1;return $.use("/:virtualMcpId/:branch",Q88),$.use("/:virtualMcpId/:branch/*",Q88),$.get("/:virtualMcpId/:branch",async(Z)=>{let Q=Z.get("decofileScope");try{let X=await M80(Z),Y=await C$8(X,Q.branch,Q.packagePath,{createBranchIfMissing:!!Q.userId}),J={ETag:`"${Y.sha}"`,"Cache-Control":"no-store","Access-Control-Allow-Origin":"*"};if(Z.req.header("if-none-match")===`"${Y.sha}"`)return Z.body(null,304,J);if(!Q.userId)return Z.body(Y.decofile,200,{...J,"content-type":"application/json"});let G=eH1({organizationId:Q.organizationId,virtualMcpId:Q.virtualMcpId,branch:Q.branch});return Z.body(`{"version":${JSON.stringify(Y.sha)},"token":${JSON.stringify(G)},"apiHost":${JSON.stringify(X88(Z))},"decofile":${Y.decofile}}`,200,{...J,"content-type":"application/json"})}catch(X){return I80(Z,X)}}),$.get("/:virtualMcpId/:branch/meta",async(Z)=>{let Q=Z.get("decofileScope"),X=Q.packagePath?`${Q.packagePath}/.deco/meta.gen.json`:".deco/meta.gen.json";try{let Y=await M80(Z),J=await Y.readFileAtRef(Q.branch,X);if(J===null){let G=await Y.getDefaultBranch();if(G!==Q.branch)J=await Y.readFileAtRef(G,X)}if(J===null)return Z.json({error:"meta.gen.json not committed"},404);return Z.body(J,200,{"content-type":"application/json","Cache-Control":"no-store","Access-Control-Allow-Origin":"*"})}catch(Y){return I80(Z,Y)}}),$.patch("/:virtualMcpId/:branch",Dy6,async(Z)=>{let Q=Z.get("decofileScope"),X=Z.var.studioContext,Y=Ly6.safeParse(await Z.req.json().catch(()=>null));if(!Y.success)return Z.json({error:"Invalid body",details:Y.error.issues},400);let J=Y.data;for(let G of[...Object.keys(J.set??{}),...J.delete??[]])try{oV0(G)}catch(W){let K=W instanceof Error?W.message:String(W);return Z.json({error:K},400)}for(let[G,W]of Object.entries(J.set??{})){if(typeof W!=="object"||W===null||Array.isArray(W))return Z.json({error:`Block "${G}" must be a JSON object`},400);if(gH1(G))return Z.json({error:`Block key "${G}" collides with a framework resolver module and cannot be written`},400)}try{let G=await M80(Z),W=await n$8(`${Q.organizationId}/${Q.virtualMcpId}/${Q.branch}`,{client:G,branch:Q.branch,packagePath:Q.packagePath,coAuthor:dm(X)},J),K=eH1({organizationId:Q.organizationId,virtualMcpId:Q.virtualMcpId,branch:Q.branch});return Z.json({version:W,token:K,apiHost:X88(Z)})}catch(G){return I80(Z,G)}}),$.post("/:virtualMcpId/:branch/publish",async(Z)=>{let Q=Z.get("decofileScope");try{let X=await M80(Z),Y=await X.getDefaultBranch();if(Y===Q.branch)return Z.json({error:"Branch is already the default branch"},400);let J=`chore(decofile): publish ${Q.branch}`;try{let G;try{G=await X.mergeBranches(Y,Q.branch,J)}catch(W){if(e3(W)!==409)throw W;await Wk0(X,Q.branch,Y),G=await X.mergeBranches(Y,Q.branch,J)}return G?Z.json({result:"merged",sha:G}):Z.json({result:"up-to-date"})}catch(G){if(e3(G)===409)return Z.json({error:"merge-conflict"},409);if(e3(G)===405){let K=await X.findOpenChangeRequest(Y,Q.branch)??await X.createChangeRequest({base:Y,head:Q.branch,title:`Publish ${Q.branch}`});return Z.json({result:"pull-request",number:K.number,url:K.url})}throw G}}catch(X){return I80(Z,X)}}),$.get("/:virtualMcpId/:branch/status",async(Z)=>{let Q=Z.get("decofileScope");try{let X=await M80(Z),Y=await X.getDefaultBranch();if(Y===Q.branch)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0,lastCommitAt:null});try{let[{aheadBy:J,behindBy:G},W]=await Promise.all([X.compare(Y,Q.branch),X.getBranch(Q.branch)]);return Z.json({baseBranch:Y,aheadBy:J,behindBy:G,lastCommitAt:W?.committedAt??null})}catch(J){if(e3(J)===404)return Z.json({baseBranch:Y,aheadBy:0,behindBy:0,lastCommitAt:null});throw J}}catch(X){return I80(Z,X)}}),$}var Ny6,e$8=500,$88=1048576,Z88=1024,Oy6=8388608,Dy6,Ly6,Q88;var J88=D(()=>{j61();rV0();X8();FH();VH1();tV0();rH1();hZ();t$8();s$8();oH1();Xk0();TF();Ny6=/^[a-zA-Z0-9][a-zA-Z0-9/._-]*$/;Dy6=H9({maxSize:Oy6,onError:($)=>$.json({error:"Payload too large"},413)}),Ly6=om.object({set:om.record(om.string(),om.unknown()).optional(),delete:om.array(om.string()).optional()}).refine(($)=>Object.keys($.set??{}).length>0||($.delete?.length??0)>0,{message:"Patch must set or delete at least one block"}).refine(($)=>Object.keys($.set??{}).length+($.delete?.length??0)<=e$8,{message:`Patch cannot touch more than ${e$8} blocks`}).refine(($)=>Object.values($.set??{}).every((Z)=>JSON.stringify(Z).length<=$88),{message:`Each block must be at most ${$88} bytes`}).refine(($)=>[...Object.keys($.set??{}),...$.delete??[]].every((Z)=>Z.length<=Z88),{message:`Each block key must be at most ${Z88} characters`}),Q88=nV0(async($,Z)=>{let Q=$.var.studioContext,X=Q.organization;if(!X)return $.json({error:"Organization scope required"},500);let Y=$.req.param("virtualMcpId"),J=$.req.param("branch");if(!Y||!J)return $.json({error:"virtualMcpId and branch are required"},400);if(!By6(J))return $.json({error:`Invalid branch name: ${J}`},400);let G=Q.auth?.user?.id??null;if(!G){let B=$.req.query("token");if(!($.req.method==="GET"&&!$.req.path.match(/\/(publish|status)$/)))return $.json({error:"Unauthorized"},401);if(!B||!a$8(B,{organizationId:X.id,virtualMcpId:Y,branch:J}))return $.json({error:"Unauthorized"},401)}if(!await d3(Q,X.id,"cms"))return $.json({error:"This organization's plan does not include the CMS",code:"feature_not_in_plan"},403);let W=await Q.storage.virtualMcps.findById(Y);if(!W||W.organization_id!==X.id)return $.json({error:"Virtual MCP not found"},404);let K=W.metadata??null;if(!pA0(K))return $.json({error:"Project has no preview server configured"},404);let F=W.connections?.map((B)=>B.connection_id)??[],U=R80(K,F);if(!U)return $.json({error:"Project has no GitHub repository"},404);let N=K?.runtime;return $.set("decofileScope",{organizationId:X.id,virtualMcpId:Y,branch:J,packagePath:N?.path?.replace(/^\/+|\/+$/g,"")||null,githubRepo:U,userId:G}),Z()})});var G88=($)=>{let Z=new X1;if(Z.use("*",zm),Z.use("*",fa$),Z.route("/",QV0()),Z.route("/",js$()),Z.route("/",Ys$()),Z.route("/",I18()),Z.route("/",E18()),Z.route("/",q18()),Z.route("/",P18()),Z.route("/",mV0()),Z.route("/tools",b18()),Z.route("/",C18()),Z.route("/",a08({kvStorage:$.kvStorage})),Z.route("/",o08()),Z.route("/fs",F18({getConnection:$.getNatsConnection})),Z.route("/sandbox",i$8()),Z.route("/decofile",Y88()),Z.route("/",L18()),Z.route("/",N18()),Z.route("/deco-sites",YV0()),Z.route("/hosting",na$()),Z.route("/monitor",$s$()),Z.route("/sso",aI0()),Z.route("/",iV0({tokenStorage:$.tokenStorage,automationEventDispatcher:$.automationEventDispatcher})),Z.route("/webhooks",ca$()),$.mountDevAssets)Z.route("/dev-assets",KV0({orgFromPath:!0}));return Z.use("/mcp/:connectionId?",$.mcpAuth),Z.use("/mcp/:connectionId/ui-resource",$.mcpAuth),Z.use("/mcp/gateway/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/virtual-mcp/:virtualMcpId?",$.mcpAuth),Z.use("/mcp/self",$.mcpAuth),Z.use("/mcp/task-run/:threadId",$.mcpAuth),Z.route("/",pt$()),Z.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",$.betterAuthProtectedResourceHandler),Z.get("/mcp/.well-known/oauth-protected-resource",$.betterAuthProtectedResourceHandler),Z.route("/mcp/task-run",O18()),Z.route("/mcp",e20()),Z.route("/mcp/self",uV0()),Z.route("/mcp",QR0()),Z.all("/oauth-proxy/:connectionId/*",$.oauthProxyHandler),Z.get("/watch",$.watchHandler),Z};var W88=D(()=>{X8();ya$();uI0();da$();oW1();ta$();Zs$();HV0();Tf();mW1();$K1();r08();s08();U18();B18();U10();gW1();XR0();EH1();D18();w18();z18();A18();AH1();V18();_18();TH1();x18();RH1();$R0();p$8();J88()});function wy6($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}var jy6=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},K88=()=>{let $=new X1;return $.use("*",jy6),$.get("/",async(Z)=>{let Q=E0(),X=Q.decoSupabaseUrl,Y=Q.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let J=await _J(X,Y,"apps?select=name,title,description,logo,category,vendors(alias,url)");return Z.json({apps:wy6(J)})}catch(J){return console.error("[deco-apps] GET error:",J),Z.json({error:"Failed to fetch apps"},502)}}),$};var H88=D(()=>{X8();U$();oM0()});import{z as b1}from"zod";function VU($,Z="invalid_request_error",Q=null,X=null){return{error:{message:$,type:Z,param:Q,code:X}}}function Vy6($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let Q=$.substring(0,Z),X=$.substring(Z+1);if(!Q||!X)return null;return{credentialId:Q,modelId:X}}function ky6($,Z,Q){try{return JSON.parse($)}catch{throw new N88(`Invalid JSON in tool call arguments for function '${Q}' (tool_call_id: ${Z}): ${$}`)}}function Sy6($){let Z={};for(let Q of $)if(Q.role==="assistant"&&Q.tool_calls)for(let X of Q.tool_calls)Z[X.id]=X.function.name;return $.map((Q)=>{switch(Q.role){case"system":return{role:"system",content:Q.content};case"user":if(typeof Q.content==="string")return{role:"user",content:Q.content};return{role:"user",content:Q.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(Q.tool_calls&&Q.tool_calls.length>0)return{role:"assistant",content:Q.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:ky6(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:Q.content??""};case"tool":let X=Z[Q.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:Q.tool_call_id,toolName:X,output:{type:"text",value:Q.content}}]}}})}function Cy6($){let Z=$.map((Q)=>{let X=Q.function.parameters?WF(Q.function.parameters):WF({type:"object",properties:{}});return[Q.function.name,u$({description:Q.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function _y6($){if(!$)return;return{openai:{response_format:$}}}function vy6(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function F88($,Z,Q,X,Y,J){let G={model:$,instructions:Z.filter((W)=>W.role==="system"),messages:Z.filter((W)=>W.role!=="system"),tools:Q,temperature:X.temperature,maxOutputTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:J};return Y?{...G,providerOptions:Y}:G}function U88($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var Ey6=256,zy6,Py6,Ay6,Ty6,Ry6,qy6,My6,Iy6,N88,B88,O88;var D88=D(()=>{$6();X8();cm();sK();zy6=b1.object({type:b1.literal("function"),function:b1.object({name:b1.string(),description:b1.string().optional(),parameters:b1.record(b1.string(),b1.unknown()).optional()})}),Py6=b1.object({id:b1.string(),type:b1.literal("function"),function:b1.object({name:b1.string(),arguments:b1.string()})}),Ay6=b1.discriminatedUnion("role",[b1.object({role:b1.literal("system"),content:b1.string(),name:b1.string().optional()}),b1.object({role:b1.literal("user"),content:b1.union([b1.string(),b1.array(b1.union([b1.object({type:b1.literal("text"),text:b1.string()}),b1.object({type:b1.literal("image_url"),image_url:b1.object({url:b1.string(),detail:b1.string().optional()})})]))]),name:b1.string().optional()}),b1.object({role:b1.literal("assistant"),content:b1.string().nullable().optional(),name:b1.string().optional(),tool_calls:b1.array(Py6).optional()}),b1.object({role:b1.literal("tool"),content:b1.string(),tool_call_id:b1.string()})]),Ty6=b1.object({type:b1.literal("text")}),Ry6=b1.object({type:b1.literal("json_object")}),qy6=b1.object({type:b1.literal("json_schema"),json_schema:b1.object({name:b1.string(),description:b1.string().optional(),schema:b1.record(b1.string(),b1.unknown()),strict:b1.boolean().optional()})}),My6=b1.union([Ty6,Ry6,qy6]),Iy6=b1.object({model:b1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:b1.array(Ay6),stream:b1.boolean().optional().default(!1),temperature:b1.number().min(0).max(2).optional(),max_tokens:b1.number().positive().optional(),top_p:b1.number().min(0).max(1).optional(),frequency_penalty:b1.number().min(-2).max(2).optional(),presence_penalty:b1.number().min(-2).max(2).optional(),stop:b1.union([b1.string(),b1.array(b1.string())]).optional(),tools:b1.array(zy6).optional(),tool_choice:b1.union([b1.literal("auto"),b1.literal("none"),b1.literal("required"),b1.object({type:b1.literal("function"),function:b1.object({name:b1.string()})})]).optional(),response_format:My6.optional(),user:b1.string().optional()});N88=class N88 extends Error{constructor($){super($);this.name="MessageConversionError"}};B88=new X1;B88.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),Q=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(VU("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(VU("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==Q)return $.json(VU("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=Iy6.safeParse(X);if(!Y.success){let w=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(VU(`Invalid request: ${w.message}`,"invalid_request_error",w.path.length>0?w.path.join("."):null),400)}let J=Y.data,G=Vy6(J.model);if(!G)return $.json(VU("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=G,{modelId:K}=G;if(!W){let j=(await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id})).find((E)=>Kz(E.providerId));if(!j)return $.json(VU("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=j.id}let H;try{H=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(VU(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let F=H.aiSdk.languageModel(K),U=Sy6(J.messages),N=J.tools?Cy6(J.tools):void 0,B=_y6(J.response_format),O=vy6(),L=Math.floor(Date.now()/1000);if(J.stream)return NO($,async(w)=>{let j=F88(F,U,N,J,B,$.req.raw.signal);try{let E=Sc(j),z=!1,T=0,P="",A=async()=>{if(P.length===0)return;let q=P;P="",await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{content:q},finish_reason:null}]})})};for await(let q of E.stream){if(!z&&(q.type==="text-delta"||q.type==="tool-call"))await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),z=!0;if(q.type==="text-delta"){if(P+=q.text,P.length>=Ey6)await A()}else if(q.type==="tool-call"){await A();let x=T++;await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{tool_calls:[{index:x,id:q.toolCallId,type:"function",function:{name:q.toolName,arguments:JSON.stringify(q.input)}}]},finish_reason:null}]})})}else if(q.type==="finish")await A(),await w.writeSSE({data:JSON.stringify({id:O,object:"chat.completion.chunk",created:L,model:J.model,choices:[{index:0,delta:{},finish_reason:U88(q.finishReason)}],usage:q.totalUsage?{prompt_tokens:q.totalUsage.inputTokens??0,completion_tokens:q.totalUsage.outputTokens??0,total_tokens:q.totalUsage.totalTokens??0}:void 0})})}await A(),await w.writeSSE({data:"[DONE]"})}catch(E){let z=E;console.error("[openai-compat:stream] Error:",z.message),await w.writeSSE({data:JSON.stringify({error:{message:z.message,type:"server_error"}})})}});else{let w=F88(F,U,N,J,B,$.req.raw.signal),j=await kc(w),E={role:"assistant",content:j.text||null};if(j.toolCalls&&j.toolCalls.length>0)E.tool_calls=j.toolCalls.map((z)=>({id:z.toolCallId,type:"function",function:{name:z.toolName,arguments:JSON.stringify("input"in z?z.input:{})}})),E.content=null;return $.json({id:O,object:"chat.completion",created:L,model:J.model,choices:[{index:0,message:E,finish_reason:U88(j.finishReason)}],usage:{prompt_tokens:j.usage?.inputTokens??0,completion_tokens:j.usage?.outputTokens??0,total_tokens:j.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(VU("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(VU(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(VU(Y.message,"server_error"),500)}});O88=B88});function by6($){if(typeof $!=="object"||$===null)return!1;let Q=$.githubRepo?.url;return typeof Q==="string"&&Q.length>0}function L88(){let $=new X1;return $.use("*",async(Z,Q)=>{await Q(),Z.header("Cache-Control","private, no-store"),Z.header("Vary","Cookie")}),$.get("/",async(Z)=>{let Q=Z.get("studioContext"),X=p0(Q);if(!X)return Z.json({error:"Authentication required"},401);let J=(Z.req.query("site")??"").trim().toLowerCase();if(!N7(J))return Z.json({error:"Invalid site slug"},400);let G=await Q.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["organization.id as id","organization.slug as slug","organization.name as name","organization.metadata as metadata"]).where("member.userId","=",X).execute(),W=[];for(let H of G){if(!H.slug||w9(H))continue;let F=await Q.storage.virtualMcps.list(H.id);for(let U of F){if(L30(U)!==J)continue;if(!by6(U.metadata))continue;W.push({orgSlug:H.slug,orgName:H.name??H.slug,project:{id:U.id,title:U.title,icon:U.icon??null}})}}let K={matches:W};return Z.json(K)}),$}var w88=D(()=>{X8();o3()});var E88;var j88=D(()=>{E88={name:"decocms",version:"4.389.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/api"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:"bun run migrate && bun run dev:server","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",build:"bun run build:server","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","generate:tool-contracts":"bun run scripts/generate-tool-contracts.ts","db:migrate":"bun run ./dist/server/migrate.js","db:migrate:dbos":"bun run ./dist/server/migrate-dbos.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts","migrate:dbos":"bun run src/database/migrate-dbos.ts",test:"bun test src","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",prepublishOnly:"bun run --cwd=../.. build:studio"},optionalDependencies:{"@duckdb/node-api":"^1.5.0-r.1"},dependencies:{"@ai-sdk/anthropic":"^4.0.58","@ai-sdk/google":"^4.0.76","@ai-sdk/openai":"^4.0.71","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@inkjs/ui":"^2.0.0","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^3.1.0","@opentelemetry/core":"^2.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6"},devDependencies:{"@ai-sdk/provider":"^4.0.17","@better-auth/sso":"1.4.1","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/shared":"workspace:*","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@vercel/nft":"^1.1.1",ai:"^7.0.107","better-auth":"1.4.22",croner:"^9.1.0",degit:"^2.8.4",hono:"^4.10.7",jose:"^6.0.11",nanoid:"^5.1.6",pg:"^8.16.3",typescript:"^7.0.2",typescript5:"npm:typescript@^5.9.3",zod:"4.3.6"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","tools"],license:"MIT",publishConfig:{access:"public"}}});function yy6(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??fy6}}var z88,fy6="https://ph.studio.decocms.com",P88;var A88=D(()=>{X8();fo();Mx();D9();U$();RW1();j88();z88=new X1;z88.get("/",($)=>{let Z={version:E88.version,theme:s0$(),...NK().logo&&{logo:NK().logo},...lB()&&{internalUrl:Sl1()},...E0().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E0().firecrawlApiKey,hostingEnabled:!!E0().controlplaneRestUrl&&!!E0().controlplaneServiceToken,hostingControlPlaneGa:E0().hostingControlPlaneGa,monitorEnabled:!!E0().clickhouseAnalyticsUrl&&!!E0().clickhouseAnalyticsPassword,monitorGa:E0().monitorGa,plansEnabled:E0().plansEnabled,auth:yr$(),posthog:yy6(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:RO()}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});P88=z88});function rm($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function $F1($){return(rm($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((Q)=>Q.charAt(0).toUpperCase()+Q.slice(1)).join(" ")}function R88($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(rm($))}&sz=${Z}`}function T88($,Z){let Q=$.trim();if(Q.length<=Z)return Q;let X=Q.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function q88($){let{brand:Z,domain:Q,score:X,verdict:Y}=$,J=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,G=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?T88(`${Y.trim().replace(/\s+/g," ")} \u2014 ${G}`,200):T88(`How does ${Q} really perform? ${G}`,200);return{title:J,description:W}}import{z as n0}from"zod";var yf,gy6,hy6,uy6,ly6,M88;var I88=D(()=>{yf=n0.enum(["good","bad","neutral"]),gy6=n0.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((Q)=>Q!==null&&typeof Q!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},n0.object({kind:n0.enum(["text","number","sparkline","badge","score"]).catch("text"),value:n0.coerce.string().optional(),tone:yf.optional(),muted:n0.boolean().optional(),delta:n0.coerce.string().optional(),deltaDir:n0.enum(["up","down","neutral"]).optional(),points:n0.array(n0.coerce.number()).optional(),label:n0.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),hy6=n0.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},n0.array(gy6)),uy6={key:n0.coerce.string(),title:n0.coerce.string(),eyebrow:n0.coerce.string().optional(),headline:n0.coerce.string(),annotation:n0.coerce.string().optional(),methodology:n0.coerce.string().optional(),sources:n0.array(n0.object({name:n0.coerce.string(),logoUrl:n0.coerce.string()})).optional()},ly6=n0.discriminatedUnion("template",[n0.object({template:n0.literal("cover"),score:n0.object({value:n0.coerce.number(),max:n0.coerce.number().optional(),grade:n0.coerce.string().optional(),label:n0.coerce.string().optional()}).optional(),brandImage:n0.coerce.string().optional(),screenshot:n0.coerce.string().optional(),mobileScreenshot:n0.coerce.string().optional()}),n0.object({template:n0.literal("cta"),ctaUrl:n0.coerce.string().optional(),ctaLabel:n0.coerce.string().optional(),bullets:n0.array(n0.coerce.string()).optional()}),n0.object({template:n0.literal("series"),points:n0.array(n0.coerce.number()).min(2),xLabels:n0.array(n0.coerce.string()).min(1),unit:n0.coerce.string().optional(),callout:n0.object({index:n0.coerce.number(),value:n0.coerce.string(),tone:yf.optional()})}),n0.object({template:n0.literal("threshold"),value:n0.coerce.string().default(""),metricLabel:n0.coerce.string().optional(),ratio:n0.coerce.number(),thresholdRatio:n0.coerce.number().optional(),thresholdLabel:n0.coerce.string().default(""),tone:yf.optional()}),n0.object({template:n0.literal("stats"),stats:n0.array(n0.object({value:n0.coerce.string(),label:n0.coerce.string(),tone:yf.optional()})).min(1)}),n0.object({template:n0.literal("bars"),items:n0.array(n0.object({value:n0.coerce.string(),label:n0.coerce.string(),ratio:n0.coerce.number(),tone:yf.optional()})).min(1)}),n0.object({template:n0.literal("gauges"),gauges:n0.array(n0.object({label:n0.coerce.string(),value:n0.coerce.string(),status:n0.enum(["good","warn","bad"]).catch("warn"),caption:n0.coerce.string().optional(),ratio:n0.coerce.number().optional()})).min(1)}),n0.object({template:n0.literal("checklist"),checks:n0.array(n0.object({label:n0.coerce.string(),status:n0.enum(["pass","fail","warn"]).catch("fail"),value:n0.coerce.string().optional()})).min(1)}),n0.object({template:n0.literal("table"),columns:n0.array(n0.object({label:n0.coerce.string(),align:n0.enum(["left","right"]).optional()})).min(1),rows:n0.array(hy6).min(1),highlightRow:n0.coerce.number().optional()}),n0.object({template:n0.literal("products"),products:n0.array(n0.object({name:n0.coerce.string(),price:n0.coerce.string().optional(),image:n0.coerce.string().optional(),url:n0.coerce.string().optional()})).min(1)}),n0.object({template:n0.literal("list"),entries:n0.array(n0.object({label:n0.coerce.string(),severity:n0.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:n0.coerce.number().optional()}),n0.object({template:n0.literal("keywords"),volumeLabel:n0.coerce.string().optional(),keywords:n0.array(n0.object({term:n0.coerce.string(),volume:n0.coerce.string(),position:n0.coerce.number().catch(0)})).min(1)}),n0.object({template:n0.literal("competitor"),metricLabel:n0.coerce.string().optional(),competitors:n0.array(n0.object({name:n0.coerce.string(),value:n0.coerce.string(),tone:yf.optional(),isYou:n0.boolean().optional()})).min(1)}),n0.object({template:n0.literal("scorecard"),rivalLabel:n0.coerce.string().optional(),dimensions:n0.array(n0.object({label:n0.coerce.string(),you:n0.coerce.string(),rival:n0.coerce.string().optional(),rivalName:n0.coerce.string().optional(),tone:yf.optional()})).min(1)})]),M88=n0.object({...uy6,template:ly6})});function Uk0($){let Z=[],Q=[...$.sections].sort((Y,J)=>Y.position-J.position).map((Y)=>{let J=M88.safeParse(Y.props);if(J.success)return J.data;let G=J.error.issues[0];return Z.push({section_type:Y.section_type,position:Y.position,reason:G?`${G.path.join(".")||"(root)"}: ${G.message}`:"contract violation"}),null}).filter((Y)=>Y!==null),X=Q.filter((Y)=>Y.template.template!=="cover"&&Y.template.template!=="cta").map((Y)=>({key:Y.key,title:Y.title}));return{deck:{meta:{...$.meta,scores:$.summary?.scores,scannedAt:$.scanned_at,toc:X},slides:Q},drops:Z}}var ZF1=D(()=>{I88()});import{join as V88}from"path";async function dy6($){try{let Z=await fetch(`${RF({})}/api/v2/public/diagnostics/${encodeURIComponent($)}`,{headers:{Accept:"application/json"},signal:AbortSignal.timeout(cy6)});if(!Z.ok)return null;let Q=await Z.json(),{deck:X}=Uk0(Q);if(!X.slides.length)return null;let Y=X.slides.find((W)=>W.template.template==="cover"),J=Y?.template,G=J&&J.template==="cover"?J:void 0;return{brand:X.meta.brand?.trim()||$F1($),score:X.meta.scores?.cover??G?.score?.value,verdict:Y?.annotation?.trim()||Y?.headline?.trim()||void 0}}catch{return null}}function aG($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function my6($,Z){let Q=rm($),X=Z?.brand?.trim()||$F1(Q),Y=R88(Q,128),G=`${(E0().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Q)}`,{title:W,description:K}=q88({brand:X,domain:Q,score:Z?.score,verdict:Z?.verdict}),H=`${G}/og.png`,F=`${X} commerce report by decocms`;return[`<title>${aG(W)}</title>`,`<meta name="description" content="${aG(K)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${aG(W)}" />`,`<meta property="og:description" content="${aG(K)}" />`,`<meta property="og:url" content="${aG(G)}" />`,`<meta property="og:image" content="${aG(H)}" />`,'<meta property="og:image:width" content="1200" />','<meta property="og:image:height" content="630" />',`<meta property="og:image:alt" content="${aG(F)}" />`,'<meta name="twitter:card" content="summary_large_image" />',`<meta name="twitter:title" content="${aG(W)}" />`,`<meta name="twitter:description" content="${aG(K)}" />`,`<meta name="twitter:image" content="${aG(H)}" />`,`<meta name="twitter:image:alt" content="${aG(F)}" />`,`<link rel="canonical" href="${aG(G)}" />`,`<link rel="icon" href="${aG(Y)}" sizes="any" />`].join(`
     `)}function iy6($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function k88($){let Z=new X1;return Z.get("/:domain/og.png",async(Q)=>{let X=rm(Q.req.param("domain")),Y=async()=>{let J=$?Bun.file(V88($,"report-og-fallback.png")):null;if(!J||!await J.exists())return Q.notFound();return Q.body(new Uint8Array(await J.arrayBuffer()),200,{"Content-Type":"image/png","Cache-Control":"public, max-age=0, s-maxage=3600"})};try{let J=await fetch(`${RF({})}/api/v2/public/diagnostics/${encodeURIComponent(X)}/og.png`,{signal:AbortSignal.timeout(py6)}),G=J.headers.get("content-type")??"";if(!J.ok||!G.startsWith("image/")||!J.body)return Y();return Q.body(J.body,200,{"Content-Type":G,"Cache-Control":"public, max-age=0, s-maxage=604800"})}catch{return Y()}}),Z.get("/:domain",async(Q)=>{let X=Q.req.param("domain"),Y=$?V88($,"index.html"):null,J=Y?Bun.file(Y):null;if(!J||!await J.exists())return Q.notFound();let G=await J.text();try{let W=await dy6(rm(X)),K=my6(X,W);return Q.html(iy6(G,K),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return Q.html(G)}}),Z}var cy6=2500,py6=1e4;var S88=D(()=>{X8();ZF1();iP();U$()});function V80($,Z){return fetch(`${RF({})}${$}`,Z)}async function ny6($,Z,Q){let X=new URLSearchParams;if(Z)X.set("pw",Z);if(Q)X.set("lang",Q);let Y=X.toString()?`?${X.toString()}`:"",J=await V80(`/api/v2/public/diagnostics/${encodeURIComponent($)}${Y}`,{headers:{Accept:"application/json"}});if(J.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!J.ok)throw Error(`report read HTTP ${J.status}`);let G=await J.json(),{deck:W,drops:K}=Uk0(G);return{status:W.slides.length?"ready":"empty",deck:W,scanned_at:G.scanned_at,drops:K}}var ty6,OO,C88=async($,Z)=>{if(!$.get("reportUser"))return $.json({error:"Authentication required"},401);await Z();return},_88;var v88=D(()=>{X8();qG();iP();ZF1();ty6=new Set(["complete","errored","terminated","unknown"]),OO=new X1;OO.use("*",async($,Z)=>{let Q=await V8.api.getSession({headers:$.req.raw.headers});$.set("reportUser",Q?.user?.id?{email:Q.user.email}:void 0),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});OO.use("/link-token/*",C88);OO.use("/suggest",C88);OO.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let Q=$.get("reportUser"),X=$.req.query("key")?.trim()||void 0,Y=$.req.query("lang")?.trim()||void 0;try{let J=await ny6(Z,X,Y);if($.header("Cache-Control","private, no-store"),Q||!J.deck)return $.json(J);return $.json({...J,deck:{...J.deck,slides:J.deck.slides.slice(0,1)},truncated:J.status==="ready"})}catch{return $.json({error:"report read failed"},502)}});OO.post("/run",async($)=>{let Z=$.get("reportUser"),Q;try{Q=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let X=typeof Q.domain==="string"?Q.domain.trim():"";if(!X)return $.json({error:"domain is required"},400);let Y=Z?.email,J=typeof Q.distinctId==="string"&&Q.distinctId.trim()&&Q.distinctId.length<=200?Q.distinctId.trim():void 0;try{let G=await V80("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${mP({})}`},body:JSON.stringify({url:X,...Y?{email:Y}:{},distinct_id:J})});if(!G.ok)return $.json({error:`run HTTP ${G.status}`},502);let W=await G.json(),K=W.blocked?{state:"blocked"}:W.status==="fresh"?{state:"fresh"}:W.mode==="sync"?{state:"sync"}:{state:"running",id:W.id??null};return $.json(K)}catch{return $.json({error:"run failed"},502)}});OO.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let Q=await V80(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${mP({})}`}});if(!Q.ok)return $.json({error:`status HTTP ${Q.status}`},502);let Y=(await Q.json()).status??"unknown",J={done:ty6.has(Y),status:Y};return $.json(J)}catch{return $.json({error:"status failed"},502)}});OO.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let Q=await V80(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(Q.status===404)return $.json(null);if(!Q.ok)return $.json({error:`link token HTTP ${Q.status}`},502);return $.json(await Q.json())}catch{return $.json({error:"link token resolve failed"},502)}});OO.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let Q=await V80(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!Q.ok)return $.json({suggestions:[]});let X=await Q.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});_88=OO});var oy6=1048576,QF1;var b88=D(()=>{X8();FH();U$();HW1();QF1=new X1;QF1.post("/webhook",H9({maxSize:oy6,onError:($)=>$.json({error:"payload too large"},413)}),async($)=>{let Z=E0().stripeWebhookSecret;if(!Z)return $.json({error:"stripe billing not configured"},503);let Q=await $.req.text();if(!ro$(Q,$.req.header("stripe-signature"),Z))return $.json({error:"invalid signature"},400);let Y=ao$(Q);if(!Y)return $.json({error:"invalid payload"},400);let J=await so$(Y);return console.log("stripe webhook",{eventId:Y.id,type:Y.type,livemode:Y.livemode,...J}),$.json({received:!0})})});import{timingSafeEqual as ry6}from"crypto";function ey6($,Z,Q){if(!Z?.startsWith("sha256="))return!1;let X=new Bun.CryptoHasher("sha256",Q).update($).digest("hex"),Y=Z.slice(7);if(Y.length!==X.length)return!1;return ry6(Buffer.from(Y),Buffer.from(X))}function $g6($,Z){let Q=Z,X=Q?.repository?.name,Y=Q?.repository?.owner?.login;if(typeof X!=="string"||typeof Y!=="string")return[];let J=[];if($==="check_suite"){if(Q.action!=="completed")return[];let G=Q.check_suite?.pull_requests;for(let W of Array.isArray(G)?G:[]){let K=W?.number;if(typeof K==="number")J.push(K)}}else if($==="issue_comment"&&Q.issue?.pull_request){let G=Q.issue.number;if(typeof G==="number")J.push(G)}return[...new Set(J)].map((G)=>({repoOwner:Y,repoName:X,number:G}))}function x88($){let Z=new X1;return Z.post("/webhook",H9({maxSize:ay6,onError:(Q)=>Q.json({error:"payload too large"},413)}),async(Q)=>{let X=process.env.GITHUB_WEBHOOK_SECRET;if(!X)return Q.json({error:"github webhook not configured"},503);let Y=await Q.req.text();if(!ey6(Y,Q.req.header("x-hub-signature-256"),X))return Q.json({error:"invalid signature"},400);let J=Q.req.header("x-github-event");if(J!=="push"&&!sy6.has(J??""))return Q.json({ok:!0,ignored:"event"});let G;try{G=JSON.parse(Y)}catch{return Q.json({error:"invalid payload"},400)}if(J==="push"){let H=G.ref,F=G.repository?.full_name;if(!H||!F)return Q.json({ok:!0,ignored:"shape"});let N=(await g81())?.markTenantPoolsDirty(F,H)??[];return Q.json({ok:!0,pools:N})}let W=$g6(J??"",G);if(W.length===0)return Q.json({ok:!0,ignored:"no-pr"});let K=await Zg6($,W);return Q.json({ok:!0,refreshed:K})}),Z}async function Zg6($,Z){let Q=0;for(let X of Z){let Y=$.taskBoard(),J;try{J=await Y.findPrLinks(X)}catch(G){console.error("[github-webhook] pr link lookup failed:",G);continue}for(let G of J)try{let W=await Y.getById(G.taskBoardItemId,G.organizationId),K=W?await $.contextFactory()(G.organizationId,W.assignedBy??W.createdBy):null;if(!K)continue;if(await OI$(K,G.organizationId,G.taskBoardItemId)!==null)Q++}catch(W){console.error(`[github-webhook] pr card refresh failed for ${G.taskBoardItemId}:`,W)}}return Q}var ay6=5242880,sy6;var f88=D(()=>{X8();FH();dK();L7();sy6=new Set(["check_suite","issue_comment"])});function y88($){let Z=new QO($.db,new sJ($.encryptionKey)),Q=new X1;return Q.get("/attachments/:token",async(X)=>{let Y=_q$(X.req.param("token"));if(!Y)return X.json({error:"Invalid or expired link"},404);let J=await Z.getByOrg(Y.organizationId);if(!J)return X.json({error:"Jira is not connected"},404);let W=await new wY(J.siteUrl,J.email,J.apiToken).downloadAttachment(Y.attachmentId);if(!W.ok||!W.body)return X.json({error:"Jira refused the download"},502);let K=new Headers;for(let H of["content-type","content-length","content-disposition"]){let F=W.headers.get(H);if(F)K.set(H,F)}return K.set("cache-control","no-store"),new Response(W.body,{status:200,headers:K})}),Q}var g88=D(()=>{X8();Gz();m61();Gj()});function h88($){let Z=new QO($.db,new sJ($.encryptionKey));async function Q(Y,J){let G=mi$(J);if(!G)return;let W=await Z.getByWebhookSecret(Y);if(!W?.enabled)return;let K=await HW($.db,W.organizationId);if(!K)return;if(await sM0(K,W,G)==="started")console.log(`[jira-webhook] started a run for ${G.issueKey} entering "${G.toStatus}"`)}let X=new X1;return X.post("/webhook/:secret",H9({maxSize:Qg6}),async(Y)=>{let J=Y.req.param("secret");if(!await Z.getByWebhookSecret(J))return Y.json({error:"Unknown webhook"},404);let W;try{W=await Y.req.json()}catch{return Y.json({error:"Body must be JSON"},400)}return Q(J,W).catch((K)=>{console.error("[jira-webhook] trigger failed",K)}),Y.body(null,202)}),X}var Qg6=1048576;var u88=D(()=>{X8();FH();Gz();eM0();zx()});import{DBOS as Nk0,SchedulerMode as Xg6}from"@dbos-inc/dbos-sdk";function c88($){YF1=$}function d88(){if(!YF1)throw Error("[jira-trigger] runtime not initialized \u2014 setJiraTriggerSweepRuntime() must run before the workflow fires");return YF1}function m88(){let $=d88();return new QO($.db,new sJ($.encryptionKey))}async function Gg6($,Z){try{let Q=await m88().getById($);if(!Q?.enabled||!Q.boardId)return{integrationId:$,started:0};let X=await HW(d88().db,Q.organizationId);if(!X)return{integrationId:$,started:0};if((await X.storage.jiraIntegrations.listAutomations(Q.organizationId)).length===0)return{integrationId:$,started:0};let J=new wY(Q.siteUrl,Q.email,Q.apiToken),W=`(${await J.getBoardScopeJql(Q.boardId)}) AND status CHANGED AFTER "-${l88}m"`,K=0,H;for(let F=0;F<Jg6;F++){let U=await J.searchIssues({jql:W,nextPageToken:H,expandChangelog:!0});for(let N of U.issues){let B=ii$(N,N.changelog?.histories??[],Z);for(let O of B)if(await sM0(X,Q,O)==="started")K++}if(H=U.nextPageToken??void 0,!H)break}return{integrationId:$,started:K}}catch(Q){return{integrationId:$,started:0,error:Q instanceof Error?Q.message:String(Q)}}}async function Wg6($,Z){let Q=new Date($.getTime()-l88*60000),X=await Nk0.runStep(()=>m88().listEnabledIds(),{name:"loadJiraIntegrations"});if(X.length===0)return;let Y=await Promise.all(X.map((J)=>Nk0.runStep(()=>Gg6(J,Q),{name:`sweepJira:${J}`})));for(let J of Y)if(J.error)console.warn(`[jira-trigger] integration ${J.integrationId} failed: ${J.error}`);else if(J.started>0)console.log(`[jira-trigger] integration ${J.integrationId} started ${J.started} run(s) the webhook missed`)}function i88(){if(XF1)return;XF1=Nk0.registerWorkflow(Wg6,{name:"jiraTriggerSweepWorkflow"}),Nk0.registerScheduled(XF1,{name:"jiraTriggerSweepWorkflow",crontab:Yg6,mode:Xg6.ExactlyOncePerIntervalWhenActive})}var Yg6="7-59/10 * * * *",l88=15,Jg6=5,YF1=null,XF1=null;var p88=D(()=>{Gz();zx();Gj();eM0()});function n88($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var t88,Kg6,Hg6,o88;var r88=D(()=>{X8();UK();sc();Ml();t88=new X1,Kg6=["range","if-none-match","if-modified-since"],Hg6=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];t88.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),Q=Z.organization?.id;if(!Z.auth?.user?.id){if(Em($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new A$(401,{message:"Authentication required"})}if(!Q)throw new A$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new A$(400,{message:"Missing file key"});let Y=await m00(X,Z);if(!Y)throw new A$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&p3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new A$(500,{message:"Invalid data URL from storage"});let[,H,F]=K,U=Buffer.from(F,"base64"),N=new Headers({"Content-Type":H,"Cache-Control":"private, max-age=86400"});return n88(N,H),new Response(U,{status:200,headers:N})}let J=new Headers;for(let K of Kg6){let H=$.req.header(K);if(H)J.set(K,H)}let G=await fetch(Y,{headers:J});if(G.status===403||G.status===404)throw new A$(404,{message:"File not found"});if(!G.ok&&G.status!==304&&G.status!==416)throw console.error(`[files] upstream storage error ${G.status} for key:`,X),new A$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of Hg6){let H=G.headers.get(K);if(H)W.set(K,H)}return W.set("Cache-Control","private, max-age=86400"),n88(W,W.get("content-type")??""),new Response(G.body,{status:G.status,headers:W})});o88=t88});var k80=b((gf)=>{var Fg6=gf&&gf.__createBinding||(Object.create?function($,Z,Q,X){if(X===void 0)X=Q;var Y=Object.getOwnPropertyDescriptor(Z,Q);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[Q]}};Object.defineProperty($,X,Y)}:function($,Z,Q,X){if(X===void 0)X=Q;$[X]=Z[Q]}),Ug6=gf&&gf.__exportStar||function($,Z){for(var Q in $)if(Q!=="default"&&!Object.prototype.hasOwnProperty.call(Z,Q))Fg6(Z,$,Q)};Object.defineProperty(gf,"__esModule",{value:!0});Ug6(cJ(),gf)});var e88=b((a88)=>{Object.defineProperty(a88,"__esModule",{value:!0});a88.version=void 0;a88.version="3.4.0"});var Q48=b((kU)=>{var Ng6=kU&&kU.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(kU,"__esModule",{value:!0});kU.NodeTransport=kU.VERSION=void 0;kU.nodeResolveHost=jg6;var g5=k80(),Bg6=q0("net"),JF1=q0("tls"),Og6=q0("path"),$48=q0("fs"),Dg6=Ng6(q0("dns")),Lg6=e88();kU.VERSION=Lg6.version;var wg6="nats.js";class Z48{socket;version;lang;yields=[];signal=(0,g5.deferred)();closedNotification=(0,g5.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=wg6,this.version=kU.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:Q}=this.options,{handshakeFirst:X}=Q||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,g5.checkOptions)(Y,Z);let{tls_required:J,tls_available:G}=Y,W=G===!0&&Z.tls!==null;if(!X&&(J||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(J&&this.socket.encrypted!==!0)throw g5.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let J=Y;if(!J)J=new g5.errors.ConnectionError("error connecting - node provided an undefined error");let{code:G}=J,W=G==="ECONNREFUSED"?new g5.errors.ConnectionError("connection refused",{cause:J}):J;throw this.socket?.destroy(),W}}dial($){let Z=(0,g5.deferred)(),Q,X=(0,Bg6.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{Q=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(Q)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,g5.deferred)(),Z;return this.socket.on("data",(Q)=>{this.yields.push(Q);let X=g5.DataBuffer.concat(...this.yields),Y=(0,g5.extractProtocolMessage)(X);if(Y!=="")try{let J=g5.INFO.exec(Y);if(!J)throw Error("unexpected response from server");let G=JSON.parse(J[1]);$.resolve(G)}catch(J){$.reject(J)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(Q)=>{Z=Q}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,g5.deferred)();try{if($=(0,Og6.resolve)($),!(0,$48.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,$48.readFile)($,(Q,X)=>{if(Q)return Z.reject(Q);Z.resolve(X)})}catch(Q){Z.reject(Q)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:Q,caFile:X,ca:Y,keyFile:J,key:G}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(Q)$.cert=Q;if(J){let W=await this.loadFile(J);if(W)$.key=W}else if(G)$.key=G;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,Q={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)Q.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};Q=(0,g5.extend)(Q,this.options.tls,Y)}catch(Y){return Promise.reject(new g5.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,g5.deferred)();try{let Y=(0,JF1.connect)($.port,$.hostname,Q,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(J)=>{Z=J}),Y.on("secureConnect",()=>{if(Q.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new g5.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,g5.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new g5.errors.ConnectionError(X.message,{cause:X}))}let Q=(0,g5.deferred)();try{let X=(0,JF1.connect)(Z,()=>{X.removeAllListeners(),Q.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{Q.reject($),X.removeAllListeners()})}catch(X){Q.reject(new g5.errors.ConnectionError(X.message,{cause:X}))}return Q}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,g5.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,g5.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof JF1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,g5.render)($)}`);let Z=(0,g5.deferred)();try{this.socket.write($,(Q)=>{if(Q){if(this.options.debug)console.error(`!!! ${(0,g5.render)($)}: ${Q}`);return Z.reject(Q)}return Z.resolve()})}catch(Q){if(this.options.debug)console.error(`!!! ${(0,g5.render)($)}: ${Q}`);Z.reject(Q)}return Z}send($){this._send($).catch((Q)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(Q){if(this.options.debug)console.log("transport close terminated with an error",Q)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(Q){console.log(Q)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}kU.NodeTransport=Z48;function jg6($){let Z=(0,g5.deferred)();return Dg6.default.lookup($,{all:!0},(Q,X)=>{if(Q){Z.reject(Q);return}let Y=[];for(let J of X)Y.push(J.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var W48=b((G48)=>{Object.defineProperty(G48,"__esModule",{value:!0});G48.connect=Eg6;var X48=Q48(),Y48=k80(),J48=k80();function Eg6($={}){if((0,J48.hasWsProtocol)($))return Promise.reject(J48.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,Y48.setTransportFactory)({factory:()=>{return new X48.NodeTransport},dnsResolveFn:X48.nodeResolveHost}),Y48.NatsConnectionImpl.connect($)}});var K48=b((DO)=>{var Pg6=DO&&DO.__createBinding||(Object.create?function($,Z,Q,X){if(X===void 0)X=Q;var Y=Object.getOwnPropertyDescriptor(Z,Q);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[Q]}};Object.defineProperty($,X,Y)}:function($,Z,Q,X){if(X===void 0)X=Q;$[X]=Z[Q]}),Ag6=DO&&DO.__exportStar||function($,Z){for(var Q in $)if(Q!=="default"&&!Object.prototype.hasOwnProperty.call(Z,Q))Pg6(Z,$,Q)};Object.defineProperty(DO,"__esModule",{value:!0});DO.connect=void 0;var Tg6=W48();Object.defineProperty(DO,"connect",{enumerable:!0,get:function(){return Tg6.connect}});Ag6(k80(),DO)});function N48($){let Z=$?.connectFn??Ig6,Q=null,X=null,Y=!1,J=!1,G=!1,W=[];function K(){return Q!==null&&!Q.isClosed()&&!Q.isDraining()&&!G}function H(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let N of W)try{N()}catch{}}function F(N){(async()=>{for await(let B of N.status())if(B.type==="disconnect")console.log("[NatsProvider] Disconnected"),G=!0;else if(B.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),G=!1,X=null,H()})().catch(()=>{})}async function U(N,B){let O=0;while(!J)try{Q=await Z({servers:N,timeout:Mg6,reconnect:!0,maxReconnectAttempts:-1,...B?{authenticator:B}:{}}),console.log(`[NatsProvider] Connected to ${Q.getServer()} after ${O} attempt(s)`),X=null,G=!1,F(Q),H();return}catch{O++;let L=a7(qg6,Rg6,O-1,2,0.5);await c$(L)}}return{init(N,B){if(Y)return;Y=!0,J=!1;let O=B?.creds?H48.credsAuthenticator(new TextEncoder().encode(B.creds)):void 0;U(N,O).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?Q:null},getJetStream(){if(!K())return null;if(!X)X=U48.jetstream(Q);return X},onReady(N){if(W.push(N),K())try{N()}catch{}},async drain(){if(J=!0,Y=!1,X=null,G=!1,Q){let N=Q;Q=null,await N.drain().catch(()=>{})}}}}function Ig6($){return F48.connect($)}var H48,F48,U48,Rg6=100,qg6=3000,Mg6=3000;var B48=D(()=>{D8();H48=C(Mi(),1),F48=C(K48(),1),U48=C(dU(),1)});function Bk0($){let Z=$?.ttlMs??60000,Q=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function J(){if(Y.size<=Q)return;let G=Date.now();for(let[W,K]of Y)if(K.expiresAt<=G)Y.delete(W);while(Y.size>Q){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(G){let W=Y.get(G);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(G);return}if(X)Y.delete(G),Y.set(G,W);return W.value},set(G,W){Y.delete(G),Y.set(G,{value:W,expiresAt:Date.now()+Z}),J()},delete(G){Y.delete(G)},clear(){Y.clear()},size(){return Y.size}}}function Ok0($,Z){return`${$}.${Z}`}class GF1{cache;constructor($){this.cache=Bk0({ttlMs:$?.ttlMs??Vg6,maxSize:$?.maxSize??kg6})}async get($,Z){return this.cache.get(Ok0($,Z))??null}async set($,Z,Q){this.cache.set(Ok0($,Z),Q)}async invalidate($,Z){this.cache.delete(Ok0($,Z)),this.cache.delete(Ok0($,`${Z}:decisions`))}teardown(){this.cache.clear()}}var Vg6=600000,kg6=5000;var O48=()=>{};function Dk0($,Z){return`${$}:${Z}`}function WF1($){let Z=Bk0({ttlMs:$?.ttlMs??Sg6,maxSize:$?.maxSize??Cg6}),Q=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,J=new TextDecoder,G=null;function W(K,H){let F=Q?.();if(!F)return;try{F.publish(D48,Y.encode(JSON.stringify({organizationId:K,keyId:H,originId:X})))}catch(U){console.warn("[ProviderKeyCache] Publish failed (non-critical):",U)}}return{get(K,H){return Z.get(Dk0(K,H))},set(K,H,F){Z.set(Dk0(K,H),F)},invalidate(K,H){Z.delete(Dk0(K,H)),W(K,H)},start(){if(G)return;let K=Q?.();if(!K)return;G=K.subscribe(D48),(async()=>{for await(let H of G)try{let F=JSON.parse(J.decode(H.data));if(F.originId===X)continue;Z.delete(Dk0(F.organizationId,F.keyId))}catch{}})().catch(console.error)},teardown(){G?.unsubscribe(),G=null,Z.clear()}}}var D48="studio.ai-provider-keys.invalidate",Sg6=30000,Cg6=5000;var L48=()=>{};class KF1{options;subscription=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.subscription)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;let Q=new TextDecoder,X=Z.subscribe("studio.decopilot.cancel");this.subscription=X,(async()=>{for await(let Y of X)try{let J=JSON.parse(Q.decode(Y.data));if(J.originId===this.originId)continue;this.onCancel?.(J.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;let Q=this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId}));Z.publish("studio.decopilot.cancel",Q)}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}async stop(){this.subscription?.unsubscribe(),this.subscription=null,this.onCancel=null}}var w48=($)=>{let Z;return()=>Z??=$()},HF1,FF1;var j48=D(()=>{R6();HF1=w48(()=>z$.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),FF1=w48(()=>z$.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function gg6($=P48){return{name:YU,subjects:[`${c91}.>`],storage:BH.StorageType.File,max_age:bg6,max_bytes:fg6,max_msgs_per_subject:yg6,discard:BH.DiscardPolicy.Old,retention:BH.RetentionPolicy.Limits,duplicate_window:xg6,num_replicas:$}}class A48{chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function E48($){let Z=z48.headers();for(let[Q,X]of Object.entries($))Z.set(Q,X);return Z}function cg6($,Z){let Q=0;return{publish(X,Y,J,G){X.publish(Y,J,G?{headers:G}:void 0).catch((W)=>{if(Q++,vg6().add(1,{"org.id":Z??"unknown"}),Q===1||Q%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${Q} total):`,W)})},get errorCount(){return Q}}}function dg6($,Z){return $.info?.cluster?Z:1}function mg6($){if(!($ instanceof Error))return!1;if(/non-clustered/i.test($.message))return!0;return/replicas?\b/i.test($.message)&&/not supported|can ?not|exceed|insufficient|greater than/i.test($.message)}class UF1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=async(X,Y)=>{let J=gg6(Y);try{await X.streams.info(YU),await X.streams.update(YU,J)}catch(G){if(G instanceof Error&&G.message.includes("stream not found"))await X.streams.add(J),await X.streams.update(YU,J);else if(G instanceof Error&&/can ?not change.*storage|storage type/i.test(G.message))await X.streams.delete(YU),await X.streams.add(J);else throw G}},Q=await c8(async()=>{let X=this.options.getJetStreamManager?await this.options.getJetStreamManager():await BH.jetstreamManager($),Y=dg6($,P48);try{await Z(X,Y)}catch(J){if(Y<=1||!mg6(J))throw J;console.warn(`[Decopilot] StreamBuffer: NATS rejected num_replicas=${Y} (${J.message}); falling back to an unreplicated stream`),await Z(X,1)}return X},{maxAttempts:5,minTimeout:250,maxTimeout:4000,jitter:0.5,isRetriable:Wd});this.js=this.options.getJetStream(),this.jsm=Q,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,Q,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let J=cg6(Z,X),G=!1,W=()=>{if(G)return;G=!0;let H=sk$(Z);Y.publish(H.subject,H.data).catch(()=>{})};Q.addEventListener("abort",W,{once:!0});let K=(H)=>{let F=performance.now(),U=m91(H,{runId:Z}),N=performance.now()-F;HF1().record(N),FF1().add(1,{"org.id":X??"unknown"}),lg6?.record(N,U.reduce((B,O)=>B+O.data.length,0));for(let B of U)J.publish(Y,B.subject,B.data,B.headers?E48(B.headers):void 0)};return(async()=>{let H=$.getReader(),F=0,U=0,N;try{while(!0){let{done:B,value:O}=await H.read();if(B)break;if(K(O),U++,++F>=64)F=0,await new Promise((L)=>setImmediate(L))}}catch(B){N=B,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,B?.message??B)}finally{if(H.releaseLock(),W(),ug6)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:U,publishErrors:J.errorCount}))}if(N!==void 0)throw N})()}async publishSerialized($,Z){try{return await c8(()=>$.publish(Z.subject,Z.data,{...Z.headers?{headers:E48(Z.headers)}:{},...Z.msgId?{msgID:Z.msgId}:{}}),{maxAttempts:6,minTimeout:250,maxTimeout:5000,jitter:0.5,isRetriable:Wd}),!0}catch(Q){return console.error(`[Decopilot] publish failed after retries subject=${Z.subject}`,Q),!1}}async publishRawChunk($,Z,Q){let X=this.js;if(!X)return!1;let Y=performance.now(),J=m91(Z,{runId:$,dedup:Q});HF1().record(performance.now()-Y),FF1().add(1);for(let G of J)if(!await this.publishSerialized(X,G))return!1;return!0}async publishDone($,Z,Q){let X=this.js;if(!X)return!1;let Y=ak$({runId:$,fenceToken:Z,finalSeq:Q});return await this.publishSerialized(X,Y)}async createTailStream($,Z,Q){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=Q?.deliverPolicy==="new"?BH.DeliverPolicy.New:BH.DeliverPolicy.All,J=Q?.closeOnDone??!1,G=Oj($),W;try{W=await c8(async()=>{return(await X.consumers.get(YU,{filter_subjects:G,deliver_policy:Y})).consume()},{maxAttempts:6,minTimeout:250,maxTimeout:5000,jitter:0.5,isRetriable:Wd})}catch(L){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",L?.message??L),null}let F=T20({messages:async function*(){try{for await(let L of W)yield{subject:L.subject,data:L.data,headers:L.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(E20()).pipeThrough(z20()).getReader(),U=!1,N=()=>{if(U)return;U=!0;try{F.releaseLock()}catch{}},B=!1,O=()=>{if(B)return;B=!0,W.stop(),F.cancel().catch(()=>{}),N()};return Z?.addEventListener("abort",O,{once:!0}),new ReadableStream({async pull(L){for(;;){let{done:w,value:j}=await F.read();if(w){O(),L.close();return}let E=j;if(E.kind==="done"){if(J){O(),L.close();return}continue}L.enqueue(E.chunk);return}},cancel(){O()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(YU,{filter:Oj($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var BH,z48,_g6=($)=>{let Z;return()=>Z??=$()},vg6,bg6=86400000000000,xg6=120000000000,fg6=4294967296,P48,yg6=500000,hg6,ug6,lg6;var T48=D(()=>{D8();i91();R20();P20();R6();j48();BH=C(dU(),1),z48=C(Mi(),1),vg6=_g6(()=>z$.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"})),P48=Math.max(1,Number(process.env.DECOPILOT_STREAM_REPLICAS??3)||3);hg6=process.env.STREAM_ENCODE_TRACE==="1",ug6=process.env.DECOPILOT_STREAM_TRACE==="1";lg6=hg6?new A48:null});function Lk0($,Z,Q,X){if(!X)return!1;return $.emit(Z,bH(Q,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,harnessId:X.harness_id??void 0,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var R48=D(()=>{r8()});class NF1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}function ig6($,Z){let Q=$.startsWith("thread:")?mK($):$;return[...new Set([Z,Q].filter((X)=>!!X))]}async function q48($,Z){let Q=Z.organizationId;try{let X=await $.storage.taskBoard.linkedThreadIds(Z.id,Q);for(let Y of X){let J=await tF($,Y);if(!J?.owner||!J?.name)continue;let G=await $.storage.threads.get(Y),W=await Bc($,{threadId:Y,runBranch:G?.branch}),K=ig6(W,await cP0($,Y)),H=await is($,Q,N11(J)).catch(()=>null);if(!H){console.warn(`[task-board] no credential for ${J.owner}/${J.name} \u2014 `+`cannot look up ${Z.id}'s change request by branch`);continue}for(let F of K){let U=await H.readForBranch(F).catch(()=>null);if(!U)continue;return await $.storage.taskBoard.linkPr({taskBoardItemId:Z.id,organizationId:Q,url:U.url,prNumber:U.number,repo:H.repo}),await $.storage.taskBoard.openReviewCycleIfInProgress(Z.id,Q),await gG(Q).catch(()=>{}),console.log(`[task-board] ${Z.id}: linked ${U.url} found on branch ${F}`),!0}}}catch(X){console.error("[task-board] PR lookup by branch failed",X)}return!1}var M48=D(()=>{hZ();JW();L7()});async function I48($,Z,Q){let X=Z.organizationId;if(!PJ(Z))return!1;if(!Px(Q))return!1;if(await $.storage.taskBoard.hasHumanRejectedDone(Z.id,X))return!1;let Y=await $.storage.organizationSettings.get(X),J=xF(Y?.flags),G=await $.storage.taskBoard.update(Z.id,X,{status:J},Z.updatedBy);return await c6($,{taskBoardItemId:Z.id,action:"status_changed",actorId:null,data:{from:Z.status,to:J,reason:"pr_merged"}}),L8(X,G),console.log(`[task-board-review-sweeper] ${Z.id}: linked PR already merged \u2014 moved to ${J}`),!0}var V48=D(()=>{V4();EX();ic();oK();R9()});function sg6($){return $ instanceof KY}function eg6($,Z){return Z-$>=rg6}class BF1{taskBoard;contextFactory;billing;options;timer=null;running=!1;cursor=null;constructor($,Z,Q,X={}){this.taskBoard=$;this.contextFactory=Z;this.billing=Q;this.options=X}start(){if(this.timer)return;let $=this.options.intervalMs??pg6;this.timer=setInterval(()=>{this.runOnce()},$),this.timer.unref()}async runOnce(){if(this.running)return 0;this.running=!0;let $=0;try{let Z=this.options.batchSize??tg6,Q=this.options.itemIntervalMs??ng6,X=new Date(Date.now()-Q),Y=await this.taskBoard.listItemsPendingReview(Z,this.cursor,X),J=Y.at(-1);this.cursor=Y.length===Z&&J?{updatedAt:J.updatedAt,id:J.id}:null;for(let{id:G,organizationId:W}of Y)try{if(await this.reconcileItem(G,W,X))$++}catch(K){console.error(`[task-board-review-sweeper] ${G} failed`,K)}await this.reapNeverStartedThreads(Z),$+=await this.dispatchDueRetries(Z),await this.reactToUnhandledFailures(Z)}catch(Z){console.error("[task-board-review-sweeper] sweep failed",Z)}finally{this.running=!1}return $}async reapNeverStartedThreads($){try{let Z=await this.taskBoard.failNeverStartedLinkedThreads($,new Date(Date.now()-g61),a51);for(let Q of Z)console.warn(`[task-board-review-sweeper] failed never-started thread ${Q.threadId} on ${Q.itemId}`)}catch(Z){console.error("[task-board-review-sweeper] reaping failed",Z)}}async reactToUnhandledFailures($){let Z=await this.taskBoard.listItemsStuckAfterFailure($,new Date(Date.now()-ag6));for(let{id:Q,organizationId:X,threadId:Y}of Z)try{console.warn(`[task-board-review-sweeper] reacting to an unhandled failure on ${Q}`),await t51(this.taskBoard,Y,X),await o51(this.taskBoard,this.billing,Y,X)}catch(J){console.error(`[task-board-review-sweeper] unhandled-failure reaction for ${Q} failed`,J)}}async dispatchDueRetries($){let Z=0,Q=await this.taskBoard.listItemsDueForRetry($,new Date);for(let{id:X,organizationId:Y,attempts:J}of Q)try{if(!await this.taskBoard.claimDueRetry(X,Y,new Date))continue;let G=await this.taskBoard.getById(X,Y);if(!G||G.status!==x$.progress||G.assigneeId!==P8)continue;let W=await this.contextFactory(Y,G.assignedBy??G.createdBy);if(!W)continue;await rK(W,G,{runClass:"retry"}),Z++,console.warn(`[task-board-review-sweeper] re-dispatched ${X} after a failure (attempt ${J})`)}catch(G){if(console.error(`[task-board-review-sweeper] retry dispatch for ${X} failed`,G),sg6(G)){await this.returnToTodo(X,Y,G instanceof Error?G.message:String(G));continue}await this.taskBoard.scheduleRunRetry(X,Y,J,new Date(Date.now()+og6)).catch((W)=>console.error(`[task-board-review-sweeper] re-arming ${X} failed`,W))}return Z}async returnToTodo($,Z,Q){try{let X=await this.taskBoard.getById($,Z);if(!X||X.status!==x$.progress)return;let Y=await this.taskBoard.returnToTodoAfterFailure($,Z,X.updatedBy);if(!Y)return;await this.taskBoard.recordActivity({taskBoardItemId:$,action:"status_changed",actorId:null,data:{from:"in_progress",to:"todo",reason:Q}}).catch(()=>{}),L8(Z,Y)}catch(X){console.error(`[task-board-review-sweeper] returning ${$} to todo failed`,X)}}async handOffReviewWithoutPr($,Z){let Q=await this.taskBoard.listActivity(Z.id,Z.organizationId);if(!eg6(NB(Q,Z.reviewCycleStartedAt),Date.now()))return;await ZU($,Z,"no pull request is linked to this task \u2014 there is nothing for a "+"reviewer to review")}async reconcileItem($,Z,Q){if(!await this.taskBoard.claimSweep($,Z,Q))return!1;let X=await this.taskBoard.getById($,Z);if(!X)return!1;if(!PJ(X))return!1;let Y=X.assigneeId===P8,J=await this.taskBoard.listPrs($,Z),G=await this.contextFactory(Z,X.assignedBy??X.createdBy);if(!G)return!1;if(J.length===0){if(await q48(G,X))J=await this.taskBoard.listPrs($,Z);if(J.length===0){if(Y)await this.handOffReviewWithoutPr(G,X);return!1}}let W=await Promise.all(J.map(async(K)=>({...K,...await tc(Z,K)})));if(W.every((K)=>K.state===null))console.warn(`[task-board-review-sweeper] ${$}: no live PR state from GitHub (${W.length} PR(s)) \u2014 proceeding on unknown`);if(await I48(G,X,W))return!0;if(await ZC$(G,X))return!0;if(await this.resolveConflictFromSweep(G,X,W))return!0;if(!Y)return!1;if(!m51(W))return!1;return await pc(G,X,{previewMatchesHead:i51(W)}),!0}async resolveConflictFromSweep($,Z,Q){let X=Q.find((Y)=>Y.state!=="closed"&&Y.conflict===!0);if(!X)return!1;return await Fj($,Z.organizationId,Z,{pr:{number:X.number,url:X.url},conflict:!0}).catch((Y)=>{return console.error("[task-board-review-sweeper] conflict resolve failed",Y),!1})}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}var pg6=60000,ng6=300000,tg6=50,og6=60000,rg6=900000,ag6=120000;var k48=D(()=>{V4();fT0();M48();QU();Z10();oK();V48();R9();s3();s51();L7();I00();nc()});import{readdir as $h6,rm as wk0}from"fs/promises";import{join as jk0}from"path";async function Ek0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-Zh6),Z.setUTCHours(0,0,0,0);let Q=0;try{let X=await hf($);for(let Y of X)if(/^\d{4}$/.test(Y))Q+=await S48($,Y,Z);else if(!Y.startsWith(".")){let J=jk0($,Y),G=await hf(J);for(let K of G){if(!/^\d{4}$/.test(K))continue;Q+=await S48(J,K,Z)}if((await hf(J)).length===0)await wk0(J,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return Q}async function S48($,Z,Q){let X=0,Y=jk0($,Z),J=await hf(Y);for(let W of J){if(!/^\d{2}$/.test(W))continue;let K=jk0(Y,W),H=await hf(K);for(let U of H){if(!/^\d{2}$/.test(U))continue;let N=new Date(`${Z}-${W}-${U}T00:00:00Z`);if(isNaN(N.getTime()))continue;if(N<Q){let B=jk0(K,U);await wk0(B,{recursive:!0,force:!0}),X++}}if((await hf(K)).length===0)await wk0(K,{recursive:!0,force:!0})}if((await hf(Y)).length===0)await wk0(Y,{recursive:!0,force:!0});return X}async function hf($){try{return(await $h6($)).filter((Q)=>!Q.startsWith("."))}catch{return[]}}var Zh6=30;var OF1=()=>{};import{DBOS as DF1,SchedulerMode as Qh6}from"@dbos-inc/dbos-sdk";async function Yh6(){let $=[VW(),of(),fU()],Z=0;for(let Q of $)try{Z+=await Ek0(Q)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function Jh6($,Z){await DF1.runStep(()=>Yh6(),{name:"monitoringRetention"})}function _48(){if(C48)return;C48=!0;let $=DF1.registerWorkflow(Jh6,{name:"monitoringRetentionWorkflow"});DF1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:Xh6,mode:Qh6.ExactlyOncePerIntervalWhenActive})}var Xh6="23 4 * * *",C48=!1;var v48=D(()=>{Z3();OF1()});function b48($){return async(Z,Q)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",Q).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${Q} not found in org ${Z} \u2014 returning null`),null;let Y=await IQ.create();Y.auth.user={id:Q,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let J=await ZA($.db,Z,X.role);return Y.boundAuth=ZW1({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:J,userId:Q}),Y.access=new uz(Q,void 0,Y.boundAuth,X.role,"self"),Hj(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var x48=D(()=>{ZK();_F()});function Gh6(){return[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}]}function Wh6(){return{services:Gh6(),migrationsStatus:"pending",serverUrl:null,logs:[]}}function Hh6(){for(let $ of Kh6)$()}function f48($){let Z=[...LF1.logs,$];LF1={...LF1,logs:Z.length>500?Z.slice(-500):Z},Hh6()}function wF1(){return Fh6}var LF1,Kh6,Fh6=!1;var jF1=D(()=>{LF1=Wh6(),Kh6=new Set});import{EventEmitter as Uh6}from"events";var EF1;var y48=D(()=>{jF1();EF1=new Uh6;EF1.on("request",($)=>{f48($)})});function g48(){return async($,Z)=>{let Q=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let J="",G=!1;if(Y.startsWith("/mcp")&&X==="POST"){G=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let N=await $.req.raw.clone().json();if(N.method==="tools/call"&&N.params?.name){let B=am(N.params.name),O=N.params.arguments||{},L=Object.keys(O).map((j)=>am(j)),w=L.length>0?L.slice(0,3).join(",")+(L.length>3?"\u2026":""):"";J=`${o5.tool}${B}${o5.dim}(${w})${o5.reset}`}else if(N.method)J=`${o5.dim}${am(N.method)}${o5.reset}`}}catch{}}let W=am(Y);if(Y.startsWith("/mcp/conn_")){let F=Y.split("/")[2]??"";W=`/mcp/${o5.mcp}${am(F.slice(0,12))}\u2026${o5.reset}`}else if(Y==="/mcp")W=`${o5.mcp}/mcp${o5.reset}`;else if(Y==="/mcp/registry")W=`${o5.mcp}/mcp/registry${o5.reset}`;let K=Bh6(X),H=G?"\u25C0":"\u2190";if(!wF1())console.log(`${o5.dim}${H}${o5.reset} ${K}${X}${o5.reset} ${W}${J?` ${J}`:""}`);try{await Z()}finally{let F=Date.now()-Q,U=$.res.status,N=Nh6(U),B=F<1000?`${F}ms`:`${(F/1000).toFixed(1)}s`,O=G?"\u25B6":"\u2192";if(!wF1())console.log(`${o5.dim}${O}${o5.reset} ${K}${X}${o5.reset} ${W}${J?` ${J}`:""} ${N}${U}${o5.reset} ${o5.duration}${B}${o5.reset}`);EF1.emit("request",{method:X,path:am(Y),status:U,duration:F,timestamp:new Date})}}}var o5,Nh6=($)=>{if($>=500)return o5.serverError;if($>=400)return o5.clientError;if($>=300)return o5.redirect;return o5.ok},Bh6=($)=>{return o5[$]||o5.reset},am=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var h48=D(()=>{jF1();y48();o5={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as d48}from"crypto";import{mkdir as Oh6,readdir as Dh6,rm as u48,stat as m48}from"fs/promises";import{join as PF1,relative as Lh6}from"path";import{z as t$}from"zod";function p48($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return PF1(wh6,Z)}function n48($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function zF1($,Z){let Q=p48($),X=n48(Z);return PF1(Q,X)}function jh6($,Z,Q,X){let Y=E0().encryptionKey||"dev-secret",J=`${$}:${Z}:${Q}:${X}`;return d48("sha256",Y).update(J).digest("hex")}function c48($,Z,Q,X,Y){let J=Math.floor(Date.now()/1000)+X,G=jh6(Z,Q,J,Y),W=new URL(`/api/dev-assets/${Z}/${n48(Q)}`,$);return W.searchParams.set("expires",J.toString()),W.searchParams.set("signature",G),W.searchParams.set("method",Y),W.toString()}function t48($,Z,Q){let X=`${$}:${Z.getTime()}:${Q}`;return`"${d48("md5","etag").update(X).digest("hex")}"`}async function o48($,Z,Q,X,Y){try{let J=await Dh6($,{withFileTypes:!0});for(let G of J){let W=PF1($,G.name),H=Lh6(Z,W).replace(/\\/g,"/");if(Q&&!H.startsWith(Q))continue;if(G.isDirectory())if(X){let F=H+"/";if(!Q||F.startsWith(Q)){if(!(Q?H.slice(Q.length):H).includes("/"))Y.commonPrefixes.add(F)}}else await o48(W,Z,Q,X,Y);else if(G.isFile()){if(X&&Q){let F=H.slice(Q.length);if(F.includes(X)){let U=F.indexOf(X),N=Q+F.slice(0,U+1);Y.commonPrefixes.add(N);continue}}try{let F=await m48(W);Y.objects.push({key:H,size:F.size,lastModified:F.mtime.toISOString(),etag:t48(W,F.mtime,F.size)})}catch{}}}}catch{}}function r48($,Z){let X=K0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:t$.object({prefix:t$.string().optional(),maxKeys:t$.number().optional().default(1000),continuationToken:t$.string().optional(),delimiter:t$.string().optional()}),outputSchema:t$.object({objects:t$.array(t$.object({key:t$.string(),size:t$.number(),lastModified:t$.string(),etag:t$.string()})),nextContinuationToken:t$.string().optional(),isTruncated:t$.boolean(),commonPrefixes:t$.array(t$.string()).optional()}),handler:async(Y)=>{let J=Y,G=J.prefix||"",W=J.maxKeys??1000,K=J.delimiter,H=J.continuationToken,F=p48(X);await Oh6(F,{recursive:!0});let U={objects:[],commonPrefixes:new Set};await o48(F,F,G,K,U),U.objects.sort((w,j)=>w.key.localeCompare(j.key));let N=0;if(H){if(N=U.objects.findIndex((w)=>w.key>H),N===-1)N=U.objects.length}let B=U.objects.slice(N,N+W),O=N+W<U.objects.length,L=O?B[B.length-1]?.key:void 0;return{objects:B,isTruncated:O,nextContinuationToken:L,commonPrefixes:Array.from(U.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:t$.object({key:t$.string()}),outputSchema:t$.object({contentType:t$.string().optional(),contentLength:t$.number(),lastModified:t$.string(),etag:t$.string(),metadata:t$.record(t$.string(),t$.string()).optional()}),handler:async(Y)=>{let J=Y,G=zF1(X,J.key),W=await m48(G);return{contentType:sW1(J.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:t48(G,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:t$.object({key:t$.string(),expiresIn:t$.number().optional()}),outputSchema:t$.object({url:t$.string(),expiresIn:t$.number()}),handler:async(Y)=>{let J=Y,G=J.expiresIn??l48;return{url:c48(Z,X,J.key,G,"GET"),expiresIn:G}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:t$.object({key:t$.string(),expiresIn:t$.number().optional(),contentType:t$.string().optional()}),outputSchema:t$.object({url:t$.string(),expiresIn:t$.number()}),handler:async(Y)=>{let J=Y,G=J.expiresIn??l48;return{url:c48(Z,X,J.key,G,"PUT"),expiresIn:G}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:t$.object({key:t$.string()}),outputSchema:t$.object({success:t$.boolean(),key:t$.string()}),handler:async(Y)=>{let J=Y,G=zF1(X,J.key);try{return await u48(G),{success:!0,key:J.key}}catch{return{success:!1,key:J.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:t$.object({keys:t$.array(t$.string()).max(1000)}),outputSchema:t$.object({deleted:t$.array(t$.string()),errors:t$.array(t$.object({key:t$.string(),message:t$.string()}))}),handler:async(Y)=>{let J=Y,G=[],W=[];return await Promise.all(J.keys.map(async(K)=>{let H=zF1(X,K);try{await u48(H),G.push(K)}catch(F){W.push({key:K,message:F instanceof Error?F.message:"Unknown error"})}})),{deleted:G,errors:W}}}]}async function AF1($,Z,Q){let X=r48(Z,Q),Y=new YL({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:DZ});for(let G of X){let W="shape"in G.inputSchema?G.inputSchema.shape:t$.object({}).shape,K=G.outputSchema&&"shape"in G.outputSchema?G.outputSchema.shape:t$.object({}).shape;Y.registerTool(G.name,{description:G.description??"",inputSchema:W,outputSchema:K,annotations:G.annotations,_meta:G._meta},async(H)=>{try{let F=await G.handler(H);return{content:[{type:"text",text:JSON.stringify(F)}],structuredContent:F}}catch(F){return{content:[{type:"text",text:`Error: ${F.message}`}],isError:!0}}})}let J=new dG({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(J),DW(Y,J,$,"mcp:dev-assets")}async function a48($,Z,Q,X){let J=r48(Q,X).find((G)=>G.name===$);if(!J)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let G=await J.handler(Z);return{content:[{type:"text",text:JSON.stringify(G)}]}}catch(G){return{content:[{type:"text",text:G instanceof Error?G.message:String(G)}],isError:!0}}}var wh6="./data/assets",l48=3600,i48,s48;var e48=D(()=>{U$();Od();X8();NX0();Bd();uY();HV0();i48=new X1;i48.all("/",async($)=>{let Z=$.get("studioContext"),Q=new URL($.req.url),X=`${Q.protocol}//${Q.host}`;return AF1($.req.raw,Z,X)});s48=i48});var $68={};E6($68,{mountDevRoutes:()=>Eh6});function Eh6($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),J=new URL(X.req.url),G=`${J.protocol}//${J.host}`;return AF1(X.req.raw,Y,G)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),J=new URL(X.req.url),G=`${J.protocol}//${J.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),H=await a48(W,K,Y,G);if(H.isError)return X.json(H.content,500);return X.json(H.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",s48);let Q=new X1;Q.use("*",UH({mountPath:"/api/dev-assets"})),Q.route("/",KV0({orgFromPath:!1})),$.route("/api/dev-assets",Q)}var Z68=D(()=>{X8();iW1();HV0();e48()});var U68={};E6(U68,{watchHandler:()=>F68,resolveCorsOrigin:()=>K68,isSsoExemptPath:()=>G68,isAllowedOAuthRedirectUri:()=>H68,createApp:()=>kh6});import{readFileSync as zh6}from"fs";import{PrometheusSerializer as Ph6}from"@opentelemetry/exporter-prometheus";import{DBOS as LO}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as Rh6,oAuthProtectedResourceMetadata as qh6}from"better-auth/plugins";async function Ah6($){let Z=$.connect(),Q;try{Q=await Promise.race([Z,X68(Q68)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([Q.query("SELECT 1"),X68(Q68)]),Q.release(),!0}catch{return Q.release(!0),!1}}function X68($){return new Promise((Z,Q)=>setTimeout(()=>Q(Error("pg health-check timeout")),$))}function G68($){return $.startsWith("/api/org-sso/")||/^\/api\/[^/]+\/sso\//.test($)||$.startsWith("/api/auth/")||$.startsWith("/api/tools/management")||$.startsWith("/oauth-proxy/")||/^\/api\/[^/]+\/oauth-proxy\//.test($)||$.startsWith(`${tI0}/`)||$.startsWith(`${dI0}/`)}function W68($){return $==="local.studio.decocms.com"}function K68($,{baseUrl:Z,requestOrigin:Q}){let X;try{X=new URL($).hostname}catch{return null}if(X==="localhost"||X==="127.0.0.1")return $;if(W68(X))return $;let Y=Z??Q;try{if(new URL(Y).origin===$)return $}catch{}return null}function H68($,Z){return $.origin===new URL(Z).origin||$.hostname==="localhost"||W68($.hostname)}async function kh6($={}){let Z=$.database??I8(),Q=!1;K9.stop().catch((Z0)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",Z0)});let X,Y,J,G,W=new GF1,K,H,F,U=null;if($.disableNats)K=WF1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=null,J=null,G=new F10,H={start:async()=>{},broadcast:()=>{},stop:async()=>{}},F={init:async()=>{},pump:(Z0)=>{return(async()=>{let L0=Z0.getReader();try{while(!0){let{done:a}=await L0.read();if(a)break}}catch{}finally{L0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{U=N48();let Z0=E0().natsCredsPath,L0;if(Z0)try{L0=zh6(Z0,"utf8")}catch(f0){console.error(`[app] failed to read NATS_CREDS at ${Z0}; connecting anonymously`,f0)}U.init(E0().natsUrls,L0?{creds:L0}:void 0);let a=Ye0()?new ls0({getJetStream:()=>U.getJetStream()}):null;a?.init().catch(()=>{}),X=a;let p=new e81({getJetStream:()=>U.getJetStream()});p.init().catch(()=>{}),Y=p;let m0=new Tx(g51,{getJetStream:()=>U.getJetStream()}),I0=new Tx(V00,{getJetStream:()=>U.getJetStream()});m0.init().catch(()=>{}),I0.init().catch(()=>{}),J={reads:m0,cards:I0};let o0=new O71({getJetStream:()=>U.getJetStream()});o0.init().catch(()=>{}),G=o0,K=WF1({getConnection:()=>U.getConnection()}),H=new KF1({getConnection:()=>U.getConnection()}),F=new UF1({getConnection:()=>U.getConnection(),getJetStream:()=>U.getJetStream()}),jr$(U),U.onReady(()=>{a?.init().catch((f0)=>{console.error("[McpListCache] Deferred init failed:",f0)}),p.init().catch((f0)=>{console.error("[SkillCatalogCache] Deferred init failed:",f0)}),m0.init().catch((f0)=>{console.error("[PrReadCache] Deferred init failed:",f0)}),I0.init().catch((f0)=>{console.error("[PrCardCache] Deferred init failed:",f0)}),o0.init().catch((f0)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",f0)}),K.start(),qW$(()=>U.getConnection()),F.init().catch((f0)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",f0)})})}if(tj)await tj();cs0(X),Z41(Y),h51(J),D71(G);let B={storage:new xg(Z.db),sseHub:K9,onThreadFinished:async(Z0,L0)=>rc(new yG(Z.db),Z0,L0,new XG(Z.db))},O=new a91(B),L=new k$0(Z.db),w=new NF1(L);w.start(),eS$(H),H.start((Z0)=>{K20(Z0),O.execute({type:"CANCEL",taskId:Z0}).catch((L0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",L0)})}).catch((Z0)=>{console.error("[Decopilot] CancelBroadcast start failed:",Z0)}),U?.onReady(()=>{H.start().catch((Z0)=>{console.error("[CancelBroadcast] Deferred start failed:",Z0)})});let j=()=>U?.getConnection()??null;lW1(j),U?.onReady(()=>lW1(j)),n71(j),U?.onReady(()=>n71(j)),F.init().catch((Z0)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",Z0)}),tj=async()=>{await O.stopAll(),O.dispose(),w.dispose(),H.stop().catch(()=>{}),ka$(),F.teardown(),X?.teardown(),Y?.teardown(),J?.reads.teardown(),J?.cards.teardown(),W.teardown(),K.teardown(),MW$(),G.teardown(),cs0(null),Z41(null),h51(null),D71(null)};let E=new X1;if(E.use("*",U71({enabled:(Z0)=>jm(Z0,"debug")==="1"})),E.use("*",lk0),E.use("/*",Br$({origin:(Z0,L0)=>K68(Z0,{baseUrl:E0().baseUrl,requestOrigin:new URL(L0.req.url).origin}),credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),E.use("*",async(Z0,L0)=>{if(await L0(),Z0.req.path.includes("/files/"))return;if(Z0.req.path.includes("/fs/")&&Z0.req.path.endsWith("/read"))return;Z0.header("X-Frame-Options","DENY"),Z0.header("Content-Security-Policy","frame-ancestors 'none'")}),!E0().noTui)E.use("*",g48());E.use("*",async(Z0,L0)=>{if(await L0(),Wi(Z0.req.path))return;if(Z0.res.status>=500){let p=await Z0.res.clone().text();console.error(`[5xx Response] ${Z0.req.method} ${Z0.req.path} - ${Z0.res.status}:`,p)}}),E.get(SX.HEALTH,(Z0)=>{if(Q)return Z0.json({status:"shutting_down"},503);return Z0.json({status:"ok"})}),E.get(SX.HEALTH_LIVE,(Z0)=>{return Z0.json({status:"ok"})}),E.get(SX.HEALTH_READY,async(Z0)=>{if(Q)return Z0.json({status:"shutting_down"},503);let L0={};if(L0.postgres={status:await Ah6(Z.pool)?"up":"down"},U)L0.nats=U.isConnected()?{status:"up"}:{status:"down"};else L0.nats={status:"down"};let a=L0.postgres.status==="up",p=a?200:503;return Z0.json({status:a?"ready":"not_ready",services:L0},p)}),E.get(SX.METRICS,async(Z0)=>{try{let L0=await ik0.collect(),a=Th6.serialize(L0.resourceMetrics);return Z0.text(a,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(L0){return console.error("Failed to collect metrics:",L0),Z0.text("# Error collecting metrics",500)}});let z=1800000;E.get(`${SX.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(Z0)=>{let L0=Z0.req.param("queueName");if(!Mh6.has(L0))return Z0.json({error:`Unknown queue: ${L0}`},404);let[a,p]=await Promise.all([LO.listQueuedWorkflows({queueName:L0,status:"ENQUEUED",loadInput:!1,loadOutput:!1}),LO.listQueuedWorkflows({queueName:L0,status:"PENDING",loadInput:!1,loadOutput:!1,dequeuedAfter:new Date(Date.now()-z).toISOString()})]);return Z0.json({queue_length:a.length,in_flight:p.length})}),E.route("/api/config",P88),E.route("/api/_reports",_88),E.route("/api/_stripe",QF1),E.route("/api/_github",x88({taskBoard:()=>n,contextFactory:()=>g})),E.route("/api/_git",Mm);let T={db:Z.db,encryptionKey:E0().encryptionKey};E.route("/api/_jira",h88(T)),E.route("/api/_jira",y88(T)),E.route("/report",k88($.clientDir)),E.route("/api/auth/custom",gr$),E.route("/api/auth/desktop",cr$),E.all("/api/auth/admin/*",Da$),E.all("/api/auth/*",async(Z0)=>{return await V8.handler(Z0.req.raw)});let P=it$();P.use("/.well-known/oauth-protected-resource/mcp/:connectionId",d$0),P.use("/mcp/:connectionId/.well-known/oauth-protected-resource",d$0),E.route("/",P),E.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",q$0),E.route("/",rt$()),E.use("/oauth-proxy/:connectionId/*",d$0),E.all("/oauth-proxy/:connectionId/*",Y68);let A=async(Z0)=>{let a=await Ih6()(Z0.req.raw),p=await a.json();return Response.json(p,a)};E.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",d$0),E.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",A);let q=async(Z0)=>{let a=await Vh6()(Z0.req.raw),p=await a.json();return Response.json(p,a)};E.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",q);let x=Dr$({ttlMs:120000}),_=await uo$({db:Z.db,auth:V8,encryption:{key:E0().encryptionKey},observability:{tracer:qO,meter:z$},modelListCache:W,providerKeyCache:K,memberRoleCache:x});IQ.set(_),El1({db:Z.db,baseUrl:S5()}),lo$({db:Z.db}),io$({db:Z.db}),eo$({db:Z.db}),c88({db:Z.db,encryptionKey:E0().encryptionKey}),CM$({db:Z.db}),Jr$({db:Z.db}),$I$({db:Z.db});let V=ZQ0(Z.db),y=new ht(Z.db),g=b48({db:Z.db});W71({storage:V,studioContextFactory:g}),WZ1({systemDatabaseUrl:Wt0(E0().databaseUrl,E0().databasePgSsl),studioContextFactory:g,deps:{runRegistry:O,cancelBroadcast:H,streamBuffer:F,sseHub:K9}}),$Z1({dispatchRunFn:mk$,studioContextFactory:g,deps:{runRegistry:O,cancelBroadcast:H,streamBuffer:F,sseHub:K9}});let u=new xg(Z.db),n=new yG(Z.db),i=new XG(Z.db),U0=new BF1(n,g,i);if(E0().taskBoardReviewSweeperEnabled){U0.start();let Z0=tj;tj=async()=>{await Z0?.(),U0.dispose()}}US$({getJetStream:()=>U?.getJetStream()??null,getJetStreamManager:async()=>{let Z0=U?.getConnection();return Z0?await J68.jetstreamManager(Z0):null},messageParts:u.messageParts(),resolveRun:async(Z0)=>{let L0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",Z0).executeTakeFirst();return L0?{orgId:L0.organization_id,createdBy:L0.created_by,version:L0.message_storage_version??1,status:L0.status,runFenceToken:L0.run_fence_token,title:L0.title??null}:null},completeRunIfNotCompleted:async(Z0,L0)=>{let a=await u.completeRunIfNotCompleted(Z0,L0);if(Lk0(K9,L0,Z0,a),a)await rc(n,Z0,L0,i);return a},markRunRequiresAction:async(Z0,L0)=>{let a=await u.requiresActionIfInProgress(Z0,L0);return Lk0(K9,L0,Z0,a),a},markRunFailed:async(Z0,L0,a,p)=>{let m0=await u.markRunFailed(Z0,L0,a,p);if(Lk0(K9,L0,Z0,m0),m0)await rc(n,Z0,L0,i);return m0},clearSynthesizedError:async(Z0,L0)=>{await u.messageParts().replaceMessageParts(Z0,Bj(Z0,L0),[])},persistTitle:(Z0,L0,a)=>u.update(Z0,L0,{title:a}),onTitleUpdated:async({runId:Z0,orgId:L0,title:a})=>{let p=await u.get(Z0,L0).catch(()=>null);K9.emit(L0,bH(Z0,p?.status??"in_progress",{title:a,virtualMcpId:p?.virtual_mcp_id??void 0,createdBy:p?.created_by,triggerId:p?.trigger_id,branch:p?.branch??null,harnessId:p?.harness_id??void 0,createdAt:p?.created_at,updatedAt:p?.updated_at}))},bumpProgress:async({runId:Z0,orgId:L0})=>{await u.bumpProgress(Z0,L0)},recordCompleted:async({runId:Z0,orgId:L0,distinctId:a,usage:p})=>{y1.capture({distinctId:a,event:"chat_message_completed",groups:{organization:L0},properties:{organization_id:L0,thread_id:Z0,transport:"projector",input_tokens:p.inputTokens,output_tokens:p.outputTokens,total_tokens:p.totalTokens}})},recordFailed:async({runId:Z0,orgId:L0,distinctId:a,reason:p,kind:m0})=>{y1.capture({distinctId:a,event:"chat_message_failed",groups:{organization:L0},properties:{organization_id:L0,thread_id:Z0,transport:"projector",error_category:m0,error_message:p}})},purgeRun:async(Z0)=>{F.purge(Z0)}}),Lk$({studioContextFactory:g,systemDatabaseUrl:Wt0(E0().databaseUrl,E0().databasePgSsl),streamBuffer:F}),_48(),zl1(),do$(),no$(),Zr$(),i88(),fM$(),Wr$(),ZI$();let C0=async(Z0,L0,a)=>{let p=await V.findById(Z0,L0);if(!p)throw Error("Automation not found");return F71({automationId:p.id,organizationId:p.organization_id,triggerId:null})},G0=new Rm(V,({automation:Z0,trigger:L0,contextMessages:a,idempotencyKey:p})=>H10({automationId:Z0.id,organizationId:Z0.organization_id,triggerId:L0.id,contextMessages:a},{idempotencyKey:p})),H0=[VW(),of(),fU()];for(let Z0 of H0)Ek0(Z0).then(()=>{}).catch((L0)=>console.error("[monitoring] Retention cleanup failed:",L0));let Y0=()=>V8.api.deleteAllExpiredApiKeys().catch((Z0)=>console.error("[auth] Expired API key cleanup failed:",Z0));Y0(),setInterval(Y0,86400000).unref(),E.use("*",async(Z0,L0)=>{if(hk0(Z0.req.path))return L0();let a={measure:async(m0,I0)=>{OW(Z0,m0);try{return await I0()}finally{mG(Z0,m0)}}},p=await IQ.create(Z0.req.raw,{timings:a});p.automationRunner=C0,Z0.set("studioContext",p);try{await L0()}finally{let m0=p.pendingRevalidations;if(m0.length>0)Promise.race([Promise.allSettled(m0),c$(30000)]).catch((o0)=>console.error("[studio] revalidation cleanup error:",o0))}}),E.use("/api/:org/decopilot/*",zm),E.use("/api/:org/v1/*",zm),E.use("/api/:org/files/*",zm),E.use("*",async(Z0,L0)=>{if(G68(Z0.req.path))return L0();let a=Z0.get("studioContext");if(!a?.organization?.id||!a?.auth?.user?.id)return L0();if(!(await a.storage.orgSsoConfig.getByOrgId(a.organization.id))?.enforced)return L0();if(!await a.storage.orgSsoSessions.isValid(a.auth.user.id,a.organization.id))return Z0.json({error:"SSO authentication required for this organization"},403);return L0()});let $0=new X1;$0.use("*",UH({mountPath:"/api/org-sso"})),$0.route("/",aI0()),E.route("/api/org-sso",$0),E.get("/api/tools/management",(Z0)=>{return Z0.json({tools:cm0,grouped:hz()})}),E.use("/mcp/*",async(Z0,L0)=>{OW(Z0,"mcp");try{return await L0()}finally{mG(Z0,"mcp")}});let X0=async(Z0,L0)=>{let a=Z0.var.studioContext;if(!a.auth.user?.id&&!a.auth.apiKey?.id){let p=new URL(Z0.req.url),m0=Z0.req.header("x-forwarded-proto")?.split(",")[0]?.trim(),I0=m0?`${m0}://${p.host}`:p.origin;return Z0.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${I0}${p.pathname}/.well-known/oauth-protected-resource"`}})}return await L0()};if(E.use("/mcp/:connectionId?",X0),E.use("/mcp/gateway/:virtualMcpId?",X0),E.use("/mcp/virtual-mcp/:virtualMcpId?",X0),E.use("/mcp/self",X0),p3()){let{mountDevRoutes:Z0}=(Z68(),Ik0($68));Z0(E,X0)}let e=new X1;e.use("*",UH({mountPath:"/mcp"})),e.route("/",e20()),E.route("/mcp",e);let J0=new X1;J0.use("*",UH({mountPath:"/mcp/self"})),J0.route("/",uV0()),E.route("/mcp/self",J0);let d0=new X1;d0.use("*",UH({mountPath:"/mcp"})),d0.route("/",QR0()),E.route("/mcp",d0),E.use("/api/:org/models/*",async(Z0,L0)=>{OW(Z0,"llm_models");try{return await L0()}finally{mG(Z0,"llm_models")}});let V0=Ca$({cancelBroadcast:H,streamBuffer:F,runRegistry:O});E.route("/api",V0),E.route("/api",o88);let E1=new X1;E1.use("*",UH({mountPath:"/api"})),E1.route("/",mV0()),E.route("/api",E1),E.route("/api",O88);let u0=new X1;u0.use("*",UH({mountPath:"/api"})),u0.route("/",iV0({tokenStorage:y,automationEventDispatcher:G0})),E.route("/api",u0);let w0=new lt(Z.db),j0=new X1;j0.use("*",UH({mountPath:"/api"})),j0.route("/",QV0()),E.route("/api",j0),E.route("/api/deco-sites",ia$()),E.route("/api/deco-apps",K88());let e0=new X1;e0.use("*",UH({mountPath:"/api/deco-sites"})),e0.route("/",YV0()),E.route("/api/deco-sites",e0),E.route(tI0,La$()),E.route(T18,M18()),E.route("/api/_editor-resolve",L88()),E.route(mr$,ir$()),E.route(dI0,Za$());let A1=G88({kvStorage:w0,runRegistry:O,streamBuffer:F,sseHub:K9,cancelBroadcast:H,tokenStorage:y,automationEventDispatcher:G0,mountDevAssets:p3(),mcpAuth:X0,oauthProxyHandler:Y68,watchHandler:F68,betterAuthProtectedResourceHandler:A,getNatsConnection:()=>U?.getConnection()??null});return E.route("/api/:org",A1),E.notFound((Z0)=>{return Z0.json({error:"Not Found",path:Z0.req.path},404)}),E.onError(ba$),Object.assign(E,{markShuttingDown:()=>{Q=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([K9.stop(),tj?Promise.resolve(tj()).finally(()=>{tj=null}):Promise.resolve()]),U)await U.drain().catch((Z0)=>console.error("[shutdown] NATS drain error:",Z0));console.log("[shutdown] Flushing telemetry..."),await RY().catch((Z0)=>console.error("[shutdown] Telemetry flush error:",Z0)),console.log("[shutdown] Closing database..."),await O8$(Z).catch((Z0)=>console.error("[shutdown] Database close error:",Z0)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await LO.registerQueue($3,{partitionQueue:!0,concurrency:Y71,minPollingIntervalMs:J71}),await LO.registerQueue(eG,{partitionQueue:!0,concurrency:JZ1,priorityEnabled:!0}),await LO.registerQueue(bU,{workerConcurrency:E0().decopilotMaxConcurrentHostedRuns,priorityEnabled:!0}),await LO.registerQueue(xU,{workerConcurrency:E0().sandboxMaxConcurrentHostedRuns,priorityEnabled:!0}),await LO.registerQueue(TO,{partitionQueue:!0,concurrency:Dk$}),await LO.registerQueue(ej,eM$),await pW1(V),await Promise.allSettled(["automations-gate","automations-global","jira-push"].map((Z0)=>LO.deleteQueue(Z0))),await G71(Z.pool),b5$().catch((Z0)=>{console.error("[studio-pack-backfill] failed:",Z0)}),Pl1().catch((Z0)=>{console.error("[org-fs] public-sets boot sync kick failed:",Z0)})}})}var J68,Q68=5000,tj=null,Y68=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let Q=$.req.path.split("/").filter(Boolean),X=Q[Q.length-1],Y=$.get("studioContext");if(!Y)Y=await IQ.create($.req.raw),$.set("studioContext",Y);let J=$.req.param("org")?Y.organization?.id:void 0,G=await Y.storage.connections.findById(Z,J);if(!G?.connection_url)return $.json({error:"Connection not found"},404);if(X==="register"&&G.oauth_config?.clientId){let y=await $.req.json().catch(()=>({}));return $.json({...typeof y==="object"&&y!==null?y:{},client_id:G.oauth_config.clientId,...G.oauth_config.clientSecret?{client_secret:G.oauth_config.clientSecret}:{},client_secret_expires_at:0})}let W=await Om(G.connection_url),K,H=new URL(G.connection_url),U=(typeof G.metadata?.oauthResource==="string"&&G.metadata.oauthResource.length>0?G.metadata.oauthResource:void 0)??G.connection_url;if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=H.origin;let N=await M$0(K);if(!N.ok)return $.json({error:"Failed to get auth server metadata"},502);let B=await N.json(),O;if(X==="authorize")O=B.authorization_endpoint;else if(X==="token")O=B.token_endpoint;else if(X==="register")O=B.registration_endpoint;if(!O)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let L=ot$(O);if(L)return L;let w=new URL(O),j=new URL($.req.url);if(w.search=j.search,X==="authorize"){let y=w.searchParams.get("redirect_uri");if(y){let g=E0().baseUrl??j.origin;try{if(!H68(new URL(y),g))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}w.searchParams.set("redirect_uri",y)}if(w.searchParams.has("resource"))w.searchParams.set("resource",U);if(Hr$(G.connection_url))w.searchParams.set("auto_personal","true"),w.searchParams.set("force_new","true");return $.redirect(w.toString(),302)}let E={Accept:$.req.header("Accept")||"application/json"},z=$.req.header("Content-Type");if(z)E["Content-Type"]=z;let T=$.req.header("Authorization");if(T)E.Authorization=T;let P,A=null,q=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&z?.includes("application/x-www-form-urlencoded")){if(T?.toLowerCase().startsWith("basic "))try{let i=atob(T.slice(6).trim()),U0=i.indexOf(":");if(U0!==-1){let C0=decodeURIComponent(i.slice(0,U0)),G0=decodeURIComponent(i.slice(U0+1));A=C0||null,q=G0||null}}catch{}let y=await $.req.formData();if(y.has("resource"))y.set("resource",U);let g=y.get("client_id"),u=y.get("client_secret");if(typeof g==="string"&&g)A=g;if(typeof u==="string"&&u)q=u;let n=new URLSearchParams;for(let[i,U0]of y.entries())n.append(i,U0.toString());P=n.toString()}else if(X==="register"&&z?.toLowerCase().includes("application/json")){let y=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",G.organization_id).executeTakeFirst(),g=await $.req.text(),u={};try{u=g?JSON.parse(g):{}}catch{P=g}let n=typeof u==="object"&&u!==null&&!Array.isArray(u);if(P===void 0&&!n)P=g;if(P===void 0){let i=u,U0=i.metadata&&typeof i.metadata==="object"?i.metadata:{};i.metadata={...U0,organization_id:G.organization_id,...y?.slug?{organization_slug:y.slug}:{},...y?.name?{organization_name:y.name}:{}},P=JSON.stringify(i),E["Content-Type"]="application/json"}}else P=$.req.raw.body??void 0;let x=await fetch(w.toString(),{method:$.req.method,headers:E,body:P,duplex:"half",redirect:"manual"}),_=new Headers,V=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[y,g]of x.headers.entries())if(!V.includes(y.toLowerCase()))_.set(y,g);if(X==="token"&&x.ok){let y=await x.text();try{let g=JSON.parse(y);if(typeof g.access_token==="string"&&g.access_token){let u=typeof g.expires_in==="number"?new Date(Date.now()+g.expires_in*1000):null,n=null;try{n=await Dm(G.connection_url)??O}catch{n=O}let i={connectionId:Z,accessToken:g.access_token,refreshToken:typeof g.refresh_token==="string"?g.refresh_token:null,scope:typeof g.scope==="string"?g.scope:null,expiresAt:u,clientId:A,clientSecret:q,tokenEndpoint:n};await new Y9(Y.db,Y.vault).upsert(i)}}catch(g){console.error("[oauth-proxy] failed to persist downstream token:",g)}return new Response(y,{status:x.status,statusText:x.statusText,headers:_})}return new Response(x.body,{status:x.status,statusText:x.statusText,headers:_})},F68=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),J=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,G=crypto.randomUUID();return NO($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:G,organizationId:X,typePatterns:J,connectedAt:new Date().toISOString()})}),!K9.add({id:G,organizationId:X,typePatterns:J?.length?J:null,push:(F)=>{W.writeSSE({id:F.id,event:F.type,data:JSON.stringify(F)}).catch(()=>{K9.remove(X,G)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let H=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(H)})},30000);await new Promise((F)=>{W.onAbort(()=>{clearInterval(H),K9.remove(X,G),F()})})})},Th6,Mh6,Ih6=()=>qh6(V8),Vh6=()=>Rh6(V8);var N68=D(()=>{D8();U$();Al1();mo$();to$();Qr$();D10();P51();Kr$();I00();D9();Ml();r8();X8();gI0();Or$();N71();qG();_F();wW1();S3();R6();W6();RW1();dr$();pr$();Qa$();SW1();wa$();gW1();_a$();mW1();_K();PI0();iW1();xa$();uI0();W88();oW1();H88();$R0();U10();D88();XR0();RH1();w88();AH1();A88();S88();v88();b88();f88();g88();u88();p88();$K1();r88();TH1();EH1();i80();B48();YJ();QA0();l51();Ks();Fs();w71();O48();L48();cW1();T48();s91();R48();An();dt();hB();R9();y31();k48();v48();gY0();OF1();Z3();nW1();gB();o91();gY0();j20();Sm0();Cm0();x48();fh();h48();cm();wW1();Jd();H20();J68=C(dU(),1);Th6=new Ph6,Mh6=new Set([$3,eG,bU,xU,TO,ej])});var L68={};E6(L68,{resolveClientDir:()=>fh6,resolveAssetPathWithTraversalCheck:()=>D68,isPathWithinDirectory:()=>O68,createAssetHandler:()=>yh6});import{resolve as S80,dirname as Sh6,join as Ch6,extname as _h6,basename as vh6,sep as B68}from"path";function bh6($,Z){if($===Z||vh6($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${B68}assets${B68}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function O68($,Z){let Q=S80(Z),X=S80($);return X===Q||X.startsWith(Q+"/")}function D68({requestPath:$,clientDir:Z}){let Q=$.startsWith("/")?$.slice(1):$,X=S80(Z,Q);if(!O68(X,Z))return null;return X}function fh6($,Z="../client"){let Q=new URL($),X=Sh6(Q.pathname);return S80(X,Z)}function yh6($={}){let{env:Z="production",clientDir:Q=xh6,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(J){return null};return async function(J){if(J.method!=="GET")return null;let G=new URL(J.url),W;try{W=decodeURIComponent(G.pathname)}catch{return null}if(X(W))return null;let K=D68({requestPath:W,clientDir:Q});if(!K)return null;let H=Ch6(K,"index.html"),F=S80(Q,"index.html"),U=J.headers.get("accept"),B=U?.includes("text/html")||U?.includes("*/*")&&["",".html"].includes(_h6(K))?[H,F]:[];for(let O of[K,...B])try{let L=Bun.file(O);if(await L.exists())return new Response(L,{headers:bh6(O,F)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var xh6="./dist/client";var w68=()=>{};var j68={};E6(j68,{tryUpgradePreviewWs:()=>mh6,tryHandlePreviewHttp:()=>dh6,previewWebSocketHandler:()=>ih6,parsePreviewBaseDomain:()=>ch6,isPreviewWsData:()=>zk0,extractHandleFromHost:()=>TF1});function uh6($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function lh6(){return new Response(hh6,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function ch6($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,Q;try{Q=new URL(Z)}catch{return null}let X=Q.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function TF1($,Z){if(!$||!Z)return null;let Q=$.indexOf(":"),X=(Q>=0?$.slice(0,Q):$).toLowerCase(),J=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(J))return null;let G=X.slice(0,X.length-J.length);if(!G||G.includes("."))return null;return G}async function dh6($,Z){let Q=TF1($.headers.get("host"),Z.baseDomain);if(!Q)return null;let X=await Z.getRunner();if(!X)return _80(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(Q,$);if(Y.headers.get(ab)&&uh6($))return lh6();return Y.headers.delete(ab),Y}function _80($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function zk0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function mh6($,Z,Q){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=TF1($.headers.get("host"),Q.baseDomain);if(!X)return null;let Y=await Q.getRunner();if(!Y)return _80(503,"preview proxy not configured");let J=await Y.resolvePreviewUpstreamUrl(X);if(!J)return _80(404,"sandbox not found");let G=new URL($.url);if(G.pathname.startsWith("/_sandbox"))return _80(404,"not found");let W=`${J.replace(/^http/,"ws")}${G.pathname}${G.search}`,K=$.headers.get("sec-websocket-protocol"),H=K?K.split(",").map((N)=>N.trim()).filter(Boolean):[],F={kind:"preview",upstreamUrl:W,upstreamProtocols:H,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:F}))return _80(426,"upgrade failed");return}function C80($,Z,Q,X){if(Z.closed)return;Z.closed=!0;try{$.close(Q,X)}catch{}try{Z.upstream?.close()}catch{}}var gh6=256,hh6='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',ih6;var E68=D(()=>{v81();ih6={open($){let Z=$.data;if(!zk0(Z))return;let Q;try{Q=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),C80($,Z,1011,"upstream connect failed");return}Q.binaryType="arraybuffer",Z.upstream=Q,Q.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)Q.send(X)}}),Q.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),Q.addEventListener("close",(X)=>{C80($,Z,X.code||1000,X.reason||"")}),Q.addEventListener("error",()=>{C80($,Z,1011,"upstream error")})},message($,Z){let Q=$.data;if(!zk0(Q))return;let X=Q.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(Q.pending.length>=gh6){C80($,Q,1011,"preview ws backlog overflow");return}Q.pending.push(Z)},close($){let Z=$.data;if(!zk0(Z))return;C80($,Z,1000,"")}}});var T68={};E6(T68,{printBanner:()=>nh6,bannerLines:()=>A68,BANNER_LINES:()=>z68,BANNER_GRADIENT:()=>P68});function ph6($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function A68($){let Z=z68.map((Q,X)=>{let[Y,J,G]=ph6(P68[X]);return`\x1B[38;2;${Y};${J};${G}m${Q}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function nh6($){console.log("");for(let Z of A68($))console.log(Z);console.log("")}var z68,P68;var R68=D(()=>{z68=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],P68=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});D8();var fF1="13";function yF1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:fF1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}D8();import c68 from"pg";var gF1=8314027461559302n,d68=600000,m68=500;async function hF1($,Z){let{databaseUrl:Q,lockTimeoutMs:X=d68}=$,Y=$.log??((K)=>console.log(K)),J=new c68.Client({connectionString:Q});await J.connect();let G=Date.now(),W=!1;try{while(!W){if(W=(await J.query("SELECT pg_try_advisory_lock($1) AS locked",[gF1.toString()])).rows[0]?.locked===!0,W)break;if(Date.now()-G>=X)throw Error(`Timed out after ${X}ms waiting for the DBOS migration lock. Another process is still migrating the dbos schema; this pod will restart and retry.`);await c$(m68)}let K=Date.now()-G;if(K>1000)Y(`[dbos] waited ${K}ms for the migration lock; another process migrated first`);return await Z()}finally{if(W)try{await J.query("SELECT pg_advisory_unlock($1)",[gF1.toString()])}catch{}await J.end().catch(()=>{})}}U$();Ck0();R6();function c58(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function tk0($,Z){for(let Q=0;Q<$.length;Q++){let X=$[Q];if(X===void 0)continue;if(X===Z)return $[Q+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function AU1(){let $=c58();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:tk0($,"--cpu-prof-dir")??process.cwd(),name:tk0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(tk0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}ak0();var t80;function CU1(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let Q=QE();if(!Q)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),J=Y(),G=Object.entries(J.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:J.objectCount,heapSize:J.heapSize,top:Object.fromEntries(G)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:Q.rss,heapUsed:Q.heapUsed,heapTotal:Q.heapTotal,external:Q.external,arrayBuffers:Q.arrayBuffers,...X}))};return Z().catch(()=>{}),t80=setInterval(()=>void Z().catch(()=>{}),$),t80.unref?.(),process.on("SIGUSR2",()=>{try{let Q=Bun.generateHeapSnapshot("v8"),X=typeof Q==="string"?Q:JSON.stringify(Q),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(Q){console.error("[heap-watch] snapshot failed:",Q)}}),()=>{if(t80)clearInterval(t80)}}import*as i58 from"bun:jsc";var{startSamplingProfiler:p58,samplingProfilerStackTraces:n58}=i58;function _U1(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{p58()}catch(J){return console.error("[stall-watchdog] failed to start sampling profiler:",J),()=>{}}let Q,X=performance.now()+Z,Y=()=>{let J=performance.now(),G=J-X;X=J+Z;let W=[];try{W=n58()?.traces??[]}catch{}if(G>$&&W.length>0){let K=new Map;for(let F of W){let U=F.frames.find((O)=>O.sourceURL&&!/Unknown Executable/.test(O.category??""))??F.frames[0];if(!U)continue;let N=(U.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),B=`${U.name??"?"} @ ${N}:${U.line??"?"}`;K.set(B,(K.get(B)??0)+1)}let H=[...K.entries()].sort((F,U)=>U[1]-F[1]).slice(0,8).map(([F,U])=>({frame:F,count:U}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(G),samplesInWindow:W.length,top:H}))}Q=setTimeout(Y,Z),Q.unref?.()};return Q=setTimeout(Y,Z),Q.unref?.(),()=>{if(Q)clearTimeout(Q)}}function vU1(){AU1();let $=[CU1(),SU1(),_U1()];return()=>{for(let Z of $)Z()}}import{existsSync as Zu6}from"fs";var bJ=E0();EU1();var{DBOS:v80,DBOSClient:th6}=await import("@dbos-inc/dbos-sdk");function kF1($,Z){if(!Z)return $;let Q=new URL($);if(!Q.searchParams.has("sslmode"))Q.searchParams.set("sslmode","verify-full");return Q.toString()}var oh6=[$3,eG,bU,xU,TO,ej],rh6=bJ.dispatchRole==="worker"?oh6:bJ.dispatchRole==="api"?[]:void 0;v80.setConfig(yF1({systemDatabaseUrl:kF1(bJ.databaseUrl,bJ.databasePgSsl),poolSize:bJ.dbosPoolSize,executorID:bJ.podName,listenQueues:rh6}));var{createApp:ah6}=await Promise.resolve().then(() => (N68(),U68)),{isServerPath:sh6}=await Promise.resolve().then(() => (i80(),QU1)),{createAssetHandler:eh6,resolveClientDir:k68}=await Promise.resolve().then(() => (w68(),L68)),$u6=bJ.port,q68=k68(import.meta.url,"../client"),S68=Zu6(q68)?q68:k68(import.meta.url,"../dist/client"),Qu6=eh6({clientDir:S68,isServerPath:sh6}),Xu6={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function Yu6($){let Z=new Headers($.headers);for(let[Q,X]of Object.entries(Xu6))Z.set(Q,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:Ju6,tryHandlePreviewHttp:Gu6,tryUpgradePreviewWs:Wu6,previewWebSocketHandler:RF1,isPreviewWsData:qF1}=await Promise.resolve().then(() => (E68(),j68)),{getOrInitSharedRunner:C68}=await Promise.resolve().then(() => (dK(),Nj$)),_68=Ju6(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),M68={baseDomain:_68??"",getRunner:C68};if(process.env.STUDIO_SANDBOX_TENANT_POOLS?.trim())C68().catch(($)=>{console.warn("[lifecycle] eager sandbox provider init for tenant pools failed:",$ instanceof Error?$.message:String($))});var Pk0=await ah6({clientDir:S68}),MF1=process.env.DBOS_CONDUCTOR_KEY?.trim(),I68=process.env.DBOS_CONDUCTOR_URL?.trim();await hF1({databaseUrl:kF1(bJ.databaseUrl,bJ.databasePgSsl)},()=>v80.launch({...MF1?{conductorKey:MF1}:{},...MF1&&I68?{conductorURL:I68}:{}}));console.log(`[dbos] application version: ${v80.applicationVersion}`);var IF1=5,VF1=0;await c8(async()=>{VF1++;try{return await Pk0.initDbos()}catch($){let Z=VF1>=IF1?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${VF1}/${IF1} failed, ${Z}`,$),$}},{maxAttempts:IF1,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!bJ.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (R68(),T68));console.log("");for(let Z of $())console.log(Z)}var Ku6=Bun.serve({idleTimeout:0,port:$u6,hostname:"0.0.0.0",fetch:async($,Z)=>{if(_68){let X=await Wu6($,Z,M68);if(X===void 0)return;if(X)return X;let Y=await Gu6($,M68);if(Y)return Y}let Q=await Qu6($);if(Q)return Yu6(Q);return Pk0.fetch($,{server:Z})},websocket:{open($){if(qF1($.data))RF1.open($)},message($,Z){if(qF1($.data))RF1.message($,Z)},close($){if(qF1($.data))RF1.close($)}},development:!1}),Hu6=vU1();if(bJ.localMode)Promise.resolve().then(() => (Mx(),rT0)).then(async({seedLocalMode:$,markSeedComplete:Z,healLocalJwks:Q})=>{try{let X=await Q();if(X>0)console.log(`[local-mode] cleared ${X} undecryptable JWKS key(s); Better Auth will generate a fresh one`);let Y=await $()}catch(X){console.error("Failed to seed local mode:",X)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (Mx(),rT0));Z()}catch{}});var V68=!1;async function Fu6($){let Z;try{Z=await th6.create({systemDatabaseUrl:kF1(bJ.databaseUrl,bJ.databasePgSsl),systemDatabaseSchemaName:"dbos"});let Q=await Z.listWorkflows({status:"PENDING",queueName:eG,executorId:$,loadInput:!1,loadOutput:!1});if(Q.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=Q.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:eG}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(Q){console.error("[shutdown] thread-gate handoff failed:",Q)}finally{await Z?.destroy().catch(()=>{})}}async function Ak0($){if(V68)return;V68=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,Q=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${Q}ms, forcing exit.`),process.exit(1)},Q);X.unref?.();let Y=0;try{Hu6(),Pk0.markShuttingDown();let J=lF1(bJ.dispatchRole,Q,process.env.SHUTDOWN_DRAIN_MS);await c$(J),await Ku6.stop(!0);let G=v80.executorID;await v80.shutdown(),await Fu6(G),await Pk0.shutdown()}catch(J){console.error("[shutdown] Error during shutdown:",J),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>Ak0("SIGTERM"));process.on("SIGINT",()=>Ak0("SIGINT"));process.on("SIGHUP",()=>Ak0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),Ak0("uncaughtException")});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "decocms",
-  "version": "4.388.4",
+  "version": "4.389.0",
   "description": "Deco CMS — Self-hostable MCP Gateway for managing AI connections and tools",
   "author": "Deco team",
   "repository": {

package/dist/client/assets/agent-app-D8aCkILQ.js

@@ -1 +0,0 @@
-import{c,j as s,X as u}from"./index-doEaURqC.js";import{C as f}from"./index-D9padtMD.js";import{a as x}from"./thread-route-BBKn0p1b.js";import{u as g}from"./use-task-metadata-Dhub_XGT.js";import{AppViewContent as h}from"./project-app-view-ZkgOByQo.js";import"./use-mobile-DYpKQ1eP.js";import"./thread-button-CzoAkKWi.js";import"./sidebar-Cz1S2PSM.js";import"./LayoutLeft-GBQ0rQxQ.js";import"./sheet-ZoEgH6s-.js";import"./X-vKTIsgL1.js";import"./tooltip-C91IS2ON.js";import"./index-C4LzZ3-O.js";import"./use-panel-navigate-xYH0iX8e.js";import"./use-project-scope-CENQvfVc.js";import"./use-virtual-mcp-B-mdsJbn.js";import"./use-mcp-client-D2DgMGL-.js";import"./auth-D3Q2r2cz.js";import"./github-repo-BknN0SVI.js";import"./use-route-default-main-evb2BAGs.js";import"./hooks-C8t7cMQJ.js";import"./backoff-8mStPHYB.js";import"./task-board-BXLBBo-B.js";import"./schema-BVqtjcyJ.js";import"./agent-icon-CzsnrYjD.js";import"./AlertCircle-Cat-Fy2i.js";import"./Tool01-H9OcfGdq.js";import"./ArrowUp-CbPBDOpZ.js";import"./ArrowLeft-DuxVUo5_.js";import"./ArrowRight-CsoDgnUj.js";import"./XCircle-Cu2Sy8Aw.js";import"./ZoomOut-Burao8Eg.js";import"./Globe04-C_9DD9oO.js";import"./CheckCircle-Cj4PQGuv.js";import"./Check-BZXRTDaX.js";import"./ChevronUp-DGt31MPD.js";import"./UserSquare-BfT6tB5U.js";import"./Copy01-B6hr4CBg.js";import"./CreditCard01-CiYLi_pR.js";import"./DotsVertical-BITRq5d-.js";import"./Download01-CsYfHghd.js";import"./Eye-rQUtSbk6.js";import"./Share07-CMPYQYHk.js";import"./XClose-DFUqDOc8.js";import"./Image01-BLIf6uY9.js";import"./Key01-SGIR_QrT.js";import"./Link01-BnVQGp2l.js";import"./LinkExternal01-Dh0AABP8.js";import"./Monitor01-CxisI5ut.js";import"./Sun-BSFyLDhg.js";import"./Package-DsU1cU6S.js";import"./Palette-CzoNEzRs.js";import"./Plus-qASEo4cN.js";import"./SearchLg-qmi8uaeX.js";import"./SearchMd-B6NDUgzQ.js";import"./Stars01-cdnol_cb.js";import"./Trash01-mB4s-hrv.js";import"./Upload01-Uv_jtHIk.js";import"./User01-DHGCVvV3.js";import"./Users01-C_qUmfZB.js";import"./Zap-CSRFlEXK.js";import"./toolbar-icon-button-iy_uLVVB.js";import"./use-in-settings-DplznXN9.js";import"./shell-layout-BNVBlKMe.js";import"./avatar-CLf3yQhN.js";import"./download-app-dialog-7J000m-o.js";import"./dialog-C36x61_J.js";import"./command-CDaLB2Ox.js";import"./index-Byz-UaqT.js";import"./integration-icon-Crk6WRxP.js";import"./project-icon-mjklzNJs.js";import"./use-is-desktop-app-BNujXJc_.js";import"./required-auth-layout-DbGCmQgx.js";import"./autosend-C5knIVwo.js";import"./use-org-sso-BnqcEd47.js";import"./resizable-WgWAPECX.js";import"./route-page-header-tbVW9ntg.js";import"./gateway-client-BF14HPqj.js";import"./tool-namespace-DmnQIdtF.js";import"./use-mcp-tools-CtMvHJK9.js";import"./sandbox-lifecycle-context-CvyFr09R.js";import"./use-session-runtime-COugfsOm.js";import"./thread-intent-DuCE7MYG.js";import"./slugify-CEUa2lfQ.js";import"./chat-context-D1GbDSrr.js";import"./use-entitlements-pN-YIa6T.js";import"./use-ai-providers-CJ2ga4nx.js";import"./location-oTTXFrSF.js";import"./use-decopilot-events-x0K7Zb7m.js";import"./use-organization-settings-Wh36EN0I.js";import"./sandbox-url-D3mC8qhT.js";import"./sandbox-start-errors-BK_aDCyt.js";import"./content-blocks-o63cs2vh.js";import"./mcp-app-renderer-BvLPqeD1.js";import"./types-BCbJ4Eml.js";import"./site-url-en5df9c-.js";import"./use-connect-companion-CXK99yF4.js";import"./companions-core-BnuxEm_5.js";import"./metadata-D72DunRR.js";import"./github-repo-scope-C8GSbvaz.js";import"./form-CXSt7_li.js";import"./label-tAsQMZ2G.js";import"./input-BK5Sp8hZ.js";import"./use-debounced-value-CG2jgHBI.js";import"./provision-repo-scoped-github-connection-B6zdkC6p.js";import"./useQueries-CrUxqve0.js";import"./authenticate-and-persist-oauth-DG9xWGRs.js";import"./mcp-oauth-61IHYJoj.js";import"./track-CpCOxAsM.js";import"./extract-connection-data-BIqslos8.js";import"./connection-DzM2SOZ6.js";const $=u("/shell/$org/org-shell/agent-shell/projects/$agentId/apps/$connectionId/$toolName");function j(){const t=c.c(9),{connectionId:o,toolName:r}=$.useParams(),l=x(),i=g(l);let p;t[0]!==o||t[1]!==i?.expanded_tools||t[2]!==r?(p=i?.expanded_tools?.find(a=>a.appId===o&&a.toolName===r),t[0]=o,t[1]=i?.expanded_tools,t[2]=r,t[3]=p):p=t[3];const d=p,e=`${o}:${r}`,n=d?.args;let m;return t[4]!==o||t[5]!==e||t[6]!==n||t[7]!==r?(m=s.jsx(h,{connectionId:o,toolName:r,args:n},e),t[4]=o,t[5]=e,t[6]=n,t[7]=r,t[8]=m):m=t[8],m}function _o(){const t=c.c(1);let o;return t[0]===Symbol.for("react.memo_cache_sentinel")?(o=s.jsx(f.Content,{children:s.jsx(j,{})}),t[0]=o):o=t[0],o}export{_o as default};

package/dist/client/assets/agent-deck-JfSkYOo0.js

@@ -1 +0,0 @@
-import{c,j as e,aP as b,u as g}from"./index-doEaURqC.js";import{C as j}from"./index-D9padtMD.js";import{F as v,H as S}from"./file-share-button-6XYGV6w8.js";import{u as k,b as y,e as _}from"./use-org-fs-Bbl2QQqg.js";import{S as P}from"./settings-tab-CE0tP2vq.js";import{b as w}from"./thread-route-BBKn0p1b.js";import"./use-mobile-DYpKQ1eP.js";import"./thread-button-CzoAkKWi.js";import"./sidebar-Cz1S2PSM.js";import"./LayoutLeft-GBQ0rQxQ.js";import"./sheet-ZoEgH6s-.js";import"./X-vKTIsgL1.js";import"./tooltip-C91IS2ON.js";import"./index-C4LzZ3-O.js";import"./use-panel-navigate-xYH0iX8e.js";import"./use-project-scope-CENQvfVc.js";import"./use-virtual-mcp-B-mdsJbn.js";import"./use-mcp-client-D2DgMGL-.js";import"./auth-D3Q2r2cz.js";import"./github-repo-BknN0SVI.js";import"./use-route-default-main-evb2BAGs.js";import"./hooks-C8t7cMQJ.js";import"./backoff-8mStPHYB.js";import"./task-board-BXLBBo-B.js";import"./schema-BVqtjcyJ.js";import"./agent-icon-CzsnrYjD.js";import"./AlertCircle-Cat-Fy2i.js";import"./Tool01-H9OcfGdq.js";import"./ArrowUp-CbPBDOpZ.js";import"./ArrowLeft-DuxVUo5_.js";import"./ArrowRight-CsoDgnUj.js";import"./XCircle-Cu2Sy8Aw.js";import"./ZoomOut-Burao8Eg.js";import"./Globe04-C_9DD9oO.js";import"./CheckCircle-Cj4PQGuv.js";import"./Check-BZXRTDaX.js";import"./ChevronUp-DGt31MPD.js";import"./UserSquare-BfT6tB5U.js";import"./Copy01-B6hr4CBg.js";import"./CreditCard01-CiYLi_pR.js";import"./DotsVertical-BITRq5d-.js";import"./Download01-CsYfHghd.js";import"./Eye-rQUtSbk6.js";import"./Share07-CMPYQYHk.js";import"./XClose-DFUqDOc8.js";import"./Image01-BLIf6uY9.js";import"./Key01-SGIR_QrT.js";import"./Link01-BnVQGp2l.js";import"./LinkExternal01-Dh0AABP8.js";import"./Monitor01-CxisI5ut.js";import"./Sun-BSFyLDhg.js";import"./Package-DsU1cU6S.js";import"./Palette-CzoNEzRs.js";import"./Plus-qASEo4cN.js";import"./SearchLg-qmi8uaeX.js";import"./SearchMd-B6NDUgzQ.js";import"./Stars01-cdnol_cb.js";import"./Trash01-mB4s-hrv.js";import"./Upload01-Uv_jtHIk.js";import"./User01-DHGCVvV3.js";import"./Users01-C_qUmfZB.js";import"./Zap-CSRFlEXK.js";import"./toolbar-icon-button-iy_uLVVB.js";import"./use-in-settings-DplznXN9.js";import"./shell-layout-BNVBlKMe.js";import"./avatar-CLf3yQhN.js";import"./download-app-dialog-7J000m-o.js";import"./dialog-C36x61_J.js";import"./command-CDaLB2Ox.js";import"./index-Byz-UaqT.js";import"./integration-icon-Crk6WRxP.js";import"./project-icon-mjklzNJs.js";import"./use-is-desktop-app-BNujXJc_.js";import"./required-auth-layout-DbGCmQgx.js";import"./autosend-C5knIVwo.js";import"./use-org-sso-BnqcEd47.js";import"./resizable-WgWAPECX.js";import"./route-page-header-tbVW9ntg.js";import"./input-BK5Sp8hZ.js";import"./popover-GUR8piky.js";import"./scroll-area-Cve7MqyA.js";import"./select-oEHCSTZi.js";import"./breadcrumb-SXbKtw7u.js";import"./extract-connection-data-BIqslos8.js";import"./metadata-D72DunRR.js";import"./connection-DzM2SOZ6.js";import"./chat-context-D1GbDSrr.js";import"./thread-intent-DuCE7MYG.js";import"./slugify-CEUa2lfQ.js";import"./use-entitlements-pN-YIa6T.js";import"./use-ai-providers-CJ2ga4nx.js";import"./location-oTTXFrSF.js";import"./use-decopilot-events-x0K7Zb7m.js";import"./use-organization-settings-Wh36EN0I.js";import"./build-improve-prompt-doc-DKo7W0US.js";import"./empty-state-ClBiZqLf.js";import"./use-date-fns-locale-VjB0j61V.js";import"./differenceInSeconds-C3x8sHUj.js";import"./use-connection-PgTQPnAp.js";import"./mcp-oauth-61IHYJoj.js";import"./alert-dialog-Dg6YJ6PP.js";import"./textarea-B9cyNs7j.js";import"./use-debounced-autosave-Du2G3qf3.js";import"./add-connection-dialog-DzNaYAxM.js";import"./collection-search-BQXOJg8a.js";import"./connection-card-DF11WhqU.js";import"./useInfiniteQuery-DCZL7BN4.js";import"./infiniteQueryObserver-CxJm0T6_.js";import"./connection-slug-CITJ0kGN.js";import"./drawer-CsJzOKcM.js";import"./form-CXSt7_li.js";import"./label-tAsQMZ2G.js";import"./connection-form-helpers-CyBATU5Y.js";import"./authenticate-and-persist-oauth-DG9xWGRs.js";import"./collection-tabs-BWQrYrdS.js";import"./badge-DuB4cqrw.js";import"./use-infinite-scroll-Bm905rys.js";import"./useSuspenseInfiniteQuery-C0KSbZH8.js";import"./file-type-icon-CFRsMAQ4.js";import"./checkbox-BKGUJJNh.js";import"./search-input-CCUlZDzf.js";import"./use-mcp-auth-status-BnAPI8Zf.js";import"./types-BCbJ4Eml.js";import"./use-mcp-tools-CtMvHJK9.js";import"./use-mcp-prompts-UNzUvECH.js";import"./utils-CVEq3hMx.js";import"./switch-BNLiV_oA.js";import"./use-project-native-view-presence-U59DT0hQ.js";import"./match-site-slug-config-D3fUJ6vX.js";import"./use-file-configs-CzJCjBKX.js";import"./site-slug-uya6Wp4-.js";import"./optimistic-project-sidebar-views-BQt56FI4.js";import"./virtual-mcp-Bj7Y16hO.js";import"./repository-import-picker-B6ijLkOL.js";import"./use-navigate-to-agent-TwlhlbmB.js";import"./repository-picker-Ca5oB9j5.js";import"./github-icon-CIx0jkrL.js";import"./use-debounced-value-CG2jgHBI.js";import"./sandbox-url-D3mC8qhT.js";import"./secret-picker-DVWtSCXk.js";import"./use-secrets-44zj-3N9.js";import"./omit-sandbox-map-jj4lCB2U.js";import"./serial-task-queue-CGOeQgpr.js";const x="home";function M(i){const t=c.c(5),{label:r}=i;let p;t[0]===Symbol.for("react.memo_cache_sentinel")?(p=e.jsx(b,{className:"aspect-video w-2/3 max-w-xl"}),t[0]=p):p=t[0];let o;t[1]!==r?(o=r&&e.jsx("p",{className:"text-xs text-muted-foreground",children:r}),t[1]=r,t[2]=o):o=t[2];let m;return t[3]!==o?(m=e.jsxs("div",{className:"flex h-full w-full flex-col items-center justify-center gap-3 bg-background",children:[p,o]}),t[3]=o,t[4]=m):m=t[4],m}function D(i){const t=c.c(15),{path:r}=i;let p;t[0]===Symbol.for("react.memo_cache_sentinel")?(p={refetchIntervalWhenAbsent:2e3},t[0]=p):p=t[0];const o=k(x,r,p),m=y(x)(r);if(o.isPending||!o.data){const h=!o.isPending&&!o.data?"Waiting for the deck to sync…":void 0;let l;return t[1]!==h?(l=e.jsx(M,{label:h}),t[1]=h,t[2]=l):l=t[2],l}let s;t[3]!==o.data?(s=_(o.data),t[3]=o.data,t[4]=s):s=t[4];const f=o.data.shareMode??"private",u=o.data.effectivePublic??!1,d=window.location.origin+m;let a;t[5]!==r||t[6]!==f||t[7]!==u||t[8]!==d?(a=e.jsx(v,{volume:x,path:r,shareMode:f,effectivePublic:u,url:d}),t[5]=r,t[6]=f,t[7]=u,t[8]=d,t[9]=a):a=t[9];let n;return t[10]!==r||t[11]!==m||t[12]!==s||t[13]!==a?(n=e.jsx(S,{readUrl:m,marker:s,title:r,savePath:r,trailing:a}),t[10]=r,t[11]=m,t[12]=s,t[13]=a,t[14]=n):n=t[14],n}function C(){const i=c.c(4);let t;i[0]===Symbol.for("react.memo_cache_sentinel")?(t={strict:!1},i[0]=t):t=i[0];const r=g(t),p=w(),o="path"in r&&typeof r.path=="string"?r.path:void 0;let m;return i[1]!==o||i[2]!==p?(m=o?e.jsx(D,{path:o},o):e.jsx(P,{virtualMcpId:p}),i[1]=o,i[2]=p,i[3]=m):m=i[3],m}function fr(){const i=c.c(1);let t;return i[0]===Symbol.for("react.memo_cache_sentinel")?(t=e.jsx(j.Content,{children:e.jsx(C,{})}),i[0]=t):t=i[0],t}export{fr as default};

package/dist/client/assets/agent-file-BQkNRXR6.js

@@ -1 +0,0 @@
-import{c as U,b as B,j as t,B as I,u as K}from"./index-doEaURqC.js";import{C as M}from"./index-D9padtMD.js";import{T as R,a as $,c as A}from"./tooltip-C91IS2ON.js";import{n as L}from"./Download01-CsYfHghd.js";import{n as O}from"./LinkExternal01-Dh0AABP8.js";import{s as V}from"./XClose-DFUqDOc8.js";import{F as E}from"./file-type-icon-CFRsMAQ4.js";import{a as q,F as D,f as G}from"./file-preview-DobzjEc2.js";import{a as H}from"./use-thread-outputs-DldRsY9l.js";import{a as J}from"./use-panel-navigate-xYH0iX8e.js";import{S as Q}from"./settings-tab-CE0tP2vq.js";import{b as W,a as X}from"./thread-route-BBKn0p1b.js";import"./use-mobile-DYpKQ1eP.js";import"./thread-button-CzoAkKWi.js";import"./sidebar-Cz1S2PSM.js";import"./LayoutLeft-GBQ0rQxQ.js";import"./sheet-ZoEgH6s-.js";import"./X-vKTIsgL1.js";import"./use-route-default-main-evb2BAGs.js";import"./hooks-C8t7cMQJ.js";import"./use-mcp-client-D2DgMGL-.js";import"./auth-D3Q2r2cz.js";import"./backoff-8mStPHYB.js";import"./task-board-BXLBBo-B.js";import"./schema-BVqtjcyJ.js";import"./agent-icon-CzsnrYjD.js";import"./AlertCircle-Cat-Fy2i.js";import"./Tool01-H9OcfGdq.js";import"./ArrowUp-CbPBDOpZ.js";import"./ArrowLeft-DuxVUo5_.js";import"./ArrowRight-CsoDgnUj.js";import"./XCircle-Cu2Sy8Aw.js";import"./ZoomOut-Burao8Eg.js";import"./Globe04-C_9DD9oO.js";import"./CheckCircle-Cj4PQGuv.js";import"./Check-BZXRTDaX.js";import"./ChevronUp-DGt31MPD.js";import"./UserSquare-BfT6tB5U.js";import"./Copy01-B6hr4CBg.js";import"./CreditCard01-CiYLi_pR.js";import"./DotsVertical-BITRq5d-.js";import"./Eye-rQUtSbk6.js";import"./Share07-CMPYQYHk.js";import"./Image01-BLIf6uY9.js";import"./Key01-SGIR_QrT.js";import"./Link01-BnVQGp2l.js";import"./Monitor01-CxisI5ut.js";import"./Sun-BSFyLDhg.js";import"./Package-DsU1cU6S.js";import"./Palette-CzoNEzRs.js";import"./Plus-qASEo4cN.js";import"./SearchLg-qmi8uaeX.js";import"./SearchMd-B6NDUgzQ.js";import"./Stars01-cdnol_cb.js";import"./Trash01-mB4s-hrv.js";import"./Upload01-Uv_jtHIk.js";import"./User01-DHGCVvV3.js";import"./Users01-C_qUmfZB.js";import"./Zap-CSRFlEXK.js";import"./toolbar-icon-button-iy_uLVVB.js";import"./use-in-settings-DplznXN9.js";import"./shell-layout-BNVBlKMe.js";import"./avatar-CLf3yQhN.js";import"./download-app-dialog-7J000m-o.js";import"./dialog-C36x61_J.js";import"./use-project-scope-CENQvfVc.js";import"./use-virtual-mcp-B-mdsJbn.js";import"./github-repo-BknN0SVI.js";import"./command-CDaLB2Ox.js";import"./index-Byz-UaqT.js";import"./integration-icon-Crk6WRxP.js";import"./project-icon-mjklzNJs.js";import"./use-is-desktop-app-BNujXJc_.js";import"./required-auth-layout-DbGCmQgx.js";import"./autosend-C5knIVwo.js";import"./use-org-sso-BnqcEd47.js";import"./resizable-WgWAPECX.js";import"./route-page-header-tbVW9ntg.js";import"./index-C4LzZ3-O.js";import"./use-org-fs-Bbl2QQqg.js";import"./utils-BcFrUaDf.js";import"./editor-BQuCFEpz.js";import"./markdown-D0jNOMCX.js";import"./org-file-open-context-DodrnIMR.js";import"./chat-context-D1GbDSrr.js";import"./thread-intent-DuCE7MYG.js";import"./slugify-CEUa2lfQ.js";import"./use-entitlements-pN-YIa6T.js";import"./use-ai-providers-CJ2ga4nx.js";import"./location-oTTXFrSF.js";import"./use-decopilot-events-x0K7Zb7m.js";import"./use-organization-settings-Wh36EN0I.js";import"./input-BK5Sp8hZ.js";import"./popover-GUR8piky.js";import"./scroll-area-Cve7MqyA.js";import"./select-oEHCSTZi.js";import"./breadcrumb-SXbKtw7u.js";import"./extract-connection-data-BIqslos8.js";import"./metadata-D72DunRR.js";import"./connection-DzM2SOZ6.js";import"./build-improve-prompt-doc-DKo7W0US.js";import"./empty-state-ClBiZqLf.js";import"./use-date-fns-locale-VjB0j61V.js";import"./differenceInSeconds-C3x8sHUj.js";import"./use-connection-PgTQPnAp.js";import"./mcp-oauth-61IHYJoj.js";import"./alert-dialog-Dg6YJ6PP.js";import"./textarea-B9cyNs7j.js";import"./use-debounced-autosave-Du2G3qf3.js";import"./add-connection-dialog-DzNaYAxM.js";import"./collection-search-BQXOJg8a.js";import"./connection-card-DF11WhqU.js";import"./useInfiniteQuery-DCZL7BN4.js";import"./infiniteQueryObserver-CxJm0T6_.js";import"./connection-slug-CITJ0kGN.js";import"./drawer-CsJzOKcM.js";import"./form-CXSt7_li.js";import"./label-tAsQMZ2G.js";import"./connection-form-helpers-CyBATU5Y.js";import"./authenticate-and-persist-oauth-DG9xWGRs.js";import"./collection-tabs-BWQrYrdS.js";import"./badge-DuB4cqrw.js";import"./use-infinite-scroll-Bm905rys.js";import"./useSuspenseInfiniteQuery-C0KSbZH8.js";import"./checkbox-BKGUJJNh.js";import"./search-input-CCUlZDzf.js";import"./use-mcp-auth-status-BnAPI8Zf.js";import"./types-BCbJ4Eml.js";import"./use-mcp-tools-CtMvHJK9.js";import"./use-mcp-prompts-UNzUvECH.js";import"./utils-CVEq3hMx.js";import"./switch-BNLiV_oA.js";import"./use-project-native-view-presence-U59DT0hQ.js";import"./match-site-slug-config-D3fUJ6vX.js";import"./use-file-configs-CzJCjBKX.js";import"./site-slug-uya6Wp4-.js";import"./optimistic-project-sidebar-views-BQt56FI4.js";import"./virtual-mcp-Bj7Y16hO.js";import"./repository-import-picker-B6ijLkOL.js";import"./use-navigate-to-agent-TwlhlbmB.js";import"./repository-picker-Ca5oB9j5.js";import"./github-icon-CIx0jkrL.js";import"./use-debounced-value-CG2jgHBI.js";import"./sandbox-url-D3mC8qhT.js";import"./secret-picker-DVWtSCXk.js";import"./use-secrets-44zj-3N9.js";import"./omit-sandbox-map-jj4lCB2U.js";import"./serial-task-queue-CGOeQgpr.js";function Y(r){const e=U.c(60),{file:o,onClose:v}=r,i=B();let l,m;e[0]!==o.filename?(l=t.jsx(E,{filename:o.filename,className:"h-4.5 w-3.5 shrink-0"}),m=t.jsx("span",{className:"truncate text-xs font-medium text-foreground",children:o.filename}),e[0]=o.filename,e[1]=l,e[2]=m):(l=e[1],m=e[2]);let k;e[3]!==o.size?(k=G(o.size),e[3]=o.size,e[4]=k):k=e[4];let x;e[5]!==k?(x=t.jsx("span",{className:"shrink-0 text-xs text-muted-foreground",children:k}),e[5]=k,e[6]=x):x=e[6];let p;e[7]!==l||e[8]!==m||e[9]!==x?(p=t.jsxs("div",{className:"flex min-w-0 flex-1 items-center gap-2 px-2",children:[l,m,x]}),e[7]=l,e[8]=m,e[9]=x,e[10]=p):p=e[10];let u;e[11]!==i?(u=i("mainPanelTabs.fileTab.download"),e[11]=i,e[12]=u):u=e[12];let b;e[13]===Symbol.for("react.memo_cache_sentinel")?(b=t.jsx(L,{size:14}),e[13]=b):b=e[13];let a;e[14]!==o.downloadUrl||e[15]!==o.filename?(a=t.jsx("a",{href:o.downloadUrl,download:o.filename,children:b}),e[14]=o.downloadUrl,e[15]=o.filename,e[16]=a):a=e[16];let n;e[17]!==u||e[18]!==a?(n=t.jsx(R,{asChild:!0,children:t.jsx(I,{variant:"ghost",size:"icon","aria-label":u,asChild:!0,children:a})}),e[17]=u,e[18]=a,e[19]=n):n=e[19];let j;e[20]!==i?(j=i("mainPanelTabs.fileTab.download"),e[20]=i,e[21]=j):j=e[21];let s;e[22]!==j?(s=t.jsx($,{side:"bottom",children:j}),e[22]=j,e[23]=s):s=e[23];let f;e[24]!==s||e[25]!==n?(f=t.jsxs(A,{children:[n,s]}),e[24]=s,e[25]=n,e[26]=f):f=e[26];let c;e[27]!==i?(c=i("mainPanelTabs.fileTab.openInNewTab"),e[27]=i,e[28]=c):c=e[28];let d;e[29]!==o.downloadUrl?(d=()=>window.open(o.downloadUrl,"_blank","noopener"),e[29]=o.downloadUrl,e[30]=d):d=e[30];let T;e[31]===Symbol.for("react.memo_cache_sentinel")?(T=t.jsx(O,{size:14}),e[31]=T):T=e[31];let h;e[32]!==c||e[33]!==d?(h=t.jsx(R,{asChild:!0,children:t.jsx(I,{variant:"ghost",size:"icon","aria-label":c,onClick:d,children:T})}),e[32]=c,e[33]=d,e[34]=h):h=e[34];let g;e[35]!==i?(g=i("mainPanelTabs.fileTab.openInNewTab"),e[35]=i,e[36]=g):g=e[36];let w;e[37]!==g?(w=t.jsx($,{side:"bottom",children:g}),e[37]=g,e[38]=w):w=e[38];let y;e[39]!==h||e[40]!==w?(y=t.jsxs(A,{children:[h,w]}),e[39]=h,e[40]=w,e[41]=y):y=e[41];let C;e[42]!==i?(C=i("mainPanelTabs.fileTab.close"),e[42]=i,e[43]=C):C=e[43];let S;e[44]===Symbol.for("react.memo_cache_sentinel")?(S=t.jsx(V,{size:14}),e[44]=S):S=e[44];let N;e[45]!==v||e[46]!==C?(N=t.jsx(R,{asChild:!0,children:t.jsx(I,{variant:"ghost",size:"icon","aria-label":C,onClick:v,children:S})}),e[45]=v,e[46]=C,e[47]=N):N=e[47];let P;e[48]!==i?(P=i("mainPanelTabs.fileTab.close"),e[48]=i,e[49]=P):P=e[49];let _;e[50]!==P?(_=t.jsx($,{side:"bottom",children:P}),e[50]=P,e[51]=_):_=e[51];let z;e[52]!==N||e[53]!==_?(z=t.jsxs(A,{children:[N,_]}),e[52]=N,e[53]=_,e[54]=z):z=e[54];let F;return e[55]!==f||e[56]!==y||e[57]!==z||e[58]!==p?(F=t.jsxs("div",{className:"flex h-9 shrink-0 items-center gap-1 border-b border-border/60 px-2",children:[p,f,y,z]}),e[55]=f,e[56]=y,e[57]=z,e[58]=p,e[59]=F):F=e[59],F}function Z(r){const e=U.c(31),{fileKey:o,taskId:v}=r,i=B(),{closePanel:l}=J(),{data:m,isPending:k}=H(v);let x;e[0]!==o||e[1]!==m?(x=m?.find(s=>s.key===o)??null,e[0]=o,e[1]=m,e[2]=x):x=e[2];const p=x;let u;e[3]!==l?(u=()=>l(),e[3]=l,e[4]=u):u=e[4];const b=u;if(!p){if(k){let w;return e[5]===Symbol.for("react.memo_cache_sentinel")?(w=t.jsx("div",{className:"h-full w-full bg-background",children:t.jsx(q,{})}),e[5]=w):w=e[5],w}let s;e[6]!==o?(s=o.split("/").pop()??o,e[6]=o,e[7]=s):s=e[7];let f;e[8]!==s?(f=t.jsx(E,{filename:s,className:"h-7.5 w-6"}),e[8]=s,e[9]=f):f=e[9];let c;e[10]!==i?(c=i("mainPanelTabs.fileTab.fileNotAvailable"),e[10]=i,e[11]=c):c=e[11];let d;e[12]!==c?(d=t.jsx("span",{className:"text-sm text-muted-foreground",children:c}),e[12]=c,e[13]=d):d=e[13];let T;e[14]!==i?(T=i("mainPanelTabs.fileTab.close"),e[14]=i,e[15]=T):T=e[15];let h;e[16]!==b||e[17]!==T?(h=t.jsx(I,{variant:"ghost",size:"sm",onClick:b,children:T}),e[16]=b,e[17]=T,e[18]=h):h=e[18];let g;return e[19]!==f||e[20]!==d||e[21]!==h?(g=t.jsxs("div",{className:"flex h-full w-full flex-col items-center justify-center gap-2 bg-background",children:[f,d,h]}),e[19]=f,e[20]=d,e[21]=h,e[22]=g):g=e[22],g}let a;e[23]!==p||e[24]!==b?(a=t.jsx(Y,{file:p,onClose:b}),e[23]=p,e[24]=b,e[25]=a):a=e[25];let n;e[26]!==p?(n=t.jsx("div",{className:"relative min-h-0 flex-1",children:t.jsx(D,{file:p})}),e[26]=p,e[27]=n):n=e[27];let j;return e[28]!==a||e[29]!==n?(j=t.jsxs("div",{className:"flex h-full w-full flex-col bg-background",children:[a,n]}),e[28]=a,e[29]=n,e[30]=j):j=e[30],j}function ee(){const r=U.c(5);let e;r[0]===Symbol.for("react.memo_cache_sentinel")?(e={strict:!1},r[0]=e):e=r[0];const o=K(e),v=W(),i=X(),l="key"in o&&typeof o.key=="string"?o.key:void 0;let m;return r[1]!==i||r[2]!==l||r[3]!==v?(m=l?t.jsx(Z,{fileKey:l,taskId:i},l):t.jsx(Q,{virtualMcpId:v}),r[1]=i,r[2]=l,r[3]=v,r[4]=m):m=r[4],m}function Li(){const r=U.c(1);let e;return r[0]===Symbol.for("react.memo_cache_sentinel")?(e=t.jsx(M.Content,{children:t.jsx(ee,{})}),r[0]=e):e=r[0],e}export{Li as default};

package/dist/client/assets/agent-library-file-B_9ZfsqS.js

@@ -1 +0,0 @@
-import{c as a,j as s,u as n}from"./index-doEaURqC.js";import{C as l}from"./index-D9padtMD.js";import{L as c}from"./preview-content-CkHbAlf-.js";import{a as f}from"./use-panel-navigate-xYH0iX8e.js";import{S as u}from"./settings-tab-CE0tP2vq.js";import{b as h}from"./thread-route-BBKn0p1b.js";import"./use-mobile-DYpKQ1eP.js";import"./thread-button-CzoAkKWi.js";import"./sidebar-Cz1S2PSM.js";import"./LayoutLeft-GBQ0rQxQ.js";import"./sheet-ZoEgH6s-.js";import"./X-vKTIsgL1.js";import"./tooltip-C91IS2ON.js";import"./index-C4LzZ3-O.js";import"./use-route-default-main-evb2BAGs.js";import"./hooks-C8t7cMQJ.js";import"./use-mcp-client-D2DgMGL-.js";import"./auth-D3Q2r2cz.js";import"./backoff-8mStPHYB.js";import"./task-board-BXLBBo-B.js";import"./schema-BVqtjcyJ.js";import"./agent-icon-CzsnrYjD.js";import"./AlertCircle-Cat-Fy2i.js";import"./Tool01-H9OcfGdq.js";import"./ArrowUp-CbPBDOpZ.js";import"./ArrowLeft-DuxVUo5_.js";import"./ArrowRight-CsoDgnUj.js";import"./XCircle-Cu2Sy8Aw.js";import"./ZoomOut-Burao8Eg.js";import"./Globe04-C_9DD9oO.js";import"./CheckCircle-Cj4PQGuv.js";import"./Check-BZXRTDaX.js";import"./ChevronUp-DGt31MPD.js";import"./UserSquare-BfT6tB5U.js";import"./Copy01-B6hr4CBg.js";import"./CreditCard01-CiYLi_pR.js";import"./DotsVertical-BITRq5d-.js";import"./Download01-CsYfHghd.js";import"./Eye-rQUtSbk6.js";import"./Share07-CMPYQYHk.js";import"./XClose-DFUqDOc8.js";import"./Image01-BLIf6uY9.js";import"./Key01-SGIR_QrT.js";import"./Link01-BnVQGp2l.js";import"./LinkExternal01-Dh0AABP8.js";import"./Monitor01-CxisI5ut.js";import"./Sun-BSFyLDhg.js";import"./Package-DsU1cU6S.js";import"./Palette-CzoNEzRs.js";import"./Plus-qASEo4cN.js";import"./SearchLg-qmi8uaeX.js";import"./SearchMd-B6NDUgzQ.js";import"./Stars01-cdnol_cb.js";import"./Trash01-mB4s-hrv.js";import"./Upload01-Uv_jtHIk.js";import"./User01-DHGCVvV3.js";import"./Users01-C_qUmfZB.js";import"./Zap-CSRFlEXK.js";import"./toolbar-icon-button-iy_uLVVB.js";import"./use-in-settings-DplznXN9.js";import"./shell-layout-BNVBlKMe.js";import"./avatar-CLf3yQhN.js";import"./download-app-dialog-7J000m-o.js";import"./dialog-C36x61_J.js";import"./use-project-scope-CENQvfVc.js";import"./use-virtual-mcp-B-mdsJbn.js";import"./github-repo-BknN0SVI.js";import"./command-CDaLB2Ox.js";import"./index-Byz-UaqT.js";import"./integration-icon-Crk6WRxP.js";import"./project-icon-mjklzNJs.js";import"./use-is-desktop-app-BNujXJc_.js";import"./required-auth-layout-DbGCmQgx.js";import"./autosend-C5knIVwo.js";import"./use-org-sso-BnqcEd47.js";import"./resizable-WgWAPECX.js";import"./route-page-header-tbVW9ntg.js";import"./file-preview-DobzjEc2.js";import"./use-org-fs-Bbl2QQqg.js";import"./utils-BcFrUaDf.js";import"./editor-BQuCFEpz.js";import"./file-type-icon-CFRsMAQ4.js";import"./markdown-D0jNOMCX.js";import"./org-file-open-context-DodrnIMR.js";import"./file-share-button-6XYGV6w8.js";import"./input-BK5Sp8hZ.js";import"./popover-GUR8piky.js";import"./location-oTTXFrSF.js";import"./scroll-area-Cve7MqyA.js";import"./select-oEHCSTZi.js";import"./breadcrumb-SXbKtw7u.js";import"./extract-connection-data-BIqslos8.js";import"./metadata-D72DunRR.js";import"./connection-DzM2SOZ6.js";import"./chat-context-D1GbDSrr.js";import"./thread-intent-DuCE7MYG.js";import"./slugify-CEUa2lfQ.js";import"./use-entitlements-pN-YIa6T.js";import"./use-ai-providers-CJ2ga4nx.js";import"./use-decopilot-events-x0K7Zb7m.js";import"./use-organization-settings-Wh36EN0I.js";import"./build-improve-prompt-doc-DKo7W0US.js";import"./empty-state-ClBiZqLf.js";import"./use-date-fns-locale-VjB0j61V.js";import"./differenceInSeconds-C3x8sHUj.js";import"./use-connection-PgTQPnAp.js";import"./mcp-oauth-61IHYJoj.js";import"./alert-dialog-Dg6YJ6PP.js";import"./textarea-B9cyNs7j.js";import"./use-debounced-autosave-Du2G3qf3.js";import"./add-connection-dialog-DzNaYAxM.js";import"./collection-search-BQXOJg8a.js";import"./connection-card-DF11WhqU.js";import"./useInfiniteQuery-DCZL7BN4.js";import"./infiniteQueryObserver-CxJm0T6_.js";import"./connection-slug-CITJ0kGN.js";import"./drawer-CsJzOKcM.js";import"./form-CXSt7_li.js";import"./label-tAsQMZ2G.js";import"./connection-form-helpers-CyBATU5Y.js";import"./authenticate-and-persist-oauth-DG9xWGRs.js";import"./collection-tabs-BWQrYrdS.js";import"./badge-DuB4cqrw.js";import"./use-infinite-scroll-Bm905rys.js";import"./useSuspenseInfiniteQuery-C0KSbZH8.js";import"./checkbox-BKGUJJNh.js";import"./search-input-CCUlZDzf.js";import"./use-mcp-auth-status-BnAPI8Zf.js";import"./types-BCbJ4Eml.js";import"./use-mcp-tools-CtMvHJK9.js";import"./use-mcp-prompts-UNzUvECH.js";import"./utils-CVEq3hMx.js";import"./switch-BNLiV_oA.js";import"./use-project-native-view-presence-U59DT0hQ.js";import"./match-site-slug-config-D3fUJ6vX.js";import"./use-file-configs-CzJCjBKX.js";import"./site-slug-uya6Wp4-.js";import"./optimistic-project-sidebar-views-BQt56FI4.js";import"./virtual-mcp-Bj7Y16hO.js";import"./repository-import-picker-B6ijLkOL.js";import"./use-navigate-to-agent-TwlhlbmB.js";import"./repository-picker-Ca5oB9j5.js";import"./github-icon-CIx0jkrL.js";import"./use-debounced-value-CG2jgHBI.js";import"./sandbox-url-D3mC8qhT.js";import"./secret-picker-DVWtSCXk.js";import"./use-secrets-44zj-3N9.js";import"./omit-sandbox-map-jj4lCB2U.js";import"./serial-task-queue-CGOeQgpr.js";function b(r){const t=a.c(4),{previewPath:m,onClose:p,showSeeInLibrary:o}=r,i=o===void 0?!1:o;let e;return t[0]!==p||t[1]!==m||t[2]!==i?(e=s.jsx("div",{className:"flex h-full w-full flex-col bg-background",children:s.jsx(c,{previewPath:m,onClose:p,showSeeInLibrary:i,variant:"panel"})}),t[0]=p,t[1]=m,t[2]=i,t[3]=e):e=t[3],e}function x(r){const t=a.c(5),{path:m}=r,{closePanel:p}=f();let o;t[0]!==p?(o=()=>p(),t[0]=p,t[1]=o):o=t[1];const i=o;let e;return t[2]!==i||t[3]!==m?(e=s.jsx(b,{previewPath:m,onClose:i,showSeeInLibrary:!0}),t[2]=i,t[3]=m,t[4]=e):e=t[4],e}function y(){const r=a.c(4);let t;r[0]===Symbol.for("react.memo_cache_sentinel")?(t={strict:!1},r[0]=t):t=r[0];const m=n(t),p=h(),o="path"in m&&typeof m.path=="string"?m.path:void 0;let i;return r[1]!==o||r[2]!==p?(i=o?s.jsx(x,{path:o},o):s.jsx(u,{virtualMcpId:p}),r[1]=o,r[2]=p,r[3]=i):i=r[3],i}function po(){const r=a.c(1);let t;return r[0]===Symbol.for("react.memo_cache_sentinel")?(t=s.jsx(l.Content,{children:s.jsx(y,{})}),r[0]=t):t=r[0],t}export{po as default};